@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/external/org/org-chart-full-read.js

@@ -0,0 +1,58 @@
+/*
+ * org-chart-full-read.ts — a FULL-fidelity read of org-chart.json, distinct
+ * from org-chart.ts's parseOrgChart (deliberately narrow 5-field mirror for
+ * the existing GET /org-chart route — see types/org.ts's header comment:
+ * "widening it is explicitly out of scope"). The verdict/commit routes
+ * (iterate-2026-09-07-leadwright-setup-wizard, W14) need every
+ * PreflightLead field to build a correct merged proposal — trusting the
+ * on-disk shape lightly (this file is only ever written by this app's own
+ * lock-protected commit route or by leadwright's daemon, both already
+ * validated at their own write time) rather than re-validating leadwright's
+ * full schema here ("never re-implement leadwright's validation").
+ */
+import { readFileSync, lstatSync } from "node:fs";
+import path from "node:path";
+export function readOrgChartFull(deps) {
+    const { leadsRoot } = deps;
+    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
+    const target = path.join(leadsRoot, "org-chart.json");
+    try {
+        if (lstat(target).isSymbolicLink()) {
+            return { status: 403, body: { error: "symlink_forbidden" } };
+        }
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code !== "ENOENT") {
+            return { status: 500, body: { error: "org_chart_stat_failed", detail: String(err).slice(0, 200) } };
+        }
+    }
+    let raw;
+    try {
+        raw = readFileSync(target, "utf8");
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT") {
+            return { status: 404, body: { error: "org_chart_missing" } };
+        }
+        return { status: 500, body: { error: "org_chart_read_failed", detail: String(err).slice(0, 200) } };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { status: 502, body: { error: "org_chart_invalid" } };
+    }
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        Array.isArray(parsed) ||
+        typeof parsed.leads !== "object" ||
+        parsed.leads === null ||
+        Array.isArray(parsed.leads)) {
+        return { status: 502, body: { error: "org_chart_invalid" } };
+    }
+    return { status: 200, body: parsed };
+}
+//# sourceMappingURL=org-chart-full-read.js.map

package/server/dist/external/org/org-chart-full-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-chart-full-read.js","sourceRoot":"","sources":["../../../src/external/org/org-chart-full-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACtG,CAAC;IACH,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACtG,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,OAAQ,MAA8B,CAAC,KAAK,KAAK,QAAQ;QACxD,MAA8B,CAAC,KAAK,KAAK,IAAI;QAC9C,KAAK,CAAC,OAAO,CAAE,MAA8B,CAAC,KAAK,CAAC,EACpD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAA2B,EAAE,CAAC;AAC5D,CAAC"}

package/server/dist/external/org/org-file-lock.d.ts

@@ -0,0 +1,41 @@
+export declare class OrgFileSymlinkEscapeError extends Error {
+    readonly path: string;
+    constructor(path: string);
+}
+export interface OrgFileLockOptions {
+    /** When true, never create the target — a missing file throws ENOENT
+     *  from lockfile.lock() itself (its own realpath resolution), which the
+     *  caller interprets as "not there" (e.g. daemon-config.json's
+     *  "show a copy-paste fragment instead" branch). Default false: the
+     *  target is created empty (wx-flag exclusive create) if missing, same
+     *  as decisions-lock.ts's ensureFile. */
+    mustExist?: boolean;
+    /** Test seam, mirrors DecisionsLockDeps.lstatSync. */
+    lstatSync?: (path: string) => {
+        isSymbolicLink(): boolean;
+    };
+}
+export interface OrgFileLockContext {
+    absolutePath: string;
+    read(): string;
+    write(content: string): void;
+}
+export type LstatFn = (path: string) => {
+    isSymbolicLink(): boolean;
+};
+/** Exported so `commit-writes.ts`'s charter.md write (deliberately outside
+ *  `withOrgFileLock` — no lock, see that file's header comment) can reuse
+ *  the SAME check rather than re-implementing it — code-review fix: two
+ *  independent copies of this exact logic is the drift risk this file's
+ *  own header comment warns about. */
+export declare function assertNotSymlink(absolutePath: string, lstat: LstatFn): void;
+/**
+ * Acquire an exclusive lock on `absolutePath` (same `stale`/`realpath`
+ * contract as `claimRecordLockOptions` — `../../core/claim-record-lock.js`),
+ * run `fn` inside the critical section, then release. Symlink-checked
+ * before AND immediately after acquisition (closes the TOCTOU window in
+ * `lockfile.lock()`'s own retry backoff — same reasoning as
+ * decisions-lock.ts's `withDecisionsLock`).
+ */
+export declare function withOrgFileLock<T>(absolutePath: string, options: OrgFileLockOptions, fn: (ctx: OrgFileLockContext) => Promise<T> | T): Promise<T>;
+//# sourceMappingURL=org-file-lock.d.ts.map

