@corenel/harness 0.17.0 → 0.18.0

package/dist/tools/urlGuard.d.ts

@@ -5,12 +5,21 @@ export type OutboundResolver = (host: string) => Promise<string[]>;
 /** Install (or clear, with null) the resolver safeFetch uses to check that a
  * name does not resolve to an internal address. */
 export declare function setOutboundResolver(fn: OutboundResolver | null): void;
+/** The guard refused a request: the URL, a redirect hop, or an address a
+ * name resolves to is not one a tool may call. A caller tells a refusal from
+ * a network failure by this type, never by its message. A name that does not
+ * resolve and a redirect loop are plain Errors: nothing was refused. */
+export declare class OutboundRefusedError extends Error {
+    constructor(message: string);
+}
 /** Validate a tool-supplied URL. Returns null when allowed, else a human-readable
  * reason it is refused (http(s) only; no internal/loopback/metadata hosts). */
 export declare function outboundUrlError(raw: string): string | null;
 /** fetch() with SSRF protection: the URL and every redirect hop are validated by
  * outboundUrlError, following redirects MANUALLY so a 3xx can't escape to an
- * internal host. Throws Error(reason) on a blocked URL/hop. In the browser a
- * cross-origin redirect is opaque (unreadable) and is refused rather than followed. */
+ * internal host. Throws OutboundRefusedError on a blocked URL/hop/address. In
+ * the browser a cross-origin redirect is opaque (unreadable) and is refused
+ * rather than followed. A redirect off the original origin never carries the
+ * caller's credentials or body on (see nextHopInit). */
 export declare function safeFetch(url: string, init?: RequestInit): Promise<Response>;
 //# sourceMappingURL=urlGuard.d.ts.map

package/dist/tools/urlGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"urlGuard.d.ts","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AA6CA;;wCAEwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAGnE;mDACmD;AACnD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAErE;AAeD;+EAC+E;AAC/E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU3D;AAID;;;uFAGuF;AACvF,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBtF"}
+{"version":3,"file":"urlGuard.d.ts","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AA6CA;;wCAEwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAGnE;mDACmD;AACnD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAErE;AAID;;;wEAGwE;AACxE,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAcD;+EAC+E;AAC/E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU3D;AAyBD;;;;;wDAKwD;AACxD,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA0BtF"}

