@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/external/org/charter-authority-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"charter-authority-read.js","sourceRoot":"","sources":["../../../src/external/org/charter-authority-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,eAAe,EAAoD,MAAM,gBAAgB,CAAC;AAQnG,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACnD,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE;IAC5C,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE;IACxC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,yBAAyB,EAAE;CACxD,CAAC;AAEF,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAc7C,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAOD,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,qBAAqB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;2DAY2D;AAC3D,SAAS,mBAAmB,CAAC,YAAsB;IACjD,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC,MAAM,CAAC;IACV,MAAM,cAAc,GAAG,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/E,WAAW,GAAG,CAAC,WAAW,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,WAAW;YAAE,SAAS;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,oDAAoD;QACzF,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAqB,EAAE;QACnD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;QACD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpC,MAAM,gBAAgB,GAAG,QAAQ;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACnB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAE9D,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;+DAE+D;AAC/D,MAAM,UAAU,oBAAoB,CAClC,IAA0B,EAC1B,MAAc,EACd,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,uBAAuB,EAAE,CAAC;QACzE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClD,CAAC"}

package/server/dist/external/org/commit-validate.d.ts

@@ -0,0 +1,18 @@
+import type { PreflightLead } from "../../types/leadwright-preflight.js";
+import type { DaemonConfigAdditions } from "./leadwright-proposal-merge.js";
+export interface CommitRequestBody {
+    leadId: string;
+    lead: PreflightLead;
+    daemonConfigAdditions: DaemonConfigAdditions;
+    charterContent: string;
+    expectedProposalDigest: string;
+}
+export type ValidationResult = {
+    ok: true;
+    value: CommitRequestBody;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function validateCommitBody(body: unknown): ValidationResult;
+//# sourceMappingURL=commit-validate.d.ts.map

package/server/dist/external/org/commit-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-validate.d.ts","sourceRoot":"","sources":["../../../src/external/org/commit-validate.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;IACpB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAmDlE"}

package/server/dist/external/org/commit-validate.js

@@ -0,0 +1,59 @@
+/*
+ * commit-validate.ts — request-body validation for POST
+ * /api/external/org/leads/commit (iterate-2026-09-07-leadwright-setup-wizard,
+ * W14). Split out of commit.ts (bloat ceiling) — a self-contained concern:
+ * shape-checking the untyped request body against leadwright's published
+ * contract, never leadwright's semantic judgment (that's the verdict step's
+ * real check-setup.ts subprocess).
+ */
+import path from "node:path";
+import { LEAD_ID_RE, ALLOWED_SKILL_RE } from "../../types/leadwright-preflight.js";
+export function validateCommitBody(body) {
+    if (typeof body !== "object" || body === null)
+        return { ok: false, reason: "invalid_request_body" };
+    const b = body;
+    if (typeof b.leadId !== "string" || !LEAD_ID_RE.test(b.leadId)) {
+        return { ok: false, reason: "invalid_lead_id" };
+    }
+    if (typeof b.lead !== "object" || b.lead === null) {
+        return { ok: false, reason: "invalid_lead" };
+    }
+    const lead = b.lead;
+    // External-review fix (both legs, high): commitCore ALWAYS writes charter
+    // content to `<leadsRoot>/<leadId>/charter.md` regardless of what
+    // charter_path says — checking only "relative, no .." (CHARTER_LEARNINGS_
+    // PATH_RE) let a caller submit a charter_path that doesn't match, so the
+    // org-chart entry would point at a file the endpoint never wrote. Exact
+    // match subsumes that regex check (a value equal to the fixed convention
+    // is trivially relative with no `..`). The wizard itself always sends
+    // this convention (buildLeadProposal.ts); this closes the gap for any
+    // other caller. `b.leadId` is a validated string by this point.
+    if (lead.charter_path !== `${b.leadId}/charter.md`) {
+        return { ok: false, reason: "charter_path_must_match_lead_id_convention" };
+    }
+    if (lead.learnings_path !== `${b.leadId}/learnings.md`) {
+        return { ok: false, reason: "learnings_path_must_match_lead_id_convention" };
+    }
+    if (!Array.isArray(lead.allowed_skills) || !lead.allowed_skills.every((s) => typeof s === "string" && ALLOWED_SKILL_RE.test(s))) {
+        return { ok: false, reason: "invalid_allowed_skills" };
+    }
+    const additionsRaw = b.daemonConfigAdditions;
+    if (typeof additionsRaw !== "object" || additionsRaw === null) {
+        return { ok: false, reason: "invalid_daemon_config_additions" };
+    }
+    const additions = additionsRaw;
+    if (typeof additions.path !== "string" ||
+        !path.isAbsolute(additions.path) ||
+        typeof additions.actionId !== "string" ||
+        !Array.isArray(additions.pluginDirs) ||
+        !additions.pluginDirs.every((d) => typeof d === "string" && path.isAbsolute(d))) {
+        return { ok: false, reason: "daemon_config_additions_must_be_absolute" };
+    }
+    if (typeof b.charterContent !== "string")
+        return { ok: false, reason: "charter_content_required" };
+    if (typeof b.expectedProposalDigest !== "string" || b.expectedProposalDigest.length === 0) {
+        return { ok: false, reason: "expected_proposal_digest_required" };
+    }
+    return { ok: true, value: body };
+}
+//# sourceMappingURL=commit-validate.js.map

