@akagilnc/pi-workflow-roles 0.1.3262 → 0.1.3280

package/dist/package-contracts/gatekeeper-output.js

@@ -0,0 +1,71 @@
+/**
+ * Public Gatekeeper (门下省) terminating receipt contracts (#639).
+ * Direct public seat shares the province decision shape: dispatch | pass.
+ * No usable result is infrastructure failure via public settlement, not a judgment status (#475).
+ */
+import { Type } from "typebox";
+import { openToolObject } from "../open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./terminating-infrastructure.js";
+export const GATEKEEPER_OUTPUT_TOOL_NAME = "ak_gatekeeper_output";
+export const GATEKEEPER_ACCEPTED_TEXT = "门下省决议已受理";
+/** Same open decision shape the province uses inside audit sessions. */
+export const gatekeeperDecisionSchema = openToolObject(Type.Object({
+    status: Type.Unknown({
+        description: "dispatch | pass — 形状指引，非 schema 闸",
+    }),
+    officer: Type.Unknown({
+        description: "status 为 dispatch 时为 inspector | notary",
+    }),
+    findings: Type.Unknown({
+        description: "status 为 pass 时可选 string[] findings",
+    }),
+}));
+export const gatekeeperOutputSchema = withInfrastructureFailureDeclaration(gatekeeperDecisionSchema);
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asStringArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((item) => typeof item === "string");
+}
+/**
+ * Project one lawful explicit Gatekeeper decision (dispatch | pass).
+ * No throw on shape — ADR 0055 / 第 0 条: already-submitted params are retained as-is;
+ * public-terminal projects non-usable releases via typed failure cause.
+ */
+export function projectLawfulGatekeeperOutput(value) {
+    if (!isRecord(value))
+        return undefined;
+    if (value.status === "pass") {
+        return Array.isArray(value.findings)
+            ? { status: "pass", findings: asStringArray(value.findings) }
+            : { status: "pass" };
+    }
+    if (value.status === "dispatch" &&
+        (value.officer === "inspector" || value.officer === "notary")) {
+        return { status: "dispatch", officer: value.officer };
+    }
+    return undefined;
+}
+/**
+ * Settlement/recording path: only lawful recorded dispatch/pass.
+ * Does not gate role admission — callers must not use this to reject a submission.
+ */
+export function validateRecordedGatekeeperOutput(value) {
+    const projected = projectLawfulGatekeeperOutput(value);
+    if (projected === undefined) {
+        throw new Error("Gatekeeper output has no recognized execution discriminator");
+    }
+    return projected;
+}
+export function gatekeeperDecisiveFacts(output) {
+    const facts = { status: output.status };
+    if (output.status === "dispatch") {
+        facts.officer = output.officer;
+    }
+    else if (Array.isArray(output.findings)) {
+        facts.findingsCount = output.findings.length;
+    }
+    return facts;
+}

package/dist/package-contracts/navigator-output.js

@@ -0,0 +1,48 @@
+/**
+ * Public Navigator (游奕使) terminating receipt contracts (#639).
+ * Direct public seat submits route advice with the same candidate shape the
+ * attendance prepare tool owns — one shape authority for navigator advice.
+ * No usable result is infrastructure failure via public settlement, not a judgment status (#475).
+ */
+import { Type } from "typebox";
+import { openToolObject } from "../open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./terminating-infrastructure.js";
+export const NAVIGATOR_OUTPUT_TOOL_NAME = "ak_navigator_output";
+export const NAVIGATOR_ACCEPTED_TEXT = "游奕使建议已受理";
+export const navigatorOutputSchema = withInfrastructureFailureDeclaration(openToolObject(Type.Object({
+    status: Type.Unknown({
+        description: "advice — 形状指引，非 schema 闸",
+    }),
+    candidates: Type.Unknown({
+        description: "排好序的路线建议数组，元素含 next/phase/reason — 形状指引，非 schema 闸",
+    }),
+})));
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Project one lawful explicit Navigator advice receipt: candidates array,
+ * each candidate a record. Broken ancillary fields are preserved as submitted —
+ * shape is not an admission gate (ADR 0055 / 第 0 条).
+ */
+export function projectLawfulNavigatorOutput(value) {
+    if (!isRecord(value) || !Array.isArray(value.candidates))
+        return undefined;
+    if (value.status !== "advice")
+        return undefined;
+    return { status: "advice", candidates: value.candidates.filter(isRecord) };
+}
+/**
+ * Settlement/recording path: only lawful recorded candidate arrays.
+ * Does not gate role admission — callers must not use this to reject a submission.
+ */
+export function validateRecordedNavigatorOutput(value) {
+    const projected = projectLawfulNavigatorOutput(value);
+    if (projected === undefined) {
+        throw new Error("Navigator output has no recognized execution discriminator");
+    }
+    return projected;
+}
+export function navigatorDecisiveFacts(output) {
+    return { status: "advice", candidates: output.candidates };
+}