package/dist/tools/urlGuard.js

@@ -59,18 +59,30 @@ export function setOutboundResolver(fn) {
     resolver = fn;
 }
 const IP_LITERAL = /^[\d.]+$|:/;
-/** Check every address a name resolves to. Returns a refusal reason or null. */
-async function resolvedHostError(host) {
+/** The guard refused a request: the URL, a redirect hop, or an address a
+ * name resolves to is not one a tool may call. A caller tells a refusal from
+ * a network failure by this type, never by its message. A name that does not
+ * resolve and a redirect loop are plain Errors: nothing was refused. */
+export class OutboundRefusedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'OutboundRefusedError';
+    }
+}
+/** Check every address a name resolves to. Throws OutboundRefusedError for an
+ * internal address, a plain Error for a name that does not resolve. */
+async function assertResolvedHostAllowed(host) {
     if (!resolver)
-        return null;
+        return;
     const bare = host.replace(/^\[/, '').replace(/\]$/, '');
     if (IP_LITERAL.test(bare))
-        return null; // a literal was already judged lexically
+        return; // a literal was already judged lexically
     const addrs = await resolver(bare);
     if (addrs.length === 0)
-        return `could not resolve "${host}"`;
+        throw new Error(`could not resolve "${host}"`);
     const bad = addrs.find((a) => isBlockedHost(a));
-    return bad ? `refusing to call an internal/loopback host: "${host}" resolves to ${bad}` : null;
+    if (bad)
+        throw new OutboundRefusedError(`refusing to call an internal/loopback host: "${host}" resolves to ${bad}`);
 }
 /** Validate a tool-supplied URL. Returns null when allowed, else a human-readable
  * reason it is refused (http(s) only; no internal/loopback/metadata hosts). */
@@ -89,24 +101,67 @@ export function outboundUrlError(raw) {
     return null;
 }
 const MAX_REDIRECTS = 5;
+/** Headers that carry a credential: never sent on to another origin. */
+const CREDENTIAL_HEADERS = ['authorization', 'proxy-authorization', 'cookie', 'x-api-key'];
+/** Headers that describe a request body: dropped with the body. */
+const BODY_HEADERS = ['content-type', 'content-length', 'content-encoding', 'content-language', 'content-location'];
+/** The next hop's request after a redirect, by fetch's own rules plus one of
+ * ours: a 303 (and a 301 or 302 for a POST) becomes a GET without a body,
+ * and once the chain leaves the original origin the credential headers and
+ * the body are dropped for every later hop. */
+function nextHopInit(init, status, leftOrigin) {
+    const method = (init.method ?? 'GET').toUpperCase();
+    const toGet = (status === 303 && method !== 'GET' && method !== 'HEAD') || ((status === 301 || status === 302) && method === 'POST');
+    const dropBody = toGet || leftOrigin;
+    const headers = new Headers(init.headers);
+    if (leftOrigin)
+        for (const h of CREDENTIAL_HEADERS)
+            headers.delete(h);
+    if (dropBody)
+        for (const h of BODY_HEADERS)
+            headers.delete(h);
+    const next = { ...init, headers, ...(toGet ? { method: 'GET' } : {}) };
+    if (dropBody)
+        delete next.body;
+    return next;
+}
 /** fetch() with SSRF protection: the URL and every redirect hop are validated by
  * outboundUrlError, following redirects MANUALLY so a 3xx can't escape to an
- * internal host. Throws Error(reason) on a blocked URL/hop. In the browser a
- * cross-origin redirect is opaque (unreadable) and is refused rather than followed. */
+ * internal host. Throws OutboundRefusedError on a blocked URL/hop/address. In
+ * the browser a cross-origin redirect is opaque (unreadable) and is refused
+ * rather than followed. A redirect off the original origin never carries the
+ * caller's credentials or body on (see nextHopInit). */
 export async function safeFetch(url, init = {}) {
     let current = url;
+    let hopInit = init;
+    let leftOrigin = false;
+    let origin = null;
     for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
         const bad = outboundUrlError(current);
         if (bad)
-            throw new Error(bad);
-        const badAddr = await resolvedHostError(new URL(current).hostname);
-        if (badAddr)
-            throw new Error(badAddr);
-        const res = await fetch(current, { ...init, redirect: 'manual' });
+            throw new OutboundRefusedError(bad);
+        origin ?? (origin = new URL(current).origin);
+        await assertResolvedHostAllowed(new URL(current).hostname);
+        const res = await fetch(current, { ...hopInit, redirect: 'manual' });
         if (res.type === 'opaqueredirect')
-            throw new Error('refusing to follow an opaque cross-origin redirect');
+            throw new OutboundRefusedError('refusing to follow an opaque cross-origin redirect');
         if (res.status >= 300 && res.status < 400 && res.headers.has('location')) {
-            current = new URL(res.headers.get('location'), current).toString();
+            const next = new URL(res.headers.get('location'), current).toString();
+            try {
+                await res.body?.cancel();
+            }
+            catch { /* nothing left to release */ }
+            // outboundUrlError judges an unparseable next hop at the top of the loop.
+            let nextOrigin = null;
+            try {
+                nextOrigin = new URL(next).origin;
+            }
+            catch {
+                nextOrigin = null;
+            }
+            leftOrigin = leftOrigin || nextOrigin !== origin;
+            hopInit = nextHopInit(hopInit, res.status, leftOrigin);
+            current = next;
             continue;
         }
         return res;

