@akagilnc/pi-workflow-roles 0.1.5207 → 0.1.5216

package/src/host-contracts.ts

@@ -386,109 +386,9 @@ export interface RoleHost {
   getCommands?(): Array<{ name: string }>;
 }
 
-/** Institutional sub-session seats (#518 §1). */
-export type InstitutionalSeat =
-  | "gatekeeper"
-  | "inspector"
-  | "notary"
-  | "auditor"
-  | (string & {});
-
 /** Non-secret host-neutral seat model selection. Single truth source is RoleTurnModelConfig. */
 export type HostInstitutionalModelSelection = RoleTurnModelConfig;
 
-/** Usage statistics for institutional sub-session events and turns. */
-export type HostSessionUsage = {
-  readonly input: number;
-  readonly output: number;
-  readonly cacheRead: number;
-  readonly cacheWrite: number;
-  readonly totalTokens: number;
-  readonly cost: {
-    readonly input: number;
-    readonly output: number;
-    readonly cacheRead: number;
-    readonly cacheWrite: number;
-    readonly total: number;
-  };
-};
-
-/** Closed stream event union consumed by institutional callers (#518 §1③). */
-export type HostInstitutionalSessionEvent =
-  | {
-      readonly type: "message_end";
-      readonly role: "assistant" | "user" | string;
-      readonly message?: unknown;
-      readonly usage?: HostSessionUsage;
-    }
-  | {
-      readonly type: "turn_end";
-      readonly stopReason?: string;
-    }
-  | {
-      readonly type: "tool_call";
-      readonly toolCallId: string;
-      readonly toolName: string;
-      readonly args?: unknown;
-    }
-  | {
-      readonly type: "tool_result";
-      readonly toolCallId: string;
-      readonly toolName: string;
-      readonly isError?: boolean;
-      readonly details?: unknown;
-    };
-
-/** Terminal result of an institutional assistant turn (#518 §1③). */
-export type HostAssistantTurnResult = {
-  readonly text: string;
-  readonly stopReason?: string;
-  readonly errorMessage?: string;
-  readonly usage?: HostSessionUsage;
-  readonly messages?: readonly unknown[];
-};
-
-/**
- * Handle to an active institutional sub-session (#518 §1②).
- * Does not leak AgentSession, ModelRuntime, or Provider objects out of the adapter.
- */
-export interface HostInstitutionalSessionHandle {
-  readonly sessionFile?: string;
-  readonly sessionId?: string;
-  prompt(text: string): Promise<HostAssistantTurnResult>;
-  subscribe(listener: (event: HostInstitutionalSessionEvent) => void): () => void;
-  abort(): void;
-  close(): Promise<void>;
-}
-
-/** Open options for an institutional sub-session (#518 §1①). */
-export type HostInstitutionalSessionOptions = {
-  readonly cwd: string;
-  readonly selection: HostInstitutionalModelSelection;
-  readonly systemPrompt: string;
-  readonly tools?: readonly HostToolDefinition[];
-  readonly customTools?: readonly unknown[];
-  readonly noTools?: "all" | "builtin";
-  readonly toolsAllowlist?: readonly string[];
-  readonly agentDir?: string;
-  readonly credentialScratchParent?: string;
-  readonly signal?: AbortSignal;
-  readonly idleRetry?: boolean;
-  readonly sessionIdentity?: {
-    readonly kind: string;
-    readonly subject?: string;
-    readonly parent?: { getSessionFile(): string | undefined };
-  };
-  readonly sessionManager?: unknown;
-};
-
-/** Host-neutral institutional sub-session open seam. */
-export interface InstitutionalSessionHost {
-  openInstitutionalSession(
-    options: HostInstitutionalSessionOptions,
-  ): Promise<HostInstitutionalSessionHandle>;
-}
-
 /** Host-owned durable record session used by AK ledger placement. */
 export interface HostRecordSession {
   getSessionFile(): string | undefined;

