@akagilnc/pi-workflow-roles 0.1.5368 → 0.1.5375

package/dist/navigator-attendance.js

@@ -1,4 +1,3 @@
-import { createHash } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
@@ -35,6 +34,8 @@ import { issueRoot, subjectPath } from "./work-subject-identity.js";
 import { createReceiptDeliveryPolicy, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE } from "./receipt-delivery-policy.js";
 import { navigatorProseFromUnknown } from "./package-contracts/navigator-output.js";
 import { persistNavigatorWorkBase } from "./navigator-work-base.js";
+import { sha256Hex } from "./sha256.js";
+import { isRecord } from "./unknown-value.js";
 const NAVIGATOR_EVENT_TYPE = "ak-navigator-attendance";
 function resolveNavigatorAuthorityMaterial(roleInput, fileAuthority) {
   if (roleInput !== void 0 && roleInput.trim() !== "") return roleInput;
@@ -53,27 +54,24 @@ const unavailableKeys = /* @__PURE__ */ new Set(["context", "session", "model",
 function unavailableKey(value) {
   return typeof value === "string" && unavailableKeys.has(value) ? value : void 0;
 }
-function exactRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function rejectedPrepareReason(entries, start) {
   const recent = entries.slice(start);
   const prepareCalls = /* @__PURE__ */ new Set();
   for (const entry of recent) {
-    if (!exactRecord(entry) || entry.type !== "message" || !exactRecord(entry.message) || entry.message.role !== "assistant" || !Array.isArray(entry.message.content)) continue;
+    if (!isRecord(entry) || entry.type !== "message" || !isRecord(entry.message) || entry.message.role !== "assistant" || !Array.isArray(entry.message.content)) continue;
     for (const part of entry.message.content) {
-      if (exactRecord(part) && part.type === "toolCall" && part.name === NAVIGATOR_PREPARE_TOOL_NAME && typeof part.id === "string") prepareCalls.add(part.id);
+      if (isRecord(part) && part.type === "toolCall" && part.name === NAVIGATOR_PREPARE_TOOL_NAME && typeof part.id === "string") prepareCalls.add(part.id);
     }
   }
   let reason;
   for (const entry of recent) {
-    if (!exactRecord(entry) || entry.type !== "message" || !exactRecord(entry.message) || entry.message.role !== "toolResult" || entry.message.isError !== true) continue;
+    if (!isRecord(entry) || entry.type !== "message" || !isRecord(entry.message) || entry.message.role !== "toolResult" || entry.message.isError !== true) continue;
     const callId = entry.message.toolCallId;
     if (entry.message.toolName !== NAVIGATOR_PREPARE_TOOL_NAME || typeof callId !== "string" || !prepareCalls.has(callId)) {
       return void 0;
     }
     const content = entry.message.content;
-    const text = Array.isArray(content) ? content.flatMap((part) => exactRecord(part) && typeof part.text === "string" ? [part.text] : []).join("") : typeof content === "string" ? content : "";
+    const text = Array.isArray(content) ? content.flatMap((part) => isRecord(part) && typeof part.text === "string" ? [part.text] : []).join("") : typeof content === "string" ? content : "";
     if (text.trim() !== "") reason = text.trim();
   }
   return reason;
@@ -86,7 +84,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
   if (provenance === "placeholder") return subjectRoot;
   const normalized = subject.trim().replace(/\s+/g, " ");
   if (normalized === "") return subjectRoot;
-  return `${subjectRoot}#${createHash("sha256").update(normalized).digest("hex").slice(0, 32)}`;
+  return `${subjectRoot}#${sha256Hex(normalized).slice(0, 32)}`;
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
@@ -308,10 +306,10 @@ function createNavigatorAttendance(options) {
           return void 0;
         }
         const nativeFailure = [...activeSession.entries()].reverse().find((entry) => {
-          if (!exactRecord(entry) || entry.type !== "message" || !exactRecord(entry.message)) return false;
+          if (!isRecord(entry) || entry.type !== "message" || !isRecord(entry.message)) return false;
           return entry.message.role === "assistant" && typeof entry.message.errorMessage === "string" && entry.message.errorMessage.trim() !== "";
         });
-        const nativeMessage = exactRecord(nativeFailure) && exactRecord(nativeFailure.message) ? nativeFailure.message : void 0;
+        const nativeMessage = isRecord(nativeFailure) && isRecord(nativeFailure.message) ? nativeFailure.message : void 0;
         const errorMessage = nativeMessage !== void 0 && typeof nativeMessage.errorMessage === "string" ? nativeMessage.errorMessage : "Navigator did not submit direction advice";
         const providerFailure = activeSession.providerFailure?.();
         const source = providerFailure?.source ?? "unknown";

