@akagilnc/pi-workflow-roles 0.1.3932 → 0.1.3975

package/dist/notary-role.js

@@ -1,134 +0,0 @@
-/**
- * Public Notary role runtime — direct officer seat (not through Gatekeeper province).
- * Caller supplies only a source-run locator; Notary self-fetches authoritative materials.
- * Ticket flag register/read/session bind is envelope-owned (ADR 0018 / #582).
- * This module keeps evidence assembly + projection only.
- */
-import { NOTARY_ACCEPTED_TEXT, NOTARY_OUTPUT_TOOL_NAME, NOTARY_SOURCE_RUN_FLAG, NOTARY_TICKET_FLAG, notaryOutputSchema, } from "./notary-contracts.js";
-export { NOTARY_ACCEPTED_TEXT, NOTARY_OUTPUT_TOOL_NAME, NOTARY_SOURCE_RUN_FLAG, NOTARY_TICKET_FLAG, };
-/** Optional ticket flag: absent/blank = unbound; non-empty invalid = honest fail. */
-export function readNotaryTicketFlag(flag) {
-    if (flag === undefined)
-        return undefined;
-    if (typeof flag !== "string") {
-        throw new Error("Notary ak-notary-ticket-number is present but not a safe positive integer string");
-    }
-    if (flag.trim() === "")
-        return undefined;
-    const n = Number(flag);
-    if (!Number.isSafeInteger(n) || n < 1) {
-        throw new Error("Notary ak-notary-ticket-number is present but not a safe positive integer string");
-    }
-    return n;
-}
-/**
- * Typed session bound (locator + optional ticket).
- * Sole production projection for agent-start material + session custom entry.
- */
-export function projectNotarySessionBound(input) {
-    return {
-        sourceRun: input.sourceRun,
-        ...(input.ticketNumber === undefined ? {} : { ticketNumber: input.ticketNumber }),
-    };
-}
-/**
- * Session custom-entry type for typed notary bound (written by shared envelope).
- * Role module only projects; lifecycle write is envelope-owned (ADR 0018).
- */
-export const NOTARY_SESSION_BOUND_ENTRY = "notary-session-bound";
-/**
- * Project notary bound from host flags (envelope consumption seam).
- * undefined when source-run flag absent/blank.
- * Ticket invalid → throws (honest fail; envelope owns the read).
- */
-export function projectNotaryBoundFromFlags(getFlag) {
-    const path = getFlag(NOTARY_SOURCE_RUN_FLAG.name);
-    if (typeof path !== "string" || path.trim() === "")
-        return undefined;
-    const ticketNumber = readNotaryTicketFlag(getFlag(NOTARY_TICKET_FLAG.name));
-    return {
-        sourceRunPath: path,
-        ...(ticketNumber === undefined ? {} : { ticketNumber }),
-    };
-}
-/** Assemble systemPrompt body from base + soul only (NO embedded bound JSON).
- * The typed session bound travels separately as `readingMaterial`; adapters fold
- * it into the provider-visible prompt at the send boundary. */
-export function assembleNotaryAgentStartPrompt(input) {
-    return `${input.baseSystemPrompt}\n\n<notary_soul>\n${input.soul}\n</notary_soul>`;
-}
-export function createNotaryRoleRuntime(pi, dependencies, host) {
-    let activation;
-    let registered = false;
-    // Baseline source-run flag registration (pre-#582). Ticket flag is envelope-owned.
-    pi.registerFlag(NOTARY_SOURCE_RUN_FLAG.name, NOTARY_SOURCE_RUN_FLAG.definition);
-    return {
-        /**
-         * @param admitted Optional ticket from envelope flag decode (ADR 0018).
-         * Role module never getFlag's the ticket — envelope owns that read.
