@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/middleware/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C,eAAO,MAAM,aAAa,EAAE,iBAc3B,CAAC"}

package/server/dist/middleware/logger.js

@@ -0,0 +1,13 @@
+export const requestLogger = async (c, next) => {
+    const start = Date.now();
+    await next();
+    const duration = Date.now() - start;
+    console.log(JSON.stringify({
+        level: "info",
+        method: c.req.method,
+        path: c.req.path,
+        status: c.res.status,
+        durationMs: duration,
+    }));
+};
+//# sourceMappingURL=logger.js.map

package/server/dist/middleware/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,aAAa,GAAsB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,IAAI,EAAE,CAAC;IACb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAEpC,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;QACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;QAChB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;QACpB,UAAU,EAAE,QAAQ;KACrB,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}

package/server/dist/routes/_triage-api-harness.d.ts

@@ -0,0 +1,16 @@
+import { SdkSessionsStore } from "../core/sdk-sessions-store.js";
+import { createTriageRoutes } from "./triage.js";
+import type { TriageRoutesDeps } from "./triage.js";
+/** A triage `append` event line, matching the producer wire shape. */
+export declare function appendLine(id: string, source?: string, detail?: string): string;
+/** The canonical schema header line for a tracked triage store. */
+export declare const TRIAGE_HEADER = "{\"v\":1,\"schema\":\"triage\",\"created\":\"2026-06-01T00:00:00Z\"}";
+export interface Harness {
+    triagePath: string;
+    outboxPath: string;
+    app: ReturnType<typeof createTriageRoutes>;
+    store: SdkSessionsStore;
+    cleanup: () => void;
+}
+export declare function makeHarness(overrides?: Pick<TriageRoutesDeps, "runTriageCli" | "triageWriteAvailability" | "triageWriteAvailabilityTtlMs">): Promise<Harness>;
+//# sourceMappingURL=_triage-api-harness.d.ts.map

package/server/dist/routes/_triage-api-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_triage-api-harness.d.ts","sourceRoot":"","sources":["../../src/routes/_triage-api-harness.ts"],"names":[],"mappings":"AA4BA,OAAO,EACL,gBAAgB,EAEjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoBpD,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,SAAU,EAAE,MAAM,SAAqB,GAAG,MAAM,CAmB5F;AAED,mEAAmE;AACnE,eAAO,MAAM,aAAa,yEAA+D,CAAC;AAE1F,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC3C,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,wBAAsB,WAAW,CAC/B,SAAS,GAAE,IAAI,CAAC,gBAAgB,EAAE,cAAc,GAAG,yBAAyB,GAAG,8BAA8B,CAAM,GAClH,OAAO,CAAC,OAAO,CAAC,CA+BlB"}

