@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/org/last-run.js

@@ -0,0 +1,137 @@
+/*
+ * external/org/last-run.ts — GET /api/external/org/leads/:leadId/last-run.
+ *
+ * FR-04.06's "visible last-run timestamp" + 3x-cadence staleness display
+ * (iterate-2026-08-18-org-route-beat-register). Reads leadwright's
+ * `~/.claude/leads/<lead-id>/last-run.json` (contract name (b), decided by
+ * leadwright — `{lastRunAt, sessionId}`, stamped when a beat STARTS) and
+ * derives the staleness threshold server-side from `triggers.cron`
+ * (contract name (c)) via `org-chart-lookup.ts` + `cron.ts`.
+ *
+ * `staleness` is tri-state (`"fresh" | "stale" | "unknown"`), matching this
+ * family's established idiom (`usage.ts`'s `measured: false`) for "can't
+ * tell yet" states — never a guessed boolean. `measured: false` (no
+ * `last-run.json` at all) is a DIFFERENT, more basic state than
+ * `measured: true, staleness: "unknown"` (a last-run timestamp exists but
+ * the cadence can't be resolved) — the two must not collapse into one.
+ *
+ * Status codes:
+ *   400 invalid_lead_id     — leadId isn't kebab-case (LEAD_ID_RE)
+ *   403 symlink_forbidden   — last-run.json's final component is a symlink
+ *   400 path_traversal      — realpath containment failure
+ *   502 last_run_invalid    — present but fails the structural check
+ *   500 last_run_read_failed — stat/read failure other than ENOENT
+ *   200 otherwise (including the not-measured / unknown-cadence states —
+ *   those are valid responses, not errors)
+ */
+import { readFileSync, lstatSync } from "node:fs";
+import path from "node:path";
+import { LEAD_ID_RE } from "./_helpers.js";
+import { realPathGuard } from "../../core/path-guard.js";
+import { readLeadOrgInfo } from "./org-chart-lookup.js";
+import { cronIntervalMs, evaluateStaleness } from "./cron.js";
+function isValidLastRunPayload(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const u = v;
+    return (typeof u.lastRunAt === "string" &&
+        u.lastRunAt.length > 0 &&
+        !Number.isNaN(new Date(u.lastRunAt).getTime()) &&
+        typeof u.sessionId === "string" &&
+        u.sessionId.length > 0);
+}
+export function registerLastRunRoute(app, deps) {
+    const { leadsRoot } = deps;
+    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
+    const now = deps.now ?? (() => new Date());
+    app.get("/api/external/org/leads/:leadId/last-run", async (c) => {
+        const leadId = c.req.param("leadId");
+        if (!LEAD_ID_RE.test(leadId)) {
+            return c.json({ error: "invalid_lead_id", leadId }, 400);
+        }
+        const absolute = path.join(leadsRoot, leadId, "last-run.json");
+        let lst;
+        try {
+            lst = lstat(absolute);
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                const body = { leadId, measured: false };
+                return c.json(body, 200);
+            }
+            return c.json({ error: "last_run_read_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        if (lst.isSymbolicLink()) {
+            return c.json({ error: "symlink_forbidden", leadId }, 403);
+        }
+        const containment = realPathGuard(leadsRoot, absolute);
+        if (!containment.ok) {
+            return c.json({ error: "path_traversal", detail: containment.reason }, 400);
+        }
+        let raw;
+        try {
+            raw = readFileSync(absolute, "utf8");
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                const body = { leadId, measured: false };
+                return c.json(body, 200);
+            }
+            return c.json({ error: "last_run_read_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            return c.json({ error: "last_run_invalid", leadId }, 502);
+        }
+        if (!isValidLastRunPayload(parsed)) {
+            return c.json({ error: "last_run_invalid", leadId }, 502);
+        }
+        const { lastRunAt, sessionId } = parsed;
+        const nowValue = now();
+        const orgInfo = readLeadOrgInfo(leadsRoot, leadId);
+        if (!orgInfo.ok) {
+            const body = {
+                leadId,
+                measured: true,
+                lastRunAt,
+                sessionId,
+                staleness: "unknown",
+                thresholdMs: null,
+                cadenceMs: null,
+                cadenceUnresolvedReason: orgInfo.reason,
+            };
+            return c.json(body, 200);
+        }
+        const interval = cronIntervalMs(orgInfo.cron, nowValue);
+        if (!interval.ok) {
+            const body = {
+                leadId,
+                measured: true,
+                lastRunAt,
+                sessionId,
+                staleness: "unknown",
+                thresholdMs: null,
+                cadenceMs: null,
+                cadenceUnresolvedReason: "invalid_cron",
+            };
+            return c.json(body, 200);
+        }
+        const evaluation = evaluateStaleness(lastRunAt, interval.ms, nowValue);
+        const body = {
+            leadId,
+            measured: true,
+            lastRunAt,
+            sessionId,
+            staleness: evaluation.staleness,
+            thresholdMs: evaluation.thresholdMs,
+            cadenceMs: interval.ms,
+        };
+        return c.json(body, 200);
+    });
+}
+//# sourceMappingURL=last-run.js.map

