create-safest-tools 0.5.2 → 0.6.0

package/template/public/styles.css

@@ -296,10 +296,13 @@ td small { margin-top: 3px; color: var(--muted); }
 .report-run-record strong { font-size: 10px; }
 .report-run-record small { margin-top: 4px; color: var(--muted); font-size: 8px; overflow-wrap: anywhere; }
 .report-timeline { position: relative; display: grid; gap: 0; }
-.timeline-event { position: relative; display: grid; grid-template-columns: 28px 1fr; gap: 8px; min-height: 48px; }
-.timeline-event:not(:last-child)::before { content: ""; position: absolute; top: 25px; bottom: 0; left: 11px; width: 1px; background: #d8e1da; }
-.timeline-marker { position: relative; z-index: 1; width: 23px; height: 23px; display: grid; place-items: center; border: 1px solid #cbd9ce; border-radius: 50%; color: #315641; background: #fff; font-size: 9px; font-weight: 850; }
-.timeline-marker.action { color: #8a4a20; border-color: #edc69f; background: #fff8ef; }
+.timeline-event { position: relative; display: grid; grid-template-columns: 16px 1fr; gap: 12px; min-height: 48px; }
+.timeline-event:not(:last-child)::before { content: ""; position: absolute; top: 14px; bottom: 0; left: 5px; width: 2px; background: #d8e1da; }
+.timeline-marker { position: relative; z-index: 1; width: 12px; height: 12px; margin-top: 4px; border: 3px solid #fff; border-radius: 50%; background: #527261; box-shadow: 0 0 0 1px #b9cabe; }
+.timeline-marker.message { background: #2f6d91; box-shadow: 0 0 0 1px #a9c9da; }
+.timeline-marker.decision { background: #245d43; box-shadow: 0 0 0 1px #9fc2ad; }
+.timeline-marker.finding { background: #7a6598; box-shadow: 0 0 0 1px #c5b9d5; }
+.timeline-marker.action { background: #a35b27; box-shadow: 0 0 0 1px #e0b48f; }
 .timeline-event > div { padding: 2px 0 10px; }
 .timeline-event strong, .timeline-event span, .timeline-event small { display: block; }
 .timeline-event strong { font-size: 9px; }
@@ -1161,9 +1164,9 @@ body.login-mode .top-actions { margin-left: auto; }
 .case-activity-heading p { margin: 5px 0 0; color: var(--muted); font-size: 12px; line-height: 1.5; }
 .case-activity-heading > span { flex: 0 0 auto; padding: 5px 9px; border-radius: 999px; color: #315b47; background: #edf5ef; font-size: 11px; font-weight: 750; }
 .case-activity-section .report-timeline { padding-left: 2px; }
-.case-activity-section .timeline-event { grid-template-columns: 36px minmax(0, 1fr); gap: 12px; min-height: 76px; }
-.case-activity-section .timeline-event:not(:last-child)::before { top: 32px; bottom: 0; left: 15px; width: 2px; background: #dfe8e1; }
-.case-activity-section .timeline-marker { width: 32px; height: 32px; border-width: 2px; font-size: 13px; }
+.case-activity-section .timeline-event { grid-template-columns: 18px minmax(0, 1fr); gap: 14px; min-height: 68px; }
+.case-activity-section .timeline-event:not(:last-child)::before { top: 16px; bottom: 0; left: 6px; width: 2px; background: #dfe8e1; }
+.case-activity-section .timeline-marker { width: 14px; height: 14px; margin-top: 3px; }
 .case-activity-section .timeline-event > div { padding: 2px 0 18px; }
 .case-activity-section .timeline-event strong { color: #172d23; font-size: 13px; line-height: 1.35; }
 .case-activity-section .timeline-event span { margin-top: 4px; color: #40584c; font-size: 12px; line-height: 1.5; }
@@ -1596,3 +1599,194 @@ body.login-mode .top-actions { margin-left: auto; }
   .builder-row-actions { justify-content: flex-end; }
   .field-option-row button { width: 100%; }
 }
+
+/* Tools and connections */
+.registry-workspace { max-width: 1400px; margin-inline: auto; }
+.registry-workspace > .page-head { margin-inline: 0; }
+.registry-model { margin-bottom: 20px; padding: 16px 18px; display: grid; grid-template-columns: minmax(150px,1fr) auto minmax(150px,1fr) auto minmax(150px,1fr) auto minmax(150px,1fr); align-items: center; gap: 12px; border: 1px solid #d8e3da; border-radius: 13px; background: linear-gradient(135deg, #fbfdf9, #f1f7f1); }
+.registry-model > div { min-width: 0; display: grid; grid-template-columns: 28px minmax(0,1fr); column-gap: 10px; align-items: center; }
+.registry-model > div > span { width: 28px; height: 28px; grid-row: span 2; display: grid; place-items: center; border-radius: 8px; color: var(--forest); background: white; box-shadow: 0 0 0 1px #d7e1d9; font-size: 10px; font-weight: 850; }
+.registry-model strong { font-size: 12px; }
+.registry-model small { margin-top: 2px; overflow: hidden; color: var(--muted); font-size: 10px; line-height: 1.35; text-overflow: ellipsis; white-space: nowrap; }
+.registry-model > b { color: #8ba095; font-size: 15px; }
+.registry-tabs-row { margin-bottom: 13px; display: flex; align-items: center; gap: 16px; }
+.registry-tabs-row .segmented-tabs { flex: 0 0 auto; margin: 0; }
+.registry-tabs-row .segmented-tabs button { font-size: 11px; }
+.registry-tabs-row .segmented-tabs button span { min-width: 20px; margin-left: 4px; padding: 2px 6px; border-radius: 999px; color: #5b6a61; background: #e5eae5; font-size: 9px; }
+.registry-tabs-row .segmented-tabs button.active span { color: var(--forest); background: var(--mint); }
+.registry-tabs-row > p { max-width: 720px; margin: 0; color: var(--muted); font-size: 11px; line-height: 1.5; }
