@akagilnc/pi-workflow-roles 0.1.5365 → 0.1.5375

package/dist/public-cli/cli.js

@@ -3,19 +3,19 @@ import { piDurablePrincipalAuthority } from "../pi/durable-principal.js";
  * Public ak-role CLI dispatcher (roles / config / layered help / Judge run).
  */
 import { realpath } from "node:fs/promises";
-import { join } from "node:path";
 import { packageMachineHome } from "../activation-ledger-topology.js";
 import { assertLegalEngineModel, assertLegalEngineName, pickEngineAxis, } from "../package-resources/engine-material.js";
 import { resolveConfiguredProvinceOfficer, } from "../institutional-resolution.js";
-import { clearPersistentSeatConfig, effectiveSeatConfigurations, formatModelSpec, isGateOfficerSeat, loadCredentialProviders, loadPublicCliConfig, missingResolvedSeatModelMessage, parseModelSpec, resolveEffectiveSeat, resolvedSeatWithModel, savePublicCliConfig, setAutoResumeLimit, setPersistentSeatConfig, setPersistentSeatEngine, setPersistentSeatEngineModel, setPersistentSeatHost, validatePublicCliConfigAxes, } from "./config.js";
-import { loadHostProvidersTable, projectHostFacingProvider, renderHostProvidersTable, } from "./host-providers.js";
+import { clearPersistentSeatConfig, effectiveSeatConfigurations, formatModelSpec, isGateOfficerSeat, loadCredentialProviders, loadPublicCliConfig, missingResolvedSeatModelMessage, parseModelSpec, resolveEffectiveSeat, savePublicCliConfig, setAutoResumeLimit, setPersistentSeatConfig, setPersistentSeatEngine, setPersistentSeatEngineModel, setPersistentSeatHost, resolvePublicAgentDir, validatePublicCliConfigAxes, } from "./config.js";
+import { loadHostProvidersTable, renderHostProvidersTable, } from "./host-providers.js";
 import { packagedModelParent } from "../packaged-role-registry.js";
 import { seatModelOnly } from "./registry.js";
 import { CliUsageError } from "./cli-errors.js";
 import { runMachineSkillSetup } from "./machine-method-skills.js";
 import { presentLocatedResumeFailure, } from "./post-admission.js";
 import { appendPiSessionCustomEntry } from "../pi/role-turn-host.js";
-import { composeRoleTurnHostAdapters, formatHostSelectionFailure, HostSelectionError, selectRoleTurnHost, } from "./role-turn-host-resolution.js";
+import { openRoleSeatRuntime } from "./role-seat-runtime.js";
+import { formatHostSelectionFailure, HostSelectionError, } from "./role-turn-host-resolution.js";
 import { parseAnalystArgv, parsePublicSeatArgv, } from "./invocation.js";
 import { createTypedOptionConsumer, optionsForOwner, projectCommandHelp, projectOwnerOptions, PUBLIC_NAVIGATOR_HELP_NOTE, PUBLIC_ROLE_OPTION_OWNERS, renderHumanOwnerOptionLines, } from "./option-definitions.js";
 import { TurnDispatchedFailure } from "./auto-resume.js";
@@ -25,6 +25,7 @@ import { runPublicAnalyst } from "./analyst-run.js";
 import { AUTO_RESUME_LIMIT, peekRoleRunRole, } from "./run-lifecycle.js";
 import { INTERNAL_ROLE_ENTRYPOINT_RELATIVE, PUBLIC_CALLABLE_ROLES, isPublicCallableRole, isPublicCliSupportCommand, isPublicConfigurableSeat, listHelpCapabilities, } from "./registry.js";
 import { formatCliDiagnostic, formatErrorCauseDetail, presentStructuralRejection, } from "./settlement.js";
+import { errorText } from "../unknown-value.js";
 export { buildExplicitInternalActivationArgs, resolveInternalRoleEntrypoint, } from "../pi/role-turn-host.js";
 export { CliUsageError } from "./cli-errors.js";
 /**
@@ -89,43 +90,41 @@ function takePublicGlobalFlag(argv, index, options) {
 function createRoleEnvironment(env, options, 
 /** #178: after host selection, before missing-model — structural argv parse once. */
 afterHost) {
-    const role = options.role;
     const extraPiArgs = env.extraPiArgs;
     const timeoutMs = env.timeoutMs;
-    // #617/#178/#788/#840: host first, then model; nested child seat selects own host.
