wicked-crew 0.7.6 → 0.7.8

package/dist/api/multiscope.js

@@ -0,0 +1,106 @@
+/**
+ * Multi-codebase scope resolution — the PINNED multiscope wire shared by the testing launch
+ * surfaces (`POST /testing/recon`, `POST /campaigns`).
+ *
+ * Both launch bodies accept two OPTIONAL camelCase fields:
+ *
+ *  - `repoRefs?: string[]` — explicit codebase attachments. Each ref must resolve in the repo
+ *    registry (by id, or by unique name — resolved TO the id) or the whole request fails with a
+ *    400 that NAMES the bad ref. Deduped, first occurrence wins.
+ *  - `projectId?: string` — crew resolves the project's `crew.repo` members server-side.
+ *    Unknown project ⇒ 404; a project with zero repo members (and no explicit `repoRefs` to
+ *    fall back on) ⇒ 400 naming the fix.
+ *
+ * BOTH given ⇒ the union (explicit `repoRefs` order first, then project members not already
+ * named). NEITHER ⇒ `repos: []` and the launch behaves exactly as it did before this wire
+ * existed — backward compatible by construction.
+ *
+ * Fail-closed by doctrine (FINDING-031 posture): a ref that would not launch is refused HERE,
+ * before anything is persisted, with the offending token named — never a silently narrowed
+ * scope or a mid-run "no such repo" a worker discovers for the operator.
+ */
+/**
+ * Resolve the launch scope. Throws only what the adapter throws (notably
+ * `ProjectsUnsupportedError` on a pre-projects addon — the caller maps it to 501, the same
+ * "upgrade the engine" posture every project route holds).
+ */
+export async function resolveScopeRepos(adapter, fields) {
+    const { projectId, repoRefs } = fields;
+    if (projectId === undefined && repoRefs === undefined) {
+        return { ok: true, repos: [] };
+    }
+    const registry = await adapter.listRepos();
+    const byId = new Map(registry.map((r) => [r.id, r]));
+    const byName = new Map(registry.map((r) => [r.name, r]));
+    const repos = [];
+    const seen = new Set();
+    const admit = (id, name) => {
+        if (!seen.has(id)) {
+            seen.add(id);
+            repos.push({ id, name });
+        }
+    };
+    for (const ref of repoRefs ?? []) {
+        const hit = byId.get(ref) ?? byName.get(ref);
+        if (hit === undefined) {
+            return {
+                ok: false,
+                status: 400,
+                error: `repoRefs: '${ref}' does not name a registered repo — register it first ` +
+                    `(POST /api/v1/repos) or pick a ref from GET /api/v1/repos`,
+            };
+        }
+        admit(hit.id, hit.name);
+    }
+    if (projectId !== undefined) {
+        if (projectId === 'default') {
+            // The synthesized "Unfiled" container (ADR §7) is computed, never stored — it has no
+            // membership rows to resolve, and `projectGet` answering null would mislabel it unknown.
+            return {
+                ok: false,
+                status: 400,
+                error: `projectId: 'default' is the synthesized unfiled container and has no repo members ` +
+                    `to resolve — name a real project or pass repoRefs explicitly`,
+            };
+        }
+        const project = await adapter.projectGet(projectId);
+        if (project === null) {
+            return { ok: false, status: 404, error: `unknown project: ${projectId}` };
+        }
+        if (project.status === 'archived') {
+            return {
+                ok: false,
+                status: 409,
+                error: `project '${projectId}' is archived — restore it (PATCH /api/v1/projects/` +
+                    `${projectId} with status "active") or pass repoRefs explicitly`,
+            };
+        }
+        const members = (await adapter.projectMembers(projectId)).filter((m) => m.member_kind === 'crew.repo');
+        if (members.length === 0 && (repoRefs === undefined || repoRefs.length === 0)) {
+            return {
+                ok: false,
+                status: 400,
+                error: `project '${projectId}' has no repo members — attach one ` +
+                    `(POST /api/v1/projects/${projectId}/members with kind "crew.repo") ` +
+                    `or pass repoRefs explicitly`,
+            };
+        }
+        for (const m of members) {
+            const hit = byId.get(m.member_ref);
+            if (hit === undefined) {
+                // A member ref pointing at nothing in the registry would launch a run that fails on a
+                // repo the CALLER never named — refuse loudly, with the dangling ref and the fix named.
+                return {
+                    ok: false,
+                    status: 400,
+                    error: `project '${projectId}' has a repo member '${m.member_ref}' that is not in the ` +
+                        `repo registry — detach the stale member (DELETE /api/v1/projects/${projectId}` +
+                        `/members/${m.id}) or re-register the repo, then retry`,
+                };
+            }
+            admit(hit.id, hit.name);
+        }
+    }
+    return { ok: true, repos };
+}
+//# sourceMappingURL=multiscope.js.map

