@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/org/beat-register-release-audit.js

@@ -0,0 +1,96 @@
+/*
+ * external/org/beat-register-release-audit.ts — the `beat_recovered`
+ * audit-append half of the release action, split out of
+ * `beat-register-release-core.ts` to stay under the 300-line file
+ * guideline (iterate-2026-08-18-org-route-beat-register).
+ */
+import { existsSync, mkdirSync, openSync, writeFileSync, writeSync, closeSync } from "node:fs";
+import { dirname } from "node:path";
+import { readLeadOrgInfo } from "./org-chart-lookup.js";
+import { OrgSymlinkEscapeError } from "./decisions-lock.js";
+import { guardExistingTarget } from "./beat-register.js";
+/**
+ * Create `absolutePath` empty ONLY if it does not already exist — via the
+ * `wx` flag (O_CREAT|O_EXCL), mirroring `decisions-lock.ts`'s `ensureFile`.
+ * Code-review fix (external cascade, medium/security): the original guard
+ * was `existsSync(auditPath) ? guardExistingTarget(...) : (nothing)` —
+ * `existsSync` follows symlinks and reports a DANGLING symlink as absent,
+ * so a dangling `audit.jsonl` symlink skipped the guard entirely and
+ * `openSync(auditPath, "a")` (which also follows symlinks) would create
+ * and write through it to whatever it pointed at, outside `leadsRoot`.
+ * `wx` fails `EEXIST` against ANY pre-existing path, including a dangling
+ * symlink, WITHOUT following it — so this can never be the thing that
+ * writes through one first. The `guardExistingTarget` call right after it
+ * (now UNCONDITIONAL — the file is guaranteed to exist by this point) is
+ * what actually rejects an existing (non-dangling) symlink.
+ */
+function ensureAuditFile(absolutePath) {
+    const dir = dirname(absolutePath);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    try {
+        writeFileSync(absolutePath, "", { flag: "wx" });
+    }
+    catch (err) {
+        if (err?.code !== "EEXIST")
+            throw err;
+    }
+}
+/** Single-write append, matching leadwright's `audit-append.ts` atomicity
+ *  contract (one `write()` call so the line is fully visible or not at
+ *  all). `ensureAuditFile` + an unconditional `guardExistingTarget` replace
+ *  the plan-review PR-1 `existsSync`-gated guard (see `ensureAuditFile`'s
+ *  own doc comment for why). */
+function appendAuditLine(leadsRoot, auditPath, lstat, entry) {
+    ensureAuditFile(auditPath);
+    const guard = guardExistingTarget(leadsRoot, auditPath, lstat);
+    if (!guard.ok) {
+        if (guard.status === 404) {
+            // The file this same function just created vanished before the very
+            // next syscall — by this point the register mutation has already
+            // committed, so this (like any other audit-append failure) falls
+            // into the already-disclosed PR-9 non-atomicity gap (see
+            // `beat-register-release-core.ts`'s `recordRecoveryAudit`). Surface
+            // honestly as a plain error, not `OrgSymlinkEscapeError` — this was
+            // never a symlink.
+            throw new Error(`audit.jsonl vanished mid-append: ${auditPath}`);
+        }
+        throw new OrgSymlinkEscapeError(auditPath);
+    }
+    const line = JSON.stringify(entry) + "\n";
+    const fd = openSync(auditPath, "a");
+    try {
+        writeSync(fd, line);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Design decision 6: best-effort — never lets an org-chart problem block
+ *  the release action itself. `null` means "couldn't resolve", not
+ *  necessarily "reports to the PO". */
+function resolveParentLeadId(leadsRoot, leadId) {
+    const info = readLeadOrgInfo(leadsRoot, leadId);
+    return info.ok ? info.reportsTo : null;
+}
+/**
+ * MIRRORED LIMITATION (plan-review PR-9, disclosed not fixed): this runs
+ * AFTER the register lock is released, identical ordering to leadwright's
+ * own `recoverRegisterEntry`. A crash or audit-write failure between the
+ * two leaves a recovered entry with no `beat_recovered` line — a retry
+ * finds the entry already closed (`recovered: false`) and does not
+ * re-append. Sharing this limitation with the mirrored contract is
+ * preferred over diverging into a different (and un-mirrored) failure mode.
+ */
+export function recordRecoveryAudit(deps, leadId, auditPath, sessionId, reason, beatId) {
+    appendAuditLine(deps.leadsRoot, auditPath, deps.lstat, {
+        ts: deps.now().toISOString(),
+        kind: "beat_recovered",
+        lead_id: leadId,
+        parent_lead_id: resolveParentLeadId(deps.leadsRoot, leadId),
+        beat_id: beatId,
+        summary: `register entry recovered: session ${sessionId}`,
+        data: { sessionId, reason },
+    });
+}
+//# sourceMappingURL=beat-register-release-audit.js.map

