@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/launch/routes.js

@@ -0,0 +1,198 @@
+/*
+ * external/launch/routes.ts — POST /api/external/tasks/:id/launch.
+ *
+ * The launch handler dispatches across branches in precedence order.
+ * Each branch lives in its own file to keep this shell ≤ 300 LOC:
+ *
+ *   1. ./phase-task-branch.ts        — body.phaseTaskRef present
+ *   2. ./campaign-branch.ts          — body.campaignSlug + fresh-start (FR-01.34)
+ *   2.5 ./campaign-step-branch.ts    — body.campaignStep + fresh-start (FR-01.36)
+ *   2.6 ./master-run-branch.ts       — body.masterRun + fresh-start + single_session
+ *                                      run_config (campaign webui-pipeline-convergence W2)
+ *   3. ./action-substitution-branch.ts — actionId + fresh-start + project
+ *   4. ./legacy-fallback-branch.ts    — terminal default
+ *
+ * CLAUDE.md rule 13 — `phaseTaskRef` flows through server-side
+ * verification (session uuid pre-bound at create-time + run-config
+ * cross-check). Mismatched uuids → 409 `phase_task_session_uuid_mismatch`.
+ * `phaseTaskRef + actionId` → 400 `mixed_launch_intents`.
+ */
+import { Hono } from "hono";
+import { withLiveSession } from "../_shared/helpers.js";
+import { parseLaunchBody, applyPhaseTaskBranch, applyCampaignBranch, applyCampaignStepBranch, applyMasterRunBranch, applyActionSubstitutionBranch, applyLegacyFallbackBranch, } from "./_helpers.js";
+export function createLaunchRouter(deps) {
+    const app = new Hono();
+    const { store, ptyManager, getProjectById, runConfigReader, jsonlExistsOnDisk } = deps;
+    app.post("/api/external/tasks/:id/launch", async (c) => {
+        const rawBody = await c.req.json().catch(() => ({}));
+        const body = rawBody && typeof rawBody === "object" && !Array.isArray(rawBody)
+            ? rawBody
+            : {};
+        const task = store.get(c.req.param("id"));
+        if (!task)
+            return c.json({ error: "Task not found" }, 404);
+        // Section 03 (iterate 3) — O20 idempotency guard. Reject re-launch on
+        // a terminal `done` task (resume after close is almost always
+        // unintended). `launch_failed` is accepted (user retrying clipboard).
+        const dryRunPeek = Boolean(body.dryRun);
+        if (task.state === "done" && !dryRunPeek) {
+            return c.json({ error: "launch_invalid_state", state: task.state }, 409);
+        }
+        // iterate-2026-05-14 lead-foundation-task-schema (leadwright Phase 1).
+        // While a task is claimed the user-level launch route MUST step aside
+        // so user + daemon don't fight over the same session (stale SQLite
+        // lock, interleaved JSONL, double-running shells). External review
+        // HIGH-2: only `claimToken` triggers the 409.
+        if (typeof task.claimToken === "string" && task.claimToken.length > 0) {
+            console.warn(JSON.stringify({
+                level: "warn",
+                message: "task_claimed: launch refused while claimToken is set",
+                taskId: task.taskId,
+                claimedBy: task.claimedBy,
+                claimedAt: task.claimedAt,
+                claimPid: task.claimPid,
+            }));
+            return c.json({
+                error: "task_claimed",
+                claimedBy: task.claimedBy,
+                claimedAt: task.claimedAt,
+            }, 409);
+        }
+        // Parse + apply once-set-always-used (v0.4.1 fallback contract).
+        const parseResult = parseLaunchBody(body, task);
+        if ("error" in parseResult) {
+            return c.json(parseResult.error, parseResult.status);
+        }
+        const parsed = parseResult;
+        // FR-01.34 — campaign autonomous launch is its own intent. Reject an
+        // EXPLICIT-body mix with actionId / phaseTaskRef (mirrors the existing
+        // phaseTaskRef+actionId rule). Checked on the raw body so a task's
+        // once-set-always-used persisted actionId never spuriously trips it.
