@basou/core 0.42.2 → 0.44.0

package/dist/index.d.ts

@@ -5803,8 +5803,20 @@ declare const SchemaVersionSchema: z.ZodString;
 /**
  * ISO 8601 timestamp with explicit timezone offset (e.g. `+09:00`).
  *
- * The spec samples include offsets, so the default zod `.datetime()` (which
- * rejects offsets) is insufficient; `{ offset: true }` is required.
+ * The gate is `.regex`, not a `.refine`: zod emits a regex check as the
+ * artifact's `pattern`, so there is one expression rather than a runtime check
+ * and a `.meta` restating it. A `.refine` is opaque to JSON Schema generation
+ * and would need the pattern written a second time, which is a second place to
+ * forget. {@link SchemaVersionSchema} takes the same form for the same reason.
+ *
+ * It deliberately does NOT declare `format: "date-time"`. That format names
+ * RFC 3339, and the two sets cross rather than nest: basou takes a timestamp
+ * without seconds, which RFC 3339 does not, and refuses the lowercase
+ * designators and the leap second that RFC 3339 allows. Declaring the format
+ * made one artifact answer two ways from the same bytes — a validator
+ * asserting it rejected `2026-09-16T01:23Z`, one treating it as an annotation
+ * (the JSON Schema 2020-12 default) accepted it. The `pattern` is the
+ * contract, and `description` says so, because no format name states this set.
  */
 declare const IsoTimestampSchema: z.ZodString;
 /** Workspace ID schema: validates `ws_<26-char ULID>`. */

package/dist/index.js

@@ -363,7 +363,11 @@ var SchemaVersionSchema = z.string().regex(/^0\.\d+\.\d+$/, {
   message: "unsupported .basou format version: this basou reads format major 0 (0.x.y). If this workspace was written by a newer basou, upgrade basou to open it."
 });
 var CacheVersionSchema = z.literal("0.1.0");
-var IsoTimestampSchema = z.string().datetime({ offset: true });
+var ISO_TIMESTAMP_PATTERN = "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$";
+var isoTimestampRegex = new RegExp(ISO_TIMESTAMP_PATTERN);
+var IsoTimestampSchema = z.string().regex(isoTimestampRegex, "Expected an ISO 8601 timestamp with a timezone offset").meta({
+  description: "Timestamp with an offset or Z. The pattern is normative under ECMA-262 semantics: RFC 3339 date-time with uppercase designators, no leap second, and optional seconds."
+});
 var createPrefixedIdSchema = (prefix) => {
   const refiner = (value) => isValidPrefixedId(value) && value.startsWith(`${prefix}_`);
   return z.string().refine(refiner, { message: `Expected ${prefix}_<ULID>` }).meta({
@@ -1886,6 +1890,11 @@ async function readAllEvents(sessionDir, options = {}) {
   return out;
 }
 
+// src/lib/one-line.ts
+function oneLine(text) {
+  return text.replace(/\s+/g, " ").trim();
+}
+
 // src/project/relative-path.ts
 function normalizeRelativePath(p) {
   const trimmed = p.trim();
@@ -3098,13 +3107,13 @@ async function formatDecisionsBody(args) {
   for (const d of args.decisions) {
     const trackMark = d.kind === "track" ? " [TRACK]" : "";
     if (d.voided !== void 0) {
-      lines.push(`## ~~${d.decisionId}: ${d.title}~~ [VOIDED]${trackMark}`);
+      lines.push(`## ~~${d.decisionId}: ${oneLine(d.title)}~~ [VOIDED]${trackMark}`);
       lines.push("");
       const supersededBy = d.voided.supersededBy !== void 0 ? `, superseded by ${d.voided.supersededBy}` : "";