package/dist/package-contracts/terminating-tools.js

@@ -8,13 +8,15 @@ import { REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, projectReviewerInten
 import { isAuditEscalationResult } from "../audit-escalation.js";
 import { CorrectableSubmissionError } from "../submission-correctable-error.js";
 import { DOCTOR_ACCEPTED_TEXT, DOCTOR_OUTPUT_TOOL_NAME, validateDoctorSubmissionShape, validateRecordedDoctorOutput } from "../doctor-contracts.js";
+import { GATEKEEPER_ACCEPTED_TEXT, GATEKEEPER_OUTPUT_TOOL_NAME, validateRecordedGatekeeperOutput } from "./gatekeeper-output.js";
+import { NAVIGATOR_ACCEPTED_TEXT, NAVIGATOR_OUTPUT_TOOL_NAME, validateRecordedNavigatorOutput } from "./navigator-output.js";
 import { MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateMergerOutput } from "../merger-contracts.js";
 import { NOTARY_ACCEPTED_TEXT, NOTARY_OUTPUT_TOOL_NAME, validateRecordedNotaryOutput } from "../notary-contracts.js";
 import { COUNTERSIGN_ACCEPTED_TEXT, COUNTERSIGN_OUTPUT_TOOL_NAME, validateRecordedCountersignOutput } from "../countersign-contracts.js";
 import { GLEANER_LEFT_ACCEPTED_TEXT, GLEANER_LEFT_OUTPUT_TOOL_NAME, validateRecordedGleanerLeftOutput } from "../gleaner-left-contracts.js";
 import { INSPECTOR_ACCEPTED_TEXT, INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput } from "../inspector-contracts.js";
 import { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, validateAcceptedWorkerDetails, } from "./worker-output.js";
-export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, };
+export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, };
 export const TERMINATING_TOOL_NAMES = [
     CODER_OUTPUT_TOOL_NAME,
     FIXER_OUTPUT_TOOL_NAME,
@@ -27,6 +29,8 @@ export const TERMINATING_TOOL_NAMES = [
     COUNTERSIGN_OUTPUT_TOOL_NAME,
     GLEANER_LEFT_OUTPUT_TOOL_NAME,
     INSPECTOR_OUTPUT_TOOL_NAME,
+    GATEKEEPER_OUTPUT_TOOL_NAME,
+    NAVIGATOR_OUTPUT_TOOL_NAME,
 ];
 export function isTerminatingToolName(name) {
     return TERMINATING_TOOL_NAMES.includes(name);
@@ -55,6 +59,10 @@ export function acceptedTextFor(toolName) {
             return GLEANER_LEFT_ACCEPTED_TEXT;
         case INSPECTOR_OUTPUT_TOOL_NAME:
             return INSPECTOR_ACCEPTED_TEXT;
+        case GATEKEEPER_OUTPUT_TOOL_NAME:
+            return GATEKEEPER_ACCEPTED_TEXT;
+        case NAVIGATOR_OUTPUT_TOOL_NAME:
+            return NAVIGATOR_ACCEPTED_TEXT;
     }
 }
 export class AcceptedDetailsContractError extends CorrectableSubmissionError {
@@ -104,6 +112,8 @@ export function validateAcceptedDetails(toolName, details) {
         [COUNTERSIGN_OUTPUT_TOOL_NAME]: ["converged", "continue", "escalate"],
         [GLEANER_LEFT_OUTPUT_TOOL_NAME]: ["completed"],
         [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce"],
+        [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
+        [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
     };
     const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
     const baseDiscriminator = discriminator;
@@ -137,6 +147,10 @@ export function validateAcceptedDetails(toolName, details) {
                 return validateRecordedGleanerLeftOutput(details);
             case INSPECTOR_OUTPUT_TOOL_NAME:
                 return validateRecordedInspectorOutput(details);
+            case GATEKEEPER_OUTPUT_TOOL_NAME:
+                return validateRecordedGatekeeperOutput(details);
+            case NAVIGATOR_OUTPUT_TOOL_NAME:
+                return validateRecordedNavigatorOutput(details);
         }
     }
     catch (error) {
@@ -176,7 +190,9 @@ export function acceptedFacts(toolName, details) {
         case DOCTOR_OUTPUT_TOOL_NAME:
         case NOTARY_OUTPUT_TOOL_NAME:
         case GLEANER_LEFT_OUTPUT_TOOL_NAME:
-        case INSPECTOR_OUTPUT_TOOL_NAME: return { status: details.status };
+        case INSPECTOR_OUTPUT_TOOL_NAME:
+        case GATEKEEPER_OUTPUT_TOOL_NAME:
+        case NAVIGATOR_OUTPUT_TOOL_NAME: return { status: details.status };
         case JUDGE_OUTPUT_TOOL_NAME: return { status: details.judgeStatus };
         case COUNTERSIGN_OUTPUT_TOOL_NAME: return { status: details.countersignStatus };
         case MERGER_OUTPUT_TOOL_NAME: {

