@akagilnc/pi-workflow-roles 0.1.4062 → 0.1.4196

package/dist/navigator-public-session.js

@@ -7,41 +7,38 @@ import {
   parseNavigatorModelSetting,
   resolveNavigatorSeatSelection
 } from "./navigator-session-contracts.js";
+import { runDirectoryFromHostContext } from "./host-contracts.js";
+async function resolveNavigatorLedgerHome(context) {
+  const { tryHomeFromAkRolesPath } = await import("./activation-ledger-topology.js");
+  const runDirectory = runDirectoryFromHostContext(context);
+  if (runDirectory !== void 0) {
+    const fromRun = tryHomeFromAkRolesPath(runDirectory);
+    if (fromRun !== void 0 && fromRun.length > 0) return fromRun;
+  }
+  const parentFile = context.sessionManager?.getSessionFile?.();
+  if (typeof parentFile === "string" && parentFile.trim() !== "") {
+    const fromParent = tryHomeFromAkRolesPath(parentFile);
+    if (fromParent !== void 0 && fromParent.length > 0) return fromParent;
+  }
+  return void 0;
+}
 function createNativeNavigatorSessionFactory() {
   return async ({ context, subject, tool }) => {
     const resolved = await resolveNavigatorSeatSelection(context);
     let thinkingLevel = resolved.thinkingLevel;
-    const { createRecordSession } = await import("./archivist-record-entry.js");
+    const { createRecordSession, NAVIGATOR_RECORD_KIND } = await import("./archivist-record-entry.js");
+    const home = await resolveNavigatorLedgerHome(context);
     const sessionManager = createRecordSession({
       cwd: context.cwd,
-      kind: "navigator",
+      kind: NAVIGATOR_RECORD_KIND,
       subject,
-      parent: context.sessionManager
+      ...context.sessionManager !== void 0 ? { parent: context.sessionManager } : {},
+      ...home !== void 0 ? { home } : {}
     });
     let providerFailure;
     let noReceipt;
     let disposed = false;
     let inFlightPrompt;
-    const resolveHome = async () => {
-      const parentFile = context.sessionManager?.getSessionFile?.();
-      if (typeof parentFile === "string" && parentFile.trim() !== "") {
-        try {
-          const { tryHomeFromAkRolesPath, homeFromRunDirectory } = await import("./activation-ledger-topology.js");
-          const fromParent = tryHomeFromAkRolesPath(parentFile);
-          if (fromParent !== void 0 && fromParent.length > 0) return fromParent;
-          const runDir = parentFile.replace(/\/session\/session\.jsonl$/, "");
-          if (runDir !== parentFile) {
-            try {
-              return homeFromRunDirectory(runDir);
-            } catch {
-            }
-          }
-        } catch {
-        }
-      }
-      const envHome = process.env.HOME;
-      return typeof envHome === "string" && envHome.trim() !== "" ? envHome : void 0;
-    };
     return {
       prompt: async (text) => {
         if (disposed) {
@@ -52,12 +49,12 @@ function createNativeNavigatorSessionFactory() {
         const run = (async () => {
           try {
             const { summonPublicRole } = await import("./public-role-summons.js");
-            const home = await resolveHome();
+            const summonHome = await resolveNavigatorLedgerHome(context);
             const summoned = await summonPublicRole({
               role: "navigator",
               argv: [text],
               cwd: context.cwd,
-              ...home === void 0 ? {} : { home }
+              ...summonHome === void 0 ? {} : { home: summonHome }
             });
             const outcome = summoned.terminal?.roleOutcome;
             if (outcome === void 0) {

package/dist/notary-source-run.js

@@ -7,7 +7,7 @@ import { dirname, isAbsolute, join, resolve, basename } from "node:path";
 import { lstat, realpath } from "node:fs/promises";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import { activationBookDirectory, physicalPathIdentity, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
-import { readRoleRunIdentity } from "./public-cli/run-lifecycle.js";
+import { findRunDirectoryById, readRoleRunIdentity } from "./public-cli/run-lifecycle.js";
 // Run directory leaf: <runId>@<role>. Production uses uuidv7 runIds; offline tracers
 // may use deterministic non-uuid leaves. Role token stays identifier-shaped.
 const RUN_DIR_NAME = /^([A-Za-z0-9][A-Za-z0-9._-]*)@([A-Za-z][A-Za-z0-9_-]*)$/;
@@ -67,16 +67,19 @@ export async function resolveNotarySourceRunLocator(options) {
     let candidate;
     const bare = parseRunDirectoryName(raw);
     if (bare !== undefined && !raw.includes("/") && !raw.includes("\\")) {
-        candidate = join(bookRunsRoot, `${bare.runId}@${bare.role}`);
+        candidate = (await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role))
+            ?? join(bookRunsRoot, `${bare.runId}@${bare.role}`);
     }
     else {
         candidate = isAbsolute(raw) ? raw : resolve(options.projectRoot, raw);
     }
     const real = await requireRunDirectory(candidate, raw);
     const identity = parseRunDirectoryName(basename(real));
-    const runsRootIdentity = physicalPathIdentity(bookRunsRoot);
+    const bookIdentity = physicalPathIdentity(activationBookDirectory(ledgerHome, bookKey));
     const parentIdentity = physicalPathIdentity(dirname(real));
-    if (parentIdentity !== runsRootIdentity) {
+    const subjectBookIdentity = physicalPathIdentity(dirname(dirname(dirname(real))));
+    if (parentIdentity !== physicalPathIdentity(bookRunsRoot) &&
+        !(basename(dirname(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
         throw new NotarySourceRunError("notary --source-run must resolve to a retained run under the project machine-ledger book");
     }
     // Authoritative retained record only — legal role/state via shared reader (DRY #14).

