@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/routes/org-inventory-composite.js

@@ -0,0 +1,100 @@
+/*
+ * routes/org-inventory-composite.ts — builds the `GET /api/org/inventory`
+ * response body (iterate-2026-09-08-lead-inventory-page). One roster-wide
+ * composite, mirroring `org-threads-composite.ts` exactly: one
+ * `org-chart.json` parse for every lead (done by the caller, `routes/
+ * org.ts`), `audit.jsonl` read once per lead (not once per beat), beats
+ * bounded to a 48h server-side window instead of a lead's whole register
+ * history (Internal Plan Review finding #3 — an unbounded read scales with
+ * a lead's entire lifetime register plus every one of those beats'
+ * `steps.jsonl`).
+ *
+ * A per-figure read failure degrades that figure ALONE — `{status:
+ * "unreadable"}` for one beat's steps, `{status:"unknown"}` for the whole
+ * lead's audit lookup, `{measured:false}` for the authority panel — never
+ * collapsed into a false-positive "clear" and never failing the whole lead
+ * or the whole roster response.
+ */
+import { registerEntriesGuarded } from "../external/org/beat-register-health.js";
+import { readBeatEffectAuditCore } from "../external/org/beat-effect-audit-read.js";
+import { readBeatStepsCore } from "../external/org/beat-steps-read.js";
+import { charterAuthorityCore } from "../external/org/charter-authority-read.js";
+const WINDOW_MS = 48 * 60 * 60 * 1000;
+function parsedOrInfinity(startedAt) {
+    const ms = Date.parse(startedAt);
+    return Number.isFinite(ms) ? ms : Number.POSITIVE_INFINITY;
+}
+/** One lead's inventory entry — the whole roster-wide composite is just this
+ *  called once per chart lead (see `buildOrgInventory` below). */
+export function buildLeadInventoryEntry(deps, leadId, charterPath) {
+    const now = deps.now ?? (() => new Date());
+    const windowStartMs = now().getTime() - WINDOW_MS;
+    const registerRead = registerEntriesGuarded(deps, leadId);
+    if (!registerRead.ok) {
+        // A genuine read failure (corrupt JSON, invalid leadId, symlink,
+        // containment breach) is NOT the same as "this lead has never had a
+        // beat" — collapsing the two was Stage-2 code review's high/correctness
+        // finding: it rendered exactly the false-positive "clear" this iterate
+        // exists to eliminate elsewhere. `register:{status:"unreadable"}` lets
+        // the client render a distinct "beat history unavailable" state instead
+        // of the affirmative "No beats yet" empty state.
+        return {
+            leadId,
+            totalBeatsInRegister: 0,
+            beats: [],
+            register: { status: "unreadable" },
+            authority: charterAuthorityCore(deps, leadId, charterPath),
+        };
+    }
+    const allEntries = registerRead.entries;
+    const totalBeatsInRegister = allEntries.length;
+    // Bounded window: an unparseable `startedAt` VALUE is INCLUDED rather
+    // than dropped (fail toward showing more, never toward hiding data —
+    // Internal Plan Review finding #8 / AC-7). The register schema always
+    // carries `startedAt` as a string field (`BeatRegisterEntryView`) — what
+    // can go wrong is the CONTENT of that string, not its presence.
+    const boundedEntries = allEntries
+        .filter((e) => {
+        const ms = Date.parse(e.startedAt);
+        return !Number.isFinite(ms) || ms >= windowStartMs;
+    })
+        .slice()
+        .sort((a, b) => parsedOrInfinity(a.startedAt) - parsedOrInfinity(b.startedAt));
+    const auditResult = readBeatEffectAuditCore(deps, leadId);
+    const beats = boundedEntries.map((entry) => {
+        const steps = readBeatStepsCore(deps, leadId, entry.beatId);
+        // Checks `unclaimedBeatIds.has(...)` BEFORE `auditResult.status`, not
+        // the other way round, so a beat already CONFIRMED to carry an
+        // unclaimed effect is never downgraded to a merely uncertain state
+        // (code review, Stage 2/medium: "found" is monotone). External code
+        // review correction: `readBeatEffectAuditCore`'s single-scan design is
+        // one atomic read — it either fully succeeds (`unclaimedBeatIds`
+        // complete) or fully fails (`unknown`, `unclaimedBeatIds` empty by
+        // construction), so there is no genuine mid-scan partial-failure state
+        // to protect against TODAY. This ordering is what would keep any
+        // future "found" entries monotone if the reader ever did support a
+        // partial/incremental result — not a live bug fix.
+        const unclaimedEffect = auditResult.unclaimedBeatIds.has(entry.beatId)
+            ? { status: "found" }
+            : { status: auditResult.status === "unknown" ? "unknown" : "clear" };
+        return {
+            beatId: entry.beatId,
+            startedAt: entry.startedAt,
+            closedAt: entry.closedAt,
+            steps,
+            unclaimedEffect,
+        };
+    });
+    const authority = charterAuthorityCore(deps, leadId, charterPath);
+    return { leadId, totalBeatsInRegister, beats, register: { status: "ok" }, authority };
+}
+/** Every chart lead's inventory, keyed by leadId — one entry per lead,
+ *  always (mirrors `buildOrgThreads`). */
+export function buildOrgInventory(deps, leads) {
+    const out = {};
+    for (const { leadId, charterPath } of leads) {
+        out[leadId] = buildLeadInventoryEntry(deps, leadId, charterPath);
+    }
+    return out;
+}
+//# sourceMappingURL=org-inventory-composite.js.map

