@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/external/launch/branch-dispatch.d.ts

@@ -0,0 +1,15 @@
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import { type LaunchBranchResult, type ParsedLaunchBody } from "./_helpers.js";
+export interface BranchDispatchInput {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    runConfigReader: (projectPath: string) => Promise<RunConfigReadResult>;
+    jsonlExistsOnDisk?: (sessionUuid: string) => Promise<boolean>;
+    listTasks: () => ExternalTask[];
+    claimAuthorized: boolean;
+}
+export declare function dispatchLaunchBranches(input: BranchDispatchInput): Promise<LaunchBranchResult>;
+//# sourceMappingURL=branch-dispatch.d.ts.map

package/server/dist/external/launch/branch-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-dispatch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/branch-dispatch.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAOL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,SAAS,EAAE,MAAM,YAAY,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CA8E7B"}

package/server/dist/external/launch/branch-dispatch.js

@@ -0,0 +1,73 @@
+/*
+ * external/launch/branch-dispatch.ts — the precedence-ordered branch chain of
+ * POST /api/external/tasks/:id/launch, extracted from routes.ts so the route
+ * shell stays ≤ 300 LOC. Pure dispatch: no HTTP, no persistence.
+ *
+ * Precedence: phaseTaskRef → campaign → campaign-step → master-run →
+ * action-substitution → legacy fallback (always populates).
+ */
+import { applyPhaseTaskBranch, applyCampaignBranch, applyCampaignStepBranch, applyMasterRunBranch, applyActionSubstitutionBranch, applyLegacyFallbackBranch, } from "./_helpers.js";
+export async function dispatchLaunchBranches(input) {
+    const { task, parsed, getProjectById, runConfigReader, jsonlExistsOnDisk, listTasks, claimAuthorized, } = input;
+    // iterate-2026-05-18-fix-resume-description — a Resume click on a task
+    // whose Claude conversation was never established (no <uuid>.jsonl ever
+    // observed on disk → there is nothing to resume) is semantically a FRESH
+    // start. Route it through the substitution branch so the brief + slash
+    // command are injected exactly like a direct Launch. A genuine resume
+    // (JSONL on disk) stays on the description-free `--resume` shape.
+    const jsonlObserved = Boolean(task.firstJsonlObservedAt);
+    const effectivelyFreshStart = !parsed.resume || (!jsonlObserved && !parsed.dryRun);
+    // Branch 1 — phaseTaskRef (load-bearing security path).
+    let result = await applyPhaseTaskBranch({
+        task,
+        parsed,
+        getProjectById,
+        runConfigReader,
+        jsonlExistsOnDisk,
+    });
+    // Branch 2 — campaign autonomous launch (FR-01.34). Command built
+    // server-side from a validated slug; null when no campaignSlug / a resume.
+    result ??= applyCampaignBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+    });
+    // Branch 2.5 — single-sub-iterate launch (FR-01.36).
+    result ??= await applyCampaignStepBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+    });
+    // Branch 2.6 — single-session master launch (campaign
+    // webui-pipeline-convergence W2), gated on a readable single_session
+    // run_config; null when no masterRun / a resume.
+    result ??= await applyMasterRunBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+        runConfigReader,
+        listTasks,
+        jsonlExistsOnDisk,
+    });
+    // Branch 3 — action substitution.
+    result ??= applyActionSubstitutionBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+        claimAuthorized,
+    });
+    if (result)
+        return result;
+    // Branch 4 — legacy fallback. Always populates.
+    return applyLegacyFallbackBranch({
+        task,
+        parsed,
+        jsonlObserved,
+        claimAuthorized,
+    });
+}
+//# sourceMappingURL=branch-dispatch.js.map

package/server/dist/external/launch/branch-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-dispatch.js","sourceRoot":"","sources":["../../../src/external/launch/branch-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,yBAAyB,GAG1B,MAAM,eAAe,CAAC;AAYvB,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA0B;IAE1B,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,eAAe,GAChB,GAAG,KAAK,CAAC;IAEV,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,qBAAqB,GACzB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvD,wDAAwD;IACxD,IAAI,MAAM,GAA8B,MAAM,oBAAoB,CAAC;QACjE,IAAI;QACJ,MAAM;QACN,cAAc;QACd,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IAEH,kEAAkE;IAClE,2EAA2E;IAC3E,MAAM,KAAK,mBAAmB,CAAC;QAC7B,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;KACf,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,KAAK,MAAM,uBAAuB,CAAC;QACvC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;KACf,CAAC,CAAC;IAEH,sDAAsD;IACtD,qEAAqE;IACrE,iDAAiD;IACjD,MAAM,KAAK,MAAM,oBAAoB,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;QACd,eAAe;QACf,SAAS;QACT,iBAAiB;KAClB,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,KAAK,6BAA6B,CAAC;QACvC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;QACd,eAAe;KAChB,CAAC,CAAC;IAEH,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,gDAAgD;IAChD,OAAO,yBAAyB,CAAC;QAC/B,IAAI;QACJ,MAAM;QACN,aAAa;QACb,eAAe;KAChB,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/launch/campaign-step-branch.d.ts

