@svenroth-ai/shipwright 0.27.0 → 0.28.0

package/server/dist/routes/org-leads-composite.js

@@ -11,7 +11,7 @@
  */
 import { usageCore } from "../external/org/usage.js";
 import { lastRunCore } from "../external/org/last-run.js";
-import { beatRegisterHealthCore } from "../external/org/beat-register.js";
+import { beatRegisterHealthCore } from "../external/org/beat-register-health.js";
 import { orgFileReadCore } from "../external/org/file-read.js";
 import { cronIntervalMs } from "../external/org/cron.js";
 import { extractRoleSentence } from "../external/org/role-extract.js";
@@ -38,8 +38,23 @@ function buildCadence(orgInfo, now) {
         return { measured: false };
     return { measured: true, text: formatCadence(interval.ms), cron: orgInfo.cron };
 }
-function buildNow(deps, leadId, orgInfo) {
-    const health = beatRegisterHealthCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
+/** The `register` roster field's own degrade — a read failure (symlink
+ *  refusal, corrupt file, path traversal, read error) is `{status:
+ *  "unknown"}`, NEVER `{status: "clear"}` (internal-plan-review finding,
+ *  HIGH: `clear` is an assertion "no open entry", not an absence-of-data
+ *  marker — collapsing a deliberate security refusal or a corrupt register
+ *  into "no problem here" would fabricate exactly the health claim this
+ *  field exists to surface honestly). ENOENT (no register file at all) is
+ *  already mapped to `200 clear` INSIDE `beatRegisterHealthCore` (mirrors
+ *  leadwright's own "no file = clear" reading) — it never reaches this
+ *  degrade at all. Deliberately DIFFERENT from `buildNow`'s degrade for the
+ *  SAME read failure (`not-measured`, unchanged from before this field
+ *  existed) — the Now line's failure semantics are not touched by adding
+ *  this sibling field. */
+function registerFieldFor(health, leadId) {
+    return health.status === 200 ? health.body : { leadId, status: "unknown" };
+}
+function buildNow(deps, leadId, orgInfo, health) {
     if (health.status !== 200)
         return { state: "not-measured" };
     if (health.body.status === "fault") {
@@ -48,10 +63,11 @@ function buildNow(deps, leadId, orgInfo) {
     if (health.body.status === "open") {
         return { state: "running" };
     }
-    // status === "clear" — Resting; text sourced from last-run. `orgInfo` was
-    // already resolved once for the whole composite request (see
-    // `buildLeadRosterEntry`) — passed through so `lastRunCore` doesn't
-    // re-parse `org-chart.json` per lead.
+    // status === "clear" — Resting; text + staleness sourced from last-run,
+    // taken verbatim (never recomputed here). `orgInfo` was already resolved
+    // once for the whole composite request (see `buildLeadRosterEntry`) —
+    // passed through so `lastRunCore` doesn't re-parse `org-chart.json` per
+    // lead.
     const lastRun = lastRunCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync, orgInfo }, leadId);
     if (lastRun.status !== 200)
         return { state: "not-measured" };
@@ -60,7 +76,12 @@ function buildNow(deps, leadId, orgInfo) {
     }
     return {
         state: "resting",
-        lastRun: { measured: true, lastRunAt: lastRun.body.lastRunAt },
+        lastRun: {
+            measured: true,
+            lastRunAt: lastRun.body.lastRunAt,
+            staleness: lastRun.body.staleness,
+            cadenceUnresolvedReason: lastRun.body.cadenceUnresolvedReason,
+        },
     };
 }
 function buildRole(deps, leadId) {
@@ -81,15 +102,20 @@ export function buildLeadRosterEntry(deps, leadId, lead,
  */
 orgInfo) {
     const now = deps.now ?? (() => new Date());
+    // Read once, feed both `now` (running/needs-attention/clear branching,
+    // unchanged) and the `register` field below — was two reads before this
+    // field existed (buildNow had its own private call).
+    const registerHealth = beatRegisterHealthCore({ leadsRoot: deps.leadsRoot, lstatSync: deps.lstatSync }, leadId);
     return {
         leadId,
         domain: lead.domain,
         name: lead.name,
         reportsTo: lead.reports_to,
         role: buildRole(deps, leadId),
-        now: buildNow(deps, leadId, orgInfo),
+        now: buildNow(deps, leadId, orgInfo, registerHealth),
         cadence: buildCadence(orgInfo, now()),
         usage: buildUsage(deps, leadId),
+        register: registerFieldFor(registerHealth, leadId),
     };
 }
 //# sourceMappingURL=org-leads-composite.js.map

