@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/org/usage.js

@@ -0,0 +1,110 @@
+/*
+ * external/org/usage.ts — GET /api/external/org/leads/:leadId/usage.
+ *
+ * Punkt 8's consumption read interface: location + shape + refresh cadence,
+ * fixed now even though leadwright has no producer for `usage.json` yet
+ * (triage doc: "die Form wird trotzdem jetzt festgelegt, weil das
+ * Folgepaket V4b an ihr hängt und sich sonst selbst eine improvisiert").
+ *
+ * Location: `~/.claude/leads/<lead-id>/usage.json` (per-lead — see the
+ * iterate spec's design-decision 5). Missing file ⇒ `measured: false`,
+ * 200 — this is the steady state before leadwright ships its writer, not
+ * an error (contrast `org-chart.ts`, where a missing file IS an error: the
+ * chart is expected to already exist).
+ *
+ * Plan-review fix (both external reviewers, HIGH): `:leadId` is a raw route
+ * param and was originally joined into a filesystem path with no
+ * validation — a `..`-shaped or separator-bearing leadId could escape
+ * `leadsRoot`. Fixed: `leadId` is validated against the SAME `LEAD_ID_RE`
+ * the charter-pattern allowlist check uses (one shared validator, not two
+ * that could drift), then the resolved path additionally gets a realpath
+ * containment check before any read.
+ */
+import { readFileSync, lstatSync } from "node:fs";
+import path from "node:path";
+import { LEAD_ID_RE, LEADS_USAGE_REFRESH_INTERVAL_MS } from "./_helpers.js";
+import { realPathGuard } from "../../core/path-guard.js";
+export { LEADS_USAGE_REFRESH_INTERVAL_MS };
+function isValidUsagePayload(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const u = v;
+    return (typeof u.costUsd === "number" &&
+        Number.isFinite(u.costUsd) &&
+        u.costUsd >= 0 &&
+        typeof u.runCount === "number" &&
+        Number.isFinite(u.runCount) &&
+        u.runCount >= 0 &&
+        typeof u.windowDays === "number" &&
+        Number.isFinite(u.windowDays) &&
+        u.windowDays > 0 &&
+        typeof u.asOf === "string" &&
+        u.asOf.length > 0);
+}
+export function registerUsageRoute(app, deps) {
+    const { leadsRoot } = deps;
+    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
+    app.get("/api/external/org/leads/:leadId/usage", async (c) => {
+        const leadId = c.req.param("leadId");
+        if (!LEAD_ID_RE.test(leadId)) {
+            return c.json({ error: "invalid_lead_id", leadId }, 400);
+        }
+        const absolute = path.join(leadsRoot, leadId, "usage.json");
+        // Existence + symlink check BEFORE any read — a missing lead directory
+        // (steady state pre-producer) is `measured: false`, not an error; a
+        // symlinked final component is rejected before it is ever opened.
+        let lst;
+        try {
+            lst = lstat(absolute);
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                const body = { leadId, measured: false };
+                return c.json(body, 200);
+            }
+            return c.json({ error: "usage_read_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        if (lst.isSymbolicLink()) {
+            return c.json({ error: "symlink_forbidden", leadId }, 403);
+        }
+        // Parent-directory symlink escape (e.g. the lead directory itself is a
+        // junction pointing outside leadsRoot) — checked BEFORE reading.