package/server/dist/external/org/beat-register-release-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register-release-audit.js","sourceRoot":"","sources":["../../../src/external/org/beat-register-release-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAgB,MAAM,oBAAoB,CAAC;AAEvE;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,YAAoB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;gCAIgC;AAChC,SAAS,eAAe,CACtB,SAAiB,EACjB,SAAiB,EACjB,KAAc,EACd,KAA8B;IAE9B,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,oEAAoE;YACpE,iEAAiE;YACjE,iEAAiE;YACjE,yDAAyD;YACzD,oEAAoE;YACpE,oEAAoE;YACpE,mBAAmB;YACnB,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;uCAEuC;AACvC,SAAS,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAe,EACf,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,MAAc;IAEd,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE;QACrD,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,MAAM;QACf,cAAc,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3D,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,qCAAqC,SAAS,EAAE;QACzD,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/beat-register-release-core.d.ts

@@ -0,0 +1,50 @@
+import { OrgSymlinkEscapeError } from "./decisions-lock.js";
+import { type LstatFn } from "./beat-register.js";
+export { OrgSymlinkEscapeError };
+export declare const RESIDUAL_LOCK_WARNING: string;
+export type ReleaseOutcome = {
+    ok: true;
+    recovered: true;
+    residualLockWarning: string;
+    beatId: string;
+} | {
+    ok: true;
+    recovered: false;
+} | {
+    ok: false;
+    reason: "not-found";
+    detail: string;
+} | {
+    ok: false;
+    reason: "fault";
+    detail: string;
+};
+export interface BeatRegisterLockOptions {
+    stale: number;
+    update: number;
+    retries: {
+        retries: number;
+        minTimeout: number;
+        maxTimeout: number;
+        factor: number;
+    };
+    realpath: true;
+}
+/** Mirrors leadwright's `lib/file-locks.ts` `withLock` DEFAULTS exactly
+ *  (design decision 5) — same stale window, same retry backoff, same
+ *  heartbeat interval. Internal-plan-review fix: `update` must be passed
+ *  explicitly (leadwright's `withLock` always does) — proper-lockfile's own
+ *  default when omitted is `stale/2` (150s here), not leadwright's 1s. */
+export declare const DEFAULT_LOCK_OPTIONS: BeatRegisterLockOptions;
+export declare class BeatRegisterInvalidError extends Error {
+    readonly path: string;
+    constructor(path: string);
+}
+export interface PerformReleaseDeps {
+    leadsRoot: string;
+    lockOptions: BeatRegisterLockOptions;
+    now: () => Date;
+    lstat: LstatFn;
+}
+export declare function performRelease(deps: PerformReleaseDeps, leadId: string, sessionId: string, reason: string): Promise<ReleaseOutcome>;
+//# sourceMappingURL=beat-register-release-core.d.ts.map

package/server/dist/external/org/beat-register-release-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register-release-core.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-register-release-core.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAML,KAAK,OAAO,EACb,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,eAAO,MAAM,qBAAqB,QAGY,CAAC;AAE/C,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrF,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED;;;;0EAI0E;AAC1E,eAAO,MAAM,oBAAoB,EAAE,uBAKlC,CAAC;AAEF,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAGzC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,uBAAuB,CAAC;IACrC,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAoCD,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAmGzB"}