@@ -1,12 +1,18 @@
+import { getReadiness } from "../../core/campaign-readiness.js";
 import { type ExternalTask } from "../../core/sdk-sessions-store.js";
 import type { ExternalRouteProjectView } from "../_shared/helpers.js";
 import type { ParsedLaunchBody } from "./parse-body.js";
 import type { LaunchBranchResult } from "./_helpers.js";
 export declare function isValidCampaignStepId(id: string): boolean;
+/** Serve a cached verdict up to this old; else wait (bounded) for a fresh one. */
+export declare const STEP_READINESS_MAX_AGE_MS = 15000;
+export declare const STEP_READINESS_MAX_WAIT_MS = 10000;
 export declare function applyCampaignStepBranch(args: {
     task: ExternalTask;
     parsed: ParsedLaunchBody;
     effectivelyFreshStart: boolean;
     getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
-}): LaunchBranchResult | null;
+    /** Test seam; production uses the real cached scheduler bridge. */
+    getReadinessFn?: typeof getReadiness;
+}): Promise<LaunchBranchResult | null>;
 //# sourceMappingURL=campaign-step-branch.d.ts.map

package/server/dist/external/launch/campaign-step-branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"campaign-step-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CAyE5B"}
+{"version":3,"file":"campaign-step-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;IACd,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,YAAY,CAAC;CACtC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA2IrC"}

