@phyzess/pappra 0.1.0-beta.8 → 0.1.0-beta.9

package/README.md

@@ -55,7 +55,9 @@ configured knowledge sources.
 
 Optional examples have prerequisites rather than generated files: code-graph and
 host commands require the selected external CLI/support, and collaboration
-requires an explicit controller. They are not needed for the core workflow above.
+requires an explicit controller. `--controller pi-rpc` is the host-directs/Pi-executes
+path, verified end to end against Pi 1.3.0; see [Pi RPC collaboration](docs/pi-rpc.md).
+They are not needed for the core workflow above.
 
 ## What it manages
 
@@ -87,7 +89,7 @@ The check runs the source policy, type checks, formatting, deterministic tests a
 
 ## Status and limits
 
-Pappra is development software (`0.1.0-beta.8`) published as `@phyzess/pappra` under the `beta` dist-tag. Releases are published from GitHub Actions with npm trusted publishing (OIDC), so no npm token is stored in this repository. Pin either the moving `beta` tag or an exact version such as `@phyzess/pappra@0.1.0-beta.8`, because pre-release versions are never republished.
+Pappra is development software (`0.1.0-beta.9`) published as `@phyzess/pappra` under the `beta` dist-tag. Releases are published from GitHub Actions with npm trusted publishing (OIDC), so no npm token is stored in this repository. Pin either the moving `beta` tag or an exact version such as `@phyzess/pappra@0.1.0-beta.9`, because pre-release versions are never republished.
 
 The deterministic suite covers synthetic workspaces, fixtures and local process boundaries. It does not establish real-model behavior, native host callability on every platform, CodeGraph completeness, Windows/Linux parity or production performance. A host adapter version pin is an observed support claim, not proof that a particular native installation will load or run correctly.
 

package/dist/app/collaboration.js

@@ -461,17 +461,6 @@ function currentNativeResult(file, baseline) {
         return null;
     }
 }
-function regularFileSize(file) {
-    if (file === null || !path.isAbsolute(file))
-        return null;
-    try {
-        const observed = fs.lstatSync(file);
-        return observed.isFile() ? observed.size : null;
-    }
-    catch {
-        return null;
-    }
-}
 function writeNewFile(file, bytes) {
     fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
     fs.writeFileSync(file, bytes, { flag: 'wx', mode: 0o600 });
@@ -1359,10 +1348,14 @@ export class PiRpcController {
                 possible_start: stage === 'identity',
             };
         }
-        const nativeSessionFile = started.session.sessionFile();
-        const nativeSessionBaseline = regularFileSize(nativeSessionFile);
+        let nativeSessionFile = null;
+        let nativeSessionBaseline = 0;
         try {
             await started.session.prompt();
+            // The handle sampled the baseline before it sent the prompt; read it afterwards so
+            // both values describe the launch that just completed.
+            nativeSessionFile = started.session.sessionFile();
+            nativeSessionBaseline = started.session.promptBaseline();
         }
         catch (error) {
             await started.session.finish().catch(() => undefined);

package/dist/hosts/pi/rpc.d.ts

@@ -461,6 +461,8 @@ export declare function startOwnedPiRpc(options: PiOptions): Promise<{
         pid: number | null;
         expectedSessionId: string | null;
         sessionFile: () => string | null;
+        /** Byte offset sampled immediately before the prompt was sent. */
+        promptBaseline: () => number;
         /** Read-only native query. Repeatable; always recorded through the protocol. */
         query(): Promise<{
             at: string;

package/dist/hosts/pi/rpc.js

@@ -680,6 +680,7 @@ export async function startOwnedPiRpc(options) {
     let reportedSessionFile = null;
     let boundSessionFile = null;
     let promptSent = false;
+    let promptBaseline = 0;
     let lastPromptOrdinal = 0;
     let operationError = null;
     let finishPromise = null;
@@ -822,6 +823,8 @@ export async function startOwnedPiRpc(options) {
         pid: child.pid ?? null,
         expectedSessionId: admission.expected_identity,
         sessionFile: () => boundSessionFile,
+        /** Byte offset sampled immediately before the prompt was sent. */
+        promptBaseline: () => promptBaseline,
         /** Read-only native query. Repeatable; always recorded through the protocol. */
         async query() {
             try {
@@ -894,7 +897,24 @@ export async function startOwnedPiRpc(options) {
                     throw new PiRpcRefusal('prompt_already_sent', 'invalid', 'one frozen prompt per launch');
                 assertNamespaceGuard(opts);
                 assertCurrentAuthority({ requireResources: true });
-                await assertIdentity({ requireBinding: true });
+                // Pi creates the session file lazily, on the first persisted message. The
+                // pre-prompt check therefore verifies the reported session id without requiring
+                // the header; the post-prompt check requires the bound header before the run is
+                // accepted.
+                await assertIdentity({ requireBinding: false });
+                // The controller publishes only records written after this baseline, so it must
+                // be sampled before the prompt creates the first message.
+                const baselineFile = reportedSessionFile;
+                promptBaseline = (() => {
+                    if (baselineFile === null)
+                        return 0;
+                    try {
+                        return fs.statSync(baselineFile).size;
+                    }
+                    catch {
+                        return 0;
+                    }
+                })();
                 const ordinalBefore = rpc.recordCount();
                 const response = await request('prompt', { message: opts.promptText });
                 const disposition = response.data?.disposition;
@@ -902,6 +922,24 @@ export async function startOwnedPiRpc(options) {
                     !['started', 'queued', 'handled'].includes(disposition)) {
                     throw new PiRpcRefusal('prompt_not_accepted', 'needs_input', `disposition ${disposition}`);
                 }
+                // The header row is flushed just after the prompt is accepted, so bind with a
+                // short bounded retry instead of racing the writer.
+                const bindDeadline = Date.now() + 2_000;
+                for (;;) {
+                    try {
+                        await assertIdentity({ requireBinding: true });
+                        break;
+                    }
+                    catch (error) {
+                        const retryable = error instanceof PiRpcRefusal &&
+                            (error.code === 'native_session_file_unavailable' ||
+                                error.code === 'native_session_header_invalid') &&
+                            Date.now() < bindDeadline;
+                        if (!retryable)
+                            throw error;
+                        await new Promise((resolve) => setTimeout(resolve, 50));
+                    }
+                }
                 promptSent = true;
                 lastPromptOrdinal = ordinalBefore;
                 proof.prompt = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phyzess/pappra",
-  "version": "0.1.0-beta.8",
+  "version": "0.1.0-beta.9",
   "description": "Portable workspace knowledge and continuity for coding agents.",
   "publishConfig": {
     "access": "public"