@akagilnc/pi-workflow-roles 0.1.4992 → 0.1.4999

package/dist/notary-source-run.js

@@ -8,6 +8,18 @@ import { lstat, realpath } from "node:fs/promises";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import { activationBookDirectory, physicalPathIdentity, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
 import { findRunDirectoryById, readRoleRunIdentity } from "./public-cli/run-lifecycle.js";
+async function readRetainedIdentity(runDirectory) {
+    try {
+        return await readRoleRunIdentity(runDirectory);
+    }
+    catch (error) {
+        if (!(error instanceof TypeError || error instanceof SyntaxError))
+            throw error;
+        throw new NotarySourceRunError("notary --source-run has invalid retained run-state identity", {
+            cause: error,
+        });
+    }
+}
 // Run directory leaf: <runId>@<role>. Production uses uuidv7 runIds; offline tracers
 // may use deterministic non-uuid leaves. Role token stays identifier-shaped.
 const RUN_DIR_NAME = /^([A-Za-z0-9][A-Za-z0-9._-]*)@([A-Za-z][A-Za-z0-9_-]*)$/;
@@ -94,7 +106,7 @@ export async function resolveNotarySourceRunLocator(options) {
     }
     // Authoritative retained record only — legal role/state via shared reader (DRY #14).
     // Identity envelope only: principal payload is not interpreted here.
-    const runState = await readRoleRunIdentity(real);
+    const runState = await readRetainedIdentity(real);
     if (runState === undefined) {
         throw new NotarySourceRunError("notary --source-run lacks retained run-state identity");
     }
@@ -117,7 +129,7 @@ export async function resolveNotarySourceRunLocator(options) {
 export async function loadNotarySourceRunLocator(path) {
     const real = await requireRunDirectory(path, path);
     const identity = parseRunDirectoryName(basename(real));
-    const runState = await readRoleRunIdentity(real);
+    const runState = await readRetainedIdentity(real);
     if (runState === undefined) {
         throw new NotarySourceRunError("notary source-run lacks retained run-state identity");
     }

package/dist/pi/role-turn-host.js

@@ -401,14 +401,11 @@ export async function appendPiSessionCustomEntry(authority, principal, customTyp
         timestamp,
     })}\n`;
     await appendFile(sessionFile, pointerLine, "utf8");
-    try {
-        sitianReport({
-            level: "event",
-            kind: "dispatch-error",
-            sessionParent: sessionFile,
-            payload: { customType, data },
-            source: "pi-role-turn-host",
-        });
-    }
-    catch { }
+    sitianReport({
+        level: "event",
+        kind: "dispatch-error",
+        sessionParent: sessionFile,
+        payload: { customType, data },
+        source: "pi-role-turn-host",
+    });
 }