-         */
-        async activate(admitted) {
-            const path = pi.getFlag(NOTARY_SOURCE_RUN_FLAG.name);
-            if (typeof path !== "string" || path.trim() === "") {
-                throw new Error("Notary requires --ak-notary-source-run");
-            }
-            const soul = (await dependencies.loadSoul()).trim();
-            if (soul.length === 0)
-                throw new Error("Notary soul is empty");
-            const sourceRun = await dependencies.loadSourceRunLocator(path);
-            activation = {
-                soul,
-                sourceRun,
-                ...(admitted?.ticketNumber === undefined
-                    ? {}
-                    : { ticketNumber: admitted.ticketNumber }),
-            };
-            if (!registered) {
-                registered = true;
-                pi.registerTool({
-                    name: NOTARY_OUTPUT_TOOL_NAME,
-                    label: "符宝郎输出",
-                    description: "提交引文保真与票面对齐的 typed pass/bounce/escalate 决议。",
-                    promptSnippet: "提交符宝郎决议",
-                    parameters: notaryOutputSchema,
-                    async execute(toolCallId, parameters, _signal, _onUpdate, ctx) {
-                        if (activation === undefined) {
-                            throw new Error("符宝郎未激活");
-                        }
-                        // #753: handler only records — params as submitted, no findings/disposition rewrite.
-                        // #541 infra declaration + sole-final barrier are ledger-owned (#575).
-                        return {
-                            content: [{ type: "text", text: NOTARY_ACCEPTED_TEXT }],
-                            details: parameters,
-                            terminate: true,
-                        };
-                    },
-                });
-                // Evidence assembly only (ADR 0018): soul + bound projection.
-                // Ticket value is envelope-admitted at activate — not re-read from flags here.
-                pi.on("before_agent_start", (event) => {
-                    if (activation === undefined) {
-                        throw new Error("符宝郎未激活");
-                    }
-                    return {
-                        systemPrompt: assembleNotaryAgentStartPrompt({
-                            baseSystemPrompt: event.systemPrompt,
-                            soul: activation.soul,
-                        }),
-                        readingMaterial: projectNotarySessionBound({
-                            sourceRun: activation.sourceRun,
-                            ...(activation.ticketNumber === undefined
-                                ? {}
-                                : { ticketNumber: activation.ticketNumber }),
-                        }),
-                    };
-                });
-            }
-            // Evidence role: keep Pi default tools + notary output (ADR 0064 unrestricted).
-            const all = pi.getAllTools().map((tool) => tool.name);
-            if (all.filter((name) => name === NOTARY_OUTPUT_TOOL_NAME).length !== 1) {
-                throw new Error(`Notary required tool collision or missing: ${NOTARY_OUTPUT_TOOL_NAME}`);
-            }
-        },
-    };
-}

package/dist/oauth-keepalive.js

@@ -1,158 +0,0 @@
-/**
- * Extension-side OAuth credential keepalive (#351).
- *
- * Periodically calls the public `ctx.modelRegistry.refresh` facade so expired
- * OAuth tokens (e.g. kimi-coding 900s TTL) are renewed during long sessions.
- * Does not read auth.json, touch pi-ai private APIs, or reuse the 183s idle gate.
- */
-import { readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-export const DEFAULT_OAUTH_KEEPALIVE_PROVIDERS = ["kimi-coding"];
-export const OAUTH_KEEPALIVE_INTERVAL_MS = 60_000;
-/** Persistent extension setting filename under PI_CODING_AGENT_DIR / ~/.pi/agent. */
-export const OAUTH_KEEPALIVE_SETTING_FILENAME = "oauth-keepalive.json";
-/** Path to the static provider-list extension setting (default ["kimi-coding"]). */
-export function oauthKeepaliveSettingPath() {
-    return join(process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent"), OAUTH_KEEPALIVE_SETTING_FILENAME);
-}
-function isExactRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
- * Read the static keepalive provider list from the extension setting file.
- * Missing file → default ["kimi-coding"]. Malformed content fails closed.
- * Production extension root is the sole caller that feeds this into keepalive.
- */
-export function readOAuthKeepaliveProviders(path = oauthKeepaliveSettingPath()) {
-    try {
-        const raw = JSON.parse(readFileSync(path, "utf8"));
-        if (!isExactRecord(raw) || !Array.isArray(raw.providers)) {
-            throw new Error("OAuth keepalive setting is malformed: expected { providers: string[] }");
-        }
-        const providers = raw.providers.map((id, index) => {
-            if (typeof id !== "string" || id.trim() === "") {
-                throw new Error(`OAuth keepalive setting providers[${index}] must be a non-empty string`);
-            }
-            // Accept via trim-non-empty; return the normalized id so refresh can hit real providers.
