cool-workflow 0.1.96 → 0.1.97

package/docs/fix.7.md

@@ -0,0 +1,44 @@
+# FIX(7)
+
+## NAME
+
+`cw fix` — give back the fix commands for all setup problems
+
+## SYNOPSIS
+
+```text
+node dist/cli.js fix
+node dist/cli.js fix --json
+```
+
+## DESCRIPTION
+
+`cw fix` runs the same setup checks as `cw doctor`, but gives back only the
+fix commands — one numbered step for every check that has a problem. No
+running check detail, no status glyphs; just the directions you need to put
+things right.
+
+When the output is empty ("No fixes needed."), the setup is clean and nothing
+needs doing.
+
+Like `cw doctor`, the command only reads — it never makes a file or does a
+fix on its own. You are meant to run the fix commands yourself.
+
+If any check has status `fail`, the command exits with code 1.
+
+## OPTIONS
+
+`--json`
+: Give back the full doctor report as a stable JSON object, with the same shape
+as `cw doctor --json`. The `checks` array carries every fix string.
+
+## EXIT CODES
+
+| Exit | Meaning |
+| --- | --- |
+| 0 | No fixes needed — all checks ok or only warnings |
+| 1 | One or more checks have status `fail` |
+
+## SEE ALSO
+
+cw doctor — the full setup check with detail for every check

package/docs/init.7.md

@@ -0,0 +1,62 @@
+# INIT(7)
+
+## NAME
+
+`cw init` — scaffold a new workflow definition from nothing
+
+## SYNOPSIS
+
+```text
+node dist/cli.js init <workflow-id> [--title TITLE] [--output PATH] [--force]
+```
+
+## DESCRIPTION
+
+`cw init` makes a new workflow definition file — a `.workflow.js` file filled
+with a simple template. The template has a basic run shape: one step with a
+sandbox profile, one evidence gate, and the hooks you need to add your own
+steps.
+
+This is how you start a new workflow app from zero. After `init`, you have a
+real file you can edit to make your own run shape.
+
+The workflow id you give is turned into a safe file name (spaces become dashes,
+special signs are taken out). By default, the file is written to the current
+working directory, but you can point it somewhere else with `--output`.
+
+If a file of that name is already there, the command refuses to overwrite it
+unless you pass `--force`.
+
+## OPTIONS
+
+`--title TITLE`
+: A human name for the workflow. If not given, a title is made from the id.
+
+`--output PATH`
+: Where to write the workflow file. Default is `<id>.workflow.js` in the
+current directory.
+
+`--force`
+: Overwrite an existing file. Without this flag, the command fails if the
+file already exists.
+
+## EXIT CODES
+
+| Exit | Meaning |
+| --- | --- |
+| 0 | Workflow file written |
+| 1 | Missing workflow id, invalid id, or file exists without `--force` |
+
+## FILES
+
+```text
+src/orchestrator.ts (init method)
+src/workflow-app-framework.ts (template renderer)
+```
+
+## SEE ALSO
+
+cw list — see all workflow apps you have
+cw info <id> — read the shape of a workflow app
+workflow-app-framework.7.md — the full framework for writing workflow apps
+pipeline-verbs.7.md — plan, dispatch, result (the pipeline engine)

package/docs/multi-agent-cli-mcp-surface.7.md

@@ -319,3 +319,5 @@ The host-facing surface tracks the CLI golden-path fixes (`cw -q` routing + repo
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/multi-agent-eval-replay-harness.7.md

@@ -345,3 +345,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/multi-agent-operator-ux.7.md

@@ -357,3 +357,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/node-snapshot-diff-replay.7.md

@@ -178,3 +178,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/observability-cost-accounting.7.md

@@ -237,3 +237,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/pipeline-verbs.7.md