+        const containment = realPathGuard(leadsRoot, absolute);
+        if (!containment.ok) {
+            return c.json({ error: "path_traversal", detail: containment.reason }, 400);
+        }
+        let raw;
+        try {
+            raw = readFileSync(absolute, "utf8");
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === "ENOENT") {
+                const body = { leadId, measured: false };
+                return c.json(body, 200);
+            }
+            return c.json({ error: "usage_read_failed", detail: String(err).slice(0, 200) }, 500);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            return c.json({ error: "usage_invalid", leadId }, 502);
+        }
+        if (!isValidUsagePayload(parsed)) {
+            return c.json({ error: "usage_invalid", leadId }, 502);
+        }
+        const body = {
+            leadId,
+            measured: true,
+            costUsd: parsed.costUsd,
+            runCount: parsed.runCount,
+            windowDays: parsed.windowDays,
+            asOf: parsed.asOf,
+        };
+        return c.json(body, 200);
+    });
+}
+//# sourceMappingURL=usage.js.map

package/server/dist/external/org/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAa3C,SAAS,mBAAmB,CAC1B,CAAU;IAEV,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC;QACf,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,UAAU,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAClB,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAoB;IAChE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAE5D,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAkB;YAC1B,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/pr-status/routes.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from "hono";
+import { fetchPrStatus as defaultFetchPrStatus } from "../../core/pr-status.js";
+export interface PrStatusRouterDeps {
+    fetchPrStatus?: typeof defaultFetchPrStatus;
+}
+export declare function createPrStatusRouter(deps?: PrStatusRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/pr-status/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/pr-status/routes.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,aAAa,IAAI,oBAAoB,EAGtC,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,OAAO,oBAAoB,CAAC;CAC7C;AAED,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,IAAI,CA4BxE"}

package/server/dist/external/pr-status/routes.js

@@ -0,0 +1,37 @@
+/*
+ * external/pr-status/routes.ts — GET /api/external/pr-status?url=<prUrl>.
+ *
+ * Surfaces a GitHub PR's open/merged state for the transcript PrLinkCard
+ * (iterate-2026-05-30-pr-card-status). The url is validated as a
+ * github.com pull URL BEFORE any gh invocation (AC4); the gh call itself
+ * runs shell:false in core/pr-status.ts (AC3). Failure modes degrade to
+ * { state: "unknown" } there, so this route only 400s on a bad url and
+ * otherwise always returns 200 with a PrStatus body.
+ */
+import { Hono } from "hono";
+import { fetchPrStatus as defaultFetchPrStatus, validatePrUrl, } from "../../core/pr-status.js";
+export function createPrStatusRouter(deps = {}) {
+    const app = new Hono();
+    const fetchStatus = deps.fetchPrStatus ?? defaultFetchPrStatus;
+    app.get("/api/external/pr-status", async (c) => {
+        const url = c.req.query("url") ?? "";
+        if (!validatePrUrl(url)) {
+            return c.json({
+                error: "invalid or missing url (expected https://github.com/<owner>/<repo>/pull/<n>)",
+            }, 400);
+        }
+        // fetchPrStatus is contracted never to reject (every failure → unknown),
+        // but degrade defensively even if that contract is ever violated: the
+        // transcript badge must never surface a 500.
+        let status;
+        try {
+            status = await fetchStatus(url);
+        }
+        catch {
+            status = { state: "unknown", merged: false };
+        }
+        return c.json(status);
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/pr-status/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/pr-status/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,aAAa,IAAI,oBAAoB,EACrC,aAAa,GAEd,MAAM,yBAAyB,CAAC;AAMjC,MAAM,UAAU,oBAAoB,CAAC,OAA2B,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC;IAE/D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EACH,8EAA8E;aACjF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/preview/routes.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from "hono";
+import { PreviewSessionManager, type PreviewProfile } from "../../core/preview-session-manager.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface PreviewRouterDeps {
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    previewManager?: PreviewSessionManager;
+    loadProfile: (profileName: string) => PreviewProfile | null;
+}
+export declare function createPreviewRouter(deps: PreviewRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/preview/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/preview/routes.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAIL,qBAAqB,EAGrB,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;CAC7D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAwEjE"}

package/server/dist/external/preview/routes.js

@@ -0,0 +1,71 @@
+/*
+ * external/preview/routes.ts — POST /api/external/projects/:projectId/preview.
+ *
+ * Spawns a dev server for the project via the injected PreviewSessionManager.
+ *
+ * ADR-044 / CLAUDE.md rule 9 — Preview spawn uses `shell: false`. User-
+ * controlled `dev_server.command` + `shell: true` would be command-
+ * injection. All Preview subprocess entrypoints flow through
+ * `core/preview-session-manager.ts`. This route is just the policy gate
+ * (profile-required, project-required) + the structured error mapping.
