@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/external/org/beat-register-release.js

@@ -3,30 +3,20 @@
  * /api/external/org/leads/:leadId/beat-register/release
  * (iterate-2026-08-18-org-route-beat-register, V4a-2B point 4.4).
  *
- * Hono route shell only — request validation + error-to-status mapping.
- * The release action itself (locking, register mutation, audit append,
- * mirrored leadwright contract) lives in `beat-register-release-core.ts`,
- * split out to stay under the 300-line file guideline.
+ * Hono route shell only — parses the request and hands off to
+ * `handleReleaseRequest` (`beat-register-release-request.ts`), which is
+ * ALSO used by the plain browser-facing proxy's release route
+ * (`routes/org.ts`, iterate-2026-09-06-org-lead-staleness-register) so the
+ * two route shells cannot drift on validation or status-mapping. The
+ * release action itself (locking, register mutation, audit append,
+ * mirrored leadwright contract) lives in `beat-register-release-core.ts`.
  */
-import { lstatSync } from "node:fs";
 import { LEAD_ID_RE } from "./_helpers.js";
-import { performRelease, DEFAULT_LOCK_OPTIONS, OrgSymlinkEscapeError, BeatRegisterInvalidError, } from "./beat-register-release-core.js";
+import { handleReleaseRequest } from "./beat-register-release-request.js";
 export { performRelease, DEFAULT_LOCK_OPTIONS, OrgSymlinkEscapeError, BeatRegisterInvalidError, RESIDUAL_LOCK_WARNING, } from "./beat-register-release-core.js";
-const RELEASE_REASON_MAX_LENGTH = 500;
-// Doubt-review fix (Stage 3, medium/correctness): no `/i` flag. Entry
-// matching in `beat-register-release-core.ts` is an exact `===` string
-// comparison, never normalized — leadwright's own writer always produces
-// `crypto.randomUUID()`, which is defined to be lowercase, so the register
-// can never legitimately hold an uppercase-cased entry. Accepting a
-// differently-cased-but-otherwise-valid sessionId here let it pass
-// validation and then silently miss its real (lowercase) register entry,
-// returning 404 not-found for an entry that genuinely exists.
-const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+export { handleReleaseRequest } from "./beat-register-release-request.js";
 export function registerBeatRegisterReleaseRoute(app, deps) {
-    const leadsRoot = deps.leadsRoot;
-    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
-    const lockOptions = deps.lockOptions ?? DEFAULT_LOCK_OPTIONS;
-    const now = deps.now ?? (() => new Date());
+    const { leadsRoot } = deps;
     app.post("/api/external/org/leads/:leadId/beat-register/release", async (c) => {
         const leadId = c.req.param("leadId");
         if (!LEAD_ID_RE.test(leadId)) {
@@ -39,43 +29,11 @@ export function registerBeatRegisterReleaseRoute(app, deps) {
         catch {
             return c.json({ error: "invalid_json" }, 400);
         }
-        const { sessionId, reason } = (body ?? {});
-        if (typeof sessionId !== "string" || !UUID_RE.test(sessionId)) {
-            return c.json({ error: "sessionId_invalid" }, 400);
-        }
-        if (typeof reason !== "string" ||
-            reason.length === 0 ||
-            reason.length > RELEASE_REASON_MAX_LENGTH) {
-            return c.json({ error: "reason_invalid", detail: `must be 1-${RELEASE_REASON_MAX_LENGTH} chars` }, 400);
-        }
-        let outcome;
-        try {
-            outcome = await performRelease({ leadsRoot, lockOptions, now, lstat }, leadId, sessionId, reason);
-        }
-        catch (err) {
-            if (err instanceof OrgSymlinkEscapeError) {
-                return c.json({ error: "symlink_forbidden", path: err.path }, 403);
-            }
-            if (err instanceof BeatRegisterInvalidError) {
-                return c.json({ error: "beat_register_invalid", leadId }, 502);
-            }
-            const code = err?.code;
-            if (code === "ELOCKED") {
-                return c.json({ error: "beat_register_locked", leadId }, 409);
-            }
-            throw err;
-        }
-        if (!outcome.ok) {
-            // "fault" (duplicate sessionId — trap #3, never resolved by picking
-            // one) is a structural data conflict, not "nothing here": 409, not
-            // 404.
-            const status = outcome.reason === "fault" ? 409 : 404;
-            return c.json({ ok: false, reason: outcome.reason, detail: outcome.detail }, status);
-        }
-        if (!outcome.recovered) {
-            return c.json({ ok: true, recovered: false }, 200);
-        }
-        return c.json({ ok: true, recovered: true, residualLockWarning: outcome.residualLockWarning }, 200);
+        // `handleReleaseRequest` owns the `lstatSync`/`lockOptions`/`now`
+        // defaulting itself (external-review fix, GLM) — this shell just
+        // passes deps through, never resolving them a second time.
+        const result = await handleReleaseRequest({ leadsRoot, lstatSync: deps.lstatSync, lockOptions: deps.lockOptions, now: deps.now }, leadId, body);
+        return c.json(result.body, result.status);
     });
 }
 //# sourceMappingURL=beat-register-release.js.map

