@krapht/ork 1.0.0-alpha.16 → 1.0.0-alpha.17

package/dist/{src-nXLIwDrt.mjs → src-DOjTY2ET.mjs}

@@ -1,15 +1,87 @@
-import { $n as DISCUSSIONS, Cn as linkNodes, D as triggersReport, Dn as requestStop, En as requestPause, F as activeTree, Fn as processAlive, Gn as endOf, Gt as applyClean, Hn as loadProject, I as isNodeEvent, Ir as runDirOf, Jn as END_KINDS, Jr as applyEdits, Jt as planClean, Kr as skillsIn, Kt as cleanStep, L as openStore, Mn as runStatus, Nr as placeFiles, On as tellLiveRun, Pr as placeFor, R as storePath, Rn as nestItems, Rr as workflowDirOf, S as detectInstaller, St as walkSummary, Tn as requestContinue, Vr as LESSON_CAP_TOKENS, Xr as readDocument, Xt as stepPrunes, Yr as newWorkflowText, Yt as stepActs, _ as capsHere, a as planRemove, an as nodeSays, b as runningRunIds, bn as DEFAULT_FOLLOW_UPS_RULE, bt as checkWorkflowText, d as planLine, ei as renderJsonSchema, er as planPost, f as removeRefusal, fn as checkFollowUpsDue, fr as readCondition, g as usageReport, hn as startFollowUpChecks, ht as explainWorkflowText, i as lostWork, ii as EdgeInputSchema, jn as pausedOf, kn as liveStatus, kr as loadAgents, l as labelOf, li as NodeSchema, lt as detachRun, nr as sendPost, nt as answerDecision, o as projectHead, ot as detachResume, p as stateParts, pt as limitsReport, qr as WorkflowEditSchema, qt as keyOf, r as applyRemove, rt as pendingDecisions, s as readWorktrees, si as expandEdge, st as resumable, ti as parseWorkflow, tr as runGh, u as mergeStateOf, ut as followEvents, v as planUpgrade, wn as unlinkNodes, x as runningScript, xt as walkChecks, y as releaseNotes, yn as liveSessionOf, zr as inside } from "./src-DN-RPsil.mjs";
-import { a as acceptItem, c as feedbackActions, i as recordNote, l as openFixRun, n as previewPost, o as lessonPlaceOf, s as placeOf$1, t as runInstall } from "./install-23g_1ngs.mjs";
-import { _ as dueCause, a as registryShown, c as fetchLatest, d as readUpdateCache, f as refreshUpdateCache, g as changeFollowUp, h as nodeSession, i as registryOf, l as newerVersion, m as writeUpdateCache, o as updateSwitchOff, p as updateCachePath, s as checkDue, v as findFollowUp, y as followUpActions } from "./__build_info__-DcRdK0Du.mjs";
-import { t as postFollowUpMessage } from "./post-C9soCx7i.mjs";
-import { t as builtinProblem } from "./builtin-files-BRSOObAv.mjs";
-import { n as newRunId, t as findRun } from "./find-mLYsR0uC.mjs";
+import { An as liveStatus, Ar as loadAgents, Br as inside, Bt as decisionListTable, D as triggersReport, Dn as requestPause, En as requestContinue, F as activeTree, Fr as placeFor, Gt as worktreeListTable, Hr as LESSON_CAP_TOKENS, Ht as followUpListTable, I as isNodeEvent, In as processAlive, Jr as WorkflowEditSchema, Jt as keyOf, Kn as endOf, Kt as applyClean, L as openStore, Lr as runDirOf, Mn as pausedOf, Nn as runStatus, On as requestStop, Pr as placeFiles, R as storePath, S as detectInstaller, St as walkSummary, Tn as unlinkNodes, Un as loadProject, Ut as runListTable, Vt as feedbackListTable, Wt as usageListTable, Xr as newWorkflowText, Xt as stepActs, Yn as END_KINDS, Yr as applyEdits, Yt as planClean, Zr as readDocument, Zt as stepPrunes, _ as capsHere, a as planRemove, ai as EdgeInputSchema, b as runningRunIds, bn as liveSessionOf, bt as checkWorkflowText, ci as expandEdge, d as planLine, er as DISCUSSIONS, f as removeRefusal, g as usageReport, gn as startFollowUpChecks, ht as explainWorkflowText, i as lostWork, kn as tellLiveRun, l as labelOf, lt as detachRun, ni as parseWorkflow, nr as runGh, nt as answerDecision, o as projectHead, on as nodeSays, ot as detachResume, p as stateParts, pn as checkFollowUpsDue, pr as readCondition, pt as limitsReport, qr as skillsIn, qt as cleanStep, r as applyRemove, rr as sendPost, rt as pendingDecisions, s as readWorktrees, st as resumable, ti as renderJsonSchema, tr as planPost, u as mergeStateOf, ui as NodeSchema, ut as followEvents, v as planUpgrade, wn as linkNodes, x as runningScript, xn as DEFAULT_FOLLOW_UPS_RULE, xt as walkChecks, y as releaseNotes, zn as nestItems, zr as workflowDirOf, zt as LIST_TABLES } from "./src-DLsFsmOD.mjs";