package/server/dist/routes/_triage-api-harness.js

@@ -0,0 +1,89 @@
+/*
+ * _triage-api-harness.ts — shared F0.5 surface=api harness for the triage
+ * route gates. NOT a test file (no `.test.` segment, so vitest does not
+ * collect it); the leading underscore marks it as test-support.
+ *
+ * Extracted from `triage.outbox-union.test.ts` when the record-boundary
+ * recovery gate (iterate-2026-07-18-triage-jsonl-record-boundary) needed the
+ * same setup: one harness, two gate files, both under the 300-line convention
+ * and neither duplicating ~50 lines of wiring.
+ *
+ * Drives the REAL production Hono triage route (`createTriageRoutes`) with a
+ * real `SdkSessionsStore` and the production `.weblock` lock against a temp
+ * project — so these gates exercise the actual HTTP consumer chain, not a
+ * re-implementation of it.
+ */
+import { appendFileSync, mkdtempSync, rmSync, mkdirSync, existsSync, } from "node:fs";
+import { readFile as fsReadFile, writeFile as fsWriteFile } from "node:fs/promises";
+import path from "node:path";
+import { tmpdir } from "node:os";
+import * as lockfile from "proper-lockfile";
+import { SdkSessionsStore, } from "../core/sdk-sessions-store.js";
+import { createTriageRoutes } from "./triage.js";
+import { _clearCache_TEST_ONLY } from "../core/triage-store.js";
+import { _clearEnrichCache_TEST_ONLY } from "../core/triage-enrich.js";
+import { outboxPathFor } from "../core/triage-paths.js";
+function realStoreDeps() {
+    return {
+        readFile: (p, e) => fsReadFile(p, e),
+        writeFile: (p, d) => fsWriteFile(p, d),
+        existsSync: (p) => existsSync(p),
+        mkdirSync: (p, o) => mkdirSync(p, o),
+        lock: (p) => lockfile.lock(p, { retries: 0 }),
+        // Append-with-empty CREATES the file when absent and is a no-op when it
+        // exists, without truncating. The obvious `if (!existsSync) writeFileSync`
+        // is a check-then-act TOCTOU (CodeQL js/file-system-race) — this has the
+        // same outcome in one atomic open, so there is no window to lose.
+        ensureFile: (p) => appendFileSync(p, ""),
+    };
+}
+/** A triage `append` event line, matching the producer wire shape. */
+export function appendLine(id, source = "drift", detail = `Detail for ${id}`) {
+    return JSON.stringify({
+        event: "append",
+        id,
+        ts: "2026-06-01T08:00:00Z",
+        originalTs: "2026-06-01T08:00:00Z",
+        source,
+        severity: "high",
+        kind: "bug",
+        title: `Background finding ${id}`,
+        detail,
+        evidencePath: null,
+        runId: null,
+        commit: null,
+        dedupKey: `${source}:${id}`,
+        status: "triage",
+        suggestedPriority: "P1",
+        suggestedDomain: "engineering",
+    });
+}
+/** The canonical schema header line for a tracked triage store. */
+export const TRIAGE_HEADER = '{"v":1,"schema":"triage","created":"2026-06-01T00:00:00Z"}';
+export async function makeHarness(overrides = {}) {
+    _clearCache_TEST_ONLY();
+    _clearEnrichCache_TEST_ONLY();
+    const workDir = mkdtempSync(path.join(tmpdir(), "triage-outbox-api-"));
+    const projectPath = path.join(workDir, "project-a");
+    mkdirSync(path.join(projectPath, ".shipwright"), { recursive: true });
+    const triagePath = path.join(projectPath, ".shipwright", "triage.jsonl");
+    const registryDir = path.join(workDir, "registry");
+    mkdirSync(registryDir, { recursive: true });
+    const store = new SdkSessionsStore(path.join(registryDir, "sdk-sessions.json"), realStoreDeps());
+    await store.load();
+    const projects = [{ id: "proj-a", path: projectPath }];
+    const app = createTriageRoutes({
+        getAllProjects: () => projects,
+        getProjectById: (id) => projects.find((p) => p.id === id),
+        store,
+        ...overrides,
+    });
+    return {
+        triagePath,
+        outboxPath: outboxPathFor(triagePath),
+        app,
+        store,
+        cleanup: () => rmSync(workDir, { recursive: true, force: true }),
+    };
+}
+//# sourceMappingURL=_triage-api-harness.js.map

package/server/dist/routes/_triage-api-harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_triage-api-harness.js","sourceRoot":"","sources":["../../src/routes/_triage-api-harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,cAAc,EACd,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EACL,gBAAgB,GAEjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,SAAS,aAAa;IACpB,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAmB,CAAC;QACtD,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAChC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7C,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,kEAAkE;QAClE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,EAAE;IAClF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,QAAQ;QACf,EAAE;QACF,EAAE,EAAE,sBAAsB;QAC1B,UAAU,EAAE,sBAAsB;QAClC,MAAM;QACN,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,sBAAsB,EAAE,EAAE;QACjC,MAAM;QACN,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE;QAC3B,MAAM,EAAE,QAAQ;QAChB,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,aAAa;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,4DAA4D,CAAC;AAU1F,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAAiH,EAAE;IAEnH,qBAAqB,EAAE,CAAC;IACxB,2BAA2B,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IAEzE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAC3C,aAAa,EAAE,CAChB,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAEnB,MAAM,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC7B,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC9B,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzD,KAAK;QACL,GAAG,SAAS;KACb,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;QACrC,GAAG;QACH,KAAK;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/server/dist/routes/campaigns.d.ts

