@liy/mote-pi-runtime 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.3.1 - 2026-09-19
+
+_No additional release notes were provided._
+
 ## 0.3.0 - 2026-09-16
 
 Split from `@liy/mote-sandbox-runtime` by process lifetime (ADR-084).

package/README.md

@@ -51,11 +51,16 @@ Agent profiles link to the stable `current` names, so a version swap needs no
 profile rewrite. The orchestrator resolves `current` when it spawns, not at
 boot, which is what lets an update land without restarting anything.
 
-## Contract
+## Compatibility with the services
 
-`mote.contract` in the manifest pairs this package with the services that drive
-it. The orchestrator refuses to spawn against a contract it does not support,
-which is the only guard against a version pairing nobody tested.
+Nothing pairs the two packages by declaration. Semantic versioning carries that
+judgement, as it does for every published package: a release that changes either
+direction of the interface says so in its version.
+
+One coupling is checked directly rather than by convention, because its failure
+is silent: the services refuse to publish a staged version of this package whose
+`extensions` and `skills` names do not resolve, since every agent profile links
+to them and a relocated directory would quietly empty each profile.
 
 ## Release
 

package/dist/assets/skills/orchestrator/SKILL.md

@@ -48,7 +48,7 @@ orchestrator app update <app-id> "<shared brief>"                            # O
 orchestrator ticket list --status <waiting|ongoing|intervention|done> [--unassigned]
 orchestrator ticket get <ticket-id>                                     # general ticket information
 orchestrator ticket create '{"title":"...","summary":"...","description":"...","scope":["code"],"appId":"..."}'  # appId optional; omit for standalone work
-orchestrator ticket assign '{"ticketId":"...","assigneeAgentId":"..."}'   # Overmind only; optional summary adds context
+orchestrator ticket assign '{"ticketId":"...","assigneeAgentId":"..."}'   # Overmind only; own agents only; optional summary adds context
 orchestrator ticket park   '{"ticketId":"...","summary":"<required human action or blocker>"}'  # Overmind only; waiting tickets only
 orchestrator ticket unpark '{"ticketId":"...","summary":"<why it can proceed>"}'  # Overmind only
 orchestrator ticket done   '{"ticketId":"...","summary":"<acceptance>"}'  # Overmind only
@@ -137,12 +137,33 @@ checks. Overmind marks the ticket done only after integration evidence is
 present. Cleanup removes only clean, merged worktrees and branches and never
 forces deletion.
 
+## Ownership boundary
+
+Every agent belongs to exactly one user, and so does every ticket. You act for
+your own user alone: `agent list`, `agent get` and `agent prompt` show only
+your own agents, and every judgment verb — `assign`, `park`, `unpark`, `done`,
+`archive`, `unarchive`, plus the `guide` and `decision` notes — is limited to
+tickets your user owns. Assignment
+launches the Drone under its owner, so assigning an agent you do not own would
+run work under someone else's identity; it is rejected, as is acting on another
+user's ticket. Pick the assignee from your own `agent list` by role. Another
+user's board work is dispatched to their own Overmind, never to you.
+
+Reads are Org-wide and stay open: `ticket list`, `ticket get`, `ticket brief`,
+`ticket worklog` and `ticket timeline` show every ticket in the Org, so the
+board you see is wider than the board you may act on. Read another user's
+ticket freely for context, including which of their agents holds it; write
+only to your own. A write on another user's ticket is refused as
+`ticket_owner_mismatch`.
+
 ## Board model
 
 - `waiting` is the judgment queue: every finished Drone run lands its ticket
   back here, unassigned, for Overmind to resolve — assign (re-assigning the
-  same agent resumes its session), park, or done. Overmind must resolve
-  every unassigned `waiting` ticket; the native timeline records
+  same agent resumes its session), park, or done. Unassigned does not mean
+  unowned: a released ticket keeps the owner it was created with. Overmind
+  must resolve every unassigned `waiting` ticket **its own user owns**; the
+  native timeline records
   how the last run ended and the Gen App build result. Dispatch is
   automatic: the orchestrator spawns the ticket owner's Overmind for a
   board assessment shortly after judgment work appears. Do not poll.