+import { a as acceptItem, c as feedbackActions, i as recordNote, l as openFixRun, n as previewPost, o as lessonPlaceOf, s as placeOf$1, t as runInstall } from "./install-PVlV2QPq.mjs";
+import { _ as dueCause, a as registryShown, c as fetchLatest, d as readUpdateCache, f as refreshUpdateCache, g as changeFollowUp, h as nodeSession, i as registryOf, l as newerVersion, m as writeUpdateCache, o as updateSwitchOff, p as updateCachePath, s as checkDue, v as findFollowUp, y as followUpActions } from "./__build_info__-C1Nm0hlJ.mjs";
+import { t as postFollowUpMessage } from "./post-2CaJz_mV.mjs";
+import { t as applyFilters } from "./apply-Mb0fNpCX.mjs";
+import { t as parseFilters } from "./parse-BzWpMN-a.mjs";
+import { t as builtinProblem } from "./builtin-files-yYaNTQRU.mjs";
+import { n as newRunId, t as findRun } from "./find-k489laBa.mjs";
 import path from "node:path";
 import { z } from "zod";
 import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { homedir } from "node:os";
 import { createServer } from "node:http";
+// ../server/src/contract-lists.ts
+/** A filter's value: any text; the handler checks it with core. */
+const text = () => z.string().min(1).optional();
+/**
+* A `since` or `until`: `all`, an age (`24h`), a day, or an ISO time. Read with
+* core by the handler, so a bad one is refused in the CLI's words.
+*/
+const time = text;
+/** Each list's filter fields, by flag name, in its core table's order. */
+const LIST_SHAPES = {
+	runs: {
+		status: text(),
+		workflow: text(),
+		project: text(),
+		since: time(),
+		until: time()
+	},
+	feedback: {
+		status: text(),
+		kind: text(),
+		severity: text(),
+		workflow: text(),
+		run: text()
+	},
+	"follow-ups": {
+		status: text(),
+		for: text(),
+		kind: text(),
+		due: text(),
+		project: text()
+	},
+	decisions: {
+		workflow: text(),
+		run: text(),
+		project: text()
+	},
+	worktrees: {
+		run: text(),
+		project: text()
+	},
+	usage: {
+		workflow: text(),
+		project: text(),
+		since: time(),
+		until: time()
+	}
+};
+/** A list's filter fields as query params: its core table's, each optional. */
+const listShape = (list) => LIST_SHAPES[list];
+Object.keys(LIST_SHAPES.runs), Object.keys(LIST_SHAPES.feedback), Object.keys(LIST_SHAPES["follow-ups"]), Object.keys(LIST_SHAPES.decisions), Object.keys(LIST_SHAPES.worktrees), Object.keys(LIST_SHAPES.usage);
+const Count$1 = z.coerce.number().int().positive();
+/** `GET /api/runs`: `runListTable`'s fields, and the newest `limit`. */
+const RunsQuerySchema = z.strictObject({
+	limit: Count$1.optional(),
+	...LIST_SHAPES.runs
+});
+/**
+* `GET /api/usage`: `usageListTable`'s fields; `since` and `until` also take
+* ISO times (`since` included, `until` not), as before.
+*/
+const UsageQuerySchema = z.strictObject(LIST_SHAPES.usage);
+/**
+* `GET /api/decisions`: `decisionListTable`'s fields; `workflow` is ANDed with
+* `run` or `project`.
+*/
+const DecisionsQuerySchema = z.strictObject(LIST_SHAPES.decisions);
+const LISTS_API = { listFields: {
+	method: "GET",
+	path: "/api/list-fields"
+} };
 // ../server/src/contract-feedback.ts
 const NoteSchema = z.strictObject({
 	/** Its first line is the title. */
@@ -45,6 +117,11 @@ const PublishSchema = z.strictObject({
 	/** The preview's digest: what the person saw, so nothing else is sent. */
 	digest: z.string().min(1)
 });
+/**
+* The filters are core's `feedbackListTable` fields; with none, every item
+* comes, dismissed too (the panel hides them itself).
