@akagilnc/pi-workflow-roles 0.1.1792 → 0.1.1813

package/dist/public-cli/main.js

@@ -17904,6 +17904,33 @@ var init_package_owned_tool_idle = __esm({
   }
 });
 
+// src/receipt-delivery-policy.ts
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseNoReceiptLifecycleFacts(input) {
+  if (!isRecord4(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord4(item) && typeof item.reason === "string" && item.reason.trim() !== "")) {
+    throw new TypeError("malformed no-receipt lifecycle facts");
+  }
+  return {
+    terminalToolCalled: input.terminalToolCalled,
+    rejectedReceipts: input.rejectedReceipts.map((item) => ({ reason: item.reason })),
+    deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
+    sessionCompletion: "settled-without-accepted-receipt",
+    runPointer: input.runPointer,
+    attemptPointer: input.attemptPointer,
+    acceptedReceipt: false
+  };
+}
+var RECEIPT_DELIVERY_TURN_LIMIT, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE;
+var init_receipt_delivery_policy = __esm({
+  "src/receipt-delivery-policy.ts"() {
+    "use strict";
+    RECEIPT_DELIVERY_TURN_LIMIT = 2;
+    NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+  }
+});
+
 // src/evidence-child-executor.ts
 var init_evidence_child_executor = __esm({
   "src/evidence-child-executor.ts"() {
@@ -17911,6 +17938,7 @@ var init_evidence_child_executor = __esm({
     init_compliance_transport();
     init_package_owned_tool_idle();
     init_stream_idle_guard();
+    init_receipt_delivery_policy();
   }
 });
 