package/server/dist/routes/org-inventory-composite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-inventory-composite.js","sourceRoot":"","sources":["../../src/routes/org-inventory-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,OAAO,EAAE,uBAAuB,EAA4B,MAAM,2CAA2C,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAA0B,MAAM,oCAAoC,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2CAA2C,CAAC;AAG5G,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAWtC,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC7D,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,uBAAuB,CACrC,IAA2B,EAC3B,MAAc,EACd,WAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC;IAElD,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,iEAAiE;QACjE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,iDAAiD;QACjD,OAAO;YACL,MAAM;YACN,oBAAoB,EAAE,CAAC;YACvB,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;YAClC,SAAS,EAAE,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC;SAC3D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC;IACxC,MAAM,oBAAoB,GAAG,UAAU,CAAC,MAAM,CAAC;IAE/C,sEAAsE;IACtE,qEAAqE;IACrE,sEAAsE;IACtE,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,cAAc,GAAG,UAAU;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC;IACrD,CAAC,CAAC;SACD,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjF,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAwB,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,sEAAsE;QACtE,+DAA+D;QAC/D,mEAAmE;QACnE,oEAAoE;QACpE,uEAAuE;QACvE,iEAAiE;QACjE,mEAAmE;QACnE,uEAAuE;QACvE,iEAAiE;QACjE,mEAAmE;QACnE,mDAAmD;QACnD,MAAM,eAAe,GAAyC,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;YAC1G,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;YACrB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvE,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK;YACL,eAAe;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAElE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC;AACxF,CAAC;AAED;0CAC0C;AAC1C,MAAM,UAAU,iBAAiB,CAC/B,IAA2B,EAC3B,KAAiE;IAEjE,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/org-lead-setup-wizard.d.ts

@@ -0,0 +1,10 @@
+import type { Hono } from "hono";
+import { type TaskDomainLookup } from "../external/org/domains.js";
+export interface LeadSetupWizardRouteDeps {
+    leadsRoot: string;
+    leadwrightCheckoutRoot: string | undefined;
+    webuiBaseUrl: string;
+    store?: TaskDomainLookup;
+}
+export declare function registerLeadSetupWizardRoutes(app: Hono, deps: LeadSetupWizardRouteDeps): void;
+//# sourceMappingURL=org-lead-setup-wizard.d.ts.map

package/server/dist/routes/org-lead-setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-lead-setup-wizard.d.ts","sourceRoot":"","sources":["../../src/routes/org-lead-setup-wizard.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAOhF,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,GAAG,IAAI,CA4C7F"}