-    const hostAdapters = composeRoleTurnHostAdapters({
-        packageRoot: env.packageRoot,
-        ...(env.roleTurnHost === undefined ? {} : { roleTurnHost: env.roleTurnHost }),
-        ...(env.hostAdapters === undefined ? {} : { hostAdapters: env.hostAdapters }),
-        ...(extraPiArgs === undefined ? {} : { extraPiArgs }),
-        ...(timeoutMs === undefined ? {} : { timeoutMs }),
-    }, env.principalAuthority);
-    const roleTurnHost = selectRoleTurnHost(hostAdapters, {
-        role,
+    const opened = openRoleSeatRuntime({
+        resolution: {
+            packageRoot: env.packageRoot,
+            ...(env.roleTurnHost === undefined ? {} : { roleTurnHost: env.roleTurnHost }),
+            ...(env.hostAdapters === undefined ? {} : { hostAdapters: env.hostAdapters }),
+            ...(extraPiArgs === undefined ? {} : { extraPiArgs }),
+            ...(timeoutMs === undefined ? {} : { timeoutMs }),
+        },
+        principalAuthority: env.principalAuthority,
+        role: options.role,
         seat: options.seat,
+        home: options.home,
+        ...(afterHost === undefined ? {} : { afterHost }),
     });
-    // #178: host → argv (afterHost) → missing-model → provider projection.
-    afterHost?.();
-    const seatWithModel = resolvedSeatWithModel(options.seat);
-    if (seatWithModel === undefined) {
+    if (!opened.ok) {
         // Direct CLI has --model; dual remediation is intentional here (#178 / #916).
         throw new CliUsageError(missingResolvedSeatModelMessage(options.seat.seat, "invocation-or-config"));
     }
-    const hostFacingSelection = projectHostFacingProvider(seatWithModel.selection, seatWithModel.host, loadHostProvidersTable(options.home), options.home);
     return {
         home: options.home,
         principalAuthority: env.principalAuthority,
         agentDir: options.agentDir,
         sessionAppender: appendPiSessionCustomEntry,
         packageRoot: env.packageRoot,
-        roleTurnHost,
-        hostAdapters,
+        roleTurnHost: opened.roleTurnHost,
+        hostAdapters: opened.hostAdapters,
         cwd: options.cwd,
         ...(options.credentials === undefined ? {} : { credentials: options.credentials }),
         ...(env.correlationId === undefined ? {} : { correlationId: env.correlationId }),
-        ...(hostFacingSelection === undefined ? {} : { model: hostFacingSelection }),
-        ...projectSeatEngine(options.seat),
-        ...projectSeatHost(options.seat),
+        ...(opened.model === undefined ? {} : { model: opened.model }),
+        ...(opened.engine === undefined ? {} : { engine: opened.engine }),
+        ...(opened.engineModel === undefined ? {} : { engineModel: opened.engineModel }),
+        host: opened.host,
         ...(timeoutMs === undefined ? {} : { timeoutMs }),
         ...(env.createRunId === undefined ? {} : { createRunId: env.createRunId }),
         ...(options.config?.autoResumeLimit === undefined
@@ -138,18 +137,31 @@ afterHost) {
         ...(env.signal === undefined ? {} : { signal: env.signal }),
     };
 }
+/** Shared preamble for a new public role command and an explicit resume. */
+async function loadPublicRoleDispatchParts(env, home) {
+    const agentDir = resolvePublicAgentDir(env.agentDir, home);
+    const cwd = env.cwd ?? process.cwd();
+    const config = await loadAndValidateConfig(home, env.packageRoot);
+    const credentials = env.credentials ?? (await loadCredentialProviders(agentDir));
+    return { agentDir, cwd, config, credentials };
+}
 /**
  * #178 single spine: resolve seat → host select → argv parse once → missing-model → run.