+        if (typeof body.campaignSlug === "string" &&
+            body.campaignSlug.trim().length > 0 &&
+            (body.actionId !== undefined || body.phaseTaskRef !== undefined)) {
+            return c.json({
+                error: "mixed_launch_intents",
+                detail: "campaignSlug is mutually exclusive with actionId / phaseTaskRef",
+            }, 400);
+        }
+        // FR-01.36 — a single-sub-iterate launch is its own intent too. Reject a
+        // mix with actionId / phaseTaskRef / campaignSlug. Presence is the parsed
+        // (well-formed) campaignStep so a malformed body never trips it.
+        if (parsed.campaignStep &&
+            (body.actionId !== undefined ||
+                body.phaseTaskRef !== undefined ||
+                (typeof body.campaignSlug === "string" && body.campaignSlug.trim().length > 0))) {
+            return c.json({
+                error: "mixed_launch_intents",
+                detail: "campaignStep is mutually exclusive with actionId / phaseTaskRef / campaignSlug",
+            }, 400);
+        }
+        // Campaign webui-pipeline-convergence W2 — a single-session master launch is
+        // its own intent. Reject a mix with any other explicit intent. Checked on
+        // the raw body (`parsed.masterRun` is derived from `body.masterRun`, which is
+        // never persisted) so a once-set-always-used field can't spuriously trip it.
+        if (Boolean(body.masterRun) &&
+            (body.actionId !== undefined ||
+                body.phaseTaskRef !== undefined ||
+                (typeof body.campaignSlug === "string" && body.campaignSlug.trim().length > 0) ||
+                body.campaignStep !== undefined)) {
+            return c.json({
+                error: "mixed_launch_intents",
+                detail: "masterRun is mutually exclusive with actionId / phaseTaskRef / campaignSlug / campaignStep",
+            }, 400);
+        }
+        // iterate-2026-05-18-fix-resume-description — a Resume click on a
+        // task whose Claude conversation was never established (no
+        // <uuid>.jsonl ever observed on disk → there is nothing to resume)
+        // is semantically a FRESH start. Route it through the substitution
+        // branch so the brief + slash command are injected exactly like a
+        // direct Launch. A genuine resume (JSONL on disk) stays on the
+        // description-free `--resume` shape.
+        const jsonlObserved = Boolean(task.firstJsonlObservedAt);
+        const effectivelyFreshStart = !parsed.resume || (!jsonlObserved && !parsed.dryRun);
+        // Branch 1 — phaseTaskRef (load-bearing security path).
+        const phaseResult = await applyPhaseTaskBranch({
+            task,
+            parsed,
+            getProjectById,
+            runConfigReader,
+            jsonlExistsOnDisk,
+        });
+        let branchResult = phaseResult;
+        // Branch 2 — campaign autonomous launch (FR-01.34). Command built
+        // server-side from a validated slug; null when no campaignSlug / a resume.
+        if (!branchResult) {
+            branchResult = applyCampaignBranch({
+                task,
+                parsed,
+                effectivelyFreshStart,
+                getProjectById,
+            });
+        }
+        // Branch 2.5 — single-sub-iterate launch (FR-01.36). Command built
+        // server-side from a validated { slug, stepId }; null when no campaignStep
+        // / a resume.
+        if (!branchResult) {
+            branchResult = applyCampaignStepBranch({
+                task,
+                parsed,
+                effectivelyFreshStart,
+                getProjectById,
+            });
+        }
+        // Branch 2.6 — single-session master launch (campaign
+        // webui-pipeline-convergence W2). Command built server-side (`/shipwright-run`)
+        // gated on a readable single_session run_config; null when no masterRun / a
+        // resume (→ legacy `--resume <masterUuid>`).
