@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/external/session-file/probe-route.js

@@ -0,0 +1,66 @@
+/*
+ * POST /api/external/tasks/:id/session-file/probe  { paths: string[] }  ->  { results: [{ openable, reason? }] }
+ *
+ * "Is this path openable by the Viewer?" for chat chips, Outputs rows and terminal links, so a dead path is
+ * never presented as a link. Same access rules as GET /session-file (core/session-file/access.ts); no
+ * content, no listing. Bounded: at most MAX_PROBE_PATHS paths per call and PROBE_BURST calls per task per
+ * window (429 probe_rate_limited - callers fail OPEN, the Viewer then reports the real state).
+ *
+ *   400 invalid_body | too_many_paths    404 task_not_found    429 probe_rate_limited
+ */
+import { stat } from "node:fs/promises";
+import { extname, isAbsolute } from "node:path";
+import { MAX_PATH_CHARS } from "../../core/session-file/access.js";
+import { findSessionEvidence } from "../../core/session-file/evidence.js";
+import { MAX_PROBE_PATHS, probeOpenable } from "../../core/session-file/probe.js";
+import { FILE_MAX_BYTES, MIME_BY_EXTENSION } from "../file/_helpers.js";
+const PROBE_WINDOW_MS = 10_000;
+const PROBE_BURST = 30;
+async function existingDir(p) {
+    if (!p || !isAbsolute(p))
+        return null;
+    try {
+        return (await stat(p)).isDirectory() ? p : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function registerProbeRoute(app, deps) {
+    const { store, watcher } = deps;
+    const calls = new Map();
+    app.post("/api/external/tasks/:id/session-file/probe", async (c) => {
+        const taskId = c.req.param("id");
+        const task = store.get(taskId);
+        if (!task)
+            return c.json({ error: "task_not_found" }, 404);
+        const now = Date.now();
+        const recent = (calls.get(taskId) ?? []).filter((t) => now - t < PROBE_WINDOW_MS);
+        if (recent.length >= PROBE_BURST)
+            return c.json({ error: "probe_rate_limited" }, 429);
+        calls.set(taskId, [...recent, now]);
+        if (calls.size > 500)
+            for (const [k, v] of calls)
+                if (v.every((t) => now - t >= PROBE_WINDOW_MS))
+                    calls.delete(k);
+        const body = (await c.req.json().catch(() => null));
+        const paths = body?.paths;
+        if (!Array.isArray(paths) || paths.length === 0 || !paths.every((p) => typeof p === "string")) {
+            return c.json({ error: "invalid_body" }, 400);
+        }
+        if (paths.length > MAX_PROBE_PATHS)
+            return c.json({ error: "too_many_paths", max: MAX_PROBE_PATHS }, 400);
+        const projectDir = await existingDir(deps.getProjectById?.(task.projectId)?.path);
+        const roots = projectDir ? [projectDir] : [];
+        const results = await probeOpenable({
+            roots,
+            // An over-long entry is cut one char past the cap: the decision core rejects it as invalid_path.
+            paths: paths.map((p) => (p.length > MAX_PATH_CHARS ? p.slice(0, MAX_PATH_CHARS + 1) : p)),
+            findEvidence: async (candidates) => findSessionEvidence(task.sessionUuid, await watcher.findByUuid(task.sessionUuid), candidates, deps),
+            maxBytes: FILE_MAX_BYTES,
+            previewable: (abs) => MIME_BY_EXTENSION[extname(abs).toLowerCase().slice(1)] !== undefined,
+        });
+        return c.json({ results });
+    });
+}
+//# sourceMappingURL=probe-route.js.map