+ *
+ * Structured error codes — the UI maps each to a specific toast:
+ *   preview_unavailable      (501) — no previewManager wired (e.g. CLI build)
+ *   preview_profile_invalid  (400) — command contains shell operators / empty
+ *   preview_spawn_failed     (500) — spawn threw (ENOENT etc.)
+ *   preview_port_in_use      (500) — port probe reported EADDRINUSE
+ *   preview_exited_early     (500) — child emitted exit before ready
+ *   preview_timeout          (500) — no ready signal within timeout
+ *   preview_unknown_error    (500) — defensive catch-all
+ */
+import { Hono } from "hono";
+import { PreviewExitedEarlyError, PreviewPortInUseError, PreviewProfileInvalidError, PreviewSpawnFailedError, PreviewTimeoutError, } from "../../core/preview-session-manager.js";
+export function createPreviewRouter(deps) {
+    const app = new Hono();
+    const { getProjectById, previewManager, loadProfile } = deps;
+    app.post("/api/external/projects/:projectId/preview", async (c) => {
+        if (!previewManager) {
+            return c.json({ error: "preview_unavailable" }, 501);
+        }
+        const projectId = c.req.param("projectId");
+        const project = getProjectById?.(projectId);
+        if (!project) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        if (!project.profile) {
+            return c.json({ error: "preview_profile_invalid", detail: "project has no profile" }, 400);
+        }
+        const profile = loadProfile(project.profile);
+        if (!profile) {
+            return c.json({ error: "preview_profile_invalid", detail: "profile not found" }, 400);
+        }
+        try {
+            const entry = await previewManager.spawn(projectId, profile, {
+                cwd: project.path,
+            });
+            return c.json({ url: entry.url, sessionId: entry.sessionId });
+        }
+        catch (err) {
+            if (err instanceof PreviewProfileInvalidError) {
+                return c.json({ error: "preview_profile_invalid", detail: err.detail }, 400);
+            }
+            if (err instanceof PreviewPortInUseError) {
+                return c.json({ error: "preview_port_in_use", port: err.port }, 500);
+            }
+            if (err instanceof PreviewSpawnFailedError) {
+                return c.json({ error: "preview_spawn_failed", detail: err.detail }, 500);
+            }
+            if (err instanceof PreviewExitedEarlyError) {
+                return c.json({ error: "preview_exited_early", detail: `exited with code ${err.code}` }, 500);
+            }
+            if (err instanceof PreviewTimeoutError) {
+                return c.json({ error: "preview_timeout", seconds: err.seconds }, 500);
+            }
+            // Unknown failure — bubble as a generic 500 so a bug doesn't
+            // masquerade as one of the expected codes.
+            return c.json({ error: "preview_unknown_error", detail: String(err).slice(0, 200) }, 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/preview/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/preview/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAE1B,uBAAuB,EACvB,mBAAmB,GAEpB,MAAM,uCAAuC,CAAC;AAS/C,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE7D,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,mBAAmB,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE;gBAC3D,GAAG,EAAE,OAAO,CAAC,IAAI;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACxD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAChD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACrD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;gBAC3C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,oBAAoB,GAAG,CAAC,IAAI,EAAE,EAAE,EACzE,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAClD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,6DAA6D;YAC7D,2CAA2C;YAC3C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACrE,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/routes.d.ts

@@ -0,0 +1,106 @@
+import { Hono } from "hono";
+import { PreviewSessionManager, type PreviewProfile } from "../core/preview-session-manager.js";
+import { type RunConfigReadResult } from "../core/run-config-reader.js";
+import type { ComplianceReadResult } from "../core/compliance-reader.js";
+import { SessionWatcher } from "../core/session-watcher.js";
+import { SdkSessionsStore } from "../core/sdk-sessions-store.js";
+import { type OrgRouterDeps } from "./org/routes.js";
+export { FILE_MAX_BYTES, MIME_BY_EXTENSION, sanitizeContentDispositionFilename, } from "./file/_helpers.js";
+export { clearInboxDeriveCache } from "./inbox/_cache.js";
+export type { ExternalRouteProjectView } from "./_shared/helpers.js";
+import type { ExternalRouteProjectView } from "./_shared/helpers.js";
+export declare function createExternalRoutes(args: {
+    store: SdkSessionsStore;
+    watcher: SessionWatcher;
+    /**
+     * Section 02 (iterate 3) — validates projectId on PATCH / POST. Returns
+     * the set of non-synthesized project ids currently known to the server.
