@akagilnc/pi-workflow-roles 0.1.2479 → 0.1.2497

package/dist/doctor-contracts.js

@@ -1,6 +1,7 @@
 import { Type } from "typebox";
 import { canonicalJson } from "./canonical-json.js";
 import { openToolObjectFromUnion } from "./open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.js";
 export const DOCTOR_EVIDENCE_TOOL_NAME = "ak_doctor_evidence";
 export const DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
 export const DOCTOR_ACCEPTED_TEXT = "太医署回执已接受";
@@ -49,7 +50,7 @@ const doctorSubmissionVariants = Type.Union([
         missingEvidence: Type.Array(Type.Object({ need: nonblank, targetKeys: Type.Array(nonblank, { minItems: 1 }) }, { additionalProperties: false }), { minItems: 1, description: "如实证词所需而尚缺的证据" }),
     }, { additionalProperties: false, description: "证据不足以支撑如实案证词" }),
 ]);
-export const doctorSubmissionSchema = openToolObjectFromUnion(doctorSubmissionVariants);
+export const doctorSubmissionSchema = withInfrastructureFailureDeclaration(openToolObjectFromUnion(doctorSubmissionVariants));
 export const doctorOutputSchema = Type.Union([
     Type.Object({ status: Type.Literal("completed"), case: caseIdentity, findings: Type.Array(finding), cost }, { additionalProperties: false }),
     doctorSubmissionVariants.anyOf[1],

package/dist/merger-contracts.js

@@ -3,6 +3,7 @@ import { isFullGitObjectId } from "./git-object-id.js";
 import { exactUtf8 } from "./exact-utf8.js";
 import { sha256Hex } from "./sha256.js";
 import { openToolObjectFromUnion } from "./open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.js";
 const oidPattern = "^(?:[0-9a-f]{40}|[0-9a-f]{64})$";
 const materialSchema = Type.Object({ bytesBase64: Type.String(), sha256: Type.String() }, { additionalProperties: false });
 const checkSchema = Type.Object({ name: Type.String({ minLength: 1 }), argv: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }) }, { additionalProperties: false });
@@ -18,7 +19,7 @@ const mergerOutputVariants = Type.Union([
     Type.Object({ status: Type.Literal("completed", { description: "completed — 形状指引，非 schema 闸" }), attemptId: Type.String({ minLength: 1, description: "已受理合并 attempt 身份" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), mergeCommitId: Type.String({ pattern: oidPattern, description: "已核验的完成合并 commit object ID" }) }, { additionalProperties: false }),
     Type.Object({ status: Type.Literal("escalate", { description: "escalate — 形状指引，非 schema 闸" }), attemptId: Type.String({ minLength: 1, description: "已受理合并 attempt 身份" }), diagnosis: Type.String({ minLength: 1, description: "合并完成需升级的原因" }), report: Type.String({ minLength: 1, description: "如实结果报告" }) }, { additionalProperties: false }),
 ]);
-export const mergerOutputSchema = openToolObjectFromUnion(mergerOutputVariants);
+export const mergerOutputSchema = withInfrastructureFailureDeclaration(openToolObjectFromUnion(mergerOutputVariants));
 export const MERGER_OUTPUT_TOOL_NAME = "ak_merger_output";
 export const MERGER_ACCEPTED_TEXT = "合并回执已接受";
 const record = (v) => typeof v === "object" && v !== null && !Array.isArray(v);

package/dist/notary-contracts.js

@@ -5,6 +5,7 @@
  */
 import { Type } from "typebox";
 import { openToolObject } from "./open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.js";
 export const NOTARY_OUTPUT_TOOL_NAME = "ak_notary_output";
 export const NOTARY_ACCEPTED_TEXT = "符宝郎回执已接受";
 export const NOTARY_SOURCE_RUN_FLAG = {
@@ -16,14 +17,14 @@ export const NOTARY_SOURCE_RUN_FLAG = {
 };
 /** Package-owned kickoff only — callers supply zero prompt bytes (ADR 0067 / #448). */
 export const NOTARY_FIXED_KICKOFF = "符宝郎案卷已受理；来源 run 定位见会话材料。";
-export const notaryOutputSchema = openToolObject(Type.Object({
+export const notaryOutputSchema = withInfrastructureFailureDeclaration(openToolObject(Type.Object({
     status: Type.Unknown({
         description: "pass | bounce — 形状指引，非 schema 闸",
     }),
     findings: Type.Unknown({
         description: "string[] findings，随 pass 或 bounce 留存",
     }),
-}));
+})));
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }

package/dist/package-contracts/fixer-output.js

@@ -1,6 +1,7 @@
 import { Type } from "typebox";
 import { FIXER_PREREQUISITE_ID_PATTERN } from "./fixer-packet.js";
 import { openToolObjectFromUnion } from "../open-tool-schema.js";
+import { withInfrastructureFailureDeclaration } from "./terminating-infrastructure.js";
 export const FIXER_OUTPUT_TOOL_NAME = "ak_fixer_output";
 export const FIXER_ACCEPTED_TEXT = "修内司回执已接受";
 const nonblankTransportString = Type.String({ minLength: 1 });
@@ -37,7 +38,7 @@ const fixerOutputVariants = Type.Union([
     Type.Object({ status: Type.Literal("refused", { description: "refused — 形状指引，非 schema 闸" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), classResults: Type.Array(classResultSchema, { minItems: 1, description: "各类拒绝结算" }) }),
     Type.Object({ status: Type.Literal("partially_completed", { description: "partially_completed — 形状指引，非 schema 闸" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), classResults: Type.Array(classResultSchema, { minItems: 1, description: "各类完成或拒绝结算" }), testEvidence: Type.Optional(testEvidenceSchema) }),
 ]);
-export const fixerOutputSchema = openToolObjectFromUnion(fixerOutputVariants);
+export const fixerOutputSchema = withInfrastructureFailureDeclaration(openToolObjectFromUnion(fixerOutputVariants));
 export function validateFixerOutput(value, _phase) {
     return value;
 }

