@krapht/ork 0.4.0 → 1.0.0-alpha.0

package/dist/bin.mjs

@@ -1,17 +1,18 @@
 #!/usr/bin/env node
-import { $ as resumable, $t as planMoveInto, A as parseInputPairs, At as FEEDBACK_KINDS, Bn as isClaudeNode, Bt as normalizeTitle, F as endLink, Fn as WorkflowSchema, G as tellLiveRun, Ht as maskReplacer, I as endLinksOf, It as sendPost, Jn as ORK_LAYOUT, Jt as serveRun, Ln as settingsOf, Mt as FEEDBACK_TARGETS, N as createCalls, P as addressOf, Pt as planPost, Q as detachResume, Qt as applySteps, R as peerOf, Rt as createFeedback, T as inspectProject, V as flattenTree, W as requestStop, Wn as INTEGRATIONS, Xn as firstLine, Xt as wakeRun, Yn as CLAUDE_DRIVERS, Yt as socketPath, Z as adoptedCalls, Zt as planAgentMigration, _n as inside, an as catalogAgent, cn as hasInRepoFiles, d as runningRunIds, dn as placeFiles, dt as runStatus, en as linkTools, et as createReplay, f as runningScript, fn as placeFor, ft as runTree, g as triggersReport, h as lateTriggers, hn as shownPath, i as NOT_STARTED, in as deleteAgent, it as followEvents, j as resolveInputs, jn as serializeWorkflow, jt as FEEDBACK_SEVERITIES, kt as gitRulesOf, l as planUpgrade, ln as inRepoPlace, lt as liveStatus, m as isNewer, mn as runDirOf, n as resolveBase, nn as toolsInUse, on as loadAgents, pn as projectsHome, qn as AGENT_TOOL_LAYOUTS, rn as createAgent, rt as detachRun, st as planNodeSession, t as createWorkspace, tn as toolLinks, tt as replayLoopAnswers, u as releaseNotes, un as newProjectId, vn as projectRootOf, vt as walkSummary, xt as userMessageText, yt as startRun, z as tellNode, zn as beforeOf, zt as fingerprint } from "./src-CGqMati3.mjs";
-import { C as checkNote, D as placeOf, O as feedbackActions, S as previewPost, T as acceptItem, _ as answerDecision, b as builtinWorkflowFile, c as checkDue, d as pendingNotice, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, k as openFixRun, l as fetchLatest, m as updateCachePath, n as ORK_VERSION, o as updateSwitchOff, p as refreshUpdateCache, r as isSwitchedOn, s as runInstall, t as ORK_NAME, u as newerVersion, v as pendingDecisions, w as recordNote, y as builtinProblem } from "./__build_info__-CtSVVuZE.mjs";
-import { n as newRunId, t as findRun } from "./find-DptmbhGd.mjs";
-import { a as write, c as openStore, i as style, l as storePath, n as cost, o as writeErr, s as nodeOf, t as confirm } from "./output-CXSJO00X.mjs";
-import { n as listOrkWorktrees, t as createdWorktrees } from "./list-ZvY2OcLq.mjs";
-import { a as planClean, t as applyClean } from "./clean-Dcr807be.mjs";
-import { a as formatRunEvent, i as formatEvent, n as formatRuns, o as createTerminalHuman, r as formatTree, t as ago } from "./format-J-a21Yvn.mjs";
-import { a as validate, c as warningLines, d as refusedBuiltin, f as workflowArg, i as loadWorkflow, l as WORKFLOW_DIR, m as registeredProjects, o as validateFile, p as projectAt, r as formatReport, s as walkLoaded, t as context, u as WORKFLOW_SUFFIX } from "./context-C_bksb0C.mjs";
-import { i as runLimits, r as limitsRefusal, t as chatNotice } from "./limits-BDZCmGEu.mjs";
-import { _ as resultOf, a as builtinExecutors, d as maskedEnv, f as maskedNamesOfRun, g as clearOutputFiles, h as sessionEnv, i as onPath, l as clearStateFiles, m as runScrubber, n as missingProgramMessage, r as missingPrograms, t as envProblems } from "./src-UWkk1sl9.mjs";
-import { i as decideRefusal, n as chatRefusal } from "./in-a-run-D1Qc5Mit.mjs";
-import { defineCommand, runMain } from "citty";
-import { createInterface } from "node:readline/promises";
+import { Bn as serializeWorkflow, Bt as FEEDBACK_TARGETS, Cn as runDirOf, D as inspectProject, Dn as projectRootOf, Dt as userMessageText, En as inside, Ft as PROJECT_FILE, H as tellNode, Ht as planPost, I as createCalls, It as gitRulesOf, J as tellLiveRun, Jn as beforeOf, Jt as normalizeTitle, Kn as settingsOf, Kt as createFeedback, L as addressOf, Lt as loadProject, M as clearGitLocalEnv, N as parseInputPairs, P as resolveInputs, R as endLink, Rt as FEEDBACK_KINDS, Sn as projectsHome, Tt as startRun, Un as WorkflowSchema, V as peerOf, W as flattenTree, Wt as sendPost, Xt as maskReplacer, Yn as isClaudeNode, _ as lateTriggers, _n as hasInRepoFiles, _t as runStatus, an as wakeRun, ar as CLAUDE_DRIVERS, bn as placeFiles, cn as planMoveInto, d as runningRunIds, dn as toolsInUse, dt as namingNoDriver, er as INTEGRATIONS, et as adoptedCalls, f as runningScript, fn as createAgent, ft as sessionDriver, h as isNewer, hn as loadAgents, ht as liveStatus, i as NOT_STARTED, in as socketRoom, ir as ORK_LAYOUT, it as replayLoopAnswers, l as planUpgrade, ln as linkTools, mn as catalogAgent, n as resolveBase, nn as serveRun, nt as resumable, on as planAgentMigration, or as firstLine, ot as detachRun, pn as deleteAgent, q as requestStop, qt as fingerprint, rn as socketPath, rr as AGENT_TOOL_LAYOUTS, rt as createReplay, sn as applySteps, st as followEvents, t as createWorkspace, tt as detachResume, u as releaseNotes, un as toolLinks, ut as planNodeSession, v as triggersReport, vn as inRepoPlace, vt as runTree, wn as shownPath, wt as walkSummary, xn as placeFor, yn as newProjectId, z as endLinksOf, zt as FEEDBACK_SEVERITIES } from "./src-DHvWU4tX.mjs";
+import { C as feedbackActions, S as placeOf, _ as previewPost, b as acceptItem, c as checkDue, d as pendingNotice, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, n as ORK_VERSION, o as updateSwitchOff, p as refreshUpdateCache, r as isSwitchedOn, s as runInstall, t as ORK_NAME, u as newerVersion$1, v as checkNote, w as openFixRun, y as recordNote } from "./__build_info__-DdTVd2p5.mjs";
+import { i as builtinWorkflowFile, n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-B81wCZQg.mjs";
+import { n as newRunId, t as findRun } from "./find-BKW-uGey.mjs";
+import { a as write, c as openStore, i as style, l as storePath, n as cost, o as writeErr, s as nodeOf, t as confirm } from "./output-B1V6ZJSx.mjs";
+import { n as listOrkWorktrees, t as createdWorktrees } from "./list-C7UEgmtd.mjs";
+import { a as planClean, t as applyClean } from "./clean-NnboOuz6.mjs";
+import { c as subcommandsOf, i as argsOf, n as groupedEntries, o as publicArgs, s as resolved, t as groupOf } from "./help-groups-BwYoAWsh.mjs";
+import { a as formatRunEvent, i as formatEvent, n as formatRuns, o as createTerminalHuman, r as formatTree, t as ago } from "./format-CmTlTOjT.mjs";
+import { c as registeredProjects, i as refusedBuiltin, n as WORKFLOW_SUFFIX, o as workflowArg, s as projectAt, t as WORKFLOW_DIR } from "./workflows-CiM7S3l0.mjs";
+import { a as validate, c as warningLines, i as loadWorkflow, o as validateFile, r as formatReport, s as walkLoaded, t as context } from "./context-DO3sBy9v.mjs";
+import { i as runLimits, r as limitsRefusal, t as chatNotice } from "./limits-JCve2QpI.mjs";
+import { _ as resultOf, a as builtinExecutors, d as maskedEnv, f as maskedNamesOfRun, g as clearOutputFiles, h as sessionEnv, i as onPath, l as clearStateFiles, m as runScrubber, n as missingProgramMessage, r as missingPrograms, t as envProblems } from "./src-C38BPzit.mjs";
+import { i as decideRefusal, n as chatRefusal } from "./in-a-run-BPXX09Bs.mjs";
 import path from "node:path";
 import { stringify } from "yaml";
 import { z } from "zod";
@@ -20,7 +21,38 @@ import { createHash } from "node:crypto";
 import { homedir } from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { setTimeout } from "node:timers/promises";
+import { defineCommand, renderUsage, runMain } from "citty";
+import { createInterface } from "node:readline/promises";
 import { styleText } from "node:util";
+// ../integrations/src/ready.ts
+/**
+* @file Which Claude driver is ready on this machine: each driver's own check
+*   (what `ork doctor` shows), and the one a run takes for the nodes that name
+*   no driver, so a committed workflow never carries one person's login.
+*/
+/** Each registered Claude driver's own check, in registry order. */
+const driverChecks = (run, env) => Promise.all(CLAUDE_DRIVERS.map(async (driver) => ({
+	id: driver.id,
+	result: await driver.doctor(run, env)
+})));
+/**
+* The driver ready here: the one whose check passes; with more than one,
+* {@link PREFERRED_DRIVER}; with none, each driver's hint.
