@akagilnc/pi-workflow-roles 0.1.2052 → 0.1.2054

package/dist/public-cli/main.js

@@ -16380,18 +16380,21 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     "utf8"
   );
 }
-async function recordEffectiveInvocationModel(runDirectory, model) {
+async function recordEffectiveInvocationModel(runDirectory, model, engine) {
   const ledgerPath = join6(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile4(ledgerPath, "utf8"));
-  const next = {
-    ...current,
-    provider: model.provider,
-    model: model.model
-  };
-  if (model.thinking === void 0) {
-    delete next.thinking;
-  } else {
-    next.thinking = model.thinking;
+  const next = { ...current };
+  if (model !== void 0) {
+    next.provider = model.provider;
+    next.model = model.model;
+    if (model.thinking === void 0) {
+      delete next.thinking;
+    } else {
+      next.thinking = model.thinking;
+    }
+  }
+  if (engine !== void 0) {
+    next.engine = engine;
   }
   await writeFile2(
     ledgerPath,
@@ -18629,9 +18632,13 @@ async function markRunAdmitted(admitted) {
     ...admitted.role === "coder" || admitted.role === "fixer" ? { phase: admitted.phase } : {}
   });
 }
-async function markRunRunning(runDirectory, effectiveModel) {
-  if (effectiveModel !== void 0) {
-    await recordEffectiveInvocationModel(runDirectory, effectiveModel);
+async function markRunRunning(runDirectory, effectiveModel, effectiveEngine) {
+  if (effectiveModel !== void 0 || effectiveEngine !== void 0) {
+    await recordEffectiveInvocationModel(
+      runDirectory,
+      effectiveModel,
+      effectiveEngine
+    );
   }
   const current = await readRoleRunState(runDirectory);
   if (current === void 0) {
@@ -23742,7 +23749,7 @@ async function presentControlledFailure6(admitted, failureInput, io) {
   };
 }
 async function dispatchAdmittedJudge(input) {
-  const { admitted, env, io, extraArgs, lease } = input;
+  const { admitted, env, io, extraArgs, lease, effectiveEngine } = input;
   try {
     const missingCredential = missingCredentialPreDispatchFailure(
       env.model,
@@ -23755,7 +23762,11 @@ async function dispatchAdmittedJudge(input) {
         io
       );
     }
-    await markRunRunning(admitted.runDirectory, env.model);
+    await markRunRunning(
+      admitted.runDirectory,
+      env.model,
+      effectiveEngine
+    );
     await clearTypedProviderHttpObservation(admitted.runDirectory);
     const childEnv = {
       ...process.env,
@@ -23909,7 +23920,9 @@ async function runPublicJudge(argv, env, io, parseJudgeArgv2) {
     },
     io,
     extraArgs,
-    lease
+    lease,
+    // #358: only initial Judge dispatch records mechanical engine provenance.
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
 async function runPublicResume(argv, env, io) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.2052",
+  "version": "0.1.2054",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/src/public-cli/invocation.ts

@@ -239,28 +239,35 @@ async function writeRoleInvocationLedger(
 }
 
 /**
- * Merge the effective launch model onto the existing invocation identity page
- * (resume / temporary override path — same field shape as admission write).
+ * Merge the effective launch model (and optional initial engine) onto the
+ * existing invocation identity page (resume / temporary override path — same
+ * field shape as admission write).
  * Bare model clears any prior thinking key so absence stays honest.
+ * Engine is write-if-present only: undefined leaves any existing key untouched
+ * (resume model merge must not erase initial mechanical provenance).
  */
 export async function recordEffectiveInvocationModel(
   runDirectory: string,
-  model: InvocationEffectiveModel,
+  model?: InvocationEffectiveModel,
+  engine?: string,
 ): Promise<void> {
   const ledgerPath = join(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile(ledgerPath, "utf8")) as Record<
     string,
     unknown
   >;
-  const next: Record<string, unknown> = {
-    ...current,
-    provider: model.provider,
-    model: model.model,
-  };
-  if (model.thinking === undefined) {
-    delete next.thinking;
-  } else {
-    next.thinking = model.thinking;
+  const next: Record<string, unknown> = { ...current };
+  if (model !== undefined) {
+    next.provider = model.provider;
+    next.model = model.model;
+    if (model.thinking === undefined) {
+      delete next.thinking;
+    } else {
+      next.thinking = model.thinking;
+    }
+  }
+  if (engine !== undefined) {
+    next.engine = engine;
   }
   await writeFile(
     ledgerPath,

package/src/public-cli/judge-run.ts

@@ -254,12 +254,17 @@ async function dispatchAdmittedJudge(input: {
   io: CliIo;
   extraArgs: string[];
   lease: RunWriterLease;
+  /**
+   * Mechanical engine provenance for initial Judge dispatch only.
+   * Explicit — never read from env.engine here, so resume cannot rewrite it.
+   */
+  effectiveEngine?: string;
 }): Promise<{
   exitCode: number;
   admitted: AdmittedJudgeInvocation;
   terminal?: TerminalResult;
 }> {
-  const { admitted, env, io, extraArgs, lease } = input;
+  const { admitted, env, io, extraArgs, lease, effectiveEngine } = input;
   try {
     // Fail closed at the public credential seam before model dispatch: missing
     // selected-provider auth must not be washed by ambient keys or zero-exit runs.
@@ -274,7 +279,11 @@ async function dispatchAdmittedJudge(input: {
         io,
       );
     }
-    await markRunRunning(admitted.runDirectory, env.model);
+    await markRunRunning(
+      admitted.runDirectory,
+      env.model,
+      effectiveEngine,
+    );
     // Attempt-scoped observation: drop any prior dispatch's 429 evidence so only
     // the current initial/resume attempt can qualify v1 resume.
     await clearTypedProviderHttpObservation(admitted.runDirectory);
@@ -459,6 +468,8 @@ export async function runPublicJudge(
     io,
     extraArgs,
     lease,
+    // #358: only initial Judge dispatch records mechanical engine provenance.
+    ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
   });
 }
 

package/src/public-cli/run-lifecycle.ts

@@ -230,15 +230,23 @@ export async function markRunAdmitted(
 
 /**
  * Shared dispatch execution seam: record the effective launch model (initial or
- * resume override) onto invocation.json when known, then transition to running.
+ * resume override) and optional initial effective engine onto invocation.json
+ * when known, then transition to running.
  * Role runners must not coordinate lifecycle ledger writes themselves.
+ * Engine is write-if-present only — callers that omit it (resume / non-Judge)
+ * never touch the engine key.
  */
 export async function markRunRunning(
   runDirectory: string,
   effectiveModel?: InvocationEffectiveModel,
+  effectiveEngine?: string,
 ): Promise<void> {
-  if (effectiveModel !== undefined) {
-    await recordEffectiveInvocationModel(runDirectory, effectiveModel);
+  if (effectiveModel !== undefined || effectiveEngine !== undefined) {
+    await recordEffectiveInvocationModel(
+      runDirectory,
+      effectiveModel,
+      effectiveEngine,
+    );
   }
   const current = await readRoleRunState(runDirectory);
   if (current === undefined) {