@krapht/ork 1.0.0-alpha.16 → 1.0.0-alpha.18

package/dist/{src-nXLIwDrt.mjs → src-DWAcd3Sy.mjs}

@@ -1,15 +1,87 @@
-import { $n as DISCUSSIONS, Cn as linkNodes, D as triggersReport, Dn as requestStop, En as requestPause, F as activeTree, Fn as processAlive, Gn as endOf, Gt as applyClean, Hn as loadProject, I as isNodeEvent, Ir as runDirOf, Jn as END_KINDS, Jr as applyEdits, Jt as planClean, Kr as skillsIn, Kt as cleanStep, L as openStore, Mn as runStatus, Nr as placeFiles, On as tellLiveRun, Pr as placeFor, R as storePath, Rn as nestItems, Rr as workflowDirOf, S as detectInstaller, St as walkSummary, Tn as requestContinue, Vr as LESSON_CAP_TOKENS, Xr as readDocument, Xt as stepPrunes, Yr as newWorkflowText, Yt as stepActs, _ as capsHere, a as planRemove, an as nodeSays, b as runningRunIds, bn as DEFAULT_FOLLOW_UPS_RULE, bt as checkWorkflowText, d as planLine, ei as renderJsonSchema, er as planPost, f as removeRefusal, fn as checkFollowUpsDue, fr as readCondition, g as usageReport, hn as startFollowUpChecks, ht as explainWorkflowText, i as lostWork, ii as EdgeInputSchema, jn as pausedOf, kn as liveStatus, kr as loadAgents, l as labelOf, li as NodeSchema, lt as detachRun, nr as sendPost, nt as answerDecision, o as projectHead, ot as detachResume, p as stateParts, pt as limitsReport, qr as WorkflowEditSchema, qt as keyOf, r as applyRemove, rt as pendingDecisions, s as readWorktrees, si as expandEdge, st as resumable, ti as parseWorkflow, tr as runGh, u as mergeStateOf, ut as followEvents, v as planUpgrade, wn as unlinkNodes, x as runningScript, xt as walkChecks, y as releaseNotes, yn as liveSessionOf, zr as inside } from "./src-DN-RPsil.mjs";
-import { a as acceptItem, c as feedbackActions, i as recordNote, l as openFixRun, n as previewPost, o as lessonPlaceOf, s as placeOf$1, t as runInstall } from "./install-23g_1ngs.mjs";
-import { _ as dueCause, a as registryShown, c as fetchLatest, d as readUpdateCache, f as refreshUpdateCache, g as changeFollowUp, h as nodeSession, i as registryOf, l as newerVersion, m as writeUpdateCache, o as updateSwitchOff, p as updateCachePath, s as checkDue, v as findFollowUp, y as followUpActions } from "./__build_info__-DcRdK0Du.mjs";
-import { t as postFollowUpMessage } from "./post-C9soCx7i.mjs";
-import { t as builtinProblem } from "./builtin-files-BRSOObAv.mjs";
-import { n as newRunId, t as findRun } from "./find-mLYsR0uC.mjs";
+import { An as liveStatus, Ar as loadAgents, Br as inside, Bt as decisionListTable, D as triggersReport, Dn as requestPause, En as requestContinue, F as activeTree, Fr as placeFor, Gt as worktreeListTable, Hr as LESSON_CAP_TOKENS, Ht as followUpListTable, I as isNodeEvent, In as processAlive, Jr as WorkflowEditSchema, Jt as keyOf, Kn as endOf, Kt as applyClean, L as openStore, Lr as runDirOf, Mn as pausedOf, Nn as runStatus, On as requestStop, Pr as placeFiles, R as storePath, S as detectInstaller, St as walkSummary, Tn as unlinkNodes, Un as loadProject, Ut as runListTable, Vt as feedbackListTable, Wt as usageListTable, Xr as newWorkflowText, Xt as stepActs, Yn as END_KINDS, Yr as applyEdits, Yt as planClean, Zr as readDocument, Zt as stepPrunes, _ as capsHere, a as planRemove, ai as EdgeInputSchema, b as runningRunIds, bn as liveSessionOf, bt as checkWorkflowText, ci as expandEdge, d as planLine, er as DISCUSSIONS, f as removeRefusal, g as usageReport, gn as startFollowUpChecks, ht as explainWorkflowText, i as lostWork, kn as tellLiveRun, l as labelOf, lt as detachRun, ni as parseWorkflow, nr as runGh, nt as answerDecision, o as projectHead, on as nodeSays, ot as detachResume, p as stateParts, pn as checkFollowUpsDue, pr as readCondition, pt as limitsReport, qr as skillsIn, qt as cleanStep, r as applyRemove, rr as sendPost, rt as pendingDecisions, s as readWorktrees, st as resumable, ti as renderJsonSchema, tr as planPost, u as mergeStateOf, ui as NodeSchema, ut as followEvents, v as planUpgrade, wn as linkNodes, x as runningScript, xn as DEFAULT_FOLLOW_UPS_RULE, xt as walkChecks, y as releaseNotes, zn as nestItems, zr as workflowDirOf, zt as LIST_TABLES } from "./src-Frwpx3WF.mjs";
+import { a as acceptItem, c as feedbackActions, i as recordNote, l as openFixRun, n as previewPost, o as lessonPlaceOf, s as placeOf$1, t as runInstall } from "./install-B743Bwzz.mjs";
+import { _ as dueCause, a as registryShown, c as fetchLatest, d as readUpdateCache, f as refreshUpdateCache, g as changeFollowUp, h as nodeSession, i as registryOf, l as newerVersion, m as writeUpdateCache, o as updateSwitchOff, p as updateCachePath, s as checkDue, v as findFollowUp, y as followUpActions } from "./__build_info__-B8TNbFtN.mjs";
+import { t as postFollowUpMessage } from "./post-y1qL1Fnj.mjs";
+import { t as applyFilters } from "./apply-Mb0fNpCX.mjs";
+import { t as parseFilters } from "./parse-BzWpMN-a.mjs";
+import { t as builtinProblem } from "./builtin-files-dnTP2GaX.mjs";
+import { n as newRunId, t as findRun } from "./find-P-VV4B47.mjs";
 import path from "node:path";
 import { z } from "zod";
 import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { homedir } from "node:os";
 import { createServer } from "node:http";
+// ../server/src/contract-lists.ts
+/** A filter's value: any text; the handler checks it with core. */
+const text = () => z.string().min(1).optional();
+/**
+* A `since` or `until`: `all`, an age (`24h`), a day, or an ISO time. Read with
+* core by the handler, so a bad one is refused in the CLI's words.