package/dist/pi/durable-principal.js

@@ -1,21 +1,24 @@
 import { lstat } from "node:fs/promises";
 import { join } from "node:path";
 import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
-import { activationBookDirectory, resolveActivationLedgerHome, } from "../activation-ledger-topology.js";
+import { resolveActivationLedgerHome } from "../activation-ledger-topology.js";
+import { roleRunPlacement } from "../role-run-placement.js";
 function encode(coordinates) {
     return coordinates;
 }
 export function issuePiDurablePrincipalCoordinates(request) {
     const ledgerHome = resolveActivationLedgerHome(request.home);
     const bookKey = resolveBookKeyFromGit(request.cwd);
-    const runDirectory = join(activationBookDirectory(ledgerHome, bookKey), "runs", `${request.runId}@${request.role}`);
-    const sessionDirectory = join(runDirectory, "session");
+    const placement = roleRunPlacement(ledgerHome, {
+        bookKey,
+        subject: { unbound: true },
+        runId: request.runId,
+        role: request.role,
+    });
     return {
         ledgerHome,
         bookKey,
-        runDirectory,
-        sessionDirectory,
-        sessionFile: join(sessionDirectory, "session.jsonl"),
+        ...placement,
     };
 }
 /** Pi's durable-principal codec and availability authority. */

package/dist/public-cli/auto-resume.js

@@ -15,6 +15,7 @@ import { constants as fsConstants } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { lstat, mkdir, open } from "node:fs/promises";
 import { join } from "node:path";
+import { roleRunArtifactsDirectory } from "../role-run-placement.js";
 import { AUTO_RESUME_LIMIT, describeErrorIdentity, acquireRunWriterLease, markRunResumable, markRunTerminal, RunWriterLeaseHeldError, } from "./run-lifecycle.js";
 import { parseAutoResumeLimit } from "./config.js";
 import { isLawfulTypedTerminalOutcome, formatTerminalResult } from "./terminal.js";
@@ -87,10 +88,6 @@ export class TurnDispatchedFailure extends Error {
 }
 /** Session custom-entry type carrying the pointer to one dispatch error file. */
 export const DISPATCH_ERROR_RETENTION_ENTRY_TYPE = "ak_run_dispatch_error_retention";
-/** Artifacts subdirectory of a run directory (established run-artifacts location). */
-function runArtifactsDirectory(runDirectory) {
-    return join(runDirectory, "artifacts");
-}
 /**
  * #182-A hardened path identity, mirrored from settlement.ts's
  * ensureAuditEvidenceDirectory: a planted symlink at the run directory or the
@@ -106,7 +103,7 @@ export async function ensureRealArtifactsDirectory(runDirectory) {
     if (runStat.isSymbolicLink() || !runStat.isDirectory()) {
         throw new Error("run artifact retention: run directory is not a real directory");
     }
-    const artifactsDir = runArtifactsDirectory(runDirectory);
+    const artifactsDir = roleRunArtifactsDirectory(runDirectory);
     try {
         const existing = await lstat(artifactsDir);
         if (existing.isSymbolicLink() || !existing.isDirectory()) {

