@akagilnc/pi-workflow-roles 0.1.5478 → 0.1.5504

package/dist/navigator-public-session.js

@@ -1,6 +1,6 @@
 import { existsSync } from "node:fs";
 import { basename } from "node:path";
-import { sitianReport } from "./sitian-facade.js";
+import { sitianReportSafe } from "./host-session-record.js";
 import {
   NavigatorUnavailableError,
   navigatorProviderFailureFromPublicTerminal,
@@ -9,6 +9,7 @@ import {
   parseNavigatorModelSetting
 } from "./navigator-session-contracts.js";
 import { runDirectoryFromHostContext } from "./host-contracts.js";
+import { parseRunLeaf } from "./role-run-placement.js";
 import { CliUsageError } from "./public-cli/cli-errors.js";
 import { isNavigatorSeat } from "./packaged-role-registry.js";
 import {
@@ -32,11 +33,9 @@ async function resolveNavigatorLedgerHome(context) {
 }
 const NAVIGATOR_HOST_RUN_POINTER_ENTRY = "ak-navigator-host-run";
 function runIdFromNavigatorDirectory(runDirectory) {
-  const entry = basename(runDirectory);
-  const suffix = "@navigator";
-  if (!entry.endsWith(suffix)) return void 0;
-  const runId = entry.slice(0, entry.length - suffix.length);
-  return runId.length > 0 ? runId : void 0;
+  const parsed = parseRunLeaf(basename(runDirectory));
+  if (parsed === void 0 || parsed.role !== "navigator") return void 0;
+  return parsed.runId;
 }
 function readNavigatorHostRunPointer(entries) {
   for (let index = entries.length - 1; index >= 0; index -= 1) {
@@ -188,17 +187,14 @@ function createNativeNavigatorSessionFactory(deps) {
       routePlaybookReadFailure: () => routePlaybookReadFailure,
       appendEntry: (customType, data) => {
         sessionManager.appendCustomEntry(customType, data);
-        try {
-          sitianReport({
-            level: "event",
-            kind: "attendance",
-            cwd: context.cwd,
-            sessionParent: sessionManager.getSessionFile(),
-            payload: { customType, data },
-            source: "navigator-public-session"
-          });
-        } catch {
-        }
+        sitianReportSafe({
+          level: "event",
+          kind: "attendance",
+          cwd: context.cwd,
+          sessionParent: sessionManager.getSessionFile(),
+          payload: { customType, data },
+          source: "navigator-public-session"
+        });
       },
       entries: () => sessionManager.getEntries(),
       setModel: async (next, nextThinking) => {

package/dist/notary-source-run.js

@@ -8,6 +8,7 @@ import { lstat, realpath } from "node:fs/promises";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import { activationBookDirectory, physicalPathIdentity, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
 import { findRunDirectoryById, readRoleRunIdentity } from "./public-cli/run-lifecycle.js";
+import { formatRunLeaf, parseRunLeaf } from "./role-run-placement.js";
 async function readRetainedIdentity(runDirectory) {
     try {
         return await readRoleRunIdentity(runDirectory);
@@ -20,21 +21,12 @@ async function readRetainedIdentity(runDirectory) {
         });
     }
 }
-// Run directory leaf: <runId>@<role>. Production uses uuidv7 runIds; offline tracers
-// may use deterministic non-uuid leaves. Role token stays identifier-shaped.
-const RUN_DIR_NAME = /^([A-Za-z0-9][A-Za-z0-9._-]*)@([A-Za-z][A-Za-z0-9_-]*)$/;
 export class NotarySourceRunError extends Error {
     constructor(message, options) {
         super(message, options);
         this.name = "NotarySourceRunError";
     }
 }
-function parseRunDirectoryName(name) {
-    const match = RUN_DIR_NAME.exec(name);
-    if (match === null)
-        return undefined;
-    return { runId: match[1], role: match[2] };
-}
 async function requireRunDirectory(candidate, display) {
     let real;
     try {
@@ -53,7 +45,7 @@ async function requireRunDirectory(candidate, display) {
     if (!stat.isDirectory()) {
         throw new NotarySourceRunError(`notary --source-run must be a run directory: ${display}`);
     }
-    const identity = parseRunDirectoryName(basename(real));
+    const identity = parseRunLeaf(basename(real));
     if (identity === undefined) {
         throw new NotarySourceRunError(`notary --source-run must be named <runId>@<role>: ${basename(real)}`);
     }
@@ -78,14 +70,14 @@ export async function resolveNotarySourceRunLocator(options) {
     const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
     const bookRunsRoot = join(bookDirectory, "runs");
     let candidate;
-    const bare = parseRunDirectoryName(raw);
+    const bare = parseRunLeaf(raw);
     if (bare !== undefined && !raw.includes("/") && !raw.includes("\\")) {
         candidate = (await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role))
-            ?? join(bookRunsRoot, `${bare.runId}@${bare.role}`);
+            ?? join(bookRunsRoot, formatRunLeaf(bare.runId, bare.role));
     }
     else {
         candidate = isAbsolute(raw) ? raw : resolve(options.projectRoot, raw);
-        const identity = parseRunDirectoryName(basename(candidate));
+        const identity = parseRunLeaf(basename(candidate));
         const subjectDirectory = dirname(dirname(candidate));
         const isLegacyUnboundLocator = identity !== undefined &&
             basename(dirname(candidate)) === "runs" &&
@@ -96,7 +88,7 @@ export async function resolveNotarySourceRunLocator(options) {
         }
     }
     const real = await requireRunDirectory(candidate, raw);
-    const identity = parseRunDirectoryName(basename(real));
+    const identity = parseRunLeaf(basename(real));
     const bookIdentity = physicalPathIdentity(bookDirectory);
     const parentIdentity = physicalPathIdentity(dirname(real));
     const subjectBookIdentity = physicalPathIdentity(dirname(dirname(dirname(real))));
@@ -128,7 +120,7 @@ export async function resolveNotarySourceRunLocator(options) {
 /** Internal activation loader: path is the admitted absolute source run directory. */
 export async function loadNotarySourceRunLocator(path) {
     const real = await requireRunDirectory(path, path);
-    const identity = parseRunDirectoryName(basename(real));
+    const identity = parseRunLeaf(basename(real));
     const runState = await readRetainedIdentity(real);
     if (runState === undefined) {
         throw new NotarySourceRunError("notary source-run lacks retained run-state identity");