package/server/dist/routes/org-leads-composite.js.map

@@ -1 +1 @@
-{"version":3,"file":"org-leads-composite.js","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAWtE,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAS;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB,EAAE,MAAc,EAAE,OAA0B;IACrF,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,6DAA6D;IAC7D,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,MAAc,EACd,IAAsB;AACtB;;;;GAIG;AACH,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QACpC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"org-leads-composite.js","sourceRoot":"","sources":["../../src/routes/org-leads-composite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAqC,MAAM,yCAAyC,CAAC;AACpH,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAWtE,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,GAAS;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;0BAY0B;AAC1B,SAAS,gBAAgB,CAAC,MAAoC,EAAE,MAAc;IAC5E,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,QAAQ,CACf,IAAyB,EACzB,MAAc,EACd,OAA0B,EAC1B,MAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAE5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,QAAQ;IACR,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;YACjC,uBAAuB,EAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAyB,EACzB,MAAc,EACd,IAAsB;AACtB;;;;GAIG;AACH,OAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,uEAAuE;IACvE,wEAAwE;IACxE,qDAAqD;IACrD,MAAM,cAAc,GAAG,sBAAsB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAChH,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC;QACpD,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/B,QAAQ,EAAE,gBAAgB,CAAC,cAAc,EAAE,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/server/dist/routes/org-writes.d.ts

@@ -0,0 +1,14 @@
+import type { Hono } from "hono";
+import type { OrgFileWriteDeps } from "../external/org/file-write.js";
+import type { BeatRegisterLockOptions } from "../external/org/beat-register-release-core.js";
+export interface OrgWriteActionsDeps {
+    leadsRoot: string;
+    lstatSync?: OrgFileWriteDeps["lstatSync"];
+    withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
+    now?: () => Date;
+    /** Beat-register release lock tuning — defaults to the same
+     *  `DEFAULT_LOCK_OPTIONS` the secret-gated release route uses. */
+    releaseLockOptions?: BeatRegisterLockOptions;
+}
+export declare function registerOrgWriteActions(app: Hono, deps: OrgWriteActionsDeps): void;
+//# sourceMappingURL=org-writes.d.ts.map

package/server/dist/routes/org-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-writes.d.ts","sourceRoot":"","sources":["../../src/routes/org-writes.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAK7F,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;sEACkE;IAClE,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA4ClF"}