package/dist/public-cli/diarist-run.js

@@ -1,20 +1,41 @@
 import { engineSessionMaterialFromOptions, pickEngineAxis } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
-import { admitDiaristInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, } from "./invocation.js";
+import { admitDiaristInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, relocateAdmittedRunToTicket, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableDiaristRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { presentStructuralRejection, trySettleDiaristTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
-import { readRunTicketNumber } from "../run-ticket-number.js";
+import { readBoardTicketNumber } from "../run-ticket-number.js";
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildDiaristTurnRequest(admitted, options) {
     return projectRoleTurnRequest(admitted, { activation: { role: "diarist" } }, options);
 }
-function diaristAdapters() {
+/**
+ * Board-bound ticket on pages → memory bind + unbound→ticket relocate under lease.
+ * Shared by resume (interrupted board-bound unbound) and post-turn first assert.
+ */
+async function bindAndRelocateDiaristIfBoardBound(admitted, authority, lease) {
+    const boardTicket = await readBoardTicketNumber(admitted.runDirectory);
+    if (boardTicket === undefined)
+        return;
+    if (admitted.ticketNumber === undefined) {
+        await bindAdmittedTicketNumber(admitted, boardTicket);
+    }
+    await relocateAdmittedRunToTicket(admitted, authority, lease);
+}
+function diaristAdapters(env) {
     return {
         trySettle: (admitted, authority, scope) => trySettleDiaristTerminalResult(admitted, authority, scope),
         shouldPresentSettled: () => true,
+        // Resume interrupted state: board ticket already on pages, run still under unbound/.
+        beforeDispatch: async (admitted, lease) => {
+            await bindAndRelocateDiaristIfBoardBound(admitted, env.principalAuthority, lease);
+        },
+        // First post-turn assert: accept hook wrote board pages; relocate before lease release.
+        afterDispatch: async (admitted, lease) => {
+            await bindAndRelocateDiaristIfBoardBound(admitted, env.principalAuthority, lease);
+        },
     };
 }
 export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
@@ -67,6 +88,7 @@ export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
             ...(env.createRunId === undefined ? {} : { createRunId: env.createRunId }),
             ...(env.model === undefined ? {} : { model: env.model }),
             ...(env.correlationId === undefined ? {} : { correlationId: env.correlationId }),
+            ...(handoffTicket === undefined ? {} : { assertedTicketNumber: handoffTicket }),
         });
     }
     catch (error) {
@@ -77,12 +99,6 @@ export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
         throw error;
     }
     await markRunAdmitted(admitted, env.principalAuthority);
-    // Typed handoff: bind before the turn so identity is on durable pages.
-    if (typeof handoffTicket === "number" &&
-        Number.isSafeInteger(handoffTicket) &&
-        handoffTicket >= 1) {
-        await bindAdmittedTicketNumber(admitted, handoffTicket);
-    }
     const turnProjection = {
         packageRoot: env.packageRoot,
         home: env.home,
@@ -107,22 +123,8 @@ export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
         env,
         io,
         request: turnRequest,
-        adapters: diaristAdapters(),
+        adapters: diaristAdapters(env),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
-    }).then(async (result) => {
-        // Accept hook binds ticket onto durable pages (#771). Mirror that page fact
-        // onto the caller-visible admitted object — never pick a ticketNumber out of
-        // the payload sequence (#881 sole-collapse ban on ticket/escalate).
-        if (admitted.ticketNumber === undefined && result.admitted !== undefined) {
-            const fromPages = await readRunTicketNumber(admitted.runDirectory);
-            if (fromPages !== undefined) {
-                await bindAdmittedTicketNumber(admitted, fromPages);
-                if (result.admitted.ticketNumber === undefined) {
-                    result.admitted.ticketNumber = fromPages;
-                }
-            }
-        }
-        return result;
     });
 }
 /**
@@ -139,7 +141,7 @@ export async function runPublicDiaristResume(request, env, io) {
             const summonsPrepared = await prepareSummonsResumeMaterials(admitted.runDirectory, effective.summons);
             return buildDiaristTurnRequest(admitted, resumeTurnRequestProjectionOptions(admitted, effective, env, summonsPrepared));
         },
-        adapters: diaristAdapters(),
+        adapters: diaristAdapters(env),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
     });
 }

package/dist/public-cli/instruction-seat-run.js

@@ -1,7 +1,7 @@
 import { engineSessionMaterialFromOptions, pickEngineAxis } from "../package-resources/engine-material.js";
-import { readRunTicketNumber } from "../run-ticket-number.js";
+import { readBoardTicketNumber } from "../run-ticket-number.js";
 import { CliUsageError } from "./cli-errors.js";
-import { admitAuditorInvocation, admitGatekeeperInvocation, admitNavigatorInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
+import { admitAuditorInvocation, admitGatekeeperInvocation, admitNavigatorInvocation, buildInstructionTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInstructionSeatRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
@@ -145,7 +145,8 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
                 home: env.home,
             });
             auditorSourceRun = resolved.runDirectory;
-            auditorSourceTicket = await readRunTicketNumber(resolved.runDirectory);
+            // Auditor inherits board identity only — migration-derived is display, not admission.
+            auditorSourceTicket = await readBoardTicketNumber(resolved.runDirectory);
         }
         catch (error) {
             presentStructuralRejection(new CliUsageError(error instanceof Error ? error.message : String(error)), io);
@@ -195,6 +196,9 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
             ...(env.createRunId === undefined ? {} : { createRunId: env.createRunId }),
             ...(env.model === undefined ? {} : { model: env.model }),
             ...(env.correlationId === undefined ? {} : { correlationId: env.correlationId }),
+            ...(auditorSourceTicket === undefined
+                ? {}
+                : { assertedTicketNumber: auditorSourceTicket }),
         });
     }
     catch (error) {
@@ -239,14 +243,7 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
                 env,
                 io,
                 request: turnRequest,
-                adapters: instructionSeatAdapters({
-                    beforeDispatch: async (admittedSeat) => {
-                        // Auditor inherits source-run ticket (notary face) — typed, not prose match.
-                        if (auditorSourceTicket !== undefined) {
-                            await bindAdmittedTicketNumber(admittedSeat, auditorSourceTicket);
-                        }
-                    },
-                }),
+                adapters: instructionSeatAdapters(),
                 ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
             });
         },