@@ -0,0 +1,26 @@
+import { Hono } from "hono";
+import { type DismissedCampaignsApi } from "../core/dismissed-campaigns-store.js";
+export interface CampaignProjectMeta {
+    id: string;
+    path: string;
+    synthesized?: boolean;
+}
+export interface CampaignRoutesDeps {
+    /** Per-id project lookup. Synthesized rows are treated as 404 by callers. */
+    getProjectById: (id: string) => CampaignProjectMeta | undefined;
+    /**
+     * Cross-process file lock for a campaign dir (collision-safe `.weblock`).
+     * Generic web-lock — `createTriageLock()` in production, in-process mutex in
+     * tests. Held across the read-modify-write of the lifecycle status.
+     */
+    lock: (path: string) => Promise<() => Promise<void>>;
+    /**
+     * Webui-owned board-dismiss store. Omitted in production (resolves the
+     * `getDefaultDismissedStore()` singleton from the registry dir, so `index.ts`
+     * — a grandfathered bloat-baseline file — needs no wiring change); injected in
+     * tests with a temp-file-backed store or an ELOCKED-throwing fake.
+     */
+    dismissedStore?: DismissedCampaignsApi;
+}
+export declare function createCampaignsRoutes(deps: CampaignRoutesDeps): Hono;
+//# sourceMappingURL=campaigns.d.ts.map

package/server/dist/routes/campaigns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaigns.d.ts","sourceRoot":"","sources":["../../src/routes/campaigns.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoB5B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,sCAAsC,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;IAChE;;;;OAIG;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAiBD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAyMpE"}