package/server/dist/routes/org-writes.js

@@ -0,0 +1,61 @@
+/*
+ * routes/org-writes.ts — the plain surface's two `:leadId`-independent-vs-
+ * dependent "action" writes (as opposed to the charter PUT's document
+ * write, which stays in `org.ts`), split out once the countersign route
+ * pushed `org.ts` over the 300-line convention. Both mirror a secret-gated
+ * twin's contract exactly via a shared core — same validation, same status
+ * mapping, same lock/mutate action — never a second implementation:
+ *
+ *   POST /api/org/leads/:leadId/beat-register/release — the SECOND browser
+ *     write (iterate-2026-09-06-org-lead-staleness-register, FR-04.41), via
+ *     `handleReleaseRequest` (`beat-register-release-request.ts`). Gated by
+ *     `requireChartLead` BEFORE body parsing (finding #11) — an
+ *     unregistered leadId never reaches the register at all.
+ *   POST /api/org/decisions/countersign — the THIRD browser write
+ *     (iterate-2026-09-06-decisions-proposed-countersign), via
+ *     `handleCountersignRequest` (`countersign-request.ts`). Not
+ *     lead-scoped (no `:leadId` path segment — the request body's own
+ *     `{timestamp, leadId}` pair identifies the proposal), so it carries no
+ *     `requireChartLead` gate; the FR-04.28 lock + allowlist-resolved paths
+ *     are the only guards, same as the gated route.
+ */
+import { handleReleaseRequest } from "../external/org/beat-register-release-request.js";
+import { handleCountersignRequest } from "../external/org/countersign-request.js";
+import { requireChartLead } from "./org-chart-lead-guard.js";
+export function registerOrgWriteActions(app, deps) {
+    const { leadsRoot } = deps;
+    app.post("/api/org/leads/:leadId/beat-register/release", async (c) => {
+        const leadId = c.req.param("leadId");
+        const gate = requireChartLead(c, leadId, { leadsRoot, lstatSync: deps.lstatSync });
+        if (!gate.ok)
+            return gate.response;
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_json" }, 400);
+        }
+        // `handleReleaseRequest` owns the `lstatSync`/`lockOptions`/`now`
+        // defaulting itself (external-review fix, GLM: two independent
+        // defaulting sites for the same deps is the drift risk finding #5
+        // already extracted this function to prevent) — pass deps through
+        // unresolved.
+        const result = await handleReleaseRequest({ leadsRoot, lstatSync: deps.lstatSync, lockOptions: deps.releaseLockOptions, now: deps.now }, leadId, body);
+        return c.json(result.body, result.status);
+    });
+    app.post("/api/org/decisions/countersign", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_json" }, 400);
+        }
+        // `handleCountersignRequest` owns the `lstatSync`/`withDecisionsLock`
+        // defaulting itself, same rationale as `handleReleaseRequest` above.
+        const result = await handleCountersignRequest({ leadsRoot, lstatSync: deps.lstatSync, withDecisionsLock: deps.withDecisionsLock }, body);
+        return c.json(result.body, result.status);
+    });
+}
+//# sourceMappingURL=org-writes.js.map

package/server/dist/routes/org-writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-writes.js","sourceRoot":"","sources":["../../src/routes/org-writes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAY7D,MAAM,UAAU,uBAAuB,CAAC,GAAS,EAAE,IAAyB;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE3B,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEnC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,kEAAkE;QAClE,+DAA+D;QAC/D,kEAAkE;QAClE,kEAAkE;QAClE,cAAc;QACd,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAC7F,MAAM,EACN,IAAI,CACL,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,EACnF,IAAI,CACL,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/routes/org.d.ts

@@ -2,6 +2,8 @@ import { Hono } from "hono";
 import { type OrgFileReadDeps } from "../external/org/file-read.js";
 import { type OrgFileWriteDeps } from "../external/org/file-write.js";
 import { type TaskTitleLookup } from "./org-threads-composite.js";
+import type { BeatRegisterLockOptions } from "../external/org/beat-register-release-core.js";
+import type { TaskDomainLookup } from "../external/org/domains.js";
 export interface OrgApiRouterDeps {
     leadsRoot: string;
     /** The application's resolved bind host — passed through, never re-derived. */
@@ -11,10 +13,17 @@ export interface OrgApiRouterDeps {
     openSync?: OrgFileReadDeps["openSync"];
     withDecisionsLock?: OrgFileWriteDeps["withDecisionsLock"];
     now?: () => Date;
+    /** Beat-register release lock tuning — defaults to the same
+     *  `DEFAULT_LOCK_OPTIONS` the secret-gated release route uses. */
+    releaseLockOptions?: BeatRegisterLockOptions;
     /** FR-04.42 — task-title lookup for `GET /api/org/threads`. Omitted
      *  (e.g. in tests that don't exercise that route) falls back to raw
-     *  taskIds instead of a real title. */
-    store?: TaskTitleLookup;
+     *  taskIds instead of a real title. Also backs (W14)
+     *  `GET /api/org/domains`' task-domain aggregation. */
+    store?: TaskTitleLookup & TaskDomainLookup;
+    /** iterate-2026-09-07-leadwright-setup-wizard (W14) — see OrgRouterDeps. */
+    leadwrightCheckoutRoot?: string;
+    webuiBaseUrl?: string;
 }
 export declare function createOrgApiRouter(deps: OrgApiRouterDeps): Hono;
 //# sourceMappingURL=org.d.ts.map

package/server/dist/routes/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAK1C,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAExF,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAOnF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;2CAEuC;IACvC,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CA+L/D"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAExF,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAInF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAI7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAKnE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;sEACkE;IAClE,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IAC7C;;;2DAGuD;IACvD,KAAK,CAAC,EAAE,eAAe,GAAG,gBAAgB,CAAC;IAC3C,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAgM/D"}