package/server/dist/external/org/org-file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-file-lock.d.ts","sourceRoot":"","sources":["../../../src/external/org/org-file-lock.ts"],"names":[],"mappings":"AAoBA,qBAAa,yBAA0B,SAAQ,KAAK;aACtB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAGzC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;6CAKyC;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sDAAsD;IACtD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,MAAM,CAAC;IACf,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK;IAAE,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC;AAEtE;;;;sCAIsC;AACtC,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAW3E;AAeD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,kBAAkB,EAC3B,EAAE,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC9C,OAAO,CAAC,CAAC,CAAC,CAyBZ"}

package/server/dist/external/org/org-file-lock.js

@@ -0,0 +1,90 @@
+/*
+ * org-file-lock.ts — generic single-target-file lock, structurally copied
+ * from external/org/decisions-lock.ts's withDecisionsLock (which is
+ * hardcoded to decisions-proposed.md/decision_log.md, so not directly
+ * reusable) for the new leadwright-setup-wizard write routes
+ * (iterate-2026-09-07-leadwright-setup-wizard, W14): org-chart.json,
+ * daemon-config.json, and a new <leadId>/charter.md — three independent
+ * files, three independent lock acquisitions, never a combined lock.
+ *
+ * `mustExist` — see the module-level test file header: the existence check
+ * for daemon-config.json happens via proper-lockfile's own realpath ENOENT
+ * on `lock()` itself (no ensureFile, no prior existsSync), so there is no
+ * TOCTOU window between "check it's there" and "lock it".
+ */
+import * as lockfile from "proper-lockfile";
+import { existsSync, mkdirSync, writeFileSync, readFileSync, lstatSync } from "node:fs";
+import { dirname } from "node:path";
+import { claimRecordLockOptions } from "../../core/claim-record-lock.js";
+export class OrgFileSymlinkEscapeError extends Error {
+    path;
+    constructor(path) {
+        super(`refusing to lock/write through a symlink: ${path}`);
+        this.path = path;
+    }
+}
+/** Exported so `commit-writes.ts`'s charter.md write (deliberately outside
+ *  `withOrgFileLock` — no lock, see that file's header comment) can reuse
+ *  the SAME check rather than re-implementing it — code-review fix: two
+ *  independent copies of this exact logic is the drift risk this file's
+ *  own header comment warns about. */
+export function assertNotSymlink(absolutePath, lstat) {
+    let lst;
+    try {
+        lst = lstat(absolutePath);
+    }
+    catch (err) {
+        if (err?.code === "ENOENT")
+            return;
+        throw err;
+    }
+    if (lst.isSymbolicLink()) {
+        throw new OrgFileSymlinkEscapeError(absolutePath);
+    }
+}
+/** Same wx-flag exclusive-create discipline as decisions-lock.ts's
+ *  ensureFile — never existsSync+writeFileSync (a dangling symlink would
+ *  read as absent and get written through). */
+function ensureFile(absolutePath) {
+    const dir = dirname(absolutePath);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    try {
+        writeFileSync(absolutePath, "", { flag: "wx" });
+    }
+    catch (err) {
+        if (err?.code !== "EEXIST")
+            throw err;
+    }
+}
+/**
+ * Acquire an exclusive lock on `absolutePath` (same `stale`/`realpath`
+ * contract as `claimRecordLockOptions` — `../../core/claim-record-lock.js`),
+ * run `fn` inside the critical section, then release. Symlink-checked
+ * before AND immediately after acquisition (closes the TOCTOU window in
+ * `lockfile.lock()`'s own retry backoff — same reasoning as
+ * decisions-lock.ts's `withDecisionsLock`).
+ */
+export async function withOrgFileLock(absolutePath, options, fn) {
+    const lstat = options.lstatSync ?? ((p) => lstatSync(p));
+    if (!options.mustExist) {
+        ensureFile(absolutePath);
+    }
+    assertNotSymlink(absolutePath, lstat);
+    const release = await lockfile.lock(absolutePath, claimRecordLockOptions({
+        retries: { retries: 8, minTimeout: 50, maxTimeout: 500, factor: 2 },
+    }));
+    try {
+        assertNotSymlink(absolutePath, lstat);
+        const ctx = {
+            absolutePath,
+            read: () => readFileSync(absolutePath, "utf8"),
+            write: (content) => writeFileSync(absolutePath, content, "utf8"),
+        };
+        return await fn(ctx);
+    }
+    finally {
+        await release();
+    }
+}
+//# sourceMappingURL=org-file-lock.js.map

