@akagilnc/pi-workflow-roles 0.1.3262 → 0.1.3280

package/dist/public-cli/main.js

@@ -540,104 +540,6 @@ var init_collector_output = __esm({
   }
 });
 
-// src/package-contracts/judge-output.ts
-function validateAcceptedJudgeDetails(verdict) {
-  if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) throw new Error("Judge verdict has no execution discriminator");
-  let judgeStatus;
-  try {
-    judgeStatus = verdict.judgeStatus;
-  } catch {
-    throw new Error("Judge verdict has no execution discriminator");
-  }
-  if (typeof judgeStatus !== "string") {
-    throw new Error("Judge verdict has no execution discriminator");
-  }
-  if (["converged", "continue", "escalate"].includes(judgeStatus)) {
-    return verdict;
-  }
-  throw new Error("Judge verdict has no execution discriminator");
-}
-var JUDGE_OUTPUT_TOOL_NAME;
-var init_judge_output = __esm({
-  "src/package-contracts/judge-output.ts"() {
-    "use strict";
-    JUDGE_OUTPUT_TOOL_NAME = "ak_judge_output";
-  }
-});
-
-// src/package-contracts/reviewer-output.ts
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function read(value, key) {
-  if (!isRecord(value)) return void 0;
-  try {
-    return value[key];
-  } catch {
-    return void 0;
-  }
-}
-function validateRuntimeReviewerReceipt(output) {
-  const status = read(output, "status");
-  const acceptedBatch = read(output, "acceptedBatch");
-  const identities = read(output, "identities");
-  const construction = read(identities, "construction");
-  const target = read(identities, "target");
-  const reports = read(output, "reports");
-  const outcomes = read(output, "outcomes");
-  const legs = read(acceptedBatch, "legs");
-  if (acceptedBatch !== void 0 || construction !== void 0 || target !== void 0) {
-    if (!isRecord(acceptedBatch) || !isRecord(construction) || !isRecord(target) || !Array.isArray(legs))
-      throw new Error("Incomplete Reviewer accepted-batch identity");
-    const objectFormat = read(target, "objectFormat");
-    const objectId = (value) => typeof value === "string" && new RegExp(objectFormat === "sha1" ? "^[0-9a-f]{40}$" : "^[0-9a-f]{64}$").test(value);
-    const refs = read(target, "refs");
-    const skillText = read(read(identities, "canonicalSkill"), "text");
-    if (typeof skillText !== "string" || read(construction, "recipe") !== "reviewer-common-bundle-v1" || objectFormat !== "sha1" && objectFormat !== "sha256" || !objectId(read(target, "targetHead")) || !isRecord(refs) || Object.values(refs).some((ref) => !isRecord(ref) || !objectId(read(ref, "objectId")) || read(ref, "peeledCommitId") !== null && !objectId(read(ref, "peeledCommitId"))))
-      throw new Error("Invalid Reviewer construction or target identity");
-    const expectedAxes = legs.map((leg) => read(leg, "axis"));
-    if (expectedAxes[0] !== "standards" || expectedAxes.length === 2 && expectedAxes[1] !== "spec" || expectedAxes.length < 1 || expectedAxes.length > 2)
-      throw new Error("Invalid Reviewer accepted-leg projection");
-    if (!isRecord(outcomes) || !isRecord(reports)) throw new Error("Accepted Reviewer batch lacks outcomes or reports");
-    const outcomeAxes = Object.keys(outcomes).filter((axis) => axis === "standards" || axis === "spec");
-    if (outcomeAxes.length !== expectedAxes.length || outcomeAxes.some((axis, index) => axis !== expectedAxes[index]))
-      throw new Error("Reviewer outcomes must exactly cover accepted legs in canonical order");
-    for (const [index, axisValue] of expectedAxes.entries()) {
-      const axis = axisValue;
-      const outcome = read(outcomes, axis);
-      if (!isRecord(outcome)) throw new Error("Reviewer accepted leg lacks outcome");
-      const expectedPrompt = read(read(legs[index], "prompt"), "text");
-      const actualPrompt = read(read(outcome, "prompt"), "text");
-      if (expectedPrompt !== actualPrompt) throw new Error("Reviewer outcome prompt disagrees with accepted leg");
-      const status2 = read(outcome, "status");
-      const report = read(reports, axis);
-      if (status2 === "successful" && report === void 0)
-        throw new Error("Successful Reviewer outcome lacks report");
-      if (status2 === "failed" && report !== void 0) throw new Error("Failed Reviewer outcome cannot bind a report");
-    }
-    const specDisposition = read(output, "specDisposition");
-    if (specDisposition === "launched") {
-      if (expectedAxes.length !== 2 || expectedAxes[0] !== "standards" || expectedAxes[1] !== "spec") {
-        throw new Error("Reviewer specDisposition launched requires Standards+Spec accepted legs");
-      }
