@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/mission-context/facts-slice3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-slice3.js","sourceRoot":"","sources":["../../../src/external/mission-context/facts-slice3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AASnE,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAA8B,EAC9B,WAA0B,EAC1B,SAAyB;IAEzB,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEnD,8EAA8E;IAC9E,8EAA8E;IAC9E,iCAAiC;IACjC,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEhE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;IAErC,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,kDAAkD;IAClD,IAAI,SAAS,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAEvE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACrF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAEtD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK;QACL,IAAI,EAAE;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;YACpC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YAC1C,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACvG,sEAAsE;YACtE,yEAAyE;YACzE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC5C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACzE,CAAC,CAAC,EAAE;SACP;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAiC,EACjC,IAAmB;IAEnB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAE9C,0DAA0D;QAC1D,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAyB,EAAE,CAAC;gBAC/C,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,GAAG,EAA6B,CAAC;oBACxC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrB,IAAI,EAAE;wBAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAwB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACxD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,kEAAkE;gBAClE,sEAAsE;gBACtE,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;gBACnC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;aAClC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC1B,SAAS,EAAE,MAAM,CAAC,MAAM;gBACxB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK;gBACL,yEAAyE;gBACzE,uEAAuE;gBACvE,2DAA2D;gBAC3D,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;QAChD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;AACH,CAAC"}

package/server/dist/external/mission-context/facts.d.ts

@@ -0,0 +1,44 @@
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { RunConfigPresence } from "../../core/mission-context/scenario.js";
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ResolveRequest } from "../../core/mission-context/resolver.js";
+/**
+ * Parse `campaign: <slug>` from an orchestrator task title.
+ *
+ * Verbatim mirror of `client/src/lib/campaignSlug.ts` (DO-NOT #7 — the two
+ * workspaces never import each other). Prefix-anchored and case-sensitive on
+ * the exact producer breadcrumb, so a human-typed "Campaign: Q3" never parses.
+ */
+export declare function parseCampaignSlug(title: string | null | undefined): string | null;
+/**
+ * `RunConfigReadResult` (4 states) → the 3 states the scenario gate needs.
+ *
+ * The mapping is the whole point: `missing` is the ONLY state that is evidence
+ * the project has no SDLC pipeline. `v1_legacy` and `invalid` both mean a config
+ * IS there and we could not read it as v2 — which is not the same claim at all.
+ * Sibling `facts-slice3.buildPipelineFact` already reasons this way for the
+ * pipeline fact; this is the same rule on the path where getting it wrong makes
+ * a whole tab disappear.
+ */
+export declare function runConfigPresence(result: RunConfigReadResult): RunConfigPresence;
+export interface ScenarioFacts {
+    actions: ResolveRequest["actions"];
+    runConfigStatus: RunConfigPresence;
+    campaignSlug: string | null;
+    hasCampaignRecord: boolean;
+    /** S3 — the native pipeline fact (scenario 3). */
+    pipeline: ResolveRequest["pipeline"];
+    /** S3 — the native campaign fact (scenario 5). */
+    campaign: ResolveRequest["campaign"];
+}
+export interface FactsDeps {
+    readRunConfig: (projectPath: string) => Promise<RunConfigReadResult>;
+}
+/**
+ * Gather the facts for one resolve. Every branch degrades to the SAFE default
+ * (`actions: null` → not custom-actions → Mission stays visible), because the
+ * failure mode of guessing wrong here is hiding a useful tab (Review-2 GPT #12).
+ */
+export declare function getScenarioFacts(project: ExternalRouteProjectView, task: ExternalTask, deps: FactsDeps): Promise<ScenarioFacts>;
+//# sourceMappingURL=facts.d.ts.map

package/server/dist/external/mission-context/facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts.d.ts","sourceRoot":"","sources":["../../../src/external/mission-context/facts.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAIhF;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,eAAe,EAAE,iBAAiB,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACrC,kDAAkD;IAClD,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACtE;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,aAAa,CAAC,CAyDxB"}

package/server/dist/external/mission-context/facts.js

@@ -0,0 +1,109 @@
+/*
+ * external/mission-context/facts.ts — the scenario inputs the resolver cannot
+ * derive on its own, gathered SERVER-side from authoritative sources only.