package/server/dist/external/org/commit-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-validate.js","sourceRoot":"","sources":["../../../src/external/org/commit-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAcnF,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACpG,MAAM,CAAC,GAAG,IAA+B,CAAC;IAE1C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAA8B,CAAC;IAC9C,0EAA0E;IAC1E,kEAAkE;IAClE,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,MAAgB,aAAa,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,MAAgB,eAAe,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,CAAC,qBAAqB,CAAC;IAC7C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,YAAuC,CAAC;IAC1D,IACE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;QAChC,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QACpC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAC/E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnG,IAAI,OAAO,CAAC,CAAC,sBAAsB,KAAK,QAAQ,IAAI,CAAC,CAAC,sBAAsB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAyB,EAAE,CAAC;AACxD,CAAC"}

package/server/dist/external/org/commit-writes.d.ts

@@ -0,0 +1,68 @@
+import { withOrgFileLock, type LstatFn, type OrgFileLockOptions } from "./org-file-lock.js";
+import { type DaemonConfigAdditions } from "./leadwright-proposal-merge.js";
+import type { PreflightLead, PreflightOrgChart } from "../../types/leadwright-preflight.js";
+export type WithOrgFileLockFn = typeof withOrgFileLock;
+export type { LstatFn };
+/** charter.md is a brand-new file under a brand-new leadId — no concurrent
+ *  WRITER can exist for a path that did not exist a moment ago, so this
+ *  needs no LOCK (mirrors file-write.ts's documented "no lock" posture for
+ *  charter files; the concurrency story there is If-Match, which has no
+ *  meaning for a CREATE). It IS symlink-checked, same as the other two
+ *  writes: `<leadsRoot>/<leadId>` and the charter.md path itself are each
+ *  checked immediately before the syscall that would follow them, closing
+ *  the escape a pre-planted symlink (or a retry landing on one) would
+ *  otherwise open. */
+export declare function writeNewCharterFile(leadsRoot: string, leadId: string, content: string, lstat?: LstatFn): void;
+export type DaemonConfigWriteResult = {
+    status: "written";
+} | {
+    status: "missing";
+    fragment: string;
+};
+/**
+ * ADD-ONLY merge — reads the CURRENT on-disk daemon-config.json fresh
+ * (inside the lock, never the pre-commit snapshot) and writes back with
+ * ONLY this lead's three entries added to leadProjectRoots/leadActionIds/
+ * leadPluginDirs. Every existing key — other leads' entries, every
+ * unrelated top-level field — passes through untouched. A file that does
+ * not exist on disk is never guessed into existence — the caller gets a
+ * copy-paste fragment instead (W14's "home is <leadsRoot>/daemon-config.json,
+ * if absent show a fragment instead of guessing a location").
+ *
+ * External-review fix (GLM, medium): the "does it exist" decision now comes
+ * from the `mustExist: true` lock ACQUISITION's own ENOENT, not a boolean
+ * the caller read before taking the lock — a pre-lock snapshot is a TOCTOU
+ * window (the file could be deleted between that read and this call).
+ */
+export declare function writeDaemonConfigAddition(leadsRoot: string, leadId: string, additions: DaemonConfigAdditions, withOrgFileLockFn?: WithOrgFileLockFn, lockOptions?: Omit<OrgFileLockOptions, "mustExist">): Promise<DaemonConfigWriteResult>;
+export type OrgChartWriteResult = {
+    status: "written";
+} | {
+    status: "already_committed";
+} | {
+    status: "conflict";
+};
+/** Pure decision for adding `leadId` -> `lead` to an org-chart snapshot —
+ *  idempotent when the roster ALREADY carries this exact lead (a safe retry
+ *  after an earlier commit attempt crashed between this write and its HTTP
+ *  response reaching the client); a DIFFERING existing entry is refused,
+ *  never silently overwritten or reordered. Exported so `commit.ts` can
+ *  reuse it INSIDE an org-chart.json lock it already holds (the
+ *  concurrent-same-leadId-commit race fix) rather than acquiring a second,
+ *  nested lock on the same file via `writeOrgChartLead`. */
+export declare function applyOrgChartLead(current: PreflightOrgChart, leadId: string, lead: PreflightLead): {
+    status: "written";
+    next: PreflightOrgChart;
+} | {
+    status: "already_committed";
+} | {
+    status: "conflict";
+};
+/**
+ * Adds `leadId` -> `lead` to org-chart.json's `leads` map, re-reading fresh
+ * inside the lock. Thin wrapper over `applyOrgChartLead` for callers that
+ * don't already hold this file's lock (`commit.ts` does, and calls
+ * `applyOrgChartLead` directly instead — see that file).
+ */
+export declare function writeOrgChartLead(leadsRoot: string, leadId: string, lead: PreflightLead, withOrgFileLockFn?: WithOrgFileLockFn, lockOptions?: Omit<OrgFileLockOptions, "mustExist">): Promise<OrgChartWriteResult>;
+//# sourceMappingURL=commit-writes.d.ts.map