+*/
+const FeedbackItemsQuerySchema = z.strictObject(listShape("feedback"));
 const FEEDBACK_API = {
 	note: {
 		method: "POST",
@@ -53,7 +130,8 @@ const FEEDBACK_API = {
 	},
 	feedbackItems: {
 		method: "GET",
-		path: "/api/feedback"
+		path: "/api/feedback",
+		query: FeedbackItemsQuerySchema
 	},
 	feedbackItem: {
 		method: "GET",
@@ -90,19 +168,11 @@ const FEEDBACK_API = {
 	}
 };
 // ../server/src/contract-follow-ups.ts
-/** `open` is due and waiting, the default; `all` adds done and dropped. */
-const FollowUpsQuerySchema = z.strictObject({
-	status: z.enum([
-		"open",
-		"all",
-		"due",
-		"waiting",
-		"done",
-		"dropped"
-	]).optional(),
-	/** Only those for this: `agent`, `me`, `project:<name>` or `person:<name>`. */
-	for: z.string().min(1).optional()
-});
+/**
+* The filters are core's `followUpListTable` fields. `status` is `open` (due
+* and waiting, the default), `all` (adds done and dropped), or the table's.
+*/
+const FollowUpsQuerySchema = z.strictObject(listShape("follow-ups"));
 const FollowUpChangeSchema = z.strictObject({ action: z.enum([
 	"done",
 	"drop",
@@ -271,9 +341,11 @@ planId: z.string().min(1) })
 };
 // ../server/src/contract-worktrees.ts
 const Root = z.string().min(1);
-const WorktreesQuerySchema = z.strictObject({ 
-/** A project's root; every project Ork knows without one. */
-project: Root.optional() });
+/**
+* The filters are core's `worktreeListTable` fields (`project`: a root; every
+* project without one).
+*/
+const WorktreesQuerySchema = z.strictObject(listShape("worktrees"));
 const RemovePlanSchema = z.strictObject({
 	project: Root,
 	/** The item's branch, or a detached worktree's path. */
@@ -323,17 +395,6 @@ const WORKTREES_API = {
 // ../server/src/contract.ts
 const Count = z.coerce.number().int().positive();
 const Seq = z.coerce.number().int().nonnegative();
-const RunsQuerySchema = z.strictObject({
-	project: z.string().min(1).optional(),
-	limit: Count.optional()
-});
-const UsageQuerySchema = z.strictObject({
-	project: z.string().min(1).optional(),
-	workflow: z.string().min(1).optional(),
-	/** ISO times: `since` included, `until` not. */
-	since: z.iso.datetime().optional(),
-	until: z.iso.datetime().optional()
-});
 const EventsQuerySchema = z.strictObject({
 	after: Seq.optional(),
 	node: z.string().min(1).optional(),
@@ -342,12 +403,6 @@ const EventsQuerySchema = z.strictObject({
 	/** Only the newest this many, still oldest first. */
 	last: Count.optional()
 });
-const DecisionsQuerySchema = z.strictObject({
-	run: z.string().min(1).optional(),
-	project: z.string().min(1).optional(),
-	/** Only runs of this workflow, by name; ANDed with `run` or `project`. */
-	workflow: z.string().min(1).optional()
-});
 /** An answer: the option, and what the person said with it, if anything. */
 const AnswerSchema = z.strictObject({
 	choose: z.string().min(1),
@@ -385,6 +440,7 @@ const API = {
 	...CONTEXT_API,
 	...AFTER_API,
 	...WORKTREES_API,
+	...LISTS_API,
 	...UPDATE_API,
 	projects: {
 		method: "GET",
@@ -1575,6 +1631,76 @@ const treeWithEnds = (roots, stored) => {
 	};
 	return roots.map((node) => dress(node));
 };
+// ../server/src/list-fields-routes.ts
+/**
+* @file `GET /api/list-fields`: the filter fields of each list, from core's
+*   tables (RFC-017), as text without their functions, so the UI builds its
+*   filter bar without importing core.