package/dist/public-cli/main.js

@@ -17654,16 +17654,13 @@ async function appendPiSessionCustomEntry(authority, principal, customType, data
   })}
 `;
   await appendFile(sessionFile, pointerLine, "utf8");
-  try {
-    sitianReport({
-      level: "event",
-      kind: "dispatch-error",
-      sessionParent: sessionFile,
-      payload: { customType, data },
-      source: "pi-role-turn-host"
-    });
-  } catch {
-  }
+  sitianReport({
+    level: "event",
+    kind: "dispatch-error",
+    sessionParent: sessionFile,
+    payload: { customType, data },
+    source: "pi-role-turn-host"
+  });
 }
 var INTERNAL_ROLE_ENTRYPOINT_RELATIVE2, EXPLICIT_INTERNAL_LOAD_PROBE_ARGS, execFileAsync;
 var init_role_turn_host = __esm({
@@ -19004,7 +19001,7 @@ function parseCurrentCourtState(raw) {
     ...summons === void 0 ? {} : { summons }
   };
 }
-async function readRoleRunStateDisk(runDirectory) {
+async function readRoleRunStateRaw(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(await readFile12(join15(runDirectory, RUN_STATE_FILE), "utf8"));
@@ -19012,24 +19009,40 @@ async function readRoleRunStateDisk(runDirectory) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
   }
+  return raw;
+}
+function parseRoleRunIdentity(raw, runDirectory) {
   if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-    return void 0;
+    throw new TypeError("Invalid run-state.json");
   }
   const record4 = raw;
   if (typeof record4.runId !== "string" || record4.runId.trim() === "") {
-    return void 0;
+    throw new TypeError("Invalid run-state.json");
   }
   const role = typeof record4.role === "string" ? packagedRoleMetadata(record4.role)?.role : void 0;
   if (role === void 0) {
-    return void 0;
+    throw new TypeError("Invalid run-state.json");
   }
   if (record4.state !== "admitted" && record4.state !== "running" && record4.state !== "resumable" && record4.state !== "terminal") {
-    return void 0;
+    throw new TypeError("Invalid run-state.json");
   }
-  if (typeof record4.bookKey !== "string") return void 0;
-  if (typeof record4.projectRoot !== "string") return void 0;
-  if (typeof record4.sessionDirectory !== "string") return void 0;
-  if (typeof record4.admittedRequestPath !== "string") return void 0;
+  if (typeof record4.bookKey !== "string") throw new TypeError("Invalid run-state.json");
+  return {
+    runId: record4.runId,
+    role,
+    state: record4.state,
+    bookKey: record4.bookKey,
+    runDirectory
+  };
+}
+async function readRoleRunStateDisk(runDirectory) {
+  const raw = await readRoleRunStateRaw(runDirectory);
+  if (raw === void 0) return void 0;
+  const identity = parseRoleRunIdentity(raw, runDirectory);
+  const record4 = raw;
+  if (typeof record4.projectRoot !== "string") throw new TypeError("Invalid run-state.json");
+  if (typeof record4.sessionDirectory !== "string") throw new TypeError("Invalid run-state.json");
+  if (typeof record4.admittedRequestPath !== "string") throw new TypeError("Invalid run-state.json");
   const storedRunDirectory = typeof record4.runDirectory === "string" && record4.runDirectory.trim() !== "" ? record4.runDirectory : runDirectory;
   const runDir = runDirectory;
   const principalWire = {
@@ -19052,10 +19065,10 @@ async function readRoleRunStateDisk(runDirectory) {
   const phase = record4.phase === "plan" || record4.phase === "apply" ? record4.phase : void 0;
   const currentCourt = parseCurrentCourtState(record4.currentCourt);
   return {
-    runId: record4.runId,
-    role,
-    state: record4.state,
-    bookKey: record4.bookKey,
+    runId: identity.runId,
+    role: identity.role,
+    state: identity.state,
+    bookKey: identity.bookKey,
     projectRoot: record4.projectRoot,
     runDirectory: runDir,
     admittedRequestPath: rewriteRunDirectoryPathValue(
@@ -19115,15 +19128,8 @@ function materializeRoleRunFromDisk(disk, authority) {
   }
 }
 async function readRoleRunIdentity(runDirectory) {
-  const disk = await readRoleRunStateDisk(runDirectory);
-  if (disk === void 0) return void 0;
-  return {
-    runId: disk.runId,
-    role: disk.role,
-    bookKey: disk.bookKey,
-    runDirectory: disk.runDirectory,
-    state: disk.state
-  };
+  const raw = await readRoleRunStateRaw(runDirectory);
+  return raw === void 0 ? void 0 : parseRoleRunIdentity(raw, runDirectory);
 }
 async function markRunAdmitted(admitted, authority) {
   const { sessionDirectory, sessionFile } = authority.decode(admitted.principal);
@@ -20126,6 +20132,16 @@ var init_run_lifecycle = __esm({
 // src/notary-source-run.ts
 import { dirname as dirname10, isAbsolute as isAbsolute6, join as join16, resolve as resolve7, basename as basename7 } from "node:path";
 import { lstat as lstat3, realpath as realpath3 } from "node:fs/promises";
+async function readRetainedIdentity(runDirectory) {
+  try {
+    return await readRoleRunIdentity(runDirectory);
+  } catch (error) {
+    if (!(error instanceof TypeError || error instanceof SyntaxError)) throw error;
+    throw new NotarySourceRunError("notary --source-run has invalid retained run-state identity", {
+      cause: error
+    });
+  }
+}