+*/
+const readyDriver = (checks) => {
+	const ready = checks.filter(({ result }) => result.status === "ok");
+	const pick = ready.find(({ id }) => id === "cli") ?? ready.at(0);
+	if (pick === void 0) return {
+		ok: false,
+		hints: checks.flatMap(({ result }) => result.hint === void 0 ? [] : [result.hint])
+	};
+	return {
+		ok: true,
+		driver: pick.id,
+		detail: pick.result.detail,
+		ready: ready.length
+	};
+};
 // ../core/src/control/queue.ts
 const PERMISSION_OPTIONS = [{
 	id: "allow",
@@ -30,6 +62,8 @@ const PERMISSION_OPTIONS = [{
 	label: "Deny"
 }];
 const DENIED = "The user did not allow this tool.";
+/** The deny message a session gets, with the person's words when given. */
+const deniedMessage = (note) => note === void 0 ? DENIED : `${DENIED} They said: ${note}`;
 /** At most `max` characters of a tool's input, for the decision's context. */
 const inputPreview = (input, max = 400) => {
 	const json = JSON.stringify(input);
@@ -56,22 +90,30 @@ const createDecisionQueue = (options) => {
 			options: record.options
 		};
 		if (record.recommended !== void 0) event.recommended = record.recommended;
+		if (record.owner !== void 0) event.owner = record.owner;
 		emit(event);
 		const { promise, resolve, reject } = Promise.withResolvers();
 		const settled = new AbortController();
-		const finish = (answer, by) => {
+		/** `note` is the stored one: masked, and absent when blank. */
+		const finish = (answer, by, note) => {
 			if (settled.signal.aborted) return;
 			settled.abort();
-			emit({
+			const answered = {
 				type: "decision.answered",
 				node: open.node,
 				decision: id,
 				answer,
 				by
-			});
-			resolve({
+			};
+			if (note !== void 0) answered.note = note;
+			emit(answered);
+			resolve(note === void 0 ? {
 				answer,
 				by
+			} : {
+				answer,
+				by,
+				note
 			});
 		};
 		const withdraw = () => {
@@ -90,13 +132,13 @@ const createDecisionQueue = (options) => {
 		const fromStore = async () => {
 			try {
 				const closed = await options.waitFor(id, settled.signal);
-				if (closed.status === "answered" && closed.answer !== void 0) finish(closed.answer, closed.answeredBy ?? "decide");
+				if (closed.status === "answered" && closed.answer !== void 0) finish(closed.answer, closed.answeredBy ?? "decide", closed.note);
 			} catch {}
 		};
 		const fromTerminal = async (ask) => {
 			try {
-				const answer = await ask(settled.signal);
-				if (store.answerDecision(id, answer, "terminal")) finish(answer, "terminal");
+				const { answer, note } = await ask(settled.signal);
+				if (store.answerDecision(id, answer, "terminal", note)) finish(answer, "terminal", store.decision(id)?.note);
 			} catch {}
 		};
 		fromStore();
@@ -113,31 +155,92 @@ const createDecisionQueue = (options) => {
 			};
 			if (question.recommended !== void 0) open.recommended = question.recommended;
 			if (question.context !== void 0) open.context = question.context;
+			if (question.owner !== void 0) open.owner = question.owner;
 			const { local } = options;
-			return decide(open, local === void 0 ? void 0 : (signal) => local.ask({
-				...question,
-				signal
-			}), question.signal).then(({ answer }) => answer);
+			return decide(open, local === void 0 ? void 0 : (signal) => {
+				let note;
+				return local.ask({
+					...question,
+					signal,
+					onNote: (given) => {
+						note = given;
+					}
+				}).then((answer) => note === void 0 ? { answer } : {
+					answer,
+					note
+				});
+			}, question.signal).then(({ answer, note }) => {
+				if (note !== void 0) question.onNote?.(note);
+				return answer;
+			});
+		},
+		settled: (question) => {
+			count += 1;
+			const id = `${runId}-${String(count)}`;
+			const { owner } = question;
+			const record = store.openDecision({
+				id,
+				runId,
+				node: question.nodeId,
+				kind: "question",
+				question: question.question,
+				options: question.options,
+				owner,
+				...question.recommended === void 0 ? {} : { recommended: question.recommended },
+				...question.context === void 0 ? {} : { context: question.context }
+			});
+			emit({
+				type: "decision.opened",
+				node: record.node,
+				decision: id,
+				kind: "question",
+				question: record.question,
+				options: record.options,
+				owner,
+				...record.recommended === void 0 ? {} : { recommended: record.recommended }
+			});
+			store.answerDecision(id, question.answer, "owner", question.note);
+			const note = store.decision(id)?.note;
+			emit({
+				type: "decision.answered",
+				node: record.node,
+				decision: id,
+				answer: question.answer,
+				by: "owner",
+				owner,
+				...note === void 0 ? {} : { note }
+			});
 		},
 		permit: async (request) => {
 			const { local } = options;
 			let localMessage = DENIED;
-			const { answer } = await decide({
+			const { answer, note } = await decide({
 				node: request.nodeId,
 				kind: "permission",
 				question: `Allow ${request.toolName}?`,
 				options: PERMISSION_OPTIONS,
 				context: inputPreview(request.input)
-			}, local === void 0 ? void 0 : (signal) => local.permit({
-				...request,
-				signal
-			}).then((result) => {
-				if (!result.allow) localMessage = result.message;
-				return result.allow ? "allow" : "deny";
-			}));
+			}, local === void 0 ? void 0 : (signal) => {
+				let said;
+				return local.permit({
+					...request,
+					signal,
+					onNote: (given) => {
+						said = given;
+					}
+				}).then((result) => {
+					if (!result.allow) localMessage = result.message;
+					const choice = result.allow ? "allow" : "deny";
+					return said === void 0 ? { answer: choice } : {
+						answer: choice,
+						note: said
+					};
+				});
+			});
+			if (note !== void 0) request.onNote?.(note);
 			return answer === "allow" ? { allow: true } : {
 				allow: false,
-				message: localMessage
+				message: note === void 0 ? localMessage : deniedMessage(note)
 			};
 		}
 	};
@@ -343,7 +446,7 @@ const createSignals = (options = {}) => {
 		}
 		if (event.type !== "node.event") return;
 		const inner = event.event;
-		if (inner.type === "session.started") sessions.set(event.id, {
+		if (inner.type === "session.started" && inner.fork !== true) sessions.set(event.id, {
 			model: inner.model,
 			...inner.driver === void 0 ? {} : { driver: inner.driver }
 		});
@@ -530,10 +633,357 @@ const appendRecorder = (store, runId, runDir) => {
 		return stored;
 	};
 };
-/** Begins `run` in the store; `runDir` gets the JSONL copy. */
-const createRecorder = (store, run, runDir) => {
-	store.begin(run);
-	return appendRecorder(store, run.id, runDir);
+/** Begins `run` in the store; `runDir` gets the JSONL copy. */
+const createRecorder = (store, run, runDir) => {
+	store.begin(run);
+	return appendRecorder(store, run.id, runDir);
+};
+// src/help-root.ts
+/** Where the user docs start. */
+const DOCS_URL = "https://github.com/mimshins/ork/blob/main/docs/README.md";
+const rowOf = (entry) => {
+	const short = groupOf(entry.name)?.short ?? entry.description;
+	const alias = entry.aliases.length === 0 ? "" : ` (alias: ${entry.aliases.join(", ")})`;
+	return {
+		name: entry.name,
+		line: `${short}${alias}`
+	};
+};
+const groupedRows = (entries) => groupedEntries(entries).map((group) => ({
+	title: group.title,
+	rows: group.entries.map((entry) => rowOf(entry))
+}));
+/** A group's title, its rows with names `width` wide, and a blank line. */
+const groupLines = (group, width) => [style("bold", `${group.title}:`)].concat(group.rows.map((row) => `  ${style("cyan", row.name.padEnd(width))}  ${row.line}`), [""]);
+/** The root command's help text. */
+const renderRootHelp = async (cmd) => {
+	const meta = cmd.meta === void 0 ? {} : await resolved(cmd.meta);
+	const name = meta.name ?? "ork";
+	const groups = groupedRows(await subcommandsOf(cmd));
+	const width = Math.max(...groups.flatMap((g) => g.rows.map((r) => r.name.length)));
+	return [
+		`${meta.description ?? ""}.`,
+		`Docs: ${DOCS_URL}`,
+		"",
+		...groups.flatMap((group) => groupLines(group, width)),
+		`Usage: ${name} <command> [flags]`,
+		"",
+		`Use "${name} <command> --help" for more about a command.`,
+		`${name} v${meta.version ?? ""}`
+	].join("\n");
+};
+// src/help.ts
+/**
+* @file `ork <command> --help`: citty's usage, without the flags Ork passes to
+*   itself (the command tree's filter), and with `<command> [flags]` in place
+*   of citty's `a|b|c` list for a command with subcommands. The root command's
+*   help is grouped (`help-root.ts`).
+*/
+/** Citty's `a|b|c` usage list of a command's shown subcommands. */
+const choicesOf = async (cmd) => (await subcommandsOf(cmd)).flatMap((entry) => entry.hidden ? [] : [entry.name].concat(entry.aliases)).join("|");
+/** The usage of `cmd` (under `parent`), as people see it. */
+const renderHelp = async (cmd, parent) => {
+	const shown = {
+		args: publicArgs(await argsOf(cmd)),
+		...cmd.meta === void 0 ? {} : { meta: cmd.meta },
+		...cmd.subCommands === void 0 ? {} : { subCommands: cmd.subCommands }
+	};
+	if (cmd.subCommands !== void 0 && parent === void 0) return renderRootHelp(shown);
+	const above = parent?.meta === void 0 ? void 0 : { meta: parent.meta };
+	const usage = await renderUsage(shown, above);
+	if (cmd.subCommands === void 0) return usage;
+	const choices = await choicesOf(shown);
+	return usage.replace(` [OPTIONS] ${choices}`, ` <command> [flags]`).replace(` ${choices}`, ` <command> [flags]`);
+};
+/** Prints {@link renderHelp}'s usage, as citty prints its own. */
+const showHelp = async (cmd, parent) => {
+	process.stdout.write(`${await renderHelp(cmd, parent)}\n\n`);
+};
+// src/update/notify.ts
+/**
+* @file The new-version notice (ADR-038). At most once a day a command starts a
+*   detached copy of `ork` that asks the npm registry for the latest version
+*   and records it in `~/.ork/update-check.json`, so no command waits on the
+*   network; a later command, when a newer version is known, ends with one line
+*   on stderr (once a day). Off in CI, without a terminal, with `--json`, and
+*   with `ORK_NO_UPDATE_CHECK=1` or `NO_UPDATE_NOTIFIER=1`.