package/server/dist/external/org/commit-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-writes.d.ts","sourceRoot":"","sources":["../../../src/external/org/commit-writes.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAoB,KAAK,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,KAAK,EAAyB,aAAa,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAEnH,MAAM,MAAM,iBAAiB,GAAG,OAAO,eAAe,CAAC;AACvD,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB;;;;;;;;sBAQsB;AACtB,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,OAAmB,GACzB,IAAI,CAON;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AActG;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,qBAAqB,EAChC,iBAAiB,GAAE,iBAAmC,EACtD,WAAW,GAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAM,GACtD,OAAO,CAAC,uBAAuB,CAAC,CAoBlC;AAED,MAAM,MAAM,mBAAmB,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAEnH;;;;;;;4DAO4D;AAC5D,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,GAClB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAQ3G;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,EACnB,iBAAiB,GAAE,iBAAmC,EACtD,WAAW,GAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAM,GACtD,OAAO,CAAC,mBAAmB,CAAC,CAQ9B"}

package/server/dist/external/org/commit-writes.js

@@ -0,0 +1,110 @@
+/*
+ * commit-writes.ts — the three ordered, lock-protected writes the leads
+ * commit route performs (iterate-2026-09-07-leadwright-setup-wizard, W14).
+ * Order (enforced by commit.ts's call sequence, not here):
+ *   charter.md -> daemon-config.json -> org-chart.json
+ * org-chart.json is what "activates" a lead (leadwright's daemon reads the
+ * roster from there), so writing it LAST means a failure at any earlier
+ * step leaves only harmless, retry-safe residue (an orphan charter.md, or
+ * a daemon-config.json entry pointing at a lead the roster doesn't list
+ * yet) rather than a half-activated lead.
+ */
+import { lstatSync, mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { withOrgFileLock, assertNotSymlink } from "./org-file-lock.js";
+import { canonicalStringify } from "./leadwright-proposal-merge.js";
+/** charter.md is a brand-new file under a brand-new leadId — no concurrent
+ *  WRITER can exist for a path that did not exist a moment ago, so this
+ *  needs no LOCK (mirrors file-write.ts's documented "no lock" posture for
+ *  charter files; the concurrency story there is If-Match, which has no
+ *  meaning for a CREATE). It IS symlink-checked, same as the other two
+ *  writes: `<leadsRoot>/<leadId>` and the charter.md path itself are each
+ *  checked immediately before the syscall that would follow them, closing
+ *  the escape a pre-planted symlink (or a retry landing on one) would
+ *  otherwise open. */
+export function writeNewCharterFile(leadsRoot, leadId, content, lstat = lstatSync) {
+    const dir = path.join(leadsRoot, leadId);
+    assertNotSymlink(dir, lstat);
+    mkdirSync(dir, { recursive: true });
+    const filePath = path.join(dir, "charter.md");
+    assertNotSymlink(filePath, lstat);
+    writeFileSync(filePath, content, "utf8");
+}
+function buildDaemonConfigFragment(leadId, additions) {
+    return JSON.stringify({
+        leadProjectRoots: { [leadId]: additions.path },
+        leadActionIds: { [leadId]: additions.actionId },
+        leadPluginDirs: { [leadId]: additions.pluginDirs },
+    }, null, 2);
+}
+/**
+ * ADD-ONLY merge — reads the CURRENT on-disk daemon-config.json fresh
+ * (inside the lock, never the pre-commit snapshot) and writes back with
+ * ONLY this lead's three entries added to leadProjectRoots/leadActionIds/
+ * leadPluginDirs. Every existing key — other leads' entries, every
+ * unrelated top-level field — passes through untouched. A file that does
+ * not exist on disk is never guessed into existence — the caller gets a
+ * copy-paste fragment instead (W14's "home is <leadsRoot>/daemon-config.json,
+ * if absent show a fragment instead of guessing a location").
+ *
+ * External-review fix (GLM, medium): the "does it exist" decision now comes
+ * from the `mustExist: true` lock ACQUISITION's own ENOENT, not a boolean
+ * the caller read before taking the lock — a pre-lock snapshot is a TOCTOU
+ * window (the file could be deleted between that read and this call).
+ */
+export async function writeDaemonConfigAddition(leadsRoot, leadId, additions, withOrgFileLockFn = withOrgFileLock, lockOptions = {}) {
+    const target = path.join(leadsRoot, "daemon-config.json");
+    try {