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
   if (match === null) return void 0;
@@ -20200,7 +20216,7 @@ async function resolveNotarySourceRunLocator(options) {
       "notary --source-run must resolve to a retained run under the project machine-ledger book"
     );
   }
-  const runState = await readRoleRunIdentity(real);
+  const runState = await readRetainedIdentity(real);
   if (runState === void 0) {
     throw new NotarySourceRunError(
       "notary --source-run lacks retained run-state identity"
@@ -27694,7 +27710,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
   };
 }
 function roleTurnOptions(env, admitted, continuation) {
-  const correlationId = admitted.correlationId ?? env.correlationId;
+  const correlationId = env.correlationId ?? admitted.correlationId;
   return {
     packageRoot: env.packageRoot,
     home: env.home,
@@ -28296,10 +28312,12 @@ async function summonPublicRole(options) {
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
-    resolveEffectiveSeat: resolveEffectiveSeat2
+    resolveEffectiveSeat: resolveEffectiveSeat2,
+    validatePublicCliConfigAxes: validatePublicCliConfigAxes2
   } = await Promise.resolve().then(() => (init_config2(), config_exports));
   const credentials = options.credentials ?? await loadCredentialProviders2(agentDir);
   const config = await loadPublicCliConfig2(home);
+  validatePublicCliConfigAxes2(config, packageRoot2);
   const resolvedSeat = resolveEffectiveSeat2(config, options.role, credentials);
   const inheritedSelection = options.model === void 0 ? void 0 : {
     provider: options.model.provider,
@@ -29914,15 +29932,7 @@ function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readExistingRunLifecycleState(runDirectory) {
-  try {
-    const raw = JSON.parse(
-      await readFile20(join34(runDirectory, "run-state.json"), "utf8")
-    );
-    if (!isRecord12(raw) || typeof raw.state !== "string") return void 0;
-    return raw.state;
-  } catch {
-    return void 0;
-  }
+  return (await readRoleRunIdentity(runDirectory))?.state;
 }
 function ghostLeaseCheckFromAutopsy(autopsy) {
   switch (autopsy.verdict) {
@@ -29957,13 +29967,6 @@ function parseRunDirectoryName2(name) {
   if (at <= 0 || at === name.length - 1) return void 0;
   return { runId: name.slice(0, at), role: name.slice(at + 1) };
 }
-function tryResolveBookKeyFromProjectRoot(projectRoot) {
-  try {
-    return resolveBookKeyFromGit(projectRoot);
-  } catch {
-    return void 0;
-  }
-}
 async function listLedgerBookNames(booksRoot) {
   try {
     const entries = await readdir8(booksRoot, { withFileTypes: true });
@@ -30144,7 +30147,13 @@ async function classifyScopedRun(input) {
       reasons.push(errorText3(error));
     }
   }
-  const lifecycle = await readExistingRunLifecycleState(input.runDirectory);
+  let lifecycle;
+  try {
+    lifecycle = await readExistingRunLifecycleState(input.runDirectory);
+  } catch (error) {
+    missingSources.push("run-state");
+    reasons.push(errorText3(error));
+  }
   let ghostLeg;
   if (lifecycle === "admitted" || lifecycle === "running") {
     const ghost = await classifyGhostCandidate({
@@ -30253,8 +30262,8 @@ async function scanAnalystIssueRuns(input) {
       wholeBook = true;
     }
   } else if (input.projectRoot !== void 0) {
-    const resolved = tryResolveBookKeyFromProjectRoot(input.projectRoot);
-    if (resolved !== void 0) {
+    const resolved = resolveAnalystBookKey(input.projectRoot);
+    if (!isSyntheticAnalystBookKey(resolved)) {
       bookNames = [resolved];
       wholeBook = true;
     } else {
@@ -30330,7 +30339,7 @@ var LIVE_RUN_STATES;
 var init_analyst_ledger = __esm({
   "src/analyst-ledger.ts"() {
     "use strict";
-    init_activation_ledger_git();
+    init_analyst_book_key();
     init_activation_ledger_topology();
     init_role_run_placement();
     init_run_lifecycle();
@@ -30998,12 +31007,6 @@ function isRecord14(value) {
 function wallMsFromSpan2(startedAt, endedAt) {
   return Date.parse(endedAt) - Date.parse(startedAt);
 }
-function readOutcomeStatus(body) {
-  if (!isRecord14(body.outcome)) return void 0;
-  const status = body.outcome.status;
-  if (typeof status !== "string" || status.trim() === "") return void 0;
-  return status;
-}
 function readClassCount(body) {
   if (!isRecord14(body.outcome)) return void 0;
   if (!isRecord14(body.outcome.decisiveFacts)) return void 0;
@@ -31023,7 +31026,7 @@ function projectTerminal(facts) {
   if (facts.terminal.file === "audit-incomplete.json") {
     return { kind: "death", channel: "audit-incomplete" };
   }
-  const status = readOutcomeStatus(facts.terminal.body);
+  const status = extractStatus(facts.terminal.body);
   const classCount = readClassCount(facts.terminal.body);
   const receiptStatus = status ?? "unparsed";
   if (classCount === void 0) {
@@ -31092,6 +31095,7 @@ var roundTimelineFamily, round_timeline_default;
 var init_round_timeline = __esm({
   "src/analyst-metric-families/round-timeline.ts"() {
     "use strict";
+    init_acceptance_success_rework();
     roundTimelineFamily = {
       id: "round-timeline",
       contribute(input) {

