pi-daddy 0.40.0 → 0.41.0

package/src/kernel/ledger-identifiers.ts

@@ -1,7 +1,27 @@
 const DISPLAY_IDENTIFIER = /^[A-Za-z0-9@*][A-Za-z0-9@*._:/-]{0,511}$/;
 const CORRELATION_IDENTIFIER = /^[A-Za-z0-9@*][A-Za-z0-9@*._:/-]{0,127}$/;
 const CAPABILITY_TAIL = /^[A-Za-z0-9@*][A-Za-z0-9@*._/-]{0,255}$/;
-const CAPABILITY_PREFIXES = ["tool:", "skill:", "agent:", "workspace:", "ext:"] as const;
+/**
+ * The namespaces a ledger capability field may hold — **derived, not restated.**
+ *
+ * **This was a second copy of the list and it took a whole namespace down.** ADR-0078 added `context:` to
+ * `CAPABILITY_NAMESPACE_PREFIXES` and nothing added it here, so `isLedgerCapabilityIdentifier("context:summary")`
+ * was false. Every capability-decision event carries `requested`, `parentGrant`, `effective`, `denied`, `clipped`
+ * and `gatedBlocked`, all validated with this, so a session whose grant contained ANY `context:` id could not
+ * write a decision at all — and a ledger write that throws denies the delegation. The operator saw
+ * `delegation refused: grants: ledger write failed, denying — TypeError: invalid ledger v3 event: capability
+ * decision requested must contain capability identifiers`, with no indication that the cause was the namespace.
+ *
+ * 0.40.0 widened the blast radius rather than causing it: held-back definitions began contributing `context:`
+ * ids to the generated grant, so far more sessions carry one.
+ *
+ * Importing the kernel's list is the fix, and the point. This package has spent a whole session finding the same
+ * shape — one rule, two spellings, the guard on the quieter one — and a validator that restates what it
+ * validates is that shape with a ledger behind it.
+ */
+import { CAPABILITY_NAMESPACE_PREFIXES } from "./capabilities.ts";
+
+const CAPABILITY_PREFIXES = CAPABILITY_NAMESPACE_PREFIXES;
 
 /** Identifier text safe to copy onto the operator's terminal; prose belongs in no ledger display field. */
 export function isLedgerDisplayIdentifier(value: unknown): value is string {

package/src/kernel/propagation.ts

@@ -33,12 +33,14 @@ import { inheritApprovals, type InheritableApproval } from "./approval.ts";
 import { assertCapabilitiesArePropagatable } from "./capabilities.ts";
 import {
   ENV_ADVISOR_MODEL,
+  ENV_ADVISOR_TASK_EGRESS,
   ENV_ADVISOR_KEY,
   ENV_ADVISOR,
   ENV_GRANT,
   ENV_FANOUT,
   ENV_PARENT_ID,
   ENV_EXECUTION_ID,
+  ENV_EPISODE_ID,
   ENV_DEPTH,
   ENV_MAX_DEPTH,
   ENV_GATED,
@@ -51,6 +53,7 @@ export {
   ENV_FANOUT,
   ENV_PARENT_ID,
   ENV_EXECUTION_ID,
+  ENV_EPISODE_ID,
   ENV_DEPTH,
   ENV_MAX_DEPTH,
   ENV_GATED,
@@ -88,6 +91,7 @@ export const GRANT_ENV_KEYS = [
   // child. Named here rather than claimed away: "stripped from every child" would be false on that path.
   ENV_ADVISOR_KEY,
   ENV_ADVISOR,
+  ENV_ADVISOR_TASK_EGRESS,
   ENV_GRANT,
   ENV_DEPTH,
   ENV_MAX_DEPTH,
@@ -97,6 +101,7 @@ export const GRANT_ENV_KEYS = [
   ENV_FANOUT,
   ENV_PARENT_ID,
   ENV_EXECUTION_ID,
+  ENV_EPISODE_ID,
   // ADR-0042: a child must never keep its parent's unnarrowed pin, so it is stripped like every other
   // governance value and re-supplied only by the spawn plan.
   ENV_WORKSPACE_PIN,
@@ -262,6 +267,8 @@ export interface ChildEnvInput {
    * child then inherits no pin and can route nowhere — which is the fail-closed direction.
    */
   workspacePin?: WorkspacePins;
+  /** Stable identity shared by this root session and every descendant. */
+  episodeId?: string;
   /** This session's depth; children are one deeper. */
   depth: number;
   maxDepth: number;
@@ -342,6 +349,7 @@ export function childEnv(input: ChildEnvInput): Record<string, string> {
   env[ENV_APPROVED] = inheritApprovals(input.approved ?? [], inheritable).join(",");
   // Empty is an explicit one-run ledger opt-out and must overwrite a prior publication too.
   if (input.ledgerPath !== undefined) env[ENV_LEDGER] = input.ledgerPath;
+  if (input.episodeId !== undefined) env[ENV_EPISODE_ID] = input.episodeId;
   // ADR-0042. ALWAYS written when this session has any pin at all, empty string included, for the same reason
   // `ENV_APPROVED` is: an omitted key does not overwrite, so a child would inherit the PARENT's unnarrowed pin
   // through the process-global publication path. An empty value parses back as "a pin was established and you

package/src/products/activity-timeline.ts

@@ -4,6 +4,8 @@ import { constants } from "node:fs";
 import { appendFile, mkdir, open, readFile, realpath, rename, writeFile } from "node:fs/promises";
 import { dirname, join, resolve, sep } from "node:path";
 import { activityTimelinePath } from "../kernel/project-paths.ts";
+import { isEpisodeId, newEpisodeId } from "../kernel/episode-id.ts";
+import { ENV_EPISODE_ID } from "../kernel/env-names.ts";
 import { appendRecord, readRecords } from "../governance/record.ts";
 
 export const ACTIVITY_TIMELINE_VERSION = 1 as const;
@@ -35,6 +37,8 @@ export interface ActivityEvent {
   kind: string;
   at: string;
   rootId: string;
+  /** Added after v1 shipped; absent on retained events written before episode identity existed. */
+  episodeId?: string;
   taskId: string;
   parentTaskId?: string;
   agentId?: string;
@@ -541,6 +545,7 @@ export class ActivityTimelineRecorder {
   readonly contentEnabled: boolean;
   readonly path: string;
   readonly rootId: string;
+  readonly episodeId: string;
   private taskId?: string;
   constructor(cwd: string, env: NodeJS.ProcessEnv = process.env) {
     const configured = env[ENV_ACTIVITY_TIMELINE]?.trim();
@@ -550,6 +555,8 @@ export class ActivityTimelineRecorder {
     const identity = activityIdentity(cwd, env);
     this.path = identity.path;
     this.rootId = identity.rootId;
+    const inheritedEpisodeId = env[ENV_EPISODE_ID]?.trim();
+    this.episodeId = isEpisodeId(inheritedEpisodeId) ? inheritedEpisodeId : newEpisodeId();
     this.taskId = identity.taskId;
   }
   get task(): string | undefined {
@@ -620,6 +627,7 @@ export class ActivityTimelineRecorder {
       kind,
       at: new Date().toISOString(),
       rootId: this.rootId,
+      episodeId: this.episodeId,
       taskId: this.taskId,
       ...fields,
     };