+     * The reserved UNASSIGNED_PROJECT_ID sentinel is accepted independently
+     * of this set. Omitted in legacy callers — PATCH projectId support is
+     * gated on presence (iterate-2 callers still work without it, and the
+     * route returns 400 "projectId not supported" if a client sends one
+     * without wiring).
+     */
+    getKnownProjectIds?: () => Set<string>;
+    /**
+     * Section 03 (iterate 3) — look up a registered project by id. Used by
+     * GET /projects/:id/actions + POST /projects/:id/preview +
+     * POST /projects/:id/actions-stub. The synthesized "unassigned" row is
+     * NOT returned from here (it has no filesystem path).
+     */
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    /**
+     * Section 03 — preview-session manager instance, shared across requests
+     * so the dedup cache holds between POSTs. Injected by index.ts;
+     * test harnesses can pass a fresh instance per test.
+     */
+    previewManager?: PreviewSessionManager;
+    /**
+     * Section 03 — loads a profile by name. Defaults to the real
+     * `core/profile-loader.ts` entry; tests inject a synthetic profile.
+     */
+    loadProfile?: (profileName: string) => PreviewProfile | null;
+    /**
+     * iterate/multi-session-run-orchestrator-v2 — reads a project's
+     * shipwright_run_config.json. Tests inject a stub so they don't
+     * touch the filesystem; production wires the real reader.
+     */
+    readRunConfig?: (projectPath: string) => Promise<RunConfigReadResult>;
+    /**
+     * iterate-2026-06-30-compliance-grade-webui (FR-01.43) — reads a project's
+     * `.shipwright/compliance/dashboard.md`. Tests inject a stub; production
+     * wires the real reader. Read-only observer (CLAUDE.md rule 12 spirit).
+     */
+    readCompliance?: (projectPath: string) => Promise<ComplianceReadResult>;
+    /**
+     * Iterate-2026-05-04 (ADR-068-A1) — best-effort scrollback cleanup
+     * cascade on DELETE /api/external/tasks/:id. Optional for tests;
+     * production wires the singleton ScrollbackStore.
+     */
+    scrollbackClearBestEffort?: (taskId: string) => Promise<void>;
+    /**
+     * Iterate-2026-05-12 (ADR-087, MEDIUM-B1 fix) — best-effort snapshot
+     * cleanup cascade on DELETE /api/external/tasks/:id. Optional for
+     * tests; production wires the singleton SnapshotStore. Snapshots
+     * capture rendered cell-state and may contain secrets; the 24-h TTL
+     * is a backstop, the task delete is the authoritative privacy boundary.
+     */
+    snapshotClearBestEffort?: (taskId: string) => Promise<void>;
+    /**
+     * iterate-2026-05-08 v0.8.7 AC-1 — required injection of the pty
+     * lookup so the transcript poll can flip `new-plain` tasks from
+     * `active` → `idle` when the pty is gone (idle-ceiling, /close,
+     * server-restart, DELETE cascade).
+     *
+     * Required (NOT optional) per external plan review 2026-05-08
+     * (gemini + openai): optional production dependencies hide
+     * misconfiguration. Tests pass `{ get: () => undefined }`; the
+     * production caller in `index.ts` passes the singleton.
+     */
+    ptyManager: {
+        get(taskId: string): unknown;
+        /**
+         * D01/F01 — tear down the live embedded pty on DELETE /tasks/:id BEFORE
+         * the scrollback + snapshot privacy clears. Optional: legacy/test
+         * harnesses pass `{ get }` only; production (index.ts) wires it.
