@svenroth-ai/shipwright 0.27.0 → 0.28.0

package/server/dist/test/event-test-counts-fixtures.js

@@ -0,0 +1,56 @@
+/*
+ * event-test-counts-fixtures.ts — the effective-event-log reader shared by
+ * `event-test-counts-executed.test.ts` (the D4 ratchet). Split out purely
+ * to stay inside the 300-line source guideline — see that file's header for
+ * the full D4 history and convention-epoch rationale; this module owns only
+ * the I/O + amendment-overlay mechanics, no assertions.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseJsonlRecords } from "../core/jsonl-records.js";
+const here = path.dirname(fileURLToPath(import.meta.url));
+const repoRoot = path.resolve(here, "../../../");
+const eventsPath = path.join(repoRoot, "shipwright_events.jsonl");
+/**
+ * The convention starts with the run that introduced it. Events at or after
+ * this instant must satisfy the invariant; earlier ones are out of scope (see
+ * `event-test-counts-executed.test.ts`'s header). Anchored to the amendment
+ * batch that corrected the seven.
+ *
+ * Compared as an INSTANT, not lexically: 70 records in this log carry `+02:00`
+ * rather than `Z`, so string ordering and chronological ordering are not the
+ * same relation. (No record currently sorts differently either way, but the
+ * assumption has already been false once in this file's history.)
+ */
+export const CONVENTION_EPOCH_MS = Date.parse("2026-07-21T00:00:00Z");
+/**
+ * Effective events: `event_amended` rows overlay their target, as every
+ * compliance consumer sees them (shared `events_amend.apply_amendments`).
+ *
+ * LAST AMENDMENT WINS PER TARGET — deliberately, and it mirrors the shared
+ * implementation exactly (`amendments[amends] = fields` replaces, it does not
+ * deep-merge). DO NOT "fix" this into a cumulative merge: that would make this
+ * guard read a different effective log than the audit does. The convention is
+ * that a second amendment RESTATES everything it wants to keep — the
+ * 2026-06-29 amendment of `evt-2646f4da` re-lists `FR-01.01` alongside the
+ * `FR-01.42` it adds, precisely because the earlier overlay is discarded.
+ */
+export function effectiveEvents() {
+    // Read the log the way the audit does — via the tolerant record reader, NOT a
+    // per-line `JSON.parse`. `merge=union` on an append-only log can put two
+    // records on one physical line (the whole reason `jsonl-records.ts` exists),
+    // and a plain parse drops BOTH, which would make an offending record
+    // invisible to this guard while the audit still judged it.
+    const rows = parseJsonlRecords(fs.readFileSync(eventsPath, "utf-8"))
+        .records;
+    const amendments = new Map();
+    for (const row of rows) {
+        if (row.type === "event_amended")
+            amendments.set(row.amends, row.fields ?? {});
+    }
+    return rows
+        .filter((row) => row.type !== "event_amended")
+        .map((row) => (amendments.has(row.id) ? { ...row, ...amendments.get(row.id) } : row));
+}
+//# sourceMappingURL=event-test-counts-fixtures.js.map

package/server/dist/test/event-test-counts-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-test-counts-fixtures.js","sourceRoot":"","sources":["../../src/test/event-test-counts-fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAkBtE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe;IAC7B,8EAA8E;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;SACjE,OAAwB,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC;SAC7C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/server/dist/types/leadwright-beat-step.d.ts

@@ -0,0 +1,19 @@
+export declare const BEAT_STEP_BANDS: readonly ["bugfix", "maintenance", "feature", "architecture"];
+export type BeatStepBand = (typeof BEAT_STEP_BANDS)[number];
+export type BeatStepEffect = {
+    kind: "card";
+    taskId: string;
+} | {
+    kind: "decision";
+    decisionKey: string;
+} | {
+    kind: "none";
+};
+export interface BeatStep {
+    at: string;
+    band: BeatStepBand;
+    summary: string;
+    effect: BeatStepEffect;
+}
+export declare function isValidBeatStep(v: unknown): v is BeatStep;
+//# sourceMappingURL=leadwright-beat-step.d.ts.map