+*/
+/** Set in the background copy of `ork` that only runs the check. */
+const UPDATE_CHILD_ENV = "ORK_UPDATE_CHECK_CHILD";
+/**
+* Why the automatic check is off for this command, or `null` when it is on: the
+* environment's switches (core's, which `ork ui` reads too), then where a
+* notice on stderr would go.
+*/
+const updateCheckOff = (env, argv, terminal) => {
+	const switched = updateSwitchOff(env);
+	if (switched !== null) return switched === "CI" ? "in CI" : "turned off";
+	if (isSwitchedOn(env["ORK_DETACHED"]) || !terminal) return "no terminal";
+	if (argv.includes("--json")) return "JSON output";
+	if (argv[0] === "upgrade") return "ork upgrade checks for itself";
+	if (argv[0] === "ui" && argv.includes("--serve")) return "ork ui's server checks for itself";
+	return null;
+};
+/** The notice's text. */
+const updateNotice = (latest, current) => `Ork ${latest} is out (you have ${current}). Upgrade with: ork upgrade`;
+/**
+* Starts the background check when one is due. Records the attempt first, so
+* commands started in the next moments do not start one too.
+*/
+const startUpdateCheck = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
+	try {
+		const cache = readUpdateCache(file);
+		if (!checkDue(cache, now)) return;
+		writeUpdateCache(file, {
+			...cache,
+			checkedAt: now.toISOString()
+		});
+		const child = spawn(process.execPath, [...process.execArgv, process.argv[1] ?? ""], {
+			detached: true,
+			stdio: "ignore",
+			env: {
+				...process.env,
+				[UPDATE_CHILD_ENV]: "1"
+			}
+		});
+		child.on("error", () => {});
+		child.unref();
+	} catch {}
+};
+/** The background copy's whole job: ask the registry, record the answer. */
+const runUpdateChild = async () => {
+	const registry = registryOf(process.env);
+	await refreshUpdateCache(updateCachePath(), ORK_NAME, /* @__PURE__ */ new Date(), {
+		current: ORK_VERSION,
+		...registry === void 0 ? {} : { registry }
+	});
+};
+/** Prints the notice when a newer version is known and not told today. */
+const showUpdateNotice = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
+	try {
+		const cache = readUpdateCache(file);
+		const latest = pendingNotice(cache, ORK_VERSION, now);
+		if (cache === null || latest === null) return;
+		const text = updateNotice(latest, ORK_VERSION);
+		process.stderr.write(`\n${styleText("yellow", text, { stream: process.stderr })}\n`);
+		writeUpdateCache(file, {
+			...cache,
+			notified: {
+				version: latest,
+				at: now.toISOString()
+			}
+		});
+	} catch {}
+};
+// src/update/upgrade.ts
+/**
+* @file `ork doctor`'s line for Ork itself (ADR-038): the running version
+*   against the last update check, read from the record without asking the
+*   network. What `ork upgrade` does is core's (`planUpgrade`, `runInstall`),
+*   shared with the server behind `ork ui`.
+*/
+/** `ork doctor`'s line for Ork itself, from the last check. */
+const versionCheck = (current, cache, checksOff) => {
+	const newer = newerVersion$1(cache, current);
+	if (newer !== null) return {
+		name: "ork",
+		status: "warn",
+		detail: `${current}; ${newer} is out`,
+		hint: "Run ork upgrade."
+	};
+	return {
+		name: "ork",
+		status: "ok",
+		detail: `${current} (${cache?.latest === void 0 ? checksOff ? "update check off" : "not checked for updates yet" : `the latest as of ${cache.checkedAt.slice(0, 10)}`})`
+	};
+};
+// src/doctor/checks.ts
+/**
+* @file The checks behind `ork doctor`: Ork's own version against the last
+*   update check, each tool's presence and login status (the drivers' own
+*   checks, which `ork run` also reads to pick the one ready), and whether a
+*   run's socket path fits, through an injectable `exec` so tests need no real
+*   tools. Never prints a token or an account.
+*/
+const TIMEOUT_MS = 15e3;
+const exec = (program, args) => new Promise((resolve) => {
+	execFile(program, args, {
+		timeout: TIMEOUT_MS,
+		encoding: "utf8"
+	}, (error, stdout) => {
+		resolve({
+			ok: error === null,
+			stdout
+		});
+	});
+});
+/** Ork's own version, against the last update check (no network). */
+const orkCheck = () => versionCheck(ORK_VERSION, readUpdateCache(updateCachePath()), updateCheckOff(process.env, [], true) !== null);
+const MIN_NODE = [24, 20];
+const checkNode = (version) => {
+	const [major = 0, minor = 0] = version.split(".").map(Number);
+	const [minMajor, minMinor] = MIN_NODE;
+	return major > minMajor || major === minMajor && minor >= minMinor ? {
+		name: "node",
+		status: "ok",
+		detail: `v${version}`
+	} : {
+		name: "node",
+		status: "fail",
+		detail: `v${version}`,
+		hint: `Ork needs Node ${MIN_NODE.join(".")} or later.`
+	};
+};
+const checkGit = async (run) => {
+	const version = await run("git", ["--version"]);
+	if (!version.ok) return [{
+		name: "git",
+		status: "fail",
+		detail: "not found",
+		hint: "Install git; Ork gives each writing node its own worktree."
+	}];
+	const inside = await run("git", ["rev-parse", "--is-inside-work-tree"]);
+	return [{
+		name: "git",
+		status: "ok",
+		detail: firstLine(version.stdout)
+	}, inside.ok ? {
+		name: "git repo",
+		status: "ok",
+		detail: "inside a work tree"
+	} : {
+		name: "git repo",
+		status: "warn",
+		detail: "not a git repository",
+		hint: "Run Ork inside a git repository so nodes can use worktrees."
+	}];
+};
+/**
+* Runs every check: Node and git, then every registered Claude driver and
+* integration (ADR-022). Node, git, and at least one driver are required;
+* integrations are optional.
+*/
+const runChecks = async (run, env, nodeVersion) => {
+	const [git, checked, tools] = await Promise.all([
+		checkGit(run),
+		driverChecks(run, env),
+		Promise.all(INTEGRATIONS.flatMap((i) => i.doctor === void 0 ? [] : [i.doctor(run, env)]))
+	]);
+	const drivers = checked.map(({ result }) => result);
+	const results = [
+		checkNode(nodeVersion),
+		...git,
+		...drivers,
+		...tools
+	];
+	return {
+		results,
+		ok: drivers.some((d) => d.status === "ok") && !results.some((r) => r.status === "fail")
+	};
+};
+/**
+* Whether a run's socket fits under `~` (L38). Past the limit a run can't
+* listen, and nothing else says so: answers, commands and followers fall back
+* to the store, a second at a time. `home` is the user's `~`.
+*/
+const socketCheck = (home, platform) => {
+	const { bytes, max } = socketRoom(home, platform);
+	if (max === void 0 || bytes <= max) return {
+		name: "sockets",
+		status: "ok",
+		detail: max === void 0 ? "not Unix sockets here" : `${String(bytes)} of ${String(max)} bytes`
+	};
+	return {
+		name: "sockets",
+		status: "warn",
+		detail: `a run's socket path is ${String(bytes)} bytes, past the ${String(max)} this system allows`,
+		hint: "Runs still work, but answers, commands and `ork logs --follow` wait up to a second for each, as they read the store instead. A shorter home folder path fixes it."
+	};
+};
+/**
+* What it says of triggers (RFC-011): a long-lived process can die quietly, so
+* a live trigger that hasn't looked when it should have is worth saying. `home`
+* is the user's `~` (tests pass a folder).
+*/
+const triggerChecks = (home) => {
+	const store = openStore(storePath(home));
+	try {
+		const report = triggersReport(store, store.projects(), home);
+		const broken = report.broken.map(({ file, message }) => ({
+			name: "triggers",
+			status: "warn",
+			detail: `${file}: ${message}`,
+			hint: "Its triggers are off until it can be read."
+		}));
+		const live = report.triggers.filter(({ standing }) => standing === "live");
+		if (live.length === 0) return broken;
+		const late = lateTriggers(report, /* @__PURE__ */ new Date());
+		if (late.length === 0) return [...broken, {
+			name: "ork watch",
+			status: "ok",
+			detail: `${String(live.length)} trigger(s) looking`
+		}];
+		return [...broken, {
+			name: "ork watch",
+			status: "warn",
+			detail: `not looking: ${late.map(({ trigger }) => trigger).join(", ")}`,
+			hint: report.pid === void 0 ? "Start it with `ork watch --detach`." : "See `ork watch --status`."
+		}];
+	} finally {
+		store.close();
+	}
+};
+// src/run/ready-driver.ts
+/**
+* @file The driver a run takes for the session nodes that name none (core's
+*   `driver.ts` has the whole rule): the one `ork doctor`'s own checks find
+*   ready on this machine, said in one line. With none ready, the run stops
+*   before any session starts, with the hints `ork doctor` gives. A resumed run
+*   keeps the driver it recorded.
+*/
+/** The real checks: the tools on this machine and its environment. */
+const checksHere = () => driverChecks(exec, process.env);
+const subject = (names, all) => {
+	if (all) return "No driver is named, so the run uses";
+	const [only] = names;
+	return names.length === 1 && only !== void 0 ? `${only} names no driver, so it uses` : `${names.join(", ")} name no driver, so they use`;
+};
+/**
+* The driver for `names`, the session nodes that name none, from `checks`.
+* `all` says whether they are every session node of the run.
+*/
+const chooseReadyDriver = (names, all, checks) => {
+	const ready = readyDriver(checks);
+	if (!ready.ok) return {
+		ok: false,
+		lines: [
+			`No Claude driver is ready here, and ${names.join(", ")} ${names.length === 1 ? "names" : "name"} none.`,
+			...ready.hints,
+			"See `ork doctor`."