package/server/dist/external/org/beat-register-release-core.js

@@ -0,0 +1,183 @@
+/*
+ * external/org/beat-register-release-core.ts — the release ACTION itself
+ * (iterate-2026-08-18-org-route-beat-register, V4a-2B point 4.4), split out
+ * of `beat-register-release.ts` (the Hono route shell) to stay under the
+ * 300-line file guideline. The `beat_recovered` audit-append half is split
+ * further into `beat-register-release-audit.ts` for the same reason.
+ *
+ * A JSON-safe MIRROR of leadwright's `lib/beat-register.ts`
+ * `recoverRegisterEntry` — not an import, cross-repo — matching its
+ * contract exactly (force-close an open entry, append exactly one
+ * `beat_recovered` audit line, second call on an already-closed entry is a
+ * no-op that appends nothing), including one of its known limitations (see
+ * the `MIRRORED LIMITATION` comment below).
+ *
+ * Trap #2 (task brief): a release clears only the register half of
+ * FR-04.41's two-guard gate — `.beat.lock` is untouched, so the lead can
+ * still be denied `beat-lock-held` for up to the lock's stale window after
+ * this call. The response never claims otherwise (`residualLockWarning`).
+ *
+ * Lock parameters mirror leadwright's `lib/file-locks.ts` `withLock`
+ * DEFAULTS exactly (design decision 5) — this is the same file leadwright's
+ * own daemon mutates via that same helper, so genuinely serializing against
+ * it means matching its stale/retry contract, not inventing a shorter one
+ * the way `decisions-lock.ts` reasonably did for a file with no writer yet
+ * at the time.
+ */
+import * as lockfile from "proper-lockfile";
+import { existsSync } from "node:fs";
+import { OrgSymlinkEscapeError } from "./decisions-lock.js";
+import { registerPathFor, auditPathFor, guardExistingTarget, atomicWriteJson, readRegisterFileTolerant, } from "./beat-register.js";
+import { recordRecoveryAudit } from "./beat-register-release-audit.js";
+export { OrgSymlinkEscapeError };
+export const RESIDUAL_LOCK_WARNING = ".beat.lock is untouched by this action — the lead may still be denied " +
+    "beat-lock-held for up to the lock's stale window (default 30 min) if its " +
+    "prior holder crashed without releasing it.";
+/** Mirrors leadwright's `lib/file-locks.ts` `withLock` DEFAULTS exactly
+ *  (design decision 5) — same stale window, same retry backoff, same
+ *  heartbeat interval. Internal-plan-review fix: `update` must be passed
+ *  explicitly (leadwright's `withLock` always does) — proper-lockfile's own
+ *  default when omitted is `stale/2` (150s here), not leadwright's 1s. */
+export const DEFAULT_LOCK_OPTIONS = {
+    stale: 300_000,
+    update: 1_000,
+    retries: { retries: 10, minTimeout: 50, maxTimeout: 1000, factor: 2 },
+    realpath: true,
+};
+export class BeatRegisterInvalidError extends Error {
+    path;
+    constructor(path) {
+        super(`beat-register.json failed structural validation: ${path}`);
+        this.path = path;
+    }
+}
+/**
+ * Pre-lock existence + guard check, split out of `performRelease` (code-
+ * review fix, low/readability — keep the lock-acquire/critical-section/
+ * release body focused on just that). Returns a short-circuit
+ * `ReleaseOutcome` when there is nothing to lock for, or `null` to proceed.
+ */
+function checkRegisterReachable(deps, registerPath, sessionId) {
+    // Plan-review fix (PR-2): a missing register means nothing was ever
+    // recorded for this lead — 404 not-found, no lock acquired, nothing
+    // created. Checked BEFORE any lock step.
+    if (!existsSync(registerPath)) {
+        return { ok: false, reason: "not-found", detail: sessionId };
+    }
+    // Code-review fix (Stage 2, medium/correctness): `guardExistingTarget`
+    // used to let a TOCTOU-deleted register (the file genuinely has a second
+    // writer — leadwright's own daemon) propagate as an unhandled exception
+    // into a bare 500. A `vanished` result reads exactly like the
+    // `existsSync` check just above — nothing to release — so it gets the
+    // SAME outcome, not a crash.
+    const preGuard = guardExistingTarget(deps.leadsRoot, registerPath, deps.lstat);
+    if (!preGuard.ok) {
+        if (preGuard.status === 404) {
+            return { ok: false, reason: "not-found", detail: sessionId };
+        }
+        throw new OrgSymlinkEscapeError(registerPath);
+    }
+    return null;
+}
+export async function performRelease(deps, leadId, sessionId, reason) {
+    const registerPath = registerPathFor(deps.leadsRoot, leadId);
+    const auditPath = auditPathFor(deps.leadsRoot, leadId);
+    const shortCircuit = checkRegisterReachable(deps, registerPath, sessionId);
+    if (shortCircuit) {
+        return shortCircuit;
+    }
+    let release;
+    try {