package/server/dist/external/session-file/probe-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-route.js","sourceRoot":"","sources":["../../../src/external/session-file/probe-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxE,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,KAAK,UAAU,WAAW,CAAC,CAA4B;IACrD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,IAA2B;IACvE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1C,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACtF,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,eAAe,CAAC;oBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAElH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAC;QAClF,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAE1G,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAClF,MAAM,KAAK,GAAa,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,KAAK;YACL,iGAAiG;YACjG,KAAK,EAAG,KAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvG,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACjC,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;YACrG,QAAQ,EAAE,cAAc;YACxB,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;SAC3F,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/session-file/routes.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from "hono";
+import { type EvidenceDeps } from "../../core/session-file/evidence.js";
+import type { SdkSessionsStore } from "../../core/sdk-sessions-store.js";
+import type { SessionWatcher } from "../../core/session-watcher.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface SessionFileRouterDeps extends EvidenceDeps {
+    store: SdkSessionsStore;
+    watcher: SessionWatcher;
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+}
+export declare function createSessionFileRouter(deps: SessionFileRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/session-file/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/session-file/routes.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAE7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAItE,MAAM,WAAW,qBAAsB,SAAQ,YAAY;IACzD,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;CACvE;AAaD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAuDzE"}

package/server/dist/external/session-file/routes.js

@@ -0,0 +1,90 @@
+/*
+ * external/session-file/routes.ts — GET /api/external/tasks/:id/session-file?path=<abs|rel>.
+ *
+ * Read-only file bytes for the Smart Viewer, scoped to ONE task:
+ *   - inside the project root: same posture as /projects/:id/file
+ *   - outside it: only when THIS session evidences the path (Output write, chat
+ *     mention, tool call) — core/session-file/access.ts. Never a directory listing.
+ *   - `assetOf=<evidenced html>`: an image / stylesheet / font in that page's own
+ *     folder tree — core/session-file/asset-access.ts.
+ * Same MIME allowlist, 5 MB cap, nosniff + sandbox CSP as the project file route;
+ * text types with NUL bytes answer 415 like any other binary.
+ *
+ *   400 invalid_path | path_required | path_traversal | not_a_file | project_path_unavailable
+ *   403 path_not_evidenced | sensitive_location | asset_type_not_allowed | asset_outside_page_folder | asset_owner_invalid    404 task_not_found | not_found
+ *   413 file_too_large        415 binary_not_previewable    500 file_read_failed
+ */
+import { Hono } from "hono";
+import { stat } from "node:fs/promises";
+import { basename, extname, isAbsolute } from "node:path";
+import { decideSessionFileAccess } from "../../core/session-file/access.js";
+import { ASSET_MIME_BY_EXTENSION, decideAssetAccess } from "../../core/session-file/asset-access.js";
+import { findSessionEvidence } from "../../core/session-file/evidence.js";
+import { readRegularFileCapped } from "../../core/session-file/safe-read.js";
+import { registerProbeRoute } from "./probe-route.js";
+import { FILE_MAX_BYTES, MIME_BY_EXTENSION, fileFingerprint, sanitizeContentDispositionFilename } from "../file/_helpers.js";
+async function existingDir(p) {
+    if (!p || !isAbsolute(p))
+        return null;
+    try {
+        return (await stat(p)).isDirectory() ? p : null;
+    }
+    catch {
+        return null;
+    }
+}
+const hasNul = (b) => b.subarray(0, 8192).includes(0);
+export function createSessionFileRouter(deps) {
+    const app = new Hono();
+    const { store, watcher } = deps;
+    app.get("/api/external/tasks/:id/session-file", async (c) => {
+        const task = store.get(c.req.param("id"));
+        if (!task)
+            return c.json({ error: "task_not_found" }, 404);
+        // Only the registered project root is trusted outright. The task cwd is client-supplied at task
+        // creation (it may be a home dir or a drive root), so it is NEVER a root: a task without a
+        // resolvable project gets session-evidenced absolute paths only.
+        const projectDir = await existingDir(deps.getProjectById?.(task.projectId)?.path);
+        const roots = projectDir ? [projectDir] : [];
+        // `assetOf` = the evidenced outside HTML page that wants this image / stylesheet / font (asset-access.ts).
+        const assetOf = c.req.query("assetOf");
+        const accessArgs = {
+            roots,
+            requested: c.req.query("path") ?? "",
+            findEvidence: async (candidates) => findSessionEvidence(task.sessionUuid, await watcher.findByUuid(task.sessionUuid), candidates, deps),
+        };
+        const decision = assetOf ? await decideAssetAccess({ ...accessArgs, owner: assetOf, memoKey: task.taskId }) : await decideSessionFileAccess(accessArgs);
+        if (!decision.ok) {
+            return c.json({ error: decision.error, ...(decision.detail ? { detail: decision.detail } : {}) }, decision.status);
+        }
+        const ext = extname(decision.absolute).toLowerCase().slice(1);
+        const mime = assetOf ? ASSET_MIME_BY_EXTENSION[ext] : MIME_BY_EXTENSION[ext];
+        if (!mime) {
+            return c.json({ error: "binary_not_previewable", mime: "application/octet-stream", extension: ext || null }, 415);
+        }
+        const read = await readRegularFileCapped(decision.absolute, FILE_MAX_BYTES);
+        if (read.kind === "not_found")
+            return c.json({ error: "not_found" }, 404);
+        if (read.kind === "not_a_file")
+            return c.json({ error: "not_a_file" }, 400);
+        if (read.kind === "too_large")
+            return c.json({ error: "file_too_large", maxBytes: FILE_MAX_BYTES, size: read.size }, 413);
+        if (read.kind === "error")
+            return c.json({ error: "file_read_failed", detail: read.detail }, 500);
+        if (mime.startsWith("text/") && hasNul(read.bytes)) {
+            return c.json({ error: "binary_not_previewable", mime: "application/octet-stream", extension: ext || null }, 415);
+        }
+        c.header("Content-Type", mime);
+        c.header("X-Content-Type-Options", "nosniff");
+        c.header("ETag", `"${fileFingerprint(read.bytes)}"`);
+        c.header("Content-Disposition", `inline; filename="${sanitizeContentDispositionFilename(basename(decision.absolute))}"`);
+        c.header("Content-Length", String(read.bytes.length));
+        c.header("Cache-Control", "private, max-age=0, must-revalidate");
+        c.header("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox");
+        c.header("X-Session-File-Scope", decision.scope);
+        return c.body(new Uint8Array(read.bytes));
+    });
+    registerProbeRoute(app, deps);
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/session-file/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/session-file/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAqB,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAI7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAC;AAQ7H,KAAK,UAAU,WAAW,CAAC,CAA4B;IACrD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAEvE,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE3D,gGAAgG;QAChG,2FAA2F;QAC3F,iEAAiE;QACjE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAClF,MAAM,KAAK,GAAa,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvD,2GAA2G;QAC3G,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG;YACjB,KAAK;YACL,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YACpC,YAAY,EAAE,KAAK,EAAE,UAAoB,EAAE,EAAE,CAC3C,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;SACtG,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;QACxJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrH,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1H,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACpH,CAAC;QAED,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,kCAAkC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC;QACzH,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC,CAAC;QAC9F,CAAC,CAAC,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/session-file/session-file.fixture.d.ts

