@krapht/ork 0.4.0 → 1.0.0-alpha.1

package/dist/{output-CXSJO00X.mjs → output-TV_j7Ni0.mjs}

@@ -1,9 +1,9 @@
-import { At as FEEDBACK_KINDS, Ht as maskReplacer, J as eventOf, K as backfillUsage, Mt as FEEDBACK_TARGETS, Ut as maskSecrets, X as text, Y as inTransaction, jt as FEEDBACK_SEVERITIES, pt as ownProcessStart, q as usageQueries, sn as PROJECT_MODES } from "./src-CGqMati3.mjs";
-import { createInterface } from "node:readline/promises";
+import { $ as text, Bt as FEEDBACK_TARGETS, Q as inTransaction, Rt as FEEDBACK_KINDS, X as usageQueries, Xt as maskReplacer, Y as backfillUsage, Z as eventOf, Zt as maskSecrets, gn as PROJECT_MODES, yt as ownProcessStart, zt as FEEDBACK_SEVERITIES } from "./src-hrj2h0IZ.mjs";
 import path from "node:path";
 import { mkdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { DatabaseSync } from "node:sqlite";
+import { createInterface } from "node:readline/promises";
 import { stripVTControlCharacters, styleText } from "node:util";
 // ../core/src/store/drafts.ts
 const rowOf = (row) => {
@@ -49,6 +49,11 @@ const choicesOf = (json) => {
 		return [choice];
 	});
 };
+/** A note as stored: masked, or null when blank. */
+const noteOf = (note) => {
+	const trimmed = note?.trim() ?? "";
+	return trimmed === "" ? null : maskSecrets(trimmed);
+};
 const kindOf = (value) => value === "permission" ? "permission" : "question";
 const statusOf$1 = (value) => value === "answered" || value === "withdrawn" ? value : "open";
 const decisionOf = (row) => {
@@ -66,17 +71,19 @@ const decisionOf = (row) => {
 		recommended: text(row, "recommended"),
 		context: text(row, "context"),
 		answer: text(row, "answer"),
-		answeredAt: text(row, "answered_at")
+		answeredAt: text(row, "answered_at"),
+		note: text(row, "note"),
+		owner: text(row, "owner")
 	};
 	for (const [key, value] of Object.entries(optional)) if (value !== "") Object.assign(record, { [key]: value });
 	const by = text(row, "answered_by");
-	if (by === "terminal" || by === "decide" || by === "ui") record.answeredBy = by;
+	if (by === "terminal" || by === "decide" || by === "ui" || by === "owner") record.answeredBy = by;
 	return record;
 };
 const decisionQueries = (db) => {
-	const insert = db.prepare(`INSERT INTO decisions (id, run_id, node, kind, question, options, recommended, context, opened_at, status)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'open')`);
-	const answer = db.prepare(`UPDATE decisions SET status = 'answered', answer = ?, answered_by = ?, answered_at = ?
+	const insert = db.prepare(`INSERT INTO decisions (id, run_id, node, kind, question, options, recommended, context, owner, opened_at, status)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'open')`);
+	const answer = db.prepare(`UPDATE decisions SET status = 'answered', answer = ?, answered_by = ?, answered_at = ?, note = ?