@@ -17939,6 +17967,7 @@ var init_compliance_transport = __esm({
     init_build();
     init_evidence_child_executor();
     init_auditor_dossier_tool();
+    init_receipt_delivery_policy();
     nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
     decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
     complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "Auditor decision status." }), violations: typebox_exports.Array(nonblank2, { description: "Observed compliance violations." }), conflicts: typebox_exports.Array(nonblank2, { description: "Unresolved authority or execution conflicts." }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "Escalation question and available options." }) }, { additionalProperties: true, required: [] });
@@ -18301,7 +18330,7 @@ function jsonSafeComplianceCandidate(value) {
   return value === void 0 ? JSON_SAFE_UNDEFINED_ARGUMENT : value;
 }
 function isLawfulTypedTerminalOutcome(outcome) {
-  return outcome.kind === "accepted" || outcome.kind === "audit_escalation";
+  return outcome.kind === "accepted" || outcome.kind === "audit_escalation" || outcome.kind === "no_receipt";
 }
 function exitCodeForTerminalOutcome(outcome) {
   return isLawfulTypedTerminalOutcome(outcome) ? 0 : 1;
@@ -18650,7 +18679,7 @@ function extractSessionProviderStop(entries) {
   for (let i = entries.length - 1; i >= attemptStart; i -= 1) {
     const entry = entries[i];
     if (entry?.type !== "custom" || entry.customType !== COMPLIANCE_RESPONSE_ENTRY_TYPE) continue;
-    const response = isRecord4(entry.data) && isRecord4(entry.data.response) ? entry.data.response : void 0;
+    const response = isRecord5(entry.data) && isRecord5(entry.data.response) ? entry.data.response : void 0;
     if (response?.role === "assistant" && response.stopReason === "error") {
       return {
         stopReason: "error",
@@ -18701,7 +18730,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord4(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord5(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -18749,9 +18778,9 @@ async function readBoundAuditorKnownFailure(sessionFile) {
       throw sessionReadFailure(error, "failed to read discovered auditor session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord4(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord5(header) || header.parentSession !== sessionFile) continue;
     const bindingEntry = entries.find((entry) => entry.type === "custom" && entry.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE);
-    const bindingParent = isRecord4(bindingEntry?.data) && isRecord4(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+    const bindingParent = isRecord5(bindingEntry?.data) && isRecord5(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
     const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
     const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
     if (bindingParent?.sessionId !== parentId || bindingParent.sessionFile !== sessionFile || attemptEntryIndex < latestParentUserIndex) continue;
@@ -18759,11 +18788,11 @@ async function readBoundAuditorKnownFailure(sessionFile) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord4(entry.data)) continue;
-      const parent = isRecord4(entry.data.parent) ? entry.data.parent : void 0;
-      const failure = isRecord4(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord5(entry.data)) continue;
+      const parent = isRecord5(entry.data.parent) ? entry.data.parent : void 0;
+      const failure = isRecord5(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId || failure?.cause !== "provider") continue;
-      const identity = isRecord4(failure.identity) ? failure.identity : void 0;
+      const identity = isRecord5(failure.identity) ? failure.identity : void 0;
       return {
         cause: "provider",
         ...identity === void 0 ? {} : { identity: {
@@ -18771,7 +18800,7 @@ async function readBoundAuditorKnownFailure(sessionFile) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure.diagnostic === "string" ? { diagnostic: failure.diagnostic } : {},
-        ...isRecord4(failure.details) ? { details: failure.details } : {}
+        ...isRecord5(failure.details) ? { details: failure.details } : {}
       };
     }
     const primary = knownFailureFromProviderStop(stop);
@@ -18802,8 +18831,8 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord4(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord4(textPart) ? textPart.text : void 0;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord5(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord5(textPart) ? textPart.text : void 0;
     return {
       cause: "output",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -18864,7 +18893,7 @@ async function resolveAuditedRunnerKnownFailure(input) {