package/dist/packaged-role-registry.js

@@ -1,4 +1,6 @@
 import { COLLECTOR_OUTPUT_TOOL } from "./package-contracts/collector-output.js";
+import { GATEKEEPER_OUTPUT_TOOL_NAME } from "./package-contracts/gatekeeper-output.js";
+import { NAVIGATOR_OUTPUT_TOOL_NAME } from "./package-contracts/navigator-output.js";
 import { JUDGE_OUTPUT_TOOL_NAME } from "./package-contracts/judge-output.js";
 import { REVIEWER_OUTPUT_TOOL_NAME } from "./package-contracts/reviewer-output.js";
 import { CODER_OUTPUT_TOOL_NAME, FIXER_OUTPUT_TOOL_NAME } from "./package-contracts/worker-output.js";
@@ -151,6 +153,28 @@ const PUBLIC_ROLE_RECORDS = [
     phaseFlag: void 0,
     activationStage: "load-and-install",
     sessionMaterials: INSPECTOR_SESSION_MATERIALS
+  },
+  // #639: gatekeeper and navigator are roles like any other — public ak-role
+  // entries; automatic attendance (province dispatch, navigator sidecar) is
+  // unchanged and orthogonal to callability.
+  {
+    role: "gatekeeper",
+    phases: [null],
+    outputTool: GATEKEEPER_OUTPUT_TOOL_NAME,
+    inputFlag: void 0,
+    phaseFlag: void 0,
+    activationStage: "load-and-install",
+    // Province materials; officers reuse their own public records below.
+    sessionMaterials: ["CLAUDE.md", "souls/gatekeeper.md", "souls/quality-law.md", "souls/gate-output-guide.md"]
+  },
+  {
+    role: "navigator",
+    phases: [null],
+    outputTool: NAVIGATOR_OUTPUT_TOOL_NAME,
+    inputFlag: void 0,
+    phaseFlag: void 0,
+    activationStage: "load-and-install",
+    sessionMaterials: ["CLAUDE.md", "souls/navigator.md"]
   }
 ];
 const ONE_SHOT_ROLES = [