@@ -0,0 +1,93 @@
+# PIPELINE-VERBS(7)
+
+## NAME
+
+`cw plan`, `cw dispatch`, `cw result` — the three core pipeline engine verbs
+
+## SYNOPSIS
+
+```text
+node dist/cli.js plan <workflow-id> [--question Q] [--repo PATH] [--sandbox PROFILE]
+node dist/cli.js dispatch <run-id> [--sandbox PROFILE]
+node dist/cli.js result <run-id> <task-id> <result-file>
+```
+
+## DESCRIPTION
+
+These three verbs are the engine that drives every CW run. A run goes through
+three stages: plan (get ready), dispatch (hand out work), and result (take work
+back). Together they make the CW pipeline loop — a worker gets a task, does it,
+and hands in a result file; CW checks the result and moves the run forward.
+
+None of these verbs starts or stops the agent host. They give the control-plane
+data that the host reads and acts on. The host keeps its own loop: call
+`dispatch`, give the task to an agent, get back a result file, call `result`.
+
+## PLAN
+
+`cw plan <workflow-id>` makes a new run and gives back its canonical plan
+summary in JSON. The plan has the run id, the first task (or tasks) to do,
+the sandbox profile, and the state of the run.
+
+The workflow id names a workflow app that gives the run its shape: inputs,
+steps, evidence gates, and sandbox policy. Use `cw list` to see the workflow
+apps you have.
+
+The plan output is stable JSON, good for scripts and the agent host.
+
+Options:
+: `--question`, `--repo`, `--sandbox` — the same inputs the workflow app
+expects. Different apps take different inputs; see `cw info <workflow-id>`
+for the list.
+
+## DISPATCH
+
+`cw dispatch <run-id>` makes the next task ready for a worker. It gives back
+a dispatch manifest in JSON: the task id, the prompt, the sandbox profile, and
+the input and output paths the worker should use.
+
+The dispatch picks the next runnable task in the pipeline. If no task is ready
+— for example, all tasks are done or waiting on evidence — the dispatch payload
+says so, and the host should wait or check the run status.
+
+Options:
+: `--sandbox PROFILE` — pick a sandbox profile for the worker. The default is
+the one the workflow app asked for.
+
+## RESULT
+
+`cw result <run-id> <task-id> <result-file>` records a worker's result against
+a task. The result file is a Markdown file the agent wrote — it must have a
+`cw:result` JSON fence with the agent's `findings` and `evidence`.
+
+CW accepts the result, checks it, and advances the run pipeline. If the result
+is bad (missing, broken, or the evidence does not check out), CW rejects it and
+gives back an error feedback record. The host can then try again or give the
+task a different agent.
+
+After `result`, the run may be done or have more tasks waiting. Check with
+`cw status <run-id>` or `cw next <run-id>`.
+
+## FILES
+
+```text
+.cw/runs/<run-id>/state.json
+.cw/runs/<run-id>/dispatches/<dispatch-id>.json
+.cw/runs/<run-id>/tasks/<task-id>.json
+.cw/runs/<run-id>/results/<task-id>.md
+.cw/runs/<run-id>/workers/<worker-id>/worker.json
+```
+
+## PIPELINE FLOW
+
+```text
+plan -> dispatch -> [agent does work] -> result -> [dispatch...] -> done
+                                        └─ rejected -> feedback -> retry
+```
+
+## SEE ALSO
+
+cw init — make a new workflow definition from nothing
+cw status — see the current state of a run
+cw next — find the next action for a run
+pipeline-runner.7.md — the full pipeline engine detail

package/docs/project-index.md

@@ -1,15 +1,15 @@
 # Cool Workflow Project Index
 
-Generated from the current repository code on 2026-06-28 by `npm run sync:project-index`.
+Generated from the current repository code on 2026-06-30 by `npm run sync:project-index`.
 