      WHERE id = ? AND status = 'open'`);
 	const withdraw = db.prepare("UPDATE decisions SET status = 'withdrawn', answered_at = ? WHERE id = ? AND status = 'open'");
 	const byId = db.prepare("SELECT * FROM decisions WHERE id = ?");
@@ -97,14 +104,14 @@ const decisionQueries = (db) => {
 				question: maskSecrets(decision.question),
 				...decision.context === void 0 ? {} : { context: maskSecrets(decision.context) }
 			};
-			insert.run(masked.id, masked.runId, masked.node, masked.kind, masked.question, JSON.stringify(masked.options), masked.recommended ?? null, masked.context ?? null, openedAt);
+			insert.run(masked.id, masked.runId, masked.node, masked.kind, masked.question, JSON.stringify(masked.options), masked.recommended ?? null, masked.context ?? null, masked.owner ?? null, openedAt);
 			return {
 				...masked,
 				openedAt,
 				status: "open"
 			};
 		},
-		answerDecision: (id, choice, by) => Number(answer.run(choice, by, (/* @__PURE__ */ new Date()).toISOString(), id).changes) === 1,
+		answerDecision: (id, choice, by, note) => Number(answer.run(choice, by, (/* @__PURE__ */ new Date()).toISOString(), noteOf(note), id).changes) === 1,
 		withdrawDecision: (id) => {
 			withdraw.run((/* @__PURE__ */ new Date()).toISOString(), id);
 		},
@@ -720,9 +727,21 @@ const MIGRATIONS = [
    );`,
 	`ALTER TABLE feedback_items ADD COLUMN merged_into TEXT;
    CREATE INDEX feedback_items_merged ON feedback_items (merged_into);`,
-	`ALTER TABLE runs ADD COLUMN process_start TEXT;`
+	`ALTER TABLE runs ADD COLUMN process_start TEXT;`,
+	`ALTER TABLE runs ADD COLUMN skipped INTEGER;
+   ALTER TABLE runs ADD COLUMN failures_handled INTEGER;`,
+	`ALTER TABLE decisions ADD COLUMN note TEXT;`,
+	`ALTER TABLE decisions ADD COLUMN owner TEXT;`
 ];
 const versionOf = (db) => Number(db.prepare("PRAGMA user_version").get()?.["user_version"] ?? 0);
+/**
+* Refuses a database that is not at this Ork's schema version, newer or older,
+* for a reader that may not migrate it (a read-only open).
+*/
+const requireCurrent = (db, migrations = MIGRATIONS) => {
+	const version = versionOf(db);
+	if (version !== migrations.length) throw new Error(`The store is at schema version ${String(version)}; this Ork reads ${String(migrations.length)}.`);
+};
 /** Applies the migrations the database has not had yet. */
 const migrate = (db, migrations = MIGRATIONS) => {
 	for (const [index, step] of migrations.entries()) {
@@ -741,7 +760,9 @@ const migrate = (db, migrations = MIGRATIONS) => {
 *   project, `~/.ork/state.db`, in WAL mode so other `ork` processes read while
 *   a run writes. Events are stored with secrets masked, feedback records
 *   beside them, and the registered projects; the schema is versioned with
-*   `user_version`.
+*   `user_version`. Tab completion opens it read-only: no store created, no
+*   migration, a store at another version refused, and the database never
+*   changed (SQLite may still add the `-wal` and `-shm` files beside it).
 */
 /** `~/.ork/state.db`; `home` is `~` (tests pass a folder). */
 const storePath = (home = homedir()) => path.join(home, ".ork", "state.db");
@@ -773,6 +794,10 @@ const recordOf = (row) => {
 	if (parent !== "") record.parent = parent;
 	const finished = text(row, "finished_at");
 	if (finished !== "") record.finishedAt = finished;
+	const skipped = row?.["skipped"];
+	if (typeof skipped === "number") record.skipped = skipped;
+	const handled = row?.["failures_handled"];
+	if (typeof handled === "number") record.failuresHandled = handled;
 	return record;
 };
 /** The node an event is about, for filtering. */
@@ -781,9 +806,20 @@ const nodeOf = (event) => {
 	if ("node" in event && typeof event.node === "string") return event.node;
 	return null;
 };
-/** Opens (and creates) the store at `file`; `:memory:` for tests. */
-const openStore = (file = storePath(), options = {}) => {
-	const ownStart = options.processStart ?? ownProcessStart;
+/** A database opened for reading only, refused unless it is current. */
+const openReadOnly = (file) => {
+	const db = new DatabaseSync(file, { readOnly: true });
+	try {
+		db.exec("PRAGMA busy_timeout = 5000");
+		requireCurrent(db);
+		return db;
+	} catch (error) {
+		db.close();
+		throw error;
+	}
+};
+/** A database opened for writing: created, in WAL mode, migrated. */
+const openWritable = (file) => {
 	if (file !== ":memory:") mkdirSync(path.dirname(file), { recursive: true });
 	const db = new DatabaseSync(file);
 	db.exec("PRAGMA busy_timeout = 5000");
@@ -791,18 +827,28 @@ const openStore = (file = storePath(), options = {}) => {
 	db.exec("PRAGMA synchronous = NORMAL");
 	db.exec("PRAGMA foreign_keys = ON");
 	migrate(db);
+	return db;
+};
+/**
+* Opens (and creates) the store at `file`; `:memory:` for tests. With
+* `readOnly`, it neither creates nor migrates, and throws when it can't read.