-            return id.trim();
-        });
-        return Object.freeze(providers);
-    }
-    catch (error) {
-        // Absent optional setting uses the documented default; all other causes propagate.
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT") {
-            return DEFAULT_OAUTH_KEEPALIVE_PROVIDERS;
-        }
-        throw error;
-    }
-}
-const defaultScheduler = {
-    every(ms, tick) {
-        const timer = setInterval(tick, ms);
-        // Allow the process to exit if a caller forgets stop (same discipline as trajectory).
-        timer.unref?.();
-        return () => clearInterval(timer);
-    },
-};
-function errorClassName(error) {
-    if (error instanceof Error && error.name.trim() !== "")
-        return error.name;
-    if (error !== null && typeof error === "object" && "name" in error) {
-        const name = error.name;
-        if (typeof name === "string" && name.trim() !== "")
-            return name;
-    }
-    return "Error";
-}
-function formatWarning(providerId, error) {
-    const cls = errorClassName(error);
-    const detail = error instanceof Error
-        ? error.message
-        : typeof error === "string"
-            ? error
-            : String(error);
-    return `oauth-keepalive: refresh failed for provider ${providerId} (${cls}): ${detail}`;
-}
-function emitWarning(ctx, providerId, error) {
-    const text = formatWarning(providerId, error);
-    // Exactly one visible surface per failure: prefer ui.notify when present;
-    // console.warn only when notify is unavailable (print/json / headless)
-    // or when notify itself throws (still one surface; carry the notify cause).
-    const notify = ctx.ui?.notify;
-    if (typeof notify === "function") {
-        try {
-            notify(text, "warning");
-        }
-        catch (notifyError) {
-            // Notify threw: fall back once so refresh failure stays visible.
-            console.warn(text, notifyError);
-        }
-        return;
-    }
-    console.warn(text);
-}
-/**
- * Session-lifecycle owner for periodic OAuth refresh via the public modelRegistry facade.
- * Single-flight: overlapping ticks are skipped. stop() cancels the interval and aborts in-flight work.
- */
-export function createOAuthKeepalive(options = {}) {
-    const providers = Object.freeze((options.providers ?? DEFAULT_OAUTH_KEEPALIVE_PROVIDERS).map((id) => id));
-    const intervalMs = options.intervalMs ?? OAUTH_KEEPALIVE_INTERVAL_MS;
-    const scheduler = options.scheduler ?? defaultScheduler;
-    let cancel;
-    let abortController;
-    /** Bare single-flight gate; survives stop/start until the in-flight call settles. */
-    let inFlight = false;
-    const stop = () => {
-        cancel?.();
-        cancel = undefined;
-        abortController?.abort();
-        abortController = undefined;
-        // Do not clear unsettled inFlight — single-flight is continuous across stop/start.
-    };
-    const runTick = async (ctx) => {
-        if (inFlight)
-            return;
-        const ac = abortController;
-        if (ac === undefined || ac.signal.aborted)
-            return;
-        inFlight = true;
-        try {
-            const result = await ctx.modelRegistry.refresh({
-                providers: [...providers],
-                allowNetwork: true,
-                signal: ac.signal,
-            });
-            if (ac.signal.aborted || result.aborted)
-                return;
-            for (const [providerId, error] of result.errors) {
-                emitWarning(ctx, providerId, error);
-            }
-        }
-        catch (error) {
-            if (ac.signal.aborted)
-                return;
-            // Whole-call failure: one warning per configured provider (ticket error surface).
-            for (const providerId of providers) {
-                emitWarning(ctx, providerId, error);
-            }
-        }
-        finally {
-            inFlight = false;
-        }
-    };
-    return {
-        start(ctx) {
-            // Reload / re-start: tear down any prior interval before hanging a new one.