package/server/dist/external/launch/campaign-step-branch.js

@@ -26,6 +26,7 @@ import { buildCopyCommands } from "../../core/launcher.js";
 import { resolveCampaignsDir, isWithin } from "../../core/campaign-paths.js";
 import { readCampaigns } from "../../core/campaign-store.js";
 import { readLoopAttachments } from "../../core/campaign-loop-state.js";
+import { getReadiness } from "../../core/campaign-readiness.js";
 import { isValidCampaignSlug } from "./campaign-branch.js";
 /**
  * Campaign step id = a Sub-Iterates table ID cell (e.g. `B0`, `C1`). Same
@@ -36,8 +37,12 @@ const CAMPAIGN_STEP_ID_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
 export function isValidCampaignStepId(id) {
     return CAMPAIGN_STEP_ID_PATTERN.test(id) && !id.includes("..");
 }
-export function applyCampaignStepBranch(args) {
+/** Serve a cached verdict up to this old; else wait (bounded) for a fresh one. */
+export const STEP_READINESS_MAX_AGE_MS = 15_000;
+export const STEP_READINESS_MAX_WAIT_MS = 10_000;
+export async function applyCampaignStepBranch(args) {
     const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    const readiness = args.getReadinessFn ?? getReadiness;
     const step = parsed.campaignStep;
     if (!step)
         return null; // not a campaign-step launch
@@ -92,6 +97,69 @@ export function applyCampaignStepBranch(args) {
     if (!found.specPath) {
         return { error: { error: "campaign_step_spec_missing", detail: step.stepId }, status: 400 };
     }
+    // Scheduler readiness (DAG view, card trg-e542ce03): refuse a hand-launch of
+    // a unit the monorepo scheduler reports BLOCKED. Bounded, and fail-OPEN when
+    // no verdict can be had (timeout / engine down / unrecognised) — but loudly:
+    // the response carries `readinessChecked:false`, never a silent skip. "No
+    // loop running" is not a failure: there is nothing to check against.
+    let readinessChecked;
+    let verdict;
+    try {
+        verdict = await readiness({ projectRoot: resolved.projectRoot, slug: step.slug }, undefined, { maxAgeMs: STEP_READINESS_MAX_AGE_MS, maxWaitMs: STEP_READINESS_MAX_WAIT_MS });
+    }
+    catch {
+        verdict = "timeout"; // a throwing check is "no verdict" — fail open, flagged
+    }
+    const freshVerdict = async () => {
+        try {
+            const v = await readiness({ projectRoot: resolved.projectRoot, slug: step.slug }, undefined, { maxAgeMs: 0, maxWaitMs: STEP_READINESS_MAX_WAIT_MS });
+            return v === "timeout" ? undefined : v;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    if (verdict === "timeout" || (verdict.status !== "report" && verdict.status !== "no-loop")) {
+        readinessChecked = false;
+    }
+    else if (verdict.status === "report") {
+        const units = verdict.report.units;
+        const lower = step.stepId.toLowerCase();
+        const unit = units.find((u) => u.id === step.stepId) ?? units.find((u) => u.id.toLowerCase() === lower);
+        // Only a real DEPENDENCY gate (a blocker naming another unit) refuses. A
+        // campaign-level gate (id:null — unsupported strategy, finalized loop) says
+        // the batch scheduler cannot run this campaign, not that this step must not
+        // be hand-run: launch, flagged unchecked.
+        const dependencyBlocked = unit?.state === "pending" && !unit.ready && unit.blocked_by.some((x) => x.id !== null);
+        if (!unit) {
+            readinessChecked = false;
+        }
+        else if (dependencyBlocked) {
+            // Never refuse on a cached "waiting": a dependency may have merged in
+            // the last few seconds. Recompute once, uncached, before saying no.
+            // Refuse ONLY on a fresh report that confirms the dependency blocker. No
+            // fresh answer (timeout / down / unit gone) fails open like everywhere else.
+            const fresh = await freshVerdict();
+            if (fresh?.status === "report") {
+                const freshUnit = fresh.report.units.find((u) => u.id === unit.id);
+                if (!freshUnit) {
+                    readinessChecked = false;
+                }
+                else if (freshUnit.state === "pending" && !freshUnit.ready) {
+                    if (freshUnit.blocked_by.some((x) => x.id !== null)) {
+                        return { error: { error: "campaign_step_not_ready", detail: step.stepId, blocked_by: freshUnit.blocked_by }, status: 409 };
+                    }
+                    readinessChecked = false; // only a campaign-level gate remains
+                }
+            }
+            else if (fresh?.status !== "no-loop") {
+                readinessChecked = false;
+            }
+        }
+        else if (unit.state === "pending" && !unit.ready) {
+            readinessChecked = false; // campaign-level gate only
+        }
+    }
     const commands = buildCopyCommands({
         sessionUuid: task.sessionUuid,
         cwd: task.cwd,
@@ -103,6 +171,6 @@ export function applyCampaignStepBranch(args) {
         state: "awaiting_external_start",
         launchedAt: new Date().toISOString(),
     };
-    return { commands, taskUpdate };
+    return readinessChecked === false ? { commands, taskUpdate, readinessChecked } : { commands, taskUpdate };
 }
 //# sourceMappingURL=campaign-step-branch.js.map

package/server/dist/external/launch/campaign-step-branch.js.map

@@ -1 +1 @@
-{"version":3,"file":"campaign-step-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAMxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IACrD,iFAAiF;IACjF,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,wBAAwB,KAAK,CAAC,QAAQ,GAAG;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"campaign-step-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAMhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAS7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IACrD,iFAAiF;IACjF,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,gBAAmC,CAAC;IACxC,IAAI,OAA8C,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,SAAS,CACvB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACtD,SAAS,EACT,EAAE,QAAQ,EAAE,yBAAyB,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAC/E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC,CAAC,wDAAwD;IAC/E,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,SAAS,CACvB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACtD,SAAS,EACT,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,CACvD,CAAC;YACF,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3F,gBAAgB,GAAG,KAAK,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QACxG,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACjH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,gBAAgB,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7B,sEAAsE;YACtE,oEAAoE;YACpE,yEAAyE;YACzE,6EAA6E;YAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,gBAAgB,GAAG,KAAK,CAAC;gBAC3B,CAAC;qBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;wBACpD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;oBAC7H,CAAC;oBACD,gBAAgB,GAAG,KAAK,CAAC,CAAC,qCAAqC;gBACjE,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvC,gBAAgB,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnD,gBAAgB,GAAG,KAAK,CAAC,CAAC,2BAA2B;QACvD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,wBAAwB,KAAK,CAAC,QAAQ,GAAG;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC5G,CAAC"}

