@svenroth-ai/shipwright 0.24.7-next.0 → 0.25.0

package/server/dist/external/org/usage.js

@@ -41,70 +41,80 @@ function isValidUsagePayload(v) {
         typeof u.asOf === "string" &&
         u.asOf.length > 0);
 }
-export function registerUsageRoute(app, deps) {
+/** Pure core — shared by the secret-gated route and the plain-surface proxy. */
+export function usageCore(deps, leadId) {
     const { leadsRoot } = deps;
     const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
-    app.get("/api/external/org/leads/:leadId/usage", async (c) => {
-        const leadId = c.req.param("leadId");
-        if (!LEAD_ID_RE.test(leadId)) {
-            return c.json({ error: "invalid_lead_id", leadId }, 400);
-        }
-        const absolute = path.join(leadsRoot, leadId, "usage.json");
-        // Existence + symlink check BEFORE any read — a missing lead directory
-        // (steady state pre-producer) is `measured: false`, not an error; a
-        // symlinked final component is rejected before it is ever opened.
-        let lst;
-        try {
-            lst = lstat(absolute);
-        }
-        catch (err) {
-            const code = err?.code;
-            if (code === "ENOENT") {
-                const body = { leadId, measured: false };
-                return c.json(body, 200);
-            }
-            return c.json({ error: "usage_read_failed", detail: String(err).slice(0, 200) }, 500);
-        }
-        if (lst.isSymbolicLink()) {
-            return c.json({ error: "symlink_forbidden", leadId }, 403);
-        }
-        // Parent-directory symlink escape (e.g. the lead directory itself is a
-        // junction pointing outside leadsRoot) — checked BEFORE reading.
-        const containment = realPathGuard(leadsRoot, absolute);
-        if (!containment.ok) {
-            return c.json({ error: "path_traversal", detail: containment.reason }, 400);
-        }
-        let raw;
-        try {
-            raw = readFileSync(absolute, "utf8");
-        }
-        catch (err) {
-            const code = err?.code;
-            if (code === "ENOENT") {
-                const body = { leadId, measured: false };
-                return c.json(body, 200);
-            }
-            return c.json({ error: "usage_read_failed", detail: String(err).slice(0, 200) }, 500);
+    if (!LEAD_ID_RE.test(leadId)) {
+        return { status: 400, body: { error: "invalid_lead_id", leadId } };
+    }
+    const absolute = path.join(leadsRoot, leadId, "usage.json");
+    // Existence + symlink check BEFORE any read — a missing lead directory
+    // (steady state pre-producer) is `measured: false`, not an error; a
+    // symlinked final component is rejected before it is ever opened.
+    let lst;
+    try {
+        lst = lstat(absolute);
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT") {
+            return { status: 200, body: { leadId, measured: false } };
         }
-        let parsed;
-        try {
-            parsed = JSON.parse(raw);
-        }
-        catch {
-            return c.json({ error: "usage_invalid", leadId }, 502);
-        }
-        if (!isValidUsagePayload(parsed)) {
-            return c.json({ error: "usage_invalid", leadId }, 502);
+        return {
+            status: 500,
+            body: { error: "usage_read_failed", detail: String(err).slice(0, 200) },
+        };
+    }
+    if (lst.isSymbolicLink()) {
+        return { status: 403, body: { error: "symlink_forbidden", leadId } };
+    }
+    // Parent-directory symlink escape (e.g. the lead directory itself is a
+    // junction pointing outside leadsRoot) — checked BEFORE reading.
+    const containment = realPathGuard(leadsRoot, absolute);
+    if (!containment.ok) {
+        return { status: 400, body: { error: "path_traversal", detail: containment.reason } };
+    }
+    let raw;
+    try {
+        raw = readFileSync(absolute, "utf8");
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT") {
+            return { status: 200, body: { leadId, measured: false } };
         }
-        const body = {
+        return {
+            status: 500,
+            body: { error: "usage_read_failed", detail: String(err).slice(0, 200) },
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { status: 502, body: { error: "usage_invalid", leadId } };
+    }
+    if (!isValidUsagePayload(parsed)) {
+        return { status: 502, body: { error: "usage_invalid", leadId } };
+    }
+    return {
+        status: 200,
+        body: {
             leadId,
             measured: true,
             costUsd: parsed.costUsd,
             runCount: parsed.runCount,
             windowDays: parsed.windowDays,
             asOf: parsed.asOf,
-        };
-        return c.json(body, 200);
+        },
+    };
+}
+export function registerUsageRoute(app, deps) {
+    app.get("/api/external/org/leads/:leadId/usage", async (c) => {
+        const result = usageCore(deps, c.req.param("leadId"));
+        return c.json(result.body, result.status);
     });
 }
 //# sourceMappingURL=usage.js.map

