@akagilnc/pi-workflow-roles 0.1.3412 → 0.1.3439

package/dist/inspector-contracts.js

@@ -1,34 +1,31 @@
-/**
- * Public Inspector (察院) terminating receipt contracts.
- * Lawful explicit releases: pass | bounce | escalate.
- * Dual path: gate-dispatched and independently callable (#568 / ADR 0074).
- */
-export const INSPECTOR_OUTPUT_TOOL_NAME = "ak_inspector_output";
-export const INSPECTOR_ACCEPTED_TEXT = "察院回执已接受";
-export function validateRecordedInspectorOutput(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error("Inspector output has no execution discriminator");
-    }
-    let status;
-    try {
-        status = value.status;
-    }
-    catch {
-        throw new Error("Inspector output has no execution discriminator");
-    }
-    if (status === "pass" || status === "bounce" || status === "escalate") {
-        return value;
-    }
+const INSPECTOR_OUTPUT_TOOL_NAME = "ak_inspector_output";
+const INSPECTOR_ACCEPTED_TEXT = "\u5BDF\u9662\u56DE\u6267\u5DF2\u63A5\u53D7";
+function validateRecordedInspectorOutput(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("Inspector output has no execution discriminator");
+  }
+  let status;
+  try {
+    status = value.status;
+  } catch {
+    throw new Error("Inspector output has no execution discriminator");
+  }
+  if (status === "pass" || status === "bounce" || status === "escalate") {
+    return value;
+  }
+  throw new Error("Inspector output has no execution discriminator");
 }
-/** Machine-facing facts from an accepted 察院 release. Findings retained as submitted. */
-export function inspectorDecisiveFacts(output) {
-    const facts = { status: output.status };
-    const findings = output.findings;
-    if (findings !== undefined)
-        facts.findings = findings;
-    const reason = output.reason;
-    if (reason !== undefined)
-        facts.reason = reason;
-    return facts;
+function inspectorDecisiveFacts(output) {
+  const facts = { status: output.status };
+  const findings = output.findings;
+  if (findings !== void 0) facts.findings = findings;
+  const reason = output.reason;
+  if (reason !== void 0) facts.reason = reason;
+  return facts;
 }
+export {
+  INSPECTOR_ACCEPTED_TEXT,
+  INSPECTOR_OUTPUT_TOOL_NAME,
+  inspectorDecisiveFacts,
+  validateRecordedInspectorOutput
+};

package/dist/institutional-resolution.js

@@ -1,115 +1,112 @@
 import { readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { seatModelOnly } from "./public-cli/registry.js";
-export const INSTITUTIONAL_RESOLUTION_FILE = "institutional-resolution.json";
-export class InstitutionalResolutionError extends Error {
-    reason;
-    constructor(message, reason, options) {
-        super(message, options);
-        this.name = "InstitutionalResolutionError";
-        this.reason = reason;
-    }
+const INSTITUTIONAL_RESOLUTION_FILE = "institutional-resolution.json";
+class InstitutionalResolutionError extends Error {
+  reason;
+  constructor(message, reason, options) {
+    super(message, options);
+    this.name = "InstitutionalResolutionError";
+    this.reason = reason;
+  }
 }
 function cleanSelection(model) {
-    if (model === undefined)
-        return undefined;
-    if (typeof model.provider !== "string" || typeof model.model !== "string")
-        return undefined;
-    return {
-        provider: model.provider,
-        model: model.model,
-        ...(model.thinking === undefined ? {} : { thinking: model.thinking }),
-    };
+  if (model === void 0) return void 0;
+  if (typeof model.provider !== "string" || typeof model.model !== "string") return void 0;
+  return {
+    provider: model.provider,
+    model: model.model,
+    ...model.thinking === void 0 ? {} : { thinking: model.thinking }
+  };
 }
-/**
- * Authority for configured province-officer model+source (#453/#620):
- * own persistent > gatekeeper persistent > unconfigured.
- * Shared by resolveInstitutionalSeatSelections (plus parent fallback),
- * resolveEffectiveSeat subordinate branch, and roles/config display.
- * Model-axis projection stays seatModelOnly (single implementation in registry).