package/server/dist/external/org/beat-register-release.js.map

@@ -1 +1 @@
-{"version":3,"file":"beat-register-release.js","sourceRoot":"","sources":["../../../src/external/org/beat-register-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GAGzB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,sEAAsE;AACtE,uEAAuE;AACvE,yEAAyE;AACzE,2EAA2E;AAC3E,oEAAoE;AACpE,mEAAmE;AACnE,yEAAyE;AACzE,8DAA8D;AAC9D,MAAM,OAAO,GAAG,gEAAgE,CAAC;AASjF,MAAM,UAAU,gCAAgC,CAAC,GAAS,EAAE,IAAsB;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAA8C,CAAC;QACxF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,GAAG,yBAAyB,EACzC,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,yBAAyB,QAAQ,EAAE,EACnF,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAC5B,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,EACtC,MAAM,EACN,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,oEAAoE;YACpE,mEAAmE;YACnE,OAAO;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAC/E,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"beat-register-release.js","sourceRoot":"","sources":["../../../src/external/org/beat-register-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAU1E,MAAM,UAAU,gCAAgC,CAAC,GAAS,EAAE,IAAsB;IAChF,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE3B,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,kEAAkE;QAClE,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EACtF,MAAM,EACN,IAAI,CACL,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/beat-register.d.ts

@@ -1,5 +1,4 @@
-import type { Hono } from "hono";
-import type { BeatRegisterEntryView, BeatRegisterHealthResponse } from "../../types/org.js";
+import type { BeatRegisterEntryView } from "../../types/org.js";
 export type { BeatRegisterEntryView, BeatRegisterHealthResponse, } from "../../types/org.js";
 export interface BeatRegisterFile {
     version: 1;
@@ -63,6 +62,23 @@ export declare function guardExistingTarget(leadsRoot: string, absolute: string,
     detail?: string;
 };
 export declare function atomicWriteJson(target: string, value: unknown): void;
+/** Empty text and any parse/structural failure both resolve the same way
+ *  regardless of how the caller obtained the text (a plain `readFileSync`
+ *  by path, or a held-fd read after an open-first guard chain) — split out
+ *  of `readRegisterFileTolerant` so `registerEntriesGuarded` (beat-register-
+ *  health.ts) can reuse the parse without re-reading the file by path,
+ *  which is what the open-first pattern exists to avoid (external code
+ *  review, medium/security: `registerEntriesGuarded` originally checked
+ *  `lstat`+`realPathGuard` and then reopened the pathname via this
+ *  function's `readFileSync(absolute)` — a TOCTOU window where a local
+ *  writer could swap the checked regular file for a symlink between the
+ *  check and the reopen). */
+export declare function parseRegisterFileText(raw: string): {
+    ok: true;
+    file: BeatRegisterFile;
+} | {
+    ok: false;
+};
 /** ENOENT/empty-file both read as a `{version:1, entries:[]}` clear
  *  register — mirrors leadwright's own `readRegisterUnlocked`. Any other
  *  parse/structural failure returns `ok:false` (never a guessed value). */
@@ -72,22 +88,4 @@ export declare function readRegisterFileTolerant(absolute: string): {
 } | {
     ok: false;
 };
-export interface BeatRegisterRouteDeps {
-    leadsRoot: string;
-    lstatSync?: LstatFn;
-}
-export type BeatRegisterHealthCoreResult = {
-    status: 200;
-    body: BeatRegisterHealthResponse;
-} | {
-    status: 400 | 403 | 500 | 502;
-    body: {
-        error: string;
-        leadId?: string;
-        detail?: string;
-    };
-};
-/** Pure core — shared by the secret-gated route and the plain-surface proxy. */
-export declare function beatRegisterHealthCore(deps: BeatRegisterRouteDeps, leadId: string): BeatRegisterHealthCoreResult;
-export declare function registerBeatRegisterHealthRoute(app: Hono, deps: BeatRegisterRouteDeps): void;
 //# sourceMappingURL=beat-register.d.ts.map