package/dist/tools/urlGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"urlGuard.js","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;0EAE0E;AAC1E,SAAS,aAAa,CAAC,IAAY;IACjC,8DAA8D;IAC9D,qEAAqE;IACrE,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC,KAAK,0BAA0B,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,kFAAkF;IAClF,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,GAAG,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC;IACzG,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAW;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,gDAAgD;IACzF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAC3E,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C;mDACmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,EAA2B;IAC7D,QAAQ,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,gFAAgF;AAChF,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IACjF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,sBAAsB,IAAI,GAAG,CAAC;IAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC,CAAC,CAAC,gDAAgD,IAAI,iBAAiB,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjG,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,GAAG,GAAG,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,yBAAyB,GAAG,GAAG,CAAC;IAC9F,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,gDAAgD,CAAC,CAAC,QAAQ,GAAG,CAAC;IACpG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;;uFAGuF;AACvF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAoB,EAAE;IACjE,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,aAAa,GAAG,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"urlGuard.js","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;0EAE0E;AAC1E,SAAS,aAAa,CAAC,IAAY;IACjC,8DAA8D;IAC9D,qEAAqE;IACrE,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC,KAAK,0BAA0B,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,kFAAkF;IAClF,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACjG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,SAAS,GAAG,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,EAAE,GAAG,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC;IACzG,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAW;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,gDAAgD;IACzF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,UAAU;IACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAC3E,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C;mDACmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,EAA2B;IAC7D,QAAQ,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC;;;wEAGwE;AACxE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;uEACuE;AACvE,KAAK,UAAU,yBAAyB,CAAC,IAAY;IACnD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,yCAAyC;IAC5E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,GAAG;QAAE,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,IAAI,iBAAiB,GAAG,EAAE,CAAC,CAAC;AACtH,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,GAAG,GAAG,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,yBAAyB,GAAG,GAAG,CAAC;IAC9F,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,gDAAgD,CAAC,CAAC,QAAQ,GAAG,CAAC;IACpG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,CAAC,eAAe,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC3F,mEAAmE;AACnE,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;AAEpH;;;+CAG+C;AAC/C,SAAS,WAAW,CAAC,IAAiB,EAAE,MAAc,EAAE,UAAmB;IACzE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;IACrI,MAAM,QAAQ,GAAG,KAAK,IAAI,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,UAAU;QAAE,KAAK,MAAM,CAAC,IAAI,kBAAkB;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,QAAQ;QAAE,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpF,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;wDAKwD;AACxD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAoB,EAAE;IACjE,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,OAAO,GAAgB,IAAI,CAAC;IAChC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAN,MAAM,GAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAC;QACnC,MAAM,yBAAyB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,oBAAoB,CAAC,oDAAoD,CAAC,CAAC;QACxH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChF,IAAI,CAAC;gBAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;YACzE,0EAA0E;YAC1E,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,CAAC;gBAAC,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,UAAU,GAAG,IAAI,CAAC;YAAC,CAAC;YACvE,UAAU,GAAG,UAAU,IAAI,UAAU,KAAK,MAAM,CAAC;YACjD,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACvD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,aAAa,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/workflows/results/resultFile.d.ts

@@ -0,0 +1,23 @@
+export declare const RESULTS_DIR = "results";
+export type ResultSource = 'job' | 'deploy' | 'canvas';
+export interface ResultMeta {
+    workflow: string;
+    slug: string;
+    /** ISO 8601 with the local offset. */
+    ran: string;
+    source: ResultSource;
+    /** The edit values the run used (what the form held). */
+    inputs: Record<string, unknown>;
+}
+/** One safe folder name: no separators or reserved characters, no leading or
+ * trailing dots or spaces (so never "." or ".."), at most 80 characters. */
+export declare function cleanName(name: string, slug: string): string;
+export declare function stamp(d: Date): string;
+export declare function isoWithOffset(d: Date): string;
+export declare function resultPath(workflowName: string, slug: string, ranAt: Date): string;
+export declare function formatResult(meta: ResultMeta, output: string): string;
+export declare function parseResult(text: string): {
+    meta: ResultMeta | null;
+    output: string;
+};
+//# sourceMappingURL=resultFile.d.ts.map

package/dist/workflows/results/resultFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultFile.d.ts","sourceRoot":"","sources":["../../../workflows/results/resultFile.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,WAAW,YAAY,CAAC;AACrC,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACvD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAMD;4EAC4E;AAC5E,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,wBAAgB,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAErC;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAK7C;AAED,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,MAAM,CAElF;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAErE;AAsBD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAWrF"}