package/dist/navigator-invocation-identity.js

@@ -1,5 +1,6 @@
 import { LEGACY_REVIEW_OUTPUT_ROLES, PACKAGED_ROLE_REGISTRY } from "./packaged-role-registry.js";
 import { isUuidV7, uuidv7 } from "./uuidv7.js";
+import { isRecord } from "./unknown-value.js";
 import { workSubjectKeysEqual } from "./work-subject-identity.js";
 const NAVIGATOR_INVOCATION_ENTRY = "ak-navigator-invocation";
 const NAVIGATOR_ROUTE_PLAYBOOK_FAILURE_ENTRY = "ak-navigator-route-playbook-failure";
@@ -34,7 +35,7 @@ function extractInfrastructureFailureEvidence(error) {
   return evidence;
 }
 function hasNavigatorInfrastructureFailureBase(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  if (!isRecord(value)) return false;
   const record = value;
   for (const key of NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS) {
     if (!Object.hasOwn(record, key)) return false;
@@ -56,7 +57,7 @@ function invocationPhaseFromUnknown(value) {
   return void 0;
 }
 function parseInvocationMarkerIdentity(data) {
-  if (data === null || typeof data !== "object" || Array.isArray(data)) return void 0;
+  if (!isRecord(data)) return void 0;
   const record = data;
   const invocationId = record.invocationId;
   if (typeof invocationId !== "string") return void 0;

package/dist/navigator-public-session.js

@@ -15,6 +15,7 @@ import {
   attachWorkContextPointer,
   navigatorWorkContextFile
 } from "./navigator-work-base.js";
+import { isRecord } from "./unknown-value.js";
 async function resolveNavigatorLedgerHome(context) {
   const { tryHomeFromAkRolesPath } = await import("./activation-ledger-topology.js");
   const runDirectory = runDirectoryFromHostContext(context);
@@ -30,9 +31,6 @@ async function resolveNavigatorLedgerHome(context) {
   return void 0;
 }
 const NAVIGATOR_HOST_RUN_POINTER_ENTRY = "ak-navigator-host-run";
-function exactRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function runIdFromNavigatorDirectory(runDirectory) {
   const entry = basename(runDirectory);
   const suffix = "@navigator";
@@ -43,10 +41,10 @@ function runIdFromNavigatorDirectory(runDirectory) {
 function readNavigatorHostRunPointer(entries) {
   for (let index = entries.length - 1; index >= 0; index -= 1) {
     const entry = entries[index];
-    if (!exactRecord(entry)) continue;
+    if (!isRecord(entry)) continue;
     if (entry.type === "custom" && entry.customType === NAVIGATOR_HOST_RUN_POINTER_ENTRY) {
       const data = entry.data;
-      if (exactRecord(data) && typeof data.runId === "string" && data.runId.trim() !== "") {
+      if (isRecord(data) && typeof data.runId === "string" && data.runId.trim() !== "") {
         return data.runId.trim();
       }
     }