package/server/dist/types/leadwright-beat-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-beat-step.d.ts","sourceRoot":"","sources":["../../src/types/leadwright-beat-step.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,eAAe,+DAAgE,CAAC;AAE7F,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;CACxB;AAWD,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAYzD"}

package/server/dist/types/leadwright-beat-step.js

@@ -0,0 +1,56 @@
+/*
+ * leadwright-beat-step.ts — hand-typed mirror of leadwright's published
+ * beat-step contract (iterate-2026-09-08-lead-inventory-page). Vendored
+ * source: server/src/vendor/leadwright/beat-step.schema.json, copied
+ * byte-for-byte from leadwright origin/main @
+ * db2938b308899b8cbca017b291c18696a54844b5 (PR #75 added steps.jsonl +
+ * this schema; PR #78 wired the production writer). Verified on
+ * origin/main, not a local-only commit.
+ *
+ * CLAUDE.md rule 7 (ADR-080): no cross-package import — this is a verbatim
+ * mirror kept in fidelity-test sync (leadwright-beat-step.test.ts), which
+ * reads the vendored JSON fresh off disk rather than diffing bytes against
+ * a live leadwright checkout (no such dependency exists here).
+ *
+ * `isValidBeatStep` deliberately validates ONLY the fields this viewer
+ * consumes and TOLERATES unknown properties — looser than the vendored
+ * schema's own `additionalProperties: false`. A future leadwright field
+ * addition should degrade to "ignored", not "every line in every
+ * steps.jsonl rejected" (Internal Plan Review finding #6).
+ *
+ * Cross-repo drift cannot be caught by any test in this repo — this repo
+ * has no build-time dependency on a leadwright checkout, so a schema change
+ * on leadwright's main after the pinned commit above is silent here until a
+ * human re-vendors deliberately and bumps the pin.
+ */
+/** Mirrors the vendored schema's own `at` pattern exactly (external code
+ *  review, low/bug): `isValidBeatStep` previously accepted any string for
+ *  `at`, so a malformed timestamp (`"not-a-time"`) rendered as a valid
+ *  logged step instead of being counted as an unreadable line. */
+const BEAT_STEP_AT_RE = /^\d{4}-\d{2}-\d{2}T/;
+export const BEAT_STEP_BANDS = ["bugfix", "maintenance", "feature", "architecture"];
+function isValidEffect(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const e = v;
+    if (e.kind === "card")
+        return typeof e.taskId === "string" && e.taskId.length > 0;
+    if (e.kind === "decision")
+        return typeof e.decisionKey === "string" && e.decisionKey.length > 0;
+    if (e.kind === "none")
+        return true;
+    return false;
+}
+export function isValidBeatStep(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const s = v;
+    return (typeof s.at === "string" &&
+        BEAT_STEP_AT_RE.test(s.at) &&
+        typeof s.band === "string" &&
+        BEAT_STEP_BANDS.includes(s.band) &&
+        typeof s.summary === "string" &&
+        s.summary.length > 0 &&
+        isValidEffect(s.effect));
+}
+//# sourceMappingURL=leadwright-beat-step.js.map

package/server/dist/types/leadwright-beat-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-beat-step.js","sourceRoot":"","sources":["../../src/types/leadwright-beat-step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;kEAGkE;AAClE,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,CAAU,CAAC;AAgB7F,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QACzB,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACpB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CACxB,CAAC;AACJ,CAAC"}