package/server/dist/routes/org-lead-setup-wizard.js

@@ -0,0 +1,51 @@
+import { domainsCore } from "../external/org/domains.js";
+import { verdictCore } from "../external/org/verdict.js";
+import { commitCore } from "../external/org/commit.js";
+import { readOrgChartFull } from "../external/org/org-chart-full-read.js";
+import { daemonConfigReadCore } from "../external/org/daemon-config-read.js";
+import { runLeadwrightPreflight } from "../core/leadwright-preflight-transport.js";
+export function registerLeadSetupWizardRoutes(app, deps) {
+    const NO_TASKS = { list: () => [] };
+    app.get("/api/org/domains", async (c) => {
+        const result = domainsCore({ leadsRoot: deps.leadsRoot, store: deps.store ?? NO_TASKS });
+        return c.json(result.body, result.status);
+    });
+    const verdictDeps = {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+        readOrgChartFullFn: readOrgChartFull,
+        daemonConfigReadFn: daemonConfigReadCore,
+        runLeadwrightPreflightFn: runLeadwrightPreflight,
+    };
+    app.post("/api/org/leads/verdict", async (c) => {
+        let requestBody;
+        try {
+            requestBody = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_request_body" }, 400);
+        }
+        const result = await verdictCore(verdictDeps, requestBody);
+        return c.json(result.body, result.status);
+    });
+    const commitDeps = {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+        readOrgChartFullFn: readOrgChartFull,
+        daemonConfigReadFn: daemonConfigReadCore,
+    };
+    app.post("/api/org/leads/commit", async (c) => {
+        let requestBody;
+        try {
+            requestBody = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_request_body" }, 400);
+        }
+        const result = await commitCore(commitDeps, requestBody);
+        return c.json(result.body, result.status);
+    });
+}
+//# sourceMappingURL=org-lead-setup-wizard.js.map

package/server/dist/routes/org-lead-setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-lead-setup-wizard.js","sourceRoot":"","sources":["../../src/routes/org-lead-setup-wizard.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,WAAW,EAAyB,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,WAAW,EAAwB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAuB,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AASnF,MAAM,UAAU,6BAA6B,CAAC,GAAS,EAAE,IAA8B;IACrF,MAAM,QAAQ,GAAqB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAEtD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAoB;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,gBAAgB;QACpC,kBAAkB,EAAE,oBAAoB;QACxC,wBAAwB,EAAE,sBAAsB;KACjD,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAmB;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,gBAAgB;QACpC,kBAAkB,EAAE,oBAAoB;KACzC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/routes/org-leads-composite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org-leads-composite.d.ts","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAIV,eAAe,EACf,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAI7E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;IACzD,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AA8DD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB;AACtB;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,GACzB,eAAe,CAYjB"}
+{"version":3,"file":"org-leads-composite.d.ts","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAKV,eAAe,EACf,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAI7E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,cAAc,IAAI,OAAO,CAAA;KAAE,CAAC;IACzD,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAyFD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB;AACtB;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,GACzB,eAAe,CAiBjB"}