package/server/dist/external/org/usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAa3C,SAAS,mBAAmB,CAC1B,CAAU;IAEV,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC;QACf,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,UAAU,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAClB,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAoB;IAChE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAE5D,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAkB;YAC1B,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAG3C,SAAS,mBAAmB,CAC1B,CAAU;IAEV,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC;QACf,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,UAAU,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAClB,CAAC;AACJ,CAAC;AAaD,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,MAAc;IAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAE5D,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAoB;IAChE,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/routes.d.ts

@@ -4,7 +4,7 @@ import { type RunConfigReadResult } from "../core/run-config-reader.js";
 import type { ComplianceReadResult } from "../core/compliance-reader.js";
 import { SessionWatcher } from "../core/session-watcher.js";
 import { SdkSessionsStore } from "../core/sdk-sessions-store.js";
-import { type OrgRouterDeps } from "./org/routes.js";
+import type { OrgRouterDeps } from "./org/routes.js";
 export { FILE_MAX_BYTES, MIME_BY_EXTENSION, sanitizeContentDispositionFilename, } from "./file/_helpers.js";
 export { clearInboxDeriveCache } from "./inbox/_cache.js";
 export type { ExternalRouteProjectView } from "./_shared/helpers.js";

package/server/dist/external/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAmBjE,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAQtE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IAC7D;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;OAUG;IACH,UAAU,EAAE;QACV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7B;;;;WAIG;QACH,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C;;;;;;WAMG;QACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KAClD,CAAC;IACF;;mEAE+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;CAC3D,8EA0JA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAmBjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AASrD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IAC7D;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;OAUG;IACH,UAAU,EAAE;QACV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7B;;;;WAIG;QACH,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C;;;;;;WAMG;QACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KAClD,CAAC;IACF;;mEAE+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;CAC3D,8EAsJA"}

package/server/dist/external/routes.js

@@ -48,7 +48,7 @@ import { createTasksRouter } from "./tasks/routes.js";
 import { createLaunchRouter } from "./launch/routes.js";
 import { createPrStatusRouter } from "./pr-status/routes.js";
 import { createDesignReviewRouter } from "./design-review/routes.js";
-import { createOrgRouter } from "./org/routes.js";
+import { mountOrgRouters } from "./org/mount.js";
 // Back-compat re-exports — 14+ sibling test files + downstream consumers
 // import these from `./routes.js` directly. Sources of truth post-C2:
 //   - ./file/_helpers.ts          (FILE_MAX_BYTES, MIME_BY_EXTENSION,
@@ -147,16 +147,15 @@ export function createExternalRoutes(args) {
     // shell:false (iterate-2026-05-30-pr-card-status). Stateless; uses the
     // default gh runner + in-memory TTL cache from core/pr-status.ts.
     app.route("/", createPrStatusRouter());
-    // FR-04.38 — own host-allowlist + shared-secret gate (see org/routes.ts).
-    if (honoHost && leadsRoot) {
-        app.route("/", createOrgRouter({
-            honoHost,
-            leadsRoot,
-            leadsRouteSecret,
-            lstatSync: orgLstatSync,
-            withDecisionsLock: orgWithDecisionsLock,
-        }));
-    }
+    // FR-04.38 — secret-gated `/api/external/org/*` + plain `/api/org/*` proxy
+    // (see org/mount.ts for why both are composed from one call site).
+    mountOrgRouters(app, {
+        honoHost,
+        leadsRoot,
+        leadsRouteSecret,
+        orgLstatSync,
+        orgWithDecisionsLock,
+    });
     return app;
 }
 //# sourceMappingURL=routes.js.map

