@akagilnc/pi-workflow-roles 0.1.5153 → 0.1.5194

package/dist/archivist-record-entry.js

@@ -1,7 +1,6 @@
 import {
   closeSync,
   existsSync,
-  mkdirSync,
   openSync,
   readdirSync,
   readFileSync,
@@ -26,6 +25,10 @@ import {
   resolveNavigatorWorkSubjectPlacement
 } from "./archivist-record-topology.js";
 import { piRecordSessionHost } from "./pi/record-session-host.js";
+import {
+  DIRECT_OFFICER_RUN_POINTER_KIND,
+  bookDirectOfficerRunPointer
+} from "./archivist-record-pointer.js";
 import {
   NAVIGATOR_RECORD_KIND as NAVIGATOR_RECORD_KIND2,
   resolveNavigatorWorkSubjectPlacement as resolveNavigatorWorkSubjectPlacement2
@@ -311,25 +314,6 @@ function createRecordSessionOpen(options, host = piRecordSessionHost) {
 function createRecordSession(options) {
   return createRecordSessionOpen(options).session;
 }
-const DIRECT_OFFICER_RUN_POINTER_KIND = "direct-officer-run-pointer";
-function bookDirectOfficerRunPointer(options) {
-  const nest = join(dirname(options.parentSessionFile), "auditor-roles");
-  mkdirSync(nest, { recursive: true });
-  const pointer = {
-    version: 1,
-    kind: DIRECT_OFFICER_RUN_POINTER_KIND,
-    officer: options.officer,
-    sessionFile: options.sessionFile,
-    ...options.runDirectory !== void 0 && options.runDirectory.trim() !== "" ? { runDirectory: options.runDirectory } : {}
-  };
-  writeFileSync(
-    join(nest, `${options.officer}.pointer.json`),
-    `${JSON.stringify(pointer)}
-`,
-    "utf8"
-  );
-  return pointer;
-}
 export {
   DIRECT_OFFICER_RUN_POINTER_KIND,
   NAVIGATOR_RECORD_KIND2 as NAVIGATOR_RECORD_KIND,

package/dist/archivist-record-pointer.js

@@ -0,0 +1,28 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+/** Typed parent-side pointer to an independent officer run 正本 (ADR 0079 / #675). */
+export const DIRECT_OFFICER_RUN_POINTER_KIND = "direct-officer-run-pointer";
+/**
+ * Book a typed pointer under parent session/auditor-roles (same nest owner as
+ * createRecordSession). Never fabricates user/assistant/toolResult rows (#675).
+ * Directory placement stays with the archivist record entry (ADR 0018 / 0065).
+ *
+ * Stable leaf per officer under one parent (#753 gate-round accounting):
+ * same-parent re-summons upsert the same pointer instead of minting N files that
+ * each re-scan the full officer session and multiply terminal gate-round counts.
+ */
+export function bookDirectOfficerRunPointer(options) {
+    const nest = join(dirname(options.parentSessionFile), "auditor-roles");
+    mkdirSync(nest, { recursive: true });
+    const pointer = {
+        version: 1,
+        kind: DIRECT_OFFICER_RUN_POINTER_KIND,
+        officer: options.officer,
+        sessionFile: options.sessionFile,
+        ...(options.runDirectory !== undefined && options.runDirectory.trim() !== ""
+            ? { runDirectory: options.runDirectory }
+            : {}),
+    };
+    writeFileSync(join(nest, `${options.officer}.pointer.json`), `${JSON.stringify(pointer)}\n`, "utf8");
+    return pointer;
+}