+ *
+ * Every value here comes from the server's own reads (the project's actions
+ * catalog, its run-config, its campaign records). None of it is taken from the
+ * request — that is the whole point of the §5.1 input trust boundary: a client
+ * cannot claim "this is a custom-actions project" or "this title is a campaign"
+ * and have the resolver believe it.
+ */
+import { loadActionsForProject } from "../../core/project-actions-loader.js";
+import { readCampaigns } from "../../core/campaign-store.js";
+import { resolveCampaignsDir } from "../../core/campaign-paths.js";
+import { buildPipelineFact, getCampaignFact } from "./facts-slice3.js";
+/**
+ * Parse `campaign: <slug>` from an orchestrator task title.
+ *
+ * Verbatim mirror of `client/src/lib/campaignSlug.ts` (DO-NOT #7 — the two
+ * workspaces never import each other). Prefix-anchored and case-sensitive on
+ * the exact producer breadcrumb, so a human-typed "Campaign: Q3" never parses.
+ */
+export function parseCampaignSlug(title) {
+    if (typeof title !== "string")
+        return null;
+    const match = /^campaign:\s*(\S.*)$/.exec(title.trim());
+    if (!match)
+        return null;
+    const slug = match[1].trim();
+    return slug.length > 0 ? slug : null;
+}
+/**
+ * `RunConfigReadResult` (4 states) → the 3 states the scenario gate needs.
+ *
+ * The mapping is the whole point: `missing` is the ONLY state that is evidence
+ * the project has no SDLC pipeline. `v1_legacy` and `invalid` both mean a config
+ * IS there and we could not read it as v2 — which is not the same claim at all.
+ * Sibling `facts-slice3.buildPipelineFact` already reasons this way for the
+ * pipeline fact; this is the same rule on the path where getting it wrong makes
+ * a whole tab disappear.
+ */
+export function runConfigPresence(result) {
+    if (result.status === "ok")
+        return "ok";
+    if (result.status === "missing")
+        return "missing";
+    return "unreadable";
+}
+/**
+ * Gather the facts for one resolve. Every branch degrades to the SAFE default
+ * (`actions: null` → not custom-actions → Mission stays visible), because the
+ * failure mode of guessing wrong here is hiding a useful tab (Review-2 GPT #12).
+ */
+export async function getScenarioFacts(project, task, deps) {
+    let actions = null;
+    try {
+        const loaded = loadActionsForProject(project.path);
+        actions = {
+            fromUser: loaded.fromUser,
+            hasDiagnostics: loaded.diagnostics.length > 0,
+            actionIds: loaded.actions.actions.map((a) => a.id),
+        };
+    }
+    catch {
+        actions = null; // unreadable catalog → ambiguous → never hide the tab
+    }
+    // ONE run-config read serves both the custom-actions gate and the S3 pipeline
+    // fact — a second read could observe a different file mid-write and let the
+    // two disagree about the same run.
+    //
+    // A THROWN read (permissions, a locked file, a transient FS fault) degrades to
+    // `unreadable`, NEVER to `missing`. `missing` is the one state that permits
+    // hiding the Mission tab, so mapping an I/O failure onto it would let a
+    // transient fault delete a working surface — the same line the actions
+    // catalog above holds by degrading every failure to `actions = null`.
+    let runConfig;
+    try {
+        runConfig = await deps.readRunConfig(project.path);
+    }
+    catch {
+        runConfig = { status: "invalid", reason: "read_failed" };
+    }
+    const runConfigStatus = runConfigPresence(runConfig);
+    const campaignSlug = parseCampaignSlug(task.title);
+    let hasCampaignRecord = false;
+    if (campaignSlug) {
+        try {
+            // A TITLE is not evidence — a real record must back it (§4 precedence 4).