+        if (!branchResult) {
+            branchResult = await applyMasterRunBranch({
+                task,
+                parsed,
+                effectivelyFreshStart,
+                getProjectById,
+                runConfigReader,
+                listTasks: () => store.list(),
+                jsonlExistsOnDisk,
+            });
+        }
+        // Branch 3 — action substitution.
+        if (!branchResult) {
+            branchResult = applyActionSubstitutionBranch({
+                task,
+                parsed,
+                effectivelyFreshStart,
+                getProjectById,
+            });
+        }
+        // If a branch produced an error envelope, terminate.
+        if (branchResult && "error" in branchResult) {
+            return c.json(branchResult.error, branchResult.status);
+        }
+        // Branch 4 — legacy fallback. Always populates.
+        let commands;
+        let taskUpdate;
+        if (branchResult) {
+            ({ commands, taskUpdate } = branchResult);
+        }
+        else {
+            ({ commands, taskUpdate } = applyLegacyFallbackBranch({
+                task,
+                parsed,
+                jsonlObserved,
+            }));
+        }
+        if (parsed.dryRun) {
+            // Pure command-string build — no state mutation, no persist.
+            return c.json({ task: withLiveSession(task, ptyManager), commands });
+        }
+        const updated = store.patch(task.taskId, taskUpdate);
+        await store.persist();
+        return c.json({
+            task: withLiveSession(updated, ptyManager),
+            commands,
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/launch/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/launch/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AAkBvB,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAC7E,IAAI,CAAC;IAEP,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,GACR,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/D,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE3D,sEAAsE;QACtE,8DAA8D;QAC9D,sEAAsE;QACtE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACpD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,8CAA8C;QAC9C,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,sDAAsD;gBAC/D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CACH,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC;QAE3B,qEAAqE;QACrE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,EAChE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,sBAAsB;gBAC7B,MAAM,EAAE,iEAAiE;aAC1E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,0EAA0E;QAC1E,iEAAiE;QACjE,IACE,MAAM,CAAC,YAAY;YACnB,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC1B,IAAI,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EACjF,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,sBAAsB;gBAC7B,MAAM,EAAE,gFAAgF;aACzF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,IACE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YACvB,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAC1B,IAAI,CAAC,YAAY,KAAK,SAAS;gBAC/B,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC9E,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,EAClC,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,sBAAsB;gBAC7B,MAAM,EACJ,4FAA4F;aAC/F,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,2DAA2D;QAC3D,mEAAmE;QACnE,mEAAmE;QACnE,kEAAkE;QAClE,+DAA+D;QAC/D,qCAAqC;QACrC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,qBAAqB,GACzB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvD,wDAAwD;QACxD,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC;YAC7C,IAAI;YACJ,MAAM;YACN,cAAc;YACd,eAAe;YACf,iBAAiB;SAClB,CAAC,CAAC;QACH,IAAI,YAAY,GAA8B,WAAW,CAAC;QAE1D,kEAAkE;QAClE,2EAA2E;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,mBAAmB,CAAC;gBACjC,IAAI;gBACJ,MAAM;gBACN,qBAAqB;gBACrB,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAED,mEAAmE;QACnE,2EAA2E;QAC3E,cAAc;QACd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,uBAAuB,CAAC;gBACrC,IAAI;gBACJ,MAAM;gBACN,qBAAqB;gBACrB,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAED,sDAAsD;QACtD,gFAAgF;QAChF,4EAA4E;QAC5E,6CAA6C;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,MAAM,oBAAoB,CAAC;gBACxC,IAAI;gBACJ,MAAM;gBACN,qBAAqB;gBACrB,cAAc;gBACd,eAAe;gBACf,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC7B,iBAAiB;aAClB,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,6BAA6B,CAAC;gBAC3C,IAAI;gBACJ,MAAM;gBACN,qBAAqB;gBACrB,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAED,qDAAqD;QACrD,IAAI,YAAY,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,CAAC;QACb,IAAI,UAAiC,CAAC;QACtC,IAAI,YAAY,EAAE,CAAC;YACjB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,yBAAyB,CAAC;gBACpD,IAAI;gBACJ,MAAM;gBACN,aAAa;aACd,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,6DAA6D;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC;YAC1C,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/media/_helpers.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Explicit extension → Content-Type mapping for browser-playable video
+ * containers. Any extension NOT in this table is rejected with 415 by the
+ * media route — we never infer a media type from bytes.
