fix(deps): adapt to pi-permission-system 32 session-keyed services

- resolve the permissions service by the live session id in both
  tryRegister paths, so a mid-session republish re-keys via the re-emitted
  permissions:ready channel
- read the session probe instead of the start-time snapshot for inner-cmd
- pass the session key to publish/unpublishPermissionsService in tests and
  drop the removed PromptPermissionDetails.message field
- raise the ai-judge peer floor to @gotgenes/pi-permission-system >=32.0.0
- bump dev deps: pi-coding-agent 0.85.1, vitest 5, typescript 7

packages/pi-permission-ai-judge/package.json

@@ -14,17 +14,17 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.4.0"
+    "@gotgenes/pi-permission-system": ">=32.0.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.4.0",
-    "@types/node": "^26.0.0",
-    "@vitest/coverage-istanbul": "3.2.7",
-    "@vitest/coverage-v8": "^3.2.7",
-    "typescript": "^5",
-    "vitest": "^3"
+    "@earendil-works/pi-ai": "^0.85.1",
+    "@earendil-works/pi-coding-agent": "^0.85.1",
+    "@gotgenes/pi-permission-system": "^32.0.2",
+    "@types/node": "^26.5.1",
+    "@vitest/coverage-istanbul": "5.0.1",
+    "@vitest/coverage-v8": "^5.0.1",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.1"
   },
   "scripts": {
     "check": "tsc --noEmit",

packages/pi-permission-ai-judge/src/index.ts

@@ -639,7 +639,10 @@ export default function permissionAiJudge(pi: ExtensionAPI): void {
             return;
         }
 
-        const service = getPermissionsService();
+        // Resolve the service by the live session id: the ready channel
+        // re-emits after a mid-session republish (31.1.4), and the dynamic
+        // read re-keys onto the new slot without extra state.
+        const service = getPermissionsService(root.getSessionId());
         if (service === undefined) {
             return;
         }

packages/pi-permission-ai-judge/test/evidence.test.ts

@@ -10,7 +10,6 @@ function details(
         requestId: "req-1",
         source: "tool_call",
         agentName: null,
-        message: "bash ask",
         payload: {
             kind: "bash",
             request: {

packages/pi-permission-ai-judge/test/lifecycle.test.ts

@@ -122,7 +122,6 @@ function ask(): PromptPermissionDetails {
         requestId: "req-1",
         source: "tool_call",
         agentName: null,
-        message: "bash ask",
         payload: {
             kind: "bash",
             request: {
@@ -204,10 +203,13 @@ function fakeSessionManager(): {
     };
 }
 
+/** The session id every fake session manager reports — the service key. */
+const SESSION_ID = "session-root";
+
 let publishedService: PermissionsService | undefined;
 afterEach(() => {
     if (publishedService !== undefined) {
-        unpublishPermissionsService(publishedService);
+        unpublishPermissionsService(SESSION_ID, publishedService);
         publishedService = undefined;
     }
     cleanupMockAgentDir();
@@ -230,7 +232,7 @@ describe("AI judge lifecycle", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         // A mutable "current model" the session switches mid-run.
@@ -312,7 +314,7 @@ describe("AI judge lifecycle", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn(
@@ -383,7 +385,7 @@ describe("AI judge lifecycle", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn(
@@ -477,7 +479,7 @@ describe("AI judge lifecycle", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn();
@@ -552,7 +554,7 @@ describe("AI judge lifecycle", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn(
@@ -622,7 +624,7 @@ describe("AI judge lifecycle", () => {
         const service = {
             registerAuthorizer: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const harness = createFakePi();
@@ -682,7 +684,7 @@ describe("AI judge Enforce authority seam (PIEXTENSIO-23, ADR 0008)", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn(async () => options.response ?? modelResponse());
@@ -920,7 +922,7 @@ describe("AI judge Enforce authority seam (PIEXTENSIO-23, ADR 0008)", () => {
             checkPermission: vi.fn(),
             getToolPermission: vi.fn(),
         } as unknown as PermissionsService;
-        publishPermissionsService(service);
+        publishPermissionsService(SESSION_ID, service);
         publishedService = service;
 
         const complete = vi.fn(async () => modelResponse());