package/server/dist/routes/org.js

@@ -21,22 +21,29 @@
  *     shared-documents block (org-chart.json's sibling docs: conventions.md,
  *     principal.md, decision_log.md) and the charter.md fresh-load-before-
  *     edit round trip (`orgMarkdownFileApi.ts`).
- *   PUT /api/org/leads/:leadId/charter  — the ONLY browser write this
- *     iterate; refuses (403) anything that would resolve to a non-`charter`
- *     kind (AC-10) — in particular `decision_log.md` /
- *     `decisions-proposed.md`, which stay lock-guarded on the existing
- *     gated route only.
+ *   PUT /api/org/leads/:leadId/charter  — refuses (403) anything that would
+ *     resolve to a non-`charter` kind (AC-10) — in particular
+ *     `decision_log.md` / `decisions-proposed.md`, which stay lock-guarded
+ *     on the existing gated route only.
+ *   POST /api/org/leads/:leadId/beat-register/release,
+ *   POST /api/org/decisions/countersign — the second and third browser
+ *     writes; see `org-writes.ts`, which owns both (split out once this
+ *     file crossed the 300-line convention).
  */
 import { Hono } from "hono";
-import { isAllowedOrgRouteHost, resolveOrgAllowlistedTarget, LEAD_ID_RE } from "../external/org/_helpers.js";
+import { isAllowedOrgRouteHost, resolveOrgAllowlistedTarget } from "../external/org/_helpers.js";
 import { orgChartCore } from "../external/org/org-chart.js";
 import { readAllLeadOrgInfo } from "../external/org/org-chart-lookup.js";
 import { orgFileReadCore } from "../external/org/file-read.js";
 import { orgFileWriteCore } from "../external/org/file-write.js";
 import { buildLeadRosterEntry } from "./org-leads-composite.js";
 import { buildOrgThreads } from "./org-threads-composite.js";
+import { buildOrgInventory } from "./org-inventory-composite.js";
 import { leadLearningsReadCore } from "../external/org/lead-doc-read.js";
 import { auditLogCore } from "../external/org/audit-log.js";
+import { requireChartLead } from "./org-chart-lead-guard.js";
+import { registerOrgWriteActions } from "./org-writes.js";
+import { registerLeadSetupWizardRoutes } from "./org-lead-setup-wizard.js";
 const NO_TASKS = { get: () => undefined };
 export function createOrgApiRouter(deps) {
     const app = new Hono();
@@ -89,6 +96,23 @@ export function createOrgApiRouter(deps) {
         const body = buildOrgThreads({ leadsRoot, lstatSync: deps.lstatSync, store: deps.store ?? NO_TASKS }, Object.keys(chart.body.leads));
         return c.json(body, 200);
     });
+    // iterate-2026-09-08-lead-inventory-page — every lead's last-night beats
+    // (steps, unclaimed-effect warning) + authority panel, keyed by leadId,
+    // one call. Mirrors /api/org/threads exactly; see org-inventory-composite.ts.
+    app.get("/api/org/inventory", async (c) => {
+        const chart = orgChartCore({ leadsRoot, lstatSync: deps.lstatSync });
+        if (chart.status !== 200) {
+            return c.json(chart.body, chart.status);
+        }
+        const buildDeps = {
+            leadsRoot,
+            lstatSync: deps.lstatSync,
+            openSync: deps.openSync,
+            now: deps.now,
+        };
+        const body = buildOrgInventory(buildDeps, Object.entries(chart.body.leads).map(([leadId, lead]) => ({ leadId, charterPath: lead.charter_path })));
+        return c.json(body, 200);
+    });
     app.get("/api/org/file", async (c) => {
         const result = orgFileReadCore({ leadsRoot, openSync: deps.openSync }, c.req.query("path"));
         if (result.kind === "json") {
@@ -99,47 +123,13 @@ export function createOrgApiRouter(deps) {
         }
         return c.body(new Uint8Array(result.body), result.status);
     });
-    // Code-review fix (LOW, consistency): the charter PUT route below refuses
-    // an unregistered leadId (the HIGH external-review fix); these two GET
-    // routes previously only shape-checked the leadId and never checked chart
-    // membership, so a stale/decommissioned lead directory left on disk would
-    // still serve through the browser-facing proxy. Same posture, both verbs.