package/server/dist/external/org/last-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"last-run.js","sourceRoot":"","sources":["../../../src/external/org/last-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,eAAe,EAA0B,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AAiB9E,SAAS,qBAAqB,CAAC,CAAU;IACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CACvB,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,oBAAoB,CAAC,GAAS,EAAE,IAAsB;IACpE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,GAAG,CAAC,GAAG,CAAC,0CAA0C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QAE/D,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACpE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;QAEvB,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAoB;gBAC5B,MAAM;gBACN,QAAQ,EAAE,IAAI;gBACd,SAAS;gBACT,SAAS;gBACT,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,IAAI;gBACf,uBAAuB,EAAE,OAAO,CAAC,MAAM;aACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAoB;gBAC5B,MAAM;gBACN,QAAQ,EAAE,IAAI;gBACd,SAAS;gBACT,SAAS;gBACT,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,IAAI;gBACf,uBAAuB,EAAE,cAAc;aACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,IAAI,GAAoB;YAC5B,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,SAAS;YACT,SAAS;YACT,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,QAAQ,CAAC,EAAE;SACvB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/org-chart-lookup.d.ts

@@ -0,0 +1,16 @@
+import { openSync } from "node:fs";
+export type LeadOrgInfoReason = "org_chart_missing" | "org_chart_symlink" | "org_chart_invalid" | "lead_not_found";
+export type LeadOrgInfoResult = {
+    ok: true;
+    cron: string;
+    reportsTo: string | null;
+} | {
+    ok: false;
+    reason: LeadOrgInfoReason;
+};
+export declare function readLeadOrgInfo(leadsRoot: string, leadId: string, 
+/** Test seam for the O_NOFOLLOW open below (e.g. to simulate an ELOOP a
+ *  mocked final-component symlink would produce, without needing a REAL
+ *  symlink on disk). Defaults to the real `openSync`. */
+openSyncFn?: typeof openSync): LeadOrgInfoResult;
+//# sourceMappingURL=org-chart-lookup.d.ts.map

package/server/dist/external/org/org-chart-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-chart-lookup.d.ts","sourceRoot":"","sources":["../../../src/external/org/org-chart-lookup.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAkD,QAAQ,EAAgB,MAAM,SAAS,CAAC;AAGjG,MAAM,MAAM,iBAAiB,GACzB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,gBAAgB,CAAC;AAErB,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE7C,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM;AACd;;yDAEyD;AACzD,UAAU,GAAE,OAAO,QAAmB,GACrC,iBAAiB,CAoEnB"}

