@akagilnc/pi-workflow-roles 0.1.3412 → 0.1.3439

package/dist/stream-idle-guard.js

@@ -1,75 +1,67 @@
-/**
- * Stream idle backstop (#102 / #155 a): first-wait + between-event silence only.
- * Not a total wall-clock for long thinking turns.
- *
- * Default silence budget is owner-final 183s (#102 2026-08-04),
- * same numeric value as header timeoutMs but a distinct body-idle clock.
- */
-export const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 183_000;
-export const STREAM_IDLE_TIMEOUT_CODE = "AK_STREAM_IDLE_TIMEOUT";
-export class StreamIdleTimeoutError extends Error {
-    code = STREAM_IDLE_TIMEOUT_CODE;
-    idleTimeoutMs;
-    constructor(idleTimeoutMs, options) {
-        super(`stream idle timeout after ${idleTimeoutMs}ms`, options);
-        this.name = "StreamIdleTimeoutError";
-        this.idleTimeoutMs = idleTimeoutMs;
-    }
+const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 183e3;
+const STREAM_IDLE_TIMEOUT_CODE = "AK_STREAM_IDLE_TIMEOUT";
+class StreamIdleTimeoutError extends Error {
+  code = STREAM_IDLE_TIMEOUT_CODE;
+  idleTimeoutMs;
+  constructor(idleTimeoutMs, options) {
+    super(`stream idle timeout after ${idleTimeoutMs}ms`, options);
+    this.name = "StreamIdleTimeoutError";
+    this.idleTimeoutMs = idleTimeoutMs;
+  }
 }
-export function isStreamIdleTimeoutError(value) {
-    return value instanceof StreamIdleTimeoutError
-        || (typeof value === "object"
-            && value !== null
-            && value.name === "StreamIdleTimeoutError"
-            && value.code === STREAM_IDLE_TIMEOUT_CODE);
+function isStreamIdleTimeoutError(value) {
+  return value instanceof StreamIdleTimeoutError || typeof value === "object" && value !== null && value.name === "StreamIdleTimeoutError" && value.code === STREAM_IDLE_TIMEOUT_CODE;
 }
-export function createStreamIdleGuard(options = {}) {
-    const idleTimeoutMs = options.idleTimeoutMs ?? DEFAULT_STREAM_IDLE_TIMEOUT_MS;
-    const parentSignal = options.parentSignal;
-    const controller = new AbortController();
-    let timer;
-    let disposed = false;
-    const clear = () => {
-        if (timer !== undefined) {
-            clearTimeout(timer);
-            timer = undefined;
-        }
-    };
-    const arm = () => {
-        if (disposed || controller.signal.aborted || idleTimeoutMs <= 0)
-            return;
-        clear();
-        timer = setTimeout(() => {
-            timer = undefined;
-            if (disposed || controller.signal.aborted)
-                return;
-            controller.abort(new StreamIdleTimeoutError(idleTimeoutMs));
-        }, idleTimeoutMs);
-    };
-    const onParentAbort = () => {
-        if (controller.signal.aborted)
-            return;
-        clear();
-        controller.abort(parentSignal?.reason);
-    };
-    if (parentSignal !== undefined) {
-        if (parentSignal.aborted) {
-            controller.abort(parentSignal.reason);
-        }
-        else {
-            parentSignal.addEventListener("abort", onParentAbort);
-        }
+function createStreamIdleGuard(options = {}) {
+  const idleTimeoutMs = options.idleTimeoutMs ?? DEFAULT_STREAM_IDLE_TIMEOUT_MS;
+  const parentSignal = options.parentSignal;
+  const controller = new AbortController();
+  let timer;
+  let disposed = false;
+  const clear = () => {
+    if (timer !== void 0) {
+      clearTimeout(timer);
+      timer = void 0;
+    }
+  };
+  const arm = () => {
+    if (disposed || controller.signal.aborted || idleTimeoutMs <= 0) return;
+    clear();
+    timer = setTimeout(() => {
+      timer = void 0;
+      if (disposed || controller.signal.aborted) return;
+      controller.abort(new StreamIdleTimeoutError(idleTimeoutMs));
+    }, idleTimeoutMs);
+  };
+  const onParentAbort = () => {
+    if (controller.signal.aborted) return;
+    clear();
+    controller.abort(parentSignal?.reason);
+  };
+  if (parentSignal !== void 0) {
+    if (parentSignal.aborted) {
+      controller.abort(parentSignal.reason);
+    } else {
+      parentSignal.addEventListener("abort", onParentAbort);
+    }
+  }
+  arm();
+  return {
+    signal: controller.signal,
+    poke() {
+      arm();
+    },
+    dispose() {
+      disposed = true;
+      clear();
+      parentSignal?.removeEventListener("abort", onParentAbort);
     }
-    arm();
-    return {
-        signal: controller.signal,
-        poke() {
-            arm();
-        },
-        dispose() {
-            disposed = true;
-            clear();
-            parentSignal?.removeEventListener("abort", onParentAbort);
-        },
-    };
+  };
 }
+export {
+  DEFAULT_STREAM_IDLE_TIMEOUT_MS,
+  STREAM_IDLE_TIMEOUT_CODE,
+  StreamIdleTimeoutError,
+  createStreamIdleGuard,
+  isStreamIdleTimeoutError
+};

