@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/external/inbox/routes.js

@@ -10,10 +10,19 @@
  *   - `lead_question` — a leadwright follow-up WRITTEN onto the task's
  *     `description` (FR-04.19), not derived from a JSONL/terminal read
  *     — see `./_lead.ts`.
+ *   - `codex_watcher` — a notice from `CodexTaskWatcher`'s ephemeral,
+ *     in-memory snapshot (Codex Light AC6: auto-nudge outcome,
+ *     delivery_pending errors, unresolved no_oracle self-checks, failed
+ *     launch confirmations) — see `./_codex.ts`.
+ *   - `codex_approval` / `codex_error` — a pending Codex approval dialog or
+ *     a structured Codex error visible in the LIVE embedded terminal
+ *     (Codex Light §5.3/AC6), independent of the silence-timer/oracle loop
+ *     — see `./_codex.ts`.
  *
  * Precedence: ask_tool > terminal_prompt > text_question. terminal_prompt
  * is a post-pass over the JSONL-derived set so the mtime-keyed cache
- * stays byte-identical. `lead_question` is independent of that precedence.
+ * stays byte-identical. `lead_question`, `codex_watcher`, `codex_approval`
+ * and `codex_error` are each independent of that precedence.
  *
  * Phase A4 hot-path: per-session derive cache + negative-result cache
  * — see `./_cache.ts`. JSONL cold-path + terminal_prompt post-pass live
@@ -23,9 +32,11 @@ import { Hono } from "hono";
 import { inboxDeriveCache } from "./_cache.js";
 import { deriveInboxFromJsonl, appendTerminalPrompts } from "./_derive.js";
 import { appendLeadQuestions, extractLeadQuestionBody, LEAD_QUESTION_DISMISS_PREFIX, } from "./_lead.js";
+import { appendPhaseGates } from "./_phase-gate.js";
+import { appendCodexWatcherNotices, appendCodexTerminalSignals } from "./_codex.js";
 export function createInboxRouter(deps) {
     const app = new Hono();
-    const { store, watcher, ptyManager } = deps;
+    const { store, watcher, ptyManager, codexWatcher } = deps;
     app.get("/api/external/inbox", async (c) => {
         const { entries, storeDirty } = await deriveInboxFromJsonl({
             store,
@@ -33,6 +44,10 @@ export function createInboxRouter(deps) {
         });
         appendTerminalPrompts(entries, { store, ptyManager });
         appendLeadQuestions(entries, { store });
+        if (codexWatcher)
+            appendCodexWatcherNotices(entries, { store, codexWatcher });
+        appendCodexTerminalSignals(entries, { store, ptyManager });
+        await appendPhaseGates(entries, { store });
         if (storeDirty)
             await store.persist();
         return c.json({ items: entries });

package/server/dist/external/inbox/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/inbox/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAWpB,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACzD,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QACH,qBAAqB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,mBAAmB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,IAAI,UAAU;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAChE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBACvB,KAAK,EAAE;oBACL,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CACzB;oBACD,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC1C,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB;iBAC5D;aACF,CAAC,CAAC;YACH,gEAAgE;YAChE,gEAAgE;YAChE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,SAAS,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IACE,IAAI;gBACJ,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI;gBAClD,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EACnD,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACvB,KAAK,EAAE;wBACL,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;wBAC/C,mBAAmB,EAAE;4BACnB,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB;4BACjC,SAAS;yBACV;wBACD,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB;qBAC5D;iBACF,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAC9D,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/inbox/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAkBpF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAE1D,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACzD,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QACH,qBAAqB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,mBAAmB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,IAAI,YAAY;YAAE,yBAAyB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9E,0BAA0B,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,gBAAgB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,IAAI,UAAU;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAChE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBACvB,KAAK,EAAE;oBACL,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CACzB;oBACD,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC1C,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB;iBAC5D;aACF,CAAC,CAAC;YACH,gEAAgE;YAChE,gEAAgE;YAChE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,SAAS,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IACE,IAAI;gBACJ,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI;gBAClD,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EACnD,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;oBACvB,KAAK,EAAE;wBACL,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;wBAC/C,mBAAmB,EAAE;4BACnB,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB;4BACjC,SAAS;yBACV;wBACD,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB;qBAC5D;iBACF,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAC9D,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/launch/_helpers.d.ts