package/server/dist/external/org/org-chart-lookup.js

@@ -0,0 +1,100 @@
+/*
+ * external/org/org-chart-lookup.ts — narrow per-lead reader over
+ * `org-chart.json` (iterate-2026-08-18-org-route-beat-register, design
+ * decision 4).
+ *
+ * Deliberately NOT `org-chart.ts`'s `parseOrgChart`: that function requires
+ * EVERY lead in the file to pass full structural validation (its own
+ * header: "a malformed file produces an error, never a half structure") —
+ * exactly right for the named `GET /org-chart` endpoint, wrong here. A
+ * staleness lookup for lead A must not fail because lead B's entry is
+ * malformed; this reader looks up ONLY the two fields (`triggers.cron`,
+ * `reports_to`) for the one requested `leadId`, tolerant of everything
+ * else in the file being broken.
+ *
+ * Plan-review fix (PR-6, deepseek): a symlinked/escaping `org-chart.json`
+ * is reported as its OWN reason (`org_chart_symlink`), distinct from
+ * "missing" or "malformed JSON" — `org-chart.ts`'s own named endpoint 403s
+ * on this condition; this reader can't 403 (it isn't a route), but callers
+ * must be able to tell the two apart rather than collapsing both into a
+ * generic "unknown".
+ *
+ * CodeQL js/file-system-race fix: a separate lstat-check + a later,
+ * independent readFileSync(path) leaves a window where the final path
+ * component could be swapped for a symlink between the two syscalls —
+ * mirrors `file-read.ts`'s fix. Open ONCE with O_NOFOLLOW (the kernel
+ * atomically refuses a symlinked final component with ELOOP, closing the
+ * gap) and fstat/read the SAME fd, so what gets parsed is provably what
+ * got checked.
+ */
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync } from "node:fs";
+import path from "node:path";
+export function readLeadOrgInfo(leadsRoot, leadId, 
+/** Test seam for the O_NOFOLLOW open below (e.g. to simulate an ELOOP a
+ *  mocked final-component symlink would produce, without needing a REAL
+ *  symlink on disk). Defaults to the real `openSync`. */
+openSyncFn = openSync) {
+    const target = path.join(leadsRoot, "org-chart.json");
+    let fd;
+    try {
+        fd = openSyncFn(target, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT") {
+            return { ok: false, reason: "org_chart_missing" };
+        }
+        if (code === "ELOOP") {
+            return { ok: false, reason: "org_chart_symlink" };
+        }
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    let raw;
+    try {
+        if (!fstatSync(fd).isFile()) {
+            return { ok: false, reason: "org_chart_invalid" };
+        }
+        raw = readFileSync(fd, "utf8");
+    }
+    catch {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    finally {
+        closeSync(fd);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    if (typeof parsed !== "object" || parsed === null) {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    const leadsField = parsed.leads;
+    if (typeof leadsField !== "object" || leadsField === null || Array.isArray(leadsField)) {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    const lead = leadsField[leadId];
+    if (typeof lead !== "object" || lead === null) {
+        return { ok: false, reason: "lead_not_found" };
+    }
+    const leadRecord = lead;
+    const triggers = leadRecord.triggers;
+    if (typeof triggers !== "object" || triggers === null) {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    const cron = triggers.cron;
+    if (typeof cron !== "string" || cron.length === 0) {
+        return { ok: false, reason: "org_chart_invalid" };
+    }
+    const reportsToRaw = leadRecord.reports_to;
+    const reportsTo = reportsToRaw === null
+        ? null
+        : typeof reportsToRaw === "string" && reportsToRaw.length > 0
+            ? reportsToRaw
+            : null;
+    return { ok: true, cron, reportsTo };
+}
+//# sourceMappingURL=org-chart-lookup.js.map

package/server/dist/external/org/org-chart-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-chart-lookup.js","sourceRoot":"","sources":["../../../src/external/org/org-chart-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,MAAc;AACd;;yDAEyD;AACzD,aAA8B,QAAQ;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEtD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACpD,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAI,MAAkC,CAAC,KAAK,CAAC;IAC7D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,GAAI,UAAsC,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,UAAU,GAAG,IAA+B,CAAC;IAEnD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAI,QAAoC,CAAC,IAAI,CAAC;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC;IAC3C,MAAM,SAAS,GACb,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAC3D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,IAAI,CAAC;IAEb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC"}