+*/
+const infoOf = (field) => ({
+	name: field.name,
+	description: field.description,
+	type: field.type,
+	...field.values === void 0 ? {} : { values: [...field.values] },
+	...field.all === true ? { all: true } : {}
+});
+/** The answer, built once: the tables do not change while the server runs. */
+const listFields = () => ({
+	runs: LIST_TABLES.ps.fields.map(infoOf),
+	feedback: LIST_TABLES["feedback list"].fields.map(infoOf),
+	"follow-ups": LIST_TABLES["follow-ups list"].fields.map(infoOf),
+	decisions: LIST_TABLES["decide --list"].fields.map(infoOf),
+	worktrees: LIST_TABLES["worktrees list"].fields.map(infoOf),
+	usage: LIST_TABLES.usage.fields.map(infoOf)
+});
+const listFieldsRoutes = () => ({ listFields: () => ok(listFields()) });
+// ../server/src/list-query.ts
+/**
+* @file Reads a list route's filter fields the way the CLI reads its flags
+*   (RFC-017, ADR-088): each value checked by core's `parseFilters` against the
+*   list's table, a refused one answered as 400 in the CLI's words. A full ISO
+*   time in `since` or `until` is taken as given (the form `usage` had before
+*   the tables), the rest are an age, a day or `all`.
+*/
+/** A `2026-11-01T10:00:00Z`-style time, as an ISO time; else `undefined`. */
+const isoTime = (value) => {
+	if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T/u.test(value)) return;
+	const time = Date.parse(value);
+	return Number.isNaN(time) ? void 0 : new Date(time).toISOString();
+};
+/**
+* The filter `query` asks for, checked against `table`; a value the table
+* refuses is a 400.
+*/
+const filterOf = (table, query) => {
+	const times = {};
+	const rest = { ...query };
+	for (const name of ["since", "until"]) {
+		const iso = isoTime(query[name]);
+		if (iso === void 0) continue;
+		times[name] = iso;
+		delete rest[name];
+	}
+	const parsed = parseFilters(table, rest, Date.now());
+	return parsed.ok ? {
+		ok: true,
+		filter: {
+			...parsed.filter,
+			...times
+		}
+	} : {
+		ok: false,
+		refusal: fail(400, parsed.error)
+	};
+};
+/**
+* The root a filter's `project` names (a registered project's id or root, else
+* the value as a root); `undefined` without one or for `all`.
+*/
+const projectRootOf = (context, filter) => {
+	const key = filter["project"];
+	return key === void 0 || key === "all" ? void 0 : projectOf(context, key)?.root ?? key;
+};
 // ../server/src/workflows.ts
 /**
 * @file A project's workflows, for the UI's Run workflow dialog: each
@@ -1633,14 +1759,18 @@ const projectWorkflows = (project) => {
 *   decisions, and usage. Each reads the store as the matching CLI command does
 *   (`ork projects`, `ps`, `tree`, `logs`, `decide --list`, `usage`).
 */
-/** A project filter's root: a registered project's, or the value as a root. */
 /** A registered project's place; caps are only known for one. */
 const placeOf = (context, key) => {
 	const known = key === void 0 ? void 0 : projectOf(context, key);
 	return known === void 0 ? void 0 : placeFor(known.root, context.store.projects());
 };
-const projectRoot = (context, key) => projectOf(context, key)?.root ?? key;
+/** `ork ps`'s table, matching `--status` on the live status the API shows. */
+const liveRunTable = {
+	...runListTable,
+	fields: runListTable.fields.map((field) => field.name === "status" ? Object.assign({}, field, { get: (run) => run.live }) : field)
+};
 const readRoutes = (context) => ({
+	...listFieldsRoutes(),
 	health: () => ok({
 		version: context.version,
 		pid: context.pid,
@@ -1649,23 +1779,38 @@ const readRoutes = (context) => ({
 	projects: () => ok(context.store.projects()),
 	triggers: () => ok(triggersReport(context.store, context.store.projects(), context.home)),
 	links: ({ query }) => ok(context.store.links(query.run === void 0 ? {} : { run: query.run })),
-	usage: ({ query }) => ok({
-		...usageReport(context.store.usage({
-			...query.project === void 0 ? {} : { project: projectRoot(context, query.project) },
-			...query.workflow === void 0 ? {} : { workflow: query.workflow },
-			...query.since === void 0 ? {} : { since: query.since },
-			...query.until === void 0 ? {} : { until: query.until }
-		})),
-		limits: limitsReport(context.store, capsHere(context.home, placeOf(context, query.project)), /* @__PURE__ */ new Date())