-    //
-    // Doubt-review fix (HIGH, security): a shape-invalid RAW leadId must be
-    // REJECTED here, never deferred to a downstream core's own check. That
-    // deferral was safe for the two GET routes (their cores re-validate the
-    // SAME raw string), but not for the PUT charter route below:
-    // `resolveOrgAllowlistedTarget` derives its OWN, more lenient "leadId" by
-    // slicing the path.resolve()-normalized absolute path, and Hono decodes a
-    // `%2f` in the route param (but not in path segmentation) — so a raw
-    // leadId of `"ghost-lead/"` (from the URL `ghost-lead%2f`) normalizes to
-    // the clean, registered `"acme-lead"`-shaped target while `LEAD_ID_RE`
-    // (correctly) rejects the RAW string with its trailing slash. Deferring
-    // on that rejection let the write proceed with NO chart-membership check
-    // at all. `LEAD_ID_RE` matches only `[a-z0-9][a-z0-9-]*` — no `/` or `.`
-    // — so a raw string that passes it can never diverge from its own
-    // path-normalized form; rejecting here closes the whole class, not just
-    // the one PoC. Same 400 `invalid_lead_id` shape the GET routes' cores
-    // already used, so their existing 400 contract is unchanged.
-    function requireChartLead(c, leadId) {
-        if (!LEAD_ID_RE.test(leadId)) {
-            return { ok: false, response: c.json({ error: "invalid_lead_id" }, 400) };
-        }
-        const chart = orgChartCore({ leadsRoot, lstatSync: deps.lstatSync });
-        if (chart.status !== 200) {
-            return { ok: false, response: c.json(chart.body, chart.status) };
-        }
-        if (!Object.hasOwn(chart.body.leads, leadId)) {
-            return {
-                ok: false,
-                response: c.json({ error: "unknown_lead", detail: "leadId is not a chart entry" }, 403),
-            };
-        }
-        return { ok: true };
-    }
+    // Every `:leadId`-scoped route below shares ONE chart-membership check —
+    // see `org-chart-lead-guard.ts` for the full rationale (moved there once
+    // this file crossed the 300-line convention).
+    const chartLeadDeps = { leadsRoot, lstatSync: deps.lstatSync };
     app.get("/api/org/leads/:leadId/learnings", async (c) => {
         const leadId = c.req.param("leadId");
-        const gate = requireChartLead(c, leadId);
+        const gate = requireChartLead(c, leadId, chartLeadDeps);
         if (!gate.ok)
             return gate.response;
         const leadDeps = { leadsRoot, openSync: deps.openSync };
@@ -154,7 +144,7 @@ export function createOrgApiRouter(deps) {
     });
     app.get("/api/org/leads/:leadId/audit", async (c) => {
         const leadId = c.req.param("leadId");
-        const gate = requireChartLead(c, leadId);
+        const gate = requireChartLead(c, leadId, chartLeadDeps);
         if (!gate.ok)
             return gate.response;
         const auditDeps = { leadsRoot, openSync: deps.openSync };
@@ -190,7 +180,7 @@ export function createOrgApiRouter(deps) {
         // have a charter.md written (and later read back through the same
         // allowlist) with no corresponding org-chart.json entry. Require the
         // lead to be a real roster member before the write proceeds.
-        const gate = requireChartLead(c, leadId);
+        const gate = requireChartLead(c, leadId, chartLeadDeps);
         if (!gate.ok)
             return gate.response;
         const writeDeps = {
@@ -206,6 +196,19 @@ export function createOrgApiRouter(deps) {
         });
         return c.json(result.body, result.status);
     });
+    registerOrgWriteActions(app, {
+        leadsRoot,
+        lstatSync: deps.lstatSync,
+        withDecisionsLock: deps.withDecisionsLock,
+        now: deps.now,
+        releaseLockOptions: deps.releaseLockOptions,
+    });
+    registerLeadSetupWizardRoutes(app, {
+        leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl ?? "http://localhost:5173",
+        store: deps.store,
+    });
     return app;
 }
 //# sourceMappingURL=org.js.map