package/server/dist/types/leadwright-preflight.d.ts

@@ -0,0 +1,90 @@
+export declare const PREFLIGHT_INPUT_CONTRACT_VERSION = 1;
+export declare const PREFLIGHT_RESULT_CONTRACT_VERSION = 1;
+/** Same pattern webui's own `_helpers.ts` LEAD_ID_RE uses — confirmed
+ *  identical to leadwright's own lead-id/domain pattern by the fidelity
+ *  test. One regex, reused for kebab-case validation everywhere. */
+export declare const LEAD_ID_RE: RegExp;
+/** charter_path / learnings_path: relative, no leading '/', no '..'
+ *  substring anywhere. These stay RELATIVE (resolved by leadwright against
+ *  leadsRoot) — never touched by the absolute-path rule below. */
+export declare const CHARTER_LEARNINGS_PATH_RE: RegExp;
+/** allowed_skills entries: a leading '/' then kebab-case. */
+export declare const ALLOWED_SKILL_RE: RegExp;
+export declare const PREFLIGHT_INPUT_REQUIRED_FIELDS: readonly ["orgChart", "charters", "daemonConfig"];
+export declare const LEAD_REQUIRED_FIELDS: readonly ["name", "domain", "reports_to", "manages", "charter_path", "learnings_path", "triggers", "max_concurrent_tasks", "budget", "projects", "allowed_skills", "escalation_target", "model"];
+export declare const PREFLIGHT_RESULT_REQUIRED_FIELDS: readonly ["ok", "findings"];
+export declare const PREFLIGHT_FINDING_REQUIRED_FIELDS: readonly ["key", "layer", "satisfied", "message"];
+/** The 5 daemonConfig fields the absolute-path rule (finding
+ *  `proposal-paths-absolute`) binds. Deliberately excludes `orgChartPath`
+ *  (submitted inline via the top-level `orgChart` field, never read from
+ *  `daemonConfig.orgChartPath`) and charter_path/learnings_path (those stay
+ *  relative — see CHARTER_LEARNINGS_PATH_RE above). */
+export declare const ABSOLUTE_PATH_BOUND_DAEMON_CONFIG_FIELDS: readonly ["leadsRoot", "sdkSessionsPath", "pluginDirs", "leadProjectRoots", "leadPluginDirs"];
+export type PreflightTriggerEventType = "answer_received" | "chat_session_ended";
+export type PreflightModel = "fast" | "balanced" | "deep";
+export interface PreflightLead {
+    name: string;
+    domain: string;
+    reports_to: string | null;
+    manages: string[];
+    charter_path: string;
+    learnings_path: string;
+    triggers: {
+        cron: string;
+        on: PreflightTriggerEventType[];
+    };
+    max_concurrent_tasks: number;
+    budget: {
+        window: "rolling-7d";
+        usd: number | null;
+        pause_at: number;
+        hard_stop_at: number;
+    };
+    projects: string[];
+    allowed_skills: string[];
+    allowed_tools: string[];
+    escalation_target: string;
+    model: PreflightModel;
+    paused: boolean;
+}
+export interface PreflightOrgChart {
+    version: 2;
+    po: string;
+    leads: Record<string, PreflightLead>;
+}
+export interface PreflightCharter {
+    leadId: string;
+    content: string;
+}
+export interface PreflightDaemonConfig {
+    orgChartPath: string;
+    leadsRoot?: string;
+    sdkSessionsPath?: string;
+    webuiBaseUrl: string;
+    leadProjectRoots?: Record<string, string>;
+    leadActionIds?: Record<string, string>;
+    pluginDirs?: string[];
+    leadPluginDirs?: Record<string, string[]>;
+    pollIntervalMs?: number;
+    beatTimeoutMs?: number;
+}
+/** The full `--stdin` document — what the verdict/commit transport writes
+ *  to the child's stdin, JSON-stringified. */
+export interface PreflightStdinInput {
+    orgChart: PreflightOrgChart;
+    charters: PreflightCharter[];
+    daemonConfig: PreflightDaemonConfig;
+}
+export type PreflightFindingLayer = "MUSS" | "KANN" | "advisory";
+export interface PreflightFinding {
+    key: string;
+    layer: PreflightFindingLayer;
+    satisfied: boolean;
+    unverifiable?: boolean;
+    message: string;
+}
+export interface PreflightResult {
+    ok: boolean;
+    findings: PreflightFinding[];
+}
+//# sourceMappingURL=leadwright-preflight.d.ts.map