package/dist/navigator-session-contracts.js

@@ -3,6 +3,7 @@ import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { Type } from "typebox";
 import { Value } from "typebox/value";
+import { isRecord, errorText, isEnoent } from "./unknown-value.js";
 const NAVIGATOR_PREPARE_TOOL_NAME = "ak_navigator_prepare";
 const NAVIGATOR_UNAVAILABLE_KEYS = /* @__PURE__ */ new Set([
   "context",
@@ -30,12 +31,9 @@ class NavigatorUnavailableError extends Error {
   }
 }
 function navigatorUnavailableError(source, error, cause = source) {
-  const message = error instanceof Error ? error.message : String(error);
+  const message = errorText(error);
   return error instanceof NavigatorUnavailableError ? error : new NavigatorUnavailableError(source, message, cause, error);
 }
-function exactRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function navigatorProviderFailureFromStatus(status) {
   if (status === 401 || status === 403) return { source: "auth", cause: "auth" };
   if (status === 429) return { source: "quota", cause: "quota" };
@@ -57,7 +55,7 @@ function navigatorProviderFailureFromError(error) {
     if (cursor instanceof NavigatorUnavailableError) {
       return { source: cursor.unavailableSource, cause: cursor.unavailableCause };
     }
-    if (!exactRecord(cursor)) {
+    if (!isRecord(cursor)) {
       cursor = cursor instanceof Error ? cursor.cause : void 0;
       continue;
     }
@@ -75,13 +73,13 @@ function navigatorProviderFailureFromError(error) {
 function navigatorProviderFailureFromDiagnostics(diagnostics) {
   if (!Array.isArray(diagnostics)) return void 0;
   for (const diagnostic of diagnostics) {
-    if (!exactRecord(diagnostic)) continue;
+    if (!isRecord(diagnostic)) continue;
     if (diagnostic.type === "provider_transport_failure") return { source: "transport", cause: "transport" };
-    if (exactRecord(diagnostic.error)) {
+    if (isRecord(diagnostic.error)) {
       const fromCode = navigatorProviderFailureFromCode(diagnostic.error.code);
       if (fromCode !== void 0) return fromCode;
     }
-    if (exactRecord(diagnostic.details)) {
+    if (isRecord(diagnostic.details)) {
       const status = typeof diagnostic.details.status === "number" ? diagnostic.details.status : typeof diagnostic.details.statusCode === "number" ? diagnostic.details.statusCode : void 0;
       const fromStatus = navigatorProviderFailureFromStatus(status);
       if (fromStatus !== void 0) return fromStatus;
@@ -142,12 +140,12 @@ function navigatorModelSettingPath() {
 async function readNavigatorModelSetting(path = navigatorModelSettingPath()) {
   try {
     const raw = JSON.parse(await readFile(path, "utf8"));
-    if (!exactRecord(raw) || typeof raw.model !== "string" || raw.model.trim() === "") {
+    if (!isRecord(raw) || typeof raw.model !== "string" || raw.model.trim() === "") {
       throw new Error("Navigator model setting is malformed");
     }
     return raw.model;
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+    if (isEnoent(error)) {
       throw new Error("Navigator model setting is missing");
     }
     throw error;

package/dist/navigator-work-base.js

@@ -2,6 +2,7 @@ import { existsSync, realpathSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { writeFileAtomically } from "./atomic-write.js";
+import { isEnoent, isRecord } from "./unknown-value.js";
 const NAVIGATOR_WORK_CONTEXT_BASENAME = "work-context.json";
 function navigatorWorkContextFile(sessionDir) {
   return join(sessionDir, NAVIGATOR_WORK_CONTEXT_BASENAME);
@@ -32,9 +33,7 @@ async function persistNavigatorWorkBase(sessionDir, body) {
     const current = await readFile(path, "utf8");
     if (current === next) return path;
   } catch (error) {
-    if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) {
-      throw error;
-    }
+    if (!isEnoent(error)) throw error;
   }
   await writeFileAtomically(path, next);
   return path;
@@ -46,9 +45,7 @@ async function readNavigatorWorkBase(path) {
   try {
     text = await readFile(canonical, "utf8");
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return void 0;
-    }
+    if (isEnoent(error)) return void 0;
     throw error;
   }
   let parsed;
@@ -57,7 +54,7 @@ async function readNavigatorWorkBase(path) {
   } catch {
     return void 0;
   }
-  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
+  if (!isRecord(parsed)) return void 0;
   const record = parsed;
   if (typeof record.subject !== "string" || typeof record.authority !== "string") return void 0;
   if (record.authority.trim() === "") return void 0;
@@ -68,7 +65,7 @@ function jsonObjectFromPrompt(prompt) {
   if (!head.startsWith("{")) return void 0;
   try {
     const parsed = JSON.parse(head);
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
+    if (!isRecord(parsed)) return void 0;
     return parsed;
   } catch {
     return void 0;

