@akagilnc/pi-workflow-roles 0.1.2135 → 0.1.2146

package/src/package-contracts/reviewer-output.ts

@@ -1,5 +1,11 @@
 /** Package-owned Reviewer intent and runtime-receipt leaves — no role registration surface. */
 
+import {
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+  type SeatFallbackTaintedStatus,
+  type WithEngineLaborFallback,
+} from "../engine-labor-fallback.ts";
 import type { ReviewerAcceptedEvidence, ReviewerFailureClassification, ReviewerWorkspaceDisposition } from "../reviewer-execution-ledger.ts";
 
 export const REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
@@ -28,7 +34,7 @@ export type RuntimeReviewerAcceptedBatch = Readonly<{
 }>;
 /** Honest Spec-child disposition on the receipt face. */
 export type RuntimeReviewerSpecDisposition = "launched" | "skipped-missing";
-export type RuntimeReviewerReceiptV2 = Readonly<{
+type RuntimeReviewerReceiptV2Clean = Readonly<{
   version: 2;
   status: "completed" | "refused";
   diagnostic?: string;
@@ -45,6 +51,14 @@ export type RuntimeReviewerReceiptV2 = Readonly<{
     target?: ReviewerAcceptedEvidence["target"];
   }>;
 }>;
+/** Clean runtime receipt or seat-fallback tainted accepted receipt (ADR 0071). */
+export type RuntimeReviewerReceiptV2 =
+  | RuntimeReviewerReceiptV2Clean
+  | WithEngineLaborFallback<
+      Omit<RuntimeReviewerReceiptV2Clean, "status"> & {
+        status: SeatFallbackTaintedStatus<"completed" | "refused">;
+      }
+    >;
 
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -63,6 +77,11 @@ export function validateReviewerIntent(output: unknown): ReviewerIntent {
 
 /** Validate runtime-owned facts at their real identity seams (target pins + plain text). */
 export function validateRuntimeReviewerReceipt(output: unknown): RuntimeReviewerReceiptV2 {
+  const status = read(output, "status");
+  // ADR 0071: tainted top-level status requires latch-shaped engineLaborFallback evidence.
+  if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, output)) {
+    throw new Error("Reviewer receipt has no recognized execution discriminator");
+  }
   const acceptedBatch = read(output, "acceptedBatch");
   const identities = read(output, "identities");
   const construction = read(identities, "construction");
@@ -129,7 +148,9 @@ export function validateRuntimeReviewerReceipt(output: unknown): RuntimeReviewer
 export function projectReviewerIntentToReceipt(intentValue: unknown, receiptValue: unknown): RuntimeReviewerReceiptV2 {
   const intent = validateReviewerIntent(intentValue);
   const receipt = validateRuntimeReviewerReceipt(receiptValue);
-  if (receipt.status !== intent.status || (intent.status === "completed" ? receipt.diagnostic !== undefined : receipt.diagnostic !== intent.diagnostic)) {
+  const receiptStatus = String(receipt.status);
+  const receiptBase = seatFallbackBaseStatus(receiptStatus);
+  if (receiptBase !== intent.status || (intent.status === "completed" ? receipt.diagnostic !== undefined : receipt.diagnostic !== intent.diagnostic)) {
     throw new Error("Reviewer intent and runtime receipt disagree");
   }
   return receipt;