package/server/dist/types/leadwright-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-preflight.d.ts","sourceRoot":"","sources":["../../src/types/leadwright-preflight.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAEnD;;oEAEoE;AACpE,eAAO,MAAM,UAAU,QAAyB,CAAC;AAEjD;;kEAEkE;AAClE,eAAO,MAAM,yBAAyB,QAAyB,CAAC;AAEhE,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD,eAAO,MAAM,+BAA+B,mDAAoD,CAAC;AAEjG,eAAO,MAAM,oBAAoB,kMAcvB,CAAC;AAEX,eAAO,MAAM,gCAAgC,6BAA8B,CAAC;AAE5E,eAAO,MAAM,iCAAiC,mDAAoD,CAAC;AAEnG;;;;uDAIuD;AACvD,eAAO,MAAM,wCAAwC,+FAM3C,CAAC;AAEX,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;AACjF,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,yBAAyB,EAAE,CAAA;KAAE,CAAC;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;8CAC8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,YAAY,EAAE,qBAAqB,CAAC;CACrC;AAED,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B"}

package/server/dist/types/leadwright-preflight.js

@@ -0,0 +1,65 @@
+/*
+ * leadwright-preflight.ts — hand-typed mirror of leadwright's published
+ * setup-preflight transport contract (iterate-2026-09-07-leadwright-setup-
+ * wizard, W14). Vendored source: server/src/vendor/leadwright/
+ * preflight-{input,result}.schema.json, re-vendored from leadwright main
+ * @ df2c5f6 (2026-09-09, iterate-2026-09-09-leadwright-schema-drift).
+ * PreflightTriggerEventType stays a closed 2-value union on purpose even
+ * though leadwright #79 opened the wire schema's triggers.on to an open
+ * lowercase-snake-case pattern — this mirror types only what webui itself
+ * ever emits, not the full breadth the wire contract now allows.
+ *
+ * CLAUDE.md rule 7 (ADR-080): no cross-package import — this is a verbatim
+ * mirror kept in fidelity-test sync (leadwright-preflight.test.ts), same
+ * posture as core/claim-record-lock.ts's relationship to
+ * vendor/leadwright/claim-record-lock-contract.json.
+ *
+ * "Never compute a verdict here" (the card's own instruction): these types
+ * describe the wire shape ONLY. No validation logic beyond the regexes a
+ * caller needs to avoid submitting something leadwright will report as a
+ * named finding anyway — leadwright's own `--stdin` zod gate remains the
+ * sole judge of a proposal's correctness.
+ */
+export const PREFLIGHT_INPUT_CONTRACT_VERSION = 1;
+export const PREFLIGHT_RESULT_CONTRACT_VERSION = 1;
+/** Same pattern webui's own `_helpers.ts` LEAD_ID_RE uses — confirmed
+ *  identical to leadwright's own lead-id/domain pattern by the fidelity
+ *  test. One regex, reused for kebab-case validation everywhere. */
+export const LEAD_ID_RE = /^[a-z0-9][a-z0-9-]*$/;
+/** charter_path / learnings_path: relative, no leading '/', no '..'
+ *  substring anywhere. These stay RELATIVE (resolved by leadwright against
+ *  leadsRoot) — never touched by the absolute-path rule below. */
+export const CHARTER_LEARNINGS_PATH_RE = /^(?!\/)(?!.*\.\.).+$/;
+/** allowed_skills entries: a leading '/' then kebab-case. */
+export const ALLOWED_SKILL_RE = /^\/[a-z0-9][a-z0-9-]*$/;
+export const PREFLIGHT_INPUT_REQUIRED_FIELDS = ["orgChart", "charters", "daemonConfig"];
+export const LEAD_REQUIRED_FIELDS = [
+    "name",
+    "domain",
+    "reports_to",
+    "manages",
+    "charter_path",
+    "learnings_path",
+    "triggers",
+    "max_concurrent_tasks",
+    "budget",
+    "projects",
+    "allowed_skills",
+    "escalation_target",
+    "model",
+];
+export const PREFLIGHT_RESULT_REQUIRED_FIELDS = ["ok", "findings"];
+export const PREFLIGHT_FINDING_REQUIRED_FIELDS = ["key", "layer", "satisfied", "message"];
+/** The 5 daemonConfig fields the absolute-path rule (finding
+ *  `proposal-paths-absolute`) binds. Deliberately excludes `orgChartPath`
+ *  (submitted inline via the top-level `orgChart` field, never read from
+ *  `daemonConfig.orgChartPath`) and charter_path/learnings_path (those stay
+ *  relative — see CHARTER_LEARNINGS_PATH_RE above). */
+export const ABSOLUTE_PATH_BOUND_DAEMON_CONFIG_FIELDS = [
+    "leadsRoot",
+    "sdkSessionsPath",
+    "pluginDirs",
+    "leadProjectRoots",
+    "leadPluginDirs",
+];
+//# sourceMappingURL=leadwright-preflight.js.map

