@akagilnc/pi-workflow-roles 0.1.5762 → 0.1.5797

package/dist/public-cli/invocation.js

@@ -8,7 +8,8 @@ import { readFile, realpath, rename, writeFile, } from "node:fs/promises";
 import { dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { activationBookDirectory, ensureRealDirectoryTree, homeFromRunDirectory, pathContainedIn, resolveActivationLedgerHome, } from "../activation-ledger-topology.js";
 import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
-import { ensureRoleRunDirectory, ensureRoleRunPlacement, formatRunLeaf, isUnboundRunDirectory, listBookRunDirectories, roleRunPlacement, } from "../role-run-placement.js";
+import { ensureRoleRunDirectory, ensureRoleRunPlacement, isUnboundRunDirectory, listBookRunDirectories, roleRunPlacement, sessionDirectoryOf, sessionFileIn, } from "../role-run-placement.js";
+import { relocateTicketProgressForLeg } from "../ticket-progress.js";
 import { packagedAdmittedSubject, packagedArgvResult, packagedBareToken, packagedBaseIsRevision, packagedEmitsAuthorityRefs, packagedPublicInstructionSubject, packagedRoleMetadata, packagedStoresSourceRunRaw, packagedSubjectChoices, } from "../packaged-role-registry.js";
 import { isSafePositiveTicketNumber, parseTicketNumber, readBoardTicketNumber, requireSafePositiveTicketNumber, } from "../run-ticket-number.js";
 import { rewriteAdmittedRoleRunPage, } from "../role-run-relocation.js";
@@ -243,12 +244,80 @@ export async function recordAdmittedCorrelation(admitted, correlationId) {
     mutable.correlationId = correlationId;
     mutable.correlationIds = correlationIds;
 }
+/**
+ * #1199 R2: registered 起居郎 legs that already belong on this ticket.
+ * Unbound source → whole-leg rename + publish; already under ticket → publish
+ * leftover staging only. No scan of unregistered siblings.
+ */
+async function relocateRegisteredChildDiarists(input) {
+    const childRunIds = readPageSync(input.parentRunDirectory, "admitted")?.childDiaristRunIds;
+    for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
+        if (typeof childRunId !== "string")
+            continue;
+        const childTarget = roleRunPlacement(input.ledgerHome, {
+            bookKey: input.bookKey,
+            subject: { ticketNumber: input.ticketNumber },
+            runId: childRunId,
+            role: "diarist",
+        });
+        const unboundChildDirectory = roleRunPlacement(input.ledgerHome, {
+            bookKey: input.bookKey,
+            subject: { unbound: true },
+            runId: childRunId,
+            role: "diarist",
+        }).runDirectory;
+        if (existsSync(unboundChildDirectory)) {
+            input.authority.seal(childTarget);
+            await bindTicketNumberOnRunDirectory(unboundChildDirectory, input.ticketNumber);
+            await rehomeUnboundTicketProvenance(unboundChildDirectory, input.ticketNumber, input.projectRoot, homeFromRunDirectory(input.parentRunDirectory));
+            ensureRoleRunDirectory(input.ledgerHome, dirname(childTarget.runDirectory));
+            // #1199: whole-leg rename first; originals travel with the directory.
+            await rename(unboundChildDirectory, childTarget.runDirectory);
+            relocateTicketProgressForLeg({
+                runDirectory: childTarget.runDirectory,
+            });
+            // Finished child legs will not settle again; refresh derived host.original
+            // after the rename commit. A derived render fault must not undo or block
+            // the committed placement (#1161 L1) — note and keep the true cause.
+            try {
+                renderCurrentSync(childTarget.runDirectory);
+            }
+            catch (error) {
+                process.stderr.write(`[invocation] current.json render refused after child relocate; placement kept: ${childTarget.runDirectory}: ${errorText(error)}\n`);
+            }
+            continue;
+        }
+        // Prior partial relocate left the child under the ticket with staging still held.
+        if (existsSync(childTarget.runDirectory)) {
+            relocateTicketProgressForLeg({
+                runDirectory: childTarget.runDirectory,
+            });
+        }
+    }
+}
 /** File a role run under its latest typed ticket identity. */
 export async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
-    if (admitted.ticketNumber === undefined || !isUnboundRunDirectory(admitted.runDirectory))
+    if (admitted.ticketNumber === undefined)
+        return undefined;
+    const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(admitted.runDirectory));
+    // Already under the ticket: publish leftover progress.jsonl (self + registered children).
+    if (!isUnboundRunDirectory(admitted.runDirectory)) {
+        relocateTicketProgressForLeg({
+            runDirectory: admitted.runDirectory,
+        });
+        if (admitted.role !== "diarist") {
+            await relocateRegisteredChildDiarists({
+                parentRunDirectory: admitted.runDirectory,
+                bookKey: admitted.bookKey,
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                ledgerHome,
+                authority,
+            });
+        }
         return undefined;
+    }
     const oldRunDirectory = admitted.runDirectory;
-    const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(oldRunDirectory));
     const target = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
         subject: { ticketNumber: admitted.ticketNumber },
@@ -256,54 +325,41 @@ export async function relocateAdmittedRunToTicket(admitted, authority, heldLease
         role: admitted.role,
     });
     ensureRoleRunDirectory(ledgerHome, dirname(target.runDirectory));
-    // Host sealing is pure identity projection, but may reject the coordinates.