   const parentStop = await readSessionProviderStop(input.sessionFile);
   return parentStop === void 0 ? input.credential : knownFailureFromProviderStop(parentStop);
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function safelyRead(object, key) {
@@ -18874,11 +18903,20 @@ function safelyRead(object, key) {
     return { readable: false };
   }
 }
+function auditNoReceiptDecisiveFact(candidate) {
+  const projected = safelyRead(candidate, "auditNoReceipt");
+  if (!projected.readable || projected.value === void 0) return {};
+  try {
+    return { auditNoReceipt: parseNoReceiptLifecycleFacts(projected.value) };
+  } catch {
+    return {};
+  }
+}
 function judgeDecisiveFacts(verdict, judgeStatus) {
-  const facts = { judgeStatus };
+  const facts = { judgeStatus, ...auditNoReceiptDecisiveFact(verdict) };
   if (judgeStatus === "continue") {
     const fix = safelyRead(verdict, "fix");
-    if (fix.readable && isRecord4(fix.value)) {
+    if (fix.readable && isRecord5(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
       if (summary.readable && typeof summary.value === "string") {
         facts.fixSummary = summary.value;
@@ -18888,7 +18926,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
     if (classes.readable && Array.isArray(classes.value)) {
       try {
         facts.classes = classes.value.map((entry) => {
-          if (!isRecord4(entry)) throw new Error("unreadable Judge class");
+          if (!isRecord5(entry)) throw new Error("unreadable Judge class");
           return {
             name: entry.name,
             owner: entry.owner,
@@ -18903,7 +18941,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
   }
   if (judgeStatus === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
-    if (gate.readable && isRecord4(gate.value)) {
+    if (gate.readable && isRecord5(gate.value)) {
       const question = safelyRead(gate.value, "question");
       const options = safelyRead(gate.value, "options");
       if (question.readable && typeof question.value === "string") {
@@ -18947,7 +18985,7 @@ function fixerDecisiveFacts(output) {
     facts.reason = reason.value;
   }
   const blockerRead = safelyRead(candidate, "blocker");
-  if (status.readable && status.value === "refused" && blockerRead.readable && isRecord4(blockerRead.value)) {
+  if (status.readable && status.value === "refused" && blockerRead.readable && isRecord5(blockerRead.value)) {
     const cause = safelyRead(blockerRead.value, "cause");
     if (cause.readable && typeof cause.value === "string") facts.blockerCause = cause.value;
     const prerequisiteId = safelyRead(blockerRead.value, "prerequisiteId");
@@ -18959,13 +18997,13 @@ function fixerDecisiveFacts(output) {
     const blockers = [];
     try {
       for (const entry of classResults.value) {
-        if (!isRecord4(entry)) throw new Error("unreadable class result");
+        if (!isRecord5(entry)) throw new Error("unreadable class result");
         const name = safelyRead(entry, "name");
         const disposition = safelyRead(entry, "disposition");
         if (!name.readable || !disposition.readable) throw new Error("unreadable class result");
         rows.push({ name: name.value, disposition: disposition.value });
         const blocker = safelyRead(entry, "blocker");
-        if (disposition.value === "refused" && blocker.readable && isRecord4(blocker.value)) blockers.push(blocker.value);
+        if (disposition.value === "refused" && blocker.readable && isRecord5(blocker.value)) blockers.push(blocker.value);
       }
       facts.classResultCount = rows.length;
       facts.classDispositions = rows;
@@ -18998,7 +19036,7 @@ function collectorDecisiveFacts(receipt) {
   if (groups.readable && Array.isArray(groups.value)) {
     try {
       facts.groups = groups.value.map((group) => {
-        if (!isRecord4(group)) throw new Error("unreadable Collector group");
+        if (!isRecord5(group)) throw new Error("unreadable Collector group");
         const identity = safelyRead(group, "identity");
         const attendance = safelyRead(group, "attendance");
         const materials = safelyRead(group, "materials");
@@ -19021,7 +19059,7 @@ function collectorDecisiveFacts(receipt) {
 function doctorDecisiveFacts(output) {
   const candidate = output;
   const status = safelyRead(candidate, "status");
-  const facts = {};
+  const facts = { ...auditNoReceiptDecisiveFact(candidate) };
   if (status.readable && typeof status.value === "string") facts.doctorStatus = status.value;
   if (status.readable && status.value === "refused") {
     const reason = safelyRead(candidate, "reason");
@@ -19031,7 +19069,7 @@ function doctorDecisiveFacts(output) {
     return facts;
   }