+ *
+ * We serve the container as-is; whether the browser can decode the codec
+ * inside is the browser's call (an undecodable codec surfaces via the
+ * <video> element's own error → the client's fallback chip).
+ */
+export declare const VIDEO_MIME_BY_EXTENSION: Record<string, string>;
+export type ParsedRange = {
+    kind: "none";
+} | {
+    kind: "ok";
+    start: number;
+    end: number;
+} | {
+    kind: "unsatisfiable";
+};
+/**
+ * Parse a single-range `Range: bytes=start-end` header against a known
+ * file size. Multi-range (comma-separated) requests are intentionally NOT
+ * honoured — we treat them as "none" and serve the full body, which is a
+ * spec-legal response (a server MAY ignore Range).
+ *
+ * Returns:
+ *   - `none`           — no header / malformed / empty-both / multi-range
+ *   - `ok{start,end}`  — inclusive byte bounds, end clamped to size-1
+ *   - `unsatisfiable`  — start beyond EOF, or start > end → caller emits 416
+ */
+export declare function parseRangeHeader(header: string | undefined | null, size: number): ParsedRange;
+//# sourceMappingURL=_helpers.d.ts.map

package/server/dist/external/media/_helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../../src/external/media/_helpers.ts"],"names":[],"mappings":"AAUA;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAOzD,CAAC;AAEH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EACjC,IAAI,EAAE,MAAM,GACX,WAAW,CAiCb"}

package/server/dist/external/media/_helpers.js

@@ -0,0 +1,77 @@
+/*
+ * external/media/_helpers.ts — video MIME allowlist + HTTP Range parser
+ * for the streaming media route (iterate-2026-06-03-smartviewer-video-view).
+ *
+ * Kept separate from file/_helpers.ts so the deliberately-atomic /file
+ * route (5 MB cap, readFileSync, documented race-avoidance) stays
+ * untouched. The /media route streams via createReadStream + Range, which
+ * is a different invariant set.
+ */
+/**
+ * Explicit extension → Content-Type mapping for browser-playable video
+ * containers. Any extension NOT in this table is rejected with 415 by the
+ * media route — we never infer a media type from bytes.
+ *
+ * We serve the container as-is; whether the browser can decode the codec
+ * inside is the browser's call (an undecodable codec surfaces via the
+ * <video> element's own error → the client's fallback chip).
+ */
+export const VIDEO_MIME_BY_EXTENSION = Object.freeze({
+    mp4: "video/mp4",
+    m4v: "video/x-m4v",
+    webm: "video/webm",
+    ogv: "video/ogg",
+    ogg: "video/ogg",
+    mov: "video/quicktime",
+});
+/**
+ * Parse a single-range `Range: bytes=start-end` header against a known
+ * file size. Multi-range (comma-separated) requests are intentionally NOT
+ * honoured — we treat them as "none" and serve the full body, which is a
+ * spec-legal response (a server MAY ignore Range).
+ *
+ * Returns:
+ *   - `none`           — no header / malformed / empty-both / multi-range
+ *   - `ok{start,end}`  — inclusive byte bounds, end clamped to size-1
+ *   - `unsatisfiable`  — start beyond EOF, or start > end → caller emits 416
+ */
+export function parseRangeHeader(header, size) {
+    if (!header)
+        return { kind: "none" };
+    // The `\d*` capture groups accept digits only — a sign character ('-' in a
+    // negative number) is never captured, so `Number(startStr)`/`Number(endStr)`
+    // can never be negative. A leading-minus payload like `bytes=-1-5` fails to
+    // match the whole-string anchor → treated as malformed (`none`) → full body.