package/dist/ticket-seat-memory.js

@@ -0,0 +1,244 @@
+import { existsSync } from "node:fs";
+import { readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { homeFromRunDirectory } from "./activation-ledger-topology.js";
+import { subjectKeyedRecordDirectory } from "./archivist-record-topology.js";
+import { resolvePackageRootDir } from "./session-opening-materials.js";
+const TICKET_SEAT_RUN_BINDING_ENTRY_TYPE = "ak_ticket_seat_run_binding";
+function isTicketSeatRunBindingRow(row) {
+  return row.type === "custom" && row.customType === TICKET_SEAT_RUN_BINDING_ENTRY_TYPE;
+}
+function ticketSeatRunBindingRunId(row) {
+  if (!isTicketSeatRunBindingRow(row)) return void 0;
+  if (row.data === null || typeof row.data !== "object" || Array.isArray(row.data)) {
+    return void 0;
+  }
+  const runId = row.data.runId;
+  return typeof runId === "string" && runId.length > 0 ? runId : void 0;
+}
+async function loadCreateRecordSessionOpen() {
+  const packageRoot = resolvePackageRootDir(import.meta.url);
+  const built = join(packageRoot, "dist/archivist-record-entry.js");
+  const source = join(packageRoot, "src/archivist-record-entry.ts");
+  const target = existsSync(built) ? built : source;
+  const mod = await import(pathToFileURL(target).href);
+  return mod.createRecordSessionOpen;
+}
+const TICKET_SEAT_MEMORY_KIND = "auditor-roles";
+const TICKET_SEAT_MEMORY_SEATS = ["inspector", "notary", "auditor"];
+function isTicketSeatMemorySeat(value) {
+  return TICKET_SEAT_MEMORY_SEATS.includes(value);
+}
+function isTicketSeatMemoryBound(input) {
+  return isTicketSeatMemorySeat(input.role) && typeof input.ticketNumber === "number" && Number.isSafeInteger(input.ticketNumber) && input.ticketNumber >= 1;
+}
+function isEnoent(error) {
+  return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+function ticketSeatMemorySubject(ticketNumber, seat) {
+  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
+    throw new Error(
+      `ticket-seat memory subject requires a positive ticket number, got ${String(ticketNumber)}`
+    );
+  }
+  return `${ticketNumber}:${seat}`;
+}
+function ticketSeatMemorySessionDirectory(input) {
+  return subjectKeyedRecordDirectory({
+    cwd: input.cwd,
+    kind: TICKET_SEAT_MEMORY_KIND,
+    subject: ticketSeatMemorySubject(input.ticketNumber, input.seat),
+    ...input.parentSessionFile === void 0 ? {} : { parentSessionFile: input.parentSessionFile },
+    ...input.home === void 0 ? {} : { home: input.home }
+  });
+}
+async function readRunAdmittedPageFacts(runDirectory) {
+  try {
+    const raw = JSON.parse(
+      await readFile(join(runDirectory, "admitted-request.json"), "utf8")
+    );
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+      return {};
+    }
+    const record = raw;
+    const ticketNumber = record.ticketNumber;
+    const projectRoot = record.projectRoot;
+    return {
+      ...typeof ticketNumber === "number" && Number.isSafeInteger(ticketNumber) && ticketNumber >= 1 ? { ticketNumber } : {},
+      ...typeof projectRoot === "string" ? { projectRoot } : {}
+    };
+  } catch (error) {
+    if (isEnoent(error)) return {};
+    throw error;
+  }
+}
+async function readInvocationTicketNumber(runDirectory) {
+  try {
+    const raw = JSON.parse(
+      await readFile(join(runDirectory, "invocation.json"), "utf8")
+    );
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+      return void 0;
+    }
+    const ticketNumber = raw.ticketNumber;
+    if (typeof ticketNumber === "number" && Number.isSafeInteger(ticketNumber) && ticketNumber >= 1) {
+      return ticketNumber;
+    }
+  } catch (error) {
+    if (isEnoent(error)) return void 0;
+    throw error;
+  }
+  return void 0;
+}
+async function readRunTicketNumber(runDirectory) {
+  const admitted = await readRunAdmittedPageFacts(runDirectory);
+  if (admitted.ticketNumber !== void 0) return admitted.ticketNumber;
+  return readInvocationTicketNumber(runDirectory);
+}
+async function resolveTicketSeatMemoryNestDirectories(input) {
+  if (input.seats.length === 0) return [];
+  const admitted = await readRunAdmittedPageFacts(input.runDirectory);
+  const ticketNumber = admitted.ticketNumber ?? await readInvocationTicketNumber(input.runDirectory);
+  if (ticketNumber === void 0) return [];
+  let home;
+  try {
+    home = homeFromRunDirectory(input.runDirectory);
+  } catch {
+    return [];
+  }
+  const projectRoot = admitted.projectRoot;
+  if (projectRoot === void 0) return [];
+  return input.seats.map(
+    (seat) => ticketSeatMemorySessionDirectory({
+      ticketNumber,
+      seat,
+      cwd: projectRoot,
+      home
+    })
