@akagilnc/pi-workflow-roles 0.1.2139 → 0.1.2146

package/dist/doctor-contracts.js

@@ -1,5 +1,6 @@
 import { Type } from "typebox";
 import { canonicalJson } from "./canonical-json.js";
+import { seatFallbackBaseStatus, seatFallbackStatusHasLawfulEvidence, } from "./engine-labor-fallback.js";
 import { openToolObjectFromUnion } from "./open-tool-schema.js";
 export const DOCTOR_EVIDENCE_TOOL_NAME = "ak_doctor_evidence";
 export const DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
@@ -66,13 +67,20 @@ catch {
 } }
 export function validateDoctorSubmissionShape(value) {
     const status = read(value, "status");
-    if (status !== "completed" && status !== "refused")
+    const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+    if (base !== "completed" && base !== "refused")
         throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+    // ADR 0071: tainted status requires latch-shaped engineLaborFallback evidence.
+    if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+        throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+    }
     return value;
 }
 export function validateRecordedDoctorOutput(value) {
     const output = validateDoctorSubmissionShape(value);
-    if (read(output, "status") === "completed" && read(output, "cost") === undefined)
+    const status = read(output, "status");
+    const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+    if (base === "completed" && read(output, "cost") === undefined)
         throw new Error("Completed Doctor receipt has no runtime-owned cost testimony");
     return output;
 }

