primitive-admin 1.0.62 → 1.0.64

package/dist/src/lib/local-state.d.ts

@@ -3,7 +3,7 @@
  *
  * `primitive env use` records which environment THIS machine is pointed at.
  * That is not a team decision, so it must not land in the committed
- * `.primitive/config.json` — `defaultEnvironment` stays the team default a
+ * `primitive/config.json` — `defaultEnvironment` stays the team default a
  * fresh clone resolves. The file sits beside `credentials.json`, which has the
  * same "local, never committed" property.
  *

package/dist/src/lib/local-state.js

@@ -3,7 +3,7 @@
  *
  * `primitive env use` records which environment THIS machine is pointed at.
  * That is not a team decision, so it must not land in the committed
- * `.primitive/config.json` — `defaultEnvironment` stays the team default a
+ * `primitive/config.json` — `defaultEnvironment` stays the team default a
  * fresh clone resolves. The file sits beside `credentials.json`, which has the
  * same "local, never committed" property.
  *

package/dist/src/lib/local-test-cases.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The case files on disk that the server has never been told about (#3061).
+ *
+ * A `<key>.tests/*.toml` sidecar is authored locally and becomes runnable only
+ * when `config push` registers it. The test verbs run the REGISTERED set, so a
+ * file nobody pushed contributes nothing to `Total Tests` — and until this
+ * module existed, nothing to the output either. `Total Tests: 3 / Failed: 0`
+ * beside four case files is a pass standing in for work that did not happen,
+ * and is indistinguishable from a case that genuinely ran.
+ *
+ * Naming those files is only useful if the naming is never wrong, so pairing
+ * here mirrors what push pairs with:
+ *   1. the sync manifest, which maps a file to the live case it manages even
+ *      when the file has since been renamed;
+ *   2. the file name pull would give the case — its committed key, or the slug
+ *      of an unkeyed case's name (web-admin, an older CLI or the raw API),
+ *      collision suffixes included — from the one shared naming rule in
+ *      `test-case-file-names.ts`.
+ * Both passes CLAIM: one live case accounts for one file, the way pull assigns
+ * one file per case and push's adoption pass pairs. Matching a name loosely
+ * instead would let a single registered "foo" excuse both `foo.toml` and a
+ * newly authored `foo-2.toml`, which is the silence this issue is about.
+ * Anything left over is a file no live case accounts for. The bias is toward
+ * silence: a pairing this module cannot make is a warning it does not print.
+ *
+ * Reads only — the scan never registers anything. `config push` stays the one
+ * verb that mutates the server, which is what the warning tells the user.
+ */
+/** What one suite's sidecar directory holds, against what is registered. */
+export interface LocalTestCaseScan {
+    /** Every `*.toml` case file in the directory, basename order. */
+    localFiles: string[];
+    /** The subset no registered case accounts for, basename order. */
+    unregistered: string[];
+}
+/** The sync-state baseline rows that map a sidecar to a live case. */
+export type ManagedTestCases = Record<string, {
+    id?: string;
+} | undefined>;
+/** Read the manifest's test-case rows, or nothing when it cannot be read. */
+export declare function readManagedTestCases(configDir: string): ManagedTestCases;
+/**
+ * The `*.toml` case files in a suite's sidecar directory, if it has one.
+ *
+ * An empty array means the directory is absent or holds no case file. A
+ * directory that cannot be READ throws instead of reporting nothing: this whole
+ * issue is about a silence indistinguishable from having no work, and callers
+ * turn the throw into a diagnostic that names the directory.
+ */
+export declare function listLocalTestCaseFiles(testsDir: string): string[];
+/**
+ * Which of a suite's local case files no registered case accounts for.
+ *
+ * `managedPrefix` is the manifest's namespace for this block —
+ * `<blockType>/<blockKey>` — so a row that maps `foo.toml` to a live case is
+ * read only for the block that owns it.
+ */
+export declare function scanLocalTestCases(params: {
+    testsDir: string;
+    registered: any[];
+    managed?: ManagedTestCases;
+    managedPrefix?: string;
+}): LocalTestCaseScan;