package/dist/notary-contracts.js

@@ -1,4 +1,5 @@
 import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME, reviewSubmissionSchema } from "./review-submission.js";
+import { isRecord } from "./unknown-value.js";
 const NOTARY_OUTPUT_TOOL_NAME = REVIEW_SUBMISSION_OUTPUT_TOOL_NAME;
 const NOTARY_SOURCE_RUN_FLAG = {
   name: "ak-notary-source-run",
@@ -15,11 +16,8 @@ const NOTARY_TICKET_FLAG = {
   }
 };
 const notaryOutputSchema = reviewSubmissionSchema;
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function projectLawfulNotaryOutput(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+  return isRecord(value) ? value : void 0;
 }
 function retainNotarySubmission(value) {
   if (value === void 0) return { missing: "arguments" };
@@ -30,7 +28,7 @@ function retainNotarySubmission(value) {
   }
 }
 function validateRecordedNotaryOutput(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+  if (!isRecord(value)) {
     throw new Error("Notary output is not an object");
   }
   return value;

package/dist/package-contracts/auditor-output.js

@@ -3,11 +3,9 @@
  * Lawful explicit releases: converged | continue | escalate.
  */
 import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME, reviewSubmissionSchema } from "../review-submission.js";
+import { isRecord } from "../unknown-value.js";
 export const AUDITOR_OUTPUT_TOOL_NAME = REVIEW_SUBMISSION_OUTPUT_TOOL_NAME;
 export const auditorOutputSchema = reviewSubmissionSchema;
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 /** #836: no field drop — original object is the receipt. */
 export function projectLawfulAuditorOutput(value) {
     return isRecord(value) ? value : undefined;

package/dist/package-contracts/fixer-packet.js

@@ -1,10 +1,11 @@
 import { Type } from "typebox";
 import { Value } from "typebox/value";
+import { isRecord } from "../unknown-value.js";
 const FIXER_PREREQUISITE_ID_PATTERN = "^[A-Za-z0-9][A-Za-z0-9._-]*$";
 const fixerPrerequisiteSchema = Type.Object({
   id: Type.String({ pattern: FIXER_PREREQUISITE_ID_PATTERN }),
   requirement: Type.String({ pattern: "\\S" })
-}, { additionalProperties: false });
+});
 const fixerPrerequisitesSchema = Type.Array(fixerPrerequisiteSchema);
 function causeMessage(cause) {
   if (cause instanceof Error) return cause.message;
@@ -32,13 +33,9 @@ function fail(cause) {
 function parseFailure(value) {
   if (!Array.isArray(value)) fail(new Error("Fixer prerequisites must be a JSON array"));
   for (const entry of value) {
-    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+    if (!isRecord(entry)) {
       fail(new Error("Fixer prerequisite entry must be an object with id and requirement fields"));
     }
-    const keys = Object.keys(entry);
-    if (keys.length !== 2 || !keys.includes("id") || !keys.includes("requirement")) {
-      fail(new Error("Fixer prerequisite entry fields must be exactly id and requirement"));
-    }
     if (typeof entry.id !== "string" || !new RegExp(FIXER_PREREQUISITE_ID_PATTERN).test(entry.id)) {
       fail(new Error(`Fixer prerequisite id violates pattern ${FIXER_PREREQUISITE_ID_PATTERN}`));
     }

package/dist/package-contracts/gatekeeper-output.js

@@ -1,6 +1,7 @@
 import { Type } from "typebox";
 import { openToolObject } from "../open-tool-schema.js";
 import { withTerminatingOutputDeclarations } from "./terminating-infrastructure.js";
+import { isRecord } from "../unknown-value.js";
 const GATEKEEPER_OUTPUT_TOOL_NAME = "ak_gatekeeper_output";
 const gatekeeperDecisionSchema = openToolObject(
   Type.Object({
@@ -18,9 +19,6 @@ const gatekeeperDecisionSchema = openToolObject(
 const gatekeeperOutputSchema = withTerminatingOutputDeclarations(
   gatekeeperDecisionSchema
 );
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function asStringArray(value) {
   if (!Array.isArray(value)) return [];
   return value.filter((item) => typeof item === "string");