package/dist/package-contracts/terminating-infrastructure.js

@@ -0,0 +1,90 @@
+/**
+ * Package-owned shared infrastructure-failure declaration for every primary
+ * packaged-role output tool (#541).
+ *
+ * One module owns what the judge mandates be shared (not reimplemented per
+ * seat): the typed `infrastructureFailure.diagnostic` declaration composed into
+ * each output tool's schema, and the single early host `failInfrastructure`
+ * call each output `execute` makes before any role business validation / gate /
+ * audit / ledger / Git work. The accepted status sets are intentionally NOT
+ * extended: an infra declaration fails BEFORE accepted validation, never
+ * becomes an accepted receipt. The diagnostic is carried verbatim on the thrown
+ * Error so settlement keeps the original cause (kind=failure, exit 1).
+ */
+import { Type } from "typebox";
+export const INFRASTRUCTURE_FAILURE_DECLARATION_KEY = "infrastructureFailure";
+export const INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic";
+/** Shared typed declaration fragment: `infrastructureFailure.diagnostic` = non-empty string. */
+const infrastructureFailureDeclarationSchema = Type.Object({
+    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: Type.Object({
+        [INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY]: Type.String({
+            minLength: 1,
+            description: "非空基础设施失败诊断",
+        }),
+    }, {
+        additionalProperties: true,
+        description: "基础设施失败声明",
+    }),
+}, { additionalProperties: true });
+/**
+ * Compose the shared infrastructure-failure declaration into an open output
+ * tool-object schema. Returns an open object (additionalProperties: true,
+ * required: []) with the base schema's properties plus the shared declaration.
+ * Static typing is preserved on the base (`as S`), so existing
+ * `Static<typeof ...>` derived parameter types are unchanged.
+ */
+export function withInfrastructureFailureDeclaration(schema) {
+    const baseProperties = schema
+        .properties;
+    const properties = {
+        ...(baseProperties ?? {}),
+        [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: infrastructureFailureDeclarationSchema.properties[INFRASTRUCTURE_FAILURE_DECLARATION_KEY],
+    };
+    const object = Type.Object(properties, { additionalProperties: true });
+    object.required = [];
+    return object;
+}
+/** Safe recognition of the typed declaration; non-shapes / hostile input fail closed. */
+function isInfrastructureFailureDeclaration(parameters) {
+    if (parameters === null ||
+        typeof parameters !== "object" ||
+        Array.isArray(parameters)) {
+        return false;
+    }
+    const record = parameters;
+    if (!Object.hasOwn(record, INFRASTRUCTURE_FAILURE_DECLARATION_KEY))
+        return false;
+    const declaration = record[INFRASTRUCTURE_FAILURE_DECLARATION_KEY];
+    if (declaration === null ||
+        typeof declaration !== "object" ||
+        Array.isArray(declaration)) {
+        return false;
+    }
+    const diagnostic = declaration[INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY];
+    return typeof diagnostic === "string" && diagnostic.trim().length > 0;
+}
+/** Non-empty trimmed diagnostic from the declaration, else undefined. */
+function infrastructureFailureDiagnostic(parameters) {
+    if (!isInfrastructureFailureDeclaration(parameters))
+        return undefined;
+    const declaration = parameters[INFRASTRUCTURE_FAILURE_DECLARATION_KEY];
+    const diagnostic = declaration[INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY];
+    return typeof diagnostic === "string" ? diagnostic.trim() : undefined;
+}
+/** diagnostic → Error, name stamped so the host error identity is observable. */
+function infrastructureFailureError(diagnostic) {
+    const error = new Error(diagnostic);
+    error.name = "InfrastructureFailure";
+    return error;
+}
+/**
+ * The one early call for every terminating output `execute`: if the parameters
+ * carry the infra declaration, hand the diagnostic error to the shared host
+ * `failInfrastructure` seam (which aborts the run). No-op otherwise.
+ */
+export function failOnInfrastructureFailureDeclaration(parameters, hostActions, ctx, toolCallId) {
+    const diagnostic = infrastructureFailureDiagnostic(parameters);
+    if (diagnostic === undefined)
+        return;
+    hostActions.failInfrastructure(infrastructureFailureError(diagnostic), ctx, toolCallId);
+}

package/dist/public-cli/main.js

@@ -14012,6 +14012,44 @@ var init_open_tool_schema = __esm({
   }
 });
 
+// src/package-contracts/terminating-infrastructure.ts
+function withInfrastructureFailureDeclaration(schema) {
+  const baseProperties = schema.properties;
+  const properties = {
+    ...baseProperties ?? {},
+    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: infrastructureFailureDeclarationSchema.properties[INFRASTRUCTURE_FAILURE_DECLARATION_KEY]
+  };
+  const object = typebox_exports.Object(properties, { additionalProperties: true });
+  object.required = [];
+  return object;
+}
+var INFRASTRUCTURE_FAILURE_DECLARATION_KEY, INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY, infrastructureFailureDeclarationSchema;
+var init_terminating_infrastructure = __esm({
+  "src/package-contracts/terminating-infrastructure.ts"() {
+    "use strict";
+    init_build();
+    INFRASTRUCTURE_FAILURE_DECLARATION_KEY = "infrastructureFailure";
+    INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic";
+    infrastructureFailureDeclarationSchema = typebox_exports.Object(
+      {
+        [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: typebox_exports.Object(
+          {
+            [INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY]: typebox_exports.String({
+              minLength: 1,
+              description: "\u975E\u7A7A\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u8BCA\u65AD"
+            })
+          },
+          {
+            additionalProperties: true,
+            description: "\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u58F0\u660E"
+          }
+        )
+      },
+      { additionalProperties: true }
+    );
+  }
+});
+
 // src/package-contracts/fixer-output.ts
 function validateFixerOutput(value, _phase) {
   return value;
@@ -14023,6 +14061,7 @@ var init_fixer_output = __esm({
     init_build();
     init_fixer_packet();
     init_open_tool_schema();
+    init_terminating_infrastructure();
     FIXER_OUTPUT_TOOL_NAME = "ak_fixer_output";
     nonblankTransportString = typebox_exports.String({ minLength: 1 });
     authorityBlockerSchema = typebox_exports.Object({ cause: typebox_exports.Literal("authority_violation"), evidence: nonblankTransportString });
@@ -14057,7 +14096,9 @@ var init_fixer_output = __esm({
       typebox_exports.Object({ status: typebox_exports.Literal("refused", { description: "refused \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), report: typebox_exports.String({ minLength: 1, description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }), classResults: typebox_exports.Array(classResultSchema, { minItems: 1, description: "\u5404\u7C7B\u62D2\u7EDD\u7ED3\u7B97" }) }),
       typebox_exports.Object({ status: typebox_exports.Literal("partially_completed", { description: "partially_completed \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), report: typebox_exports.String({ minLength: 1, description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }), classResults: typebox_exports.Array(classResultSchema, { minItems: 1, description: "\u5404\u7C7B\u5B8C\u6210\u6216\u62D2\u7EDD\u7ED3\u7B97" }), testEvidence: typebox_exports.Optional(testEvidenceSchema) })
     ]);
-    fixerOutputSchema = openToolObjectFromUnion(fixerOutputVariants);
+    fixerOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObjectFromUnion(fixerOutputVariants)
+    );
   }
 });
 
