@krapht/ork 1.0.0-alpha.4 → 1.0.0-alpha.6

package/dist/{src-BRB5EQyC.mjs → src-DG4dyBqm.mjs}

@@ -661,6 +661,7 @@ const HumanGateNodeSchema = z.strictObject({
 	...base,
 	...notifyFields,
 	question: z.string(),
+	document: z.string().optional(),
 	options: z.array(DecisionOptionSchema).min(2),
 	recommended: z.string().optional(),
 	timeout: DurationSchema.optional(),
@@ -3601,6 +3602,26 @@ const writePlugin = (stack, dir, description) => {
 	}
 	return dir;
 };
+// ../core/src/store/mask.ts
+/**
+* @file Masks secrets before anything is stored: tokens and keys in common
+*   formats, anywhere in an event's strings. The store and feedback records use
+*   the same patterns; the terminal is not masked (it is the user's own).
+*/
+const PATTERNS = [
+	/sk-ant-[\w-]{20,}/gu,
+	/\bgh[opsur]_[A-Za-z0-9]{20,}/gu,
+	/\bgithub_pat_\w{20,}/gu,
+	/\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/gu,
+	/\bxox[abprs]-[\w-]{10,}/gu,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/gu,
+	/(?<=\bbearer\s+)[\w.~+/-]{20,}=*/giu,
+	/(?<=aws_secret_access_key\s*[=:]\s*)\S+/giu
+];
+const MASK = "[masked]";
+const maskSecrets = (text) => PATTERNS.reduce((out, pattern) => out.replaceAll(pattern, MASK), text);
+/** A `JSON.stringify` replacer that masks every string. */
+const maskReplacer = (_key, value) => typeof value === "string" ? maskSecrets(value) : value;
 // ../core/src/control/socket.ts
 /**
 * @file The per-run local socket (`~/.ork/sockets/<run>.sock`): the fast path
@@ -4223,27 +4244,39 @@ const stringify$1 = (value) => {
 	if (typeof value === "number" || typeof value === "boolean") return String(value);
 	return JSON.stringify(value);
 };
-const renderTemplate = (parts, scope) => parts.map((part) => typeof part === "string" ? part : stringify$1(evaluate(part.expr, scope))).join("");
-// ../core/src/store/mask.ts
+const isContainer = (value) => value !== null && typeof value === "object";
+const depthOf = (value) => isContainer(value) ? 1 + Math.max(0, ...Object.values(value).map((item) => depthOf(item))) : 0;
+/** Keeps a multi-line value inside its list item or `key:` line. */
+const hang = (text) => text.replaceAll("\n", "\n  ");
+/** A value at most two levels deep as Markdown list items and `key: value`. */
+const listed$2 = (value) => {
+	if (!isContainer(value)) return stringify$1(value);
+	if (Array.isArray(value)) return value.map((item) => `- ${hang(listed$2(item))}`).join("\n");
+	return Object.entries(value).map(([key, item]) => isContainer(item) ? `${key}:\n  ${hang(listed$2(item))}` : `${key}: ${hang(stringify$1(item))}`).join("\n");
+};
 /**
-* @file Masks secrets before anything is stored: tokens and keys in common
-*   formats, anywhere in an event's strings. The store and feedback records use
-*   the same patterns; the terminal is not masked (it is the user's own).
+* A value as a person reads it: Markdown, never a line of raw JSON. `before` is
+* the text so far: a list or object starts on its own line, after a blank one
+* when text shares its line.