+.registry-toolbar { margin-bottom: 12px; display: flex; align-items: center; gap: 10px; }
+.registry-toolbar .search-field { position: relative; min-width: 230px; flex: 1 1 340px; }
+.registry-toolbar .search-field > span { position: absolute; z-index: 1; top: 11px; left: 12px; color: #849087; font-size: 14px; }
+.registry-toolbar .search-field input { padding-left: 34px; }
+.registry-filter-chips { display: flex; align-items: center; gap: 5px; }
+.registry-filter-chips button { min-height: 34px; padding: 7px 10px; border: 1px solid var(--line); border-radius: 999px; color: #58665e; background: white; font-size: 10px; font-weight: 750; }
+.registry-filter-chips button:hover, .registry-filter-chips button.active { color: var(--forest-dark); border-color: #a8c2b0; background: #eef6f0; }
+.registry-archived-toggle { margin-left: auto; display: flex; align-items: center; gap: 7px; color: var(--muted); font-size: 10px; white-space: nowrap; }
+.registry-archived-toggle input { width: 15px; min-height: 15px; accent-color: var(--forest); }
+.registry-resource-list { min-width: 0; border: 1px solid var(--line); border-radius: 13px; background: white; box-shadow: 0 4px 16px rgba(21,55,37,.035); overflow: hidden; }
+.registry-resource-list > .skeleton-card { min-height: 118px; border-radius: 0; border-bottom: 1px solid var(--line); }
+.registry-resource-row { min-width: 0; padding: 17px 18px; display: grid; grid-template-columns: 42px minmax(280px,1fr) 92px minmax(150px,190px) auto; align-items: center; gap: 14px; border-top: 1px solid #edf0ec; }
+.registry-resource-row:first-child { border-top: 0; }
+.registry-resource-row:hover { background: #fbfcfa; }
+.registry-resource-row .object-icon { width: 38px; height: 38px; font-size: 15px; }
+.registry-resource-main { min-width: 0; }
+.registry-resource-title { display: flex; flex-wrap: wrap; align-items: center; gap: 7px; }
+.registry-resource-title h3 { margin: 0; font: 720 15px/1.25 var(--sans); letter-spacing: -.015em; }
+.registry-owner-badge { padding: 3px 6px; border-radius: 999px; color: #5c4b83; background: #f0edfa; font-size: 8px; font-weight: 800; }
+.registry-resource-main > p { max-width: 720px; margin: 5px 0 8px; overflow: hidden; color: var(--muted); font-size: 11px; line-height: 1.45; text-overflow: ellipsis; white-space: nowrap; }
+.registry-resource-tags { display: flex; flex-wrap: wrap; gap: 5px; }
+.registry-resource-tags span { padding: 3px 6px; border-radius: 5px; color: #5c6961; background: #f0f3ef; font-size: 8px; font-weight: 700; }
+.registry-resource-relationship span, .registry-resource-relationship strong, .registry-resource-relationship small { display: block; }
+.registry-resource-relationship span { color: var(--muted); font-size: 8px; text-transform: uppercase; }
+.registry-resource-relationship strong { margin-top: 3px; font-size: 15px; }
+.registry-resource-relationship small { color: var(--muted); font-size: 8px; }
+.registry-resource-state { min-width: 0; }
+.registry-status { width: fit-content; padding: 4px 8px; display: inline-flex; align-items: center; gap: 6px; border-radius: 999px; color: #526159; background: #edf1ed; font-size: 9px; font-weight: 800; }
+.registry-status i { width: 6px; height: 6px; border-radius: 50%; background: currentColor; }
+.registry-status.available { color: #2f6845; background: #eaf5ed; }
+.registry-status.paused { color: #896221; background: #fff3d8; }
+.registry-status.archived { color: #69736d; background: #ecefed; }
+.registry-resource-state small { margin-top: 6px; display: block; overflow: hidden; color: var(--muted); font-size: 9px; text-overflow: ellipsis; white-space: nowrap; }
+.registry-resource-row > button { justify-self: end; white-space: nowrap; }
+.registry-resource-list > .empty-product { border: 0; border-radius: 0; }
+
+.registry-detail-dialog { width: min(820px, calc(100% - 30px)); }
+.registry-detail-head h2 { margin-top: 2px; font-family: var(--sans); font-size: 21px; }
+.registry-detail-head p:last-child { max-width: 650px; font-size: 11px; line-height: 1.45; text-transform: none; }
+.registry-detail-body { padding: 20px 22px 24px; display: grid; gap: 13px; }
+.registry-detail-summary { display: grid; grid-template-columns: repeat(4,minmax(0,1fr)); gap: 8px; }
+.registry-detail-summary > div { min-width: 0; padding: 11px; border-radius: 9px; background: #f5f7f4; }
+.registry-detail-summary span, .registry-detail-summary strong { display: block; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.registry-detail-summary span { color: var(--muted); font-size: 8px; text-transform: uppercase; }
+.registry-detail-summary strong { margin-top: 5px; font-size: 10px; }
+.registry-detail-section { padding: 15px; border: 1px solid var(--line); border-radius: 11px; }
+.registry-section-heading { display: flex; align-items: flex-start; justify-content: space-between; gap: 14px; }
+.registry-section-heading h3 { margin: 0; font-size: 13px; }
+.registry-section-heading p { max-width: 580px; margin: 4px 0 0; color: var(--muted); font-size: 10px; line-height: 1.5; }
+.registry-section-heading button { flex: 0 0 auto; }
+.registry-placeholder { margin: 12px 0 0; padding: 11px; border-radius: 8px; color: var(--muted); background: #f7f8f6; font-size: 10px; }