package/server/dist/external/org/org-chart.d.ts

@@ -0,0 +1,25 @@
+import type { Hono } from "hono";
+export interface OrgChartLeadView {
+    domain: string;
+    name: string;
+    reports_to: string | null;
+    manages: string[];
+    charter_path: string;
+}
+export interface OrgChartView {
+    version: number;
+    po: string;
+    leads: Record<string, OrgChartLeadView>;
+}
+/** Structural-only check — NOT the full leadwright Zod schema. See file header. */
+export declare function parseOrgChart(raw: string): OrgChartView | null;
+export interface OrgChartRouteDeps {
+    leadsRoot: string;
+    /** Injectable for tests (external-review fix: this route previously did
+     *  no symlink check at all — production wires the real lstatSync). */
+    lstatSync?: (path: string) => {
+        isSymbolicLink(): boolean;
+    };
+}
+export declare function registerOrgChartRoute(app: Hono, deps: OrgChartRouteDeps): void;
+//# sourceMappingURL=org-chart.d.ts.map

package/server/dist/external/org/org-chart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-chart.d.ts","sourceRoot":"","sources":["../../../src/external/org/org-chart.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIjC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACzC;AAeD,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CA2B9D;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB;0EACsE;IACtE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI,CA+C9E"}

package/server/dist/external/org/org-chart.js

@@ -0,0 +1,110 @@
+/*
+ * external/org/org-chart.ts — GET /api/external/org/org-chart.
+ *
+ * A NAMED, TYPED read of `~/.claude/leads/org-chart.json`, distinct from
+ * the generic byte-serving `/file` route (`org-chart.json` is not reachable
+ * there — see `file-read.ts`). "Named response form" per the triage doc:
+ * this is a LIGHTWEIGHT STRUCTURAL MIRROR of the shape
+ * `leadwright/lib/org-chart.ts`'s `.strict()` Zod schema produces
+ * (`reports_to` / `manages` / `domain` / `name` / `charter_path`), NOT a
+ * re-implementation of its write-time invariants (cycle detection,
+ * kebab-case id regexes, `escalation_target` validity, `max_concurrent_tasks`
+ * literal-1) — those stay leadwright's job (CLAUDE.md rule 7's cross-package
+ * mirror discipline, applied across the repo boundary: shared shapes are
+ * verbatim mirrors, not imports, and not full ports).
+ *
+ * The one bar this DOES enforce: a malformed file produces an ERROR, never
+ * a half structure (missing/absent file included — it is a setup problem,
+ * not the "not yet measured" steady state `usage.ts` models).
+ *
+ * Status codes:
+ *   403 symlink_forbidden — final path component is a symlink
+ *   404 org_chart_missing
+ *   502 org_chart_invalid — present but fails the structural check
+ *   500 read/stat failure
+ */
+import { readFileSync, lstatSync } from "node:fs";
+import path from "node:path";
+function isValidLead(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const lead = v;
+    return (typeof lead.domain === "string" &&
+        typeof lead.name === "string" &&
+        (lead.reports_to === null || typeof lead.reports_to === "string") &&
+        Array.isArray(lead.manages) &&
+        lead.manages.every((m) => typeof m === "string") &&
+        typeof lead.charter_path === "string");
+}
+/** Structural-only check — NOT the full leadwright Zod schema. See file header. */
+export function parseOrgChart(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== "object" || parsed === null)
+        return null;
+    const obj = parsed;
+    if (typeof obj.version !== "number")
+        return null;
+    if (typeof obj.po !== "string" || obj.po.length === 0)
+        return null;
+    // External-review fix (MEDIUM, bug): `typeof [] === "object"` is true, so
+    // an array-valued `leads` passed this check and Object.entries() on it
+    // silently produced an index-keyed Record instead of the declared
+    // id-keyed shape (e.g. `{"leads":[]}` was accepted as valid).
+    if (typeof obj.leads !== "object" || obj.leads === null || Array.isArray(obj.leads)) {
+        return null;
+    }
+    const leadsIn = obj.leads;
+    const leads = {};
+    for (const [id, lead] of Object.entries(leadsIn)) {
+        if (!isValidLead(lead))
+            return null;
+        leads[id] = lead;
+    }
+    return { version: obj.version, po: obj.po, leads };
+}
+export function registerOrgChartRoute(app, deps) {
+    const { leadsRoot } = deps;
+    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
+    app.get("/api/external/org/org-chart", async (c) => {
+        const target = path.join(leadsRoot, "org-chart.json");
+        // External-review fix (HIGH, security): this named endpoint previously
+        // went straight to readFileSync (follows symlinks) with no lstat check
+        // and no realpath containment guard — a symlinked org-chart.json could
+        // serve an arbitrary external file's contents through this authenticated
+        // route if it happened to satisfy the lightweight structural shape.
+        try {
+            if (lstat(target).isSymbolicLink()) {
+                return c.json({ error: "symlink_forbidden" }, 403);
+            }
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code !== "ENOENT") {
+                return c.json({ error: "org_chart_stat_failed", detail: String(err).slice(0, 200) }, 500);
+            }
+        }
+        let raw;
+        try {
+            raw = readFileSync(target, "utf8");
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                return c.json({ error: "org_chart_missing" }, 404);
+            }
+            return c.json({ error: "org_chart_read_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        const orgChart = parseOrgChart(raw);
+        if (!orgChart) {
+            return c.json({ error: "org_chart_invalid" }, 502);
+        }
+        return c.json(orgChart);
+    });
+}
+//# sourceMappingURL=org-chart.js.map