package/server/dist/routes/campaigns.js

@@ -0,0 +1,237 @@
+/*
+ * campaigns.ts — webui Campaigns routes (FR-01.31 / FR-01.33).
+ *
+ *   GET  /api/campaigns/:projectId          — read-only resolved view of every
+ *                                             campaign under the project.
+ *   POST /api/campaigns/:projectId/:slug/start — set a campaign's lifecycle
+ *                                             status to `active` (the Triage
+ *                                             "Start Campaign" action). This is
+ *                                             the ONLY WebUI write to campaign
+ *                                             state — a narrow, lock-protected,
+ *                                             operator-initiated relaxation of
+ *                                             the read-only rule (see ADR /
+ *                                             core/campaign-write.ts).
+ *
+ * Status mapping (both routes share the getProjectById + realpath guard from
+ * triage.ts / ADR-101): unknown/synth project → 404; traversal → 403; missing
+ * campaign dir → 404. Start adds: `complete → 409` (no revert), lock ELOCKED →
+ * 503, no writable status target → 422.
+ */
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import path from "node:path";
+import { Hono } from "hono";
+import { resolveCampaignsDir, isWithin } from "../core/campaign-paths.js";
+import { readCampaigns } from "../core/campaign-store.js";
+import { readCampaignEvents, applyEventsProjection } from "../core/campaign-events.js";
+import { readLoopRunState } from "../core/campaign-loop-state.js";
+import { readStatusJson, pickLifecycle, } from "../core/campaign-status-json.js";
+import { parseFrontmatter } from "../core/campaign-parse.js";
+import { setCampaignStatus, CampaignWriteError } from "../core/campaign-write.js";
+import { isElockedError, isValidCampaignSlug, lockUnavailable, releaseQuietly, } from "../core/campaign-route-helpers.js";
+import { getDefaultDismissedStore, } from "../core/dismissed-campaigns-store.js";
+/** Current lifecycle status, read with the same precedence as pickLifecycle. */
+function readCurrentStatus(campaignDir) {
+    const sj = readStatusJson(campaignDir);
+    let fm = {};
+    const mdPath = path.join(campaignDir, "campaign.md");
+    if (existsSync(mdPath)) {
+        try {
+            fm = parseFrontmatter(readFileSync(mdPath, "utf-8"));
+        }
+        catch {
+            fm = {};
+        }
+    }
+    return pickLifecycle(sj, fm);
+}
+export function createCampaignsRoutes(deps) {
+    const app = new Hono();
+    // Lazy default keeps index.ts (grandfathered bloat baseline) untouched.
+    const dismissedStore = deps.dismissedStore ?? getDefaultDismissedStore();
+    app.get("/api/campaigns/:projectId", (c) => {
+        const projectId = c.req.param("projectId");
+        const project = deps.getProjectById(projectId);
+        if (!project || project.synthesized) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        const pathRes = resolveCampaignsDir({
+            path: project.path,
+            synthesized: project.synthesized,
+        });
+        if (!pathRes.ok) {
+            if (pathRes.error.reason === "path_traversal") {
+                return c.json({ error: "path_traversal_rejected", projectId }, 403);
+            }
+            return c.json({ error: "project_path_invalid", projectId }, 404);
+        }
+        let campaigns;
+        try {
+            campaigns = readCampaigns(pathRes.absolute, pathRes.projectRoot);
+        }
+        catch (err) {
+            console.warn(JSON.stringify({
+                level: "warn",
+                message: "campaigns read failed",
+                projectId,
+                error: String(err).slice(0, 200),
+            }));
+            campaigns = [];
+        }
+        // Tracked-events projection (FR-01.31): overlay event-confirmed completions
+        // onto the dir-sourced campaigns (corrects a stale status.json) AND
+        // synthesize campaigns whose planning dir is gitignored/absent on this clone
+        // (events.jsonl is the durable record), so the deployed board still surfaces
+        // progress. Tolerant — readCampaignEvents never throws, but the guard keeps
+        // a projection edge from ever 500-ing the route.
+        try {
+            campaigns = applyEventsProjection(campaigns, readCampaignEvents(pathRes.projectRoot));
+        }
+        catch (err) {
+            console.warn(JSON.stringify({
+                level: "warn",
+                message: "campaign events projection failed",
+                projectId,
+                error: String(err).slice(0, 200),
+            }));
+        }
+        // Live-run annotation from loop_state.json, read ONCE so the per-step
+        // overlay and the attached-run guard share a consistent snapshot. Tolerant —
+        // readLoopRunState never throws, but the guard keeps a torn read from ever
+        // 500-ing the route.
+        let loop;
+        try {
+            loop = readLoopRunState(pathRes.projectRoot, Date.now());
+        }
+        catch {
+            loop = { attachedSlugs: new Set(), runningStepIdsBySlug: new Map() };
+        }
+        for (const camp of campaigns) {
+            // Per-step overlay (live board feedback): a live loop unit marks its step
+            // in_progress on the board even before the producer writes status.json
+            // in_progress (monorepo follow-up trg-9edbab4d). Only pending →
+            // in_progress; status.json stays authoritative for complete/failed/
+            // escalated, so done/total/nextPending are untouched.
+            const running = loop.runningStepIdsBySlug.get(camp.slug);
+            if (running) {
+                for (const s of camp.steps) {
+                    if (s.status === "pending" && running.has(s.id))
+                        s.status = "in_progress";
+                }
+            }
+            // Attached-run guard (double-launch, FR-01.33): a live loop unit for the
+            // slug OR any in_progress step (the overlay above + the future
+            // producer-side status.json signal).
+            camp.attachedRun =
+                loop.attachedSlugs.has(camp.slug) ||
+                    camp.steps.some((s) => s.status === "in_progress");
+        }
+        // Board-dismiss annotation (iterate-2026-06-12): a webui-owned operator
+        // quittance, NOT a producer status. Annotate (don't filter) so the client's
+        // reversible "show dismissed / restore" UX works off one GET. Lock-free
+        // tolerant read; applies uniformly to dir-sourced and derivedFromEvents
+        // campaigns. Optional field → deploy-skew safe (older client ignores it).
+        const dismissedSlugs = dismissedStore.listDismissed(projectId);
+        for (const camp of campaigns) {
+            camp.dismissed = dismissedSlugs.has(camp.slug);
+        }
+        return c.json({ campaigns });
+    });
+    // POST /api/campaigns/:projectId/:slug/start — draft → active.
+    app.post("/api/campaigns/:projectId/:slug/start", async (c) => {
+        const projectId = c.req.param("projectId");
+        const slug = c.req.param("slug");
+        const project = deps.getProjectById(projectId);
+        if (!project || project.synthesized) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        const pathRes = resolveCampaignsDir({
+            path: project.path,
+            synthesized: project.synthesized,
+        });
+        if (!pathRes.ok) {
+            if (pathRes.error.reason === "path_traversal") {
+                return c.json({ error: "path_traversal_rejected", projectId }, 403);
+            }
+            return c.json({ error: "project_path_invalid", projectId }, 404);
+        }
+        // Resolve + guard the campaign dir within the campaigns dir. realpath of a
+        // missing path throws ENOENT → 404 (not 500).
+        let campaignDir;
+        try {
+            campaignDir = realpathSync(path.join(pathRes.absolute, slug));
+        }
+        catch {
+            return c.json({ error: "campaign_not_found", projectId, slug }, 404);
+        }
+        if (!isWithin(pathRes.absolute, campaignDir)) {
+            return c.json({ error: "path_traversal_rejected", projectId, slug }, 403);
+        }
+        try {
+            if (!statSync(campaignDir).isDirectory()) {
+                return c.json({ error: "campaign_not_found", projectId, slug }, 404);
+            }
+        }
+        catch {
+            return c.json({ error: "campaign_not_found", projectId, slug }, 404);
+        }
+        let release;
+        try {
+            release = await deps.lock(campaignDir);
+        }
+        catch (err) {
+            if (isElockedError(err))
+                return lockUnavailable(c);
+            throw err;
+        }
+        try {
+            // Lifecycle guard INSIDE the lock (authoritative): never revert a
+            // completed campaign — re-read under the lock so a producer flipping the
+            // campaign to `complete` between request arrival and here can't be
+            // overwritten back to `active`. draft / active / legacy-null → proceed
+            // (active is idempotent).
+            if (readCurrentStatus(campaignDir) === "complete") {
+                return c.json({ error: "campaign_already_complete", projectId, slug }, 409);
+            }
+            setCampaignStatus(campaignDir, "active");
+        }
+        catch (err) {
+            if (err instanceof CampaignWriteError) {
+                return c.json({ error: err.code, message: err.message }, err.code === "no_writable_status_target" ? 422 : 500);
+            }
+            throw err;
+        }
+        finally {
+            await releaseQuietly(release);
+        }
+        return c.json({ slug, status: "active" });
+    });
+    // POST .../:slug/dismiss | .../:slug/restore — webui-owned board quittance.
+    // No campaign-dir realpath guard: dismiss/restore key off (projectId, slug) in
+    // the registry-dir state file, never the campaign dir — which is ABSENT for a
+    // derivedFromEvents ghost (the whole point). Idempotent; ELOCKED → 503.
+    const runDismiss = async (c, projectId, slug, action) => {
+        const project = deps.getProjectById(projectId);
+        if (!project || project.synthesized) {
+            return c.json({ error: "project_not_found", projectId }, 404);
+        }
+        if (!isValidCampaignSlug(slug)) {
+            return c.json({ error: "invalid_slug", projectId, slug }, 400);
+        }
+        try {
+            if (action === "dismiss")
+                await dismissedStore.dismiss(projectId, slug);
+            else
+                await dismissedStore.restore(projectId, slug);
+        }
+        catch (err) {
+            if (isElockedError(err))
+                return lockUnavailable(c);
+            throw err;
+        }
+        return c.json({ slug, dismissed: action === "dismiss" });
+    };
+    app.post("/api/campaigns/:projectId/:slug/dismiss", (c) => runDismiss(c, c.req.param("projectId"), c.req.param("slug"), "dismiss"));
+    app.post("/api/campaigns/:projectId/:slug/restore", (c) => runDismiss(c, c.req.param("projectId"), c.req.param("slug"), "restore"));
+    return app;
+}
+//# sourceMappingURL=campaigns.js.map