+		]
+	};
+	const why = ready.ready === 1 ? `the one ready here (${ready.detail})` : `more than one is ready, and a run takes ${ready.driver} first`;
+	return {
+		ok: true,
+		driver: ready.driver,
+		line: `${subject(names, all)} the ${ready.driver} driver: ${why}.`
+	};
+};
+/**
+* What a run takes for its session nodes that name no driver: nothing when
+* `--driver` overrides them all or each names one; the driver a resumed run
+* recorded; otherwise the one ready here.
+*/
+const runReadyDriver = async (workflow, options) => {
+	if (options.override !== void 0) return { ok: true };
+	const names = namingNoDriver(workflow);
+	if (names.length === 0) return { ok: true };
+	if (options.recorded !== void 0) return {
+		ok: true,
+		driver: options.recorded
+	};
+	const sessions = Object.values(workflow.nodes).filter((node) => node.type === "claude.leader" || node.type === "claude.worker").length;
+	return chooseReadyDriver(names, names.length === sessions, await (options.checks ?? checksHere)());
 };
 // src/runs/chat.ts
 /**
@@ -581,6 +1031,12 @@ const resumeChat = async (options) => {
 		...template === void 0 ? {} : { template }
 	});
 	if (!plan.ok) return plan.error;
+	let driver = options.driver ?? session.driver ?? plan.driver;
+	if (driver === void 0) {
+		const ready = readyDriver(await (options.driverChecks ?? checksHere)());
+		if (!ready.ok) return ["No Claude driver is ready here.", ...ready.hints].join(" ");
+		driver = ready.driver;
+	}
 	const record = appendRecorder(store, run.id, runDir);
 	record({
 		type: "user.message",
@@ -588,7 +1044,7 @@ const resumeChat = async (options) => {
 		body: options.body,
 		delivered: "resumed"
 	});
-	const started = (await options.runtime(options.driver ?? session.driver ?? plan.driver)).start({
+	const started = (await options.runtime(driver)).start({
 		...plan.spec,
 		resume: session.sessionId,
 		prompt: options.body
@@ -705,6 +1161,15 @@ const runNode = async (options) => {
 		pluginDir: path.join(runDir, "plugins", options.nodeId)
 	});
 	if (!plan.ok) return failed([plan.error]);
+	const named = sessionDriver({
+		override: options.driver,
+		named: plan.driver
+	});
+	const ready = named === void 0 ? chooseReadyDriver([options.nodeId], true, await (options.driverChecks ?? checksHere)()) : null;
+	if (ready?.ok === false) return failed(ready.lines);
+	if (ready?.line !== void 0) options.err(ready.line);
+	const driver = named ?? ready?.driver;
+	if (driver === void 0) return failed(["No Claude driver is ready here."]);
 	const planned = workflow.nodes[options.nodeId];
 	if (planned !== void 0 && "notify" in planned && planned.notify) options.err(`${style(["yellow", "bold"], "warning")} ${options.nodeId}'s notify: does nothing here: a run of one node has no message bus.`);
 	const skipped = planned === void 0 ? [] : [...beforeOf(planned, workflow.defaults) === void 0 ? [] : ["before"], ..."verify" in planned && planned.verify !== void 0 ? ["verify"] : []];
@@ -766,7 +1231,7 @@ const runNode = async (options) => {
 		nodeType,
 		round: 1
 	});
-	const session = (await options.runtime(options.driver ?? plan.driver)).start(plan.spec, {
+	const session = (await options.runtime(driver)).start(plan.spec, {
 		human: control.human,
 		...graph === null ? {} : { feedback: createFeedback({
 			graph,
@@ -813,7 +1278,9 @@ const runNode = async (options) => {
 				...result.error === void 0 ? {} : { error: result.error }
 			}],
 			reasons: result.error === void 0 ? [] : [`${id}: ${result.error}`],
-			worktrees: []
+			worktrees: [],
+			skipped: 0,
+			failuresHandled: 0
 		}
 	});
 	await control.close();
@@ -1009,6 +1476,16 @@ const preflight = async (options, given) => {
 		ok: false,
 		lines: refused
 	};
+	const driver = await runReadyDriver(given.effective, {
+		override: options.driver,
+		recorded: options.resume?.settings.readyDriver,
+		checks: options.driverChecks
+	});
+	if (!driver.ok) return {
+		ok: false,
+		lines: driver.lines
+	};
+	if (driver.line !== void 0) options.err(driver.line);
 	const checkout = await prepareCheckout(workflow, {
 		...options,
 		cwd: place.root
@@ -1019,7 +1496,8 @@ const preflight = async (options, given) => {
 	};
 	return {
 		...checkout,
-		limits: limits.now
+		limits: limits.now,
+		...driver.driver === void 0 ? {} : { readyDriver: driver.driver }
 	};
 };
 // src/run/workflow.ts
@@ -1059,6 +1537,7 @@ const runWorkflowFile = async (options) => {
 	const projects = options.store.projects();
 	const ready = await preflight(options, {
 		workflow,
+		effective: graph.workflow,
 		place,
 		projects,
 		inputs: inputs.inputs
@@ -1119,6 +1598,7 @@ const runWorkflowFile = async (options) => {
 		maskedNames
 	};
 	if (options.driver !== void 0) executorOptions.driver = options.driver;
+	if (ready.readyDriver !== void 0) executorOptions.readyDriver = ready.readyDriver;
 	if (options.tools !== void 0) executorOptions.tools = options.tools;
 	const script = process.argv[1];
 	if (script !== void 0 && onPath(script)) executorOptions.orkBin = script;
@@ -1149,6 +1629,7 @@ const runWorkflowFile = async (options) => {
 		settings: {
 			inPlace: options.inPlace,
 			...options.driver === void 0 ? {} : { driver: options.driver },
+			...ready.readyDriver === void 0 ? {} : { readyDriver: ready.readyDriver },
 			...ports.settings
 		},
 		...ports.relay === void 0 ? {} : { relay: ports.relay },
@@ -1191,7 +1672,7 @@ const flagValues = (rawArgs, flag) => {
 };
 const isDriver = (value) => CLAUDE_DRIVERS.some((d) => d.id === value);
 /** Loads the drivers only when a run starts, so other commands stay fast. */
-const loadRuntime = async (driver) => (await import("./src-BHnxpJyH.mjs")).createRuntime(driver, sessionEnv(process.env));
+const loadRuntime = async (driver) => (await import("./src-Dyz_Gy1q.mjs")).createRuntime(driver, sessionEnv(process.env));
 /**
 * Ctrl-C asks the run to stop, and so does a terminal closing or a polite kill,
 * so that the run ends tidily and leaves no result unscrubbed.
@@ -1514,8 +1995,9 @@ const chat = defineCommand({
 /**
 * @file `ork decide`: answer a live run's open decisions from any terminal (it
 *   writes to the store, then wakes the run on its socket; specs/messaging.md).
-*   With `--id` and `--choose`, `--note` and `--rating` also note how the
-*   decision's node went, as the run's feedback (specs/feedback.md).
+*   `--say` gives the answer a note, which goes to the run with it. With `--id`
+*   and `--choose`, `--note` and `--rating` instead note how the decision's
+*   node went, as the run's feedback (specs/feedback.md).
 */
 const failed$2 = (message) => {
 	writeErr(message);
@@ -1548,8 +2030,13 @@ const noteProblem = (note, rating) => {
 	}, "--");
 	return checked.ok ? void 0 : checked.error;
 };
+/** What the answer said, as stored (masked), after the answer's line. */
+const saidLine = (store, id) => {
+	const note = store.decision(id)?.note;
+	return note === void 0 ? "" : style("dim", ` · said: ${note}`);
+};
 /** One line per open decision, for `--list`. */
-const formatDecisions = (decisions) => decisions.length === 0 ? ["No open decisions."] : decisions.map((d) => `${style("bold", d.id)}  ${style("cyan", d.node)}  ${d.question} ${style("dim", `[${d.options.map((o) => o.id === d.recommended ? `${o.id}*` : o.id).join(", ")}]`)}`);
+const formatDecisions = (decisions) => decisions.length === 0 ? ["No open decisions."] : decisions.map((d) => `${style("bold", d.id)}  ${style("cyan", d.node)}${d.owner === void 0 ? "" : style("dim", ` via ${d.owner}`)}  ${d.question} ${style("dim", `[${d.options.map((o) => o.id === d.recommended ? `${o.id}*` : o.id).join(", ")}]`)}`);
 const decide = defineCommand({
 	meta: {
 		name: "decide",
@@ -1584,6 +2071,10 @@ const decide = defineCommand({
 			type: "string",
 			description: "…with this option"
 		},
+		say: {
+			type: "string",
+			description: "…and say this with it: the answer's note, which goes to the run"
+		},
 		note: {
 			type: "string",
 			description: "…and note how its node went; the note joins the run's feedback"
@@ -1616,12 +2107,12 @@ const decide = defineCommand({
 					failed$2(problem);
 					return;
 				}
-				const answered = await answerDecision(store, args.id, args.choose);
+				const answered = await answerDecision(store, args.id, args.choose, void 0, "decide", args.say);
 				if (!answered.ok) {
 					failed$2(answered.error);
 					return;
 				}
-				write(`${style("green", "✓")} ${args.id}: ${args.choose}`);
+				write(`${style("green", "✓")} ${args.id}: ${args.choose}${saidLine(store, args.id)}`);
 				const noted = noteDecision(store, args.id, args.note, args.rating);
 				if (noted === void 0) return;
 				if (noted.ok) write(`${style("green", "✓")} noted in item ${noted.item}`);
@@ -1632,6 +2123,10 @@ const decide = defineCommand({
 				failed$2("--note and --rating go with --id and --choose.");
 				return;
 			}
+			if (args.say !== void 0) {
+				failed$2("--say goes with --id and --choose; answering here asks for a note after each choice.");
+				return;
+			}
 			const filter = {};
 			if (args.run !== void 0 && args.run !== "") {
 				const found = findRun(store, args.run, process.cwd());
@@ -1659,9 +2154,13 @@ const decide = defineCommand({
 				};
 				if (d.recommended !== void 0) question.recommended = d.recommended;
 				if (d.context !== void 0) question.context = d.context;
+				let note;
+				question.onNote = (given) => {
+					note = given;
+				};
 				const choice = await human.ask(question);
-				const answered = await answerDecision(store, d.id, choice);
-				write(answered.ok ? `${style("green", "✓")} ${d.id}: ${choice}\n` : `${style("yellow", "!")} ${answered.error}\n`);
+				const answered = await answerDecision(store, d.id, choice, void 0, "decide", note);
+				write(answered.ok ? `${style("green", "✓")} ${d.id}: ${choice}${saidLine(store, d.id)}\n` : `${style("yellow", "!")} ${answered.error}\n`);
 			}
 		} finally {
 			human?.close();
@@ -1732,7 +2231,7 @@ const stop = defineCommand({
 const resume = defineCommand({
 	meta: {
 		name: "resume",
-		description: "Continue a stopped or crashed run: finished nodes keep their results"
+		description: "Continue a run that didn't succeed (stopped, failed or crashed): finished nodes keep their results"
 	},
 	args: {
 		run: {
@@ -1821,216 +2320,6 @@ const resume = defineCommand({
 		}
 	}
 });
-// src/update/notify.ts
-/**
-* @file The new-version notice (ADR-038). At most once a day a command starts a
-*   detached copy of `ork` that asks the npm registry for the latest version
-*   and records it in `~/.ork/update-check.json`, so no command waits on the
-*   network; a later command, when a newer version is known, ends with one line
-*   on stderr (once a day). Off in CI, without a terminal, with `--json`, and
-*   with `ORK_NO_UPDATE_CHECK=1` or `NO_UPDATE_NOTIFIER=1`.