+    const m = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+    if (!m)
+        return { kind: "none" };
+    const startStr = m[1];
+    const endStr = m[2];
+    if (startStr === "" && endStr === "")
+        return { kind: "none" };
+    let start;
+    let end;
+    if (startStr === "") {
+        // Suffix range: last N bytes.
+        const suffix = Number(endStr);
+        if (!Number.isFinite(suffix) || suffix <= 0)
+            return { kind: "unsatisfiable" };
+        if (size === 0)
+            return { kind: "unsatisfiable" };
+        start = suffix >= size ? 0 : size - suffix;
+        end = size - 1;
+        return { kind: "ok", start, end };
+    }
+    start = Number(startStr);
+    end = endStr === "" ? size - 1 : Number(endStr);
+    if (!Number.isFinite(start) || !Number.isFinite(end))
+        return { kind: "none" };
+    if (start > end)
+        return { kind: "unsatisfiable" };
+    if (start >= size)
+        return { kind: "unsatisfiable" };
+    if (end >= size)
+        end = size - 1;
+    return { kind: "ok", start, end };
+}
+//# sourceMappingURL=_helpers.js.map

package/server/dist/external/media/_helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/external/media/_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA2B,MAAM,CAAC,MAAM,CAAC;IAC3E,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,iBAAiB;CACvB,CAAC,CAAC;AAOH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiC,EACjC,IAAY;IAEZ,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrC,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,QAAQ,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE9D,IAAI,KAAa,CAAC;IAClB,IAAI,GAAW,CAAC;IAEhB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,8BAA8B;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QAC9E,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACjD,KAAK,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;QAC3C,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9E,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACpD,IAAI,GAAG,IAAI,IAAI;QAAE,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/server/dist/external/media/routes.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from "hono";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface MediaRouterDeps {
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+}
+export declare function createMediaRouter(deps: MediaRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/media/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/media/routes.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAItE,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;CACvE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAyF7D"}

package/server/dist/external/media/routes.js

@@ -0,0 +1,120 @@
+/*
+ * external/media/routes.ts — GET /api/external/projects/:projectId/media.
+ *
+ * Range-capable streaming route for video (the SmartViewer <video> pane).
+ * Distinct from /file because video breaks /file's two invariants:
+ *   1. /file caps at 5 MB; real videos exceed that.
+ *   2. <video> issues HTTP Range requests — Safari refuses to play without
+ *      206 Partial Content, and loading a large file into RAM per request
+ *      (as /file's readFileSync does) is untenable.
+ *
+ * So this route streams via fs.createReadStream with byte bounds and never
+ * buffers the whole file. The /file route is left untouched (Chesterton's
+ * Fence: its atomic-read design has a documented race-avoidance rationale).
+ *
+ * Security: shares core/path-guard.ts with /file — pathGuard (string) +
+ * realPathGuard (symlink/realpath escape), null-byte hard-rejected. The
+ * path is confined to the project root; read-only; no shell, no spawn.
+ * CLAUDE.md rule 10 (realpath, not startsWith).