-            stop();
-            abortController = new AbortController();
-            cancel = scheduler.every(intervalMs, () => {
-                void runTick(ctx);
-            });
-        },
-        stop,
-    };
-}

package/dist/pi/adapter.js

@@ -1,223 +0,0 @@
-import { parseSkillBlock, } from "@earendil-works/pi-coding-agent";
-import { requireGatekeeperPass } from "../gatekeeper-pass-envelope.js";
-import { createOAuthKeepalive } from "../oauth-keepalive.js";
-import { createRoleRuntimeExtension } from "../role-runtime.js";
-import { renderAgentStartMaterials } from "../agent-start-materials.js";
-import { mechanicalSubmissionRejectionResumeMessage } from "../submission-correctable-error.js";
-const piContexts = new WeakMap();
-/** Pi-only entrypoint adapter around the host-neutral shared composition. */
-export function createPiRoleRuntimeExtension(dependencies, options = {}) {
-    return (pi) => createRoleRuntimeExtension(dependencies)(createPiRoleHostAdapter(pi, options));
-}
-/** Project Pi's activation context onto the package-owned host contract. */
-function projectPiContext(context, transcriptFromContext) {
-    const sessionManager = context.sessionManager;
-    const host = {
-        cwd: context.cwd,
-        mode: context.mode,
-        model: context.model === undefined ? undefined : { provider: context.model.provider },
-        sessionManager: {
-            getLeafEntry: () => context.sessionManager.getLeafEntry(),
-            getLeafId: () => context.sessionManager.getLeafId(),
-            getEntries: () => context.sessionManager.getEntries(),
-            getSessionDir: () => context.sessionManager.getSessionDir(),
-            getSessionFile: () => context.sessionManager.getSessionFile(),
-            getHeader: () => context.sessionManager.getHeader(),
-            setSessionFile: (path) => sessionManager.setSessionFile(path),
-            appendCustomEntry: (customType, data) => sessionManager.appendCustomEntry(customType, data),
-        },
-        ...(context.signal === undefined ? {} : { signal: context.signal }),
-        ...(context.ui === undefined ? {} : { ui: { notify: (message, type) => context.ui.notify(message, type) } }),
-        ...(transcriptFromContext === undefined ? {} : { transcript: () => transcriptFromContext(context) }),
-        abort: () => context.abort(),
-    };
-    piContexts.set(host, context);
-    return host;
-}
-/** Recover the Pi context only at the Pi composition boundary. */
-export function toPiContext(context) {
-    const piContext = piContexts.get(context);
-    if (piContext === undefined)
-        throw new Error("Host context is not backed by the Pi adapter");
-    return piContext;
-}
-/** Gatekeeper receives HostContext directly (#518 §1③) without recovering raw ExtensionContext via WeakMap. */
-function requirePiGatekeeperPass(options) {
-    return requireGatekeeperPass({
-        context: options.context,
-        subject: options.subject,
-        ...(options.signal === undefined ? {} : { signal: options.signal }),
-        hostActions: {
-            failInfrastructure(error, _context, toolCallId) {
-                options.hostActions.failInfrastructure(error, options.context, toolCallId);
-            },
-            bindSubmissionNonPass: options.hostActions.bindSubmissionNonPass,
-        },
-        toolCallId: options.toolCallId,
-    });
-}
-function toPiResult(result) {
-    return result;
-}
-/** Fold a host before_agent_start return: push readingMaterial into the provider-visible
- * systemPrompt via the shared renderer and strip the typed field before Pi sees it. */
-function foldBeforeAgentStartReturn(result) {
-    if (result === undefined || result === null || typeof result !== "object")
-        return undefined;
-    const record = result;
-    const { systemPrompt, readingMaterial } = record;
-    const folded = readingMaterial === undefined
-        ? systemPrompt
-        : renderAgentStartMaterials(systemPrompt ?? "", [readingMaterial]);
-    return folded === undefined ? {} : { systemPrompt: folded };
-}
-function toPiToolDefinition(tool, projectContext) {
-    return {
-        name: tool.name,
-        label: tool.label,
-        description: tool.description,
-        ...(tool.promptSnippet === undefined ? {} : { promptSnippet: tool.promptSnippet }),
-        parameters: tool.parameters,
-        execute: async (toolCallId, params, signal, update, context) => toPiResult(await tool.execute(toolCallId, params, signal, update === undefined ? undefined : (result) => update(toPiResult(result)), projectContext(context))),
-    };
-}
-/** Pi composition boundary. Each consumed capability is adapted explicitly. */
-export function createPiRoleHostAdapter(pi, options = {}) {
-    const keepalive = createOAuthKeepalive(options.oauthKeepalive);
-    const host = {
-        deliverSubmissionRejection(rejection) {