package/dist/package-contracts/navigator-output.js

@@ -1,4 +1,5 @@
 import { Type } from "typebox";
+import { isRecord } from "../unknown-value.js";
 import { openToolObject } from "../open-tool-schema.js";
 import { withTerminatingOutputDeclarations } from "./terminating-infrastructure.js";
 const NAVIGATOR_OUTPUT_TOOL_NAME = "ak_navigator_output";
@@ -14,18 +15,17 @@ const navigatorOutputSchema = withTerminatingOutputDeclarations(
 function projectLawfulNavigatorOutput(value) {
   if (value === void 0 || value === null) return void 0;
   if (typeof value === "string") return { prose: value };
-  if (typeof value === "object" && !Array.isArray(value)) {
-    const record = value;
-    if (typeof record.prose === "string") return { prose: record.prose };
-    if (record.prose !== void 0 && record.prose !== null) {
-      return { prose: typeof record.prose === "string" ? record.prose : String(record.prose) };
+  if (isRecord(value)) {
+    if (typeof value.prose === "string") return { prose: value.prose };
+    if (value.prose !== void 0 && value.prose !== null) {
+      return { prose: typeof value.prose === "string" ? value.prose : String(value.prose) };
     }
-    const keys = Object.keys(record);
+    const keys = Object.keys(value);
     if (keys.length === 0) return { prose: "" };
     try {
-      return { prose: JSON.stringify(record) };
+      return { prose: JSON.stringify(value) };
     } catch {
-      return { prose: String(record) };
+      return { prose: String(value) };
     }
   }
   return { prose: String(value) };

package/dist/package-contracts/terminating-infrastructure.js

@@ -1,4 +1,5 @@
 import { Type } from "typebox";
+import { isRecord } from "../unknown-value.js";
 const INFRASTRUCTURE_FAILURE_DECLARATION_KEY = "infrastructureFailure";
 const INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic";
 const infrastructureFailureNested = Type.Object(
@@ -37,15 +38,10 @@ function withTerminatingOutputDeclarations(schema) {
   return object;
 }
 function isInfrastructureFailureDeclaration(parameters) {
-  if (parameters === null || typeof parameters !== "object" || Array.isArray(parameters)) {
-    return false;
-  }
-  const record = parameters;
-  if (!Object.hasOwn(record, INFRASTRUCTURE_FAILURE_DECLARATION_KEY)) return false;
-  const declaration = record[INFRASTRUCTURE_FAILURE_DECLARATION_KEY];
-  if (declaration === null || typeof declaration !== "object" || Array.isArray(declaration)) {
-    return false;
-  }
+  if (!isRecord(parameters)) return false;
+  if (!Object.hasOwn(parameters, INFRASTRUCTURE_FAILURE_DECLARATION_KEY)) return false;
+  const declaration = parameters[INFRASTRUCTURE_FAILURE_DECLARATION_KEY];
+  if (!isRecord(declaration)) return false;
   const diagnostic = declaration[INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY];
   return typeof diagnostic === "string" && diagnostic.trim().length > 0;
 }

package/dist/package-contracts/terminating-tools.js

@@ -19,6 +19,7 @@ import { INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput } from "../
 import { DIARIST_OUTPUT_TOOL_NAME, validateRecordedDiaristOutput } from "../diarist-contracts.js";
 import { SECRETARIAT_OUTPUT_TOOL_NAME } from "../secretariat-contracts.js";
 import { CODER_OUTPUT_TOOL_NAME, FIXER_OUTPUT_TOOL_NAME, validateAcceptedWorkerDetails, } from "./worker-output.js";
+import { isRecord } from "../unknown-value.js";
 export { CODER_OUTPUT_TOOL_NAME, COLLECTOR_OUTPUT_TOOL, FIXER_OUTPUT_TOOL_NAME, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_OUTPUT_TOOL_NAME, MERGER_OUTPUT_TOOL_NAME, validateReviewerIntent, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, validateRecordedAuditorOutput, validateRecordedDiaristOutput, };
 export const TERMINATING_TOOL_NAMES = [...new Set([
         ...PACKAGED_ROLE_REGISTRY.map((entry) => entry.outputTool),
@@ -39,7 +40,7 @@ export class AcceptedDetailsContractError extends CorrectableSubmissionError {
  * Callers that need a typed view may still cast; code must not bounce on status.
  */
 export function validateAcceptedDetails(_toolName, details) {
-    if (details !== null && typeof details === "object" && !Array.isArray(details)) {
+    if (isRecord(details)) {
         return details;
     }
     // Non-object payload still records as empty object rather than rejecting.
@@ -85,8 +86,8 @@ export function deepEqual(a, b) {
             return false;
         return a.every((item, index) => deepEqual(item, b[index]));
     }
-    if (typeof a === "object") {
-        if (typeof b !== "object" || b === null || Array.isArray(b))
+    if (isRecord(a)) {
+        if (!isRecord(b))
             return false;
         const aKeys = Object.keys(a).sort();
         const bKeys = Object.keys(b).sort();