+        await withOrgFileLockFn(target, { ...lockOptions, mustExist: true }, (ctx) => {
+            const current = JSON.parse(ctx.read());
+            const next = {
+                ...current,
+                leadProjectRoots: { ...(current.leadProjectRoots ?? {}), [leadId]: additions.path },
+                leadActionIds: { ...(current.leadActionIds ?? {}), [leadId]: additions.actionId },
+                leadPluginDirs: { ...(current.leadPluginDirs ?? {}), [leadId]: additions.pluginDirs },
+            };
+            ctx.write(JSON.stringify(next, null, 2));
+        });
+    }
+    catch (err) {
+        if (err?.code === "ENOENT") {
+            return { status: "missing", fragment: buildDaemonConfigFragment(leadId, additions) };
+        }
+        throw err;
+    }
+    return { status: "written" };
+}
+/** Pure decision for adding `leadId` -> `lead` to an org-chart snapshot —
+ *  idempotent when the roster ALREADY carries this exact lead (a safe retry
+ *  after an earlier commit attempt crashed between this write and its HTTP
+ *  response reaching the client); a DIFFERING existing entry is refused,
+ *  never silently overwritten or reordered. Exported so `commit.ts` can
+ *  reuse it INSIDE an org-chart.json lock it already holds (the
+ *  concurrent-same-leadId-commit race fix) rather than acquiring a second,
+ *  nested lock on the same file via `writeOrgChartLead`. */
+export function applyOrgChartLead(current, leadId, lead) {
+    const existing = current.leads[leadId];
+    if (existing) {
+        return canonicalStringify(existing) === canonicalStringify(lead)
+            ? { status: "already_committed" }
+            : { status: "conflict" };
+    }
+    return { status: "written", next: { ...current, leads: { ...current.leads, [leadId]: lead } } };
+}
+/**
+ * Adds `leadId` -> `lead` to org-chart.json's `leads` map, re-reading fresh
+ * inside the lock. Thin wrapper over `applyOrgChartLead` for callers that
+ * don't already hold this file's lock (`commit.ts` does, and calls
+ * `applyOrgChartLead` directly instead — see that file).
+ */
+export async function writeOrgChartLead(leadsRoot, leadId, lead, withOrgFileLockFn = withOrgFileLock, lockOptions = {}) {
+    const target = path.join(leadsRoot, "org-chart.json");
+    return withOrgFileLockFn(target, { ...lockOptions, mustExist: true }, (ctx) => {
+        const current = JSON.parse(ctx.read());
+        const result = applyOrgChartLead(current, leadId, lead);
+        if (result.status === "written")
+            ctx.write(JSON.stringify(result.next, null, 2));
+        return { status: result.status };
+    });
+}
+//# sourceMappingURL=commit-writes.js.map

package/server/dist/external/org/commit-writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-writes.js","sourceRoot":"","sources":["../../../src/external/org/commit-writes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAyC,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,kBAAkB,EAA8B,MAAM,gCAAgC,CAAC;AAMhG;;;;;;;;sBAQsB;AACtB,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,MAAc,EACd,OAAe,EACf,QAAiB,SAAS;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAID,SAAS,yBAAyB,CAAC,MAAc,EAAE,SAAgC;IACjF,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,gBAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE;QAC9C,aAAa,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE;QAC/C,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,UAAU,EAAE;KACnD,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,MAAc,EACd,SAAgC,EAChC,oBAAuC,eAAe,EACtD,cAAqD,EAAE;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YAChE,MAAM,IAAI,GAA0B;gBAClC,GAAG,OAAO;gBACV,gBAAgB,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE;gBACnF,aAAa,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACjF,cAAc,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,UAAU,EAAE;aACtF,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAID;;;;;;;4DAO4D;AAC5D,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,MAAc,EACd,IAAmB;IAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,kBAAkB,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAE,EAAE,MAAM,EAAE,mBAAmB,EAAY;YAC5C,CAAC,CAAE,EAAE,MAAM,EAAE,UAAU,EAAY,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,MAAc,EACd,IAAmB,EACnB,oBAAuC,eAAe,EACtD,cAAqD,EAAE;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACtD,OAAO,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAW,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/commit.d.ts