package/dist/engine-labor-fallback.js

@@ -1,121 +1,136 @@
-/**
- * #380 — sole shared seat-fallback declaration after engine detour failure.
- * Detour rejoins the main road (ADR 0069); silence is the only crime.
- * Construction of the typed receipt field lives in exactly one site (S1).
- */
-/** Activation-scoped latch holder (one parent seat activation at a time). */
 let activationLatch;
-/** Sole construction site for typed receipt field `engineLaborFallback` (#380 S1). */
-export function buildEngineLaborFallbackField(input) {
-    return Object.freeze({
-        engineLaborFallback: Object.freeze({
-            engine: input.engine,
-            failure: input.failure,
-            laborBy: "seat",
-        }),
-    });
+function buildEngineLaborFallbackField(input) {
+  return Object.freeze({
+    engineLaborFallback: Object.freeze({
+      engine: input.engine,
+      failure: input.failure,
+      laborBy: "seat"
+    })
+  });
 }
-export function createEngineLaborFallbackLatch() {
-    return { field: undefined };
-}
-/**
- * Record first detour failure for this latch (first wins; parallel legs share one field).
- * Always returns the latched first-wins value so tool details and receipt projection match.
- */
-export function recordEngineLaborFallback(latch, input) {
-    const field = buildEngineLaborFallbackField(input);
-    if (latch.field === undefined)
-        latch.field = field;
-    return latch.field;
-}
-export function readEngineLaborFallbackField(latch) {
-    return latch?.field;
-}
-/**
- * Merge sole-built field into typed receipt details.
- * Spread only — must not construct the field key again (S1).
- * Without a mechanical latch, strip any model-injected reserved key (no forged declaration).
- */
-export function withEngineLaborFallbackField(receipt, field) {
-    if (field !== undefined) {
-        return { ...receipt, ...field };
-    }
-    if (!Object.prototype.hasOwnProperty.call(receipt, "engineLaborFallback")) {
-        return receipt;
-    }
-    const { engineLaborFallback: _forged, ...rest } = receipt;
-    return rest;
-}
-/** Install the activation-scoped latch (any role session_start with engine). */
-export function installActivationEngineLaborFallbackLatch(latch) {
-    activationLatch = latch;
-}
-/** Clear activation latch (session end / next activation). */
-export function clearActivationEngineLaborFallbackLatch() {
-    activationLatch = undefined;
-}
-/** Active activation latch, if any (legs inherit parent seat activation). */
-export function activationEngineLaborFallbackLatch() {
-    return activationLatch;
-}
-/** Read fallback field from the active activation latch. */
-export function readActivationEngineLaborFallbackField() {
-    return readEngineLaborFallbackField(activationLatch);
-}
-/**
- * Read a previously attached declaration from a typed receipt / details object.
- * Rebuilds via the sole construction site — callers must spread, never re-key.
- */
-export function readEngineLaborFallbackFieldFrom(source) {
-    if (typeof source !== "object" || source === null || Array.isArray(source)) {
-        return undefined;
-    }
-    let raw;
+const SEAT_FALLBACK_STATUS_SUFFIX = "-by-fallback";
+function isSeatFallbackTaintedStatus(status) {
+  return status.endsWith(SEAT_FALLBACK_STATUS_SUFFIX);
+}
+function seatFallbackBaseStatus(status) {
+  return isSeatFallbackTaintedStatus(status) ? status.slice(0, -SEAT_FALLBACK_STATUS_SUFFIX.length) : status;
+}
+function seatFallbackStatusHasLawfulEvidence(status, source) {
+  if (!isSeatFallbackTaintedStatus(status)) return true;
+  return readEngineLaborFallbackFieldFrom(source) !== void 0;
+}
+function taintStatusForSeatFallback(status) {
+  if (status.length === 0 || isSeatFallbackTaintedStatus(status)) return status;
+  return `${status}${SEAT_FALLBACK_STATUS_SUFFIX}`;
+}
+const STATUS_DISCRIMINATOR_KEYS = ["judgeStatus", "status"];
+function taintReceiptStatusDiscriminators(receipt) {
+  let next;
+  for (const key of STATUS_DISCRIMINATOR_KEYS) {
+    if (!Object.prototype.hasOwnProperty.call(receipt, key)) continue;
+    let value;
     try {
-        raw = source.engineLaborFallback;
-    }
-    catch {
-        return undefined;
+      value = receipt[key];
+    } catch {
+      continue;
     }
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
-        return undefined;
-    const rec = raw;
-    if (typeof rec.engine !== "string" ||
-        typeof rec.failure !== "string" ||
-        rec.laborBy !== "seat") {
-        return undefined;
+    if (typeof value !== "string" || value.length === 0) continue;
+    const tainted = taintStatusForSeatFallback(value);
+    if (tainted === value) continue;
+    if (next === void 0) {
+      next = { ...receipt };
     }
-    return buildEngineLaborFallbackField({
-        engine: rec.engine,
-        failure: rec.failure,
-    });
+    next[key] = tainted;
+  }
+  return next === void 0 ? receipt : next;
 }
-/**
- * Restore activation latch from durable session tool results (#380 resume).
- * Scans existing same-session detour tool results only — no sidecar / new entry type.
- * Replays through recordEngineLaborFallback so first-wins + sole producer stay intact.
- */
-export function restoreEngineLaborFallbackFromSessionEntries(latch, entries, toolName) {
-    for (const entry of entries) {
-        if (typeof entry !== "object" || entry === null)
-            continue;
-        const row = entry;
-        if (row.type !== "message")
-            continue;
-        const message = row.message;
-        if (typeof message !== "object" || message === null)
-            continue;
-        const msg = message;
-        if (msg.role !== "toolResult")
-            continue;
-        if (msg.toolName !== toolName)
-            continue;
-        const field = readEngineLaborFallbackFieldFrom(msg.details);
-        if (field === undefined)
-            continue;
-        recordEngineLaborFallback(latch, {
-            engine: field.engineLaborFallback.engine,
-            failure: field.engineLaborFallback.failure,
-        });
-    }
+function createEngineLaborFallbackLatch() {
+  return { field: void 0 };
+}
+function recordEngineLaborFallback(latch, input) {
+  const field = buildEngineLaborFallbackField(input);
+  if (latch.field === void 0) latch.field = field;
+  return latch.field;
+}
+function readEngineLaborFallbackField(latch) {
+  return latch?.field;
+}
+function withEngineLaborFallbackField(receipt, field) {
+  if (field !== void 0) {
+    const taintedReceipt = taintReceiptStatusDiscriminators(receipt);
+    return { ...taintedReceipt, ...field };
+  }
+  if (!Object.prototype.hasOwnProperty.call(receipt, "engineLaborFallback")) {
+    return receipt;
+  }
+  const { engineLaborFallback: _forged, ...rest } = receipt;
+  return rest;
+}
+function installActivationEngineLaborFallbackLatch(latch) {
+  activationLatch = latch;
+}
+function clearActivationEngineLaborFallbackLatch() {
+  activationLatch = void 0;
+}
+function activationEngineLaborFallbackLatch() {
+  return activationLatch;
+}
+function readActivationEngineLaborFallbackField() {
+  return readEngineLaborFallbackField(activationLatch);
+}
+function readEngineLaborFallbackFieldFrom(source) {
+  if (typeof source !== "object" || source === null || Array.isArray(source)) {
+    return void 0;
+  }
+  let raw;
+  try {
+    raw = source.engineLaborFallback;
+  } catch {
+    return void 0;
+  }
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+  const rec = raw;
+  if (typeof rec.engine !== "string" || typeof rec.failure !== "string" || rec.laborBy !== "seat") {
+    return void 0;
+  }
+  return buildEngineLaborFallbackField({
+    engine: rec.engine,
+    failure: rec.failure
+  });
+}
+function restoreEngineLaborFallbackFromSessionEntries(latch, entries, toolName) {
+  for (const entry of entries) {
+    if (typeof entry !== "object" || entry === null) continue;
+    const row = entry;
+    if (row.type !== "message") continue;
+    const message = row.message;
+    if (typeof message !== "object" || message === null) continue;
+    const msg = message;
+    if (msg.role !== "toolResult") continue;
+    if (msg.toolName !== toolName) continue;
+    const field = readEngineLaborFallbackFieldFrom(msg.details);
+    if (field === void 0) continue;
+    recordEngineLaborFallback(latch, {
+      engine: field.engineLaborFallback.engine,
+      failure: field.engineLaborFallback.failure
+    });
+  }
 }
+export {
+  SEAT_FALLBACK_STATUS_SUFFIX,
+  activationEngineLaborFallbackLatch,
+  buildEngineLaborFallbackField,
+  clearActivationEngineLaborFallbackLatch,
+  createEngineLaborFallbackLatch,
+  installActivationEngineLaborFallbackLatch,
+  isSeatFallbackTaintedStatus,
+  readActivationEngineLaborFallbackField,
+  readEngineLaborFallbackField,
+  readEngineLaborFallbackFieldFrom,
+  recordEngineLaborFallback,
+  restoreEngineLaborFallbackFromSessionEntries,
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+  taintStatusForSeatFallback,
+  withEngineLaborFallbackField
+};