+            const dir = resolveCampaignsDir({ path: project.path, synthesized: project.synthesized });
+            if (dir.ok) {
+                hasCampaignRecord = readCampaigns(dir.absolute, dir.projectRoot).some((c) => c.slug === campaignSlug);
+            }
+        }
+        catch {
+            hasCampaignRecord = false;
+        }
+    }
+    return {
+        actions,
+        runConfigStatus,
+        campaignSlug,
+        hasCampaignRecord,
+        pipeline: buildPipelineFact(runConfig, task.phaseTaskId ?? null, task.runId ?? null),
+        // Resolved only for a scenario that will actually use it; a `campaign:`
+        // title with no record stays `hasCampaignRecord: false` and never becomes
+        // a campaign, so there is nothing to read.
+        campaign: hasCampaignRecord ? getCampaignFact(project, campaignSlug) : null,
+    };
+}
+//# sourceMappingURL=facts.js.map

package/server/dist/external/mission-context/facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts.js","sourceRoot":"","sources":["../../../src/external/mission-context/facts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAOvE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA2B;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,YAAY,CAAC;AACtB,CAAC;AAiBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAiC,EACjC,IAAkB,EAClB,IAAe;IAEf,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,GAAG;YACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAC7C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC,CAAC,sDAAsD;IACxE,CAAC;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,mCAAmC;IACnC,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,0EAA0E;YAC1E,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1F,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,iBAAiB,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CACnE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,eAAe;QACf,YAAY;QACZ,iBAAiB;QACjB,QAAQ,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QACpF,wEAAwE;QACxE,0EAA0E;QAC1E,2CAA2C;QAC3C,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;KAC5E,CAAC;AACJ,CAAC"}

package/server/dist/external/mission-context/routes.d.ts

@@ -0,0 +1,83 @@
+import { Hono } from "hono";
+import { type ResolveDeps, type ResolveRequest } from "../../core/mission-context/resolver.js";
+import { SdkSessionsStore, type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+/** Bounded tail of the transcript — enough for a `pr-link`, never the whole file. */
+export declare const TRANSCRIPT_TAIL_BYTES: number;
+/**
+ * The larger bounded tail used ONLY while a task is still unidentified, so the
+ * `Run-ID` footer recovery can reach it (run-id-recovery.ts).
+ *
+ * 1 MB is measured, not guessed: across this project's 65 real transcripts a
+ * 512 KB tail recovers 42 sessions and MISSES 4 whose pointer proves the run
+ * (the closest sits 526 KB from the end); 1 MB recovers 50 and misses none;
+ * 2, 4 and 8 MB add nothing at all.
+ *
+ * It is a REACH-BACK, not a standing subscription. The window exists to see
+ * history; anything written later is appended at the END, inside
+ * `TRANSCRIPT_TAIL_BYTES`. So it is requested once per task and then only when
+ * the transcript has actually changed — see `wideWindows`. The earlier
+ * "unidentified ⇒ always wide" rule was permanent for a genuinely plain session,
+ * and MEASURED on this machine that is the common case: 412 of 419 tasks, over
+ * transcripts of which 78 % exceed 1 MB (internal code review of PR #309, PERF).
+ *
+ * WHAT THIS SAVES: ~425 KB per poll of UTF-8 DECODE, string allocation and
+ * downstream scanning — and, since
+ * iterate-2026-07-21-transcript-positional-tail-read, of I/O as well. An earlier
+ * revision of this comment recorded the opposite ("the tail budget bounds the
+ * SLICE, not the read"), which was true then: `readChunk` loaded the whole file
+ * before slicing. It now issues a POSITIONAL read, so the budget bounds the read
+ * itself. Measured over this project's 203 real transcripts, a full sweep fell
+ * from 919 MB / 253 ms to 102 MB / 44 ms; one poll of the largest (137.9 MB)
+ * went from ~31 ms to 2.2 ms.
+ *
+ * The invariant is "a narrower window cannot lose a recovery", and it holds
+ * UNLESS the transcript outruns the ordinary tail within one poll interval:
+ * ~512 KB appended between two polls could carry a footer past the narrow window
+ * before the next reach-back is earned. Such a session is in flight and so
+ * pointer-identified in practice, which is why it never reaches this path — but
+ * the invariant is CONDITIONAL, and claiming otherwise would be the same kind of
+ * overstatement this run exists to correct.