@@ -3,6 +3,10 @@ import type { ExternalTask } from "../../core/sdk-sessions-store.js";
 export type LaunchBranchResult = {
     commands: CopyCommandForms;
     taskUpdate: Partial<ExternalTask>;
+    /** Set (false) when a scheduler-readiness check was applicable but could
+     *  not be made (timeout / engine unavailable): the launch went ahead
+     *  fail-open and the response says so — never a silent skip. */
+    readinessChecked?: false;
 } | {
     error: Record<string, unknown>;
     status: 400 | 404 | 409;

package/server/dist/external/launch/_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CAAE,GACjE;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;CAAE,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,MAAM,kBAAkB,GAC1B;IACE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC;;oEAEgE;IAChE,gBAAgB,CAAC,EAAE,KAAK,CAAC;CAC1B,GACD;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;CAAE,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/server/dist/external/launch/_helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/server/dist/external/launch/action-substitution-branch.d.ts

@@ -7,5 +7,17 @@ export declare function applyActionSubstitutionBranch(args: {
     parsed: ParsedLaunchBody;
     effectivelyFreshStart: boolean;
     getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+    /**
+     * FR-04.22 (iterate-2026-09-06-claim-launch-permission-perimeter) — see
+     * `legacy-fallback-branch.ts`'s own doc comment for the field's meaning.
+     * THIS branch, not the legacy fallback, is the one leadwright's real
+     * tasks actually reach (Stage-1 spec review, see
+     * `claim-executor-template-arming.ts`'s header) — leadwright always sets
+     * `actionId` at task creation (a required field on its side), and
+     * `parse-body.ts`'s once-set-always-used contract resolves `parsed.actionId`
+     * from that persisted value even though the launch body itself carries
+     * only `{ claimToken }`.
+     */
+    claimAuthorized?: boolean;
 }): LaunchBranchResult | null;
 //# sourceMappingURL=action-substitution-branch.d.ts.map

package/server/dist/external/launch/action-substitution-branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-substitution-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CAmG5B"}
+{"version":3,"file":"action-substitution-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAOxD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;IACd;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,kBAAkB,GAAG,IAAI,CAwI5B"}

package/server/dist/external/launch/action-substitution-branch.js

@@ -11,16 +11,18 @@
  * the substituted commands+taskUpdate, or an error envelope.
  */
 import { substitutePlaceholders, UnknownPhaseError, UnknownActionError, InvalidTitleError, InvalidParameterError, InvalidPlaceholderError, } from "../../core/actions-substitute.js";
-import { loadActionsForProject } from "../../core/project-actions-loader.js";
+import { loadActionsForProjectRecord } from "../../core/project-actions-loader.js";
 import { resolveParameters } from "../../core/parameter-resolver.js";
+import { claimExecutorLaunchOverrides } from "./claim-executor-permissions.js";
+import { armActionTemplatePermissionPerimeter, templateDeclaresSessionIdAnchor, } from "./claim-executor-template-arming.js";
 export function applyActionSubstitutionBranch(args) {
-    const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    const { task, parsed, effectivelyFreshStart, getProjectById, claimAuthorized } = args;
     if (!parsed.actionId || !effectivelyFreshStart)
         return null;
     const project = getProjectById?.(task.projectId);
     if (!project)
         return null; // fall back to legacy
-    const loaded = loadActionsForProject(project.path || "");
+    const loaded = loadActionsForProjectRecord(project);
     const action = loaded.actions.actions.find((a) => a.id === parsed.actionId);
     if (!action || !action.command_template) {
         return {
@@ -94,6 +96,38 @@ export function applyActionSubstitutionBranch(args) {
         }
         throw err;
     }
+    if (claimAuthorized) {
+        // Stage-3 doubt review: a rendered-output anchor search alone can be
+        // fooled by a caller-supplied placeholder (e.g. {task.description?},
+        // settable in this very request) that coincidentally contains this
+        // task's own uuid formatted like the anchor. Requiring the literal
+        // placeholder in the RAW template first closes that hole — the
+        // template is project configuration, never launch-body content.
+        if (!templateDeclaresSessionIdAnchor(action.command_template)) {
+            return {
+                error: {
+                    error: "claim_launch_permission_perimeter_unavailable",
+                    detail: `action "${action.id}"'s command_template does not declare a literal '--session-id {task.uuid}' placeholder — cannot arm the permission perimeter`,
+                },
+                status: 409,
+            };
+        }
+        const armed = armActionTemplatePermissionPerimeter(commands, task.sessionUuid, claimExecutorLaunchOverrides());
+        // Fail closed (this branch's own doc comment): a custom project
+        // command_template not shaped like the bundled defaults must refuse
+        // the launch rather than hand back an unrestricted command that looks
+        // armed because the caller asked for arming.
+        if (!armed.ok) {
+            return {
+                error: {
+                    error: "claim_launch_permission_perimeter_unavailable",
+                    detail: armed.detail,
+                },
+                status: 409,
+            };
+        }
+        commands = armed.commands;
+    }
     const taskUpdate = {
         state: "awaiting_external_start",
         launchedAt: new Date().toISOString(),