package/server/dist/external/org/org-file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-file-lock.js","sourceRoot":"","sources":["../../../src/external/org/org-file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACtB;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QADjC,SAAI,GAAJ,IAAI,CAAQ;IAExC,CAAC;CACF;AAsBD;;;;sCAIsC;AACtC,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,KAAc;IACnE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9D,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;+CAE+C;AAC/C,SAAS,UAAU,CAAC,YAAoB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,OAA2B,EAC3B,EAA+C;IAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,UAAU,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IACD,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CACjC,YAAY,EACZ,sBAAsB,CAAC;QACrB,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;KACpE,CAAC,CACH,CAAC;IACF,IAAI,CAAC;QACH,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAuB;YAC9B,YAAY;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC;YAC9C,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;SACzE,CAAC;QACF,OAAO,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC"}

package/server/dist/external/org/routes.d.ts

@@ -1,5 +1,6 @@
 import { Hono } from "hono";
 import { type OrgFileWriteDeps } from "./file-write.js";
+import { type TaskDomainLookup } from "./domains.js";
 export interface OrgRouterDeps {
     leadsRoot: string;
     /** The application's resolved bind host — passed through, never re-derived. */
@@ -7,6 +8,15 @@ export interface OrgRouterDeps {
     leadsRouteSecret: string | undefined;
     lstatSync?: OrgFileWriteDeps["lstatSync"];
     withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
+    /** iterate-2026-09-07-leadwright-setup-wizard (W14) — local checkout of
+     *  leadwright, for the verdict/commit routes' `check-setup.ts` subprocess.
+     *  Unset ⇒ those two routes fail closed with 503 leadwright_not_configured. */
+    leadwrightCheckoutRoot: string | undefined;
+    /** The value written into a freshly-templated daemon-config.json's
+     *  `webuiBaseUrl` field when no daemon-config.json exists yet. */
+    webuiBaseUrl: string;
+    /** GET /api/external/org/domains task-store aggregation. */
+    store?: TaskDomainLookup;
 }
 export declare function createOrgRouter(deps: OrgRouterDeps): Hono;
 //# sourceMappingURL=routes.d.ts.map

package/server/dist/external/org/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAW9E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;CAC3D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA6CzD"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAU9E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAO3E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D;;mFAE+E;IAC/E,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C;sEACkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA6DzD"}

