@sweny-ai/core 0.1.159 → 0.1.160

package/dist/cli/final-output.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The answer at the end of `sweny workflow run`: the terminal node's result
+ * (or the failed node's error), rendered for a human.
+ *
+ * Unlike run-history and the receipt, this DOES read node output. It is
+ * local-only: printed to the terminal and saved to
+ * `.sweny/runs/<run-id>/output.md`. Nothing here is sent to the cloud.
+ */
+import type { JSONSchema, NodeResult, Workflow } from "../types.js";
+/** Lines of the answer printed to the terminal before the rest is left in output.md. */
+export declare const FINAL_OUTPUT_MAX_LINES = 60;
+export interface FinalOutput {
+    kind: "result" | "error";
+    /** Node id the text came from. */
+    node: string;
+    /** Rendered lines, uncapped. */
+    lines: string[];
+}
+/** Render a node's declared output fields as a compact `key: value` block. Empty when nothing declared is present. */
+export declare function renderSchemaOutput(data: Record<string, unknown>, schema: JSONSchema): string[];
+/**
+ * Pick what the user should see: the last-run terminal node's result on
+ * success, the first failed node's error on failure. Null when there is
+ * nothing to show (no schema fields and no summary text).
+ */
+export declare function resolveFinalOutput(workflow: Workflow, results: Map<string, NodeResult>): FinalOutput | null;
+/**
+ * Terminal text: the first `maxLines` lines, then
+ * `... (N more lines, see .sweny/runs/<id>/output.md)`. When no file was
+ * saved the pointer is dropped, never invented.
+ */
+export declare function formatFinalOutput(out: FinalOutput, opts?: {
+    maxLines?: number;
+    outputPath?: string | null;
+}): string;
+/** Markdown saved to output.md: the full, uncapped answer. */
+export declare function formatFinalMarkdown(workflow: Workflow, out: FinalOutput): string;
+/** Relative path shown to the user: `.sweny/runs/<id>/output.md`. */
+export declare function outputRelPath(runId: string): string;
+/** Write output.md. Local only. Returns the relative path, or null on failure. Never throws. */
+export declare function writeFinalOutput(runId: string, markdown: string, cwd?: string): string | null;