 */
-const PATTERNS = [
-	/sk-ant-[\w-]{20,}/gu,
-	/\bgh[opsur]_[A-Za-z0-9]{20,}/gu,
-	/\bgithub_pat_\w{20,}/gu,
-	/\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/gu,
-	/\bxox[abprs]-[\w-]{10,}/gu,
-	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/gu,
-	/(?<=\bbearer\s+)[\w.~+/-]{20,}=*/giu,
-	/(?<=aws_secret_access_key\s*[=:]\s*)\S+/giu
-];
-const MASK = "[masked]";
-const maskSecrets = (text) => PATTERNS.reduce((out, pattern) => out.replaceAll(pattern, MASK), text);
-/** A `JSON.stringify` replacer that masks every string. */
-const maskReplacer = (_key, value) => typeof value === "string" ? maskSecrets(value) : value;
+const readableText = (value, before) => {
+	if (!isContainer(value)) return stringify$1(value);
+	if (depthOf(value) <= 2) {
+		const list = listed$2(value);
+		return list === "" || before === "" || before.endsWith("\n") ? list : `\n\n${list}`;
+	}
+	const code = JSON.stringify(value, void 0, 2).replaceAll(/^/gmu, "    ");
+	return before === "" || before.endsWith("\n\n") ? code : `\n\n${code}`;
+};
+/**
+* Fills a parsed template. `readable` is for text a person reads (a gate's
+* `question` and `document`); scripts and prompts keep JSON (ADR-047).
+*/
+const renderTemplate = (parts, scope, { readable = false } = {}) => parts.reduce((text, part) => {
+	if (typeof part === "string") return text + part;
+	const value = evaluate(part.expr, scope);
+	return text + (readable ? readableText(value, text) : stringify$1(value));
+}, "");
 // ../core/src/feedback/fingerprint.ts
 /**
 * @file Feedback fingerprints: records about the same thing (same target, kind,
@@ -5893,6 +5926,7 @@ const TEMPLATE_FIELDS = [
 	"command",
 	"cwd",
 	"question",
+	"document",
 	"workflow",
 	"project",
 	"ref"
@@ -6491,6 +6525,8 @@ const createOwnership = (hooks) => {
 		if (accepted.length > 0) {
 			const problem = await hooks.checkpoint();
 			if (problem !== null) notes.push(`Your uncommitted work could not be committed (${problem}); the children started from your branch's last commit.`);
+			const released = hooks.releaseClaims().map((r) => `\`${r}\``);
+			if (released.length > 0) notes.push(`Your claims on ${released.join(", ")} were released while your children worked; claim again before you edit.`);
 		}
 		hooks.lend();
 		try {
@@ -6642,6 +6678,11 @@ const nodeContext = (deps, activation, cwd, round) => {
 		runChild: deps.runChild,
 		isRunning: (other) => deps.running.has(other),
 		checkpoint: () => options.workspace?.checkpoint(id) ?? Promise.resolve(null),
+		releaseClaims: () => {
+			const held = context.claims?.held() ?? [];
+			for (const resource of held) context.claims?.release(resource);
+			return held;
+		},
 		lend: deps.slots.release,
 		reclaim: deps.slots.take
 	});
@@ -13140,4 +13181,4 @@ const createWorkspace = (options) => {
 		close
 	};
 };