@@ -0,0 +1,73 @@
+import type { Hono } from "hono";
+import { type OrgChartFullReadResult } from "./org-chart-full-read.js";
+import { type DaemonConfigReadCoreResult } from "./daemon-config-read.js";
+import { writeNewCharterFile, type WithOrgFileLockFn } from "./commit-writes.js";
+import { type ReadOrgFileFn } from "./existing-charters-read.js";
+import { runLeadwrightPreflight } from "../../core/leadwright-preflight-transport.js";
+import { type CommitRequestBody } from "./commit-validate.js";
+/** Not a dismissable toast — the client renders this string prominently and
+ *  blocks the "done" state on it (W14: "restart the daemon" must be
+ *  explicit, because daemon-config.json loads once at boot). */
+export declare const RESTART_NOTICE = "leadwright's daemon reads daemon-config.json once at startup. This new lead will not run until you restart the leadwright daemon.";
+export type { CommitRequestBody };
+export interface CommitCoreDeps {
+    leadsRoot: string;
+    leadwrightCheckoutRoot: string | undefined;
+    webuiBaseUrl: string;
+    readOrgChartFullFn: (deps: {
+        leadsRoot: string;
+    }) => OrgChartFullReadResult;
+    daemonConfigReadFn: (deps: {
+        leadsRoot: string;
+        webuiBaseUrl: string;
+    }) => DaemonConfigReadCoreResult;
+    withOrgFileLockFn?: WithOrgFileLockFn;
+    writeCharterFn?: typeof writeNewCharterFile;
+    readOrgFileFn?: ReadOrgFileFn;
+    runLeadwrightPreflightFn?: typeof runLeadwrightPreflight;
+}
+export type CommitCoreResult = {
+    status: 200;
+    body: {
+        committed: true;
+        leadId: string;
+        restartRequired: true;
+        restartNotice: string;
+    };
+} | {
+    status: 200;
+    body: {
+        committed: false;
+        stage: "daemon-config";
+        fragment: string;
+    };
+} | {
+    status: 400;
+    body: {
+        error: string;
+    };
+} | {
+    status: 403 | 404 | 500 | 502;
+    body: {
+        error: string;
+        detail?: string;
+    };
+} | {
+    status: 409;
+    body: {
+        error: "verdict_stale" | "org_chart_lead_exists" | "daemon_config_locked" | "org_chart_locked" | "verdict_not_ok";
+        findings?: unknown;
+    };
+} | {
+    status: 503;
+    body: {
+        error: "leadwright_not_configured";
+    };
+};
+export declare function commitCore(deps: CommitCoreDeps, requestBody: unknown): Promise<CommitCoreResult>;
+export interface CommitRouteDeps extends Omit<CommitCoreDeps, "readOrgChartFullFn" | "daemonConfigReadFn"> {
+    readOrgChartFullFn?: CommitCoreDeps["readOrgChartFullFn"];
+    daemonConfigReadFn?: CommitCoreDeps["daemonConfigReadFn"];
+}
+export declare function registerCommitRoute(app: Hono, deps: CommitRouteDeps): void;
+//# sourceMappingURL=commit.d.ts.map

package/server/dist/external/org/commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.d.ts","sourceRoot":"","sources":["../../../src/external/org/commit.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGjC,OAAO,EAAoB,KAAK,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAwB,KAAK,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAEhG,OAAO,EAAE,mBAAmB,EAAgD,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE/H,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGlF;;gEAEgE;AAChE,eAAO,MAAM,cAAc,sIAC0G,CAAC;AAEtI,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,sBAAsB,CAAC;IAC5E,kBAAkB,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,0BAA0B,CAAC;IACtG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IAC5C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,wBAAwB,CAAC,EAAE,OAAO,sBAAsB,CAAC;CAC1D;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,SAAS,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACrF;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IACE,MAAM,EAAE,GAAG,CAAC;IACZ,IAAI,EAAE;QACJ,KAAK,EAAE,eAAe,GAAG,uBAAuB,GAAG,sBAAsB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;QAClH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CACH,GACD;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,2BAA2B,CAAA;KAAE,CAAA;CAAE,CAAC;AAElE,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyJtG;AAED,MAAM,WAAW,eAAgB,SAAQ,IAAI,CAAC,cAAc,EAAE,oBAAoB,GAAG,oBAAoB,CAAC;IACxG,kBAAkB,CAAC,EAAE,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC1D,kBAAkB,CAAC,EAAE,cAAc,CAAC,oBAAoB,CAAC,CAAC;CAC3D;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAsB1E"}