-	}),
+	usage: ({ query }) => {
+		const read = filterOf(usageListTable, query);
+		if (!read.ok) return read.refusal;
+		const { filter } = read;
+		const { workflow, since, until } = filter;
+		const root = projectRootOf(context, filter);
+		return ok({
+			...usageReport(context.store.usage({
+				...root === void 0 ? {} : { project: root },
+				...workflow === void 0 ? {} : { workflow },
+				...since === void 0 || since === "all" ? {} : { since },
+				...until === void 0 ? {} : { until }
+			})),
+			limits: limitsReport(context.store, capsHere(context.home, placeOf(context, root)), /* @__PURE__ */ new Date())
+		});
+	},
 	workflows: ({ params }) => {
 		const project = projectOf(context, params.id);
 		return project === void 0 ? fail(404, `No registered project \`${params.id}\`.`) : ok(projectWorkflows(project));
 	},
-	runs: ({ query }) => ok(context.store.runs({
-		limit: query.limit ?? 20,
-		...query.project === void 0 ? {} : { project: projectRoot(context, query.project) }
-	}).map((run) => viewOf$2(context, run))),
+	runs: ({ query }) => {
+		const read = filterOf(liveRunTable, query);
+		if (!read.ok) return read.refusal;
+		const root = projectRootOf(context, read.filter);
+		const limit = query.limit ?? 20;
+		const narrowed = Object.keys(read.filter).some((name) => name !== "project");
+		const views = context.store.runs({
+			...root === void 0 ? {} : { project: root },
+			...narrowed ? {} : { limit }
+		}).map((run) => viewOf$2(context, run));
+		return ok(applyFilters(liveRunTable, views, read.filter).slice(0, limit));
+	},
 	run: ({ params }) => {
 		const found = runOf(context, params.id);
 		return found.ok ? ok(viewOf$2(context, found.run)) : found.refusal;
@@ -1689,12 +1834,18 @@ const readRoutes = (context) => ({
 		return ok((query.limit === void 0 ? newest : newest.slice(0, query.limit)).map((stored) => servedEvent(stored)));
 	},
 	decisions: ({ query }) => {
-		const workflow = query.workflow === void 0 ? {} : { workflow: query.workflow };
-		if (query.run === void 0) return ok(pendingDecisions(context.store, {
-			...workflow,
-			...query.project === void 0 ? {} : { project: projectRoot(context, query.project) }
-		}));
-		const found = runOf(context, query.run);
+		const read = filterOf(decisionListTable, query);
+		if (!read.ok) return read.refusal;
+		const { run, workflow: named } = read.filter;
+		const workflow = named === void 0 ? {} : { workflow: named };
+		if (run === void 0) {
+			const root = projectRootOf(context, read.filter);
+			return ok(pendingDecisions(context.store, {
+				...workflow,
+				...root === void 0 ? {} : { project: root }
+			}));
+		}
+		const found = runOf(context, run);
 		if (!found.ok) return found.refusal;
 		return ok(pendingDecisions(context.store, {
 			...workflow,
@@ -1739,7 +1890,7 @@ const mcpTools = (context) => {
 			...NO_QUERY,
 			params: { id: args.project }
 		}))),
-		tool("runs", "Runs, newest first, with their live status and cost. 10 unless a limit is given.", RunsQuerySchema.shape, (args) => fromReply(read.runs({
+		tool("runs", "Runs, newest first, with their live status and cost. 10 unless a limit is given. Narrow them with `status` (running, paused, crashed, succeeded, failed, … or all), `workflow`, `project` (or all), `since` (24h, 30d, 2026-11-01, all) and `until` (a day).", RunsQuerySchema.shape, (args) => fromReply(read.runs({
 			...NO_QUERY,
 			query: {
 				limit: 10,
@@ -1775,11 +1926,11 @@ const mcpTools = (context) => {
 				}
 			}));
 		}),
-		tool("usage", "What runs spent, by workflow and model, and how close the limits are. `since` and `until` are ISO times.", UsageQuerySchema.shape, (args) => fromReply(read.usage({
+		tool("usage", "What runs spent, by workflow and model, and how close the limits are. Narrow it with `workflow`, `project` (or all), `since` and `until`: an age (24h, 30d), a day (2026-11-01) or an ISO time; `since` also takes all.", UsageQuerySchema.shape, (args) => fromReply(read.usage({
 			...NO_QUERY,
 			query: args
 		}))),
-		tool("decisions", "The decisions open in live runs, waiting on a person. This server can't answer them.", DecisionsQuerySchema.shape, (args) => fromReply(read.decisions({