-*/
-/** Set in the background copy of `ork` that only runs the check. */
-const UPDATE_CHILD_ENV = "ORK_UPDATE_CHECK_CHILD";
-/**
-* Why the automatic check is off for this command, or `null` when it is on: the
-* environment's switches (core's, which `ork ui` reads too), then where a
-* notice on stderr would go.
-*/
-const updateCheckOff = (env, argv, terminal) => {
-	const switched = updateSwitchOff(env);
-	if (switched !== null) return switched === "CI" ? "in CI" : "turned off";
-	if (isSwitchedOn(env["ORK_DETACHED"]) || !terminal) return "no terminal";
-	if (argv.includes("--json")) return "JSON output";
-	if (argv[0] === "upgrade") return "ork upgrade checks for itself";
-	if (argv[0] === "ui" && argv.includes("--serve")) return "ork ui's server checks for itself";
-	return null;
-};
-/** The notice's text. */
-const updateNotice = (latest, current) => `Ork ${latest} is out (you have ${current}). Upgrade with: ork upgrade`;
-/**
-* Starts the background check when one is due. Records the attempt first, so
-* commands started in the next moments do not start one too.
-*/
-const startUpdateCheck = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
-	try {
-		const cache = readUpdateCache(file);
-		if (!checkDue(cache, now)) return;
-		writeUpdateCache(file, {
-			...cache,
-			checkedAt: now.toISOString()
-		});
-		const child = spawn(process.execPath, [...process.execArgv, process.argv[1] ?? ""], {
-			detached: true,
-			stdio: "ignore",
-			env: {
-				...process.env,
-				[UPDATE_CHILD_ENV]: "1"
-			}
-		});
-		child.on("error", () => {});
-		child.unref();
-	} catch {}
-};
-/** The background copy's whole job: ask the registry, record the answer. */
-const runUpdateChild = async () => {
-	const registry = registryOf(process.env);
-	await refreshUpdateCache(updateCachePath(), ORK_NAME, /* @__PURE__ */ new Date(), registry === void 0 ? {} : { registry });
-};
-/** Prints the notice when a newer version is known and not told today. */
-const showUpdateNotice = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
-	try {
-		const cache = readUpdateCache(file);
-		const latest = pendingNotice(cache, ORK_VERSION, now);
-		if (cache === null || latest === null) return;
-		const text = updateNotice(latest, ORK_VERSION);
-		process.stderr.write(`\n${styleText("yellow", text, { stream: process.stderr })}\n`);
-		writeUpdateCache(file, {
-			...cache,
-			notified: {
-				version: latest,
-				at: now.toISOString()
-			}
-		});
-	} catch {}
-};
-// src/update/upgrade.ts
-/**
-* @file `ork doctor`'s line for Ork itself (ADR-038): the running version
-*   against the last update check, read from the record without asking the
-*   network. What `ork upgrade` does is core's (`planUpgrade`, `runInstall`),
-*   shared with the server behind `ork ui`.
-*/
-/** `ork doctor`'s line for Ork itself, from the last check. */
-const versionCheck = (current, cache, checksOff) => {
-	const newer = newerVersion(cache, current);
-	if (newer !== null) return {
-		name: "ork",
-		status: "warn",
-		detail: `${current}; ${newer} is out`,
-		hint: "Run ork upgrade."
-	};
-	return {
-		name: "ork",
-		status: "ok",
-		detail: `${current} (${cache?.latest === void 0 ? checksOff ? "update check off" : "not checked for updates yet" : `the latest as of ${cache.checkedAt.slice(0, 10)}`})`
-	};
-};
-// src/doctor/checks.ts
-/**
-* @file The checks behind `ork doctor`: Ork's own version against the last
-*   update check, and each tool's presence and login status, through an
-*   injectable `exec` so tests need no real tools. Never prints a token or an
-*   account.
-*/
-const TIMEOUT_MS = 15e3;
-const exec = (program, args) => new Promise((resolve) => {
-	execFile(program, args, {
-		timeout: TIMEOUT_MS,
-		encoding: "utf8"
-	}, (error, stdout) => {
-		resolve({
-			ok: error === null,
-			stdout
-		});
-	});
-});
-/** Ork's own version, against the last update check (no network). */
-const orkCheck = () => versionCheck(ORK_VERSION, readUpdateCache(updateCachePath()), updateCheckOff(process.env, [], true) !== null);
-const MIN_NODE = [24, 20];
-const checkNode = (version) => {
-	const [major = 0, minor = 0] = version.split(".").map(Number);
-	const [minMajor, minMinor] = MIN_NODE;
-	return major > minMajor || major === minMajor && minor >= minMinor ? {
-		name: "node",
-		status: "ok",
-		detail: `v${version}`
-	} : {
-		name: "node",
-		status: "fail",
-		detail: `v${version}`,
-		hint: `Ork needs Node ${MIN_NODE.join(".")} or later.`
-	};
-};
-const checkGit = async (run) => {
-	const version = await run("git", ["--version"]);
-	if (!version.ok) return [{
-		name: "git",
-		status: "fail",
-		detail: "not found",
-		hint: "Install git; Ork gives each writing node its own worktree."
-	}];
-	const inside = await run("git", ["rev-parse", "--is-inside-work-tree"]);
-	return [{
-		name: "git",
-		status: "ok",
-		detail: firstLine(version.stdout)
-	}, inside.ok ? {
-		name: "git repo",
-		status: "ok",
-		detail: "inside a work tree"
-	} : {
-		name: "git repo",
-		status: "warn",
-		detail: "not a git repository",
-		hint: "Run Ork inside a git repository so nodes can use worktrees."
-	}];
-};
-/**
-* Runs every check: Node and git, then every registered Claude driver and
-* integration (ADR-022). Node, git, and at least one driver are required;
-* integrations are optional.
-*/
-const runChecks = async (run, env, nodeVersion) => {
-	const [git, drivers, tools] = await Promise.all([
-		checkGit(run),
-		Promise.all(CLAUDE_DRIVERS.map((d) => d.doctor(run, env))),
-		Promise.all(INTEGRATIONS.flatMap((i) => i.doctor === void 0 ? [] : [i.doctor(run, env)]))
-	]);
-	const results = [
-		checkNode(nodeVersion),
-		...git,
-		...drivers,
-		...tools
-	];
-	return {
-		results,
-		ok: drivers.some((d) => d.status === "ok") && !results.some((r) => r.status === "fail")
-	};
-};
-/**
-* What it says of triggers (RFC-011): a long-lived process can die quietly, so
-* a live trigger that hasn't looked when it should have is worth saying. `home`
-* is the user's `~` (tests pass a folder).
-*/
-const triggerChecks = (home) => {
-	const store = openStore(storePath(home));
-	try {
-		const report = triggersReport(store, store.projects(), home);
-		const broken = report.broken.map(({ file, message }) => ({
-			name: "triggers",
-			status: "warn",
-			detail: `${file}: ${message}`,
-			hint: "Its triggers are off until it can be read."
-		}));
-		const live = report.triggers.filter(({ standing }) => standing === "live");
-		if (live.length === 0) return broken;
-		const late = lateTriggers(report, /* @__PURE__ */ new Date());
-		if (late.length === 0) return [...broken, {
-			name: "ork watch",
-			status: "ok",
-			detail: `${String(live.length)} trigger(s) looking`
-		}];
-		return [...broken, {
-			name: "ork watch",
-			status: "warn",
-			detail: `not looking: ${late.map(({ trigger }) => trigger).join(", ")}`,
-			hint: report.pid === void 0 ? "Start it with `ork watch --detach`." : "See `ork watch --status`."