package/server/dist/types/leadwright-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-preflight.js","sourceRoot":"","sources":["../../src/types/leadwright-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAEnD;;oEAEoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAEjD;;kEAEkE;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAEhE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAEzD,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAU,CAAC;AAEjG,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,sBAAsB;IACtB,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;AAEnG;;;;uDAIuD;AACvD,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;CACR,CAAC"}

package/server/dist/types/leadwright-schema-drift.d.ts

@@ -0,0 +1,28 @@
+/** Lists the basenames of every regular file directly inside `dir`
+ *  (non-recursive, alphabetically sorted). Directory-driven on purpose —
+ *  the caller must never hardcode a filename list, or a newly vendored file
+ *  silently falls outside the check. */
+export declare function listVendorFiles(dir: string): string[];
+/** Deep-compares two parsed JSON values and returns a pointer-like path
+ *  (not RFC-6901-escaped — diagnostic-only, never parsed back) to the first
+ *  difference found, or `undefined` when they're equal. Object key order
+ *  never matters; array element order does. */
+export declare function findFirstJsonDiff(a: unknown, b: unknown, pointer?: string): string | undefined;
+export interface SchemaDriftResult {
+    file: string;
+    matches: boolean;
+    /** JSON-pointer path to the first differing key; set only when matches is false. */
+    diffPath?: string;
+}
+export interface CompareVendoredFileOptions {
+    /** Directory holding our vendored copy. */
+    vendorDir: string;
+    /** Directory holding the upstream source-of-truth copy (e.g. `<leadwright checkout>/schemas`). */
+    sourceDir: string;
+    /** Basename shared by both directories. */
+    file: string;
+}
+/** Compares one vendored file against its counterpart in `sourceDir`, JSON
+ *  parsed on both sides (never bytes — see file header). */
+export declare function compareVendoredFile({ vendorDir, sourceDir, file }: CompareVendoredFileOptions): SchemaDriftResult;
+//# sourceMappingURL=leadwright-schema-drift.d.ts.map

package/server/dist/types/leadwright-schema-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-schema-drift.d.ts","sourceRoot":"","sources":["../../src/types/leadwright-schema-drift.ts"],"names":[],"mappings":"AAoBA;;;wCAGwC;AACxC,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrD;AAmBD;;;+CAG+C;AAC/C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,SAAK,GAAG,MAAM,GAAG,SAAS,CA4B1F;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;4DAC4D;AAC5D,wBAAgB,mBAAmB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,0BAA0B,GAAG,iBAAiB,CAKjH"}