package/dist/workflows/results/resultFile.js

@@ -0,0 +1,70 @@
+/* The result file: one finished workflow run's output, as markdown with a YAML
+ * front matter header that says which workflow, when, from where, and with
+ * which inputs (so "Reuse inputs" can put them back). The body is the run's
+ * final output, unchanged. parseResult never throws: a hand-made or hand-edited
+ * file still opens, as all output and no meta. */
+import { parse, stringify } from 'yaml';
+export const RESULTS_DIR = 'results';
+// Characters no folder name may hold on any backend, plus control characters.
+const BAD = /[/\\:*?"<>|\u0000-\u001f]/g;
+const pad = (n, w = 2) => String(n).padStart(w, '0');
+/** One safe folder name: no separators or reserved characters, no leading or
+ * trailing dots or spaces (so never "." or ".."), at most 80 characters. */
+export function cleanName(name, slug) {
+    const clean = (s) => s.replace(BAD, '').replace(/\s+/g, ' ').replace(/^[\s.]+|[\s.]+$/g, '').slice(0, 80).replace(/[\s.]+$/g, '');
+    return clean(name) || clean(slug) || 'Workflow';
+}
+export function stamp(d) {
+    return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}${pad(d.getMinutes())}`;
+}
+export function isoWithOffset(d) {
+    const off = -d.getTimezoneOffset();
+    const sign = off >= 0 ? '+' : '-';
+    const a = Math.abs(off);
+    return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}${sign}${pad(Math.floor(a / 60))}:${pad(a % 60)}`;
+}
+export function resultPath(workflowName, slug, ranAt) {
+    return `${RESULTS_DIR}/${cleanName(workflowName, slug)}/${stamp(ranAt)}.md`;
+}
+export function formatResult(meta, output) {
+    return `---\n${stringify(meta).trimEnd()}\n---\n\n${output}\n`;
+}
+const SOURCES = ['job', 'deploy', 'canvas'];
+const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+function toMeta(raw) {
+    if (!isRecord(raw))
+        return null;
+    const { workflow, slug, source, inputs } = raw;
+    const ran = raw.ran instanceof Date ? raw.ran.toISOString() : raw.ran;
+    if (typeof workflow !== 'string' || typeof slug !== 'string' || typeof ran !== 'string')
+        return null;
+    return {
+        workflow, slug, ran,
+        source: SOURCES.includes(source) ? source : 'job',
+        inputs: isRecord(inputs) ? inputs : {},
+    };
+}
+// Front matter: a first line of exactly ---, then YAML up to the next line of
+// exactly ---. YAML block scalars indent their lines, so a --- inside an input
+// value can never close it.
+const FRONT = /^---\r?\n([\s\S]*?)\r?\n---[ \t]*(?:\r?\n|$)/;
+export function parseResult(text) {
+    const m = FRONT.exec(text);
+    if (!m)
+        return { meta: null, output: text.replace(/\s+$/, '') };
+    let raw;
+    try {
+        raw = parse(m[1]);
+    }
+    catch {
+        return { meta: null, output: text.replace(/\s+$/, '') };
+    }
+    const meta = toMeta(raw);
+    // Not result meta (a note that opens with a --- rule, a hand-edited header):
+    // the whole file is the output, so nothing the person wrote is hidden.
+    if (!meta)
+        return { meta: null, output: text.replace(/\s+$/, '') };
+    const body = text.slice(m[0].length).replace(/^\r?\n/, '').replace(/\s+$/, '');
+    return { meta, output: body };
+}
+//# sourceMappingURL=resultFile.js.map

package/dist/workflows/results/resultFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultFile.js","sourceRoot":"","sources":["../../../workflows/results/resultFile.ts"],"names":[],"mappings":"AAAA;;;;kDAIkD;AAClD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAExC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAYrC,8EAA8E;AAC9E,MAAM,GAAG,GAAG,4BAA4B,CAAC;AACzC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAE7D;4EAC4E;AAC5E,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1I,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,CAAO;IAC3B,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAO;IACnC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;AAC9L,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,IAAY,EAAE,KAAW;IACxE,OAAO,GAAG,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,MAAc;IAC3D,OAAO,QAAQ,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,MAAM,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,OAAO,GAA4B,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACrE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAExH,SAAS,MAAM,CAAC,GAAY;IAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO;QACL,QAAQ,EAAE,IAAI,EAAE,GAAG;QACnB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAsB,CAAC,CAAC,CAAC,CAAE,MAAuB,CAAC,CAAC,CAAC,KAAK;QACnF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,4BAA4B;AAC5B,MAAM,KAAK,GAAG,8CAA8C,CAAC;AAE7D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAChE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC"}