   const caseValue = safelyRead(candidate, "case");
-  if (caseValue.readable && isRecord4(caseValue.value)) {
+  if (caseValue.readable && isRecord5(caseValue.value)) {
     const issueNumber = safelyRead(caseValue.value, "issueNumber");
     const runsPath = safelyRead(caseValue.value, "runsPath");
     if (issueNumber.readable && issueNumber.value !== void 0) facts.issueNumber = issueNumber.value;
@@ -19042,7 +19080,7 @@ function doctorDecisiveFacts(output) {
   return facts;
 }
 function reviewerAxes(value) {
-  if (!isRecord4(value)) return [];
+  if (!isRecord5(value)) return [];
   return ["standards", "spec"].filter((axis) => {
     const projected = safelyRead(value, axis);
     return projected.readable && projected.value !== void 0;
@@ -19059,7 +19097,8 @@ function reviewerDecisiveFacts(output) {
   const facts = {
     axes,
     reportAxes,
-    acceptedBatchPresent: acceptedBatch.readable && acceptedBatch.value !== void 0
+    acceptedBatchPresent: acceptedBatch.readable && acceptedBatch.value !== void 0,
+    ...auditNoReceiptDecisiveFact(candidate)
   };
   if (status.readable && typeof status.value === "string") facts.reviewerStatus = status.value;
   const diagnostic = safelyRead(candidate, "diagnostic");
@@ -19137,9 +19176,9 @@ function assertCollectorReceiptMatchesAdmitted(receipt, admitted) {
   }
 }
 function isComplianceAuditIncomplete(value) {
-  if (!isRecord4(value) || value.status !== "audit-incomplete") return false;
+  if (!isRecord5(value) || value.status !== "audit-incomplete") return false;
   const observation = value.observation;
-  if (!isRecord4(observation)) return false;
+  if (!isRecord5(observation)) return false;
   if (observation.kind === "missing-dossier") return true;
   if (observation.kind === "missing-subject") {
     return typeof observation.subject === "string" && observation.subject.length > 0;
@@ -19189,7 +19228,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord4(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord5(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -19211,7 +19250,7 @@ function sameAuditValue(left, right) {
       (value, index) => sameAuditValue(value, right[index])
     );
   }
-  if (isRecord4(left) && isRecord4(right)) {
+  if (isRecord5(left) && isRecord5(right)) {
     const leftKeys = Object.keys(left);
     const rightKeys = Object.keys(right);
     return leftKeys.length === rightKeys.length && leftKeys.every((key) => Object.hasOwn(right, key) && sameAuditValue(left[key], right[key]));
@@ -19249,7 +19288,7 @@ function boundAuditEscalationForResult(entries, resultIndex, message, role, outp
     const decision = readComplianceCandidate(retained.candidate);
     if (decision.status !== "escalate") return void 0;
     const details = message.details;
-    if (!isAuditEscalationResult(details) || !isRecord4(details)) return void 0;
+    if (!isAuditEscalationResult(details) || !isRecord5(details)) return void 0;
     const projectedDetails = snapshotAuditDetails(details);
     const hasDecisionConflicts = Object.hasOwn(decision, "conflicts");
     const hasDetailsConflicts = Object.hasOwn(projectedDetails, "conflicts");
@@ -19269,7 +19308,7 @@ function isUnboundAuditEscalationFace(details) {
     if (isAuditEscalationResult(details)) return true;
   } catch {
   }
-  if (!isRecord4(details)) return false;
+  if (!isRecord5(details)) return false;
   const kind = safelyRead(details, "kind");
   return kind.readable && kind.value === "audit_escalation";
 }
@@ -19286,11 +19325,11 @@ function boundRetainedAuditResponse(entries, callIndex, resultIndex, auditToolNa
       continue;
     }
     retainedResponseCount += 1;
-    if (!isRecord4(entry.data) || !isRecord4(entry.data.response)) continue;
+    if (!isRecord5(entry.data) || !isRecord5(entry.data.response)) continue;
     const response = entry.data.response;
     if (!Array.isArray(response.content)) continue;
     const calls = response.content.filter(
-      (part) => isRecord4(part) && part.type === "toolCall"
+      (part) => isRecord5(part) && part.type === "toolCall"
     );
     if (calls.length !== 1 || calls[0]?.name !== auditToolName) continue;
     matches.push({ candidate: calls[0]?.arguments });
@@ -19492,7 +19531,7 @@ function extractJudgeRoleOutcome(entries) {
       };
     }
     if (isUnboundAuditEscalationFace(details)) continue;
-    if (!isRecord4(details)) continue;
+    if (!isRecord5(details)) continue;
     const statusRead = safelyRead(details, "judgeStatus");
     if (!statusRead.readable) continue;
     const judgeStatus = statusRead.value;
@@ -19566,7 +19605,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord4(next) || typeof next.role !== "string") {