package/server/dist/external/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACL,aAAa,IAAI,oBAAoB,GAEtC,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAsB,MAAM,iBAAiB,CAAC;AAEtE,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,0DAA0D;AAC1D,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,MAAM,UAAU,oBAAoB,CAAC,IA6FpC;IACC,MAAM,EACJ,KAAK,EACL,OAAO,EACP,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,WAAW,EAAE,mBAAmB,EAChC,yBAAyB,EACzB,uBAAuB,EACvB,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACrB,GAAG,IAAI,CAAC;IACT,uEAAuE;IACvE,qEAAqE;IACrE,4DAA4D;IAC5D,mEAAmE;IACnE,oCAAoC;IACpC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,mBAAmB;QACnB,CAAC,CAAC,IAAY,EAAE,EAAE,CAChB,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,CAA0B,CAAC,CAAC;IAClE,MAAM,eAAe,GACnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,4EAA4E;IAC5E,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,iBAAiB,CAAC;QAChB,KAAK;QACL,OAAO;QACP,UAAU;QACV,kBAAkB;QAClB,cAAc;QACd,yBAAyB;QACzB,uBAAuB;KACxB,CAAC,CACH,CAAC;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,GAAG,CAAC,KAAK,CACP,GAAG,EACH,kBAAkB,CAAC;QACjB,KAAK;QACL,UAAU;QACV,cAAc;QACd,eAAe;QACf,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAChC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;KAC5C,CAAC,CACH,CAAC;IACF,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACvE,wEAAwE;IACxE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,uEAAuE;IACvE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,qBAAqB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC1E,CAAC;IACF,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC5D,2EAA2E;IAC3E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,sBAAsB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAChF,CAAC;IACF,0DAA0D;IAC1D,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CACP,GAAG,EACH,+BAA+B,CAAC;YAC9B,KAAK;YACL,OAAO;YACP,cAAc;YACd,aAAa,EAAE,eAAe;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,0EAA0E;IAC1E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,wBAAwB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC7E,CAAC;IACF,wEAAwE;IACxE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC;QAClB,cAAc;QACd,cAAc;QACd,WAAW,EAAE,eAAe;KAC7B,CAAC,CACH,CAAC;IACF,2DAA2D;IAC3D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,qEAAqE;IACrE,+DAA+D;IAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACtD,oEAAoE;IACpE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CACtE,CAAC;IACF,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAEvC,0EAA0E;IAC1E,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CACP,GAAG,EACH,eAAe,CAAC;YACd,QAAQ;YACR,SAAS;YACT,gBAAgB;YAChB,SAAS,EAAE,YAAY;YACvB,iBAAiB,EAAE,oBAAoB;SACxC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACL,aAAa,IAAI,oBAAoB,GAEtC,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,0DAA0D;AAC1D,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,MAAM,UAAU,oBAAoB,CAAC,IA6FpC;IACC,MAAM,EACJ,KAAK,EACL,OAAO,EACP,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,WAAW,EAAE,mBAAmB,EAChC,yBAAyB,EACzB,uBAAuB,EACvB,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACrB,GAAG,IAAI,CAAC;IACT,uEAAuE;IACvE,qEAAqE;IACrE,4DAA4D;IAC5D,mEAAmE;IACnE,oCAAoC;IACpC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,mBAAmB;QACnB,CAAC,CAAC,IAAY,EAAE,EAAE,CAChB,WAAW,CAAC,IAAI,EAAE,cAAc,EAAE,CAA0B,CAAC,CAAC;IAClE,MAAM,eAAe,GACnB,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,4EAA4E;IAC5E,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,iBAAiB,CAAC;QAChB,KAAK;QACL,OAAO;QACP,UAAU;QACV,kBAAkB;QAClB,cAAc;QACd,yBAAyB;QACzB,uBAAuB;KACxB,CAAC,CACH,CAAC;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,sDAAsD;IACtD,GAAG,CAAC,KAAK,CACP,GAAG,EACH,kBAAkB,CAAC;QACjB,KAAK;QACL,UAAU;QACV,cAAc;QACd,eAAe;QACf,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAChC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;KAC5C,CAAC,CACH,CAAC;IACF,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACvE,wEAAwE;IACxE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,uEAAuE;IACvE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,qBAAqB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC1E,CAAC;IACF,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC5D,2EAA2E;IAC3E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,sBAAsB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAChF,CAAC;IACF,0DAA0D;IAC1D,4EAA4E;IAC5E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CACP,GAAG,EACH,+BAA+B,CAAC;YAC9B,KAAK;YACL,OAAO;YACP,cAAc;YACd,aAAa,EAAE,eAAe;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,0EAA0E;IAC1E,GAAG,CAAC,KAAK,CACP,GAAG,EACH,wBAAwB,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAC7E,CAAC;IACF,wEAAwE;IACxE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC;QAClB,cAAc;QACd,cAAc;QACd,WAAW,EAAE,eAAe;KAC7B,CAAC,CACH,CAAC;IACF,2DAA2D;IAC3D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,qEAAqE;IACrE,+DAA+D;IAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACtD,oEAAoE;IACpE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,mBAAmB,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CACtE,CAAC;IACF,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAEvC,2EAA2E;IAC3E,mEAAmE;IACnE,eAAe,CAAC,GAAG,EAAE;QACnB,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,YAAY;QACZ,oBAAoB;KACrB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/grade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grade.d.ts","sourceRoot":"","sources":["../../src/routes/grade.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAMtE,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE;IACvC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/F,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,8EAqBA"}
+{"version":3,"file":"grade.d.ts","sourceRoot":"","sources":["../../src/routes/grade.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAMtE,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE;IACvC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/F,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,8EAqBA"}