  * Keeps host-unregistered ahead of bad argv and missing-model.
  */
 async function dispatchPublicRoleCommand(env, home, io, parsed, role, parse, run) {
-    const agentDir = resolveAgentDir(env, home);
-    const cwd = env.cwd ?? process.cwd();
-    const config = await loadAndValidateConfig(home, env.packageRoot);
-    const credentials = env.credentials ?? (await loadCredentialProviders(agentDir));
-    const seat = resolveEffectiveSeat(config, role, credentials, invocationFromParsed(parsed));
+    const parts = await loadPublicRoleDispatchParts(env, home);
+    const seat = resolveEffectiveSeat(parts.config, role, parts.credentials, invocationFromParsed(parsed));
     let parsedRoleArgv;
-    const result = await run(parsed.args, createRoleEnvironment(env, { role, home, agentDir, cwd, credentials, seat, config }, () => {
+    const result = await run(parsed.args, createRoleEnvironment(env, {
+        role,
+        home,
+        agentDir: parts.agentDir,
+        cwd: parts.cwd,
+        credentials: parts.credentials,
+        seat,
+        config: parts.config,
+    }, () => {
         parsedRoleArgv = parse(parsed.args);
     }), () => parsedRoleArgv);
     return {
@@ -176,11 +188,6 @@ function defaultIo() {
 function resolveHome(env) {
     return env.home ?? packageMachineHome();
 }
-function resolveAgentDir(env, home) {
-    return (env.agentDir ??
-        process.env.PI_CODING_AGENT_DIR ??
-        join(home, ".pi", "agent"));
-}
 function parseThinking(value) {
     // #683: opaque pass-through — no local whitelist.
     return value;
@@ -299,7 +306,7 @@ function requireLegalEngineModel(model) {
         return assertLegalEngineModel(model);
     }
     catch (error) {
-        throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+        throw new CliUsageError(errorText(error), { cause: error });
     }
 }
 function requireLegalEngineName(name) {
@@ -307,7 +314,7 @@ function requireLegalEngineName(name) {
         return assertLegalEngineName(name);
     }
     catch (error) {
-        throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+        throw new CliUsageError(errorText(error), { cause: error });
     }
 }
 /** Callable seats own persistent call axes (checked against the callable predicate). */
@@ -316,21 +323,13 @@ function requireCallableSeat(seat, axis, verb) {
         throw new CliUsageError(`unknown ${axis}-axis seat: ${seat}`);
     }
 }
-/** Single seat engine axis → run-options projection (#391 E2 / #883). */
-function projectSeatEngine(seat) {
-    return pickEngineAxis(seat);
-}
-/** Single seat.host → run-options projection (#595 / #617). */
-function projectSeatHost(seat) {
-    return { host: seat.host };
-}
 function loadAndValidateConfig(home, packageRoot) {
     return loadPublicCliConfig(home).then((config) => {
         try {
             validatePublicCliConfigAxes(config, packageRoot);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         return config;
     });
@@ -592,7 +591,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatHost(config, seat, unset ? undefined : args[2]);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -614,7 +613,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngine(config, seat, name, engineModel);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -631,7 +630,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngine(config, seat, undefined);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -650,7 +649,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngineModel(config, seat, model);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -667,7 +666,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngineModel(config, seat, undefined);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -787,7 +786,7 @@ export async function runAkRole(argv, env) {
             }
             const config = await loadAndValidateConfig(home, env.packageRoot);
             const credentials = env.credentials ??
