@akagilnc/pi-workflow-roles 0.1.5483 → 0.1.5571

package/dist/doctor-evidence.js

@@ -1,6 +1,7 @@
 import { readdir, readFile, realpath, stat } from "node:fs/promises";
 import { dirname, relative, resolve, sep } from "node:path";
 import { sha256Hex } from "./sha256.js";
+import { physicallyContainedIn } from "./activation-ledger-topology.js";
 import { AcceptedDetailsContractError, acceptedFacts, isTerminatingToolName, validateAcceptedDetails } from "./package-contracts/terminating-tools.js";
 import { isRecord, isMissingPathError } from "./unknown-value.js";
 async function discoverCaseFiles(root) { const found = []; async function walk(dir, depth) { for (const item of await readdir(dir, { withFileTypes: true })) {
@@ -8,7 +9,7 @@ async function discoverCaseFiles(root) { const found = []; async function walk(d
     if (item.isDirectory()) {
         await walk(path, depth + 1);
     }
-    else if (item.isFile() && (item.name.endsWith(".jsonl") || (item.name === "stderr.log" && depth === 1)))
+    else if (item.isFile() && ((item.name.endsWith(".jsonl") && item.name !== "state.jsonl" && !(item.name === "log.jsonl" && depth === 1)) || (item.name === "log.jsonl" && depth === 1)))
         found.push(path);
 } } await walk(root, 0); return found.sort(); }
 function sourceList(count, sources) { return { count, sources: [...new Set(sources)].sort() }; }
@@ -106,8 +107,11 @@ function deriveSession(content, id) {
     return { session, turns, calls, tokens, statuses, commits };
 }
 /** Read Pi's retained session directory as the sole raw material for one case. */
-export async function loadDoctorCase(runsPath) {
+export async function loadDoctorCase(runsPath, projectRoot) {
     const root = await realpath(runsPath);
+    if (projectRoot !== undefined && !physicallyContainedIn(projectRoot, root)) {
+        throw new Error("doctor --runs escapes the project root");
+    }
     // Canonical <book>/<ticket>/runs; legacy issues/<n>/runs remains read-only compatible.
     const match = root.split(sep).join("/").match(/\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/);
     if (!match)
@@ -118,9 +122,9 @@ export async function loadDoctorCase(runsPath) {
         const id = relative(root, path).split(sep).join("/");
         const bytes = await readFile(path);
         const content = bytes.toString("utf8");
-        const kind = id.endsWith(".jsonl") ? "session" : "stderr";
+        const kind = id.split("/").length === 2 && id.endsWith("/log.jsonl") ? "log" : "session";
         evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
-        if (kind === "stderr")
+        if (kind === "log")
             continue;
         const result = deriveSession(content, id);
         sessions.push(result.session);

package/dist/engine-detour-usage.js

@@ -15,9 +15,11 @@
  * `ak-role resume`) mints a new one. Never courtAttemptId, never Pi session
  * toolResult join keys, and never a detour-owned sidecar file.
  */
+import { readPageSync, RUN_LOG_FILE } from "./run-dossier.js";
 import { randomUUID } from "node:crypto";
 import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { join } from "node:path";
+export { runDirectoryFromSessionDirectory, sessionFileIn as sessionFileFromSessionDirectory, } from "./role-run-placement.js";
 import { ENGINE_DETOUR_TOOL_NAME } from "./engine-detour.js";
 import { readSitianRecords, resolveSitianRecordPath, sitianReport, } from "./sitian-facade.js";
 import { isRecord } from "./unknown-value.js";
@@ -26,11 +28,11 @@ export const ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
 /** decisiveFacts key — name states detour-tool scope, not full engine usage. */
 export const ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
 /**
- * Run-relative sitian volume path for one detour call.
+ * Run-relative path of the log that holds one detour call's record.
  * Openable once the run directory is known from the terminal's run id.
  * Contains no runId bytes itself (#108 + #537).
  */
-export const ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = `session/${ENGINE_DETOUR_CALL_KIND}/records.jsonl`;
+export const ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = RUN_LOG_FILE;
 /** stdout UTF-8 byte length (ticket-frozen metric; empty stdout is real 0). */
 export function engineDetourStdoutByteLength(stdout) {
     return Buffer.byteLength(stdout, "utf8");
@@ -180,19 +182,11 @@ export async function readEngineDetourToolUsage(input) {
     const calls = Array.from(callsByToolCallId.values());
     return { callCount: calls.length, calls };
 }
-/** One shared invocation.json reader (ENOENT → undefined; other errors propagate). */
+/** One shared state.jsonl invocation-row reader (absent → undefined; other errors propagate). */
 function readInvocationRecord(runDirectory) {
-    try {
-        const raw = JSON.parse(readFileSync(join(runDirectory, "invocation.json"), "utf8"));
-        return isRecord(raw) ? raw : undefined;
-    }
-    catch (error) {
-        if (error?.code === "ENOENT")
-            return undefined;
-        throw error;
-    }
+    return readPageSync(runDirectory, "invocation");
 }
-/** True when invocation.json carries a non-empty engine axis. */
+/** True when the invocation section carries a non-empty engine axis. */
 export async function readInvocationEngineMounted(runDirectory) {
     const raw = readInvocationRecord(runDirectory);
     if (raw === undefined)
@@ -212,14 +206,6 @@ export function withEngineDetourToolUsageFact(outcome, usage) {
         },
     };
 }
-/** runDirectory owning a session directory (.../runs/<id>@role/session). */
-export function runDirectoryFromSessionDirectory(sessionDirectory) {
-    return dirname(sessionDirectory);
-}
-/** session.jsonl under a session directory. */
-export function sessionFileFromSessionDirectory(sessionDirectory) {
-    return join(sessionDirectory, "session.jsonl");
-}
 /**
  * Mint one public-invocation scope id.
  * Call once at the public-entry boundary — never inside the auto-resume loop.