package/dist/packaged-role-registry.js

@@ -297,8 +297,6 @@ const PUBLIC_ROLE_RECORDS = [
     sourceRunStored: "raw",
     argvResult: "source-run",
     sameParent: "source-locator",
-    /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-    skipGateOnInfrastructureStage: true,
     /** 符宝郎 is a review officer and inherits the gatekeeper model. */
     reviewOfficer: true,
     provinceConfig: true,
@@ -406,8 +404,6 @@ const PUBLIC_ROLE_RECORDS = [
     sameParent: "gate-pointer",
     /** Resume restores an optional source-run path onto the admitted face. */
     resumeSourcePath: true,
-    /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-    skipGateOnInfrastructureStage: true,
     /** 台院 is a review officer and inherits the gatekeeper model. */
     reviewOfficer: true,
     provinceConfig: true,
@@ -439,8 +435,6 @@ const PUBLIC_ROLE_RECORDS = [
     presentSettled: "always",
     summonResume: true,
     admission: "instruction",
-    /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-    skipGateOnInfrastructureStage: true,
     sameParent: "none",
     /** Province model root. Officers name this seat via modelInheritsFrom. */
     provinceConfig: true,
@@ -608,11 +602,6 @@ function packagedAuditToolName(role) {
   if (record === void 0 || !("auditTool" in record)) return void 0;
   return record.auditTool;
 }
-function packagedSkipsGateOnInfrastructureStage(stage) {
-  return typeof stage === "string" && PUBLIC_ROLE_RECORDS.some(
-    (record) => "skipGateOnInfrastructureStage" in record && record.skipGateOnInfrastructureStage === true && record.role === stage
-  );
-}
 function packagedDurableOfficerEntry(officer) {
   return typeof officer === "string" && PUBLIC_ROLE_RECORDS.some(
     (record) => "durableOfficerEntry" in record && record.durableOfficerEntry === true && record.role === officer
@@ -699,7 +688,6 @@ export {
   packagedRoleOutputTool,
   packagedRolePhaseFlag,
   packagedRoleSessionMaterials,
-  packagedSkipsGateOnInfrastructureStage,
   packagedStoresSourceRunRaw,
   packagedSubjectChoices
 };

package/dist/pi/durable-principal.js

@@ -1,7 +1,6 @@
-import { join } from "node:path";
 import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
 import { resolveActivationLedgerHome } from "../activation-ledger-topology.js";
-import { roleRunPlacement } from "../role-run-placement.js";
+import { roleRunPlacement, sessionFileIn } from "../role-run-placement.js";
 function encode(coordinates) {
     return coordinates;
 }
@@ -47,7 +46,7 @@ export const piDurablePrincipalAuthority = {
             sessionDirectory: record.sessionDirectory,
             sessionFile: typeof record.sessionFile === "string" && record.sessionFile.trim() !== ""
                 ? record.sessionFile
-                : join(record.sessionDirectory, "session.jsonl"),
+                : sessionFileIn(record.sessionDirectory),
         };
     },
 };