package/server/dist/routes/campaigns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaigns.js","sourceRoot":"","sources":["../../src/routes/campaigns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAiB,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAqB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EACL,cAAc,EACd,aAAa,GAEd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,cAAc,GACf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wBAAwB,GAEzB,MAAM,sCAAsC,CAAC;AA0B9C,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,MAAM,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,EAAE,GAA2B,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,wEAAwE;IACxE,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,wBAAwB,EAAE,CAAC;IAEpD,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,uBAAuB;gBAChC,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjC,CAAC,CACH,CAAC;YACF,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,4EAA4E;QAC5E,oEAAoE;QACpE,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,iDAAiD;QACjD,IAAI,CAAC;YACH,SAAS,GAAG,qBAAqB,CAC/B,SAAS,EACT,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,mCAAmC;gBAC5C,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,6EAA6E;QAC7E,2EAA2E;QAC3E,qBAAqB;QACrB,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,oBAAoB,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,0EAA0E;YAC1E,uEAAuE;YACvE,gEAAgE;YAChE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAAE,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,yEAAyE;YACzE,+DAA+D;YAC/D,qCAAqC;YACrC,IAAI,CAAC,WAAW;gBACd,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;QACvD,CAAC;QACD,wEAAwE;QACxE,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,cAAc,GAAG,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,kEAAkE;YAClE,yEAAyE;YACzE,mEAAmE;YACnE,uEAAuE;YACvE,0BAA0B;YAC1B,IAAI,iBAAiB,CAAC,WAAW,CAAC,KAAK,UAAU,EAAE,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9E,CAAC;YACD,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EACzC,GAAG,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACrD,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,UAAU,GAAG,KAAK,EACtB,CAAU,EACV,SAAiB,EACjB,IAAY,EACZ,MAA6B,EAC7B,EAAE;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;;gBACnE,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,CAAC,CAAC,EAAE,EAAE,CACxD,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CACxE,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,CAAC,CAAC,EAAE,EAAE,CACxD,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CACxE,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/diagnostics.d.ts

