@llblab/pi-kit 0.15.0 → 0.16.0

package/node_modules/@llblab/pi-state-flow/dist/lib/storage.js

@@ -2,7 +2,7 @@
 // Excludes: temporal algebra, Pi lifecycle, Git objects/remotes, and backend fallback policy.
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { closeSync, lstatSync, mkdirSync, openSync, rmSync, writeFileSync } from "node:fs";
+import { closeSync, lstatSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { assertOwnedFileUpdates, captureTemporalFileBases, parseScopeProvenance, parseScopeStream, restoreDurableFileBases, serializeScopeMetadata, sessionRuntimePaths, temporalScopePaths, temporalStateFileUpdates, writeOwnedFileUpdates, } from "./durable.js";
 import { parseArtifactProvenanceRegistry } from "./artifact.js";
@@ -36,18 +36,52 @@ export function initializeFileStore(root) {
     assertStorageDirectory(root);
     mkdirSync(resolve(root), { recursive: true });
 }
+const PUBLICATION_LOCK_WAIT_MS = 2_000;
+const PUBLICATION_LOCK_POLL_MS = 25;
+const publicationLockWait = new Int32Array(new SharedArrayBuffer(4));
+function liveForeignLockOwner(path) {
+    let owner;
+    try {
+        owner = readFileSync(path, "utf8").trim();
+    }
+    catch {
+        return true;
+    }
+    if (owner.length === 0)
+        return true;
+    if (!/^[1-9]\d*$/.test(owner))
+        return false;
+    const pid = Number(owner);
+    if (!Number.isSafeInteger(pid) || pid === process.pid)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+/** Wait only for a cooperating live owner; interrupted or malformed locks remain explicit recovery errors. */
+export function acquirePublicationLock(path, unavailable) {
+    const deadline = Date.now() + PUBLICATION_LOCK_WAIT_MS;
+    while (true) {
+        try {
+            return openSync(path, "wx", 0o600);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST" || !liveForeignLockOwner(path) || Date.now() >= deadline)
+                throw unavailable(error);
+            Atomics.wait(publicationLockWait, 0, 0, Math.min(PUBLICATION_LOCK_POLL_MS, deadline - Date.now()));
+        }
+    }
+}
 /** Git writers also acquire this lock before their common-Git-directory lock. */
 export function withStoragePublicationLock(repositoryRoot, action) {
     const root = resolve(repositoryRoot);
     assertStorageDirectory(root);
     const path = resolve(root, ".state-flow-publication.lock");
-    let descriptor;
-    try {
-        descriptor = openSync(path, "wx", 0o600);
-    }
-    catch (error) {
-        throw new RevisionUnavailableError(`State Flow publication lock is unavailable at ${path}; reconcile the active or interrupted publisher before retrying`, { cause: error });
-    }
+    const descriptor = acquirePublicationLock(path, (cause) => new RevisionUnavailableError(`State Flow publication lock is unavailable at ${path}; reconcile the active or interrupted publisher before retrying`, { cause }));
     try {
         writeFileSync(descriptor, `${process.pid}\n`);
         return action(root);
@@ -83,9 +117,9 @@ export function planTemporalPublication(cwd, sessionId, view, scopes, current, r
         changedScopes.push(scope);
     }
     const provenanceUpdates = [];
-    // Shared metadata owns provenance, temporal boundaries, and CWD identity beside semantic files.
+    // Every scope metadata file owns provenance and temporal boundaries beside semantic files.
     if (!runtimeOnly) {
-        for (const scope of ["global", "cwd"]) {
+        for (const scope of SCOPES) {
             const paths = temporalScopePaths(cwd, sessionId, scope, root, sessionKey);
             const registry = provenance?.[scope] ?? parseScopeProvenance(files.get(paths.meta).content, paths.meta);
             const currentFile = files.get(paths.meta);
@@ -98,22 +132,23 @@ export function planTemporalPublication(cwd, sessionId, view, scopes, current, r
         }
     }
     const runtimePaths = sessionRuntimePaths(cwd, sessionId, root, sessionKey);