+ */
+export declare const RECOVERY_TAIL_BYTES: number;
+export interface MissionContextRouterDeps {
+    store: SdkSessionsStore;
+    getProjectById: (id: string) => ExternalRouteProjectView | undefined;
+    /**
+     * Server-side transcript read of the LAST `maxBytes` bytes. Returns empty
+     * `text` when unavailable — never throws. `maxBytes` is omitted for the
+     * ordinary poll and widened only while the task is still unidentified.
+     *
+     * `revision` identifies the bytes this read came from — file identity, size
+     * and mtime, which `SessionWatcher.findByUuid` already yields on the very same
+     * call, so it costs nothing. It exists purely to schedule the wide reach-back
+     * (see `wideWindows`) and must be `""` whenever the read failed or the reader
+     * cannot supply one: an empty revision is never recorded, so a fault can never
+     * suppress a recovery. Deliberately metadata and not a content digest — the
+     * cache would otherwise retain transcript text well past the read.
+     */
+    readTranscriptTail: (sessionUuid: string, maxBytes?: number) => Promise<{
+        text: string;
+        revision: string;
+    }>;
+    /** Scenario inputs the resolver cannot derive itself. */
+    getScenarioFacts: (project: ExternalRouteProjectView, task: ExternalTask) => Promise<{
+        actions: ResolveRequest["actions"];
+        runConfigStatus: ResolveRequest["runConfigStatus"];
+        campaignSlug: string | null;
+        hasCampaignRecord: boolean;
+        /** S3 — optional so a pre-S3 test double still satisfies the contract. */
+        pipeline?: ResolveRequest["pipeline"];
+        campaign?: ResolveRequest["campaign"];
+    }>;
+    now?: () => Date;
+    /** Test seam for the reach-back cap. Production leaves it at the constant. */
+    wideWindowCap?: number;
+    /**
+     * Injected git / merge-check doubles. Production leaves this undefined (real
+     * git); tests use it to drive the merge state deterministically.
+     */
+    resolveDeps?: ResolveDeps;
+}
+export declare function createMissionContextRouter(deps: MissionContextRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/mission-context/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/mission-context/routes.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,wCAAwC,CAAC;AAIhD,OAAO,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAS/C,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,gBAAgB,CAAC;IACxB,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACrE;;;;;;;;;;;;OAYG;IACH,kBAAkB,EAAE,CAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,yDAAyD;IACzD,gBAAgB,EAAE,CAChB,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,YAAY,KACf,OAAO,CAAC;QACX,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QACnC,eAAe,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACnD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;KACvC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI,CA0K/E"}

package/server/dist/external/mission-context/routes.js

@@ -0,0 +1,226 @@
+/*
+ * external/mission-context/routes.ts — the Mission-context surface
+ * (campaign 2026-07-18-mission-artifacts, Slice 1).
+ *
+ *   GET /api/external/tasks/:taskId/mission-context
+ *   GET /api/external/tasks/:taskId/mission-context/documents/:documentId
+ *
+ * INPUT TRUST BOUNDARY (CONTRACT §5.1, Review-2 GPT #4/#5). The client sends a
+ * taskId and nothing else that matters. Everything the resolver acts on — the
+ * session uuid, the owning project, the project root, the transcript — is read
+ * from the server's OWN authoritative store. A caller therefore cannot pair
+ * project A with project B's session, nor feed a forged transcript to spoof a
+ * `pr-link` marker: mismatches return a generic 404, not a diagnostic.
+ *
+ * The detail endpoint takes an OPAQUE signed id — the client never builds a
+ * `/file?path=` for a Mission artifact (§5.2). Ownership is RE-verified at read
+ * time (not just at mint time) and the path is re-guarded, so a document that
+ * moved or vanished returns a typed `stale`/`unavailable` rather than some
+ * unrelated file.