package/server/dist/external/org/beat-register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"beat-register.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-register.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAOjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE5F,YAAY,EACV,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAM5B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAgBD;;;0BAG0B;AAC1B,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAIrE;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChD;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAiB7E;AAOD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK;IAAE,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC;AAEnE,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBvF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAgBpE;AAED;;2EAE2E;AAC3E,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAuBtD;AAMD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,0BAA0B,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEjG,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,MAAM,GACb,4BAA4B,CAsC9B;AAED,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAK5F"}
+{"version":3,"file":"beat-register.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-register.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,YAAY,EACV,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAM5B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAgBD;;;0BAG0B;AAC1B,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAIrE;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAChD;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAiB7E;AAOD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK;IAAE,cAAc,IAAI,OAAO,CAAA;CAAE,CAAC;AAEnE,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBvF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAgBpE;AAED;;;;;;;;;;6BAU6B;AAC7B,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAcvG;AAED;;2EAE2E;AAC3E,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAWtD"}

package/server/dist/external/org/beat-register.js

@@ -1,6 +1,6 @@
 /*
- * external/org/beat-register.ts — shared shapes + GET
- * /api/external/org/leads/:leadId/beat-register (iterate-2026-08-18-org-route-beat-register,
+ * external/org/beat-register.ts — shared shapes + fs helpers for a lead's
+ * `beat-register.json` (iterate-2026-08-18-org-route-beat-register,
  * V4a-2B point 7 — the open-register finding).
  *
  * Reads leadwright's `~/.claude/leads/<lead-id>/beat-register.json`
@@ -11,13 +11,15 @@
  * cross-repo — matching its contract exactly, including one of its known
  * limitations (see the `MIRRORED LIMITATION` comment below).
  *
- * The release action (point 4.4) lives in `beat-register-release.ts`, which
- * imports the shared shapes/helpers from this file.
+ * The two guarded READ routes (health classification + raw entries) live in
+ * `beat-register-health.ts`, and the release action (point 4.4) lives in
+ * `beat-register-release.ts` — both import the shared shapes/helpers below.
+ * Split out of this file (bloat gate, iterate-2026-09-08-lead-inventory-page)
+ * once `registerEntriesGuarded` pushed it past the 300-line ceiling.
  */
-import { readFileSync, lstatSync, writeFileSync, renameSync, existsSync, unlinkSync } from "node:fs";
+import { readFileSync, writeFileSync, renameSync, existsSync, unlinkSync } from "node:fs";
 import path, { dirname, basename } from "node:path";
 import { randomBytes } from "node:crypto";
-import { LEAD_ID_RE } from "./_helpers.js";
 import { realPathGuard } from "../../core/path-guard.js";
 function isValidEntry(v) {
     if (typeof v !== "object" || v === null)
@@ -129,20 +131,18 @@ export function atomicWriteJson(target, value) {
         throw err;
     }
 }