+		tool("decisions", "The decisions open in live runs, waiting on a person. This server can't answer them. Narrow them with `workflow`, `run` (an id or a start of one) and `project` (or all).", DecisionsQuerySchema.shape, (args) => fromReply(read.decisions({
 			...NO_QUERY,
 			query: args
 		}), (open) => ({
@@ -2180,7 +2331,10 @@ const feedbackRoutes = (context) => {
 			const noted = recordNote(store, found.run, body);
 			return noted.ok ? ok({ item: noted.item }) : fail(400, noted.error);
 		},
-		feedbackItems: () => ok(store.feedbackItems({ all: true })),
+		feedbackItems: ({ query }) => {
+			const read = filterOf(feedbackListTable, query);
+			return read.ok ? ok(applyFilters(feedbackListTable, store.feedbackItems({ all: true }), read.filter)) : read.refusal;
+		},
 		feedbackItem: ({ params }) => {
 			const found = itemOf(store, params.id);
 			if (!found.ok) return found.refusal;
@@ -2349,13 +2503,15 @@ const followUpRoutes = (context) => {
 				gh
 			}).then((checked) => checked.errors).catch((error) => [error instanceof Error ? error.message : String(error)]);
 			const all = store.followUps(root);
-			const status = query.status ?? "open";
-			const shown = all.filter((f) => {
-				if (query.for !== void 0 && f.for !== query.for) return false;
-				if (status === "all") return true;
-				if (status === "open") return OPEN.some((s) => s === f.status);
-				return f.status === status;
+			const open = (query.status ?? "open") === "open";
+			const read = filterOf(followUpListTable, {
+				...query,
+				...open ? { status: "all" } : {}
 			});
+			if (!read.ok) return read.refusal;
+			const other = projectRootOf(context, read.filter);
+			const matched = other === void 0 || other === root ? applyFilters(followUpListTable, all, read.filter) : [];
+			const shown = open ? matched.filter((f) => OPEN.some((s) => s === f.status)) : matched;
 			return ok({
 				project: root,
 				followUps: shown,
@@ -2905,9 +3061,15 @@ const worktreesRoutes = (context) => {
 	};
 	return {
 		worktrees: async ({ query }) => {
-			const all = await readAll(query.project);
+			const filtered = filterOf(worktreeListTable, query);
+			if (!filtered.ok) return filtered.refusal;
+			const all = await readAll(projectRootOf(context, filtered.filter));
 			if (!all.ok) return all.refusal;
-			return ok({ projects: all.reads.map((read) => listed(context, read)) });
+			return ok({ projects: all.reads.map((read) => {
+				const project = listed(context, read);
+				project.items = applyFilters(worktreeListTable, project.items, filtered.filter);
+				return project;
+			}) });
 		},
 		worktreeRemovePlan: async ({ body }) => {
 			const planned = await removePlanOf(context, body);

package/dist/{src-DHDQ0itC.mjs → src-DmmrX2_C.mjs}

@@ -1,8 +1,8 @@
-import { $r as programsRunBy, At as endedWith, Dt as runScope, Et as heldTimeout, Gn as endOf, It as lowerChild, Kn as outcomeEnd, Mt as stoppedEnd, Nt as declaredProblem, Ot as calledWorkflows, Pt as slotClock, Qr as beforeOf, Rt as startAt, Y as sessionRefusals, Yn as endFor, _i as TOOL_PREFIX, _t as planNodeSession, cn as mcpNotText, di as isToolNode, dr as renderTemplate, gi as INTEGRATIONS, hi as timeoutMs, in as sessionDriver, jt as failedWith, ln as serversIn, lr as evaluate, mt as planReason, on as declaredOutputOf, qn as END_DETAIL_LIMIT, ri as markValue, sn as MCP_FILE, tn as envReadsOf, ui as isClaudeNode, ur as parseTemplate, vi as integrationFor, wi as AGENT_DRIVERS, yt as reportSchemaFor, zn as countedTokens } from "./src-DN-RPsil.mjs";
-import { t as runOnce } from "./run-D_u9V_Ve.mjs";
+import { $r as beforeOf, At as endedWith, Bn as countedTokens, Dt as runScope, Et as heldTimeout, It as lowerChild, Jn as END_DETAIL_LIMIT, Kn as endOf, Mt as stoppedEnd, Nt as declaredProblem, Ot as calledWorkflows, Pt as slotClock, R as storePath, Rt as startAt, Ti as AGENT_DRIVERS, Xn as endFor, Y as sessionRefusals, _i as INTEGRATIONS, _t as planNodeSession, an as sessionDriver, cn as MCP_FILE, di as isClaudeNode, dr as parseTemplate, ei as programsRunBy, fi as isToolNode, fr as renderTemplate, gi as timeoutMs, ii as markValue, jt as failedWith, ln as mcpNotText, mt as planReason, nn as envReadsOf, qn as outcomeEnd, sn as declaredOutputOf, un as serversIn, ur as evaluate, vi as TOOL_PREFIX, yi as integrationFor, yt as reportSchemaFor } from "./src-DLsFsmOD.mjs";