       const reason = typeof d.voided.reason === "string" && d.voided.reason.length > 0 ? `: ${d.voided.reason}` : "";
       lines.push(`- \u26A0 VOIDED${reason}${supersededBy}`);
     } else {
-      lines.push(`## ${d.decisionId}: ${d.title}${trackMark}`);
+      lines.push(`## ${d.decisionId}: ${oneLine(d.title)}${trackMark}`);
       lines.push("");
     }
     const occurredDate = d.occurredAt.slice(0, 10);
@@ -3113,7 +3122,7 @@ async function formatDecisionsBody(args) {
       lines.push(t.decisions.trackKindLine);
     }
     lines.push(`- session: ${shortDecisionSessionId(d.sessionId)}`);
-    lines.push(`- ${t.decisions.decisionLabel}: ${d.title}`);
+    lines.push(`- ${t.decisions.decisionLabel}: ${oneLine(d.title)}`);
     if (typeof d.rationale === "string" && d.rationale.length > 0) {
       lines.push(`- rationale: ${d.rationale}`);
     }
@@ -3135,7 +3144,7 @@ async function formatDecisionsBody(args) {
           async (path2) => await args.fileExists(path2) ? path2 : `${path2} (missing)`
         )
       );
-      lines.push(`- linked_files: ${parts.join(", ")}`);
+      lines.push(`- linked_files: ${oneLine(parts.join(", "))}`);
     }
     lines.push("");
   }
@@ -5595,7 +5604,7 @@ function formatHandoffBody(args) {
     const label = args.latestSession.session.session.label;
     const shortId2 = shortIdWithPrefix(args.latestSession.sessionId);
     if (label !== void 0 && label !== "") {
-      lines.push(`- ${t.common.lastSessionLabel}: ${label} (${status}) [${shortId2}]`);
+      lines.push(`- ${t.common.lastSessionLabel}: ${oneLine(label)} (${status}) [${shortId2}]`);
     } else {
       lines.push(`- ${t.common.lastSessionLabel}: ${shortId2} (${status})`);
     }
@@ -5607,7 +5616,7 @@ function formatHandoffBody(args) {
     const linkedCount = args.latestTaskDoc?.task.task.linked_sessions?.length;
     const linkedSuffix = linkedCount !== void 0 && linkedCount > 1 ? `, linked_sessions: ${linkedCount}` : "";
     lines.push(
-      `- ${t.handoff.lastTaskLabel}: ${args.latestActivityRecord.title} (${statusLabel}${linkedSuffix}) [${shortIdWithPrefix(args.latestActivityRecord.taskId)}]`
+      `- ${t.handoff.lastTaskLabel}: ${oneLine(args.latestActivityRecord.title)} (${statusLabel}${linkedSuffix}) [${shortIdWithPrefix(args.latestActivityRecord.taskId)}]`
     );
   } else {
     lines.push(`- ${t.handoff.lastTaskLabel}: (no tasks recorded yet)`);
@@ -5628,7 +5637,7 @@ function formatHandoffBody(args) {
     lines.push("(no decisions recorded yet)");
   } else {
     const last = args.latestDecision;
-    lines.push(`- ${last.title} [${last.decisionId}]`);
+    lines.push(`- ${oneLine(last.title)} [${last.decisionId}]`);
     if (args.latestActivityAt !== null && isTrailingStale(args.latestActivityAt, last.occurredAt)) {
       lines.push(`  - ${t.handoff.decisionStaleNote}`);
     }
@@ -5646,7 +5655,7 @@ function formatHandoffBody(args) {
     lines.push(t.handoff.headingOpenTracks);
     lines.push("");
     for (const track of shown) {
-      lines.push(`- ${track.title} [${track.decisionId}]`);
+      lines.push(`- ${oneLine(track.title)} [${track.decisionId}]`);
       if (track.rationale !== null && track.rationale.trim() !== "") {
         lines.push(`  - ${t.common.trackWhyLabel}: ${handoffRationale(track.rationale)}`);
       }
@@ -5680,7 +5689,7 @@ function formatHandoffBody(args) {