-/** ENOENT/empty-file both read as a `{version:1, entries:[]}` clear
- *  register — mirrors leadwright's own `readRegisterUnlocked`. Any other
- *  parse/structural failure returns `ok:false` (never a guessed value). */
-export function readRegisterFileTolerant(absolute) {
-    let raw;
-    try {
-        raw = readFileSync(absolute, "utf8");
-    }
-    catch (err) {
-        if (err?.code === "ENOENT") {
-            return { ok: true, file: { version: 1, entries: [] } };
-        }
-        return { ok: false };
-    }
+/** Empty text and any parse/structural failure both resolve the same way
+ *  regardless of how the caller obtained the text (a plain `readFileSync`
+ *  by path, or a held-fd read after an open-first guard chain) — split out
+ *  of `readRegisterFileTolerant` so `registerEntriesGuarded` (beat-register-
+ *  health.ts) can reuse the parse without re-reading the file by path,
+ *  which is what the open-first pattern exists to avoid (external code
+ *  review, medium/security: `registerEntriesGuarded` originally checked
+ *  `lstat`+`realPathGuard` and then reopened the pathname via this
+ *  function's `readFileSync(absolute)` — a TOCTOU window where a local
+ *  writer could swap the checked regular file for a symlink between the
+ *  check and the reopen). */
+export function parseRegisterFileText(raw) {
     if (raw.trim().length === 0) {
         return { ok: true, file: { version: 1, entries: [] } };
     }
@@ -158,46 +158,20 @@ export function readRegisterFileTolerant(absolute) {
     }
     return { ok: true, file: parsed };
 }
-/** Pure core — shared by the secret-gated route and the plain-surface proxy. */
-export function beatRegisterHealthCore(deps, leadId) {
-    const { leadsRoot } = deps;
-    const lstat = deps.lstatSync ?? ((p) => lstatSync(p));
-    if (!LEAD_ID_RE.test(leadId)) {
-        return { status: 400, body: { error: "invalid_lead_id", leadId } };
-    }
-    const absolute = registerPathFor(leadsRoot, leadId);
-    let lst;
+/** ENOENT/empty-file both read as a `{version:1, entries:[]}` clear
+ *  register — mirrors leadwright's own `readRegisterUnlocked`. Any other
+ *  parse/structural failure returns `ok:false` (never a guessed value). */
+export function readRegisterFileTolerant(absolute) {
+    let raw;
     try {
-        lst = lstat(absolute);
+        raw = readFileSync(absolute, "utf8");
     }
     catch (err) {
-        const code = err?.code;
-        if (code === "ENOENT") {
-            return { status: 200, body: { leadId, status: "clear" } };
+        if (err?.code === "ENOENT") {
+            return { ok: true, file: { version: 1, entries: [] } };
         }
-        return {
-            status: 500,
-            body: { error: "beat_register_read_failed", detail: String(err).slice(0, 200) },
-        };
-    }
-    if (lst.isSymbolicLink()) {
-        return { status: 403, body: { error: "symlink_forbidden", leadId } };
-    }
-    const containment = realPathGuard(leadsRoot, absolute);
-    if (!containment.ok) {
-        return { status: 400, body: { error: "path_traversal", detail: containment.reason } };
-    }
-    const read = readRegisterFileTolerant(absolute);
-    if (!read.ok) {
-        return { status: 502, body: { error: "beat_register_invalid", leadId } };
+        return { ok: false };
     }
-    const health = evaluateRegisterHealth(read.file);
-    return { status: 200, body: { leadId, ...health } };
-}
-export function registerBeatRegisterHealthRoute(app, deps) {
-    app.get("/api/external/org/leads/:leadId/beat-register", async (c) => {
-        const result = beatRegisterHealthCore(deps, c.req.param("leadId"));
-        return c.json(result.body, result.status);
-    });
+    return parseRegisterFileText(raw);
 }
 //# sourceMappingURL=beat-register.js.map