+         */
+        kill?(taskId: string): void | Promise<void>;
+        /**
+         * iterate-2026-05-18-inbox-terminal-prompts — decoded visible-viewport
+         * text of the task's live headless mirror, or null when there is no
+         * live mirror. Optional: legacy test harnesses pass `{ get }` only;
+         * production (index.ts) wires it. When absent the inbox emits no
+         * `terminal_prompt` rows (graceful — never a crash).
+         */
+        peekTerminalText?(taskId: string): string | null;
+    };
+    /** FR-04.38 — `/api/external/org/*` (leadwright's org dir, not a project).
+     *  Mounted only when `honoHost` + `leadsRoot` are both provided (mirrors
+     *  the `getProjectById`-gated mission-context mount above). */
+    honoHost?: string;
+    leadsRoot?: string;
+    leadsRouteSecret?: string;
+    orgLstatSync?: OrgRouterDeps["lstatSync"];
+    orgWithDecisionsLock?: OrgRouterDeps["withDecisionsLock"];
+}): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAmBjE,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAQtE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IAC7D;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;OAUG;IACH,UAAU,EAAE;QACV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7B;;;;WAIG;QACH,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C;;;;;;WAMG;QACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KAClD,CAAC;IACF;;mEAE+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;CAC3D,8EA0JA"}

package/server/dist/external/routes.js

@@ -0,0 +1,162 @@
+/*
+ * server/src/external/routes.ts — registration shell for the external
+ * (Plan D'' / Iterate 3) API surface.
+ *
+ * Post-C2 split (campaign-C-C2-external-routes-split, 2026-05-26): the
+ * historical 2879-LOC monolithic file has been broken into 9 per-concern
+ * sub-routers under `./<concern>/routes.ts`. This file owns ONLY:
+ *
+ *   1. `createExternalRoutes(args)` — builds a Hono app + mounts the
+ *      9 sub-routers + runs a one-time runtime invariant check
+ *      (`ptyManager.get` must exist).
+ *   2. Back-compat re-exports of the symbols that 14+ sibling test
+ *      files + downstream consumers import from `./routes.js`:
+ *      - `clearInboxDeriveCache`
+ *      - `FILE_MAX_BYTES`
+ *      - `MIME_BY_EXTENSION`
+ *      - `sanitizeContentDispositionFilename`
+ *      - `ExternalRouteProjectView` (interface alias)
+ *
+ * Wire-level URL surface is byte-identical to the pre-split version —
+ * every handler still owns its absolute path string. Mount via
+ * `app.route("/", subRouter)` leaves those paths alone.
+ *
+ * Backed by:
+ *   - core/launcher.ts          (copy-command generation)
+ *   - core/session-watcher.ts   (filename-first discovery + byte-range read)
+ *   - core/session-parser.ts    (server-side parser for inbox)
+ *   - core/inbox-derive.ts      (pending tool_use extraction)
+ *   - core/sdk-sessions-store.ts (persisted task metadata)
+ */
+import { Hono } from "hono";
+import { loadProfile, getProfilesDir } from "../core/profile-loader.js";
+import { readRunConfig as defaultReadRunConfig, } from "../core/run-config-reader.js";
+import { createRunConfigRouter } from "./run-config/routes.js";
+import { createModelConfigRouter } from "./model-config/routes.js";
+import { createComplianceRouter } from "./compliance/routes.js";
+import { createEventsRouter } from "./events/routes.js";
+import { createRunsRouter } from "./runs/routes.js";
+import { createWiredMissionContextRouter } from "./mission-context/wire.js";
+import { createPreviewRouter } from "./preview/routes.js";
+import { createActionsRouter } from "./actions/routes.js";
+import { createTreeRouter } from "./tree/routes.js";
+import { createFileRouter } from "./file/routes.js";
+import { createMediaRouter } from "./media/routes.js";
+import { createInboxRouter } from "./inbox/routes.js";
+import { createTranscriptRouter } from "./transcript/routes.js";
