@akagilnc/pi-workflow-roles 0.1.3204-next.0fd96af → 0.1.3236

package/CLAUDE.md

@@ -88,4 +88,4 @@ A probe is temporary evidence. After its evidence purpose is disposed, either de
 
 ## 修订通道
 
-Soul 与本文件（CLAUDE.md）的修订走陛下直改通道（全文过目直落主线），不走工厂流程，且负持续精进义务；工厂只供修订素材，不拥有动笔权。
+Soul 与本文件的内容修订须经陛下亲自审定，工厂未获授权不得改动。

package/dist/grok/production-host.js

@@ -376,7 +376,7 @@ __export(archivist_record_entry_exports, {
   createRecordSession: () => createRecordSession
 });
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname8, resolve as resolve6, join as join10 } from "node:path";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
@@ -397,7 +397,7 @@ function readCurrentSession(sessionDir) {
 function writeCurrentSession(sessionDir, sessionFile) {
   const ledger = join10(sessionDir, CURRENT_SESSION_LEDGER);
   try {
-    writeFileSync(ledger, `${JSON.stringify({ sessionFile })}
+    writeFileSync2(ledger, `${JSON.stringify({ sessionFile })}
 `, { flag: "wx" });
   } catch (error) {
     throw new ActivationLedgerError(
@@ -477,7 +477,7 @@ function createRecordSession(options) {
     if (file !== void 0 && !existsSync5(file)) {
       const header = session.getHeader();
       if (header !== null && header.type === "session") {
-        writeFileSync(file, `${JSON.stringify(header)}
+        writeFileSync2(file, `${JSON.stringify(header)}
 `, { flag: "wx" });
         session.setSessionFile(file);
       }
@@ -1104,6 +1104,9 @@ async function openPiInstitutionalSession(options) {
         };
         if (options.signal?.aborted) abortSession();
         else options.signal?.addEventListener("abort", abortSession, { once: true });
+        const assistantCountBefore = session.messages.filter(
+          (message) => message.role === "assistant"
+        ).length;
         let promptError;
         try {
           await session.prompt(text);
@@ -1124,7 +1127,10 @@ async function openPiInstitutionalSession(options) {
             });
           }
         }
-        if (promptError !== void 0 && lastAssistant === void 0) {
+        const producedAssistant = session.messages.filter(
+          (message) => message.role === "assistant"
+        ).length > assistantCountBefore;
+        if (promptError !== void 0 && !producedAssistant) {
           throw promptError;
         }
         return {
@@ -1148,18 +1154,30 @@ async function openPiInstitutionalSession(options) {
         if (closed) return;
         closed = true;
         listeners.clear();
+        const cleanupFailures = [];
         try {
           unsubscribeSession();
-        } finally {
+        } catch (error) {
+          cleanupFailures.push(error);
+        }
+        try {
           session.dispose();
+        } catch (error) {
+          cleanupFailures.push(error);
         }
         if (scratchDir !== void 0) {
           try {
             await rm2(scratchDir, { recursive: true, force: true });
           } catch (error) {
-            throw error;
+            cleanupFailures.push(error);
           }
         }
+        if (cleanupFailures.length === 1) throw cleanupFailures[0];
+        if (cleanupFailures.length > 1) {
+          throw new AggregateError(cleanupFailures, `${label} close cleanup failures`, {
+            cause: cleanupFailures[0]
+          });
+        }
       }
     };
     return {
@@ -2769,6 +2787,7 @@ var PUBLIC_ROLE_RECORDS = [
   {
     role: "reviewer",
     phases: [null],
+    bareCommand: false,
     outputTool: REVIEWER_OUTPUT_TOOL_NAME,
     inputFlag: void 0,
     phaseFlag: void 0,
@@ -2784,6 +2803,7 @@ var PUBLIC_ROLE_RECORDS = [
   {
     role: "collector",
     phases: [null],
+    bareCommand: false,
     outputTool: COLLECTOR_OUTPUT_TOOL,
     inputFlag: void 0,
     phaseFlag: void 0,
@@ -2793,6 +2813,7 @@ var PUBLIC_ROLE_RECORDS = [
   {
     role: "doctor",
     phases: [null],
+    bareCommand: false,
     outputTool: DOCTOR_OUTPUT_TOOL_NAME,
     inputFlag: "ak-doctor-case",
     phaseFlag: void 0,
@@ -2811,6 +2832,7 @@ var PUBLIC_ROLE_RECORDS = [
   {
     role: "notary",
     phases: [null],
+    bareCommand: false,
     outputTool: NOTARY_OUTPUT_TOOL_NAME,
     inputFlag: "ak-notary-source-run",
     phaseFlag: void 0,
@@ -2829,6 +2851,7 @@ var PUBLIC_ROLE_RECORDS = [
   {
     role: "gleaner-left",
     phases: [null],
+    bareCommand: false,
     outputTool: GLEANER_LEFT_OUTPUT_TOOL_NAME,
     inputFlag: void 0,
     phaseFlag: void 0,
@@ -2946,7 +2969,13 @@ import "@earendil-works/pi-ai";
 init_activation_ledger_git();
 init_activation_ledger_topology();
 import { createHash as createHash3, randomUUID } from "node:crypto";
-import { appendFileSync, existsSync as existsSync2, readFileSync } from "node:fs";
+import {
+  appendFileSync,
+  existsSync as existsSync2,
+  readFileSync,
+  unlinkSync,
+  writeFileSync
+} from "node:fs";
 import { basename as basename3, dirname as dirname6, join as join4, resolve as resolve5 } from "node:path";
 