package/server/dist/external/org/beat-register.js.map

@@ -1 +1 @@
-{"version":3,"file":"beat-register.js","sourceRoot":"","sources":["../../../src/external/org/beat-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAiBzD,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACtB,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;0BAG0B;AAC1B,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AACtF,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC3D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAc;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAc;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,QAAgB,EAChB,KAAc;IAEd,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,KAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,OAAO,CAAC,MAAM,CAAC,EACf,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC1F,CAAC;IACF,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;2EAE2E;AAC3E,MAAM,UAAU,wBAAwB,CACtC,QAAgB;IAEhB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAeD,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACpC,IAA2B,EAC3B,MAAc;IAEd,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEpD,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,GAAS,EAAE,IAA2B;IACpF,GAAG,CAAC,GAAG,CAAC,+CAA+C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"beat-register.js","sourceRoot":"","sources":["../../../src/external/org/beat-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAiBzD,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACtB,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;0BAG0B;AAC1B,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AACtF,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC3D,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAc;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAc;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,QAAgB,EAChB,KAAc;IAEd,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,KAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,OAAO,CAAC,MAAM,CAAC,EACf,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC1F,CAAC;IACF,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;6BAU6B;AAC7B,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED;;2EAE2E;AAC3E,MAAM,UAAU,wBAAwB,CACtC,QAAgB;IAEhB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC"}

package/server/dist/external/org/beat-steps-read.d.ts

@@ -0,0 +1,17 @@
+import { openSync } from "node:fs";
+import { type BeatStep } from "../../types/leadwright-beat-step.js";
+export declare const BEAT_ID_RE: RegExp;
+export type ReadBeatStepsResult = {
+    status: "ok";
+    steps: BeatStep[];
+    unreadableLines: number;
+} | {
+    status: "unreadable";
+};
+export interface BeatStepsReadDeps {
+    leadsRoot: string;
+    /** Test seam for the O_NOFOLLOW open — defaults to the real `openSync`. */
+    openSync?: typeof openSync;
+}
+export declare function readBeatStepsCore(deps: BeatStepsReadDeps, leadId: string, beatId: string): ReadBeatStepsResult;
+//# sourceMappingURL=beat-steps-read.d.ts.map

package/server/dist/external/org/beat-steps-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-steps-read.d.ts","sourceRoot":"","sources":["../../../src/external/org/beat-steps-read.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAkD,QAAQ,EAAgB,MAAM,SAAS,CAAC;AAKjG,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAErF,eAAO,MAAM,UAAU,QAAoE,CAAC;AAE5F,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAE7B,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;CAC5B;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,mBAAmB,CA2DrB"}

