@akagilnc/pi-workflow-roles 0.1.5775 → 0.1.5797

package/dist/migrate-book-topology.js

@@ -958,6 +958,12 @@ import { basename as basename3, dirname as dirname3, join as join2 } from "node:
 function resolveSitianVolumeCategory(kind) {
   return kind;
 }
+function runDirectoryOwningSessionParent(sessionParentDir) {
+  if (basename3(sessionParentDir) !== "session") return void 0;
+  const runDirectory = dirname3(sessionParentDir);
+  if (parseRunLeaf(basename3(runDirectory)) === void 0) return void 0;
+  return runDirectory;
+}
 function sitianVolumeDirectory(sessionDirectory, category) {
   return join2(sessionDirectory, category);
 }
@@ -989,8 +995,8 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
     const sessionParentDir = dirname3(input.sessionParent);
-    const runDirectory = dirname3(sessionParentDir);
-    if (basename3(sessionParentDir) === "session" && parseRunLeaf(basename3(runDirectory)) !== void 0) {
+    const runDirectory = runDirectoryOwningSessionParent(sessionParentDir);
+    if (runDirectory !== void 0) {
       sessionDir = runDirectory;
       recordFile = join2(runDirectory, RUN_HISTORY_KINDS.has(input.kind) ? RUN_HISTORY_FILE : RUN_STATE_KINDS.has(input.kind) ? RUN_STATE_FILE : RUN_LOG_FILE);
     } else {
@@ -1183,7 +1189,9 @@ function render(runDirectory, history, state, log, unreadable) {
       original = payload.landingPath;
     }
   }
-  if (typeof original === "string") original = join3(runDirectory, "session", basename4(original));
+  if (typeof original === "string") {
+    original = join3(sessionDirectoryOf(runDirectory), basename4(original));
+  }
   whole.host = { sessions, ...original === void 0 ? {} : { original } };
   whole.submission = latest === void 0 ? {} : { latest };
   if (Object.keys(unreadable).length > 0) whole.unreadable = unreadable;
@@ -10176,7 +10184,7 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
   );
 }
 async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-  const sessionRoot = join6(pagesDirectory, "session");
+  const sessionRoot = sessionDirectoryOf(pagesDirectory);
   async function walk(directory) {
     let entries;
     try {
@@ -10273,13 +10281,30 @@ var init_role_run_relocation = __esm({
   }
 });
 
-// src/sha256.ts
-import { createHash } from "node:crypto";
-function sha256Hex(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-var init_sha256 = __esm({
-  "src/sha256.ts"() {
+// src/sitian-facade.ts
+var init_sitian_facade = __esm({
+  "src/sitian-facade.ts"() {
+    "use strict";
+    init_role_run_placement();
+    init_sitian_appender();
+    init_sitian_contracts();
+    init_sitian_appender();
+    init_sitian_reader();
+  }
+});
+
+// src/host-session-record.ts
+var init_host_session_record = __esm({
+  "src/host-session-record.ts"() {
+    "use strict";
+    init_sitian_facade();
+    init_unknown_value();
+  }
+});
+
+// src/host-contracts.ts
+var init_host_contracts = __esm({
+  "src/host-contracts.ts"() {
     "use strict";
   }
 });
@@ -10328,6 +10353,32 @@ var init_terminating_tools = __esm({
   }
 });
 
+// src/ticket-progress.ts
+var init_ticket_progress = __esm({
+  "src/ticket-progress.ts"() {
+    "use strict";
+    init_host_session_record();
+    init_host_contracts();
+    init_terminating_tools();
+    init_packaged_role_registry();
+    init_role_run_placement();
+    init_run_dossier();
+    init_sitian_reader();
+    init_unknown_value();
+  }
+});
+
+// src/sha256.ts
+import { createHash } from "node:crypto";
+function sha256Hex(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_sha256 = __esm({
+  "src/sha256.ts"() {
+    "use strict";
+  }
+});
+
 // src/doctor-evidence.ts
 var init_doctor_evidence = __esm({
   "src/doctor-evidence.ts"() {
@@ -10382,18 +10433,6 @@ var init_session_dialogue = __esm({
   }
 });
 