@@ -14116,6 +14157,7 @@ var init_doctor_contracts = __esm({
     init_build();
     init_canonical_json();
     init_open_tool_schema();
+    init_terminating_infrastructure();
     DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
     DOCTOR_TARGET_KINDS = ["law", "gate", "template", "station", "seat"];
     nonblank = typebox_exports.String({ minLength: 1, pattern: "\\S" });
@@ -14166,7 +14208,9 @@ var init_doctor_contracts = __esm({
         missingEvidence: typebox_exports.Array(typebox_exports.Object({ need: nonblank, targetKeys: typebox_exports.Array(nonblank, { minItems: 1 }) }, { additionalProperties: false }), { minItems: 1, description: "\u5982\u5B9E\u8BC1\u8BCD\u6240\u9700\u800C\u5C1A\u7F3A\u7684\u8BC1\u636E" })
       }, { additionalProperties: false, description: "\u8BC1\u636E\u4E0D\u8DB3\u4EE5\u652F\u6491\u5982\u5B9E\u6848\u8BC1\u8BCD" })
     ]);
-    doctorSubmissionSchema = openToolObjectFromUnion(doctorSubmissionVariants);
+    doctorSubmissionSchema = withInfrastructureFailureDeclaration(
+      openToolObjectFromUnion(doctorSubmissionVariants)
+    );
     doctorOutputSchema = typebox_exports.Union([
       typebox_exports.Object({ status: typebox_exports.Literal("completed"), case: caseIdentity, findings: typebox_exports.Array(finding), cost }, { additionalProperties: false }),
       doctorSubmissionVariants.anyOf[1]
@@ -14272,6 +14316,7 @@ var init_merger_contracts = __esm({
     init_exact_utf8();
     init_sha256();
     init_open_tool_schema();
+    init_terminating_infrastructure();
     oidPattern = "^(?:[0-9a-f]{40}|[0-9a-f]{64})$";
     materialSchema = typebox_exports.Object({ bytesBase64: typebox_exports.String(), sha256: typebox_exports.String() }, { additionalProperties: false });
     checkSchema = typebox_exports.Object({ name: typebox_exports.String({ minLength: 1 }), argv: typebox_exports.Array(typebox_exports.String({ minLength: 1 }), { minItems: 1 }) }, { additionalProperties: false });
@@ -14289,7 +14334,9 @@ var init_merger_contracts = __esm({
       typebox_exports.Object({ status: typebox_exports.Literal("completed", { description: "completed \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), attemptId: typebox_exports.String({ minLength: 1, description: "\u5DF2\u53D7\u7406\u5408\u5E76 attempt \u8EAB\u4EFD" }), report: typebox_exports.String({ minLength: 1, description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }), mergeCommitId: typebox_exports.String({ pattern: oidPattern, description: "\u5DF2\u6838\u9A8C\u7684\u5B8C\u6210\u5408\u5E76 commit object ID" }) }, { additionalProperties: false }),
       typebox_exports.Object({ status: typebox_exports.Literal("escalate", { description: "escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), attemptId: typebox_exports.String({ minLength: 1, description: "\u5DF2\u53D7\u7406\u5408\u5E76 attempt \u8EAB\u4EFD" }), diagnosis: typebox_exports.String({ minLength: 1, description: "\u5408\u5E76\u5B8C\u6210\u9700\u5347\u7EA7\u7684\u539F\u56E0" }), report: typebox_exports.String({ minLength: 1, description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }) }, { additionalProperties: false })
     ]);
-    mergerOutputSchema = openToolObjectFromUnion(mergerOutputVariants);
+    mergerOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObjectFromUnion(mergerOutputVariants)
+    );
     MERGER_OUTPUT_TOOL_NAME = "ak_merger_output";
     record = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
     blank = (v) => typeof v !== "string" || v.trim().length === 0;
@@ -14351,17 +14398,20 @@ var init_notary_contracts = __esm({
     "use strict";
     init_build();
     init_open_tool_schema();
+    init_terminating_infrastructure();
     NOTARY_OUTPUT_TOOL_NAME = "ak_notary_output";
     NOTARY_FIXED_KICKOFF = "\u7B26\u5B9D\u90CE\u6848\u5377\u5DF2\u53D7\u7406\uFF1B\u6765\u6E90 run \u5B9A\u4F4D\u89C1\u4F1A\u8BDD\u6750\u6599\u3002";
-    notaryOutputSchema = openToolObject(
-      typebox_exports.Object({
-        status: typebox_exports.Unknown({
-          description: "pass | bounce \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
-        }),
-        findings: typebox_exports.Unknown({
-          description: "string[] findings\uFF0C\u968F pass \u6216 bounce \u7559\u5B58"
+    notaryOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObject(
+        typebox_exports.Object({
+          status: typebox_exports.Unknown({
+            description: "pass | bounce \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+          }),
+          findings: typebox_exports.Unknown({
+            description: "string[] findings\uFF0C\u968F pass \u6216 bounce \u7559\u5B58"
+          })
         })
-      })
+      )
     );
   }
 });
@@ -20488,6 +20538,7 @@ var init_collector_tool_schemas = __esm({
     "use strict";
     init_build();
     init_collector_evidence();
+    init_terminating_infrastructure();
     collectorObserveArgsSchema = typebox_exports.Object({}, { additionalProperties: false });
     collectorRequestArgsSchema = typebox_exports.Object({
       requestId: typebox_exports.String({ minLength: 1, description: "\u914D\u7F6E\u8BF7\u6C42\u8EAB\u4EFD" }),
@@ -20496,7 +20547,9 @@ var init_collector_tool_schemas = __esm({
     collectorWaitArgsSchema = typebox_exports.Object({
       durationMs: typebox_exports.Integer({ minimum: 1, maximum: COLLECTOR_ELIGIBILITY_MS, description: "\u7B49\u5F85\u6BEB\u79D2\uFF1B\u5355\u6B21\u4E0A\u9650\u4E94\u5206\u949F\u4E14\u4E0D\u8D85\u5269\u4F59\u8D44\u683C" })
     }, { additionalProperties: false });
-    collectorOutputArgsSchema = typebox_exports.Object({}, { additionalProperties: true });
+    collectorOutputArgsSchema = withInfrastructureFailureDeclaration(
+      typebox_exports.Object({}, { additionalProperties: true })
+    );
     collectorOutputArgsSchema.required = [];
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.2479",
+  "version": "0.1.2497",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/navigator-route-playbook.md