+ */
+import { Hono } from "hono";
+import { createReadStream } from "node:fs";
+import { stat } from "node:fs/promises";
+import { extname, basename } from "node:path";
+import { Readable } from "node:stream";
+import { pathGuard, realPathGuard } from "../../core/path-guard.js";
+import { sanitizeContentDispositionFilename } from "../file/_helpers.js";
+import { VIDEO_MIME_BY_EXTENSION, parseRangeHeader } from "./_helpers.js";
+export function createMediaRouter(deps) {
+    const app = new Hono();
+    const { getProjectById } = deps;
+    app.get("/api/external/projects/:projectId/media", async (c) => {
+        const projectId = c.req.param("projectId");
+        const project = getProjectById?.(projectId);
+        if (!project) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        if (!project.path) {
+            return c.json({ error: "project_path_unavailable", projectId }, 400);
+        }
+        const relpath = c.req.query("path");
+        if (!relpath || relpath.length === 0) {
+            return c.json({ error: "path_required" }, 400);
+        }
+        const guard = pathGuard(project.path, relpath);
+        if (!guard.ok) {
+            const err = guard.reason === "traversal" ? "path_traversal" : guard.reason;
+            return c.json({ error: err, detail: guard.reason }, 400);
+        }
+        let st;
+        try {
+            st = await stat(guard.absolute);
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                return c.json({ error: "not_found", path: relpath }, 404);
+            }
+            return c.json({ error: "file_stat_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        if (!st.isFile()) {
+            return c.json({ error: "not_a_file", path: relpath }, 400);
+        }
+        // Symlink-escape defense (mirrors /file): the file exists, so realpath
+        // resolves — verify it is still under the project root.
+        const realGuard = realPathGuard(project.path, guard.absolute);
+        if (!realGuard.ok) {
+            return c.json({ error: "path_traversal", detail: realGuard.reason }, 400);
+        }
+        const rawExt = extname(guard.absolute).toLowerCase().slice(1);
+        const mime = VIDEO_MIME_BY_EXTENSION[rawExt];
+        if (!mime) {
+            return c.json({ error: "unsupported_media_type", extension: rawExt || null }, 415);
+        }
+        const size = st.size;
+        const filename = sanitizeContentDispositionFilename(basename(guard.absolute));
+        const range = parseRangeHeader(c.req.header("range"), size);
+        if (range.kind === "unsatisfiable") {
+            c.header("Content-Range", `bytes */${size}`);
+            c.header("Accept-Ranges", "bytes");
+            return c.json({ error: "range_not_satisfiable" }, 416);
+        }
+        // Headers common to 200 and 206.
+        c.header("Content-Type", mime);
+        c.header("X-Content-Type-Options", "nosniff");
+        c.header("Accept-Ranges", "bytes");
+        c.header("Content-Disposition", `inline; filename="${filename}"`);
+        c.header("Cache-Control", "private, max-age=0, must-revalidate");
+        if (range.kind === "ok") {
+            const { start, end } = range;
+            const chunkSize = end - start + 1;
+            c.header("Content-Range", `bytes ${start}-${end}/${size}`);
+            c.header("Content-Length", String(chunkSize));
+            c.status(206);
+            return c.body(streamFile(guard.absolute, start, end));
+        }
+        c.header("Content-Length", String(size));
+        return c.body(streamFile(guard.absolute));
+    });
+    return app;
+}
+/**
+ * Open a read stream and hand it to the web-stream adapter. The explicit
+ * `error` listener is the safety net for a torn read — if the file is deleted
+ * or becomes unreadable in the window AFTER `stat` succeeded (TOCTOU), the
+ * Node stream emits `error`; without a listener Node would throw it as an
+ * uncaught exception. We swallow it here (the body simply ends short — the
+ * client/<video> retries the Range), keeping the route from crashing the
+ * process on a race. Headers are already committed, so no status change is
+ * possible at this point.
+ */
+function streamFile(absolute, start, end) {
+    const node = start !== undefined && end !== undefined
+        ? createReadStream(absolute, { start, end })
+        : createReadStream(absolute);
+    node.on("error", () => {
+        /* torn read after stat — swallow so it can't become an uncaught error */
+    });
+    return Readable.toWeb(node);
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/media/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/media/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAM1E,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAChE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,IAAI,IAAI,EAAE,EAC9D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;QACrB,MAAM,QAAQ,GAAG,kCAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,iCAAiC;QACjC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,QAAQ,GAAG,CAAC,CAAC;QAClE,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QAEjE,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAc,EAAE,GAAY;IAChE,MAAM,IAAI,GACR,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QACtC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC5C,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACpB,yEAAyE;IAC3E,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAC;AAC3D,CAAC"}

package/server/dist/external/mission-context/facts-slice3.d.ts

@@ -0,0 +1,22 @@
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { CampaignFact } from "../../core/mission-context/campaign-artifacts.js";
+import type { PipelineFact } from "../../core/mission-context/pipeline-artifacts.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+/**
+ * Resolve a phase task by EXACT id (CONTRACT §10 Slice 3, "without conflating
+ * phase tasks"). A run holds many tasks and, once splits exist, many for the
+ * same phase — so the id is the only safe key.