package/dist/public-cli/analyst-run.js

@@ -20,6 +20,7 @@ import { exactUtf8 } from "../exact-utf8.js";
 import { readOrComputeAnalystIssuePage, runAnalyst, analystSweepModeInputSchema, AnalystIssueComputeError, } from "../analyst-entry.js";
 import { CliUsageError } from "./cli-errors.js";
 import { presentControlledFailure, presentStructuralRejection } from "./settlement.js";
+import { errorText } from "../unknown-value.js";
 /**
  * Resolve the issue-query book from cwd git common-dir (same owner as record layer).
  * Non-git cwd fails loud — bare / --ticket both require a book identity.
@@ -63,7 +64,7 @@ export async function buildAnalystIssueModeInputFromPublicArgv(parsed, _ledgerHo
 }
 /**
  * Attachment JSON → library AnalystSweepModeInput via the sole schema (#337).
- * No parallel hand shape; rejects missing/extra/wrong-type fields only.
+ * No parallel hand shape; rejects missing or wrong-type fields only.
  */
 export function parseAnalystSweepModeInputFromJsonValue(value) {
     if (!Value.Check(analystSweepModeInputSchema, value)) {
@@ -94,7 +95,7 @@ export async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPa
         text = exactUtf8(bytes, "analyst sweep attachment");
     }
     catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
+        const detail = errorText(error);
         throw new CliUsageError(detail, { cause: error });
     }
     let parsed;

package/dist/public-cli/auto-resume.js

@@ -22,6 +22,7 @@ import { processCancelSignalName } from "./process-cancel.js";
 import { isLawfulTypedTerminalOutcome, formatTerminalResult } from "./terminal.js";
 import { attachRecordedSubmissions, presentFailureTerminal, resolveControlledFailureResumeObservation, } from "./settlement.js";
 import { serializeThrownValue } from "../serialize-thrown-value.js";
+import { errorText, isEnoent } from "../unknown-value.js";
 const dummyIo = { stdout: () => { }, stderr: () => { } };
 /**
  * Persist run-state after a host-turn result, outside the retried dispatch try.
@@ -83,7 +84,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
 export class TurnDispatchedFailure extends Error {
     name = "TurnDispatchedFailure";
     constructor(cause) {
-        super(`settlement failed after the host turn genuinely started: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+        super(`settlement failed after the host turn genuinely started: ${errorText(cause)}`, { cause });
     }
 }
 /** Session custom-entry type carrying the pointer to one dispatch error file. */
@@ -111,7 +112,7 @@ export async function ensureRealArtifactsDirectory(runDirectory) {
         }
     }
     catch (error) {
-        if (!isMissingPathError(error))
+        if (!isEnoent(error))
             throw error;
         await mkdir(artifactsDir, { recursive: true });
         const created = await lstat(artifactsDir);
@@ -121,12 +122,6 @@ export async function ensureRealArtifactsDirectory(runDirectory) {
     }
     return artifactsDir;
 }
-/** ENOENT identity shared with settlement.ts's hardened audit-artifact path. */
-function isMissingPathError(error) {
-    return (error instanceof Error &&
-        "code" in error &&
-        error.code === "ENOENT");
-}
 /** Cycle- and bigint-safe JSON replacer so serialization itself cannot drop data. */
 function jsonSafeReplacer() {
     const seen = new WeakSet();