package/server/dist/external/launch/action-substitution-branch.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-substitution-branch.js","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AASrE,MAAM,UAAU,6BAA6B,CAAC,IAO7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAEjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAChE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,oEAAoE;IACpE,MAAM,aAAa,GAAG,iBAAiB,CAAC;QACtC,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAwB;QAC/B,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;QACrD,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,aAAa,CAAC,QAAQ;SACnC;QACD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,qEAAqE;QACrE,iEAAiE;QACjE,wEAAwE;QACxE,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG;YACT,UAAU,EAAE,sBAAsB,CAChC,MAAM,CAAC,gBAAgB,EACvB,GAAG,EACH,YAAY,CACb;YACD,GAAG,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,KAAK,CAAC;YAChE,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,OAAO,CAAC;SACrE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,qBAAqB;YACpC,GAAG,YAAY,uBAAuB;YACtC,8DAA8D;YAC9D,mEAAmE;YACnE,sEAAsE;YACtE,wEAAwE;YACxE,qDAAqD;YACrD,GAAG,YAAY,kBAAkB,EACjC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,6BAA6B;oBACpC,MAAM,EAAE,GAAG,CAAC,OAAO;iBACpB;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,IAAI,MAAM,CAAC,KAAK;QAAE,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU;QAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjE,IAAI,MAAM,CAAC,WAAW;QAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ;QAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"action-substitution-branch.js","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAQrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,qCAAqC,CAAC;AAE7C,MAAM,UAAU,6BAA6B,CAAC,IAmB7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAEjD,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAChE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,oEAAoE;IACpE,MAAM,aAAa,GAAG,iBAAiB,CAAC;QACtC,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAwB;QAC/B,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;QACrD,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,aAAa,CAAC,QAAQ;SACnC;QACD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,qEAAqE;QACrE,iEAAiE;QACjE,wEAAwE;QACxE,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG;YACT,UAAU,EAAE,sBAAsB,CAChC,MAAM,CAAC,gBAAgB,EACvB,GAAG,EACH,YAAY,CACb;YACD,GAAG,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,KAAK,CAAC;YAChE,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,OAAO,CAAC;SACrE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,qBAAqB;YACpC,GAAG,YAAY,uBAAuB;YACtC,8DAA8D;YAC9D,mEAAmE;YACnE,sEAAsE;YACtE,wEAAwE;YACxE,qDAAqD;YACrD,GAAG,YAAY,kBAAkB,EACjC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,6BAA6B;oBACpC,MAAM,EAAE,GAAG,CAAC,OAAO;iBACpB;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,+CAA+C;oBACtD,MAAM,EAAE,WAAW,MAAM,CAAC,EAAE,8HAA8H;iBAC3J;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,oCAAoC,CAChD,QAAQ,EACR,IAAI,CAAC,WAAW,EAChB,4BAA4B,EAAE,CAC/B,CAAC;QACF,gEAAgE;QAChE,oEAAoE;QACpE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,+CAA+C;oBACtD,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,IAAI,MAAM,CAAC,KAAK;QAAE,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU;QAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjE,IAAI,MAAM,CAAC,WAAW;QAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ;QAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/branch-dispatch.d.ts

