@akagilnc/pi-workflow-roles 0.1.5504 → 0.1.5571

package/src/sitian-reader.ts

@@ -6,7 +6,6 @@
  * - Zero whitewashing, zero deduplication.
  * - Canonical rows after malformed lines are always reachable.
  */
-import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 
 import type {
@@ -15,46 +14,77 @@ import type {
   SitianRecord,
 } from "./sitian-contracts.ts";
 
-import { isRecord, errorText } from "./unknown-value.ts";
+import { isRecord, errorText, isEnoent } from "./unknown-value.ts";
 
-/** Read a Sitian record volume with full traversal and non-destructive diagnostics. */
-export async function readSitianRecords(recordFile: string): Promise<SitianReadResult> {
-  if (!existsSync(recordFile)) {
-    return { records: [], diagnostics: [] };
+/** One non-blank JSONL line through the sole Sitian decoder. Blank → undefined. */
+export type SitianLineDecode =
+  | { readonly ok: true; readonly record: SitianRecord }
+  | { readonly ok: false; readonly diagnostic: SitianMalformedDiagnostic };
+
+/**
+ * Decode one Sitian JSONL line. Callers that must keep original bytes use this
+ * with the source line; volume readers fold it into records + diagnostics.
+ */
+export function decodeSitianRecordLine(
+  line: string,
+  lineNumber: number,
+): SitianLineDecode | undefined {
+  if (!line.trim()) return undefined;
+  try {
+    const parsed = JSON.parse(line);
+    if (isRecord(parsed)) {
+      return { ok: true, record: parsed as unknown as SitianRecord };
+    }
+    const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
+    return {
+      ok: false,
+      diagnostic: {
+        kind: "malformed",
+        line: lineNumber,
+        raw: line,
+        error: `expected JSON object, got ${typeDesc}`,
+      },
+    };
+  } catch (error) {
+    return {
+      ok: false,
+      diagnostic: {
+        kind: "malformed",
+        line: lineNumber,
+        raw: line,
+        error: errorText(error),
+      },
+    };
   }
+}
 
-  const text = await readFile(recordFile, "utf8");
+/**
+ * Sole decoder for one Sitian JSONL volume's text. Sync so the run-dossier
+ * renderer and the async file reader share one implementation.
+ */
+export function parseSitianRecordText(text: string): SitianReadResult {
   const lines = text.split("\n");
-
   const records: SitianRecord[] = [];
   const diagnostics: SitianMalformedDiagnostic[] = [];
 
   for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index]!;
-    if (!line.trim()) continue;
-
-    try {
-      const parsed = JSON.parse(line);
-      if (isRecord(parsed)) {
-        records.push(parsed as unknown as SitianRecord);
-      } else {
-        const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
-        diagnostics.push({
-          kind: "malformed",
-          line: index + 1,
-          raw: line,
-          error: `expected JSON object, got ${typeDesc}`,
-        });
-      }
-    } catch (error) {
-      diagnostics.push({
-        kind: "malformed",
-        line: index + 1,
-        raw: line,
-        error: errorText(error),
-      });
-    }
+    const decoded = decodeSitianRecordLine(lines[index]!, index + 1);
+    if (decoded === undefined) continue;
+    if (decoded.ok) records.push(decoded.record);
+    else diagnostics.push(decoded.diagnostic);
   }
 
   return { records, diagnostics };
 }
+
+/** Read a Sitian record volume with full traversal and non-destructive diagnostics. */
+export async function readSitianRecords(recordFile: string): Promise<SitianReadResult> {
+  // Direct read: only ENOENT is absence. EACCES/EPERM and other IO keep their cause
+  // (Node fs docs: do not existsSync/access before open — #1161 C3).
+  try {
+    return parseSitianRecordText(await readFile(recordFile, "utf8"));
+  } catch (error) {
+    if (isEnoent(error)) return { records: [], diagnostics: [] };
+    throw error;
+  }
+}

package/src/submission-gate.ts

@@ -91,7 +91,7 @@ export function createDefaultGateOfficerSummon(options: {
 }
 
 /**
- * Book a typed pointer under parent session/auditor-roles (archivist-owned write).
+ * Book a typed pointer in the parent run's current.json officers section.
  * Offline mocks without a real session leave no nested volume (lawful zero).
  */
 function bookDirectOfficerPointer(

package/src/ticket-provenance.ts

@@ -3,7 +3,7 @@
  * 一册＝一个追加式 records.jsonl。每轮新投影经司天台 appender 追加为不可变提交；
  * 纯追加、不回读历史去重、不折叠。
  */
-import { readFile, unlink } from "node:fs/promises";
+import { readFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
 