-		}];
-	} finally {
-		store.close();
-	}
-};
 // src/project/ork-skills.ts
 /**
 * @file The Claude Code plugin's skills (`plugins/ork/skills/`) as text, by
@@ -2041,6 +2330,7 @@ const triggerChecks = (home) => {
 const ORK_SKILLS = {
 	principles: "---\nname: principles\ndescription: Use when deciding how to split work into an Ork workflow - which steps are programs, which are Claude sessions, where a person decides - so it costs less than doing it by hand and can't go wrong quietly.\n---\n\n# How Ork splits work\n\nOrk exists to do long jobs for less than doing them by hand, and safely. Four\nrules decide the shape of a workflow.\n\n## 1. A program for what a program can do\n\nA model turn is for judgment. Anything a program can decide, it should: run the\ntests, read a pull request's state, count what changed, wait for CI.\n\n- **A tool node** (`tool.shell`, `tool.git`, `tool.gh`, `tool.aws`) or an\n  **`mcp.call`** does it with no session. With `output: { format: json }`, its\n  answer routes the run: `when: \"json.state == 'OPEN'\"`.\n- **`verify:`** on a session runs a check before its report counts, so a session\n  can't claim success past failing tests. **`before:`** hands it what a program\n  found, so it doesn't spend turns finding it.\n- **`watch:`** waits on CI or a review with a program that looks every few\n  seconds; hours of waiting cost nothing.\n- **`notify:`** lets a program tell a running session what it found, with no\n  model turn to carry the news.\n\n## 2. Spend where it pays\n\n- A small model and low effort for a narrow task (`model: haiku`,\n  `effort: low`); the large ones where thinking pays.\n- `budgetUsd` on each session and on the run (`limits.budgetUsd`). A loop of\n  sessions without a budget or `limits.timeout` gets a warning, for good reason.\n- Give a session what it needs in its `prompt` and `before:`, rather than\n  letting it search; and `isolation: readonly` for a reviewer that only reads.\n\n## 3. Make a mistake impossible before checking for it\n\n- Declare what a node says: `output.schema` lists on tool JSON and Claude\n  reports (`verdict: [approve, escalate]`). Conditions then compare against a\n  closed list, and a run fails a value off it rather than matching nothing.\n- A verdict is a declared field, never words to search a summary for.\n- Give each condition its opposite, and each failure a handler (`when: \"!ok\"`).\n- Check every draft with Ork's `check` tool until it's clean.\n\n## 4. A person decides what can't be undone\n\nMerging, deploying, publishing, spending a lot: put a `human.gate` before it,\nwith the safe option `recommended`. For a run nobody watches, give it a\n`timeout` and the safe `default`. You never answer a gate yourself.\n\n## An example\n\nA review that a program checks first, and a person signs off:\n\n```yaml\nschemaVersion: 1\nname: careful-review\ndescription: Lint with a program, review with a small model, and ask before merging.\ninputs:\n  pr:\n    type: string\n    required: true\nlimits:\n  budgetUsd: 3\nnodes:\n  lint:\n    type: tool.shell\n    command: pnpm lint\n    allow: [pnpm lint]\n  review:\n    type: claude.worker\n    prompt: \"Review pull request {{inputs.pr}}. The linter passed.\"\n    model: haiku\n    effort: low\n    isolation: readonly\n    budgetUsd: 1\n    output:\n      schema:\n        verdict: [approve, escalate]\n  ask:\n    type: human.gate\n    question: \"Merge pull request {{inputs.pr}}? The review says {{nodes.review.output.verdict}}.\"\n    options: [merge, wait]\n    recommended: wait\n  merge:\n    type: tool.gh\n    command: pr merge {{inputs.pr}} --squash\n    allow: [pr merge]\nedges:\n  - lint -> review\n  - review -> ask\n  - from: ask\n    to: merge\n    when: \"choice == 'merge'\"\n```\n\n`lint` costs nothing, `review` is a small model with a cap, and nothing merges\nwithout a person.\n",
 	run: "---\nname: run\ndescription: Use when starting, following or explaining an Ork run - what it's doing, why it failed, what it cost, and what waits on the person - and when the person asks about their Ork runs.\n---\n\n# Running and following Ork workflows\n\nOrk runs workflows on the person's machine with their accounts, so a run spends\ntheir money and can push, merge or deploy. Start one only when they ask, and\nnever answer a decision for them.\n\n## Starting\n\n1. Find it: Ork's `workflows` tool gives each workflow's name and inputs.\n2. Check it first with `check` (`workflow: <name>`). Don't start one with an\n   error.\n3. Start it with `start_run`, giving every required input. Claude Code asks the\n   person first, unless they've allowed it. It answers with the run's id; the run goes on in the\n   background, whatever happens to this conversation.\n\nWithout Ork's tools: `ork run <workflow> --detach --input name=value`.\n\n## Following\n\n- `run` gives a run's status, what it waits on, its cost so far, and each\n  node's state. `runs` lists the newest runs.\n- `run_events` gives its newest events; `node` narrows them, and `last` or\n  `after` widens them. A `node.finished` event with `ok: false` says why a node\n  failed.\n- `explain_context` says what a node's session was given: its agent,\n  instructions, skills and files. Use it when a node didn't know something.\n- `usage` says what runs spent, by workflow and model, and how close the limits\n  are.\n\nSay what you found plainly: which node, what it said, and what it cost. Quote a\nnode's own words rather than retelling them.\n\n## What only the person does\n\n- **Decisions.** `decisions` lists the questions waiting on them: a gate, a loop\n  that ran out of rounds, a permission. Tell them what each asks, the options,\n  and the recommended one, and that they answer in `ork ui` or with\n  `ork decide` in their own terminal. Don't answer one: never run\n  `ork decide --id … --choose …`; with Ork's plugin, a hook stops it.\n- **Stopping, pausing, resuming.** Tell them the command: `ork stop <run>`,\n  `ork pause <run>`, `ork continue <run>`, `ork resume <run>`. A node can be\n  stopped alone with `--node <id>`.\n\n## Without Ork's tools\n\n| Want                   | Command                        |\n| ---------------------- | ------------------------------ |\n| Runs, newest first     | `ork ps`                       |\n| A run's transcript     | `ork logs <run>` (`--follow`)  |\n| Its nodes and cost     | `ork tree <run>`               |\n| What runs spent        | `ork usage`                    |\n| What waits on a person | `ork decide --list`            |\n| A node's context       | `ork context explain <wf> <n>` |\n",
+	setup: "---\nname: setup\ndescription: Use when the person asks you to set up Ork, install it, or get started with it in a repository - checking it's installed, setting up the project, making Ork's tools available to you, and a first workflow.\n---\n\n# Setting up Ork\n\nOrk runs workflows on the person's machine with their own accounts. Setting it\nup changes their machine and their repository, so say what each step does and\nask before it. Work through these in order, and stop where they say no.\n\n## 1. Check\n\n```sh\nork --version\nork doctor\n```\n\n- **No `ork`:** it needs Node 24.20 or later (`node --version`). The install is\n  `npm install --global @krapht/ork`; show it and run it only when they say\n  yes. The guide:\n  https://github.com/mimshins/ork/blob/main/docs/getting-started/installation.md\n- **Read `ork doctor` to them.** It needs git, a git repository with a commit,\n  and one Claude driver. Don't run `git init` or a commit without asking.\n- **A driver not ready:** they log in themselves, with `claude` (the CLI\n  driver), or by setting `ANTHROPIC_API_KEY` or a cloud provider in their own\n  shell (the SDK driver). Never ask for a key, never take one pasted to you, and\n  never write one into a file or a command. `gh` and `aws` are optional, and\n  their logins are their own too (`gh auth login`, `aws sso login`).\n\n## 2. The project\n\n- **`ork init`** keeps Ork's files in the repository, in `.ork/`, committed with\n  the code. It adds `.ork/runs/` to `.gitignore`, links `.claude/` and similar\n  folders to `.ork/`, and writes a starter workflow, `hello`.\n- **`ork register`** keeps them beside it, in `~/.ork/projects/<id>/`, and\n  writes nothing into the repository. For a repository whose process isn't\n  theirs to change, or to try Ork first.\n\nExplain both and ask which. Skip the question when the repository decides it: a\n`.ork/` folder means `ork init` has run (`ork projects` lists what's\nregistered). Neither overwrites a file.\n\n## 3. Make Ork available to you\n\nIf Ork's tools (`workflows`, `check`) already answer you, skip this. Otherwise,\nby where you run, and asking before each change to a config:\n\n- **Claude Code:** Ork's plugin brings the skills and the tools. The person\n  types these themselves:\n\n  ```\n  /plugin marketplace add mimshins/ork\n  /plugin install ork@ork\n  ```\n\n  Or, in a project set up with `ork init`, the skills in the repository for\n  everyone who clones it, then the tools:\n\n  ```sh\n  ork init --skills\n  claude mcp add ork -- ork mcp\n  ```\n\n  New tools start when they restart Claude Code or reconnect `ork` in `/mcp`;\n  so does the plugin's, once `ork` is installed.\n\n- **Another MCP client:** add a server named `ork` with command `ork` and args\n  `[\"mcp\"]` to its MCP config, where its own docs say. Its tools find the\n  project by its id, from `ork projects`.\n- **A shell only:** use the CLI. `ork --help` and each command's `--help` say\n  what it takes.\n\n## 4. A first workflow\n\nOffer to write one for a task they name. Follow `/ork:write`, check each draft\n(the `check` tool, or `ork validate <file>`) until it has no error, then save\nit. Don't start it: a run spends their money. Start it only when they say so,\nin the background with its inputs (`start_run`, or\n`ork run <name> --detach --input name=value`), and follow it with `/ork:run`.\n\n## 5. Show them `ork ui`\n\nTell them to run `ork ui` in their own terminal: their runs, graphs and logs in\nthe browser, and where they answer what a run asks.\n\n## Never\n\n- Ask for, store or pass on a password, key or token.\n- Answer a run's decision: they answer in `ork ui` or with `ork decide` in\n  their own terminal.\n- Install, edit a config, or start a run without a yes.\n",