package/server/dist/routes/grade.js

@@ -2,8 +2,9 @@
  * POST /api/wizard/grade — the read-only Grade door route (A09b, FR-01.53).
  *
  * Runs `shipwright-grade`'s `grade.py <target> --format json` via
- * `core/grade-runner.ts` (shell:false, fixed python binary, validated target)
- * and returns the plugin's real `ReportModel` — or an HONEST degraded state.
+ * `core/grade-runner.ts` (shell:false, `uv run --project <plugin-root>`,
+ * validated target) and returns the plugin's real `ReportModel` — or an
+ * HONEST degraded state.
  * Grade registers NO project and writes NOTHING (a bare grade is read-only);
  * this is a pure observer route, so it is POST only for a request body, never a
  * mutation.

package/server/dist/routes/grade.js.map

@@ -1 +1 @@
-{"version":3,"file":"grade.js","sourceRoot":"","sources":["../../src/routes/grade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAqB,MAAM,yBAAyB,CAAC;AAEtE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAKjC;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAEvC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"grade.js","sourceRoot":"","sources":["../../src/routes/grade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAqB,MAAM,yBAAyB,CAAC;AAEtE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAKjC;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAEvC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/org-leads-composite.d.ts

@@ -0,0 +1,21 @@
+import type { LeadRosterEntry, OrgChartLeadView } from "../types/org.js";
+import { type OrgFileReadDeps } from "../external/org/file-read.js";
+import type { LeadOrgInfoResult } from "../external/org/org-chart-lookup.js";
+export interface LeadRosterBuildDeps {
+    leadsRoot: string;
+    /** Shared shape across usage/last-run/beat-register — all three route
+     *  deps declare the same `(p) => { isSymbolicLink() }` test seam. */
+    lstatSync?: (p: string) => {
+        isSymbolicLink(): boolean;
+    };
+    openSync?: OrgFileReadDeps["openSync"];
+    now?: () => Date;
+}
+export declare function buildLeadRosterEntry(deps: LeadRosterBuildDeps, leadId: string, lead: OrgChartLeadView, 
+/**
+ * `org-chart.json` cron/reports_to lookup for THIS lead, resolved ONCE
+ * for the whole roster by the caller (`readAllLeadOrgInfo`) — see the
+ * iterate spec's "parses the chart once" composite-read requirement.
+ */
+orgInfo: LeadOrgInfoResult): LeadRosterEntry;
+//# sourceMappingURL=org-leads-composite.d.ts.map