   } else {
     for (const t2 of args.pendingTasks) {
       lines.push(
-        `- ${t2.task.task.title} (${t2.task.task.status}) [${shortIdWithPrefix(t2.task.task.id)}]`
+        `- ${oneLine(t2.task.task.title)} (${t2.task.task.status}) [${shortIdWithPrefix(t2.task.task.id)}]`
       );
     }
   }
@@ -5702,7 +5711,7 @@ function formatHandoffBody(args) {
       const sid = shortHandoffId(e.sessionId);
       const status = e.session.session.status + suspectLabel(e.suspectReason);
       const startedAt = e.session.session.started_at;
-      const label = e.session.session.label ?? "";
+      const label = tableCell(e.session.session.label ?? "");
       lines.push(`| ${sid} | ${status} | ${startedAt} | ${label} |`);
     }
   }
@@ -5716,7 +5725,7 @@ function formatHandoffBody(args) {
       const sid = shortHandoffId(e.sessionId);
       const status = e.session.session.status + suspectLabel(e.suspectReason);
       const startedAt = e.session.session.started_at;
-      const label = e.session.session.label ?? "";
+      const label = tableCell(e.session.session.label ?? "");
       lines.push(`| ${sid} | ${status} | ${startedAt} | ${label} |`);
     }
   }
@@ -5742,8 +5751,11 @@ function formatHandoffBody(args) {
 }
 var HANDOFF_TRACK_RATIONALE_MAX = 240;
 function handoffRationale(rationale) {
-  const oneLine = rationale.replace(/\s+/g, " ").trim();
-  return oneLine.length > HANDOFF_TRACK_RATIONALE_MAX ? `${oneLine.slice(0, HANDOFF_TRACK_RATIONALE_MAX - 1)}\u2026` : oneLine;
+  const collapsed = oneLine(rationale);
+  return collapsed.length > HANDOFF_TRACK_RATIONALE_MAX ? `${collapsed.slice(0, HANDOFF_TRACK_RATIONALE_MAX - 1)}\u2026` : collapsed;
+}
+function tableCell(text) {
+  return oneLine(text).replace(/([\\|])/g, "\\$1");
 }
 function suspectLabel(reason) {
   if (reason === "events_say_ended_but_yaml_running") return " \u26A0 ended (yaml stale)";
@@ -6234,7 +6246,7 @@ function formatOrientationBody(summary, opts) {
     const sid = shortId(s.sessionId);
     if (s.label !== null && s.label !== "") {
       lines.push(
-        `- ${t.common.lastSessionLabel}: ${s.label} (${s.status}) [${sid}]${hostSuffix(s.host)}`
+        `- ${t.common.lastSessionLabel}: ${oneLine(s.label)} (${s.status}) [${sid}]${hostSuffix(s.host)}`
       );
     } else {
       lines.push(`- ${t.common.lastSessionLabel}: ${sid} (${s.status})${hostSuffix(s.host)}`);
@@ -6246,7 +6258,7 @@ function formatOrientationBody(summary, opts) {
     const dec = summary.latestDecision;
     const decAge = t.relativeAge(dec.occurredAt, now);
     lines.push(
-      `- ${t.common.latestDecisionLabel}: ${dec.title} [${dec.decisionId}] (${decAge})${hostSuffix(dec.host)}`
+      `- ${t.common.latestDecisionLabel}: ${oneLine(dec.title)} [${dec.decisionId}] (${decAge})${hostSuffix(dec.host)}`
     );
     const activityAt = summary.freshness.latestActivityAt;
     if (activityAt !== null && isTrailingStale(activityAt, dec.occurredAt)) {
@@ -6292,7 +6304,7 @@ function formatOrientationBody(summary, opts) {
     for (const s of summary.recentDirection) {
       const sid = shortId(s.sessionId);
       const age = t.relativeAge(s.occurredAt, now);
-      const head = s.label !== null && s.label !== "" ? s.label : sid;
+      const head = s.label !== null && s.label !== "" ? oneLine(s.label) : sid;