package/server/dist/external/launch/claim-executor-permissions.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Exactly the toolset already granted to this codebase's own autonomous
+ * build/iterate/test agents (`shipwright-build:section-builder`,
+ * `shipwright-iterate:sub-iterate-runner`, `shipwright-test:test-runner` —
+ * see their `.claude/agents` tool lists): Read, Write, Edit, Bash, Glob,
+ * Grep. That precedent is the "considered allow-list" the originating card
+ * asks for, not a guess — it is the toolset this project already trusts an
+ * unattended agent doing iterate-shaped work with, on this same machine.
+ * `Task` (nested subagent spawn) and network tools (`WebFetch`,
+ * `WebSearch`) are deliberately excluded — none of those three agents
+ * carry them either.
+ */
+export declare const CLAIM_EXECUTOR_ALLOWED_TOOLS: readonly string[];
+/**
+ * Verified live (this module's own header comment): a tool named in
+ * `CLAIM_EXECUTOR_ALLOWED_TOOLS` runs with no prompt under this mode, and
+ * nothing outside that list is ever offered to prompt for. Matches
+ * leadwright's own `spawnLeadBeat` default (`lib/lead-spawn-types.ts`).
+ */
+export declare const CLAIM_EXECUTOR_PERMISSION_MODE = "dontAsk";
+export interface ClaimExecutorLaunchOverrides {
+    toolsAllowlist: readonly string[];
+    permissionMode: string;
+}
+/**
+ * The single call site every claim-authorized launch branch reads its
+ * perimeter from — one place a future operator changes what a claimed
+ * executor may do, per the originating card's requirement (d).
+ */
+export declare function claimExecutorLaunchOverrides(): ClaimExecutorLaunchOverrides;
+//# sourceMappingURL=claim-executor-permissions.d.ts.map

package/server/dist/external/launch/claim-executor-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-permissions.d.ts","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-permissions.ts"],"names":[],"mappings":"AAqEA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAOzD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,YAAY,CAAC;AAExD,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,4BAA4B,CAK3E"}