package/dist/src/lib/local-test-cases.js

@@ -0,0 +1,136 @@
+/**
+ * The case files on disk that the server has never been told about (#3061).
+ *
+ * A `<key>.tests/*.toml` sidecar is authored locally and becomes runnable only
+ * when `config push` registers it. The test verbs run the REGISTERED set, so a
+ * file nobody pushed contributes nothing to `Total Tests` — and until this
+ * module existed, nothing to the output either. `Total Tests: 3 / Failed: 0`
+ * beside four case files is a pass standing in for work that did not happen,
+ * and is indistinguishable from a case that genuinely ran.
+ *
+ * Naming those files is only useful if the naming is never wrong, so pairing
+ * here mirrors what push pairs with:
+ *   1. the sync manifest, which maps a file to the live case it manages even
+ *      when the file has since been renamed;
+ *   2. the file name pull would give the case — its committed key, or the slug
+ *      of an unkeyed case's name (web-admin, an older CLI or the raw API),
+ *      collision suffixes included — from the one shared naming rule in
+ *      `test-case-file-names.ts`.
+ * Both passes CLAIM: one live case accounts for one file, the way pull assigns
+ * one file per case and push's adoption pass pairs. Matching a name loosely
+ * instead would let a single registered "foo" excuse both `foo.toml` and a
+ * newly authored `foo-2.toml`, which is the silence this issue is about.
+ * Anything left over is a file no live case accounts for. The bias is toward
+ * silence: a pairing this module cannot make is a warning it does not print.
+ *
+ * Reads only — the scan never registers anything. `config push` stays the one
+ * verb that mutates the server, which is what the warning tells the user.
+ */
+import { existsSync, readFileSync, readdirSync, statSync } from "fs";
+import { basename, join } from "path";
+import { testCaseFileBasenames } from "./test-case-file-names.js";
+import { normalizeTestCaseKey } from "./test-case-keys.js";
+import { syncStateReadPath } from "./sync-paths.js";
+/** Read the manifest's test-case rows, or nothing when it cannot be read. */
+export function readManagedTestCases(configDir) {
+    const syncFile = syncStateReadPath(configDir);
+    if (!existsSync(syncFile))
+        return {};
+    try {
+        const state = JSON.parse(readFileSync(syncFile, "utf-8"));
+        const managed = state?.entities?.testCases;
+        return managed && typeof managed === "object" ? managed : {};
+    }
+    catch {
+        // A manifest we cannot parse is a manifest we cannot pair with; the key and
+        // name passes still speak, and an unpairable file is left unnamed.
+        return {};
+    }
+}
+/**
+ * The `*.toml` case files in a suite's sidecar directory, if it has one.
+ *
+ * An empty array means the directory is absent or holds no case file. A
+ * directory that cannot be READ throws instead of reporting nothing: this whole
+ * issue is about a silence indistinguishable from having no work, and callers
+ * turn the throw into a diagnostic that names the directory.
+ */
+export function listLocalTestCaseFiles(testsDir) {
+    if (!existsSync(testsDir))
+        return [];
+    if (!statSync(testsDir).isDirectory())
+        return [];
+    return readdirSync(testsDir)
+        .filter((entry) => entry.endsWith(".toml"))
+        .filter((entry) => {
+        // Attachment folders live beside the cases (`<case>/`); only files are
+        // cases, and a directory named `x.toml` is neither.
+        try {
+            return statSync(join(testsDir, entry)).isFile();
+        }
+        catch (err) {
+            // Gone between the listing and the stat is gone — anything else is a
+            // directory we cannot read, which the caller has to hear about.
+            if (err?.code === "ENOENT")
+                return false;
+            throw err;
+        }
+    })
+        .sort();
+}
+/**
+ * Which of a suite's local case files no registered case accounts for.
+ *
+ * `managedPrefix` is the manifest's namespace for this block —
+ * `<blockType>/<blockKey>` — so a row that maps `foo.toml` to a live case is
+ * read only for the block that owns it.
+ */
+export function scanLocalTestCases(params) {
+    const localFiles = listLocalTestCaseFiles(params.testsDir);
+    if (localFiles.length === 0)
+        return { localFiles, unregistered: [] };
+    const registered = (params.registered ?? []).filter((live) => live && typeof live === "object");
+    // The file each live case belongs in, allocated exactly as pull allocates it:
+    // keys claim theirs first, unkeyed names take what is left, and a collision
+    // suffix is assigned rather than accepted from any name that carries one.
+    const liveByFileName = new Map();
+    for (const [live, name] of testCaseFileBasenames(registered)) {
+        liveByFileName.set(normalizeTestCaseKey(name), live);
+    }
+    const liveById = new Map();
+    for (const live of registered) {
+        if (typeof live.testCaseId === "string" && live.testCaseId) {
+            liveById.set(live.testCaseId, live);
+        }
+    }
+    const managedLiveFor = (slug) => {
+        if (!params.managedPrefix)
+            return undefined;
+        const id = params.managed?.[`${params.managedPrefix}/${slug}`]?.id;
+        return id ? liveById.get(id) : undefined;
+    };
+    // A live case accounts for ONE file. Claiming is what keeps a single
+    // registered "foo" from excusing `foo.toml` and `foo-2.toml` alike.
+    const claimed = new Set();
+    const unclaimed = [];
+    // The manifest states identity outright, so it is read first: a file renamed
+    // since it was pulled keeps its case even where the naming rules would hand
+    // that case to the file still sitting under its old name.
+    for (const file of localFiles) {
+        const live = managedLiveFor(basename(file, ".toml"));
+        if (live && !claimed.has(live)) {
+            claimed.add(live);
+            continue;
+        }
+        unclaimed.push(file);
+    }
+    const unregistered = unclaimed.filter((file) => {
+        const live = liveByFileName.get(normalizeTestCaseKey(basename(file, ".toml")));
+        if (!live || claimed.has(live))
+            return true;
+        claimed.add(live);
+        return false;
+    });
+    return { localFiles, unregistered };
+}
+//# sourceMappingURL=local-test-cases.js.map