-                (await loadCredentialProviders(resolveAgentDir(env, home)));
+                (await loadCredentialProviders(resolvePublicAgentDir(env.agentDir, home)));
             const seats = effectiveSeatConfigurations(config, credentials, invocationFromParsed(parsed));
             io.stdout(renderRoles(seats));
             return { exitCode: 0 };
@@ -829,23 +828,20 @@ export async function runAkRole(argv, env) {
                 runId: resumeRequest.runId,
                 authority: env.principalAuthority ?? piDurablePrincipalAuthority,
             };
-            const agentDir = resolveAgentDir(env, home);
-            const cwd = env.cwd ?? process.cwd();
-            const config = await loadAndValidateConfig(home, env.packageRoot);
-            const credentials = env.credentials ?? (await loadCredentialProviders(agentDir));
+            const parts = await loadPublicRoleDispatchParts(env, home);
             const resumeRole = await peekRoleRunRole(home, resumeRequest.runId);
             // Missing durable role keeps the judge seat table. The resume entry
             // itself is one function; it reads the stored run.
             const seatRole = resumeRole ?? "judge";
-            const seat = resolveEffectiveSeat(config, seatRole, credentials, invocationFromParsed(parsed));
+            const seat = resolveEffectiveSeat(parts.config, seatRole, parts.credentials, invocationFromParsed(parsed));
             const result = await runPublicInstructionSeatResume(resumeRequest, createRoleEnvironment(env, {
                 role: seatRole,
                 home,
-                agentDir,
-                cwd,
-                credentials,
+                agentDir: parts.agentDir,
+                cwd: parts.cwd,
+                credentials: parts.credentials,
                 seat,
-                config,
+                config: parts.config,
             }), io);
             let current = result;
             while (current.exitCode === 0 && current.admitted?.correlationId !== undefined
@@ -860,9 +856,15 @@ export async function runAkRole(argv, env) {
                 const parentRole = await peekRoleRunRole(home, parentRunId);
                 if (parentRole === undefined)
                     break;
-                const parentSeat = resolveEffectiveSeat(config, parentRole, credentials, invocationFromParsed(parsed));
+                const parentSeat = resolveEffectiveSeat(parts.config, parentRole, parts.credentials, invocationFromParsed(parsed));
                 const parentEnv = createRoleEnvironment(env, {
-                    role: parentRole, home, agentDir, cwd, credentials, seat: parentSeat, config,
+                    role: parentRole,
+                    home,
+                    agentDir: parts.agentDir,
+                    cwd: parts.cwd,
+                    credentials: parts.credentials,
+                    seat: parentSeat,
+                    config: parts.config,
                 });
                 current = await continueParentAfterChild(parentRunId, current.admitted, parentEnv, io);
             }

package/dist/public-cli/config.js

@@ -19,6 +19,7 @@ import {
   isPublicConfigurableSeat,
   seatModelOnly
 } from "./registry.js";
+import { isEnoent, isRecord } from "../unknown-value.js";
 const GATE_OFFICER_SEATS = PUBLIC_ROLE_RECORDS.flatMap(
   (record) => "provinceConfig" in record && record.provinceConfig === true ? [record.role] : []
 );
@@ -37,9 +38,7 @@ async function loadPublicCliConfig(home) {
     const raw = await readFile(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return { seats: {} };
-    }
+    if (isEnoent(error)) return { seats: {} };
     throw error;
   }
 }
@@ -260,7 +259,7 @@ function serializePublicCliConfig(config) {
   };
 }
 function parsePublicCliConfig(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+  if (!isRecord(value)) {
     throw new Error("public CLI config must be an object");
   }
   const record = value;
@@ -270,7 +269,7 @@ function parsePublicCliConfig(value) {
   }
   const unknownSeats = {};
   if (record.unknownSeats !== void 0) {
-    if (record.unknownSeats === null || typeof record.unknownSeats !== "object" || Array.isArray(record.unknownSeats)) {
+    if (!isRecord(record.unknownSeats)) {
       throw new Error("public CLI config.unknownSeats must be an object");
     }
     Object.assign(unknownSeats, record.unknownSeats);