package/src/package-contracts/terminating-tools.ts

@@ -25,6 +25,10 @@ import {
   type RuntimeReviewerReceiptV2,
 } from "./reviewer-output.ts";
 import { isAuditEscalationResult } from "../audit-escalation.ts";
+import {
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+} from "../engine-labor-fallback.ts";
 import { DOCTOR_OUTPUT_TOOL_NAME, validateDoctorSubmissionShape, validateRecordedDoctorOutput, type DoctorOutput, type DoctorSubmission } from "../doctor-contracts.ts";
 import { MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateMergerOutput, type MergerOutput } from "../merger-contracts.ts";
 import {
@@ -159,10 +163,19 @@ export function validateAcceptedDetails(
     [MERGER_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
+  const baseDiscriminator = typeof discriminator === "string" ? seatFallbackBaseStatus(discriminator) : discriminator;
+  // ADR 0071: `-by-fallback` is not independently lawful — require latch-shaped evidence.
+  const taintedWithoutEvidence =
+    typeof discriminator === "string" &&
+    !seatFallbackStatusHasLawfulEvidence(discriminator, details);
   const runtimeBindingMissing =
-    (toolName === DOCTOR_OUTPUT_TOOL_NAME && discriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
+    (toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
     (toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2);
-  if (runtimeBindingMissing || (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(discriminator)))) {
+  if (
+    taintedWithoutEvidence ||
+    runtimeBindingMissing ||
+    (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator as string)))
+  ) {
     throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
   }
   try {
@@ -196,12 +209,14 @@ export function validateAcceptedLifecycle(
   const details = validateAcceptedDetails(toolName, detailsValue);
   if (toolName === DOCTOR_OUTPUT_TOOL_NAME) {
     const testimony = validateDoctorSubmissionShape(argumentsValue);
-    if (testimony.status === "refused") {
+    if (seatFallbackBaseStatus(String(testimony.status)) === "refused") {
       if (!deepEqual(testimony, details)) throw new Error("accepted tool lifecycle details mismatch");
       return details;
     }
-    const receipt = details as DoctorOutput;
-    if (receipt.status !== "completed") throw new Error("accepted tool lifecycle details mismatch");
+    const receipt = details as DoctorOutput & { cost?: unknown };
+    if (seatFallbackBaseStatus(String(receipt.status)) !== "completed") {
+      throw new Error("accepted tool lifecycle details mismatch");
+    }
     const { cost: _runtimeCost, ...projected } = receipt;
     if (!deepEqual(testimony, projected)) throw new Error("accepted tool lifecycle details mismatch");
     return details;
@@ -226,7 +241,8 @@ export function acceptedFacts(toolName: TerminatingToolName, details: AcceptedDe
     case JUDGE_OUTPUT_TOOL_NAME: return { status: (details as { judgeStatus: string }).judgeStatus };
     case MERGER_OUTPUT_TOOL_NAME: {
       const output = details as unknown as Record<string, unknown>;
-      return { status: output.status as string, ...(output.status === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {}) };
+      const status = output.status as string;
+      return { status, ...(seatFallbackBaseStatus(status) === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {}) };
     }
     case COLLECTOR_OUTPUT_TOOL:
       return { status: "collected" };

package/src/package-contracts/worker-output.ts

@@ -15,16 +15,24 @@ export type {
 } from "./fixer-output.ts";
 export { fixerPrerequisiteSchema, fixerPrerequisitesSchema, parseFixerPrerequisites, validateFixerPrerequisites } from "./fixer-packet.ts";
 export type { FixerInvocationInput, FixerPrerequisite } from "./fixer-packet.ts";
+import type { WithEngineLaborFallback } from "../engine-labor-fallback.ts";
 import { validateFixerOutput, type FixerOutput } from "./fixer-output.ts";
 
 export const CODER_OUTPUT_TOOL_NAME = "ak_coder_output";
 export const CODER_ACCEPTED_TEXT = "Coder report accepted";
 export type WorkerRoleLabel = "Coder" | "Fixer";
-export type CoderOutput =
+type CoderOutputClean =
   | { status: "planned"; report: string }
   | { status: "completed" | "refused"; report: string }
   | { status: "unfinished"; report: string; remainingScope: string; reason?: string };
-export type WorkerOutput = CoderOutput | FixerOutput;
+/** Clean submission shape or seat-fallback tainted accepted receipt (ADR 0071). */
+export type CoderOutput =
+  | CoderOutputClean
+  | WithEngineLaborFallback<CoderOutputClean>;
+export type WorkerOutput =
+  | CoderOutput
+  | FixerOutput
+  | WithEngineLaborFallback<FixerOutput>;
 
 export function validateAcceptedCoderDetails(output: unknown): CoderOutput {
   return output as CoderOutput;