package/dist/audit-escalation.js

@@ -1,122 +1,6 @@
-import { GatekeeperDecisionError } from "./submission-errors.js";
+/** Historical audit-escalation discriminator retained for reading pre-#1057 run artifacts. */
 export const AUDIT_ESCALATION_KIND = "audit_escalation";
-// Live Navigator settlement may consume only the projection produced by this
-// owner. Its private WeakSet cannot be authored by role output; persisted/
-// replayed records are re-authenticated by the retained audit evidence binder.
-const AUDIT_ESCALATION_LIVE_REGISTRY = new WeakSet();
-/**
- * Build the escalation delivery face.
- * Role-delivered fields ride under the escalation discriminator (ADR 0055).
- * `kind` always wins so the discriminator cannot be laundered.
- * `conflicts` and `auditDecisionGate`, when present, always come from the
- * audit (why we escalated and its gate). Raw ancillary values are not repaired.
- * A role `decisionGate`, when present, stays at its own key via spread and is
- * never overwritten (not folded, not dropped, not swapped into the audit home).
- */
-export function buildAuditEscalationResult(decision, deliveredOutput) {
-    const auditOwned = {
-        kind: AUDIT_ESCALATION_KIND,
-    };
-    if (Object.hasOwn(decision, "receipt")) {
-        auditOwned.receipt = decision.receipt;
-    }
-    if (Object.hasOwn(decision, "conflicts")) {
-        auditOwned.conflicts = decision.conflicts;
-    }
-    if (Object.hasOwn(decision, "decisionGate")) {
-        auditOwned.auditDecisionGate = decision.decisionGate;
-    }
-    if (Object.hasOwn(decision, "reason") && decision.reason !== undefined) {
-        auditOwned.reason = decision.reason;
-    }
-    if (Object.hasOwn(decision, "officer") && decision.officer !== undefined) {
-        auditOwned.officer = decision.officer;
-    }
-    if (Object.hasOwn(decision, "findings") && decision.findings !== undefined) {
-        auditOwned.findings = decision.findings;
-    }
-    const result = {
-        kind: AUDIT_ESCALATION_KIND,
-        ...(deliveredOutput !== undefined ? { receipt: deliveredOutput } : {}),
-        audit: auditOwned,
-    };
-    AUDIT_ESCALATION_LIVE_REGISTRY.add(result);
-    return result;
-}
-/** True only for the audit-owned live projection, never for role-shaped data. */
-export function isAuditEscalationProjection(value) {
-    if (!isAuditEscalationResult(value))
-        return false;
-    return AUDIT_ESCALATION_LIVE_REGISTRY.has(value);
-}
-export function projectAuditEscalation(decision, deliveredOutput) {
-    const details = buildAuditEscalationResult(decision, deliveredOutput);
-    return {
-        content: [],
-        details,
-        terminate: true,
-        ...(decision.usage === undefined ? {} : { usage: decision.usage }),
-    };
-}
-/** Preserve the escalating officer's own gate alongside the raw receipt. */
-export function projectGatekeeperEscalation(result, deliveredOutput) {
-    const receipt = result.receipt;
-    const record = receipt !== null && typeof receipt === "object" && !Array.isArray(receipt)
-        ? receipt
-        : undefined;
-    return projectAuditEscalation({
-        status: "escalate",
-        officer: result.officer,
-        conflicts: receipt,
-        ...(record !== undefined && Object.hasOwn(record, "decisionGate")
-            ? { decisionGate: record.decisionGate }
-            : {}),
-    }, deliveredOutput);
-}
-/**
- * Discriminator-only recognition (ADR 0040). Shape of conflicts/options/gate
- * is not a reject gate — element types and cardinality are delivery content.
- */
 export function isAuditEscalationResult(value) {
-    if (typeof value !== "object" || value === null || Array.isArray(value)) {
-        return false;
-    }
-    return value.kind === AUDIT_ESCALATION_KIND;
-}
-/**
- * Dispose a parsed audit decision without repeating status handling in roles.
- * Role output already delivered is preserved on the escalate face (ADR 0055).
- */
-export async function disposeComplianceDecision(decision, handlers, deliveredOutput) {
-    switch (decision.status) {
-        case "converged":
-            return await handlers.converged(decision.usage);
-        case "no-receipt":
-            // The parent candidate remains accepted, but its parallel audit leg is a
-            // public typed fact and must not be collapsed into an ordinary pass.
-            if (handlers.noReceipt === undefined) {
-                throw new Error("Compliance no-receipt projection handler is unavailable");
-            }
-            return await handlers.noReceipt(decision, decision.usage === undefined ? {} : { usage: decision.usage });
-        case "received":
-            // Parent candidate stands; raw auditor reply rides beside — not judged unreadable (#757).
-            if (handlers.received === undefined) {
-                throw new Error("Compliance received projection handler is unavailable");
-            }
-            return await handlers.received(decision, decision.usage === undefined ? {} : { usage: decision.usage });
-        case "continue":
-            return await handlers.continue(decision.violations);
-        case "escalate":
-            return await handlers.escalate(projectAuditEscalation(decision, deliveredOutput));
-        case "transport_failure":
-            if (handlers.transportFailure !== undefined) {
-                return await handlers.transportFailure(decision);
-            }
-            throw new GatekeeperDecisionError({
-                status: "transport_failure",
-                stage: "auditor",
-                reason: decision.diagnostic,
-                submission: decision.submissions ?? decision.terminal,
-            });
-    }
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        && value.kind === AUDIT_ESCALATION_KIND;
 }