@@ -0,0 +1,15 @@
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import { type LaunchBranchResult, type ParsedLaunchBody } from "./_helpers.js";
+export interface BranchDispatchInput {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    runConfigReader: (projectPath: string) => Promise<RunConfigReadResult>;
+    jsonlExistsOnDisk?: (sessionUuid: string) => Promise<boolean>;
+    listTasks: () => ExternalTask[];
+    claimAuthorized: boolean;
+}
+export declare function dispatchLaunchBranches(input: BranchDispatchInput): Promise<LaunchBranchResult>;
+//# sourceMappingURL=branch-dispatch.d.ts.map

package/server/dist/external/launch/branch-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-dispatch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/branch-dispatch.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAOL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,SAAS,EAAE,MAAM,YAAY,EAAE,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CA8E7B"}

package/server/dist/external/launch/branch-dispatch.js

@@ -0,0 +1,73 @@
+/*
+ * external/launch/branch-dispatch.ts — the precedence-ordered branch chain of
+ * POST /api/external/tasks/:id/launch, extracted from routes.ts so the route
+ * shell stays ≤ 300 LOC. Pure dispatch: no HTTP, no persistence.
+ *
+ * Precedence: phaseTaskRef → campaign → campaign-step → master-run →
+ * action-substitution → legacy fallback (always populates).
+ */
+import { applyPhaseTaskBranch, applyCampaignBranch, applyCampaignStepBranch, applyMasterRunBranch, applyActionSubstitutionBranch, applyLegacyFallbackBranch, } from "./_helpers.js";
+export async function dispatchLaunchBranches(input) {
+    const { task, parsed, getProjectById, runConfigReader, jsonlExistsOnDisk, listTasks, claimAuthorized, } = input;
+    // iterate-2026-05-18-fix-resume-description — a Resume click on a task
+    // whose Claude conversation was never established (no <uuid>.jsonl ever
+    // observed on disk → there is nothing to resume) is semantically a FRESH
+    // start. Route it through the substitution branch so the brief + slash
+    // command are injected exactly like a direct Launch. A genuine resume
+    // (JSONL on disk) stays on the description-free `--resume` shape.
+    const jsonlObserved = Boolean(task.firstJsonlObservedAt);
+    const effectivelyFreshStart = !parsed.resume || (!jsonlObserved && !parsed.dryRun);
+    // Branch 1 — phaseTaskRef (load-bearing security path).
+    let result = await applyPhaseTaskBranch({
+        task,
+        parsed,
+        getProjectById,
+        runConfigReader,
+        jsonlExistsOnDisk,
+    });
+    // Branch 2 — campaign autonomous launch (FR-01.34). Command built
+    // server-side from a validated slug; null when no campaignSlug / a resume.
+    result ??= applyCampaignBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+    });
+    // Branch 2.5 — single-sub-iterate launch (FR-01.36).
+    result ??= await applyCampaignStepBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+    });
+    // Branch 2.6 — single-session master launch (campaign
+    // webui-pipeline-convergence W2), gated on a readable single_session
+    // run_config; null when no masterRun / a resume.
+    result ??= await applyMasterRunBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+        runConfigReader,
+        listTasks,
+        jsonlExistsOnDisk,
+    });
+    // Branch 3 — action substitution.
+    result ??= applyActionSubstitutionBranch({
+        task,
+        parsed,
+        effectivelyFreshStart,
+        getProjectById,
+        claimAuthorized,
+    });
+    if (result)
+        return result;
+    // Branch 4 — legacy fallback. Always populates.
+    return applyLegacyFallbackBranch({
+        task,
+        parsed,
+        jsonlObserved,
+        claimAuthorized,
+    });
+}
+//# sourceMappingURL=branch-dispatch.js.map

package/server/dist/external/launch/branch-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-dispatch.js","sourceRoot":"","sources":["../../../src/external/launch/branch-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,yBAAyB,GAG1B,MAAM,eAAe,CAAC;AAYvB,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA0B;IAE1B,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,eAAe,GAChB,GAAG,KAAK,CAAC;IAEV,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,qBAAqB,GACzB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvD,wDAAwD;IACxD,IAAI,MAAM,GAA8B,MAAM,oBAAoB,CAAC;QACjE,IAAI;QACJ,MAAM;QACN,cAAc;QACd,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IAEH,kEAAkE;IAClE,2EAA2E;IAC3E,MAAM,KAAK,mBAAmB,CAAC;QAC7B,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;KACf,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,KAAK,MAAM,uBAAuB,CAAC;QACvC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;KACf,CAAC,CAAC;IAEH,sDAAsD;IACtD,qEAAqE;IACrE,iDAAiD;IACjD,MAAM,KAAK,MAAM,oBAAoB,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;QACd,eAAe;QACf,SAAS;QACT,iBAAiB;KAClB,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,KAAK,6BAA6B,CAAC;QACvC,IAAI;QACJ,MAAM;QACN,qBAAqB;QACrB,cAAc;QACd,eAAe;KAChB,CAAC,CAAC;IAEH,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,gDAAgD;IAChD,OAAO,yBAAyB,CAAC;QAC/B,IAAI;QACJ,MAAM;QACN,aAAa;QACb,eAAe;KAChB,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/launch/campaign-step-branch.d.ts