+        release = await lockfile.lock(registerPath, deps.lockOptions);
+    }
+    catch (err) {
+        // Doubt-review fix (Stage 3, high/concurrency): a THIRD vanish-window,
+        // between `checkRegisterReachable`'s pass and this call — with
+        // `realpath: true` (the default here), `proper-lockfile`'s own
+        // `lock()` calls `fs.realpath(file)` first and rejects with `ENOENT`
+        // if the register disappeared in that gap (the daemon is a real
+        // second writer, same threat this file's other two vanish-guards
+        // already take seriously). Left unguarded, this fell to the route
+        // handler's `throw err` and surfaced as an uncaught 500 instead of the
+        // same graceful not-found the other two windows produce. `ELOCKED`
+        // (and anything else) still propagates unchanged — the route handler
+        // owns that mapping.
+        if (err?.code === "ENOENT") {
+            return { ok: false, reason: "not-found", detail: sessionId };
+        }
+        throw err;
+    }
+    let outcome;
+    try {
+        // Post-acquire re-check (mirrors `decisions-lock.ts`'s TOCTOU fix): a
+        // co-resident writer could swap the path for a symlink between the
+        // pre-lock check and actual acquisition — or, per the same fix as
+        // `preGuard` above, delete the file entirely.
+        const postGuard = guardExistingTarget(deps.leadsRoot, registerPath, deps.lstat);
+        if (!postGuard.ok) {
+            if (postGuard.status === 404) {
+                outcome = { ok: false, reason: "not-found", detail: sessionId };
+                return outcome;
+            }
+            throw new OrgSymlinkEscapeError(registerPath);
+        }
+        const read = readRegisterFileTolerant(registerPath);
+        if (!read.ok) {
+            throw new BeatRegisterInvalidError(registerPath);
+        }
+        const file = read.file;
+        const matches = file.entries.filter((e) => e.sessionId === sessionId);
+        // Code-review fix (external cascade, medium/spec): a duplicate
+        // sessionId is a FAULT (trap #3 — "never pick one, never show the
+        // newest"), and that principle now applies to the write path too, not
+        // only the GET /beat-register finding. The prior code did
+        // `.find(...)` — the FIRST match — so a fault where entry #1 is
+        // already closed and entry #2 is still open made release a silent,
+        // permanent no-op on #2: `recovered:false` reads as "nothing to
+        // release" even though an open beat sits right behind it, unreachable
+        // through this action. Refusing outright (no mutation, no audit
+        // write) is the conservative fix — it does NOT invent a new
+        // leadwright-side recovery semantic (which of two entries "wins"),
+        // it just declines to act on data this route's own sibling route
+        // already refuses to summarize as a single state.
+        const entry = matches.length === 1 ? matches[0] : undefined;
+        if (matches.length > 1) {
+            outcome = { ok: false, reason: "fault", detail: sessionId };
+        }
+        else if (!entry) {
+            outcome = { ok: false, reason: "not-found", detail: sessionId };
+        }
+        else if (entry.closedAt !== null) {
+            // MIRRORED LIMITATION (plan-review PR-8, disclosed not fixed): no
+            // fault-state guard before mutating — identical to leadwright's own
+            // `recoverRegisterEntry`, which also does not special-case a
+            // duplicate-sessionId register before closing the first match. The
+            // duplicate case itself is now caught above; this branch is the
+            // ordinary already-closed no-op leadwright's own function also
+            // takes.
+            outcome = { ok: true, recovered: false };
+        }
+        else {
+            entry.closedAt = deps.now().toISOString();
+            atomicWriteJson(registerPath, file);
+            outcome = {
+                ok: true,
+                recovered: true,
+                residualLockWarning: RESIDUAL_LOCK_WARNING,
+                beatId: entry.beatId,
+            };
+        }
+    }
+    finally {
+        await release();
+    }
+    // MIRRORED LIMITATION (plan-review PR-9, disclosed not fixed): the audit
+    // append runs AFTER the register lock is released, identical ordering to
+    // leadwright's own `recoverRegisterEntry` — see
+    // `beat-register-release-audit.ts`'s `recordRecoveryAudit` doc comment.
+    if (outcome.ok && outcome.recovered) {
+        recordRecoveryAudit(deps, leadId, auditPath, sessionId, reason, outcome.beatId);
+    }
+    return outcome;
+}
+//# sourceMappingURL=beat-register-release-core.js.map