package/server/dist/external/org/routes.js

@@ -43,8 +43,13 @@ import { registerOrgChartRoute } from "./org-chart.js";
 import { registerUsageRoute } from "./usage.js";
 import { registerCountersignRoute } from "./countersign.js";
 import { registerLastRunRoute } from "./last-run.js";
-import { registerBeatRegisterHealthRoute } from "./beat-register.js";
+import { registerBeatRegisterHealthRoute } from "./beat-register-health.js";
 import { registerBeatRegisterReleaseRoute } from "./beat-register-release.js";
+import { registerDaemonConfigReadRoute } from "./daemon-config-read.js";
+import { registerVerdictRoute } from "./verdict.js";
+import { registerCommitRoute } from "./commit.js";
+import { registerDomainsRoute } from "./domains.js";
+const NO_TASKS = { list: () => [] };
 const SECRET_HEADER = "x-shipwright-leads-secret";
 const MIN_SECRET_LENGTH = 20;
 export function createOrgRouter(deps) {
@@ -85,6 +90,22 @@ export function createOrgRouter(deps) {
     registerLastRunRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
     registerBeatRegisterHealthRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
     registerBeatRegisterReleaseRoute(app, { leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync });
+    registerDaemonConfigReadRoute(app, {
+        leadsRoot: deps.leadsRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+        lstatSync: deps.lstatSync,
+    });
+    registerVerdictRoute(app, {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+    });
+    registerCommitRoute(app, {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+    });
+    registerDomainsRoute(app, { leadsRoot: deps.leadsRoot, store: deps.store ?? NO_TASKS });
     return app;
 }
 //# sourceMappingURL=routes.js.map

package/server/dist/external/org/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAW7B,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAE5C,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAClF,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,yBAAyB;YAChC,MAAM,EAAE,iDAAiD,iBAAiB,4CAA4C;SACvH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,mBAAmB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,GAAG,EAAE;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IACH,qBAAqB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,kBAAkB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,wBAAwB,CAAC,GAAG,EAAE;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,+BAA+B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/F,gCAAgC,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/org/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,cAAc,CAAC;AAE3E,MAAM,QAAQ,GAAqB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEtD,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAClD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAoB7B,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAE5C,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAClF,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,yBAAyB;YAChC,MAAM,EAAE,iDAAiD,iBAAiB,4CAA4C;SACvH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,mBAAmB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,oBAAoB,CAAC,GAAG,EAAE;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAC;IACH,qBAAqB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,kBAAkB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,wBAAwB,CAAC,GAAG,EAAE;QAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,+BAA+B,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/F,gCAAgC,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAChG,6BAA6B,CAAC,GAAG,EAAE;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,EAAE;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,mBAAmB,CAAC,GAAG,EAAE;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,oBAAoB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IAExF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/org/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,EAAc,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAE5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAC3C,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAsBxD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB;kFAC8E;IAC9E,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjG,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAwE/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAKxE"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAIjC,OAAO,EAAc,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAE5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAC3C,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA0CxD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB;kFAC8E;IAC9E,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjG,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CA4E/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAKxE"}

package/server/dist/external/org/usage.js

@@ -29,7 +29,7 @@ function isValidUsagePayload(v) {
     if (typeof v !== "object" || v === null)
         return false;
     const u = v;
-    return (typeof u.costUsd === "number" &&
+    const coreValid = typeof u.costUsd === "number" &&
         Number.isFinite(u.costUsd) &&
         u.costUsd >= 0 &&
         typeof u.runCount === "number" &&
@@ -39,7 +39,21 @@ function isValidUsagePayload(v) {
         Number.isFinite(u.windowDays) &&
         u.windowDays > 0 &&
         typeof u.asOf === "string" &&
-        u.asOf.length > 0);
+        u.asOf.length > 0;
+    if (!coreValid)
+        return false;
+    // Both fields are OPTIONAL on the wire — an older producer that omits them
+    // still validates — but a PRESENT value must be well-typed.
+    if (u.unpricedCallsTotal !== undefined &&
+        (typeof u.unpricedCallsTotal !== "number" ||
+            !Number.isInteger(u.unpricedCallsTotal) ||
+            u.unpricedCallsTotal < 0)) {
+        return false;
+    }
+    if (u.anyNotMeasured !== undefined && typeof u.anyNotMeasured !== "boolean") {
+        return false;
+    }
+    return true;
 }
 /** Pure core — shared by the secret-gated route and the plain-surface proxy. */
 export function usageCore(deps, leadId) {
@@ -108,6 +122,10 @@ export function usageCore(deps, leadId) {
             runCount: parsed.runCount,
             windowDays: parsed.windowDays,
             asOf: parsed.asOf,
+            ...(parsed.unpricedCallsTotal !== undefined
+                ? { unpricedCallsTotal: parsed.unpricedCallsTotal }
+                : {}),
+            ...(parsed.anyNotMeasured !== undefined ? { anyNotMeasured: parsed.anyNotMeasured } : {}),
         },
     };
 }