-export { text as $, isToolNode as $n, maskReplacer as $t, gitOk as A, projectRootOf as An, runScope as At, linkNodes as B, readDocument as Bn, serversIn as Bt, workflowTextHash as C, placeFiles as Cn, walkChecks as Ct, inspectProject as D, shownPath as Dn, userMessageText as Dt, BRANCH_PREFIX as E, runDirOf as En, MESSAGE_LIMIT as Et, declaredProblem as F, writePlainFile as Fn, PROJECT_FILE as Ft, requestContinue as G, EdgeInputSchema as Gn, planPost as Gt, tellNode as H, parseWorkflow as Hn, FEEDBACK_SEVERITIES as Ht, createCalls as I, skillsIn as In, gitRulesOf as It, tellLiveRun as J, expandEdge as Jn, publishPost as Jt, requestPause as K, WorkflowSchema as Kn, runGh as Kt, addressOf as L, WorkflowEditSchema as Ln, loadProject as Lt, clearGitLocalEnv as M, estimateTokens as Mn, envReadsOf as Mt, parseInputPairs as N, guardedBase as Nn, nodeSays as Nt, removeWorktree as O, workflowDirOf as On, heldTimeout as Ot, resolveInputs as P, plainPathInside as Pn, declaredOutputOf as Pt, inTransaction as Q, isClaudeNode as Qn, targetOf as Qt, endLink as R, applyEdits as Rn, MCP_FILE as Rt, readProjectTriggers as S, newProjectId as Sn, checkWorkflowText as St, watchingPid as T, projectsHome as Tn, startRun as Tt, unlinkNodes as U, serializeWorkflow as Un, FEEDBACK_TARGETS as Ut, peerOf as V, renderJsonSchema as Vn, FEEDBACK_KINDS as Vt, flattenTree as W, markValue as Wn, DISCUSSIONS as Wt, usageQueries as X, NodeSchema as Xn, fingerprint as Xt, backfillUsage as Y, settingsOf as Yn, createFeedback as Yt, eventOf as Z, beforeOf as Zn, normalizeTitle as Zt, lateTriggers as _, catalogAgent as _n, runStatus as _t, limitsNow as a, serveRun as an, integrationFor as ar, DETACHED_ENV as at, triggerStanding as b, hasInRepoFiles as bn, processAlive as bt, usd as c, wakeRun as cn, CLAUDE_DRIVERS as cr, explainWorkflowText as ct, runningRunIds as d, planMoveInto as dn, experimentsOn as dr, namingNoDriver as dt, maskSecrets as en, programsRunBy as er, adoptedCalls as et, runningScript as f, linkTools as fn, knownExperiments as fr, sessionDriver as ft, parseVersion as g, deleteAgent as gn, pausedOf as gt, isNewer as h, createAgent as hn, liveStatus as ht, NOT_STARTED as i, readCondition as in, TOOL_PREFIX as ir, replayLoopAnswers as it, lines as j, LESSON_CAP_TOKENS as jn, calledWorkflows as jt, git as k, inside as kn, scriptContactsOf as kt, planUpgrade as l, planAgentMigration as ln, firstLine as lr, explainSession as lt, compareVersions as m, toolsInUse as mn, reportSchemaFor as mt, resolveBase as n, parseTemplate as nn, timeoutMs as nr, resumable as nt, limitsReport as o, socketPath as on, AGENT_TOOL_LAYOUTS as or, detachRun as ot, detectInstaller as p, toolLinks as pn, parseReport as pt, requestStop as q, CheckReportSchema as qn, sendPost as qt, capsHere as r, renderTemplate as rn, INTEGRATIONS as rr, createReplay as rt, planReason as s, socketRoom as sn, ORK_LAYOUT as sr, followEvents as st, createWorkspace as t, evaluate as tn, NodeIdSchema as tr, detachResume as tt, releaseNotes as u, applySteps as un, EXPERIMENTS as ur, planNodeSession as ut, triggersReport as v, loadAgents as vn, runTree as vt, takeWatchLock as w, placeFor as wn, walkSummary as wt, declaredTriggers as x, inRepoPlace as xn, stillTheSameProcess as xt, createWatcher as y, PROJECT_MODES as yn, ownProcessStart as yt, endLinksOf as z, newWorkflowText as zn, mcpNotText as zt };