@@ -0,0 +1,45 @@
+import { type Layout } from "../../core/session-info/test-fixtures.js";
+export declare const BS = "\\";
+/** Per-test fixture dirs, reassigned by installFixtures()'s hooks. */
+export declare const fx: {
+    l: Layout;
+    proj: string;
+    out: string;
+};
+export declare function installFixtures(): void;
+export declare const user: (n: number, content: unknown) => {
+    type: string;
+    timestamp: string;
+    message: {
+        role: string;
+        content: unknown;
+    };
+};
+export declare const say: (n: number, text: string) => {
+    type: string;
+    isSidechain: boolean;
+    timestamp: string;
+    cwd: string;
+    message: {
+        role: string;
+        model: string;
+        usage: {
+            input_tokens: number;
+            cache_read_input_tokens: number;
+            cache_creation_input_tokens: number;
+            output_tokens: number;
+        } | undefined;
+        content: unknown[];
+    };
+};
+export declare const session: (...recs: unknown[]) => void;
+export declare function app(withTask?: boolean, task?: {
+    projectId: string;
+    cwd: string;
+}): import("hono").Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export declare const get: (p: string, a?: import("hono").Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">) => Response | Promise<Response>;
+export declare const j: (r: Response) => Promise<{
+    error?: string;
+    detail?: string;
+}>;
+//# sourceMappingURL=session-file.fixture.d.ts.map