package/src/public-cli/settlement.ts

@@ -34,7 +34,11 @@ import {
   COLLECTOR_WAIT_TOOL,
 } from "../collector-ledger.ts";
 import { ENGINE_DETOUR_TOOL_NAME } from "../engine-detour.ts";
-import { readEngineLaborFallbackFieldFrom } from "../engine-labor-fallback.ts";
+import {
+  readEngineLaborFallbackFieldFrom,
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+} from "../engine-labor-fallback.ts";
 import {
   JUDGE_OUTPUT_TOOL_NAME,
   type JudgeVerdict,
@@ -1059,7 +1063,7 @@ function auditNoReceiptDecisiveFact(candidate: object): Record<string, unknown>
 
 function judgeDecisiveFacts(
   verdict: object,
-  judgeStatus: JudgeVerdict["judgeStatus"],
+  judgeStatus: string,
 ): Record<string, unknown> {
   const facts: Record<string, unknown> = {
     judgeStatus,
@@ -1067,7 +1071,8 @@ function judgeDecisiveFacts(
     // #380: spread sole-built field; do not re-key here (S1).
     ...readEngineLaborFallbackFieldFrom(verdict),
   };
-  if (judgeStatus === "continue") {
+  const statusBase = seatFallbackBaseStatus(judgeStatus);
+  if (statusBase === "continue") {
     const fix = safelyRead(verdict, "fix");
     if (fix.readable && isRecord(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
@@ -1093,7 +1098,7 @@ function judgeDecisiveFacts(
       }
     }
   }
-  if (judgeStatus === "escalate") {
+  if (statusBase === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
     if (gate.readable && isRecord(gate.value)) {
       const question = safelyRead(gate.value, "question");
@@ -1118,10 +1123,14 @@ function coderDecisiveFacts(output: CoderOutput): Record<string, unknown> {
   const status = safelyRead(candidate, "status");
   const facts: Record<string, unknown> = {};
   if (status.readable && typeof status.value === "string") facts.coderStatus = status.value;
+  const statusBase =
+    status.readable && typeof status.value === "string"
+      ? seatFallbackBaseStatus(status.value)
+      : undefined;
   const remainingScope = safelyRead(candidate, "remainingScope");
-  if (status.readable && status.value === "unfinished" && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
+  if (statusBase === "unfinished" && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
   const reason = safelyRead(candidate, "reason");
-  if (status.readable && status.value === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
+  if (statusBase === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
     facts.reason = reason.value;
   }
   const report = safelyRead(candidate, "report");
@@ -1134,14 +1143,18 @@ function fixerDecisiveFacts(output: FixerOutput): Record<string, unknown> {
   const status = safelyRead(candidate, "status");
   const facts: Record<string, unknown> = {};
   if (status.readable && typeof status.value === "string") facts.fixerStatus = status.value;
+  const statusBase =
+    status.readable && typeof status.value === "string"
+      ? seatFallbackBaseStatus(status.value)
+      : undefined;
   const remainingScope = safelyRead(candidate, "remainingScope");
-  if (status.readable && (status.value === "unfinished" || status.value === "refused") && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
+  if ((statusBase === "unfinished" || statusBase === "refused") && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
   const reason = safelyRead(candidate, "reason");
-  if (status.readable && status.value === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
+  if (statusBase === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
     facts.reason = reason.value;
   }
   const blockerRead = safelyRead(candidate, "blocker");
-  if (status.readable && status.value === "refused" && blockerRead.readable && isRecord(blockerRead.value)) {
+  if (statusBase === "refused" && blockerRead.readable && isRecord(blockerRead.value)) {
     const cause = safelyRead(blockerRead.value, "cause");
     if (cause.readable && typeof cause.value === "string") facts.blockerCause = cause.value;
     const prerequisiteId = safelyRead(blockerRead.value, "prerequisiteId");
@@ -1223,7 +1236,11 @@ function doctorDecisiveFacts(output: DoctorOutput): Record<string, unknown> {
   const status = safelyRead(candidate, "status");
   const facts: Record<string, unknown> = { ...auditNoReceiptDecisiveFact(candidate) };
   if (status.readable && typeof status.value === "string") facts.doctorStatus = status.value;
-  if (status.readable && status.value === "refused") {