@@ -9,8 +9,8 @@
 御史台
   ↓
 大理寺
-  ├─ 有问题（通常） → 修内司 → 大理寺
-  ├─ 需要再审       → 御史台 → 大理寺
+  ├─ 有问题（通常） → 修内司 → 大理寺（修内司收卷不经御史台，直回大理寺）
+  ├─ 需要再审（大理寺点名） → 御史台 → 大理寺
   └─ 收敛           → 调用者合并、关票
 
 ## 线上审查材料

package/src/collector-role.ts

@@ -30,6 +30,9 @@ import {
   buildCollectorReceipt,
   type CollectorReceipt,
 } from "./collector-receipt.ts";
+import {
+  failOnInfrastructureFailureDeclaration,
+} from "./package-contracts/terminating-infrastructure.ts";
 import {
   collectorObserveArgsSchema,
   collectorOutputArgsSchema,
@@ -388,6 +391,9 @@ export function createCollectorRoleRuntime(
           throw new Error("通进司未激活");
         }
         try {
+          // #541: infra declaration fails via the shared host seam before the
+          // operational ledger begins / a receipt is built.
+          failOnInfrastructureFailureDeclaration(params, hostActions, ctx, toolCallId);
           assertSoleFinalCollectorOutput(toolCallId, ctx);
           activation.ledger.beginOperational(COLLECTOR_OUTPUT_TOOL, toolCallId);
           const receipt: CollectorReceipt = buildCollectorReceipt(

package/src/collector-tool-schemas.ts

@@ -1,5 +1,6 @@
 import { Type, type Static } from "typebox";
 import { COLLECTOR_ELIGIBILITY_MS } from "./collector-evidence.ts";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 
 export const collectorObserveArgsSchema = Type.Object({}, { additionalProperties: false });
 export const collectorRequestArgsSchema = Type.Object({
@@ -10,7 +11,9 @@ export const collectorWaitArgsSchema = Type.Object({
   durationMs: Type.Integer({ minimum: 1, maximum: COLLECTOR_ELIGIBILITY_MS, description: "等待毫秒；单次上限五分钟且不超剩余资格" }),
 }, { additionalProperties: false });
 /** Runtime owns the observed groups; the model only signals sole-final submission. */
-export const collectorOutputArgsSchema = Type.Object({}, { additionalProperties: true });
+export const collectorOutputArgsSchema = withInfrastructureFailureDeclaration(
+  Type.Object({}, { additionalProperties: true }),
+);
 (collectorOutputArgsSchema as unknown as { required: string[] }).required = [];
 
 export type CollectorObserveArgs = Static<typeof collectorObserveArgsSchema>;

package/src/doctor-contracts.ts

@@ -1,6 +1,7 @@
 import { Type } from "typebox";
 import { canonicalJson } from "./canonical-json.ts";
 import { openToolObjectFromUnion } from "./open-tool-schema.ts";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 
 export const DOCTOR_EVIDENCE_TOOL_NAME = "ak_doctor_evidence";
 export const DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
@@ -87,7 +88,9 @@ const doctorSubmissionVariants = Type.Union([
     missingEvidence: Type.Array(Type.Object({ need: nonblank, targetKeys: Type.Array(nonblank, { minItems: 1 }) }, { additionalProperties: false }), { minItems: 1, description: "如实证词所需而尚缺的证据" }),
   }, { additionalProperties: false, description: "证据不足以支撑如实案证词" }),
 ]);
-export const doctorSubmissionSchema = openToolObjectFromUnion(doctorSubmissionVariants);
+export const doctorSubmissionSchema = withInfrastructureFailureDeclaration(
+  openToolObjectFromUnion(doctorSubmissionVariants),
+);
 export const doctorOutputSchema = Type.Union([
   Type.Object({ status: Type.Literal("completed"), case: caseIdentity, findings: Type.Array(finding), cost }, { additionalProperties: false }),
   doctorSubmissionVariants.anyOf[1]!,

package/src/doctor-role.ts

@@ -2,6 +2,7 @@ import type { AgentToolResult, ExtensionAPI, ExtensionContext } from "@earendil-
 import { disposeComplianceDecision } from "./audit-escalation.ts";
 import { appendActiveSessionCustomEntry, type ComplianceDecision } from "./compliance-transport.ts";
 import { DOCTOR_CANDIDATE_ENTRY_TYPE } from "./dossier-resolution.ts";
+import { failOnInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 import { DOCTOR_ACCEPTED_AUDIT_NO_RECEIPT_TEXT, DOCTOR_ACCEPTED_TEXT, DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_DESCRIPTION, DOCTOR_OUTPUT_TOOL_NAME, DoctorEvidenceStore, doctorEvidenceReadSchema, doctorSubmissionSchema, validateDoctorOutput, type DoctorCase } from "./doctor-contracts.ts";
 