+*/
+const time = text;
+/** Each list's filter fields, by flag name, in its core table's order. */
+const LIST_SHAPES = {
+	runs: {
+		status: text(),
+		workflow: text(),
+		project: text(),
+		since: time(),
+		until: time()
+	},
+	feedback: {
+		status: text(),
+		kind: text(),
+		severity: text(),
+		workflow: text(),
+		run: text()
+	},
+	"follow-ups": {
+		status: text(),
+		for: text(),
+		kind: text(),
+		due: text(),
+		project: text()
+	},
+	decisions: {
+		workflow: text(),
+		run: text(),
+		project: text()
+	},
+	worktrees: {
+		run: text(),
+		project: text()
+	},
+	usage: {
+		workflow: text(),
+		project: text(),
+		since: time(),
+		until: time()
+	}
+};
+/** A list's filter fields as query params: its core table's, each optional. */
+const listShape = (list) => LIST_SHAPES[list];
+Object.keys(LIST_SHAPES.runs), Object.keys(LIST_SHAPES.feedback), Object.keys(LIST_SHAPES["follow-ups"]), Object.keys(LIST_SHAPES.decisions), Object.keys(LIST_SHAPES.worktrees), Object.keys(LIST_SHAPES.usage);
+const Count$1 = z.coerce.number().int().positive();
+/** `GET /api/runs`: `runListTable`'s fields, and the newest `limit`. */
+const RunsQuerySchema = z.strictObject({
+	limit: Count$1.optional(),
+	...LIST_SHAPES.runs
+});
+/**
+* `GET /api/usage`: `usageListTable`'s fields; `since` and `until` also take
+* ISO times (`since` included, `until` not), as before.
+*/
+const UsageQuerySchema = z.strictObject(LIST_SHAPES.usage);
+/**
+* `GET /api/decisions`: `decisionListTable`'s fields; `workflow` is ANDed with
+* `run` or `project`.
+*/
+const DecisionsQuerySchema = z.strictObject(LIST_SHAPES.decisions);
+const LISTS_API = { listFields: {
+	method: "GET",
+	path: "/api/list-fields"
+} };
 // ../server/src/contract-feedback.ts
 const NoteSchema = z.strictObject({
 	/** Its first line is the title. */
@@ -45,6 +117,11 @@ const PublishSchema = z.strictObject({
 	/** The preview's digest: what the person saw, so nothing else is sent. */
 	digest: z.string().min(1)
 });
+/**
+* The filters are core's `feedbackListTable` fields; with none, every item
+* comes, dismissed too (the panel hides them itself).
+*/
+const FeedbackItemsQuerySchema = z.strictObject(listShape("feedback"));
 const FEEDBACK_API = {
 	note: {
 		method: "POST",
@@ -53,7 +130,8 @@ const FEEDBACK_API = {
 	},
 	feedbackItems: {
 		method: "GET",
-		path: "/api/feedback"
+		path: "/api/feedback",
+		query: FeedbackItemsQuerySchema
 	},
 	feedbackItem: {
 		method: "GET",
@@ -90,19 +168,11 @@ const FEEDBACK_API = {
 	}
 };
 // ../server/src/contract-follow-ups.ts
-/** `open` is due and waiting, the default; `all` adds done and dropped. */
-const FollowUpsQuerySchema = z.strictObject({
-	status: z.enum([
-		"open",
-		"all",
-		"due",
-		"waiting",
-		"done",
-		"dropped"
-	]).optional(),
-	/** Only those for this: `agent`, `me`, `project:<name>` or `person:<name>`. */
-	for: z.string().min(1).optional()
-});
+/**
+* The filters are core's `followUpListTable` fields. `status` is `open` (due
+* and waiting, the default), `all` (adds done and dropped), or the table's.
+*/
+const FollowUpsQuerySchema = z.strictObject(listShape("follow-ups"));
 const FollowUpChangeSchema = z.strictObject({ action: z.enum([
 	"done",
 	"drop",
@@ -271,9 +341,11 @@ planId: z.string().min(1) })
 };
 // ../server/src/contract-worktrees.ts
 const Root = z.string().min(1);
-const WorktreesQuerySchema = z.strictObject({ 
-/** A project's root; every project Ork knows without one. */
-project: Root.optional() });
+/**
+* The filters are core's `worktreeListTable` fields (`project`: a root; every
+* project without one).