package/dist/public-cli/post-admission.js

@@ -877,7 +877,7 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
 }
 /** Shared new-turn and in-call auto-resume projection. Seat code supplies prompt and activation. */
 export function roleTurnOptions(env, admitted, continuation) {
-    const correlationId = admitted.correlationId ?? env.correlationId;
+    const correlationId = env.correlationId ?? admitted.correlationId;
     return {
         packageRoot: env.packageRoot,
         home: env.home,

package/dist/public-cli/run-lifecycle.js

@@ -132,7 +132,7 @@ function parseCurrentCourtState(raw) {
         ...(summons === undefined ? {} : { summons }),
     };
 }
-async function readRoleRunStateDisk(runDirectory) {
+async function readRoleRunStateRaw(runDirectory) {
     let raw;
     try {
         raw = JSON.parse(await readFile(join(runDirectory, RUN_STATE_FILE), "utf8"));
@@ -148,31 +148,48 @@ async function readRoleRunStateDisk(runDirectory) {
             return undefined;
         throw error;
     }
+    return raw;
+}
+function parseRoleRunIdentity(raw, runDirectory) {
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     }
     const record = raw;
     if (typeof record.runId !== "string" || record.runId.trim() === "") {
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     }
     const role = typeof record.role === "string" ? packagedRoleMetadata(record.role)?.role : undefined;
     if (role === undefined) {
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     }
     if (record.state !== "admitted" &&
         record.state !== "running" &&
         record.state !== "resumable" &&
         record.state !== "terminal") {
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     }
     if (typeof record.bookKey !== "string")
+        throw new TypeError("Invalid run-state.json");
+    return {
+        runId: record.runId,
+        role,
+        state: record.state,
+        bookKey: record.bookKey,
+        runDirectory,
+    };
+}
+async function readRoleRunStateDisk(runDirectory) {
+    const raw = await readRoleRunStateRaw(runDirectory);
+    if (raw === undefined)
         return undefined;
+    const identity = parseRoleRunIdentity(raw, runDirectory);
+    const record = raw;
     if (typeof record.projectRoot !== "string")
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     if (typeof record.sessionDirectory !== "string")
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     if (typeof record.admittedRequestPath !== "string")
-        return undefined;
+        throw new TypeError("Invalid run-state.json");
     const storedRunDirectory = typeof record.runDirectory === "string" && record.runDirectory.trim() !== ""
         ? record.runDirectory
         : runDirectory;
@@ -201,10 +218,10 @@ async function readRoleRunStateDisk(runDirectory) {
         : undefined;
     const currentCourt = parseCurrentCourtState(record.currentCourt);
     return {
-        runId: record.runId,
-        role,
-        state: record.state,
-        bookKey: record.bookKey,
+        runId: identity.runId,
+        role: identity.role,
+        state: identity.state,
+        bookKey: identity.bookKey,
         projectRoot: record.projectRoot,
         runDirectory: runDir,
         admittedRequestPath: rewriteRunDirectoryPathValue(record.admittedRequestPath, storedRunDirectory, runDirectory),
@@ -273,16 +290,8 @@ export async function readRoleRunState(runDirectory, authority) {
  * Used by notary locator / role peek that never consume session coordinates.
  */
 export async function readRoleRunIdentity(runDirectory) {
-    const disk = await readRoleRunStateDisk(runDirectory);
-    if (disk === undefined)
-        return undefined;
-    return {
-        runId: disk.runId,
-        role: disk.role,
-        bookKey: disk.bookKey,
-        runDirectory: disk.runDirectory,
-        state: disk.state,
-    };
+    const raw = await readRoleRunStateRaw(runDirectory);
+    return raw === undefined ? undefined : parseRoleRunIdentity(raw, runDirectory);
 }
 export async function markRunAdmitted(admitted, authority) {
     const { sessionDirectory, sessionFile } = authority.decode(admitted.principal);