-            pi.sendMessage({
-                customType: "ak-role-submission-rejection",
-                content: mechanicalSubmissionRejectionResumeMessage(rejection.code),
-                display: true,
-                details: rejection,
-            }, { triggerTurn: true, deliverAs: "followUp" });
-        },
-        capabilities: {
-            skillExpansion(prompt) {
-                const parsed = parseSkillBlock(prompt);
-                if (parsed == null)
-                    return undefined;
-                const userMessage = parsed.userMessage ?? "";
-                return Object.freeze({
-                    name: parsed.name,
-                    location: parsed.location,
-                    content: parsed.content,
-                    userMessage,
-                });
-            },
-            /** Recover plain original request from Pi-native `/skill:` turn text (ADR 0082). */
-            skillOriginalRequest(name, text) {
-                const token = `/skill:${name}`;
-                const trimmed = text.trimStart();
-                if (trimmed === token
-                    || trimmed.startsWith(`${token} `)
-                    || trimmed.startsWith(`${token}\n`)) {
-                    return text.slice(text.indexOf(token) + token.length).trim();
-                }
-                return text.trim();
-            },
-        },
-        registerFlag: (name, definition) => pi.registerFlag(name, definition),
-        getFlag: (name) => pi.getFlag(name),
-        registerTool: (tool) => pi.registerTool(toPiToolDefinition(tool, (context) => projectPiContext(context, options.transcriptFromContext))),
-        getAllTools: () => pi.getAllTools().map(({ name, sourceInfo }) => ({
-            name,
-            ...(sourceInfo?.path === undefined ? {} : { sourceInfo: { path: sourceInfo.path } }),
-        })),
-        setActiveTools: (names) => pi.setActiveTools(names),
-        getActiveTools: () => pi.getActiveTools(),
-        requireGatekeeperPass: requirePiGatekeeperPass,
-        on(...registration) {
-            const context = (value) => projectPiContext(value, options.transcriptFromContext);
-            if (registration[0] === "before_agent_start") {
-                const [, handler] = registration;
-                pi.on("before_agent_start", (value, ctx) => {
-                    const result = handler({ prompt: value.prompt, systemPrompt: value.systemPrompt, systemPromptOptions: value.systemPromptOptions }, context(ctx));
-                    if (result instanceof Promise)
-                        return result.then(foldBeforeAgentStartReturn);
-                    return foldBeforeAgentStartReturn(result);
-                });
-            }
-            else if (registration[0] === "input") {
-                const [, handler] = registration;
-                pi.on("input", (value, ctx) => handler({ text: value.text, ...(value.images === undefined ? {} : { images: value.images }), source: value.source }, context(ctx)));
-            }
-            else if (registration[0] === "tool_call") {
-                const [, handler] = registration;
-                pi.on("tool_call", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, input: value.input }, context(ctx)));
-            }
-            else if (registration[0] === "tool_result") {
-                const [, handler] = registration;
-                pi.on("tool_result", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, isError: value.isError, content: (value.content ?? []).map((part) => part.type === "text" ? { type: "text", text: part.text } : { type: "image", data: part.data, mimeType: part.mimeType }), details: value.details }, context(ctx)));
-            }
-            else if (registration[0] === "session_start") {
-                const [, handler] = registration;
-                pi.on("session_start", (value, ctx) => handler({ reason: value.reason }, context(ctx)));
-            }
-            else if (registration[0] === "session_shutdown") {
-                const [, handler] = registration;
-                pi.on("session_shutdown", (_value, ctx) => handler({}, context(ctx)));
-            }
-            else if (registration[0] === "after_provider_response") {
-                const [, handler] = registration;
-                pi.on("after_provider_response", (value, ctx) => handler({ status: value.status }, context(ctx)));
-            }
-            else if (registration[0] === "agent_end") {
-                const [, handler] = registration;
-                pi.on("agent_end", (value, ctx) => handler({
-                    messages: value.messages.map((message) => ({
-                        role: message.role,
-                        content: "content" in message && Array.isArray(message.content) ? message.content.map((part) => part.type === "text"