package/dist/cli/final-output.js

@@ -0,0 +1,155 @@
+/**
+ * The answer at the end of `sweny workflow run`: the terminal node's result
+ * (or the failed node's error), rendered for a human.
+ *
+ * Unlike run-history and the receipt, this DOES read node output. It is
+ * local-only: printed to the terminal and saved to
+ * `.sweny/runs/<run-id>/output.md`. Nothing here is sent to the cloud.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { RUN_HISTORY_DIR } from "./run-history.js";
+/** Lines of the answer printed to the terminal before the rest is left in output.md. */
+export const FINAL_OUTPUT_MAX_LINES = 60;
+const isObj = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+function isEmpty(v) {
+    return (v === undefined ||
+        v === null ||
+        (typeof v === "string" && v.trim() === "") ||
+        (Array.isArray(v) && v.length === 0) ||
+        (isObj(v) && Object.keys(v).length === 0));
+}
+function scalar(v) {
+    return typeof v === "string" ? v : JSON.stringify(v);
+}
+function indentLines(lines, pad) {
+    return lines.map((l) => (l === "" ? l : pad + l));
+}
+/** One value as lines under a label: `key: value`, or `key:` plus an indented block. */
+function renderField(label, value, schema) {
+    if (Array.isArray(value)) {
+        const itemSchema = isObj(schema?.items) ? schema.items : undefined;
+        const out = [`${label}:`];
+        for (const item of value)
+            out.push(...renderListItem(item, itemSchema));
+        return out;
+    }
+    if (isObj(value)) {
+        return [`${label}:`, ...indentLines(renderObject(value, schema), "  ")];
+    }
+    const text = scalar(value);
+    if (!text.includes("\n"))
+        return [`${label}: ${text}`];
+    return [`${label}:`, ...indentLines(text.split("\n"), "  ")];
+}
+function renderListItem(item, schema) {
+    if (isObj(item)) {
+        const inner = renderObject(item, schema);
+        if (inner.length === 0)
+            return [];
+        return [`- ${inner[0]}`, ...indentLines(inner.slice(1), "  ")];
+    }
+    if (Array.isArray(item)) {
+        return [`- ${item.map(scalar).join(", ")}`];
+    }
+    const text = scalar(item);
+    const [first, ...rest] = text.split("\n");
+    return [`- ${first}`, ...indentLines(rest, "  ")];
+}
+/** Declared fields first (schema order), then none of the extras: the schema is the contract. */
+function renderObject(data, schema) {
+    const props = isObj(schema?.properties) ? schema.properties : undefined;
+    const keys = props ? Object.keys(props) : Object.keys(data);
+    const out = [];
+    for (const key of keys) {
+        const value = data[key];
+        if (isEmpty(value))
+            continue;
+        const propSchema = props && isObj(props[key]) ? props[key] : undefined;
+        const title = typeof propSchema?.title === "string" && propSchema.title.trim() ? propSchema.title.trim() : key;
+        out.push(...renderField(title, value, propSchema));
+    }
+    return out;
+}
+/** Render a node's declared output fields as a compact `key: value` block. Empty when nothing declared is present. */
+export function renderSchemaOutput(data, schema) {
+    const props = schema.properties;
+    if (!isObj(props) || Object.keys(props).length === 0)
+        return [];
+    return renderObject(data, schema);
+}
+function trimBlock(text) {
+    const lines = text.replace(/\r\n/g, "\n").trim().split("\n");
+    return lines.map((l) => l.replace(/\s+$/, ""));
+}
+/**
+ * Pick what the user should see: the last-run terminal node's result on
+ * success, the first failed node's error on failure. Null when there is
+ * nothing to show (no schema fields and no summary text).
+ */
+export function resolveFinalOutput(workflow, results) {
+    for (const [id, r] of results) {
+        if (r.status !== "failed")
+            continue;
+        const err = r.data?.error;
+        const text = typeof err === "string" && err.trim() !== "" ? err : "node failed";
+        return { kind: "error", node: id, lines: trimBlock(text) };
+    }
+    const hasOutgoing = new Set(workflow.edges.map((e) => e.from));
+    const succeeded = [...results].filter(([, r]) => r.status === "success");
+    const terminal = succeeded.filter(([id]) => !hasOutgoing.has(id));
+    // Walk back from the end: the last node that actually yields something wins.
+    const candidates = [...(terminal.length > 0 ? terminal : succeeded)].reverse();
+    for (const [id, r] of candidates) {
+        const schema = workflow.nodes[id]?.output;
+        let lines = [];
+        if (schema)
+            lines = renderSchemaOutput(r.data ?? {}, schema);
+        if (lines.length === 0) {
+            const summary = r.data?.summary;
+            if (typeof summary === "string" && summary.trim() !== "")
+                lines = trimBlock(summary);
+        }
+        if (lines.length > 0)
+            return { kind: "result", node: id, lines };
+    }
+    return null;
+}
+/**
+ * Terminal text: the first `maxLines` lines, then
+ * `... (N more lines, see .sweny/runs/<id>/output.md)`. When no file was
+ * saved the pointer is dropped, never invented.
+ */
+export function formatFinalOutput(out, opts = {}) {
+    const max = opts.maxLines ?? FINAL_OUTPUT_MAX_LINES;
+    const shown = out.lines.slice(0, max);
+    const hidden = out.lines.length - shown.length;
+    if (hidden > 0) {
+        const noun = hidden === 1 ? "line" : "lines";
+        shown.push(opts.outputPath ? `... (${hidden} more ${noun}, see ${opts.outputPath})` : `... (${hidden} more ${noun})`);
+    }
+    return shown.map((l) => (l === "" ? "" : `  ${l}`)).join("\n");
+}
+/** Markdown saved to output.md: the full, uncapped answer. */
+export function formatFinalMarkdown(workflow, out) {
+    const nodeName = workflow.nodes[out.node]?.name ?? out.node;
+    const head = out.kind === "error" ? `# ${workflow.name}: ${nodeName} failed` : `# ${workflow.name}`;
+    return `${head}\n\n${out.lines.join("\n")}\n`;
+}
+/** Relative path shown to the user: `.sweny/runs/<id>/output.md`. */
+export function outputRelPath(runId) {
+    return path.posix.join(...RUN_HISTORY_DIR.split(path.sep), runId, "output.md");
+}
+/** Write output.md. Local only. Returns the relative path, or null on failure. Never throws. */
+export function writeFinalOutput(runId, markdown, cwd = process.cwd()) {
+    try {
+        const rel = outputRelPath(runId);
+        const file = path.join(cwd, rel);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, markdown);
+        return rel;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/cli/main.js