package/dist/public-role-summons.js

@@ -148,10 +148,12 @@ async function summonPublicRole(options) {
   const {
     loadCredentialProviders,
     loadPublicCliConfig,
-    resolveEffectiveSeat
+    resolveEffectiveSeat,
+    validatePublicCliConfigAxes
   } = await import("./public-cli/config.js");
   const credentials = options.credentials ?? await loadCredentialProviders(agentDir);
   const config = await loadPublicCliConfig(home);
+  validatePublicCliConfigAxes(config, packageRoot);
   const resolvedSeat = resolveEffectiveSeat(config, options.role, credentials);
   const inheritedSelection = options.model === void 0 ? void 0 : {
     provider: options.model.provider,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4992",
+  "version": "0.1.4999",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/countersign.md

@@ -24,7 +24,7 @@
 
 **三、相抵** 票面，相关票与在飞分支与法源有无抵触。
 
-**四、缺失** 法源要求的，票面有没有漏：适用 ADR 未被引用即缺失——漏引的要一次列全、给出路径，不要这轮点一份、下轮再点一份；引用写 `docs/adr/...md` 路径即可，票面不必复述其决定；只有票面与某条决定相抵、或把某条决定留给别的票时，才须在票面写明「由 #x 承接该条」；验收面须覆盖票面每条主张；前置产物、决定、答复须在；承重主张的源头不存在、不支持、已过时，同为缺失。缺失列表在能力范围内一次扫完，尽量避免因缺失导致多轮往返。
+**四、缺失** 法源要求的，票面有没有漏：适用法只查两类：票面与某条 ADR 决定相抵的，和把某条决定留给别的票承接的，票面须写明该条与「由 #x 承接」；这两类之外的 ADR 没引不算缺失，不得为此封驳；验收面须覆盖票面每条主张；票面里每一条行为都须答得出《送庭前三问》第一问——由哪条接缝、哪条 run 担它：暂停的是谁、resume 谁、谁接着走这类没有名字的行为，即缺失；前置产物、决定、答复须在；承重主张的源头不存在、不支持、已过时，同为缺失。缺失列表在能力范围内一次扫完，尽量避免因缺失导致多轮往返。
 
 **五、擅加** 票面有没有超出法源的机制、约束、验收、术语。
 

package/src/analyst-ledger.ts

@@ -15,14 +15,14 @@
 import { readdir, readFile } from "node:fs/promises";
 import { basename, join } from "node:path";
 