package/dist/api/multiscope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiscope.js","sourceRoot":"","sources":["../../src/api/multiscope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAoBH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAoB,EACpB,MAAwB;IAExB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACvC,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,IAAY,EAAQ,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EACH,cAAc,GAAG,wDAAwD;oBACzE,2DAA2D;aAC9D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,qFAAqF;YACrF,yFAAyF;YACzF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EACH,oFAAoF;oBACpF,8DAA8D;aACjE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,SAAS,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EACH,YAAY,SAAS,qDAAqD;oBAC1E,GAAG,SAAS,oDAAoD;aACnE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CACrC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EACH,YAAY,SAAS,qCAAqC;oBAC1D,0BAA0B,SAAS,kCAAkC;oBACrE,6BAA6B;aAChC,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,sFAAsF;gBACtF,wFAAwF;gBACxF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EACH,YAAY,SAAS,wBAAwB,CAAC,CAAC,UAAU,uBAAuB;wBAChF,oEAAoE,SAAS,EAAE;wBAC/E,YAAY,CAAC,CAAC,EAAE,uCAAuC;iBAC1D,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/api/routes.d.ts

@@ -8,6 +8,7 @@ import { SeatHealthTracker } from './seat-health.js';
 import { type ProjectRoutesDeps } from '../projects/routes.js';
 import { InteractiveBridgePool } from '../interactive/bridge-pool.js';
 import { AuditLog } from './audit.js';
+import { type ErrorRing } from './diagnostics.js';
 import { RetryIndex } from './retry-index.js';
 import { GuidanceIndex } from './guidance-index.js';
 import { DeliveryIndex } from './delivery-index.js';
@@ -170,6 +171,12 @@ export interface RuntimeDeps {
      *  slice 1). Injectable so the integration suite proxies to a FAKE bridge instead of
      *  spawning a real `npx wicked-interactive serve`. */
     interactiveBridges?: InteractiveBridgePool;
+    /** The daemon's in-process error-level log ring (diagnostics) — `createServer` tees the pino
+     *  stream into one; a directly-driven route set (tests) gets an honestly-empty tail. */
+    errorRing?: ErrorRing;
+    /** The studio asset root `createServer` resolved (bundled or overridden) — diagnostics reads
+     *  the bundle's shipped version manifest from it. Absent = headless = `studioBundle: null`. */
+    studioRoot?: string;
 }
 /**
  * The daemon REST surface. Every endpoint is a thin wrapper over one adapter /

package/dist/api/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAwB,WAAW,EAA4E,MAAM,oBAAoB,CAAC;AAEjJ,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAWrD,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAWtF,OAAO,EAAe,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAInF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAgG7C;;;;;;;;;;;;GAYG;AAIH,eAAO,MAAM,YAAY;;;;;;;;IAQvB;+FAC2F;;IAE3F;;wFAEoF;;IAEpF;;0FAEsF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtF,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;EAGZ,CAAC;AAEZ;;yEAEyE;AACzE,eAAO,MAAM,cAAc;;;;;;EAEhB,CAAC;AAUZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAQpB,CAAC;AAOZ,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;EAGhB,CAAC;AAwBZ,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;oGACgG;IAChG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;uGACmG;IACnG,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;qBAEiB;IACjB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;2FACuF;IACvF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAC1E;;0DAEsD;IACtD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAIlC,YAAY,GAAE,WAA+B,EAG7C,QAAQ,GAAE,iBAAqF,EAK/F,QAAQ,GAAE,YAA0D,EAGpE,OAAO,GAAE,WAAgB,GACxB,IAAI,CAk+DN"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAwB,WAAW,EAA4E,MAAM,oBAAoB,CAAC;AAEjJ,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAWrD,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAWtF,OAAO,EAAe,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAInF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAgG7C;;;;;;;;;;;;GAYG;AAIH,eAAO,MAAM,YAAY;;;;;;;;IAQvB;+FAC2F;;IAE3F;;wFAEoF;;IAEpF;;0FAEsF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtF,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;EAGZ,CAAC;AAEZ;;yEAEyE;AACzE,eAAO,MAAM,cAAc;;;;;;EAEhB,CAAC;AAUZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAQpB,CAAC;AAOZ,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;EAGhB,CAAC;AAwBZ,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;oGACgG;IAChG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;uGACmG;IACnG,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;qBAEiB;IACjB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;2FACuF;IACvF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAC1E;;0DAEsD;IACtD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAC3C;4FACwF;IACxF,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;mGAC+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAIlC,YAAY,GAAE,WAA+B,EAG7C,QAAQ,GAAE,iBAAqF,EAK/F,QAAQ,GAAE,YAA0D,EAGpE,OAAO,GAAE,WAAgB,GACxB,IAAI,CAkhEN"}