package/server/dist/routes/org.js.map

@@ -1 +1 @@
-{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAA0B,MAAM,qCAAqC,CAAC;AACjG,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAyB,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAA4B,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAwB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAwB,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAqB,MAAM,8BAA8B,CAAC;AAG/E,MAAM,QAAQ,GAAoB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;AAiB3D,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAErC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,SAAS,GAAwB;YACrC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,4DAA4D;QAC5D,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,yDAAyD;QACzD,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,CAAC,MAAc,EAAqB,EAAE,CACvD,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CACpE,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;QACF,MAAM,IAAI,GAAwB,EAAE,KAAK,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,oEAAoE;IACpE,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAC1B,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,EACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9B,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,eAAe,CAC5B,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EACtC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,6DAA6D;IAC7D,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,6DAA6D;IAC7D,SAAS,gBAAgB,CAAC,CAAU,EAAE,MAAc;QAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,EAAE,EAAE,KAAc;gBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,6BAA6B,EAAE,EAAE,GAAG,CAAC;aACxF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,QAAQ,GAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,SAAS,GAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE;YACrC,MAAM;YACN,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,KAAK,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,MAAM,aAAa,CAAC;QAEvC,oEAAoE;QACpE,sDAAsD;QACtD,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,kCAAkC,EAAE,EACxE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEnC,MAAM,SAAS,GAAqB;YAClC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE;YAC/C,OAAO;YACP,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACnD,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YACxB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAiD,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/routes/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAA0B,MAAM,qCAAqC,CAAC;AACjG,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAyB,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAA4B,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAwB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAA8B,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAwB,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAqB,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAI3E,MAAM,QAAQ,GAAoB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;AAwB3D,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAErC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,SAAS,GAAwB;YACrC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,4DAA4D;QAC5D,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,yDAAyD;QACzD,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,sCAAsC;QACtC,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,CAAC,MAAc,EAAqB,EAAE,CACvD,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CACpE,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;QACF,MAAM,IAAI,GAAwB,EAAE,KAAK,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,oEAAoE;IACpE,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAC1B,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,EACvE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9B,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,wEAAwE;IACxE,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,SAAS,GAA0B;YACvC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,MAAM,IAAI,GAAG,iBAAiB,CAC5B,SAAS,EACT,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CACvG,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,eAAe,CAC5B,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EACtC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAE/D,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,QAAQ,GAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,SAAS,GAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE;YACrC,MAAM;YACN,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,KAAK,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,MAAM,aAAa,CAAC;QAEvC,oEAAoE;QACpE,sDAAsD;QACtD,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,kCAAkC,EAAE,EACxE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEnC,MAAM,SAAS,GAAqB;YAClC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE;YAC/C,OAAO;YACP,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACnD,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YACxB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAiD,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,uBAAuB,CAAC,GAAG,EAAE;QAC3B,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;KAC5C,CAAC,CAAC;IACH,6BAA6B,CAAC,GAAG,EAAE;QACjC,SAAS;QACT,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,uBAAuB;QAC1D,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAIjE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAQD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CA6DN"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAIjE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AASD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CAkFN"}