+    if (!isRecord5(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -19574,7 +19613,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord4).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord5).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -19652,7 +19691,7 @@ function extractNavigatorFact(entries, identity) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord4(details)) {
+      if (!isRecord5(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -20116,7 +20155,7 @@ async function settleLawfulCollectorTerminalResult(admitted) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const duration = isRecord4(candidate) ? candidate.durationMs : void 0;
+      const duration = isRecord5(candidate) ? candidate.durationMs : void 0;
       if (Number.isSafeInteger(duration) && duration >= 1 && duration <= 9e5) {
         continue;
       }
@@ -20576,8 +20615,8 @@ async function settleLawfulMergerTerminalResult(admitted, options) {
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
       const callMessage = entries[residual.callIndex]?.message;
-      const calls = callMessage?.role === "assistant" && Array.isArray(callMessage.content) ? callMessage.content.filter((part) => isRecord4(part) && part.type === "toolCall") : [];
-      const attemptId = isRecord4(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
+      const calls = callMessage?.role === "assistant" && Array.isArray(callMessage.content) ? callMessage.content.filter((part) => isRecord5(part) && part.type === "toolCall") : [];
+      const attemptId = isRecord5(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
       if (calls.length !== 1 || calls[0]?.name !== MERGER_OUTPUT_TOOL_NAME || !attemptId.readable || attemptId.value !== admitted.runId) {
         continue;
       }
@@ -20818,6 +20857,35 @@ function redactNavigatorFactForPublicTerminal(navigator, runId) {
   return { ...navigator, ...advisoryDiagnostic };
 }
 async function settleFailureTerminalResult(admitted, failure, options = {}) {
+  if (failure.cause === "output") {
+    const entries = await readBoundSessionEntries(admitted.sessionFile).catch(() => void 0);
+    if (entries !== void 0) {
+      let attemptStart = 0;
+      for (let index = entries.length - 1; index >= 0; index -= 1) {
+        if (entries[index]?.type === "message" && entries[index]?.message?.role === "user") {
+          attemptStart = index;
+          break;
+        }
+      }
+      const lifecycleEntry = entries.slice(attemptStart).reverse().find((entry) => entry.customType === NO_RECEIPT_LIFECYCLE_ENTRY_TYPE || entry.message?.customType === NO_RECEIPT_LIFECYCLE_ENTRY_TYPE);
+      const raw = lifecycleEntry?.data ?? lifecycleEntry?.message?.details;
+      if (raw !== void 0) {
+        try {
+          const facts = parseNoReceiptLifecycleFacts(raw);
+          if (facts.runPointer === admitted.runDirectory && facts.attemptPointer === `current:${admitted.runDirectory}`) {
+            const decisiveFacts2 = facts;
+            return {
+              roleOutcome: { kind: "no_receipt", role: admitted.role, status: "no-accepted-receipt", ...facts, decisiveFacts: decisiveFacts2 },
+              navigator: await extractNavigatorFactFromAdmittedSession(admitted),
+              artifacts: [],
+              runId: admitted.runId
+            };
+          }
+        } catch {
+        }
+      }
+    }
+  }
   const navigator = await extractNavigatorFactFromAdmittedSession(admitted);
   const artifacts = await publishFailureArtifacts(admitted, failure);
   const decisiveFacts = {
@@ -20871,16 +20939,16 @@ async function settleJudgeFailureTerminalResult(admitted, failure, options = {})
   return settleFailureTerminalResult(admitted, failure, options);
 }
 function presentFailureTerminal(terminal, io) {
-  if (terminal.roleOutcome.kind !== "failure") {
-    throw new TypeError("presentFailureTerminal requires a failure role outcome");
+  if (terminal.roleOutcome.kind !== "failure" && terminal.roleOutcome.kind !== "no_receipt") {
+    throw new TypeError("presentFailureTerminal requires a failure or no-receipt role outcome");
   }
   io.stdout(formatTerminalResult(terminal));
-  io.stderr(
-    formatFailureStderrDiagnostic({
+  if (terminal.roleOutcome.kind === "failure") {
+    io.stderr(formatFailureStderrDiagnostic({
       cause: terminal.roleOutcome.cause,
       diagnostic: terminal.roleOutcome.diagnostic
-    })
-  );
+    }));
+  }
 }
 var CONCISE_DIAGNOSTIC_MAX_CHARS, COLLECTOR_INFRASTRUCTURE_TOOLS;
 var init_settlement = __esm({
@@ -20903,6 +20971,7 @@ var init_settlement = __esm({
     init_merger_contracts();
     init_method_skill();
     init_navigator_invocation_identity();
+    init_receipt_delivery_policy();
     init_packaged_role_registry();
     init_work_subject_identity();
     init_invocation();