@@ -0,0 +1,84 @@
+import { Hono } from "hono";
+import { type ClaudeVersionInfo } from "../core/cli-compat.js";
+import { SdkSessionsStore } from "../core/sdk-sessions-store.js";
+export interface ClaudeCliDiagnostic {
+    /** Stdout of `where claude` / `which claude`, trimmed. Empty if cmd failed. */
+    whereOutput: string;
+    /** First N entries of process.env.PATH (newline-/colon-/semi-split). Bounded. */
+    pathSample: string[];
+    /** Curated fallback paths the resolver checked when PATH lookup was empty. */
+    checkedFallbacks: string[];
+    /**
+     * iterate-2026-05-08 v0.8.8 external-review fix (openai medium #2) —
+     * surface the SHIPWRIGHT_CLAUDE_BIN env override status so the
+     * operator can spot a typo'd override instantly. `null` = unset;
+     * otherwise the resolved path + an `(exists)` / `(missing)` annotation.
+     */
+    envOverride: string | null;
+}
+export interface DiagnosticsSnapshot {
+    /**
+     * A06 (FR-01.49) — the WebUI's OWN identity + version, additive. The npx
+     * bootstrapper (`@svenroth-ai/shipwright`) reads this to decide
+     * attach-vs-swap when a server already holds :3847: matching `name` +
+     * same `version` → attach, older → detached swap, wrong/absent `name` →
+     * FOREIGN (left alive, never killed). The stable `name` is a wire-protocol
+     * identity so a coincidental `/api/diagnostics` on a foreign process is not
+     * mistaken for a Command Center. `/api/health` carries an unrelated
+     * hardcoded literal ("0.1.0") and is left untouched.
+     */
+    app: {
+        name: string;
+        version: string;
+    };
+    claudeCli: {
+        raw: string;
+        parsed: ClaudeVersionInfo["parsed"];
+        supported: boolean;
+        minSupported: string;
+        /**
+         * iterate-2026-05-08 v0.8.8 AC-4 — present ONLY when supported=false.
+         * Empowers operators to self-diagnose "why isn't my CLI being found?"
+         * without reading the server log. The block surfaces the primary
+         * `where`/`which` output, a sample of the server's PATH, and the
+         * curated fallback paths the resolver would have checked.
+         */
+        diagnostic?: ClaudeCliDiagnostic;
+    };
+    sessions: {
+        total: number;
+        byState: Record<string, number>;
+    };
+    launchers: {
+        copy: {
+            available: true;
+        };
+        terminal: {
+            available: false;
+            reason: "deferred to v2 (variant-a narrow)";
+        };
+        vscode: {
+            available: false;
+            reason: "deferred to v2 (variant-a narrow)";
+        };
+        desktop: {
+            available: false;
+            reason: "awaiting Claude Desktop URL scheme";
+        };
+    };
+}
+/**
+ * Stable wire-protocol identity for the Command Center. The npx bootstrapper
+ * matches on this exact string before treating a listener on :3847 as a
+ * Shipwright server (a foreign process that happens to answer
+ * `/api/diagnostics` is otherwise indistinguishable by version alone).
+ */
+export declare const APP_NAME = "shipwright-command-center";
+export declare function readAppVersion(): string;
+export declare function createDiagnosticsRoutes(args: {
+    store: SdkSessionsStore;
+    versionInfo: () => ClaudeVersionInfo;
+    /** A06 — override the reported app version (test seam). Defaults to package.json. */
+    appVersion?: string;
+}): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=diagnostics.d.ts.map