-    const previousRuntime = parseSessionRuntime(files.get(runtimePaths.config).content, files.get(runtimePaths.meta).content, cwd, sessionId);
+    const previousRuntime = parseSessionRuntime(files.get(runtimePaths.config).content, files.get(runtimePaths.runtime).content, cwd, sessionId, files.get(runtimePaths.meta).content);
     if (previousRuntime !== undefined && changedScopes.length > 0 && runtime === undefined)
         throw new Error("Temporal semantic publication requires its session runtime cohort");
     const runtimeUpdates = [];
     if (runtime !== undefined) {
-        const sources = serializeSessionRuntime(runtime, cwd, sessionId, runtimeOnly ? undefined : view.scopes.session, files.get(runtimePaths.meta).content);
+        const sources = serializeSessionRuntime(runtime, cwd, sessionId);
         if (!sameJson(runtime.meta.lineage, view.lineage))
             throw new Error("Runtime lineage does not match the temporal cohort");
-        if (files.get(runtimePaths.config).content !== sources.config || files.get(runtimePaths.meta).content !== sources.meta) {
-            runtimeUpdates.push({ path: runtimePaths.config, content: sources.config }, { path: runtimePaths.meta, content: sources.meta });
+        if (files.get(runtimePaths.config).content !== sources.config || files.get(runtimePaths.runtime).content !== sources.runtime) {
+            runtimeUpdates.push({ path: runtimePaths.config, content: sources.config }, { path: runtimePaths.runtime, content: sources.runtime });
         }
-    }
-    else if (!runtimeOnly && changedScopes.includes("session")) {
-        const content = serializeScopeMetadata(undefined, view.scopes.session, "session", undefined, files.get(runtimePaths.meta).content);
-        if (files.get(runtimePaths.meta).content !== content)
+        if (files.get(runtimePaths.runtime).identity === "missing" && files.get(runtimePaths.meta).content !== undefined
+            && previousRuntime !== undefined && !provenanceUpdates.some(({ path }) => path === runtimePaths.meta)) {
+            const registry = provenance?.session ?? parseArtifactProvenanceRegistry(previousRuntime.meta.artifacts, "State Flow session artifact provenance");
+            const content = serializeScopeMetadata(registry, view.scopes.session, "session", undefined, files.get(runtimePaths.meta).content);
             runtimeUpdates.push({ path: runtimePaths.meta, content });
+        }
     }
     const changedPaths = new Set(changedScopes.flatMap((scope) => {
         const paths = temporalScopePaths(cwd, sessionId, scope, root, sessionKey);
@@ -150,7 +185,7 @@ function decodeFileCohort(cwd, sessionId, root, base, sessionKey = sessionId) {
         scopes[scope] = stream;
     }
     const paths = sessionRuntimePaths(cwd, sessionId, root, sessionKey);
-    const runtime = parseSessionRuntime(files.get(paths.config), files.get(paths.meta), cwd, sessionId);
+    const runtime = parseSessionRuntime(files.get(paths.config), files.get(paths.runtime), cwd, sessionId, files.get(paths.meta));
     if (!runtime || runtime.meta.publication !== "files")
         throw new Error("File-only recovery requires file publication provenance, not a Git self reference");
     const view = { scopes, lineage: runtime.meta.lineage };
@@ -158,7 +193,7 @@ function decodeFileCohort(cwd, sessionId, root, base, sessionKey = sessionId) {
     const provenance = {
         global: parseScopeProvenance(files.get(temporalScopePaths(cwd, sessionId, "global", root, sessionKey).meta), temporalScopePaths(cwd, sessionId, "global", root, sessionKey).meta),
         cwd: parseScopeProvenance(files.get(temporalScopePaths(cwd, sessionId, "cwd", root, sessionKey).meta), temporalScopePaths(cwd, sessionId, "cwd", root, sessionKey).meta),
-        session: parseArtifactProvenanceRegistry(runtime.meta.artifacts, "State Flow session artifact provenance"),
+        session: parseScopeProvenance(files.get(paths.meta), paths.meta),
     };
     return { runtime, view, provenance };
 }