+*/
+const WorktreesQuerySchema = z.strictObject(listShape("worktrees"));
 const RemovePlanSchema = z.strictObject({
 	project: Root,
 	/** The item's branch, or a detached worktree's path. */
@@ -323,17 +395,6 @@ const WORKTREES_API = {
 // ../server/src/contract.ts
 const Count = z.coerce.number().int().positive();
 const Seq = z.coerce.number().int().nonnegative();
-const RunsQuerySchema = z.strictObject({
-	project: z.string().min(1).optional(),
-	limit: Count.optional()
-});
-const UsageQuerySchema = z.strictObject({
-	project: z.string().min(1).optional(),
-	workflow: z.string().min(1).optional(),
-	/** ISO times: `since` included, `until` not. */
-	since: z.iso.datetime().optional(),
-	until: z.iso.datetime().optional()
-});
 const EventsQuerySchema = z.strictObject({
 	after: Seq.optional(),
 	node: z.string().min(1).optional(),
@@ -342,12 +403,6 @@ const EventsQuerySchema = z.strictObject({
 	/** Only the newest this many, still oldest first. */
 	last: Count.optional()
 });
-const DecisionsQuerySchema = z.strictObject({
-	run: z.string().min(1).optional(),
-	project: z.string().min(1).optional(),
-	/** Only runs of this workflow, by name; ANDed with `run` or `project`. */
-	workflow: z.string().min(1).optional()
-});
 /** An answer: the option, and what the person said with it, if anything. */
 const AnswerSchema = z.strictObject({
 	choose: z.string().min(1),
@@ -385,6 +440,7 @@ const API = {
 	...CONTEXT_API,
 	...AFTER_API,
 	...WORKTREES_API,
+	...LISTS_API,
 	...UPDATE_API,
 	projects: {
 		method: "GET",
@@ -1575,6 +1631,76 @@ const treeWithEnds = (roots, stored) => {
 	};
 	return roots.map((node) => dress(node));
 };
+// ../server/src/list-fields-routes.ts
+/**
+* @file `GET /api/list-fields`: the filter fields of each list, from core's
+*   tables (RFC-017), as text without their functions, so the UI builds its
+*   filter bar without importing core.
+*/
+const infoOf = (field) => ({
+	name: field.name,
+	description: field.description,
+	type: field.type,
+	...field.values === void 0 ? {} : { values: [...field.values] },
+	...field.all === true ? { all: true } : {}
+});
+/** The answer, built once: the tables do not change while the server runs. */
+const listFields = () => ({
+	runs: LIST_TABLES.ps.fields.map(infoOf),
+	feedback: LIST_TABLES["feedback list"].fields.map(infoOf),
+	"follow-ups": LIST_TABLES["follow-ups list"].fields.map(infoOf),
+	decisions: LIST_TABLES["decide --list"].fields.map(infoOf),
+	worktrees: LIST_TABLES["worktrees list"].fields.map(infoOf),
+	usage: LIST_TABLES.usage.fields.map(infoOf)
+});
+const listFieldsRoutes = () => ({ listFields: () => ok(listFields()) });
+// ../server/src/list-query.ts
+/**
+* @file Reads a list route's filter fields the way the CLI reads its flags
+*   (RFC-017, ADR-088): each value checked by core's `parseFilters` against the
+*   list's table, a refused one answered as 400 in the CLI's words. A full ISO
+*   time in `since` or `until` is taken as given (the form `usage` had before
+*   the tables), the rest are an age, a day or `all`.
+*/
+/** A `2026-11-01T10:00:00Z`-style time, as an ISO time; else `undefined`. */
+const isoTime = (value) => {
+	if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T/u.test(value)) return;
+	const time = Date.parse(value);
+	return Number.isNaN(time) ? void 0 : new Date(time).toISOString();
+};
+/**
+* The filter `query` asks for, checked against `table`; a value the table
+* refuses is a 400.
+*/
+const filterOf = (table, query) => {
+	const times = {};
+	const rest = { ...query };
+	for (const name of ["since", "until"]) {
+		const iso = isoTime(query[name]);
+		if (iso === void 0) continue;
+		times[name] = iso;
+		delete rest[name];
+	}
+	const parsed = parseFilters(table, rest, Date.now());
+	return parsed.ok ? {
+		ok: true,
+		filter: {
+			...parsed.filter,
+			...times
+		}
+	} : {
+		ok: false,
+		refusal: fail(400, parsed.error)
+	};
+};
+/**
+* The root a filter's `project` names (a registered project's id or root, else
+* the value as a root); `undefined` without one or for `all`.
+*/
+const projectRootOf = (context, filter) => {
+	const key = filter["project"];
+	return key === void 0 || key === "all" ? void 0 : projectOf(context, key)?.root ?? key;
+};
 // ../server/src/workflows.ts
 /**
 * @file A project's workflows, for the UI's Run workflow dialog: each
@@ -1633,14 +1759,18 @@ const projectWorkflows = (project) => {
 *   decisions, and usage. Each reads the store as the matching CLI command does
 *   (`ork projects`, `ps`, `tree`, `logs`, `decide --list`, `usage`).