 ## Snapshot
 
 - Package: `cool-workflow`
-- Version: `0.1.96`
+- Version: `0.1.97`
 - Source modules: `68`
 - Workflow apps: `8`
-- Docs: `53`
-- Smoke tests: `158`
+- Docs: `59`
+- Smoke tests: `164`
 - Repository: https://github.com/coo1white/cool-workflow
 
 ## Architecture
@@ -145,14 +145,18 @@ multi-agent host -> topology -> blackboard/coordinator
 - [Contract Migration Tooling](contract-migration-tooling.7.md)
 - [Control-Plane Scheduling](control-plane-scheduling.7.md)
 - [Coordinator / Blackboard](coordinator-blackboard.7.md)
+- [DEMO(7)](demo.7.md)
+- [DOCTOR(7)](doctor.7.md)
 - [Dogfood One Real Repo](dogfood-one-real-repo.7.md)
 - [Durable State & Locking](durable-state-and-locking.7.md)
 - [End-to-End Golden Path](end-to-end-golden-path.7.md)
 - [ERROR-FEEDBACK(7)](error-feedback.7.md)
 - [Evidence Adoption Reasoning Chain](evidence-adoption-reasoning-chain.7.md)
 - [EXECUTION-BACKENDS(7)](execution-backends.7.md)
+- [FIX(7)](fix.7.md)
 - [Getting Started](getting-started.md)
 - [Cool Workflow Docs](index.md)
+- [INIT(7)](init.7.md)
 - [MCP App Surface](mcp-app-surface.7.md)
 - [Multi-Agent CLI + MCP Surface](multi-agent-cli-mcp-surface.7.md)
 - [Multi-Agent Eval & Replay Harness](multi-agent-eval-replay-harness.7.md)
@@ -164,6 +168,7 @@ multi-agent host -> topology -> blackboard/coordinator
 - [Observability + Cost Accounting](observability-cost-accounting.7.md)
 - [Operator UX](operator-ux.7.md)
 - [PIPELINE-RUNNER(7)](pipeline-runner.7.md)
+- [PIPELINE-VERBS(7)](pipeline-verbs.7.md)
 - [Cool Workflow Project Index](project-index.md)
 - [Cool Workflow](readme-v0.1.87-full.md)
 - [Real Execution Backend Integrations](real-execution-backends.7.md)
@@ -172,6 +177,7 @@ multi-agent host -> topology -> blackboard/coordinator
 - [Release Tooling](release-tooling.7.md)
 - [Remote-Source Review (`--link`)](remote-source-review.7.md)
 - [Verifiable Report Bundle](report-verifiable-bundle.7.md)
+- [ROUTINE(7)](routine.7.md)
 - [Routines](routines.md)
 - [Run Registry / Control Plane](run-registry-control-plane.7.md)
 - [Run Retention & Provable Reclamation](run-retention-reclamation.7.md)
@@ -196,6 +202,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 
 - [agent-config-atomic-write-smoke.js](../test/agent-config-atomic-write-smoke.js)
 - [agent-delegation-drive-smoke.js](../test/agent-delegation-drive-smoke.js)
+- [agent-stream-gate-smoke.js](../test/agent-stream-gate-smoke.js)
 - [append-run-node-no-realloc-smoke.js](../test/append-run-node-no-realloc-smoke.js)
 - [architecture-review-fast-automation-smoke.js](../test/architecture-review-fast-automation-smoke.js)
 - [architecture-review-fast-phase-cache-smoke.js](../test/architecture-review-fast-phase-cache-smoke.js)
@@ -282,6 +289,9 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [operator-ux-smoke.js](../test/operator-ux-smoke.js)
 - [parallel-onramp-smoke.js](../test/parallel-onramp-smoke.js)
 - [parity-doc-sync-smoke.js](../test/parity-doc-sync-smoke.js)
+- [parse-guard-smoke.js](../test/parse-guard-smoke.js)
+- [parse-hardening-round2-smoke.js](../test/parse-hardening-round2-smoke.js)
+- [path-containment-smoke.js](../test/path-containment-smoke.js)
 - [pdca-blackboard-loop-smoke.js](../test/pdca-blackboard-loop-smoke.js)
 - [pii-redaction-smoke.js](../test/pii-redaction-smoke.js)
 - [pipeline-auto-advance-smoke.js](../test/pipeline-auto-advance-smoke.js)
@@ -300,6 +310,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [release-check-skip-smoke.js](../test/release-check-skip-smoke.js)
 - [release-flow-smoke.js](../test/release-flow-smoke.js)
 - [release-gate-smoke.js](../test/release-gate-smoke.js)
+- [release-pipeline-hygiene-smoke.js](../test/release-pipeline-hygiene-smoke.js)
 - [release-tooling-smoke.js](../test/release-tooling-smoke.js)
 - [remote-link-archive-smoke.js](../test/remote-link-archive-smoke.js)
 - [remote-link-git-smoke.js](../test/remote-link-git-smoke.js)
@@ -323,6 +334,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [run-resume-drive-smoke.js](../test/run-resume-drive-smoke.js)
 - [run-retention-reclamation-smoke.js](../test/run-retention-reclamation-smoke.js)
 - [sample-determinism-smoke.js](../test/sample-determinism-smoke.js)
+- [sandbox-env-batch-hardening-smoke.js](../test/sandbox-env-batch-hardening-smoke.js)
 - [sandbox-profile-smoke.js](../test/sandbox-profile-smoke.js)
 - [sched-policy-validation-smoke.js](../test/sched-policy-validation-smoke.js)
 - [schedule-routine-daemon-smoke.js](../test/schedule-routine-daemon-smoke.js)