package/server/dist/external/session-file/session-file.fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-file.fixture.d.ts","sourceRoot":"","sources":["../../../src/external/session-file/session-file.fixture.ts"],"names":[],"mappings":"AAOA,OAAO,EAA0C,KAAK,MAAM,EAAE,MAAM,0CAA0C,CAAC;AAE/G,eAAO,MAAM,EAAE,OAAS,CAAC;AACzB,sEAAsE;AACtE,eAAO,MAAM,EAAE;OAAgC,MAAM;;;CAAqB,CAAC;AAE3E,wBAAgB,eAAe,IAAI,IAAI,CAYtC;AAED,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,EAAE,SAAS,OAAO;;;;;;;CAA6E,CAAC;AAC9H,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,EAAE,MAAM,MAAM;;;;;;;;;;;;;;;;CAAuD,CAAC;AACnG,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,OAAO,EAAE,SAAiD,CAAC;AAE5F,wBAAgB,GAAG,CAAC,QAAQ,UAAO,EAAE,IAAI,GAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAqC,6FAU/G;AACD,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,EAAE,6FAAS,iCAAmF,CAAC;AAC5H,eAAO,MAAM,CAAC,GAAU,GAAG,QAAQ;YAAmC,MAAM;aAAW,MAAM;EAAE,CAAC"}

package/server/dist/external/session-file/session-file.fixture.js

@@ -0,0 +1,41 @@
+import { afterEach, beforeEach } from "vitest";
+import { mkdtempSync, realpathSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { createSessionFileRouter } from "./routes.js";
+import { SessionWatcher } from "../../core/session-watcher.js";
+import { SESSION, assistant, jl, makeLayout, ts } from "../../core/session-info/test-fixtures.js";
+export const BS = "\x5c";
+/** Per-test fixture dirs, reassigned by installFixtures()'s hooks. */
+export const fx = { l: undefined, proj: "", out: "" };
+export function installFixtures() {
+    beforeEach(() => {
+        fx.l = makeLayout();
+        fx.proj = realpathSync(mkdtempSync(path.join(tmpdir(), "sf-proj-")));
+        fx.out = realpathSync(mkdtempSync(path.join(tmpdir(), "sf-out-")));
+        writeFileSync(path.join(fx.proj, "in.md"), "# inside");
+        writeFileSync(path.join(fx.out, "a.txt"), "outside a");
+        writeFileSync(path.join(fx.out, "a.txt.bak"), "outside bak");
+    });
+    afterEach(() => {
+        for (const d of [fx.l.projectsDir, fx.proj, fx.out])
+            rmSync(d, { recursive: true, force: true });
+    });
+}
+export const user = (n, content) => ({ type: "user", timestamp: ts(n), message: { role: "user", content } });
+export const say = (n, text) => assistant(n, { blocks: [{ type: "text", text }] });
+export const session = (...recs) => writeFileSync(fx.l.sessionPath, jl(...recs));
+export function app(withTask = true, task = { projectId: "p", cwd: fx.proj }) {
+    const store = {
+        get: (id) => (withTask && id === "t1" ? { taskId: "t1", sessionUuid: SESSION, ...task } : undefined),
+    };
+    return createSessionFileRouter({
+        store,
+        watcher: new SessionWatcher({ projectsDir: fx.l.projectsDir }),
+        getProjectById: (id) => (id === "p" ? { id: "p", name: "p", path: fx.proj } : undefined),
+        infoDeps: { sessionsDir: "Z:" + BS + "none", noMemo: true },
+    });
+}
+export const get = (p, a = app()) => a.request(`/api/external/tasks/t1/session-file?path=${encodeURIComponent(p)}`);
+export const j = async (r) => (await r.json());
+//# sourceMappingURL=session-file.fixture.js.map