@@ -1,12 +1,18 @@
+import { getReadiness } from "../../core/campaign-readiness.js";
 import { type ExternalTask } from "../../core/sdk-sessions-store.js";
 import type { ExternalRouteProjectView } from "../_shared/helpers.js";
 import type { ParsedLaunchBody } from "./parse-body.js";
 import type { LaunchBranchResult } from "./_helpers.js";
 export declare function isValidCampaignStepId(id: string): boolean;
+/** Serve a cached verdict up to this old; else wait (bounded) for a fresh one. */
+export declare const STEP_READINESS_MAX_AGE_MS = 15000;
+export declare const STEP_READINESS_MAX_WAIT_MS = 10000;
 export declare function applyCampaignStepBranch(args: {
     task: ExternalTask;
     parsed: ParsedLaunchBody;
     effectivelyFreshStart: boolean;
     getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
-}): LaunchBranchResult | null;
+    /** Test seam; production uses the real cached scheduler bridge. */
+    getReadinessFn?: typeof getReadiness;
+}): Promise<LaunchBranchResult | null>;
 //# sourceMappingURL=campaign-step-branch.d.ts.map

package/server/dist/external/launch/campaign-step-branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"campaign-step-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CAyE5B"}
+{"version":3,"file":"campaign-step-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;IACd,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,YAAY,CAAC;CACtC,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA2IrC"}