+.registry-verification { margin-top: 12px; padding: 13px; border: 1px solid; border-radius: 9px; }
+.registry-verification.verified { color: #315f43; border-color: #c8ddcd; background: #f0f8f2; }
+.registry-verification.attention { color: #875e1f; border-color: #ead8aa; background: #fff9e9; }
+.registry-verification > div:first-child strong, .registry-verification > div:first-child span { display: block; }
+.registry-verification > div:first-child strong { font-size: 11px; }
+.registry-verification > div:first-child span { margin-top: 3px; font-size: 9px; }
+.registry-verification ul { margin: 11px 0 0; padding: 0; display: grid; grid-template-columns: 1fr 1fr; gap: 7px; list-style: none; }
+.registry-verification li { display: flex; align-items: center; gap: 7px; font-size: 9px; }
+.registry-verification li span { width: 18px; height: 18px; flex: 0 0 18px; display: grid; place-items: center; border-radius: 50%; color: #2f6845; background: #dceee1; font-size: 8px; font-weight: 900; }
+.registry-verification li.failed span { color: #9b512e; background: #ffe2cf; }
+.registry-verification-errors { margin-top: 10px; padding-top: 9px; border-top: 1px solid rgba(74,93,80,.14); }
+.registry-verification-errors p { margin: 3px 0; font-size: 9px; }
+.registry-probe-form { margin: 12px 0 10px; display: grid; grid-template-columns: 130px minmax(0,1fr); gap: 9px; }
+.registry-probe-form label { font-size: 9px; }
+.registry-probe-body { min-height: 88px; }
+.registry-count { min-width: 27px; padding: 5px 8px; border-radius: 999px; color: var(--forest); background: var(--mint); font-size: 10px; font-weight: 850; text-align: center; }
+.registry-dependency-list { margin: 12px 0 0; padding: 0; border: 1px solid var(--line); border-radius: 8px; list-style: none; overflow: hidden; }
+.registry-dependency-list li { padding: 9px 10px; display: grid; grid-template-columns: 70px minmax(0,1fr) auto; align-items: center; gap: 9px; border-top: 1px solid var(--line); }
+.registry-dependency-list li:first-child { border-top: 0; }
+.registry-dependency-list span, .registry-dependency-list small { color: var(--muted); font-size: 8px; }
+.registry-dependency-list strong { font-size: 9px; }
+.registry-lifecycle-section { border-color: #e4d7d3; background: #fffcfb; }
+.registry-lifecycle-actions { margin-top: 12px; display: flex; align-items: center; gap: 9px; }
+.danger-link { min-height: 38px; padding: 8px 12px; border: 1px solid #e4c6c2; border-radius: 8px; color: #973d36; background: #fff7f5; font-size: 10px; font-weight: 800; }
+.danger-link:hover { background: #ffefec; }
+.danger-link:disabled { cursor: not-allowed; opacity: .45; }
+.registry-blocked-copy { margin: 9px 0 0; color: #82645f; font-size: 9px; }
+.registry-archive-confirm { margin-top: 12px; padding: 12px; display: flex; align-items: center; justify-content: space-between; gap: 14px; border: 1px solid #e7c6c2; border-radius: 9px; background: #fff1ef; }
+.registry-archive-confirm strong { font-size: 11px; }
+.registry-archive-confirm p { margin: 4px 0 0; color: #7e4c47; font-size: 9px; }
+.registry-archive-confirm > div:last-child { flex: 0 0 auto; display: flex; gap: 7px; }
+button.danger { min-height: 38px; padding: 9px 13px; border-radius: 8px; color: white; background: #9f4039; font-size: 10px; font-weight: 800; }
+button.danger:hover { background: #84332e; }
+
+.registry-wizard { width: min(900px, calc(100% - 28px)); overflow: hidden; }
+.registry-wizard .detail-head { position: static; }
+.registry-wizard .detail-head h2 { font-family: var(--sans); font-size: 21px; }
+.registry-wizard .detail-head p:last-child { font-size: 11px; text-transform: none; }
+.registry-wizard-steps { margin: 0; padding: 0 22px; display: grid; grid-template-columns: repeat(3,1fr); border-bottom: 1px solid var(--line); background: #fafbf9; list-style: none; }
+.registry-wizard-steps li { position: relative; padding: 13px 8px; display: flex; align-items: center; gap: 7px; color: #7d8981; border-bottom: 2px solid transparent; font-size: 10px; font-weight: 750; }
+.registry-wizard-steps li.current { color: var(--forest-dark); border-bottom-color: var(--forest); }
+.registry-wizard-steps li.complete { color: #47715a; }
+.registry-wizard-steps li span { width: 22px; height: 22px; display: grid; place-items: center; border-radius: 50%; color: inherit; background: #edf1ed; font-size: 9px; }
+.registry-wizard-steps li.current span { color: white; background: var(--forest); }
+.registry-wizard .editor-form { padding: 0; gap: 0; }
+.registry-wizard-content { min-height: 470px; max-height: calc(100vh - 255px); padding: 22px; overflow-y: auto; }
+.registry-step-heading { margin-bottom: 16px; }
+.registry-step-heading h3 { margin: 0; font-size: 17px; }
+.registry-step-heading p { margin: 5px 0 0; color: var(--muted); font-size: 11px; line-height: 1.5; }
+.registry-purpose-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 9px; }
+.registry-purpose-grid > button { padding: 14px; display: grid; grid-template-columns: 38px minmax(0,1fr); gap: 11px; border: 1px solid var(--line); border-radius: 10px; color: var(--ink); background: white; text-align: left; }
+.registry-purpose-grid > button:hover { border-color: #9db4a5; background: #fbfdfb; }