 	write: "---\nname: write\ndescription: Use when writing or changing an Ork workflow (a `.ork/workflows/*.ork.yaml` file) - its nodes, edges, conditions and loops - and checking each draft until Ork accepts it.\n---\n\n# Writing an Ork workflow\n\nAn Ork workflow is one YAML file in the project, `.ork/workflows/<name>.ork.yaml`.\nIt names the nodes (Claude sessions, programs, a person's decisions) and the\nedges that carry work between them. Ork runs it on the person's machine with\ntheir own accounts.\n\n## How to work\n\n1. **Look first.** Ork's `workflows` tool lists the project's workflows; read\n   one that's close. `agents` lists the agents a node can use. Before you split\n   the work, read `/ork:principles`: a program where a program will do, a\n   session only for judgment.\n2. **Don't guess a field.** `workflow_format` gives the format; ask it for one\n   node type (`nodeType: \"human.gate\"`) to see that type's fields.\n3. **Check every draft** with Ork's `check` tool (`text`, or `workflow` for a\n   file), and fix what it says until it has no error. Read its warnings: they\n   mean something. Without Ork's tools, run `ork validate <file>`.\n4. **Then save the file**, beginning with the schema line below, so editors can\n   check it too.\n\n## The shape of a file\n\n```yaml\n# yaml-language-server: $schema=https://raw.githubusercontent.com/mimshins/ork/main/packages/schema/workflow.schema.json\nschemaVersion: 1\nname: fix-and-ship\ndescription: Fix a failing test, check it with the test suite, and ask before opening a pull request.\ninputs:\n  issue:\n    type: string\n    required: true\n    description: What fails.\ndefaults:\n  model: sonnet\n  budgetUsd: 2\nlimits:\n  budgetUsd: 10\nnodes:\n  fix:\n    type: claude.worker\n    prompt: \"Fix this, and keep the change small: {{inputs.issue}}\"\n  tests:\n    type: tool.shell\n    command: pnpm test\n    allow: [pnpm test]\n  ask:\n    type: human.gate\n    question: \"Open a pull request for {{nodes.fix.output.branch}}?\"\n    options: [open, hold]\n    recommended: hold\n  pr:\n    type: tool.gh\n    command: pr create --fill --head {{nodes.fix.output.branch}}\n    allow: [pr create]\nedges:\n  - fix -> tests\n  - from: tests\n    to: fix\n    when: \"!ok\"\n    maxRounds: 2\n  - from: tests\n    to: ask\n    when: ok\n  - from: ask\n    to: pr\n    when: \"choice == 'open'\"\n```\n\nNode ids are lowercase: letters, digits, `-` and `_`. Secrets never go in the\nfile: a tool reads one with `env:` and `{{env.NAME}}`.\n\n## Nodes\n\n| Type                              | Does                                                                |\n| --------------------------------- | ------------------------------------------------------------------- |\n| `claude.worker`                   | A Claude session that does one task and reports                     |\n| `claude.leader`                   | A session that plans and delegates to the nodes it owns (`parent:`) |\n| `claude.subagent`                 | A subagent inside its parent's session; it takes no edges           |\n| `tool.shell`                      | Any program, run without a shell; `allow:` lists command prefixes   |\n| `tool.git`, `tool.gh`, `tool.aws` | The person's own `git`, `gh`, `aws`, with an allow list             |\n| `mcp.call`                        | One tool call on an MCP server, with no session                     |\n| `human.gate`                      | A question with options and a recommended one                       |\n| `control.join`                    | Waits for its inputs: `all` (default), `any`, or `n` of them        |\n| `control.router`, `control.split` | Pass their input on; a router takes its first matching edge         |\n| `workflow.call`                   | Starts another workflow as its own run                              |\n\n- **A Claude node reports** `status` (`pass`, `changes_requested`, `done` or\n  `fail`), `summary`, `artifacts`, `branch`, and any field its `output.schema`\n  declares, such as `verdict: [approve, escalate]`. For another verdict, declare\n  a field: `status` can't take other values.\n- **A tool node reports** `exitCode`, `stdout`, `stderr`, and with\n  `output: { format: json, schema: { state: [OPEN, CLOSED] } }` its JSON as\n  `json`. Declare the fields you read: a run then checks them, and a typo can't\n  pass.\n- **A gate reports** `choice` and `answeredBy`. A `timeout` needs a `default`.\n\n## Edges and conditions\n\n- `a -> b`, `a -> b, c`, `b, c -> j` are plain edges, taken when the source\n  succeeded. A failed node takes no plain edge: handle a failure with\n  `when: \"!ok\"`, or `status == 'fail'` on a Claude node.\n- `{ from: a, to: b, when: \"...\" }` is taken when the condition holds. A bare\n  name reads the source's output: `when: \"verdict == 'approve'\"`. Quote any\n  condition that starts with `!`, or YAML reads it as a tag.\n- Conditions have `==`, `!=`, `<`, `>`, `&&`, `||`, `!`, and `any`, `all`,\n  `count`, `len`, `contains`. A join's `statuses` suits `any(statuses, 'fail')`.\n- A node runs when any edge into it is taken; only a join waits. A node with no\n  way in taken is skipped, and so is what follows it.\n- Templates, `{{inputs.x}}`, `{{nodes.a.output.field}}`, `{{run.id}}`, go in\n  `prompt`, `instructions`, `command`, `cwd` and `question`. Each value stays\n  one argument of a command, so it can't inject one.\n\n## Loops\n\nEvery cycle needs an edge with `maxRounds`. Give the way back a condition and\nthe way out its opposite, as `!ok` and `ok` above; a plain edge beside a loop\nfires every round. When a loop runs out, Ork asks a person what to do.\n\n## What `check` refuses, and why\n\n- **A value the source can't have** (`when.value`): `status == 'failed'` (it's\n  `fail`), a gate's `choice == 'aprove'` for `approve`, a value outside a\n  declared list. The message names the values it can have.\n- **A loop no condition ends**, a plain edge beside a loop, a loop of sessions\n  with no `limits.budgetUsd` or `limits.timeout`: warnings, each worth fixing.\n- **`no way the walk tried reaches x`**: Ork tried every way through, and none\n  got to `x`. A join waiting on a branch a first-match router never takes is\n  the usual cause.\n"
 };
 // src/project/init-skills.ts
@@ -2224,6 +2514,7 @@ const doctor = defineCommand({
 			orkCheck(),
 			...results,
 			...place.mode === "attached" ? [] : projectChecks(place.root),
+			socketCheck(),
 			...triggerChecks()
 		]) for (const line of formatCheck(result)) write(line);
 		if (!ok) {
@@ -2287,7 +2578,8 @@ const upgrade = defineCommand({
 		const registry = registryOf(process.env);
 		const latest = await fetchLatest(ORK_NAME, {
 			...registry === void 0 ? {} : { registry },
-			timeoutMs: 15e3
+			timeoutMs: 15e3,
+			current: ORK_VERSION
 		});
 		const plan = planUpgrade({
 			name: ORK_NAME,
@@ -2663,13 +2955,22 @@ const formatRegistered = (project, created) => {
 /**
 * @file Scaffolding a project: `.ork/workflows/` with a starter workflow and
 *   the `.gitignore` entry for run state, never overwriting a file; then the
-*   tool folders the project already uses are linked to `.ork/`.
+*   tool folders the project already uses are linked to `.ork/`. The starter
+*   names no driver, as it is committed: a run takes the one ready on the
+*   machine running it, and `ork init` says which that is here.
 */
 /** Run state that never belongs in git. */
 const GITIGNORE_ENTRIES = [".ork/runs/"];
-const STARTER = {
+const STARTER_NAME = "hello";
+/** Where `ork init` writes the starter, relative to the project root. */
+const STARTER_FILE = path.join(WORKFLOW_DIR, `${STARTER_NAME}${WORKFLOW_SUFFIX}`);
+/**
+* The starter workflow. It names no driver: it is committed, and one person's
+* login doesn't belong in a shared file.
+*/
+const starterWorkflow = () => ({
 	schemaVersion: 1,
-	name: "hello",
+	name: STARTER_NAME,
 	description: "A leader plans the task, a worker does it, and you approve the result.",
 	inputs: { task: {
 		type: "string",
@@ -2677,7 +2978,6 @@ const STARTER = {
 		description: "What to do."
 	} },
 	defaults: {
-		driver: "sdk",
 		model: "sonnet",
 		isolation: "worktree"
 	},
@@ -2702,7 +3002,34 @@ const STARTER = {
 		}
 	},
 	edges: ["lead -> approve"]
+});
+/**
+* What `ork init` says of drivers, in one line: the project's `defaults.driver`
+* when it names one, else the driver a run would take here, the one ready
+* (`cli` when both are), or how to get one ready.
+*/
+const driverLine = (checks, projectDefault) => {
+	if (projectDefault !== void 0) return `Runs use the ${projectDefault} driver, ${PROJECT_FILE}'s default, unless a workflow names another.`;
+	const ready = readyDriver(checks);
+	if (ready.ok) {
+		const why = ready.ready === 1 ? ready.detail : `more than one is ready, and ${ready.driver} comes first`;
+		return `Runs use the driver that's ready when they start: ${ready.driver} here (${why}).`;
+	}
+	return `Runs use the driver that's ready when they start, and none is ready here yet: ${checks.find(({ id }) => id === "cli")?.result.hint ?? "see `ork doctor`."}`;
+};
+/**
+* The line for the project at `root`: `ork doctor`'s driver checks through
+* `run` and `env`, and the project's own default.
+*/
+const initDriverLine = async (run, env, root) => {
+	const projectDefault = loadProject(root).project?.defaults?.driver;
+	return driverLine(projectDefault === void 0 ? await driverChecks(run, env) : [], projectDefault);
 };
+/**
+* The line for a starter about to be written in `root`, with the real tools and
+* environment; `null` when the starter is already there.
+*/
+const initDriverLineHere = (root) => existsSync(path.join(root, STARTER_FILE)) ? Promise.resolve(null) : initDriverLine(exec, process.env, root);
 /** The run-state entries `root`'s `.gitignore` lacks. */
 const unignored = (root) => {
 	const gitignore = path.join(root, ".gitignore");
@@ -2729,11 +3056,10 @@ const initProject = (cwd, options = {}) => {
 	const created = [];
 	const skipped = [];
 	mkdirSync(path.join(cwd, WORKFLOW_DIR), { recursive: true });
-	const starter = path.join(WORKFLOW_DIR, `${STARTER.name}${WORKFLOW_SUFFIX}`);
-	if (existsSync(path.join(cwd, starter))) skipped.push(starter);
+	if (existsSync(path.join(cwd, STARTER_FILE))) skipped.push(STARTER_FILE);
 	else {
-		writeFileSync(path.join(cwd, starter), serializeWorkflow(STARTER));
-		created.push(starter);
+		writeFileSync(path.join(cwd, STARTER_FILE), serializeWorkflow(starterWorkflow()));
+		created.push(STARTER_FILE);
 	}
 	const missing = ignoreRunState(cwd);
 	if (missing.length > 0) created.push(`.gitignore (${missing.join(", ")})`);
@@ -3100,8 +3426,9 @@ const noteRun = (store, cwd, args) => {
 * @file `ork feedback apply` (ADR-059): runs Ork's own `ork:feedback-apply` in
 *   the project an item came from, with the item as its untrusted input. Its
 *   worker proposes a fix on a branch and its gate asks to keep or discard it;
-*   Ork never merges. Kept, the item is `resolved`; discarded, the run's
-*   worktree and branch go and the item stays `accepted`.
