@krapht/ork 1.0.0-alpha.0 → 1.0.0-alpha.10

package/dist/bin.mjs

@@ -1,58 +1,27 @@
 #!/usr/bin/env node
-import { Bn as serializeWorkflow, Bt as FEEDBACK_TARGETS, Cn as runDirOf, D as inspectProject, Dn as projectRootOf, Dt as userMessageText, En as inside, Ft as PROJECT_FILE, H as tellNode, Ht as planPost, I as createCalls, It as gitRulesOf, J as tellLiveRun, Jn as beforeOf, Jt as normalizeTitle, Kn as settingsOf, Kt as createFeedback, L as addressOf, Lt as loadProject, M as clearGitLocalEnv, N as parseInputPairs, P as resolveInputs, R as endLink, Rt as FEEDBACK_KINDS, Sn as projectsHome, Tt as startRun, Un as WorkflowSchema, V as peerOf, W as flattenTree, Wt as sendPost, Xt as maskReplacer, Yn as isClaudeNode, _ as lateTriggers, _n as hasInRepoFiles, _t as runStatus, an as wakeRun, ar as CLAUDE_DRIVERS, bn as placeFiles, cn as planMoveInto, d as runningRunIds, dn as toolsInUse, dt as namingNoDriver, er as INTEGRATIONS, et as adoptedCalls, f as runningScript, fn as createAgent, ft as sessionDriver, h as isNewer, hn as loadAgents, ht as liveStatus, i as NOT_STARTED, in as socketRoom, ir as ORK_LAYOUT, it as replayLoopAnswers, l as planUpgrade, ln as linkTools, mn as catalogAgent, n as resolveBase, nn as serveRun, nt as resumable, on as planAgentMigration, or as firstLine, ot as detachRun, pn as deleteAgent, q as requestStop, qt as fingerprint, rn as socketPath, rr as AGENT_TOOL_LAYOUTS, rt as createReplay, sn as applySteps, st as followEvents, t as createWorkspace, tt as detachResume, u as releaseNotes, un as toolLinks, ut as planNodeSession, v as triggersReport, vn as inRepoPlace, vt as runTree, wn as shownPath, wt as walkSummary, xn as placeFor, yn as newProjectId, z as endLinksOf, zt as FEEDBACK_SEVERITIES } from "./src-DHvWU4tX.mjs";
-import { C as feedbackActions, S as placeOf, _ as previewPost, b as acceptItem, c as checkDue, d as pendingNotice, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, n as ORK_VERSION, o as updateSwitchOff, p as refreshUpdateCache, r as isSwitchedOn, s as runInstall, t as ORK_NAME, u as newerVersion$1, v as checkNote, w as openFixRun, y as recordNote } from "./__build_info__-DdTVd2p5.mjs";
-import { i as builtinWorkflowFile, n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-B81wCZQg.mjs";
-import { n as newRunId, t as findRun } from "./find-BKW-uGey.mjs";
-import { a as write, c as openStore, i as style, l as storePath, n as cost, o as writeErr, s as nodeOf, t as confirm } from "./output-B1V6ZJSx.mjs";
-import { n as listOrkWorktrees, t as createdWorktrees } from "./list-C7UEgmtd.mjs";
-import { a as planClean, t as applyClean } from "./clean-NnboOuz6.mjs";
+import { $ as adoptedCalls, A as inspectProject, An as inside, B as createCalls, Cn as newProjectId, Ct as runTree, D as openStore, Dn as runDirOf, E as isNodeEvent, En as projectsHome, F as clearGitLocalEnv, G as peerOf, H as endLink, Hn as beforeOf, Ht as FEEDBACK_KINDS, I as parseInputPairs, It as PROJECT_FILE, J as flattenTree, Jt as sendPost, K as tellNode, Kn as serializeWorkflow, Kt as planPost, L as resolveInputs, Lt as gitRulesOf, On as shownPath, Ot as nestItems, Q as tellLiveRun, Qn as settingsOf, Qt as normalizeTitle, Rt as loadProject, Sn as inRepoPlace, St as runStatus, Tn as placeFor, U as endLinksOf, Ut as FEEDBACK_SEVERITIES, V as addressOf, Wt as FEEDBACK_TARGETS, Xt as createFeedback, Yn as WorkflowSchema, Z as requestStop, Zt as fingerprint, _n as createAgent, an as socketPath, at as followEvents, bn as loadAgents, bt as liveStatus, ct as planNodeSession, d as runningRunIds, dn as planAgentMigration, dr as readyDriver, er as isClaudeNode, et as detachResume, f as runningScript, fn as applySteps, fr as AGENT_TOOL_LAYOUTS, gn as toolsInUse, gt as startRun, h as isNewer, hn as toolLinks, ht as walkSummary, i as NOT_STARTED, in as serveRun, ir as retiredDriverHint, it as detachRun, jn as projectRootOf, l as planUpgrade, ln as maskReplacer, mn as linkTools, mr as AGENT_DRIVERS, n as resolveBase, nt as listKey, pn as planMoveInto, pr as ORK_LAYOUT, rt as DETACHED_ENV, sn as wakeRun, t as createWorkspace, tt as resumable, u as releaseNotes, un as maskSecrets, ur as driverChecks, ut as sessionDriver, vn as deleteAgent, vt as userMessageText, wn as placeFiles, wt as templateOf, xn as hasInRepoFiles, yn as catalogAgent } from "./src-Df6KOIDC.mjs";
+import { C as placeOf, T as openFixRun, _ as nodeSession, b as recordNote, f as readUpdateCache, g as activeTree, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, n as ORK_VERSION, s as runInstall, t as ORK_NAME, v as previewPost, w as feedbackActions, x as acceptItem, y as checkNote } from "./__build_info__-DFF18K8y.mjs";
+import { i as builtinWorkflowFile, n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-3l9q8UtX.mjs";
+import { n as newRunId, t as findRun } from "./find-DEjjOlTG.mjs";
+import { n as listOrkWorktrees, t as createdWorktrees } from "./list-Qxr6rwsY.mjs";
+import { a as planClean, t as applyClean } from "./clean-DVaEH9e7.mjs";
 import { c as subcommandsOf, i as argsOf, n as groupedEntries, o as publicArgs, s as resolved, t as groupOf } from "./help-groups-BwYoAWsh.mjs";
-import { a as formatRunEvent, i as formatEvent, n as formatRuns, o as createTerminalHuman, r as formatTree, t as ago } from "./format-CmTlTOjT.mjs";
-import { c as registeredProjects, i as refusedBuiltin, n as WORKFLOW_SUFFIX, o as workflowArg, s as projectAt, t as WORKFLOW_DIR } from "./workflows-CiM7S3l0.mjs";
-import { a as validate, c as warningLines, i as loadWorkflow, o as validateFile, r as formatReport, s as walkLoaded, t as context } from "./context-DO3sBy9v.mjs";
-import { i as runLimits, r as limitsRefusal, t as chatNotice } from "./limits-JCve2QpI.mjs";
-import { _ as resultOf, a as builtinExecutors, d as maskedEnv, f as maskedNamesOfRun, g as clearOutputFiles, h as sessionEnv, i as onPath, l as clearStateFiles, m as runScrubber, n as missingProgramMessage, r as missingPrograms, t as envProblems } from "./src-C38BPzit.mjs";
-import { i as decideRefusal, n as chatRefusal } from "./in-a-run-BPXX09Bs.mjs";
+import { a as write, i as style, n as cost, o as writeErr, t as confirm } from "./output-Bqljtmp_.mjs";
+import { _ as namedMcpEntries, a as builtinExecutors, d as maskedEnv, f as maskedNamesOfRun, g as clearOutputFiles, h as sessionEnv, i as onPath, l as clearStateFiles, m as runScrubber, n as missingProgramMessage, r as missingPrograms, t as envProblems, v as resultOf } from "./src-cmmXKHn1.mjs";
+import { c as registeredProjects, i as refusedBuiltin, n as WORKFLOW_SUFFIX, o as workflowArg, s as projectAt, t as WORKFLOW_DIR } from "./workflows-BT1gDRIV.mjs";
+import { C as startUpdateCheck, S as showUpdateNotice, _ as runChecks, a as validate, c as warningLines, d as runReadyDriver, f as unfitLines, g as orkCheck, h as headWarning, i as loadWorkflow, l as checksHere, m as experimentsCheck, o as validateFile, p as exec, r as formatReport, s as walkLoaded, t as context, u as chooseReadyDriver, v as socketCheck, w as updateCheckOff, x as runUpdateChild, y as triggerChecks } from "./context-CEaKOVmG.mjs";
+import { a as nodeVerdict, i as hasConflict, n as formatRuns, o as firstLine, r as formatTree, s as formatBusEvent, t as ago } from "./format-Cb5_m-Qd.mjs";
+import { i as runLimits, r as limitsRefusal, t as chatNotice } from "./limits-BSwEjQST.mjs";
+import { i as decideRefusal, n as chatRefusal } from "./in-a-run-BS9Nc-JW.mjs";
 import path from "node:path";
 import { stringify } from "yaml";
 import { z } from "zod";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { homedir } from "node:os";
-import { execFile, spawn } from "node:child_process";
 import { setTimeout } from "node:timers/promises";
 import { defineCommand, renderUsage, runMain } from "citty";
 import { createInterface } from "node:readline/promises";
-import { styleText } from "node:util";
-// ../integrations/src/ready.ts
-/**
-* @file Which Claude driver is ready on this machine: each driver's own check
-*   (what `ork doctor` shows), and the one a run takes for the nodes that name
-*   no driver, so a committed workflow never carries one person's login.
-*/
-/** Each registered Claude driver's own check, in registry order. */
-const driverChecks = (run, env) => Promise.all(CLAUDE_DRIVERS.map(async (driver) => ({
-	id: driver.id,
-	result: await driver.doctor(run, env)
-})));
-/**
-* The driver ready here: the one whose check passes; with more than one,
-* {@link PREFERRED_DRIVER}; with none, each driver's hint.
-*/
-const readyDriver = (checks) => {
-	const ready = checks.filter(({ result }) => result.status === "ok");
-	const pick = ready.find(({ id }) => id === "cli") ?? ready.at(0);
-	if (pick === void 0) return {
-		ok: false,
-		hints: checks.flatMap(({ result }) => result.hint === void 0 ? [] : [result.hint])
-	};
-	return {
-		ok: true,
-		driver: pick.id,
-		detail: pick.result.detail,
-		ready: ready.length
-	};
-};
 // ../core/src/control/queue.ts
 const PERMISSION_OPTIONS = [{
 	id: "allow",
@@ -64,14 +33,33 @@ const PERMISSION_OPTIONS = [{
 const DENIED = "The user did not allow this tool.";
 /** The deny message a session gets, with the person's words when given. */
 const deniedMessage = (note) => note === void 0 ? DENIED : `${DENIED} They said: ${note}`;
-/** At most `max` characters of a tool's input, for the decision's context. */
-const inputPreview = (input, max = 400) => {
-	const json = JSON.stringify(input);
-	return json.length > max ? `${json.slice(0, max - 1)}…` : json;
+/** The input fields that say what a tool will do, the first one present. */
+const TOOL_INPUT_KEYS = [
+	"command",
+	"file_path",
+	"path",
+	"url",
+	"pattern"
+];
+/** A tool's input for the decision's context: as written, cut at `max`. */
+const inputContext = (input, max = 4e3) => {
+	const key = TOOL_INPUT_KEYS.find((k) => typeof input[k] === "string");
+	const text = key === void 0 ? JSON.stringify(input, void 0, 2) : String(input[key]);
+	return text.length > max ? `${text.slice(0, max - 1)}…` : text;
 };
 const createDecisionQueue = (options) => {
 	const { store, runId, emit } = options;
-	let count = 0;
+	const earlier = store.decisions({ runId });
+	let count = Math.max(0, ...earlier.map(({ id }) => Number(id.slice(runId.length + 1)) || 0));
+	for (const { id, node, status } of earlier) {
+		if (status !== "open") continue;
+		store.withdrawDecision(id);
+		emit({
+			type: "decision.withdrawn",
+			node,
+			decision: id
+		});
+	}
 	/** Opens a decision and settles it with the first answer. */
 	const decide = (open, local, withdrawn) => {
 		count += 1;
@@ -155,12 +143,16 @@ const createDecisionQueue = (options) => {
 			};
 			if (question.recommended !== void 0) open.recommended = question.recommended;
 			if (question.context !== void 0) open.context = question.context;
+			if (question.document !== void 0) open.document = question.document;
 			if (question.owner !== void 0) open.owner = question.owner;
 			const { local } = options;
 			return decide(open, local === void 0 ? void 0 : (signal) => {
 				let note;
 				return local.ask({
 					...question,
+					question: maskSecrets(question.question),
+					...question.context === void 0 ? {} : { context: maskSecrets(question.context) },
+					...question.document === void 0 ? {} : { document: maskSecrets(question.document) },
 					signal,
 					onNote: (given) => {
 						note = given;
@@ -219,7 +211,7 @@ const createDecisionQueue = (options) => {
 				kind: "permission",
 				question: `Allow ${request.toolName}?`,
 				options: PERMISSION_OPTIONS,
-				context: inputPreview(request.input)
+				context: inputContext(request.input)
 			}, local === void 0 ? void 0 : (signal) => {
 				let said;
 				return local.permit({
@@ -236,7 +228,7 @@ const createDecisionQueue = (options) => {
 						note: said
 					};
 				});
-			});
+			}, request.signal);
 			if (note !== void 0) request.onNote?.(note);
 			return answer === "allow" ? { allow: true } : {
 				allow: false,
@@ -613,6 +605,89 @@ const createRelay = (options) => {
 		}
 	};
 };
+// ../core/src/run/replay.ts
+const NO_FAN_OUTS = {
+	lists: /* @__PURE__ */ new Map(),
+	items: /* @__PURE__ */ new Map()
+};
+/** Whether an activation's input carries a result this run made anew. */
+const carries = (fresh, input) => {
+	if (input === void 0) return false;
+	if (fresh.has(input)) return true;
+	const results = input["results"];
+	if (results === null || typeof results !== "object") return false;
+	return Object.values(results).some((value) => value !== null && typeof value === "object" && fresh.has(value));
+};
+/**
+* Hands each node's recorded results back in order, until the node runs anew
+* once (it failed or never finished last time, or its input is new); from then
+* on it always runs. A node cut off mid-session continues that session, once.
