@akagilnc/pi-workflow-roles 0.1.3932 → 0.1.3975

package/dist/atomic-write.js

@@ -1,23 +0,0 @@
-/**
- * Same-directory temp + rename atomic file replace.
- * Shared primitive for ledger-adjacent typed pages (analyst metrics, etc.).
- * Does not open/truncate an existing destination inode, so hard-linked twins
- * keep prior bytes until the directory entry is swapped.
- * Parent directory must already exist — callers that write under the package
- * ledger home own confinement via ensureRealDirectoryTree (ADR 0038).
- */
-import { randomUUID } from "node:crypto";
-import { rename, rm, writeFile } from "node:fs/promises";
-import { dirname, join } from "node:path";
-export async function writeFileAtomically(destination, contents) {
-    const parent = dirname(destination);
-    const temporary = join(parent, `.atomic-write-${randomUUID()}.tmp`);
-    try {
-        await writeFile(temporary, contents);
-        await rename(temporary, destination);
-    }
-    catch (error) {
-        await rm(temporary, { force: true }).catch(() => undefined);
-        throw error;
-    }
-}

package/dist/auditor-role.js

@@ -1,12 +0,0 @@
-/**
- * Public Auditor (审刑院) role — filed-officer envelope (#675).
- */
-import { AUDITOR_ACCEPTED_TEXT, AUDITOR_OUTPUT_TOOL_NAME, auditorOutputSchema, } from "./package-contracts/auditor-output.js";
-export { AUDITOR_ACCEPTED_TEXT, AUDITOR_OUTPUT_TOOL_NAME };
-export const AUDITOR_TOOL_SPEC = {
-    name: AUDITOR_OUTPUT_TOOL_NAME,
-    label: "审刑院输出",
-    description: "审刑院终局回执，状态为 pass、bounce 或 escalate。",
-    promptSnippet: "审刑院终局回执",
-    parameters: auditorOutputSchema,
-};

package/dist/canonical-skill-binding.js

@@ -1,61 +0,0 @@
-import { readFile, realpath } from "node:fs/promises";
-import { homedir } from "node:os";
-import { dirname, resolve } from "node:path";
-import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
-export function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
-    const matchedPath = evidence?.location === configuredPath
-        ? configuredPath
-        : evidence?.location === snapshot.path
-            ? snapshot.path
-            : undefined;
-    const expectedContent = matchedPath === undefined
-        ? undefined
-        : `References are relative to ${dirname(matchedPath)}.\n\n${snapshot.body}`;
-    if (evidence?.name !== name
-        || matchedPath === undefined
-        || evidence.content !== expectedContent
-        || evidence.userMessage !== originalRequest) {
-        return undefined;
-    }
-    return Object.freeze({ ...evidence, name });
-}
-export class CanonicalSkillUnavailableError extends Error {
-    skillName;
-    code = "canonical-skill-unavailable";
-    constructor(skillName, path, cause) {
-        super(`Canonical ${skillName} Skill is unavailable at ${path}`, { cause });
-        this.skillName = skillName;
-        this.name = "CanonicalSkillUnavailableError";
-    }
-}
-export async function loadCanonicalSkillBinding(name) {
-    const configuredPath = resolve(homedir(), `.agents/skills/${name}/SKILL.md`);
-    let path;
-    let raw;
-    try {
-        path = await realpath(configuredPath);
-        raw = await readFile(path, "utf8");
-    }
-    catch (error) {
-        throw new CanonicalSkillUnavailableError(name, configuredPath, error);
-    }
-    const body = stripFrontmatter(raw).trim();
-    if (body.length === 0) {
-        throw new Error(`Canonical ${name} Skill is empty at ${path}`);
-    }
-    const snapshot = Object.freeze({
-        raw,
-        path,
-        baseDir: dirname(path),
-        body,
-        snapshotIdentity: Object.freeze({ text: raw }),
-    });
-    const binding = {
-        name,
-        snapshot,
-        captureExpansion(evidence, originalRequest) {
-            return captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest);
-        },
-    };
-    return Object.freeze(binding);
-}