package/dist/workflows/results/resultStore.d.ts

@@ -0,0 +1,37 @@
+import type { FileService } from '@corenel/protocol';
+import { type ResultMeta } from './resultFile';
+export type SaveOutcome = {
+    path: string;
+} | {
+    error: string;
+};
+export interface ResultEntry {
+    path: string;
+    meta: ResultMeta | null;
+    output: string;
+    ranAt: number;
+}
+export declare function isResultPath(path: string): boolean;
+export declare function saveResult(files: FileService | null, meta: ResultMeta, output: string, ranAt?: Date): Promise<SaveOutcome>;
+export type PlaceOutcome = {
+    path: string;
+    same: boolean;
+} | {
+    error: string;
+};
+/** Put an already-formatted result `text` at `path` (results/**.md) or the
+ * next free ` (n)` name, never overwriting anything: a name holding exactly
+ * `text` already is the same result (an earlier copy) and is reported as
+ * `same` with nothing written. Claims names in the SAME in-tab reservation as
+ * saveResult, so a save and a placement finishing together never pick one
+ * name, and writes with `create`, which refuses an existing file, so a file
+ * another tab wrote between the check and the write is not replaced either.
+ * Never throws. */
+export declare function placeResultText(files: FileService, path: string, text: string): Promise<PlaceOutcome>;
+export declare function listResults(files: FileService | null, opts?: {
+    slug?: string;
+    limit?: number;
+}): Promise<ResultEntry[]>;
+export declare function readResult(files: FileService | null, path: string): Promise<ResultEntry | null>;
+export declare function deleteResult(files: FileService, path: string): Promise<void>;
+//# sourceMappingURL=resultStore.d.ts.map

package/dist/workflows/results/resultStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultStore.d.ts","sourceRoot":"","sources":["../../../workflows/results/resultStore.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAY,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAsD,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnG,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAC/D,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AASrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,IAAyB,GAAG,OAAO,CAAC,WAAW,CAAC,CAgCpJ;AAKD,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E;;;;;;;mBAOmB;AACnB,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmC3G;AA2BD,wBAAsB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAiBjI;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGrG;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlF"}