+*/
+const createReplay = (history, cutOff = /* @__PURE__ */ new Map(), mail, earlier, fanOuts = NO_FAN_OUTS) => {
+	const sessions = new Map(cutOff);
+	const used = /* @__PURE__ */ new Map();
+	const anew = /* @__PURE__ */ new Set();
+	const fresh = /* @__PURE__ */ new WeakSet();
+	/** Fanned nodes whose list was resolved anew: their items can't be replayed. */
+	const renewed = /* @__PURE__ */ new Set();
+	const takeItem = (activation, of) => {
+		const recorded = fanOuts.items.get(activation.id)?.get(activation.round ?? 0);
+		if (recorded !== void 0 && !renewed.has(of) && !carries(fresh, activation.input)) return recorded;
+		anew.add(activation.id);
+		return null;
+	};
+	return {
+		take: (activation) => {
+			const { id } = activation;
+			if (activation.brief !== void 0 || anew.has(id)) return null;
+			if (activation.item !== void 0) return takeItem(activation, activation.item.of);
+			const index = used.get(id) ?? 0;
+			const recorded = history.get(id)?.[index];
+			if (recorded === void 0 || carries(fresh, activation.input)) {
+				anew.add(id);
+				return null;
+			}
+			used.set(id, index + 1);
+			return recorded;
+		},
+		ran: (result) => {
+			fresh.add(result.output);
+		},
+		cutOff: (activation) => {
+			const session = activation.brief === void 0 && (activation.item === void 0 || !renewed.has(activation.item.of)) ? sessions.get(activation.id) : void 0;
+			sessions.delete(activation.id);
+			return session;
+		},
+		listed: (id, round, source) => {
+			const list = fanOuts.lists.get(listKey(id, round));
+			const ranAnew = typeof source === "object" && source !== null && fresh.has(source);
+			if (list !== void 0 && !ranAnew) return list;
+			renewed.add(id);
+			return null;
+		},
+		previousSession: ({ id, item, round = 0 }) => item === void 0 || renewed.has(item.of) ? void 0 : [...fanOuts.items.get(id) ?? []].findLast(([before]) => before < round)?.[1].sessionId,
+		lastOutput: (id) => history.get(id)?.at(-1)?.output,
+		kept: () => [...history.keys(), ...fanOuts.items.keys()],
+		...mail === void 0 ? {} : { mail },
+		...earlier === void 0 ? {} : { earlier }
+	};
+};
+/**
+* The run's `HumanChannel`, answering questions about loops out of rounds as
+* they were answered last time, in order; anything else goes to `human`.
+*/
+const replayLoopAnswers = (human, answers) => {
+	const left = [...answers];
+	return {
+		permit: (request) => human.permit(request),
+		...human.settled === void 0 ? {} : { settled: human.settled },
+		ask: (question) => {
+			const index = left.findIndex((a) => a.question === question.question);
+			const [given] = index === -1 ? [] : left.splice(index, 1);
+			return given === void 0 ? human.ask(question) : Promise.resolve(given.answer);
+		}
+	};
+};
 // ../core/src/store/recorder.ts
 /**
 * @file Records a run as it happens: each event appended to the store and
@@ -699,291 +774,285 @@ const renderHelp = async (cmd, parent) => {
 const showHelp = async (cmd, parent) => {
 	process.stdout.write(`${await renderHelp(cmd, parent)}\n\n`);
 };
-// src/update/notify.ts
+// src/human.ts
 /**
-* @file The new-version notice (ADR-038). At most once a day a command starts a
-*   detached copy of `ork` that asks the npm registry for the latest version
-*   and records it in `~/.ork/update-check.json`, so no command waits on the
-*   network; a later command, when a newer version is known, ends with one line
-*   on stderr (once a day). Off in CI, without a terminal, with `--json`, and
-*   with `ORK_NO_UPDATE_CHECK=1` or `NO_UPDATE_NOTIFIER=1`.
+* @file The terminal `HumanChannel`: answers `ask_user` questions, gates and
+*   permission prompts on the terminal, one at a time, and denies or defers
+*   when no one is there. After a choice it offers one optional line for a
+*   note, which Enter skips. In a run it is the decision queue's local
+*   answerer, racing `ork decide`.
 */
-/** Set in the background copy of `ork` that only runs the check. */
-const UPDATE_CHILD_ENV = "ORK_UPDATE_CHECK_CHILD";
-/**
-* Why the automatic check is off for this command, or `null` when it is on: the
-* environment's switches (core's, which `ork ui` reads too), then where a
-* notice on stderr would go.
-*/
-const updateCheckOff = (env, argv, terminal) => {
-	const switched = updateSwitchOff(env);
-	if (switched !== null) return switched === "CI" ? "in CI" : "turned off";
-	if (isSwitchedOn(env["ORK_DETACHED"]) || !terminal) return "no terminal";
-	if (argv.includes("--json")) return "JSON output";
-	if (argv[0] === "upgrade") return "ork upgrade checks for itself";
-	if (argv[0] === "ui" && argv.includes("--serve")) return "ork ui's server checks for itself";
-	return null;
-};
-/** The notice's text. */
-const updateNotice = (latest, current) => `Ork ${latest} is out (you have ${current}). Upgrade with: ork upgrade`;
-/**
-* Starts the background check when one is due. Records the attempt first, so
-* commands started in the next moments do not start one too.
-*/
-const startUpdateCheck = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
-	try {
-		const cache = readUpdateCache(file);
-		if (!checkDue(cache, now)) return;
-		writeUpdateCache(file, {
-			...cache,
-			checkedAt: now.toISOString()
-		});
-		const child = spawn(process.execPath, [...process.execArgv, process.argv[1] ?? ""], {
-			detached: true,
-			stdio: "ignore",
-			env: {
-				...process.env,
-				[UPDATE_CHILD_ENV]: "1"
-			}
-		});
-		child.on("error", () => {});
-		child.unref();
-	} catch {}
+const PREVIEW = 160;
+/** A document longer than this is offered (`d`) rather than printed. */
+const SHORT_DOCUMENT_LINES = 40;
+const NO_ONE_TO_PERMIT = "No one is at the terminal to approve this tool, so it is not allowed in this run.";
+const NOTE_PROMPT = "  Note for the run (optional, Enter to skip): ";
+const NO_ONE_TO_ASK = "no one (nobody is at the terminal; use your best judgment and say so in your report)";
+/** One line that shows what a tool is about to do. */
+const previewInput = (toolName, input) => {
+	const key = TOOL_INPUT_KEYS.find((k) => typeof input[k] === "string");
+	const line = (key === void 0 ? JSON.stringify(input) : `${key}: ${String(input[key])}`).replaceAll(/\s+/gu, " ").trim();
+	return line.length > PREVIEW ? `${toolName} ${line.slice(0, 159)}…` : `${toolName} ${line}`;
 };
-/** The background copy's whole job: ask the registry, record the answer. */
-const runUpdateChild = async () => {
-	const registry = registryOf(process.env);
-	await refreshUpdateCache(updateCachePath(), ORK_NAME, /* @__PURE__ */ new Date(), {
-		current: ORK_VERSION,
-		...registry === void 0 ? {} : { registry }
-	});
+/** The option an answer names: its number, or its id. */
+const pickOption = (answer, options, recommended) => {
+	const value = answer.trim();
+	if (value === "") return recommended;
+	const index = Number(value);
+	if (Number.isInteger(index) && index >= 1 && index <= options.length) return options[index - 1]?.id;
+	return options.find((o) => o.id === value)?.id;
 };
-/** Prints the notice when a newer version is known and not told today. */
-const showUpdateNotice = (file = updateCachePath(), now = /* @__PURE__ */ new Date()) => {
-	try {
-		const cache = readUpdateCache(file);
-		const latest = pendingNotice(cache, ORK_VERSION, now);
-		if (cache === null || latest === null) return;
-		const text = updateNotice(latest, ORK_VERSION);
-		process.stderr.write(`\n${styleText("yellow", text, { stream: process.stderr })}\n`);
-		writeUpdateCache(file, {
-			...cache,
-			notified: {
-				version: latest,
-				at: now.toISOString()
-			}
-		});
-	} catch {}
+const optionLine = (option, index, recommended) => {
+	const label = option.label === void 0 ? "" : ` ${option.label}`;
+	const description = option.description === void 0 ? "" : style("dim", ` - ${option.description}`);
+	const mark = option.id === recommended ? style("green", " (recommended)") : "";
+	return `  ${String(index + 1)}) ${style("bold", option.id)}${label}${description}${mark}`;
 };
-// src/update/upgrade.ts
 /**
-* @file `ork doctor`'s line for Ork itself (ADR-038): the running version
-*   against the last update check, read from the record without asking the
-*   network. What `ork upgrade` does is core's (`planUpgrade`, `runInstall`),
-*   shared with the server behind `ork ui`.
+* Answers permission prompts and `ask_user` questions on the terminal, one at a
+* time. Without a terminal it denies tools and leaves questions to the node. A
+* withdrawn prompt (answered elsewhere) rejects, which frees the turn.
 */
-/** `ork doctor`'s line for Ork itself, from the last check. */
-const versionCheck = (current, cache, checksOff) => {
-	const newer = newerVersion$1(cache, current);
-	if (newer !== null) return {
-		name: "ork",
-		status: "warn",
-		detail: `${current}; ${newer} is out`,
-		hint: "Run ork upgrade."
+const createTerminalHuman = (io) => {
+	let rl;
+	let turn = Promise.resolve();
+	const say = (text) => {
+		io.output.write(`${text}\n`);
 	};
-	return {
-		name: "ork",
-		status: "ok",
-		detail: `${current} (${cache?.latest === void 0 ? checksOff ? "update check off" : "not checked for updates yet" : `the latest as of ${cache.checkedAt.slice(0, 10)}`})`
+	const prompt = (text, signal) => {
+		if (rl === void 0) {
+			rl = createInterface({
+				input: io.input,
+				output: io.output
+			});
+			if (io.interrupt !== void 0) rl.on("SIGINT", io.interrupt);
+		}
+		return signal === void 0 ? rl.question(text) : rl.question(text, { signal });
 	};
-};
-// src/doctor/checks.ts
-/**
-* @file The checks behind `ork doctor`: Ork's own version against the last
-*   update check, each tool's presence and login status (the drivers' own
-*   checks, which `ork run` also reads to pick the one ready), and whether a
-*   run's socket path fits, through an injectable `exec` so tests need no real
-*   tools. Never prints a token or an account.
-*/
-const TIMEOUT_MS = 15e3;
-const exec = (program, args) => new Promise((resolve) => {
-	execFile(program, args, {
-		timeout: TIMEOUT_MS,
-		encoding: "utf8"
-	}, (error, stdout) => {
-		resolve({
-			ok: error === null,
-			stdout
-		});
-	});
-});
-/** Ork's own version, against the last update check (no network). */
-const orkCheck = () => versionCheck(ORK_VERSION, readUpdateCache(updateCachePath()), updateCheckOff(process.env, [], true) !== null);
-const MIN_NODE = [24, 20];
-const checkNode = (version) => {
-	const [major = 0, minor = 0] = version.split(".").map(Number);
-	const [minMajor, minMinor] = MIN_NODE;
-	return major > minMajor || major === minMajor && minor >= minMinor ? {
-		name: "node",
-		status: "ok",
-		detail: `v${version}`
-	} : {
-		name: "node",
-		status: "fail",
-		detail: `v${version}`,
-		hint: `Ork needs Node ${MIN_NODE.join(".")} or later.`
+	/** The optional line after a choice, when the asker takes a note. */
+	const takeNote = async (onNote, signal) => {
+		if (onNote === void 0) return;
+		const note = (await prompt(NOTE_PROMPT, signal)).trim();
+		if (note !== "") onNote(note);
 	};
-};
-const checkGit = async (run) => {
-	const version = await run("git", ["--version"]);
-	if (!version.ok) return [{
-		name: "git",
-		status: "fail",
-		detail: "not found",
-		hint: "Install git; Ork gives each writing node its own worktree."
-	}];
-	const inside = await run("git", ["rev-parse", "--is-inside-work-tree"]);
-	return [{
-		name: "git",
-		status: "ok",
-		detail: firstLine(version.stdout)
-	}, inside.ok ? {
-		name: "git repo",
-		status: "ok",
-		detail: "inside a work tree"
-	} : {
-		name: "git repo",
-		status: "warn",
-		detail: "not a git repository",
-		hint: "Run Ork inside a git repository so nodes can use worktrees."