package/dist/receipt-delivery-policy.js

@@ -0,0 +1,72 @@
+/** Shared accepted-receipt delivery budget for role, auditor, and Navigator sessions (#288). */
+export const RECEIPT_DELIVERY_TURN_LIMIT = 2;
+export const RECEIPT_DELIVERY_PROMPT = "本 session 尚无已接受的 typed 回执。请现在调用具名终局工具交卷；若先前被打回，请按拒因修正后重交。";
+export const NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Read only the facts required by Terminal consumers; persisted extensions are ignored. */
+export function parseNoReceiptLifecycleFacts(input) {
+    if (!isRecord(input)
+        || typeof input.terminalToolCalled !== "boolean"
+        || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT
+        || input.sessionCompletion !== "settled-without-accepted-receipt"
+        || input.acceptedReceipt !== false
+        || typeof input.runPointer !== "string" || input.runPointer.trim() === ""
+        || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === ""
+        || !Array.isArray(input.rejectedReceipts)
+        || !input.rejectedReceipts.every((item) => isRecord(item)
+            && typeof item.reason === "string" && item.reason.trim() !== "")) {
+        throw new TypeError("malformed no-receipt lifecycle facts");
+    }
+    return {
+        terminalToolCalled: input.terminalToolCalled,
+        rejectedReceipts: input.rejectedReceipts.map((item) => ({ reason: item.reason })),
+        deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
+        sessionCompletion: "settled-without-accepted-receipt",
+        runPointer: input.runPointer,
+        attemptPointer: input.attemptPointer,
+        acceptedReceipt: false,
+    };
+}
+export function noReceiptLifecycleFacts(input) {
+    if (input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT) {
+        throw new TypeError("no-receipt lifecycle requires an exhausted delivery budget");
+    }
+    return {
+        terminalToolCalled: input.terminalToolCalled,
+        rejectedReceipts: input.rejectedReceipts.map(({ reason }) => ({ reason })),
+        deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
+        sessionCompletion: "settled-without-accepted-receipt",
+        runPointer: input.runPointer,
+        attemptPointer: input.attemptPointer,
+        acceptedReceipt: false,
+    };
+}
+export function createReceiptDeliveryPolicy() {
+    let accepted = false;
+    let terminalToolCalled = false;
+    let deliveryTurns = 0;
+    const rejectedReceipts = [];
+    return {
+        recordAccepted() { accepted = true; terminalToolCalled = true; },
+        /** Infrastructure owns terminality and must never trigger receipt催交. */
+        stopForInfrastructure() { accepted = true; },
+        recordRejected(reason) {
+            terminalToolCalled = true;
+            rejectedReceipts.push({ reason });
+            deliveryTurns = Math.min(RECEIPT_DELIVERY_TURN_LIMIT, deliveryTurns + 1);
+        },
+        recordDeliveryRequest() {
+            deliveryTurns = Math.min(RECEIPT_DELIVERY_TURN_LIMIT, deliveryTurns + 1);
+        },
+        nextAction() {
+            if (accepted)
+                return "accepted";
+            return deliveryTurns < RECEIPT_DELIVERY_TURN_LIMIT ? "request-delivery" : "no-receipt";
+        },
+        facts(binding) {
+            return noReceiptLifecycleFacts({ terminalToolCalled, rejectedReceipts: [...rejectedReceipts], deliveryTurns, ...binding });
+        },
+    };
+}

package/extensions/role-runtime.ts

@@ -167,10 +167,13 @@ export async function loadNavigatorWorkContext(
   // Public ak-role run: admitted request is the typed Navigator work-context source.
   // Classification failure here stays source=context (distinct from model/session/transport).
   const publicRunDir = process.env.AK_ROLE_RUN_DIR;
+  const currentSessionDir = options.context.sessionManager.getSessionDir();
+  const isBoundPublicRun = typeof publicRunDir === "string"
+    && publicRunDir.trim() !== ""
+    && resolve(currentSessionDir) === resolve(publicRunDir, "session");
   if (
     options.role === "judge" &&
-    typeof publicRunDir === "string" &&
-    publicRunDir.trim() !== ""
+    isBoundPublicRun
   ) {
     let admitted;
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.1792",
+  "version": "0.1.1813",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/src/audit-escalation.ts