 */
-/** A project filter's root: a registered project's, or the value as a root. */
 /** A registered project's place; caps are only known for one. */
 const placeOf = (context, key) => {
 	const known = key === void 0 ? void 0 : projectOf(context, key);
 	return known === void 0 ? void 0 : placeFor(known.root, context.store.projects());
 };
-const projectRoot = (context, key) => projectOf(context, key)?.root ?? key;
+/** `ork ps`'s table, matching `--status` on the live status the API shows. */
+const liveRunTable = {
+	...runListTable,
+	fields: runListTable.fields.map((field) => field.name === "status" ? Object.assign({}, field, { get: (run) => run.live }) : field)
+};
 const readRoutes = (context) => ({
+	...listFieldsRoutes(),
 	health: () => ok({
 		version: context.version,
 		pid: context.pid,
@@ -1649,23 +1779,38 @@ const readRoutes = (context) => ({
 	projects: () => ok(context.store.projects()),
 	triggers: () => ok(triggersReport(context.store, context.store.projects(), context.home)),
 	links: ({ query }) => ok(context.store.links(query.run === void 0 ? {} : { run: query.run })),
-	usage: ({ query }) => ok({
-		...usageReport(context.store.usage({
-			...query.project === void 0 ? {} : { project: projectRoot(context, query.project) },
-			...query.workflow === void 0 ? {} : { workflow: query.workflow },
-			...query.since === void 0 ? {} : { since: query.since },
-			...query.until === void 0 ? {} : { until: query.until }
-		})),
-		limits: limitsReport(context.store, capsHere(context.home, placeOf(context, query.project)), /* @__PURE__ */ new Date())
-	}),
+	usage: ({ query }) => {
+		const read = filterOf(usageListTable, query);
+		if (!read.ok) return read.refusal;
+		const { filter } = read;
+		const { workflow, since, until } = filter;
+		const root = projectRootOf(context, filter);
+		return ok({
+			...usageReport(context.store.usage({
+				...root === void 0 ? {} : { project: root },
+				...workflow === void 0 ? {} : { workflow },
+				...since === void 0 || since === "all" ? {} : { since },
+				...until === void 0 ? {} : { until }
+			})),
+			limits: limitsReport(context.store, capsHere(context.home, placeOf(context, root)), /* @__PURE__ */ new Date())
+		});
+	},
 	workflows: ({ params }) => {
 		const project = projectOf(context, params.id);
 		return project === void 0 ? fail(404, `No registered project \`${params.id}\`.`) : ok(projectWorkflows(project));
 	},
-	runs: ({ query }) => ok(context.store.runs({
-		limit: query.limit ?? 20,
-		...query.project === void 0 ? {} : { project: projectRoot(context, query.project) }
-	}).map((run) => viewOf$2(context, run))),
+	runs: ({ query }) => {
+		const read = filterOf(liveRunTable, query);
+		if (!read.ok) return read.refusal;
+		const root = projectRootOf(context, read.filter);
+		const limit = query.limit ?? 20;
+		const narrowed = Object.keys(read.filter).some((name) => name !== "project");
+		const views = context.store.runs({
+			...root === void 0 ? {} : { project: root },
+			...narrowed ? {} : { limit }
+		}).map((run) => viewOf$2(context, run));
+		return ok(applyFilters(liveRunTable, views, read.filter).slice(0, limit));
+	},
 	run: ({ params }) => {
 		const found = runOf(context, params.id);
 		return found.ok ? ok(viewOf$2(context, found.run)) : found.refusal;
@@ -1689,12 +1834,18 @@ const readRoutes = (context) => ({
 		return ok((query.limit === void 0 ? newest : newest.slice(0, query.limit)).map((stored) => servedEvent(stored)));
 	},
 	decisions: ({ query }) => {
-		const workflow = query.workflow === void 0 ? {} : { workflow: query.workflow };
-		if (query.run === void 0) return ok(pendingDecisions(context.store, {
-			...workflow,
-			...query.project === void 0 ? {} : { project: projectRoot(context, query.project) }
-		}));
-		const found = runOf(context, query.run);
+		const read = filterOf(decisionListTable, query);
+		if (!read.ok) return read.refusal;
+		const { run, workflow: named } = read.filter;
+		const workflow = named === void 0 ? {} : { workflow: named };
+		if (run === void 0) {
+			const root = projectRootOf(context, read.filter);
+			return ok(pendingDecisions(context.store, {
+				...workflow,
+				...root === void 0 ? {} : { project: root }
+			}));
+		}
+		const found = runOf(context, run);
 		if (!found.ok) return found.refusal;
 		return ok(pendingDecisions(context.store, {
 			...workflow,
@@ -1739,7 +1890,7 @@ const mcpTools = (context) => {
 			...NO_QUERY,
 			params: { id: args.project }
 		}))),
-		tool("runs", "Runs, newest first, with their live status and cost. 10 unless a limit is given.", RunsQuerySchema.shape, (args) => fromReply(read.runs({
+		tool("runs", "Runs, newest first, with their live status and cost. 10 unless a limit is given. Narrow them with `status` (running, paused, crashed, succeeded, failed, … or all), `workflow`, `project` (or all), `since` (24h, 30d, 2026-11-01, all) and `until` (a day).", RunsQuerySchema.shape, (args) => fromReply(read.runs({