package/src/role-runtime.ts

@@ -24,12 +24,6 @@ import {
 } from "./activation-ledger.ts";
 import { readPackageMaterial } from "./session-opening-materials.ts";
 import { writeStderrJsonlRecord } from "./stderr-jsonl.ts";
-import {
-  createToolExecutionObservationFace,
-  systemToolExecutionObservationMonoNow,
-  writeToolExecutionObservationRecord,
-  type ToolExecutionObservationWriter,
-} from "./tool-execution-observation.ts";
 import {
   ENGINE_DETOUR_TOOL_NAME,
   ENGINE_MODEL_FLAG_NAME,
@@ -286,17 +280,6 @@ export type {
   ActivationSessionManager,
   ActivationSessionPointer,
 } from "./activation-ledger.ts";
-export {
-  TOOL_EXECUTION_UPDATE_HEARTBEAT,
-  TOOL_EXECUTION_UPDATE_THROTTLE_MS,
-  createToolExecutionObservationFace,
-  isProducingToolUpdate,
-  systemToolExecutionObservationMonoNow,
-  toolExecutionObservationRecordSchema,
-  validateToolExecutionObservationRecord,
-  writeToolExecutionObservationRecord,
-} from "./tool-execution-observation.ts";
-export type { ToolExecutionObservationRecord, ToolExecutionObservationWriter } from "./tool-execution-observation.ts";
 import {
   NOTARY_OUTPUT_TOOL,
   INSPECTOR_OUTPUT_TOOL,
@@ -477,11 +460,6 @@ export type RoleRuntimeDependencies = {
   loadNavigatorWorkContext?(options: { context: HostContext; role: string; phase: NavigatorPhase; getFlag?: (name: string) => unknown }): Promise<NavigatorWorkContext>;
   activationClock?(): string;
   activationTraceWriter?: (record: ActivationTraceRecord) => void | Promise<void>;
-  /** Wall-clock ISO timestamps for tool-execution observation records; defaults to activationClock/Date. */
-  toolExecutionObservationClock?(): string;
-  /** Monotonic ms clock for update throttling; defaults to performance.now (not Date.now). */
-  toolExecutionObservationMonoNow?(): number;
-  toolExecutionObservationWriter?: ToolExecutionObservationWriter;
 };
 
 function abortContext(ctx: { abort(): void }): void {
@@ -1081,7 +1059,7 @@ export function createRoleRuntimeExtension(
     // terminating-tool rejections and mechanical delivery requests share two turns.
     let receiptDelivery = createReceiptDeliveryPolicy();
     let noReceiptRecorded = false;
-    // Public-run fetch observation (in-process-session statusAwareFetch face).
+    // Public-run fetch observation.
     let priorFetch: typeof globalThis.fetch | undefined;
     let fetchWrapped = false;
     /** Envelope-owned: abort/teardown attendance without re-blocking the parent court (#959). */
@@ -1498,7 +1476,6 @@ export function createRoleRuntimeExtension(
       disposeNavigatorAttendanceNonBlocking(attendanceToDispose);
       pendingInfrastructureFailures.clear();
       pendingSubmissionNonPassByToolCallId.clear();
-      observationFace.reset();
     });
 
     const hostActions = {
@@ -1736,38 +1713,9 @@ export function createRoleRuntimeExtension(
 
     const clock = dependencies.activationClock ?? (() => new Date().toISOString());
     const writeTrace = dependencies.activationTraceWriter ?? writeActivationTraceRecord;
-    const observationFace = createToolExecutionObservationFace({
-      role: () => selectedRole,
-      admitted: () => admitted,
-      clock: dependencies.toolExecutionObservationClock ?? clock,
-      monoNow: dependencies.toolExecutionObservationMonoNow ?? systemToolExecutionObservationMonoNow,
-      write: dependencies.toolExecutionObservationWriter ?? writeToolExecutionObservationRecord,
-    });
-    // ExtensionRunner.emit catches ordinary handler throws, emits extension error, and continues.
-    // Observation plane failures must still hit the shared infrastructure termination path
-    // (abort + nonzero print/json exit) with the original cause before that swallow.
-    const observe = async (
-      run: () => void | Promise<void>,
-      ctx: HostContext,
-    ): Promise<void> => {
-      try {
-        await run();
-      } catch (error) {
-        failInfrastructure(error, ctx);
-      }
-    };
-    roleHost.on("tool_execution_start", async (event, ctx) => {
-      await observe(() => observationFace.onStart(event), ctx);
-    });
-    roleHost.on("tool_execution_update", async (event, ctx) => {
-      await observe(() => observationFace.onUpdate(event), ctx);
-    });
-    roleHost.on("tool_execution_end", async (event, ctx) => {
-      await observe(() => observationFace.onEnd(event), ctx);
-    });
 
     // Public Role run: record typed non-success HTTP for error evidence + v1 resume.
-    // Same observation owner as in-process-session statusAwareFetch → typed-provider-http
+    // Same observation owner → typed-provider-http
     // sidecar (settlement already merges observation.httpStatus into knownFailure).
     // after_provider_response covers the success-path onResponse face; fetch wrap covers
     // non-2xx Responses where openai-completions throws before onResponse (#675).
@@ -1805,7 +1753,7 @@ export function createRoleRuntimeExtension(
     });
 
     roleHost.on("session_start", async (event, ctx) => {
-      // Scope fetch observation to this public run (in-process-session statusAwareFetch face).
+      // Scope fetch observation to this public run.
       if (!fetchWrapped && typeof globalThis.fetch === "function") {
         priorFetch = globalThis.fetch.bind(globalThis);
         const underlying = priorFetch;
@@ -1827,7 +1775,7 @@ export function createRoleRuntimeExtension(
                 provider,
               });
             } catch {
-              // Observation must not break the provider stream (same as in-process-session).
+              // Observation must not break the provider stream.
             }
           }
           return response;
@@ -1842,7 +1790,6 @@ export function createRoleRuntimeExtension(
       collectorFirstDispatchDone = false;
       receiptDelivery = createReceiptDeliveryPolicy();
       noReceiptRecorded = false;
-      observationFace.reset();
       pendingNavigatorPresentation = undefined;
       pendingNavigatorSettlement = undefined;
       pendingInfrastructureFailures.clear();

package/src/sitian-appender.ts

@@ -353,7 +353,6 @@ export function appendSitianRecord(input: SitianRecordInput): RecordPointer {
       identity,
       ...(input.subject === undefined ? {} : { subject: input.subject }),
       ...(input.sessionParent === undefined ? {} : { sessionParent: input.sessionParent }),
-      ...(input.priorEventId === undefined ? {} : { priorEventId: input.priorEventId }),
       timestamp,
       host,
       ...(input.source === undefined ? {} : { source: input.source }),

package/src/sitian-contracts.ts

@@ -37,8 +37,6 @@ export type SitianRecord = {
   readonly subject?: SitianSubject | undefined;
   /** Parent session principal link / nesting origin. */
   readonly sessionParent?: string | undefined;
-  /** Prior event identity in a submission ledger chain (S4; distinct from sessionParent). */
-  readonly priorEventId?: string | undefined;
   readonly timestamp: string;
   readonly host: string;
   readonly source?: string | undefined;
@@ -65,7 +63,6 @@ export type SitianRecordInput = {
   readonly sessionParent?: string | undefined;
   /** Run owner for ticket provenance before a ticket is known. */
   readonly runDirectory?: string | undefined;
-  readonly priorEventId?: string | undefined;
   readonly timestamp?: string | undefined;
   readonly host?: string | undefined;
   readonly source?: string | undefined;

package/src/submission-ledger.ts

@@ -146,7 +146,7 @@ async function submissionRecordFile(cwd: string, runId: string, scope: Submissio
 /**
  * Discriminated owned-row view:
  * - unknown run → file absent + empty owned (read APIs only)
- * - located ledger → file is string; prior/write consumers may build RecordPointer
+ * - located ledger → file is string; write consumers may build RecordPointer
  */
 type OwnedSubmissionRecords =
   | { readonly file: undefined; readonly owned: readonly [] }
@@ -491,11 +491,10 @@ export async function readLatestSubmissionOutcome(
   return undefined;
 }
 
-type LedgerState = { prior?: RecordPointer; sequence: number };
+type LedgerState = { sequence: number };
 
 async function restoreState(cwd: string, runId: string, scope: SubmissionLedgerReadScope): Promise<LedgerState> {
   const located = await readOwnedSubmissionRecords(cwd, runId, scope);
-  // Unknown-run empty set: no prior chain. Owned rows without a file are an internal bug.
   if (located.file === undefined) {
     if (located.owned.length !== 0) {
       throw new Error(
@@ -504,19 +503,8 @@ async function restoreState(cwd: string, runId: string, scope: SubmissionLedgerR
     }
     return { sequence: 0 };
   }
-  const { file, owned } = located;
-  const last = owned.at(-1);
+  const { owned } = located;
   return {
-    ...(last === undefined
-      ? {}
-      : {
-          prior: {
-            identity: last.identity,
-            recordFile: file,
-            kind: last.kind,
-            level: last.level,
-          },
-        }),
     sequence: owned.reduce((maximum, record) => {
       const payload = record.payload as Partial<SubmissionLedgerEvent> | undefined;
       return payload?.type === "candidate" && typeof payload.sequence === "number"
@@ -547,7 +535,7 @@ function homeFromHostContext(context: HostContext, home?: string): string | unde
 
 /**
  * #959: seal one accepted submission without a model tool call.
- * Same ledger row shape and priorEventId chain as the terminating-tool wrap.
+ * Same ledger row shape as the terminating-tool wrap.
  * Used when a prose-exit seat (navigator) harvests the final assistant text.
  */
 export async function sealAcceptedSubmission(options: {
@@ -561,15 +549,10 @@ export async function sealAcceptedSubmission(options: {
   const attemptId = attemptIdentity(options.context, runId);
   const sessionParent = sessionParentFromHostContext(options.context);
   const home = homeFromHostContext(options.context, options.home);
-  const state = await restoreState(options.context.cwd, runId, {
-    ...(home === undefined ? {} : { home }),
-    ...(sessionParent === undefined ? {} : { sessionParent }),
-  });
-  const pointer = sitianReport({
+  sitianReport({
     level: "event",
     kind: "sealed",
     subject: { runId, attemptId },
-    ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
     payload: {
       type: "sealed",
       attemptId,
@@ -582,7 +565,6 @@ export async function sealAcceptedSubmission(options: {
     ...(home !== undefined ? { home } : {}),
     ...(sessionParent === undefined ? {} : { sessionParent }),
   });
-  state.prior = pointer;
 }
 
 /**
@@ -611,32 +593,29 @@ export function createSubmissionLedgerHost(
     states.set(runId, pending);
     return pending;
   })();
-  const appendFor = (state: LedgerState, context: HostContext, runId: string, attemptId: string, event: SubmissionLedgerEvent): RecordPointer => {
+  const appendFor = (context: HostContext, runId: string, attemptId: string, event: SubmissionLedgerEvent): RecordPointer => {
     const home = resolveHomeFromContext(context);
     const sessionParent = sessionParentFromHostContext(context);
-    const pointer = sitianReport({
+    return sitianReport({
       level: "event",
       kind: event.type,
       subject: { runId, attemptId },
-      ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
       payload: event,
       source: "role-runtime",
       cwd: context.cwd,
       ...(home !== undefined ? { home } : {}),
       ...(sessionParent === undefined ? {} : { sessionParent }),
     });
-    state.prior = pointer;
-    return pointer;
   };
 
   host.on("turn_end", async (event, context) => {
     try {
       const runId = runIdentity(context);
       const attemptId = attemptIdentity(context, runId);
-      const state = await stateFor(context, runId);
       const calls = event.calls.map(({ toolCallId: id, toolName: name }) => ({ id, name }));
       if (calls.length > 0) {
-        appendFor(state, context, runId, attemptId, { type: "roundContext", attemptId, calls });
+        await stateFor(context, runId);
+        appendFor(context, runId, attemptId, { type: "roundContext", attemptId, calls });
       }
     } catch (error) {
       failInfrastructure(error, context);
@@ -663,7 +642,7 @@ export function createSubmissionLedgerHost(
           const runId = runIdentity(context);
           const attemptId = attemptIdentity(context, runId);
           const state = await stateFor(context, runId);
-          const append = (event: SubmissionLedgerEvent) => appendFor(state, context, runId, attemptId, event);
+          const append = (event: SubmissionLedgerEvent) => appendFor(context, runId, attemptId, event);
           // #541 / #575: shared infra-declaration fail lives on the ledger seam.
           // #641 chain②: seats may bounce a misdeclared infrastructure failure
           // as correctable (2.1/2.2/2.3 keep paths).

package/src/ticket-provenance-contracts.ts

@@ -1,10 +1,9 @@
 /**
- * 起居录（ticket-provenance）typed 形状 —— ADR 0075「2026-09-14 修订」/ #901 / #918。
+ * 起居录（ticket-provenance）typed 形状 —— ADR 0075 / ADR 0081 / #1090。
  *
- * 一册＝一个追加式 records.jsonl；逻辑册子头与对话由读取时折叠不可变投影提交得到。
- * 既有「首行册子头＋裸对话行」snapshot 向后可读，后续提交不回写旧行。
- * sessions 为 prior ∪ 各轮累计并集（遗漏不删除），已结转正文不因历史源重读而改。
- * 交卷 `sessions` 输入语义仍是「本轮对话边界」；累计并集是机械合并，不是角色交什么。
+ * 一册＝一个追加式 records.jsonl。每轮交卷的 `sessions`＝本轮对话边界；
+ * 成录接缝按该边界从宿主卷投影并追加，不回读已成录历史去重或折叠。
+ * 既有「首行册子头＋裸对话行」snapshot 仍可读；后续提交不回写旧行。
  */
 
 /** Sitian kind for per-ticket court diary volumes. */
@@ -30,14 +29,14 @@ export type TicketProvenanceRange = {
 
 /**
  * 一卷：会话卷路径 + 区间声明。
- * 交卷时＝本轮边界；写入册子头后＝累计并集（#918），二者同型。
+ * 交卷与每条追加提交的 payload.sessions 同型＝该次边界。
  */
 export type TicketProvenanceSession = {
   readonly path: string;
   readonly ranges: readonly TicketProvenanceRange[];
 };
 
-/** 读取时折叠出的逻辑册子头。sessions 为累计区间；reopen 与跨宿主并入，不新建册。 */
+/** 旧 snapshot 册子头形状（存量可读；#1090 后新提交不再维护折叠头）。 */
 export type TicketProvenanceHeader = {
   readonly repo: string;
   readonly ticket: number | null;
@@ -48,15 +47,15 @@ export type TicketProvenanceHeader = {
 
 /**
  * 一条对话（存于不可变投影提交；旧 snapshot 中也可为裸行）。
- * `id` 按源事实存在则记、不存在不编；`s` 保留卷定位。
+ * `id` 按源事实存在则记、不存在不编；`s` 为本轮 sessions 下标。
  */
 export type TicketProvenanceLine = {
   readonly speaker: TicketProvenanceSpeaker;
-  /** 卷下标（册子头 `sessions` 的位置）。 */
+  /** 本轮 sessions 下标。 */
   readonly s: number;
-  /** Logical source order for display. */
+  /** Logical source order within the source volume at projection time. */
   readonly sourcePosition?: number;
-  /** Replay-invariant structural identity used for id-less cumulative coverage. */
+  /** Replay-invariant structural identity for id-less source rows. */
   readonly sourceIdentity?: string;
   readonly id?: string;
   readonly text: string;
@@ -75,19 +74,6 @@ function positiveInteger(value: unknown): number | undefined {
   return undefined;
 }
 
-function nonNegativeInteger(value: unknown): number | undefined {
-  if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0) return value;
-  if (typeof value === "string" && /^(0|[1-9][0-9]*)$/.test(value)) {
-    const parsed = Number(value);
-    if (Number.isSafeInteger(parsed)) return parsed;
-  }
-  return undefined;
-}
-
-function projectSpeaker(value: unknown): TicketProvenanceSpeaker | undefined {
-  return value === "owner" || value === "runner" ? value : undefined;
-}
-
 function projectBound(value: unknown): TicketProvenanceBound | undefined {
   if (!isRecord(value)) return undefined;
   const id = typeof value.id === "string" && value.id !== "" ? value.id : undefined;
@@ -149,27 +135,3 @@ export function projectTicketProvenanceHeader(
     sessions,
   };
 }
-
-/** 读回一条对话行。 */
-export function projectTicketProvenanceLine(
-  value: unknown,
-): TicketProvenanceLine | undefined {
-  if (!isRecord(value)) return undefined;
-  const speaker = projectSpeaker(value.speaker);
-  const s = nonNegativeInteger(value.s);
-  if (speaker === undefined || s === undefined) return undefined;
-  if (typeof value.text !== "string") return undefined;
-  const sourcePosition = nonNegativeInteger(value.sourcePosition);
-  const sourceIdentity = typeof value.sourceIdentity === "string" && value.sourceIdentity !== ""
-    ? value.sourceIdentity
-    : undefined;
-  const id = typeof value.id === "string" && value.id !== "" ? value.id : undefined;
-  return {
-    speaker,
-    s,
-    ...(sourcePosition === undefined ? {} : { sourcePosition }),
-    ...(sourceIdentity === undefined ? {} : { sourceIdentity }),
-    ...(id === undefined ? {} : { id }),
-    text: value.text,
-  };
-}