@akagilnc/pi-workflow-roles 0.1.2383 → 0.1.2397

package/dist/public-cli/main.js

@@ -14384,13 +14384,6 @@ function validateNotaryOutput(value) {
     throw new Error("Notary output has no recognized execution discriminator");
   }
   const status = seatFallbackBaseStatus(statusRaw);
-  if (status === "incomplete") {
-    const reason = value.reason;
-    if (typeof reason !== "string" || reason.trim() === "") {
-      throw new Error("Notary incomplete requires a non-empty reason");
-    }
-    return structuredClone(value);
-  }
   if (status === "bounce") {
     const clone = structuredClone(value);
     if (clone.disposition === void 0) clone.disposition = "rewrite";
@@ -14417,9 +14410,6 @@ function notaryDecisiveFacts(output) {
   if (status === "bounce") {
     facts.disposition = "rewrite";
   }
-  if (status === "incomplete") {
-    facts.reason = output.reason;
-  }
   return facts;
 }
 var NOTARY_OUTPUT_TOOL_NAME, NOTARY_FIXED_KICKOFF, notaryOutputSchema;
@@ -14434,13 +14424,10 @@ var init_notary_contracts = __esm({
     notaryOutputSchema = openToolObject(
       typebox_exports.Object({
         status: typebox_exports.Unknown({
-          description: "pass | bounce | incomplete \u2014 guidance, not a schema gate."
+          description: "pass | bounce \u2014 guidance, not a schema gate."
         }),
         findings: typebox_exports.Unknown({
           description: "string[] findings retained with pass or bounce."
-        }),
-        reason: typebox_exports.Unknown({
-          description: "Why the notary decision is incomplete."
         })
       })
     );
@@ -15444,7 +15431,7 @@ function validateAcceptedDetails(toolName, details) {
     [COLLECTOR_OUTPUT_TOOL]: [],
     [DOCTOR_OUTPUT_TOOL_NAME]: ["completed", "refused"],
     [MERGER_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
-    [NOTARY_OUTPUT_TOOL_NAME]: ["pass", "bounce", "incomplete"]
+    [NOTARY_OUTPUT_TOOL_NAME]: ["pass", "bounce"]
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
   const baseDiscriminator = typeof discriminator === "string" ? seatFallbackBaseStatus(discriminator) : discriminator;
@@ -19893,9 +19880,6 @@ var init_command_renderer = __esm({
 function encodeTerminalField(value) {
   return JSON.stringify(value);
 }
-function jsonSafeComplianceCandidate(value) {
-  return value === void 0 ? JSON_SAFE_UNDEFINED_ARGUMENT : value;
-}
 function isLawfulTypedTerminalOutcome(outcome) {
   return outcome.kind === "accepted" || outcome.kind === "audit_escalation" || outcome.kind === "no_receipt";
 }
@@ -19919,31 +19903,6 @@ function buildResidualIncompleteTerminalOutcome(input) {
     }
   };
 }
-function buildAuditIncompleteTerminalOutcome(input) {
-  const roleCandidate = jsonSafeComplianceCandidate(input.roleCandidate);
-  const audit = {
-    ...input.audit,
-    candidate: jsonSafeComplianceCandidate(input.audit.candidate)
-  };
-  return {
-    kind: "audit_incomplete",
-    role: input.role,
-    status: "audit-incomplete",
-    decision: "no-usable-decision",
-    roleCandidate,
-    audit,
-    acceptedReceipt: false,
-    decisiveFacts: {
-      decision: "no-usable-decision",
-      roleCandidate,
-      auditCandidate: audit.candidate,
-      auditObservation: audit.observation,
-      observationKind: audit.observation.kind,
-      observationType: audit.observation.kind === "non-object-arguments" ? audit.observation.type : audit.observation.kind === "object-status-unreadable" ? audit.observation.status : audit.observation.kind === "missing-subject" ? audit.observation.subject : audit.observation.kind,
-      acceptedReceipt: false
-    }
-  };
-}
 function redactExactRunId(text, runId) {
   if (runId.length === 0) return text;
   if (!text.includes(runId)) return text;
@@ -20026,15 +19985,11 @@ function formatTerminalResult(result2) {
   return `${lines.join("\n")}
 `;
 }
-var JSON_SAFE_UNDEFINED_ARGUMENT, REDACTED_RUN_ID_TOKEN;
+var REDACTED_RUN_ID_TOKEN;
 var init_terminal = __esm({
   "src/public-cli/terminal.ts"() {