package/server/dist/external/org/usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAG3C,SAAS,mBAAmB,CAC1B,CAAU;IAEV,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC;QACf,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,UAAU,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAClB,CAAC;AACJ,CAAC;AAaD,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,MAAc;IAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAE5D,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAoB;IAChE,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/external/org/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAG3C,SAAS,mBAAmB,CAAC,CAAU;IAQrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,SAAS,GACb,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC,CAAC,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,QAAQ,IAAI,CAAC;QACf,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,UAAU,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7B,2EAA2E;IAC3E,4DAA4D;IAC5D,IACE,CAAC,CAAC,kBAAkB,KAAK,SAAS;QAClC,CAAC,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;YACvC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACvC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,MAAc;IAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAE5D,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE;gBACnD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAAoB;IAChE,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/verdict.d.ts

@@ -0,0 +1,57 @@
+import type { Hono } from "hono";
+import type { OrgChartFullReadResult } from "./org-chart-full-read.js";
+import type { DaemonConfigReadCoreResult } from "./daemon-config-read.js";
+import { type DaemonConfigAdditions } from "./leadwright-proposal-merge.js";
+import { runLeadwrightPreflight, type LeadwrightTransportResult } from "../../core/leadwright-preflight-transport.js";
+import type { PreflightLead } from "../../types/leadwright-preflight.js";
+import { type ReadOrgFileFn } from "./existing-charters-read.js";
+export interface VerdictRequestBody {
+    leadId: string;
+    lead: PreflightLead;
+    daemonConfigAdditions: DaemonConfigAdditions;
+    charterContent?: string;
+}
+export interface VerdictCoreDeps {
+    leadsRoot: string;
+    leadwrightCheckoutRoot: string | undefined;
+    webuiBaseUrl: string;
+    readOrgChartFullFn: (deps: {
+        leadsRoot: string;
+    }) => OrgChartFullReadResult;
+    daemonConfigReadFn: (deps: {
+        leadsRoot: string;
+        webuiBaseUrl: string;
+    }) => DaemonConfigReadCoreResult;
+    runLeadwrightPreflightFn: typeof runLeadwrightPreflight;
+    readOrgFileFn?: ReadOrgFileFn;
+}
+export type VerdictCoreResult = {
+    status: 200;
+    body: (LeadwrightTransportResult & {
+        proposalDigest: string;
+    });
+} | {
+    status: 400;
+    body: {
+        error: string;
+    };
+} | {
+    status: 403 | 404 | 500 | 502;
+    body: {
+        error: string;
+        detail?: string;
+    };
+} | {
+    status: 503;
+    body: {
+        error: "leadwright_not_configured";
+    };
+};
+export declare function verdictCore(deps: VerdictCoreDeps, requestBody: unknown): Promise<VerdictCoreResult>;
+export interface VerdictRouteDeps extends Omit<VerdictCoreDeps, "readOrgChartFullFn" | "daemonConfigReadFn" | "runLeadwrightPreflightFn"> {
+    readOrgChartFullFn?: VerdictCoreDeps["readOrgChartFullFn"];
+    daemonConfigReadFn?: VerdictCoreDeps["daemonConfigReadFn"];
+    runLeadwrightPreflightFn?: VerdictCoreDeps["runLeadwrightPreflightFn"];
+}
+export declare function registerVerdictRoute(app: Hono, deps: VerdictRouteDeps): void;
+//# sourceMappingURL=verdict.d.ts.map