package/server/dist/external/org/beat-steps-read.js

@@ -0,0 +1,89 @@
+/*
+ * external/org/beat-steps-read.ts — reads one beat's `steps.jsonl`
+ * (iterate-2026-09-08-lead-inventory-page, AC-1/AC-2b/AC-10/AC-11).
+ *
+ * Mirrors `audit-log.ts`'s exact open-first pattern: `pathGuard` →
+ * `open(O_RDONLY | O_NOFOLLOW)` → `fstat().isFile()` → `realPathGuard` →
+ * read from the held fd. Both `leadId` AND `beatId` are re-validated HERE,
+ * not just trusted from an upstream caller — `beatId` comes from
+ * `beat-register.json`, itself only `typeof === "string"`-checked at write
+ * time (Internal Plan Review finding #5). leadwright generates beat ids via
+ * `randomUUID()` (`lib/beat-round.ts` / `daemon/tick.ts`, verified) — hence
+ * `BEAT_ID_RE`.
+ *
+ * Reporting steps is OPTIONAL in the beat protocol (`skills/leadwright/
+ * SKILL.md` step 5) — ENOENT (no file at all) is `ok` with an empty array,
+ * the normal, unremarkable case. A genuine file-level failure (symlink,
+ * non-file, read error) is `unreadable` — NEVER collapsed into "empty"
+ * (Internal Plan Review finding #2). Individual malformed/semantically
+ * invalid JSONL lines are skipped and counted in `unreadableLines`; when
+ * EVERY line fails, the result is still `ok` with `steps:[]` and a nonzero
+ * `unreadableLines` — the CALLER (composite/UI) is responsible for
+ * rendering that distinctly from a genuinely empty contribution (AC-10),
+ * this reader's job is only to report the count honestly.
+ */
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { pathGuard, realPathGuard } from "../../core/path-guard.js";
+import { LEAD_ID_RE } from "./_helpers.js";
+import { isValidBeatStep } from "../../types/leadwright-beat-step.js";
+export const BEAT_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export function readBeatStepsCore(deps, leadId, beatId) {
+    const { leadsRoot } = deps;
+    const open = deps.openSync ?? openSync;
+    if (!LEAD_ID_RE.test(leadId) || !BEAT_ID_RE.test(beatId)) {
+        return { status: "unreadable" };
+    }
+    const guard = pathGuard(leadsRoot, join(leadId, "beats", beatId, "steps.jsonl"));
+    if (!guard.ok) {
+        return { status: "unreadable" };
+    }
+    let fd;
+    try {
+        fd = open(guard.absolute, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === "ENOENT") {
+            return { status: "ok", steps: [], unreadableLines: 0 };
+        }
+        return { status: "unreadable" };
+    }
+    try {
+        if (!fstatSync(fd).isFile()) {
+            return { status: "unreadable" };
+        }
+        const realGuard = realPathGuard(leadsRoot, guard.absolute);
+        if (!realGuard.ok) {
+            return { status: "unreadable" };
+        }
+        const text = readFileSync(fd, "utf8");
+        const lines = text.split(/\r?\n/).filter((l) => l.trim().length > 0);
+        const steps = [];
+        let unreadableLines = 0;
+        for (const line of lines) {
+            let parsed;
+            try {
+                parsed = JSON.parse(line);
+            }
+            catch {
+                unreadableLines += 1;
+                continue;
+            }
+            if (isValidBeatStep(parsed)) {
+                steps.push(parsed);
+            }
+            else {
+                unreadableLines += 1;
+            }
+        }
+        return { status: "ok", steps, unreadableLines };
+    }
+    catch {
+        return { status: "unreadable" };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=beat-steps-read.js.map

package/server/dist/external/org/beat-steps-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beat-steps-read.js","sourceRoot":"","sources":["../../../src/external/org/beat-steps-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAiB,MAAM,qCAAqC,CAAC;AAErF,MAAM,CAAC,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAY5F,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,MAAc,EACd,MAAc;IAEd,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAEvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAErE,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,IAAI,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,eAAe,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/server/dist/external/org/charter-authority-read.d.ts

@@ -0,0 +1,39 @@
+import { type OrgFileReadDeps, type OrgFileReadCoreResult } from "./file-read.js";
+export interface CharterBand {
+    id: "bugfix" | "maintenance" | "feature" | "architecture";
+    /** The exact §4.4 name a heading must contain, case-insensitively. */
+    name: string;
+}
+export declare const CHARTER_BANDS: readonly CharterBand[];
+export interface AuthorityBandView {
+    id: CharterBand["id"];
+    name: string;
+    declared: boolean;
+    /** The heading section's own prose, or `null` if not declared / the section is empty. */
+    text: string | null;
+}
+export type CharterAuthorityResult = {
+    measured: true;
+    bands: AuthorityBandView[];
+    declaredCount: number;
+} | {
+    measured: false;
+    reason: string;
+};
+/**
+ * For each of the 4 §4.4 bands: is it declared (a heading containing the
+ * canonical name, case- and slash-spacing-insensitively — mirrors
+ * `charter-validate.ts`'s `validateCharterBands` exactly), and if so, what
+ * prose follows it up to the next heading of any level (or EOF)? Each
+ * heading can satisfy at most ONE band, matching the upstream rule.
+ */
+export declare function extractBandSections(charterMd: string): AuthorityBandView[];
+export interface CharterAuthorityDeps extends OrgFileReadDeps {
+    /** Test seam — defaults to the real `orgFileReadCore`. */
+    readFn?: (deps: OrgFileReadDeps, relpath: string | undefined) => OrgFileReadCoreResult;
+}
+/** Pure core. `charterPath` is `org-chart.json`'s per-lead `charter_path`
+ *  value (verbatim, as read by the caller) — compared against the literal
+ *  default rather than resolved, per the header note above. */
+export declare function charterAuthorityCore(deps: CharterAuthorityDeps, leadId: string, charterPath: string | undefined): CharterAuthorityResult;
+//# sourceMappingURL=charter-authority-read.d.ts.map