 export { DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME };
@@ -12,7 +13,7 @@ export function createDoctorRoleRuntime(pi: ExtensionAPI, dependencies: DoctorRo
   let activation: { soul: string; patient: DoctorCase; store: DoctorEvidenceStore } | undefined; let registered = false; pi.registerFlag(DOCTOR_CASE_FLAG.name, DOCTOR_CASE_FLAG.definition);
   return { async activate() { const path = pi.getFlag(DOCTOR_CASE_FLAG.name); if (typeof path !== "string" || !path.trim()) throw new Error("Doctor requires --ak-doctor-case"); const soul = (await dependencies.loadSoul()).trim(); if (!soul) throw new Error("Doctor soul is empty"); const patient = await dependencies.loadCase(path); activation = { soul, patient, store: new DoctorEvidenceStore(patient) };
     if (!registered) { registered = true; pi.registerTool({ name: DOCTOR_EVIDENCE_TOOL_NAME, label: "太医署证据", description: "分页读取留存的 Pi session 字节。", parameters: doctorEvidenceReadSchema, async execute(_id, params: { evidenceId: string; offset?: number; limit?: number }) { if (!activation) throw new Error("太医署未激活"); const details = activation.store.read(params.evidenceId, params.offset, params.limit); return { content: [{ type: "text" as const, text: JSON.stringify(details) }], details }; } });
-      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "太医署输出", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("太医署未激活"); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "太医署候选留存不可用", failed: "太医署候选留存失败" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; const acceptedDetails = details; return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: DOCTOR_ACCEPTED_TEXT }], details: acceptedDetails, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt, usageProjection) => ({ content: [{ type: "text" as const, text: DOCTOR_ACCEPTED_AUDIT_NO_RECEIPT_TEXT }], details: { ...acceptedDetails, auditNoReceipt }, terminate: true as const, ...usageProjection }), revise: (violations) => { throw new Error(`太医署回执违 soul：${violations.join("; ")}`); }, escalate: (result) => result }, acceptedDetails); } });
+      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "太医署输出", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("太医署未激活"); failOnInfrastructureFailureDeclaration(params, host, ctx, id); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "太医署候选留存不可用", failed: "太医署候选留存失败" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; const acceptedDetails = details; return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: DOCTOR_ACCEPTED_TEXT }], details: acceptedDetails, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt, usageProjection) => ({ content: [{ type: "text" as const, text: DOCTOR_ACCEPTED_AUDIT_NO_RECEIPT_TEXT }], details: { ...acceptedDetails, auditNoReceipt }, terminate: true as const, ...usageProjection }), revise: (violations) => { throw new Error(`太医署回执违 soul：${violations.join("; ")}`); }, escalate: (result) => result }, acceptedDetails); } });
       pi.on("before_agent_start", (event) => { if (!activation) throw new Error("太医署未激活"); const catalog = { version: activation.patient.version, identity: activation.patient.identity, admittedMetrics: { provenance: "由留存 session 字节推导，封入受理回执。", cost: activation.patient.cost }, lawfulTargetKeys: ["case", ...activation.patient.cost.invocations.sources], evidence: activation.patient.evidence.map(({ id, kind, sha256, byteLength, contentLength }) => ({ id, kind, sha256, byteLength, contentLength })) }; return { systemPrompt: `${event.systemPrompt}\n\n<doctor_soul>\n${activation.soul}\n</doctor_soul>\n\n<doctor_case>\n${JSON.stringify(catalog)}\n</doctor_case>` }; }); }
     const required = [DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME]; const names = pi.getAllTools().map((tool) => tool.name); for (const name of required) if (names.filter((item) => item === name).length !== 1) throw new Error(`Doctor required tool collision or missing: ${name}`); pi.setActiveTools(required); const active = pi.getActiveTools?.() ?? required; if (active.length !== 2 || !required.every((name) => active.includes(name))) throw new Error("Doctor active tool narrowing failed"); } };
 }

package/src/judge-role.ts

@@ -9,6 +9,10 @@ import { Type, type Static } from "typebox";
 import { disposeComplianceDecision } from "./audit-escalation.ts";
 import type { ComplianceDecision } from "./compliance-transport.ts";
 import { requireGatekeeperPass, type GatekeeperPassHostActions } from "./gatekeeper-role.ts";
+import {
+  failOnInfrastructureFailureDeclaration,
+  withInfrastructureFailureDeclaration,
+} from "./package-contracts/terminating-infrastructure.ts";
 
 import {
   JUDGE_ACCEPTED_AUDIT_NO_RECEIPT_TEXT,
@@ -21,34 +25,36 @@ import {
 export { JUDGE_OUTPUT_TOOL_NAME };
 export type { JudgeVerdict };
 
-const judgeVerdictSchema = Type.Object(
-  {
-    judgeStatus: StringEnum(["converged", "continue", "escalate"] as const, { description: "converged | continue | escalate — 形状指引，非 schema 闸" }),
-    fix: Type.Optional(
-      Type.Object(
-        { summary: Type.String({ minLength: 1, description: "continue 时的补救摘要" }) },
-        { additionalProperties: false, description: "continue 时的补救说明" },
+export const judgeVerdictSchema = withInfrastructureFailureDeclaration(
+  Type.Object(
+    {
+      judgeStatus: StringEnum(["converged", "continue", "escalate"] as const, { description: "converged | continue | escalate — 形状指引，非 schema 闸" }),
+      fix: Type.Optional(
+        Type.Object(
+          { summary: Type.String({ minLength: 1, description: "continue 时的补救摘要" }) },
+          { additionalProperties: false, description: "continue 时的补救说明" },
+        ),
       ),
-    ),
-    classes: Type.Optional(Type.Array(Type.Object({
-      name: Type.String({ minLength: 1 }),
-      owner: Type.String({ minLength: 1 }),
-      boundary: Type.String({ minLength: 1 }),
-      disposition: Type.String({ minLength: 1 }),
-    }, { additionalProperties: false }), { minItems: 1, description: "已裁决 finding 类及其 owner 与修理边界" })),
-    note: Type.Optional(Type.String({ minLength: 1, description: "可选裁决附注" })),
-    evidence: Type.Optional(Type.Unknown({ description: "留存的裁决证据" })),
-    decisionGate: Type.Optional(
-      Type.Object(
-        {
-          question: Type.String({ minLength: 1 }),
-          options: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
-        },
-        { additionalProperties: false, description: "需人权威处置的问题与选项" },
+      classes: Type.Optional(Type.Array(Type.Object({
+        name: Type.String({ minLength: 1 }),
+        owner: Type.String({ minLength: 1 }),
+        boundary: Type.String({ minLength: 1 }),
+        disposition: Type.String({ minLength: 1 }),
+      }, { additionalProperties: false }), { minItems: 1, description: "已裁决 finding 类及其 owner 与修理边界" })),
+      note: Type.Optional(Type.String({ minLength: 1, description: "可选裁决附注" })),
+      evidence: Type.Optional(Type.Unknown({ description: "留存的裁决证据" })),
+      decisionGate: Type.Optional(
+        Type.Object(
+          {
+            question: Type.String({ minLength: 1 }),
+            options: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+          },
+          { additionalProperties: false, description: "需人权威处置的问题与选项" },
+        ),
       ),
-    ),
-  },
-  { additionalProperties: true },
+    },
+    { additionalProperties: true },
+  ),
 );
 (judgeVerdictSchema as unknown as { required: string[] }).required = [];
 