+import { createTasksRouter } from "./tasks/routes.js";
+import { createLaunchRouter } from "./launch/routes.js";
+import { createPrStatusRouter } from "./pr-status/routes.js";
+import { createDesignReviewRouter } from "./design-review/routes.js";
+import { createOrgRouter } from "./org/routes.js";
+// Back-compat re-exports — 14+ sibling test files + downstream consumers
+// import these from `./routes.js` directly. Sources of truth post-C2:
+//   - ./file/_helpers.ts          (FILE_MAX_BYTES, MIME_BY_EXTENSION,
+//                                  sanitizeContentDispositionFilename)
+//   - ./inbox/_cache.ts           (clearInboxDeriveCache)
+//   - ./_shared/helpers.ts        (ExternalRouteProjectView)
+export { FILE_MAX_BYTES, MIME_BY_EXTENSION, sanitizeContentDispositionFilename, } from "./file/_helpers.js";
+export { clearInboxDeriveCache } from "./inbox/_cache.js";
+export function createExternalRoutes(args) {
+    const { store, watcher, getKnownProjectIds, getProjectById, previewManager, loadProfile: injectedLoadProfile, scrollbackClearBestEffort, snapshotClearBestEffort, ptyManager, honoHost, leadsRoot, leadsRouteSecret, orgLstatSync, orgWithDecisionsLock, } = args;
+    // iterate-2026-05-08 v0.8.7 AC-1 — runtime guard (external code review
+    // openai medium): TypeScript-only requirement is bypassable in plain
+    // JS or via type-erased callsites. Validate the contract at
+    // construction time so the failure surfaces here, not at the first
+    // transcript-poll N requests later.
+    if (!ptyManager || typeof ptyManager.get !== "function") {
+        throw new Error("createExternalRoutes: required arg `ptyManager` is missing or invalid (must expose `get(taskId)`)");
+    }
+    const profileResolver = injectedLoadProfile ??
+        ((name) => loadProfile(name, getProfilesDir()));
+    const runConfigReader = args.readRunConfig ?? ((p) => defaultReadRunConfig(p));
+    const app = new Hono();
+    // -------------------------------------------------------------------------
+    // Mounted sub-routers (C2 split). Order is structurally irrelevant
+    // (Hono dispatches by exact method+path), but reads top-to-bottom
+    // from the most-trafficked endpoints down to the project-scoped ones.
+    // -------------------------------------------------------------------------
+    app.route("/", createTasksRouter({
+        store,
+        watcher,
+        ptyManager,
+        getKnownProjectIds,
+        getProjectById,
+        scrollbackClearBestEffort,
+        snapshotClearBestEffort,
+    }));
+    // CLAUDE.md rule 13 — phaseTaskRef re-reads run-config server-side +
+    // rejects mismatched session uuids (409 phase_task_session_uuid_mismatch);
+    // phaseTaskRef + actionId → 400 mixed_launch_intents.
+    app.route("/", createLaunchRouter({
+        store,
+        ptyManager,
+        getProjectById,
+        runConfigReader,
+        // D18/F14+F28 — ground-truth JSONL probe so a re-launch inside Claude's
+        // first-write window (or after a pre-claim crash) emits `--resume`, not a
+        // duplicate `--session-id`. Filename-first discovery (CLAUDE.md rule 3).
+        jsonlExistsOnDisk: async (uuid) => (await watcher.findByUuid(uuid)) !== null,
+    }));
+    // CLAUDE.md rule 4 — STATELESS byte-offset; multi-tab works by construction.
+    app.route("/", createTranscriptRouter({ store, watcher, ptyManager }));
+    // Inbox shares the derive cache + negative cache via ./inbox/_cache.ts.
+    app.route("/", createInboxRouter({ store, watcher, ptyManager }));
+    // CLAUDE.md rule 12 — run-config is a READ-ONLY observer; no mutation.
+    app.route("/", createRunConfigRouter({ getProjectById, readRunConfig: runConfigReader }));
+    // Framework-owned model tiers are a read-only project setting, like run-config.
+    app.route("/", createModelConfigRouter({ getProjectById }));
+    // FR-01.43 — compliance dashboard is a READ-ONLY observer of dashboard.md.