package/dist/collector-handbook.js

@@ -1,142 +0,0 @@
-/**
- * Collector bot handbook — opaque working memory under the book topology.
- * Runtime stores and delivers UTF-8 text only; never parses free text into
- * code state rules (parent #673 D3 / #677).
- *
- * Placement reuses the machine ledger home (ADR 0048) when the admitted
- * session already sits under books/<bookKey>/ — no parallel persistence frame.
- */
-import { readFile } from "node:fs/promises";
-import { join, sep } from "node:path";
-import { writeFileAtomically } from "./atomic-write.js";
-import { activationBookDirectory, assertLedgerFileInsideHome, ensureRealDirectoryTree, resolveActivationLedgerHomeForPath, } from "./activation-ledger-topology.js";
-import { COLLECTOR_HANDBOOK_MAX_BYTES } from "./collector-tool-schemas.js";
-/**
- * Derive handbook root from an admitted session/run path under
- * `.ak-roles/books/<bookKey>/...`. Fails closed when topology is absent.
- */
-export function resolveCollectorHandbookRoot(sessionPath) {
-    if (typeof sessionPath !== "string" || sessionPath.trim().length === 0) {
-        throw new Error("通进司手册要求非空 session 路径，且位于 books/<bookKey>/");
-    }
-    // Platform path segments only — never rewrite non-separator characters (POSIX `\\` is literal).
-    const segments = sessionPath.split(sep);
-    let bookKey;
-    for (let i = 0; i + 3 < segments.length; i += 1) {
-        if (segments[i] === ".ak-roles" && segments[i + 1] === "books") {
-            const candidate = segments[i + 2];
-            // Require a following segment so bookKey is a true path component under books/.
-            if (candidate.length > 0) {
-                bookKey = candidate;
-                break;
-            }
-        }
-    }
-    if (bookKey === undefined) {
-        throw new Error(`通进司手册要求 session 位于 books/<bookKey>/；收到 ${sessionPath}`);
-    }
-    if (bookKey === "." || bookKey === "..") {
-        throw new Error(`通进司手册拒绝不安全 bookKey ${JSON.stringify(bookKey)}`);
-    }
-    const ledgerHome = resolveActivationLedgerHomeForPath(sessionPath);
-    const root = join(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
-    return { ledgerHome, bookKey, root };
-}
-/** Flat repo file name under handbook/repos/ — avoids nested owner/repo dirs. */
-function collectorHandbookRepoFileName(repositoryCanonical) {
-    if (!/^[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/.test(repositoryCanonical)) {
-        throw new Error(`通进司手册仓库文件要求规范 owner/repo，收到 ${JSON.stringify(repositoryCanonical)}`);
-    }
-    return `${repositoryCanonical.replaceAll("/", "__")}.md`;
-}
-export function createCollectorHandbookStore(input) {
-    const generalPath = join(input.handbookRoot, "general.md");
-    const repoDir = join(input.handbookRoot, "repos");
-    const repoPath = join(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
-    /**
-     * ADR 0038: confine at the real read seam. Parent dirs must be physical under
-     * ledger home; the leaf must not be a pre-existing symlink (even in-home).
-     */
-    /** Sole UTF-8 budget seam — write and read share COLLECTOR_HANDBOOK_MAX_BYTES. */