@@ -30,6 +30,7 @@ import * as readline from "node:readline";
 import { loadDotenv, loadConfigFile, applyAgentFileConfig } from "./config-file.js";
 import { buildCredentialMap } from "./credentials.js";
 import { nonInteractiveUsage, runNew } from "./new.js";
+import { formatFinalMarkdown, formatFinalOutput, resolveFinalOutput, writeFinalOutput } from "./final-output.js";
 import { buildRunRecord, createNodeTimer, historyDisabled, newRunId, recordRun } from "./run-history.js";
 import { registerRunsCommand } from "./runs.js";
 import { runE2eRun, runWithWallClockBudget, DEFAULT_WORKFLOW_TIMEOUT_MS } from "./e2e.js";
@@ -1049,6 +1050,19 @@ export async function workflowRunAction(file, options) {
         runLogger.flush();
         const receipt = summarizeRun(results, wfDurationMs);
         writeStepSummary(workflow, results, receipt, trace);
+        // The answer, above the receipt: the terminal node's result, or the failed node's error.
+        // Also saved to .sweny/runs/<id>/output.md (local only; --no-history skips the file).
+        const finalOutput = resolveFinalOutput(workflow, results);
+        if (finalOutput) {
+            const savedTo = historyDisabled(options.history, fileConfig["history"])
+                ? null
+                : writeFinalOutput(runId, formatFinalMarkdown(workflow, finalOutput));
+            const block = formatFinalOutput(finalOutput, { outputPath: savedTo });
+            if (wfHasFailed)
+                console.error(`${block}\n`);
+            else
+                console.log(`${block}\n`);
+        }
         if (wfHasFailed) {
             console.error(`  ${renderReceiptLine(receipt, isTTY)}\n`);
             process.exit(1);
@@ -1142,7 +1156,7 @@ const workflowRunCmd = workflowCmd
 for (const [flags, description] of WORKFLOW_RUN_OPTIONS) {
     workflowRunCmd.option(flags, description);
 }
-workflowRunCmd.option("--no-history", "Do not record this run in .sweny/runs/ (or set `history: off` in .sweny.yml)");
+workflowRunCmd.option("--no-history", "Do not record this run or save its output.md in .sweny/runs/ (or set `history: off` in .sweny.yml)");
 registerRunsCommand(program);
 workflowCmd
     .command("diagram <file>")

package/dist/cli/run-history.js

@@ -153,8 +153,11 @@ export function pruneRuns(cwd = process.cwd(), keep = RUN_HISTORY_KEEP) {
             .filter((f) => f.endsWith(".json") && RUN_ID_RE.test(f.slice(0, -5)))
             .sort();
         const extra = files.slice(0, Math.max(0, files.length - keep));
-        for (const f of extra)
+        for (const f of extra) {
             fs.rmSync(path.join(dir, f), { force: true });
+            // output.md lives beside the record in <run-id>/ (final-output.ts)
+            fs.rmSync(path.join(dir, f.slice(0, -5)), { recursive: true, force: true });
+        }
         return extra.length;
     }
     catch {

package/dist/cli/run-output.d.ts

@@ -25,6 +25,12 @@ export interface RunSummary {
      * (`max_turns`, `egress allowlist`, `deny [write]`). Absent when none.
      */
     degraded?: string[];
+    /**
+     * What the run's opinions did, from facts the nodes reported: env scope and
+     * sandbox (Claude Code only) and safe-output counts. Absent when the run
+     * knows none of it.
+     */
+    policy?: RunPolicy;
     /** The spend budget a node crossed (#449). Absent when none was. */
     budget?: {
         node: string;
@@ -34,10 +40,29 @@ export interface RunSummary {
         spent: number;
     };
 }
+export interface RunPolicy {
+    /** Agent env narrowed to the allowlist. Absent when no node reported it. */
+    envScope?: boolean;
+    /** Sandbox facts. `started` is false when the mode asked for one but the host could not. */
+    sandbox?: {
+        mode: "off" | "auto" | "strict";
+        started: boolean;
+    };
+    /** Safe outputs staged (previewed) and applied (written), summed over nodes. */
+    outputs?: {
+        staged: number;
+        applied: number;
+    };
+}
 /** The short key of a `degraded` entry: the text before its first colon. */
 export declare function degradedKey(entry: string): string;
 /** Sum the per-node results into one run summary. */
 export declare function summarizeRun(results: Map<string, NodeResult>, durationMs: number, crashed?: boolean): RunSummary;
+/**
+ * `policy: env scoped, sandbox on, 1 output staged`. Only what the run knew:
+ * no segment for a fact no node reported. Undefined when there is nothing to say.
+ */
+export declare function formatPolicySegment(p: RunPolicy | undefined): string | undefined;
 export declare function formatReceiptDuration(ms: number): string;
 export declare function formatTokenCount(n: number): string;
 export declare function formatCost(usd: number): string;