package/server/dist/external/org/beat-register-release-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register-release-core.js","sourceRoot":"","sources":["../../../src/external/org/beat-register-release-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,CAAC,MAAM,qBAAqB,GAChC,wEAAwE;IACxE,2EAA2E;IAC3E,4CAA4C,CAAC;AAe/C;;;;0EAI0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAA4B;IAC3D,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;IACrE,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;QADxC,SAAI,GAAJ,IAAI,CAAQ;IAExC,CAAC;CACF;AASD;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,IAAwB,EACxB,YAAoB,EACpB,SAAiB;IAEjB,oEAAoE;IACpE,oEAAoE;IACpE,yCAAyC;IACzC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/D,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,8DAA8D;IAC9D,sEAAsE;IACtE,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,MAAc,EACd,SAAiB,EACjB,MAAc;IAEd,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,+DAA+D;QAC/D,+DAA+D;QAC/D,qEAAqE;QACrE,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,qBAAqB;QACrB,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,sEAAsE;QACtE,mEAAmE;QACnE,kEAAkE;QAClE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBAChE,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACtE,+DAA+D;QAC/D,kEAAkE;QAClE,sEAAsE;QACtE,0DAA0D;QAC1D,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,sEAAsE;QACtE,gEAAgE;QAChE,4DAA4D;QAC5D,mEAAmE;QACnE,iEAAiE;QACjE,kDAAkD;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9D,CAAC;aAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACnC,kEAAkE;YAClE,oEAAoE;YACpE,6DAA6D;YAC7D,mEAAmE;YACnE,gEAAgE;YAChE,+DAA+D;YAC/D,SAAS;YACT,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,GAAG;gBACR,EAAE,EAAE,IAAI;gBACR,SAAS,EAAE,IAAI;gBACf,mBAAmB,EAAE,qBAAqB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,gDAAgD;IAChD,wEAAwE;IACxE,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/server/dist/external/org/beat-register-release.d.ts