package/docs/real-execution-backends.7.md

@@ -185,3 +185,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/release-and-migration.7.md

@@ -325,3 +325,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/release-tooling.7.md

@@ -288,3 +288,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/routine.7.md

@@ -0,0 +1,73 @@
+# ROUTINE(7)
+
+## NAME
+
+`cw routine` — make and manage trigger-based workflow routines
+
+## SYNOPSIS
+
+```text
+node dist/cli.js routine create --kind api|github --prompt PROMPT [--match JSON]
+node dist/cli.js routine list [--kind KIND]
+node dist/cli.js routine delete <trigger-id>
+node dist/cli.js routine fire <kind> <payload-file>
+node dist/cli.js routine events [<trigger-id>]
+```
+
+## DESCRIPTION
+
+`cw routine` is the local trigger bridge for CW. It lets you make named
+triggers that fire when something happens — an API event, a GitHub webhook, or
+another outside signal. Each trigger carries a prompt template; when fired,
+the prompt gets filled with the event data and handed to an agent host.
+
+CW keeps routine data in:
+
+```text
+.cw/routines/triggers.json
+.cw/routines/payloads/
+```
+
+CW itself does not run a web server or listen for webhooks. The routine bridge
+is a local data store that can be joined to GitHub Actions, webhooks, cron, or
+a small HTTP adapter.
+
+## COMMANDS
+
+**create**
+: Make a new trigger. `--kind` is `api` or `github`. `--prompt` is the prompt
+template the agent will see. `--match` is an optional JSON object that filters
+events (for example, `{"action":"opened"}` for GitHub pull requests).
+
+**list**
+: List all triggers, or filter by kind with `--kind`.
+
+**delete**
+: Remove a trigger by its id.
+
+**fire**
+: Record an event against a trigger. Give the trigger kind and a path to a
+JSON payload file. CW matches the payload against the trigger's match rules
+and fills out the prompt.
+
+**events**
+: List the events that have been recorded for a trigger.
+
+## FILES
+
+```text
+.cw/routines/triggers.json
+.cw/routines/payloads/<event-id>.json
+```
+
+## EXIT CODES
+
+| Exit | Meaning |
+| --- | --- |
+| 0 | Command done |
+| 1 | Error (bad arguments, missing trigger, etc.) |
+
+## SEE ALSO
+
+cw sched — durable run-queue scheduling for workflow runs
+control-plane-scheduling.7.md — the full scheduling and run management design

package/docs/run-registry-control-plane.7.md

@@ -468,3 +468,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/run-retention-reclamation.7.md