+  const statusBase =
+    status.readable && typeof status.value === "string"
+      ? seatFallbackBaseStatus(status.value)
+      : undefined;
+  if (statusBase === "refused") {
     const reason = safelyRead(candidate, "reason");
     if (reason.readable && reason.value !== undefined) facts.reason = reason.value;
     const missing = safelyRead(candidate, "missingEvidence");
@@ -1277,7 +1294,11 @@ function reviewerDecisiveFacts(
     facts.specDisposition = specDisposition.value;
   }
   const diagnostic = safelyRead(candidate, "diagnostic");
-  if (status.readable && status.value === "refused" && diagnostic.readable) {
+  const statusBase =
+    status.readable && typeof status.value === "string"
+      ? seatFallbackBaseStatus(status.value)
+      : undefined;
+  if (statusBase === "refused" && diagnostic.readable) {
     facts.diagnosticPresent = typeof diagnostic.value === "string" && diagnostic.value.trim().length > 0;
   }
   return facts;
@@ -1980,9 +2001,12 @@ export function extractJudgeRoleOutcome(
     // must not become a second verdict-shape gate (ADR 0040).
     if (!isRecord(details)) continue;
     const statusRead = safelyRead(details, "judgeStatus");
-    if (!statusRead.readable) continue;
+    if (!statusRead.readable || typeof statusRead.value !== "string") continue;
     const judgeStatus = statusRead.value;
-    if (judgeStatus !== "converged" && judgeStatus !== "continue" && judgeStatus !== "escalate") continue;
+    const statusBase = seatFallbackBaseStatus(judgeStatus);
+    if (statusBase !== "converged" && statusBase !== "continue" && statusBase !== "escalate") continue;
+    // ADR 0071: `-by-fallback` without latch-shaped evidence is not a lawful terminal.
+    if (!seatFallbackStatusHasLawfulEvidence(judgeStatus, details)) continue;
     return {
       kind: "accepted",
       role: "judge",
@@ -2985,13 +3009,19 @@ async function settleLawfulDoctorTerminalResult(
   const extracted = extractDoctorRoleOutcome(entries);
   if (extracted === undefined) return undefined;
   // Bind completed receipt case identity to the admitted Issue evidence case.
+  // Seat-fallback may taint status; base semantics still require case binding.
   if (
     extracted.output !== undefined &&
-    extracted.output.status === "completed"
+    seatFallbackBaseStatus(String(extracted.output.status)) === "completed"
   ) {
+    const completedCase = (
+      extracted.output as {
+        case: { issueNumber: number; runsPath: string };
+      }
+    ).case;
     if (
-      extracted.output.case.issueNumber !== admitted.caseIdentity.issueNumber ||
-      extracted.output.case.runsPath !== admitted.caseIdentity.runsPath
+      completedCase.issueNumber !== admitted.caseIdentity.issueNumber ||
+      completedCase.runsPath !== admitted.caseIdentity.runsPath
     ) {
       const error = new Error(
         "Doctor receipt case identity does not match admitted case identity",
@@ -3331,7 +3361,11 @@ function mergerDecisiveFacts(output: MergerOutput): Record<string, unknown> {
   const attemptId = safelyRead(candidate, "attemptId");
   if (status.readable && typeof status.value === "string") facts.mergerStatus = status.value;
   if (attemptId.readable && attemptId.value !== undefined) facts.attemptId = attemptId.value;
-  const decisiveKey = status.readable && status.value === "completed" ? "mergeCommitId" : "diagnosis";
+  const statusBase =
+    status.readable && typeof status.value === "string"
+      ? seatFallbackBaseStatus(status.value)
+      : undefined;
+  const decisiveKey = statusBase === "completed" ? "mergeCommitId" : "diagnosis";
   const decisive = safelyRead(candidate, decisiveKey);
   if (decisive.readable && decisive.value !== undefined) facts[decisiveKey] = decisive.value;
   return facts;

package/src/role-runtime.ts

@@ -27,8 +27,9 @@ import {
   createEngineLaborFallbackLatch,
   installActivationEngineLaborFallbackLatch,
   restoreEngineLaborFallbackFromSessionEntries,
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
 } from "./engine-labor-fallback.ts";
-import { installPackageOwnedToolRegistration } from "./package-owned-tool-idle.ts";
 import { createReceiptDeliveryPolicy, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE, RECEIPT_DELIVERY_PROMPT } from "./receipt-delivery-policy.ts";
 import { createOAuthKeepalive, type OAuthKeepaliveOptions } from "./oauth-keepalive.ts";
 