package/dist/src/lib/local-test-cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-test-cases.js","sourceRoot":"","sources":["../../../src/lib/local-test-cases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAapD,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC3C,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,mEAAmE;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,WAAW,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,qEAAqE;YACrE,gEAAgE;YAChE,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACzC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAKlC;IACC,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAErE,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAC3C,CAAC;IAEF,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAe,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,cAAc,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,IAAY,EAAO,EAAE;QAC3C,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC,CAAC;IAEF,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAO,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,6EAA6E;IAC7E,4EAA4E;IAC5E,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACtC,CAAC"}

package/dist/src/lib/log-inspection.d.ts

@@ -40,8 +40,11 @@
  * Nothing here reaches the network; adapters are pure functions over records
  * the caller already fetched (one upstream call per command invocation).
  */
+import { type ListEnvelope } from "./paginate.js";
 /** The log store an entry came from. Workflow runs and steps are distinct. */
-export type LogSource = "integration" | "workflow-run" | "workflow-step" | "webhook" | "activity";
+export type LogSource = "integration" | "workflow-run" | "workflow-step" | "webhook" | "activity"
+/** A server function's invocation record — #3287. */
+ | "function-log";
 /**
  * Normalized outcome vocabulary (platform terms only):
  * - `ok`      — completed / accepted successfully
@@ -68,6 +71,14 @@ export interface Correlation {
     integrationKey?: string;
     webhookId?: string;
     workflowRunId?: string;
+    /**
+     * The function whose run made an outbound call — #3691.
+     *
+     * A pivot key like the rest: it is what `functions logs <function-id>` and
+     * `functions runs <function-id>` take, and it is not recoverable from the
+     * attributed `userId`, which is `sys:<appId>` for a call no human made.
+     */
+    functionId?: string;
     /** The acting user, where the source records one (workflow, activity). */
     userId?: string;
 }
@@ -86,8 +97,14 @@ interface BaseLogEntry {
 export interface IntegrationDetail {
     method?: string;
     path?: string;
-    /** The call source: user | admin | test | workflow. */
+    /** The call source: user | admin | test | workflow | function. */
     callSource?: string;
+    /**
+     * The key of the function that made the call — #3183 writes it on the row,
+     * #3691 surfaces it. Attribution an operator reads, filed beside
+     * `callSource` the way the `function-log` view files its own key.
+     */
+    functionKey?: string;
     requestBytes?: number;
     responseBytes?: number;
     errorCode?: string;
@@ -146,6 +163,41 @@ export interface WebhookDetail {
     payloadSummary?: string;
     processingDurationMs?: number;
 }
+/**
+ * One captured console line — #3287. The same `{ t, s, line }` shape the
+ * record stores, so a consumer reading the detail reads what was printed.
+ */
+export interface FunctionLogLine {
+    /** Milliseconds after the capture began. */
+    t: number;
+    /** `out` for log/info/debug/trace, `err` for warn/error. */
+    s: "out" | "err";
+    line: string;
+    /** Written at the bundle's module scope, before any invocation claimed it. */
+    m?: true;
+}
+/**