@@ -109,6 +115,9 @@ export function createJudgeRoleRuntime(
           parameters: judgeVerdictSchema,
           async execute(toolCallId, parameters, signal, _onUpdate, ctx): Promise<AgentToolResult<unknown>> {
             if (soul === undefined) throw new Error("大理寺职分未装载");
+            // #541: infra declaration fails via the shared host seam before any
+            // Gatekeeper + audit courtyard work.
+            failOnInfrastructureFailureDeclaration(parameters, hostActions, ctx, toolCallId);
             requireSingletonSubmissionCall(toolCallId, ctx);
             const verdict = validateVerdict(parameters);
             // Candidate verdict is already on the parent session books as this

package/src/merger-contracts.ts

@@ -3,6 +3,7 @@ import { isFullGitObjectId } from "./git-object-id.ts";
 import { exactUtf8 } from "./exact-utf8.ts";
 import { sha256Hex } from "./sha256.ts";
 import { openToolObjectFromUnion } from "./open-tool-schema.ts";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 
 const oidPattern = "^(?:[0-9a-f]{40}|[0-9a-f]{64})$";
 const materialSchema = Type.Object({ bytesBase64: Type.String(), sha256: Type.String() }, { additionalProperties: false });
@@ -19,7 +20,9 @@ const mergerOutputVariants = Type.Union([
   Type.Object({ status: Type.Literal("completed", { description: "completed — 形状指引，非 schema 闸" }), attemptId: Type.String({ minLength: 1, description: "已受理合并 attempt 身份" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), mergeCommitId: Type.String({ pattern: oidPattern, description: "已核验的完成合并 commit object ID" }) }, { additionalProperties: false }),
   Type.Object({ status: Type.Literal("escalate", { description: "escalate — 形状指引，非 schema 闸" }), attemptId: Type.String({ minLength: 1, description: "已受理合并 attempt 身份" }), diagnosis: Type.String({ minLength: 1, description: "合并完成需升级的原因" }), report: Type.String({ minLength: 1, description: "如实结果报告" }) }, { additionalProperties: false }),
 ]);
-export const mergerOutputSchema = openToolObjectFromUnion(mergerOutputVariants);
+export const mergerOutputSchema = withInfrastructureFailureDeclaration(
+  openToolObjectFromUnion(mergerOutputVariants),
+);
 
 export type DeepReadonly<T> = T extends (...args: never[]) => unknown ? T : T extends readonly (infer U)[] ? readonly DeepReadonly<U>[] : T extends object ? { readonly [K in keyof T]: DeepReadonly<T[K]> } : T;
 export type MergerMaterial = DeepReadonly<Static<typeof materialSchema>>;

package/src/merger-role.ts

@@ -1,6 +1,7 @@
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, mergerOutputSchema, validateMergerInput, validateMergerOutput, type MergerInput } from "./merger-contracts.ts";
 import type { MergerGitState } from "./merger-git-state.ts";
+import { failOnInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 import { exactUtf8 } from "./exact-utf8.ts";
 import { isFullGitObjectId } from "./git-object-id.ts";
 
@@ -28,10 +29,13 @@ export function createMergerRoleRuntime(pi: ExtensionAPI, dependencies: MergerRo
     if (state.targetObjectId !== input.targetObjectId || state.sourceObjectId !== input.sourceObjectId || !same(state.unmergedPaths, input.expectedConflictPaths) || state.unmergedPaths.length === 0 || !isFullGitObjectId(state.automaticMergeTreeId) || state.automaticMergeTreeId.length !== input.targetObjectId.length) throw new Error("Merger activation rejected repository parent, merge, automatic-result, or complete conflict-set drift");
     activation = { soul, input, automaticMergeTreeId: state.automaticMergeTreeId }; accepted = false;
     if (!registered) { registered = true;
-      pi.registerTool({ name: MERGER_OUTPUT_TOOL_NAME, label: "合并输出", description: "提交合并结果；输出分支为 completed 与 escalate；基础设施及 Git 失败由 abort 通道承接。", promptSnippet: "提交合并结果", parameters: mergerOutputSchema,
+      pi.registerTool({ name: MERGER_OUTPUT_TOOL_NAME, label: "合并输出", description: "提交合并结果；输出分支为 completed 与 escalate", promptSnippet: "提交合并结果", parameters: mergerOutputSchema,
         async execute(id, params, _signal, _update, ctx) {
           if (!activation) throw new Error("校书郎未激活");
           if (accepted) throw new Error("合并回执已受理");
+          // #541: infra declaration fails via the shared host seam before output
+          // validation / Git verification / accepted=true.
+          failOnInfrastructureFailureDeclaration(params, host, ctx, id);
           let output;
           try {
             singleton(id, ctx);

package/src/notary-contracts.ts

@@ -6,6 +6,7 @@
 import { Type } from "typebox";
 
 import { openToolObject } from "./open-tool-schema.ts";
+import { withInfrastructureFailureDeclaration } from "./package-contracts/terminating-infrastructure.ts";
 
 export const NOTARY_OUTPUT_TOOL_NAME = "ak_notary_output";
 export const NOTARY_ACCEPTED_TEXT = "符宝郎回执已接受";
@@ -21,15 +22,17 @@ export const NOTARY_SOURCE_RUN_FLAG = {
 export const NOTARY_FIXED_KICKOFF =
   "符宝郎案卷已受理；来源 run 定位见会话材料。";
 