+ */
+import { Hono } from "hono";
+import { parseDocId } from "../../core/mission-context/doc-ids.js";
+import { revertMissionContext, setMissionContextOnce, } from "../../core/mission-context/association.js";
+import { resolveMissionContext, readDocumentBody, } from "../../core/mission-context/resolver.js";
+import { readAllowedRoots } from "../../core/mission-context/worktree-roots.js";
+import { samePath } from "../../core/mission-context/pointer.js";
+/** Bounded tail of the transcript — enough for a `pr-link`, never the whole file. */
+export const TRANSCRIPT_TAIL_BYTES = 512 * 1024;
+/**
+ * The larger bounded tail used ONLY while a task is still unidentified, so the
+ * `Run-ID` footer recovery can reach it (run-id-recovery.ts).
+ *
+ * 1 MB is measured, not guessed: across this project's 65 real transcripts a
+ * 512 KB tail recovers 42 sessions and MISSES 4 whose pointer proves the run
+ * (the closest sits 526 KB from the end); 1 MB recovers 50 and misses none;
+ * 2, 4 and 8 MB add nothing at all.
+ *
+ * It is a REACH-BACK, not a standing subscription. The window exists to see
+ * history; anything written later is appended at the END, inside
+ * `TRANSCRIPT_TAIL_BYTES`. So it is requested once per task and then only when
+ * the transcript has actually changed — see `wideWindows`. The earlier
+ * "unidentified ⇒ always wide" rule was permanent for a genuinely plain session,
+ * and MEASURED on this machine that is the common case: 412 of 419 tasks, over
+ * transcripts of which 78 % exceed 1 MB (internal code review of PR #309, PERF).
+ *
+ * WHAT THIS SAVES: ~425 KB per poll of UTF-8 DECODE, string allocation and
+ * downstream scanning — and, since
+ * iterate-2026-07-21-transcript-positional-tail-read, of I/O as well. An earlier
+ * revision of this comment recorded the opposite ("the tail budget bounds the
+ * SLICE, not the read"), which was true then: `readChunk` loaded the whole file
+ * before slicing. It now issues a POSITIONAL read, so the budget bounds the read
+ * itself. Measured over this project's 203 real transcripts, a full sweep fell
+ * from 919 MB / 253 ms to 102 MB / 44 ms; one poll of the largest (137.9 MB)
+ * went from ~31 ms to 2.2 ms.
+ *
+ * The invariant is "a narrower window cannot lose a recovery", and it holds
+ * UNLESS the transcript outruns the ordinary tail within one poll interval:
+ * ~512 KB appended between two polls could carry a footer past the narrow window
+ * before the next reach-back is earned. Such a session is in flight and so
+ * pointer-identified in practice, which is why it never reaches this path — but
+ * the invariant is CONDITIONAL, and claiming otherwise would be the same kind of
+ * overstatement this run exists to correct.
+ */
+export const RECOVERY_TAIL_BYTES = 1024 * 1024;
+/**
+ * How many tasks' reach-back state is remembered. Cleared wholesale at the cap —
+ * the same bounded-Map discipline as the resolver cache and the recovery memo,
+ * and losing it costs one extra wide read per task, never a wrong answer.
+ */
+const WIDE_WINDOW_CAP = 512;
+export function createMissionContextRouter(deps) {
+    const app = new Hono();
+    const { store, getProjectById, readTranscriptTail, getScenarioFacts } = deps;
+    const now = deps.now ?? (() => new Date());
+    const wideWindowCap = deps.wideWindowCap ?? WIDE_WINDOW_CAP;
+    /**
+     * Per task: the transcript revision seen at the last read, and the one the
+     * last WIDE reach-back scanned. Wide is worth repeating exactly when they
+     * differ — i.e. the transcript moved since we last looked all the way back.
+     *
+     * The budget for poll n is therefore chosen from poll n-1's revision, which is
+     * what keeps this to ONE read per poll rather than a probe-then-read round
+     * trip; a footer that arrives is picked up one poll (10 s) later. Router-scoped
+     * so it dies with the process — a restart simply reaches back once more.
+     */
+    const wideWindows = new Map();
+    /**
+     * Resolve task + project together, enforcing the binding. Returns null on any
+     * failure so the caller emits ONE generic 404 — an endpoint that explained
+     * which half was wrong would be an enumeration oracle.