- */
-export function resolveConfiguredProvinceOfficer(config, officer) {
-    const ownModel = seatModelOnly(config.seats[officer]);
-    if (ownModel !== undefined) {
-        return { selection: ownModel, source: "persistent" };
-    }
-    if (officer === "gatekeeper") {
-        return { source: "unconfigured" };
-    }
-    const gatekeeperModel = seatModelOnly(config.seats.gatekeeper);
-    if (gatekeeperModel !== undefined) {
-        return { selection: gatekeeperModel, source: "inherit-gatekeeper" };
-    }
+function resolveConfiguredProvinceOfficer(config, officer) {
+  const ownModel = seatModelOnly(config.seats[officer]);
+  if (ownModel !== void 0) {
+    return { selection: ownModel, source: "persistent" };
+  }
+  if (officer === "gatekeeper") {
     return { source: "unconfigured" };
+  }
+  const gatekeeperModel = seatModelOnly(config.seats.gatekeeper);
+  if (gatekeeperModel !== void 0) {
+    return { selection: gatekeeperModel, source: "inherit-gatekeeper" };
+  }
+  return { source: "unconfigured" };
 }
-/**
- * Resolve effective per-seat institutional selections (#518 §2 Hop 1; #620):
- * - gatekeeper / inspector / notary: resolveConfiguredProvinceOfficer then
- *   parent effective on the province path only
- * - auditor / evidenceChild: parent effective
- * - navigator: explicit config seat only. Navigator model authority stays
- *   `navigator-model.json`; the page never carries a parent-inherited navigator
- *   seat, so host-neutral transport cannot shadow that setting (#590 Out of Scope:
- *   席位表／模型路由变更归 owner 域).
- */
-export function resolveInstitutionalSeatSelections(config, parentEffectiveModel) {
-    const parentSelection = cleanSelection(parentEffectiveModel);
-    const gatekeeper = resolveConfiguredProvinceOfficer(config, "gatekeeper").selection ?? parentSelection;
-    const inspector = resolveConfiguredProvinceOfficer(config, "inspector").selection ?? parentSelection;
-    const notary = resolveConfiguredProvinceOfficer(config, "notary").selection ?? parentSelection;
-    const auditor = parentSelection;
-    const evidenceChild = parentSelection;
-    const navigator = cleanSelection(seatModelOnly(config.seats?.navigator));
-    return {
-        version: 1,
-        seats: {
-            ...(gatekeeper === undefined ? {} : { gatekeeper }),
-            ...(inspector === undefined ? {} : { inspector }),
-            ...(notary === undefined ? {} : { notary }),
-            ...(auditor === undefined ? {} : { auditor }),
-            ...(evidenceChild === undefined ? {} : { evidenceChild }),
-            ...(navigator === undefined ? {} : { navigator }),
-        },
-    };
+function resolveInstitutionalSeatSelections(config, parentEffectiveModel) {
+  const parentSelection = cleanSelection(parentEffectiveModel);
+  const gatekeeper = resolveConfiguredProvinceOfficer(config, "gatekeeper").selection ?? parentSelection;
+  const inspector = resolveConfiguredProvinceOfficer(config, "inspector").selection ?? parentSelection;
+  const notary = resolveConfiguredProvinceOfficer(config, "notary").selection ?? parentSelection;
+  const auditor = parentSelection;
+  const evidenceChild = parentSelection;
+  const navigator = cleanSelection(seatModelOnly(config.seats?.navigator));
+  return {
+    version: 1,
+    seats: {
+      ...gatekeeper === void 0 ? {} : { gatekeeper },
+      ...inspector === void 0 ? {} : { inspector },
+      ...notary === void 0 ? {} : { notary },
+      ...auditor === void 0 ? {} : { auditor },
+      ...evidenceChild === void 0 ? {} : { evidenceChild },
+      ...navigator === void 0 ? {} : { navigator }
+    }
+  };
 }
-/**
- * Persist institutional resolution page to run directory (#518 §2 Hop 2).
- * Rewritten on each dispatch and resume. Zero secrets inside page.