-	}];
-};
-/**
-* Runs every check: Node and git, then every registered Claude driver and
-* integration (ADR-022). Node, git, and at least one driver are required;
-* integrations are optional.
-*/
-const runChecks = async (run, env, nodeVersion) => {
-	const [git, checked, tools] = await Promise.all([
-		checkGit(run),
-		driverChecks(run, env),
-		Promise.all(INTEGRATIONS.flatMap((i) => i.doctor === void 0 ? [] : [i.doctor(run, env)]))
-	]);
-	const drivers = checked.map(({ result }) => result);
-	const results = [
-		checkNode(nodeVersion),
-		...git,
-		...drivers,
-		...tools
-	];
-	return {
-		results,
-		ok: drivers.some((d) => d.status === "ok") && !results.some((r) => r.status === "fail")
+	const choose = async (hint, options, recommended, signal, document) => {
+		const answer = await prompt(`  Choose${hint}: `, signal);
+		const picked = pickOption(answer, options, recommended);
+		if (picked !== void 0) return picked;
+		if (document !== void 0 && answer.trim() === "d") say(document);
+		else say(style("dim", "  Type an option's number or id."));
+		return choose(hint, options, recommended, signal, document);
 	};
-};
-/**
-* Whether a run's socket fits under `~` (L38). Past the limit a run can't
-* listen, and nothing else says so: answers, commands and followers fall back
-* to the store, a second at a time. `home` is the user's `~`.
-*/
-const socketCheck = (home, platform) => {
-	const { bytes, max } = socketRoom(home, platform);
-	if (max === void 0 || bytes <= max) return {
-		name: "sockets",
-		status: "ok",
-		detail: max === void 0 ? "not Unix sockets here" : `${String(bytes)} of ${String(max)} bytes`
+	const oneAtATime = (work) => {
+		const result = turn.then(work);
+		turn = result.catch(() => null);
+		return result;
 	};
 	return {
-		name: "sockets",
-		status: "warn",
-		detail: `a run's socket path is ${String(bytes)} bytes, past the ${String(max)} this system allows`,
-		hint: "Runs still work, but answers, commands and `ork logs --follow` wait up to a second for each, as they read the store instead. A shorter home folder path fixes it."
+		permit: ({ nodeId, toolName, input, signal, onNote }) => oneAtATime(async () => {
+			if (signal?.aborted === true) throw new Error("the prompt was withdrawn");
+			say(`${style(["yellow", "bold"], "?")} ${style("bold", nodeId)} wants to run ${previewInput(toolName, input)}`);
+			if (!io.interactive) {
+				say(style("dim", `  denied: ${NO_ONE_TO_PERMIT}`));
+				return {
+					allow: false,
+					message: NO_ONE_TO_PERMIT
+				};
+			}
+			const answer = (await prompt("  Allow? [y/N] ", signal)).trim().toLowerCase();
+			if (answer === "y" || answer === "yes") return { allow: true };
+			await takeNote(onNote, signal);
+			return {
+				allow: false,
+				message: "The user did not allow this tool."
+			};
+		}),
+		ask: ({ nodeId, question, options, recommended, context, document, signal, onNote }) => oneAtATime(async () => {
+			if (signal?.aborted === true) throw new Error("the question was withdrawn");
+			const documentLines = document?.trimEnd().split("\n").length ?? 0;
+			if (document !== void 0 && documentLines <= SHORT_DOCUMENT_LINES) say(document);
+			say(`${style(["yellow", "bold"], "?")} ${style("bold", nodeId)} asks: ${question}`);
+			if (context !== void 0) say(style("dim", `  ${context.replaceAll("\n", "\n  ")}`));
+			for (const [index, option] of options.entries()) say(optionLine(option, index, recommended));
+			if (!io.interactive) {
+				const answer = recommended ?? NO_ONE_TO_ASK;
+				say(style("dim", `  no terminal; answered ${answer}`));
+				return answer;
+			}
+			const fallback = options.findIndex((o) => o.id === recommended);
+			const hint = fallback === -1 ? "" : ` [${String(fallback + 1)}]`;
+			if (documentLines > SHORT_DOCUMENT_LINES) say(`  Document: ${String(documentLines)} lines. Type d to read it.`);
+			const picked = await choose(hint, options, recommended, signal, document);
+			await takeNote(onNote, signal);
+			return picked;
+		}),
+		close: () => {
+			rl?.close();
+		}
 	};
 };
-/**
-* What it says of triggers (RFC-011): a long-lived process can die quietly, so
-* a live trigger that hasn't looked when it should have is worth saying. `home`
-* is the user's `~` (tests pass a folder).
-*/
-const triggerChecks = (home) => {
-	const store = openStore(storePath(home));
-	try {
-		const report = triggersReport(store, store.projects(), home);
-		const broken = report.broken.map(({ file, message }) => ({
-			name: "triggers",
-			status: "warn",
-			detail: `${file}: ${message}`,
-			hint: "Its triggers are off until it can be read."
-		}));
-		const live = report.triggers.filter(({ standing }) => standing === "live");
-		if (live.length === 0) return broken;
-		const late = lateTriggers(report, /* @__PURE__ */ new Date());
-		if (late.length === 0) return [...broken, {
-			name: "ork watch",
-			status: "ok",
-			detail: `${String(live.length)} trigger(s) looking`
-		}];
-		return [...broken, {
-			name: "ork watch",
-			status: "warn",
-			detail: `not looking: ${late.map(({ trigger }) => trigger).join(", ")}`,
-			hint: report.pid === void 0 ? "Start it with `ork watch --detach`." : "See `ork watch --status`."
-		}];
-	} finally {
-		store.close();
-	}
+// src/run/format-result.ts
+const RUN_MARK = {
+	succeeded: style("green", "✓"),
+	failed: style("red", "✗"),
+	budget_exhausted: style("yellow", "!"),
+	quota_exhausted: style("yellow", "!"),
+	timed_out: style("yellow", "!"),
+	interrupted: style("yellow", "!")
 };
-// src/run/ready-driver.ts
+/** `1 failure handled`, `2 failures handled`. */
+const failuresHandled = (count) => `${String(count)} ${count === 1 ? "failure" : "failures"} handled`;
 /**
-* @file The driver a run takes for the session nodes that name none (core's
-*   `driver.ts` has the whole rule): the one `ork doctor`'s own checks find
-*   ready on this machine, said in one line. With none ready, the run stops
-*   before any session starts, with the hints `ork doctor` gives. A resumed run
-*   keeps the driver it recorded.
+* The run summary: status, cost, what ran, what was skipped and which failures
+* an edge handled, branches to look at, why, and mail to nodes that never ran.
 */
-/** The real checks: the tools on this machine and its environment. */
-const checksHere = () => driverChecks(exec, process.env);
-const subject = (names, all) => {
-	if (all) return "No driver is named, so the run uses";
-	const [only] = names;
-	return names.length === 1 && only !== void 0 ? `${only} names no driver, so it uses` : `${names.join(", ")} name no driver, so they use`;
+const formatRunResult = (result) => {
+	const ran = result.nodes.filter((n) => n.runs > 0).length;
+	const skipped = result.skipped ?? result.nodes.length - ran;
+	const handled = result.failuresHandled ?? 0;
+	const lines = ["", `${RUN_MARK[result.status]} run ${result.runId} ${result.status.replace("_", " ")} ${style("dim", `· ${cost(result.costUsd)} · ${String(ran)} ran, ${String(skipped)} skipped${handled === 0 ? "" : `, ${failuresHandled(handled)}`}`)}`];
+	for (const kept of result.worktrees) lines.push(`  ${kept.id}: ${kept.branch ?? "detached"} ${style("dim", `at ${kept.path} (${kept.reason})`)}`);
+	for (const reason of result.reasons) lines.push(`  ${style("red", reason)}`);
+	for (const { node, messages } of result.unread ?? []) lines.push(`  ${style(["yellow", "bold"], "warning")} ${node} never ran, so ${messages === 1 ? "1 message" : `${String(messages)} messages`} to it went unread`);
+	return lines;
 };
-/**
-* The driver for `names`, the session nodes that name none, from `checks`.
-* `all` says whether they are every session node of the run.
-*/
-const chooseReadyDriver = (names, all, checks) => {
-	const ready = readyDriver(checks);
-	if (!ready.ok) return {
-		ok: false,
-		lines: [
-			`No Claude driver is ready here, and ${names.join(", ")} ${names.length === 1 ? "names" : "name"} none.`,
-			...ready.hints,
-			"See `ork doctor`."
-		]
-	};
-	const why = ready.ready === 1 ? `the one ready here (${ready.detail})` : `more than one is ready, and a run takes ${ready.driver} first`;
-	return {
-		ok: true,
-		driver: ready.driver,
-		line: `${subject(names, all)} the ${ready.driver} driver: ${why}.`
-	};
+// src/run/format.ts
+/** Who answered a decision, as the log says it. */
+const ANSWERED_BY = {
+	terminal: "terminal",
+	decide: "ork decide",
+	ui: "ork ui",
+	owner: "its owner"
 };
-/**
-* What a run takes for its session nodes that name no driver: nothing when
-* `--driver` overrides them all or each names one; the driver a resumed run
-* recorded; otherwise the one ready here.
-*/
-const runReadyDriver = async (workflow, options) => {
-	if (options.override !== void 0) return { ok: true };
-	const names = namingNoDriver(workflow);
-	if (names.length === 0) return { ok: true };
-	if (options.recorded !== void 0) return {
-		ok: true,
-		driver: options.recorded
-	};
-	const sessions = Object.values(workflow.nodes).filter((node) => node.type === "claude.leader" || node.type === "claude.worker").length;
-	return chooseReadyDriver(names, names.length === sessions, await (options.checks ?? checksHere)());
+const STATUS_MARK = {
+	pass: style("green", "✓"),
+	done: style("green", "✓"),
+	changes_requested: style("yellow", "!"),
+	fail: style("red", "✗")
+};
+const seconds = (ms) => `${(ms / 1e3).toFixed(1)}s`;
+const indent = (text) => text.trimEnd().split("\n").map((line) => `  ${line}`);
+/** The usage line: cost, tokens, turns and time. */
+const formatUsage = ({ usage }) => style("dim", [
+	cost(usage.costUsd),
+	`${String(usage.inputTokens)} in / ${String(usage.outputTokens)} out (${String(usage.cacheReadTokens)} cached)`,
+	`${String(usage.turns)} turns`,
+	seconds(usage.durationMs)
+].join(" · "));
+/** How a finished session reads on the terminal. */
+const formatOutcome = (nodeId, outcome) => {
+	const { report } = outcome;
+	if (report === null) return [
+		`${style("red", "✗")} ${style("bold", nodeId)} ended without a report (${outcome.subtype})`,
+		...outcome.errors.map((e) => `  ${style("red", e)}`),
+		`  ${formatUsage(outcome)}`
+	];
+	const lines = [`${STATUS_MARK[report.status] ?? "-"} ${style("bold", nodeId)} ${report.status}: ${report.summary}`];
+	if (report.branch !== void 0) lines.push(`  branch: ${report.branch}`);
+	for (const [name, file] of Object.entries(report.artifacts)) lines.push(`  ${name}: ${file}`);
+	for (const [name, value] of Object.entries(report.fields)) lines.push(`  ${name}: ${JSON.stringify(value)}`);
+	lines.push(`  ${formatUsage(outcome)}`);
+	return lines;
+};
+/** The transcript lines for one event; tool names come from `tools`. */
+const formatEvent = (nodeId, event, tools) => {
+	if (event.type === "session.started") {
+		const fork = event.fork === true ? ", a fork to answer a question" : "";
+		return [style("dim", `▸ ${nodeId} (${event.model}, session ${event.sessionId}${fork})`)];
+	}
+	if (event.type === "assistant.text") return indent(event.text);
+	if (event.type === "session.waiting") return indent(event.reason);
+	if (event.type === "tool.called") {
+		tools.set(event.id, event.name);
+		return [style("dim", `  · ${previewInput(event.name, event.input)}`)];
+	}
+	if (event.type === "tool.result") return event.isError ? [style("red", `  ✗ ${tools.get(event.id) ?? "tool"} failed`)] : [];
+	if (event.type === "plan.limit") return event.status === "allowed" ? [] : [style("yellow", `  ! plan: ${event.window.replaceAll("_", " ")} limit ${event.status === "rejected" ? "reached" : "is close"}`)];
+	return formatOutcome(nodeId, event.outcome);
+};
+const items = (count) => `${String(count)} ${count === 1 ? "item" : "items"}`;
+/** Transcript lines for one run event, prefixed with the node they are from. */
+const formatRunEvent = (event, width, tools, terminal = false) => {
+	const tag = (id) => style("cyan", `${id.padEnd(width)} │`);