+ * A server function invocation, as an operator reads it — #3287.
+ *
+ * An allowlist like every other detail here: the correlation keys are on the
+ * envelope's `correlation`, and what is left is what the invocation DID.
+ */
+export interface FunctionLogDetail {
+    functionKey?: string;
+    configId?: string;
+    contentHash?: string;
+    /** `http`, `webhook`, `cron`, `database`, `workflow`, `function`. */
+    triggerKind?: string;
+    errorCode?: string;
+    errorMessage?: string;
+    errorStack?: string;
+    stdout?: FunctionLogLine[];
+    stderr?: FunctionLogLine[];
+    /** A line or the channel hit a cap. */
+    truncated?: boolean;
+    /** The drain found nothing — an evicted isolate, not an empty function. */
+    logsUnavailable?: boolean;
+}
 export interface ActivityDetail {
     action?: string;
     feature?: string;
@@ -183,11 +235,26 @@ export interface WebhookLogEntry extends BaseLogEntry {
 }
 export interface ActivityLogEntry extends BaseLogEntry {
     source: "activity";
-    /** Activity events carry no success/failure status. */
-    nativeStatus: null;
+    /**
+     * The activity row's own status, where the action records one.
+     *
+     * Almost no action does — an activity event is a COUNT, and reading one as
+     * a success or a failure would be fabricating a signal. `function.invoke`
+     * is the exception (#3287): the emit already carries the settled status in
+     * its context, so a failed invocation can be counted as a failure instead
+     * of reported as `neutral` (which is what it was, and what made the shared
+     * inspection contract unable to count failures at all).
+     */
+    nativeStatus: string | null;
     detail: ActivityDetail;
 }
-export type LogEntry = IntegrationLogEntry | WorkflowRunLogEntry | WorkflowStepLogEntry | WebhookLogEntry | ActivityLogEntry;
+export interface FunctionLogEntry extends BaseLogEntry {
+    source: "function-log";
+    /** `completed`, `failed`, `timeout`, or the platform's own refusal code. */
+    nativeStatus: string | null;
+    detail: FunctionLogDetail;
+}
+export type LogEntry = IntegrationLogEntry | WorkflowRunLogEntry | WorkflowStepLogEntry | WebhookLogEntry | ActivityLogEntry | FunctionLogEntry;
 export interface RawIntegrationLog {
     timestamp?: string;
     status?: number;
@@ -206,6 +273,9 @@ export interface RawIntegrationLog {
     workflowKey?: string;
     runId?: string;
     stepId?: string;
+    /** #3183/#3691 — which function made the call, on a function-path row. */
+    functionId?: string;
+    functionKey?: string;
 }
 export interface RawWorkflowRun {
     runId?: string;
@@ -270,6 +340,34 @@ export interface RawActivityRow {
     total_tokens?: number;
     [key: string]: unknown;
 }
+/** One invocation record, as the logs routes answer it — #3287. */
+export interface RawFunctionLog {
+    invocationId?: string;
+    functionId?: string;
+    functionKey?: string | null;
+    configId?: string | null;
+    contentHash?: string | null;
+    runId?: string | null;
+    trigger?: {
+        kind?: string;
+        [key: string]: unknown;
+    } | null;
+    /** #3482 — which runtime the platform ran this invocation under. */
+    runtime?: string | null;
+    attributionUserId?: string | null;
+    status?: string;
+    errorCode?: string | null;
+    errorMessage?: string | null;
+    errorStack?: string | null;
+    stdout?: FunctionLogLine[];
+    stderr?: FunctionLogLine[];
+    truncated?: boolean;
+    logsUnavailable?: boolean;
+    contentSuppressed?: boolean;
+    durationMs?: number;
+    startedAt?: string | null;
+    [key: string]: unknown;
+}
 /** HTTP status → outcome: `<400` ok, `>=400` error, absent neutral. */