- */
-export async function writeInstitutionalResolutionPage(runDirectory, page) {
-    const filePath = join(runDirectory, INSTITUTIONAL_RESOLUTION_FILE);
-    await writeFile(filePath, `${JSON.stringify(page, null, 2)}\n`, "utf8");
+async function writeInstitutionalResolutionPage(runDirectory, page) {
+  const filePath = join(runDirectory, INSTITUTIONAL_RESOLUTION_FILE);
+  await writeFile(filePath, `${JSON.stringify(page, null, 2)}
+`, "utf8");
 }
-/**
- * Read institutional seat selection from run directory (#518 §2 Hop 3).
- * Fails loud if page is missing, corrupted, or does not contain a resolution for the seat.
- */
-export async function readInstitutionalSeatSelection(runDirectory, seat) {
-    const filePath = join(runDirectory, INSTITUTIONAL_RESOLUTION_FILE);
-    let raw;
-    try {
-        raw = await readFile(filePath, "utf8");
-    }
-    catch (error) {
-        throw new InstitutionalResolutionError(`institutional resolution page is missing at ${filePath}`, "missing-page", { cause: error });
-    }
-    let page;
-    try {
-        page = JSON.parse(raw);
-    }
-    catch (error) {
-        throw new InstitutionalResolutionError(`institutional resolution page is corrupted at ${filePath}`, "corrupted", { cause: error });
-    }
-    if (typeof page !== "object" || page === null || page.version !== 1) {
-        throw new InstitutionalResolutionError(`institutional resolution page format is invalid at ${filePath}`, "invalid-format");
-    }
-    const seats = page.seats;
-    if (typeof seats !== "object" || seats === null) {
-        throw new InstitutionalResolutionError(`institutional resolution page missing seats object at ${filePath}`, "invalid-format");
-    }
-    const selection = cleanSelection(seats[seat]);
-    if (selection === undefined) {
-        throw new InstitutionalResolutionError(`institutional resolution page has no resolution for seat "${seat}" at ${filePath}`, "missing-seat");
-    }
-    return selection;
+async function readInstitutionalSeatSelection(runDirectory, seat) {
+  const filePath = join(runDirectory, INSTITUTIONAL_RESOLUTION_FILE);
+  let raw;
+  try {
+    raw = await readFile(filePath, "utf8");
+  } catch (error) {
+    throw new InstitutionalResolutionError(
+      `institutional resolution page is missing at ${filePath}`,
+      "missing-page",
+      { cause: error }
+    );
+  }
+  let page;
+  try {
+    page = JSON.parse(raw);
+  } catch (error) {
+    throw new InstitutionalResolutionError(
+      `institutional resolution page is corrupted at ${filePath}`,
+      "corrupted",
+      { cause: error }
+    );
+  }
+  if (typeof page !== "object" || page === null || page.version !== 1) {
+    throw new InstitutionalResolutionError(
+      `institutional resolution page format is invalid at ${filePath}`,
+      "invalid-format"
+    );
+  }
+  const seats = page.seats;
+  if (typeof seats !== "object" || seats === null) {
+    throw new InstitutionalResolutionError(
+      `institutional resolution page missing seats object at ${filePath}`,
+      "invalid-format"
+    );
+  }
+  const selection = cleanSelection(seats[seat]);
+  if (selection === void 0) {
+    throw new InstitutionalResolutionError(
+      `institutional resolution page has no resolution for seat "${seat}" at ${filePath}`,
+      "missing-seat"
+    );
+  }
+  return selection;
 }
+export {
+  INSTITUTIONAL_RESOLUTION_FILE,
+  InstitutionalResolutionError,
+  readInstitutionalSeatSelection,
+  resolveConfiguredProvinceOfficer,
+  resolveInstitutionalSeatSelections,
+  writeInstitutionalResolutionPage
+};

package/dist/ledger-session-read.js

@@ -0,0 +1,241 @@
+/**
+ * Canonical ledger session JSONL read primitives (shared owner).
+ * Consumers (ticket-trajectory, analyst, …) must import here — no second parse kernel.
+ */
+import { readFile } from "node:fs/promises";
+/**
+ * Loud JSONL failure that still retains rows parsed before the bad line.
+ * Callers that only need the throw keep catching Error; owners that must
+ * surface partial typed facts (e.g. first-frame timestamp) read prefixRows.