package/node_modules/@llblab/pi-state-flow/dist/lib/telegram.d.ts

@@ -13,21 +13,23 @@ export interface StateFlowTelegramState {
     contract: Record<string, unknown>;
     working: Record<string, unknown>;
     response: string;
+    lazy?: unknown;
 }
+export type StateFlowTelegramRichText = string | StateFlowTelegramRichText[] | {
+    type: "bold" | "code";
+    text: StateFlowTelegramRichText;
+};
 export type StateFlowTelegramRichBlock = {
     type: "heading";
-    text: string;
+    text: StateFlowTelegramRichText;
     size: 3;
 } | {
     type: "pre";
-    text: string;
+    text: StateFlowTelegramRichText;
     language?: string;
 } | {
     type: "details";
-    summary: string | {
-        type: "bold" | "code";
-        text: string;
-    };
+    summary: StateFlowTelegramRichText;
     blocks: StateFlowTelegramRichBlock[];
     is_open?: true;
 };

package/node_modules/@llblab/pi-state-flow/dist/lib/telegram.js

@@ -77,6 +77,9 @@ function renderStateFlowTelegramField(value) {
         const length = Math.floor((low + high) / 2);
         const candidate = JSON.stringify({
             truncated: true,
+            ...(value !== null && typeof value === "object" && !Array.isArray(value)
+                ? { keys: Object.keys(value) }
+                : {}),
             preview: json.slice(0, length),
             omittedChars: json.length - length,
         }, null, 2);
@@ -91,14 +94,18 @@ function renderStateFlowTelegramField(value) {
     return rendered;
 }
 export function renderStateFlowRichState(scope, step, state) {
-    const fields = ["artifacts", "contract", "working", "response"];
+    const fields = ["artifacts", "contract", "working", "response", "lazy"];
     return {
         blocks: [
-            { type: "heading", text: `${STATE_FLOW_SCOPE_LABELS[scope]}: \`#${step}\``, size: 3 },
+            {
+                type: "heading",
+                text: [`${STATE_FLOW_SCOPE_LABELS[scope]}: `, { type: "code", text: `#${step}` }],
+                size: 3,
+            },
             ...fields.map((field) => ({
                 type: "details",
                 summary: { type: "code", text: field },
-                blocks: [{ type: "pre", language: "json", text: renderStateFlowTelegramField(state[field]) }],
+                blocks: [{ type: "pre", language: "json", text: renderStateFlowTelegramField(state[field] ?? {}) }],
             })),
         ],
         skip_entity_detection: true,