package/server/dist/types/leadwright-schema-drift.js

@@ -0,0 +1,89 @@
+/*
+ * leadwright-schema-drift.ts — comparison primitives for
+ * leadwright-schema-drift.test.ts (iterate-2026-09-09-leadwright-schema-
+ * drift). Lives in types/, not vendor/leadwright/, on purpose: that
+ * directory's contract is "runtime JSON only, safe for copy-assets.mjs to
+ * blanket-cpSync into dist/" — a logic-plus-test module dropped in there
+ * would ride along into the production build unnoticed.
+ *
+ * leadwright's `.gitattributes` marks `schemas/*.schema.json` as `eol=lf`,
+ * but a Windows checkout can still leave those files CRLF-dirty in the
+ * working tree (attributes only apply at checkout time — a clone that
+ * already had them as CRLF keeps them until re-checked-out) while `git
+ * diff`/`git status` stay clean. Comparing bytes or a hash would therefore
+ * fail spuriously on every Windows machine. Everything here compares
+ * PARSED JSON instead.
+ */
+import { readFileSync, readdirSync } from "node:fs";
+import path from "node:path";
+/** Lists the basenames of every regular file directly inside `dir`
+ *  (non-recursive, alphabetically sorted). Directory-driven on purpose —
+ *  the caller must never hardcode a filename list, or a newly vendored file
+ *  silently falls outside the check. */
+export function listVendorFiles(dir) {
+    return readdirSync(dir, { withFileTypes: true })
+        .filter((entry) => entry.isFile())
+        .map((entry) => entry.name)
+        .sort();
+}
+/** Reads + parses `filePath`, rethrowing with `label` (e.g. "vendor" /
+ *  "checkout") so a missing-file failure reads as "vendor copy of X is
+ *  missing" rather than a bare Node ENOENT with no side attached. */
+function readJson(filePath, label) {
+    let raw;
+    try {
+        raw = readFileSync(filePath, "utf-8");
+    }
+    catch (err) {
+        throw new Error(`${label} file not found: ${filePath}`, { cause: err });
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`${label} file is not valid JSON: ${filePath}`, { cause: err });
+    }
+}
+/** Deep-compares two parsed JSON values and returns a pointer-like path
+ *  (not RFC-6901-escaped — diagnostic-only, never parsed back) to the first
+ *  difference found, or `undefined` when they're equal. Object key order
+ *  never matters; array element order does. */
+export function findFirstJsonDiff(a, b, pointer = "") {
+    if (a === b)
+        return undefined;
+    const aIsObj = a !== null && typeof a === "object";
+    const bIsObj = b !== null && typeof b === "object";
+    if (!aIsObj || !bIsObj)
+        return pointer || "/";
+    const aIsArr = Array.isArray(a);
+    const bIsArr = Array.isArray(b);
+    if (aIsArr !== bIsArr)
+        return pointer || "/";
+    if (aIsArr && bIsArr) {
+        const len = Math.max(a.length, b.length);
+        for (let i = 0; i < len; i++) {
+            const diff = findFirstJsonDiff(a[i], b[i], `${pointer}/${i}`);
+            if (diff !== undefined)
+                return diff;
+        }
+        return undefined;
+    }
+    const aRec = a;
+    const bRec = b;
+    const keys = new Set([...Object.keys(aRec), ...Object.keys(bRec)]);
+    for (const key of keys) {
+        const diff = findFirstJsonDiff(aRec[key], bRec[key], `${pointer}/${key}`);
+        if (diff !== undefined)
+            return diff;
+    }
+    return undefined;
+}
+/** Compares one vendored file against its counterpart in `sourceDir`, JSON
+ *  parsed on both sides (never bytes — see file header). */
+export function compareVendoredFile({ vendorDir, sourceDir, file }) {
+    const vendored = readJson(path.join(vendorDir, file), "vendor");
+    const source = readJson(path.join(sourceDir, file), "checkout");
+    const diffPath = findFirstJsonDiff(vendored, source);
+    return diffPath === undefined ? { file, matches: true } : { file, matches: false, diffPath };
+}
+//# sourceMappingURL=leadwright-schema-drift.js.map

package/server/dist/types/leadwright-schema-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-schema-drift.js","sourceRoot":"","sources":["../../src/types/leadwright-schema-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;wCAGwC;AACxC,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;qEAEqE;AACrE,SAAS,QAAQ,CAAC,QAAgB,EAAE,KAAa;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;+CAG+C;AAC/C,MAAM,UAAU,iBAAiB,CAAC,CAAU,EAAE,CAAU,EAAE,OAAO,GAAG,EAAE;IACpE,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;IACnD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,IAAI,GAAG,CAAC;IAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,OAAO,IAAI,GAAG,CAAC;IAE7C,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkBD;4DAC4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAA8B;IAC5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/F,CAAC"}