+export { text as $, isToolNode as $n, evaluate as $t, gitOk as A, projectRootOf as An, runScope as At, linkNodes as B, readDocument as Bn, serversIn as Bt, workflowTextHash as C, placeFiles as Cn, walkChecks as Ct, inspectProject as D, shownPath as Dn, userMessageText as Dt, BRANCH_PREFIX as E, runDirOf as En, MESSAGE_LIMIT as Et, declaredProblem as F, writePlainFile as Fn, PROJECT_FILE as Ft, requestContinue as G, EdgeInputSchema as Gn, planPost as Gt, tellNode as H, parseWorkflow as Hn, FEEDBACK_SEVERITIES as Ht, createCalls as I, skillsIn as In, gitRulesOf as It, tellLiveRun as J, expandEdge as Jn, publishPost as Jt, requestPause as K, WorkflowSchema as Kn, runGh as Kt, addressOf as L, WorkflowEditSchema as Ln, loadProject as Lt, clearGitLocalEnv as M, estimateTokens as Mn, envReadsOf as Mt, parseInputPairs as N, guardedBase as Nn, nodeSays as Nt, removeWorktree as O, workflowDirOf as On, heldTimeout as Ot, resolveInputs as P, plainPathInside as Pn, declaredOutputOf as Pt, inTransaction as Q, isClaudeNode as Qn, targetOf as Qt, endLink as R, applyEdits as Rn, MCP_FILE as Rt, readProjectTriggers as S, newProjectId as Sn, checkWorkflowText as St, watchingPid as T, projectsHome as Tn, startRun as Tt, unlinkNodes as U, serializeWorkflow as Un, FEEDBACK_TARGETS as Ut, peerOf as V, renderJsonSchema as Vn, FEEDBACK_KINDS as Vt, flattenTree as W, markValue as Wn, DISCUSSIONS as Wt, usageQueries as X, NodeSchema as Xn, fingerprint as Xt, backfillUsage as Y, settingsOf as Yn, createFeedback as Yt, eventOf as Z, beforeOf as Zn, normalizeTitle as Zt, lateTriggers as _, catalogAgent as _n, runStatus as _t, limitsNow as a, socketRoom as an, integrationFor as ar, DETACHED_ENV as at, triggerStanding as b, hasInRepoFiles as bn, processAlive as bt, usd as c, maskSecrets as cn, CLAUDE_DRIVERS as cr, explainWorkflowText as ct, runningRunIds as d, planMoveInto as dn, experimentsOn as dr, namingNoDriver as dt, parseTemplate as en, programsRunBy as er, adoptedCalls as et, runningScript as f, linkTools as fn, knownExperiments as fr, sessionDriver as ft, parseVersion as g, deleteAgent as gn, pausedOf as gt, isNewer as h, createAgent as hn, liveStatus as ht, NOT_STARTED as i, socketPath as in, TOOL_PREFIX as ir, replayLoopAnswers as it, lines as j, LESSON_CAP_TOKENS as jn, calledWorkflows as jt, git as k, inside as kn, scriptContactsOf as kt, planUpgrade as l, planAgentMigration as ln, firstLine as lr, explainSession as lt, compareVersions as m, toolsInUse as mn, reportSchemaFor as mt, resolveBase as n, readCondition as nn, timeoutMs as nr, resumable as nt, limitsReport as o, wakeRun as on, AGENT_TOOL_LAYOUTS as or, detachRun as ot, detectInstaller as p, toolLinks as pn, parseReport as pt, requestStop as q, CheckReportSchema as qn, sendPost as qt, capsHere as r, serveRun as rn, INTEGRATIONS as rr, createReplay as rt, planReason as s, maskReplacer as sn, ORK_LAYOUT as sr, followEvents as st, createWorkspace as t, renderTemplate as tn, NodeIdSchema as tr, detachResume as tt, releaseNotes as u, applySteps as un, EXPERIMENTS as ur, planNodeSession as ut, triggersReport as v, loadAgents as vn, runTree as vt, takeWatchLock as w, placeFor as wn, walkSummary as wt, declaredTriggers as x, inRepoPlace as xn, stillTheSameProcess as xt, createWatcher as y, PROJECT_MODES as yn, ownProcessStart as yt, endLinksOf as z, newWorkflowText as zn, mcpNotText as zt };

package/dist/{src-CsjumY1t.mjs → src-jyCJE1kd.mjs}

@@ -1,11 +1,11 @@