+	if (event.type === "run.started") return [style("dim", `▸ run ${event.runId} of ${event.workflow} (starts at ${event.entries.join(", ")})`), ...event.settings?.trigger === void 0 ? [] : [style("dim", `  started by trigger ${event.settings.trigger}; untrusted inputs: ${(event.settings.untrusted ?? []).join(", ") || "none"}`)]];
+	if (event.type === "node.started") {
+		const round = event.round > 1 ? ` (round ${String(event.round)})` : "";
+		const owner = event.owner === void 0 ? "" : `, for ${event.owner}`;
+		return [`${tag(event.id)} ${style("dim", `${event.nodeType}${round}${owner}`)}`];
+	}
+	if (event.type === "node.event") {
+		const inner = event.event;
+		if (inner.type === "session.finished") return [];
+		const fork = inner.fork === true ? style("dim", "fork · ") : "";
+		if (inner.type === "session.started") {
+			const why = inner.fork === true ? ", to answer a question" : "";
+			return [`${tag(event.id)} ${fork}${style("dim", `${inner.model}, session ${inner.sessionId}${why}`)}`];
+		}
+		return formatEvent(event.id, event.event, tools).map((line) => `${tag(event.id)} ${fork}${line.replace(/^ {2}/u, "")}`);
+	}
+	if (event.type === "node.finished") {
+		const conflict = hasConflict(event.output);
+		const mark = event.ok ? style(conflict ? "yellow" : "green", conflict ? "!" : "✓") : style("red", "✗");
+		const spent = event.usage === void 0 ? "" : style("dim", ` · ${cost(event.usage.costUsd)}`);
+		return [`${tag(event.id)} ${mark} ${nodeVerdict(event.output, event.ok, event.error)}${spent}`];
+	}
+	if (event.type === "node.skipped") return [`${tag(event.id)} ${style("dim", "- skipped")}`];
+	if (event.type === "loop.exhausted") return [`${style(["yellow", "bold"], "!")} the loop ${event.from} -> ${event.to} used all ${String(event.maxRounds)} rounds`];
+	if (event.type === "watch.started") return [`${tag(event.id)} ${style("dim", `watching until ${event.until}, every ${event.every}`)}`];
+	if (event.type === "watch.changed") return [`${tag(event.id)} ${style("dim", `look ${String(event.looks)}:`)} ${event.said}`];
+	if (event.type === "watch.ended") return [`${tag(event.id)} ${style("dim", `${event.outcome} after ${String(event.looks)} looks`)}`];
+	if (event.type === "edge.taken") return [];
+	if (event.type === "worktree") {
+		const detail = event.detail === void 0 ? "" : ` (${event.detail})`;
+		const what = event.action === "removed" && event.branch !== void 0 ? `worktree of ${event.branch} (branch kept)` : `${event.branch ?? event.path}${detail}`;
+		const line = `${event.action} ${what}`;
+		return [`${tag(event.id)} ${event.action === "conflict" ? style("yellow", `! ${line}`) : style("dim", `⎇ ${line}`)}`];
+	}
+	if (event.type === "decision.opened") {
+		const what = event.kind === "permission" ? "asks to" : "asks:";
+		const question = event.kind === "permission" ? event.question.replace(/^Allow /u, "run ").replace(/\?$/u, "") : event.question;
+		const where = event.owner === void 0 ? `decision ${event.decision}; ${terminal ? "answer here or with ork decide" : "ork decide"}` : `decision ${event.decision}, via ${event.owner}`;
+		return [`${tag(event.node)} ${style(["yellow", "bold"], "?")} ${what} ${question} ${style("dim", `(${where})`)}`];
+	}
+	if (event.type === "decision.answered") {
+		const by = event.by === "owner" && event.owner !== void 0 ? event.owner : ANSWERED_BY[event.by];
+		const said = event.note === void 0 ? "" : ` · said: ${event.note.replaceAll(/\s+/gu, " ")}`;
+		return [`${tag(event.node)} ${style("dim", `→ ${event.answer} (${by})${said}`)}`];
+	}
+	if (event.type === "decision.withdrawn") return [`${tag(event.node)} ${style("dim", "→ question withdrawn")}`];
+	if (event.type === "run.command") {
+		const node = event.node === void 0 ? "" : ` --node ${event.node}`;
+		return [style(["yellow", "bold"], `! ork ${event.command}${node} received`)];
+	}
+	if (event.type === "node.held") {
+		const at = event.at === "tool" ? "its tool call waits for ork continue" : "it starts after ork continue";
+		return [`${tag(event.id)} ${style("yellow", `‖ paused: ${at}`)}`];
+	}
+	if (event.type === "node.released") return [`${tag(event.id)} ${style("dim", "▸ continues")}`];
+	if (event.type === "each.listed") {
+		const round = event.round > 1 ? ` (round ${String(event.round)})` : "";
+		return [`${tag(event.node)} ${style("dim", `${items(event.count)}${round}`)}`];
+	}
+	if (event.type === "each.exceeded") {
+		const over = `${items(event.count)}, over maxItems ${String(event.maxItems)}`;
+		return [`${tag(event.node)} ${style("yellow", `! ${over}`)}`];
+	}
+	if (event.type === "run.finished") return formatRunResult(event.result);
+	if (event.type === "run.resumed") {
+		const [one] = event.kept;
+		const kept = one === void 0 ? "every node runs again" : event.kept.length === 1 ? `${one} keeps its result` : `${event.kept.join(", ")} keep their results`;
+		return ["", style("dim", `▸ resumed: ${kept}`)];
+	}
+	if (event.type === "feedback.recorded") {
+		const { target, kind, title } = event.feedback;
+		const line = style("dim", `✎ feedback (${target}, ${kind}): ${title}`);
+		return [event.node === void 0 ? line : `${tag(event.node)} ${line}`];
+	}
+	if (event.type === "user.message") {
+		const note = event.delivered === "queued" ? " (for its next session)" : "";
+		return [`${tag(event.node)} ${style(["magenta", "bold"], "you:")} ${firstLine(event.body)}${style("dim", note)}`];
+	}
+	return formatBusEvent(event).map((line) => `${tag(event.node)} ${line}`);
 };
 // src/runs/chat.ts
 /**
@@ -991,21 +1060,24 @@ const runReadyDriver = async (workflow, options) => {
 *   the store and the run's socket, and the run's bus pushes it into the node's
 *   session (specs/messaging.md#chat; `tellLiveRun` and `nodeSession` are in
 *   core). A node of a finished run gets it by resuming its last Claude session
-*   where it ran, and the exchange is added to the run's record.
+*   where it ran, as the run's sessions were set up (ADR-065), and the exchange
+*   is added to the run's record.
 */
-/** The declared node a spawned worker (`<template>-<n>`) is an instance of. */
-const templateOf = (nodes, id) => {
-	if (id in nodes) return void 0;
-	const template = id.replace(/-\d+$/u, "");
-	return template in nodes ? template : void 0;
-};
+/**
+* The declared node a spawned worker or an item of a fanned node is an instance
+* of.
+*/
+const instanceOf = (nodes, id) => id in nodes ? void 0 : templateOf(id, new Set(Object.keys(nodes)));
+/** The run's sessions loaded the machine's Claude setup, so this one does. */
+const machineClaudeOf = (events) => events.some(({ event }) => event.type === "run.started" && event.settings?.machineClaude === true) ? { machineClaude: true } : {};
 /**
 * Resumes a finished node's last session with the user's message, prints the
 * session, and adds it to the run's record. Returns why it could not.
 */
 const resumeChat = async (options) => {
 	const { store, run, node } = options;
-	const { session, outputs } = nodeSession(store.events(run.id, 0), node);
+	const events = store.events(run.id, 0);
+	const { session, outputs } = nodeSession(events, node);
 	if (!session.known) return `${node} is not a node of run ${run.id}.`;
 	if (!session.chattable) return `${node} is not a leader or worker; only they have sessions to talk to.`;
 	if (session.sessionId === void 0) return `${node} has no Claude session to resume in run ${run.id}.`;
@@ -1016,7 +1088,7 @@ const resumeChat = async (options) => {
 	const notice = chatNotice(store, place, options.home);
 	if (notice !== null) options.out(notice);
 	const runDir = runDirOf(place, run.id);
-	const template = templateOf(workflow.nodes, node);
+	const template = instanceOf(workflow.nodes, node);
 	const plan = planNodeSession(workflow, node, {
 		cwd,
 		inputs: {},
@@ -1031,10 +1103,12 @@ const resumeChat = async (options) => {
 		...template === void 0 ? {} : { template }
 	});
 	if (!plan.ok) return plan.error;
+	const servers = namedMcpEntries(run.project, plan.mcp);
+	if (!servers.ok) return servers.error;
 	let driver = options.driver ?? session.driver ?? plan.driver;
 	if (driver === void 0) {
 		const ready = readyDriver(await (options.driverChecks ?? checksHere)());
-		if (!ready.ok) return ["No Claude driver is ready here.", ...ready.hints].join(" ");
+		if (!ready.ok) return ["No agent driver is ready here.", ...ready.hints].join(" ");
 		driver = ready.driver;
 	}
 	const record = appendRecorder(store, run.id, runDir);
@@ -1044,10 +1118,12 @@ const resumeChat = async (options) => {
 		body: options.body,
 		delivered: "resumed"
 	});
-	const started = (await options.runtime(driver)).start({
+	const started = (await options.runtime(driver, placeFiles(place).runs)).start({
 		...plan.spec,
+		...servers.value,
 		resume: session.sessionId,
-		prompt: options.body
+		prompt: options.body,
+		...machineClaudeOf(events)
 	}, { human: options.human });
 	if (options.signal?.aborted === true) started.interrupt();
 	options.signal?.addEventListener("abort", () => {
@@ -1079,12 +1155,22 @@ const createLogPrinter = (options) => {
 	return (stored) => {
 		const { event } = stored;
 		if (event.type === "run.started") width = Math.max(...event.nodes.map((n) => n.id.length), 1);
-		if (options.node !== void 0 && nodeOf(event) !== options.node) return [];
+		if (options.node !== void 0 && !isNodeEvent(event, options.node)) return [];
 		if (options.json) return [JSON.stringify(stored)];
 		return formatRunEvent(event, width, tools);
 	};
 };
 /**
+* Why `--node` names nothing in this run, or `null`: no event names it and the
+* run didn't declare it. A live run may still start it, so that is not
+* refused.
+*/
+const unknownNode = (stored, node, live) => {
+	const named = stored.some(({ event }) => isNodeEvent(event, node));
+	const declared = stored.some(({ event }) => event.type === "run.started" && event.nodes.some((n) => n.id === node));
+	return named || declared || live ? null : `Run has no node ${node}.`;
+};
+/**
 * Prints a run's events; with `follow`, then each new one as it is stored:
 * pushed over the run's socket, or polled from the store when there is none.
 * Returns when `run.finished` is stored, the run's process is gone, or `signal`
@@ -1102,6 +1188,31 @@ const followRun = async (store, run, out, options) => {
 		...options.signal === void 0 ? {} : { signal: options.signal }
 	}) === "crashed") out(style("red", `run ${run.id} stopped without finishing (its process is gone)`));
 };
+// src/run/node-notes.ts
+/**
+* @file What a run of one node (`ork run --node`) leaves out, said before its
+*   session starts: the messages, steps and `forEach` it does not run. A node
+*   with `forEach` (RFC-013) runs once with no item when it has `items`, and is
+*   refused when it has `from`, as the node that reports its list is not run.
+*/
+/** A warning line, as the run prints it. */
+const noteLines = (lines) => lines.map((line) => `${style(["yellow", "bold"], "warning")} ${line}`);
+/** Why a node can't run alone, or what a run of it leaves out. */
+const oneNodeNotes = (workflow, id) => {
+	const node = workflow.nodes[id];
+	if (node === void 0) return { warnings: [] };
+	const each = "forEach" in node ? node.forEach : void 0;
+	if (each !== void 0 && "from" in each) return {
+		error: `\`${id}\` runs once for each item of ${each.from}, a list another node reports, and a run of one node does not run that node; run the whole workflow, or give it \`items\` of its own`,
+		warnings: []
+	};
+	const steps = [...beforeOf(node, workflow.defaults) === void 0 ? [] : ["before"], ..."verify" in node && node.verify !== void 0 ? ["verify"] : []];
+	return { warnings: [
+		..."notify" in node && node.notify ? [`${id}'s notify: does nothing here: a run of one node has no message bus.`] : [],
+		...each === void 0 ? [] : [`${id}'s forEach: does not fan out in a run of one node: it runs once, with no item.`],
+		...steps.map((step) => `${id}'s ${step}: does not run in a run of one node.`)
+	] };
+};
 // src/run/origin.ts
 /**
 * @file Where a run's feedback comes from, beyond what its events say: Ork's
@@ -1109,6 +1220,8 @@ const followRun = async (store, run, out, options) => {
 *   content hash.