package/server/dist/external/org/charter-authority-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"charter-authority-read.d.ts","sourceRoot":"","sources":["../../../src/external/org/charter-authority-read.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAmB,KAAK,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEnG,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,cAAc,CAAC;IAC1D,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAK/C,CAAC;AAIF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA2DxC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAsB1E;AAED,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,0DAA0D;IAC1D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,qBAAqB,CAAC;CACxF;AAED;;+DAE+D;AAC/D,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,oBAAoB,EAC1B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,sBAAsB,CAcxB"}

package/server/dist/external/org/charter-authority-read.js

@@ -0,0 +1,142 @@
+/*
+ * external/org/charter-authority-read.ts — per-band authority prose for the
+ * Lead Inventory page's AuthorityPanel (iterate-2026-09-08-lead-inventory-page,
+ * AC-4).
+ *
+ * Started as a plan to hand-port leadwright's `lib/charter-validate.ts`
+ * `validateCharterBands` verbatim into its own pinned mirror file — dropped
+ * per Architecture Review (GLM, low/proportionality, accepted): the 4 band
+ * names are already hardcoded in this repo (the vendored beat-step schema's
+ * `band` enum), so the §4.4 heading-detection logic is owned LOCALLY here
+ * instead of behind a second cross-repo pin. `CHARTER_BANDS` and the
+ * slash-spacing-normalized heading match below are the SAME algorithm
+ * `charter-validate.ts` runs (leadwright @
+ * db2938b308899b8cbca017b291c18696a54844b5), just not vendored — a rename
+ * of a §4.4 heading on leadwright's side is a silent divergence here, same
+ * disclosed-limitation posture as every other cross-repo read in this
+ * directory.
+ *
+ * Read this as PROSE, not authorization: a band's heading being present in
+ * the charter means the lead's charter puts that band in scope (the same
+ * signal `checkBeatStart`'s `charter-missing-band` gate uses to allow a beat
+ * to start at all) — it is NOT a per-band "may act alone" flag, which no
+ * field in leadwright's schemas or store carries (Internal Plan Review
+ * finding #1). Because `checkBeatStart` denies a beat outright when ANY
+ * band is missing, a lead with beats to show already has all 4 declared —
+ * the declared/missing count is real, disclosed information (a charter
+ * completeness signal), never dressed up as an authorization claim.
+ *
+ * Charter-path handling (Internal/External Plan Review): only the DEFAULT
+ * `<leadId>/charter.md` location is readable through the shared allowlist
+ * (`resolveOrgAllowlistedTarget`) that `orgFileReadCore` enforces — the same
+ * limitation `org-leads-composite.ts`'s `buildRole` and
+ * `existing-charters-read.ts` already have. A non-default `charter_path`
+ * degrades with an HONEST reason instead of silently reading the wrong
+ * file. Widening the allowlist to an arbitrary path is a separate,
+ * independently-reviewable change touching all three call sites, not
+ * squeezed into this iterate.
+ */
+import { orgFileReadCore } from "./file-read.js";
+export const CHARTER_BANDS = [
+    { id: "bugfix", name: "Bugfix / bekannter Defekt" },
+    { id: "maintenance", name: "Kleine Pflege" },
+    { id: "feature", name: "Neues Feature" },
+    { id: "architecture", name: "Architektur / Grundsatz" },
+];
+const DEFAULT_CHARTER_RELPATH = "charter.md";
+function normalizeSlashSpacing(value) {
+    return value.replace(/\s*\/\s*/g, "/");
+}
+function headingLines(lines) {
+    const out = [];
+    lines.forEach((line, index) => {
+        if (/^\s*#+\s/.test(line)) {
+            out.push({ index, normalizedText: normalizeSlashSpacing(line.toLowerCase()) });
+        }
+    });
+    return out;
+}
+/** Same line-shape-skip technique `role-extract.ts` uses for its single
+ *  paragraph, applied to a bounded slice of lines (one heading's section)