package/server/dist/external/org/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../../src/external/org/verdict.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAA4C,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAAE,sBAAsB,EAAE,KAAK,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACtH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGzE,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE3F,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;IACpB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAoBD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,sBAAsB,CAAC;IAC5E,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,0BAA0B,CAAC;IACtG,wBAAwB,EAAE,OAAO,sBAAsB,CAAC;IACxD,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,CAAC,yBAAyB,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC/E;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,2BAA2B,CAAA;KAAE,CAAA;CAAE,CAAC;AAElE,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsCzG;AAED,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,eAAe,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,0BAA0B,CAAC;IACvI,kBAAkB,CAAC,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAC3D,kBAAkB,CAAC,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAC3D,wBAAwB,CAAC,EAAE,eAAe,CAAC,0BAA0B,CAAC,CAAC;CACxE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAmB5E"}

package/server/dist/external/org/verdict.js

@@ -0,0 +1,74 @@
+import { mergeLeadProposal, computeProposalDigest } from "./leadwright-proposal-merge.js";
+import { runLeadwrightPreflight } from "../../core/leadwright-preflight-transport.js";
+import { readOrgChartFull } from "./org-chart-full-read.js";
+import { daemonConfigReadCore } from "./daemon-config-read.js";
+import { readExistingLeadCharters } from "./existing-charters-read.js";
+function isValidBody(body) {
+    if (typeof body !== "object" || body === null)
+        return false;
+    const b = body;
+    if (typeof b.leadId !== "string" || b.leadId.length === 0)
+        return false;
+    if (typeof b.lead !== "object" || b.lead === null)
+        return false;
+    const additions = b.daemonConfigAdditions;
+    if (typeof additions !== "object" ||
+        additions === null ||
+        typeof additions.path !== "string" ||
+        typeof additions.actionId !== "string" ||
+        !Array.isArray(additions.pluginDirs)) {
+        return false;
+    }
+    return true;
+}
+export async function verdictCore(deps, requestBody) {
+    if (!deps.leadwrightCheckoutRoot) {
+        return { status: 503, body: { error: "leadwright_not_configured" } };
+    }
+    if (!isValidBody(requestBody)) {
+        return { status: 400, body: { error: "invalid_request_body" } };
+    }
+    const orgChartResult = deps.readOrgChartFullFn({ leadsRoot: deps.leadsRoot });
+    if (orgChartResult.status !== 200) {
+        return orgChartResult;
+    }
+    const daemonConfigResult = deps.daemonConfigReadFn({ leadsRoot: deps.leadsRoot, webuiBaseUrl: deps.webuiBaseUrl });
+    if (daemonConfigResult.status !== 200) {
+        return daemonConfigResult;
+    }
+    const existingCharters = readExistingLeadCharters(deps.leadsRoot, orgChartResult.body, requestBody.leadId, deps.readOrgFileFn);
+    const { proposal } = mergeLeadProposal({
+        orgChart: orgChartResult.body,
+        daemonConfig: daemonConfigResult.body,
+        leadId: requestBody.leadId,
+        lead: requestBody.lead,
+        daemonConfigAdditions: requestBody.daemonConfigAdditions,
+        charterContent: requestBody.charterContent,
+        existingCharters,
+    });
+    const proposalDigest = computeProposalDigest(proposal);
+    const transportResult = await deps.runLeadwrightPreflightFn(deps.leadwrightCheckoutRoot, proposal);
+    return { status: 200, body: { ...transportResult, proposalDigest } };
+}
+export function registerVerdictRoute(app, deps) {
+    const coreDeps = {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+        readOrgChartFullFn: deps.readOrgChartFullFn ?? readOrgChartFull,
+        daemonConfigReadFn: deps.daemonConfigReadFn ?? daemonConfigReadCore,
+        runLeadwrightPreflightFn: deps.runLeadwrightPreflightFn ?? runLeadwrightPreflight,
+    };
+    app.post("/api/external/org/verdict", async (c) => {
+        let requestBody;
+        try {
+            requestBody = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_request_body" }, 400);
+        }
+        const result = await verdictCore(coreDeps, requestBody);
+        return c.json(result.body, result.status);
+    });
+}
+//# sourceMappingURL=verdict.js.map