-export const notaryOutputSchema = openToolObject(
-  Type.Object({
-    status: Type.Unknown({
-      description: "pass | bounce — 形状指引，非 schema 闸",
+export const notaryOutputSchema = withInfrastructureFailureDeclaration(
+  openToolObject(
+    Type.Object({
+      status: Type.Unknown({
+        description: "pass | bounce — 形状指引，非 schema 闸",
+      }),
+      findings: Type.Unknown({
+        description: "string[] findings，随 pass 或 bounce 留存",
+      }),
     }),
-    findings: Type.Unknown({
-      description: "string[] findings，随 pass 或 bounce 留存",
-    }),
-  }),
+  ),
 );
 
 export type NotarySourceRunLocator = {

package/src/notary-role.ts

@@ -17,6 +17,9 @@ import {
   retainNotarySubmission,
   type NotarySourceRunLocator,
 } from "./notary-contracts.ts";
+import {
+  failOnInfrastructureFailureDeclaration,
+} from "./package-contracts/terminating-infrastructure.ts";
 
 export {
   NOTARY_ACCEPTED_TEXT,
@@ -98,6 +101,9 @@ export function createNotaryRoleRuntime(
             if (activation === undefined) {
               throw new Error("符宝郎未激活");
             }
+            // #541: infra declaration fails via the shared host seam before any
+            // pass/bounce projection.
+            failOnInfrastructureFailureDeclaration(parameters, host, ctx, toolCallId);
             // Unique submission + terminate only. Shape is not an admission gate
             // (第 0 条 / ADR 0055): lawful pass/bounce projected; else params as-is.
             requireSingletonSubmissionCall(toolCallId, ctx);

package/src/package-contracts/fixer-output.ts

@@ -1,6 +1,7 @@
 import { Type, type Static } from "typebox";
 import { FIXER_PREREQUISITE_ID_PATTERN, type FixerInvocationInput } from "./fixer-packet.ts";
 import { openToolObjectFromUnion } from "../open-tool-schema.ts";
+import { withInfrastructureFailureDeclaration } from "./terminating-infrastructure.ts";
 
 export const FIXER_OUTPUT_TOOL_NAME = "ak_fixer_output";
 export const FIXER_ACCEPTED_TEXT = "修内司回执已接受";
@@ -40,7 +41,9 @@ const fixerOutputVariants = Type.Union([
   Type.Object({ status: Type.Literal("refused", { description: "refused — 形状指引，非 schema 闸" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), classResults: Type.Array(classResultSchema, { minItems: 1, description: "各类拒绝结算" }) }),
   Type.Object({ status: Type.Literal("partially_completed", { description: "partially_completed — 形状指引，非 schema 闸" }), report: Type.String({ minLength: 1, description: "如实结果报告" }), classResults: Type.Array(classResultSchema, { minItems: 1, description: "各类完成或拒绝结算" }), testEvidence: Type.Optional(testEvidenceSchema) }),
 ]);
-export const fixerOutputSchema = openToolObjectFromUnion(fixerOutputVariants);
+export const fixerOutputSchema = withInfrastructureFailureDeclaration(
+  openToolObjectFromUnion(fixerOutputVariants),
+);
 
 export type FixerBlocker = Static<typeof blockerSchema>;
 export type FixerClassResult = Static<typeof classResultSchema>;

package/src/package-contracts/terminating-infrastructure.ts

@@ -0,0 +1,132 @@
+/**
+ * Package-owned shared infrastructure-failure declaration for every primary
+ * packaged-role output tool (#541).
+ *
+ * One module owns what the judge mandates be shared (not reimplemented per
+ * seat): the typed `infrastructureFailure.diagnostic` declaration composed into
+ * each output tool's schema, and the single early host `failInfrastructure`
+ * call each output `execute` makes before any role business validation / gate /
+ * audit / ledger / Git work. The accepted status sets are intentionally NOT
+ * extended: an infra declaration fails BEFORE accepted validation, never
+ * becomes an accepted receipt. The diagnostic is carried verbatim on the thrown
+ * Error so settlement keeps the original cause (kind=failure, exit 1).
+ */
+import { Type, type TSchema } from "typebox";
+
+export const INFRASTRUCTURE_FAILURE_DECLARATION_KEY =
+  "infrastructureFailure" as const;
+export const INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic" as const;
+
+/** Shared typed declaration fragment: `infrastructureFailure.diagnostic` = non-empty string. */
+const infrastructureFailureDeclarationSchema = Type.Object(
+  {
+    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: Type.Object(
+      {
+        [INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY]: Type.String({
+          minLength: 1,
+          description: "非空基础设施失败诊断",
+        }),
+      },
+      {
+        additionalProperties: true,
+        description: "基础设施失败声明",
+      },
+    ),
+  },
+  { additionalProperties: true },
+);
+
+/**
+ * Compose the shared infrastructure-failure declaration into an open output
+ * tool-object schema. Returns an open object (additionalProperties: true,
+ * required: []) with the base schema's properties plus the shared declaration.
+ * Static typing is preserved on the base (`as S`), so existing
+ * `Static<typeof ...>` derived parameter types are unchanged.
+ */
+export function withInfrastructureFailureDeclaration<
+  S extends TSchema & { properties?: Record<string, TSchema> },
+>(schema: S): S {
+  const baseProperties = (schema as { properties?: Record<string, TSchema> })
+    .properties;
+  const properties: Record<string, TSchema> = {
+    ...(baseProperties ?? {}),
+    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]:
+      infrastructureFailureDeclarationSchema.properties[
+        INFRASTRUCTURE_FAILURE_DECLARATION_KEY
+      ],
+  };
+  const object = Type.Object(properties, { additionalProperties: true });
+  (object as unknown as { required: string[] }).required = [];
+  return object as unknown as S;
+}
+
+/** Structural host seam subset shared by every terminating execute path. */
+type TerminatingInfrastructureHostActions<C> = {
+  failInfrastructure(error: unknown, ctx: C, toolCallId?: string): never;
+};
+
+/** Safe recognition of the typed declaration; non-shapes / hostile input fail closed. */
+function isInfrastructureFailureDeclaration(
+  parameters: unknown,
+): boolean {
+  if (
+    parameters === null ||
+    typeof parameters !== "object" ||
+    Array.isArray(parameters)
+  ) {
+    return false;
+  }
+  const record = parameters as Record<string, unknown>;
+  if (!Object.hasOwn(record, INFRASTRUCTURE_FAILURE_DECLARATION_KEY)) return false;
+  const declaration = record[INFRASTRUCTURE_FAILURE_DECLARATION_KEY];
+  if (
+    declaration === null ||
+    typeof declaration !== "object" ||
+    Array.isArray(declaration)
+  ) {
+    return false;
+  }
+  const diagnostic = (declaration as Record<string, unknown>)[
+    INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY
+  ];
+  return typeof diagnostic === "string" && diagnostic.trim().length > 0;
+}
+
+/** Non-empty trimmed diagnostic from the declaration, else undefined. */
+function infrastructureFailureDiagnostic(
+  parameters: unknown,
+): string | undefined {
+  if (!isInfrastructureFailureDeclaration(parameters)) return undefined;
+  const declaration = (parameters as Record<string, unknown>)[
+    INFRASTRUCTURE_FAILURE_DECLARATION_KEY
+  ] as Record<string, unknown>;
+  const diagnostic = declaration[INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY];
+  return typeof diagnostic === "string" ? diagnostic.trim() : undefined;
+}
+
+/** diagnostic → Error, name stamped so the host error identity is observable. */
+function infrastructureFailureError(diagnostic: string): Error {
+  const error = new Error(diagnostic);
+  error.name = "InfrastructureFailure";
+  return error;
+}
+
+/**
+ * The one early call for every terminating output `execute`: if the parameters
+ * carry the infra declaration, hand the diagnostic error to the shared host
+ * `failInfrastructure` seam (which aborts the run). No-op otherwise.
+ */
+export function failOnInfrastructureFailureDeclaration<C>(
+  parameters: unknown,
+  hostActions: TerminatingInfrastructureHostActions<C>,
+  ctx: C,
+  toolCallId: string,
+): void {
+  const diagnostic = infrastructureFailureDiagnostic(parameters);
+  if (diagnostic === undefined) return;
+  hostActions.failInfrastructure(
+    infrastructureFailureError(diagnostic),
+    ctx,
+    toolCallId,
+  );
+}