package/server/dist/routes/org-leads-composite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-leads-composite.d.ts","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAIV,eAAe,EACf,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAI7E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;IACzD,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AA8DD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB;AACtB;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,GACzB,eAAe,CAYjB"}

package/server/dist/routes/org-leads-composite.js

@@ -0,0 +1,95 @@
+/*
+ * routes/org-leads-composite.ts — builds the `GET /api/org/leads` response
+ * body: one composite roster read over the whole `org-chart.json`, not an
+ * N+1 fan-out (iterate spec Design Notes, "One composite endpoint").
+ *
+ * Composes four already-extracted pure cores per lead (usage, last-run,
+ * beat-register health, charter.md read) plus the new `role-extract.ts`
+ * text rule. A per-figure read failure degrades that figure to its own
+ * `measured: false` / `not-measured` shape — it never fails the whole
+ * roster response, and it never fabricates a value.
+ */
+import { usageCore } from "../external/org/usage.js";
+import { lastRunCore } from "../external/org/last-run.js";
+import { beatRegisterHealthCore } from "../external/org/beat-register.js";
+import { orgFileReadCore } from "../external/org/file-read.js";
+import { cronIntervalMs } from "../external/org/cron.js";
+import { extractRoleSentence } from "../external/org/role-extract.js";
+function formatCadence(ms) {
+    const minutes = ms / 60_000;
+    if (minutes < 60) {
+        const n = Math.max(1, Math.round(minutes));
+        return `every ${n} min`;
+    }
+    const hours = minutes / 60;
+    if (hours < 24) {
+        const n = Math.max(1, Math.round(hours));
+        return `every ${n} hr${n === 1 ? "" : "s"}`;
+    }
+    const days = hours / 24;
+    const n = Math.max(1, Math.round(days));
+    return `every ${n} day${n === 1 ? "" : "s"}`;
+}
+function buildCadence(orgInfo, now) {
+    if (!orgInfo.ok)
+        return { measured: false };
+    const interval = cronIntervalMs(orgInfo.cron, now);
+    if (!interval.ok)
+        return { measured: false };
+    return { measured: true, text: formatCadence(interval.ms), cron: orgInfo.cron };
+}
+function buildNow(deps, leadId, orgInfo) {
+    const health = beatRegisterHealthCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
+    if (health.status !== 200)
+        return { state: "not-measured" };
+    if (health.body.status === "fault") {
+        return { state: "needs-attention", reason: "duplicate-session" };
+    }
+    if (health.body.status === "open") {
+        return { state: "running" };
+    }
+    // status === "clear" — Resting; text sourced from last-run. `orgInfo` was
+    // already resolved once for the whole composite request (see
+    // `buildLeadRosterEntry`) — passed through so `lastRunCore` doesn't
+    // re-parse `org-chart.json` per lead.
+    const lastRun = lastRunCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync, orgInfo }, leadId);
+    if (lastRun.status !== 200)
+        return { state: "not-measured" };
+    if (lastRun.body.measured === false) {
+        return { state: "resting", lastRun: { measured: false } };
+    }
+    return {
+        state: "resting",
+        lastRun: { measured: true, lastRunAt: lastRun.body.lastRunAt },
+    };
+}
+function buildRole(deps, leadId) {
+    const result = orgFileReadCore({ leadsRoot: deps.leadsRoot, openSync: deps.openSync }, `${leadId}/charter.md`);
+    if (result.status !== 200 || result.kind !== "file")
+        return { measured: false };
+    return extractRoleSentence(result.body.toString("utf8"));
+}
+function buildUsage(deps, leadId) {
+    const result = usageCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
+    return result.status === 200 ? result.body : { leadId, measured: false };
+}
+export function buildLeadRosterEntry(deps, leadId, lead, 
+/**
+ * `org-chart.json` cron/reports_to lookup for THIS lead, resolved ONCE
+ * for the whole roster by the caller (`readAllLeadOrgInfo`) — see the
+ * iterate spec's "parses the chart once" composite-read requirement.
+ */
+orgInfo) {
+    const now = deps.now ?? (() => new Date());
+    return {
+        leadId,
+        domain: lead.domain,
+        name: lead.name,
+        reportsTo: lead.reports_to,
+        role: buildRole(deps, leadId),
+        now: buildNow(deps, leadId, orgInfo),
+        cadence: buildCadence(orgInfo, now()),
+        usage: buildUsage(deps, leadId),
+    };
+}
+//# sourceMappingURL=org-leads-composite.js.map