package/server/dist/external/session-file/session-file.fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-file.fixture.js","sourceRoot":"","sources":["../../../src/external/session-file/session-file.fixture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAe,MAAM,0CAA0C,CAAC;AAE/G,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC;AACzB,sEAAsE;AACtE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,SAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AAE3E,MAAM,UAAU,eAAe;IAC7B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;QACpB,EAAE,CAAC,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,EAAE,CAAC,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACnE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,OAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9H,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE5F,MAAM,UAAU,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,OAA2C,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE;IAC9G,MAAM,KAAK,GAAG;QACZ,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;KACpG,CAAC;IACX,OAAO,uBAAuB,CAAC;QAC7B,KAAK;QACL,OAAO,EAAE,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAC,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,4CAA4C,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5H,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAW,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAwC,CAAC"}

package/server/dist/external/session-info/routes.d.ts

@@ -0,0 +1,15 @@
+import { Hono } from "hono";
+import type { SdkSessionsStore } from "../../core/sdk-sessions-store.js";
+import type { SessionWatcher } from "../../core/session-watcher.js";
+import { type SessionInfoDeps } from "../../core/session-info/session-info.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface SessionInfoRouterDeps {
+    store: SdkSessionsStore;
+    watcher: SessionWatcher;
+    /** Project lookup for the mounted session-file route (V4); absent = no trusted root: only session-evidenced absolute paths are served (the task cwd is never a root). */
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    /** Test seam (sessions dir, pid probe, clock). */
+    infoDeps?: SessionInfoDeps;
+}
+export declare function createSessionInfoRouter(deps: SessionInfoRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/session-info/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/session-info/routes.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAItE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,yKAAyK;IACzK,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,kDAAkD;IAClD,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CA+BzE"}

package/server/dist/external/session-info/routes.js

@@ -0,0 +1,57 @@
+/*
+ * external/session-info/routes.ts — GET /api/external/tasks/:id/session-info.
+ *
+ * READ-ONLY derived view (context tokens, outputs, Remote Control, subagents)
+ * of the task's Claude JSONL + its subagents/ siblings. Never mutates task state
+ * or any Claude file (CLAUDE.md DO-NOT #1); statelessness per rule 4 — see the
+ * memo note in core/session-info/session-info.ts.
+ *
+ *   200 { status: "ok", info }       200 { status: "missing" } (no JSONL yet)
+ *   404 task unknown
+ *
+ * GET /api/external/tasks/:id/session-file?path= - see ../session-file/routes.ts.
+ *
+ * GET /api/external/tasks/:id/subagents/:agentId/transcript — the agent's own
+ * JSONL tail (M4 Agents window): 200 { status: "ok", content, truncated,
+ * sizeBytes } | { status: "missing" }; 400 malformed agentId; 404 task unknown.
+ */
+import { Hono } from "hono";
+import { readSessionInfo } from "../../core/session-info/session-info.js";
+import { createSessionFileRouter } from "../session-file/routes.js";
+import { AGENT_ID_RE, readSubagentTranscript } from "../../core/session-info/subagent-transcript.js";
+export function createSessionInfoRouter(deps) {
+    const app = new Hono();
+    const { store, watcher } = deps;
+    app.get("/api/external/tasks/:id/session-info", async (c) => {
+        const task = store.get(c.req.param("id"));
+        if (!task)
+            return c.json({ error: "Task not found" }, 404);
+        const loc = await watcher.findByUuid(task.sessionUuid);
+        if (!loc)
+            return c.json({ status: "missing" });
+        try {
+            return c.json({ status: "ok", info: await readSessionInfo(task.sessionUuid, loc, deps.infoDeps) });
+        }
+        catch (err) {
+            if (err?.code === "ENOENT")
+                return c.json({ status: "missing" });
+            throw err;
+        }
+    });
+    app.get("/api/external/tasks/:id/subagents/:agentId/transcript", async (c) => {
+        const task = store.get(c.req.param("id"));
+        if (!task)
+            return c.json({ error: "Task not found" }, 404);
+        const agentId = c.req.param("agentId");
+        if (!AGENT_ID_RE.test(agentId))
+            return c.json({ error: "Invalid agent id" }, 400);
+        const loc = await watcher.findByUuid(task.sessionUuid);
+        if (!loc)
+            return c.json({ status: "missing" });
+        return c.json(await readSubagentTranscript(loc.path, agentId));
+    });
+    // V4 - GET /tasks/:id/session-file: project file OR a file this session evidences (core/session-file/).
+    app.route("/", createSessionFileRouter({ store, watcher, getProjectById: deps.getProjectById, infoDeps: deps.infoDeps }));
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/session-info/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/session-info/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,eAAe,EAAwB,MAAM,yCAAyC,CAAC;AAEhG,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAWrG,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5F,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uDAAuD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,wGAAwG;IACxG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAE1H,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/tasks/_phase-helpers.js