     "use strict";
     init_command_renderer();
-    JSON_SAFE_UNDEFINED_ARGUMENT = Object.freeze({
-      kind: "json-safe-sentinel",
-      type: "undefined"
-    });
     REDACTED_RUN_ID_TOKEN = "[run-id]";
   }
 });
@@ -20155,8 +20110,8 @@ function extractSessionToolIntervals(rows) {
       if (resultTimestamp === void 0 || resultTimestamp.length === 0) {
         throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
       }
-      const open5 = openById.get(message.toolCallId);
-      if (open5 === void 0) {
+      const open4 = openById.get(message.toolCallId);
+      if (open4 === void 0) {
         const toolName = typeof message.toolName === "string" && message.toolName.length > 0 ? message.toolName : "unknown";
         order.push({
           toolCallId: message.toolCallId,
@@ -20166,10 +20121,10 @@ function extractSessionToolIntervals(rows) {
         });
         continue;
       }
-      if (open5.endedAt !== void 0) {
+      if (open4.endedAt !== void 0) {
         throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
       }
-      open5.endedAt = resultTimestamp;
+      open4.endedAt = resultTimestamp;
     }
   }
   return order.map((interval) => {
@@ -20293,7 +20248,6 @@ async function classifyAuditorVolume(filePath) {
   const findings = asStringFindings(call.args?.findings);
   const findingsCount = findings.length;
   if (DISPATCH_TOOLS.has(call.toolName)) {
-    if (status === "incomplete") return void 0;
     if (status !== "dispatch") {
       throw new Error(
         `accepted dispatch receipt has non-dispatch status ${JSON.stringify(status)} in ${filePath}`
@@ -20415,16 +20369,10 @@ var init_session_opening_materials = __esm({
 });
 
 // src/auditor-soul.ts
-var AUDITOR_SOUL_ROLES;
 var init_auditor_soul = __esm({
   "src/auditor-soul.ts"() {
     "use strict";
     init_session_opening_materials();
-    AUDITOR_SOUL_ROLES = [
-      "judge",
-      "reviewer",
-      "doctor"
-    ];
   }
 });
 
@@ -20519,21 +20467,44 @@ function readListField(value) {
   return Array.isArray(value) ? value : value === void 0 ? [] : [value];
 }
 function readComplianceCandidate(arguments_, usage) {
-  if (typeof arguments_ !== "object" || arguments_ === null || Array.isArray(arguments_)) return { status: "audit-incomplete", observation: { kind: "non-object-arguments", type: arguments_ === null ? "null" : Array.isArray(arguments_) ? "array" : typeof arguments_ }, candidate: arguments_, ...usage === void 0 ? {} : { usage } };
+  if (typeof arguments_ !== "object" || arguments_ === null || Array.isArray(arguments_)) {
+    throw new ComplianceCandidateUnreadableError(
+      { kind: "non-object-arguments", type: arguments_ === null ? "null" : Array.isArray(arguments_) ? "array" : typeof arguments_ },
+      arguments_,
+      usage
+    );
+  }
   const args = arguments_;
   const status = args.status;
   if (status === "pass") return { status, ...usage === void 0 ? {} : { usage } };
   if (status === "revise") return { status, violations: readListField(args.violations), ...usage === void 0 ? {} : { usage } };
   if (status === "escalate") return { status, ...Object.hasOwn(args, "conflicts") ? { conflicts: args.conflicts } : {}, ...Object.hasOwn(args, "decisionGate") ? { decisionGate: args.decisionGate } : {}, ...usage === void 0 ? {} : { usage } };
-  return { status: "audit-incomplete", observation: { kind: "object-status-unreadable", status: status === void 0 ? "missing" : "unknown" }, candidate: arguments_, ...usage === void 0 ? {} : { usage } };
+  throw new ComplianceCandidateUnreadableError(
+    { kind: "object-status-unreadable", status: status === void 0 ? "missing" : "unknown" },
+    arguments_,
+    usage
+  );
 }
-var nonblank2, decisionGateSchema, complianceDecisionSchema, COMPLIANCE_RESPONSE_ENTRY_TYPE, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
+var ComplianceCandidateUnreadableError, nonblank2, decisionGateSchema, complianceDecisionSchema, COMPLIANCE_RESPONSE_ENTRY_TYPE, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