@@ -145,6 +145,10 @@ export function isAuditEscalationResult(
 
 export type ComplianceDecisionHandlers<T> = {
   pass: (usage: Usage | undefined) => T | PromiseLike<T>;
+  /** Project the accepted parent candidate beside the typed audit-leg facts. */
+  noReceipt?: (
+    facts: Extract<ComplianceDecision, { status: "no-receipt" }>,
+  ) => T | PromiseLike<T>;
   revise: (violations: readonly unknown[]) => T | PromiseLike<T>;
   escalate: (result: AuditEscalationToolResult) => T | PromiseLike<T>;
   auditIncomplete?: (result: AuditIncompleteToolResult) => T | PromiseLike<T>;
@@ -162,6 +166,13 @@ export async function disposeComplianceDecision<T>(
   switch (decision.status) {
     case "pass":
       return await handlers.pass(decision.usage);
+    case "no-receipt":
+      // The parent candidate remains accepted, but its parallel audit leg is a
+      // public typed fact and must not be collapsed into an ordinary pass.
+      if (handlers.noReceipt === undefined) {
+        throw new Error("Compliance no-receipt projection handler is unavailable");
+      }
+      return await handlers.noReceipt(decision);
     case "revise":
       return await handlers.revise(decision.violations);
     case "escalate":

package/src/compliance-transport.ts

@@ -7,6 +7,7 @@ import {
 } from "./evidence-child-executor.ts";
 import { createAuditorDossierTool } from "./auditor-dossier-tool.ts";
 import type { DossierObservation } from "./dossier-resolution.ts";
+import { parseNoReceiptLifecycleFacts, type NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 
 export type ComplianceCompletion = AuditorCompletion;
 export type ComplianceArgumentRootType = "null" | "array" | "undefined" | "string" | "number" | "boolean" | "bigint" | "symbol" | "function";
@@ -15,7 +16,8 @@ export type ComplianceAuditObservation =
   | { kind: "object-status-unreadable"; status: "missing" | "unknown" }
   | DossierObservation;
 export type ComplianceAuditIncomplete = { status: "audit-incomplete"; observation: ComplianceAuditObservation; candidate: unknown; usage?: Usage };
-export type ComplianceDecision = { status: "pass"; usage?: Usage } | { status: "revise"; violations: readonly unknown[]; usage?: Usage } | { status: "escalate"; conflicts?: unknown; decisionGate?: unknown; usage?: Usage } | ComplianceAuditIncomplete;
+export type ComplianceNoReceipt = NoReceiptLifecycleFacts & { status: "no-receipt" };
+export type ComplianceDecision = { status: "pass"; usage?: Usage } | { status: "revise"; violations: readonly unknown[]; usage?: Usage } | { status: "escalate"; conflicts?: unknown; decisionGate?: unknown; usage?: Usage } | ComplianceNoReceipt | ComplianceAuditIncomplete;
 export type ComplianceDispatch = { model: Model<Api>; auth: { apiKey?: string; headers?: Record<string, string | null>; env?: Record<string, string> } };
 