package/dist/public-cli/cli.js

@@ -25,6 +25,7 @@ import { runPublicAnalyst } from "./analyst-run.js";
 import { AUTO_RESUME_LIMIT, peekRoleRunRole, } from "./run-lifecycle.js";
 import { INTERNAL_ROLE_ENTRYPOINT_RELATIVE, PUBLIC_CALLABLE_ROLES, isPublicCallableRole, isPublicCliSupportCommand, isPublicConfigurableSeat, listHelpCapabilities, } from "./registry.js";
 import { formatCliDiagnostic, formatErrorCauseDetail, presentStructuralRejection, } from "./settlement.js";
+import { errorText } from "../unknown-value.js";
 export { buildExplicitInternalActivationArgs, resolveInternalRoleEntrypoint, } from "../pi/role-turn-host.js";
 export { CliUsageError } from "./cli-errors.js";
 /**
@@ -305,7 +306,7 @@ function requireLegalEngineModel(model) {
         return assertLegalEngineModel(model);
     }
     catch (error) {
-        throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+        throw new CliUsageError(errorText(error), { cause: error });
     }
 }
 function requireLegalEngineName(name) {
@@ -313,7 +314,7 @@ function requireLegalEngineName(name) {
         return assertLegalEngineName(name);
     }
     catch (error) {
-        throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+        throw new CliUsageError(errorText(error), { cause: error });
     }
 }
 /** Callable seats own persistent call axes (checked against the callable predicate). */
@@ -328,7 +329,7 @@ function loadAndValidateConfig(home, packageRoot) {
             validatePublicCliConfigAxes(config, packageRoot);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         return config;
     });
@@ -590,7 +591,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatHost(config, seat, unset ? undefined : args[2]);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -612,7 +613,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngine(config, seat, name, engineModel);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -629,7 +630,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngine(config, seat, undefined);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -648,7 +649,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngineModel(config, seat, model);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));
@@ -665,7 +666,7 @@ async function runConfigCommand(args, home, packageRoot, io) {
             config = setPersistentSeatEngineModel(config, seat, undefined);
         }
         catch (error) {
-            throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
+            throw new CliUsageError(errorText(error), { cause: error });
         }
         await savePublicCliConfig(config, home);
         io.stdout(renderConfig(config, home));

package/dist/public-cli/config.js

@@ -19,6 +19,7 @@ import {
   isPublicConfigurableSeat,
   seatModelOnly
 } from "./registry.js";
+import { isEnoent, isRecord } from "../unknown-value.js";
 const GATE_OFFICER_SEATS = PUBLIC_ROLE_RECORDS.flatMap(
   (record) => "provinceConfig" in record && record.provinceConfig === true ? [record.role] : []
 );
@@ -37,9 +38,7 @@ async function loadPublicCliConfig(home) {
     const raw = await readFile(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return { seats: {} };
-    }
+    if (isEnoent(error)) return { seats: {} };
     throw error;
   }
 }
@@ -260,7 +259,7 @@ function serializePublicCliConfig(config) {
   };
 }
 function parsePublicCliConfig(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+  if (!isRecord(value)) {
     throw new Error("public CLI config must be an object");
   }
   const record = value;
@@ -270,7 +269,7 @@ function parsePublicCliConfig(value) {
   }
   const unknownSeats = {};
   if (record.unknownSeats !== void 0) {
-    if (record.unknownSeats === null || typeof record.unknownSeats !== "object" || Array.isArray(record.unknownSeats)) {
+    if (!isRecord(record.unknownSeats)) {
       throw new Error("public CLI config.unknownSeats must be an object");
     }
     Object.assign(unknownSeats, record.unknownSeats);
@@ -283,7 +282,7 @@ function parsePublicCliConfig(value) {
   if (record.seats === void 0) {
     return withOpaque({});
   }
-  if (record.seats === null || typeof record.seats !== "object" || Array.isArray(record.seats)) {
+  if (!isRecord(record.seats)) {
     throw new Error("public CLI config.seats must be an object");
   }
   const seats = {};
@@ -299,7 +298,7 @@ function parsePublicCliConfig(value) {
   return withOpaque(seats);
 }
 function parseSeatModelConfig(value, seat) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+  if (!isRecord(value)) {
     throw new Error(`config seat ${seat} must be an object`);
   }
   const raw = value;
@@ -481,7 +480,7 @@ function listRolesForDisplay(config, credentials, invocation) {
   return effectiveSeatConfigurations(config, credentials, invocation);
 }
 function credentialProvidersFromAuthData(data) {
-  if (data === null || typeof data !== "object" || Array.isArray(data)) {
+  if (!isRecord(data)) {
     return { "openai-codex": false, xai: false };
   }
   const record = data;
@@ -498,9 +497,7 @@ async function loadCredentialProviders(agentDir) {
     const raw = await readFile(join(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
-      return { "openai-codex": false, xai: false };
-    }
+    if (isEnoent(error)) return { "openai-codex": false, xai: false };
     throw error;
   }
 }

package/dist/public-cli/countersign-run.js

@@ -1,7 +1,5 @@
 import { readableGateItem } from "../readable-gate-item.js";
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord } from "../unknown-value.js";
 function isEscalatePayload(payload) {
     if (!isRecord(payload))
         return false;