 */
 /** Ork's version and the workflow's hash, for the run's feedback records. */
+/** The Ork version a run records in `run.started` and `run.resumed`. */
+const ORK_RUN_VERSION = ORK_VERSION;
 const feedbackOrigin = (workflowFile) => {
 	const origin = { version: ORK_VERSION };
 	try {
@@ -1142,6 +1255,8 @@ const runNode = async (options) => {
 	if (!pairs.ok) return failed([`--input: ${pairs.error}`]);
 	const inputs = resolveInputs(workflow, pairs.raw);
 	if (!inputs.ok) return failed(inputs.errors);
+	const notes = oneNodeNotes(workflow, options.nodeId);
+	if (notes.error !== void 0) return failed([notes.error]);
 	const limits = runLimits(options.store, place, options.home);
 	const refused = limitsRefusal(limits, workflow);
 	if (refused.length > 0) return failed(refused);
@@ -1161,6 +1276,8 @@ const runNode = async (options) => {
 		pluginDir: path.join(runDir, "plugins", options.nodeId)
 	});
 	if (!plan.ok) return failed([plan.error]);
+	const servers = namedMcpEntries(projectRoot, plan.mcp);
+	if (!servers.ok) return failed([servers.error]);
 	const named = sessionDriver({
 		override: options.driver,
 		named: plan.driver
@@ -1169,12 +1286,13 @@ const runNode = async (options) => {
 	if (ready?.ok === false) return failed(ready.lines);
 	if (ready?.line !== void 0) options.err(ready.line);
 	const driver = named ?? ready?.driver;
-	if (driver === void 0) return failed(["No Claude driver is ready here."]);
-	const planned = workflow.nodes[options.nodeId];
-	if (planned !== void 0 && "notify" in planned && planned.notify) options.err(`${style(["yellow", "bold"], "warning")} ${options.nodeId}'s notify: does nothing here: a run of one node has no message bus.`);
-	const skipped = planned === void 0 ? [] : [...beforeOf(planned, workflow.defaults) === void 0 ? [] : ["before"], ..."verify" in planned && planned.verify !== void 0 ? ["verify"] : []];
-	for (const step of skipped) options.err(`${style(["yellow", "bold"], "warning")} ${options.nodeId}'s ${step}: does not run in a run of one node.`);
-	for (const warning of plan.warnings) options.err(`${style(["yellow", "bold"], "warning")} ${warning}`);
+	if (driver === void 0) return failed(["No agent driver is ready here."]);
+	const unfit = unfitLines(workflow, options.drivers, {
+		override: driver,
+		only: options.nodeId
+	});
+	if (unfit.length > 0) return failed(unfit);
+	for (const line of noteLines([...notes.warnings, ...plan.warnings])) options.err(line);
 	const id = options.nodeId;
 	const recorder = createRecorder(options.store, {
 		id: runId,
@@ -1223,7 +1341,8 @@ const runNode = async (options) => {
 		nodes: [{
 			id,
 			type: nodeType
-		}]
+		}],
+		...options.machineClaude === true ? { settings: { machineClaude: true } } : {}
 	});
 	record({
 		type: "node.started",
@@ -1231,7 +1350,12 @@ const runNode = async (options) => {
 		nodeType,
 		round: 1
 	});
-	const session = (await options.runtime(driver)).start(plan.spec, {
+	const runtime = await options.runtime(driver, placeFiles(place).runs);
+	if (options.machineClaude === true) plan.spec.machineClaude = true;
+	const session = runtime.start({
+		...plan.spec,
+		...servers.value
+	}, {
 		human: control.human,
 		...graph === null ? {} : { feedback: createFeedback({
 			graph,
@@ -1295,7 +1419,8 @@ const runNode = async (options) => {
 * @file What a run needs to reach other runs: its port for `workflow.call`
 *   nodes (RFC-004), its relay when links are on (RFC-003), and the budget a
 *   caller has capped it to. A called run being resumed keeps its caller and
-*   its cap, which the run recorded.
+*   its cap, which the run recorded, and a run's called runs load the machine's
+*   Claude setup when it does (ADR-065).
 */
 const callPorts = (options) => {
 	const { graph, store, runId, home, human, runtime, out } = options;
@@ -1305,6 +1430,7 @@ const callPorts = (options) => {
 	const baseRef = options.baseRef ?? options.resume?.settings.baseRef;
 	const trigger = options.trigger ?? options.resume?.settings.trigger;
 	const untrusted = options.untrusted ?? options.resume?.settings.untrusted;
+	const machineClaude = options.machineClaude ?? options.resume?.settings.machineClaude ?? false;
 	const own = graph.workflow.limits?.budgetUsd;
 	const budgetUsd = cap === void 0 ? own : Math.min(cap, own ?? Number.POSITIVE_INFINITY);
 	return {
@@ -1326,6 +1452,7 @@ const callPorts = (options) => {
 			home,
 			adopt: adoptedCalls(store, runId),
 			newId: () => newRunId(store),
+			machineClaude,
 			env: maskedEnv(maskedNamesOfRun(graph.workflow, options.place, store.projects())),
 			resumeSession: (run, node, body, signal) => {
 				const { blocked, leftUsd } = runLimits(store, options.place, home).now();
@@ -1355,7 +1482,8 @@ const callPorts = (options) => {
 			...calledBy === void 0 ? {} : { calledBy },
 			...baseRef === void 0 ? {} : { baseRef },
 			...trigger === void 0 ? {} : { trigger },
-			...untrusted === void 0 ? {} : { untrusted }
+			...untrusted === void 0 ? {} : { untrusted },
+			...machineClaude ? { machineClaude } : {}
 		}
 	};
 };
@@ -1486,6 +1614,14 @@ const preflight = async (options, given) => {
 		lines: driver.lines
 	};
 	if (driver.line !== void 0) options.err(driver.line);
+	const unfit = unfitLines(given.effective, options.drivers, {
+		override: options.driver,
+		ready: driver.driver ?? options.resume?.settings.readyDriver
+	});
+	if (unfit.length > 0) return {
+		ok: false,
+		lines: unfit
+	};
 	const checkout = await prepareCheckout(workflow, {
 		...options,
 		cwd: place.root
@@ -1576,7 +1712,7 @@ const runWorkflowFile = async (options) => {
 		for (const event of signals(raw)) {
 			control.publish(record(event));
 			if (options.json) options.out(JSON.stringify(event));
-			else for (const line of formatRunEvent(event, width, tools)) options.out(line);
+			else for (const line of formatRunEvent(event, width, tools, options.human !== void 0)) options.out(line);
 		}
 	};
 	const workspace = root === void 0 ? void 0 : createWorkspace({
@@ -1593,7 +1729,7 @@ const runWorkflowFile = async (options) => {
 	});
 	const maskedNames = maskedNamesOfRun(workflow, place, projects);
 	const executorOptions = {
-		runtimeFor: options.runtime,
+		runtimeFor: (driver) => options.runtime(driver, placeFiles(place).runs),
 		inPlace: options.inPlace,
 		maskedNames
 	};
@@ -1602,10 +1738,11 @@ const runWorkflowFile = async (options) => {
 	if (options.tools !== void 0) executorOptions.tools = options.tools;
 	const script = process.argv[1];
 	if (script !== void 0 && onPath(script)) executorOptions.orkBin = script;
-	const replay = options.resume === void 0 ? void 0 : createReplay(options.resume.history, options.resume.cutOff, options.resume.mail, options.resume.earlier);
+	const replay = options.resume === void 0 ? void 0 : createReplay(options.resume.history, options.resume.cutOff, options.resume.mail, options.resume.earlier, options.resume.fanOuts);
 	if (replay !== void 0) onEvent({
 		type: "run.resumed",
-		kept: replay.kept()
+		kept: replay.kept(),
+		ork: ORK_RUN_VERSION
 	});
 	const ports = callPorts({
 		...options,
@@ -1615,6 +1752,7 @@ const runWorkflowFile = async (options) => {
 		human: control.human,
 		emit: onEvent
 	});
+	if (ports.settings.machineClaude === true) executorOptions.machineClaude = true;
 	clearOutputFiles(runDir, options.err);
 	const handle = startRun({
 		graph: ports.graph,
@@ -1626,6 +1764,7 @@ const runWorkflowFile = async (options) => {
 		executors: builtinExecutors(executorOptions),
 		human: options.resume === void 0 ? control.human : replayLoopAnswers(control.human, options.resume.loopAnswers),
 		onEvent,
+		orkVersion: ORK_RUN_VERSION,
 		settings: {
 			inPlace: options.inPlace,
 			...options.driver === void 0 ? {} : { driver: options.driver },
@@ -1670,9 +1809,11 @@ const flagValues = (rawArgs, flag) => {
 	}
 	return values;
 };
-const isDriver = (value) => CLAUDE_DRIVERS.some((d) => d.id === value);
+const isDriver = (value) => AGENT_DRIVERS.some((d) => d.id === value);
+/** Why `--driver` refuses a value: a retired id names its replacement. */
+const badDriver = (value) => `--${retiredDriverHint(value) ?? `driver must be one of ${AGENT_DRIVERS.map((d) => d.id).join(", ")}, got \`${value}\``}`;
 /** Loads the drivers only when a run starts, so other commands stay fast. */
-const loadRuntime = async (driver) => (await import("./src-Dyz_Gy1q.mjs")).createRuntime(driver, sessionEnv(process.env));
+const loadRuntime = async (driver, runs) => (await import("./src-oaJYIddp.mjs")).createRuntime(driver, sessionEnv(process.env), runs);
 /**
 * Ctrl-C asks the run to stop, and so does a terminal closing or a polite kill,
 * so that the run ends tidily and leaves no result unscrubbed.
@@ -1690,11 +1831,18 @@ const onInterrupt = (stop) => {
 	process.once("SIGHUP", interrupt);
 };
 /** The terminal that answers a run's questions; none in a detached run. */
-const terminalHuman = () => process.env["ORK_DETACHED"] === "1" ? void 0 : createTerminalHuman({
-	input: process.stdin,
-	output: process.stderr,
-	interactive: process.stdin.isTTY
-});
+const terminalHuman = () => {
+	const detached = process.env[DETACHED_ENV] === "1";
+	if (detached) writeErr(style("dim", "detached run: no terminal asks; answer with ork decide"));
+	return detached ? void 0 : createTerminalHuman({
+		input: process.stdin,
+		output: process.stderr,
+		interactive: process.stdin.isTTY,
+		interrupt: () => {
+			process.kill(process.pid, "SIGINT");
+		}
+	});
+};
 const run = defineCommand({
 	meta: {
 		name: "run",
@@ -1716,7 +1864,7 @@ const run = defineCommand({
 		},
 		driver: {
 			type: "string",
-			description: "sdk (API key or cloud provider) or cli (your claude login)"
+			description: "claude-code (default: the driver ready here)"
 		},
 		"in-place": {
 			type: "boolean",
@@ -1728,6 +1876,11 @@ const run = defineCommand({
 			description: "Run although instructions or skills have uncommitted changes (worktrees get the committed versions)",
 			default: false
 		},
+		"machine-claude": {
+			type: "boolean",
+			description: "Sessions load this machine's Claude setup: its MCP servers and Claude's memory (default: clean sessions)",
+			default: false
+		},
 		json: {
 			type: "boolean",
 			description: "Print the events as JSON lines",
@@ -1769,7 +1922,7 @@ const run = defineCommand({
 	},
 	run: async ({ args, rawArgs }) => {
 		if (args.driver !== void 0 && !isDriver(args.driver)) {
-			writeErr(`--driver must be ${CLAUDE_DRIVERS.map((d) => d.id).join(" or ")}, got \`${args.driver}\``);
+			writeErr(badDriver(args.driver));
 			process.exitCode = 1;
 			return;
 		}
@@ -1812,6 +1965,7 @@ const run = defineCommand({
 			cwd,
 			inputs: flagValues(rawArgs, "--input"),
 			inPlace: args["in-place"],
+			...args["machine-claude"] ? { machineClaude: true } : {},
 			json: args.json,
 			runtime: loadRuntime,
 			store,
@@ -1926,7 +2080,7 @@ const chat = defineCommand({
 		},
 		driver: {
 			type: "string",
-			description: "For a finished run: sdk or cli (default: the one it ran with)"
+			description: "For a finished run: claude-code (default: the one it ran with)"
 		}
 	},
 	run: async ({ args }) => {
@@ -1952,7 +2106,7 @@ const chat = defineCommand({
 				return;
 			}
 			if (args.driver !== void 0 && !isDriver(args.driver)) {
-				writeErr(`--driver must be sdk or cli, not \`${args.driver}\`.`);
+				writeErr(`${badDriver(args.driver)}.`);
 				process.exitCode = 1;
 				return;
 			}
@@ -1997,7 +2151,8 @@ const chat = defineCommand({
 *   writes to the store, then wakes the run on its socket; specs/messaging.md).
 *   `--say` gives the answer a note, which goes to the run with it. With `--id`
 *   and `--choose`, `--note` and `--rating` instead note how the decision's
-*   node went, as the run's feedback (specs/feedback.md).
+*   node went, as the run's feedback (specs/feedback.md). `--document` prints
+*   what a gate gave to read beside its question.