package/node_modules/@llblab/pi-state-flow/dist/lib/transition.js

@@ -3,7 +3,7 @@ import { createAcceptedTransition } from "./history.js";
 import { applyPatch, containsNull, hashJson, isObject, validatePatch } from "./json.js";
 import { hasCompiledSkillArtifact, SKILL_ARTIFACT_COMPILER } from "./skills.js";
 const SCOPES = new Set(["global", "cwd", "session"]);
-const PATCH_KEYS = new Set(["artifacts", "contract", "working"]);
+const PATCH_KEYS = new Set(["artifacts", "contract", "working", "lazy"]);
 function compileReadArtifacts(nextState, patch, successfulArtifactReads, provenance) {
     for (const read of successfulArtifactReads) {
         const output = patch.artifacts[read.path];
@@ -77,14 +77,17 @@ function validateScopePatch(scope, patch) {
     validatePatch(patch);
     for (const key of Object.keys(patch)) {
         if (!PATCH_KEYS.has(key)) {
-            throw new Error(`Scoped State Flow patches cannot modify ${key}; only artifacts, contract, and working are model-owned`);
+            throw new Error(`Scoped State Flow patches cannot modify ${key}; only artifacts, contract, working, and lazy are model-owned`);
         }
     }
-    for (const key of PATCH_KEYS) {
+    for (const key of ["artifacts", "contract", "working"]) {
         if (Object.hasOwn(patch, key) && !isObject(patch[key])) {
             throw new Error(`Scoped State Flow patch field ${key} must be a JSON object`);
         }
     }
+    if (Object.hasOwn(patch, "lazy") && patch.lazy === null) {
+        throw new Error("Scoped State Flow patch field lazy cannot be null");
+    }
     if (isObject(patch.artifacts))
         validateModelArtifactPatch(patch.artifacts);
 }
@@ -94,6 +97,7 @@ function completePatch(patch, response) {
         contract: patch.contract ?? {},
         working: patch.working ?? {},
         response,
+        ...(Object.hasOwn(patch, "lazy") ? { lazy: structuredClone(patch.lazy) } : {}),
     };
 }
 /** Stage all scope updates against one immutable basis before any state is published. */

package/node_modules/@llblab/pi-state-flow/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-state-flow",
-  "version": "0.13.3",
+  "version": "0.14.0",
   "private": false,
   "description": "Incremental scoped state/context/memory compiler for Pi, inspired by SKILL.state",
   "keywords": [

package/node_modules/@llblab/pi-state-flow/dist/skills/state-flow-memory/SKILL.md

@@ -46,6 +46,8 @@ Separate a binding requirement from the method currently proposed to satisfy it.
 
 When it affects continuation, retain what was proposed, accepted, rejected, corrected, explained, or left unresolved, and what the next response or action must address. Preserve enough referents for pending follow-ups to make sense.
 
+Treat every completed work slice as a possible restart boundary. Its checkpoint should let a fresh executor recover the achieved outcome, surviving evidence, active commitments, decision-relevant uncertainty, and exact continuation without replaying the prior reasoning trajectory. Optimize decomposition for resumability as well as functional completion; if the next safe action depends on transient context that will disappear, the slice is not yet at a sufficient boundary.
+
 Keep consequences, not a transcript or a personality dossier. Do not invent shared history or claim subjective continuity. A fresh run should not unnecessarily reopen a settled exchange or treat an unanswered proposal as approved.
 
 ### Preserve learning at its demonstrated boundary
@@ -70,11 +72,17 @@ A locator supports later retrieval; it does not replace content needed for the n
 
 Do not rerun the underlying project merely to curate its memory. Leave an exact unresolved check when verification falls outside the requested boundary.
 
-### Compact without flattening
+### Preserve priority and keep Lazy shallow
+
+Treat array order in Lazy as semantic priority: earlier entries are higher priority. Preserve that order deliberately; do not reorder entries for aesthetics, incidental grouping, or normalization.
+
+Minimize Lazy nesting, especially for top-level collections. Keep a top-level collection as a direct array when its members are the domain values. Represent a standalone item directly, normally as a string; use an object only when that item genuinely owns structured or nested fields. Do not add `items`, `owner`, `source`, or similar wrapper objects merely to describe the collection, and do not introduce nested arrays unless the domain itself requires a matrix or grouped sequence.
+
+### Compact without flattening meaning
 
 Merge redundant fragments and remove obsolete scaffolding, repeated argumentation, and routine progress. Do not rewrite unchanged state merely to normalize wording.
 
-Do not erase a meaningful correction, uncertainty, commitment, negative result, or continuation dependency to make state shorter. Do not retain the previous chain of reasoning solely to steer the next run toward the same method.
+Do not erase a meaningful correction, uncertainty, commitment, negative result, priority order, or continuation dependency to make state shorter. Do not retain the previous chain of reasoning solely to steer the next run toward the same method.
 