package/server/dist/routes/org-leads-composite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-leads-composite.js","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAWtE,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAS;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB,EAAE,MAAc,EAAE,OAA0B;IACrF,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,6DAA6D;IAC7D,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,MAAc,EACd,IAAsB;AACtB;;;;GAIG;AACH,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QACpC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/server/dist/routes/org.d.ts

@@ -0,0 +1,15 @@
+import { Hono } from "hono";
+import { type OrgFileReadDeps } from "../external/org/file-read.js";
+import { type OrgFileWriteDeps } from "../external/org/file-write.js";
+export interface OrgApiRouterDeps {
+    leadsRoot: string;
+    /** The application's resolved bind host — passed through, never re-derived. */
+    honoHost: string;
+    /** Widest shared shape — file-write's core additionally needs `isFile()`. */
+    lstatSync?: OrgFileWriteDeps["lstatSync"];
+    openSync?: OrgFileReadDeps["openSync"];
+    withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
+    now?: () => Date;
+}
+export declare function createOrgApiRouter(deps: OrgApiRouterDeps): Hono;
+//# sourceMappingURL=org.d.ts.map

package/server/dist/routes/org.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAK1C,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAMxF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAgL/D"}

package/server/dist/routes/org.js

@@ -0,0 +1,198 @@
+/*
+ * routes/org.ts — the plain-surface `/api/org/*` proxy (iterate spec Design
+ * Notes, "Server-side proxy route"). Browser-facing mirror of
+ * `external/org/routes.ts`'s secret-gated family, sharing its extracted
+ * pure cores directly (no HTTP, no `registerXRoute` call — see "No
+ * route-mount collision").
+ *
+ * Only the shared-secret gate is dropped (the browser is a first-party
+ * caller of its own server); the host allowlist (`isAllowedOrgRouteHost`,
+ * FR-04.38 Auflage 1, a PO-decided control independent of the secret) is
+ * retained here as its own middleware, unchanged.
+ *
+ * Endpoints:
+ *   GET /api/org/org-chart              — wraps `orgChartCore` verbatim.
+ *   GET /api/org/leads                  — composite roster (see
+ *                                          `org-leads-composite.ts`).
+ *   GET /api/org/file?path=<relpath>    — read-only, the SAME six-kind
+ *     allowlist the gated route's GET uses (`resolveOrgAllowlistedTarget`);
+ *     unrestricted by kind, unlike the PUT below — a read carries none of
+ *     the unlocked-write risk AC-10 guards against. Backs the
+ *     shared-documents block (org-chart.json's sibling docs: conventions.md,
+ *     principal.md, decision_log.md) and the charter.md fresh-load-before-
+ *     edit round trip (`orgMarkdownFileApi.ts`).
+ *   PUT /api/org/leads/:leadId/charter  — the ONLY browser write this
+ *     iterate; refuses (403) anything that would resolve to a non-`charter`
+ *     kind (AC-10) — in particular `decision_log.md` /
+ *     `decisions-proposed.md`, which stay lock-guarded on the existing
+ *     gated route only.
+ */
+import { Hono } from "hono";
+import { isAllowedOrgRouteHost, resolveOrgAllowlistedTarget, LEAD_ID_RE } from "../external/org/_helpers.js";
+import { orgChartCore } from "../external/org/org-chart.js";
+import { readAllLeadOrgInfo } from "../external/org/org-chart-lookup.js";
+import { orgFileReadCore } from "../external/org/file-read.js";
+import { orgFileWriteCore } from "../external/org/file-write.js";
+import { buildLeadRosterEntry } from "./org-leads-composite.js";
+import { leadLearningsReadCore } from "../external/org/lead-doc-read.js";
+import { auditLogCore } from "../external/org/audit-log.js";
+export function createOrgApiRouter(deps) {
+    const app = new Hono();
+    const { leadsRoot, honoHost } = deps;
+    app.use("/api/org/*", async (c, next) => {