-    const assertHandbookBudget = (body, label) => {
-        const byteLength = Buffer.byteLength(body, "utf8");
-        if (byteLength > COLLECTOR_HANDBOOK_MAX_BYTES) {
-            throw new Error(`通进司手册${label} UTF-8 至多 ${COLLECTOR_HANDBOOK_MAX_BYTES} 字节，收到 ${byteLength}`);
-        }
-        return byteLength;
-    };
-    const readOptional = async (path, parentDir) => {
-        ensureRealDirectoryTree(input.ledgerHome, parentDir);
-        assertLedgerFileInsideHome(path, input.ledgerHome);
-        try {
-            const body = await readFile(path, "utf8");
-            assertHandbookBudget(body, "正文");
-            return body;
-        }
-        catch (error) {
-            if (isNotFound(error))
-                return undefined;
-            throw error;
-        }
-    };
-    return {
-        root: input.handbookRoot,
-        repositoryCanonical: input.repositoryCanonical,
-        async read() {
-            const bookGeneral = await readOptional(generalPath, input.handbookRoot);
-            const bookRepo = await readOptional(repoPath, repoDir);
-            if (bookGeneral !== undefined) {
-                return {
-                    general: bookGeneral,
-                    repo: bookRepo ?? "",
-                    generalSource: "book",
-                    repoSource: bookRepo === undefined ? "empty" : "book",
-                    generalPath,
-                    repoPath,
-                };
-            }
-            const seed = input.seedGeneral;
-            if (typeof seed === "string" && seed.length > 0) {
-                assertHandbookBudget(seed, "正文");
-                return {
-                    general: seed,
-                    repo: bookRepo ?? "",
-                    generalSource: "seed",
-                    repoSource: bookRepo === undefined ? "empty" : "book",
-                    generalPath,
-                    repoPath,
-                };
-            }
-            return {
-                general: "",
-                repo: bookRepo ?? "",
-                generalSource: "empty",
-                repoSource: bookRepo === undefined ? "empty" : "book",
-                generalPath,
-                repoPath,
-            };
-        },
-        async write(scope, body) {
-            // body string shape = collectorHandbookWriteArgsSchema; byte budget is business (UTF-8).
-            const byteLength = assertHandbookBudget(body, "正文");
-            ensureRealDirectoryTree(input.ledgerHome, input.handbookRoot);
-            const path = scope === "general" ? generalPath : repoPath;
-            if (scope === "repo") {
-                ensureRealDirectoryTree(input.ledgerHome, repoDir);
-            }
-            assertLedgerFileInsideHome(path, input.ledgerHome);
-            await writeFileAtomically(path, body);
-            return {
-                scope,
-                path,
-                byteLength,
-            };
-        },
-    };
-}
-function isNotFound(error) {
-    return typeof error === "object"
-        && error !== null
-        && "code" in error
-        && error.code === "ENOENT";
-}