+     */
+    const bind = (taskId) => {
+        const task = store.get(taskId);
+        if (!task)
+            return null;
+        const project = getProjectById(task.projectId);
+        if (!project?.path)
+            return null;
+        return { task, project };
+    };
+    app.get("/api/external/tasks/:taskId/mission-context", async (c) => {
+        const bound = bind(c.req.param("taskId"));
+        if (!bound)
+            return c.json({ error: "not_found" }, 404);
+        const { task, project } = bound;
+        const facts = await getScenarioFacts(project, task);
+        // A task that already knows its run needs only the ordinary tail. One that
+        // does not gets the wider reach-back — on its first poll, and thereafter
+        // only once the transcript has moved since the last reach-back.
+        const window = wideWindows.get(task.taskId);
+        const wide = !task.missionContext && (!window || window.seen !== window.scanned);
+        const read = await readTranscriptTail(task.sessionUuid, wide ? RECOVERY_TAIL_BYTES : TRANSCRIPT_TAIL_BYTES);
+        const transcript = read.text;
+        // A read that yielded no revision tells us nothing, so it records nothing —
+        // otherwise a transient fault would mark the reach-back done and strand the
+        // task unidentified (external plan review, openai MEDIUM). An already
+        // identified task is not recorded either: it can never go wide, so an entry
+        // for it would be pure cap pressure (internal code review, LOW).
+        if (read.revision && !task.missionContext) {
+            // Only a NEW key can push past the cap. Clearing on every write would, at
+            // capacity, evict all 511 other tasks on each poll — every one of them
+            // then paying a fresh 1 MB reach-back although its transcript never moved,
+            // which is precisely the cost this schedule exists to remove (external
+            // code review, openai MEDIUM).
+            if (!wideWindows.has(task.taskId) && wideWindows.size >= wideWindowCap)
+                wideWindows.clear();
+            wideWindows.set(task.taskId, {
+                seen: read.revision,
+                scanned: wide ? read.revision : (window?.scanned ?? ""),
+            });
+        }
+        const { context, associateRunId, associateSource } = await resolveMissionContext({
+            taskId: task.taskId,
+            sessionUuid: task.sessionUuid,
+            projectId: task.projectId,
+            projectRoot: project.path,
+            transcript,
+            phaseTaskId: task.phaseTaskId ?? null,
+            taskRunId: task.runId ?? null,
+            taskTerminal: task.state === "done" || task.state === "launch_failed",
+            // Server-held, server-written — this is what keeps a FINALIZED iterate
+            // resolvable after its `iterate_active` pointer was pruned.
+            association: task.missionContext ?? null,
+            ...facts,
+        }, deps.resolveDeps);
+        // THE one guarded association write (CONTRACT §5). Idempotent: the store
+        // no-ops when an association already exists, so repeated polls perform
+        // exactly zero writes after the first. Never a per-GET side-effect.
+        if (associateRunId && !task.missionContext) {
+            const association = {
+                kind: "iterate",
+                runId: associateRunId,
+                observedAt: now().toISOString(),
+                source: associateSource,
+            };
+            if (setMissionContextOnce(store, task.taskId, association)) {
+                try {
+                    await store.persist();
+                }
+                catch {
+                    // A lock contention (ELOCKED) or I/O fault must not fail the READ —
+                    // but the in-memory field MUST be rolled back, or every later poll
+                    // would see it set, skip the write, and the association would never
+                    // reach disk (external code review, openai HIGH).
+                    revertMissionContext(store, task.taskId, association);
+                    // …and the reach-back must be rolled back WITH it. The marker was
+                    // recorded before the resolve; leaving it would make every later poll
+                    // read only the ordinary tail while the task is unidentified again —
+                    // permanently unreachable for a footer beyond it, which is the very
+                    // data loss the rollback above exists to prevent, re-entered through
+                    // the read side (internal code review, MEDIUM).
