@akagilnc/pi-workflow-roles 0.1.3572 → 0.1.3621

package/dist/public-cli/public-run-credentials.js

@@ -0,0 +1,49 @@
+/**
+ * Shared public-run credential seam: one owner for missing selected-provider
+ * detection, typed failure construction, pre-dispatch fail-closed payload, and
+ * post-run credential annotation. Role runners supply model/credential facts only.
+ */
+import { missingPublicProviderCredential, } from "./config.js";
+/**
+ * Production-owned provider failure when the selected public seat provider has
+ * no configured credential. Cause/identity come from CredentialProviders, not
+ * stderr wording. Runner-supplied knownFailure still wins over this annotation.
+ */
+export function knownFailureForMissingProviderCredential(model, credentials) {
+    if (model === undefined || credentials === undefined)
+        return undefined;
+    // Only the public credential catalog is fail-closed here; offline/test providers
+    // are not represented in auth.json shape and must not be washed into MissingProviderCredential.
+    if (model.provider !== "openai-codex" && model.provider !== "xai")
+        return undefined;
+    if (!missingPublicProviderCredential(model.provider, credentials)) {
+        return undefined;
+    }
+    return {
+        cause: "provider",
+        identity: {
+            name: "MissingProviderCredential",
+            code: model.provider,
+        },
+    };
+}
+export function missingCredentialPreDispatchFailure(model, credentials) {
+    const knownFailure = knownFailureForMissingProviderCredential(model, credentials);
+    if (knownFailure === undefined)
+        return undefined;
+    return {
+        timedOut: false,
+        code: 1,
+        stderr: `Missing credential for provider ${String(knownFailure.identity?.code ?? "unknown")}`,
+        knownFailure,
+    };
+}
+/**
+ * Post-run credential annotation for the shared evidence-priority chain.
+ * Only annotates nonzero/timeout exits; never invents a credential failure on success.
+ */
+export function postRunMissingCredentialFailure(result, model, credentials) {
+    if (!(result.timedOut || result.code !== 0))
+        return undefined;
+    return knownFailureForMissingProviderCredential(model, credentials);
+}

package/dist/public-cli/registry.js

@@ -59,13 +59,16 @@ const STARTUP_CANDIDATES = {
   // #620: subordinate officers inherit gatekeeper; no package startup model.
   notary: [],
   // #453/#620/#639: gatekeeper callable but no package startup model — caller
-  // configures it or the institutional resolution applies on the province path.
+  // configures it or inherits on the province path.
   gatekeeper: [],
   inspector: [],
   navigator: [
     { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "medium" },
     { provider: "xai", model: "grok-4.5", thinking: "high" }
   ],
+  // #675: auditor / evidence-child public seats — no package startup; caller configures.
+  auditor: [],
+  "evidence-child": [],
   // #708 `diarist-seat-default`: owner-set initial value; changed in the seat
   // table like any other seat. No engine axis, package-default host.
   diarist: [{ provider: "xai", model: "grok-4.5", thinking: "medium" }]

package/dist/public-cli/reviewer-dispatch-rejection.js

@@ -0,0 +1,77 @@
+/**
+ * Durable Reviewer-rejection child→parent page under AK_ROLE_RUN_DIR.
+ * Stays in public-cli (AK artifact owner); role-runtime imports this neighbor.
+ */
+import { writeFileSync } from "node:fs";
+import { readFile, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { REVIEWER_PREFLIGHT_VIOLATIONS, } from "../reviewer-dispatch.js";
+const REVIEWER_DISPATCH_REJECTION_FILE = "typed-known-failure.json";
+function isReviewerPreflightViolation(value) {
+    return (typeof value === "string" &&
+        REVIEWER_PREFLIGHT_VIOLATIONS.includes(value));
+}
+function reviewerDispatchRejectionPath(runDirectory) {
+    return join(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+}
+/**
+ * Clear any prior attempt's Reviewer rejection page so resume/retry cannot
+ * inherit a stale knownFailure.details.
+ */
+export async function clearReviewerDispatchRejection(runDirectory) {
+    try {
+        await unlink(reviewerDispatchRejectionPath(runDirectory));
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return;
+        }
+        throw error;
+    }
+}
+/**
+ * Synchronous durable write for Reviewer dispatch rejection (child process exit is sync).
+ * Parent public CLI recovers via readReviewerDispatchRejection into knownFailure.
+ */
+export function recordReviewerDispatchRejectionSync(runDirectory, rejection) {
+    writeFileSync(reviewerDispatchRejectionPath(runDirectory), `${JSON.stringify(rejection)}\n`, "utf8");
+}
+/** Recover a child-written Reviewer dispatch rejection through a fixed mapping. */
+export async function readReviewerDispatchRejection(runDirectory) {
+    let raw;
+    try {
+        raw = await readFile(reviewerDispatchRejectionPath(runDirectory), "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        const error = new Error("Reviewer dispatch rejection page must be a JSON object");
+        error.name = "ReviewerDispatchRejectionContractError";
+        throw error;
+    }
+    const record = parsed;
+    if (typeof record.diagnostic !== "string" ||
+        record.diagnostic.trim() === "" ||
+        !Array.isArray(record.violations) ||
+        record.violations.length === 0 ||
+        record.violations.some((value) => !isReviewerPreflightViolation(value))) {
+        const error = new Error("Reviewer dispatch rejection page has unusable required fields");
+        error.name = "ReviewerDispatchRejectionContractError";
+        throw error;
+    }
+    return {
+        cause: "activation",
+        diagnostic: record.diagnostic,
+        identity: { name: "ReviewerDispatchRejectionError" },
+        details: { violations: Object.freeze([...record.violations]) },
+    };
+}