+  );
+}
+async function openTicketSeatMemoryCoordinates(input) {
+  const createRecordSessionOpen = await loadCreateRecordSessionOpen();
+  const opened = createRecordSessionOpen({
+    cwd: input.cwd,
+    kind: TICKET_SEAT_MEMORY_KIND,
+    subject: ticketSeatMemorySubject(input.ticketNumber, input.seat),
+    parent: {
+      getSessionFile: () => input.ledgerAnchorSessionFile
+    }
+  });
+  if (input.runId !== void 0) {
+    const data = { version: 1, runId: input.runId };
+    opened.session.appendCustomEntry(TICKET_SEAT_RUN_BINDING_ENTRY_TYPE, data);
+  }
+  const sessionFile = opened.session.getSessionFile();
+  const sessionDirectory = opened.session.getSessionDir();
+  if (typeof sessionFile !== "string" || sessionFile.length === 0) {
+    throw new Error(
+      `ticket-seat memory principal missing session file for ticket #${input.ticketNumber} seat ${input.seat}`
+    );
+  }
+  if (typeof sessionDirectory !== "string" || sessionDirectory.length === 0) {
+    throw new Error(
+      `ticket-seat memory principal missing session directory for ticket #${input.ticketNumber} seat ${input.seat}`
+    );
+  }
+  return { sessionDirectory, sessionFile, resumed: opened.resumed };
+}
+async function rebindAdmittedToTicketSeatMemory(input) {
+  const ticketNumber = input.admitted.ticketNumber;
+  if (ticketNumber === void 0) return void 0;
+  const anchor = input.principalAuthority.decode(input.admitted.principal);
+  const opened = await openTicketSeatMemoryCoordinates({
+    ticketNumber,
+    seat: input.seat,
+    cwd: input.admitted.projectRoot,
+    ledgerAnchorSessionFile: anchor.sessionFile,
+    // Analyst attributes frame/model/tool to this binding interval only (#636 D).
+    runId: input.admitted.runId
+  });
+  const coordinates = {
+    sessionDirectory: opened.sessionDirectory,
+    sessionFile: opened.sessionFile
+  };
+  const principal = input.principalAuthority.seal(coordinates);
+  input.principalAuthority.decode(principal);
+  input.admitted.principal = principal;
+  for (const page of ["admitted-request.json", "invocation.json"]) {
+    const path = join(input.admitted.runDirectory, page);
+    try {
+      const raw = JSON.parse(await readFile(path, "utf8"));
+      if (raw === null || typeof raw !== "object" || Array.isArray(raw)) continue;
+      const next = {
+        ...raw,
+        sessionDirectory: coordinates.sessionDirectory,
+        sessionFile: coordinates.sessionFile
+      };
+      await writeFile(path, `${JSON.stringify(next, null, 2)}
+`, "utf8");
+    } catch (error) {
+      if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+        continue;
+      }
+      throw error;
+    }
+  }
+  return { coordinates, resumed: opened.resumed };
+}
+const TICKET_SEAT_LAST_HOST_FILE = "last-host.json";
+async function readTicketSeatMemoryLastHost(sessionDirectory) {
+  try {
+    const raw = JSON.parse(
+      await readFile(join(sessionDirectory, TICKET_SEAT_LAST_HOST_FILE), "utf8")
+    );
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw) || typeof raw.host !== "string" || raw.host.length === 0) {
+      throw new Error(
+        `ticket-seat memory last-host page is damaged under ${sessionDirectory}`
+      );
+    }
+    const host = raw.host;
+    const runDirectory = raw.runDirectory;
+    return {
+      host,
+      ...typeof runDirectory === "string" && runDirectory.length > 0 ? { runDirectory } : {}
+    };
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return void 0;
+    }
+    throw error;
+  }
+}
+async function writeTicketSeatMemoryLastHost(sessionDirectory, host, runDirectory) {
+  if (host.trim() === "") {
+    throw new Error("ticket-seat memory last-host requires a non-empty host");
+  }
+  const body = {
+    host,
+    ...runDirectory !== void 0 && runDirectory.length > 0 ? { runDirectory } : {}
+  };
+  await writeFile(
+    join(sessionDirectory, TICKET_SEAT_LAST_HOST_FILE),
+    `${JSON.stringify(body, null, 2)}
+`,
+    "utf8"
+  );
+}
+export {
+  TICKET_SEAT_MEMORY_KIND,
+  TICKET_SEAT_MEMORY_SEATS,
+  TICKET_SEAT_RUN_BINDING_ENTRY_TYPE,
+  isTicketSeatMemoryBound,
+  isTicketSeatMemorySeat,
+  isTicketSeatRunBindingRow,
+  openTicketSeatMemoryCoordinates,
+  readRunTicketNumber,
+  readTicketSeatMemoryLastHost,
+  rebindAdmittedToTicketSeatMemory,
+  resolveTicketSeatMemoryNestDirectories,
+  ticketSeatMemorySessionDirectory,
+  ticketSeatMemorySubject,
+  ticketSeatRunBindingRunId,
+  writeTicketSeatMemoryLastHost
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.3412",
+  "version": "0.1.3439",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/build-package.mjs