 import {
@@ -18,7 +18,7 @@ import {
 } from "./ledger-session-read.ts";
 import { isSafePositiveTicketNumber } from "./run-ticket-number.ts";
 import { runDirectoryOfSessionFile, sessionFileOf } from "./role-run-placement.ts";
-import { sitianVolumeRecordsFile } from "./sitian-appender.ts";
+import { RUN_HISTORY_FILE } from "./run-dossier-files.ts";
 import { adaptSessionDialogue, nativeEventId } from "./session-dialogue.ts";
 import {
   appendSitianRecordBlock,
@@ -26,6 +26,7 @@ import {
   resolveSitianRecordPath,
   type SitianRecordInput,
 } from "./sitian-facade.ts";
+import { decodeSitianRecordLine } from "./sitian-reader.ts";
 import {
   TICKET_PROVENANCE_KIND,
   type TicketProvenanceBound,
@@ -151,16 +152,28 @@ export async function rehomeUnboundTicketProvenance(
   cwd: string,
   home: string,
 ): Promise<void> {
-  const source = sitianVolumeRecordsFile(runDirectory);
-  let content: string;
+  const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
+
+  // Live staging: ticket-provenance rows in the run's history.jsonl. Append-only
+  // history keeps the staging rows; the ticket-root diary is the home.
+  // Old run/records.jsonl is not a runtime input (#1161); only migration tools read it.
+  let history: string;
   try {
-    content = await readFile(source, "utf8");
+    history = await readFile(join(runDirectory, RUN_HISTORY_FILE), "utf8");
   } catch (error) {
     if (errnoCode(error) === "ENOENT") return;
     throw error;
   }
-  appendSitianRecordBlock(ticketProvenanceRecordInput(ticketNumber, cwd, home), content);
-  await unlink(source);
+  const block = history
+    .split("\n")
+    .flatMap((line, index) => {
+      const decoded = decodeSitianRecordLine(line, index + 1);
+      if (decoded === undefined || !decoded.ok) return [];
+      if (decoded.record.kind !== TICKET_PROVENANCE_KIND) return [];
+      return [`${line}\n`];
+    })
+    .join("");
+  if (block !== "") appendSitianRecordBlock(ticketInput, block);
 }
 
 /**

package/src/ticket-trajectory.ts

@@ -6,7 +6,7 @@
  *
  * Station resolution (four-layer fallback):
  *   1) terminating tool name inside the session (ak_<role>_output)
- *   2) invocation.json role
+ *   2) current.json invocation role
  *   3) run-directory name heuristic
  *   4) unknown (still listed; never dropped)
  *
@@ -18,6 +18,7 @@
  * write does not advertise refresh. Regeneration faults surface the original
  * cause via handle.closed / stop(). Caller stops the handle.
  */
+import { readSectionSync } from "./run-dossier.ts";
 import { lstat, mkdir, readdir, readFile, realpath } from "node:fs/promises";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -286,9 +287,8 @@ type InvocationInfo = {
 
 async function readInvocation(runDir: string): Promise<InvocationInfo | undefined> {
   try {
-    const raw = await readFile(join(runDir, "invocation.json"), "utf8");
-    const parsed: unknown = JSON.parse(raw);
-    if (!isRecord(parsed)) return undefined;
+    const parsed = readSectionSync(runDir, "invocation");
+    if (parsed === undefined) return undefined;
     const info: InvocationInfo = {};
     if (typeof parsed.role === "string" && parsed.role.trim()) info.role = parsed.role.trim();
     if (typeof parsed.thinking === "string" && parsed.thinking.trim()) info.thinking = parsed.thinking.trim();
@@ -432,7 +432,7 @@ async function parseRunDirectory(runDir: string, ledgerCoord: string): Promise<P
     ...(invocation?.role !== undefined ? { invocationRole: invocation.role } : {}),
   });
 
-  // Session mechanical fields win; invocation.json fills gaps only.
+  // Session mechanical fields win; the invocation section fills gaps only.
   let { model, provider, thinking } = models;
   if (invocation) {
     if (!thinking && invocation.thinking) thinking = invocation.thinking;
@@ -660,12 +660,12 @@ ${stationBlocks || "<p data-empty=\"true\">no runs</p>"}
  * Factory board reuses this — no parallel receipt parser.
  *
  * Book-run attribution (#176 / #859): read typed `ticketNumber` from each run's
- * invocation.json under listBookRunDirectories (flat legacy `runs/` + subject-tree
+ * current.json invocation section under listBookRunDirectories (flat legacy `runs/` + subject-tree
  * `<ticket|unbound>/runs/`). Legacy `issues/<N>/runs` remains a read-only
  * compatibility entrance. Unbound runs never join a ticket.
  */
 
-/** One book run's typed binding projection from invocation.json. */
+/** One book run's typed binding projection from the invocation section. */
 export type FlatRunTicketBinding = {
   readonly runDir: string;
   readonly runFolder: string;
@@ -678,10 +678,10 @@ export type FlatRunTicketBinding = {
 
 /**
  * Book-level run index built once per lane/render and reused per ticket.
- * Pure derived view of book runs' invocation.json files — not a parallel ledger.
+ * Pure derived view of book runs' current.json invocation sections — not a parallel ledger.
  */
 export type TicketTrajectoryBookIndex = {
-  /** ticket number → runs bound via invocation.json ticketNumber. */
+  /** ticket number → runs bound via invocation ticketNumber. */
   readonly runsByTicket: ReadonlyMap<number, readonly FlatRunTicketBinding[]>;
   /** Runs with no typed ticketNumber (unknown/unbound seam). */
   readonly unboundRuns: readonly FlatRunTicketBinding[];
@@ -774,7 +774,7 @@ export async function loadTicketTrajectoryRuns(
     runs.push(parsed);
   }
 
-  // Book runs (flat + subject-tree) bound by typed invocation.json ticketNumber.
+  // Book runs (flat + subject-tree) bound by typed invocation ticketNumber.
   const flatBindings = index.runsByTicket.get(issueNumber) ?? [];
   for (const binding of flatBindings) {
     const resolvedRunDir = resolve(binding.runDir);