+.registry-purpose-grid > button.selected { border-color: #6e9f80; background: #f0f7f2; box-shadow: 0 0 0 2px rgba(63,127,87,.1); }
+.registry-purpose-grid i { width: 38px; height: 38px; display: grid; place-items: center; border-radius: 9px; color: var(--forest); background: var(--mint); font-style: normal; font-size: 16px; }
+.registry-purpose-grid strong, .registry-purpose-grid small, .registry-purpose-grid em { display: block; }
+.registry-purpose-grid strong { font-size: 12px; }
+.registry-purpose-grid small { margin-top: 4px; color: var(--muted); font-size: 10px; line-height: 1.4; }
+.registry-purpose-grid em { width: fit-content; margin-top: 8px; padding: 3px 6px; border-radius: 5px; color: #4f6256; background: #eef2ee; font-size: 8px; font-style: normal; font-weight: 750; }
+.registry-identity-fields { margin-top: 16px; }
+.registry-form label { font-size: 10px; }
+.registry-form label > small { margin-top: 5px; display: block; color: var(--muted); font-size: 9px; font-weight: 500; line-height: 1.4; }
+.registry-form input, .registry-form select, .registry-form textarea:not(.code-input) { margin-top: 5px; font-size: 11px; }
+.registry-action-boundary { color: #7e4740; border-color: #e6cbc7; background: #fff3f1; }
+.registry-action-boundary strong { color: #8b3731; }
+.registry-advanced { margin-top: 14px; padding: 11px 13px; border: 1px solid var(--line); border-radius: 9px; background: #fafbf9; }
+.registry-advanced summary { color: #41544a; cursor: pointer; font-size: 10px; font-weight: 800; }
+.registry-advanced > p { margin: 8px 0 12px; color: var(--muted); font-size: 9px; }
+.registry-review { display: grid; gap: 14px; }
+.registry-review dl { margin: 0; border: 1px solid var(--line); border-radius: 10px; overflow: hidden; }
+.registry-review dl > div { padding: 12px 14px; display: grid; grid-template-columns: 150px minmax(0,1fr); gap: 12px; border-top: 1px solid var(--line); }
+.registry-review dl > div:first-child { border-top: 0; }
+.registry-review dt { color: var(--muted); font-size: 9px; }
+.registry-review dd { margin: 0; overflow-wrap: anywhere; font-size: 10px; font-weight: 750; text-transform: capitalize; }
+.registry-review-note { padding: 14px; border-radius: 10px; color: #315640; background: #eff7f1; }
+.registry-review-note strong { font-size: 11px; }
+.registry-review-note p { margin: 5px 0 0; font-size: 10px; line-height: 1.55; }
+.registry-secret-next { padding: 14px; border: 1px solid #d9d4e8; border-radius: 10px; color: #4f4969; background: #f7f5fc; }
+.registry-secret-next strong { font-size: 11px; }
+.registry-secret-next p { margin: 5px 0 9px; font-size: 10px; line-height: 1.5; }
+.registry-secret-next code { padding: 8px 10px; display: block; overflow-x: auto; border-radius: 7px; color: #35304c; background: white; font: 9px/1.5 ui-monospace, SFMono-Regular, Menlo, monospace; }
+.registry-wizard-footer { min-height: 70px; padding: 13px 22px; }
+.registry-wizard-footer .error { max-width: 500px; }
+
+@media (max-width: 980px) {
+  .registry-model { grid-template-columns: 1fr 1fr; }
+  .registry-model > b { display: none; }
+  .registry-toolbar { align-items: stretch; flex-wrap: wrap; }
+  .registry-toolbar .search-field { flex-basis: 100%; }
+  .registry-resource-row { grid-template-columns: 42px minmax(0,1fr) 90px auto; }
+  .registry-resource-relationship { display: none; }
+}
+
+@media (max-width: 700px) {
+  .registry-model { grid-template-columns: 1fr; }
+  .registry-tabs-row { align-items: flex-start; flex-direction: column; }
+  .registry-filter-chips { width: 100%; overflow-x: auto; }
+  .registry-archived-toggle { margin-left: 0; }
+  .registry-resource-row { grid-template-columns: 38px minmax(0,1fr); align-items: start; }
+  .registry-resource-state { grid-column: 2; }
+  .registry-resource-row > button { width: 100%; grid-column: 2; justify-self: stretch; }
+  .registry-detail-summary { grid-template-columns: 1fr 1fr; }
+  .registry-section-heading { flex-direction: column; }
+  .registry-section-heading button { width: 100%; }
+  .registry-verification ul { grid-template-columns: 1fr; }
+  .registry-archive-confirm { align-items: stretch; flex-direction: column; }
+  .registry-purpose-grid { grid-template-columns: 1fr; }
+  .registry-wizard-content { min-height: 0; }
+}
+
+@media (max-width: 460px) {
+  .registry-detail-dialog, .registry-wizard { width: 100%; max-height: 100vh; margin: 0; border: 0; border-radius: 0; }
+  .registry-wizard-steps { padding-inline: 10px; }
+  .registry-wizard-steps li { padding-inline: 4px; font-size: 9px; }
+  .registry-wizard-content, .registry-detail-body { padding: 14px; }
+  .registry-detail-summary { grid-template-columns: 1fr; }
+  .registry-probe-form, .registry-review dl > div { grid-template-columns: 1fr; }
+  .registry-lifecycle-actions, .registry-archive-confirm > div:last-child { align-items: stretch; flex-direction: column; }
+  .registry-lifecycle-actions button, .registry-archive-confirm button { width: 100%; }
+  .registry-form .form-grid { grid-template-columns: 1fr; }
+  .registry-form .wide-field { grid-column: 1; }
+  .registry-wizard-footer { align-items: stretch; flex-direction: column; }
+  .registry-wizard-footer > div { width: 100%; display: grid; grid-template-columns: 1fr 1fr; }
+  .registry-wizard-footer button { width: 100%; }
+}