@@ -2,7 +2,7 @@
  * external/tasks/_phase-helpers.ts — phase-task shape validation +
  * project-bound phase resolution. Extracted from routes.ts during C2.
  */
-import { loadActionsForProject } from "../../core/project-actions-loader.js";
+import { loadActionsForProjectRecord } from "../../core/project-actions-loader.js";
 import { PHASE_TASK_ID_PATTERN, RUN_ID_PATTERN, SESSION_UUID_PATTERN, } from "../../types/run-config-v2.js";
 /**
  * iterate-2026-05-18-edit-task-dialog — validate a phase id against a
@@ -22,7 +22,7 @@ export function validatePhaseForProject(rawPhase, projectId, getProjectById) {
             },
         };
     }
-    const loaded = loadActionsForProject(project.path || "");
+    const loaded = loadActionsForProjectRecord(project);
     const match = loaded.actions.phases.find((p) => p.id === rawPhase);
     if (!match) {
         return {

package/server/dist/external/tasks/_phase-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"_phase-helpers.js","sourceRoot":"","sources":["../../../src/external/tasks/_phase-helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAGtC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,SAAiB,EACjB,cAAkF;IAIlF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,wBAAwB;gBAC/B,MAAM,EACJ,qDAAqD;oBACrD,2CAA2C;aAC9C;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,UAAU,QAAQ,6CAA6C;gBACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC;AAkBD,MAAM,UAAU,4BAA4B,CAC1C,IAA6B;IAI7B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAE7C,IACE,WAAW,KAAK,SAAS;QACzB,KAAK,KAAK,SAAS;QACnB,WAAW,KAAK,SAAS;QACzB,eAAe,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,uBAAuB;oBAC9B,MAAM,EAAE,6CAA6C;iBACtD;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,gBAAgB;oBACvB,MAAM,EAAE,sCAAsC;iBAC/C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACvC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,sBAAsB;oBAC7B,MAAM,EAAE,kCAAkC;iBAC3C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,2BAA2B;oBAClC,MAAM,EAAE,iCAAiC;iBAC1C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"_phase-helpers.js","sourceRoot":"","sources":["../../../src/external/tasks/_phase-helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAGtC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,SAAiB,EACjB,cAAkF;IAIlF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,wBAAwB;gBAC/B,MAAM,EACJ,qDAAqD;oBACrD,2CAA2C;aAC9C;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,UAAU,QAAQ,6CAA6C;gBACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC;AAkBD,MAAM,UAAU,4BAA4B,CAC1C,IAA6B;IAI7B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAE7C,IACE,WAAW,KAAK,SAAS;QACzB,KAAK,KAAK,SAAS;QACnB,WAAW,KAAK,SAAS;QACzB,eAAe,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,uBAAuB;oBAC9B,MAAM,EAAE,6CAA6C;iBACtD;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,gBAAgB;oBACvB,MAAM,EAAE,sCAAsC;iBAC/C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACvC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,sBAAsB;oBAC7B,MAAM,EAAE,kCAAkC;iBAC3C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,2BAA2B;oBAClC,MAAM,EAAE,iCAAiC;iBAC1C;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,eAAe,GAAG,eAAe,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/tasks/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/external/tasks/create.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAUtE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE;IACJ,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;CACvE,GACA,IAAI,CAmJN"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/external/tasks/create.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAUtE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE;IACJ,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7C,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;CACvE,GACA,IAAI,CA4JN"}