 var init_compliance_transport = __esm({
   "src/compliance-transport.ts"() {
     "use strict";
     init_build();
     init_evidence_child_executor();
     init_auditor_dossier_tool();
+    ComplianceCandidateUnreadableError = class extends Error {
+      observation;
+      candidate;
+      usage;
+      constructor(observation, candidate, usage) {
+        const detail = observation.kind === "non-object-arguments" ? `${observation.kind}:${observation.type}` : observation.kind === "object-status-unreadable" ? `${observation.kind}:${observation.status}` : observation.kind === "missing-subject" ? `${observation.kind}:${observation.subject}` : observation.kind;
+        super(`Compliance candidate unreadable: ${detail}`);
+        this.name = "ComplianceCandidateUnreadableError";
+        this.observation = observation;
+        this.candidate = candidate;
+        if (usage !== void 0) this.usage = usage;
+      }
+    };
     nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
     decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
     complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "Auditor decision status." }), violations: typebox_exports.Array(nonblank2, { description: "Observed compliance violations." }), conflicts: typebox_exports.Array(nonblank2, { description: "Unresolved authority or execution conflicts." }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "Escalation question and available options." }) }, { additionalProperties: true, required: [] });
@@ -20663,11 +20634,16 @@ var init_work_subject_identity = __esm({
 });
 
 // src/navigator-invocation-identity.ts
-function isNavigatorInfrastructureFailureFact(value) {
+function buildNavigatorInfrastructureFailureFact() {
+  return {
+    kind: NAVIGATOR_INFRASTRUCTURE_FAILURE_KIND,
+    source: "shared-role-lifecycle",
+    reasonCode: "host_failure"
+  };
+}
+function hasNavigatorInfrastructureFailureBase(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
   const record4 = value;
-  const keys = Object.keys(record4);
-  if (keys.length !== NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS.length) return false;
   for (const key of NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS) {
     if (!Object.hasOwn(record4, key)) return false;
   }
@@ -20698,7 +20674,8 @@ function parseInvocationMarkerIdentity(data) {
 function classifyPackagedRoleTerminalResult(message) {
   if (typeof message.toolName !== "string") return { kind: "nonterminal" };
   if (!PACKAGED_ROLE_OUTPUT_TOOLS.has(message.toolName)) return { kind: "nonterminal" };
-  const infraFact = isNavigatorInfrastructureFailureFact(message.details) ? message.details : void 0;
+  const hasInfraBase = hasNavigatorInfrastructureFailureBase(message.details);
+  const infraFact = hasInfraBase ? buildNavigatorInfrastructureFailureFact() : void 0;
   if (message.isError === true) {
     if (infraFact === void 0) return { kind: "nonterminal" };
     return { kind: "infrastructure", fact: infraFact };
@@ -20805,8 +20782,7 @@ var init_navigator_invocation_identity = __esm({
 
 // src/public-cli/settlement.ts
 import { randomUUID } from "node:crypto";
-import { constants as fsConstants } from "node:fs";
-import { appendFile, lstat as lstat4, mkdir as mkdir3, open as open2, readFile as readFile10, readdir as readdir4, writeFile as writeFile5 } from "node:fs/promises";
+import { appendFile, readFile as readFile10, readdir as readdir4, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname7, join as join13 } from "node:path";
 function isChildDiagnosticFloodLine(line2) {
   if (/^at\s+/.test(line2)) return true;
@@ -21110,7 +21086,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   }
   return void 0;
 }
-async function readBoundAuditorKnownFailure(sessionFile) {
+async function loadBoundAuditorVolumes(sessionFile) {
   let parentEntries;
   try {
     parentEntries = await readBoundSessionEntries(sessionFile);