package/dist/cli.js

@@ -4,10 +4,12 @@ import { createRequire as ___liy_mote_pi_runtimeCreateRequire } from "node:modul
 // ../sandbox-orchestrator/dist/index.js
 import { createRequire as ___liy_sandbox_orchestratorCreateRequire } from "node:module";
 import { execFile } from "node:child_process";
-import { dirname as dirname2 } from "node:path";
 import { promisify } from "node:util";
+import { execFile as execFile2 } from "node:child_process";
+import { dirname as dirname2 } from "node:path";
+import { promisify as promisify2 } from "node:util";
 import { DatabaseSync } from "node:sqlite";
-import { randomUUID as randomUUID9 } from "node:crypto";
+import { randomUUID as randomUUID10 } from "node:crypto";
 import { connect } from "node:net";
 import { createInterface } from "node:readline";
 var require2 = ___liy_sandbox_orchestratorCreateRequire(import.meta.url);
@@ -16,6 +18,7 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var AGENT_COVERS_MAX_LENGTH = 1e3;
 var external_exports = {};
 __export(external_exports, {
   $brand: () => $brand,
@@ -13798,14 +13801,13 @@ var channelPrincipalSchema = external_exports.object({
   principalId: external_exports.string().trim().uuid(),
   kind: external_exports.enum(["user", "agent"]),
   displayName: external_exports.string().trim().min(1).max(160),
-  ownerUserId: external_exports.string().trim().uuid().optional()
+  ownerUserId: external_exports.string().trim().uuid().optional(),
+  covers: external_exports.string().trim().min(1).max(AGENT_COVERS_MAX_LENGTH).optional()
 }).strict().superRefine((value, context) => {
-  if (value.kind === "agent" !== (value.ownerUserId !== void 0)) {
-    context.addIssue({
-      code: "custom",
-      path: ["ownerUserId"],
-      message: "ownerUserId is required exactly for agent principals"
-    });
+  for (const field of ["ownerUserId", "covers"]) {
+    if (value.kind === "agent" !== (value[field] !== void 0)) {
+      context.addIssue({ code: "custom", path: [field], message: `${field} is required exactly for agent principals` });
+    }
   }
 });
 var channelPrincipalListSchema = external_exports.object({
@@ -13863,8 +13865,7 @@ var ticketScopeSchema = external_exports.enum(TICKET_SCOPES);
 var ticketBoardProjectionShape = {
   id: external_exports.string().trim().uuid(),
   initiatorPrincipalId: external_exports.string().trim().uuid(),
-  // Missing on pre-ADR-063 rows; defaulted so stored legacy state parses.
-  ownerUserId: external_exports.string().trim().uuid().nullable().default(null),
+  ownerUserId: external_exports.string().trim().uuid(),
   title: external_exports.string(),
   description: external_exports.string(),
   status: ticketStatusSchema,
@@ -14069,6 +14070,20 @@ var applicantApplicationProjectionSchema = external_exports.object({
 var orgCodeSubmissionSchema = external_exports.object({
   orgCode: orgCodeSchema
 }).strict();
+var orgProviderSubmissionSchema = external_exports.object({
+  providerKind: external_exports.string().trim().toLowerCase().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+  credential: external_exports.string().trim().min(1).max(8 * 1024)
+}).strict();
+var orgProviderVerificationSchema = external_exports.object({
+  verified: external_exports.boolean(),
+  reason: external_exports.enum(["rejected", "unreachable"]).optional(),
+  message: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var orgProviderKindOptionSchema = external_exports.object({
+  providerKind: external_exports.string().trim().min(1).max(100),
+  displayName: external_exports.string().trim().min(1).max(120),
+  defaultModel: external_exports.string().trim().min(1).max(160)
+}).strict();
 var orgCodeAvailabilitySchema = external_exports.object({
   orgCode: external_exports.string().trim().min(1).max(63),
   availability: external_exports.enum(["available", "invalid", "taken"])
@@ -14234,6 +14249,11 @@ var MAX_HTTP_BODY_BYTES = 1024 * 1024;
 var ensureQueue = Promise.resolve();
 var profileUpdates = Promise.resolve();
 var execFileAsync = promisify(execFile);
+var PI_RUNTIME_ALIASES = Object.freeze([
+  Object.freeze({ path: "extensions", target: "dist/extensions" }),
+  Object.freeze({ path: "skills", target: "dist/assets/skills" })
+]);
+var execFileAsync2 = promisify2(execFile2);
 var SETPRIV_PATH = "/usr/bin/setpriv";
 var WORKSPACE_UID = 1001;
 var WORKSPACE_GID = 1001;
@@ -14283,7 +14303,7 @@ function createHostWorkspaceProcessRuntime() {
 function createWorkspaceProcessRuntime(path, selectCommand) {
   const run = async (command, args, options = {}) => {
     const selected = selectCommand(command, args);
-    const result = await execFileAsync(selected.executable, selected.args, {
+    const result = await execFileAsync2(selected.executable, selected.args, {
       cwd: options.cwd,
       encoding: "utf8",
       env: createWorkspaceProcessEnvironment(path),
@@ -14376,13 +14396,7 @@ var TICKET_TRANSITION_TYPES = /* @__PURE__ */ new Set([
 ]);
 var TICKET_TRANSITION_FIELDS2 = /* @__PURE__ */ new Set(["ticketId", "summary"]);
 var TICKET_CREATE_FIELDS2 = /* @__PURE__ */ new Set(["title", "summary", "description", "scope", "appId", "contextTicketId"]);
-var TICKET_ASSIGN_FIELDS2 = /* @__PURE__ */ new Set([
-  "ticketId",
-  "assigneeAgentId",
-  "assigneeAgentName",
-  "assigneeAgentRole",
-  "summary"
-]);
+var TICKET_ASSIGN_FIELDS2 = /* @__PURE__ */ new Set(["ticketId", "assigneeAgentId", "summary"]);
 async function runOrchestratorCli(argv, env = process.env) {
   try {
     if (argv[0] === "mcp") {
@@ -14454,7 +14468,7 @@ function parseCliCommand(argv) {
   const args = resource === "integration" ? [action, ...rest].filter((value) => value !== void 0) : rest;
   const payload = parsePayload(type, args);
   return {
-    id: commandId ?? randomUUID9(),
+    id: commandId ?? randomUUID10(),
     type,
     payload
   };