 			...NO_QUERY,
 			query: {
 				limit: 10,
@@ -1775,11 +1926,11 @@ const mcpTools = (context) => {
 				}
 			}));
 		}),
-		tool("usage", "What runs spent, by workflow and model, and how close the limits are. `since` and `until` are ISO times.", UsageQuerySchema.shape, (args) => fromReply(read.usage({
+		tool("usage", "What runs spent, by workflow and model, and how close the limits are. Narrow it with `workflow`, `project` (or all), `since` and `until`: an age (24h, 30d), a day (2026-11-01) or an ISO time; `since` also takes all.", UsageQuerySchema.shape, (args) => fromReply(read.usage({
 			...NO_QUERY,
 			query: args
 		}))),
-		tool("decisions", "The decisions open in live runs, waiting on a person. This server can't answer them.", DecisionsQuerySchema.shape, (args) => fromReply(read.decisions({
+		tool("decisions", "The decisions open in live runs, waiting on a person. This server can't answer them. Narrow them with `workflow`, `run` (an id or a start of one) and `project` (or all).", DecisionsQuerySchema.shape, (args) => fromReply(read.decisions({
 			...NO_QUERY,
 			query: args
 		}), (open) => ({
@@ -2180,7 +2331,10 @@ const feedbackRoutes = (context) => {
 			const noted = recordNote(store, found.run, body);
 			return noted.ok ? ok({ item: noted.item }) : fail(400, noted.error);
 		},
-		feedbackItems: () => ok(store.feedbackItems({ all: true })),
+		feedbackItems: ({ query }) => {
+			const read = filterOf(feedbackListTable, query);
+			return read.ok ? ok(applyFilters(feedbackListTable, store.feedbackItems({ all: true }), read.filter)) : read.refusal;
+		},
 		feedbackItem: ({ params }) => {
 			const found = itemOf(store, params.id);
 			if (!found.ok) return found.refusal;
@@ -2349,13 +2503,15 @@ const followUpRoutes = (context) => {
 				gh
 			}).then((checked) => checked.errors).catch((error) => [error instanceof Error ? error.message : String(error)]);
 			const all = store.followUps(root);
-			const status = query.status ?? "open";
-			const shown = all.filter((f) => {
-				if (query.for !== void 0 && f.for !== query.for) return false;
-				if (status === "all") return true;
-				if (status === "open") return OPEN.some((s) => s === f.status);
-				return f.status === status;
+			const open = (query.status ?? "open") === "open";
+			const read = filterOf(followUpListTable, {
+				...query,
+				...open ? { status: "all" } : {}
 			});
+			if (!read.ok) return read.refusal;
+			const other = projectRootOf(context, read.filter);
+			const matched = other === void 0 || other === root ? applyFilters(followUpListTable, all, read.filter) : [];
+			const shown = open ? matched.filter((f) => OPEN.some((s) => s === f.status)) : matched;
 			return ok({
 				project: root,
 				followUps: shown,
@@ -2905,9 +3061,15 @@ const worktreesRoutes = (context) => {
 	};
 	return {
 		worktrees: async ({ query }) => {
-			const all = await readAll(query.project);
+			const filtered = filterOf(worktreeListTable, query);
+			if (!filtered.ok) return filtered.refusal;
+			const all = await readAll(projectRootOf(context, filtered.filter));
 			if (!all.ok) return all.refusal;
-			return ok({ projects: all.reads.map((read) => listed(context, read)) });
+			return ok({ projects: all.reads.map((read) => {
+				const project = listed(context, read);
+				project.items = applyFilters(worktreeListTable, project.items, filtered.filter);
+				return project;
+			}) });
 		},
 		worktreeRemovePlan: async ({ body }) => {
 			const planned = await removePlanOf(context, body);

package/dist/{src-DN-RPsil.mjs → src-Frwpx3WF.mjs}

@@ -1,7 +1,7 @@
 import path from "node:path";
 import { LineCounter, YAMLMap, YAMLSeq, isAlias, isCollection, isMap, isNode, isPair, isScalar, isSeq, parseDocument, stringify, visit } from "yaml";
 import { z } from "zod";
-import { appendFileSync, closeSync, cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import { appendFileSync, chmodSync, closeSync, cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { constants as constants$1, homedir, setPriority, tmpdir } from "node:os";
 import { createConnection, createServer } from "node:net";
@@ -3990,7 +3990,10 @@ const messageOf$3 = (line) => {
 };
 /** Listens on the run's socket; resolves once it is listening. */
 const serveRun = async (options) => {
-	mkdirSync(path.dirname(options.path), { recursive: true });
+	mkdirSync(path.dirname(options.path), {
+		recursive: true,
+		mode: 448
+	});
 	rmSync(options.path, { force: true });
 	const followers = /* @__PURE__ */ new Set();
 	const server = createServer((socket) => {
@@ -6308,18 +6311,27 @@ const sameFiles = (a, b) => a.length === b.length && a.toSorted().join("\n") ===
 * title.