+        if (!isAllowedOrgRouteHost(honoHost)) {
+            return c.json({ error: "host_not_allowed" }, 403);
+        }
+        await next();
+    });
+    app.get("/api/org/org-chart", async (c) => {
+        const result = orgChartCore({ leadsRoot, lstatSync: deps.lstatSync });
+        return c.json(result.body, result.status);
+    });
+    app.get("/api/org/leads", async (c) => {
+        const chart = orgChartCore({ leadsRoot, lstatSync: deps.lstatSync });
+        if (chart.status !== 200) {
+            return c.json(chart.body, chart.status);
+        }
+        const buildDeps = {
+            leadsRoot,
+            lstatSync: deps.lstatSync,
+            openSync: deps.openSync,
+            now: deps.now,
+        };
+        // Code-review fix (doc accuracy): this handler still parses
+        // org-chart.json TWICE per request — once above via `orgChartCore` for
+        // the roster body (full-validates every lead, all-or-nothing), once
+        // here via `readAllLeadOrgInfo` for the per-lead cron/reports_to lookup
+        // (tolerant of a broken lead elsewhere in the file — see
+        // org-chart-lookup.ts's header for why that can't be the same parse).
+        // What the N+1 fix actually buys (iterate spec Design Notes, "One
+        // composite endpoint, not N+1") is AT MOST TWO parses per request,
+        // never one per lead — `forLead` below is an in-memory lookup over the
+        // one parse done here, not a re-read.
+        const orgInfoResult = readAllLeadOrgInfo(leadsRoot);
+        const orgInfoFor = (leadId) => orgInfoResult.ok ? orgInfoResult.forLead(leadId) : orgInfoResult;
+        const leads = Object.entries(chart.body.leads).map(([leadId, lead]) => buildLeadRosterEntry(buildDeps, leadId, lead, orgInfoFor(leadId)));
+        const body = { leads };
+        return c.json(body, 200);
+    });
+    app.get("/api/org/file", async (c) => {
+        const result = orgFileReadCore({ leadsRoot, openSync: deps.openSync }, c.req.query("path"));
+        if (result.kind === "json") {
+            return c.json(result.body, result.status);
+        }
+        for (const [key, value] of Object.entries(result.headers)) {
+            c.header(key, value);
+        }
+        return c.body(new Uint8Array(result.body), result.status);
+    });
+    // Code-review fix (LOW, consistency): the charter PUT route below refuses
+    // an unregistered leadId (the HIGH external-review fix); these two GET
+    // routes previously only shape-checked the leadId and never checked chart
+    // membership, so a stale/decommissioned lead directory left on disk would
+    // still serve through the browser-facing proxy. Same posture, both verbs.
+    //
+    // Doubt-review fix (HIGH, security): a shape-invalid RAW leadId must be
+    // REJECTED here, never deferred to a downstream core's own check. That
+    // deferral was safe for the two GET routes (their cores re-validate the
+    // SAME raw string), but not for the PUT charter route below:
+    // `resolveOrgAllowlistedTarget` derives its OWN, more lenient "leadId" by
+    // slicing the path.resolve()-normalized absolute path, and Hono decodes a
+    // `%2f` in the route param (but not in path segmentation) — so a raw
+    // leadId of `"ghost-lead/"` (from the URL `ghost-lead%2f`) normalizes to
+    // the clean, registered `"acme-lead"`-shaped target while `LEAD_ID_RE`
+    // (correctly) rejects the RAW string with its trailing slash. Deferring
+    // on that rejection let the write proceed with NO chart-membership check
+    // at all. `LEAD_ID_RE` matches only `[a-z0-9][a-z0-9-]*` — no `/` or `.`
+    // — so a raw string that passes it can never diverge from its own
+    // path-normalized form; rejecting here closes the whole class, not just
+    // the one PoC. Same 400 `invalid_lead_id` shape the GET routes' cores
+    // already used, so their existing 400 contract is unchanged.
+    function requireChartLead(c, leadId) {
+        if (!LEAD_ID_RE.test(leadId)) {