package/server/dist/external/launch/claim-executor-permissions.js

@@ -0,0 +1,107 @@
+/*
+ * external/launch/claim-executor-permissions.ts — FR-04.22 permission
+ * perimeter, single source of truth (iterate-2026-09-06-claim-launch-
+ * permission-perimeter).
+ *
+ * WHY THIS EXISTS: leadwright's stage-2 executor (`lib/lead-task-launch.ts`)
+ * runs the command this repo hands back via a real shell, detached and
+ * unref'd — that process outlives the daemon beat that started it and holds
+ * a shell, git, and the machine's credentials. Until this change, that
+ * command carried no `--permission-mode` and no tool allow-list: the
+ * full-authority form. leadwright's own spec (§8) names a residual risk —
+ * "a nested `claude` process with its own config writes out of P2" — that
+ * PRESUPPOSES a perimeter is armed and merely bypassable by a nested
+ * process. It was not armed at all; this module is that perimeter.
+ *
+ * THE MECHANISM, EMPIRICALLY VERIFIED against a real `claude` CLI 2.1.263
+ * (iterate-2026-09-06, this run — not assumed from --help text alone),
+ * exactly like leadwright verified its own beat-spawn mechanism
+ * (`lib/lead-spawn.ts`, iterate-2026-08-30-lead-spawn-contract):
+ *
+ *   - `--allowed-tools` alone does NOT restrict anything — leadwright
+ *     already proved this (5 permission modes probed, Bash executed every
+ *     time) and this run did not re-litigate it.
+ *   - `--tools <names>` (a comma-separated allow-list) DOES genuinely
+ *     restrict the model's function set: a live probe with
+ *     `--tools "Bash,Read,Edit,Write,Glob,Grep" --permission-mode dontAsk`
+ *     produced a session whose own `init` event lists exactly
+ *     `["Bash","Edit","Glob","Grep","Read","Write"]` — WebFetch/Task/
+ *     WebSearch/NotebookEdit are structurally ABSENT from the model's tool
+ *     set, not merely unapproved, so there is nothing to prompt for or
+ *     bypass. A second probe naming ONLY `Read,Edit` (no Bash) produced a
+ *     session that could not invoke Bash at all ("the Bash tool isn't
+ *     available in this session" — never attempted, never refused, simply
+ *     not offered).
+ *   - Deliberately WITHOUT `--restricted`: unlike leadwright's beat (which
+ *     never needs a shell), THIS executor's own legitimate job — running a
+ *     `/shipwright-iterate` — needs git, npm and file writes, i.e. Bash.
+ *     `--restricted`'s own `--help` text says it additionally ignores
+ *     user/project/local settings files and unloads every marketplace
+ *     plugin; a live probe confirmed this (`"plugins":[]` in the init event
+ *     under `--restricted`, vs. the project's full plugin roster loaded
+ *     normally under plain `--tools`). Shipwright's own hooks and plugins
+ *     (CLAUDE.md rule 9: `--plugin-dir` must be re-passed every launch) are
+ *     load-bearing for an iterate run, so `--restricted` would break the
+ *     very job this executor exists to do — the card's own point (e).
+ *     `--tools` alone, verified above, restricts the toolset just as
+ *     genuinely without that collateral damage.
+ *   - `--permission-mode dontAsk` (leadwright's own choice, re-verified
+ *     here): a tool named in `--tools` runs with NO prompt and NO entry in
+ *     `permission_denials`; nothing outside that list can be prompted for
+ *     in the first place, since the model never sees it as a function.
+ *     This resolves the specific worry the originating card names — "a run
+ *     acquires tools through the interactive dialog and looks compliant
+ *     anyway" — because there is no dialog to acquire anything through: the
+ *     detached, `stdio:"ignore"` executor process has no terminal to show
+ *     one on, and `dontAsk` never tries.
+ *
+ * WHAT THIS DOES NOT CLOSE (leadwright spec §8, still true): this is not OS
+ * sandboxing. `Task` is deliberately excluded from the allow-list below —
+ * matching leadwright's own Trap #4 finding that a nested `claude`/subagent
+ * process writes past any perimeter the same way a shell would — but `Bash`
+ * itself stays allowed (this executor's whole job needs it), and a `claude`
+ * binary invoked directly as a shell command is not a tool call this
+ * perimeter can see or stop. That is the residual risk leadwright's spec
+ * already names; this module makes the REST of the surface (WebFetch,
+ * Task-as-a-tool-call, an unbounded permission dialog) genuinely closed
+ * instead of merely undocumented.
+ */
+/**
+ * Exactly the toolset already granted to this codebase's own autonomous
+ * build/iterate/test agents (`shipwright-build:section-builder`,
+ * `shipwright-iterate:sub-iterate-runner`, `shipwright-test:test-runner` —
+ * see their `.claude/agents` tool lists): Read, Write, Edit, Bash, Glob,
+ * Grep. That precedent is the "considered allow-list" the originating card
+ * asks for, not a guess — it is the toolset this project already trusts an
+ * unattended agent doing iterate-shaped work with, on this same machine.
+ * `Task` (nested subagent spawn) and network tools (`WebFetch`,
+ * `WebSearch`) are deliberately excluded — none of those three agents
+ * carry them either.
+ */
+export const CLAIM_EXECUTOR_ALLOWED_TOOLS = [
+    "Bash",
+    "Read",
+    "Write",
+    "Edit",
+    "Glob",
+    "Grep",
+];
+/**
+ * Verified live (this module's own header comment): a tool named in
+ * `CLAIM_EXECUTOR_ALLOWED_TOOLS` runs with no prompt under this mode, and
+ * nothing outside that list is ever offered to prompt for. Matches
+ * leadwright's own `spawnLeadBeat` default (`lib/lead-spawn-types.ts`).
+ */
+export const CLAIM_EXECUTOR_PERMISSION_MODE = "dontAsk";
+/**
+ * The single call site every claim-authorized launch branch reads its
+ * perimeter from — one place a future operator changes what a claimed
+ * executor may do, per the originating card's requirement (d).
+ */
+export function claimExecutorLaunchOverrides() {
+    return {
+        toolsAllowlist: CLAIM_EXECUTOR_ALLOWED_TOOLS,
+        permissionMode: CLAIM_EXECUTOR_PERMISSION_MODE,
+    };
+}
+//# sourceMappingURL=claim-executor-permissions.js.map

package/server/dist/external/launch/claim-executor-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-permissions.js","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,SAAS,CAAC;AAOxD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,cAAc,EAAE,4BAA4B;QAC5C,cAAc,EAAE,8BAA8B;KAC/C,CAAC;AACJ,CAAC"}