-                            ? { type: "text", text: part.text }
-                            : part.type === "toolCall"
-                                ? { type: "toolCall", id: part.id, name: part.name, arguments: part.arguments }
-                                : { type: part.type }) : [],
-                        ...("toolName" in message && typeof message.toolName === "string" ? { toolName: message.toolName } : {}),
-                        ...("isError" in message && typeof message.isError === "boolean" ? { isError: message.isError } : {}),
-                        ...("stopReason" in message && typeof message.stopReason === "string" ? { stopReason: message.stopReason } : {}),
-                    })),
-                }, context(ctx)));
-            }
-            else if (registration[0] === "turn_end") {
-                const [, handler] = registration;
-                pi.on("turn_end", (value, ctx) => handler({
-                    turnIndex: value.turnIndex,
-                    calls: value.toolResults.map((result) => ({
-                        toolCallId: result.toolCallId,
-                        toolName: result.toolName,
-                    })),
-                }, context(ctx)));
-            }
-            else if (registration[0] === "agent_settled") {
-                const [, handler] = registration;
-                pi.on("agent_settled", (_value, ctx) => handler({}, context(ctx)));
-            }
-            else if (registration[0] === "tool_execution_start") {
-                const [, handler] = registration;
-                pi.on("tool_execution_start", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId }, context(ctx)));
-            }
-            else if (registration[0] === "tool_execution_update") {
-                const [, handler] = registration;
-                pi.on("tool_execution_update", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, partialResult: value.partialResult }, context(ctx)));
-            }
-            else {
-                const [, handler] = registration;
-                pi.on("tool_execution_end", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, isError: value.isError }, context(ctx)));
-            }
-        },
-        ...(typeof pi.getCommands === "function" ? { getCommands: () => pi.getCommands().map(({ name }) => ({ name })) } : {}),
-    };
-    return {
-        host,
-        appendEntry: (customType, data) => pi.appendEntry(customType, data),
-        sendMessage: (message, sendOptions) => pi.sendMessage({
-            customType: message.customType,
-            content: message.content,
-            display: message.display ?? false,
-            details: message.details,
-        }, sendOptions),
-        startKeepalive: (context) => keepalive.start(toPiContext(context)),
-        stopKeepalive: () => keepalive.stop(),
-    };
-}

package/dist/reviewer-agent.js

@@ -1,122 +0,0 @@
-import { isReviewerPromptText } from "./reviewer-prompt-identity.js";
-import { executeReviewerChild } from "./reviewer-child-executor.js";
-import { createReviewerWorkspaceOwner } from "./reviewer-workspace.js";
-import { normalizeReviewerFailureDiagnostic } from "./reviewer-failure-diagnostic.js";
-function reviewerDispatchFailureMessage(outcome) {
-    const diagnostics = [...new Set(Object.values(outcome.legs)
-            .filter((leg) => leg?.status === "failed")
-            .map((leg) => leg.diagnostic.trim())
-            .filter((diagnostic) => diagnostic.length > 0))];
-    if (diagnostics.length === 0)
-        return "Reviewer dispatch execution failed";
-    return diagnostics.length === 1 ? diagnostics[0] : diagnostics.join("; ");
-}
-export class ReviewerDispatchExecutionError extends Error {
-    outcome;
-    constructor(outcome) {
-        super(reviewerDispatchFailureMessage(outcome));
-        this.outcome = outcome;
-        this.name = "ReviewerDispatchExecutionError";
-    }
-}
-function classify(error, signal) { if (signal?.aborted)
-    return "cancelled"; if (typeof error === "object" && error !== null && "reviewerFailure" in error)
-    return error.reviewerFailure; return "unknown"; }
-function failed(error, target, prompt, signal, retained) {
-    const attached = typeof error === "object" && error !== null ? error : {};
-    const failure = classify(error, signal);
-    const diagnostic = normalizeReviewerFailureDiagnostic(error, failure);
-    return Object.freeze({
-        status: "failed",
-        failure,
-        diagnostic,
-        cause: error,
-        target: attached.targetSnapshot ?? target,
-        prompt,
-        workspaceDisposition: retained === undefined ? attached.workspaceDisposition ?? "not-created" : { retained },
-    });
-}
-export function createReviewerAgentRunner(dependencies = {}) {
-    const workspaceOwner = createReviewerWorkspaceOwner(dependencies.fault === undefined ? {} : { fault: dependencies.fault });