package/server/dist/external/org/org-chart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-chart.js","sourceRoot":"","sources":["../../../src/external/org/org-chart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,OAAO,CACL,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC;QACjE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,0EAA0E;IAC1E,uEAAuE;IACvE,kEAAkE;IAClE,8DAA8D;IAC9D,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAgC,CAAC;IACrD,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AASD,MAAM,UAAU,qBAAqB,CAAC,GAAS,EAAE,IAAuB;IACtE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAEtD,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACrE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACrE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/routes.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from "hono";
+import { type OrgFileWriteDeps } from "./file-write.js";
+export interface OrgRouterDeps {
+    leadsRoot: string;
+    /** The application's resolved bind host — passed through, never re-derived. */
+    honoHost: string;
+    leadsRouteSecret: string | undefined;
+    lstatSync?: OrgFileWriteDeps["lstatSync"];
+    withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
+}
+export declare function createOrgRouter(deps: OrgRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/org/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAW9E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;CAC3D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA6CzD"}

package/server/dist/external/org/routes.js

@@ -0,0 +1,90 @@
+/*
+ * external/org/routes.ts — registration shell for `/api/external/org/*`
+ * (FR-04.38, iterate-2026-08-17-org-route-leads).
+ *
+ * Every route in this family sits behind the SAME two gates, applied once
+ * as router-level middleware (never re-checked per handler):
+ *
+ *   1. Host-bind allowlist — `honoHost` is a PLAIN STRING DEPENDENCY here,
+ *      never `resolveHonoHost` called again. `index.ts` computes it exactly
+ *      once (hoisted above BOTH the `createExternalRoutes(...)` call and
+ *      the `serve(...)` call) and passes the same value to both — the
+ *      structural guarantee plan review asked for in place of a brittle
+ *      call-count spy.
+ *   2. Shared secret — `X-Shipwright-Leads-Secret`, constant-time compare.
+ *
+ * Status-code contract (plan-review reconciliation — the mini-plan's prose
+ * briefly drifted from the spec; this is the single source of truth):
+ *   403 host_not_allowed     — resolved bind host outside the allowlist
+ *   503 leads_route_not_configured — no secret configured on the server
+ *   401 invalid_secret       — secret configured, header missing/wrong
+ *
+ * Doubt-review rebuttal (LOW-MEDIUM, no per-attempt rate limiting / no
+ * enforced secret minimum length): deliberately NOT added. This family's
+ * only trust boundary beyond the secret is the host allowlist itself
+ * (loopback or this machine's OWN Tailscale tailnet, decided PO 2026-08-16)
+ * — unlike a public API, an attacker already needs a foothold on the
+ * operator's tailnet or local machine before a guessed secret matters at
+ * all, and at that point rate-limiting a single-operator local tool adds
+ * state (counters, a clock, a ban-list — all multi-writer-file problems of
+ * their own) for a threat model this route doesn't have. The one cheap,
+ * genuinely load-bearing piece — flagging a WEAK configured secret to the
+ * operator — is added below as a boot-time warning, matching the
+ * established pattern of the Preview coherence check (CLAUDE.md
+ * "Preview-capability precedence"): warn, don't hard-fail, since a startup
+ * validation error on a locally-generated secret is a worse availability
+ * failure than a weak one.
+ */
+import { Hono } from "hono";
+import { isAllowedOrgRouteHost, checkOrgSecret } from "./_helpers.js";
+import { registerOrgFileRead } from "./file-read.js";
+import { registerOrgFileWrite } from "./file-write.js";
+import { registerOrgChartRoute } from "./org-chart.js";
+import { registerUsageRoute } from "./usage.js";