 */
 const sameFollowUp = (kept, input) => (kept.status === "waiting" || kept.status === "due") && kept.for === input.for && sameFiles(kept.where, input.where) && nearTitle(kept.title, input.title);
+/** Who a follow-up is for, its name scrubbed and its kind kept. */
+const scrubFor = (to, scrub) => {
+	if (to.startsWith("project:")) return `project:${scrub(to.slice(8))}`;
+	if (to.startsWith("person:")) return `person:${scrub(to.slice(7))}`;
+	return to;
+};
 /** `input` with what shouldn't be kept or leave the machine taken out. */
 const scrubFollowUp = (input, options) => {
 	const scrub = (text) => redact(text, options);
 	return {
 		...input,
+		for: scrubFor(input.for, scrub),
 		title: scrub(input.title),
+		...input.ref === void 0 ? {} : { ref: scrub(input.ref) },
 		...input.body === void 0 ? {} : { body: scrub(input.body) },
 		...input.where === void 0 ? {} : { where: input.where.map(scrub) },
 		...input.draft === void 0 ? {} : { draft: {
 			...input.draft,
 			to: scrub(input.draft.to),
-			text: scrub(input.draft.text)
+			text: scrub(input.draft.text),
+			...input.draft.channel === void 0 ? {} : { channel: scrub(input.draft.channel) }
 		} },
 		...input.steps === void 0 ? {} : { steps: input.steps.map((step) => ({
 			text: scrub(step.text),
@@ -9285,6 +9297,15 @@ const usageListTable = { fields: [
 		type: "until"
 	}
 ] };
+/** Every core list's table, by the command that lists it. */
+const LIST_TABLES = {
+	ps: runListTable,
+	"feedback list": feedbackListTable,
+	"follow-ups list": followUpListTable,
+	"decide --list": decisionListTable,
+	"worktrees list": worktreeListTable,
+	usage: usageListTable
+};
 // ../core/src/machine/priority.ts
 /**
 * @file Starting a child at the project's priority (`priority:`): `low`, the
@@ -13605,6 +13626,13 @@ const STANDARD = /* @__PURE__ */ new Set([
 	"artifacts",
 	"branch"
 ]);
+/**
+* A name git takes as a branch (`git check-ref-format --branch`'s rules), and
+* nothing a command would read as an option or a refspec: no leading `-`, no
+* `:` or `+`, no space or control character. A reported branch reaches tool
+* arguments, so one that isn't a plain branch name is dropped.
+*/
+const isBranchName = (name) => name !== "" && name !== "@" && !name.startsWith("-") && !name.startsWith("/") && !name.endsWith("/") && !name.endsWith(".") && !name.endsWith(".lock") && !name.includes("..") && !name.includes("//") && !name.includes("@{") && !name.includes("/.") && !name.startsWith(".") && !/[\u0000-\u0020\u007F~^:?*[\\+]/u.test(name);
 /** Reads a driver's structured output as a report, or `null` if it is not one. */
 const parseReport = (value) => {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
@@ -13621,7 +13649,7 @@ const parseReport = (value) => {
 		artifacts: paths,
 		fields: Object.fromEntries(Object.entries(record).filter(([key]) => !STANDARD.has(key)))
 	};
-	if (typeof branch === "string" && branch !== "") report.branch = branch;
+	if (typeof branch === "string" && isBranchName(branch)) report.branch = branch;
 	return report;
 };
 // ../core/src/run/brief.ts
@@ -17201,10 +17229,25 @@ const openReadOnly = (file) => {
 		throw error;
 	}
 };
+/**
+* Keeps Ork's folder for the person alone: `~/.ork` holds every run's prompts
+* and output, its sockets and its locks, so it is made 0700, and one an older
+* Ork made with the umask's mode is narrowed. A store elsewhere (a test's) only
+* gets its folder made.
+*/
+const keepPrivate = (dir) => {
+	mkdirSync(dir, {
+		recursive: true,
+		mode: 448
+	});
+	if (path.basename(dir) !== ".ork") return;
+	if ((statSync(dir).mode & 63) !== 0) chmodSync(dir, 448);
+};
 /** A database opened for writing: created, in WAL mode, migrated. */
 const openWritable = (file) => {
-	if (file !== ":memory:") mkdirSync(path.dirname(file), { recursive: true });
+	if (file !== ":memory:") keepPrivate(path.dirname(file));
 	const db = new DatabaseSync(file);
+	if (file !== ":memory:") chmodSync(file, 384);
 	db.exec("PRAGMA busy_timeout = 5000");
 	db.exec("PRAGMA journal_mode = WAL");
 	db.exec("PRAGMA synchronous = NORMAL");
@@ -19010,4 +19053,4 @@ const createWorkspace = (options) => {
 		close
 	};
 };