package/template/src/component-executor.ts

@@ -281,10 +281,12 @@ export async function loadWorkflowExecutionContext(env: Env, runId: string, bran
     WHERE wr.id = ?1 LIMIT 1
   `).bind(runId).first<RunContextRow>();
   if (!row) throw new ComponentExecutionError("component_report_context_missing", false);
-  const [targetResult, answersResult, stepsResult, findingsResult] = await Promise.all([
+  const [targetResult, reporterResult, answersResult, stepsResult, findingsResult] = await Promise.all([
     env.DB.prepare(`SELECT target_type, target_reference, owner_reference, customer_url, signed_facts_json FROM report_targets WHERE report_id = ?1 ORDER BY created_at, id LIMIT 50`).bind(row.reportId).all<{
       target_type: string; target_reference: string; owner_reference: string | null; customer_url: string | null; signed_facts_json: string;
     }>(),
+    env.DB.prepare(`SELECT reference FROM report_participants WHERE report_id = ?1 AND audience = 'reporter' ORDER BY created_at, id LIMIT 1`)
+      .bind(row.reportId).first<{ reference: string | null }>(),
     env.DB.prepare(`SELECT field_key, value_json FROM report_answers WHERE report_id = ?1 ORDER BY field_key LIMIT 200`).bind(row.reportId).all<{ field_key: string; value_json: string }>(),
     env.DB.prepare(`
       SELECT s.node_id, o.inline_json FROM workflow_step_runs s
@@ -327,6 +329,7 @@ export async function loadWorkflowExecutionContext(env: Env, runId: string, bran
       routing_rule_version_id: row.routingRuleVersionId,
     },
     queue: { id: row.queueId, version_id: row.queueVersionId },
+    reporter: { reference: reporterResult?.reference ?? null },
     target: targets[0] ?? null,
     targets,
     answers,