@@ -565,7 +566,12 @@ export function publicNavigatorSettlement(role: string, phase: NavigatorPhase, e
   const status = typeof details.status === "string"
     ? details.status
     : typeof details.judgeStatus === "string" ? details.judgeStatus : undefined;
-  if (status === "escalate") {
+  // ADR 0071: `-by-fallback` without latch-shaped evidence is not a lawful terminal.
+  if (status !== undefined && !seatFallbackStatusHasLawfulEvidence(status, event.details)) {
+    return undefined;
+  }
+  // Seat-fallback taint keeps escalate semantics (base) while preserving the polluted token.
+  if (status !== undefined && seatFallbackBaseStatus(status) === "escalate") {
     return { kind: "human_decision", role, phase, status };
   }
   return { kind: "accepted", role, phase, ...(status === undefined ? {} : { status }) };
@@ -575,8 +581,6 @@ export function createRoleRuntimeExtension(
   dependencies: RoleRuntimeDependencies,
 ): (pi: ExtensionAPI) => void {
   return (pi) => {
-    // #102: one shared package-owned tool registration surface for all role runtimes.
-    installPackageOwnedToolRegistration(pi);
     pi.registerFlag(ROLE_FLAG.name, ROLE_FLAG.definition);
     // Reviewer transport flags: shared envelope owns registration (ADR 0018).
     for (const flag of REVIEWER_TRANSPORT_FLAGS) {

package/src/taishi-metric-families/acceptance-success-rework.ts

@@ -9,6 +9,7 @@
  * - success rate den = success-eligible accepted legs (no-receipt out; planned out)
  * - planned = plan-duty acceptance; never success numerator or denominator
  */
+import { seatFallbackBaseStatus } from "../engine-labor-fallback.ts";
 import type { TaishiReadableRunFacts, TaishiRunTerminalFace } from "../taishi-ledger.ts";
 import { medianNumber } from "../taishi-median.ts";
 import type { TaishiMetricFamilyModule } from "../taishi-metric-family.ts";
@@ -185,8 +186,10 @@ function mapTerminal(
     };
   }
 
+  // Seat-fallback taint is visible on the label; acceptance/success use base semantics.
+  const statusBase = seatFallbackBaseStatus(status);
   const acceptedSet = ACCEPTED_STATUS[role];
-  if (acceptedSet === undefined || !acceptedSet.has(status)) {
+  if (acceptedSet === undefined || !acceptedSet.has(statusBase)) {
     return {
       terminalLabel: status,
       accepted: false,
@@ -196,9 +199,9 @@ function mapTerminal(
     };
   }
 
-  const plannedDuty = WORKER_ROLES.has(role) && status === "planned";
+  const plannedDuty = WORKER_ROLES.has(role) && statusBase === "planned";
   const successSet = SUCCESS_STATUS[role] ?? new Set<string>();
-  const success = !plannedDuty && successSet.has(status);
+  const success = !plannedDuty && successSet.has(statusBase);
   const successEligible = !plannedDuty;
 