       lines.push(`- ${head} (${age})${hostSuffix(s.host)}`);
       if (s.decisions.length > 0) {
         const more = s.decisionsOverflow > 0 ? ` (+${s.decisionsOverflow})` : "";
@@ -6317,7 +6329,7 @@ function formatOrientationBody(summary, opts) {
   } else {
     for (const t2 of summary.inFlightTasks) {
       const linkedSuffix = t2.linkedSessions > 1 ? ` \u2014 linked_sessions: ${t2.linkedSessions}` : "";
-      lines.push(`- ${t2.title} (${t2.status}) [${shortId(t2.id)}]${linkedSuffix}`);
+      lines.push(`- ${oneLine(t2.title)} (${t2.status}) [${shortId(t2.id)}]${linkedSuffix}`);
     }
   }
   lines.push("");
@@ -6328,7 +6340,7 @@ function formatOrientationBody(summary, opts) {
     for (const a of summary.pendingApprovals) {
       const expired = a.expired ? " (expired)" : "";
       lines.push(
-        `- [${a.risk}] ${a.kind}: ${a.reason} \u2014 session ${shortId(a.sessionId)}, since ${a.createdAt}${expired}`
+        `- [${a.risk}] ${a.kind}: ${oneLine(a.reason)} \u2014 session ${shortId(a.sessionId)}, since ${a.createdAt}${expired}`
       );
     }
   }
@@ -6353,7 +6365,9 @@ function formatOrientationBody(summary, opts) {
     lines.push(t.orientation.openTracksHeading(summary.openTracks.length));
     for (const track of shownTracks) {
       const trackAge = t.relativeAge(track.occurredAt, now);
-      lines.push(`- ${track.title} [${track.decisionId}] (${trackAge})${hostSuffix(track.host)}`);
+      lines.push(
+        `- ${oneLine(track.title)} [${track.decisionId}] (${trackAge})${hostSuffix(track.host)}`
+      );
       if (track.rationale !== null && track.rationale.trim() !== "") {
         lines.push(`  - ${t.common.trackWhyLabel}: ${trackRationale(track.rationale)}`);
       }
@@ -6375,7 +6389,7 @@ function formatOrientationBody(summary, opts) {
     }
   }
   for (const task of summary.plannedTasks) {
-    lines.push(`- ${task.title} [${shortId(task.id)}]`);
+    lines.push(`- ${oneLine(task.title)} [${shortId(task.id)}]`);
   }
   if (summary.openTracks.length === 0 && summary.latestNote === null && summary.plannedTasks.length === 0) {
     const dec = summary.latestDecision;
@@ -6383,10 +6397,10 @@ function formatOrientationBody(summary, opts) {
       lines.push("- (no planned tasks or recorded next step yet)");
     } else if (isTrailingStale(summary.freshness.latestActivityAt, dec.occurredAt)) {
       lines.push(t.orientation.fallbackStaleDirection);
-      lines.push(`  - ${t.orientation.fallbackStaleReferenceLabel}: ${dec.title}`);
+      lines.push(`  - ${t.orientation.fallbackStaleReferenceLabel}: ${oneLine(dec.title)}`);
     } else {
       lines.push("- (no planned tasks \u2014 direction is inferred from recent decisions)");
-      lines.push(`  - ${t.common.latestDecisionLabel}: ${dec.title}`);
+      lines.push(`  - ${t.common.latestDecisionLabel}: ${oneLine(dec.title)}`);
     }
     if (dec !== null) {
       lines.push(`  - ${t.orientation.trackNudge}`);
@@ -6505,13 +6519,13 @@ var NOTES_PER_DIGEST = 2;
 var FILES_PER_DIGEST = 3;
 var NOTE_SUMMARY_MAX = 200;
 function noteSummary(body) {
-  const oneLine = body.replace(/\s+/g, " ").trim();
-  return oneLine.length > NOTE_SUMMARY_MAX ? `${oneLine.slice(0, NOTE_SUMMARY_MAX - 1)}\u2026` : oneLine;
+  const collapsed = oneLine(body);
+  return collapsed.length > NOTE_SUMMARY_MAX ? `${collapsed.slice(0, NOTE_SUMMARY_MAX - 1)}\u2026` : collapsed;