+import { registerCountersignRoute } from "./countersign.js";
+import { registerLastRunRoute } from "./last-run.js";
+import { registerBeatRegisterHealthRoute } from "./beat-register.js";
+import { registerBeatRegisterReleaseRoute } from "./beat-register-release.js";
+const SECRET_HEADER = "x-shipwright-leads-secret";
+const MIN_SECRET_LENGTH = 20;
+export function createOrgRouter(deps) {
+    const app = new Hono();
+    const { honoHost, leadsRouteSecret } = deps;
+    if (leadsRouteSecret !== undefined && leadsRouteSecret.length < MIN_SECRET_LENGTH) {
+        console.warn(JSON.stringify({
+            level: "warn",
+            error: "leads_route_secret_weak",
+            detail: `SHIPWRIGHT_LEADS_ROUTE_SECRET is shorter than ${MIN_SECRET_LENGTH} chars — consider a longer generated value`,
+        }));
+    }
+    app.use("/api/external/org/*", async (c, next) => {
+        if (!isAllowedOrgRouteHost(honoHost)) {
+            return c.json({ error: "host_not_allowed" }, 403);
+        }
+        const check = checkOrgSecret(leadsRouteSecret, c.req.header(SECRET_HEADER));
+        if (check === "not_configured") {
+            return c.json({ error: "leads_route_not_configured" }, 503);
+        }
+        if (check === "invalid") {
+            return c.json({ error: "invalid_secret" }, 401);
+        }
+        await next();
+    });
+    registerOrgFileRead(app, { leadsRoot: deps.leadsRoot });
+    registerOrgFileWrite(app, {
+        leadsRoot: deps.leadsRoot,
+        lstatSync: deps.lstatSync,
+        withDecisionsLock: deps.withDecisionsLock,
+    });
+    registerOrgChartRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
+    registerUsageRoute(app, { leadsRoot: deps.leadsRoot });
+    registerCountersignRoute(app, {
+        leadsRoot: deps.leadsRoot,
+        lstatSync: deps.lstatSync,
+    });
+    registerLastRunRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
+    registerBeatRegisterHealthRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
+    registerBeatRegisterReleaseRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/org/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAW7B,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAE5C,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAClF,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,yBAAyB;YAChC,MAAM,EAAE,iDAAiD,iBAAiB,4CAA4C;SACvH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,mBAAmB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,GAAG,EAAE;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IACH,qBAAqB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,kBAAkB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,wBAAwB,CAAC,GAAG,EAAE;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,+BAA+B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/F,gCAAgC,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/org/usage.d.ts

@@ -0,0 +1,24 @@
+import type { Hono } from "hono";
+import { LEADS_USAGE_REFRESH_INTERVAL_MS } from "./_helpers.js";
+export { LEADS_USAGE_REFRESH_INTERVAL_MS };
+export type UsageResponse = {
+    leadId: string;
+    measured: false;
+} | {
+    leadId: string;
+    measured: true;
+    costUsd: number;
+    runCount: number;
+    windowDays: number;
+    asOf: string;
+};
+export interface UsageRouteDeps {
+    leadsRoot: string;
+    /** Injectable for tests (code-review: this branch was previously
+     *  untestable without a real OS symlink). Production wires real lstatSync. */
+    lstatSync?: (path: string) => {
+        isSymbolicLink(): boolean;
+    };
+}
+export declare function registerUsageRoute(app: Hono, deps: UsageRouteDeps): void;
+//# sourceMappingURL=usage.d.ts.map

package/server/dist/external/org/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,EAAc,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAG5E,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAE3C,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnC;IACE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAsBN,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB;kFAC8E;IAC9E,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CA2ExE"}