@@ -283,7 +282,7 @@ function parsePublicCliConfig(value) {
   if (record.seats === void 0) {
     return withOpaque({});
   }
-  if (record.seats === null || typeof record.seats !== "object" || Array.isArray(record.seats)) {
+  if (!isRecord(record.seats)) {
     throw new Error("public CLI config.seats must be an object");
   }
   const seats = {};
@@ -299,7 +298,7 @@ function parsePublicCliConfig(value) {
   return withOpaque(seats);
 }
 function parseSeatModelConfig(value, seat) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+  if (!isRecord(value)) {
     throw new Error(`config seat ${seat} must be an object`);
   }
   const raw = value;
@@ -481,7 +480,7 @@ function listRolesForDisplay(config, credentials, invocation) {
   return effectiveSeatConfigurations(config, credentials, invocation);
 }
 function credentialProvidersFromAuthData(data) {
-  if (data === null || typeof data !== "object" || Array.isArray(data)) {
+  if (!isRecord(data)) {
     return { "openai-codex": false, xai: false };
   }
   const record = data;
@@ -490,14 +489,15 @@ function credentialProvidersFromAuthData(data) {
     xai: Object.prototype.hasOwnProperty.call(record, "xai")
   };
 }
+function resolvePublicAgentDir(explicit, home) {
+  return explicit ?? process.env.PI_CODING_AGENT_DIR ?? join(home, ".pi", "agent");
+}
 async function loadCredentialProviders(agentDir) {
   try {
     const raw = await readFile(join(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return { "openai-codex": false, xai: false };
-    }
+    if (isEnoent(error)) return { "openai-codex": false, xai: false };
     throw error;
   }
 }
@@ -519,6 +519,7 @@ export {
   providerConfigured,
   publicCliConfigPath,
   resolveEffectiveSeat,
+  resolvePublicAgentDir,
   resolvedSeatWithModel,
   savePublicCliConfig,
   setAutoResumeLimit,

package/dist/public-cli/countersign-run.js

@@ -1,7 +1,5 @@
 import { readableGateItem } from "../readable-gate-item.js";
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord } from "../unknown-value.js";
 function isEscalatePayload(payload) {
     if (!isRecord(payload))
         return false;

package/dist/public-cli/host-providers.js

@@ -10,6 +10,7 @@
  */
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
+import { isEnoent, isRecord } from "../unknown-value.js";
 export function hostProvidersPath(home) {
     if (typeof home !== "string" || home.trim() === "") {
         throw new Error("home must be explicitly provided");
@@ -21,7 +22,7 @@ export function hermesProviderModelsCachePath(home) {
     return join(home, ".hermes", "provider_models_cache.json");
 }
 export function parseHostProvidersTable(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    if (!isRecord(value)) {
         throw new Error("host-providers.json must be an object");
     }
     const out = {};
@@ -29,9 +30,7 @@ export function parseHostProvidersTable(value) {
         if (host.trim() === "") {
             throw new Error("host-providers.json host key must be non-empty");
         }
-        if (byProvider === null ||
-            typeof byProvider !== "object" ||
-            Array.isArray(byProvider)) {
+        if (!isRecord(byProvider)) {
             throw new Error(`host-providers.json[${host}] must be an object`);
         }
         const providers = {};
@@ -61,11 +60,8 @@ export function loadHostProvidersTable(home) {
         return parseHostProvidersTable(JSON.parse(raw));
     }
     catch (error) {
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT") {
+        if (isEnoent(error))
             return {};
-        }
         throw error;
     }
 }
@@ -86,20 +82,17 @@ export function listHermesProvidersForModel(home, seatModel) {
         text = readFileSync(path, "utf8");
     }
     catch (error) {
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT") {
+        if (isEnoent(error))
             return [];
-        }
         throw error;
     }
     const raw = JSON.parse(text);
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+    if (!isRecord(raw)) {
         throw new Error(`hermes provider_models_cache.json must be an object: ${path}`);
     }
     const found = [];
     for (const [provider, entry] of Object.entries(raw)) {
-        if (entry === null || typeof entry !== "object" || Array.isArray(entry)) {
+        if (!isRecord(entry)) {
             continue;
         }
         const models = entry.models;