@@ -236,3 +236,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/state-explosion-management.7.md

@@ -314,3 +314,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/team-collaboration.7.md

@@ -250,3 +250,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/docs/web-desktop-workbench.7.md

@@ -258,3 +258,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.95
 
 0.1.96
+
+0.1.97

package/manifest/README.md

@@ -1,11 +1,12 @@
 # Vendor Manifest Source of Truth
 
 Every agent host scans a different, hard-coded manifest directory
-(`.claude-plugin/`, `.codex-plugin/`, `.agents/`) with a different JSON shape.
-You cannot unify the directory or the schema — so we do not try. Instead, all
-vendor manifests are **generated** from one neutral source and point at the same
-shared runtime (`skills/`, `dist/`, `apps/`, the MCP server). No vendor forks the
-logic; each manifest is a thin adapter.
+(`.claude-plugin/`, `.codex-plugin/`, `.agents/`, `.gemini-plugin/`,
+`.opencode-plugin/`) with a different JSON shape. You cannot unify the directory
+or the schema — so we do not try. Instead, all vendor manifests are **generated**
+from one neutral source and point at the same shared runtime (`skills/`, `dist/`,
+`apps/`, the MCP server). No vendor forks the logic; each manifest is a thin
+adapter.
 
 This is the mechanism/policy split: shared assets are mechanism, per-vendor
 manifests are policy.
@@ -25,13 +26,18 @@ npm run gen:manifests -- --check   # fail (exit 1) if any generated file drifted
 
 ## Generated outputs (do NOT hand-edit)
 
+Five vendors are generated today. Paths are repo-root-relative.
+
 | Vendor | Marketplace | Plugin manifest | MCP config | MCP path var |
 | --- | --- | --- | --- | --- |
-| Claude Code | `../../../.claude-plugin/marketplace.json` | `../.claude-plugin/plugin.json` | `../.mcp.json` (auto-discovered) | `${CLAUDE_PLUGIN_ROOT}/` |
-| Codex / `.agents` | `../../../.agents/plugins/marketplace.json` | `../.codex-plugin/plugin.json` | `../.codex-plugin/mcp.json` | `./` |
-
-The two vendors read **different** MCP files, so the plugin-root path variable
-never collides.
+| Claude Code | `.claude-plugin/marketplace.json` | `plugins/cool-workflow/.claude-plugin/plugin.json` | `plugins/cool-workflow/.mcp.json` (auto-discovered) | `${CLAUDE_PLUGIN_ROOT}/` |
+| Codex | `.agents/plugins/marketplace.json` | `plugins/cool-workflow/.codex-plugin/plugin.json` | `plugins/cool-workflow/.codex-plugin/mcp.json` | `./` |
+| `.agents` | — | `.agents/plugins/cool-workflow/plugin.json` | `.agents/plugins/cool-workflow/mcp.json` | `./` |
+| Gemini | — | `plugins/cool-workflow/.gemini-plugin/plugin.json` | `plugins/cool-workflow/.gemini-plugin/mcp.json` | `./` |
+| OpenCode | — | `plugins/cool-workflow/.opencode-plugin/plugin.json` | `plugins/cool-workflow/.opencode-plugin/mcp.json` | `./` |
+
+Each vendor reads its **own** MCP file, so the plugin-root path variable never
+collides.
 
 ## Adding a new vendor (Cursor, Windsurf, …)
 

package/manifest/plugin.manifest.json

@@ -2,7 +2,7 @@
   "_comment": "SINGLE SOURCE OF TRUTH for every vendor manifest. Edit THIS file, then run `npm run gen:manifests`. Do NOT hand-edit the generated vendor manifests (.claude-plugin/, .codex-plugin/, .agents/, .mcp.json) — `npm run gen:manifests -- --check` (run by release:check) will fail if they drift from this source.",
   "identity": {
     "name": "cool-workflow",
-    "version": "0.1.96",
+    "version": "0.1.97",
     "license": "BSD-2-Clause",
     "homepage": "https://github.com/coo1white/cool-workflow",
     "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cool-workflow",
-  "version": "0.1.96",
+  "version": "0.1.97",
   "bin": {
     "cool-workflow": "scripts/cw.js",
     "cw": "scripts/cw.js"