+ */
+export declare function buildPipelineFact(runConfig: RunConfigReadResult, phaseTaskId: string | null, taskRunId?: string | null): PipelineFact;
+/**
+ * Read the campaign record for `slug`, enriched with the per-unit test counts
+ * that `campaign-store` does not surface.
+ *
+ * Two reads of one tiny file rather than widening `CampaignStep`, which the
+ * campaigns board also consumes and which sits at its size ceiling. `status.json`
+ * is the campaign's OWN authoritative per-unit record — it carries commit,
+ * branch and test counts — so no cross-directory search for a `runs/<loop_id>/`
+ * result file is needed or wanted (see the ADR).
+ */
+export declare function getCampaignFact(project: ExternalRouteProjectView, slug: string | null): CampaignFact;
+//# sourceMappingURL=facts-slice3.d.ts.map

package/server/dist/external/mission-context/facts-slice3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-slice3.d.ts","sourceRoot":"","sources":["../../../src/external/mission-context/facts-slice3.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kDAAkD,CAAC;AACrF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAWtE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,mBAAmB,EAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,YAAY,CA2Cd;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,MAAM,GAAG,IAAI,GAClB,YAAY,CA4Dd"}

package/server/dist/external/mission-context/facts-slice3.js

@@ -0,0 +1,143 @@
+/*
+ * external/mission-context/facts-slice3.ts — the pipeline + campaign scenario
+ * inputs, gathered SERVER-side from authoritative sources only (S3).
+ *
+ * Same trust rule as `facts.ts`: nothing here comes from the request. The client
+ * sends a task id; the run-config, the phase-task table and the campaign records
+ * are all read by the server from its own project view.
+ *
+ * The one rule these two functions exist to enforce: an I/O or parse failure
+ * MUST surface as `unavailable`, never as an empty result. "We could not read
+ * the run-config" and "this run has no phases" are different facts, and the
+ * whole 5-state artifact model is downstream of keeping them apart.
+ */
+import { readCampaigns } from "../../core/campaign-store.js";
+import { readStatusJson } from "../../core/campaign-status-json.js";
+import { resolveCampaignsDir } from "../../core/campaign-paths.js";
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : null;
+}
+/** Non-negative integer or null. A count we cannot read NEVER becomes zero. */
+function count(v) {
+    return typeof v === "number" && Number.isFinite(v) && v >= 0 ? Math.trunc(v) : null;
+}
+/**
+ * Resolve a phase task by EXACT id (CONTRACT §10 Slice 3, "without conflating
+ * phase tasks"). A run holds many tasks and, once splits exist, many for the
+ * same phase — so the id is the only safe key.
+ */
+export function buildPipelineFact(runConfig, phaseTaskId, taskRunId) {
+    if (!phaseTaskId)
+        return { status: "unavailable" };
+    // `missing` / `v1_legacy` / `invalid` all mean the same thing HERE: this task
+    // claims a pipeline linkage and we cannot verify it. None of them is evidence
+    // that the phase does not exist.
+    if (runConfig.status !== "ok")
+        return { status: "unavailable" };
+    const runId = runConfig.config.runId;
+    // The config on disk is whatever run the project is on NOW, which need not be
+    // the run this TASK belongs to. Without this check a phaseTaskId that happens
+    // to exist in the newer run resolves and renders under the WRONG runId, and
+    // one that does not reports "its run no longer lists this step" when the truth
+    // is "we compared against a different run" (internal code review). We hold
+    // `taskRunId` already, so the comparison is free.