package/server/dist/external/launch/campaign-step-branch.js

@@ -26,6 +26,7 @@ import { buildCopyCommands } from "../../core/launcher.js";
 import { resolveCampaignsDir, isWithin } from "../../core/campaign-paths.js";
 import { readCampaigns } from "../../core/campaign-store.js";
 import { readLoopAttachments } from "../../core/campaign-loop-state.js";
+import { getReadiness } from "../../core/campaign-readiness.js";
 import { isValidCampaignSlug } from "./campaign-branch.js";
 /**
  * Campaign step id = a Sub-Iterates table ID cell (e.g. `B0`, `C1`). Same
@@ -36,8 +37,12 @@ const CAMPAIGN_STEP_ID_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
 export function isValidCampaignStepId(id) {
     return CAMPAIGN_STEP_ID_PATTERN.test(id) && !id.includes("..");
 }
-export function applyCampaignStepBranch(args) {
+/** Serve a cached verdict up to this old; else wait (bounded) for a fresh one. */
+export const STEP_READINESS_MAX_AGE_MS = 15_000;
+export const STEP_READINESS_MAX_WAIT_MS = 10_000;
+export async function applyCampaignStepBranch(args) {
     const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    const readiness = args.getReadinessFn ?? getReadiness;
     const step = parsed.campaignStep;
     if (!step)
         return null; // not a campaign-step launch
@@ -92,6 +97,69 @@ export function applyCampaignStepBranch(args) {
     if (!found.specPath) {
         return { error: { error: "campaign_step_spec_missing", detail: step.stepId }, status: 400 };
     }
+    // Scheduler readiness (DAG view, card trg-e542ce03): refuse a hand-launch of
+    // a unit the monorepo scheduler reports BLOCKED. Bounded, and fail-OPEN when
+    // no verdict can be had (timeout / engine down / unrecognised) — but loudly:
+    // the response carries `readinessChecked:false`, never a silent skip. "No
+    // loop running" is not a failure: there is nothing to check against.
+    let readinessChecked;
+    let verdict;
+    try {
+        verdict = await readiness({ projectRoot: resolved.projectRoot, slug: step.slug }, undefined, { maxAgeMs: STEP_READINESS_MAX_AGE_MS, maxWaitMs: STEP_READINESS_MAX_WAIT_MS });
+    }
+    catch {
+        verdict = "timeout"; // a throwing check is "no verdict" — fail open, flagged
+    }
+    const freshVerdict = async () => {
+        try {
+            const v = await readiness({ projectRoot: resolved.projectRoot, slug: step.slug }, undefined, { maxAgeMs: 0, maxWaitMs: STEP_READINESS_MAX_WAIT_MS });
+            return v === "timeout" ? undefined : v;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    if (verdict === "timeout" || (verdict.status !== "report" && verdict.status !== "no-loop")) {
+        readinessChecked = false;
+    }
+    else if (verdict.status === "report") {
+        const units = verdict.report.units;
+        const lower = step.stepId.toLowerCase();
+        const unit = units.find((u) => u.id === step.stepId) ?? units.find((u) => u.id.toLowerCase() === lower);
+        // Only a real DEPENDENCY gate (a blocker naming another unit) refuses. A
+        // campaign-level gate (id:null — unsupported strategy, finalized loop) says
+        // the batch scheduler cannot run this campaign, not that this step must not
+        // be hand-run: launch, flagged unchecked.
+        const dependencyBlocked = unit?.state === "pending" && !unit.ready && unit.blocked_by.some((x) => x.id !== null);
+        if (!unit) {
+            readinessChecked = false;
+        }
+        else if (dependencyBlocked) {
+            // Never refuse on a cached "waiting": a dependency may have merged in
+            // the last few seconds. Recompute once, uncached, before saying no.
+            // Refuse ONLY on a fresh report that confirms the dependency blocker. No
+            // fresh answer (timeout / down / unit gone) fails open like everywhere else.
+            const fresh = await freshVerdict();
+            if (fresh?.status === "report") {
+                const freshUnit = fresh.report.units.find((u) => u.id === unit.id);
+                if (!freshUnit) {
+                    readinessChecked = false;
+                }
+                else if (freshUnit.state === "pending" && !freshUnit.ready) {
+                    if (freshUnit.blocked_by.some((x) => x.id !== null)) {
+                        return { error: { error: "campaign_step_not_ready", detail: step.stepId, blocked_by: freshUnit.blocked_by }, status: 409 };
+                    }
+                    readinessChecked = false; // only a campaign-level gate remains
+                }
+            }
+            else if (fresh?.status !== "no-loop") {
+                readinessChecked = false;
+            }
+        }
+        else if (unit.state === "pending" && !unit.ready) {
+            readinessChecked = false; // campaign-level gate only
+        }
+    }
     const commands = buildCopyCommands({
         sessionUuid: task.sessionUuid,
         cwd: task.cwd,
@@ -103,6 +171,6 @@ export function applyCampaignStepBranch(args) {
         state: "awaiting_external_start",
         launchedAt: new Date().toISOString(),
     };
-    return { commands, taskUpdate };
+    return readinessChecked === false ? { commands, taskUpdate, readinessChecked } : { commands, taskUpdate };
 }
 //# sourceMappingURL=campaign-step-branch.js.map

package/server/dist/external/launch/campaign-step-branch.js.map

@@ -1 +1 @@
-{"version":3,"file":"campaign-step-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAMxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IACrD,iFAAiF;IACjF,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,wBAAwB,KAAK,CAAC,QAAQ,GAAG;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"campaign-step-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAMhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAS7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IACrD,iFAAiF;IACjF,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,gBAAmC,CAAC;IACxC,IAAI,OAA8C,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,SAAS,CACvB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACtD,SAAS,EACT,EAAE,QAAQ,EAAE,yBAAyB,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAC/E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,CAAC,CAAC,wDAAwD;IAC/E,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,SAAS,CACvB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACtD,SAAS,EACT,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,CACvD,CAAC;YACF,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3F,gBAAgB,GAAG,KAAK,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QACxG,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACjH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,gBAAgB,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,IAAI,iBAAiB,EAAE,CAAC;YAC7B,sEAAsE;YACtE,oEAAoE;YACpE,yEAAyE;YACzE,6EAA6E;YAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,gBAAgB,GAAG,KAAK,CAAC;gBAC3B,CAAC;qBAAM,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;wBACpD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;oBAC7H,CAAC;oBACD,gBAAgB,GAAG,KAAK,CAAC,CAAC,qCAAqC;gBACjE,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvC,gBAAgB,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnD,gBAAgB,GAAG,KAAK,CAAC,CAAC,2BAA2B;QACvD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,wBAAwB,KAAK,CAAC,QAAQ,GAAG;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC5G,CAAC"}