-import { B as linkNodes, Bn as readDocument, Cn as placeFiles, Ct as walkChecks, En as runDirOf, G as requestContinue, Gn as EdgeInputSchema, Gt as planPost, Hn as parseWorkflow, In as skillsIn, J as tellLiveRun, Jn as expandEdge, K as requestPause, Kt as runGh, Ln as WorkflowEditSchema, Nt as nodeSays, On as workflowDirOf, Rn as applyEdits, St as checkWorkflowText, U as unlinkNodes, Vn as renderJsonSchema, Wt as DISCUSSIONS, Xn as NodeSchema, _t as runStatus, bt as processAlive, ct as explainWorkflowText, d as runningRunIds, f as runningScript, gt as pausedOf, ht as liveStatus, in as readCondition, jn as LESSON_CAP_TOKENS, kn as inside, l as planUpgrade, nt as resumable, o as limitsReport, ot as detachRun, p as detectInstaller, q as requestStop, qt as sendPost, r as capsHere, st as followEvents, tt as detachResume, u as releaseNotes, v as triggersReport, vn as loadAgents, vt as runTree, wn as placeFor, wt as walkSummary, zn as newWorkflowText } from "./src-BRB5EQyC.mjs";
-import { C as feedbackActions, S as placeOf$1, _ as previewPost, a as registryShown, b as acceptItem, c as checkDue, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, o as updateSwitchOff, p as refreshUpdateCache, s as runInstall, u as newerVersion, w as openFixRun, x as lessonPlaceOf, y as recordNote } from "./__build_info__-1i1IwLg7.mjs";
-import { n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-CBhYcjwI.mjs";
-import { n as newRunId, t as findRun } from "./find-BgZjVKhv.mjs";
-import { c as openStore, l as storePath, s as nodeOf } from "./output-CuivUcDa.mjs";
+import { B as linkNodes, Bn as readDocument, Cn as placeFiles, Ct as walkChecks, En as runDirOf, G as requestContinue, Gn as EdgeInputSchema, Gt as planPost, Hn as parseWorkflow, In as skillsIn, J as tellLiveRun, Jn as expandEdge, K as requestPause, Kt as runGh, Ln as WorkflowEditSchema, Nt as nodeSays, On as workflowDirOf, Rn as applyEdits, St as checkWorkflowText, U as unlinkNodes, Vn as renderJsonSchema, Wt as DISCUSSIONS, Xn as NodeSchema, _t as runStatus, bt as processAlive, ct as explainWorkflowText, d as runningRunIds, f as runningScript, gt as pausedOf, ht as liveStatus, jn as LESSON_CAP_TOKENS, kn as inside, l as planUpgrade, nn as readCondition, nt as resumable, o as limitsReport, ot as detachRun, p as detectInstaller, q as requestStop, qt as sendPost, r as capsHere, st as followEvents, tt as detachResume, u as releaseNotes, v as triggersReport, vn as loadAgents, vt as runTree, wn as placeFor, wt as walkSummary, zn as newWorkflowText } from "./src-DG4dyBqm.mjs";
+import { C as feedbackActions, S as placeOf$1, _ as previewPost, a as registryShown, b as acceptItem, c as checkDue, f as readUpdateCache, g as nodeSession, h as writeUpdateCache, i as registryOf, l as fetchLatest, m as updateCachePath, o as updateSwitchOff, p as refreshUpdateCache, s as runInstall, u as newerVersion, w as openFixRun, x as lessonPlaceOf, y as recordNote } from "./__build_info__-CxH89h1r.mjs";
+import { n as pendingDecisions, r as builtinProblem, t as answerDecision } from "./decide-Cnt7o3ya.mjs";
+import { n as newRunId, t as findRun } from "./find-Dy2H5IvT.mjs";
+import { c as openStore, l as storePath, s as nodeOf } from "./output-CjOPL8W0.mjs";
 import { n as usageReport } from "./report-DK4LGqwF.mjs";
-import { a as planClean, i as keyOf, o as stepActs, r as cleanStep, s as stepPrunes, t as applyClean } from "./clean-B1zPxq6A.mjs";