+    app.route("/", createComplianceRouter({ getProjectById, readCompliance: args.readCompliance }));
+    // FR-01.46 — tracked event-log is a READ-ONLY observer of
+    // shipwright_events.jsonl (per-run facts for Mission Control / Ship's-Log).
+    app.route("/", createEventsRouter({ getProjectById }));
+    // FR-01.47 — per-run data join (READ-ONLY): runId → FRs/tests/derived-gates/
+    // phase-timings + grade-trend series, over the same shipwright_events.jsonl.
+    app.route("/", createRunsRouter({ getProjectById }));
+    // campaign 2026-07-18-mission-artifacts S1 — the Mission-context resolver.
+    // Project-scoped, so it mounts only when a project lookup is wired. All
+    // wiring (server-side transcript tail + scenario facts) lives in wire.ts.
+    if (getProjectById) {
+        app.route("/", createWiredMissionContextRouter({
+            store,
+            watcher,
+            getProjectById,
+            readRunConfig: runConfigReader,
+        }));
+    }
+    // FR-01.45 — single-session design-gate mockup review: gate observer + viewer
+    // host + the transient round-feedback write (the sole new write surface).
+    app.route("/", createDesignReviewRouter({ getProjectById, readRunConfig: runConfigReader }));
+    // ADR-044 / CLAUDE.md rule 9 (shell:false invariant for preview spawn).
+    app.route("/", createPreviewRouter({
+        getProjectById,
+        previewManager,
+        loadProfile: profileResolver,
+    }));
+    // CLAUDE.md rule 10 — realpath path-guard for tree + file.
+    app.route("/", createTreeRouter({ getProjectById }));
+    app.route("/", createFileRouter({ getProjectById }));
+    // Range-capable video streaming (SmartViewer <video> pane). Separate
+    // from /file: streams via createReadStream + 206, no 5 MB cap.
+    app.route("/", createMediaRouter({ getProjectById }));
+    // GET actions + POST/DELETE per-project actions.json (Settings UI).
+    app.route("/", createActionsRouter({ getProjectById, loadProfile: profileResolver }));
+    // GET /pr-status?url=<prUrl> — open/merged badge for the transcript
+    // PrLinkCard. Validates the github pull URL, then runs `gh pr view`
+    // shell:false (iterate-2026-05-30-pr-card-status). Stateless; uses the
+    // default gh runner + in-memory TTL cache from core/pr-status.ts.
+    app.route("/", createPrStatusRouter());
+    // FR-04.38 — own host-allowlist + shared-secret gate (see org/routes.ts).
+    if (honoHost && leadsRoot) {
+        app.route("/", createOrgRouter({
+            honoHost,
+            leadsRoot,
+            leadsRouteSecret,
+            lstatSync: orgLstatSync,
+            withDecisionsLock: orgWithDecisionsLock,
+        }));
+    }
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACL,aAAa,IAAI,oBAAoB,GAEtC,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAsB,MAAM,iBAAiB,CAAC;AAEtE,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,0DAA0D;AAC1D,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,MAAM,UAAU,oBAAoB,CAAC,IA6FpC;IACC,MAAM,EACJ,KAAK,EACL,OAAO,EACP,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,WAAW,EAAE,mBAAmB,EAChC,yBAAyB,EACzB,uBAAuB,EACvB,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACrB,GAAG,IAAI,CAAC;IACT,uEAAuE;IACvE,qEAAqE;IACrE,4DAA4D;IAC5D,mEAAmE;IACnE,oCAAoC;IACpC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,mBAAmB;QACnB,CAAC,CAAC,IAAY,EAAE,EAAE,CAChB,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,CAA0B,CAAC,CAAC;IAClE,MAAM,eAAe,GACnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,4EAA4E;IAC5E,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,iBAAiB,CAAC;QAChB,KAAK;QACL,OAAO;QACP,UAAU;QACV,kBAAkB;QAClB,cAAc;QACd,yBAAyB;QACzB,uBAAuB;KACxB,CAAC,CACH,CAAC;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,GAAG,CAAC,KAAK,CACP,GAAG,EACH,kBAAkB,CAAC;QACjB,KAAK;QACL,UAAU;QACV,cAAc;QACd,eAAe;QACf,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAChC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;KAC5C,CAAC,CACH,CAAC;IACF,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACvE,wEAAwE;IACxE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,uEAAuE;IACvE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,qBAAqB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC1E,CAAC;IACF,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC5D,2EAA2E;IAC3E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