package/server/dist/external/org/commit.js

@@ -0,0 +1,181 @@
+import path from "node:path";
+import { readOrgChartFull } from "./org-chart-full-read.js";
+import { daemonConfigReadCore } from "./daemon-config-read.js";
+import { mergeLeadProposal, computeProposalDigest, canonicalStringify } from "./leadwright-proposal-merge.js";
+import { writeNewCharterFile, writeDaemonConfigAddition, applyOrgChartLead } from "./commit-writes.js";
+import { withOrgFileLock, OrgFileSymlinkEscapeError } from "./org-file-lock.js";
+import { readExistingLeadCharters } from "./existing-charters-read.js";
+import { runLeadwrightPreflight } from "../../core/leadwright-preflight-transport.js";
+import { validateCommitBody } from "./commit-validate.js";
+/** Not a dismissable toast — the client renders this string prominently and
+ *  blocks the "done" state on it (W14: "restart the daemon" must be
+ *  explicit, because daemon-config.json loads once at boot). */
+export const RESTART_NOTICE = "leadwright's daemon reads daemon-config.json once at startup. This new lead will not run until you restart the leadwright daemon.";
+export async function commitCore(deps, requestBody) {
+    if (!deps.leadwrightCheckoutRoot) {
+        return { status: 503, body: { error: "leadwright_not_configured" } };
+    }
+    const validated = validateCommitBody(requestBody);
+    if (!validated.ok) {
+        return { status: 400, body: { error: validated.reason } };
+    }
+    const { leadId, lead, daemonConfigAdditions, charterContent, expectedProposalDigest } = validated.value;
+    const orgChartResult = deps.readOrgChartFullFn({ leadsRoot: deps.leadsRoot });
+    if (orgChartResult.status !== 200)
+        return orgChartResult;
+    const daemonConfigResult = deps.daemonConfigReadFn({ leadsRoot: deps.leadsRoot, webuiBaseUrl: deps.webuiBaseUrl });
+    if (daemonConfigResult.status !== 200)
+        return daemonConfigResult;
+    const existingCharters = readExistingLeadCharters(deps.leadsRoot, orgChartResult.body, leadId, deps.readOrgFileFn);
+    const { proposal } = mergeLeadProposal({
+        orgChart: orgChartResult.body,
+        daemonConfig: daemonConfigResult.body,
+        leadId,
+        lead,
+        daemonConfigAdditions,
+        charterContent,
+        existingCharters,
+    });
+    const actualDigest = computeProposalDigest(proposal);
+    if (actualDigest !== expectedProposalDigest) {
+        return { status: 409, body: { error: "verdict_stale" } };
+    }
+    // External-review fix (openai, high — security): `expectedProposalDigest`
+    // is a PLAIN, unsigned SHA-256 of the proposal — proving nothing about
+    // WHETHER leadwright's actual verdict was green, only that the client's
+    // claimed digest matches what a fresh server-side merge produces for the
+    // SAME proposal shape. Any caller able to compute that same hash (no
+    // secret is involved) could submit a proposal with unsatisfied MUSS
+    // findings and have it accepted without ever running /verdict. The digest
+    // check above stays (it's still the right UX for "your answers changed
+    // since you last checked"); this re-runs leadwright's REAL check-setup.ts
+    // against the exact proposal about to be written, so the write can never
+    // happen without a genuinely fresh, server-observed green verdict.
+    const runPreflight = deps.runLeadwrightPreflightFn ?? runLeadwrightPreflight;
+    const reverify = await runPreflight(deps.leadwrightCheckoutRoot, proposal);
+    if (!reverify.ranOk) {
+        return { status: 502, body: { error: "leadwright_transport_failed", detail: reverify.reason } };
+    }
+    if (!reverify.result.ok) {
+        return { status: 409, body: { error: "verdict_not_ok", findings: reverify.result.findings } };
+    }
+    // Cheap fast-path (not the authoritative check — see below): a leadId
+    // collision visible on the PRE-LOCK snapshot lets an obvious duplicate
+    // 409 without ever touching the filesystem lock. mergeLeadProposal always
+    // overwrites orgChart.leads[leadId] with the submitted lead before
+    // hashing (so computeProposalDigest is identical whether or not that id
+    // already exists on disk) — the digest check above can never see this
+    // collision on its own.
+    const existingLead = orgChartResult.body.leads[leadId];
+    if (existingLead && canonicalStringify(existingLead) !== canonicalStringify(lead)) {
+        return { status: 409, body: { error: "org_chart_lead_exists" } };
+    }
+    // External-review fix (openai, high — "regression"): the fast-path check
+    // above reads a PRE-LOCK snapshot, so two genuinely concurrent commits
+    // for the SAME NEW leadId can both pass it, then both race past the
+    // unlocked charter.md write and the (once-)unconditional daemon-config
+    // merge before org-chart.json's own conflict check catches only one —
+    // the exact corruption shape the doubt-review fix closed for SEQUENTIAL