+ *  instead of the whole document — text-processing only, not a markdown
+ *  AST parse. Returns `null` for an effectively empty section.
+ *
+ * An UNBALANCED fence (an opening ``` or ~~~ with no matching close before
+ * the section ends) is treated as no fence at all for this section — every
+ * line, including the stray fence marker itself, is kept as ordinary prose
+ * (external code review, low/edge-case): the naive toggle would otherwise
+ * leave `inCodeFence` stuck `true` for the rest of the section, silently
+ * swallowing everything after a hand-edited charter's forgotten closer.
+ * "Fail toward showing more, never toward hiding data" — the same rule
+ * this file applies to a missing/empty section already. */
+function extractSectionProse(sectionLines) {
+    const fenceLineCount = sectionLines.filter((line) => {
+        const trimmed = line.trim();
+        return trimmed.startsWith("```") || trimmed.startsWith("~~~");
+    }).length;
+    const fencesBalanced = fenceLineCount % 2 === 0;
+    const paragraphLines = [];
+    let inCodeFence = false;
+    for (const line of sectionLines) {
+        const trimmed = line.trim();
+        if (fencesBalanced && (trimmed.startsWith("```") || trimmed.startsWith("~~~"))) {
+            inCodeFence = !inCodeFence;
+            continue;
+        }
+        if (inCodeFence)
+            continue;
+        if (/^\s*#+\s/.test(line))
+            continue; // nested heading — not part of this section's prose
+        if (trimmed.startsWith(">"))
+            continue;
+        if (trimmed.length === 0)
+            continue;
+        paragraphLines.push(trimmed);
+    }
+    const joined = paragraphLines.join(" ").trim();
+    return joined.length > 0 ? joined : null;
+}
+/**
+ * For each of the 4 §4.4 bands: is it declared (a heading containing the
+ * canonical name, case- and slash-spacing-insensitively — mirrors
+ * `charter-validate.ts`'s `validateCharterBands` exactly), and if so, what
+ * prose follows it up to the next heading of any level (or EOF)? Each
+ * heading can satisfy at most ONE band, matching the upstream rule.
+ */
+export function extractBandSections(charterMd) {
+    const lines = charterMd.split(/\r?\n/);
+    const headings = headingLines(lines);
+    const usedHeadingIndices = new Set();
+    return CHARTER_BANDS.map((band) => {
+        const normalizedName = normalizeSlashSpacing(band.name.toLowerCase());
+        const match = headings.find((h) => !usedHeadingIndices.has(h.index) && h.normalizedText.includes(normalizedName));
+        if (!match) {
+            return { id: band.id, name: band.name, declared: false, text: null };
+        }
+        usedHeadingIndices.add(match.index);
+        const nextHeadingIndex = headings
+            .map((h) => h.index)
+            .filter((idx) => idx > match.index)
+            .sort((a, b) => a - b)[0];
+        const sectionEnd = nextHeadingIndex ?? lines.length;
+        const sectionLines = lines.slice(match.index + 1, sectionEnd);
+        return { id: band.id, name: band.name, declared: true, text: extractSectionProse(sectionLines) };
+    });
+}
+/** Pure core. `charterPath` is `org-chart.json`'s per-lead `charter_path`
+ *  value (verbatim, as read by the caller) — compared against the literal
+ *  default rather than resolved, per the header note above. */
+export function charterAuthorityCore(deps, leadId, charterPath) {
+    if (charterPath !== undefined && charterPath !== DEFAULT_CHARTER_RELPATH) {
+        return { measured: false, reason: "custom charter path not yet supported by this panel" };
+    }
+    const readFn = deps.readFn ?? orgFileReadCore;
+    const result = readFn(deps, `${leadId}/${DEFAULT_CHARTER_RELPATH}`);
+    if (result.status !== 200 || result.kind !== "file") {
+        return { measured: false, reason: "not readable at the default charter path" };
+    }
+    const bands = extractBandSections(result.body.toString("utf8"));
+    const declaredCount = bands.filter((b) => b.declared).length;
+    return { measured: true, bands, declaredCount };
+}
+//# sourceMappingURL=charter-authority-read.js.map