+            return { ok: false, response: c.json({ error: "invalid_lead_id" }, 400) };
+        }
+        const chart = orgChartCore({ leadsRoot, lstatSync: deps.lstatSync });
+        if (chart.status !== 200) {
+            return { ok: false, response: c.json(chart.body, chart.status) };
+        }
+        if (!Object.hasOwn(chart.body.leads, leadId)) {
+            return {
+                ok: false,
+                response: c.json({ error: "unknown_lead", detail: "leadId is not a chart entry" }, 403),
+            };
+        }
+        return { ok: true };
+    }
+    app.get("/api/org/leads/:leadId/learnings", async (c) => {
+        const leadId = c.req.param("leadId");
+        const gate = requireChartLead(c, leadId);
+        if (!gate.ok)
+            return gate.response;
+        const leadDeps = { leadsRoot, openSync: deps.openSync };
+        const result = leadLearningsReadCore(leadDeps, leadId);
+        if (result.kind === "json") {
+            return c.json(result.body, result.status);
+        }
+        for (const [key, value] of Object.entries(result.headers)) {
+            c.header(key, value);
+        }
+        return c.body(new Uint8Array(result.body), result.status);
+    });
+    app.get("/api/org/leads/:leadId/audit", async (c) => {
+        const leadId = c.req.param("leadId");
+        const gate = requireChartLead(c, leadId);
+        if (!gate.ok)
+            return gate.response;
+        const auditDeps = { leadsRoot, openSync: deps.openSync };
+        const beforeRaw = c.req.query("before");
+        const limitRaw = c.req.query("limit");
+        const result = auditLogCore(auditDeps, {
+            leadId,
+            before: beforeRaw !== undefined ? Number(beforeRaw) : undefined,
+            limit: limitRaw !== undefined ? Number(limitRaw) : undefined,
+        });
+        return c.json(result.body, result.status);
+    });
+    app.put("/api/org/leads/:leadId/charter", async (c) => {
+        const leadId = c.req.param("leadId");
+        const relpath = `${leadId}/charter.md`;
+        // AC-10: only a `charter` kind may pass through this browser-facing
+        // proxy — every other allowlisted kind (decision_log,
+        // decisions_proposed, conventions, principal, agents) is refused here,
+        // before ever reaching the write core.
+        const target = resolveOrgAllowlistedTarget(leadsRoot, relpath);
+        if (!target.ok) {
+            const status = target.reason === "not_allowlisted" ? 403 : 400;
+            const err = target.reason === "traversal" ? "path_traversal" : target.reason;
+            return c.json({ error: err, detail: target.reason }, status);
+        }
+        if (target.kind !== "charter") {
+            return c.json({ error: "not_allowlisted", detail: "only charter.md is writable here" }, 403);
+        }
+        // External-review fix (HIGH, security): the checks above only prove
+        // `leadId` is kebab-case-shaped and that its `charter.md` sits inside
+        // `leadsRoot` — they never confirm `leadId` is an actual chart entry.
+        // Any syntactically valid, never-registered lead id could otherwise
+        // have a charter.md written (and later read back through the same
+        // allowlist) with no corresponding org-chart.json entry. Require the
+        // lead to be a real roster member before the write proceeds.
+        const gate = requireChartLead(c, leadId);
+        if (!gate.ok)
+            return gate.response;
+        const writeDeps = {
+            leadsRoot,
+            lstatSync: deps.lstatSync,
+            withDecisionsLock: deps.withDecisionsLock,
+        };
+        const result = await orgFileWriteCore(writeDeps, {
+            relpath,
+            contentLengthHeader: c.req.header("content-length"),
+            body: await c.req.text(),
+            ifMatch: c.req.header("if-match"),
+        });
+        return c.json(result.body, result.status);
+    });
+    return app;
+}
+//# sourceMappingURL=org.js.map