+    // resubmission, but not for true concurrency. The fix: hold ONE lock on
+    // org-chart.json (leadwright's activation source of truth) across the
+    // ENTIRE write sequence, with a FRESH re-read + re-check as the first
+    // thing inside it. A second racer simply cannot enter this critical
+    // section until the first's full commit (all three writes) has finished
+    // and released the lock — at which point its own fresh check correctly
+    // sees the collision and 409s before writing anything.
+    const withOrgFileLockFn = deps.withOrgFileLockFn ?? withOrgFileLock;
+    const orgChartTarget = path.join(deps.leadsRoot, "org-chart.json");
+    try {
+        return await withOrgFileLockFn(orgChartTarget, { mustExist: true }, async (ctx) => {
+            const freshOrgChart = JSON.parse(ctx.read());
+            const freshExisting = freshOrgChart.leads[leadId];
+            if (freshExisting && canonicalStringify(freshExisting) !== canonicalStringify(lead)) {
+                return { status: 409, body: { error: "org_chart_lead_exists" } };
+            }
+            const writeCharter = deps.writeCharterFn ?? writeNewCharterFile;
+            try {
+                writeCharter(deps.leadsRoot, leadId, charterContent);
+            }
+            catch (err) {
+                if (err instanceof OrgFileSymlinkEscapeError) {
+                    return { status: 403, body: { error: "symlink_forbidden", detail: err.path } };
+                }
+                throw err;
+            }
+            // Lock-contention error convention (CLAUDE.md rule 6 / DO-NOT #6),
+            // mirrored from beat-register-release-request.ts: a genuine
+            // cross-process lock conflict (proper-lockfile's ELOCKED, retries
+            // exhausted) maps to its OWN named 409 rather than falling through to
+            // the app-wide error handler's generic (and wrong-resource) message.
+            let daemonConfigWrite;
+            try {
+                daemonConfigWrite = await writeDaemonConfigAddition(deps.leadsRoot, leadId, daemonConfigAdditions, deps.withOrgFileLockFn);
+            }
+            catch (err) {
+                if (err instanceof OrgFileSymlinkEscapeError) {
+                    return { status: 403, body: { error: "symlink_forbidden", detail: err.path } };
+                }
+                if (err?.code === "ELOCKED") {
+                    return { status: 409, body: { error: "daemon_config_locked" } };
+                }
+                throw err;
+            }
+            if (daemonConfigWrite.status === "missing") {
+                return {
+                    status: 200,
+                    body: { committed: false, stage: "daemon-config", fragment: daemonConfigWrite.fragment },
+                };
+            }
+            // Applies directly against the ALREADY-OPEN ctx from this same lock
+            // acquisition — never a second, nested lock() call on org-chart.json.
+            const applied = applyOrgChartLead(freshOrgChart, leadId, lead);
+            if (applied.status === "conflict") {
+                return { status: 409, body: { error: "org_chart_lead_exists" } };
+            }
+            if (applied.status === "written") {
+                ctx.write(JSON.stringify(applied.next, null, 2));
+            }
+            return {
+                status: 200,
+                body: { committed: true, leadId, restartRequired: true, restartNotice: RESTART_NOTICE },
+            };
+        });
+    }
+    catch (err) {
+        if (err instanceof OrgFileSymlinkEscapeError) {
+            return { status: 403, body: { error: "symlink_forbidden", detail: err.path } };
+        }
+        if (err?.code === "ELOCKED") {
+            return { status: 409, body: { error: "org_chart_locked" } };
+        }
+        if (err?.code === "ENOENT") {
+            return { status: 404, body: { error: "org_chart_missing" } };
+        }
+        throw err;
+    }
+}
+export function registerCommitRoute(app, deps) {
+    const coreDeps = {
+        leadsRoot: deps.leadsRoot,
+        leadwrightCheckoutRoot: deps.leadwrightCheckoutRoot,
+        webuiBaseUrl: deps.webuiBaseUrl,
+        readOrgChartFullFn: deps.readOrgChartFullFn ?? readOrgChartFull,
+        daemonConfigReadFn: deps.daemonConfigReadFn ?? daemonConfigReadCore,
+        withOrgFileLockFn: deps.withOrgFileLockFn,
+        writeCharterFn: deps.writeCharterFn,
+        readOrgFileFn: deps.readOrgFileFn,
+        runLeadwrightPreflightFn: deps.runLeadwrightPreflightFn,
+    };
+    app.post("/api/external/org/leads/commit", async (c) => {
+        let requestBody;
+        try {
+            requestBody = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid_request_body" }, 400);
+        }
+        const result = await commitCore(coreDeps, requestBody);
+        return c.json(result.body, result.status);
+    });
+}
+//# sourceMappingURL=commit.js.map