package/dist/merger-contracts.js

@@ -1,6 +1,7 @@
 import { Type } from "typebox";
 import { isFullGitObjectId } from "./git-object-id.js";
 import { exactUtf8 } from "./exact-utf8.js";
+import { seatFallbackBaseStatus, seatFallbackStatusHasLawfulEvidence, } from "./engine-labor-fallback.js";
 import { sha256Hex } from "./sha256.js";
 import { openToolObjectFromUnion } from "./open-tool-schema.js";
 const oidPattern = "^(?:[0-9a-f]{40}|[0-9a-f]{64})$";
@@ -68,9 +69,15 @@ export function validateMergerInput(value) {
 export function validateMergerOutput(value, expectedAttemptId) {
     if (!record(value) || (expectedAttemptId !== undefined && value.attemptId !== expectedAttemptId))
         throw new Error("Merger output attempt mismatch");
-    if (value.status === "completed" && isFullGitObjectId(value.mergeCommitId))
+    const status = typeof value.status === "string" ? value.status : undefined;
+    const statusBase = status !== undefined ? seatFallbackBaseStatus(status) : undefined;
+    // ADR 0071: tainted status requires latch-shaped engineLaborFallback evidence.
+    if (status !== undefined && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+        throw new Error("Merger output has no recognized execution discriminator");
+    }
+    if (statusBase === "completed" && isFullGitObjectId(value.mergeCommitId))
         return structuredClone(value);
-    if (value.status === "escalate")
+    if (statusBase === "escalate")
         return structuredClone(value);
     throw new Error("Merger output has no recognized execution discriminator");
 }