package/server/dist/types/org-inventory.d.ts

@@ -0,0 +1,53 @@
+import type { CharterAuthorityResult } from "../external/org/charter-authority-read.js";
+import type { BeatStep } from "./leadwright-beat-step.js";
+export type StepsView = {
+    status: "ok";
+    steps: BeatStep[];
+    unreadableLines: number;
+} | {
+    status: "unreadable";
+};
+/** `"clear"` = the audit lookup ran and found nothing for this beat;
+ *  `"found"` = a `beat_effect_not_claimed` entry names this beat;
+ *  `"unknown"` = the audit lookup itself degraded (a genuine read failure,
+ *  AC-9) — NEVER collapsed into `"clear"`. `"found"` always wins outright
+ *  over `"unknown"`, even from a scan that later failed. */
+export type UnclaimedEffectView = {
+    status: "clear" | "found" | "unknown";
+};
+/** `"ok"` = the register file was read (present-and-valid, or legitimately
+ *  absent — a lead that has simply never run); `"unreadable"` = a genuine
+ *  read failure (corrupt JSON, invalid leadId, symlink, containment
+ *  breach) — NEVER collapsed into "zero beats" (code review, Stage 2:
+ *  that collapse read exactly like a lead that has never had a beat). */
+export type RegisterView = {
+    status: "ok" | "unreadable";
+};
+export interface BeatInventoryView {
+    beatId: string;
+    /** The register's own `startedAt` (always a string field — but its VALUE
+     *  may be unparseable; see `beats` below). */
+    startedAt: string;
+    closedAt: string | null;
+    steps: StepsView;
+    unclaimedEffect: UnclaimedEffectView;
+}
+/** Verbatim alias — the AuthorityPanel's shape IS `charterAuthorityCore`'s
+ *  result, not a re-derivation of it. */
+export type AuthorityPanelView = CharterAuthorityResult;
+export interface LeadInventoryEntry {
+    leadId: string;
+    /** Cheap `entries.length` over the full register — lets the client tell
+     *  "never had a beat" apart from "has history, none in this window"
+     *  (AC-8). */
+    totalBeatsInRegister: number;
+    /** Server-side bounded to `startedAt >= now - 48h` (an unparseable
+     *  `startedAt` value is INCLUDED, never dropped); ordered `startedAt`
+     *  ascending (AC-11). The client narrows further to the exact "last
+     *  night" window. */
+    beats: BeatInventoryView[];
+    register: RegisterView;
+    authority: AuthorityPanelView;
+}
+export type LeadInventoryResponse = Record<string, LeadInventoryEntry>;
+//# sourceMappingURL=org-inventory.d.ts.map

package/server/dist/types/org-inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-inventory.d.ts","sourceRoot":"","sources":["../../src/types/org-inventory.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1D,MAAM,MAAM,SAAS,GACjB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAE7B;;;;4DAI4D;AAC5D,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;CAAE,CAAC;AAE5E;;;;yEAIyE;AACzE,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,IAAI,GAAG,YAAY,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;kDAC8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,SAAS,CAAC;IACjB,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED;yCACyC;AACzC,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf;;kBAEc;IACd,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;yBAGqB;IACrB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC"}

package/server/dist/types/org-inventory.js

@@ -0,0 +1,11 @@
+/*
+ * types/org-inventory.ts — wire shapes for `GET /api/org/inventory`
+ * (iterate-2026-09-08-lead-inventory-page). New file rather than an edit to
+ * `types/org.ts` (already at its 300-line convention ceiling) — same reason
+ * `org-schema-sync.test.ts`'s sibling files stay split by route family.
+ *
+ * Client-side mirrors live in `client/src/lib/leadInventoryApi.ts` (CLAUDE.md
+ * rule 7 — verbatim copy, no cross-package import).
+ */
+export {};
+//# sourceMappingURL=org-inventory.js.map

package/server/dist/types/org-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-inventory.js","sourceRoot":"","sources":["../../src/types/org-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/server/dist/types/org.d.ts