package/server/dist/external/org/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../../../src/external/org/verdict.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAA8B,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAAE,sBAAsB,EAAkC,MAAM,8CAA8C,CAAC;AAEtH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAsB,MAAM,6BAA6B,CAAC;AAS3F,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,SAAS,GAAG,CAAC,CAAC,qBAAqB,CAAC;IAC1C,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,KAAK,IAAI;QAClB,OAAQ,SAAqC,CAAC,IAAI,KAAK,QAAQ;QAC/D,OAAQ,SAAqC,CAAC,QAAQ,KAAK,QAAQ;QACnE,CAAC,KAAK,CAAC,OAAO,CAAE,SAAqC,CAAC,UAAU,CAAC,EACjE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAqB,EAAE,WAAoB;IAC3E,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnH,IAAI,kBAAkB,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,gBAAgB,GAAG,wBAAwB,CAC/C,IAAI,CAAC,SAAS,EACd,cAAc,CAAC,IAAI,EACnB,WAAW,CAAC,MAAM,EAClB,IAAI,CAAC,aAAa,CACnB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC;QACrC,QAAQ,EAAE,cAAc,CAAC,IAAI;QAC7B,YAAY,EAAE,kBAAkB,CAAC,IAAI;QACrC,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;QACxD,cAAc,EAAE,WAAW,CAAC,cAAc;QAC1C,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEvD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IAEnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC;AACvE,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,GAAS,EAAE,IAAsB;IACpE,MAAM,QAAQ,GAAoB;QAChC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,gBAAgB;QAC/D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,oBAAoB;QACnE,wBAAwB,EAAE,IAAI,CAAC,wBAAwB,IAAI,sBAAsB;KAClF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/routes.d.ts