package/dist/navigator-attendance.js

@@ -6,6 +6,7 @@ import { ModelRuntime } from "@earendil-works/pi-coding-agent";
 import { createAssistantMessageEventStream } from "@earendil-works/pi-ai";
 import { Type } from "typebox";
 import { Value } from "typebox/value";
+import { seatFallbackBaseStatus } from "./engine-labor-fallback.js";
 import {
   NAVIGATOR_INVOCATION_ENTRY,
   mintNavigatorInvocationId
@@ -257,6 +258,13 @@ function createNavigatorPrepareTool(onOutput) {
     }
   };
 }
+function statusListMatchesSettlement(candidateStatuses, settlementStatus) {
+  if (candidateStatuses.includes(settlementStatus)) return true;
+  const settlementBase = seatFallbackBaseStatus(settlementStatus);
+  return candidateStatuses.some(
+    (status) => seatFallbackBaseStatus(status) === settlementBase
+  );
+}
 function selectNavigatorCandidate(candidates, settlement) {
   if (settlement.kind !== "accepted") return void 0;
   const usable = candidates.filter((candidate) => candidate.next !== void 0);
@@ -267,7 +275,7 @@ function selectNavigatorCandidate(candidates, settlement) {
   if (rolePhaseMatched.length > 0) {
     if (settlement.status !== void 0) {
       const statusSpecific = rolePhaseMatched.find(
-        (candidate) => candidate.matches?.statuses?.includes(settlement.status) === true
+        (candidate) => candidate.matches?.statuses !== void 0 && statusListMatchesSettlement(candidate.matches.statuses, settlement.status)
       );
       if (statusSpecific !== void 0) {
         return { candidate: statusSpecific, matchedToSettlement: true };

package/dist/package-contracts/judge-output.js

@@ -1,4 +1,5 @@
 /** Package-owned Judge output leaf — no role registration surface. */
+import { seatFallbackBaseStatus, seatFallbackStatusHasLawfulEvidence, } from "../engine-labor-fallback.js";
 export const JUDGE_OUTPUT_TOOL_NAME = "ak_judge_output";
 export const JUDGE_ACCEPTED_TEXT = "Judge verdict accepted";
 export function validateAcceptedJudgeDetails(verdict) {
@@ -11,7 +12,13 @@ export function validateAcceptedJudgeDetails(verdict) {
     catch {
         throw new Error("Judge verdict has no execution discriminator");
     }
-    if (["converged", "continue", "escalate"].includes(String(judgeStatus)))
+    if (typeof judgeStatus !== "string") {
+        throw new Error("Judge verdict has no execution discriminator");
+    }
+    const base = seatFallbackBaseStatus(judgeStatus);
+    if (["converged", "continue", "escalate"].includes(base) &&
+        seatFallbackStatusHasLawfulEvidence(judgeStatus, verdict)) {
         return verdict;
+    }
     throw new Error("Judge verdict has no execution discriminator");
 }

package/dist/package-contracts/reviewer-output.js

@@ -1,4 +1,5 @@
 /** Package-owned Reviewer intent and runtime-receipt leaves — no role registration surface. */
+import { seatFallbackBaseStatus, seatFallbackStatusHasLawfulEvidence, } from "../engine-labor-fallback.js";
 export const REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
 export const REVIEWER_ACCEPTED_TEXT = "Reviewer report accepted";
 function isRecord(value) {
@@ -24,6 +25,11 @@ export function validateReviewerIntent(output) {
 }
 /** Validate runtime-owned facts at their real identity seams (target pins + plain text). */
 export function validateRuntimeReviewerReceipt(output) {
+    const status = read(output, "status");
+    // ADR 0071: tainted top-level status requires latch-shaped engineLaborFallback evidence.
+    if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, output)) {
+        throw new Error("Reviewer receipt has no recognized execution discriminator");
+    }
     const acceptedBatch = read(output, "acceptedBatch");
     const identities = read(output, "identities");
     const construction = read(identities, "construction");
@@ -91,7 +97,9 @@ export function validateRuntimeReviewerReceipt(output) {
 export function projectReviewerIntentToReceipt(intentValue, receiptValue) {
     const intent = validateReviewerIntent(intentValue);
     const receipt = validateRuntimeReviewerReceipt(receiptValue);
-    if (receipt.status !== intent.status || (intent.status === "completed" ? receipt.diagnostic !== undefined : receipt.diagnostic !== intent.diagnostic)) {
+    const receiptStatus = String(receipt.status);
+    const receiptBase = seatFallbackBaseStatus(receiptStatus);
+    if (receiptBase !== intent.status || (intent.status === "completed" ? receipt.diagnostic !== undefined : receipt.diagnostic !== intent.diagnostic)) {
         throw new Error("Reviewer intent and runtime receipt disagree");
     }
     return receipt;