 }
 var TRACK_RATIONALE_MAX = 240;
 function trackRationale(rationale) {
-  const oneLine = rationale.replace(/\s+/g, " ").trim();
-  return oneLine.length > TRACK_RATIONALE_MAX ? `${oneLine.slice(0, TRACK_RATIONALE_MAX - 1)}\u2026` : oneLine;
+  const collapsed = oneLine(rationale);
+  return collapsed.length > TRACK_RATIONALE_MAX ? `${collapsed.slice(0, TRACK_RATIONALE_MAX - 1)}\u2026` : collapsed;
 }
 function suspectText(reason) {
   if (reason === "events_say_ended_but_yaml_running") return "ended (yaml stale)";
@@ -7747,7 +7761,7 @@ function tallyTaskStatus(items) {
 }
 function formatReportBody(data, t) {
   const lines = [];
-  const titleSuffix = data.title !== void 0 ? ` \u2014 ${data.title}` : "";
+  const titleSuffix = data.title !== void 0 ? ` \u2014 ${oneLine(data.title)}` : "";
   lines.push(`# Report${titleSuffix}`);
   lines.push("");
   const periodSuffix = data.period.from !== null && data.period.to !== null ? ` (${data.period.from.slice(0, 10)}..${data.period.to.slice(0, 10)})` : "";
@@ -7794,7 +7808,7 @@ function formatReportBody(data, t) {
     for (const d of shown) {
       const trackTag = d.track === true ? " [track]" : "";
       const voidedTag = d.voided === true ? " (voided)" : "";
-      lines.push(`- ${d.occurredAt.slice(0, 10)} \xB7 ${d.title}${trackTag}${voidedTag}`);
+      lines.push(`- ${d.occurredAt.slice(0, 10)} \xB7 ${oneLine(d.title)}${trackTag}${voidedTag}`);
     }
   }
   lines.push("");
@@ -7809,7 +7823,7 @@ function formatReportBody(data, t) {
     );
     lines.push("");
     for (const item of data.approvals.items.slice(0, APPROVALS_MARKDOWN_LIMIT)) {
-      lines.push(`- ${item.reason} (${item.status}, ${item.riskLevel})`);
+      lines.push(`- ${oneLine(item.reason)} (${item.status}, ${item.riskLevel})`);
     }
     const overflow = data.approvals.items.length - APPROVALS_MARKDOWN_LIMIT;
     if (overflow > 0) lines.push(`- ... +${overflow} more`);
@@ -7824,7 +7838,7 @@ function formatReportBody(data, t) {
     lines.push(`Tasks: ${data.tasks.total} (${breakdown})`);
     lines.push("");
     for (const item of data.tasks.items.slice(0, TASKS_MARKDOWN_LIMIT)) {
-      lines.push(`- ${item.title} (${item.status})`);
+      lines.push(`- ${oneLine(item.title)} (${item.status})`);
     }
     const overflow = data.tasks.items.length - TASKS_MARKDOWN_LIMIT;
     if (overflow > 0) lines.push(`- ... +${overflow} more`);
@@ -9254,9 +9268,21 @@ function parseMarkers(content, markers = DEFAULT_MARKERS) {
   const after = body.slice(endLineEnd);
   return { kind: "ok", before, generated, after };
 }
+function defuseMarkerLines(body, markers) {
+  const isMarker = (line) => {
+    const bare = line.endsWith("\r") ? line.slice(0, -1) : line;
+    return bare === markers.start || bare === markers.end;
+  };
+  const lines = body.split("\n");
+  if (!lines.some(isMarker)) return body;
+  return lines.map((line) => isMarker(line) ? ` ${line}` : line).join("\n");
+}
 function renderWithMarkers(existing, generated, fileLabel, markers = DEFAULT_MARKERS) {
-  const normalized = generated.endsWith("\n") ? generated : `${generated}
-`;
+  const normalized = defuseMarkerLines(
+    generated.endsWith("\n") ? generated : `${generated}
+`,
+    markers
+  );
   if (existing === null) {
     return `${markers.start}
 ${normalized}${markers.end}