@@ -1,106 +1,8 @@
 import { Hono } from "hono";
-import { PreviewSessionManager, type PreviewProfile } from "../core/preview-session-manager.js";
-import { type RunConfigReadResult } from "../core/run-config-reader.js";
-import type { ComplianceReadResult } from "../core/compliance-reader.js";
-import { SessionWatcher } from "../core/session-watcher.js";
-import { SdkSessionsStore } from "../core/sdk-sessions-store.js";
-import type { OrgRouterDeps } from "./org/routes.js";
+import type { CreateExternalRoutesArgs } from "./create-external-routes-args.js";
 export { FILE_MAX_BYTES, MIME_BY_EXTENSION, sanitizeContentDispositionFilename, } from "./file/_helpers.js";
 export { clearInboxDeriveCache } from "./inbox/_cache.js";
 export type { ExternalRouteProjectView } from "./_shared/helpers.js";
-import type { ExternalRouteProjectView } from "./_shared/helpers.js";
-export declare function createExternalRoutes(args: {
-    store: SdkSessionsStore;
-    watcher: SessionWatcher;
-    /**
-     * Section 02 (iterate 3) — validates projectId on PATCH / POST. Returns
-     * the set of non-synthesized project ids currently known to the server.
-     * The reserved UNASSIGNED_PROJECT_ID sentinel is accepted independently
-     * of this set. Omitted in legacy callers — PATCH projectId support is
-     * gated on presence (iterate-2 callers still work without it, and the
-     * route returns 400 "projectId not supported" if a client sends one
-     * without wiring).
-     */
-    getKnownProjectIds?: () => Set<string>;
-    /**
-     * Section 03 (iterate 3) — look up a registered project by id. Used by
-     * GET /projects/:id/actions + POST /projects/:id/preview +
-     * POST /projects/:id/actions-stub. The synthesized "unassigned" row is
-     * NOT returned from here (it has no filesystem path).
-     */
-    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
-    /**
-     * Section 03 — preview-session manager instance, shared across requests
-     * so the dedup cache holds between POSTs. Injected by index.ts;
-     * test harnesses can pass a fresh instance per test.
-     */
-    previewManager?: PreviewSessionManager;
-    /**
-     * Section 03 — loads a profile by name. Defaults to the real
-     * `core/profile-loader.ts` entry; tests inject a synthetic profile.
-     */
-    loadProfile?: (profileName: string) => PreviewProfile | null;
-    /**
-     * iterate/multi-session-run-orchestrator-v2 — reads a project's
-     * shipwright_run_config.json. Tests inject a stub so they don't
-     * touch the filesystem; production wires the real reader.
-     */
-    readRunConfig?: (projectPath: string) => Promise<RunConfigReadResult>;
-    /**
-     * iterate-2026-06-30-compliance-grade-webui (FR-01.43) — reads a project's
-     * `.shipwright/compliance/dashboard.md`. Tests inject a stub; production
-     * wires the real reader. Read-only observer (CLAUDE.md rule 12 spirit).
-     */
-    readCompliance?: (projectPath: string) => Promise<ComplianceReadResult>;
-    /**
-     * Iterate-2026-05-04 (ADR-068-A1) — best-effort scrollback cleanup
-     * cascade on DELETE /api/external/tasks/:id. Optional for tests;
-     * production wires the singleton ScrollbackStore.
-     */
-    scrollbackClearBestEffort?: (taskId: string) => Promise<void>;
-    /**
-     * Iterate-2026-05-12 (ADR-087, MEDIUM-B1 fix) — best-effort snapshot
-     * cleanup cascade on DELETE /api/external/tasks/:id. Optional for
-     * tests; production wires the singleton SnapshotStore. Snapshots
-     * capture rendered cell-state and may contain secrets; the 24-h TTL
-     * is a backstop, the task delete is the authoritative privacy boundary.
-     */
-    snapshotClearBestEffort?: (taskId: string) => Promise<void>;
-    /**
-     * iterate-2026-05-08 v0.8.7 AC-1 — required injection of the pty
-     * lookup so the transcript poll can flip `new-plain` tasks from
-     * `active` → `idle` when the pty is gone (idle-ceiling, /close,
-     * server-restart, DELETE cascade).
-     *
-     * Required (NOT optional) per external plan review 2026-05-08
-     * (gemini + openai): optional production dependencies hide
-     * misconfiguration. Tests pass `{ get: () => undefined }`; the
-     * production caller in `index.ts` passes the singleton.
-     */
-    ptyManager: {
-        get(taskId: string): unknown;
-        /**
-         * D01/F01 — tear down the live embedded pty on DELETE /tasks/:id BEFORE
-         * the scrollback + snapshot privacy clears. Optional: legacy/test
-         * harnesses pass `{ get }` only; production (index.ts) wires it.
-         */
-        kill?(taskId: string): void | Promise<void>;
-        /**
-         * iterate-2026-05-18-inbox-terminal-prompts — decoded visible-viewport
-         * text of the task's live headless mirror, or null when there is no
-         * live mirror. Optional: legacy test harnesses pass `{ get }` only;
-         * production (index.ts) wires it. When absent the inbox emits no
-         * `terminal_prompt` rows (graceful — never a crash).
-         */
-        peekTerminalText?(taskId: string): string | null;
-    };
-    /** FR-04.38 — `/api/external/org/*` (leadwright's org dir, not a project).
-     *  Mounted only when `honoHost` + `leadsRoot` are both provided (mirrors
-     *  the `getProjectById`-gated mission-context mount above). */
-    honoHost?: string;
-    leadsRoot?: string;
-    leadsRouteSecret?: string;
-    orgLstatSync?: OrgRouterDeps["lstatSync"];
-    orgWithDecisionsLock?: OrgRouterDeps["withDecisionsLock"];
-}): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export type { CreateExternalRoutesArgs } from "./create-external-routes-args.js";
+export declare function createExternalRoutes(args: CreateExternalRoutesArgs): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 //# sourceMappingURL=routes.d.ts.map

package/server/dist/external/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAqBjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AASrD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IAC7D;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;;;;;;;OAUG;IACH,UAAU,EAAE;QACV,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7B;;;;WAIG;QACH,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C;;;;;;WAMG;QACH,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KAClD,CAAC;IACF;;mEAE+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;CAC3D,8EAuJA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/external/routes.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA0B5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAQjF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kCAAkC,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,YAAY,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAKjF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,8EAkKlE"}