@@ -21147,7 +21123,7 @@ async function readBoundAuditorKnownFailure(sessionFile) {
     if (isMissingPathError2(error)) return void 0;
     throw sessionReadFailure(error, "failed to read bound auditor session directory");
   }
-  const validAuditorFiles = [];
+  const valid = [];
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
@@ -21162,9 +21138,17 @@ async function readBoundAuditorKnownFailure(sessionFile) {
     const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
     const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
     if (bindingParent?.sessionId !== parentId || bindingParent.sessionFile !== sessionFile || attemptEntryIndex < latestParentUserIndex) continue;
-    validAuditorFiles.push({ file, entries, ...attemptEntryId === void 0 ? {} : { attemptEntryId } });
+    valid.push({
+      entries,
+      parentId,
+      sessionFile,
+      ...attemptEntryId === void 0 ? {} : { attemptEntryId }
+    });
   }
-  for (const { entries, attemptEntryId } of validAuditorFiles) {
+  return valid;
+}
+function complianceFailureFromAuditorVolumes(volumes) {
+  for (const { entries, attemptEntryId, parentId, sessionFile } of volumes) {
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
@@ -21185,7 +21169,10 @@ async function readBoundAuditorKnownFailure(sessionFile) {
       };
     }
   }
-  for (const { entries } of validAuditorFiles) {
+  return void 0;
+}
+function providerStopFallbackFromAuditorVolumes(volumes) {
+  for (const { entries } of volumes) {
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -21199,6 +21186,16 @@ async function readBoundAuditorKnownFailure(sessionFile) {
   }
   return void 0;
 }
+async function readBoundAuditorComplianceFailure(sessionFile) {
+  const volumes = await loadBoundAuditorVolumes(sessionFile);
+  if (volumes === void 0) return void 0;
+  return complianceFailureFromAuditorVolumes(volumes);
+}
+async function readBoundAuditorProviderStopFallback(sessionFile) {
+  const volumes = await loadBoundAuditorVolumes(sessionFile);
+  if (volumes === void 0) return void 0;
+  return providerStopFallbackFromAuditorVolumes(volumes);
+}
 function typedFailedTerminatingToolKnownFailure(entries) {
   let attemptStart = 0;
   for (let i = entries.length - 1; i >= 0; i -= 1) {
@@ -21217,11 +21214,12 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
     const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord8(part) && part.type === "text" && typeof part.text === "string") : void 0;
     const diagnostic = isRecord8(textPart) ? textPart.text : void 0;
+    const details = isRecord8(message.details) ? message.details : classification.fact;
     return {
       cause: "output",
       identity: { name: message.toolName, code: message.toolCallId },
       ...typeof diagnostic === "string" && diagnostic.trim() !== "" ? { diagnostic } : {},
-      details: classification.fact
+      details
     };
   }
   return void 0;
@@ -21249,8 +21247,8 @@ async function resolveAuditedRunnerFailureResolution(input) {
     }
   }
   try {
-    const auditorFailure = await readBoundAuditorKnownFailure(input.sessionFile);
-    if (auditorFailure !== void 0) return resolutionOf(auditorFailure);
+    const auditorCompliance = await readBoundAuditorComplianceFailure(input.sessionFile);
+    if (auditorCompliance !== void 0) return resolutionOf(auditorCompliance);
   } catch (error) {
     const failure = sessionReadFailure(error, "failed to recover bound auditor failure");
     return resolutionOf({
@@ -21274,6 +21272,17 @@ async function resolveAuditedRunnerFailureResolution(input) {
       });
     }
   }
+  try {
+    const auditorStop = await readBoundAuditorProviderStopFallback(input.sessionFile);
+    if (auditorStop !== void 0) return resolutionOf(auditorStop);
+  } catch (error) {
+    const failure = sessionReadFailure(error, "failed to recover bound auditor provider stop");
+    return resolutionOf({
+      cause: "session",
+      identity: thrownIdentity(failure),
+      diagnostic: failure.message || failure.name