package/server/dist/external/launch/claim-executor-template-arming.d.ts

@@ -0,0 +1,42 @@
+import { type CopyCommandForms } from "../../core/launcher.js";
+import type { ClaimExecutorLaunchOverrides } from "./claim-executor-permissions.js";
+export type ArmTemplateResult = {
+    ok: true;
+    commands: CopyCommandForms;
+} | {
+    ok: false;
+    detail: string;
+};
+/**
+ * True only when the RAW `command_template` (before any substitution)
+ * literally declares the `--session-id {task.uuid}` placeholder. This is
+ * the attacker-uncontrollable precondition for arming: `command_template`
+ * comes from project configuration (bundled defaults or a project's own
+ * `.shipwright-webui/actions.json`), never from the launch request body, so
+ * a caller cannot forge this check the way they could forge a coincidental
+ * match in the RENDERED output (see module header).
+ */
+export declare function templateDeclaresSessionIdAnchor(commandTemplate: string): boolean;
+/**
+ * Inserts `--tools <allow-list> --permission-mode <mode>` immediately after
+ * the substituted `--session-id <this task's sessionUuid>` token, on all
+ * three shell forms. The anchor is the task's own UUID rendered UNQUOTED —
+ * verified live (`actions-substitute.ts`'s `{task.uuid}` case returns the
+ * raw value, and its per-shell `q()` wrapping is applied only to
+ * user-derived placeholders, not this one; a debug probe against the real
+ * substitution engine confirmed `--session-id 11111111-...` with no quotes
+ * on posix, cmd AND powershell). The flags THEMSELVES still go through the
+ * matching shell's own quoter (`FLAG_QUOTERS`) — only the anchor is
+ * unquoted, matching the substitution engine's own convention for a
+ * server-generated UUID. The flags are inserted at the anchor's FIRST
+ * occurrence only when that occurrence is provably unique in the rendered
+ * string (checked via `indexOf` === `lastIndexOf`) — a custom project
+ * `command_template` can interpolate other placeholders (e.g.
+ * `{task.description}`) ahead of `{task.uuid}`, and a caller-supplied value
+ * that happens to contain this task's own UUID would otherwise let the
+ * flags land inside unrelated text while the real `--session-id` flag stays
+ * unarmed and the function still reported success. A non-unique anchor
+ * fails closed exactly like a missing one.
+ */
+export declare function armActionTemplatePermissionPerimeter(commands: CopyCommandForms, sessionUuid: string, overrides: ClaimExecutorLaunchOverrides): ArmTemplateResult;
+//# sourceMappingURL=claim-executor-template-arming.d.ts.map

package/server/dist/external/launch/claim-executor-template-arming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-template-arming.d.ts","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-template-arming.ts"],"names":[],"mappings":"AAkDA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAEpF,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAQlC;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAEhF;AAID;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,4BAA4B,GACtC,iBAAiB,CA8BnB"}