-import { resolveBookKeyFromGit } from "./activation-ledger-git.ts";
+import { isSyntheticAnalystBookKey, resolveAnalystBookKey } from "./analyst-book-key.ts";
 import {
   pathContainedIn,
   physicalPathIdentity,
   resolveActivationLedgerHome,
 } from "./activation-ledger-topology.ts";
 import { listBookRunDirectories } from "./role-run-placement.ts";
-import { autopsyWriterLock } from "./public-cli/run-lifecycle.ts";
+import { autopsyWriterLock, readRoleRunIdentity } from "./public-cli/run-lifecycle.ts";
 import { readRunTicketNumber } from "./run-ticket-number.ts";
 import {
   extractSessionModelSequence,
@@ -77,15 +77,7 @@ const LIVE_RUN_STATES = new Set(["admitted", "running", "resumable"]);
 async function readExistingRunLifecycleState(
   runDirectory: string,
 ): Promise<string | undefined> {
-  try {
-    const raw: unknown = JSON.parse(
-      await readFile(join(runDirectory, "run-state.json"), "utf8"),
-    );
-    if (!isRecord(raw) || typeof raw.state !== "string") return undefined;
-    return raw.state;
-  } catch {
-    return undefined;
-  }
+  return (await readRoleRunIdentity(runDirectory))?.state;
 }
 
 /**
@@ -165,15 +157,6 @@ type InvocationScopeFields = {
   readonly ticketNumber?: number;
 };
 
-/** Best-effort book key from a projectRoot git common-dir; undefined when not a git tree. */
-function tryResolveBookKeyFromProjectRoot(projectRoot: string): string | undefined {
-  try {
-    return resolveBookKeyFromGit(projectRoot);
-  } catch {
-    return undefined;
-  }
-}
-
 async function listLedgerBookNames(booksRoot: string): Promise<string[]> {
   try {
     const entries = await readdir(booksRoot, { withFileTypes: true });
@@ -509,7 +492,13 @@ async function classifyScopedRun(input: {
   // #855: writer-lease ghost check is independent of terminal artifact status.
   // present → still emit metrics; unreadable → still enter missingSources;
   // admitted|running + non-live lease → still list in ghostLegs (ticket #4).
-  const lifecycle = await readExistingRunLifecycleState(input.runDirectory);
+  let lifecycle: string | undefined;
+  try {
+    lifecycle = await readExistingRunLifecycleState(input.runDirectory);
+  } catch (error) {
+    missingSources.push("run-state");
+    reasons.push(errorText(error));
+  }
   let ghostLeg: AnalystGhostLeg | undefined;
   if (lifecycle === "admitted" || lifecycle === "running") {
     const ghost = await classifyGhostCandidate({
@@ -667,8 +656,8 @@ export async function scanAnalystIssueRuns(input: {
       wholeBook = true;
     }
   } else if (input.projectRoot !== undefined) {
-    const resolved = tryResolveBookKeyFromProjectRoot(input.projectRoot);
-    if (resolved !== undefined) {
+    const resolved = resolveAnalystBookKey(input.projectRoot);
+    if (!isSyntheticAnalystBookKey(resolved)) {
       bookNames = [resolved];
       wholeBook = true;
     } else {

package/src/analyst-metric-families/acceptance-success-rework.ts

@@ -117,7 +117,7 @@ function findCollectorGroups(body: Record<string, unknown>): unknown {
 }
 
 /** Extract role receipt status from canonical terminal body faces. */
-function extractStatus(body: Record<string, unknown>): string | undefined {
+export function extractStatus(body: Record<string, unknown>): string | undefined {
   const outcome = body.outcome;
   if (isRecord(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
     return outcome.status;

package/src/analyst-metric-families/round-timeline.ts

@@ -10,6 +10,7 @@
  */
 import type { AnalystReadableRunFacts } from "../analyst-ledger.ts";
 import type { AnalystMetricFamilyModule } from "../analyst-metric-family.ts";
+import { extractStatus } from "./acceptance-success-rework.ts";
 import type {
   AnalystFirstFrameAt,
   AnalystMissingSource,
@@ -73,13 +74,6 @@ function wallMsFromSpan(startedAt: string, endedAt: string): number {
   return Date.parse(endedAt) - Date.parse(startedAt);
 }
 