+    });
+  }
   try {
     const evidenceChildFailure = await readBoundEvidenceChildKnownFailure(input.sessionFile);
     if (evidenceChildFailure !== void 0) return resolutionOf(evidenceChildFailure);
@@ -21679,29 +21688,6 @@ function assertCollectorReceiptMatchesAdmitted(receipt, admitted) {
     );
   }
 }
-function isComplianceAuditIncomplete(value) {
-  if (!isRecord8(value) || value.status !== "audit-incomplete") return false;
-  const observation = value.observation;
-  if (!isRecord8(observation)) return false;
-  if (observation.kind === "missing-dossier") return true;
-  if (observation.kind === "missing-subject") {
-    return typeof observation.subject === "string" && observation.subject.length > 0;
-  }
-  if (observation.kind === "object-status-unreadable") {
-    return observation.status === "missing" || observation.status === "unknown";
-  }
-  return observation.kind === "non-object-arguments" && [
-    "null",
-    "array",
-    "undefined",
-    "string",
-    "number",
-    "boolean",
-    "bigint",
-    "symbol",
-    "function"
-  ].includes(observation.type);
-}
 function auditToolNameForRole(role) {
   switch (role) {
     case "judge":
@@ -21712,16 +21698,6 @@ function auditToolNameForRole(role) {
       return DOCTOR_AUDIT_TOOL_NAME;
   }
 }
-function outputToolNameForAuditedRole(role) {
-  switch (role) {
-    case "judge":
-      return JUDGE_OUTPUT_TOOL_NAME;
-    case "reviewer":
-      return REVIEWER_OUTPUT_TOOL_NAME;
-    case "doctor":
-      return DOCTOR_OUTPUT_TOOL_NAME;
-  }
-}
 function boundRoleToolCallForResult(entries, resultIndex, message, outputToolName) {
   const callId = message.toolCallId;
   if (typeof callId !== "string" || callId.trim() === "") return void 0;
@@ -21816,10 +21792,6 @@ function isUnboundAuditEscalationFace(details) {
   const kind = safelyRead(details, "kind");
   return kind.readable && kind.value === "audit_escalation";
 }
-function auditIncompleteFromCandidate(candidate) {
-  const decision = readComplianceCandidate(candidate);
-  return decision.status === "audit-incomplete" ? decision : void 0;
-}
 function boundRetainedAuditResponse(entries, callIndex, resultIndex, auditToolName) {
   const matches = [];
   for (let index = callIndex + 1; index < resultIndex; index += 1) {
@@ -21838,92 +21810,6 @@ function boundRetainedAuditResponse(entries, callIndex, resultIndex, auditToolNa
   }
   return matches.length === 1 ? matches[0] : void 0;
 }
-function extractComplianceAuditIncompleteRoleOutcome(entries, role, outputToolName) {
-  if (outputToolName !== outputToolNameForAuditedRole(role)) return void 0;
-  const auditToolName = auditToolNameForRole(role);
-  for (let index = entries.length - 1; index >= 0; index -= 1) {
-    const message = entries[index]?.message;
-    if (entries[index]?.type !== "message" || message?.role !== "toolResult" || message.toolName !== outputToolName || message.isError === true || !isComplianceAuditIncomplete(message.details)) {
-      continue;
-    }
-    const roleCall = boundRoleToolCallForResult(
-      entries,
-      index,
-      message,
-      outputToolName
-    );
-    if (roleCall === void 0) continue;
-    const details = message.details;
-    if (details.observation.kind === "missing-dossier" || details.observation.kind === "missing-subject") {
-      return {
-        outcome: buildAuditIncompleteTerminalOutcome({
-          role,
-          roleCandidate: roleCall.candidate,
-          audit: details
-        })
-      };
-    }
-    const retained = boundRetainedAuditResponse(
-      entries,
-      roleCall.callIndex,
-      index,
-      auditToolName
-    );
-    if (retained === void 0) continue;
-    const audit = auditIncompleteFromCandidate(retained.candidate);
-    if (audit === void 0) continue;
-    return {
-      outcome: buildAuditIncompleteTerminalOutcome({
-        role,
-        roleCandidate: roleCall.candidate,
-        audit
-      })
-    };
-  }
-  return void 0;
-}