 // src/sitian-contracts.ts
@@ -2968,6 +2997,123 @@ var SitianInfrastructureError = class extends Error {
 function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function errorCodeOf(error) {
+  return error.code;
+}
+function identityClaimPath(recordFile, identity) {
+  const digest = createHash3("sha256").update(identity, "utf8").digest("hex");
+  return `${recordFile}.id-${digest}`;
+}
+function createExclusiveFile(path, contents) {
+  writeFileSync(path, contents, { encoding: "utf8", flag: "wx" });
+}
+function sealTornTail(recordFile) {
+  if (!existsSync2(recordFile)) return;
+  const buffer = readFileSync(recordFile);
+  if (buffer.length > 0 && buffer[buffer.length - 1] !== 10) {
+    appendFileSync(recordFile, "\n", "utf8");
+  }
+}
+function findIdentityPointer(recordFile, identity, kind, level) {
+  if (!existsSync2(recordFile)) return void 0;
+  const text = readFileSync(recordFile, "utf8");
+  for (const line2 of text.split("\n")) {
+    const trimmed = line2.trim();
+    if (!trimmed) continue;
+    try {
+      const parsed = JSON.parse(trimmed);
+      if (isRecord5(parsed) && parsed.identity === identity) {
+        return { identity, recordFile, kind, level };
+      }
+    } catch {
+    }
+  }
+  return void 0;
+}
+function unlinkAbsentOk(path) {
+  try {
+    unlinkSync(path);
+    return void 0;
+  } catch (error) {
+    if (errorCodeOf(error) === "ENOENT") return void 0;
+    return error instanceof Error ? error : new Error(errorText(error));
+  }
+}
+function appendWithIdentityClaim(recordFile, record4, row) {
+  sealTornTail(recordFile);
+  const claimPath = identityClaimPath(recordFile, record4.identity);
+  const existing = findIdentityPointer(
+    recordFile,
+    record4.identity,
+    record4.kind,
+    record4.level
+  );
+  if (existing !== void 0) {
+    unlinkAbsentOk(claimPath);
+    return existing;
+  }
+  try {
+    createExclusiveFile(claimPath, "");
+  } catch (error) {
+    if (errorCodeOf(error) !== "EEXIST") throw error;
+    sealTornTail(recordFile);
+    const published = findIdentityPointer(
+      recordFile,
+      record4.identity,
+      record4.kind,
+      record4.level
+    );
+    if (published !== void 0) {
+      unlinkAbsentOk(claimPath);
+      return published;
+    }
+    throw new SitianInfrastructureError(
+      `Sitian identity claim at ${claimPath} already exists for identity ${record4.identity}`,
+      { cause: error }
+    );
+  }
+  let primaryFailure;
+  let result2;
+  let cleanupFailure;
+  try {
+    sealTornTail(recordFile);
+    const raced = findIdentityPointer(
+      recordFile,
+      record4.identity,
+      record4.kind,
+      record4.level
+    );
+    if (raced !== void 0) {
+      result2 = raced;
+    } else {
+      appendFileSync(recordFile, row, "utf8");
+      result2 = {
+        identity: record4.identity,
+        recordFile,
+        kind: record4.kind,
+        level: record4.level
+      };
+    }
+  } catch (error) {
+    primaryFailure = error;
+  } finally {
+    cleanupFailure = unlinkAbsentOk(claimPath);
+  }
+  if (primaryFailure !== void 0) {
+    if (primaryFailure instanceof SitianInfrastructureError) throw primaryFailure;
+    throw new SitianInfrastructureError(
+      `Sitian appender persistence failure: ${errorText(primaryFailure)}`,
+      { cause: primaryFailure }
+    );
+  }
+  if (cleanupFailure !== void 0) {
+    throw new SitianInfrastructureError(
+      `Sitian identity claim at ${claimPath} could not be released after append for identity ${record4.identity}: ${errorText(cleanupFailure)}`,
+      { cause: cleanupFailure }
+    );
+  }
+  return result2;
+}
 var S4_SUBMISSION_LEDGER_KINDS = /* @__PURE__ */ new Set([
   "candidate",
   "roundContext",
@@ -3040,40 +3186,9 @@ function appendSitianRecord(input) {
       ...input.raw === void 0 ? {} : { raw: input.raw },
       ...input.usage === void 0 ? {} : { usage: input.usage }
     };
-    if (existsSync2(recordFile)) {
-      const buffer = readFileSync(recordFile);
-      if (buffer.length > 0) {
-        if (buffer[buffer.length - 1] !== 10) {
-          appendFileSync(recordFile, "\n", "utf8");
-        }
-        const text = readFileSync(recordFile, "utf8");
-        for (const line2 of text.split("\n")) {
-          const trimmed = line2.trim();
-          if (!trimmed) continue;
-          try {
-            const parsed = JSON.parse(trimmed);
-            if (isRecord5(parsed) && parsed.identity === identity) {
-              return {
-                identity,
-                recordFile,
-                kind: record4.kind,
-                level: record4.level
-              };
-            }
-          } catch {
-          }
-        }
-      }
-    }
     const row = `${JSON.stringify(record4)}
 `;
-    appendFileSync(recordFile, row, "utf8");
-    return {
-      identity,
-      recordFile,
-      kind: record4.kind,
-      level: record4.level
-    };
+    return appendWithIdentityClaim(recordFile, record4, row);
   } catch (error) {
     if (error instanceof SitianInfrastructureError) throw error;
     throw new SitianInfrastructureError(
@@ -5457,9 +5572,16 @@ init_activation_ledger_topology();
 var PUBLIC_CALLABLE_ROLES2 = new Set(
   PACKAGED_ROLE_REGISTRY.map((entry) => entry.role)
 );
+function isPublicCallableRole2(role) {
+  return PUBLIC_CALLABLE_ROLES2.has(role);
+}
 function renderPublicAkRoleCommand(target) {
-  if (!PUBLIC_CALLABLE_ROLES2.has(target.role)) return void 0;
+  if (!isPublicCallableRole2(target.role)) return void 0;
   const role = target.role;
+  const metadata = packagedRoleMetadata(role);
+  if (metadata !== void 0 && "bareCommand" in metadata && metadata.bareCommand === false) {
+    return void 0;
+  }
   if (target.phase === null || target.phase === void 0) {
     return `ak-role ${role}`;
   }
@@ -7511,7 +7633,7 @@ function stringEnum(values, options = {}) {
 }
 