package/dist/collector-receipt.js

@@ -1,107 +0,0 @@
-import { COLLECTOR_HOST } from "./collector-config.js";
-import { enrichCollectorFindings, extractCollectorEvidenceIdentityGroups, extractCollectorUnfinishedReasons, } from "./collector-identity.js";
-import { validateAcceptedCollectorReceipt, } from "./package-contracts/collector-output.js";
-export { validateAcceptedCollectorReceipt };
-function fail(message) { throw new Error(message); }
-/** Runtime output assembles findings pointers from the model submission into the typed receipt. */
-export function buildCollectorReceipt(ledger, candidateRaw, clock) {
-    ledger.assertNotFatal();
-    if (ledger.unresolvedTransportFailure)
-        fail("Collector cannot output while a transport failure is unrecovered");
-    if (ledger.latestCompleteSnapshotId === undefined)
-        fail("Collector output requires a complete final snapshot");
-    if (ledger.activationTime === undefined || ledger.deadlineTime === undefined)
-        fail("Collector output requires activation timeline");
-    if (ledger.config.prNumber === undefined) {
-        fail("Collector output requires a bound PR target; call ak_collector_bind_target first or pass --pr");
-    }
-    if (clock !== undefined)
-        ledger.assertOutputObservationLaw(clock);
-    else if (ledger.observedGeneration !== ledger.mutationGeneration ||
-        (ledger.finalObservationRequired && !ledger.finalObservationCompleted)) {
-        fail("Collector output requires a complete observe after the latest request/wait mutation");
-    }
-    const finalSnapshot = ledger.getSnapshot(ledger.latestCompleteSnapshotId);
-    if (finalSnapshot === undefined || !finalSnapshot.complete)
-        fail("Collector final snapshot is incomplete");
-    // #676 D6: closed/merged still deliver collected materials; status is a fact on the receipt.
-    const evidenceRecords = [...ledger.allEvidence()];
-    const snapshots = [...ledger.allSnapshots()];
-    const evidenceIndex = new Map(evidenceRecords.map((record) => [record.evidenceId, record]));
-    const snapshotIndex = new Map(snapshots.map((snapshot) => [snapshot.snapshotId, snapshot]));
-    if (evidenceIndex.size !== evidenceRecords.length)
-        fail("Collector receipt evidenceId collision");
-    if (snapshotIndex.size !== snapshots.length)
-        fail("Collector receipt snapshotId collision");
-    for (const id of evidenceIndex.keys())
-        if (snapshotIndex.has(id))
-            fail(`Collector receipt id "${id}" is ambiguous`);
-    if (!snapshotIndex.has(finalSnapshot.snapshotId))
-        fail("Collector receipt lacks final snapshot");
-    for (const snapshot of snapshots) {
-        for (const id of snapshot.evidenceIds)
-            if (!evidenceIndex.has(id))
-                fail(`Collector snapshot ref "${id}" does not resolve`);
-    }
-    const groups = extractCollectorEvidenceIdentityGroups(evidenceRecords, finalSnapshot.headOid);
-    // #641 chain①: the collector LLM submits findings as pointer refs; the runtime
-    // enriches each with the machine locator from the same stored record.
-    const findingsProjection = enrichCollectorFindings({
-        candidate: candidateRaw,
-        records: evidenceRecords,
-        groups,
-        targetHead: finalSnapshot.headOid,
-        repository: ledger.config.repository.canonical,
-        prNumber: ledger.config.prNumber,
-    });
-    for (const group of groups) {
-        for (const material of group.materials) {
-            if (material.evidenceId === undefined || !evidenceIndex.has(material.evidenceId))
-                fail("Collector material lacks a receipt-local evidence ref");
-        }
-        for (const finding of group.findings) {
-            if (finding.source.evidenceId === undefined || !evidenceIndex.has(finding.source.evidenceId))
-                fail("Collector finding lacks a receipt-local evidence ref");
-        }
-    }
-    const unfinished = extractCollectorUnfinishedReasons(candidateRaw);
-    const submissionProjection = {
-        findingsSource: findingsProjection.findingsSource,
-        findingsProjectedCount: findingsProjection.findingsProjectedCount,
-        findingsUnprojected: findingsProjection.findingsUnprojected,
-        unfinishedReasonsSource: unfinished.source,
-        unfinishedReasonsProjectedCount: unfinished.reasons?.length ?? 0,
-        unfinishedReasonsUnprojected: unfinished.unprojected,
-    };
-    return {
-        host: COLLECTOR_HOST,
-        repository: ledger.config.repository.canonical,
-        prNumber: ledger.config.prNumber,
-        prState: finalSnapshot.prState,
-        manifestDigest: ledger.config.manifest.digest,
-        activationTime: ledger.activationTime.toISOString(),
-        deadlineTime: ledger.deadlineTime.toISOString(),
-        finalObservationTime: finalSnapshot.completedAt ?? finalSnapshot.observedAt,
-        finalSnapshotId: finalSnapshot.snapshotId,
-        targetHead: finalSnapshot.headOid,
-        groups,
-        ...(unfinished.reasons === undefined ? {} : { unfinishedReasons: unfinished.reasons }),
-        submissionProjection,
-        requestAttempts: [...ledger.requestAttempts()],
-        snapshots,
-        evidenceRecords: evidenceRecords.map(toReceiptEvidenceRecord),
-    };
-}
-function toReceiptEvidenceRecord(record) {
-    return {
-        evidenceId: record.evidenceId,
-        kind: record.kind,
-        versionId: record.versionId,
-        contentDigest: record.contentDigest,
-        firstObservedAt: record.firstObservedAt,
-        ...(record.githubId === undefined ? {} : { githubId: record.githubId }),
-        ...(record.authorLogin === undefined ? {} : { authorLogin: record.authorLogin }),
-        ...(record.htmlUrl === undefined ? {} : { htmlUrl: record.htmlUrl }),
-        ...(record.authoritativeTime === undefined ? {} : { authoritativeTime: record.authoritativeTime }),
-    };
-}