package/dist/public-cli/config.js

@@ -5,7 +5,7 @@ import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { assertLegalEngineName } from "../package-resources/engine-material.js";
 import { resolveConfiguredProvinceOfficer } from "../institutional-resolution.js";
-import { AUTOMATIC_CONFIGURABLE_SEATS, PUBLIC_CALLABLE_ROLES, PUBLIC_CONFIGURABLE_SEATS, isAutomaticConfigurableSeat, isPublicCallableRole, isPublicConfigurableSeat, seatModelOnly, publicStartupCandidates, } from "./registry.js";
+import { PUBLIC_CALLABLE_ROLES, PUBLIC_CONFIGURABLE_SEATS, isPublicCallableRole, isPublicConfigurableSeat, seatModelOnly, publicStartupCandidates, } from "./registry.js";
 /** Province officers that may carry a persistent model override (#453). */
 export const GATE_OFFICER_SEATS = [
     "gatekeeper",
@@ -120,7 +120,7 @@ export function setPersistentSeatHost(config, seat, host) {
  * First engine still requires an existing seat row (model, or residual axes).
  * Clearing engine from an axis-only residual drops the empty row; clearing
  * engine from a model+engine row leaves model-only. Seat type is PublicCallableRole
- * (navigator excluded at the type boundary).
+ * (same as PublicConfigurableSeat; navigator included since #639).
  */
 export function setPersistentSeatEngine(config, seat, engine) {
     const previous = config.seats[seat];
@@ -174,15 +174,12 @@ export function setAutoResumeLimit(config, limit) {
 /**
  * Config-parse seam: persistent call axes belong to PUBLIC_CALLABLE_ROLES;
  * engine names need only path-safety syntax (no closed material catalog;
- * #376 / #378 / #391 / ADR 0069). Disk-handwritten automatic-seat axes are
- * rejected. Syntax authority = assertLegalEngineName (no injected duplicate).
+ * #376 / #378 / #391 / ADR 0069). Syntax authority = assertLegalEngineName
+ * (no injected duplicate).
  */
 export function validatePublicCliConfigAxes(config, _packageRoot) {
     for (const seat of Object.keys(config.seats)) {
         const row = config.seats[seat];
-        if ((row?.engine !== undefined || row?.host !== undefined) && !isPublicCallableRole(seat)) {
-            throw new Error(`config seat ${seat} cannot persist call axes: no independent activation path; storing would be silently ineffective`);
-        }
         if (row?.engine === undefined)
             continue;
         try {
@@ -429,13 +426,11 @@ function attachEngineAxis(seat, config, invocation) {
     };
 }
 function resolveBaseSeat(config, seat, credentials) {
-    const automatic = isAutomaticConfigurableSeat(seat);
     // #620: subordinate officers consume institutional-resolution authority result.
     if (seat === "notary" || seat === "inspector") {
         const resolved = resolveConfiguredProvinceOfficer(config, seat);
         return {
             seat,
-            automatic,
             source: resolved.source,
             ...(resolved.selection === undefined ? {} : { selection: resolved.selection }),
             engineSource: "unconfigured",
@@ -446,7 +441,6 @@ function resolveBaseSeat(config, seat, credentials) {
     if (persistentModel !== undefined) {
         return {
             seat,
-            automatic,
             source: "persistent",
             selection: persistentModel,
             engineSource: "unconfigured",
@@ -456,16 +450,14 @@ function resolveBaseSeat(config, seat, credentials) {
     if (startup !== undefined) {
         return {
             seat,
-            automatic,
             source: "startup",
             selection: startup,
             engineSource: "unconfigured",
         };
     }
-    return { seat, automatic, source: "unconfigured", engineSource: "unconfigured" };
+    return { seat, source: "unconfigured", engineSource: "unconfigured" };
 }
 export function resolveEffectiveSeat(config, seat, credentials, invocation) {
-    const automatic = isAutomaticConfigurableSeat(seat);
     const hasModelInvocation = invocation !== undefined &&
         (invocation.model !== undefined || invocation.thinking !== undefined);
     let modelSeat;
@@ -478,7 +470,6 @@ export function resolveEffectiveSeat(config, seat, credentials, invocation) {
             : `${invocation.model}:${invocation.thinking}`;
         modelSeat = {
             seat,
-            automatic,
             source: "invocation",
             selection: parseModelSpec(spec),
             engineSource: "unconfigured",
@@ -489,7 +480,6 @@ export function resolveEffectiveSeat(config, seat, credentials, invocation) {
         if (base.selection === undefined || invocation.thinking === undefined) {
             modelSeat = {
                 seat,
-                automatic,
                 source: "unconfigured",
                 engineSource: "unconfigured",
             };
@@ -497,7 +487,6 @@ export function resolveEffectiveSeat(config, seat, credentials, invocation) {
         else {
             modelSeat = {
                 seat,
-                automatic,
                 source: "invocation",
                 selection: { ...base.selection, thinking: invocation.thinking },
                 engineSource: "unconfigured",
@@ -509,12 +498,9 @@ export function resolveEffectiveSeat(config, seat, credentials, invocation) {
 export function effectiveSeatConfigurations(config, credentials, invocation) {
     return PUBLIC_CONFIGURABLE_SEATS.map((seat) => resolveEffectiveSeat(config, seat, credentials, invocation));
 }
-/** Callable roles first (package order), then automatic configurable seats. */
+/** Callable roles in package order. */
 export function listRolesForDisplay(config, credentials, invocation) {
-    const all = effectiveSeatConfigurations(config, credentials, invocation);
-    const callable = PUBLIC_CALLABLE_ROLES.map((role) => all.find((entry) => entry.seat === role));
-    const automatic = AUTOMATIC_CONFIGURABLE_SEATS.map((seat) => all.find((entry) => entry.seat === seat));
-    return [...callable, ...automatic];
+    return effectiveSeatConfigurations(config, credentials, invocation);
 }
 /**
  * Read configured credential presence from a Pi auth.json document.