 ### Reconcile phase boundaries
 
@@ -90,7 +98,7 @@ Effective state does not prove which scope owns a value. When ownership matters
 
 Before writing, review the proposed changes once within the requested boundary:
 
-- Would a fresh executor know what must still hold, what changed, what remains unresolved, and how to continue?
+- Would a fresh executor know what must still hold, what changed, what remains unresolved, and the exact next action without replaying the prior cognitive trajectory?
 - Could an omission cause a known failed attempt, an unnecessary repeated explanation, or loss of an active commitment?
 - Could a retained claim impose an unapproved method, overgeneralize a result, or hide a live alternative?
 

package/node_modules/@llblab/pi-state-flow/docs/README.md

@@ -2,6 +2,7 @@
 
 - [Usage and recovery](usage.md): Configuration, new/resumed sessions, Start/Stop, diagnostics, privacy, and storage recovery.
 - [Architecture](architecture.md): Semantic state, temporal algebra, Pi lifecycle, storage, publication, artifacts, and embedding contracts.
+- [Lazy state](lazy-state.md): Implemented ordinary-JSON lazy planes, an effective-by-default `lazy` read path, pure state/patch snapshots, narrow structural `meta` + `keys`, and recursive indexed array patches.
 - [Filesystem recovery](filesystem-recovery.md): Cohort-wide absence, partial-presence, malformed-evidence, repair-authority, and transaction rules.
 - [Temporal acceptance](temporal-acceptance.md): The twenty required temporal properties and their executable witnesses.
 - [SDK compatibility](compatibility.md): Tested dependency stacks, public lifecycle seams, isolated validation, and host limits.

package/node_modules/@llblab/pi-state-flow/docs/architecture.md

@@ -100,6 +100,7 @@ The default store is `<agentDir>/state-flow`, independent from Markdown discover
 Owned paths are:
 
 ```text
+config.json
 checkpoint.json
 patches.jsonl
 meta.json
@@ -108,13 +109,14 @@ meta.json
 <cwd-key>/meta.json
 <cwd-key>/<session-key>/checkpoint.json
 <cwd-key>/<session-key>/patches.jsonl
-<cwd-key>/<session-key>/config.json
 <cwd-key>/<session-key>/meta.json
+<cwd-key>/<session-key>/config.json
+<cwd-key>/<session-key>/runtime.json
 ```
 
 CWD and session keys mirror Pi's native encoding. The Pi UUID remains authoritative; readable directory keys never replace identity validation.
 
-`checkpoint.json` is only the canonical materialized semantic state, and each nonblank `patches.jsonl` line is only one semantic patch. Scope `meta.json` owns the checkpoint/tail boundaries, CWD owner identity, and runtime artifact provenance for its scope; the session file additionally owns lineage, counters, session identity, publication provenance and remote-publication policy. Metadata writers replace only their owned leaves and preserve JSON-safe unknown siblings. Pi checkpoints retain only an exact Git revision, an exact `file:<hash>` cohort reference, or a proven ordinary-disabled marker.
+Root `config.json` is the read-only operator configuration shared by every session in the repository; it never participates in semantic overlay. `checkpoint.json` is only the canonical materialized semantic state, and each nonblank `patches.jsonl` line is only one semantic patch. Every scope's `meta.json` symmetrically owns checkpoint/tail boundaries and artifact provenance, with CWD ownership added where applicable. Session `config.json` owns behavior; session `runtime.json` asymmetrically owns lineage, counters, session identity, publication provenance, remote-publication policy, and the full specification only while a run is unfinished. The predecessor combined session `meta.json` remains readable as migration input and is separated by the next normal CAS publication. Metadata writers replace only their owned leaves and preserve JSON-safe unknown siblings. Pi checkpoints retain only an exact Git revision, an exact `file:<hash>` cohort reference, or a proven ordinary-disabled marker.
 
 All owned writes use same-directory atomic replacement, regular-file and symlink checks, prepared byte receipts and CAS validation. Unrelated files and detected concurrent bytes are preserved; Git staging follows the acceptance contract below. Rollback restores only bytes still matching the failed publisher's output.
 