+*/
+const openStore = (file = storePath(), options = {}) => {
+	const ownStart = options.processStart ?? ownProcessStart;
+	const db = options.readOnly === true ? openReadOnly(file) : openWritable(file);
 	const insertRun = db.prepare(`INSERT INTO runs (id, workflow, file, project, status, pid, process_start, started_at, parent, depth)
      VALUES (?, ?, ?, ?, 'running', ?, ?, ?, ?, ?)`);
 	const lastSeq = db.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM events WHERE run_id = ?");
 	const insertEvent = db.prepare("INSERT INTO events (run_id, seq, at, type, node, data) VALUES (?, ?, ?, ?, ?, ?)");
-	const finishRun = db.prepare("UPDATE runs SET status = ?, finished_at = ?, cost_usd = ? WHERE id = ?");
-	const reopenRun = db.prepare("UPDATE runs SET status = 'running', pid = ?, process_start = ?, finished_at = NULL WHERE id = ?");
+	const finishRun = db.prepare("UPDATE runs SET status = ?, finished_at = ?, cost_usd = ?, skipped = ?, failures_handled = ? WHERE id = ?");
+	const reopenRun = db.prepare("UPDATE runs SET status = 'running', pid = ?, process_start = ?, finished_at = NULL, skipped = NULL, failures_handled = NULL WHERE id = ?");
 	const addCost = db.prepare("UPDATE runs SET cost_usd = cost_usd + ? WHERE id = ?");
 	const byId = db.prepare("SELECT * FROM runs WHERE id = ?");
 	const byPrefix = db.prepare("SELECT * FROM runs WHERE substr(id, 1, ?) = ? ORDER BY started_at DESC, rowid DESC");
 	const allRuns = db.prepare("SELECT * FROM runs ORDER BY started_at DESC, rowid DESC LIMIT ?");
 	const projectRuns = db.prepare("SELECT * FROM runs WHERE project = ? ORDER BY started_at DESC, rowid DESC LIMIT ?");
 	const eventsAfter = db.prepare("SELECT seq, at, data FROM events WHERE run_id = ? AND seq > ? ORDER BY seq");
+	const runNodes = db.prepare("SELECT node FROM events WHERE run_id = ? AND node IS NOT NULL GROUP BY node ORDER BY MIN(seq)");
 	const { insertFeedback, recordUsage, recordPlanLimit, ...queries } = storeQueries(db);
 	return {
 		...queries,
@@ -832,7 +878,10 @@ const openStore = (file = storePath(), options = {}) => {
 			if (event.type === "node.event" && event.event.type === "session.finished") recordUsage(runId);
 			if (event.type === "node.event" && event.event.type === "plan.limit") recordPlanLimit(event.event, at);
 			if (event.type === "feedback.recorded") insertFeedback(runId, seq, at, event.node, event.feedback);
-			if (event.type === "run.finished") finishRun.run(event.result.status, at, event.result.costUsd, runId);
+			if (event.type === "run.finished") {
+				const { status, costUsd, skipped, failuresHandled } = event.result;
+				finishRun.run(status, at, costUsd, skipped ?? null, failuresHandled ?? null, runId);
+			}
 			return {
 				runId,
 				seq,
@@ -855,6 +904,7 @@ const openStore = (file = storePath(), options = {}) => {
 			at: text(r, "at"),
 			event: eventOf(text(r, "data"))
 		})),
+		nodes: (runId) => runNodes.all(runId).map((r) => text(r, "node")),
 		close: () => {
 			db.close();
 		}

package/dist/{pause-BPSmg4yz.mjs → pause-C7lJkSma.mjs}

@@ -1,7 +1,7 @@
-import { H as requestContinue, U as requestPause } from "./src-CGqMati3.mjs";
-import { t as findRun } from "./find-DptmbhGd.mjs";
-import { a as write, c as openStore, i as style, o as writeErr } from "./output-CXSJO00X.mjs";
-import { r as continueRefusal } from "./in-a-run-D1Qc5Mit.mjs";
+import { G as requestContinue, K as requestPause } from "./src-hrj2h0IZ.mjs";
+import { t as findRun } from "./find-rBBk7Jui.mjs";
+import { a as write, c as openStore, i as style, o as writeErr } from "./output-TV_j7Ni0.mjs";
+import { r as continueRefusal } from "./in-a-run-DdAakpRR.mjs";