 */
 const failed$2 = (message) => {
 	writeErr(message);
@@ -2036,7 +2191,7 @@ const saidLine = (store, id) => {
 	return note === void 0 ? "" : style("dim", ` · said: ${note}`);
 };
 /** One line per open decision, for `--list`. */
-const formatDecisions = (decisions) => decisions.length === 0 ? ["No open decisions."] : decisions.map((d) => `${style("bold", d.id)}  ${style("cyan", d.node)}${d.owner === void 0 ? "" : style("dim", ` via ${d.owner}`)}  ${d.question} ${style("dim", `[${d.options.map((o) => o.id === d.recommended ? `${o.id}*` : o.id).join(", ")}]`)}`);
+const formatDecisions = (decisions, workflow) => decisions.length === 0 ? [workflow === void 0 ? "No open decisions." : `No open decisions in workflow ${workflow}.`] : decisions.map((d) => `${style("bold", d.id)}  ${style("cyan", d.node)}${d.owner === void 0 ? "" : style("dim", ` via ${d.owner}`)}  ${d.question} ${d.document === void 0 ? "" : `${style("dim", "+document")} `}${style("dim", `[${d.options.map((o) => o.id === d.recommended ? `${o.id}*` : o.id).join(", ")}]`)}`);
 const decide = defineCommand({
 	meta: {
 		name: "decide",
@@ -2063,6 +2218,15 @@ const decide = defineCommand({
 			description: "List them as JSON",
 			default: false
 		},
+		workflow: {
+			type: "string",
+			description: "Only the decisions of this workflow's runs"
+		},
+		document: {
+			type: "boolean",
+			description: "Print the document of the decision --id names",
+			default: false
+		},
 		id: {
 			type: "string",
 			description: "Answer this decision…"
@@ -2085,7 +2249,7 @@ const decide = defineCommand({
 		}
 	},
 	run: async ({ args }) => {
-		const refusal = args.id !== void 0 || args.choose !== void 0 || process.stdin.isTTY && !args.list && !args.json ? decideRefusal() : null;
+		const refusal = !args.document && (args.id !== void 0 || args.choose !== void 0 || process.stdin.isTTY && !args.list && !args.json) ? decideRefusal() : null;
 		if (refusal !== null) {
 			failed$2(refusal);
 			return;
@@ -2097,6 +2261,16 @@ const decide = defineCommand({
 			interactive: process.stdin.isTTY
 		});
 		try {
+			if (args.document) {
+				if (args.id === void 0 || args.choose !== void 0) {
+					failed$2("--document goes with --id, without --choose.");
+					return;
+				}
+				const { document } = store.decision(args.id) ?? {};
+				if (document === void 0) failed$2(`${args.id} has no document.`);
+				else write(document);
+				return;
+			}
 			if (args.id !== void 0 || args.choose !== void 0) {
 				if (args.id === void 0 || args.choose === void 0) {
 					failed$2("--id and --choose go together.");
@@ -2128,6 +2302,7 @@ const decide = defineCommand({
 				return;
 			}
 			const filter = {};
+			if (args.workflow !== void 0) filter.workflow = args.workflow;
 			if (args.run !== void 0 && args.run !== "") {
 				const found = findRun(store, args.run, process.cwd());
 				if (!found.ok) {
@@ -2142,7 +2317,7 @@ const decide = defineCommand({
 				return;
 			}
 			if (args.list || !process.stdin.isTTY || open.length === 0) {
-				for (const line of formatDecisions(open)) write(line);
+				for (const line of formatDecisions(open, args.workflow)) write(line);
 				return;
 			}
 			for (const d of open) {
@@ -2154,6 +2329,7 @@ const decide = defineCommand({
 				};
 				if (d.recommended !== void 0) question.recommended = d.recommended;
 				if (d.context !== void 0) question.context = d.context;
+				if (d.document !== void 0) question.document = d.document;
 				let note;
 				question.onNote = (given) => {
 					note = given;
@@ -2245,7 +2421,7 @@ const resume = defineCommand({
 		},
 		driver: {
 			type: "string",
-			description: "sdk or cli (default: the one the run used)"
+			description: "claude-code (default: the one the run used)"
 		},
 		"in-place": {
 			type: "boolean",
@@ -2269,7 +2445,7 @@ const resume = defineCommand({
 	},
 	run: async ({ args, rawArgs }) => {
 		if (args.driver !== void 0 && !isDriver(args.driver)) {
-			failed$1(`--driver must be sdk or cli, got \`${args.driver}\``);
+			failed$1(badDriver(args.driver));
 			return;
 		}
 		const store = openStore();
@@ -2320,6 +2496,36 @@ const resume = defineCommand({
 		}
 	}
 });
+// src/doctor/lease-checks.ts
+/**
+* @file What `ork doctor` says of Command Code leases (RFC-014): it removes the
+*   `ork` MCP entries a crashed session left in its checkout's local scope, and
+*   says where. Never prints a token.
+*/
+/**
+* Removes the `ork` MCP entries a crashed Command Code session left in its
+* checkout's local scope (RFC-014), from the leases in the project's runs
+* folder. Says nothing when there were none. `bin` is the `cmd` program.
+*/
+const leaseChecks = async (place, env = process.env, bin = "cmd") => {
+	const { cleanStaleLeases, leaseLedger } = await import("./src-oaJYIddp.mjs");
+	const { cleaned, failed } = await cleanStaleLeases({
+		bin,
+		ledger: leaseLedger(placeFiles(place).runs),
+		env
+	});
+	const name = "command-code";
+	return [...cleaned.length === 0 ? [] : [{
+		name,
+		status: "ok",
+		detail: `removed the \`ork\` MCP entry a stopped session left in ${cleaned.join(", ")}`
+	}], ...failed.length === 0 ? [] : [{
+		name,
+		status: "warn",
+		detail: `could not remove the \`ork\` MCP entry a stopped session left in ${failed.join(", ")}`,
+		hint: "Run `cmd mcp remove --scope local ork` in each of those folders."
+	}]];
+};
 // src/project/ork-skills.ts
 /**
 * @file The Claude Code plugin's skills (`plugins/ork/skills/`) as text, by
@@ -2330,8 +2536,8 @@ const resume = defineCommand({
 const ORK_SKILLS = {
 	principles: "---\nname: principles\ndescription: Use when deciding how to split work into an Ork workflow - which steps are programs, which are Claude sessions, where a person decides - so it costs less than doing it by hand and can't go wrong quietly.\n---\n\n# How Ork splits work\n\nOrk exists to do long jobs for less than doing them by hand, and safely. Four\nrules decide the shape of a workflow.\n\n## 1. A program for what a program can do\n\nA model turn is for judgment. Anything a program can decide, it should: run the\ntests, read a pull request's state, count what changed, wait for CI.\n\n- **A tool node** (`tool.shell`, `tool.git`, `tool.gh`, `tool.aws`) or an\n  **`mcp.call`** does it with no session. With `output: { format: json }`, its\n  answer routes the run: `when: \"json.state == 'OPEN'\"`.\n- **`verify:`** on a session runs a check before its report counts, so a session\n  can't claim success past failing tests. **`before:`** hands it what a program\n  found, so it doesn't spend turns finding it.\n- **`watch:`** waits on CI or a review with a program that looks every few\n  seconds; hours of waiting cost nothing.\n- **`notify:`** lets a program tell a running session what it found, with no\n  model turn to carry the news.\n\n## 2. Spend where it pays\n\n- A small model and low effort for a narrow task (`model: haiku`,\n  `effort: low`); the large ones where thinking pays.\n- `budgetUsd` on each session and on the run (`limits.budgetUsd`). A loop of\n  sessions without a budget or `limits.timeout` gets a warning, for good reason.\n- Give a session what it needs in its `prompt` and `before:`, rather than\n  letting it search; and `isolation: readonly` for a reviewer that only reads.\n\n## 3. Make a mistake impossible before checking for it\n\n- Declare what a node says: `output.schema` lists on tool JSON and Claude\n  reports (`verdict: [approve, escalate]`). Conditions then compare against a\n  closed list, and a run fails a value off it rather than matching nothing.\n- A verdict is a declared field, never words to search a summary for.\n- Give each condition its opposite, and each failure a handler (`when: \"!ok\"`).\n- Check every draft with Ork's `check` tool until it's clean.\n\n## 4. A person decides what can't be undone\n\nMerging, deploying, publishing, spending a lot: put a `human.gate` before it,\nwith the safe option `recommended`. For a run nobody watches, give it a\n`timeout` and the safe `default`. You never answer a gate yourself.\n\n## An example\n\nA review that a program checks first, and a person signs off:\n\n```yaml\nschemaVersion: 1\nname: careful-review\ndescription: Lint with a program, review with a small model, and ask before merging.\ninputs:\n  pr:\n    type: string\n    required: true\nlimits:\n  budgetUsd: 3\nnodes:\n  lint:\n    type: tool.shell\n    command: pnpm lint\n    allow: [pnpm lint]\n  review:\n    type: claude.worker\n    prompt: \"Review pull request {{inputs.pr}}. The linter passed.\"\n    model: haiku\n    effort: low\n    isolation: readonly\n    budgetUsd: 1\n    output:\n      schema:\n        verdict: [approve, escalate]\n  ask:\n    type: human.gate\n    question: \"Merge pull request {{inputs.pr}}? The review says {{nodes.review.output.verdict}}.\"\n    options: [merge, wait]\n    recommended: wait\n  merge:\n    type: tool.gh\n    command: pr merge {{inputs.pr}} --squash\n    allow: [pr merge]\nedges:\n  - lint -> review\n  - review -> ask\n  - from: ask\n    to: merge\n    when: \"choice == 'merge'\"\n```\n\n`lint` costs nothing, `review` is a small model with a cap, and nothing merges\nwithout a person.\n",
 	run: "---\nname: run\ndescription: Use when starting, following or explaining an Ork run - what it's doing, why it failed, what it cost, and what waits on the person - and when the person asks about their Ork runs.\n---\n\n# Running and following Ork workflows\n\nOrk runs workflows on the person's machine with their accounts, so a run spends\ntheir money and can push, merge or deploy. Start one only when they ask, and\nnever answer a decision for them.\n\n## Starting\n\n1. Find it: Ork's `workflows` tool gives each workflow's name and inputs.\n2. Check it first with `check` (`workflow: <name>`). Don't start one with an\n   error.\n3. Start it with `start_run`, giving every required input. Claude Code asks the\n   person first, unless they've allowed it. It answers with the run's id; the run goes on in the\n   background, whatever happens to this conversation.\n\nWithout Ork's tools: `ork run <workflow> --detach --input name=value`.\n\n## Following\n\n- `run` gives a run's status, what it waits on, its cost so far, and each\n  node's state. `runs` lists the newest runs.\n- `run_events` gives its newest events; `node` narrows them, and `last` or\n  `after` widens them. A `node.finished` event with `ok: false` says why a node\n  failed.\n- `explain_context` says what a node's session was given: its agent,\n  instructions, skills and files. Use it when a node didn't know something.\n- `usage` says what runs spent, by workflow and model, and how close the limits\n  are.\n\nSay what you found plainly: which node, what it said, and what it cost. Quote a\nnode's own words rather than retelling them.\n\n## What only the person does\n\n- **Decisions.** `decisions` lists the questions waiting on them: a gate, a loop\n  that ran out of rounds, a permission. Tell them what each asks, the options,\n  and the recommended one, and that they answer in `ork ui` or with\n  `ork decide` in their own terminal. Don't answer one: never run\n  `ork decide --id … --choose …`; with Ork's plugin, a hook stops it.\n- **Stopping, pausing, resuming.** Tell them the command: `ork stop <run>`,\n  `ork pause <run>`, `ork continue <run>`, `ork resume <run>`. A node can be\n  stopped alone with `--node <id>`.\n\n## Without Ork's tools\n\n| Want                   | Command                        |\n| ---------------------- | ------------------------------ |\n| Runs, newest first     | `ork ps`                       |\n| A run's transcript     | `ork logs <run>` (`--follow`)  |\n| Its nodes and cost     | `ork tree <run>`               |\n| What runs spent        | `ork usage`                    |\n| What waits on a person | `ork decide --list`            |\n| A node's context       | `ork context explain <wf> <n>` |\n",
