@llblab/pi-kit 0.10.7 → 0.11.0

package/node_modules/@llblab/pi-state-flow/lib/status.ts

@@ -57,16 +57,11 @@ export function detailedStatus(snapshot: Snapshot, diagnostics: StatusDiagnostic
 		diagnostics.recent,
 	);
 	const available = diagnostics.temporal !== undefined && diagnostics.durableStateError === undefined;
-	const materialized = !available ? undefined : {
-		global: diagnostics.scopeStates.global,
-		cwd: diagnostics.scopeStates.cwd,
-		session: diagnostics.scopeStates.session,
-		effective: overlayStates(
-			diagnostics.scopeStates.global,
-			diagnostics.scopeStates.cwd,
-			diagnostics.scopeStates.session,
-		),
-	};
+	const materialized = !available ? undefined : overlayStates(
+		diagnostics.scopeStates.global,
+		diagnostics.scopeStates.cwd,
+		diagnostics.scopeStates.session,
+	);
 	const stateJson = materialized === undefined ? undefined : JSON.stringify(materialized, null, 2);
 	const freshnessError = diagnostics.artifactFreshnessError ?? (available ? undefined : "temporal global artifact registry is unavailable");
 	const stale = freshnessError === undefined
@@ -124,7 +119,7 @@ export function detailedStatus(snapshot: Snapshot, diagnostics: StatusDiagnostic
 		`Publication: ${publication}`,
 		...staleLines,
 		...(stateJson === undefined
-			? ["Materialized states: unavailable (global/CWD/session/effective)"]
-			: [`Materialized states (${Buffer.byteLength(stateJson, "utf8")} bytes; global/CWD/session Git-backed, effective overlay):`, "", stateJson]),
+			? ["Effective memory: unavailable"]
+			: [`Effective memory (${Buffer.byteLength(stateJson, "utf8")} JSON bytes; global → CWD → session overlay):`, "", stateJson]),
 	].join("\n");
 }

package/node_modules/@llblab/pi-state-flow/lib/storage.ts

@@ -90,7 +90,8 @@ export function planTemporalPublication(
 		changedScopes.push(scope);
 	}
 	const provenanceUpdates: OwnedFileUpdate[] = [];
-	if (provenance !== undefined) {
+	// Shared provenance belongs to its semantic scopes, not the session config being saved.
+	if (!runtimeOnly && provenance !== undefined) {
 		for (const scope of ["global", "cwd"] as const) {
 			const paths = temporalScopePaths(cwd, sessionId, scope, root, sessionKey);
 			const registry = provenance[scope];

package/node_modules/@llblab/pi-state-flow/lib/transition.ts

@@ -3,6 +3,7 @@ import {
 	ORDINARY_ARTIFACT_COMPILER,
 	validateArtifactMetadata,
 	validateArtifactRegistry,
+	validateModelArtifactPatch,
 	type ArtifactCompilerOutput,
 	type ArtifactProvenance,
 } from "./artifact.ts";
@@ -77,9 +78,6 @@ function compileReadSkills(
 		if (!isObject(output)) {
 			throw new Error(`Every successfully read Skill must have a CWD artifact compiler output at artifacts[exactReadPath]; missing: ${read.path}`);
 		}
-		if (Object.hasOwn(output, "hash") || Object.hasOwn(output, "compiler")) {
-			throw new Error(`Skill artifact compiler output at ${read.path} cannot set runtime-owned hash or compiler fields`);
-		}
 		if (typeof output.description !== "string" || output.description.trim().length === 0) {
 			throw new Error(`Skill artifact compiler output at ${read.path} must have a non-empty description`);
 		}
@@ -133,6 +131,7 @@ function validateScopePatch(scope: unknown, patch: unknown): asserts patch is Sc
 			throw new Error(`Scoped State Flow patch field ${key} must be a JSON object`);
 		}
 	}
+	if (isObject(patch.artifacts)) validateModelArtifactPatch(patch.artifacts);
 }
 
 function completePatch(patch: ScopePatch, response: string): StatePatch {

package/node_modules/@llblab/pi-state-flow/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-state-flow",
-  "version": "0.9.6",
+  "version": "0.10.0",
   "private": false,
   "description": "Incremental scoped state/context compiler for Pi, inspired by SKILL.state",
   "keywords": [
@@ -30,6 +30,7 @@
   "scripts": {
     "check": "node --experimental-strip-types -e \"await import('./index.ts')\"",
     "test": "node --experimental-strip-types --test tests/*.test.ts",
+    "benchmark": "node --experimental-strip-types benchmarks/benchmark.ts",
     "typecheck": "tsc --noEmit",
     "validate": "npm run typecheck && npm test && npm run check",
     "prepack": "npm run validate"
@@ -50,9 +51,9 @@
     "node": ">=22.19.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-agent-core": "^0.84.4",
-    "@earendil-works/pi-ai": "^0.84.4",
-    "@earendil-works/pi-coding-agent": "^0.84.4"
+    "@earendil-works/pi-agent-core": "^0.84.4 || ^0.85.1",
+    "@earendil-works/pi-ai": "^0.84.4 || ^0.85.1",
+    "@earendil-works/pi-coding-agent": "^0.84.4 || ^0.85.1"
   },
   "devDependencies": {
     "@types/node": "latest",