+import { t as runOnce } from "./run-BfxdsQJk.mjs";
 import { n as holdGuard, r as orphanGuard, t as KILL_AFTER_MS } from "./orphan-guard-BFKg8VSd.mjs";
 import path from "node:path";
-import { accessSync, constants, lstatSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { accessSync, constants, lstatSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { spawn } from "node:child_process";
 import { Readable } from "node:stream";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
@@ -1100,6 +1100,62 @@ const skippedCheck = (outputFile) => {
 		}
 	}, endFor("done"));
 };
+// ../nodes/src/run-marker.ts
+/**
+* @file The marker a run leaves on its sessions and programs (ADR-047), and the
+*   stores it guards: the commands that act as the user refuse in the stores of
+*   the runs that started a process, and everywhere under a marker that lists
+*   none, which an older `ork` sets.
+*/
+/** Set for a program in a run. */
+const RUN_ENV = "ORK_RUN";
+/** Set for a Claude session. It says no more than that: no run, no node. */
+const SESSION_ENV = "ORK_SESSION";
+/**
+* The stores whose runs started a session or program, as a JSON array of real
+* paths: the commands that act as the user refuse only in these.
+*/
+const GUARDED_STORES_ENV = "ORK_GUARDED_STORES";
+/**
+* The variable that says a program in a run or a session started this process,
+* or `null` when none does.
+*/
+const runMarkerIn = (env) => ["ORK_RUN", "ORK_SESSION"].find((name) => env[name] !== void 0) ?? null;
+/** The stores `env` lists, or `undefined` when it lists none or garbles it. */
+const listIn = (env) => {
+	const text = env[GUARDED_STORES_ENV];
+	if (text === void 0) return void 0;
+	try {
+		const value = JSON.parse(text);
+		return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : void 0;
+	} catch {
+		return;
+	}
+};
+/** A store file's real path, so a symlinked `~/.ork` is the same store. */
+const realStore = (store) => {
+	try {
+		return realpathSync(store);
+	} catch {
+		return path.resolve(store);
+	}
+};
+/**
+* The stores a run that started this process is in: `null` when no run did, and
+* `"all"` when one did but listed none (an older `ork`), which fails closed.
+*/
+const guardedStoresIn = (env) => runMarkerIn(env) === null ? null : listIn(env) ?? "all";
+/** Whether a run in `store` (a store file) started this process. */
+const storeGuarded = (env, store) => {
+	const guarded = guardedStoresIn(env);
+	return guarded === "all" || guarded !== null && guarded.includes(realStore(store));
+};
+/**
+* What a run in `store` (default: the user's) tells its sessions and programs:
+* the stores it inherited, and its own. Nothing when it inherited "all", so
+* that holds.
+*/
+const guardOf = (env, store = storePath()) => guardedStoresIn(env) === "all" ? {} : { [GUARDED_STORES_ENV]: JSON.stringify([.../* @__PURE__ */ new Set([...listIn(env) ?? [], realStore(store)])]) };
 // ../nodes/src/tool-scrub.ts
 /**
 * @file Masking a secret in what a program prints. A plain search, so a value
@@ -1263,16 +1319,13 @@ const scrubberOf = (values) => {
 const OUTPUT_ENV = "ORK_OUTPUT";
 /** A file a `watch:` node's program keeps between looks (RFC-011). */
 const STATE_ENV = "ORK_STATE";
-/** Set for a program in a run. */
-const RUN_ENV = "ORK_RUN";
-/** Set for a Claude session. It says no more than that: no run, no node. */
-const SESSION_ENV = "ORK_SESSION";
 /** The variables a caller's run reads, for a run it calls to mask too. */
 const MASKED_ENV = "ORK_MASKED";
 /** Every variable Ork sets itself; a workflow's `env:` cannot set them. */
 const IDENTITY_KEYS = /* @__PURE__ */ new Set([
 	RUN_ENV,
 	SESSION_ENV,
+	GUARDED_STORES_ENV,
 	MASKED_ENV,
 	"ORK_NODE",
 	"ORK_ROUND",
@@ -1291,20 +1344,21 @@ const IDENTITY_KEYS = /* @__PURE__ */ new Set([
 */
 const withoutIdentity = (env) => Object.fromEntries(Object.entries(env).flatMap(([key, value]) => value === void 0 || IDENTITY_KEYS.has(key) ? [] : [[key, value]]));
 /**
-* What a Claude session runs with: no identity, only the marker that stops its
-* Bash from speaking as the user through `ork chat`.