+ */
+export class LedgerSessionJsonlError extends Error {
+    path;
+    line;
+    prefixRows;
+    constructor(message, init) {
+        super(message);
+        this.name = "LedgerSessionJsonlError";
+        this.path = init.path;
+        this.line = init.line;
+        this.prefixRows = init.prefixRows;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Read session JSONL with honest live-tail semantics:
+ * a malformed line is tolerated only when it is an unfinished final
+ * fragment at EOF (no record terminator after it). Any malformed line
+ * completed by a line terminator must fail loudly with file and 1-based
+ * line context — even when no non-empty record follows — never silently
+ * under-count.
+ *
+ * Loud failures throw LedgerSessionJsonlError carrying prefixRows so the
+ * single parse kernel can still expose facts obtained before the bad line.
+ */
+export async function readLedgerSessionJsonl(path) {
+    const text = await readFile(path, "utf8");
+    // split keeps a trailing empty segment iff text ends with "\n", so
+    // index < lines.length - 1 means this segment was terminated.
+    const lines = text.split("\n");
+    const rows = [];
+    for (let index = 0; index < lines.length; index += 1) {
+        const line = lines[index];
+        if (!line.trim())
+            continue;
+        let row;
+        try {
+            row = JSON.parse(line);
+        }
+        catch (error) {
+            if (!(error instanceof SyntaxError))
+                throw error;
+            const completedByTerminator = index < lines.length - 1;
+            if (completedByTerminator) {
+                throw new LedgerSessionJsonlError(`malformed JSONL record in ${path} at line ${index + 1}: ${error.message}`, { path, line: index + 1, prefixRows: rows });
+            }
+            // unfinished fragment at EOF — keep prior complete rows
+            break;
+        }
+        // Syntactically complete line: must be a session object. Silent omission
+        // would under-count ledger evidence (failure honesty).
+        if (!isRecord(row)) {
+            const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
+            throw new LedgerSessionJsonlError(`complete non-object JSONL record in ${path} at line ${index + 1}: expected object, got ${kind}`, { path, line: index + 1, prefixRows: rows });
+        }
+        rows.push(row);
+    }
+    return rows;
+}
+/** First and last record timestamps in encounter order. */
+export function extractSessionTimestampSpan(rows) {
+    let startedAt;
+    let endedAt;
+    for (const row of rows) {
+        if (typeof row.timestamp !== "string" || !row.timestamp)
+            continue;
+        if (startedAt === undefined)
+            startedAt = row.timestamp;
+        endedAt = row.timestamp;
+    }
+    return {
+        ...(startedAt !== undefined ? { startedAt } : {}),
+        ...(endedAt !== undefined ? { endedAt } : {}),
+    };
+}
+/**
+ * Ordered-unique model ids from session frames (first-seen order).
+ * Sources (same faces ticket-trajectory already reads — single parse kernel):
+ * - `model_change.modelId`
+ * - assistant `message.model`
+ * Blank / non-string values are skipped. Does not invent a default model.
+ */
+export function extractSessionModelSequence(rows) {
+    const seen = new Set();
+    const ordered = [];
+    const push = (raw) => {
+        const model = raw.trim();
+        if (model === "" || seen.has(model))
+            return;
+        seen.add(model);
+        ordered.push(model);
+    };
+    for (const row of rows) {
+        if (row.type === "model_change" && typeof row.modelId === "string") {
+            push(row.modelId);
+        }
+        const message = isRecord(row.message) ? row.message : undefined;
+        if (message?.role === "assistant" && typeof message.model === "string") {
+            push(message.model);
+        }
+    }
+    return ordered;
+}
+/** First line of a bash `command` argument (sole owner of this summary). */
+export function bashCommandFirstLine(command) {
+    const match = /^[^\r\n]*/.exec(command);
+    return match?.[0] ?? "";
+}
+/**
+ * Pair toolCall frames → toolResult frames by toolCallId.
+ * Throws when a tool-bearing frame is structurally unreadable for association
+ * (toolCall missing string id, toolResult missing string toolCallId).
+ * Unpaired open calls remain without endedAt — that is incomplete, not unreadable.