package/src/reviewer-role.ts

@@ -10,6 +10,10 @@ import { ReviewerDispatchExecutionError, type ReviewerDispatchRunResult } from "
 import { createReviewerExecutionLedger, projectAcceptedDispatch, projectReviewerDispatchOutcome, type ReviewerExecutionRecord } from "./reviewer-execution-ledger.ts";
 import { assembleRuntimeReviewerReceipt } from "./reviewer-settlement.ts";
 import { REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, validateReviewerIntent, type ReviewerIntent } from "./package-contracts/reviewer-output.ts";
+import {
+  failOnInfrastructureFailureDeclaration,
+  withInfrastructureFailureDeclaration,
+} from "./package-contracts/terminating-infrastructure.ts";
 
 export { REVIEWER_OUTPUT_TOOL_NAME };
 export type { ReviewerIntent };
@@ -39,7 +43,9 @@ const reviewerOutputVariants = Type.Union([
     amendments: Type.Optional(reviewerAmendmentsSchema),
   }, { additionalProperties: false }),
 ]);
-const reviewerOutputSchema = openToolObjectFromUnion(reviewerOutputVariants);
+export const reviewerOutputSchema = withInfrastructureFailureDeclaration(
+  openToolObjectFromUnion(reviewerOutputVariants),
+);
 export type ReviewerRoleDependencies = {
   loadSoul(): Promise<string>;
   loadCanonicalSkillBinding(name: "code-review"): Promise<AnyCanonicalSkillBinding>;
@@ -147,6 +153,9 @@ export function createReviewerRoleRuntime(
         pi.registerTool({ name: REVIEWER_OUTPUT_TOOL_NAME, label: "御史台输出", description: "Standards/Spec 评审腿由 runtime 以取证子会话代跑，本席收腿报告后交薄回执。", promptSnippet: "提交御史台终局回执", parameters: reviewerOutputSchema,
           async execute(id, parameters, _signal, _update, toolCtx): Promise<AgentToolResult<unknown>> {
             if (!soul || !binding) throw new Error("御史台输入未装载");
+            // #541: infra declaration fails via the shared host seam before the
+            // ledger audit record / receipt assembly / shutdown.
+            failOnInfrastructureFailureDeclaration(parameters, hostActions, toolCtx, id);
             requireSoleReviewerOutputCall(id, toolCtx);
             const output = validateReviewerIntent(parameters);
             let record: ReviewerExecutionRecord;

package/src/worker-role.ts

@@ -6,6 +6,10 @@ import type {
 } from "@earendil-works/pi-coding-agent";
 import { Type, type Static } from "typebox";
 import { openToolObjectFromUnion } from "./open-tool-schema.ts";
+import {
+  failOnInfrastructureFailureDeclaration,
+  withInfrastructureFailureDeclaration,
+} from "./package-contracts/terminating-infrastructure.ts";
 
 import type {
   AnyCanonicalSkillBinding,
@@ -85,7 +89,9 @@ const coderOutputVariants = Type.Union([
     })),
   }, { additionalProperties: false }),
 ]);
-const coderOutputSchema = openToolObjectFromUnion(coderOutputVariants);
+export const coderOutputSchema = withInfrastructureFailureDeclaration(
+  openToolObjectFromUnion(coderOutputVariants),
+);
 export type { FixerOutput, CoderOutput };
 export const FIXER_FLAG_DEFINITIONS = {
   packet: {
@@ -262,13 +268,16 @@ export function createFixerRoleRuntime(
         pi.registerTool({
           name: FIXER_OUTPUT_TOOL_NAME,
           label: "修内司输出",
-          description: "提交修内司终局回执；基础设施失败走 abort，不经本工具。",
+          description: "提交修内司终局回执",
           promptSnippet: "提交修内司终局回执",
           parameters: fixerOutputSchema,
           async execute(toolCallId, parameters, _signal, _onUpdate, ctx): Promise<AgentToolResult<unknown>> {
             if (packet === undefined || phase === undefined) {
               throw new Error("修内司修理包与阶段未装载");
             }
+            // #541: infra declaration fails via the shared host seam before any
+            // submission gate + Gatekeeper work.
+            failOnInfrastructureFailureDeclaration(parameters, hostActions, ctx, toolCallId);
             requireSingletonSubmissionCall(
               toolCallId,
               FIXER_OUTPUT_TOOL_NAME,
@@ -400,6 +409,9 @@ export function createCoderRoleRuntime(
             if (task === undefined || phase === undefined) {
               throw new Error("将作监任务与阶段未装载");
             }
+            // #541: infra declaration fails via the shared host seam before any
+            // submission gate + Gatekeeper work.
+            failOnInfrastructureFailureDeclaration(parameters, hostActions, ctx, toolCallId);
             requireSingletonSubmissionCall(
               toolCallId,
               CODER_OUTPUT_TOOL_NAME,