package/template/src/platform-registry.ts

@@ -94,7 +94,9 @@ export async function listConnections(db: D1Database, includeArchived = false):
       v.credential_strategy AS credentialStrategy, v.published_at AS publishedAt,
       h.state AS healthState, h.last_success_at AS lastSuccessAt,
       h.last_error_code AS lastErrorCode,
-      (SELECT COUNT(*) FROM component_versions cv WHERE cv.connection_version_id = v.id) AS dependencyCount
+      (SELECT COUNT(*) FROM component_versions cv
+       JOIN component_definitions cd ON cd.id = cv.definition_id
+       WHERE cv.connection_version_id = v.id AND cv.retired_at IS NULL AND cd.status != 'archived') AS dependencyCount
     FROM connection_definitions d
     LEFT JOIN connection_versions v ON v.id = d.active_version_id
     LEFT JOIN connection_health h ON h.connection_version_id = v.id
@@ -178,8 +180,10 @@ export async function updateConnectionDefinition(
   }
   if (status === "archived") {
     const dependency = await db.prepare(`
-      SELECT COUNT(*) AS count FROM component_versions cv JOIN connection_versions v ON v.id = cv.connection_version_id
-      WHERE v.connection_id = ?1 AND cv.retired_at IS NULL
+      SELECT COUNT(*) AS count FROM component_versions cv
+      JOIN component_definitions d ON d.id = cv.definition_id
+      JOIN connection_versions v ON v.id = cv.connection_version_id
+      WHERE v.connection_id = ?1 AND cv.retired_at IS NULL AND d.status != 'archived'
     `).bind(connectionId).first<{ count: number }>();
     if (Number(dependency?.count ?? 0) > 0) throw new ApiError(409, "connection_has_dependencies", "Retire dependent component versions before archiving this connection.");
   }
@@ -312,7 +316,7 @@ export async function connectionDependencies(db: D1Database, connectionId: strin
       SELECT d.id AS componentId, d.name, v.id AS componentVersionId, v.version
       FROM component_versions v JOIN component_definitions d ON d.id = v.definition_id
       JOIN connection_versions cv ON cv.id = v.connection_version_id
-      WHERE cv.connection_id = ?1 AND v.retired_at IS NULL ORDER BY d.name, v.version DESC
+      WHERE cv.connection_id = ?1 AND v.retired_at IS NULL AND d.status != 'archived' ORDER BY d.name, v.version DESC
     `).bind(connectionId).all<Record<string, unknown>>(),
     db.prepare(`
       SELECT DISTINCT d.id AS workflowId, d.name, wv.id AS workflowVersionId, wv.version
@@ -320,7 +324,7 @@ export async function connectionDependencies(db: D1Database, connectionId: strin
       JOIN workflow_versions wv ON wv.id = dep.workflow_version_id
       JOIN workflow_definitions d ON d.id = wv.workflow_id
       JOIN connection_versions cv ON cv.id = dep.dependency_version_id
-      WHERE dep.dependency_type = 'connection' AND cv.connection_id = ?1
+      WHERE dep.dependency_type = 'connection' AND cv.connection_id = ?1 AND wv.retired_at IS NULL
       ORDER BY d.name, wv.version DESC
     `).bind(connectionId).all<Record<string, unknown>>(),
     db.prepare(`
@@ -538,8 +542,10 @@ export async function updateComponentDefinition(
   }
   if (status === "archived") {
     const dependency = await db.prepare(`
-      SELECT COUNT(*) AS count FROM workflow_dependencies dep JOIN component_versions v ON v.id = dep.dependency_version_id
-      WHERE dep.dependency_type = 'component' AND v.definition_id = ?1
+      SELECT COUNT(*) AS count FROM workflow_dependencies dep
+      JOIN workflow_versions wv ON wv.id = dep.workflow_version_id
+      JOIN component_versions v ON v.id = dep.dependency_version_id
+      WHERE dep.dependency_type = 'component' AND v.definition_id = ?1 AND wv.retired_at IS NULL
     `).bind(componentId).first<{ count: number }>();
     if (Number(dependency?.count ?? 0) > 0) throw new ApiError(409, "component_has_dependencies", "Retire dependent workflow versions before archiving this component.");
   }
@@ -674,7 +680,7 @@ export async function componentDependencies(db: D1Database, componentId: string)
     JOIN workflow_versions wv ON wv.id = dep.workflow_version_id
     JOIN workflow_definitions d ON d.id = wv.workflow_id
     JOIN component_versions cv ON cv.id = dep.dependency_version_id
-    WHERE dep.dependency_type = 'component' AND cv.definition_id = ?1
+    WHERE dep.dependency_type = 'component' AND cv.definition_id = ?1 AND wv.retired_at IS NULL
     ORDER BY d.name, wv.version DESC
   `).bind(componentId).all<Record<string, unknown>>();
   return { workflows: workflows.results };
@@ -685,10 +691,13 @@ export async function validateComponentDefinition(db: D1Database, componentId: s
     SELECT d.status, d.effect_class AS effectClass, d.active_version_id AS activeVersionId,
       v.implementation_kind AS implementationKind, v.implementation_reference AS implementationReference,
       v.input_schema_json AS inputSchemaJson, v.output_schema_json AS outputSchemaJson,
-      v.connection_version_id AS connectionVersionId,
+      v.connection_version_id AS connectionVersionId, cd.status AS connectionStatus,
+      cv.retired_at AS connectionRetiredAt,
       (SELECT COUNT(*) FROM component_fixtures f WHERE f.component_version_id = v.id) AS fixtureCount,
       (SELECT COUNT(*) FROM component_test_runs t WHERE t.component_version_id = v.id AND t.status = 'passed') AS passingTestCount
     FROM component_definitions d LEFT JOIN component_versions v ON v.id = d.active_version_id
+    LEFT JOIN connection_versions cv ON cv.id = v.connection_version_id
+    LEFT JOIN connection_definitions cd ON cd.id = cv.connection_id
     WHERE d.id = ?1 LIMIT 1
   `).bind(componentId).first<Record<string, unknown>>();
   if (!row) throw new ApiError(404, "component_not_found", "The component does not exist.");
@@ -697,6 +706,7 @@ export async function validateComponentDefinition(db: D1Database, componentId: s
   if (!parsedJson(String(row.inputSchemaJson ?? ""), null)) errors.push("input_schema_invalid");
   if (!parsedJson(String(row.outputSchemaJson ?? ""), null)) errors.push("output_schema_invalid");
   if (["webhook", "external_api"].includes(String(row.implementationKind)) && !row.connectionVersionId) errors.push("connection_version_missing");
+  if (row.connectionVersionId && (row.connectionStatus !== "active" || row.connectionRetiredAt)) errors.push("connection_version_unavailable");
   if (Number(row.fixtureCount ?? 0) < 1) errors.push("fixture_missing");
   if (Number(row.passingTestCount ?? 0) < 1) errors.push("passing_test_missing");
   return { valid: errors.length === 0, errors, ...row };