-function readOutcomeStatus(body: Record<string, unknown>): string | undefined {
-  if (!isRecord(body.outcome)) return undefined;
-  const status = body.outcome.status;
-  if (typeof status !== "string" || status.trim() === "") return undefined;
-  return status;
-}
-
 function readClassCount(body: Record<string, unknown>): number | undefined {
   if (!isRecord(body.outcome)) return undefined;
   if (!isRecord(body.outcome.decisiveFacts)) return undefined;
@@ -101,7 +95,7 @@ function projectTerminal(facts: AnalystReadableRunFacts): AnalystRoundTimelineTe
     return { kind: "death", channel: "audit-incomplete" };
   }
   // report.json — receipt face; classCount only when producer wrote a number.
-  const status = readOutcomeStatus(facts.terminal.body);
+  const status = extractStatus(facts.terminal.body);
   const classCount = readClassCount(facts.terminal.body);
   const receiptStatus = status ?? "unparsed";
   if (classCount === undefined) {

package/src/analyst-page.ts

@@ -21,6 +21,7 @@ import { composeAnalystMetricFamilySections } from "./analyst-metric-family.ts";
 
 /** Required run sources that may render a loud unreadable exclusion. */
 export type AnalystMissingSource =
+  | "run-state"
   | "session-timeline"
   | "tool-association"
   | "terminal-artifact"

package/src/collector-role.ts

@@ -217,7 +217,10 @@ function buildMethodContext(activation: CollectorActivation): string {
 function parsePositiveTicket(raw: unknown, label: string): number | undefined {
   if (raw === undefined || raw === null) return undefined;
   if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) return raw;
-  if (typeof raw === "string" && /^[1-9]\d*$/.test(raw.trim())) return Number(raw.trim());
+  if (typeof raw === "string" && /^[1-9]\d*$/.test(raw.trim())) {
+    const value = Number(raw.trim());
+    if (Number.isSafeInteger(value)) return value;
+  }
   throw new CollectorTargetBindError(`通进司绑定 ${label} 须为正安全整数`);
 }
 

package/src/notary-source-run.ts

@@ -15,6 +15,17 @@ import {
 import type { NotarySourceRunLocator } from "./notary-contracts.ts";
 import { findRunDirectoryById, readRoleRunIdentity } from "./public-cli/run-lifecycle.ts";
 
+async function readRetainedIdentity(runDirectory: string) {
+  try {
+    return await readRoleRunIdentity(runDirectory);
+  } catch (error) {
+    if (!(error instanceof TypeError || error instanceof SyntaxError)) throw error;
+    throw new NotarySourceRunError("notary --source-run has invalid retained run-state identity", {
+      cause: error,
+    });
+  }
+}
+
 // Run directory leaf: <runId>@<role>. Production uses uuidv7 runIds; offline tracers
 // may use deterministic non-uuid leaves. Role token stays identifier-shaped.
 const RUN_DIR_NAME =
@@ -131,7 +142,7 @@ export async function resolveNotarySourceRunLocator(options: {
 
   // Authoritative retained record only — legal role/state via shared reader (DRY #14).
   // Identity envelope only: principal payload is not interpreted here.
-  const runState = await readRoleRunIdentity(real);
+  const runState = await readRetainedIdentity(real);
   if (runState === undefined) {
     throw new NotarySourceRunError(
       "notary --source-run lacks retained run-state identity",
@@ -166,7 +177,7 @@ export async function loadNotarySourceRunLocator(
 ): Promise<NotarySourceRunLocator> {
   const real = await requireRunDirectory(path, path);
   const identity = parseRunDirectoryName(basename(real))!;
-  const runState = await readRoleRunIdentity(real);
+  const runState = await readRetainedIdentity(real);
   if (runState === undefined) {
     throw new NotarySourceRunError(
       "notary source-run lacks retained run-state identity",

package/src/pi/role-turn-host.ts

@@ -521,13 +521,11 @@ export async function appendPiSessionCustomEntry(
     timestamp,
   })}\n`;
   await appendFile(sessionFile, pointerLine, "utf8");
-  try {
-    sitianReport({
-      level: "event",
-      kind: "dispatch-error",
-      sessionParent: sessionFile,
-      payload: { customType, data },
-      source: "pi-role-turn-host",
-    });
-  } catch {}
+  sitianReport({
+    level: "event",
+    kind: "dispatch-error",
+    sessionParent: sessionFile,
+    payload: { customType, data },
+    source: "pi-role-turn-host",
+  });
 }