package/dist/workflows/results/resultStore.js

@@ -0,0 +1,191 @@
+/* Results as files: save, list, read, delete under results/ in the workspace.
+ * Every path in or out is checked to be results/**.md, so a crafted link can
+ * never read or delete anything else. Saving never throws: a run's outcome must
+ * not depend on whether its result could be written. */
+import { isProtectedPath, protectedPathReason } from '@corenel/protocol';
+import { RESULTS_DIR, formatResult, parseResult, resultPath } from './resultFile.js';
+/** At most this many files are read for one listing. */
+const MAX_SCAN = 500;
+function normalize(path) {
+    return path.replace(/\\/g, '/').replace(/^\/+/, '');
+}
+export function isResultPath(path) {
+    const n = normalize(path);
+    return n.startsWith(`${RESULTS_DIR}/`) && n.endsWith('.md') && !n.split('/').some((seg) => seg === '..' || seg === '.' || seg === '');
+}
+export async function saveResult(files, meta, output, ranAt = new Date(meta.ran)) {
+    if (!files)
+        return { error: 'no workspace is open' };
+    if (!files.writable)
+        return { error: 'the workspace is read-only' };
+    const when = Number.isNaN(ranAt.getTime()) ? new Date() : ranAt;
+    const base = resultPath(meta.workflow, meta.slug, when);
+    // cleanName already makes one safe segment; this keeps the write honest if
+    // that ever changes: nothing outside results/**.md is ever written.
+    if (!isResultPath(base))
+        return { error: `not a results path: ${base}` };
+    if (isProtectedPath(base))
+        return { error: protectedPathReason(base) };
+    let path = null;
+    // The name this save holds in `reserved`; released in finally, even on a throw.
+    let claimed = null;
+    try {
+        // stat-then-write is not atomic, so each candidate is CLAIMED in this tab
+        // before the await that checks the disk: two saves finishing together (a
+        // deploy and a job) can never both pick the same free name.
+        for (let n = 1; path === null; n++) {
+            if (n > 99)
+                return { error: 'too many results in one minute' };
+            const candidate = n === 1 ? base : base.replace(/\.md$/, ` (${n}).md`);
+            if (reserved.has(candidate))
+                continue;
+            reserved.add(candidate);
+            claimed = candidate;
+            if (await files.stat(candidate)) {
+                reserved.delete(candidate);
+                claimed = null;
+                continue;
+            }
+            path = candidate;
+        }
+        await files.write(path, formatResult(meta, output));
+        return { path };
+    }
+    catch (e) {
+        return { error: String(e?.message || e) };
+    }
+    finally {
+        if (claimed !== null)
+            reserved.delete(claimed);
+    }
+}
+/** Paths a save in this tab has claimed but not finished writing. */
+const reserved = new Set();
+/** Put an already-formatted result `text` at `path` (results/**.md) or the
+ * next free ` (n)` name, never overwriting anything: a name holding exactly
+ * `text` already is the same result (an earlier copy) and is reported as
+ * `same` with nothing written. Claims names in the SAME in-tab reservation as
+ * saveResult, so a save and a placement finishing together never pick one
+ * name, and writes with `create`, which refuses an existing file, so a file
+ * another tab wrote between the check and the write is not replaced either.
+ * Never throws. */
+export async function placeResultText(files, path, text) {
+    if (!files.writable)
+        return { error: 'the workspace is read-only' };
+    const base = normalize(path);
+    if (!isResultPath(base))
+        return { error: `not a results path: ${base}` };
+    const sameAt = async (candidate) => {
+        try {
+            return (await files.read(candidate)) === text;
+        }
+        catch {
+            return false;
+        }
+    };
+    for (let n = 1; n <= 99; n++) {
+        const candidate = n === 1 ? base : base.replace(/\.md$/, ` (${n}).md`);
+        if (isProtectedPath(candidate))
+            return { error: protectedPathReason(candidate) };
+        if (reserved.has(candidate))
+            continue;
+        reserved.add(candidate);
+        try {
+            if (await files.stat(candidate)) {
+                if (await sameAt(candidate))
+                    return { path: candidate, same: true };
+                continue;
+            }
+            try {
+                await files.create(candidate, text);
+                return { path: candidate, same: false };
+            }
+            catch (e) {
+                // Taken since the check (another tab): treat it as any existing name.
+                // Anything else is a real failure and nothing was written.
+                let now;
+                try {
+                    now = await files.stat(candidate);
+                }
+                catch {
+                    now = null;
+                }
+                if (!now)
+                    return { error: String(e?.message || e) };
+                if (await sameAt(candidate))
+                    return { path: candidate, same: true };
+            }
+        }
+        catch (e) {
+            return { error: String(e?.message || e) };
+        }
+        finally {
+            reserved.delete(candidate);
+        }
+    }
+    return { error: 'too many results with that name' };
+}
+function flatten(nodes, out) {
+    for (const n of nodes) {
+        if (n.kind === 'file')
+            out.push(n);
+        else if (n.children)
+            flatten(n.children, out);
+    }
+}
+// "2026-10-10 0930 (2).md" -> "202610100930002", for newest-first sorting.
+const STAMP = /(\d{4})-(\d{2})-(\d{2}) (\d{2})(\d{2})(?: \((\d+)\))?\.md$/;
+function sortKey(n) {
+    const m = STAMP.exec(n.name);
+    if (m)
+        return `${m[1]}${m[2]}${m[3]}${m[4]}${m[5]}${(m[6] ?? '1').padStart(3, '0')}`;
+    return n.mtime ? `${new Date(n.mtime).toISOString().replace(/\D/g, '').slice(0, 12)}000` : '';
+}
+async function readEntry(files, path, mtime) {
+    try {
+        const { meta, output } = parseResult(await files.read(path));
+        const parsed = meta ? Date.parse(meta.ran) : NaN;
+        return { path, meta, output, ranAt: Number.isNaN(parsed) ? (mtime ?? 0) : parsed };
+    }
+    catch {
+        return null;
+    }
+}
+export async function listResults(files, opts = {}) {
+    if (!files)
+        return [];
+    let nodes;
+    try {
+        nodes = await files.list(RESULTS_DIR);
+    }
+    catch {
+        return [];
+    }
+    const all = [];
+    flatten(nodes, all);
+    const md = all.filter((n) => isResultPath(n.path)).sort((a, b) => sortKey(b).localeCompare(sortKey(a)));
+    const limit = opts.limit ?? 50;
+    const out = [];
+    for (const n of md.slice(0, MAX_SCAN)) {
+        if (out.length >= limit)
+            break;
+        const e = await readEntry(files, n.path, n.mtime);
+        if (!e)
+            continue;
+        if (opts.slug && e.meta?.slug !== opts.slug)
+            continue;
+        out.push(e);
+    }
+    return out;
+}
+export async function readResult(files, path) {
+    if (!files || !isResultPath(path))
+        return null;
+    return readEntry(files, normalize(path));
+}
+export async function deleteResult(files, path) {
+    if (!isResultPath(path))
+        throw new Error(`not a result: ${path}`);
+    await files.remove(normalize(path));
+}
+//# sourceMappingURL=resultStore.js.map