-    // Keep that failure before the filesystem commit point.
-    const principal = authority.seal(target);
+    // Pre-flight seal; final seal after the filesystem commit.
+    authority.seal(target);
     if (admitted.role !== "diarist") {
-        const childRunIds = readPageSync(oldRunDirectory, "admitted")?.childDiaristRunIds;
-        for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
-            if (typeof childRunId !== "string")
-                continue;
-            const childDirectory = join(dirname(oldRunDirectory), formatRunLeaf(childRunId, "diarist"));
-            // A child that already filed under a ticket keeps its own assertion.
-            if (!existsSync(childDirectory))
-                continue;
-            const childTarget = roleRunPlacement(ledgerHome, {
-                bookKey: admitted.bookKey,
-                subject: { ticketNumber: admitted.ticketNumber },
-                runId: childRunId,
-                role: "diarist",
-            });
-            authority.seal(childTarget);
-            await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
-            await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
-            ensureRoleRunDirectory(ledgerHome, dirname(childTarget.runDirectory));
-            await rename(childDirectory, childTarget.runDirectory);
-            // Finished child legs will not settle again; refresh derived host.original
-            // after the rename commit. A derived render fault must not undo or block
-            // the committed placement (#1161 L1) — note and keep the true cause.
-            try {
-                renderCurrentSync(childTarget.runDirectory);
-            }
-            catch (error) {
-                process.stderr.write(`[invocation] current.json render refused after child relocate; placement kept: ${childTarget.runDirectory}: ${errorText(error)}\n`);
-            }
-        }
+        await relocateRegisteredChildDiarists({
+            parentRunDirectory: oldRunDirectory,
+            bookKey: admitted.bookKey,
+            ticketNumber: admitted.ticketNumber,
+            projectRoot: admitted.projectRoot,
+            ledgerHome,
+            authority,
+        });
     }
     // The first ticket assignment moves only an unbound diarist's own diary.
     if (admitted.role === "diarist") {
         await rehomeUnboundTicketProvenance(oldRunDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
     }
     // Rename commits the run placement. Diary assignment above is a Sitian append
-    // outside the atomic directory move.
-    // Persisted paths are resolved from typed run identity on read.
+    // outside the atomic directory move. Session/receipts/progress travel with the leg.
     await rename(oldRunDirectory, target.runDirectory);
     // rename moved the open lock inode with the directory. Transfer cleanup and
-    // admitted path ownership immediately after the commit — before any derived
-    // render that may refuse (#1161 L1 / BASE order).
+    // live path ownership immediately after the commit — before final seal/render
+    // (#1161 L1 / BASE order). Live handles first so mid-turn setSessionFile sees
+    // the ticket leaf; final seal uses the post-move existence landing.
     heldLease?.relocate(target.runDirectory);
+    const actualSessionDirectory = sessionDirectoryOf(target.runDirectory);
+    const principal = authority.seal({
+        sessionDirectory: actualSessionDirectory,
+        sessionFile: sessionFileIn(actualSessionDirectory),
+    });
     rewriteAdmittedRoleRunPage(admitted, [{ oldRunDirectory, newRunDirectory: target.runDirectory }]);
     admitted.principal = principal;
+    // After whole-leg rename + live-handle handoff: fill rounds and append ticket current.
+    relocateTicketProgressForLeg({
+        runDirectory: target.runDirectory,
+    });
     // current.json projects host.original from this run directory. Ownership is
     // already transferred; a refuse still carries the true cause to the caller
     // (#1161 L1) without leaving the leg under the unbound path.
@@ -1131,17 +1187,13 @@ export function appendCallerFileFlagPaths(body, attachments, requestManifestPath
 }
 /**
  * One initial prompt transport. The registry `transportPrompt` leaf selects
- * a fixed kickoff, a bound baseline, or skill args. Absent means the caller
- * instruction plus caller file-flag paths (ADR 0087).
+ * a bound baseline or skill args. Absent means the caller instruction plus
+ * caller file-flag paths (ADR 0087). Notary dialogue is owned by
+ * resolveReviewSeatDialogueBody (review fixed dispatch), not an empty transport leaf.
  * Engine / outsourcing material rides startup readingMaterial (#1167), not here.
  */
 export function buildInstructionTransportPrompt(admitted) {
     const kind = admittedTransportPromptKind(admitted);
-    if (kind === "fixed-kickoff") {
-        // #1166 / ADR 0087: audited-run identity rides startup materials; dialogue
-        // prompt is peer body / reask only — never a package-computed directory path.
-        return "";
-    }
     if (kind === "baseline") {
         if (admitted.baseRevision === undefined) {
             throw new Error("baseline transport prompt is missing the bound revision");