package/server/dist/routes/org-leads-composite.js

@@ -11,7 +11,7 @@
  */
 import { usageCore } from "../external/org/usage.js";
 import { lastRunCore } from "../external/org/last-run.js";
-import { beatRegisterHealthCore } from "../external/org/beat-register.js";
+import { beatRegisterHealthCore } from "../external/org/beat-register-health.js";
 import { orgFileReadCore } from "../external/org/file-read.js";
 import { cronIntervalMs } from "../external/org/cron.js";
 import { extractRoleSentence } from "../external/org/role-extract.js";
@@ -38,8 +38,23 @@ function buildCadence(orgInfo, now) {
         return { measured: false };
     return { measured: true, text: formatCadence(interval.ms), cron: orgInfo.cron };
 }
-function buildNow(deps, leadId, orgInfo) {
-    const health = beatRegisterHealthCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
+/** The `register` roster field's own degrade — a read failure (symlink
+ *  refusal, corrupt file, path traversal, read error) is `{status:
+ *  "unknown"}`, NEVER `{status: "clear"}` (internal-plan-review finding,
+ *  HIGH: `clear` is an assertion "no open entry", not an absence-of-data
+ *  marker — collapsing a deliberate security refusal or a corrupt register
+ *  into "no problem here" would fabricate exactly the health claim this
+ *  field exists to surface honestly). ENOENT (no register file at all) is
+ *  already mapped to `200 clear` INSIDE `beatRegisterHealthCore` (mirrors
+ *  leadwright's own "no file = clear" reading) — it never reaches this
+ *  degrade at all. Deliberately DIFFERENT from `buildNow`'s degrade for the
+ *  SAME read failure (`not-measured`, unchanged from before this field
+ *  existed) — the Now line's failure semantics are not touched by adding
+ *  this sibling field. */
+function registerFieldFor(health, leadId) {
+    return health.status === 200 ? health.body : { leadId, status: "unknown" };
+}
+function buildNow(deps, leadId, orgInfo, health) {
     if (health.status !== 200)
         return { state: "not-measured" };
     if (health.body.status === "fault") {
@@ -48,10 +63,11 @@ function buildNow(deps, leadId, orgInfo) {
     if (health.body.status === "open") {
         return { state: "running" };
     }
-    // status === "clear" — Resting; text sourced from last-run. `orgInfo` was
-    // already resolved once for the whole composite request (see
-    // `buildLeadRosterEntry`) — passed through so `lastRunCore` doesn't
-    // re-parse `org-chart.json` per lead.
+    // status === "clear" — Resting; text + staleness sourced from last-run,
+    // taken verbatim (never recomputed here). `orgInfo` was already resolved
+    // once for the whole composite request (see `buildLeadRosterEntry`) —
+    // passed through so `lastRunCore` doesn't re-parse `org-chart.json` per
+    // lead.
     const lastRun = lastRunCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync, orgInfo }, leadId);
     if (lastRun.status !== 200)
         return { state: "not-measured" };
@@ -60,7 +76,12 @@ function buildNow(deps, leadId, orgInfo) {
     }
     return {
         state: "resting",
-        lastRun: { measured: true, lastRunAt: lastRun.body.lastRunAt },
+        lastRun: {
+            measured: true,
+            lastRunAt: lastRun.body.lastRunAt,
+            staleness: lastRun.body.staleness,
+            cadenceUnresolvedReason: lastRun.body.cadenceUnresolvedReason,
+        },
     };
 }
 function buildRole(deps, leadId) {
@@ -81,15 +102,20 @@ export function buildLeadRosterEntry(deps, leadId, lead,
  */
 orgInfo) {
     const now = deps.now ?? (() => new Date());
+    // Read once, feed both `now` (running/needs-attention/clear branching,
+    // unchanged) and the `register` field below — was two reads before this
+    // field existed (buildNow had its own private call).
+    const registerHealth = beatRegisterHealthCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
     return {
         leadId,
         domain: lead.domain,
         name: lead.name,
         reportsTo: lead.reports_to,
         role: buildRole(deps, leadId),
-        now: buildNow(deps, leadId, orgInfo),
+        now: buildNow(deps, leadId, orgInfo, registerHealth),
         cadence: buildCadence(orgInfo, now()),
         usage: buildUsage(deps, leadId),
+        register: registerFieldFor(registerHealth, leadId),
     };
 }
 //# sourceMappingURL=org-leads-composite.js.map