@@ -21,6 +21,47 @@ const entries = [
   "activation-ledger-topology",
   "activation-reconciliation",
   "archivist-record-entry",
+  // Pure subject nest topology — cold discovery without SessionManager (#636).
+  "archivist-record-topology",
+  // Officer ticket-seat pure read + deferred open (#636 public-bin cold graph).
+  "ticket-seat-memory",
+  // ticket-seat-memory → session-opening-materials (#636 non-bundle graph closure).
+  "session-opening-materials",
+  // Value-import closure of published non-bundle roots (build-package-only loadable).
+  "auditor-dossier-tool",
+  "canonical-json",
+  "compliance-transport",
+  "countersign-contracts",
+  "doctor-contracts",
+  "engine-detour",
+  "engine-detour-tool",
+  "exact-utf8",
+  "git-object-id",
+  "gleaner-left-contracts",
+  "inspector-contracts",
+  "institutional-resolution",
+  "merger-contracts",
+  "notary-contracts",
+  "open-tool-schema",
+  "package-contracts/collector-output",
+  "package-contracts/fixer-output",
+  "package-contracts/fixer-packet",
+  "package-contracts/gatekeeper-output",
+  "package-contracts/judge-output",
+  "package-contracts/navigator-output",
+  "package-contracts/reviewer-output",
+  "package-contracts/terminating-infrastructure",
+  "package-contracts/worker-output",
+  "package-resources/engine-material",
+  "public-cli/config",
+  "public-cli/registry",
+  "receipt-delivery-policy",
+  "sha256",
+  "sitian-appender",
+  "sitian-contracts",
+  "sitian-facade",
+  "sitian-reader",
+  "stream-idle-guard",
   "typed-provider-http",
   "upstream-error-testimony",
 ];

package/souls/audit-law.md

@@ -21,3 +21,7 @@ finding 提**类别**，不提实例；实例只作证据。同类一次说全
 御批门槛：重大决策、设计、改变实际行为的机制与约束，须追到陛下原话或 ADR 绑定原话的 key。实现细节（字段名、内部形状、修法选择）依现行法源（accepted ADR、仓级宪法、全局硬规）成立即可，不因无逐字原话驳回。
 