-	setup: "---\nname: setup\ndescription: Use when the person asks you to set up Ork, install it, or get started with it in a repository - checking it's installed, setting up the project, making Ork's tools available to you, and a first workflow.\n---\n\n# Setting up Ork\n\nOrk runs workflows on the person's machine with their own accounts. Setting it\nup changes their machine and their repository, so say what each step does and\nask before it. Work through these in order, and stop where they say no.\n\n## 1. Check\n\n```sh\nork --version\nork doctor\n```\n\n- **No `ork`:** it needs Node 24.20 or later (`node --version`). The install is\n  `npm install --global @krapht/ork`; show it and run it only when they say\n  yes. The guide:\n  https://github.com/mimshins/ork/blob/main/docs/getting-started/installation.md\n- **Read `ork doctor` to them.** It needs git, a git repository with a commit,\n  and one Claude driver. Don't run `git init` or a commit without asking.\n- **A driver not ready:** they log in themselves, with `claude` (the CLI\n  driver), or by setting `ANTHROPIC_API_KEY` or a cloud provider in their own\n  shell (the SDK driver). Never ask for a key, never take one pasted to you, and\n  never write one into a file or a command. `gh` and `aws` are optional, and\n  their logins are their own too (`gh auth login`, `aws sso login`).\n\n## 2. The project\n\n- **`ork init`** keeps Ork's files in the repository, in `.ork/`, committed with\n  the code. It adds `.ork/runs/` to `.gitignore`, links `.claude/` and similar\n  folders to `.ork/`, and writes a starter workflow, `hello`.\n- **`ork register`** keeps them beside it, in `~/.ork/projects/<id>/`, and\n  writes nothing into the repository. For a repository whose process isn't\n  theirs to change, or to try Ork first.\n\nExplain both and ask which. Skip the question when the repository decides it: a\n`.ork/` folder means `ork init` has run (`ork projects` lists what's\nregistered). Neither overwrites a file.\n\n## 3. Make Ork available to you\n\nIf Ork's tools (`workflows`, `check`) already answer you, skip this. Otherwise,\nby where you run, and asking before each change to a config:\n\n- **Claude Code:** Ork's plugin brings the skills and the tools. The person\n  types these themselves:\n\n  ```\n  /plugin marketplace add mimshins/ork\n  /plugin install ork@ork\n  ```\n\n  Or, in a project set up with `ork init`, the skills in the repository for\n  everyone who clones it, then the tools:\n\n  ```sh\n  ork init --skills\n  claude mcp add ork -- ork mcp\n  ```\n\n  New tools start when they restart Claude Code or reconnect `ork` in `/mcp`;\n  so does the plugin's, once `ork` is installed.\n\n- **Another MCP client:** add a server named `ork` with command `ork` and args\n  `[\"mcp\"]` to its MCP config, where its own docs say. Its tools find the\n  project by its id, from `ork projects`.\n- **A shell only:** use the CLI. `ork --help` and each command's `--help` say\n  what it takes.\n\n## 4. A first workflow\n\nOffer to write one for a task they name. Follow `/ork:write`, check each draft\n(the `check` tool, or `ork validate <file>`) until it has no error, then save\nit. Don't start it: a run spends their money. Start it only when they say so,\nin the background with its inputs (`start_run`, or\n`ork run <name> --detach --input name=value`), and follow it with `/ork:run`.\n\n## 5. Show them `ork ui`\n\nTell them to run `ork ui` in their own terminal: their runs, graphs and logs in\nthe browser, and where they answer what a run asks.\n\n## Never\n\n- Ask for, store or pass on a password, key or token.\n- Answer a run's decision: they answer in `ork ui` or with `ork decide` in\n  their own terminal.\n- Install, edit a config, or start a run without a yes.\n",
-	write: "---\nname: write\ndescription: Use when writing or changing an Ork workflow (a `.ork/workflows/*.ork.yaml` file) - its nodes, edges, conditions and loops - and checking each draft until Ork accepts it.\n---\n\n# Writing an Ork workflow\n\nAn Ork workflow is one YAML file in the project, `.ork/workflows/<name>.ork.yaml`.\nIt names the nodes (Claude sessions, programs, a person's decisions) and the\nedges that carry work between them. Ork runs it on the person's machine with\ntheir own accounts.\n\n## How to work\n\n1. **Look first.** Ork's `workflows` tool lists the project's workflows; read\n   one that's close. `agents` lists the agents a node can use. Before you split\n   the work, read `/ork:principles`: a program where a program will do, a\n   session only for judgment.\n2. **Don't guess a field.** `workflow_format` gives the format; ask it for one\n   node type (`nodeType: \"human.gate\"`) to see that type's fields.\n3. **Check every draft** with Ork's `check` tool (`text`, or `workflow` for a\n   file), and fix what it says until it has no error. Read its warnings: they\n   mean something. Without Ork's tools, run `ork validate <file>`.\n4. **Then save the file**, beginning with the schema line below, so editors can\n   check it too.\n\n## The shape of a file\n\n```yaml\n# yaml-language-server: $schema=https://raw.githubusercontent.com/mimshins/ork/main/packages/schema/workflow.schema.json\nschemaVersion: 1\nname: fix-and-ship\ndescription: Fix a failing test, check it with the test suite, and ask before opening a pull request.\ninputs:\n  issue:\n    type: string\n    required: true\n    description: What fails.\ndefaults:\n  model: sonnet\n  budgetUsd: 2\nlimits:\n  budgetUsd: 10\nnodes:\n  fix:\n    type: claude.worker\n    prompt: \"Fix this, and keep the change small: {{inputs.issue}}\"\n  tests:\n    type: tool.shell\n    command: pnpm test\n    allow: [pnpm test]\n  ask:\n    type: human.gate\n    question: \"Open a pull request for {{nodes.fix.output.branch}}?\"\n    options: [open, hold]\n    recommended: hold\n  pr:\n    type: tool.gh\n    command: pr create --fill --head {{nodes.fix.output.branch}}\n    allow: [pr create]\nedges:\n  - fix -> tests\n  - from: tests\n    to: fix\n    when: \"!ok\"\n    maxRounds: 2\n  - from: tests\n    to: ask\n    when: ok\n  - from: ask\n    to: pr\n    when: \"choice == 'open'\"\n```\n\nNode ids are lowercase: letters, digits, `-` and `_`. Secrets never go in the\nfile: a tool reads one with `env:` and `{{env.NAME}}`.\n\n## Nodes\n\n| Type                              | Does                                                                |\n| --------------------------------- | ------------------------------------------------------------------- |\n| `claude.worker`                   | A Claude session that does one task and reports                     |\n| `claude.leader`                   | A session that plans and delegates to the nodes it owns (`parent:`) |\n| `claude.subagent`                 | A subagent inside its parent's session; it takes no edges           |\n| `tool.shell`                      | Any program, run without a shell; `allow:` lists command prefixes   |\n| `tool.git`, `tool.gh`, `tool.aws` | The person's own `git`, `gh`, `aws`, with an allow list             |\n| `mcp.call`                        | One tool call on an MCP server, with no session                     |\n| `human.gate`                      | A question with options and a recommended one                       |\n| `control.join`                    | Waits for its inputs: `all` (default), `any`, or `n` of them        |\n| `control.router`, `control.split` | Pass their input on; a router takes its first matching edge         |\n| `workflow.call`                   | Starts another workflow as its own run                              |\n\n- **A Claude node reports** `status` (`pass`, `changes_requested`, `done` or\n  `fail`), `summary`, `artifacts`, `branch`, and any field its `output.schema`\n  declares, such as `verdict: [approve, escalate]`. For another verdict, declare\n  a field: `status` can't take other values.\n- **A tool node reports** `exitCode`, `stdout`, `stderr`, and with\n  `output: { format: json, schema: { state: [OPEN, CLOSED] } }` its JSON as\n  `json`. Declare the fields you read: a run then checks them, and a typo can't\n  pass.\n- **A gate reports** `choice` and `answeredBy`. A `timeout` needs a `default`.\n\n## Edges and conditions\n\n- `a -> b`, `a -> b, c`, `b, c -> j` are plain edges, taken when the source\n  succeeded. A failed node takes no plain edge: handle a failure with\n  `when: \"!ok\"`, or `status == 'fail'` on a Claude node.\n- `{ from: a, to: b, when: \"...\" }` is taken when the condition holds. A bare\n  name reads the source's output: `when: \"verdict == 'approve'\"`. Quote any\n  condition that starts with `!`, or YAML reads it as a tag.\n- Conditions have `==`, `!=`, `<`, `>`, `&&`, `||`, `!`, and `any`, `all`,\n  `count`, `len`, `contains`. A join's `statuses` suits `any(statuses, 'fail')`.\n- A node runs when any edge into it is taken; only a join waits. A node with no\n  way in taken is skipped, and so is what follows it.\n- Templates, `{{inputs.x}}`, `{{nodes.a.output.field}}`, `{{run.id}}`, go in\n  `prompt`, `instructions`, `command`, `cwd` and `question`. Each value stays\n  one argument of a command, so it can't inject one.\n\n## Loops\n\nEvery cycle needs an edge with `maxRounds`. Give the way back a condition and\nthe way out its opposite, as `!ok` and `ok` above; a plain edge beside a loop\nfires every round. When a loop runs out, Ork asks a person what to do.\n\n## What `check` refuses, and why\n\n- **A value the source can't have** (`when.value`): `status == 'failed'` (it's\n  `fail`), a gate's `choice == 'aprove'` for `approve`, a value outside a\n  declared list. The message names the values it can have.\n- **A loop no condition ends**, a plain edge beside a loop, a loop of sessions\n  with no `limits.budgetUsd` or `limits.timeout`: warnings, each worth fixing.\n- **`no way the walk tried reaches x`**: Ork tried every way through, and none\n  got to `x`. A join waiting on a branch a first-match router never takes is\n  the usual cause.\n"
+	setup: "---\nname: setup\ndescription: Use when the person asks you to set up Ork, install it, or get started with it in a repository - checking it's installed, setting up the project, making Ork's tools available to you, and a first workflow.\n---\n\n# Setting up Ork\n\nOrk runs workflows on the person's machine with their own accounts. Setting it\nup changes their machine and their repository, so say what each step does and\nask before it. Work through these in order, and stop where they say no.\n\n## 1. Check\n\n```sh\nork --version\nork doctor\n```\n\n- **No `ork`:** it needs Node 24.20 or later (`node --version`). The install is\n  `npm install --global @krapht/ork`; show it and run it only when they say\n  yes. The guide:\n  https://github.com/mimshins/ork/blob/main/docs/getting-started/installation.md\n- **Read `ork doctor` to them.** It needs git, a git repository with a commit,\n  and one agent driver. Don't run `git init` or a commit without asking.\n- **A driver not ready:** they log in themselves, with `claude auth login`, or\n  by setting `ANTHROPIC_API_KEY` or a cloud provider in their own shell (either\n  makes the claude-code driver ready). Never ask for a key, never take one pasted to you, and\n  never write one into a file or a command. `gh` and `aws` are optional, and\n  their logins are their own too (`gh auth login`, `aws sso login`).\n\n## 2. The project\n\n- **`ork init`** keeps Ork's files in the repository, in `.ork/`, committed with\n  the code. It adds `.ork/runs/` to `.gitignore`, links `.claude/` and similar\n  folders to `.ork/`, and writes a starter workflow, `hello`.\n- **`ork register`** keeps them beside it, in `~/.ork/projects/<id>/`, and\n  writes nothing into the repository. For a repository whose process isn't\n  theirs to change, or to try Ork first.\n\nExplain both and ask which. Skip the question when the repository decides it: a\n`.ork/` folder means `ork init` has run (`ork projects` lists what's\nregistered). Neither overwrites a file.\n\n## 3. Make Ork available to you\n\nIf Ork's tools (`workflows`, `check`) already answer you, skip this. Otherwise,\nby where you run, and asking before each change to a config:\n\n- **Claude Code:** Ork's plugin brings the skills and the tools. The person\n  types these themselves:\n\n  ```\n  /plugin marketplace add mimshins/ork\n  /plugin install ork@ork\n  ```\n\n  Or, in a project set up with `ork init`, the skills in the repository for\n  everyone who clones it, then the tools:\n\n  ```sh\n  ork init --skills\n  claude mcp add ork -- ork mcp\n  ```\n\n  New tools start when they restart Claude Code or reconnect `ork` in `/mcp`;\n  so does the plugin's, once `ork` is installed.\n\n- **Another MCP client:** add a server named `ork` with command `ork` and args\n  `[\"mcp\"]` to its MCP config, where its own docs say. Its tools find the\n  project by its id, from `ork projects`.\n- **A shell only:** use the CLI. `ork --help` and each command's `--help` say\n  what it takes.\n\n## 4. A first workflow\n\nOffer to write one for a task they name. Follow `/ork:write`, check each draft\n(the `check` tool, or `ork validate <file>`) until it has no error, then save\nit. Don't start it: a run spends their money. Start it only when they say so,\nin the background with its inputs (`start_run`, or\n`ork run <name> --detach --input name=value`), and follow it with `/ork:run`.\n\n## 5. Show them `ork ui`\n\nTell them to run `ork ui` in their own terminal: their runs, graphs and logs in\nthe browser, and where they answer what a run asks.\n\n## Never\n\n- Ask for, store or pass on a password, key or token.\n- Answer a run's decision: they answer in `ork ui` or with `ork decide` in\n  their own terminal.\n- Install, edit a config, or start a run without a yes.\n",