package/server/dist/external/launch/claim-executor-template-arming.js

@@ -0,0 +1,121 @@
+/*
+ * external/launch/claim-executor-template-arming.ts — FR-04.22 permission
+ * perimeter for the ACTION-TEMPLATE launch path (iterate-2026-09-06-claim-
+ * launch-permission-perimeter, Stage-1 review follow-up).
+ *
+ * `action-substitution-branch.ts` builds its command via
+ * `substitutePlaceholders(action.command_template, ...)` — a completely
+ * separate rendering path from `core/launcher.ts`'s `buildCopyCommands`/
+ * `LaunchArgs`, so `launcher-permission-flags.ts`'s argv-level flags never
+ * reach it. Spec review (Stage 1) proved this branch, not the legacy
+ * fallback, is the one leadwright's real tasks actually hit: leadwright's
+ * `CreateExternalTaskBody.actionId` is a REQUIRED field
+ * (`webui-client.ts`), persisted onto the task
+ * (`external/tasks/create.ts`), and `parse-body.ts`'s once-set-always-used
+ * contract means a claim-only `{ claimToken }` launch body still resolves
+ * `parsed.actionId` from that persisted value — so
+ * `applyActionSubstitutionBranch` fires, not the legacy fallback.
+ *
+ * `command_template` is a project-configurable string (bundled defaults in
+ * `config/default-actions.json`, or a project's own `actions.json` via
+ * `loadActionsForProject`) — NOT a fixed shape this module can trust
+ * blindly. Every bundled template starts `--session-id {task.uuid} ...`,
+ * but a custom project template is not guaranteed to. FAIL CLOSED: if the
+ * expected `--session-id <this task's own uuid>` anchor is not found,
+ * verbatim, in a rendered shell form, this module refuses to arm rather
+ * than silently returning an unrestricted command that LOOKS armed because
+ * the caller asked for arming (the exact "looks compliant, isn't" failure
+ * mode this whole card exists to close).
+ *
+ * Stage-3 doubt review found the rendered-output anchor search alone is not
+ * enough: a template that never emits the literal `--session-id {task.uuid}`
+ * placeholder at all could still coincidentally contain a UNIQUE occurrence
+ * of `--session-id <this task's uuid>` inside a substituted, caller-supplied
+ * placeholder (e.g. `{task.description?}`, settable in the very same
+ * claim-authorized launch body) — arming would then splice the flags inside
+ * quoted user text, not a real CLI flag, and still report success. Callers
+ * MUST call `templateDeclaresSessionIdAnchor` on the RAW (pre-substitution)
+ * `command_template` first and refuse to arm if it returns false — that
+ * check is immune to request-supplied content because the template comes
+ * from project configuration, not the launch body.
+ *
+ * The doubt review also found a template can independently re-declare
+ * `--tools`/`--permission-mode` via its own `{task.parameters?}` (a
+ * project's custom parameter schema may set `cli_flag: "--tools"` — the
+ * allowlist regex in `types/action-schema.ts` permits it), which could
+ * override or conflict with the injected flags depending on Claude CLI's
+ * duplicate-flag precedence. This module therefore also fails closed if the
+ * rendered command already contains either flag BEFORE arming.
+ */
+import { qPs, qCmd, qPosix } from "../../core/launcher.js";
+const FLAG_QUOTERS = {
+    powershell: qPs,
+    cmd: qCmd,
+    posix: qPosix,
+};
+/**
+ * True only when the RAW `command_template` (before any substitution)
+ * literally declares the `--session-id {task.uuid}` placeholder. This is
+ * the attacker-uncontrollable precondition for arming: `command_template`
+ * comes from project configuration (bundled defaults or a project's own
+ * `.shipwright-webui/actions.json`), never from the launch request body, so
+ * a caller cannot forge this check the way they could forge a coincidental
+ * match in the RENDERED output (see module header).
+ */
+export function templateDeclaresSessionIdAnchor(commandTemplate) {
+    return commandTemplate.includes("--session-id {task.uuid}");
+}
+const CONFLICTING_FLAG_PATTERN = /(^|\s)(--tools|--permission-mode)(\s|$)/;
+/**
+ * Inserts `--tools <allow-list> --permission-mode <mode>` immediately after
+ * the substituted `--session-id <this task's sessionUuid>` token, on all
+ * three shell forms. The anchor is the task's own UUID rendered UNQUOTED —
+ * verified live (`actions-substitute.ts`'s `{task.uuid}` case returns the
+ * raw value, and its per-shell `q()` wrapping is applied only to
+ * user-derived placeholders, not this one; a debug probe against the real
+ * substitution engine confirmed `--session-id 11111111-...` with no quotes
+ * on posix, cmd AND powershell). The flags THEMSELVES still go through the
+ * matching shell's own quoter (`FLAG_QUOTERS`) — only the anchor is
+ * unquoted, matching the substitution engine's own convention for a
+ * server-generated UUID. The flags are inserted at the anchor's FIRST
+ * occurrence only when that occurrence is provably unique in the rendered
+ * string (checked via `indexOf` === `lastIndexOf`) — a custom project
+ * `command_template` can interpolate other placeholders (e.g.
+ * `{task.description}`) ahead of `{task.uuid}`, and a caller-supplied value
+ * that happens to contain this task's own UUID would otherwise let the
+ * flags land inside unrelated text while the real `--session-id` flag stays
+ * unarmed and the function still reported success. A non-unique anchor
+ * fails closed exactly like a missing one.
+ */
+export function armActionTemplatePermissionPerimeter(commands, sessionUuid, overrides) {
+    const armed = {};
+    for (const shellForm of Object.keys(FLAG_QUOTERS)) {
+        const q = FLAG_QUOTERS[shellForm];
+        const marker = `--session-id ${sessionUuid}`;
+        const source = commands[shellForm];
+        const idx = source.indexOf(marker);
+        if (idx === -1) {
+            return {
+                ok: false,
+                detail: `no '--session-id ${sessionUuid}' anchor found in the ${shellForm} command form — cannot arm the permission perimeter`,
+            };
+        }
+        if (idx !== source.lastIndexOf(marker)) {
+            return {
+                ok: false,
+                detail: `'--session-id ${sessionUuid}' anchor is not unique in the ${shellForm} command form — cannot safely arm the permission perimeter`,
+            };
+        }
+        if (CONFLICTING_FLAG_PATTERN.test(source)) {
+            return {
+                ok: false,
+                detail: `the ${shellForm} command form already contains a --tools or --permission-mode flag before arming — refusing to risk a duplicate/conflicting flag`,
+            };
+        }
+        const insertAt = idx + marker.length;
+        const flags = ` --tools ${q(overrides.toolsAllowlist.join(","))} --permission-mode ${q(overrides.permissionMode)}`;
+        armed[shellForm] = source.slice(0, insertAt) + flags + source.slice(insertAt);
+    }
+    return { ok: true, commands: armed };
+}
+//# sourceMappingURL=claim-executor-template-arming.js.map