 /** Zero-projection kickoff — soul already carries dossier-fetch duty; no hand-delivered materials. */
@@ -126,5 +128,9 @@ export async function runComplianceAudit(options: RunComplianceAuditOptions): Pr
     ...(options.runCompletion === undefined ? {} : { runCompletion: options.runCompletion }),
     ...(options.signal === undefined ? {} : { signal: options.signal }),
   });
-  return readComplianceCandidate(receipt.decision, receipt.response.usage);
+  try {
+    return { status: "no-receipt", ...parseNoReceiptLifecycleFacts(receipt.decision) };
+  } catch {
+    return readComplianceCandidate(receipt.decision, receipt.response.usage);
+  }
 }

package/src/doctor-role.ts

@@ -12,7 +12,7 @@ export function createDoctorRoleRuntime(pi: ExtensionAPI, dependencies: DoctorRo
   let activation: { soul: string; patient: DoctorCase; store: DoctorEvidenceStore } | undefined; let registered = false; pi.registerFlag(DOCTOR_CASE_FLAG.name, DOCTOR_CASE_FLAG.definition);
   return { async activate() { const path = pi.getFlag(DOCTOR_CASE_FLAG.name); if (typeof path !== "string" || !path.trim()) throw new Error("Doctor requires --ak-doctor-case"); const soul = (await dependencies.loadSoul()).trim(); if (!soul) throw new Error("Doctor soul is empty"); const patient = await dependencies.loadCase(path); activation = { soul, patient, store: new DoctorEvidenceStore(patient) };
     if (!registered) { registered = true; pi.registerTool({ name: DOCTOR_EVIDENCE_TOOL_NAME, label: "Doctor Evidence", description: "Read retained Pi session bytes with bounded pagination.", parameters: doctorEvidenceReadSchema, async execute(_id, params: { evidenceId: string; offset?: number; limit?: number }) { if (!activation) throw new Error("Doctor is not activated"); const details = activation.store.read(params.evidenceId, params.offset, params.limit); return { content: [{ type: "text" as const, text: JSON.stringify(details) }], details }; } });
-      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "Doctor Output", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("Doctor is not activated"); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "doctor candidate retention is unavailable", failed: "doctor candidate retention failed" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: "Doctor output accepted" }], details, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), revise: (violations) => { throw new Error(`Doctor output violates its soul: ${violations.join("; ")}`); }, escalate: (result) => result, auditIncomplete: (result) => result }, details); } });
+      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "Doctor Output", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("Doctor is not activated"); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "doctor candidate retention is unavailable", failed: "doctor candidate retention failed" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: "Doctor output accepted" }], details, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt) => ({ content: [{ type: "text" as const, text: "Doctor output accepted; compliance audit produced no receipt" }], details: { ...details, auditNoReceipt }, terminate: true as const }), revise: (violations) => { throw new Error(`Doctor output violates its soul: ${violations.join("; ")}`); }, escalate: (result) => result, auditIncomplete: (result) => result }, details); } });
       pi.on("before_agent_start", (event) => { if (!activation) throw new Error("Doctor is not activated"); const catalog = { version: activation.patient.version, identity: activation.patient.identity, admittedMetrics: { provenance: "runtime-derived from retained session bytes and sealed into the accepted receipt", cost: activation.patient.cost }, lawfulTargetKeys: ["case", ...activation.patient.cost.invocations.sources], evidence: activation.patient.evidence.map(({ id, kind, sha256, byteLength, contentLength }) => ({ id, kind, sha256, byteLength, contentLength })) }; return { systemPrompt: `${event.systemPrompt}\n\n<doctor_soul>\n${activation.soul}\n</doctor_soul>\n\n<doctor_case>\n${JSON.stringify(catalog)}\n</doctor_case>` }; }); }
     const required = [DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME]; const names = pi.getAllTools().map((tool) => tool.name); for (const name of required) if (names.filter((item) => item === name).length !== 1) throw new Error(`Doctor required tool collision or missing: ${name}`); pi.setActiveTools(required); const active = pi.getActiveTools?.() ?? required; if (active.length !== 2 || !required.every((name) => active.includes(name))) throw new Error("Doctor active tool narrowing failed"); } };
 }