-import { a as readWorktrees, c as planLine, i as projectHead, l as removeRefusal, n as lostWork, o as labelOf, r as planRemove, s as mergeStateOf, t as applyRemove, u as stateParts } from "./remove-DLfDjBdF.mjs";
+import { a as planClean, i as keyOf, o as stepActs, r as cleanStep, s as stepPrunes, t as applyClean } from "./clean-BbrkMQQi.mjs";
+import { a as readWorktrees, c as planLine, i as projectHead, l as removeRefusal, n as lostWork, o as labelOf, r as planRemove, s as mergeStateOf, t as applyRemove, u as stateParts } from "./remove-ccycC3vI.mjs";
 import path from "node:path";
 import { z } from "zod";
 import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
@@ -349,7 +349,9 @@ const EventsQuerySchema = z.strictObject({
 });
 const DecisionsQuerySchema = z.strictObject({
 	run: z.string().min(1).optional(),
-	project: z.string().min(1).optional()
+	project: z.string().min(1).optional(),
+	/** Only runs of this workflow, by name; ANDed with `run` or `project`. */
+	workflow: z.string().min(1).optional()
 });
 /** An answer: the option, and what the person said with it, if anything. */
 const AnswerSchema = z.strictObject({
@@ -483,7 +485,8 @@ const STREAMS = {
 	run: "/api/runs/:id/stream",
 	/**
 	* `runs`, `decisions`, `version`, each when it changes; `?project=` keeps
-	* one. `upgrade`: the upgrade's output, then `end` (contract-update.ts).
+	* one, `?workflow=` narrows `decisions` to that workflow's. `upgrade`: the
+	* upgrade's output, then `end` (contract-update.ts).
 	*/
 	overview: "/api/stream",
 	upgrade: "/api/upgrade/stream"
@@ -1625,10 +1628,17 @@ const readRoutes = (context) => ({
 		return ok(query.limit === void 0 ? newest : newest.slice(0, query.limit));
 	},
 	decisions: ({ query }) => {
-		if (query.run === void 0) return ok(pendingDecisions(context.store, query.project === void 0 ? {} : { project: projectRoot(context, query.project) }));
+		const workflow = query.workflow === void 0 ? {} : { workflow: query.workflow };
+		if (query.run === void 0) return ok(pendingDecisions(context.store, {
+			...workflow,
+			...query.project === void 0 ? {} : { project: projectRoot(context, query.project) }
+		}));
 		const found = runOf(context, query.run);
 		if (!found.ok) return found.refusal;
-		return ok(pendingDecisions(context.store, { runId: found.run.id }));
+		return ok(pendingDecisions(context.store, {
+			...workflow,
+			runId: found.run.id
+		}));
 	},
 	decision: ({ params }) => {
 		const found = context.store.decision(params.id);
@@ -2869,6 +2879,7 @@ const runStream = async (context, req, res, url, id, shutdown) => {
 const overviewStream = (context, res, url, shutdown) => {
 	const key = url.searchParams.get("project");
 	const root = key === null ? void 0 : projectOf(context, key)?.root ?? key;
+	const workflow = url.searchParams.get("workflow");
 	const stream = openEventStream(res);
 	const last = {
 		runs: "",
@@ -2881,7 +2892,10 @@ const overviewStream = (context, res, url, shutdown) => {
 			...filter,
 			limit: OVERVIEW_RUNS
 		}).map((run) => viewOf$2(context, run));
-		const decisions = pendingDecisions(context.store, filter);
+		const decisions = pendingDecisions(context.store, {
+			...filter,
+			...workflow === null ? {} : { workflow }
+		});
 		for (const [name, value] of [
 			["runs", runs],
 			["decisions", decisions],