 import { defineCommand } from "citty";
 // src/commands/pause.ts
 /**

package/dist/{relay-Do-aNbSD.mjs → relay-BipJYszF.mjs}

@@ -1,5 +1,5 @@
-import { B as unlinkNodes, L as linkNodes, P as addressOf } from "./src-CGqMati3.mjs";
-import { a as write, c as openStore, i as style, o as writeErr } from "./output-CXSJO00X.mjs";
+import { B as linkNodes, L as addressOf, U as unlinkNodes } from "./src-hrj2h0IZ.mjs";
+import { a as write, c as openStore, i as style, o as writeErr } from "./output-TV_j7Ni0.mjs";
 import { defineCommand } from "citty";
 // src/commands/relay.ts
 /**

package/dist/{remove-AwaMMaHf.mjs → remove-BDs9isB6.mjs}

@@ -1,6 +1,6 @@
-import { D as git, k as lines, lt as liveStatus } from "./src-CGqMati3.mjs";
-import { n as listOrkWorktrees, t as createdWorktrees } from "./list-ZvY2OcLq.mjs";
-import { i as keyOf, n as applyStep, r as cleanStep, s as stepPrunes } from "./clean-Dcr807be.mjs";
+import { ht as liveStatus, j as lines, k as git } from "./src-hrj2h0IZ.mjs";
+import { n as listOrkWorktrees, t as createdWorktrees } from "./list-Bv5Lxu7z.mjs";
+import { i as keyOf, n as applyStep, r as cleanStep, s as stepPrunes } from "./clean-CA_Oi2Wl.mjs";
 // ../core/src/worktree/words.ts
 /**
 * @file The plain words for what `ork worktrees` shows, in one place, so the

package/dist/{send-DhGBkowy.mjs → send-nbkjf3sc.mjs}

@@ -1,6 +1,6 @@
-import { Xt as wakeRun, Yt as socketPath, lt as liveStatus, wt as scriptContactsOf } from "./src-CGqMati3.mjs";
-import { c as openStore, o as writeErr } from "./output-CXSJO00X.mjs";
-import { u as inheritedScrubber } from "./src-UWkk1sl9.mjs";
+import { an as wakeRun, ht as liveStatus, kt as scriptContactsOf, rn as socketPath } from "./src-hrj2h0IZ.mjs";
+import { c as openStore, o as writeErr } from "./output-TV_j7Ni0.mjs";
+import { u as inheritedScrubber } from "./src-BxUJPGa5.mjs";
 import { defineCommand } from "citty";
 // ../core/src/remote/send.ts
 /**

package/dist/{src-CpDKIulI.mjs → src-B0TT7DBi.mjs}

@@ -1,10 +1,11 @@
-import { $ as resumable, An as parseWorkflow, B as unlinkNodes, Dn as newWorkflowText, Dt as nodeSays, En as applyEdits, Ft as runGh, G as tellLiveRun, H as requestContinue, In as expandEdge, It as sendPost, L as linkNodes, Nt as DISCUSSIONS, On as readDocument, Pn as EdgeInputSchema, Pt as planPost, Q as detachResume, Rn as NodeSchema, Tn as WorkflowEditSchema, U as requestPause, W as requestStop, _n as inside, _t as walkChecks, at as explainWorkflowText, d as runningRunIds, dn as placeFiles, dt as runStatus, f as runningScript, fn as placeFor, ft as runTree, g as triggersReport, gn as workflowDirOf, gt as checkWorkflowText, it as followEvents, kn as renderJsonSchema, l as planUpgrade, lt as liveStatus, mn as runDirOf, mt as processAlive, o as limitsReport, on as loadAgents, p as detectInstaller, qt as readCondition, r as capsHere, rt as detachRun, u as releaseNotes, ut as pausedOf, vt as walkSummary, wn as skillsIn, yn as LESSON_CAP_TOKENS } from "./src-CGqMati3.mjs";
-import { D as placeOf$1, E as lessonPlaceOf, O as feedbackActions, S as previewPost, T as acceptItem, _ as answerDecision, a as registryShown, c as checkDue, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, k as openFixRun, l as fetchLatest, m as updateCachePath, o as updateSwitchOff, p as refreshUpdateCache, s as runInstall, u as newerVersion, v as pendingDecisions, w as recordNote, y as builtinProblem } from "./__build_info__-CtSVVuZE.mjs";
-import { n as newRunId, t as findRun } from "./find-DptmbhGd.mjs";
-import { c as openStore, l as storePath, s as nodeOf } from "./output-CXSJO00X.mjs";