package/server/dist/external/launch/claim-executor-permissions.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Exactly the toolset already granted to this codebase's own autonomous
+ * build/iterate/test agents (`shipwright-build:section-builder`,
+ * `shipwright-iterate:sub-iterate-runner`, `shipwright-test:test-runner` —
+ * see their `.claude/agents` tool lists): Read, Write, Edit, Bash, Glob,
+ * Grep. That precedent is the "considered allow-list" the originating card
+ * asks for, not a guess — it is the toolset this project already trusts an
+ * unattended agent doing iterate-shaped work with, on this same machine.
+ * `Task` (nested subagent spawn) and network tools (`WebFetch`,
+ * `WebSearch`) are deliberately excluded — none of those three agents
+ * carry them either.
+ */
+export declare const CLAIM_EXECUTOR_ALLOWED_TOOLS: readonly string[];
+/**
+ * Verified live (this module's own header comment): a tool named in
+ * `CLAIM_EXECUTOR_ALLOWED_TOOLS` runs with no prompt under this mode, and
+ * nothing outside that list is ever offered to prompt for. Matches
+ * leadwright's own `spawnLeadBeat` default (`lib/lead-spawn-types.ts`).
+ */
+export declare const CLAIM_EXECUTOR_PERMISSION_MODE = "dontAsk";
+export interface ClaimExecutorLaunchOverrides {
+    toolsAllowlist: readonly string[];
+    permissionMode: string;
+}
+/**
+ * The single call site every claim-authorized launch branch reads its
+ * perimeter from — one place a future operator changes what a claimed
+ * executor may do, per the originating card's requirement (d).
+ */
+export declare function claimExecutorLaunchOverrides(): ClaimExecutorLaunchOverrides;
+//# sourceMappingURL=claim-executor-permissions.d.ts.map

package/server/dist/external/launch/claim-executor-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-permissions.d.ts","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-permissions.ts"],"names":[],"mappings":"AAqEA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAOzD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,YAAY,CAAC;AAExD,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,4BAA4B,CAK3E"}