package/dist/cli/run-output.js

@@ -25,6 +25,9 @@ export function summarizeRun(results, durationMs, crashed = false) {
     let harness;
     const degraded = new Set();
     let budget;
+    const policy = {};
+    let staged = 0;
+    let applied = 0;
     const isNum = (v) => typeof v === "number" && Number.isFinite(v);
     for (const [nodeId, r] of results) {
         if (r.budget && !budget)
@@ -32,6 +35,20 @@ export function summarizeRun(results, durationMs, crashed = false) {
         harness ??= r.harness?.id;
         for (const d of r.degraded ?? [])
             degraded.add(degradedKey(d));
+        if (r.policy) {
+            // Any node that ran unscoped or unsandboxed counts: the receipt must not overstate.
+            policy.envScope = policy.envScope === undefined ? r.policy.envScope : policy.envScope && r.policy.envScope;
+            const sb = { mode: r.policy.sandbox, started: r.policy.sandboxStarted };
+            // Keep the weakest node: the first one that did not run sandboxed.
+            if (!policy.sandbox || (policy.sandbox.started && !sb.started))
+                policy.sandbox = sb;
+        }
+        for (const o of r.outputs ?? []) {
+            if (o.status === "staged")
+                staged++;
+            else if (o.status === "applied")
+                applied++;
+        }
         if (r.status === "success")
             nodesOk++;
         else if (r.status === "skipped")
@@ -49,6 +66,8 @@ export function summarizeRun(results, durationMs, crashed = false) {
                 costUsd = (costUsd ?? 0) + u.costUsd;
         }
     }
+    if (staged > 0 || applied > 0)
+        policy.outputs = { staged, applied };
     return {
         ok: !failed,
         nodesOk,
@@ -60,9 +79,36 @@ export function summarizeRun(results, durationMs, crashed = false) {
         ...(costUsd !== undefined ? { costUsd } : {}),
         ...(harness !== undefined ? { harness } : {}),
         ...(degraded.size > 0 ? { degraded: [...degraded] } : {}),
+        ...(Object.keys(policy).length > 0 ? { policy } : {}),
         ...(budget ? { budget } : {}),
     };
 }
+/**
+ * `policy: env scoped, sandbox on, 1 output staged`. Only what the run knew:
+ * no segment for a fact no node reported. Undefined when there is nothing to say.
+ */
+export function formatPolicySegment(p) {
+    if (!p)
+        return undefined;
+    const parts = [];
+    if (p.envScope !== undefined)
+        parts.push(p.envScope ? "env scoped" : "env unscoped");
+    if (p.sandbox) {
+        parts.push(p.sandbox.mode === "off"
+            ? "sandbox off"
+            : p.sandbox.started
+                ? "sandbox on"
+                : "sandbox unavailable (ran unsandboxed)");
+    }
+    if (p.outputs) {
+        const n = (count) => `${count} ${count === 1 ? "output" : "outputs"}`;
+        if (p.outputs.staged > 0)
+            parts.push(`${n(p.outputs.staged)} staged`);
+        if (p.outputs.applied > 0)
+            parts.push(`${n(p.outputs.applied)} applied`);
+    }
+    return parts.length > 0 ? `policy: ${parts.join(", ")}` : undefined;
+}
 export function formatReceiptDuration(ms) {
     if (ms < 1000)
         return `${Math.max(0, Math.round(ms))}ms`;
@@ -108,6 +154,7 @@ export function formatReceipt(s) {
         ...(s.costUsd !== undefined ? [formatCost(s.costUsd)] : []),
         ...(s.harness !== undefined && s.harness !== "claude-code" ? [s.harness] : []),
         ...(s.degraded && s.degraded.length > 0 ? [`degraded: ${s.degraded.join(", ")}`] : []),
+        ...(formatPolicySegment(s.policy) ? [formatPolicySegment(s.policy)] : []),
         ...(s.budget ? [formatBudgetOverrun(s.budget)] : []),
     ];
     return parts.join(" · ");