package/server/dist/routes/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/routes/diagnostics.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,8EAA8E;IAC9E,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;OASG;IACH,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACpC,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB;;;;;;WAMG;QACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;KAClC,CAAC;IACF,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACjC,CAAC;IACF,SAAS,EAAE;QACT,IAAI,EAAE;YAAE,SAAS,EAAE,IAAI,CAAA;SAAE,CAAC;QAC1B,QAAQ,EAAE;YAAE,SAAS,EAAE,KAAK,CAAC;YAAC,MAAM,EAAE,mCAAmC,CAAA;SAAE,CAAC;QAC5E,MAAM,EAAE;YAAE,SAAS,EAAE,KAAK,CAAC;YAAC,MAAM,EAAE,mCAAmC,CAAA;SAAE,CAAC;QAC1E,OAAO,EAAE;YAAE,SAAS,EAAE,KAAK,CAAC;YAAC,MAAM,EAAE,oCAAoC,CAAA;SAAE,CAAC;KAC7E,CAAC;CACH;AAID;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,8BAA8B,CAAC;AAWpD,wBAAgB,cAAc,IAAI,MAAM,CAgBvC;AA0DD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,KAAK,EAAE,gBAAgB,CAAC;IACxB,WAAW,EAAE,MAAM,iBAAiB,CAAC;IACrC,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,8EAsCA"}