@@ -122,7 +124,7 @@ All owned writes use same-directory atomic replacement, regular-file and symlink
 
 If Git is unavailable specifically through executable `ENOENT`, State Flow uses file-only persistence. File mode retains exact current materialization and proven hot history but offers no arbitrary cold revisions.
 
-With Git, each effective semantic cohort creates one local commit immediately through an isolated index that stages the complete non-ignored worktree delta before overlaying the exact prepared State Flow outputs; the caller-visible index is synchronized to the committed tree afterward. Each prepared content is still hashed separately from its supplied bytes, never substituted by mutable worktree reads or filtered staging. Prepared blobs enter the isolated index through one NUL-delimited `update-index --index-info` batch, preserving literal path characters; explicit removals retain their existing path. Any failed batch aborts before reference publication and follows the same exact-output rollback and temporary-index cleanup. Activation returns after local runtime acceptance for normal `turn-end`/`off` policy, skips full predecessor migration planning only when legacy snapshots and complete predecessor checkpoint/tail envelopes are absent, and defers Markdown discovery until the next enabled inference. State Flow-owned active files keep compare-and-swap protection, and `.gitignore` stays authoritative. Git supplies cold history and exact branch restoration. Runtime `revision: "self"` resolves to the commit that owns the runtime record, never arbitrary `HEAD`. Runtime-only writes may use `temporalRevision` to select older semantic streams and their matching artifact provenance. They update the current session's config/meta without rewriting live shared checkpoints, tails, or provenance.
+With Git, each effective semantic cohort creates one local commit immediately through an isolated index that stages the complete non-ignored worktree delta before overlaying the exact prepared State Flow outputs; the caller-visible index is synchronized to the committed tree afterward. Each prepared content is still hashed separately from its supplied bytes, never substituted by mutable worktree reads or filtered staging. Prepared blobs enter the isolated index through one NUL-delimited `update-index --index-info` batch, preserving literal path characters; explicit removals retain their existing path. Any failed batch aborts before reference publication and follows the same exact-output rollback and temporary-index cleanup. Activation returns after local runtime acceptance for normal `turn-end`/`off` policy, skips full predecessor migration planning only when legacy snapshots and complete predecessor checkpoint/tail envelopes are absent, and defers Markdown discovery until the next enabled inference. State Flow-owned active files keep compare-and-swap protection, and `.gitignore` stays authoritative. Git supplies cold history and exact branch restoration. Runtime `revision: "self"` resolves to the commit that owns the runtime record, never arbitrary `HEAD`. Runtime-only writes may use `temporalRevision` to select older semantic streams and their matching artifact provenance. They update the current session's `config.json`/`runtime.json` without rewriting live shared checkpoints, tails, or provenance.
 
 Branch recovery validates immutable selection before live publication acquisition. `TemporalRuntime.prepareRestore` returns a detached snapshot and an instance-bound, single-use restoration closure. For an exact matching Git owner, that closure reuses the validated cohort and provenance rather than decoding them twice; it still captures the current publication basis under exclusion before installing any runtime fields. Expired file cohorts, legacy snapshot fallbacks, and references redirected to another runtime owner take the fresh-read path. A consumed or failed preparation cannot be replayed, and neither the mutable inspection snapshot nor an old publication basis can become restore authority. This is bounded reuse within one selection, not a cross-session revision cache.
 