+* What a Claude session of a run in `store` (default: the user's) runs with: no
+* identity, only the marker that stops its Bash from speaking as the user
+* through `ork chat`, and the stores it must not do that in.
 */
-const sessionEnv = (env) => ({
+const sessionEnv = (env, store) => ({
 	...withoutIdentity(env),
-	[SESSION_ENV]: "1"
+	[SESSION_ENV]: "1",
+	...guardOf(env, store)
 });
 /**
-* The variable that says a program in a run or a session started this process,
-* or `null` when none does.
+* Who a node's program is, and the stores its run guards (none listed without
+* `store`, which guards every one). It is attribution, not a boundary.
 */
-const runMarkerIn = (env) => ["ORK_RUN", SESSION_ENV].find((name) => env[name] !== void 0) ?? null;
-/** Who a node's program is. It is attribution, not a security boundary. */
-const identityOf = (context, orkBin) => ({
+const identityOf = (context, orkBin, environ = {}, store) => ({
+	...store === void 0 ? {} : guardOf(environ, store),
 	[RUN_ENV]: context.runId,
 	ORK_NODE: context.id,
 	ORK_ROUND: String(context.round),
@@ -1526,7 +1580,7 @@ const toolExecutor = (given, options = {}) => async (context) => {
 	const outputFile = node.output?.format === "json" ? prepareOutputFile(context.runDir, context.id, context.round) : void 0;
 	const env = {
 		...nodeEnv.values,
-		...identityOf(context, options.orkBin),
+		...identityOf(context, options.orkBin, environ, options.store),
 		...maskedEnv(namesToMask(context.workflow, environ, options.maskedNames)),
 		...outputFile === void 0 ? {} : { [OUTPUT_ENV]: outputFile },
 		...node.watch === void 0 ? {} : { [STATE_ENV]: prepareStateFile(context.runDir, context.id) }
@@ -2320,6 +2374,7 @@ const spawnTool = (program, args, { cwd, signal, env, priority }) => {
 const builtinExecutors = (options) => {
 	const tool = toolExecutor(options.tools ?? spawnTool, {
 		...options.orkBin === void 0 ? {} : { orkBin: options.orkBin },
+		...options.store === void 0 ? {} : { store: options.store },
 		...options.maskedNames === void 0 ? {} : { maskedNames: options.maskedNames }
 	});
 	const claude = claudeExecutor({
@@ -2460,4 +2515,4 @@ const missingPrograms = (workflow, installed = (program) => onPath(program)) =>
 	}
 	return [...missing.values()];
 };
-export { namedMcpEntries as _, builtinExecutors as a, toolExecutor as c, maskedEnv as d, maskedNamesOfRun as f, clearOutputFiles as g, sessionEnv as h, onPath as i, clearStateFiles as l, runScrubber as m, missingProgramMessage as n, spawnTool as o, runMarkerIn as p, missingPrograms as r, mcpCallExecutor as s, envProblems as t, inheritedScrubber as u, resultOf as v };
+export { clearOutputFiles as _, builtinExecutors as a, toolExecutor as c, maskedEnv as d, maskedNamesOfRun as f, storeGuarded as g, runMarkerIn as h, onPath as i, clearStateFiles as l, sessionEnv as m, missingProgramMessage as n, spawnTool as o, runScrubber as p, missingPrograms as r, mcpCallExecutor as s, envProblems as t, inheritedScrubber as u, namedMcpEntries as v, resultOf as y };

package/dist/{store-Dyr1mP8K.mjs → store-DACH768X.mjs}

@@ -1,4 +1,4 @@
-import { L as openStore } from "./src-DN-RPsil.mjs";
+import { L as openStore } from "./src-DLsFsmOD.mjs";
 // src/store.ts
 /**
 * @file Opening the user's store (`~/.ork/state.db`) for the length of one