-function auditArtifactPublicationError(message, code) {
-  const error = new Error(message);
-  error.name = "ArtifactPublicationError";
-  error.code = code;
-  return error;
-}
-async function ensureAuditEvidenceDirectory(runDirectory) {
-  const artifactsDir = join13(runDirectory, "artifacts");
-  const runStat = await lstat4(runDirectory);
-  if (runStat.isSymbolicLink() || !runStat.isDirectory()) {
-    throw auditArtifactPublicationError(
-      "audit evidence run directory is not a real directory",
-      "ELOOP"
-    );
-  }
-  try {
-    const existing = await lstat4(artifactsDir);
-    if (existing.isSymbolicLink()) {
-      throw auditArtifactPublicationError(
-        "audit evidence artifacts directory is a symlink",
-        "ELOOP"
-      );
-    }
-    if (!existing.isDirectory()) {
-      throw auditArtifactPublicationError(
-        "audit evidence artifacts path is not a directory",
-        "EEXIST"
-      );
-    }
-  } catch (error) {
-    if (!isMissingPathError2(error)) throw error;
-    await mkdir3(artifactsDir, { recursive: true });
-    const created = await lstat4(artifactsDir);
-    if (created.isSymbolicLink() || !created.isDirectory()) {
-      throw auditArtifactPublicationError(
-        "audit evidence artifacts directory is not a real directory",
-        "ELOOP"
-      );
-    }
-  }
-  return artifactsDir;
-}
 async function appendRunAttemptHistory(admitted, outcome) {
   const entries = await readBoundSessionEntries(admitted.sessionFile);
   let parentId = null;
@@ -21952,119 +21838,6 @@ async function appendRunAttemptHistory(admitted, outcome) {
 `;
   await appendFile(admitted.sessionFile, line2, "utf8");
 }
-async function publishComplianceAuditIncompleteEvidence(admitted, outcome) {
-  await appendRunAttemptHistory(admitted, outcome);
-  if (typeof fsConstants.O_NOFOLLOW !== "number" || typeof fsConstants.O_NONBLOCK !== "number") {
-    throw auditArtifactPublicationError(
-      "audit evidence publication requires O_NOFOLLOW|O_NONBLOCK open-flag support (anti-symlink/anti-planted protection must not be silently dropped); refusing to publish",
-      "ENOSYS"
-    );
-  }
-  const artifactsDir = await ensureAuditEvidenceDirectory(admitted.runDirectory);
-  const evidencePath = join13(artifactsDir, "audit-incomplete.json");
-  let existing;
-  try {
-    existing = await lstat4(evidencePath);
-  } catch (error) {
-    if (!isMissingPathError2(error)) throw error;
-  }
-  if (existing?.isSymbolicLink()) {
-    throw auditArtifactPublicationError(
-      "audit evidence destination is a symlink",
-      "ELOOP"
-    );
-  }
-  if (existing && !existing.isFile()) {
-    throw auditArtifactPublicationError(
-      "audit evidence destination is not a regular file",
-      "EEXIST"
-    );
-  }
-  const handle = await open2(
-    evidencePath,
-    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_TRUNC | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK,
-    384
-  );
-  try {
-    if (!(await handle.stat()).isFile()) {
-      throw auditArtifactPublicationError(
-        "audit evidence destination is not a regular file",
-        "EEXIST"
-      );
-    }
-    await handle.writeFile(`${JSON.stringify(outcome, null, 2)}
-`, "utf8");
-    await handle.sync();
-  } finally {
-    await handle.close();
-  }
-  return { kind: "evidence", path: evidencePath };
-}
-function auditPublicationFailureTerminal(admitted, entries, outcome, error) {
-  const attempt = publicationAttemptFromError(
-    join13(admitted.runDirectory, "artifacts", "audit-incomplete.json"),
-    error
-  );
-  const diagnostic = `audit-incomplete evidence publication failed: ${attempt.diagnostic}`;
-  const decisiveFacts = {
-    ...outcome.decisiveFacts,
-    cause: "unrecognized",
-    diagnostic,
-    publicationFailure: attempt
-  };
-  if (attempt.identity?.name !== void 0) decisiveFacts.errorName = attempt.identity.name;
-  if (attempt.identity?.code !== void 0) decisiveFacts.errorCode = attempt.identity.code;
-  const auditResidual = {