-    let accepted = false;
-    return {
-        async run(dispatch, options) {
-            if (dispatch.recipe !== "reviewer-common-bundle-v1" || dispatch.legs.length < 1 || dispatch.legs.length > 2 || dispatch.legs[0]?.axis !== "standards" || (dispatch.legs.length === 2 && dispatch.legs[1]?.axis !== "spec"))
-                throw new Error("Invalid accepted Reviewer dispatch cardinality or axes");
-            if (accepted)
-                throw new Error("Reviewer runner accepts exactly one dispatch");
-            accepted = true;
-            for (const leg of dispatch.legs)
-                if (!isReviewerPromptText(leg.prompt))
-                    throw new Error("Accepted Reviewer prompt evidence mismatch");
-            let batch;
-            try {
-                batch = await workspaceOwner.prepare(dispatch.targetSnapshot, dispatch.legs.map(l => l.axis), options.signal);
-            }
-            catch (error) {
-                const prepared = typeof error === "object" && error !== null && "preparedWorkspaces" in error ? error.preparedWorkspaces ?? [] : [];
-                const failedIndex = prepared.length;
-                const legs = Object.fromEntries(dispatch.legs.map((leg, index) => [leg.axis, failed(error, dispatch.targetSnapshot, leg.prompt, options.signal, index < failedIndex ? prepared[index].path : undefined)]));
-                // Siblings not yet attempted have no workspace; do not borrow the failed leg's retained path.
-                for (let index = failedIndex + 1; index < dispatch.legs.length; index += 1) {
-                    const axis = dispatch.legs[index].axis;
-                    legs[axis] = Object.freeze({ ...legs[axis], workspaceDisposition: "not-created" });
-                }
-                const target = Object.values(legs)[0].target;
-                throw new ReviewerDispatchExecutionError(Object.freeze({ identity: dispatch.identity, target, legs: Object.freeze(legs) }));
-            }
-            const settled = await Promise.allSettled(batch.workspaces.map(async (workspace) => {
-                const leg = dispatch.legs.find(candidate => candidate.axis === workspace.axis);
-                try {
-                    const child = await executeReviewerChild(workspace.path, leg, options.context, {
-                        ...(options.signal === undefined ? {} : { signal: options.signal }),
-                        ...(dependencies.credentialScratchParent === undefined
-                            ? {}
-                            : { credentialScratchParent: dependencies.credentialScratchParent }),
-                        ...(dependencies.packageRoot === undefined
-                            ? {}
-                            : { packageRoot: dependencies.packageRoot }),
-                        ...(options.getFlag === undefined ? {} : { getFlag: options.getFlag }),
-                    });
-                    const disposition = await workspaceOwner.dispose(workspace);
-                    return [leg.axis, Object.freeze({ status: "successful", report: child.report, usage: child.usage, target: batch.target, prompt: child.prompt, workspaceDisposition: disposition })];
-                }
-                catch (error) {
-                    // Failed legs retain their workspace for the durable failure evidence and caller cleanup.
-                    return [leg.axis, failed(error, batch.target, leg.prompt, options.signal, workspace.path)];
-                }
-            }));
-            const pairs = settled.map(item => item.status === "fulfilled" ? item.value : (() => { throw item.reason; })());
-            const outcome = Object.freeze({ identity: dispatch.identity, target: batch.target, legs: Object.freeze(Object.fromEntries(pairs)) });
-            if (Object.values(outcome.legs).some(leg => leg?.status === "failed"))
-                throw new ReviewerDispatchExecutionError(outcome);
-            return outcome;
-        },
-        shutdown: () => workspaceOwner.shutdown(),
-    };
-}
-/**
- * Host-level Reviewer binding: each accepted dispatch gets a fresh one-shot runner.
- * Auto-resume turns must not reuse the inner one-shot slot.
- */
-export function createPerDispatchReviewerAgent(dependencies = {}) {
-    const active = new Set();
-    return {
-        async run(dispatch, options) {
-            const runner = createReviewerAgentRunner(dependencies);
-            active.add(runner);
-            try {
-                return await runner.run(dispatch, options);
-            }
-            finally {
-                active.delete(runner);
-                await runner.shutdown();
-            }
-        },
-        async shutdown() {
-            const runners = [...active];
-            active.clear();
-            await Promise.all(runners.map((runner) => runner.shutdown()));
-        },
-    };
-}