@@ -65,18 +65,35 @@ export type BeatRegisterHealthResponse = {
     sessionId: string;
     entries: BeatRegisterEntryView[];
 };
+/**
+ * `resting`'s last-run sub-shape — a NAMED type (not inlined into
+ * `LeadNowState`) so `org-schema-sync.test.ts`'s per-arm comparison, which
+ * only walks TOP-LEVEL arm fields, actually checks it: an inlined nested
+ * object is invisible to that guard (internal-plan-review finding,
+ * iterate-2026-09-06-org-lead-staleness-register).
+ *
+ * Carries the SAME staleness verdict `lastRunCore` already computes —
+ * `staleness`/`cadenceUnresolvedReason` are taken verbatim, never
+ * recomputed from `lastRunAt` + a cron string client-side (two
+ * implementations of one rule drift). `staleness: "unknown"` is a THIRD
+ * state, not a synonym for fresh or stale — it must never render as if the
+ * cadence were resolved.
+ */
+export type LeadLastRunView = {
+    measured: false;
+} | {
+    measured: true;
+    lastRunAt: string;
+    staleness: Staleness | "unknown";
+    cadenceUnresolvedReason?: CadenceUnresolvedReason;
+};
 /** The Now block's four states (iterate spec AC-2) — "waiting on you" is
  *  deliberately absent, see the iterate spec's Design Notes. */
 export type LeadNowState = {
     state: "running";
 } | {
     state: "resting";
-    lastRun: {
-        measured: false;
-    } | {
-        measured: true;
-        lastRunAt: string;
-    };
+    lastRun: LeadLastRunView;
 } | {
     state: "needs-attention";
     reason: "duplicate-session";
@@ -96,6 +113,36 @@ export type LeadCadenceView = {
     text: string;
     cron: string;
 };
+/**
+ * The roster's OWN register-health view — deliberately NOT
+ * `BeatRegisterHealthResponse` (that type's `clear`/`open`/`fault` are
+ * exactly what `evaluateRegisterHealth` returns for the secret-gated route,
+ * and stays that way). This adds a FOURTH arm, `unknown`, for a genuine
+ * read failure (symlink refusal, corrupt file, path traversal, read
+ * error) — internal-plan-review finding: those failures are not "no open
+ * entry", and collapsing them into `clear` would fabricate a health claim
+ * for exactly the fault cases that matter. Arms are spelled out literally
+ * (not `BeatRegisterHealthResponse | {...unknown}`) because
+ * `org-schema-sync.test.ts`'s arm parser requires each union member to be
+ * its own `{ ... }` literal with a discriminant, not a bare type reference.
+ */
+export type LeadRegisterView = {
+    leadId: string;
+    status: "clear";
+} | {
+    leadId: string;
+    status: "open";
+    entry: BeatRegisterEntryView;
+} | {
+    leadId: string;
+    status: "fault";
+    reason: "duplicate-session-id";
+    sessionId: string;
+    entries: BeatRegisterEntryView[];
+} | {
+    leadId: string;
+    status: "unknown";
+};
 export interface LeadRosterEntry {
     leadId: string;
     domain: string;
@@ -105,6 +152,10 @@ export interface LeadRosterEntry {
     now: LeadNowState;
     cadence: LeadCadenceView;
     usage: UsageResponse;
+    /** FR-04.41 — the beat-register's own classification. See
+     *  `LeadRegisterView`'s doc comment for why a read failure is `unknown`,
+     *  never silently `clear`. */
+    register: LeadRegisterView;
 }
 export interface LeadsRosterResponse {
     leads: LeadRosterEntry[];

package/server/dist/types/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/types/org.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAS7E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACzC;AAMD,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnC;IACE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;8EAC0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;+EAC2E;IAC3E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAMN,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAEzE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnC;IACE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD,CAAC;AAMN,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChE;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAWN;gEACgE;AAChE,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IACE,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE;QAAE,QAAQ,EAAE,KAAK,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE,GACD;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACzD;IAAE,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE9B,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAcD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAQrE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/types/org.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAS7E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACzC;AAMD,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnC;IACE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;8EAC0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;+EAC2E;IAC3E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAMN,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAEzE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnC;IACE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD,CAAC;AAMN,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChE;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAWN;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IACE,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD,CAAC;AAEN;gEACgE;AAChE,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAC9C;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACzD;IAAE,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE9B,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,GACnB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChE;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,GACD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,aAAa,CAAC;IACrB;;kCAE8B;IAC9B,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAcD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAQrE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}