 // src/public-cli/reviewer-dispatch-rejection.ts
-import { writeFileSync as writeFileSync2 } from "node:fs";
+import { writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join19 } from "node:path";
 
 // src/adr-path-refs.ts
@@ -8114,7 +8236,7 @@ function reviewerDispatchRejectionPath(runDirectory) {
   return join19(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 function recordReviewerDispatchRejectionSync(runDirectory, rejection) {
-  writeFileSync2(
+  writeFileSync3(
     reviewerDispatchRejectionPath(runDirectory),
     `${JSON.stringify(rejection)}
 `,
@@ -8409,7 +8531,7 @@ import {
   lstatSync as lstatSync2,
   realpathSync as realpathSync3,
   statSync as statSync3,
-  writeFileSync as writeFileSync3
+  writeFileSync as writeFileSync4
 } from "node:fs";
 import { isAbsolute as isAbsolute5, resolve as resolve14 } from "node:path";
 var ActivationSessionFileMissingError = class extends Error {
@@ -8430,7 +8552,7 @@ function materializeDeferredSessionFile(sessionManager, resolvedFile) {
     throw new ActivationSessionFileMissingError(resolvedFile);
   }
   try {
-    writeFileSync3(resolvedFile, `${JSON.stringify(header)}
+    writeFileSync4(resolvedFile, `${JSON.stringify(header)}
 `, { flag: "wx" });
   } catch (error) {
     if (errnoCode(error) !== "EEXIST") {
@@ -13913,15 +14035,31 @@ async function prepareGrokRoleEnvelope(options) {
   const dispose = async () => {
     if (disposed) return;
     disposed = true;
+    const cleanupFailures = [];
     try {
       await emit("session_shutdown", {});
+    } catch (error) {
+      cleanupFailures.push(error);
+    }
+    try {
+      restoreAkRoleRunDir();
+    } catch (error) {
+      cleanupFailures.push(error);
+    }
+    try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
       await new Promise((resolve17, reject) => {
         server.close((error) => error ? reject(error) : resolve17());
       });
-    } finally {
-      restoreAkRoleRunDir();
+    } catch (error) {
+      cleanupFailures.push(error);
+    }
+    if (cleanupFailures.length === 1) throw cleanupFailures[0];
+    if (cleanupFailures.length > 1) {
+      throw new AggregateError(cleanupFailures, "Grok envelope dispose cleanup failures", {
+        cause: cleanupFailures[0]
+      });
     }
   };
   const closeRound = async () => {