package/server/dist/external/launch/claim-executor-permissions.js

@@ -0,0 +1,107 @@
+/*
+ * external/launch/claim-executor-permissions.ts — FR-04.22 permission
+ * perimeter, single source of truth (iterate-2026-09-06-claim-launch-
+ * permission-perimeter).
+ *
+ * WHY THIS EXISTS: leadwright's stage-2 executor (`lib/lead-task-launch.ts`)
+ * runs the command this repo hands back via a real shell, detached and
+ * unref'd — that process outlives the daemon beat that started it and holds
+ * a shell, git, and the machine's credentials. Until this change, that
+ * command carried no `--permission-mode` and no tool allow-list: the
+ * full-authority form. leadwright's own spec (§8) names a residual risk —
+ * "a nested `claude` process with its own config writes out of P2" — that
+ * PRESUPPOSES a perimeter is armed and merely bypassable by a nested
+ * process. It was not armed at all; this module is that perimeter.
+ *
+ * THE MECHANISM, EMPIRICALLY VERIFIED against a real `claude` CLI 2.1.263
+ * (iterate-2026-09-06, this run — not assumed from --help text alone),
+ * exactly like leadwright verified its own beat-spawn mechanism
+ * (`lib/lead-spawn.ts`, iterate-2026-08-30-lead-spawn-contract):
+ *
+ *   - `--allowed-tools` alone does NOT restrict anything — leadwright
+ *     already proved this (5 permission modes probed, Bash executed every
+ *     time) and this run did not re-litigate it.
+ *   - `--tools <names>` (a comma-separated allow-list) DOES genuinely
+ *     restrict the model's function set: a live probe with
+ *     `--tools "Bash,Read,Edit,Write,Glob,Grep" --permission-mode dontAsk`
+ *     produced a session whose own `init` event lists exactly
+ *     `["Bash","Edit","Glob","Grep","Read","Write"]` — WebFetch/Task/
+ *     WebSearch/NotebookEdit are structurally ABSENT from the model's tool
+ *     set, not merely unapproved, so there is nothing to prompt for or
+ *     bypass. A second probe naming ONLY `Read,Edit` (no Bash) produced a
+ *     session that could not invoke Bash at all ("the Bash tool isn't
+ *     available in this session" — never attempted, never refused, simply
+ *     not offered).
+ *   - Deliberately WITHOUT `--restricted`: unlike leadwright's beat (which
+ *     never needs a shell), THIS executor's own legitimate job — running a
+ *     `/shipwright-iterate` — needs git, npm and file writes, i.e. Bash.
+ *     `--restricted`'s own `--help` text says it additionally ignores
+ *     user/project/local settings files and unloads every marketplace
+ *     plugin; a live probe confirmed this (`"plugins":[]` in the init event
+ *     under `--restricted`, vs. the project's full plugin roster loaded
+ *     normally under plain `--tools`). Shipwright's own hooks and plugins
+ *     (CLAUDE.md rule 9: `--plugin-dir` must be re-passed every launch) are
+ *     load-bearing for an iterate run, so `--restricted` would break the
+ *     very job this executor exists to do — the card's own point (e).
+ *     `--tools` alone, verified above, restricts the toolset just as
+ *     genuinely without that collateral damage.
+ *   - `--permission-mode dontAsk` (leadwright's own choice, re-verified
+ *     here): a tool named in `--tools` runs with NO prompt and NO entry in
+ *     `permission_denials`; nothing outside that list can be prompted for
+ *     in the first place, since the model never sees it as a function.
+ *     This resolves the specific worry the originating card names — "a run
+ *     acquires tools through the interactive dialog and looks compliant
+ *     anyway" — because there is no dialog to acquire anything through: the
+ *     detached, `stdio:"ignore"` executor process has no terminal to show
+ *     one on, and `dontAsk` never tries.
+ *
+ * WHAT THIS DOES NOT CLOSE (leadwright spec §8, still true): this is not OS
+ * sandboxing. `Task` is deliberately excluded from the allow-list below —
+ * matching leadwright's own Trap #4 finding that a nested `claude`/subagent
+ * process writes past any perimeter the same way a shell would — but `Bash`
+ * itself stays allowed (this executor's whole job needs it), and a `claude`
+ * binary invoked directly as a shell command is not a tool call this
+ * perimeter can see or stop. That is the residual risk leadwright's spec
+ * already names; this module makes the REST of the surface (WebFetch,
+ * Task-as-a-tool-call, an unbounded permission dialog) genuinely closed
+ * instead of merely undocumented.
+ */
+/**
+ * Exactly the toolset already granted to this codebase's own autonomous
+ * build/iterate/test agents (`shipwright-build:section-builder`,
+ * `shipwright-iterate:sub-iterate-runner`, `shipwright-test:test-runner` —
+ * see their `.claude/agents` tool lists): Read, Write, Edit, Bash, Glob,
+ * Grep. That precedent is the "considered allow-list" the originating card
+ * asks for, not a guess — it is the toolset this project already trusts an
+ * unattended agent doing iterate-shaped work with, on this same machine.
+ * `Task` (nested subagent spawn) and network tools (`WebFetch`,
+ * `WebSearch`) are deliberately excluded — none of those three agents
+ * carry them either.
+ */
+export const CLAIM_EXECUTOR_ALLOWED_TOOLS = [
+    "Bash",
+    "Read",
+    "Write",
+    "Edit",
+    "Glob",
+    "Grep",
+];
+/**
+ * Verified live (this module's own header comment): a tool named in
+ * `CLAIM_EXECUTOR_ALLOWED_TOOLS` runs with no prompt under this mode, and
+ * nothing outside that list is ever offered to prompt for. Matches
+ * leadwright's own `spawnLeadBeat` default (`lib/lead-spawn-types.ts`).
+ */
+export const CLAIM_EXECUTOR_PERMISSION_MODE = "dontAsk";
+/**
+ * The single call site every claim-authorized launch branch reads its
+ * perimeter from — one place a future operator changes what a claimed
+ * executor may do, per the originating card's requirement (d).
+ */
+export function claimExecutorLaunchOverrides() {
+    return {
+        toolsAllowlist: CLAIM_EXECUTOR_ALLOWED_TOOLS,
+        permissionMode: CLAIM_EXECUTOR_PERMISSION_MODE,
+    };
+}
+//# sourceMappingURL=claim-executor-permissions.js.map

package/server/dist/external/launch/claim-executor-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-executor-permissions.js","sourceRoot":"","sources":["../../../src/external/launch/claim-executor-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,SAAS,CAAC;AAOxD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,cAAc,EAAE,4BAA4B;QAC5C,cAAc,EAAE,8BAA8B;KAC/C,CAAC;AACJ,CAAC"}