package/scripts/agents/agent-adapter-core.js

@@ -457,9 +457,12 @@ function emitReport(model, usage, resultText) {
 // `logs/agent-stderr.log` sibling is the natural home. Advisory only: never throws,
 // never changes the exit code or the recorded evidence.
 function persistStderr(resultPath, text) {
-  const t = String(text || "").trim();
+  let t = String(text || "").trim();
   if (!t || !resultPath) return;
   try {
+    t = String(t).replace(/\b(sk-[A-Za-z0-9_-]{20,}|ghp_[A-Za-z0-9]{20,}|xox[bprs]-[A-Za-z0-9-]{20,}|Bearer\s+\S+|Authorization:\s*\S+|api[_-]?key[=:]\s*\S+|token[=:]\s*\S+)/gi, (match) => match.slice(0, 4) + "***[REDACTED]");
+    const cap = 4096;
+    if (t.length > cap) t = t.slice(0, cap) + `\n  [truncated from ${t.length} bytes]`;
     const dir = path.join(path.dirname(resultPath), "logs");
     fs.mkdirSync(dir, { recursive: true });
     fs.writeFileSync(path.join(dir, "agent-stderr.log"), `${t}\n`, "utf8");

package/scripts/canonical-apps.js

@@ -83,7 +83,7 @@ const canonicalApps = [
       "--source",
       "plugins/cool-workflow/docs/workflow-app-framework.7.md",
       "--scope",
-      "Cool Workflow v0.1.96",
+      "Cool Workflow v0.1.97",
       "--freshness",
       "as of release preparation"
     ]
@@ -117,14 +117,14 @@ function main() {
     assert.ok(summary, `${app.id} must appear in app list`);
     assert.equal(summary.sourceKind, "app-directory");
     assert.equal(summary.legacy, false);
-    assert.equal(summary.version, "0.1.96");
+    assert.equal(summary.version, "0.1.97");
 
     const validation = runJson(["app", "validate", manifestPath]);
     assert.equal(validation.valid, true, `${app.id} manifest must validate`);
 
     const shown = runJson(["app", "show", app.id]);
     assert.equal(shown.app.id, app.id);
-    assert.equal(shown.app.version, "0.1.96");
+    assert.equal(shown.app.version, "0.1.97");
     assert.ok(shown.app.metadata.canonical, `${app.id} must be marked canonical`);
     assert.ok(shown.app.sandboxProfiles.length > 0, `${app.id} must declare sandbox profiles`);
     assertTaskIdsUnique(shown);
@@ -135,7 +135,7 @@ function main() {
     const plan = runJson(["plan", app.id, ...app.args(workspace)]);
     const state = JSON.parse(fs.readFileSync(plan.statePath, "utf8"));
     assert.equal(state.workflow.app.id, app.id);
-    assert.equal(state.workflow.app.version, "0.1.96");
+    assert.equal(state.workflow.app.version, "0.1.97");
     assert.equal(state.workflow.app.metadata.canonical, true);
     assert.ok(state.tasks.some((task) => task.requiresEvidence), `${app.id} plan must include evidence gates`);
     assert.ok(state.tasks.every((task) => task.sandboxProfileId), `${app.id} plan must include sandbox hints`);