-    roleCandidate: outcome.roleCandidate,
-    audit: outcome.audit,
-    acceptedReceipt: false
-  };
-  return {
-    roleOutcome: {
-      kind: "failure",
-      role: admitted.role,
-      cause: "unrecognized",
-      diagnostic,
-      decisiveFacts,
-      auditResidual
-    },
-    navigator: extractNavigatorFact(entries),
-    artifacts: [],
-    runId: admitted.runId
-  };
-}
-async function trySettleComplianceAuditIncompleteTerminalResult(admitted) {
-  if (!AUDITOR_SOUL_ROLES.includes(admitted.role)) {
-    return void 0;
-  }
-  const outputToolName = admitted.role === "judge" ? JUDGE_OUTPUT_TOOL_NAME : admitted.role === "reviewer" ? REVIEWER_OUTPUT_TOOL_NAME : DOCTOR_OUTPUT_TOOL_NAME;
-  const entries = await readLawfulSettlementEntries(admitted);
-  if (entries === void 0) return void 0;
-  const extracted = extractComplianceAuditIncompleteRoleOutcome(
-    entries,
-    admitted.role,
-    outputToolName
-  );
-  if (extracted === void 0) return void 0;
-  let evidence;
-  try {
-    evidence = await publishComplianceAuditIncompleteEvidence(
-      admitted,
-      extracted.outcome
-    );
-  } catch (error) {
-    return auditPublicationFailureTerminal(admitted, entries, extracted.outcome, error);
-  }
-  return withOptionalMenxiaProjection(
-    {
-      roleOutcome: extracted.outcome,
-      navigator: extractNavigatorFact(entries),
-      artifacts: [evidence],
-      runId: admitted.runId
-    },
-    admitted.sessionDirectory
-  );
-}
 function extractJudgeRoleOutcome(entries) {
   if (!isReceiptSettlementBindingClear(entries)) return void 0;
   for (let i = entries.length - 1; i >= 0; i -= 1) {
@@ -22196,6 +21969,8 @@ async function extractMenxiaFactFromSessionDirectory(sessionDirectory) {
   return projectTerminalMenxiaFact(rounds);
 }
 async function withOptionalMenxiaProjection(base, sessionDirectory) {
+  const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
+  if (isRecord8(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
   const menxia = await extractMenxiaFactFromSessionDirectory(sessionDirectory);
   return menxia === void 0 ? base : { ...base, menxia };
 }
@@ -22909,16 +22684,11 @@ async function settleLawfulNotaryTerminalResult(admitted) {
         NOTARY_OUTPUT_TOOL_NAME
       );
       if (residual === void 0) continue;
-      return {
-        roleOutcome: buildResidualIncompleteTerminalOutcome({
-          role: "notary",
-          candidate: residual.candidate,
-          diagnostic: residual.diagnostic
-        }),
-        navigator: extractNavigatorFact(entries),
-        artifacts: [],
-        runId: admitted.runId
-      };
+      return settleFailureTerminalResult(admitted, {
+        cause: "output",
+        diagnostic: residual.diagnostic,
+        details: { candidate: residual.candidate, acceptedReceipt: false }
+      });
     }
     return void 0;
   }
@@ -23640,9 +23410,9 @@ var init_settlement = __esm({
 });
 
 // src/public-cli/auto-resume.ts
-import { constants as fsConstants2 } from "node:fs";
+import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { appendFile as appendFile2, lstat as lstat5, mkdir as mkdir4, open as open3, readFile as readFile11 } from "node:fs/promises";
+import { appendFile as appendFile2, lstat as lstat5, mkdir as mkdir4, open as open2, readFile as readFile11 } from "node:fs/promises";
 import { join as join14 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
@@ -23760,10 +23530,10 @@ async function retainDispatchError(admitted, attempt, error) {
     2
   )}
 `;
-  const noFollowFlag = typeof fsConstants2.O_NOFOLLOW === "number" ? fsConstants2.O_NOFOLLOW : 0;
-  const handle = await open3(
+  const noFollowFlag = typeof fsConstants.O_NOFOLLOW === "number" ? fsConstants.O_NOFOLLOW : 0;
+  const handle = await open2(
     filePath,
-    fsConstants2.O_WRONLY | fsConstants2.O_CREAT | fsConstants2.O_EXCL | noFollowFlag,
+    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag,
     384
   );
   try {
