okstra 0.170.3 → 0.172.0

package/runtime/templates/reports/report.js

@@ -44,33 +44,37 @@
     return String(s == null ? "" : s).replace(/^\s+|\s+$/g, "");
   }
 
-  // Read the user-supplied value out of one clarification row. Returns
-  // the empty string when the row has no usable widget, the widget is
-  // disabled, the select sits on its blank "(선택)" placeholder, or the
-  // "기타" branch has an empty input. Caller decides whether to emit
-  // an entry.
-  function readRowValue(row) {
+  // Read the user-supplied value and decision effect from one clarification
+  // row. Returns null when the row has no usable input.
+  function readRowInput(row) {
     var sel = row.querySelector("select[data-response-id]");
     if (sel) {
-      if (sel.disabled) return "";
+      if (sel.disabled) return null;
       var picked = sel.value;
-      if (picked === "") return "";
+      if (picked === "") return null;
       if (picked === "__other__") {
         var rid = sel.getAttribute("data-response-id") || "";
         var other = row.querySelector('textarea[data-other-for="' + rid + '"]');
-        return other ? trimMultiline(other.value) : "";
+        if (other) {
+          var otherValue = trimMultiline(other.value);
+          return otherValue ? { value: otherValue, disposition: "answer" } : null;
+        }
       }
       var opt = sel.options[sel.selectedIndex];
       // Use the visible option text ("(a) one-time backfill") so the
       // user-response sidecar stays human-readable, not just "a".
-      return opt ? trimMultiline(opt.textContent) : picked;
+      return {
+        value: opt ? trimMultiline(opt.textContent) : picked,
+        disposition: opt ? (opt.getAttribute("data-disposition") || "answer") : "answer",
+      };
     }
     var ta = row.querySelector("textarea[data-response-id]");
     if (ta) {
-      if (ta.disabled) return "";
-      return trimMultiline(ta.value);
+      if (ta.disabled) return null;
+      var value = trimMultiline(ta.value);
+      return value ? { value: value, disposition: "answer" } : null;
     }
-    return "";
+    return null;
   }
 
   function collectEntries() {
@@ -84,13 +88,14 @@
     );
     for (var i = 0; i < rows.length; i++) {
       var row = rows[i];
-      var value = readRowValue(row);
-      if (!value) continue;
+      var input = readRowInput(row);
+      if (!input) continue;
       entries.push({
         responseId: row.getAttribute("data-response-id") || "",
         kind: row.getAttribute("data-kind") || "",
-        value: value,
+        value: input.value,
         rationale: null,
+        disposition: input.disposition,
       });
     }
     return entries;
@@ -460,11 +465,15 @@
   // globalThis (works under ESM where the parent uses `vm.runInThisContext`
   // — see tests/test_report_views.py for the byte-identity harness).
   if (typeof module !== "undefined" && module.exports) {
-    module.exports = { buildUserResponseMarkdown: buildUserResponseMarkdown };
+    module.exports = {
+      buildUserResponseMarkdown: buildUserResponseMarkdown,
+      collectEntries: collectEntries,
+    };
   }
   if (typeof globalThis !== "undefined") {
     globalThis.__okstraReportViewExports__ = {
       buildUserResponseMarkdown: buildUserResponseMarkdown,
+      collectEntries: collectEntries,
     };
   }
 })();

package/runtime/templates/reports/user-response.template.md

@@ -25,12 +25,14 @@ The schema of each response block:
 ```markdown
 ## <Response ID>
 - Kind: <material | decision | data-point>
-- Disposition: <answer | reframe>   # omit the line when answer (default). reframe = defer the answer + re-ask (row stays unresolved)
+- Disposition: <answer | reframe | select | accept-risk | request-revision | reject>   # omit the line when answer (default)
 - Value:
   > <multi-line value, trimmed>
 - Rationale: <optional one-line rationale>
 ```
 
+`answer`, `select`, `accept-risk`, `request-revision`, and `reject` count as user answers when `Value` is non-empty. `reframe` alone does not count as an answer; it defers the answer and asks the next run to present the row again.
+
 An empty response set (when the user presses Export without filling in any row) outputs the following single line in the body:
 
 ```markdown

package/runtime/templates/worker-prompt-preamble.md

@@ -21,6 +21,14 @@ When `**Evidence ledger:** required-v1` is present, append one canonical row to
 
 Every file citation in the result MUST use backticks, a line suffix, and the same project-relative path its ledger row carries — for example `src/config/env.ts:1-22`. A bare filename (`env.ts:1-22`) does not match its row and fails exactly like a file you never opened, however many times you cited the full path earlier. A cited path without a matching ledger row fails Phase 7 in `validators/validate-run.py` `validate_worker_results_audit()`. Do not add a row for a file you did not open.
 
+## Evidence command ledger
+
+Append one canonical JSON row to the audit sidecar for each command that produced or verified a conclusion:
+
+- Evidence command: {"command":"npm run check","cwd":"<project-root>","exitCode":0,"outputSummary":"all checks passed"}
+
+Do not record commands used only to explore, including `rg`, `ls`, and file-opening commands. Do not record environment variable values, tokens, credentials, or authorization headers. `okstra worker-audit-check` rejects malformed command rows and rows containing potential sensitive material through `okstra_ctl.worker_audit_ledger`.
+
 ## Anchor headers (lead-injected, BLOCKING)
 
 Every initial analysis prompt begins with these generated anchors in this exact order, before any other content: