@akagilnc/pi-workflow-roles 0.1.5365 → 0.1.5375

package/dist/public-role-summons.js

@@ -3,7 +3,7 @@ import { existsSync } from "node:fs";
 import { realpath } from "node:fs/promises";
 import { join } from "node:path";
 import { promisify } from "node:util";
-import { pickEngineAxis } from "./package-resources/engine-material.js";
+import { isRecord, errorText } from "./unknown-value.js";
 const AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
 const execFileAsync = promisify(execFile);
 function createCapturingIo() {
@@ -69,12 +69,6 @@ async function resolveSummonHome(options) {
   if (fromCwd !== void 0 && fromCwd.length > 0) return fromCwd;
   return packageMachineHome();
 }
-function projectSeatEngine(seat) {
-  return pickEngineAxis(seat);
-}
-function projectSeatHost(seat) {
-  return seat.host === void 0 ? {} : { host: seat.host };
-}
 function hostSelectionFailureFromUnknown(error) {
   if (typeof error !== "object" || error === null) return void 0;
   if (error.name !== "HostSelectionError") return void 0;
@@ -85,44 +79,36 @@ async function createSummonEnv(options, afterHost) {
   const [
     { piDurablePrincipalAuthority },
     { appendPiSessionCustomEntry },
-    { resolveRoleTurnHost },
-    { missingResolvedSeatModelMessage, resolvedSeatWithModel }
+    { openRoleSeatRuntime },
+    { missingResolvedSeatModelMessage }
   ] = await Promise.all([
     import("./pi/durable-principal.js"),
     import("./pi/role-turn-host.js"),
-    import("./public-cli/role-turn-host-resolution.js"),
+    import("./public-cli/role-seat-runtime.js"),
     import("./public-cli/config.js")
   ]);
   const principalAuthority = options.principalAuthority ?? piDurablePrincipalAuthority;
-  const roleTurnHost = resolveRoleTurnHost(
-    {
+  const opened = openRoleSeatRuntime({
+    resolution: {
       packageRoot: options.packageRoot,
       ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
       ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
       ...options.extraPiArgs === void 0 || options.extraPiArgs.length === 0 ? {} : { extraPiArgs: options.extraPiArgs },
       ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     },
-    { role: options.role, seat: options.seat, principalAuthority }
-  );
-  afterHost?.();
-  const seatWithModel = resolvedSeatWithModel(options.seat);
-  if (seatWithModel === void 0) {
+    principalAuthority,
+    role: options.role,
+    seat: options.seat,
+    home: options.home,
+    ...afterHost === void 0 ? {} : { afterHost },
+    ...options.hostFacingModel === void 0 ? {} : { hostFacingModel: options.hostFacingModel }
+  });
+  if (!opened.ok) {
     return {
       ok: false,
       missingModelMessage: missingResolvedSeatModelMessage(options.role)
     };
   }
-  const hostName = seatWithModel.host ?? "pi";
-  let hostFacingSelection = options.hostFacingModel;
-  if (hostFacingSelection === void 0) {
-    const { loadHostProvidersTable, projectHostFacingProvider } = await import("./public-cli/host-providers.js");
-    hostFacingSelection = projectHostFacingProvider(
-      seatWithModel.selection,
-      hostName,
-      loadHostProvidersTable(options.home),
-      options.home
-    );
-  }
   return {
     ok: true,
     env: {
@@ -131,12 +117,13 @@ async function createSummonEnv(options, afterHost) {
       agentDir: options.agentDir,
       sessionAppender: appendPiSessionCustomEntry,
       packageRoot: options.packageRoot,
-      roleTurnHost,
+      roleTurnHost: opened.roleTurnHost,
       cwd: options.cwd,
       credentials: options.credentials,
-      ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
-      ...projectSeatEngine(seatWithModel),
-      ...projectSeatHost(seatWithModel),
+      ...opened.model === void 0 ? {} : { model: opened.model },
+      ...opened.engine === void 0 ? {} : { engine: opened.engine },
+      ...opened.engineModel === void 0 ? {} : { engineModel: opened.engineModel },
+      host: opened.host,
       ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     }
   };
@@ -144,13 +131,14 @@ async function createSummonEnv(options, afterHost) {
 async function summonPublicRole(options) {
   const packageRoot = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join(home, ".pi", "agent");
   const {
     loadCredentialProviders,
     loadPublicCliConfig,
     resolveEffectiveSeat,
+    resolvePublicAgentDir,
     validatePublicCliConfigAxes
   } = await import("./public-cli/config.js");
+  const agentDir = resolvePublicAgentDir(options.agentDir, home);
   const credentials = options.credentials ?? await loadCredentialProviders(agentDir);
   const config = await loadPublicCliConfig(home);
   validatePublicCliConfigAxes(config, packageRoot);
@@ -304,7 +292,7 @@ async function summonParallelReviewerLenses(options) {
     if (error instanceof AggregateError) {
       return [error.message, ...error.errors.map(describeFailure)].join("\n");
     }
-    return error instanceof Error ? error.message : String(error);
+    return errorText(error);
   };
   const failedResult = (error) => ({
     exitCode: 1,
@@ -485,7 +473,7 @@ async function summonGateOfficer(options) {
     const correlationId = parentRunId;
     const { isSafePositiveTicketNumber, readBoardTicketNumber } = await import("./run-ticket-number.js");
     const parentTicket = await readBoardTicketNumber(options.sourceRunDirectory);
-    const submittedTicket = options.submission !== null && typeof options.submission === "object" && !Array.isArray(options.submission) ? options.submission.ticketNumber : void 0;
+    const submittedTicket = isRecord(options.submission) ? options.submission.ticketNumber : void 0;
     const courtTicket = isSafePositiveTicketNumber(submittedTicket) ? submittedTicket : parentTicket;
     const instruction = options.reask ?? gateReviewInstruction ?? "";
     return summonPublicRole({

package/dist/receipt-delivery-policy.js

@@ -1,8 +1,6 @@
+import { isRecord } from "./unknown-value.js";
 const RECEIPT_DELIVERY_TURN_LIMIT = 2;
 const NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function parseNoReceiptLifecycleFacts(input) {
   if (!isRecord(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");

package/dist/role-run-placement.js

@@ -5,9 +5,7 @@ import {
   ensureRealDirectoryTree
 } from "./activation-ledger-topology.js";
 import { requireSafePositiveTicketNumber } from "./run-ticket-number.js";
-function isMissingPathError(error) {
-  return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
+import { isEnoent } from "./unknown-value.js";
 async function listBookRunDirectories(bookDir) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -16,7 +14,7 @@ async function listBookRunDirectories(bookDir) {
     try {
       entries = await readdir(runsDir, { withFileTypes: true });
     } catch (error) {
-      if (isMissingPathError(error)) return;
+      if (isEnoent(error)) return;
       throw error;
     }
     for (const entry of entries) {
@@ -32,7 +30,7 @@ async function listBookRunDirectories(bookDir) {
   try {
     subjects = await readdir(bookDir, { withFileTypes: true });
   } catch (error) {
-    if (isMissingPathError(error)) return out.sort();
+    if (isEnoent(error)) return out.sort();
     throw error;
   }
   for (const subject of subjects) {
@@ -64,6 +62,9 @@ function roleRunPlacement(ledgerHome, input) {
 function roleRunArtifactsDirectory(runDirectory) {
   return join(runDirectory, "artifacts");
 }
+function isUnboundRunDirectory(runDirectory) {
+  return runDirectory.replaceAll("\\", "/").includes("/unbound/runs/");
+}
 function ensureRoleRunDirectory(ledgerHome, directory) {
   return ensureRealDirectoryTree(ledgerHome, directory);
 }
@@ -78,6 +79,7 @@ function ensureRoleRunPlacement(ledgerHome, placement) {
 export {
   ensureRoleRunDirectory,
   ensureRoleRunPlacement,
+  isUnboundRunDirectory,
   listBookRunDirectories,
   roleRunArtifactsDirectory,
   roleRunPlacement

package/dist/role-run-relocation.js

@@ -10,6 +10,7 @@ import { existsSync } from "node:fs";
 import { readdir, readFile, writeFile } from "node:fs/promises";
 import { join, sep } from "node:path";
 import { AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE } from "./compliance-transport.js";
+import { isRecord, isEnoent } from "./unknown-value.js";
 const ADMITTED_PAGE_FIELDS = [
     "runDirectory",
     "admittedRequestPath",
@@ -39,11 +40,6 @@ const OFFICER_POINTER_FIELDS = ["sessionFile", "runDirectory"];
 const SITIAN_RECORD_FIELDS = ["sessionParent"];
 const SESSION_HEADER_FIELDS = ["parentSession"];
 const BINDING_PARENT_FIELDS = ["sessionFile"];
-function isEnoent(error) {
-    return (error instanceof Error &&
-        "code" in error &&
-        error.code === "ENOENT");
-}
 /** Rewrite one path value that points at or under oldRunDirectory. */
 export function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
     if (typeof value !== "string")
@@ -111,18 +107,15 @@ function collectRewrites(input) {
     }
     return out;
 }
-function isPlainObject(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 /** Typed notary/source-run locator: only runDirectory is a path. */
 function rewriteSourceRunLocator(value, rewrites) {
-    if (!isPlainObject(value))
+    if (!isRecord(value))
         return;
     rewriteRunDirectoryPathFieldsAgainstRewrites(value, SOURCE_RUN_LOCATOR_FIELDS, rewrites);
 }
 /** Same-ticket summons materials: typed source-run + frozen attachment pointers. */
 function rewriteSummonsMaterials(value, rewrites) {
-    if (!isPlainObject(value))
+    if (!isRecord(value))
         return;
     rewriteRunDirectoryPathFieldsAgainstRewrites(value, SUMMONS_PATH_FIELDS, rewrites);
     rewriteSourceRunLocator(value.sourceRun, rewrites);
@@ -137,12 +130,12 @@ export function rewriteAdmittedRoleRunPage(page, rewrites) {
     rewriteSourceRunLocator(page.sourceRun, rewrites);
     if (Array.isArray(page.attachments)) {
         for (const attachment of page.attachments) {
-            if (isPlainObject(attachment)) {
+            if (isRecord(attachment)) {
                 rewriteRunDirectoryPathFieldsAgainstRewrites(attachment, ["frozenPath"], rewrites);
             }
         }
     }
-    if (isPlainObject(page.principal)) {
+    if (isRecord(page.principal)) {
         rewriteRunDirectoryPathFieldsAgainstRewrites(page.principal, ["sessionDirectory", "sessionFile"], rewrites);
     }
 }
@@ -150,7 +143,7 @@ async function rewriteOfficerPointerFile(path, rewrites) {
     if (!existsSync(path))
         return;
     const page = JSON.parse(await readFile(path, "utf8"));
-    if (!isPlainObject(page))
+    if (!isRecord(page))
         return;
     // Only the typed direct-officer pointer shape — never arbitrary .pointer.json.
     if (page.kind !== "direct-officer-run-pointer")
@@ -190,7 +183,7 @@ async function rewriteSitianRecordsJsonl(path, rewrites) {
             out.push(line);
             continue;
         }
-        if (!isPlainObject(parsed)) {
+        if (!isRecord(parsed)) {
             out.push(line);
             continue;
         }
@@ -241,7 +234,7 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
             out.push(line);
             continue;
         }
-        if (!isPlainObject(parsed)) {
+        if (!isRecord(parsed)) {
             out.push(line);
             continue;
         }
@@ -254,8 +247,8 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
         }
         else if (parsed.type === "custom" &&
             parsed.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE &&
-            isPlainObject(parsed.data) &&
-            isPlainObject(parsed.data.parent)) {
+            isRecord(parsed.data) &&
+            isRecord(parsed.data.parent)) {
             const parent = parsed.data.parent;
             const before = parent.sessionFile;
             rewriteRunDirectoryPathFieldsAgainstRewrites(parent, BINDING_PARENT_FIELDS, rewrites);
@@ -343,11 +336,11 @@ export async function rewriteRoleRunDurablePages(input) {
         const page = JSON.parse(await readFile(statePath, "utf8"));
         const before = JSON.stringify(page);
         rewriteRunDirectoryPathFieldsAgainstRewrites(page, RUN_STATE_PAGE_FIELDS, rewrites);
-        if (isPlainObject(page.principal)) {
+        if (isRecord(page.principal)) {
             rewriteRunDirectoryPathFieldsAgainstRewrites(page.principal, ["sessionDirectory", "sessionFile"], rewrites);
         }
         // Open court summons: source-run locators + frozen attachment path pointers.
-        if (isPlainObject(page.currentCourt)) {
+        if (isRecord(page.currentCourt)) {
             rewriteSummonsMaterials(page.currentCourt.summons, rewrites);
         }
         if (JSON.stringify(page) !== before) {

package/dist/run-terminal-artifacts.js

@@ -9,6 +9,7 @@
 import { readdir, readFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
 import { roleRunArtifactsDirectory } from "./role-run-placement.js";
+import { isRecord, errorText, isMissingPathError } from "./unknown-value.js";
 export const RUN_TERMINAL_ARTIFACT_FILES = [
     "report.json",
     "error.json",
@@ -26,17 +27,6 @@ export const RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
 ];
 /** Unique open-ended failure names: error.<uuid>.json (publisher stem + uuid). */
 const UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
-function isMissingPathError(error) {
-    return (error instanceof Error
-        && "code" in error
-        && (error.code === "ENOENT" || error.code === "ENOTDIR"));
-}
-function errorText(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 /**
  * Minimum producer-owned face shared by settlement terminal artifacts
  * (report / error / audit-incomplete). Consumer-driven: enough to identify a

package/dist/run-ticket-number.js

@@ -1,9 +1,7 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
+import { isEnoent, isRecord } from "./unknown-value.js";
 const MIGRATION_TICKET_DERIVATION_PAGE = "migration-ticket-derivation.json";
-function isEnoent(error) {
-  return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
 function isSafePositiveTicketNumber(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 1;
 }
@@ -30,7 +28,7 @@ function ticketFromRecord(record) {
 async function readJsonObject(path) {
   try {
     const raw = JSON.parse(await readFile(path, "utf8"));
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+    if (!isRecord(raw)) {
       return void 0;
     }
     return raw;

package/dist/session-assistant-usage.js

@@ -1,4 +1,5 @@
 import { join } from "node:path";
+import { errorText } from "./unknown-value.js";
 export async function readAssistantUsageFromSessionFile(sessionFile) {
     const { readFile } = await import("node:fs/promises");
     let text;
@@ -19,7 +20,7 @@ export async function readAssistantUsageFromSessionFile(sessionFile) {
             .map((line) => JSON.parse(line));
     }
     catch (error) {
-        throw new Error(`session usage parse failed (${sessionFile}): ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        throw new Error(`session usage parse failed (${sessionFile}): ${errorText(error)}`, { cause: error });
     }
     let total = 0;
     let input = 0;

package/dist/session-dialogue.js

@@ -1,17 +1,4 @@
-/**
- * 对话事实适配（ADR 0075 `dialogue-only` / `no-tool-output` / `speaker-required`）。
- *
- * 「对话」＝人类输入内容 + 助手回话内容，由各宿主的**结构化会话事件**适配而来。
- * 排除按来源、不按正文：说话人自己写下的文字一律原样保留，其中引用了 ADR 段落
- * 或工具结果也不删（#901 Out of Scope「不做正文过滤」）。
- *
- * 不入录的是工具结果载荷、附件记录与注入块——它们是独立的机器事件，不是谁说的话。
- *
- * 适配规则按宿主并列，不硬套某一宿主的类型名；一行产出 0..n 条对话事实。
- */
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord } from "./unknown-value.js";
 /**
  * 原生 id：行级或消息体级主键的单一实现（bound 解析与落盘共用）。
  * Pi/CC：行上 `uuid`/`id`；Codex：`response_item.payload.id`（或 `message.id`）。

package/dist/sitian-reader.js

@@ -1,8 +1,6 @@
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord, errorText } from "./unknown-value.js";
 async function readSitianRecords(recordFile) {
   if (!existsSync(recordFile)) {
     return { records: [], diagnostics: [] };
@@ -32,7 +30,7 @@ async function readSitianRecords(recordFile) {
         kind: "malformed",
         line: index + 1,
         raw: line,
-        error: error instanceof Error ? error.message : String(error)
+        error: errorText(error)
       });
     }
   }

package/dist/submission-correctable-error.js

@@ -1,4 +1,5 @@
 import { GatekeeperDecisionError, ParentQueueReaskError, WorkerCommitReminderError, WorkerPrefixReminderError, WorkerUnfinishedReasonReminderError, } from "./submission-errors.js";
+import { errorText } from "./unknown-value.js";
 /** Shared, unforgeable identity for submission errors that the same session may correct. */
 const correctableSubmissionErrorBrand = Symbol("ak-roles.correctable-submission-error");
 export class CorrectableSubmissionError extends Error {
@@ -25,7 +26,7 @@ export function isCorrectableExecuteError(error) {
  * Consumed by the ACP envelope tool catch; host adapters wrap transport shape only.
  */
 export function projectCorrectableExecuteRejection(error) {
-    const diagnostic = error instanceof Error ? error.message : String(error);
+    const diagnostic = errorText(error);
     if (error instanceof GatekeeperDecisionError) {
         return { diagnostic, details: { ...error.result } };
     }

package/dist/submission-errors.js

@@ -1,4 +1,5 @@
 import { readableGateItem } from "./readable-gate-item.js";
+import { isRecord } from "./unknown-value.js";
 /**
  * Tool-result text the parent model sees (#753 / #750 evidence).
  * continue | escalate → officer receipt verbatim (JSON when structured).
@@ -61,7 +62,7 @@ export function unreadableDiscriminatorNotice(field, received) {
 }
 /** The received discriminator only — never the rest of the receipt. */
 export function receivedDiscriminator(receipt, field) {
-    if (receipt === null || typeof receipt !== "object" || Array.isArray(receipt))
+    if (!isRecord(receipt))
         return undefined;
     if (!Object.hasOwn(receipt, field))
         return undefined;

package/dist/submission-gate.js

@@ -10,7 +10,7 @@ export function latestQueueStatus(terminal) {
     if (outcome.kind !== "accepted")
         return undefined;
     const latest = outcome.payloads?.[outcome.payloads.length - 1];
-    if (latest !== null && typeof latest === "object" && !Array.isArray(latest)) {
+    if (isRecord(latest)) {
         const status = latest.status;
         if (typeof status === "string" && status.trim() !== "")
             return status;
@@ -29,6 +29,7 @@ export function latestQueuePayload(terminal) {
     return payloads.length === 0 ? undefined : payloads[payloads.length - 1];
 }
 import { sessionFileFromPublicSummon } from "./session-assistant-usage.js";
+import { isRecord } from "./unknown-value.js";
 /**
  * Shared-envelope default officer summon (ADR 0018).
  * Role modules must not own this drive seam — only project results.

package/dist/submission-ledger.js

@@ -7,6 +7,7 @@ import { findRunDirectoryById } from "./public-cli/run-lifecycle.js";
 import { isCorrectableExecuteError } from "./submission-correctable-error.js";
 import { failOnInfrastructureFailureDeclaration, infrastructureFailureDiagnostic } from "./package-contracts/terminating-infrastructure.js";
 import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.js";
+import { isRecord, errorText } from "./unknown-value.js";
 /**
  * Admitted run identity for the ledger subject.
  * Prefer AK_ROLE_RUN_DIR via sole runDirectory→runId parser (public-CLI correlation);
@@ -464,9 +465,7 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                         // host-failure seam. Tool identity comes from the registry map.
                         const reviewEscalate = tool.name === REVIEW_SUBMISSION_OUTPUT_TOOL_NAME
                             && infrastructureFailureDiagnostic(params) !== undefined
-                            && params !== null
-                            && typeof params === "object"
-                            && !Array.isArray(params)
+                            && isRecord(params)
                             && params.status === "escalate";
                         if (!reviewEscalate) {
                             failOnInfrastructureFailureDeclaration(params, {
@@ -485,7 +484,7 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                                 toolCallId,
                                 outcome: "correctable-rejection",
                                 code: "typed-bounce",
-                                diagnostic: error instanceof Error ? error.message : String(error),
+                                diagnostic: errorText(error),
                                 role,
                                 accepted: params,
                             });
@@ -497,7 +496,7 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                                 attemptId,
                                 toolCallId,
                                 outcome: "infrastructure",
-                                diagnostic: error instanceof Error ? error.message : String(error),
+                                diagnostic: errorText(error),
                                 role,
                                 accepted: params,
                             });

package/dist/ticket-provenance-contracts.js

@@ -1,3 +1,4 @@
+import { isRecord } from "./unknown-value.js";
 /**
  * 起居录（ticket-provenance）typed 形状 —— ADR 0075 / ADR 0081 / #1090。
  *
@@ -7,9 +8,6 @@
  */
 /** Sitian kind for per-ticket court diary volumes. */
 export const TICKET_PROVENANCE_KIND = "ticket-provenance";
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function positiveInteger(value) {
     if (typeof value === "number" && Number.isSafeInteger(value) && value >= 1)
         return value;

package/dist/ticket-provenance.js

@@ -11,6 +11,7 @@ import { isSafePositiveTicketNumber } from "./run-ticket-number.js";
 import { adaptSessionDialogue, nativeEventId } from "./session-dialogue.js";
 import { appendSitianRecordBlock, appendSitianRecord, resolveSitianRecordPath, } from "./sitian-facade.js";
 import { TICKET_PROVENANCE_KIND, } from "./ticket-provenance-contracts.js";
+import { errorText } from "./unknown-value.js";
 /**
  * Typed input failure for diarist bounds/session path (reask, not infrastructure).
  * Accept hook discriminates with instanceof — never Error.message prefixes.
@@ -199,7 +200,7 @@ async function projectSessionRanges(input) {
             throw error;
         const code = errnoCode(error);
         if (code === "ENOENT" || code === "ENOTDIR" || code === "EISDIR") {
-            const detail = error instanceof Error ? error.message : String(error);
+            const detail = errorText(error);
             throw new TicketProvenanceInputError(`session unreadable: ${input.session.path} (${detail})`, { cause: error });
         }
         throw error;

package/dist/typed-provider-http.js

@@ -1,5 +1,6 @@
 import { readFile, unlink, writeFile } from "node:fs/promises";
 import { join } from "node:path";
+import { isEnoent, isRecord } from "./unknown-value.js";
 const TYPED_HTTP_FILE = "typed-provider-http.json";
 function typedProviderHttpPath(runDirectory) {
   return join(runDirectory, TYPED_HTTP_FILE);
@@ -8,9 +9,7 @@ async function clearTypedProviderHttpObservation(runDirectory) {
   try {
     await unlink(typedProviderHttpPath(runDirectory));
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return;
-    }
+    if (isEnoent(error)) return;
     throw error;
   }
 }
@@ -35,13 +34,11 @@ async function readLatestTypedProviderHttpObservation(runDirectory) {
   try {
     text = await readFile(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return void 0;
-    }
+    if (isEnoent(error)) return void 0;
     throw error;
   }
   const raw = JSON.parse(text);
-  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+  if (!isRecord(raw)) {
     throw new Error("typed provider HTTP observation must be a JSON object");
   }
   const record = raw;

package/dist/unknown-value.js

@@ -0,0 +1,28 @@
+import { Guard } from "typebox/guard";
+/**
+ * Sole readers for a plain object, a Node errno, and an Error message.
+ * Callers choose which codes count; ENOTDIR is not ENOENT.
+ * Plain objects are TypeBox `Guard.IsObjectNotArray`.
+ */
+export function isRecord(value) {
+    return Guard.IsObjectNotArray(value);
+}
+export function errnoCode(error) {
+    return error !== null && typeof error === "object" && "code" in error
+        && typeof error.code === "string"
+        ? error.code
+        : undefined;
+}
+/** `Error.message`, otherwise `String(value)`. */
+export function errorText(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** True only for ENOENT on an Error. ENOTDIR and every other code stay distinct. */
+export function isEnoent(error) {
+    return error instanceof Error && errnoCode(error) === "ENOENT";
+}
+/** ENOENT or ENOTDIR on an Error. */
+export function isMissingPathError(error) {
+    const code = errnoCode(error);
+    return error instanceof Error && (code === "ENOENT" || code === "ENOTDIR");
+}

package/dist/user-dialogue-stdin.js

@@ -3,12 +3,13 @@
  * Pi's piped-stdin reader trims the wrapper; the body field keeps original bytes.
  * No size cap and no path/pointer substitute — the whole dialogue rides the envelope.
  */
+import { isRecord } from "./unknown-value.js";
 export const USER_DIALOGUE_STDIN_KIND = "ak-user-dialogue";
 export function encodeUserDialogueStdin(body) {
     return JSON.stringify({ kind: USER_DIALOGUE_STDIN_KIND, body });
 }
 function isUserDialogueEnvelope(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
+    if (!isRecord(value))
         return false;
     const record = value;
     return record.kind === USER_DIALOGUE_STDIN_KIND && typeof record.body === "string";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5365",
+  "version": "0.1.5375",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/src/acp-host/role-turn-host.ts

@@ -27,6 +27,8 @@ import {
 } from "../prepared-role-turn.ts";
 import { acpModelId, type AcpHostDescription } from "./description.ts";
 
+import { isRecord } from "../unknown-value.ts";
+
 /**
  * #959: collect free-form agent text from ACP session/update stream.
  * Used only when the navigator seat spoke prose without calling the output tool.
@@ -42,7 +44,7 @@ function acpAgentTextChunk(params: Readonly<Record<string, unknown>>): string |
   let textFallback: unknown;
 
   const nested = params.update;
-  if (typeof nested === "object" && nested !== null && !Array.isArray(nested)) {
+  if (isRecord(nested)) {
     const record = nested as Record<string, unknown>;
     kind = record.sessionUpdate;
     content = record.content;
@@ -55,7 +57,7 @@ function acpAgentTextChunk(params: Readonly<Record<string, unknown>>): string |
 
   if (kind !== "agent_message_chunk" && kind !== "agent_message") return undefined;
   if (typeof content === "string" && content.length > 0) return content;
-  if (typeof content === "object" && content !== null && !Array.isArray(content)) {
+  if (isRecord(content)) {
     const record = content as Record<string, unknown>;
     if (typeof record.text === "string" && record.text.length > 0) return record.text;
   }

package/src/activation-ledger-git.ts

@@ -1,6 +1,8 @@
 import { execFileSync } from "node:child_process";
 import { basename, dirname, isAbsolute, resolve } from "node:path";
 
+import { errnoCode } from "./unknown-value.ts";
+
 /** Git discovery env vars that must not influence book-key resolution from cwd. */
 const GIT_DISCOVERY_ENV_KEYS = [
   "GIT_DIR",
@@ -60,8 +62,7 @@ export class ActivationGitRepositoryRequiredError extends Error {
 
 /** Spawn/OS failure identity for the git child — not a repository-status result. */
 function isGitSpawnInfrastructureError(error: unknown): boolean {
-  if (error === null || typeof error !== "object" || !("code" in error)) return false;
-  const code = (error as { code: unknown }).code;
+  const code = errnoCode(error);
   return code === "ENOENT" || code === "EACCES" || code === "EPERM";
 }