package/server/dist/routes/org-leads-composite.js.map

@@ -1 +1 @@
-{"version":3,"file":"org-leads-composite.js","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAWtE,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAS;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB,EAAE,MAAc,EAAE,OAA0B;IACrF,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,6DAA6D;IAC7D,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,MAAc,EACd,IAAsB;AACtB;;;;GAIG;AACH,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QACpC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"org-leads-composite.js","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAqC,MAAM,yCAAyC,CAAC;AACpH,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAWtE,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAS;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;0BAY0B;AAC1B,SAAS,gBAAgB,CAAC,MAAoC,EAAE,MAAc;IAC5E,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ,CACf,IAAyB,EACzB,MAAc,EACd,OAA0B,EAC1B,MAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,QAAQ;IACR,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,uBAAuB,EAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,MAAc,EACd,IAAsB;AACtB;;;;GAIG;AACH,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,uEAAuE;IACvE,wEAAwE;IACxE,qDAAqD;IACrD,MAAM,cAAc,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAChH,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC;QACpD,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/B,QAAQ,EAAE,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/server/dist/routes/org-threads-composite.d.ts

@@ -0,0 +1,24 @@
+import { type LeadQuestionThreadsRouteDeps } from "../external/org/lead-question-threads.js";
+import type { OrgThreadCardView, OrgThreadsResponse } from "../types/org.js";
+/**
+ * Narrowest shape this module needs out of `SdkSessionsStore` — mirrors the
+ * `lstatSync`-style minimal-injection convention used across this directory
+ * (inject only the method actually called, not the whole class).
+ */
+export interface TaskTitleLookup {
+    get(taskId: string): {
+        title: string;
+    } | undefined;
+}
+export interface OrgThreadsBuildDeps extends LeadQuestionThreadsRouteDeps {
+    /** Task-title lookup — leadwright's thread record only carries `taskId`;
+     *  the card's display title comes from webui's own task store. A taskId
+     *  with no matching task (deleted, or store not yet caught up) falls
+     *  back to the raw id rather than dropping the card. */
+    store: TaskTitleLookup;
+}
+/** One lead's follow-up-card threads, in store order (never re-sorted). */
+export declare function buildLeadThreadCards(deps: OrgThreadsBuildDeps, leadId: string): OrgThreadCardView[];
+/** Every lead's threads, keyed by leadId — one entry per chart lead, always. */
+export declare function buildOrgThreads(deps: OrgThreadsBuildDeps, leadIds: string[]): OrgThreadsResponse;
+//# sourceMappingURL=org-threads-composite.d.ts.map

package/server/dist/routes/org-threads-composite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-threads-composite.d.ts","sourceRoot":"","sources":["../../src/routes/org-threads-composite.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE7E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,WAAW,mBAAoB,SAAQ,4BAA4B;IACvE;;;4DAGwD;IACxD,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAwBnG;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAMhG"}

package/server/dist/routes/org-threads-composite.js

@@ -0,0 +1,51 @@
+/*
+ * routes/org-threads-composite.ts — builds the `GET /api/org/threads`
+ * response: every lead's follow-up-card threads, keyed by leadId (FR-04.42,
+ * leadwright#35). One http round trip for the whole page, same "composite,
+ * not N+1" shape `org-leads-composite.ts` already uses for usage/last-run/
+ * beat-register/charter — this reads one more per-lead file
+ * (`lead-question-threads.json`) the same way.
+ *
+ * A per-lead read failure (missing file, unreadable, malformed JSON,
+ * unknown version) degrades that lead to an empty card list — it never
+ * fails the whole response (AC-d: the Org page must still load with no
+ * thread anywhere).
+ */
+import { readLeadQuestionThreadsCore, } from "../external/org/lead-question-threads.js";
+import { extractLeadQuestionBody } from "../external/inbox/_lead.js";
+/** One lead's follow-up-card threads, in store order (never re-sorted). */
+export function buildLeadThreadCards(deps, leadId) {
+    const result = readLeadQuestionThreadsCore(deps, leadId);
+    if (!result.ok)
+        return [];
+    const cards = [];
+    for (const [taskId, thread] of Object.entries(result.threads)) {
+        if (thread.rounds.length === 0)
+            continue;
+        const task = deps.store.get(taskId);
+        cards.push({
+            cardId: taskId,
+            cardTitle: task?.title ?? taskId,
+            rounds: thread.rounds.map((round) => ({
+                id: `${taskId}#${round.round}`,
+                // FR-04.37: the stored question still carries the marker line
+                // (renderLeadQuestion's raw output) — strip it the same way the
+                // lead_question inbox kind already does, so it never renders.
+                question: extractLeadQuestionBody(round.question) ?? round.question,
+                askedAt: round.askedAt,
+                answer: round.answer?.text,
+                answeredAt: round.answer?.answeredAt,
+            })),
+        });
+    }
+    return cards;
+}
+/** Every lead's threads, keyed by leadId — one entry per chart lead, always. */
+export function buildOrgThreads(deps, leadIds) {
+    const out = {};
+    for (const leadId of leadIds) {
+        out[leadId] = buildLeadThreadCards(deps, leadId);
+    }
+    return out;
+}
+//# sourceMappingURL=org-threads-composite.js.map