package/dist/packaged-role-registry.js

@@ -66,6 +66,7 @@ const PUBLIC_ROLE_RECORDS = [
   {
     role: "reviewer",
     phases: [null],
+    bareCommand: false,
     outputTool: REVIEWER_OUTPUT_TOOL_NAME,
     inputFlag: void 0,
     phaseFlag: void 0,
@@ -81,6 +82,7 @@ const PUBLIC_ROLE_RECORDS = [
   {
     role: "collector",
     phases: [null],
+    bareCommand: false,
     outputTool: COLLECTOR_OUTPUT_TOOL,
     inputFlag: void 0,
     phaseFlag: void 0,
@@ -90,6 +92,7 @@ const PUBLIC_ROLE_RECORDS = [
   {
     role: "doctor",
     phases: [null],
+    bareCommand: false,
     outputTool: DOCTOR_OUTPUT_TOOL_NAME,
     inputFlag: "ak-doctor-case",
     phaseFlag: void 0,
@@ -108,6 +111,7 @@ const PUBLIC_ROLE_RECORDS = [
   {
     role: "notary",
     phases: [null],
+    bareCommand: false,
     outputTool: NOTARY_OUTPUT_TOOL_NAME,
     inputFlag: "ak-notary-source-run",
     phaseFlag: void 0,
@@ -126,6 +130,7 @@ const PUBLIC_ROLE_RECORDS = [
   {
     role: "gleaner-left",
     phases: [null],
+    bareCommand: false,
     outputTool: GLEANER_LEFT_OUTPUT_TOOL_NAME,
     inputFlag: void 0,
     phaseFlag: void 0,

package/dist/pi/in-process-session.js

@@ -541,6 +541,9 @@ async function openPiInstitutionalSession(options) {
         };
         if (options.signal?.aborted) abortSession();
         else options.signal?.addEventListener("abort", abortSession, { once: true });
+        const assistantCountBefore = session.messages.filter(
+          (message) => message.role === "assistant"
+        ).length;
         let promptError;
         try {
           await session.prompt(text);
@@ -561,7 +564,10 @@ async function openPiInstitutionalSession(options) {
             });
           }
         }
-        if (promptError !== void 0 && lastAssistant === void 0) {
+        const producedAssistant = session.messages.filter(
+          (message) => message.role === "assistant"
+        ).length > assistantCountBefore;
+        if (promptError !== void 0 && !producedAssistant) {
           throw promptError;
         }
         return {
@@ -585,18 +591,30 @@ async function openPiInstitutionalSession(options) {
         if (closed) return;
         closed = true;
         listeners.clear();
+        const cleanupFailures = [];
         try {
           unsubscribeSession();
-        } finally {
+        } catch (error) {
+          cleanupFailures.push(error);
+        }
+        try {
           session.dispose();
+        } catch (error) {
+          cleanupFailures.push(error);
         }
         if (scratchDir !== void 0) {
           try {
             await rm(scratchDir, { recursive: true, force: true });
           } catch (error) {
-            throw error;
+            cleanupFailures.push(error);
           }
         }
+        if (cleanupFailures.length === 1) throw cleanupFailures[0];
+        if (cleanupFailures.length > 1) {
+          throw new AggregateError(cleanupFailures, `${label} close cleanup failures`, {
+            cause: cleanupFailures[0]
+          });
+        }
       }
     };
     return {