   return {

package/dist/package-owned-tool-idle.js

@@ -1,223 +0,0 @@
-/**
- * #102 package-owned tool idle backstop.
- *
- * Fixed 183000ms silence clock on package-owned tool execute only.
- * Real producing onUpdate resets; final resolve/reject clears; timeout throws so
- * Pi settles the current call as an LLM-visible isError tool result. No retry,
- * role failure, process termination, config, or Pi built-in coverage.
- *
- * #339: do not name-exempt whole terminating tools. Outer idle stays armed for
- * pre/post-audit work. Only the real compliance-audit await suspends this single
- * layer (ADR 0059 owns that interval); resume re-arms the same outer backstop.
- *
- * #380: on idle, abort a derived tool signal (not the caller signal) so detour
- * spawn cleanup and softFail can run through the existing AbortSignal path.
- * Cooperative soft-settle may win; non-listeners still hard-reject after a
- * microtask drain (no second timer).
- */
-import { AsyncLocalStorage } from "node:async_hooks";
-import { DEFAULT_STREAM_IDLE_TIMEOUT_MS, createStreamIdleGuard, } from "./stream-idle-guard.js";
-import { isProducingToolUpdate } from "./tool-execution-observation.js";
-export const PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_MS = DEFAULT_STREAM_IDLE_TIMEOUT_MS;
-export const PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_CODE = "AK_PACKAGE_OWNED_TOOL_IDLE_TIMEOUT";
-const WRAPPED = Symbol.for("ak.packageOwnedToolIdleWrapped");
-/**
- * Active outer package-owned execute idle, if any. Nested tool executes install
- * their own store; compliance audit only suspends the store visible at await time.
- */
-const packageOwnedToolIdleScope = new AsyncLocalStorage();
-export class PackageOwnedToolIdleTimeoutError extends Error {
-    code = PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_CODE;
-    idleTimeoutMs = PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_MS;
-    constructor() {
-        super(`package-owned tool idle timeout after ${PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_MS}ms`);
-        this.name = "PackageOwnedToolIdleTimeoutError";
-    }
-}
-export function isPackageOwnedToolIdleTimeoutError(value) {
-    return (value instanceof PackageOwnedToolIdleTimeoutError ||
-        (typeof value === "object" &&
-            value !== null &&
-            value.name === "PackageOwnedToolIdleTimeoutError" &&
-            value.code === PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_CODE));
-}
-/**
- * Package-tool activity includes content production and host-only details
- * progress. Keep the observation-plane oracle separate: its stderr heartbeat
- * contract remains content-driven. Pi's known execute-entry placeholder
- * (`content: [], details: undefined`) is not activity.
- */
-function isPackageOwnedToolActivityUpdate(partialResult) {
-    if (isProducingToolUpdate(partialResult))
-        return true;
-    if (typeof partialResult !== "object" || partialResult === null)
-        return false;
-    const details = partialResult.details;
-    if (details === undefined || details === null)
-        return false;
-    if (typeof details === "string")
-        return details.length > 0;
-    if (Array.isArray(details))
-        return details.length > 0;
-    if (typeof details === "object")
-        return Reflect.ownKeys(details).length > 0;
-    return true;
-}
-/**
- * #339: suspend the active package-owned execute idle for one real compliance
- * audit await. Single-layer only — production has one runComplianceAudit seam.
- * No-op outside a wrapped package-owned execute. No second timeout or retry.
- */
-export async function withPackageOwnedToolIdleSuspended(run) {
-    const scope = packageOwnedToolIdleScope.getStore();
-    if (scope === undefined)
-        return run();
-    scope.suspend();
-    try {
-        return await run();
-    }
-    finally {
-        scope.resume();
-    }
-}
-/**
- * Touch the active package-owned execute idle clock (reuse stream-idle-guard poke).
- * No-op outside a wrapped package-owned execute or while that layer is suspended.
- * Used by long-running tools (engine detour) that see real subprocess output bytes.
- */
-export function pokePackageOwnedToolIdle() {
-    packageOwnedToolIdleScope.getStore()?.poke();
-}
-/**
- * Single shared execute wrapper for package-owned tool definitions.
- * Idempotent: wrapping twice returns the same protected definition.
- */
-export function wrapPackageOwnedToolDefinition(tool) {
-    // Mark the execute function, not the tool object — callers may spread tool fields
-    // onto a new definition with a different execute (e.g. auditor customTools).
-    if (tool.execute[WRAPPED] === true)
-        return tool;
-    const originalExecute = tool.execute.bind(tool);
-    const wrappedExecute = function packageOwnedToolIdleExecute(...args) {
-        const parentSignal = args[2];
-        const onUpdate = args[3];