package/dist/api/routes.js

@@ -28,6 +28,7 @@ import { registerInteractiveProxy } from '../interactive/proxy-routes.js';
 import { MembershipIndex } from '../projects/membership-index.js';
 import { MEMBERSHIP_ATTACHED, membershipAttachedKey } from '../projects/events.js';
 import { AuditLog } from './audit.js';
+import { AcpFoldCache, EngineVersionCache, eventsDirOf, installedPackageVersion, listStoreFiles, readStudioBundleVersion, } from './diagnostics.js';
 import { RetryIndex } from './retry-index.js';
 import { GuidanceIndex } from './guidance-index.js';
 import { DeliveryIndex } from './delivery-index.js';
@@ -267,6 +268,41 @@ runtime = {}) {
         const ping = await adapter.ping();
         return { status: 'ok', version: PKG_VERSION, ping };
     });
+    // The daemon's self-knowledge surface (diagnostics): what is deployed, what it stores, what
+    // has gone wrong recently, and whether ACP is really working across the CLIs — the answer
+    // that previously lived only in raw NDJSON under the state home. READ-ONLY throughout, and
+    // honest throughout: a field the daemon cannot answer is null/empty, never fabricated.
+    // The ACP fold and the binary probes are cached (briefly / per-process) so a polling skin
+    // can never turn this GET into an event-log re-reader or a `--version` spawner per request.
+    const acpFoldCache = new AcpFoldCache();
+    const engineVersionCache = new EngineVersionCache();
+    app.get(`${V}/diagnostics`, { config: { manifest: { responseType: 'DiagnosticsResponse', statusCodes: [200] } } }, async () => {
+        // `dbPath` is a readonly field of the real adapter; a stub-driven route set may lack it,
+        // and diagnostics over an unknown store honestly reports no stores and no ACP record.
+        const dbPath = typeof adapter.dbPath === 'string' && adapter.dbPath !== '' ? adapter.dbPath : null;
+        const [stores, byCli, engineBinaries] = await Promise.all([
+            dbPath !== null ? listStoreFiles(dbPath) : Promise.resolve([]),
+            dbPath !== null
+                ? acpFoldCache.get(eventsDirOf(dbPath))
+                : Promise.resolve({}),
+            engineVersionCache.get(),
+        ]);
+        const uptimeMs = Math.round(process.uptime() * 1000);
+        const addr = app.server.address();
+        const port = typeof addr === 'object' && addr !== null ? addr.port : 7701;
+        return {
+            components: {
+                crew: PKG_VERSION,
+                studioBundle: runtime.studioRoot !== undefined ? readStudioBundleVersion(runtime.studioRoot) : null,
+                coreTs: installedPackageVersion('wicked-core-ts'),
+                engineBinaries,
+            },
+            daemon: { uptimeMs, startedAt: Date.now() - uptimeMs, port },
+            stores,
+            recentErrors: runtime.errorRing?.list() ?? [],
+            acp: { byCli },
+        };
+    });
     // Who am I talking to the daemon as? (task #88). In local mode this is
     // always the implicit full-trust local actor; in required mode it names the
     // token's actor — the cheap probe a skin uses to decide what to render.
@@ -2103,10 +2139,17 @@ runtime = {}) {
         actorOf,
         roster: () => CoreAdapter.roster(),
     });
-    // ── Testing (crew-testing) — governance evals + eval corpora ────────────────
+    // ── Testing (crew-testing) — governance evals + eval corpora + the recon trigger ────────────
     // Run the evals (does the steering corpus catch what it claims to?) and import a named eval
-    // corpus. Both presence-gated on the engine's evals bindings (501 on wicked-core-ts < 0.7.5).
-    registerTestingRoutes(app, adapter, { audit, actorOf });
+    // corpus — both presence-gated on the engine's evals bindings (501 on wicked-core-ts < 0.7.5).
+    // POST /testing/recon launches governed recon runs (the multiscope fan-out), so it gets the
+    // roster and the SAME membership plumbing POST /runs files projectId launches through.
+    registerTestingRoutes(app, adapter, {
+        audit,
+        actorOf,
+        roster: () => CoreAdapter.roster(),
+        projects: { bus: projects.bus, index: projects.index },
+    });
     // ── The wicked-interactive bridge, reverse-proxied (DES-MERGE-001 §5.3/§7.2) ──
     // Mounted BESIDE the routes above and under the same `${V}` prefix, so it inherits one
     // origin, one auth hook, and one CORS posture — the whole point of slice 1.