package/dist/cli/templates.js

@@ -31,7 +31,33 @@ nodes:
       From the survey, write a short plain-English explanation:
       what this project does, how it is organized, how to build and
       run it, and where a new contributor should start.
-      Keep it under 300 words.
+      Keep every field short and concrete: a sentence or a few
+      bullets, in plain English, naming real files and commands.
+    output:
+      type: object
+      properties:
+        purpose:
+          type: string
+          title: What it is
+          description: One or two sentences on what this project does and who it is for.
+        how_to_run:
+          type: array
+          title: How to run it
+          description: The commands, in order, to install, build, test, and start it.
+          items:
+            type: string
+        key_files:
+          type: array
+          title: Key files
+          description: The files and directories a new contributor should open first, each with a few words on why.
+          items:
+            type: string
+        risks:
+          type: array
+          title: Watch out for
+          description: Sharp edges, missing docs, or things that look fragile. Empty if none.
+          items:
+            type: string
 
 edges:
   - from: survey

package/dist/harness/claude-code.d.ts

@@ -150,6 +150,8 @@ export declare class ClaudeCodeHarness implements Claude, AgentHarness {
     private sandboxProbe;
     private sandboxWarned;
     private envScope;
+    /** Floor facts from the latest runQuery, read by run() for the receipt. */
+    private lastPolicyFacts;
     private toolBridge;
     private toolBridgeShim;
     private authProbe;

package/dist/harness/claude-code.js

@@ -217,6 +217,8 @@ export class ClaudeCodeHarness {
     sandboxProbe;
     sandboxWarned = false;
     envScope;
+    /** Floor facts from the latest runQuery, read by run() for the receipt. */
+    lastPolicyFacts;
     toolBridge;
     toolBridgeShim;
     authProbe;
@@ -312,7 +314,12 @@ export class ClaudeCodeHarness {
             sandboxMode: policy.sandbox,
             agentAccess: { envVars: req.agentAccess?.envVars ?? [], domains: policy.egress, noPush: req.agentAccess?.noPush },
         });
-        return { ...result, harness: this.info(), degraded: gate.degraded };
+        return {
+            ...result,
+            harness: this.info(),
+            degraded: gate.degraded,
+            ...(this.lastPolicyFacts ? { policy: this.lastPolicyFacts } : {}),
+        };
     }
     async runQuery(opts) {
         const { instruction, context, tools, outputSchema, onProgress, maxTurns, model, timeoutMs, signal, readOnly, agentAccess, onUsage, } = opts;
@@ -334,6 +341,11 @@ export class ClaudeCodeHarness {
             probe: this.sandboxProbe,
             logger: this.logger,
         });
+        this.lastPolicyFacts = {
+            envScope: resolveEnvScope(process.env, this.envScope),
+            sandbox: sandbox.mode,
+            sandboxStarted: sandbox.settings !== undefined,
+        };
         if (sandbox.error) {
             this.logger.error(sandbox.error);
             return { status: "failed", data: { error: sandbox.error, refused: true }, toolCalls: [] };

package/dist/types.d.ts

@@ -622,6 +622,11 @@ export interface NodeResult {
     };
     /** Opinions this run could not honor natively. Always empty for Claude Code. */
     degraded?: string[];
+    /**
+     * Agent floor this node actually ran under, for the run receipt. Set by the
+     * Claude Code harness only; absent for harnesses that do not report it.
+     */
+    policy?: NodePolicyFacts;
     /** Safe outputs (#365): what the write stage did with each intent. Absent when the node declares none. */
     outputs?: SafeOutputReceipt[];
     /**
@@ -631,6 +636,15 @@ export interface NodeResult {
      */
     budget?: BudgetOverrun;
 }
+/** Facts about the agent floor (scoped env, process sandbox) a node ran under. Booleans and a mode only. */
+export interface NodePolicyFacts {
+    /** The agent subprocess env was narrowed to the allowlist. */
+    envScope: boolean;
+    /** Requested sandbox mode. */
+    sandbox: "off" | "auto" | "strict";
+    /** The sandbox was enabled for this node (false under `off`, or `auto` on a host that cannot sandbox). */
+    sandboxStarted: boolean;
+}
 export interface ToolCall {
     tool: string;
     input: unknown;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.159",
+  "version": "0.1.160",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"