@@ -0,0 +1,13 @@
+import type { Hono } from "hono";
+import type { LstatFn } from "./beat-register.js";
+import { type BeatRegisterLockOptions } from "./beat-register-release-core.js";
+export { performRelease, DEFAULT_LOCK_OPTIONS, OrgSymlinkEscapeError, BeatRegisterInvalidError, RESIDUAL_LOCK_WARNING, } from "./beat-register-release-core.js";
+export type { ReleaseOutcome, BeatRegisterLockOptions } from "./beat-register-release-core.js";
+export interface ReleaseRouteDeps {
+    leadsRoot: string;
+    lstatSync?: LstatFn;
+    lockOptions?: BeatRegisterLockOptions;
+    now?: () => Date;
+}
+export declare function registerBeatRegisterReleaseRoute(app: Hono, deps: ReleaseRouteDeps): void;
+//# sourceMappingURL=beat-register-release.d.ts.map

package/server/dist/external/org/beat-register-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register-release.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-register-release.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAa/F,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAsExF"}

package/server/dist/external/org/beat-register-release.js

@@ -0,0 +1,81 @@
+/*
+ * external/org/beat-register-release.ts — POST
+ * /api/external/org/leads/:leadId/beat-register/release
+ * (iterate-2026-08-18-org-route-beat-register, V4a-2B point 4.4).
+ *
+ * Hono route shell only — request validation + error-to-status mapping.
+ * The release action itself (locking, register mutation, audit append,
+ * mirrored leadwright contract) lives in `beat-register-release-core.ts`,
+ * split out to stay under the 300-line file guideline.
+ */
+import { lstatSync } from "node:fs";
+import { LEAD_ID_RE } from "./_helpers.js";
+import { performRelease, DEFAULT_LOCK_OPTIONS, OrgSymlinkEscapeError, BeatRegisterInvalidError, } from "./beat-register-release-core.js";
+export { performRelease, DEFAULT_LOCK_OPTIONS, OrgSymlinkEscapeError, BeatRegisterInvalidError, RESIDUAL_LOCK_WARNING, } from "./beat-register-release-core.js";
+const RELEASE_REASON_MAX_LENGTH = 500;
+// Doubt-review fix (Stage 3, medium/correctness): no `/i` flag. Entry
+// matching in `beat-register-release-core.ts` is an exact `===` string
+// comparison, never normalized — leadwright's own writer always produces
+// `crypto.randomUUID()`, which is defined to be lowercase, so the register
+// can never legitimately hold an uppercase-cased entry. Accepting a
+// differently-cased-but-otherwise-valid sessionId here let it pass
+// validation and then silently miss its real (lowercase) register entry,
+// returning 404 not-found for an entry that genuinely exists.
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+export function registerBeatRegisterReleaseRoute(app, deps) {
+    const leadsRoot = deps.leadsRoot;
+    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
+    const lockOptions = deps.lockOptions ?? DEFAULT_LOCK_OPTIONS;
+    const now = deps.now ?? (() => new Date());
+    app.post("/api/external/org/leads/:leadId/beat-register/release", async (c) => {
+        const leadId = c.req.param("leadId");
+        if (!LEAD_ID_RE.test(leadId)) {
+            return c.json({ error: "invalid_lead_id", leadId }, 400);
+        }
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_json" }, 400);
+        }
+        const { sessionId, reason } = (body ?? {});
+        if (typeof sessionId !== "string" || !UUID_RE.test(sessionId)) {
+            return c.json({ error: "sessionId_invalid" }, 400);
+        }
+        if (typeof reason !== "string" ||
+            reason.length === 0 ||
+            reason.length > RELEASE_REASON_MAX_LENGTH) {
+            return c.json({ error: "reason_invalid", detail: `must be 1-${RELEASE_REASON_MAX_LENGTH} chars` }, 400);
+        }
+        let outcome;
+        try {
+            outcome = await performRelease({ leadsRoot, lockOptions, now, lstat }, leadId, sessionId, reason);
+        }
+        catch (err) {
+            if (err instanceof OrgSymlinkEscapeError) {
+                return c.json({ error: "symlink_forbidden", path: err.path }, 403);
+            }
+            if (err instanceof BeatRegisterInvalidError) {
+                return c.json({ error: "beat_register_invalid", leadId }, 502);
+            }
+            const code = err?.code;
+            if (code === "ELOCKED") {
+                return c.json({ error: "beat_register_locked", leadId }, 409);
+            }
+            throw err;
+        }
+        if (!outcome.ok) {
+            // "fault" (duplicate sessionId — trap #3, never resolved by picking
+            // one) is a structural data conflict, not "nothing here": 409, not
+            // 404.
+            const status = outcome.reason === "fault" ? 409 : 404;
+            return c.json({ ok: false, reason: outcome.reason, detail: outcome.detail }, status);
+        }
+        if (!outcome.recovered) {
+            return c.json({ ok: true, recovered: false }, 200);
+        }
+        return c.json({ ok: true, recovered: true, residualLockWarning: outcome.residualLockWarning }, 200);
+    });
+}
+//# sourceMappingURL=beat-register-release.js.map

package/server/dist/external/org/beat-register-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register-release.js","sourceRoot":"","sources":["../../../src/external/org/beat-register-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GAGzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,sEAAsE;AACtE,uEAAuE;AACvE,yEAAyE;AACzE,2EAA2E;AAC3E,oEAAoE;AACpE,mEAAmE;AACnE,yEAAyE;AACzE,8DAA8D;AAC9D,MAAM,OAAO,GAAG,gEAAgE,CAAC;AASjF,MAAM,UAAU,gCAAgC,CAAC,GAAS,EAAE,IAAsB;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAA8C,CAAC;QACxF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,GAAG,yBAAyB,EACzC,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,yBAAyB,QAAQ,EAAE,EACnF,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAC5B,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,EACtC,MAAM,EACN,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,oEAAoE;YACpE,mEAAmE;YACnE,OAAO;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAC/E,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/beat-register.d.ts