package/scripts/children/batch-delegate-child.js

@@ -18,10 +18,17 @@
 
 const { spawn } = require("node:child_process");
 let raw = "";
+const MAX_STDIN_BYTES = 32 * 1024 * 1024;
 process.stdin.setEncoding("utf8");
-process.stdin.on("data", (d) => (raw += d));
+process.stdin.on("data", (d) => { if (raw.length < MAX_STDIN_BYTES) raw += d; });
 process.stdin.on("end", () => {
-  const jobs = JSON.parse(raw);
+  let jobs;
+  try {
+    jobs = JSON.parse(raw);
+  } catch (e) {
+    process.stdout.write(JSON.stringify([{ spawnError: `invalid stdin JSON: ${String(e && e.message || e)}`, exitCode: null, stdout: "" }]));
+    return;
+  }
   if (!jobs.length) { process.stdout.write("[]"); return; }
   const out = new Array(jobs.length);
   let pending = jobs.length;
@@ -37,7 +44,7 @@ process.stdin.on("end", () => {
     };
     let child;
     try {
-      child = spawn(job.binary, job.args, { cwd: job.cwd, env: process.env, shell: false });
+      child = spawn(job.binary, job.args, { cwd: job.cwd, env: job.env || process.env, shell: false });
     } catch (error) {
       settle({ spawnError: String((error && error.message) || error), exitCode: null, stdout: "" });
       return;

package/scripts/children/http-delegate-child.js

@@ -15,7 +15,8 @@
 // API request. Behavior MUST stay byte-identical to the previous embedded string.
 
 (async () => {
-  const read = () => new Promise((res) => { let b = ""; process.stdin.on("data", (c) => (b += c)); process.stdin.on("end", () => res(b)); });
+  const MAX_STDIN_BYTES = 32 * 1024 * 1024;
+  const read = () => new Promise((res) => { let b = ""; process.stdin.on("data", (c) => { if (b.length < MAX_STDIN_BYTES) b += c; }); process.stdin.on("end", () => res(b)); });
   try {
     const job = JSON.parse((await read()) || "{}");
     const endpoint = process.env.CW_DELEGATE_ENDPOINT;

package/scripts/dogfood-release.js

@@ -6,7 +6,7 @@ const fs = require("node:fs");
 const path = require("node:path");
 const { CoolWorkflowRunner } = require("../dist/orchestrator.js");
 
-const TARGET_VERSION = "0.1.96";
+const TARGET_VERSION = "0.1.97";
 const PREVIOUS_VERSION = "0.1.31";
 const pluginRoot = path.resolve(__dirname, "..");
 const repoRoot = path.resolve(pluginRoot, "..", "..");

package/scripts/golden-path.js

@@ -33,7 +33,7 @@ function main() {
     const appValidation = runJson(["app", "validate", "end-to-end-golden-path"], pluginRoot);
     assert.equal(appValidation.valid, true);
     assert.equal(appValidation.summary.id, "end-to-end-golden-path");
-    assert.equal(appValidation.summary.version, "0.1.96");
+    assert.equal(appValidation.summary.version, "0.1.97");
 
     const plan = runJson(
       [
@@ -42,7 +42,7 @@ function main() {
         "--repo",
         tmp,
         "--question",
-        "Prove the deterministic v0.1.96 end-to-end golden path."
+        "Prove the deterministic v0.1.97 end-to-end golden path."
       ],
       pluginRoot
     );
@@ -52,7 +52,7 @@ function main() {
 
     let state = readJson(plan.statePath);
     assert.equal(state.workflow.app.id, "end-to-end-golden-path");
-    assert.equal(state.workflow.app.version, "0.1.96");
+    assert.equal(state.workflow.app.version, "0.1.97");
     assert.equal(state.loopStage, "interpret");
 
     const dispatch = runJson(["dispatch", plan.runId, "--limit", "1", "--sandbox", "readonly"], tmp);
@@ -195,7 +195,7 @@ function main() {
     assert.equal(reportPath, plan.reportPath);
     assert.ok(fs.existsSync(reportPath));
     const report = fs.readFileSync(reportPath, "utf8");
-    assert.match(report, /Workflow App: end-to-end-golden-path@0\.1\.96/);
+    assert.match(report, /Workflow App: end-to-end-golden-path@0\.1\.97/);
     assert.match(report, /## Candidates/);
     assert.match(report, /## Trust Audit/);
     assert.match(report, /## Acceptance Rationale/);