package/template/src/report-email-inbound.ts

@@ -101,7 +101,8 @@ export async function receiveReporterEmail(
     return { reportId: null, stored: false };
   }
   const report = await env.DB.prepare(`
-    SELECT r.id, r.state, p.id AS participantId, p.contact_ciphertext AS contactCiphertext
+    SELECT r.id, r.state, p.id AS participantId, p.contact_ciphertext AS contactCiphertext,
+      p.audience AS audience
     FROM reports r
     JOIN report_participants p ON p.report_id = r.id AND p.audience = ?2
     WHERE r.public_reference = ?1
@@ -111,9 +112,15 @@ export async function receiveReporterEmail(
     await recordUnmatchedEmail(env.DB, message, "report_or_reporter_contact_missing");
     return { reportId: null, stored: false };
   }
-  const expectedSender = (await decryptReportContact(
-    env.CREDENTIAL_ENCRYPTION_KEY, report.contactCiphertext, report.id, report.audience,
-  )).trim().toLowerCase();
+  let expectedSender: string;
+  try {
+    expectedSender = (await decryptReportContact(
+      env.CREDENTIAL_ENCRYPTION_KEY, report.contactCiphertext, report.id, report.audience,
+    )).trim().toLowerCase();
+  } catch {
+    await recordUnmatchedEmail(env.DB, message, "reporter_contact_unreadable");
+    return { reportId: report.id, stored: false };
+  }
   if (!await secretsEqual(message.from.trim().toLowerCase(), expectedSender)) {
     await recordUnmatchedEmail(env.DB, message, "sender_mismatch");
     return { reportId: null, stored: false };

package/template/src/report-email.ts

@@ -67,7 +67,8 @@ export function reporterEmailConfigured(env: unknown): boolean {
 export type CaseReplyAudience = "reporter" | "affected_user";
 