package/server/dist/routes/org-threads-composite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-threads-composite.js","sourceRoot":"","sources":["../../src/routes/org-threads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,2BAA2B,GAE5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAoBrE,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAyB,EAAE,MAAc;IAC5E,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,MAAM;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpC,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE;gBAC9B,8DAA8D;gBAC9D,gEAAgE;gBAChE,8DAA8D;gBAC9D,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ;gBACnE,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;gBAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;aACrC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAyB,EAAE,OAAiB;IAC1E,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/org-writes.d.ts

@@ -0,0 +1,14 @@
+import type { Hono } from "hono";
+import type { OrgFileWriteDeps } from "../external/org/file-write.js";
+import type { BeatRegisterLockOptions } from "../external/org/beat-register-release-core.js";
+export interface OrgWriteActionsDeps {
+    leadsRoot: string;
+    lstatSync?: OrgFileWriteDeps["lstatSync"];
+    withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
+    now?: () => Date;
+    /** Beat-register release lock tuning — defaults to the same
+     *  `DEFAULT_LOCK_OPTIONS` the secret-gated release route uses. */
+    releaseLockOptions?: BeatRegisterLockOptions;
+}
+export declare function registerOrgWriteActions(app: Hono, deps: OrgWriteActionsDeps): void;
+//# sourceMappingURL=org-writes.d.ts.map

package/server/dist/routes/org-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-writes.d.ts","sourceRoot":"","sources":["../../src/routes/org-writes.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAK7F,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;sEACkE;IAClE,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA4ClF"}

package/server/dist/routes/org-writes.js

@@ -0,0 +1,61 @@
+/*
+ * routes/org-writes.ts — the plain surface's two `:leadId`-independent-vs-
+ * dependent "action" writes (as opposed to the charter PUT's document
+ * write, which stays in `org.ts`), split out once the countersign route
+ * pushed `org.ts` over the 300-line convention. Both mirror a secret-gated
+ * twin's contract exactly via a shared core — same validation, same status
+ * mapping, same lock/mutate action — never a second implementation:
+ *
+ *   POST /api/org/leads/:leadId/beat-register/release — the SECOND browser
+ *     write (iterate-2026-09-06-org-lead-staleness-register, FR-04.41), via
+ *     `handleReleaseRequest` (`beat-register-release-request.ts`). Gated by
+ *     `requireChartLead` BEFORE body parsing (finding #11) — an
+ *     unregistered leadId never reaches the register at all.
+ *   POST /api/org/decisions/countersign — the THIRD browser write
+ *     (iterate-2026-09-06-decisions-proposed-countersign), via
+ *     `handleCountersignRequest` (`countersign-request.ts`). Not
+ *     lead-scoped (no `:leadId` path segment — the request body's own
+ *     `{timestamp, leadId}` pair identifies the proposal), so it carries no
+ *     `requireChartLead` gate; the FR-04.28 lock + allowlist-resolved paths
+ *     are the only guards, same as the gated route.
+ */
+import { handleReleaseRequest } from "../external/org/beat-register-release-request.js";
+import { handleCountersignRequest } from "../external/org/countersign-request.js";
+import { requireChartLead } from "./org-chart-lead-guard.js";
+export function registerOrgWriteActions(app, deps) {
+    const { leadsRoot } = deps;
+    app.post("/api/org/leads/:leadId/beat-register/release", async (c) => {
+        const leadId = c.req.param("leadId");
+        const gate = requireChartLead(c, leadId, { leadsRoot, lstatSync: deps.lstatSync });
+        if (!gate.ok)
+            return gate.response;
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_json" }, 400);
+        }
+        // `handleReleaseRequest` owns the `lstatSync`/`lockOptions`/`now`
+        // defaulting itself (external-review fix, GLM: two independent
+        // defaulting sites for the same deps is the drift risk finding #5
+        // already extracted this function to prevent) — pass deps through
+        // unresolved.
+        const result = await handleReleaseRequest({ leadsRoot, lstatSync: deps.lstatSync, lockOptions: deps.releaseLockOptions, now: deps.now }, leadId, body);
+        return c.json(result.body, result.status);
+    });
+    app.post("/api/org/decisions/countersign", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_json" }, 400);
+        }
+        // `handleCountersignRequest` owns the `lstatSync`/`withDecisionsLock`
+        // defaulting itself, same rationale as `handleReleaseRequest` above.
+        const result = await handleCountersignRequest({ leadsRoot, lstatSync: deps.lstatSync, withDecisionsLock: deps.withDecisionsLock }, body);
+        return c.json(result.body, result.status);
+    });
+}
+//# sourceMappingURL=org-writes.js.map