-    } else if (specDisposition === "skipped-missing") {
-      if (expectedAxes.length !== 1 || expectedAxes[0] !== "standards") {
-        throw new Error("Reviewer specDisposition skipped-missing requires Standards-only accepted legs");
-      }
-    } else if (specDisposition !== void 0) {
-      throw new Error("Invalid Reviewer specDisposition");
-    }
-  }
-  return output;
-}
-var REVIEWER_OUTPUT_TOOL_NAME;
-var init_reviewer_output = __esm({
-  "src/package-contracts/reviewer-output.ts"() {
-    "use strict";
-    REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
-  }
-});
-
 // node_modules/.pnpm/typebox@1.3.8/node_modules/typebox/build/system/memory/metrics.mjs
 var Metrics;
 var init_metrics = __esm({
@@ -8382,6 +8284,288 @@ var init_build = __esm({
   }
 });
 
+// src/open-tool-schema.ts
+function described(name, schema) {
+  if (typeof schema.description === "string") return schema;
+  throw new Error(`Tool field ${name} has no semantic description at its schema owner`);
+}
+function declarationIdentity(schema) {
+  const { description: _description, ...semantic } = schema;
+  return JSON.stringify(semantic);
+}
+function openToolObjectFromUnion(schema) {
+  const declarations = /* @__PURE__ */ new Map();
+  for (const variant of schema.anyOf) {
+    for (const [name, declaration] of Object.entries(variant.properties ?? {})) {
+      const entries = declarations.get(name) ?? [];
+      const identity = declarationIdentity(declaration);
+      if (!entries.some((entry) => declarationIdentity(entry) === identity)) entries.push(declaration);
+      declarations.set(name, entries);
+    }
+  }
+  const properties = Object.fromEntries([...declarations].map(([name, entries]) => {
+    const descriptions = [...new Set(entries.map((entry) => entry.description).filter((value) => typeof value === "string"))].join(" ");
+    const declaration = entries.length === 1 ? entries[0] : typebox_exports.Union(entries, descriptions === "" ? {} : { description: descriptions });
+    return [name, typebox_exports.Optional(described(name, declaration))];
+  }));
+  const object = typebox_exports.Object(properties, { additionalProperties: true });
+  object.required = [];
+  return object;
+}
+function openToolObject(schema) {
+  const object = typebox_exports.Object(
+    Object.fromEntries(Object.entries(schema.properties).map(([name, declaration]) => [name, typebox_exports.Optional(described(name, declaration))])),
+    { additionalProperties: true }
+  );
+  object.required = [];
+  return object;
+}
+var init_open_tool_schema = __esm({
+  "src/open-tool-schema.ts"() {
+    "use strict";
+    init_build();
+  }
+});
+
+// src/package-contracts/terminating-infrastructure.ts
+function withInfrastructureFailureDeclaration(schema) {
+  const baseProperties = schema.properties;
+  const properties = {
+    ...baseProperties ?? {},
+    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: infrastructureFailureDeclarationSchema.properties[INFRASTRUCTURE_FAILURE_DECLARATION_KEY]
+  };
+  const object = typebox_exports.Object(properties, { additionalProperties: true });
+  object.required = [];
+  return object;
+}
+var INFRASTRUCTURE_FAILURE_DECLARATION_KEY, INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY, infrastructureFailureDeclarationSchema;
+var init_terminating_infrastructure = __esm({
+  "src/package-contracts/terminating-infrastructure.ts"() {
+    "use strict";
+    init_build();
+    INFRASTRUCTURE_FAILURE_DECLARATION_KEY = "infrastructureFailure";
+    INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic";
+    infrastructureFailureDeclarationSchema = typebox_exports.Object(
+      {
+        [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: typebox_exports.Object(
+          {
+            [INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY]: typebox_exports.String({
+              minLength: 1,
+              description: "\u975E\u7A7A\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u8BCA\u65AD"
+            })
+          },
+          {
+            additionalProperties: true,
+            description: "\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u58F0\u660E"
+          }
+        )
+      },
+      { additionalProperties: true }
+    );
+  }
+});
+
+// src/package-contracts/gatekeeper-output.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asStringArray(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter((item) => typeof item === "string");
+}
+function projectLawfulGatekeeperOutput(value) {
+  if (!isRecord(value)) return void 0;
+  if (value.status === "pass") {