package/node_modules/@llblab/pi-telegram/CHANGELOG.md

@@ -4,6 +4,10 @@
 
 ## Unreleased
 
+## 0.45.8: Follower Forwarding Hotfix
+
+- `Follower Forwarding`: Message-ownership lookups now project the matching live registration's protocol identity before forwarding. Voice/message and edit retries, message-only callbacks, and reactions no longer stall on an incomplete cached owner after a rejection or re-registration. Exact generation, binding, protocol, and durable-receipt checks remain enforced.
+
 ## 0.45.7: Queue Enqueue Race Hotfix
 
 - `Queue Enqueue`: Asynchronous voice/file preparation no longer restores consumed prompts or overwrites newer queue changes, preventing a settled phantom head from blocking accepted work. Final assembly uses current queue state and allocates order at commit; abort-history folding retains only surviving intended prompts and receipts while preserving a handed-off head until `agent_start`.

package/node_modules/@llblab/pi-telegram/docs/architecture.md

@@ -429,7 +429,7 @@ The initial `offset: -1` cursor bootstrap is allowed only when both cursor and j
 
 Threaded Mode forwarding is a two-journal handoff. Only peers that mutually advertise protocol v1 and `durable-follower-admission-v1` may route or become election-eligible. The follower validates its exact binding and registration generation, durably appends the source-bound delivery, and only then returns the exact receipt. The leader classifies each attempt as `accepted`, `retryable`, or `terminal-rejected` with its delivery identity and failure class; only `accepted` with the expected `deliveryId` and `sourceUpdateId` may complete leader journal authority. Missing, negative, stale-generation, or mismatched-receipt acknowledgements remain durable, and a callback error answer is only an operator-facing side effect.
 
-Delivery ids derive only from envelope kind, source `update_id`, and stable recipient binding. Live registration generation remains a separate attempt fence, while callback/reaction message ownership carries that stable binding and rebinds to its current authenticated follower registration after replacement. Lost acknowledgements therefore replay idempotently into the same follower journal identity without changing the delivery id. Package build skew is allowed only while protocol version and capabilities remain compatible.
+Delivery ids derive only from envelope kind, source `update_id`, and stable recipient binding. Live registration generation remains a separate attempt fence. Message ownership carries the stable binding and rebinds to its current authenticated follower registration after replacement. `ownership.getForwardOwnership()` projects the protocol identity from the exact matching live instance, registration generation, and binding on every lookup; protocol is not cached with message history. The same port serves messages, edits, callbacks, and reactions, including callbacks without a Thread ID. If a cache lookup returns a foreign record but no matching durable-capable protocol can be projected, that record remains foreign and fails forwarding validation rather than falling through to local execution. The final bus validator independently rechecks generation, binding, and complete protocol identity before transport. Lost acknowledgements therefore retain the same delivery identity; only the exact durable receipt completes the source. Package build skew is allowed only while protocol version and capabilities remain compatible.
 
 Worker execution ownership is per `update_id` across same-runtime generations. Aborting a generation ends its authority but does not prove its handler settled; replacement replay remains blocked on that exact settlement. Late success and failure are both diagnostic events. Public and built-in handlers receive the same optional execution fence (`signal`, generation/update identity, and pre-effect assertion); the runtime binds it non-enumerably to every internal update carrier and checks it before routing-plan effects. Prompt construction rechecks after downloads and inbound handlers before queue mutation, pairing rechecks around persistence, command/menu and extension-command delegation retain the source fence across detached effects, lifecycle sync rechecks after store load before reconciliation, and reroute clones carry the source fence through forwarding, thread replacement, cleanup, persistence, and Bot API rename boundaries. Legacy handlers remain source-compatible but must not commit unfenced late effects.
 

package/node_modules/@llblab/pi-telegram/lib/extension.ts

@@ -934,7 +934,7 @@ export default function (pi: Pi.ExtensionAPI) {
     },
     getAdmissionScope: getTelegramUpdateAdmissionScope,
     getAdmissionJournalBinding: getTelegramQueueJournalBinding,
-    getMessageOwnership: messageOwnershipRuntime.store.get,
+    getMessageOwnership: messageOwnershipRuntime.getForwardOwnership,
     recordMessageOwnership: messageOwnershipRuntime.recordRouted,
     ...inboundBusProjectionRuntime,
     getDisplayTitle: getThreadDisplayTitle,

package/node_modules/@llblab/pi-telegram/lib/ownership.ts

@@ -1,9 +1,14 @@
 /**
  * Telegram message ownership helpers
  * Zones: telegram routing, multi-instance bus, in-memory coordination
- * Owns live message-id ownership lookup so callbacks/reactions can resolve a Telegram UI surface back to the instance/target that produced it
+ * Owns message-id ownership and live forwarding projections so inbound updates resolve back to the instance/target that owns them
  */
 