package/dist/pi/role-turn-host.js

@@ -5,7 +5,7 @@
  */
 import { execFile, spawn } from "node:child_process";
 import { constants } from "node:fs";
-import { access, appendFile, readFile, realpath } from "node:fs/promises";
+import { access, appendFile, realpath } from "node:fs/promises";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
@@ -14,6 +14,7 @@ import { ExplicitInternalActivationError } from "../host-contracts.js";
 import { applyEngineChildEnv, ENGINE_MODEL_FLAG_NAME, normalizeEngineName } from "../engine-detour.js";
 import { projectActivationFlags } from "../role-activation-flags.js";
 import { encodeUserDialogueStdin } from "../user-dialogue-stdin.js";
+import { readStrictPiSessionJsonl } from "../ledger-session-read.js";
 import { projectThrownFailureLeaf, retainPackageFault } from "../public-cli/settlement.js";
 import { describeErrorIdentity } from "../public-cli/run-lifecycle.js";
 import { RECEIPT_DELIVERY_LIMIT_ENV } from "../receipt-delivery-policy.js";
@@ -361,28 +362,41 @@ export function createPiRoleTurnHost(config) {
     };
 }
 import { sitianReport } from "../sitian-facade.js";
+/** Last non-session entry id. Session headers are not parents of custom lines. */
+export function piSessionCustomParentId(entries) {
+    let parentId = null;
+    for (const entry of entries) {
+        if (typeof entry.id === "string" && entry.type !== "session")
+            parentId = entry.id;
+    }
+    return parentId;
+}
+/** One Pi custom JSONL line: type, customType, data, id, parentId, timestamp. */
+export function formatPiSessionCustomEntry(input) {
+    return `${JSON.stringify({
+        type: "custom",
+        customType: input.customType,
+        data: input.data,
+        id: randomUUID(),
+        parentId: input.parentId,
+        timestamp: input.timestamp,
+    })}\n`;
+}
 /**
  * Append one custom JSONL entry to the durable principal's session file.
  * Pi session codec only — AK artifact O_EXCL retention stays in public-cli.
+ * Read is raw JSON.parse (SyntaxError propagates). Sitian full-traversal stays elsewhere.
  */
 export async function appendPiSessionCustomEntry(authority, principal, customType, data) {
     const { sessionFile } = authority.decode(principal);
-    const text = await readFile(sessionFile, "utf8");
-    let parentId = null;
-    for (const line of text.trim().split("\n").filter(Boolean)) {
-        const entry = JSON.parse(line);
-        if (typeof entry.id === "string" && entry.type !== "session")
-            parentId = entry.id;
-    }
+    const entries = await readStrictPiSessionJsonl(sessionFile);
     const timestamp = new Date().toISOString();
-    const pointerLine = `${JSON.stringify({
-        type: "custom",
+    const pointerLine = formatPiSessionCustomEntry({
         customType,
         data,
-        id: randomUUID(),
-        parentId,
+        parentId: piSessionCustomParentId(entries),
         timestamp,
-    })}\n`;
+    });
     await appendFile(sessionFile, pointerLine, "utf8");
     sitianReport({
         level: "event",

package/dist/public-cli/instruction-seat-run.js

@@ -33,7 +33,7 @@ import { presentControlledFailure, packageFaultNoteFor, prepareSummonsResumeMate
 import { presentTerminal } from "./auto-resume.js";
 import { buildAutoResumeContinuationPrompt, loadResumablePublicRole, markRunAdmitted, parentRunPathFromGatePointerInstruction, readCurrentCourt, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
-import { presentStructuralRejection, readBoundSessionEntries, attachPostAuditProjection, trySettlePublicSeat, } from "./settlement.js";
+import { presentStructuralRejection, readBoundSessionEntries, attachPostAuditCountersignFact, trySettlePublicSeat, } from "./settlement.js";
 import { warnMissingMethodSkills } from "./machine-method-skills.js";
 import { formatTerminalResult, isLawfulTypedTerminalOutcome, } from "./terminal.js";
 import { admittedSeatTurnDetails, projectRoleTurnRequest, requiredMethodSkills, } from "./turn-request.js";
@@ -1151,11 +1151,11 @@ async function auditSubmittedRole(turn, env, io, resumedOfficer, passedReceipt)
         }
     }
     // The turn already settled this court (payloads, usage, autoResumeCount, history).
-    // Audit only adds gate rounds and, for 中书省, the officer fact. A second
-    // settle would republish the same attempt.
+    // Audit only adds, for 中书省, the officer fact. A second settle would
+    // republish the same attempt.
     if (turn.terminal === undefined)
         throw new Error(`audited ${admitted.role} submission did not settle`);
-    const terminal = await attachPostAuditProjection(admitted, env.principalAuthority, turn.terminal, packageFaultScope(admitted, env, io));
+    const terminal = await attachPostAuditCountersignFact(admitted, env.principalAuthority, turn.terminal, packageFaultScope(admitted, env, io));
     turn = { ...turn, terminal };
     await presentTerminal(terminal, { ...io, omitFailureStderrDiagnostic: true }, admitted.runDirectory);
     return turn;