package/node_modules/@llblab/pi-state-flow/docs/filesystem-recovery.md

@@ -8,7 +8,8 @@ State Flow classifies absence separately from partial or malformed evidence. Rec
 | CWD `checkpoint.json` + `patches.jsonl` | State Flow; authoritative shared semantics with CWD identity | Same as global; selected values are not resurrected | Same as global; owner mismatch also fails closed | Normal CAS publication may materialize the complete empty pair |
 | Session `checkpoint.json` + `patches.jsonl` | State Flow; authoritative private semantics | Fresh lifecycle origin may initialize; an existing selected session requires exact retained authority | Partial or malformed pair fails closed | Fresh initialization or exact selected-revision recovery only |
 | Global/CWD `meta.json` | State Flow; temporal boundaries, CWD identity, and artifact provenance | Missing metadata removes temporal authority and fails closed; only an omitted `artifacts` leaf degrades provenance to `{}` | Malformed metadata or semantic/boundary mismatch fails closed | Normal CAS publication from a complete proven cohort |
-| Session `config.json` + `meta.json` | State Flow; authoritative runtime identity, lineage, temporal boundaries and session provenance | Fresh origin may initialize; selected sessions recover only from exact authority | Partial, malformed, contradictory identity, lineage, boundary, or revision fails closed | Canonical runtime publication from proven lifecycle/selected state |
+| Session `meta.json` | State Flow; session temporal boundaries and artifact provenance | Fresh origin may initialize; selected sessions recover only from exact scope authority | Partial, malformed, or contradictory boundary evidence fails closed | Canonical scope publication from the selected temporal state |
+| Session `config.json` + `runtime.json` | State Flow; behavior plus authoritative runtime identity, lineage, counters, and publication recovery | Fresh origin may initialize; selected sessions recover only from exact authority | Partial, malformed, contradictory identity, lineage, or revision fails closed | Canonical runtime publication from proven lifecycle/selected state; predecessor combined `meta.json` is migration input only |
 | Unsupported `state.json`, hashed layouts, or semantic Pi checkpoints | No current authority | Ignored | Presence never becomes recovery or migration input | Operator-managed removal or external conversion only |
 | Selected Git revision blobs/modes | Git object database; immutable cold authority | A required blob/revision is unavailable | Mode, owner, hash, or cohort contradiction fails closed | Read-only reconstruction; never checkout/reset the live worktree |
 | File-only revision pointer/cohort | State Flow/Pi entry; current exact authority only | No cold history can be invented | Any identity mismatch or incomplete retained cohort fails closed | Exact current cohort only; normal locked publication writes repairs |
@@ -16,7 +17,7 @@ State Flow classifies absence separately from partial or malformed evidence. Rec
 | Worker lease | State Flow; operational ownership | Unclaimed | Malformed/foreign live evidence is preserved; live owner excludes peers | Existing dead-process reclamation protocol only |
 | Publication locks | State Flow; mutual exclusion | Unlocked | Present lock excludes publishers, including interrupted owners | Current owner releases; no opportunistic deletion |
 | Temporary queue files / isolated Git index | Creating State Flow operation; transient | No pending preparation | Unknown surviving files grant no authority | Creating operation cleans its own temporary path; fatal residue is not adopted |
-| Extension `state-flow.json` | Operator; optional external configuration | Built-in defaults | Present unreadable/malformed/unknown settings fail extension configuration | State Flow never creates or rewrites it |
+| Repository-root `config.json` | Operator; optional global configuration, versioned with the store | Built-in defaults | Present unreadable/malformed/unknown settings fail extension configuration | State Flow never creates or rewrites it; ordinary repository publication preserves and versions operator edits |
 | Knowledge root and Markdown | External Knowledge owner | Freshness unavailable; durable semantic state remains | Unsafe paths or malformed/unreadable sources disable acquisition locally | Never create; semantic removal only under existing confirmed ownership rules |
 | Skill and external artifact sources | External package/user owner | Freshness unavailable unless ownership proves removal semantics | Unsafe/non-regular/unreadable sources disable acquisition locally | Never create or fabricate source/provenance |
 | Pi State Flow entries and diagnostics | Pi session log / State Flow entry owner | Missing optional diagnostics provide no evidence; missing required selected pointer blocks that restore | Malformed or contradictory owner/version/pointer fails the dependent restore | Append through Pi entry APIs only; no standalone diagnostics file exists |