-        return new Promise((resolve, reject) => {
-            let settled = false;
-            let suspended = false;
-            let idle = createStreamIdleGuard({
-                idleTimeoutMs: PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_MS,
-            });
-            // Derived tool signal: caller cancel forwards; idle aborts this only (not parent).
-            const toolController = new AbortController();
-            const onParentAbort = () => {
-                if (toolController.signal.aborted)
-                    return;
-                toolController.abort(parentSignal?.reason);
-            };
-            if (parentSignal !== undefined) {
-                if (parentSignal.aborted) {
-                    toolController.abort(parentSignal.reason);
-                }
-                else {
-                    parentSignal.addEventListener("abort", onParentAbort);
-                }
-            }
-            const cleanup = () => {
-                idle.signal.removeEventListener("abort", onIdle);
-                idle.dispose();
-                parentSignal?.removeEventListener("abort", onParentAbort);
-            };
-            const settle = (deliver) => {
-                if (settled)
-                    return;
-                settled = true;
-                cleanup();
-                deliver();
-            };
-            const onIdle = () => {
-                const idleError = new PackageOwnedToolIdleTimeoutError();
-                if (!toolController.signal.aborted) {
-                    toolController.abort(idleError);
-                }
-                // Cooperative tools (detour) soft-settle via the aborted signal in the
-                // next microtasks. Non-listeners still hard-reject after a short drain
-                // of those microtasks — no second wall-clock timer.
-                void Promise.resolve()
-                    .then(() => { })
-                    .then(() => { })
-                    .then(() => {
-                    settle(() => reject(idleError));
-                });
-            };
-            idle.signal.addEventListener("abort", onIdle, { once: true });
-            const suspension = {
-                suspend() {
-                    if (settled || suspended)
-                        return;
-                    suspended = true;
-                    // ADR 0059 owns the audit interval — drop this layer until audit returns.
-                    idle.signal.removeEventListener("abort", onIdle);
-                    idle.dispose();
-                },
-                resume() {
-                    if (settled || !suspended)
-                        return;
-                    suspended = false;
-                    // Fresh single-layer silence window for post-audit work (e.g. cleanup).
-                    idle = createStreamIdleGuard({
-                        idleTimeoutMs: PACKAGE_OWNED_TOOL_IDLE_TIMEOUT_MS,
-                    });
-                    idle.signal.addEventListener("abort", onIdle, { once: true });
-                },
-                poke() {
-                    if (settled || suspended)
-                        return;
-                    idle.poke();
-                },
-            };
-            const guardedOnUpdate = onUpdate === undefined
-                ? undefined
-                : (partialResult) => {
-                    if (settled)
-                        return;
-                    if (isPackageOwnedToolActivityUpdate(partialResult))
-                        idle.poke();
-                    onUpdate(partialResult);
-                };
-            const callArgs = args.slice();
-            // Pass derived signal so idle/cancel can clean up subprocesses without
-            // aborting the caller/parent agent signal identity.
-            callArgs[2] = toolController.signal;
-            callArgs[3] = guardedOnUpdate;
-            void packageOwnedToolIdleScope.run(suspension, async () => {
-                try {
-                    const result = await originalExecute(...callArgs);
-                    settle(() => resolve(result));
-                }
-                catch (error) {
-                    settle(() => reject(error));
-                }
-            });
-        });
-    };
-    wrappedExecute[WRAPPED] = true;
-    return {
-        ...tool,
-        execute: wrappedExecute,
-    };
-}
-/**
- * Install the shared registration surface on an ExtensionAPI once.
- * All subsequent pi.registerTool calls for package-owned tools are wrapped.
- */
-export function installPackageOwnedToolRegistration(pi) {
-    const current = pi.registerTool;
-    if (current[WRAPPED] === true)
-        return;
-    const original = current.bind(pi);
-    const installed = ((tool) => {
-        original(wrapPackageOwnedToolDefinition(tool));
-    });
-    installed[WRAPPED] = true;
-    pi.registerTool = installed;
-}