package/dist/public-cli/invocation.js

@@ -9,9 +9,9 @@ import { tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { activationBookDirectory, ensureRealDirectoryTree, homeFromRunDirectory, pathContainedIn, resolveActivationLedgerHome, } from "../activation-ledger-topology.js";
 import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
-import { ensureRoleRunDirectory, ensureRoleRunPlacement, isUnboundRunDirectory, listBookRunDirectories, roleRunArtifactsDirectory, roleRunPlacement, } from "../role-run-placement.js";
+import { ensureRoleRunDirectory, ensureRoleRunPlacement, formatRunLeaf, isUnboundRunDirectory, listBookRunDirectories, roleRunArtifactsDirectory, roleRunPlacement, } from "../role-run-placement.js";
 import { packagedAdmittedSubject, packagedArgvResult, packagedBareToken, packagedBaseIsRevision, packagedEmitsAuthorityRefs, packagedPublicInstructionSubject, packagedRoleMetadata, packagedStoresSourceRunRaw, packagedSubjectChoices, } from "../packaged-role-registry.js";
-import { isSafePositiveTicketNumber, readBoardTicketNumber, requireSafePositiveTicketNumber, } from "../run-ticket-number.js";
+import { isSafePositiveTicketNumber, parseTicketNumber, readBoardTicketNumber, requireSafePositiveTicketNumber, } from "../run-ticket-number.js";
 import { rewriteRunDirectoryPathFields, rewriteRunDirectoryPathValue, } from "../role-run-relocation.js";
 import { loadDoctorCase, } from "../doctor-evidence.js";
 import { emptyCollectorManifest, loadCollectorManifest, parseCollectorPrNumber, parseCollectorRepository, } from "../collector-config.js";
@@ -230,7 +230,7 @@ export async function relocateAdmittedRunToTicket(admitted, authority, heldLease
         for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
             if (typeof childRunId !== "string")
                 continue;
-            const childDirectory = join(dirname(oldRunDirectory), `${childRunId}@diarist`);
+            const childDirectory = join(dirname(oldRunDirectory), formatRunLeaf(childRunId, "diarist"));
             // A child that already filed under a ticket keeps its own assertion.
             if (!existsSync(childDirectory))
                 continue;
@@ -334,17 +334,16 @@ export async function recordLaunchedRolePackageIdentity(runDirectory, identity)
         entryMode: identity.entryMode,
     });
 }
+/** Trim, then the shared ticket spelling. Callers keep their own diagnostic text. */
+function rejectUnlessTicketNumber(raw, message) {
+    const parsed = parseTicketNumber(raw.trim());
+    if (parsed === undefined)
+        throw new CliUsageError(message);
+    return parsed;
+}
 /** Positive ticket number for analyst query-scope face (and shared integer parse). */
 export function parsePositiveTicketNumber(raw, flag) {
-    const trimmed = raw.trim();
-    if (!ANALYST_TICKET_NUMBER_PATTERN.test(trimmed)) {
-        throw new CliUsageError(`${flag} must be a positive integer, got ${raw}`);
-    }
-    const value = Number(trimmed);
-    if (!Number.isSafeInteger(value) || value < 1) {
-        throw new CliUsageError(`${flag} must be a positive integer, got ${raw}`);
-    }
-    return value;
+    return rejectUnlessTicketNumber(raw, `${flag} must be a positive integer, got ${raw}`);
 }
 /**
  * One token scan for public argv.
@@ -957,7 +956,7 @@ export async function admitPublicRole(role, parsed, env, override) {
                     }
                     let caseIdentity;
                     try {
-                        const patient = await loadDoctorCase(caseRunsPath);
+                        const patient = await loadDoctorCase(caseRunsPath, parsed.runs === undefined ? undefined : placed.projectRoot);
                         if (patient.identity.issueNumber !== issueNumber) {
                             throw new CliUsageError(`doctor case issue ${patient.identity.issueNumber} does not match --issue ${issueNumber}`);
                         }
@@ -1411,26 +1410,17 @@ function isGitRemoteMissing(error) {