@@ -24826,8 +24596,7 @@ async function runPublicDoctor(argv, env, io, parseDoctorArgv2) {
     extraArgs,
     adapters: {
       trySettle: trySettleDoctorTerminalResult,
-      shouldPresentSettled: (terminal) => isLawfulTypedTerminalOutcome(terminal.roleOutcome),
-      trySettleSecondary: trySettleComplianceAuditIncompleteTerminalResult
+      shouldPresentSettled: (terminal) => isLawfulTypedTerminalOutcome(terminal.roleOutcome)
     },
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
@@ -25055,20 +24824,6 @@ async function dispatchAdmittedFixer(input) {
         terminal: lawful
       };
     }
-    const auditIncomplete = await trySettleComplianceAuditIncompleteTerminalResult(admitted);
-    if (auditIncomplete !== void 0) {
-      await markRunTerminal(admitted.runDirectory).catch(() => void 0);
-      if (auditIncomplete.roleOutcome.kind === "failure") {
-        presentFailureTerminal(auditIncomplete, io);
-      } else {
-        io.stdout(formatTerminalResult(auditIncomplete));
-      }
-      return {
-        exitCode: exitCodeForTerminalOutcome(auditIncomplete.roleOutcome),
-        admitted,
-        terminal: auditIncomplete
-      };
-    }
     const credentialFailure = postRunMissingCredentialFailure(
       result2,
       env.model,
@@ -25299,7 +25054,7 @@ async function runPublicNotary(argv, env, io, parseNotaryArgv2) {
     extraArgs,
     adapters: {
       trySettle: trySettleNotaryTerminalResult,
-      // Accepted receipts and residual incomplete share one present path.
+      // Accepted receipts and failure terminals both present via shared path.
       shouldPresentSettled: () => true
     },
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
@@ -25497,20 +25252,6 @@ async function dispatchAdmittedJudge(input) {
         terminal: lawful
       };
     }
-    const auditIncomplete = await trySettleComplianceAuditIncompleteTerminalResult(admitted);
-    if (auditIncomplete !== void 0) {
-      await markRunTerminal(admitted.runDirectory).catch(() => void 0);
-      if (auditIncomplete.roleOutcome.kind === "failure") {
-        presentFailureTerminal(auditIncomplete, io);
-      } else {
-        io.stdout(formatTerminalResult(auditIncomplete));
-      }
-      return {
-        exitCode: exitCodeForTerminalOutcome(auditIncomplete.roleOutcome),
-        admitted,
-        terminal: auditIncomplete
-      };
-    }
     const infrastructureFailure = await readEngineDetourInfrastructureFailure(
       admitted.sessionFile
     );
@@ -26316,20 +26057,6 @@ async function dispatchAdmittedReviewer(input) {
         terminal: lawful
       };
     }
-    const auditIncomplete = await trySettleComplianceAuditIncompleteTerminalResult(admitted);
-    if (auditIncomplete !== void 0) {
-      await markRunTerminal(admitted.runDirectory).catch(() => void 0);
-      if (auditIncomplete.roleOutcome.kind === "failure") {
-        presentFailureTerminal(auditIncomplete, io);
-      } else {
-        io.stdout(formatTerminalResult(auditIncomplete));
-      }
-      return {
-        exitCode: exitCodeForTerminalOutcome(auditIncomplete.roleOutcome),
-        admitted,
-        terminal: auditIncomplete
-      };
-    }
     const infrastructureFailure = await readEngineDetourInfrastructureFailure(
       admitted.sessionFile
     );
@@ -26564,7 +26291,7 @@ var init_atomic_write = __esm({
 });
 
 // src/analyst-index.ts
-import { open as open4, readFile as readFile12, unlink as unlink4 } from "node:fs/promises";
+import { open as open3, readFile as readFile12, unlink as unlink4 } from "node:fs/promises";
 import { dirname as dirname9, join as join23 } from "node:path";
 function sleep(ms) {
   return new Promise((resolve9) => {
@@ -26579,7 +26306,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const startedAt = Date.now();
   while (true) {
     try {
-      const handle = await open4(lockPath, "wx");
+      const handle = await open3(lockPath, "wx");
       try {
         await handle.writeFile(`${process.pid}
 `, "utf8");