+ */
+export function extractSessionToolIntervals(rows) {
+    const order = [];
+    const openById = new Map();
+    for (const row of rows) {
+        const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : undefined;
+        const message = isRecord(row.message) ? row.message : undefined;
+        if (message?.role === "assistant" && Array.isArray(message.content)) {
+            const callTimestamp = typeof message.timestamp === "string" && message.timestamp
+                ? message.timestamp
+                : rowTimestamp;
+            for (const part of message.content) {
+                if (!isRecord(part) || part.type !== "toolCall")
+                    continue;
+                if (typeof part.id !== "string" || part.id.length === 0) {
+                    throw new Error("toolCall frame missing string id");
+                }
+                if (typeof part.name !== "string" || part.name.length === 0) {
+                    throw new Error(`toolCall ${part.id} missing string name`);
+                }
+                if (callTimestamp === undefined || callTimestamp.length === 0) {
+                    throw new Error(`toolCall ${part.id} missing timestamp`);
+                }
+                if (openById.has(part.id)) {
+                    throw new Error(`duplicate toolCall id ${part.id}`);
+                }
+                const args = isRecord(part.arguments) ? part.arguments : undefined;
+                // Ticket surface: only bash first-line summary is authorized here.
+                const command = part.name === "bash" &&
+                    args !== undefined &&
+                    typeof args.command === "string"
+                    ? bashCommandFirstLine(args.command)
+                    : undefined;
+                const interval = {
+                    toolCallId: part.id,
+                    toolName: part.name,
+                    startedAt: callTimestamp,
+                    ...(command !== undefined ? { command } : {}),
+                };
+                order.push(interval);
+                openById.set(part.id, interval);
+            }
+        }
+        if (message?.role === "toolResult") {
+            if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) {
+                throw new Error("toolResult frame missing string toolCallId");
+            }
+            const resultTimestamp = typeof message.timestamp === "string" && message.timestamp
+                ? message.timestamp
+                : rowTimestamp;
+            if (resultTimestamp === undefined || resultTimestamp.length === 0) {
+                throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
+            }
+            const open = openById.get(message.toolCallId);
+            if (open === undefined) {
+                // Result without a prior call is still associable as a closed interval
+                // once a name is known; keep structural readability without inventing a call.
+                const toolName = typeof message.toolName === "string" && message.toolName.length > 0
+                    ? message.toolName
+                    : "unknown";
+                order.push({
+                    toolCallId: message.toolCallId,
+                    toolName,
+                    startedAt: resultTimestamp,
+                    endedAt: resultTimestamp,
+                });
+                continue;
+            }
+            if (open.endedAt !== undefined) {
+                throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
+            }
+            open.endedAt = resultTimestamp;
+        }
+    }
+    return order.map((interval) => {
+        const base = {
+            toolCallId: interval.toolCallId,
+            toolName: interval.toolName,
+            startedAt: interval.startedAt,
+            ...(interval.command !== undefined ? { command: interval.command } : {}),
+        };
+        return interval.endedAt === undefined
+            ? base
+            : { ...base, endedAt: interval.endedAt };
+    });
+}
+export function intervalRowsAroundAnchor(rows, anchorIndex, isBindingRow) {
+    let start = 0;
+    for (let i = anchorIndex; i >= 0; i -= 1) {
+        if (isBindingRow(rows[i])) {
+            start = i;
+            break;
+        }
+    }
+    let end = rows.length;
+    for (let i = Math.max(anchorIndex, start) + 1; i < rows.length; i += 1) {
+        if (isBindingRow(rows[i])) {
+            end = i;
+            break;
+        }
+    }
+    return { rows: rows.slice(start, end), closed: end < rows.length };
+}
+/**
+ * Interval owned by the first binding row that satisfies `matches`.
+ * `undefined` when the volume carries no matching binding — callers must not
+ * silently treat the whole continuous volume as that owner.
+ */
+export function intervalRowsForMatchingBinding(rows, isBindingRow, matches) {
+    for (let i = 0; i < rows.length; i += 1) {
+        const row = rows[i];
+        if (!isBindingRow(row) || !matches(row))
+            continue;
+        return intervalRowsAroundAnchor(rows, i, isBindingRow);
+    }
+    return undefined;
+}