package/server/dist/routes/org-writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-writes.js","sourceRoot":"","sources":["../../src/routes/org-writes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAY7D,MAAM,UAAU,uBAAuB,CAAC,GAAS,EAAE,IAAyB;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE3B,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEnC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,kEAAkE;QAClE,+DAA+D;QAC/D,kEAAkE;QAClE,kEAAkE;QAClE,cAAc;QACd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAC7F,MAAM,EACN,IAAI,CACL,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,EACnF,IAAI,CACL,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/routes/org.d.ts

@@ -1,6 +1,9 @@
 import { Hono } from "hono";
 import { type OrgFileReadDeps } from "../external/org/file-read.js";
 import { type OrgFileWriteDeps } from "../external/org/file-write.js";
+import { type TaskTitleLookup } from "./org-threads-composite.js";
+import type { BeatRegisterLockOptions } from "../external/org/beat-register-release-core.js";
+import type { TaskDomainLookup } from "../external/org/domains.js";
 export interface OrgApiRouterDeps {
     leadsRoot: string;
     /** The application's resolved bind host — passed through, never re-derived. */
@@ -10,6 +13,17 @@ export interface OrgApiRouterDeps {
     openSync?: OrgFileReadDeps["openSync"];
     withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
     now?: () => Date;
+    /** Beat-register release lock tuning — defaults to the same
+     *  `DEFAULT_LOCK_OPTIONS` the secret-gated release route uses. */
+    releaseLockOptions?: BeatRegisterLockOptions;
+    /** FR-04.42 — task-title lookup for `GET /api/org/threads`. Omitted
+     *  (e.g. in tests that don't exercise that route) falls back to raw
+     *  taskIds instead of a real title. Also backs (W14)
+     *  `GET /api/org/domains`' task-domain aggregation. */
+    store?: TaskTitleLookup & TaskDomainLookup;
+    /** iterate-2026-09-07-leadwright-setup-wizard (W14) — see OrgRouterDeps. */
+    leadwrightCheckoutRoot?: string;
+    webuiBaseUrl?: string;
 }
 export declare function createOrgApiRouter(deps: OrgApiRouterDeps): Hono;
 //# sourceMappingURL=org.d.ts.map

package/server/dist/routes/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAK1C,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAMxF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAgL/D"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAExF,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAInF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAI7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAKnE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;sEACkE;IAClE,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IAC7C;;;2DAGuD;IACvD,KAAK,CAAC,EAAE,eAAe,GAAG,gBAAgB,CAAC;IAC3C,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAgM/D"}