+	write: "---\nname: write\ndescription: Use when writing or changing an Ork workflow (a `.ork/workflows/*.ork.yaml` file) - its nodes, edges, conditions and loops - and checking each draft until Ork accepts it.\n---\n\n# Writing an Ork workflow\n\nAn Ork workflow is one YAML file in the project, `.ork/workflows/<name>.ork.yaml`.\nIt names the nodes (Claude sessions, programs, a person's decisions) and the\nedges that carry work between them. Ork runs it on the person's machine with\ntheir own accounts.\n\n## How to work\n\n1. **Look first.** Ork's `workflows` tool lists the project's workflows; read\n   one that's close. `agents` lists the agents a node can use. Before you split\n   the work, read `/ork:principles`: a program where a program will do, a\n   session only for judgment.\n2. **Don't guess a field.** `workflow_format` gives the format; ask it for one\n   node type (`nodeType: \"human.gate\"`) to see that type's fields.\n3. **Check every draft** with Ork's `check` tool (`text`, or `workflow` for a\n   file), and fix what it says until it has no error. Read its warnings: they\n   mean something. Without Ork's tools, run `ork validate <file>`.\n4. **Then save the file**, beginning with the schema line below, so editors can\n   check it too.\n\n## The shape of a file\n\n```yaml\n# yaml-language-server: $schema=https://raw.githubusercontent.com/mimshins/ork/main/packages/schema/workflow.schema.json\nschemaVersion: 1\nname: fix-and-ship\ndescription: Fix a failing test, check it with the test suite, and ask before opening a pull request.\ninputs:\n  issue:\n    type: string\n    required: true\n    description: What fails.\ndefaults:\n  model: sonnet\n  budgetUsd: 2\nlimits:\n  budgetUsd: 10\nnodes:\n  fix:\n    type: claude.worker\n    prompt: \"Fix this, and keep the change small: {{inputs.issue}}\"\n  tests:\n    type: tool.shell\n    command: pnpm test\n    allow: [pnpm test]\n  ask:\n    type: human.gate\n    question: \"Open a pull request for {{nodes.fix.output.branch}}?\"\n    options: [open, hold]\n    recommended: hold\n  pr:\n    type: tool.gh\n    command: pr create --fill --head {{nodes.fix.output.branch}}\n    allow: [pr create]\nedges:\n  - fix -> tests\n  - from: tests\n    to: fix\n    when: \"!ok\"\n    maxRounds: 2\n  - from: tests\n    to: ask\n    when: ok\n  - from: ask\n    to: pr\n    when: \"choice == 'open'\"\n```\n\nNode ids are lowercase: letters, digits, `-` and `_`. Secrets never go in the\nfile: a tool reads one with `env:` and `{{env.NAME}}`.\n\n## Nodes\n\n| Type                              | Does                                                                |\n| --------------------------------- | ------------------------------------------------------------------- |\n| `claude.worker`                   | A Claude session that does one task and reports                     |\n| `claude.leader`                   | A session that plans and delegates to the nodes it owns (`parent:`) |\n| `claude.subagent`                 | A subagent inside its parent's session; it takes no edges           |\n| `tool.shell`                      | Any program, run without a shell; `allow:` lists command prefixes   |\n| `tool.git`, `tool.gh`, `tool.aws` | The person's own `git`, `gh`, `aws`, with an allow list             |\n| `mcp.call`                        | One tool call on an MCP server, with no session                     |\n| `human.gate`                      | A question with options and a recommended one                       |\n| `control.join`                    | Waits for its inputs: `all` (default), `any`, or `n` of them        |\n| `control.router`, `control.split` | Pass their input on; a router takes its first matching edge         |\n| `workflow.call`                   | Starts another workflow as its own run                              |\n\nA worker, tool node, `mcp.call` or `workflow.call` can run once per entry of a\nlist: see [One node per item](#one-node-per-item).\n\n- **A Claude node reports** `status` (`pass`, `changes_requested`, `done` or\n  `fail`), `summary`, `artifacts`, `branch`, and any field its `output.schema`\n  declares, such as `verdict: [approve, escalate]`. For another verdict, declare\n  a field: `status` can't take other values.\n- **A tool node reports** `exitCode`, `stdout`, `stderr`, and with\n  `output: { format: json, schema: { state: [OPEN, CLOSED] } }` its JSON as\n  `json`. Declare the fields you read: a run then checks them, and a typo can't\n  pass.\n- **A gate reports** `choice` and `answeredBy`. A `timeout` needs a `default`.\n\n## Edges and conditions\n\n- `a -> b`, `a -> b, c`, `b, c -> j` are plain edges, taken when the source\n  succeeded. A failed node takes no plain edge: handle a failure with\n  `when: \"!ok\"`, or `status == 'fail'` on a Claude node.\n- `{ from: a, to: b, when: \"...\" }` is taken when the condition holds. A bare\n  name reads the source's output: `when: \"verdict == 'approve'\"`. Quote any\n  condition that starts with `!`, or YAML reads it as a tag.\n- Conditions have `==`, `!=`, `<`, `>`, `&&`, `||`, `!`, and `any`, `all`,\n  `count`, `len`, `contains`. A join's `statuses` suits `any(statuses, 'fail')`.\n- A node runs when any edge into it is taken; only a join waits. A node with no\n  way in taken is skipped, and so is what follows it.\n- Templates, `{{inputs.x}}`, `{{nodes.a.output.field}}`, `{{run.id}}`, go in\n  `prompt`, `instructions`, `command`, `cwd` and `question`. Each value stays\n  one argument of a command, so it can't inject one.\n\n## One node per item\n\n`forEach` runs a worker, a tool node, an `mcp.call` or a `workflow.call` once\nper entry of a list, with no model turn to fan out or gather. Not a leader, a\ngate, a subagent or a control node.\n\n```yaml\nplan:\n  type: claude.worker\n  prompt: \"Split this into at most 6 independent tasks: {{inputs.goal}}\"\n  isolation: readonly\n  output:\n    schema:\n      tasks:\n        list: { title: string, detail: string } # declare the list and its shape\nbuild:\n  type: claude.worker\n  prompt: \"Task {{index}}: {{item.title}}. {{item.detail}}\"\n  isolation: worktree\n  forEach:\n    from: \"{{nodes.plan.output.tasks}}\" # exactly one path to a declared list\n    maxItems: 6 # required with `from`: the cap on sessions started\n    maxParallel: 3\n```\n\n- `forEach: { items: [a, b] }` takes a list written in the file instead.\n- `{{item}}` and `{{index}}` work only in a node with `forEach`, in `prompt`,\n  `command`, `arguments`, `inputs`, `env` and `ref`. A program also gets\n  `ORK_ITEM` and `ORK_INDEX`.\n- The next node reads `items`, `results` (each item's output, `summary`,\n  `branch`), `statuses` and `count`: `{{nodes.build.output.results}}`,\n  `when: \"all(statuses, 'pass')\"`. Items follow no edges; the node does.\n- `onFailure: finish` (default) runs every item; `stop` starts no more after a\n  failure. A list over `maxItems` makes Ork ask a person.\n- Declare the source's `list`, or `check` warns `forEach.undeclared`. Fix\n  `forEach.not-list`, `forEach.order` and `item.field` errors; they name the\n  field or node.\n\n## Loops\n\nEvery cycle needs an edge with `maxRounds`. Give the way back a condition and\nthe way out its opposite, as `!ok` and `ok` above; a plain edge beside a loop\nfires every round. When a loop runs out, Ork asks a person what to do.\n\n## What `check` refuses, and why\n\n- **A value the source can't have** (`when.value`): `status == 'failed'` (it's\n  `fail`), a gate's `choice == 'aprove'` for `approve`, a value outside a\n  declared list. The message names the values it can have.\n- **A loop no condition ends**, a plain edge beside a loop, a loop of sessions\n  with no `limits.budgetUsd` or `limits.timeout`: warnings, each worth fixing.\n- **`no way the walk tried reaches x`**: Ork tried every way through, and none\n  got to `x`. A join waiting on a branch a first-match router never takes is\n  the usual cause.\n"
 };
 // src/project/init-skills.ts
 /**
@@ -2479,7 +2685,7 @@ const projectChecks = (root) => [...linkChecks(root), ...skillChecks(root, ORK_V
 * @file This installation of Ork: its name and version for the root command;
 *   `ork doctor`, which prints Ork's version against the last update check and
 *   the environment checks (Node, git, the user's own claude, gh and aws
-*   logins, the project's links) and fails when no Claude driver can run; and
+*   logins, the project's links) and fails when no agent driver can run; and
 *   `ork upgrade`, which asks the npm registry for the latest version and, when
 *   it is newer, upgrades Ork the way it was installed after the user agrees
 *   (`--yes` skips the question; `--check` only reports). A clone or `npx` gets
@@ -2510,17 +2716,21 @@ const doctor = defineCommand({
 	run: async () => {
 		const { results, ok } = await runChecks(exec, process.env, process.versions.node);
 		const place = projectAt(process.cwd());
+		const experiments = experimentsCheck(place);
 		for (const result of [
 			orkCheck(),
 			...results,
 			...place.mode === "attached" ? [] : projectChecks(place.root),
 			socketCheck(),
-			...triggerChecks()
+			...triggerChecks(),
+			...await leaseChecks(place),
+			experiments
 		]) for (const line of formatCheck(result)) write(line);
 		if (!ok) {
-			write(`\n${style("red", "Not ready:")} Ork needs Node, git, and at least one Claude driver.`);
+			write(`\n${style("red", "Not ready:")} Ork needs Node, git, and at least one agent driver.`);
 			process.exitCode = 1;
 		}
+		if (experiments.status === "fail") process.exitCode = 1;
 	}
 });
 /** The ids of runs still running anywhere on this machine. */
@@ -3015,7 +3225,7 @@ const driverLine = (checks, projectDefault) => {
 		const why = ready.ready === 1 ? ready.detail : `more than one is ready, and ${ready.driver} comes first`;
 		return `Runs use the driver that's ready when they start: ${ready.driver} here (${why}).`;
 	}
-	return `Runs use the driver that's ready when they start, and none is ready here yet: ${checks.find(({ id }) => id === "cli")?.result.hint ?? "see `ork doctor`."}`;
+	return `Runs use the driver that's ready when they start, and none is ready here yet: ${checks.find(({ id }) => id === "claude-code")?.result.hint ?? "see `ork doctor`."}`;
 };
 /**
 * The line for the project at `root`: `ork doctor`'s driver checks through
@@ -3616,7 +3826,7 @@ const apply = defineCommand({
 		item: itemArg$1,
 		driver: {
 			type: "string",
-			description: "sdk (API key or cloud provider) or cli (your claude login)"
+			description: "claude-code (default: the driver ready here)"
 		},
 		"run-id": {
 			type: "string",
@@ -3625,7 +3835,7 @@ const apply = defineCommand({
 	},
 	run: async ({ args }) => {
 		if (args.driver !== void 0 && !isDriver(args.driver)) {
-			writeErr(`--driver must be sdk or cli, got \`${args.driver}\``);
+			writeErr(badDriver(args.driver));
 			process.exitCode = 1;
 			return;
 		}
@@ -4195,6 +4405,12 @@ const logs = defineCommand({
 			process.exitCode = 1;
 			return;
 		}
+		const problem = args.node === void 0 ? null : unknownNode(store.events(found.run.id), args.node, args.follow && found.run.status === "running");
+		if (problem !== null) {
+			writeErr(problem);
+			process.exitCode = 1;
+			return;
+		}
 		const abort = new AbortController();
 		process.once("SIGINT", () => {
 			abort.abort();
@@ -4228,8 +4444,9 @@ const tree = defineCommand({
 			return;
 		}
 		const { run } = found;
-		const events = store.events(run.id).map((s) => s.event);
-		const roots = runTree(events);
+		const stored = store.events(run.id);
+		const events = stored.map((s) => s.event);
+		const roots = nestItems(activeTree(stored));
 		if (args.json) {
 			write(JSON.stringify(roots, void 0, 2));
 			return;
@@ -4358,6 +4575,8 @@ const init = defineCommand({
 			skills: args.skills,
 			link: args.link
 		});
+		const noCommit = await headWarning(exec);
+		if (noCommit !== null) write(style("yellow", `\n! git: ${noCommit}`));
 		write(`\nNext: edit ${WORKFLOW_DIR}/, then run ${style("bold", "ork validate")}.`);
 	}
 });
@@ -4556,27 +4775,27 @@ const main = defineCommand({
 		ps,
 		logs,
 		tree,
-		usage: () => import("./usage-CJnytoe4.mjs").then((module) => module.usage),
-		prune: () => import("./usage-CJnytoe4.mjs").then((module) => module.prune),
+		usage: () => import("./usage-Cd8pEYyK.mjs").then((module) => module.usage),
+		prune: () => import("./usage-Cd8pEYyK.mjs").then((module) => module.prune),
 		decide,
-		relay: () => import("./relay-o-Luee1c.mjs").then((module) => module.relay),
-		pause: () => import("./pause-B_SL_yDz.mjs").then((module) => module.pause),
-		continue: () => import("./pause-B_SL_yDz.mjs").then((module) => module.continueRun),
+		relay: () => import("./relay-EceRIebO.mjs").then((module) => module.relay),
+		pause: () => import("./pause-D7OVB5Ac.mjs").then((module) => module.pause),
+		continue: () => import("./pause-D7OVB5Ac.mjs").then((module) => module.continueRun),
 		stop,
 		chat,
-		send: () => import("./send-3B64fBNB.mjs").then((module) => module.send),
+		send: () => import("./send-C0uwfUYi.mjs").then((module) => module.send),
 		resume,
 		feedback,
 		context,
-		worktrees: () => import("./worktrees-86ySXxR6.mjs").then((module) => module.worktrees),
-		wt: () => import("./worktrees-86ySXxR6.mjs").then((module) => module.worktrees),
-		watch: () => import("./watch-BJB82ZJ7.mjs").then((module) => module.watch),
-		mcp: () => import("./mcp-CKPyNaKD.mjs").then((module) => module.mcp),
-		ui: () => import("./ui-CY4xxJUu.mjs").then((module) => module.ui),
+		worktrees: () => import("./worktrees-g1MQMGie.mjs").then((module) => module.worktrees),
+		wt: () => import("./worktrees-g1MQMGie.mjs").then((module) => module.worktrees),
+		watch: () => import("./watch-DW5R2OPO.mjs").then((module) => module.watch),
+		mcp: () => import("./mcp-CslnG5wf.mjs").then((module) => module.mcp),
+		ui: () => import("./ui-CBkHJdqk.mjs").then((module) => module.ui),
 		doctor,
 		upgrade,
-		completion: () => import("./completion-snnYGjgK.mjs").then((module) => module.completion),
-		__complete: () => import("./completion-snnYGjgK.mjs").then((module) => module.completeCommand(main))
+		completion: () => import("./completion-Dv5kf598.mjs").then((module) => module.completion),
+		__complete: () => import("./completion-Dv5kf598.mjs").then((module) => module.completeCommand(main))
 	}
 });
 // src/bin.ts
@@ -4594,7 +4813,7 @@ const main = defineCommand({
 clearGitLocalEnv();
 const argv = process.argv.slice(2);
 if (argv[0] === "__complete") {
-	const { printCompletions } = await import("./completion-snnYGjgK.mjs");
+	const { printCompletions } = await import("./completion-Dv5kf598.mjs");
 	await printCompletions(main, argv.slice(1));
 } else if (process.env["ORK_UPDATE_CHECK_CHILD"] === "1") await runUpdateChild();
 else {