+*   Ork never merges. Kept, the item is `resolved`, unless its branch holds no
+*   new commits: then there is nothing to keep, and, as when discarded, the
+*   run's worktree and branch go and the item stays `accepted`.
 */
 /** The most of an item's records the worker reads, newest first. */
 const RECORDS = 10;
@@ -3386,8 +3713,9 @@ const split = defineCommand({
 /**
 * @file `ork feedback export` and `import` (specs/feedback.md): feedback
 *   records as JSON lines, one record a line, so a team can move feedback
-*   between machines without GitHub. A line is checked before it's added, and a
-*   record already here (its run and event) is skipped.
+*   between machines without GitHub. A line is checked before it's added (one
+*   from a newer Ork says so), and a record already here (its run and event) is
+*   skipped.
 */
 const Text = z.string();
 const LineSchema = z.strictObject({
@@ -3425,6 +3753,11 @@ const exportLines = (records) => records.map(({ id: _id, ...record }) => JSON.st
 	feedbackVersion: 1,
 	...record
 })).map((line) => `${line}\n`).join("");
+/** Why a line from a newer Ork is left out, or `null` when it isn't one. */
+const newerVersion = (value) => {
+	const version = value !== null && typeof value === "object" ? Reflect.get(value, "feedbackVersion") : void 0;
+	return typeof version === "number" && version > 1 ? `made by a newer Ork (\`feedbackVersion: ${String(version)}\`; this one reads ${String(1)}). Upgrade with \`ork upgrade\`.` : null;
+};
 /** The records in a JSONL file's text, and what was wrong with the rest. */
 const parseLines = (text) => {
 	const records = [];
@@ -3438,6 +3771,11 @@ const parseLines = (text) => {
 			problems.push(`line ${String(index + 1)}: not JSON`);
 			continue;
 		}
+		const newer = newerVersion(value);
+		if (newer !== null) {
+			problems.push(`line ${String(index + 1)}: ${newer}`);
+			continue;
+		}
 		const parsed = LineSchema.safeParse(value);
 		if (!parsed.success) {
 			const [issue] = parsed.error.issues;
@@ -3626,7 +3964,7 @@ const json$1 = {
 const feedback = defineCommand({
 	meta: {
 		name: "feedback",
-		description: "What got in the way in your runs, grouped: list, show, note, triage, accept, apply, publish, export, import"
+		description: "What got in the way in your runs, grouped: list, show, note, dismiss, restore, accept, apply, triage, split, publish, export, import"
 	},
 	subCommands: {
 		list: defineCommand({
@@ -3973,7 +4311,8 @@ const skillsStep = async (root, options) => {
 };
 // src/commands/setup.ts
 /**
-* @file Setting up: `ork init` scaffolds `.ork/` in a project, records it, and
+* @file Setting up: `ork init` scaffolds `.ork/` in a project, with a starter
+*   that names no driver (it says which a run takes here), records it, and
 *   links the tool folders it uses; `ork link` points tools' agents and skills
 *   folders at `.ork/` (never in an attached project); `ork agents` lists,
 *   shows, adds and removes the agents nodes can take. `ork doctor` and `ork
@@ -3996,10 +4335,12 @@ const init = defineCommand({
 		}
 	},
 	run: async ({ args }) => {
+		const cwd = process.cwd();
+		const driverLine = await initDriverLineHere(cwd);
 		const store = openStore();
 		let result;
 		try {
-			result = initRecorded(store, process.cwd(), { link: args.link });
+			result = initRecorded(store, cwd, { link: args.link });
 		} finally {
 			store.close();
 		}
@@ -4011,8 +4352,9 @@ const init = defineCommand({
 		const { created, skipped, links } = result;
 		for (const item of created) write(`${style("green", "created")} ${item}`);
 		for (const item of skipped) write(`${style("dim", "exists")}  ${item}`);
+		if (driverLine !== null && created.includes(STARTER_FILE)) write(driverLine);
 		for (const line of formatLinks(links.filter((l) => l.state !== "linked"))) write(line);
-		await skillsStep(process.cwd(), {
+		await skillsStep(cwd, {
 			skills: args.skills,
 			link: args.link
 		});
@@ -4024,11 +4366,18 @@ const link = defineCommand({
 		name: "link",
 		description: "Point tools' agents and skills folders (.claude/agents, …) at .ork/"
 	},
-	args: { check: {
-		type: "boolean",
-		description: "Only show each folder's state; change nothing",
-		default: false
-	} },
+	args: {
+		tools: {
+			type: "positional",
+			description: "The tools to link, e.g. claude opencode (default: the ones the project already uses)",
+			required: false
+		},
+		check: {
+			type: "boolean",
+			description: "Only show each folder's state; change nothing",
+			default: false
+		}
+	},
 	run: ({ args }) => {
 		const place = projectAt(process.cwd());
 		const { root } = place;
@@ -4189,7 +4538,10 @@ const agents = defineCommand({
 	}
 });
 // src/main.ts
-/** @file The root `ork` command and its subcommands. */
+/**
+* @file The root `ork` command and its subcommands. `ork --help` lists them in
+*   the groups of `help-groups.ts`.
+*/
 const main = defineCommand({
 	meta: ORK_META,
 	subCommands: {
@@ -4204,25 +4556,27 @@ const main = defineCommand({
 		ps,
 		logs,
 		tree,
-		usage: () => import("./usage-CT7Z-yjr.mjs").then((module) => module.usage),
-		prune: () => import("./usage-CT7Z-yjr.mjs").then((module) => module.prune),
+		usage: () => import("./usage-CJnytoe4.mjs").then((module) => module.usage),
+		prune: () => import("./usage-CJnytoe4.mjs").then((module) => module.prune),
 		decide,
-		relay: () => import("./relay-Do-aNbSD.mjs").then((module) => module.relay),
-		pause: () => import("./pause-BPSmg4yz.mjs").then((module) => module.pause),
-		continue: () => import("./pause-BPSmg4yz.mjs").then((module) => module.continueRun),
+		relay: () => import("./relay-o-Luee1c.mjs").then((module) => module.relay),
+		pause: () => import("./pause-B_SL_yDz.mjs").then((module) => module.pause),
+		continue: () => import("./pause-B_SL_yDz.mjs").then((module) => module.continueRun),
 		stop,
 		chat,
-		send: () => import("./send-DhGBkowy.mjs").then((module) => module.send),
+		send: () => import("./send-3B64fBNB.mjs").then((module) => module.send),
 		resume,
 		feedback,
 		context,
-		worktrees: () => import("./worktrees-DHl80k96.mjs").then((module) => module.worktrees),
-		wt: () => import("./worktrees-DHl80k96.mjs").then((module) => module.worktrees),
-		watch: () => import("./watch-0Qr2UfCQ.mjs").then((module) => module.watch),
-		mcp: () => import("./mcp-CHVKKg3B.mjs").then((module) => module.mcp),
-		ui: () => import("./ui-DhutUMgQ.mjs").then((module) => module.ui),
+		worktrees: () => import("./worktrees-86ySXxR6.mjs").then((module) => module.worktrees),
+		wt: () => import("./worktrees-86ySXxR6.mjs").then((module) => module.worktrees),
+		watch: () => import("./watch-BJB82ZJ7.mjs").then((module) => module.watch),
+		mcp: () => import("./mcp-CKPyNaKD.mjs").then((module) => module.mcp),
+		ui: () => import("./ui-CY4xxJUu.mjs").then((module) => module.ui),
 		doctor,
-		upgrade
+		upgrade,
+		completion: () => import("./completion-snnYGjgK.mjs").then((module) => module.completion),
+		__complete: () => import("./completion-snnYGjgK.mjs").then((module) => module.completeCommand(main))
 	}
 });
 // src/bin.ts
@@ -4230,17 +4584,26 @@ const main = defineCommand({
 * @file The `ork` executable: runs the CLI's root command. The published
 *   package's `bin` points at its bundle. When the new-version check is on, it
 *   starts the daily background check and ends with the notice (ADR-038); the
-*   background copy it starts only runs the check.
+*   background copy it starts only runs the check. It first clears git's local
+*   variables (a hook's `GIT_DIR`, `GIT_INDEX_FILE`, …), so nothing Ork starts
+*   acts on the hook's repository (specs/worktrees.md). `--help` leaves out the
+*   flags only Ork passes to itself. `ork __complete`, which tab completion
+*   runs on every Tab, goes first: no update check, and no citty, so a typed
+*   `--help` is a word to complete.
 */
-if (process.env["ORK_UPDATE_CHECK_CHILD"] === "1") await runUpdateChild();
+clearGitLocalEnv();
+const argv = process.argv.slice(2);
+if (argv[0] === "__complete") {
+	const { printCompletions } = await import("./completion-snnYGjgK.mjs");
+	await printCompletions(main, argv.slice(1));
+} else if (process.env["ORK_UPDATE_CHECK_CHILD"] === "1") await runUpdateChild();
 else {
-	const argv = process.argv.slice(2);
 	if (updateCheckOff(process.env, argv, process.stderr.isTTY) === null) {
 		startUpdateCheck();
 		process.once("exit", () => {
 			showUpdateNotice();
 		});
 	}
-	await runMain(main);
+	await runMain(main, { showUsage: showHelp });
 }
 export {};