package/server/dist/routes/settings.js

@@ -1,8 +1,11 @@
 import { Hono } from "hono";
+import { migrateLegacyRuntimeDefault } from "../core/settings-reader.js";
+import { isValidCodextenderPort } from "../core/codextender-proxy-probe.js";
 const DEFAULT_SETTINGS = {
     port: 3847,
     maxConcurrent: 3,
     heartbeatIntervalMs: 30000,
+    runtimeDefault: "claude",
 };
 export function createSettingsRoutes(settingsPath, deps) {
     const app = new Hono();
@@ -12,7 +15,12 @@ export function createSettingsRoutes(settingsPath, deps) {
         }
         try {
             const content = await deps.readFile(settingsPath, "utf-8");
-            return c.json({ data: { ...DEFAULT_SETTINGS, ...JSON.parse(content) } });
+            return c.json({
+                data: {
+                    ...DEFAULT_SETTINGS,
+                    ...migrateLegacyRuntimeDefault(JSON.parse(content)),
+                },
+            });
         }
         catch {
             return c.json({ data: DEFAULT_SETTINGS });
@@ -20,6 +28,16 @@ export function createSettingsRoutes(settingsPath, deps) {
     });
     app.put("/api/settings", async (c) => {
         const body = await c.req.json();
+        // `codextenderPort` is interpolated into an outbound proxy URL
+        // (`core/codextender-proxy-probe.ts`) — an unvalidated value could
+        // redirect that request via URL userinfo-authority confusion (e.g.
+        // `"4000@attacker.example"`). Reject before it ever reaches disk
+        // (PR-review BLOCK, iterate-2026-09-23 fifth round); the probes
+        // themselves also re-validate as defense-in-depth against a value
+        // that reached settings.json some other way.
+        if ("codextenderPort" in body && !isValidCodextenderPort(body.codextenderPort)) {
+            return c.json({ error: "invalid_codextender_port", detail: "codextenderPort must be an integer from 1 to 65535." }, 400);
+        }
         const dir = settingsPath.substring(0, settingsPath.lastIndexOf("/"));
         if (dir && !deps.existsSync(dir)) {
             deps.mkdirSync(dir, { recursive: true });
@@ -38,7 +56,10 @@ export function createSettingsRoutes(settingsPath, deps) {
                 try {
                     const content = await deps.readFile(settingsPath, "utf-8");
                     if (content.trim()) {
-                        existing = { ...existing, ...JSON.parse(content) };
+                        existing = {
+                            ...existing,
+                            ...migrateLegacyRuntimeDefault(JSON.parse(content)),
+                        };
                     }
                 }
                 catch {

package/server/dist/routes/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAe5B,MAAM,gBAAgB,GAAmB;IACvC,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,CAAC;IAChB,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,IAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,qEAAqE;QACrE,gEAAgE;QAChE,8DAA8D;QAC9D,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEnD,8DAA8D;QAC9D,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,GAAG,GAAG,KAAK,IAA6B,EAAE;YAC9C,IAAI,QAAQ,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC3D,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;wBACnB,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;gBAChD,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,IAAI,MAAsB,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAc5E,MAAM,gBAAgB,GAAmB;IACvC,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,CAAC;IAChB,mBAAmB,EAAE,KAAK;IAC1B,cAAc,EAAE,QAAQ;CACzB,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,IAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE;oBACJ,GAAG,gBAAgB;oBACnB,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;iBACpD;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,+DAA+D;QAC/D,mEAAmE;QACnE,mEAAmE;QACnE,iEAAiE;QACjE,gEAAgE;QAChE,kEAAkE;QAClE,6CAA6C;QAC7C,IAAI,iBAAiB,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,qDAAqD,EAAE,EACpG,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,qEAAqE;QACrE,gEAAgE;QAChE,8DAA8D;QAC9D,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEnD,8DAA8D;QAC9D,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,GAAG,GAAG,KAAK,IAA6B,EAAE;YAC9C,IAAI,QAAQ,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC3D,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;wBACnB,QAAQ,GAAG;4BACT,GAAG,QAAQ;4BACX,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;yBACpD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;gBAChD,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,IAAI,MAAsB,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/routes/triage.d.ts

@@ -30,6 +30,23 @@ export interface TriageRoutesDeps {
      * when absent, items are returned without campaign annotations.
      */
     listCampaignRefs?: (projectId: string) => CampaignRef[];
+    /**
+     * Codex Light §3.5's correction — promote has no launch form / RuntimeToggle
+     * (PromoteModal.tsx never collected a per-task choice), so v1 scope is
+     * narrower: read the GLOBAL default directly, server-side, at promote time.
+     * Optional so existing tests that don't care about runtime keep passing —
+     * absent means "claude", same as the loader backfill.
+     */
+    getCodexRuntimeDefault?: () => Promise<"claude" | "codex" | undefined>;
+    /**
+     * Codextender integration Part B.1 — promote has no per-task toggle, so
+     * when the operator has restricted `codexAvailability` there is no choice
+     * to make: the created task's runtime is forced to the one allowed value,
+     * overriding `getCodexRuntimeDefault` entirely. Optional, same
+     * back-compat posture as `getCodexRuntimeDefault` — absent means "both"
+     * (today's behavior).
+     */
+    getCodexAvailability?: () => Promise<"both" | "claude_only" | "codex_only" | undefined>;
 }
 export declare function createTriageRoutes(deps: TriageRoutesDeps): Hono;
 //# sourceMappingURL=triage.d.ts.map