-// src/sitian-facade.ts
-var init_sitian_facade = __esm({
-  "src/sitian-facade.ts"() {
-    "use strict";
-    init_role_run_placement();
-    init_sitian_appender();
-    init_sitian_contracts();
-    init_sitian_appender();
-    init_sitian_reader();
-  }
-});
-
 // src/ticket-provenance.ts
 var init_ticket_provenance = __esm({
   "src/ticket-provenance.ts"() {
@@ -11205,6 +11244,7 @@ var init_invocation = __esm({
     init_activation_ledger_topology();
     init_activation_ledger_git();
     init_role_run_placement();
+    init_ticket_progress();
     init_packaged_role_registry();
     init_run_ticket_number();
     init_role_run_relocation();

package/dist/pi/role-turn-host.js

@@ -336,7 +336,9 @@ export function createPiRoleTurnHost(config) {
             const roleEntry = await realpath(resolveInternalRoleEntrypoint(config.packageRoot));
             const extraArgs = buildPiTurnExtraArgs(turnRequest, config.principalAuthority, config.extraPiArgs ?? []);
             const args = buildExplicitInternalActivationArgs(roleEntry, extraArgs);
-            const stdin = encodeUserDialogueStdin(piUserDialogueBody(turnRequest));
+            const transportBody = piUserDialogueBody(turnRequest);
+            // #1199: progress instruction is these same body bytes (actual seat input).
+            const stdin = encodeUserDialogueStdin(transportBody);
             // Shared envelope isolates this call's court identity: omitting courtAttemptId
             // must not inherit a parent process.env.AK_ROLE_COURT_ATTEMPT (#637).
             const env = {
@@ -362,6 +364,9 @@ export function createPiRoleTurnHost(config) {
                 delete env.AK_ROLE_HOST;
             else
                 env.AK_ROLE_HOST = request.host.trim();
+            // #1199: 传召词 is unknown-length body — never argv/env (execve ARG_MAX / E2BIG).
+            // Typed stdin envelope carries dialogue + optional progress 传召词.
+            delete env.AK_ROLE_SUMMONS_INSTRUCTION;
             // #1132: the one effective delivery-request ceiling travels to the child
             // on its own env so the in-child role runtime and the worker submission
             // gate count with the same configured number the AK seam resolved. Omit

package/dist/public-cli/instruction-seat-run.js

@@ -395,7 +395,10 @@ export async function resolveReviewSeatDialogueBody(input) {
         return undefined;
     return await loadLedgerPeerBody(sourceRunPath, input.projectRoot, input.home);
 }
-async function resolveInitialPrompt(admitted, env) {
+/**
+ * Initial host prompt for this turn (#1199: progress instruction = these bytes).
+ */
+async function resolveInitialTurnPrompt(admitted, env) {
     const record = roleRecord(admitted.role);
     if ("reaskPrompt" in record && record.reaskPrompt === true) {
         const sourceRunPath = admittedSourceRunPath(admitted);
@@ -513,7 +516,7 @@ async function dispatchAdmitted(admitted, env, io) {
         if (activeEnv.correlationId !== undefined && activeEnv.correlationId.trim() !== "") {
             await recordAdmittedCorrelation(admitted, activeEnv.correlationId);
         }
-        const initialPromptText = await resolveInitialPrompt(admitted, activeEnv);
+        const initialPrompt = await resolveInitialTurnPrompt(admitted, activeEnv);
         const auto = "inCallAutoResume" in record && record.inCallAutoResume === true;
         if (auto) {
             // #1208: auto-resume resends this turn's actual content, never a filler phrase.
@@ -523,11 +526,11 @@ async function dispatchAdmitted(admitted, env, io) {
                 io: turnIo,
                 buildInitialRequest: () => buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                     kind: "initial",
-                    prompt: initialPromptText,
+                    prompt: initialPrompt,
                 })),
                 buildResumeRequest: () => buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                     kind: "resume",
-                    prompt: initialPromptText,
+                    prompt: initialPrompt,
                 })),
                 adapters,
                 ...(activeEnv.engine === undefined ? {} : { effectiveEngine: activeEnv.engine }),
@@ -539,7 +542,7 @@ async function dispatchAdmitted(admitted, env, io) {
             io: turnIo,
             request: buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                 kind: "initial",
-                prompt: initialPromptText,
+                prompt: initialPrompt,
             })),
             adapters,
             ...(activeEnv.engine === undefined ? {} : { effectiveEngine: activeEnv.engine }),
@@ -650,7 +653,7 @@ function resumeSameParentInstructionSeat(input) {
     });
 }
 /**
- * Same delivery rule as resolveInitialPrompt for same-parent resume summons.
+ * Same delivery rule as resolveInitialTurnPrompt for same-parent resume summons.
  * Shared resolver owns the input choice — callers only pass env fields.
  */
 async function sameParentDialogue(env, fallback, sourceRunPath, projectRoot, role) {
@@ -736,7 +739,7 @@ async function runCountersignBody(parsed, env, io) {
             // #1208 C1 / #1166 J11: one shared initial-prompt seam (incl. file flags).
             const turnProjection = roleTurnOptions(env, admitted, {
                 kind: "initial",
-                prompt: await resolveInitialPrompt(admitted, env),
+                prompt: await resolveInitialTurnPrompt(admitted, env),
             });
             const turnRequest = buildInstructionSeatTurnRequest(admitted, turnProjection);
             const result = await runPostAdmissionOneShot({