package/server/dist/external/tasks/create.js

@@ -5,7 +5,7 @@
  * + iterate-2026-05-18-edit-task-dialog + multi-session-run-orchestrator-v2
  * — see inline comments for the contract for each optional field.
  */
-import { loadActionsForProject } from "../../core/project-actions-loader.js";
+import { loadActionsForProjectRecord } from "../../core/project-actions-loader.js";
 import { normalizeFsPath } from "../../core/normalize-fs-path.js";
 import { normalizeDescription, normalizeTitle, readLeadCreateFields, validateProjectIdOrError, withLiveSession, } from "../_shared/helpers.js";
 import { resolvePhaseTaskCreateFields } from "./_phase-helpers.js";
@@ -74,7 +74,7 @@ export function registerTasksCreate(app, deps) {
                     detail: `Phase cannot be validated — project '${projectId}' has no resolvable catalog.`,
                 }, 400);
             }
-            const loaded = loadActionsForProject(project.path || "");
+            const loaded = loadActionsForProjectRecord(project);
             const match = loaded.actions.phases.find((p) => p.id === rawPhase);
             if (!match) {
                 return c.json({
@@ -117,6 +117,13 @@ export function registerTasksCreate(app, deps) {
         if (!descResult.ok) {
             return c.json({ error: "invalid_description", detail: descResult.error }, 400);
         }
+        // Codex Light §3.5/AC1 — the per-task RuntimeToggle's value, sent by
+        // NewTaskModal/NewIterateModal/NewPipelineModal. Narrowed the same way
+        // sdk-sessions-store.ts's own default narrows it (spec-reviewer
+        // finding: this field was previously dropped on the floor here, so
+        // every task created through the normal UI silently landed on
+        // runtime="claude" regardless of what the operator picked).
+        const runtime = body.runtime === "codex" ? "codex" : undefined;
         const task = store.create({
             title,
             cwd,
@@ -130,6 +137,7 @@ export function registerTasksCreate(app, deps) {
             phaseTaskId: phaseTaskRefs.phaseTaskId,
             runId: phaseTaskRefs.runId,
             parentRunMaster: phaseTaskRefs.parentRunMaster,
+            runtime,
             ...leadFields,
         });
         await store.persist();