 打回不设轮次上限；审官判断已不收敛（同类问题反复、修理只增不减）即可上呈。修理 diff 自身按同尺复核；修理引入的新残留是修理方的缺陷，不是新一轮的 finding。
+
+## 取证边界（owner 2026-09-05）
+
+取证只读。探针、临时文件、临时家只准落在本次工作区（worktree）与系统临时目录之内；**这两处之外的任何路径——尤其真家 `~/.ak-roles`、`~/.pi`、别的工作区——一律不得删除、覆写或移动**，「用完恢复原样」不构成先破坏再恢复的许可。违者即事故（2026-09-05 真家整删）。

package/souls/countersign.md

@@ -16,7 +16,7 @@
 
 **四、擅加。** 票面有没有超出法源的机制、约束、验收、术语：每条承重主张追到原话或决策键为止，追不到即加戏。
 
-各步取证不受限——读码、开卷、传召皆可，用完恢复原样。
+各步取证按《审法·取证边界》：读码、开卷、传召皆可；只读，探针只落 worktree 与临时目录，不得删改其外任何路径。
 
 ## 审读五问
 

package/souls/gleaner-left.md

@@ -6,5 +6,5 @@
 - 无锚定：不接收票面、判词与庭审史。案件＝合并候选的全幅 diff 与仓库现状，看其本身对不对劲，此外不接收方向性指令。
 - 拾遗之责：bug 与边界、安全、命名与一致性、文档漂移、复杂度增长、测试质量、跨片接缝等。
 - 量尺：宿主宪法、仓级 ADR 与《复杂度与测试质量法》。
-- 取证工具不受限，一切自取；探针用后清理干净如实记录即可。
+- 取证工具一切自取，按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径，如实记录。
 - 只上弹章，不修复、不裁决。

package/souls/inspector.md

@@ -6,6 +6,6 @@
 
 主张必须附证据或法的具体条目。按尺逐条封驳。
 
-取证不受限，但用完恢复原样。
+取证按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径。
 
 无法解决的上抛给陛下解决。

package/souls/notary.md

@@ -6,4 +6,4 @@
 
 **二、核旨**：以所读起居录为据，核受审之物——**票面与判词**——有没有加戏：每一条**重大决策／设计／改变实际行为的**机制／约束条款逐条追到陛下原话或 ADR 绑定原话的 key 值为止（门槛见审刑院法典）；票面本身是不是陛下要的同样逐条追，**不因票面已签押、判词已引用而免核**。引 ADR 之名而无 key 绑定、引票面而票面无原话，同为加戏。判词与票面对不对得上不归你。任一病成立，点名该条驳回；拿不准陛下本意的，上呈。
 
-方法：按条封驳。取证不受限，用完恢复原样。无法解决的上抛陛下。
+方法：按条封驳。取证按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径。无法解决的上抛陛下。

package/souls/reviewer.md

@@ -4,6 +4,6 @@
 
 - 风闻奏事，言不为狱：弹章（finding）不是权威、不负坐实义务。弹章须指明所劾之处（文件/条文指针），说错无罪。
 - 独立机关，直属陛下：不接收输入 prompt。案件＝固定的被评审目标，目标或事实前提无法成立时如实拒绝；方法＝canonical Skill；其余一切自取。
-- 取证工具不受限，一切自取。有权抽查≠有责核实：对存疑处可开卷、可下探针，用后清理干净如实记录即可。不整卷复读取证腿已读之物、不跑全量测试套件。
+- 取证工具一切自取，按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径。有权抽查≠有责核实：对存疑处可开卷、可下探针，如实记录即可。不整卷复读取证腿已读之物、不跑全量测试套件。
 - 劾前逐项过改动清单。固定目标内每项改动都要标明由票面哪条驱动：标不出来的即为夹带（默认值、护栏、平行机制、仅测试用的生产钩子同论）；票面有要求而清单中没有的即为缺口。二者同为 finding。
 - 重点劾三事：违宪（与既裁法源 ADR、铁律相抵）、测试必要性（最小必要成本法）、复杂度（可删不删、同形状第二份）。劾的范围＝眼前一切：票面、实现、测试、输入 prompt 与给你的派单命令本身。唯一例外是陛下亲笔——援引此例外必须引陛下原话为证。