-export { sendFromScript as $, DISCUSSIONS as $n, programsRunBy as $r, gitOk as $t, declaredTriggers as A, lockWaitsOf as An, hasInRepoFiles as Ar, endedWith as At, planPrune as B, PROJECT_FILE as Bn, projectRootOf as Br, feedbackListTable as Bt, compareVersions as C, ORK_LAYOUT as Ci, linkNodes as Cn, toolLinks as Cr, startRun as Ct, triggersReport as D, EXPERIMENTS as Di, requestStop as Dn, AGENT_SOURCES as Dr, runScope as Dt, lateTriggers as E, firstLine as Ei, requestPause as En, deleteAgent as Er, heldTimeout as Et, activeTree as F, processAlive as Fn, projectsHome as Fr, slotWaitLine as Ft, parseInputPairs as G, endOf as Gn, writePlainFile as Gr, applyClean as Gt, listOrkWorktrees as H, loadProject as Hn, estimateTokens as Hr, runListTable as Ht, isNodeEvent as I, stillTheSameProcess as In, runDirOf as Ir, lowerChild as It, driverRefusals as J, END_KINDS as Jn, applyEdits as Jr, planClean as Jt, resolveInputs as K, outcomeEnd as Kn, skillsIn as Kr, cleanStep as Kt, openStore as L, isItem as Ln, shownPath as Lr, programFound as Lt, workflowTextHash as M, runStatus as Mn, newProjectId as Mr, stoppedEnd as Mt, takeWatchLock as N, slotWaitsOf as Nn, placeFiles as Nr, declaredProblem as Nt, createWatcher as O, experimentsOn as Oi, tellLiveRun as On, catalogAgent as Or, calledWorkflows as Ot, watchingPid as P, templateOf$1 as Pn, placeFor as Pr, slotClock as Pt, scriptRefusal as Q, FEEDBACK_TARGETS as Qn, beforeOf as Qr, git as Qt, storePath as R, nestItems as Rn, workflowDirOf as Rr, startAt as Rt, detectInstaller as S, AGENT_TOOL_LAYOUTS as Si, endLinksOf as Sn, linkTools as Sr, walkSummary as St, parseVersion as T, DRIVER_IDS as Ti, requestContinue as Tn, createAgent as Tr, userMessageText as Tt, createReplay as U, machineRulesOf as Un, guardedBase as Ur, usageListTable as Ut, createdWorktrees as V, gitRulesOf as Vn, LESSON_CAP_TOKENS as Vr, followUpListTable as Vt, replayLoopAnswers as W, createSignals as Wn, plainPathInside as Wr, worktreeListTable as Wt, driverQueues as X, FEEDBACK_KINDS as Xn, readDocument as Xr, stepPrunes as Xt, sessionRefusals as Y, endFor as Yn, newWorkflowText as Yr, stepActs as Yt, TOO_LONG as Z, FEEDBACK_SEVERITIES as Zn, renameNodeTypes as Zr, inspectProject as Zt, capsHere as _, TOOL_PREFIX as _i, deliverFollowUp as _n, maskReplacer as _r, planNodeSession as _t, planRemove as a, WorkflowSchema as ai, nodeSays as an, createFeedback as ar, adoptedCalls as at, runningRunIds as b, driverChecks as bi, DEFAULT_FOLLOW_UPS_RULE as bn, applySteps as br, checkWorkflowText as bt, repoRoot as c, settingsOf as ci, mcpNotText as cn, targetOf as cr, DETACHED_ENV as ct, planLine as d, isToolNode as di, createFollowUps as dn, renderTemplate as dr, NOT_STARTED as dt, renderJsonSchema as ei, clearGitLocalEnv as en, planPost as er, createRelay as et, removeRefusal as f, DriverSchema as fi, checkFollowUpsDue as fn, readCondition as fr, limitsNow as ft, usageReport as g, INTEGRATIONS as gi, takeFollowUps as gn, MASK as gr, explainSession as gt, USAGE_DIMENSIONS as h, timeoutMs as hi, startFollowUpChecks as hn, socketRoom as hr, explainWorkflowText as ht, lostWork as i, EdgeInputSchema as ii, sessionDriver as in, redact as ir, createCalls as it, readProjectTriggers as j, pausedOf as jn, inRepoPlace as jr, failedWith as jt, triggerStanding as k, knownExperiments as ki, liveStatus as kn, loadAgents as kr, lockWaitLine as kt, labelOf as l, NodeSchema as li, serversIn as ln, evaluate as lr, detachRun as lt, resolveBase as m, retiredDriverHint as mi, recordPublished as mn, socketPath as mr, planReason as mt, resumedOptions as n, serializeWorkflow as ni, modelDriver as nn, sendPost as nr, answerDecision as nt, projectHead as o, CheckReportSchema as oi, declaredOutputOf as on, fingerprint as or, detachResume as ot, stateParts as p, NodeIdSchema as pi, markDue as pn, serveRun as pr, limitsReport as pt, budgetWarnings as q, END_DETAIL_LIMIT as qn, WorkflowEditSchema as qr, keyOf as qt, applyRemove as r, markValue as ri, namingNoDriver as rn, publishPost as rr, pendingDecisions as rt, readWorktrees as s, expandEdge as si, MCP_FILE as sn, normalizeTitle as sr, resumable as st, createWorkspace as t, parseWorkflow as ti, envReadsOf as tn, runGh as tr, followRunTree as tt, mergeStateOf as u, isClaudeNode as ui, FOLLOW_UP_KINDS as un, parseTemplate as ur, followEvents as ut, planUpgrade as v, integrationFor as vi, followUpProblem as vn, maskSecrets as vr, parseReport as vt, isNewer as w, AGENT_DRIVERS as wi, unlinkNodes as wn, toolsInUse as wr, MESSAGE_LIMIT as wt, runningScript as x, readyDriver as xi, addressOf as xn, planMoveInto as xr, walkChecks as xt, releaseNotes as y, PREFERRED_DRIVER as yi, liveSessionOf as yn, planAgentMigration as yr, reportSchemaFor as yt, applyPrune as z, countedTokens as zn, inside as zr, decisionListTable as zt };