+import { B as linkNodes, Cn as runDirOf, Ct as walkChecks, En as inside, Fn as applyEdits, G as requestContinue, Gn as expandEdge, Hn as EdgeInputSchema, Ht as planPost, In as newWorkflowText, J as tellLiveRun, K as requestPause, Ln as readDocument, Nn as skillsIn, Nt as nodeSays, On as LESSON_CAP_TOKENS, Pn as WorkflowEditSchema, Rn as renderJsonSchema, St as checkWorkflowText, Tn as workflowDirOf, U as unlinkNodes, Ut as runGh, Vt as DISCUSSIONS, Wt as sendPost, _t as runStatus, bn as placeFiles, bt as processAlive, ct as explainWorkflowText, d as runningRunIds, f as runningScript, gt as pausedOf, hn as loadAgents, ht as liveStatus, l as planUpgrade, nt as resumable, o as limitsReport, ot as detachRun, p as detectInstaller, q as requestStop, qn as NodeSchema, r as capsHere, st as followEvents, tn as readCondition, tt as detachResume, u as releaseNotes, v as triggersReport, vt as runTree, wt as walkSummary, xn as placeFor, zn as parseWorkflow } from "./src-hrj2h0IZ.mjs";
+import { C as feedbackActions, S as placeOf$1, _ as previewPost, a as registryShown, b as acceptItem, c as checkDue, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, o as updateSwitchOff, p as refreshUpdateCache, s as runInstall, u as newerVersion, w as openFixRun, x as lessonPlaceOf, y as recordNote } from "./__build_info__-D9lSlMFy.mjs";
+import { n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-CoIJh34e.mjs";
+import { n as newRunId, t as findRun } from "./find-rBBk7Jui.mjs";
+import { c as openStore, l as storePath, s as nodeOf } from "./output-TV_j7Ni0.mjs";
 import { n as usageReport } from "./report-DK4LGqwF.mjs";
-import { a as planClean, i as keyOf, o as stepActs, r as cleanStep, s as stepPrunes, t as applyClean } from "./clean-Dcr807be.mjs";
-import { a as readWorktrees, c as planLine, i as projectHead, l as removeRefusal, n as lostWork, o as labelOf, r as planRemove, s as mergeStateOf, t as applyRemove, u as stateParts } from "./remove-AwaMMaHf.mjs";
+import { a as planClean, i as keyOf, o as stepActs, r as cleanStep, s as stepPrunes, t as applyClean } from "./clean-CA_Oi2Wl.mjs";
+import { a as readWorktrees, c as planLine, i as projectHead, l as removeRefusal, n as lostWork, o as labelOf, r as planRemove, s as mergeStateOf, t as applyRemove, u as stateParts } from "./remove-BDs9isB6.mjs";
 import path from "node:path";
 import { z } from "zod";
 import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
@@ -350,7 +351,11 @@ const DecisionsQuerySchema = z.strictObject({
 	run: z.string().min(1).optional(),
 	project: z.string().min(1).optional()
 });
-const AnswerSchema = z.strictObject({ choose: z.string().min(1) });
+/** An answer: the option, and what the person said with it, if anything. */
+const AnswerSchema = z.strictObject({
+	choose: z.string().min(1),
+	note: z.string().optional()
+});
 const RunFlags = {
 	inputs: z.record(z.string(), z.string()).optional(),
 	driver: Driver.optional(),
@@ -362,7 +367,9 @@ const StartRunSchema = z.strictObject({
 	project: z.string().min(1),
 	/** A workflow's name in the project, or a path inside the project. */
 	workflow: z.string().min(1),
-	...RunFlags
+	...RunFlags,
+	/** Its sessions load the machine's Claude setup (`--machine-claude`). */
+	machineClaude: z.boolean().optional()
 });
 const ResumeRunSchema = z.strictObject(RunFlags);
 const MessageSchema = z.strictObject({
@@ -936,7 +943,8 @@ const flagsOf = (options) => [
 	...Object.entries(options.inputs ?? {}).flatMap(([name, value]) => ["--input", `${name}=${value}`]),
 	...options.driver === void 0 ? [] : ["--driver", options.driver],