package/dist/public-cli/invocation.js

@@ -8,7 +8,8 @@ import { readFile, realpath, rename, writeFile, } from "node:fs/promises";
 import { dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { activationBookDirectory, ensureRealDirectoryTree, homeFromRunDirectory, pathContainedIn, resolveActivationLedgerHome, } from "../activation-ledger-topology.js";
 import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
-import { ensureRoleRunDirectory, ensureRoleRunPlacement, formatRunLeaf, isUnboundRunDirectory, listBookRunDirectories, roleRunPlacement, } from "../role-run-placement.js";
+import { ensureRoleRunDirectory, ensureRoleRunPlacement, isUnboundRunDirectory, listBookRunDirectories, roleRunPlacement, sessionDirectoryOf, sessionFileIn, } from "../role-run-placement.js";
+import { relocateTicketProgressForLeg } from "../ticket-progress.js";
 import { packagedAdmittedSubject, packagedArgvResult, packagedBareToken, packagedBaseIsRevision, packagedEmitsAuthorityRefs, packagedPublicInstructionSubject, packagedRoleMetadata, packagedStoresSourceRunRaw, packagedSubjectChoices, } from "../packaged-role-registry.js";
 import { isSafePositiveTicketNumber, parseTicketNumber, readBoardTicketNumber, requireSafePositiveTicketNumber, } from "../run-ticket-number.js";
 import { rewriteAdmittedRoleRunPage, } from "../role-run-relocation.js";
@@ -243,12 +244,80 @@ export async function recordAdmittedCorrelation(admitted, correlationId) {
     mutable.correlationId = correlationId;
     mutable.correlationIds = correlationIds;
 }
+/**
+ * #1199 R2: registered 起居郎 legs that already belong on this ticket.
+ * Unbound source → whole-leg rename + publish; already under ticket → publish
+ * leftover staging only. No scan of unregistered siblings.
+ */
+async function relocateRegisteredChildDiarists(input) {
+    const childRunIds = readPageSync(input.parentRunDirectory, "admitted")?.childDiaristRunIds;
+    for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
+        if (typeof childRunId !== "string")
+            continue;
+        const childTarget = roleRunPlacement(input.ledgerHome, {
+            bookKey: input.bookKey,
+            subject: { ticketNumber: input.ticketNumber },
+            runId: childRunId,
+            role: "diarist",
+        });
+        const unboundChildDirectory = roleRunPlacement(input.ledgerHome, {
+            bookKey: input.bookKey,
+            subject: { unbound: true },
+            runId: childRunId,
+            role: "diarist",
+        }).runDirectory;
+        if (existsSync(unboundChildDirectory)) {
+            input.authority.seal(childTarget);
+            await bindTicketNumberOnRunDirectory(unboundChildDirectory, input.ticketNumber);
+            await rehomeUnboundTicketProvenance(unboundChildDirectory, input.ticketNumber, input.projectRoot, homeFromRunDirectory(input.parentRunDirectory));
+            ensureRoleRunDirectory(input.ledgerHome, dirname(childTarget.runDirectory));
+            // #1199: whole-leg rename first; originals travel with the directory.
+            await rename(unboundChildDirectory, childTarget.runDirectory);
+            relocateTicketProgressForLeg({
+                runDirectory: childTarget.runDirectory,
+            });
+            // Finished child legs will not settle again; refresh derived host.original
+            // after the rename commit. A derived render fault must not undo or block
+            // the committed placement (#1161 L1) — note and keep the true cause.
+            try {
+                renderCurrentSync(childTarget.runDirectory);
+            }
+            catch (error) {
+                process.stderr.write(`[invocation] current.json render refused after child relocate; placement kept: ${childTarget.runDirectory}: ${errorText(error)}\n`);
+            }
+            continue;
+        }
+        // Prior partial relocate left the child under the ticket with staging still held.
+        if (existsSync(childTarget.runDirectory)) {
+            relocateTicketProgressForLeg({
+                runDirectory: childTarget.runDirectory,
+            });
+        }
+    }
+}
 /** File a role run under its latest typed ticket identity. */
 export async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
-    if (admitted.ticketNumber === undefined || !isUnboundRunDirectory(admitted.runDirectory))
+    if (admitted.ticketNumber === undefined)
         return undefined;
+    const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(admitted.runDirectory));
+    // Already under the ticket: publish leftover progress.jsonl (self + registered children).
+    if (!isUnboundRunDirectory(admitted.runDirectory)) {
+        relocateTicketProgressForLeg({
+            runDirectory: admitted.runDirectory,
+        });
+        if (admitted.role !== "diarist") {
+            await relocateRegisteredChildDiarists({
+                parentRunDirectory: admitted.runDirectory,