+                    wideWindows.delete(task.taskId);
+                }
+            }
+        }
+        return c.json({ status: "ok", context });
+    });
+    app.get("/api/external/tasks/:taskId/mission-context/documents/:documentId", async (c) => {
+        const bound = bind(c.req.param("taskId"));
+        if (!bound)
+            return c.json({ error: "not_found" }, 404);
+        const { task, project } = bound;
+        const payload = parseDocId(c.req.param("documentId"));
+        if (!payload) {
+            // An id we cannot verify is a DEAD HANDLE, and the overwhelmingly common
+            // cause is benign: the signing key is per-process, so every id minted
+            // before a server restart stops verifying. Reporting `stale` tells the
+            // user the truthful, actionable thing ("reopen the tab") instead of an
+            // alarming 404 for an artifact that is perfectly fine.
+            //
+            // This leaks nothing: a tampered id and a restart-expired id are
+            // indistinguishable to the caller either way, and NO read happens in
+            // either case. Genuine binding mismatches below stay 404.
+            return c.json({ status: "stale", reason: "unverifiable_id" }, 200);
+        }
+        // RE-verify the binding at READ time — a signed id is not a licence to read
+        // across a task, a session or a project (§5.2).
+        if (payload.t !== task.taskId ||
+            payload.s !== task.sessionUuid ||
+            payload.p !== project.path) {
+            return c.json({ error: "not_found" }, 404);
+        }
+        // Re-validate the READ ROOT against git, now — not just at mint time. A
+        // capability minted for a worktree that has since been removed (or whose
+        // path was reused) must not still read below it (external code review,
+        // openai MEDIUM).
+        const roots = await readAllowedRoots(project.path);
+        if (!roots.some((r) => samePath(r, payload.root))) {
+            return c.json({ status: "stale", reason: "root_no_longer_registered" }, 200);
+        }
+        const result = readDocumentBody(payload.root, payload.rel.split("/"), payload.f);
+        if (!result.ok) {
+            // `stale` is the honest answer both for a document that existed at mint
+            // time and does not now, and for one that has CHANGED since — NOT a 404
+            // that reads as "never existed", and never a silently-different body.
+            const status = result.reason === "not_found" || result.reason === "changed" ? "stale" : "unavailable";
+            return c.json({ status, reason: result.reason }, 200);
+        }
+        return c.json({
+            status: "ok",
+            document: { title: payload.rel.slice(payload.rel.lastIndexOf("/") + 1), body: result.body },
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/mission-context/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/mission-context/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GAGjB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAIjE,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,eAAe,GAAG,GAAG,CAAC;AA6C5B,MAAM,UAAU,0BAA0B,CAAC,IAA8B;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,eAAe,CAAC;IAE5D;;;;;;;;;OASG;IACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6C,CAAC;IAEzE;;;;OAIG;IACH,MAAM,IAAI,GAAG,CACX,MAAc,EACoD,EAAE;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,6CAA6C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAEhC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,2EAA2E;QAC3E,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CACnD,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7B,4EAA4E;QAC5E,4EAA4E;QAC5E,sEAAsE;QACtE,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,0EAA0E;YAC1E,uEAAuE;YACvE,2EAA2E;YAC3E,uEAAuE;YACvE,+BAA+B;YAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,IAAI,aAAa;gBAAE,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5F,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3B,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,qBAAqB,CAAC;YAC/E,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YAC7B,YAAY,EAAE,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe;YACrE,uEAAuE;YACvE,4DAA4D;YAC5D,WAAW,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;YACxC,GAAG,KAAK;SACT,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAErB,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,WAAW,GAA8B;gBAC7C,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