 	...options.inPlace === void 0 ? [] : [options.inPlace ? "--in-place" : "--no-in-place"],
-	...options.allowDirty === true ? ["--allow-dirty"] : []
+	...options.allowDirty === true ? ["--allow-dirty"] : [],
+	...options.machineClaude === true ? ["--machine-claude"] : []
 ];
 const WORKFLOW_SUFFIX = ".ork.yaml";
 /**
@@ -955,7 +963,7 @@ const writeRoutes = (context) => {
 	const script = context.script === void 0 ? {} : { script: context.script };
 	return {
 		answer: async ({ params, body }) => {
-			const answered = await answerDecision(context.store, params.id, body.choose, context.home, "ui");
+			const answered = await answerDecision(context.store, params.id, body.choose, context.home, "ui", body.note);
 			return answered.ok ? ok({
 				decision: params.id,
 				answer: body.choose
@@ -1710,8 +1718,11 @@ const mcpTools = (context) => {
 	];
 };
 const NOT_HERE = "This server was not started by `ork ui`.";
-/** Asks the registry when the daily check is due; never throws. */
-const checkIfDue = async (file, options) => {
+/**
+* Asks the registry when the daily check is due; never throws. `current` is the
+* running version, which says whether the `canary` tag counts.
+*/
+const checkIfDue = async (file, options, current) => {
 	try {
 		const now = /* @__PURE__ */ new Date();
 		const cache = readUpdateCache(file);
@@ -1723,7 +1734,8 @@ const checkIfDue = async (file, options) => {
 		const registry = registryOf(options.env ?? process.env);
 		await refreshUpdateCache(file, options.name, now, {
 			...registry === void 0 ? {} : { registry },
-			...options.fetch === void 0 ? {} : { fetch: options.fetch }
+			...options.fetch === void 0 ? {} : { fetch: options.fetch },
+			current
 		});
 		return true;
 	} catch {
@@ -1750,7 +1762,7 @@ const createUpdates = (input) => {
 	let timer;
 	if (options !== void 0 && reason === null) {
 		const due = () => {
-			checkIfDue(file, options).then((asked) => {
+			checkIfDue(file, options, version).then((asked) => {
 				if (asked) record = null;
 				return asked;
 			});
@@ -2276,7 +2288,8 @@ const askPlan = async (context) => {
 	const latest = await fetchLatest(options.name, {
 		...registry === void 0 ? {} : { registry },
 		...options.fetch === void 0 ? {} : { fetch: options.fetch },
-		timeoutMs: ASK_TIMEOUT_MS
+		timeoutMs: ASK_TIMEOUT_MS,
+		current
 	});
 	const script = options.script ?? runningScript();
 	const plan = planUpgrade({

package/dist/{src-BHnxpJyH.mjs → src-B9v0lDc6.mjs}

@@ -1,10 +1,33 @@
-import { At as FEEDBACK_KINDS, Mt as FEEDBACK_TARGETS, ct as parseReport, jt as FEEDBACK_SEVERITIES } from "./src-CGqMati3.mjs";
+import { Bt as FEEDBACK_TARGETS, Rt as FEEDBACK_KINDS, pt as parseReport, zt as FEEDBACK_SEVERITIES } from "./src-hrj2h0IZ.mjs";
 import { z } from "zod";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createInterface } from "node:readline";
 import { spawn } from "node:child_process";
 import { createServer } from "node:http";
 import { createSdkMcpServer, query, tool } from "@anthropic-ai/claude-agent-sdk";
+// ../runtime-claude/src/cache-env.ts
+/** Claude Code's switch for the one-hour prompt cache. */
+const PROMPT_CACHE_1H = "ENABLE_PROMPT_CACHING_1H";
+/** The variables a session adds to its driver's environment. */
+const cacheEnv = (spec) => spec.promptCache === "1h" ? { [PROMPT_CACHE_1H]: "1" } : {};
+// ../runtime-claude/src/clean.ts
+/** Claude Code's switch that turns its auto-memory off. */
+const NO_AUTO_MEMORY = "CLAUDE_CODE_DISABLE_AUTO_MEMORY";
+/**
+* The CLI flag that moves the per-machine sections (working directory, memory
+* path, git status) out of the system prompt; the SDK's
+* `excludeDynamicSections`.