package/server/dist/external/launch/claim-executor-template-arming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-template-arming.js","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-template-arming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAyB,MAAM,wBAAwB,CAAC;AAOlF,MAAM,YAAY,GAA0D;IAC1E,UAAU,EAAE,GAAG;IACf,GAAG,EAAE,IAAI;IACT,KAAK,EAAE,MAAM;CACd,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAAC,eAAuB;IACrE,OAAO,eAAe,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,wBAAwB,GAAG,yCAAyC,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oCAAoC,CAClD,QAA0B,EAC1B,WAAmB,EACnB,SAAuC;IAEvC,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAkC,EAAE,CAAC;QACnF,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,oBAAoB,WAAW,yBAAyB,SAAS,qDAAqD;aAC/H,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB,WAAW,iCAAiC,SAAS,4DAA4D;aAC3I,CAAC;QACJ,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,OAAO,SAAS,kIAAkI;aAC3J,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC;QACnH,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAyB,EAAE,CAAC;AAC3D,CAAC"}

package/server/dist/external/launch/claim-holder-gate.d.ts

@@ -0,0 +1,51 @@
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+/**
+ * How long a claim stays launch-eligible after `claimedAt`. §10.9 left the
+ * VALUE unfixed ("a named limit"), justified only against one criterion: a
+ * holder who restarts LATE must still succeed, never be locked out (AC
+ * FR-04.22) — the fix for a stale token is re-claiming, not an indefinite
+ * grant. 24h is generous enough to survive a sleeping laptop, a slow beat,
+ * or an overnight gap between claim and restart, while still bounding how
+ * long an abandoned claim stays replayable.
+ */
+export declare const CLAIM_LAUNCH_WINDOW_MS: number;
+/**
+ * Doubt-review finding (iterate-2026-09-03-claim-holder-launch): `withinWindow`
+ * originally only bounded the claim's age from ABOVE, so a well-formed but
+ * FUTURE-dated `claimedAt` (clock skew between the webui host and the daemon
+ * host, or a daemon bug) made `Date.now() - claimedAtMs` negative — always
+ * `<= CLAIM_LAUNCH_WINDOW_MS`, reading as "very fresh" instead of being
+ * rejected. `sdk-sessions-validate.ts` does no date-sanity check on
+ * `claimedAt`, so this module is the only place that can catch it. A small
+ * tolerance (rather than rejecting any future timestamp outright) survives
+ * ordinary clock drift between two processes' wall clocks without reopening
+ * the gap: anything beyond it is refused as not-within-window, same as an
+ * expired claim.
+ */
+export declare const CLAIM_CLOCK_SKEW_TOLERANCE_MS: number;
+export type ClaimGateResult = {
+    allowed: true;
+    claimAuthorized: boolean;
+} | {
+    allowed: false;
+    error: Record<string, unknown>;
+};
+/**
+ * Decide whether a launch request may proceed against a (possibly) claimed
+ * task. Returns `{ allowed: true }` when there is no active claim, or when
+ * `bodyClaimToken` matches the task's current `claimToken` AND the claim is
+ * within the launch window. Otherwise refuses with the `task_claimed`
+ * envelope — `claimExpired: true` distinguishes "right token, too old" from
+ * a foreign/absent token (trap: an expired claim must read differently from
+ * someone else's).
+ *
+ * `claimAuthorized` (iterate-2026-09-06-claim-launch-permission-perimeter,
+ * FR-04.22 follow-up) distinguishes the TWO shapes of `allowed: true`: "no
+ * claim was ever on record" (an ordinary human/manual launch) vs. "the
+ * caller proved it holds the CURRENT, unexpired claim" (leadwright's stage-2
+ * executor). The launch route uses this — not a second, independently
+ * re-derived token-match check — to decide whether to arm the executor's
+ * permission perimeter, so the two conditions can never drift apart.
+ */
+export declare function checkClaimHolderGate(task: ExternalTask, bodyClaimToken: string | undefined): ClaimGateResult;
+//# sourceMappingURL=claim-holder-gate.d.ts.map

package/server/dist/external/launch/claim-holder-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-holder-gate.d.ts","sourceRoot":"","sources":["../../../src/external/launch/claim-holder-gate.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAAsB,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAAgB,CAAC;AAE3D,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,YAAY,EAClB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,eAAe,CAqCjB"}