 export declare function integrationOutcome(httpStatus: number | null | undefined): Outcome;
 /**
@@ -356,6 +454,40 @@ export declare function toWebhookInspectionRow(raw: RawWebhookEvent): WebhookLog
  * `entity_key`, …) is dropped by construction, not enumerated as a denylist.
  */
 export declare function toActivityInspectionRow(raw: RawActivityRow): ActivityLogEntry;
+/**
+ * An invocation record's status → outcome — #3287.
+ *
+ * `completed` is the only success. Everything else that names a settled
+ * invocation is a failure an operator has to be able to COUNT: the function
+ * threw (`failed`), it ran out of wall clock (`timeout`), or the platform
+ * refused the dispatch before any code ran and recorded its own code
+ * (`FUNCTION_BUNDLE_MISSING` and friends). A status nobody has taught this
+ * function is `neutral`, never fabricated as `ok`.
+ */
+export declare function functionLogOutcome(status: string | null | undefined): Outcome;
+export declare function toFunctionLogInspectionRow(raw: RawFunctionLog): FunctionLogEntry;
+/**
+ * The settled status a `function.invoke` activity row carries — #3287, D-2.
+ *
+ * The intent keeps the event a COUNT and adds no blob: the emit already puts
+ * the settled status in the event's context, so nothing on the write side
+ * moves. What moved is this — the shared inspection contract reported a failed
+ * invocation as `neutral`, which meant an operator could not count failures at
+ * all, and the count was the one thing the event was for.
+ *
+ * `context_json` arrives as an object or as a JSON STRING depending on the
+ * store, and an unparseable one is not a reason to guess: it answers null and
+ * the row stays `neutral`, exactly as every other action does.
+ */
+export declare function functionInvokeStatus(raw: RawActivityRow): string | null;
+/**
+ * `function.invoke`'s status → outcome; every other action stays `neutral`.
+ *
+ * `started` is `pending` on purpose: a task start is in flight when the row is
+ * written, and its terminal outcome lives on the run row, which the
+ * `workflow-run` source already maps.
+ */
+export declare function activityOutcome(status: string | null): Outcome;
 /** Build the "flag not supported for this source" message (behavior 12). */
 export declare function unsupportedFlagMessage(flag: string, source: string, supported: string[]): string;
 /**
@@ -417,6 +549,21 @@ export interface RawActivityResponse {
 }
 export declare function buildIntegrationEnvelope(raw: RawIntegrationLog[]): UnpaginatedEnvelope<IntegrationLogEntry>;
 export declare function buildWorkflowRunEnvelope(raw: RawWorkflowRun[], page?: RawPage): PaginatedEnvelope<WorkflowRunLogEntry>;
+/**
+ * The `workflows runs list --json` envelope (#3646).
+ *
+ * `runs list` is a `list` verb, so what it prints is the CLI's one list
+ * envelope — `{items, hasMore, nextCursor?}`, with `nextCursor` OMITTED on the
+ * last page and the deprecated `cursor` alias not re-emitted — rather than the
+ * endpoint's #1316 envelope passed through, which is what
+ * {@link buildWorkflowRunEnvelope} still does for `runs failures` (a sweep, not
+ * a `list`). The rows are the same inspection shape either way, and `scanned`
+ * (#2237) survives as a key beside the envelope's three because it describes
+ * how far the filtered read got, which is not a pagination claim.
+ */
+export declare function buildWorkflowRunListEnvelope(raw: RawWorkflowRun[], page?: RawPage): ListEnvelope<WorkflowRunLogEntry> & {
+    scanned?: number;
+};
 export declare function buildWorkflowStepEnvelope(raw: RawWorkflowStepRun[]): UnpaginatedEnvelope<WorkflowStepLogEntry>;
 export declare function buildWebhookEnvelope(raw: RawWebhookEvent[], page?: RawPage): PaginatedEnvelope<WebhookLogEntry>;
 /**