+*/
+const EXCLUDE_DYNAMIC_SECTIONS = "--exclude-dynamic-system-prompt-sections";
+/** Whether the session loads no MCP server but Ork's. */
+const strictMcpOf = (spec) => spec.tools.strictMcp === true || spec.machineClaude !== true;
+/** The variables that keep the machine's auto-memory out of a session. */
+const memoryEnv = (spec) => spec.machineClaude === true ? {} : { [NO_AUTO_MEMORY]: "1" };
+/** Everything a session adds to its driver's environment. */
+const driverEnv = (spec) => ({
+	...cacheEnv(spec),
+	...memoryEnv(spec)
+});
 // ../runtime-claude/src/normalize.ts
 /**
 * @file Both drivers emit the same message JSON (the Agent SDK's messages are
@@ -520,8 +543,16 @@ const askUserTool = defineTool({
 		context: z.string().optional().describe("What the user needs to know to decide, in a few sentences.")
 	},
 	run: async ({ nodeId, ports }, args) => {
+		let note;
+		let owner;
 		const question = {
 			nodeId,
+			onNote: (given) => {
+				note = given;
+			},
+			onOwner: (given) => {
+				owner = given;
+			},
 			question: args.question,
 			options: args.options.map((o) => {
 				const choice = { id: o.id };
@@ -533,7 +564,8 @@ const askUserTool = defineTool({
 		if (args.recommended !== void 0) question.recommended = args.recommended;
 		if (args.context !== void 0) question.context = args.context;
 		const answer = await ports.human.ask(question);
-		return text(`The user chose: ${answer}`);
+		const who = owner === void 0 ? "The user" : `Your owner, \`${owner}\`,`;
+		return text(note === void 0 ? `${who} chose: ${answer}` : `${who} chose: ${answer}\nThey said: ${note}`);
 	}
 });
 // ../runtime-claude/src/tools/claims.ts
@@ -707,11 +739,12 @@ const answerTool = defineTool({
 	description: "Answer a question Ork asked you as the owner of a node, such as a loop of yours that ran out of rounds. The question's id and options are in Ork's message.",
 	shape: {
 		question: z.string().describe("The question's id, e.g. 'q1'."),
-		choice: z.string().describe("One of its options.")
+		choice: z.string().describe("One of its options."),
+		note: z.string().optional().describe("Why, in a sentence or two; it is recorded with your answer.")