,cAAc;gBACrB,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC/B,MAAM,EAAE,eAAe;aACxB,CAAC;YACF,IAAI,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;oBACpE,mEAAmE;oBACnE,oEAAoE;oBACpE,kDAAkD;oBAClD,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBACtD,kEAAkE;oBAClE,sEAAsE;oBACtE,qEAAqE;oBACrE,oEAAoE;oBACpE,qEAAqE;oBACrE,gDAAgD;oBAChD,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mEAAmE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAEhC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,uDAAuD;YACvD,EAAE;YACF,iEAAiE;YACjE,qEAAqE;YACrE,0DAA0D;YAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,4EAA4E;QAC5E,gDAAgD;QAChD,IACE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;YACzB,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW;YAC9B,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,EAC1B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,kBAAkB;QAClB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACzF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/mission-context/test-harness.d.ts

@@ -0,0 +1,62 @@
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+export declare const UUID = "3c9e3e11-4b53-424e-8062-f9f5a24f6b68";
+export declare const OTHER_UUID = "11111111-2222-3333-4444-555555555555";
+export declare const RUN_ID = "iterate-2026-07-18-demo";
+export declare const SPEC_REL = ".shipwright/planning/iterate/iterate-2026-07-18-demo/mini-plan.md";
+/** A temp project with a valid pointer + a spec document. */
+export declare function makeProject(): string;
+export declare function makeTask(over?: Partial<ExternalTask>): ExternalTask;
+export interface HarnessOptions {
+    /** Make persist() reject, the way an ELOCKED contention would. */
+    persistThrows?: boolean;
+    transcript?: string;
+    /** Test seam for the reach-back cap (routes.ts `WIDE_WINDOW_CAP`). */
+    wideWindowCap?: number;
+    /**
+     * Per-poll transcript reads, for the reach-back SCHEDULE. The last entry
+     * repeats, so `[a, b]` means "a once, then b forever". Default: `transcript`
+     * at a constant revision — a transcript that never changes.
+     *
+     * `narrowText` is what the ORDINARY window sees; omit it when the budget makes
+     * no difference. Setting it models the case the wide window exists for: a
+     * footer sitting further back than `TRANSCRIPT_TAIL_BYTES`, which only the
+     * reach-back can read.
+     */
+    reads?: {
+        text: string;
+        revision: string;
+        narrowText?: string;
+    }[];
+}
+export declare function harness(root: string, task: ExternalTask | ExternalTask[], opts?: HarnessOptions): {
+    app: import("hono").Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+    persist: import("vitest").Mock<() => Promise<void>>;
+    tasks: Map<string, ExternalTask>;
+    readTranscriptTail: import("vitest").Mock<(_uuid: string, maxBytes?: number) => Promise<{
+        text: string;
+        revision: string;
+    }>>;
+};
+interface ArtifactLike {
+    kind: string;
+    state: string;
+    detail?: {
+        documentId?: string;
+    } | null;
+}
+export interface ContextLike {
+    scenario: string;
+    runId: string | null;
+    runLive: boolean;
+    missionTabVisible: boolean;
+    artifacts: ArtifactLike[];
+    tests: {
+        passed: number | null;
+        total: number | null;
+    } | null;
+    servesFrId: string | null;
+}
+export declare function getContext(app: ReturnType<typeof harness>["app"], taskId?: string): Promise<ContextLike>;
+export declare function artifact(ctx: ContextLike, kind: string): ArtifactLike | undefined;
+export {};
+//# sourceMappingURL=test-harness.d.ts.map

package/server/dist/external/mission-context/test-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-harness.d.ts","sourceRoot":"","sources":["../../../src/external/mission-context/test-harness.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGrE,eAAO,MAAM,IAAI,yCAAyC,CAAC;AAC3D,eAAO,MAAM,UAAU,yCAAyC,CAAC;AACjE,eAAO,MAAM,MAAM,4BAA4B,CAAC;AAChD,eAAO,MAAM,QAAQ,sEAAwD,CAAC;AAE9E,6DAA6D;AAC7D,wBAAgB,WAAW,IAAI,MAAM,CAoCpC;AAED,wBAAgB,QAAQ,CAAC,IAAI,GAAE,OAAO,CAAC,YAAY,CAAM,GAAG,YAAY,CAavE;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnE;AAED,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,GAAG,YAAY,EAAE,EACnC,IAAI,GAAE,cAAmB;;;;sDA+BsB,MAAM,aAAa,MAAM;;;;EAoBzE;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,CAAC,EACtC,MAAM,SAAW,GAChB,OAAO,CAAC,WAAW,CAAC,CAItB;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEjF"}