package/server/dist/external/org/commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../../src/external/org/commit.ts"],"names":[],"mappings":"AAmBA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAA+B,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAmC,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,iBAAiB,EAA0B,MAAM,oBAAoB,CAAC;AAC/H,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAsB,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAA0B,MAAM,sBAAsB,CAAC;AAGlF;;gEAEgE;AAChE,MAAM,CAAC,MAAM,cAAc,GACzB,mIAAmI,CAAC;AA8BtI,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,WAAoB;IACzE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,cAAc,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;IAExG,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAEzD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnH,IAAI,kBAAkB,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAEjE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACnH,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC;QACrC,QAAQ,EAAE,cAAc,CAAC,IAAI;QAC7B,YAAY,EAAE,kBAAkB,CAAC,IAAI;QACrC,MAAM;QACN,IAAI;QACJ,qBAAqB;QACrB,cAAc;QACd,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,YAAY,KAAK,sBAAsB,EAAE,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,IAAI,sBAAsB,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,0EAA0E;IAC1E,mEAAmE;IACnE,wEAAwE;IACxE,sEAAsE;IACtE,wBAAwB;IACxB,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,YAAY,IAAI,kBAAkB,CAAC,YAAY,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,eAAe,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAChF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;YAClE,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,aAAa,IAAI,kBAAkB,CAAC,aAAa,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAW,CAAC;YAC5E,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,mBAAmB,CAAC;YAChE,IAAI,CAAC;gBACH,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAW,CAAC;gBAC1F,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,mEAAmE;YACnE,4DAA4D;YAC5D,kEAAkE;YAClE,sEAAsE;YACtE,qEAAqE;YACrE,IAAI,iBAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,iBAAiB,GAAG,MAAM,yBAAyB,CACjD,IAAI,CAAC,SAAS,EACd,MAAM,EACN,qBAAqB,EACrB,IAAI,CAAC,iBAAiB,CACvB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAW,CAAC;gBAC1F,CAAC;gBACD,IAAK,GAA6B,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAW,CAAC;gBAC3E,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;iBAChF,CAAC;YACb,CAAC;YAED,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAW,CAAC;YAC5E,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE;aAC/E,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,IAAK,GAA6B,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;QAC9D,CAAC;QACD,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,GAAS,EAAE,IAAqB;IAClE,MAAM,QAAQ,GAAmB;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,gBAAgB;QAC/D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,oBAAoB;QACnE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;KACxD,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/org/commit.test-fixtures.d.ts

@@ -0,0 +1,38 @@
+import type { CommitCoreDeps } from "./commit.js";
+import type { CommitRequestBody } from "./commit-validate.js";
+import type { PreflightOrgChart } from "../../types/leadwright-preflight.js";
+export declare const EMPTY_ORG_CHART: PreflightOrgChart;
+export declare const VALID_LEAD: {
+    name: string;
+    domain: string;
+    reports_to: null;
+    manages: never[];
+    charter_path: string;
+    learnings_path: string;
+    triggers: {
+        cron: string;
+        on: never[];
+    };
+    max_concurrent_tasks: number;
+    budget: {
+        window: "rolling-7d";
+        usd: null;
+        pause_at: number;
+        hard_stop_at: number;
+    };
+    projects: string[];
+    allowed_skills: string[];
+    allowed_tools: never[];
+    escalation_target: string;
+    model: "balanced";
+    paused: false;
+};
+export declare const ADDITIONS: {
+    path: string;
+    actionId: string;
+    pluginDirs: string[];
+};
+export declare function correctDigest(): string;
+export declare function validBody(overrides?: Partial<CommitRequestBody>): CommitRequestBody;
+export declare function baseDeps(overrides?: Partial<CommitCoreDeps>): CommitCoreDeps;
+//# sourceMappingURL=commit.test-fixtures.d.ts.map

package/server/dist/external/org/commit.test-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.test-fixtures.d.ts","sourceRoot":"","sources":["../../../src/external/org/commit.test-fixtures.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE5F,eAAO,MAAM,eAAe,EAAE,iBAAyD,CAAC;AAExF,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;CAgBE,CAAC;AAE1B,eAAO,MAAM,SAAS;;;;CAAoE,CAAC;AAE3F,wBAAgB,aAAa,IAAI,MAAM,CAatC;AAED,wBAAgB,SAAS,CAAC,SAAS,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,iBAAiB,CASvF;AAED,wBAAgB,QAAQ,CAAC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc,CAchF"}