,sBAAsB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAChF,CAAC;IACF,0DAA0D;IAC1D,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CACP,GAAG,EACH,+BAA+B,CAAC;YAC9B,KAAK;YACL,OAAO;YACP,cAAc;YACd,aAAa,EAAE,eAAe;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,0EAA0E;IAC1E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,wBAAwB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC7E,CAAC;IACF,wEAAwE;IACxE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC;QAClB,cAAc;QACd,cAAc;QACd,WAAW,EAAE,eAAe;KAC7B,CAAC,CACH,CAAC;IACF,2DAA2D;IAC3D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,qEAAqE;IACrE,+DAA+D;IAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACtD,oEAAoE;IACpE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CACtE,CAAC;IACF,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAEvC,0EAA0E;IAC1E,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CACP,GAAG,EACH,eAAe,CAAC;YACd,QAAQ;YACR,SAAS;YACT,gBAAgB;YAChB,SAAS,EAAE,YAAY;YACvB,iBAAiB,EAAE,oBAAoB;SACxC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/run-config/routes.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import { type RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface RunConfigRouterDeps {
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    readRunConfig?: (projectPath: string) => Promise<RunConfigReadResult>;
+}
+export declare function createRunConfigRouter(deps: RunConfigRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/run-config/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/run-config/routes.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAgCrE"}

package/server/dist/external/run-config/routes.js

@@ -0,0 +1,55 @@
+/*
+ * external/run-config/routes.ts — read-only observer of
+ * `<project.path>/shipwright_run_config.json`.
+ *
+ * Owns: GET /api/external/projects/:projectId/run-config
+ *
+ * CLAUDE.md rule 12 — webui is a READ-ONLY observer of run-config; the
+ * framework's orchestrator owns every mutation. No POST/PATCH/PUT/DELETE
+ * handler exists on this path; Hono returns 404 for undeclared
+ * method-on-known-path (the per-router test locks this).
+ *
+ * Response shapes (discriminated union on `status`):
+ *   { status: "ok", config, readyToLaunchTasks, diagnostics }
+ *   { status: "missing" }
+ *   { status: "v1_legacy" }
+ *   { status: "invalid", reason }
+ *
+ * `readyToLaunchTasks` is a derived UX convenience (every awaiting_launch
+ * task whose prerequisites are completed). The framework's state machine
+ * remains the source of truth; phase-task launches re-verify against the
+ * full config server-side at launch time.
+ */
+import { Hono } from "hono";
+import { readRunConfig as defaultReadRunConfig, } from "../../core/run-config-reader.js";
+import { deriveReadyToLaunchTasks } from "../../types/run-config-v2.js";
+export function createRunConfigRouter(deps) {
+    const app = new Hono();
+    const { getProjectById } = deps;
+    const runConfigReader = deps.readRunConfig ?? ((p) => defaultReadRunConfig(p));
+    app.get("/api/external/projects/:projectId/run-config", async (c) => {
+        const projectId = c.req.param("projectId");
+        const project = getProjectById?.(projectId);
+        if (!project) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        if (!project.path) {
+            return c.json({ error: "project_path_unavailable", projectId }, 400);
+        }
+        const result = await runConfigReader(project.path);
+        if (result.status === "ok") {
+            return c.json({
+                status: "ok",
+                config: result.config,
+                readyToLaunchTasks: deriveReadyToLaunchTasks(result.config),
+                diagnostics: result.diagnostics,
+            });
+        }
+        if (result.status === "missing" || result.status === "v1_legacy") {
+            return c.json({ status: result.status });
+        }
+        return c.json({ status: "invalid", reason: result.reason });
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/run-config/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/run-config/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,aAAa,IAAI,oBAAoB,GAEtC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAQxE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,eAAe,GACnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}