package/dist/auditor-soul.js

@@ -1,3 +1,5 @@
+import { readFile } from "node:fs/promises";
+import { basename, join } from "node:path";
 import { joinPackageMaterials, readPackageMaterial, } from "./session-opening-materials.js";
 /**
  * Active auditor seats.
@@ -80,3 +82,33 @@ export async function loadAuditorSoulFromSubjectInput(raw) {
 export function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
     return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
 }
+function subjectFromSourceDirectory(sourceRunDirectory) {
+    const role = basename(sourceRunDirectory).split("@")[1];
+    return isAuditorSoulRole(role) ? role : undefined;
+}
+/**
+ * Resume binding already on the admitted page.
+ * Explicit subject wins; otherwise the source-run role is the audited object.
+ */
+export async function readAuditorResumeBinding(runDirectory) {
+    let raw;
+    try {
+        raw = JSON.parse(await readFile(join(runDirectory, "admitted-request.json"), "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        return undefined;
+    const record = raw;
+    if (typeof record.sourceRunPath !== "string" || record.sourceRunPath.trim() === "")
+        return undefined;
+    const subject = isAuditorSoulRole(record.auditorSubject)
+        ? record.auditorSubject
+        : subjectFromSourceDirectory(record.sourceRunPath);
+    if (subject === undefined)
+        return undefined;
+    return { subject, sourceRunDirectory: record.sourceRunPath };
+}

package/dist/doctor-auditor.js

@@ -0,0 +1,26 @@
+import { auditorRunDirectory } from "./auditor-dossier-tool.js";
+import { runComplianceAudit, } from "./compliance-transport.js";
+import { readDoctorAuditSubjects, requireAuditMaterials, resolveAuditDossier, } from "./dossier-resolution.js";
+export { DOCTOR_AUDIT_TOOL_NAME } from "./doctor-contracts.js";
+/**
+ * Doctor compliance via public auditor activation (#675 / ADR 0062 / owner r11).
+ * 审刑院 is an independent role; subject=doctor selects souls/doctor-auditor.md.
+ */
+export function createPiDoctorAuditor() {
+    return async (options) => {
+        const dossier = resolveAuditDossier(options.context);
+        requireAuditMaterials(dossier);
+        const subjects = readDoctorAuditSubjects(options.context);
+        requireAuditMaterials(subjects);
+        return runComplianceAudit({
+            subject: "doctor",
+            context: options.context,
+            submission: options.submission,
+            ...(auditorRunDirectory(options.context) === undefined
+                ? {}
+                : { runDirectory: auditorRunDirectory(options.context) }),
+            ...(options.signal === undefined ? {} : { signal: options.signal }),
+            ...(options.summonAuditor === undefined ? {} : { summonAuditor: options.summonAuditor }),
+        });
+    };
+}