 	},
 	available: ({ ports }) => ports.mailbox !== void 0 && ports.ownership !== void 0,
 	run: ({ ports }, args) => {
-		const answered = ports.mailbox?.answer(args.question, args.choice);
+		const answered = ports.mailbox?.answer(args.question, args.choice, args.note);
 		if (answered === void 0) return Promise.resolve(text("No questions."));
 		return Promise.resolve(text(answered.ok ? `Answered ${args.question}: ${args.choice}.` : `Not answered: ${answered.error}.`));
 	}
@@ -802,6 +835,7 @@ const buildCliArgs = (spec, mcp, allowed) => {
 		spec.settingSources.join(","),
 		"--append-system-prompt",
 		spec.systemAppend,
+		EXCLUDE_DYNAMIC_SECTIONS,
 		"--permission-mode",
 		spec.permissionMode,
 		"--json-schema",
@@ -814,6 +848,7 @@ const buildCliArgs = (spec, mcp, allowed) => {
 		[...spec.tools.allow, ...allowed].join(",")
 	];
 	if (spec.tools.only !== void 0) args.push("--tools", spec.tools.only.join(","));
+	if (strictMcpOf(spec)) args.push("--strict-mcp-config");
 	if (spec.agents !== void 0) args.push("--agents", JSON.stringify(spec.agents));
 	if (spec.tools.deny.length > 0) args.push("--disallowedTools", spec.tools.deny.join(","));
 	if (spec.model !== void 0) args.push("--model", spec.model);
@@ -821,6 +856,7 @@ const buildCliArgs = (spec, mcp, allowed) => {
 	if (spec.maxTurns !== void 0) args.push("--max-turns", String(spec.maxTurns));
 	if (spec.budgetUsd !== void 0) args.push("--max-budget-usd", String(spec.budgetUsd));
 	if (spec.resume !== void 0) args.push("--resume", spec.resume);
+	if (spec.resume !== void 0 && spec.fork === true) args.push("--fork-session");
 	for (const dir of spec.plugins ?? []) args.push("--plugin-dir", dir);
 	const settings = mcp.holdUrl === void 0 ? spec.settings : withHoldHook(spec.settings, mcp.holdUrl, mcp.token);
 	if (settings !== void 0) args.push("--settings", JSON.stringify(settings));
@@ -857,7 +893,10 @@ const createCliRuntime = (options = {}) => ({
 			} : mcp;
 			const legOf = (args, carried) => runLeg({
 				bin: options.bin ?? "claude",
-				env: options.env ?? process.env,
+				env: {
+					...options.env ?? process.env,
+					...driverEnv(spec)
+				},
 				cwd: spec.cwd,
 				args,
 				carried,
@@ -886,7 +925,8 @@ const createCliRuntime = (options = {}) => ({
 					}
 					args = buildCliArgs({
 						...spec,
-						resume: leg.sessionId
+						resume: leg.sessionId,
+						fork: false
 					}, endpoint, allowed);
 				}
 			} finally {
@@ -955,7 +995,8 @@ const createQueue = () => {
 // ../runtime-claude/src/sdk.ts
 /**
 * @file The SDK driver: runs a session in-process with the Claude Agent SDK,
-*   only with an API key or a cloud provider, never a claude.ai login. A node
+*   only with an API key or a cloud provider, never a claude.ai login, clean of
+*   the machine's Claude setup unless the run asks for it (ADR-065). A node
 *   that can be paused gets a `PreToolUse` callback hook: a short pause holds
 *   the call, a long one defers it and resumes the session when the node
 *   continues (ADR-041).
@@ -1015,12 +1056,16 @@ const buildSdkOptions = (spec, ports, env, held) => {
 	});
 	const options = {
 		cwd: spec.cwd,
-		env: definedEnv(env),
+		env: definedEnv({
+			...env,
+			...driverEnv(spec)
+		}),
 		settingSources: spec.settingSources,
 		systemPrompt: {
 			type: "preset",
 			preset: "claude_code",
-			append: spec.systemAppend
+			append: spec.systemAppend,
+			excludeDynamicSections: true
 		},
 		permissionMode: spec.permissionMode,
 		allowedTools: [...spec.tools.allow, ...preapprovedTools(tools)],
@@ -1046,12 +1091,14 @@ const buildSdkOptions = (spec, ports, env, held) => {
 		}
 	};
 	if (spec.tools.only !== void 0) options.tools = spec.tools.only;
+	if (strictMcpOf(spec)) options.strictMcpConfig = true;
 	if (spec.agents !== void 0) options.agents = spec.agents;
 	if (spec.model !== void 0) options.model = spec.model;
 	if (spec.effort !== void 0) options.effort = spec.effort;
 	if (spec.maxTurns !== void 0) options.maxTurns = spec.maxTurns;
 	if (spec.budgetUsd !== void 0) options.maxBudgetUsd = spec.budgetUsd;
 	if (spec.resume !== void 0) options.resume = spec.resume;
+	if (spec.resume !== void 0 && spec.fork === true) options.forkSession = true;
 	if (spec.plugins !== void 0) options.plugins = spec.plugins.map((dir) => ({
 		type: "local",
 		path: dir
@@ -1081,7 +1128,8 @@ const createSdkRuntime = (env = process.env, holdWindowMs) => ({
 			deferring = false;
 			const legSpec = resume === void 0 ? spec : {
 				...spec,
-				resume
+				resume,
+				fork: false
 			};
 			current = query({
 				prompt: input,