     const status = error.status;
     return status === 2;
 }
-/** Positive Issue number grammar shared with Doctor case path identity. */
-const DOCTOR_ISSUE_NUMBER_PATTERN = /^[1-9]\d*$/;
-/** Match retained Doctor case runs roots (ADR 0017 / loadDoctorCase). */
-/** Canonical Doctor case: `<book>/<ticket>/runs`. Legacy `issues/<n>/runs` is read-only compat. */
-const DOCTOR_CASE_RUNS_PATH_PATTERN = /\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/;
 /**
  * Parse a positive Issue number for public Doctor admission.
  * Leading zeros and non-integers are structural rejects.
  */
 export function parseDoctorIssueNumber(raw) {
-    const trimmed = raw.trim();
-    if (!DOCTOR_ISSUE_NUMBER_PATTERN.test(trimmed)) {
-        throw new CliUsageError(`doctor --issue must be a positive integer, got ${raw}`);
-    }
-    return Number(trimmed);
+    return rejectUnlessTicketNumber(raw, `doctor --issue must be a positive integer, got ${raw}`);
 }
 /**
  * Resolve the retained Doctor case runs root from Issue identity.
- * Default is the #78 book locator; optional --runs must stay project-confined
- * and match Doctor case grammar for the same issue number.
+ * Default is the #78 book locator; optional --runs must stay project-confined.
+ * loadDoctorCase owns retained-root grammar at IO; admission matches its case identity.
  */
 export async function resolveDoctorCaseRunsPath(options) {
     const ledgerHome = resolveActivationLedgerHome(options.home);
@@ -1460,14 +1450,6 @@ export async function resolveDoctorCaseRunsPath(options) {
         const detail = errorText(error);
         throw new CliUsageError(`doctor --runs is not a readable retained runs root: ${detail}`, { cause: error });
     }
-    const normalized = real.split(sep).join("/");
-    const match = normalized.match(DOCTOR_CASE_RUNS_PATH_PATTERN);
-    if (!match) {
-        throw new CliUsageError("doctor --runs must be an .ak-roles/books/<book>/<n>/runs directory");
-    }
-    if (Number(match[1]) !== options.issueNumber) {
-        throw new CliUsageError(`doctor --runs issue ${match[1]} does not match --issue ${options.issueNumber}`);
-    }
     return real;
 }
 /** Frozen Skill arg projection shared by initial and resume (never reverse-parsed). */
@@ -1501,23 +1483,13 @@ export async function deriveMergerEnvelopeFromActiveMerge(projectRoot, gitState
         resolutionScope,
     });
 }
-const ANALYST_TICKET_NUMBER_PATTERN = /^[1-9]\d*$/;
 /**
  * Parse a positive ticket / issue number for public analyst admission.
  * Leading zeros and non-integers are structural rejects (same face as #176).
  * `flag` names the actual argv face in diagnostics (cohort group lists reuse this).
  */
 export function parseAnalystTicketNumber(raw, flag = "--ticket") {
-    const trimmed = raw.trim();
-    if (!ANALYST_TICKET_NUMBER_PATTERN.test(trimmed)) {
-        throw new CliUsageError(`analyst ${flag} must be a positive integer, got ${raw}`);
-    }
-    const value = Number(trimmed);
-    // Digit-only strings beyond MAX_SAFE_INTEGER round or become Infinity — reject.
-    if (!Number.isSafeInteger(value) || value < 1) {
-        throw new CliUsageError(`analyst ${flag} must be a positive integer, got ${raw}`);
-    }
-    return value;
+    return rejectUnlessTicketNumber(raw, `analyst ${flag} must be a positive integer, got ${raw}`);
 }
 /**
  * Parse one cohort issue token: bare positive integer or `book:N`.
@@ -1532,7 +1504,7 @@ export function parseAnalystCohortIssueToken(raw, flag) {
     const sep = trimmed.lastIndexOf(":");
     if (sep > 0) {
         const rhs = trimmed.slice(sep + 1);
-        if (ANALYST_TICKET_NUMBER_PATTERN.test(rhs)) {
+        if (parseTicketNumber(rhs) !== undefined) {
             const bookKey = trimmed.slice(0, sep);
             if (bookKey.trim() === "") {
                 throw new CliUsageError(`${flag} book:N requires a non-empty book key, got ${raw}`);