package/dist/package-contracts/terminating-tools.js

@@ -6,6 +6,7 @@ import { COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, validateAcceptedCollect
 import { JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, validateAcceptedJudgeDetails, } from "./judge-output.js";
 import { REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, } from "./reviewer-output.js";
 import { isAuditEscalationResult } from "../audit-escalation.js";
+import { seatFallbackBaseStatus, seatFallbackStatusHasLawfulEvidence, } from "../engine-labor-fallback.js";
 import { DOCTOR_OUTPUT_TOOL_NAME, validateDoctorSubmissionShape, validateRecordedDoctorOutput } from "../doctor-contracts.js";
 import { MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateMergerOutput } from "../merger-contracts.js";
 import { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, validateAcceptedWorkerDetails, } from "./worker-output.js";
@@ -79,9 +80,15 @@ export function validateAcceptedDetails(toolName, details) {
         [MERGER_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
     };
     const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
-    const runtimeBindingMissing = (toolName === DOCTOR_OUTPUT_TOOL_NAME && discriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
+    const baseDiscriminator = typeof discriminator === "string" ? seatFallbackBaseStatus(discriminator) : discriminator;
+    // ADR 0071: `-by-fallback` is not independently lawful — require latch-shaped evidence.
+    const taintedWithoutEvidence = typeof discriminator === "string" &&
+        !seatFallbackStatusHasLawfulEvidence(discriminator, details);
+    const runtimeBindingMissing = (toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
         (toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2);
-    if (runtimeBindingMissing || (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(discriminator)))) {
+    if (taintedWithoutEvidence ||
+        runtimeBindingMissing ||
+        (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator)))) {
         throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
     }
     try {
@@ -112,14 +119,15 @@ export function validateAcceptedLifecycle(toolName, argumentsValue, detailsValue
     const details = validateAcceptedDetails(toolName, detailsValue);
     if (toolName === DOCTOR_OUTPUT_TOOL_NAME) {
         const testimony = validateDoctorSubmissionShape(argumentsValue);
-        if (testimony.status === "refused") {
+        if (seatFallbackBaseStatus(String(testimony.status)) === "refused") {
             if (!deepEqual(testimony, details))
                 throw new Error("accepted tool lifecycle details mismatch");
             return details;
         }
         const receipt = details;
-        if (receipt.status !== "completed")
+        if (seatFallbackBaseStatus(String(receipt.status)) !== "completed") {
             throw new Error("accepted tool lifecycle details mismatch");
+        }
         const { cost: _runtimeCost, ...projected } = receipt;
         if (!deepEqual(testimony, projected))
             throw new Error("accepted tool lifecycle details mismatch");
@@ -139,7 +147,8 @@ export function acceptedFacts(toolName, details) {
         case JUDGE_OUTPUT_TOOL_NAME: return { status: details.judgeStatus };
         case MERGER_OUTPUT_TOOL_NAME: {
             const output = details;
-            return { status: output.status, ...(output.status === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {}) };
+            const status = output.status;
+            return { status, ...(seatFallbackBaseStatus(status) === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {}) };
         }
         case COLLECTOR_OUTPUT_TOOL:
             return { status: "collected" };