+export { sendFromScript as $, FEEDBACK_TARGETS as $n, beforeOf as $r, git as $t, declaredTriggers as A, knownExperiments as Ai, liveStatus as An, loadAgents as Ar, endedWith as At, planPrune as B, countedTokens as Bn, inside as Br, decisionListTable as Bt, compareVersions as C, AGENT_TOOL_LAYOUTS as Ci, endLinksOf as Cn, linkTools as Cr, startRun as Ct, triggersReport as D, firstLine as Di, requestPause as Dn, deleteAgent as Dr, runScope as Dt, lateTriggers as E, DRIVER_IDS as Ei, requestContinue as En, createAgent as Er, heldTimeout as Et, activeTree as F, templateOf$1 as Fn, placeFor as Fr, slotWaitLine as Ft, parseInputPairs as G, createSignals as Gn, plainPathInside as Gr, worktreeListTable as Gt, listOrkWorktrees as H, gitRulesOf as Hn, LESSON_CAP_TOKENS as Hr, followUpListTable as Ht, isNodeEvent as I, processAlive as In, projectsHome as Ir, lowerChild as It, driverRefusals as J, END_DETAIL_LIMIT as Jn, WorkflowEditSchema as Jr, keyOf as Jt, resolveInputs as K, endOf as Kn, writePlainFile as Kr, applyClean as Kt, openStore as L, stillTheSameProcess as Ln, runDirOf as Lr, programFound as Lt, workflowTextHash as M, pausedOf as Mn, inRepoPlace as Mr, stoppedEnd as Mt, takeWatchLock as N, runStatus as Nn, newProjectId as Nr, declaredProblem as Nt, createWatcher as O, EXPERIMENTS as Oi, requestStop as On, AGENT_SOURCES as Or, calledWorkflows as Ot, watchingPid as P, slotWaitsOf as Pn, placeFiles as Pr, slotClock as Pt, scriptRefusal as Q, FEEDBACK_SEVERITIES as Qn, renameNodeTypes as Qr, inspectProject as Qt, storePath as R, isItem as Rn, shownPath as Rr, startAt as Rt, detectInstaller as S, readyDriver as Si, addressOf as Sn, planMoveInto as Sr, walkSummary as St, parseVersion as T, AGENT_DRIVERS as Ti, unlinkNodes as Tn, toolsInUse as Tr, userMessageText as Tt, createReplay as U, loadProject as Un, estimateTokens as Ur, runListTable as Ut, createdWorktrees as V, PROJECT_FILE as Vn, projectRootOf as Vr, feedbackListTable as Vt, replayLoopAnswers as W, machineRulesOf as Wn, guardedBase as Wr, usageListTable as Wt, driverQueues as X, endFor as Xn, newWorkflowText as Xr, stepActs as Xt, sessionRefusals as Y, END_KINDS as Yn, applyEdits as Yr, planClean as Yt, TOO_LONG as Z, FEEDBACK_KINDS as Zn, readDocument as Zr, stepPrunes as Zt, capsHere as _, INTEGRATIONS as _i, takeFollowUps as _n, MASK as _r, planNodeSession as _t, planRemove as a, EdgeInputSchema as ai, sessionDriver as an, redact as ar, adoptedCalls as at, runningRunIds as b, PREFERRED_DRIVER as bi, liveSessionOf as bn, planAgentMigration as br, checkWorkflowText as bt, repoRoot as c, expandEdge as ci, MCP_FILE as cn, normalizeTitle as cr, DETACHED_ENV as ct, planLine as d, isClaudeNode as di, FOLLOW_UP_KINDS as dn, parseTemplate as dr, NOT_STARTED as dt, programsRunBy as ei, gitOk as en, DISCUSSIONS as er, createRelay as et, removeRefusal as f, isToolNode as fi, createFollowUps as fn, renderTemplate as fr, limitsNow as ft, usageReport as g, timeoutMs as gi, startFollowUpChecks as gn, socketRoom as gr, explainSession as gt, USAGE_DIMENSIONS as h, retiredDriverHint as hi, recordPublished as hn, socketPath as hr, explainWorkflowText as ht, lostWork as i, markValue as ii, namingNoDriver as in, publishPost as ir, createCalls as it, readProjectTriggers as j, lockWaitsOf as jn, hasInRepoFiles as jr, failedWith as jt, triggerStanding as k, experimentsOn as ki, tellLiveRun as kn, catalogAgent as kr, lockWaitLine as kt, labelOf as l, settingsOf as li, mcpNotText as ln, targetOf as lr, detachRun as lt, resolveBase as m, NodeIdSchema as mi, markDue as mn, serveRun as mr, planReason as mt, resumedOptions as n, parseWorkflow as ni, envReadsOf as nn, runGh as nr, answerDecision as nt, projectHead as o, WorkflowSchema as oi, nodeSays as on, createFeedback as or, detachResume as ot, stateParts as p, DriverSchema as pi, checkFollowUpsDue as pn, readCondition as pr, limitsReport as pt, budgetWarnings as q, outcomeEnd as qn, skillsIn as qr, cleanStep as qt, applyRemove as r, serializeWorkflow as ri, modelDriver as rn, sendPost as rr, pendingDecisions as rt, readWorktrees as s, CheckReportSchema as si, declaredOutputOf as sn, fingerprint as sr, resumable as st, createWorkspace as t, renderJsonSchema as ti, clearGitLocalEnv as tn, planPost as tr, followRunTree as tt, mergeStateOf as u, NodeSchema as ui, serversIn as un, evaluate as ur, followEvents as ut, planUpgrade as v, TOOL_PREFIX as vi, deliverFollowUp as vn, maskReplacer as vr, parseReport as vt, isNewer as w, ORK_LAYOUT as wi, linkNodes as wn, toolLinks as wr, MESSAGE_LIMIT as wt, runningScript as x, driverChecks as xi, DEFAULT_FOLLOW_UPS_RULE as xn, applySteps as xr, walkChecks as xt, releaseNotes as y, integrationFor as yi, followUpProblem as yn, maskSecrets as yr, reportSchemaFor as yt, applyPrune as z, nestItems as zn, workflowDirOf as zr, LIST_TABLES as zt };