 const legacyReplyTokenPattern = /^r1\.([a-z0-9_-]{16})\.([0-9a-f]{8})\.([0-9a-f]{24})$/u;
-const replyTokenPattern = /^r2([ra])\.([a-z0-9_-]{16})\.([0-9a-f]{8})\.([0-9a-f]{24})$/u;
+const replyTokenPattern = /^r([ra])\.([a-z0-9_-]{16})\.([0-9a-f]{8})\.([0-9a-f]{24})$/u;
+const transitionalReplyTokenPattern = /^r2([ra])\.([a-z0-9_-]{16})\.([0-9a-f]{8})\.([0-9a-f]{24})$/u;
 const encoder = new TextEncoder();
 
 function hex(bytes: Uint8Array): string {
@@ -98,7 +99,7 @@ export async function reporterReplyToken(input: {
   const expiry = input.expiresAt.toString(16).padStart(8, "0");
   if (!/^[0-9a-f]{8}$/u.test(expiry)) throw new Error("The reporter reply expiry is outside the supported range.");
   const audience = input.audience === "affected_user" ? "a" : "r";
-  const payload = `r2${audience}.${reference}.${expiry}`;
+  const payload = `r${audience}.${reference}.${expiry}`;
   return `${payload}.${hex(await replySignature(input.signingSecret, payload))}`;
 }
 
@@ -108,21 +109,23 @@ export async function verifyReporterReplyToken(
   currentTime = Math.floor(Date.now() / 1_000),
 ): Promise<{ publicReference: string; expiresAt: number; audience: CaseReplyAudience } | null> {
   const current = replyTokenPattern.exec(token);
-  const legacy = current ? null : legacyReplyTokenPattern.exec(token);
-  if (!current && !legacy) return null;
-  const reference = current?.[2] ?? legacy?.[1] ?? "";
-  const expiryHex = current?.[3] ?? legacy?.[2] ?? "";
-  const signatureHex = current?.[4] ?? legacy?.[3] ?? "";
+  const transitional = current ? null : transitionalReplyTokenPattern.exec(token);
+  const legacy = current || transitional ? null : legacyReplyTokenPattern.exec(token);
+  if (!current && !transitional && !legacy) return null;
+  const reference = current?.[2] ?? transitional?.[2] ?? legacy?.[1] ?? "";
+  const expiryHex = current?.[3] ?? transitional?.[3] ?? legacy?.[2] ?? "";
+  const signatureHex = current?.[4] ?? transitional?.[4] ?? legacy?.[3] ?? "";
   const expiry = Number.parseInt(expiryHex, 16);
   const supplied = Uint8Array.from(signatureHex.match(/.{2}/gu) ?? [], (pair) => Number.parseInt(pair, 16));
   if (!expiry || expiry <= currentTime) return null;
-  const payload = current ? `r2${current[1]}.${reference}.${expiryHex}` : `r1.${reference}.${expiryHex}`;
+  const payload = current ? `r${current[1]}.${reference}.${expiryHex}`
+    : transitional ? `r2${transitional[1]}.${reference}.${expiryHex}` : `r1.${reference}.${expiryHex}`;
   const expected = await replySignature(signingSecret, payload);
   if (!constantTimeEqual(supplied, expected)) return null;
   return {
     publicReference: `RPT-${reference.toUpperCase()}`,
     expiresAt: expiry,
-    audience: current?.[1] === "a" ? "affected_user" : "reporter",
+    audience: (current?.[1] ?? transitional?.[1]) === "a" ? "affected_user" : "reporter",
   };
 }
 

package/template/src/report-repository.ts

@@ -79,6 +79,7 @@ interface RoutingJobRow {
   customer_url: string | null;
   public_reference: string;
   installation_id: string;
+  reporter_reference: string | null;
 }
 
 interface QueueRoutingRow {
@@ -649,7 +650,10 @@ export async function processRoutingJob(
     SELECT j.id, j.report_id, j.state, r.reason_code, r.source, r.form_version_id,
            r.installation_id, r.public_reference,
            t.target_type, t.target_reference, t.owner_reference, t.customer_url,
-           t.routing_facts_json AS trusted_facts_json, r.state AS report_state
+           t.routing_facts_json AS trusted_facts_json, r.state AS report_state,
+           (SELECT p.reference FROM report_participants p
+             WHERE p.report_id = r.id AND p.audience = 'reporter'
+             ORDER BY p.created_at, p.id LIMIT 1) AS reporter_reference
     FROM background_jobs j
     JOIN reports r ON r.id = j.report_id
     JOIN report_targets t ON t.report_id = r.id
@@ -716,6 +720,7 @@ export async function processRoutingJob(
           id: job.report_id, public_reference: job.public_reference, reason_code: job.reason_code,
           source: job.source, target_type: job.target_type, priority: 50,
         },
+        reporter: { reference: job.reporter_reference },
         target: {
           type: job.target_type, reference: job.target_reference,
           owner_reference: job.owner_reference, customer_url: job.customer_url,