+                bookKey: admitted.bookKey,
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                ledgerHome,
+                authority,
+            });
+        }
+        return undefined;
+    }
     const oldRunDirectory = admitted.runDirectory;
-    const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(oldRunDirectory));
     const target = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
         subject: { ticketNumber: admitted.ticketNumber },
@@ -256,54 +325,41 @@ export async function relocateAdmittedRunToTicket(admitted, authority, heldLease
         role: admitted.role,
     });
     ensureRoleRunDirectory(ledgerHome, dirname(target.runDirectory));
-    // Host sealing is pure identity projection, but may reject the coordinates.
-    // Keep that failure before the filesystem commit point.
-    const principal = authority.seal(target);
+    // Pre-flight seal; final seal after the filesystem commit.
+    authority.seal(target);
     if (admitted.role !== "diarist") {
-        const childRunIds = readPageSync(oldRunDirectory, "admitted")?.childDiaristRunIds;
-        for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
-            if (typeof childRunId !== "string")
-                continue;
-            const childDirectory = join(dirname(oldRunDirectory), formatRunLeaf(childRunId, "diarist"));
-            // A child that already filed under a ticket keeps its own assertion.
-            if (!existsSync(childDirectory))
-                continue;
-            const childTarget = roleRunPlacement(ledgerHome, {
-                bookKey: admitted.bookKey,
-                subject: { ticketNumber: admitted.ticketNumber },
-                runId: childRunId,
-                role: "diarist",
-            });
-            authority.seal(childTarget);
-            await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
-            await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
-            ensureRoleRunDirectory(ledgerHome, dirname(childTarget.runDirectory));
-            await rename(childDirectory, childTarget.runDirectory);
-            // Finished child legs will not settle again; refresh derived host.original
-            // after the rename commit. A derived render fault must not undo or block
-            // the committed placement (#1161 L1) — note and keep the true cause.
-            try {
-                renderCurrentSync(childTarget.runDirectory);
-            }
-            catch (error) {
-                process.stderr.write(`[invocation] current.json render refused after child relocate; placement kept: ${childTarget.runDirectory}: ${errorText(error)}\n`);
-            }
-        }
+        await relocateRegisteredChildDiarists({
+            parentRunDirectory: oldRunDirectory,
+            bookKey: admitted.bookKey,
+            ticketNumber: admitted.ticketNumber,
+            projectRoot: admitted.projectRoot,
+            ledgerHome,
+            authority,
+        });
     }
     // The first ticket assignment moves only an unbound diarist's own diary.
     if (admitted.role === "diarist") {
         await rehomeUnboundTicketProvenance(oldRunDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
     }
     // Rename commits the run placement. Diary assignment above is a Sitian append
-    // outside the atomic directory move.
-    // Persisted paths are resolved from typed run identity on read.
+    // outside the atomic directory move. Session/receipts/progress travel with the leg.
     await rename(oldRunDirectory, target.runDirectory);
     // rename moved the open lock inode with the directory. Transfer cleanup and
-    // admitted path ownership immediately after the commit — before any derived
-    // render that may refuse (#1161 L1 / BASE order).
+    // live path ownership immediately after the commit — before final seal/render
+    // (#1161 L1 / BASE order). Live handles first so mid-turn setSessionFile sees
+    // the ticket leaf; final seal uses the post-move existence landing.
     heldLease?.relocate(target.runDirectory);
+    const actualSessionDirectory = sessionDirectoryOf(target.runDirectory);
+    const principal = authority.seal({
+        sessionDirectory: actualSessionDirectory,
+        sessionFile: sessionFileIn(actualSessionDirectory),
+    });
     rewriteAdmittedRoleRunPage(admitted, [{ oldRunDirectory, newRunDirectory: target.runDirectory }]);
     admitted.principal = principal;
+    // After whole-leg rename + live-handle handoff: fill rounds and append ticket current.
+    relocateTicketProgressForLeg({
+        runDirectory: target.runDirectory,
+    });
     // current.json projects host.original from this run directory. Ownership is
     // already transferred; a refuse still carries the true cause to the caller
     // (#1161 L1) without leaving the leg under the unbound path.