package/dist/workflows/results/resultStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultStore.js","sourceRoot":"","sources":["../../../workflows/results/resultStore.ts"],"names":[],"mappings":"AAAA;;;wDAGwD;AACxD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,cAAc,CAAC;AAKnG,wDAAwD;AACxD,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;AACxI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAyB,EAAE,IAAgB,EAAE,MAAc,EAAE,QAAc,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC5H,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,IAAI,EAAE,EAAE,CAAC;IACzE,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,gFAAgF;IAChF,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,0EAA0E;QAC1E,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACvE,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACtC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,GAAG,SAAS,CAAC;YACpB,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC1F,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,IAAI;YAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;AAInC;;;;;;;mBAOmB;AACnB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAkB,EAAE,IAAY,EAAE,IAAY;IAClF,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,IAAI,EAAE,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,EAAE,SAAiB,EAAoB,EAAE;QAC3D,IAAI,CAAC;YAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAChF,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,eAAe,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACjF,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACtC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACpC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,sEAAsE;gBACtE,2DAA2D;gBAC3D,IAAI,GAAY,CAAC;gBACjB,IAAI,CAAC;oBAAC,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,GAAG,GAAG,IAAI,CAAC;gBAAC,CAAC;gBAChE,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC/D,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,KAAiB,EAAE,GAAe;IACjD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC9B,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,KAAK,GAAG,4DAA4D,CAAC;AAC3E,SAAS,OAAO,CAAC,CAAW;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAkB,EAAE,IAAY,EAAE,KAAc;IACvE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAyB,EAAE,OAA0C,EAAE;IACvG,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACnE,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;QAC/B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,SAAS;QACtD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAyB,EAAE,IAAY;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,IAAY;IACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/harness",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "license": "Elastic-2.0",
   "type": "module",
   "description": "Corenel — host-agnostic agent harness (kernel). The app resolves it via the `corenel` path alias (bypasses these exports entirely); vitest aliases it to source too. Everything else — node consumers like @corenel/cli, @corenel/term, @corenel/sidecar — resolves it through this workspace package via the exports map below, which points at dist/ unconditionally (not just at publish) so in-repo and published resolution are identical: a bundle that treats @corenel/harness as external (see packages/term/build.mjs) must see the SAME module instance node sees when it later resolves this package at runtime, and plain node cannot execute the raw .ts sources at all. Run `pnpm build` here (or let a dependent's prebuild do it) before relying on this package outside the app/vitest. NOTE: @xyflow/react and dagre are NOT dependencies here at all — this package has no .tsx files and imports neither. `react` IS a real (small) runtime dependency: `todos.ts` uses `useSyncExternalStore`. It is declared below as an OPTIONAL peer, not a hard dependency, so node-only consumers (cli/term/sidecar) aren't forced to install react; node consumers hoist it today only because something else in the tree happens to pull it in. Do not add @xyflow/react or dagre as dependencies/peers without testing a packed install end to end — an earlier attempt at that (before this package had any .tsx files) failed npm's peer resolution with ERESOLVE.",
@@ -33,7 +33,7 @@
   "dependencies": {
     "openai": "^4.77.0",
     "yaml": "^2.8.3",
-    "@corenel/protocol": "0.15.0"
+    "@corenel/protocol": "0.16.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0"