package/server/dist/external/tasks/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/external/tasks/create.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,UAAU,mBAAmB,CACjC,GAAS,EACT,IAKC;IAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEvE,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,KAAK,GAAG,eAAe,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YAClD,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,8EAA8E;QAC9E,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC5E,CAAC,CAAC,EAAE,CAAC;QACP,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC/C,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,qDAAqD;QACrD,EAAE;QACF,8DAA8D;QAC9D,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,KAAyB,CAAC;QAC9B,IAAI,UAA8B,CAAC;QACnC,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACnB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,wBAAwB;oBAC/B,MAAM,EACJ,kDAAkD;wBAClD,2CAA2C;iBAC9C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,wBAAwB;oBAC/B,MAAM,EAAE,wCAAwC,SAAS,8BAA8B;iBACxF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE,UAAU,QAAQ,6CAA6C;oBACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC;YACjB,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,iEAAiE;QACjE,oEAAoE;QACpE,2DAA2D;QAC3D,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YACtB,CAAC,CAAC,SAAS,CAAC;QAEhB,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAE9C,mEAAmE;QACnE,kDAAkD;QAClD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;YACxB,KAAK;YACL,GAAG;YACH,UAAU;YACV,SAAS;YACT,KAAK;YACL,UAAU;YACV,QAAQ,EAAE,cAAc;YACxB,WAAW,EAAE,UAAU,CAAC,KAAK;YAC7B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,GAAG,UAAU;SACd,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/external/tasks/create.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,UAAU,mBAAmB,CACjC,GAAS,EACT,IAKC;IAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEvE,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,yEAAyE;QACzE,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,KAAK,GAAG,eAAe,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;YAClD,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,uEAAuE;QACvE,0EAA0E;QAC1E,8EAA8E;QAC9E,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC5E,CAAC,CAAC,EAAE,CAAC;QACP,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YAC3E,IAAI,UAAU;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC/C,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,qDAAqD;QACrD,EAAE;QACF,8DAA8D;QAC9D,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,KAAyB,CAAC;QAC9B,IAAI,UAA8B,CAAC;QACnC,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACnB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,wBAAwB;oBAC/B,MAAM,EACJ,kDAAkD;wBAClD,2CAA2C;iBAC9C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,wBAAwB;oBAC/B,MAAM,EAAE,wCAAwC,SAAS,8BAA8B;iBACxF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE,UAAU,QAAQ,6CAA6C;oBACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC;YACjB,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,iEAAiE;QACjE,oEAAoE;QACpE,2DAA2D;QAC3D,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;YACtB,CAAC,CAAC,SAAS,CAAC;QAEhB,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAE9C,mEAAmE;QACnE,kDAAkD;QAClD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,mEAAmE;QACnE,8DAA8D;QAC9D,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;YACxB,KAAK;YACL,GAAG;YACH,UAAU;YACV,SAAS;YACT,KAAK;YACL,UAAU;YACV,QAAQ,EAAE,cAAc;YACxB,WAAW,EAAE,UAAU,CAAC,KAAK;YAC7B,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,eAAe,EAAE,aAAa,CAAC,eAAe;YAC9C,OAAO;YACP,GAAG,UAAU;SACd,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/external/tasks/fork.d.ts

@@ -0,0 +1,29 @@
+import type { Hono } from "hono";
+import { SdkSessionsStore } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export declare function registerTasksFork(app: Hono, deps: {
+    store: SdkSessionsStore;
+    ptyManager: {
+        get(taskId: string): unknown;
+    };
+    /** Codex Light §2.1 — resolves the parent's project for the fork's AGENTS.md check. */
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    /** Test seam — defaults to a real `codex --version` probe. */
+    checkCodexCliAvailable?: () => Promise<boolean>;
+    /** Codextender integration Part B.6 — test seam for the fork route's
+     *  own AC8-equivalent preflight when the parent is a Codextender task.
+     *  Defaults to a real `GET /health/liveliness` probe of the proxy
+     *  (no auth required). */
+    checkCodextenderProxyAvailable?: () => Promise<boolean>;
+    /** The `codextenderPort` global setting; defaults to 4000. */
+    getCodextenderPort?: () => Promise<number | undefined>;
+    /** Test seam — defaults to `resolveCodextenderAuthToken()` (reads
+     *  `process.env.CODEXTENDER_AUTH_TOKEN`, no built-in fallback). */
+    getCodextenderAuthToken?: () => string | undefined;
+    /** Test seam — defaults to a real probe of the proxy's `/v1/models` for
+     *  the default alias's `max_input_tokens` (operator finding,
+     *  2026-09-26) — a fork never has a per-launch model override to pass,
+     *  same as `buildCodextenderCommands`'s own default resolution. */
+    getCodextenderMaxContextTokens?: (port: number) => Promise<number | undefined>;
+}): void;
+//# sourceMappingURL=fork.d.ts.map

package/server/dist/external/tasks/fork.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fork.d.ts","sourceRoot":"","sources":["../../../src/external/tasks/fork.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAejC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAQpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,EACT,IAAI,EAAE;IACJ,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7C,uFAAuF;IACvF,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,8DAA8D;IAC9D,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;;;8BAG0B;IAC1B,8BAA8B,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;uEACmE;IACnE,uBAAuB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACnD;;;uEAGmE;IACnE,8BAA8B,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChF,GACA,IAAI,CA0JN"}