+    if (taskRunId && taskRunId !== runId)
+        return { status: "unavailable" };
+    const task = runConfig.config.phase_tasks.find((t) => t.phaseTaskId === phaseTaskId);
+    if (!task)
+        return { status: "task_not_found", runId };
+    return {
+        status: "ok",
+        runId,
+        task: {
+            phaseTaskId: task.phaseTaskId,
+            phase: task.phase,
+            splitId: str(task.splitId),
+            status: task.status,
+            slashCommand: str(task.slashCommand),
+            title: str(task.title),
+            description: str(task.description),
+            startedAt: str(task.startedAt),
+            completedAt: str(task.completedAt),
+            executionCount: count(task.executionCount),
+            errors: Array.isArray(task.errors) ? task.errors.filter((e) => typeof e === "string") : [],
+            // Display-only strings. The producer records these with no documented
+            // root, so they are never turned into links (see pipeline-artifacts.ts).
+            outputs: Array.isArray(task.result?.artifacts)
+                ? task.result.artifacts.filter((a) => typeof a === "string")
+                : [],
+        },
+    };
+}
+/**
+ * Read the campaign record for `slug`, enriched with the per-unit test counts
+ * that `campaign-store` does not surface.
+ *
+ * Two reads of one tiny file rather than widening `CampaignStep`, which the
+ * campaigns board also consumes and which sits at its size ceiling. `status.json`
+ * is the campaign's OWN authoritative per-unit record — it carries commit,
+ * branch and test counts — so no cross-directory search for a `runs/<loop_id>/`
+ * result file is needed or wanted (see the ADR).
+ */
+export function getCampaignFact(project, slug) {
+    if (!slug)
+        return { status: "unavailable" };
+    try {
+        const dir = resolveCampaignsDir({ path: project.path, synthesized: project.synthesized });
+        if (!dir.ok)
+            return { status: "unavailable" };
+        const record = readCampaigns(dir.absolute, dir.projectRoot).find((c) => c.slug === slug);
+        if (!record)
+            return { status: "unavailable" };
+        // Per-unit extras straight from status.json, keyed by id.
+        const raw = readStatusJson(`${dir.absolute}/${record.slug}`);
+        const extras = new Map();
+        if (Array.isArray(raw?.sub_iterates)) {
+            for (const si of raw.sub_iterates) {
+                if (si && typeof si === "object" && !Array.isArray(si)) {
+                    const o = si;
+                    const id = str(o.id);
+                    if (id)
+                        extras.set(id, o);
+                }
+            }
+        }
+        const steps = record.steps.map((s) => {
+            const e = extras.get(s.id);
+            return {
+                id: s.id,
+                title: s.title,
+                status: s.status,
+                // Per-unit basis, carried through so the artifact can qualify the
+                // claim it makes about THIS unit rather than the campaign as a whole.
+                statusSource: s.statusSource,
+                specPath: s.specPath,
+                commit: s.commit,
+                branch: s.branch,
+                testsPassed: count(e?.tests_passed),
+                testsTotal: count(e?.tests_total),
+            };
+        });
+        return {
+            status: "ok",
+            campaign: {
+                slug: record.slug,
+                intent: str(record.intent),
+                lifecycle: record.status,
+                branchStrategy: record.branchStrategy,
+                done: record.done,
+                total: record.total,
+                steps,
+                // Carried, not dropped: `status: "ok"` says the STORE answered, not that
+                // it answered from the live status file. The artifacts need the second
+                // fact to avoid presenting a plan-document row as current.
+                provenance: record.provenance,
+            },
+        };
+    }
+    catch {
+        // An unreadable store is NOT an empty campaign.
+        return { status: "unavailable" };
+    }
+}
+//# sourceMappingURL=facts-slice3.js.map