@@ -0,0 +1,100 @@
+import type { Hono } from "hono";
+export interface BeatRegisterEntryView {
+    sessionId: string;
+    beatId: string;
+    leadId: string;
+    pid: number;
+    startedAt: string;
+    closedAt: string | null;
+}
+export interface BeatRegisterFile {
+    version: 1;
+    entries: BeatRegisterEntryView[];
+}
+/** Structural validation only — mirrors leadwright's own schema, not a
+ *  re-derivation. Rejects an unsupported `version` or malformed entries
+ *  rather than guessing a health/staleness value from corrupt data
+ *  (plan-review PR-4). */
+export declare function isValidRegisterFile(v: unknown): v is BeatRegisterFile;
+export type RegisterHealth = {
+    status: "clear";
+} | {
+    status: "open";
+    entry: BeatRegisterEntryView;
+} | {
+    status: "fault";
+    reason: "duplicate-session-id";
+    sessionId: string;
+    entries: BeatRegisterEntryView[];
+};
+/**
+ * Mirrors leadwright's `evaluateRegisterHealth` exactly, including its
+ * scope: duplicate-sessionId is checked first (fault always wins), then the
+ * FIRST open entry is reported.
+ *
+ * MIRRORED LIMITATION (plan-review PR-10, disclosed not fixed): two
+ * DISTINCT open entries (different sessionIds, neither duplicated) are NOT
+ * flagged as a fault — only the first found is reported as "open". This
+ * matches leadwright's own function precisely (verified by reading
+ * `lib/beat-register.ts`); FR-04.41's lock is what is supposed to prevent
+ * this state from occurring at all.
+ */
+export declare function evaluateRegisterHealth(file: BeatRegisterFile): RegisterHealth;
+export type LstatFn = (p: string) => {
+    isSymbolicLink(): boolean;
+};
+export declare function registerPathFor(leadsRoot: string, leadId: string): string;
+export declare function auditPathFor(leadsRoot: string, leadId: string): string;
+/**
+ * Symlink + containment guard for a target already known to exist.
+ *
+ * Code-review fix (Stage 2, medium/correctness): the original version let
+ * `lstat` throw uncaught, so a target deleted between the caller's own
+ * existence check and this call (the register file genuinely has a second
+ * writer — leadwright's own daemon) propagated as an unhandled exception
+ * into a bare 500 instead of a graceful outcome. Mirrors
+ * `decisions-lock.ts`'s `assertNotSymlink`, which is ENOENT-tolerant for
+ * exactly this reason — the difference here is a vanished target is
+ * reported back as its OWN status (`404 vanished`) rather than silently
+ * treated as "fine, proceed", because (unlike `assertNotSymlink`'s
+ * create-if-absent callers) every current caller of this function needs
+ * the target to actually be there for what it does next.
+ */
+export declare function guardExistingTarget(leadsRoot: string, absolute: string, lstat: LstatFn): {
+    ok: true;
+} | {
+    ok: false;
+    status: 403 | 400 | 404;
+    error: string;
+    detail?: string;
+};
+export declare function atomicWriteJson(target: string, value: unknown): void;
+/** ENOENT/empty-file both read as a `{version:1, entries:[]}` clear
+ *  register — mirrors leadwright's own `readRegisterUnlocked`. Any other
+ *  parse/structural failure returns `ok:false` (never a guessed value). */
+export declare function readRegisterFileTolerant(absolute: string): {
+    ok: true;
+    file: BeatRegisterFile;
+} | {
+    ok: false;
+};
+export type BeatRegisterHealthResponse = {
+    leadId: string;
+    status: "clear";
+} | {
+    leadId: string;
+    status: "open";
+    entry: BeatRegisterEntryView;
+} | {
+    leadId: string;
+    status: "fault";
+    reason: "duplicate-session-id";
+    sessionId: string;
+    entries: BeatRegisterEntryView[];
+};
+export interface BeatRegisterRouteDeps {
+    leadsRoot: string;
+    lstatSync?: LstatFn;
+}
+export declare function registerBeatRegisterHealthRoute(app: Hono, deps: BeatRegisterRouteDeps): void;
+//# sourceMappingURL=beat-register.d.ts.map

package/server/dist/external/org/beat-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-register.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-register.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAYjC,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAgBD;;;0BAG0B;AAC1B,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAIrE;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChD;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAiB7E;AAOD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK;IAAE,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC;AAEnE,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBvF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAgBpE;AAED;;2EAE2E;AAC3E,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAuBtD;AAMD,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChE;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,GAAG,IAAI,CA2C5F"}