package/server/dist/routes/triage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/routes/triage.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAItE,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EACL,YAAY,EACZ,uBAAuB,EAGxB,MAAM,8BAA8B,CAAC;AAGtC,6EAA6E;AAC7E,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAqBvD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,cAAc,EAAE,MAAM,iBAAiB,EAAE,CAAC;IAC1C,yEAAyE;IACzE,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,iBAAiB,GAAG,SAAS,CAAC;IAC9D,gDAAgD;IAChD,KAAK,EAAE,gBAAgB,CAAC;IACxB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;IACnC,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACzD,8DAA8D;IAC9D,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;CACzD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAoa/D"}
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/routes/triage.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAItE,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAQlC,OAAO,EACL,YAAY,EACZ,uBAAuB,EAGxB,MAAM,8BAA8B,CAAC;AAGtC,6EAA6E;AAC7E,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAoCvD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,cAAc,EAAE,MAAM,iBAAiB,EAAE,CAAC;IAC1C,yEAAyE;IACzE,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,iBAAiB,GAAG,SAAS,CAAC;IAC9D,gDAAgD;IAChD,KAAK,EAAE,gBAAgB,CAAC;IACxB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;IACnC,qEAAqE;IACrE,uBAAuB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACzD,8DAA8D;IAC9D,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;IACxD;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IACvE;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC,CAAC;CACzF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAob/D"}

package/server/dist/routes/triage.js

@@ -41,6 +41,20 @@ export const TRIAGE_WRITE_AVAILABILITY_TTL_MS = 15_000;
  * constant fixes.
  */
 const PROMOTED_TASK_ACTION_ID = "new-iterate";
+/**
+ * iterate-2026-09-19-codex-launch-phase-empty: `actionId` alone is enough
+ * for the Claude launch path (`actions-substitute.ts` reads `actionId`, not
+ * `phase`), but a Codex-runtime task's launch prompt (`buildCodexCommands`
+ * -> `buildCodexPrompt`, launcher-codex.ts) is keyed on `task.phase` — it is
+ * what selects the SKILL.md pointer line and what the SHIPWRIGHT-STATUS
+ * self-report footer echoes back. Promote never set it, so a Codex-runtime
+ * promoted task shipped with `phase: undefined` and got no explicit
+ * instruction to read the iterate skill at all outside a curated repo's
+ * `AGENTS.md` (which most adopted projects don't have). `PROMOTED_TASK_
+ * ACTION_ID`'s own semantics ("new-iterate") already fix this task's phase
+ * unconditionally, so this is the same hardcode, not a catalog lookup.
+ */
+const PROMOTED_TASK_PHASE = "iterate";
 export function createTriageRoutes(deps) {
     const app = new Hono();
     const writeTriage = deps.runTriageCli ?? runTriageCli;
@@ -245,16 +259,31 @@ export function createTriageRoutes(deps) {
                     return c.json({ error: "invalid_description", detail: normalized.error }, 400);
                 }
                 const description = normalized.value;
+                // Codex Light §3.5 — global-default-only for this surface (no
+                // per-task toggle here; see TriageRoutesDeps.getCodexRuntimeDefault).
+                // Local PR-review preflight finding — settings.json is unvalidated
+                // JSON (settings-reader.ts), so normalize here rather than trust
+                // the persisted shape.
+                const availability = await deps.getCodexAvailability?.();
+                const runtime = availability === "claude_only"
+                    ? "claude"
+                    : availability === "codex_only"
+                        ? "codex"
+                        : (await deps.getCodexRuntimeDefault?.()) === "codex"
+                            ? "codex"
+                            : "claude";
                 const created = deps.store.create({
                     title: item.title,
                     cwd: project.path,
                     projectId,
                     actionId: PROMOTED_TASK_ACTION_ID,
+                    phase: PROMOTED_TASK_PHASE,
                     domain: parsed.value.domain,
                     priority: parsed.value.priority,
                     complexityHint: parsed.value.complexityHint,
                     tags: allTags,
                     promotedFromTriageId: parsed.value.triageId,
+                    runtime,
                     ...(description !== undefined ? { description } : {}),
                 });
                 await deps.store.persist();