+import {
+  TELEGRAM_BUS_CAPABILITY_DURABLE_FOLLOWER_ADMISSION,
+  type TelegramBusFollowerView,
+  type TelegramBusForwardOwnership,
+} from "./bus.ts";
 import { getTelegramTargetKey, type TelegramTarget } from "./target.ts";
 
 export interface TelegramMessageOwnershipRecord {
@@ -44,15 +49,17 @@ export interface TelegramMessageOwnershipStore {
   clear: () => void;
 }
 
-export interface TelegramFollowerOwnershipView {
-  instanceId: string;
-  connectedAtMs: number;
-  profileKey?: string;
-  registrationGeneration?: string;
-}
+export type TelegramFollowerOwnershipView = Pick<
+  TelegramBusFollowerView,
+  "instanceId" | "connectedAtMs" | "profileKey" | "registrationGeneration" | "protocol"
+>;
 
 export interface TelegramBusMessageOwnershipRuntime {
   store: TelegramMessageOwnershipStore;
+  getForwardOwnership(
+    chatId: number,
+    messageId: number,
+  ): TelegramBusForwardOwnership | undefined;
   recordLocal(input: {
     chatId: number;
     messageId: number;
@@ -137,6 +144,20 @@ export function createTelegramBusMessageOwnershipRuntime(deps: {
   };
   return {
     store,
+    getForwardOwnership(chatId, messageId) {
+      const record = store.get(chatId, messageId);
+      if (!record?.ownerGeneration || !record.recipientBindingKey) return record;
+      const follower = deps.listFollowers().find((candidate) =>
+        candidate.instanceId === record.instanceId &&
+        candidate.registrationGeneration === record.ownerGeneration &&
+        candidate.profileKey === record.recipientBindingKey,
+      );
+      // Protocol is live registration authority, not message-cache history.
+      // Keep an incomplete known owner foreign so the forwarder fails closed.
+      return follower?.protocol?.capabilities.includes(
+        TELEGRAM_BUS_CAPABILITY_DURABLE_FOLLOWER_ADMISSION,
+      ) ? { ...record, protocolIdentity: follower.protocol } : record;
+    },
     recordLocal(input) {
       return store.record({ ...input, instanceId: deps.instanceId });
     },

package/node_modules/@llblab/pi-telegram/lib/updates.ts

@@ -14,6 +14,7 @@ import {
 import type {
   TelegramBusEnvelope,
   TelegramBusFollowerView,
+  TelegramBusForwardOwnership,
   TelegramBusForeignUpdateSettlement,
   TelegramProcessLiveness,
 } from "./bus.ts";
@@ -345,22 +346,14 @@ export function getAuthorizedTelegramGuestMessage(
 
 // --- Flow ---
 
-export interface TelegramMessageOwnershipView {
-  instanceId: string;
-  ownerGeneration?: string;
-  recipientBindingKey?: string;
-}
+export type TelegramMessageOwnershipView = TelegramBusForwardOwnership;
 
 export type TelegramMessageOwnershipLookup = (
   chatId: number,
   messageId: number,
 ) => TelegramMessageOwnershipView | undefined;
 
-export interface TelegramTargetOwnershipView {
-  instanceId: string;
-  ownerGeneration?: string;
-  recipientBindingKey?: string;
-}
+export type TelegramTargetOwnershipView = TelegramBusForwardOwnership;
 
 export type TelegramTargetOwnershipLookup = (
   target: TelegramTarget,

package/node_modules/@llblab/pi-telegram/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-telegram",
-  "version": "0.45.7",
+  "version": "0.45.8",
   "private": false,
   "publishConfig": {
     "access": "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-kit",
-  "version": "0.10.7",
+  "version": "0.11.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -44,8 +44,8 @@
     "@llblab/pi-clean-room": "0.1.1",
     "@llblab/pi-codex-usage": "0.9.4",
     "@llblab/pi-grow-loop": "0.8.1",
-    "@llblab/pi-state-flow": "0.9.6",
-    "@llblab/pi-telegram": "0.45.7",
+    "@llblab/pi-state-flow": "0.10.0",
+    "@llblab/pi-telegram": "0.45.8",
     "@llblab/skills": "1.15.0"
   },
   "bundledDependencies": [