+    return Array.isArray(value.findings) ? { status: "pass", findings: asStringArray(value.findings) } : { status: "pass" };
+  }
+  if (value.status === "dispatch" && (value.officer === "inspector" || value.officer === "notary")) {
+    return { status: "dispatch", officer: value.officer };
+  }
+  return void 0;
+}
+function validateRecordedGatekeeperOutput(value) {
+  const projected = projectLawfulGatekeeperOutput(value);
+  if (projected === void 0) {
+    throw new Error("Gatekeeper output has no recognized execution discriminator");
+  }
+  return projected;
+}
+function gatekeeperDecisiveFacts(output) {
+  const facts = { status: output.status };
+  if (output.status === "dispatch") {
+    facts.officer = output.officer;
+  } else if (Array.isArray(output.findings)) {
+    facts.findingsCount = output.findings.length;
+  }
+  return facts;
+}
+var GATEKEEPER_OUTPUT_TOOL_NAME, gatekeeperDecisionSchema, gatekeeperOutputSchema;
+var init_gatekeeper_output = __esm({
+  "src/package-contracts/gatekeeper-output.ts"() {
+    "use strict";
+    init_build();
+    init_open_tool_schema();
+    init_terminating_infrastructure();
+    GATEKEEPER_OUTPUT_TOOL_NAME = "ak_gatekeeper_output";
+    gatekeeperDecisionSchema = openToolObject(
+      typebox_exports.Object({
+        status: typebox_exports.Unknown({
+          description: "dispatch | pass \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+        }),
+        officer: typebox_exports.Unknown({
+          description: "status \u4E3A dispatch \u65F6\u4E3A inspector | notary"
+        }),
+        findings: typebox_exports.Unknown({
+          description: "status \u4E3A pass \u65F6\u53EF\u9009 string[] findings"
+        })
+      })
+    );
+    gatekeeperOutputSchema = withInfrastructureFailureDeclaration(
+      gatekeeperDecisionSchema
+    );
+  }
+});
+
+// src/package-contracts/navigator-output.ts
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function projectLawfulNavigatorOutput(value) {
+  if (!isRecord2(value) || !Array.isArray(value.candidates)) return void 0;
+  if (value.status !== "advice") return void 0;
+  return { status: "advice", candidates: value.candidates.filter(isRecord2) };
+}
+function validateRecordedNavigatorOutput(value) {
+  const projected = projectLawfulNavigatorOutput(value);
+  if (projected === void 0) {
+    throw new Error("Navigator output has no recognized execution discriminator");
+  }
+  return projected;
+}
+function navigatorDecisiveFacts(output) {
+  return { status: "advice", candidates: output.candidates };
+}
+var NAVIGATOR_OUTPUT_TOOL_NAME, navigatorOutputSchema;
+var init_navigator_output = __esm({
+  "src/package-contracts/navigator-output.ts"() {
+    "use strict";
+    init_build();
+    init_open_tool_schema();
+    init_terminating_infrastructure();
+    NAVIGATOR_OUTPUT_TOOL_NAME = "ak_navigator_output";
+    navigatorOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObject(
+        typebox_exports.Object({
+          status: typebox_exports.Unknown({
+            description: "advice \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+          }),
+          candidates: typebox_exports.Unknown({
+            description: "\u6392\u597D\u5E8F\u7684\u8DEF\u7EBF\u5EFA\u8BAE\u6570\u7EC4\uFF0C\u5143\u7D20\u542B next/phase/reason \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+          })
+        })
+      )
+    );
+  }
+});
+
+// src/package-contracts/judge-output.ts
+function validateAcceptedJudgeDetails(verdict) {
+  if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) throw new Error("Judge verdict has no execution discriminator");
+  let judgeStatus;
+  try {
+    judgeStatus = verdict.judgeStatus;
+  } catch {
+    throw new Error("Judge verdict has no execution discriminator");
+  }
+  if (typeof judgeStatus !== "string") {
+    throw new Error("Judge verdict has no execution discriminator");
+  }
+  if (["converged", "continue", "escalate"].includes(judgeStatus)) {
+    return verdict;
+  }
+  throw new Error("Judge verdict has no execution discriminator");
+}
+var JUDGE_OUTPUT_TOOL_NAME;
+var init_judge_output = __esm({
+  "src/package-contracts/judge-output.ts"() {
+    "use strict";
+    JUDGE_OUTPUT_TOOL_NAME = "ak_judge_output";
+  }
+});
+
+// src/package-contracts/reviewer-output.ts
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function read(value, key) {
+  if (!isRecord3(value)) return void 0;
+  try {
+    return value[key];
+  } catch {
+    return void 0;
+  }
+}
+function validateRuntimeReviewerReceipt(output) {
+  const status = read(output, "status");
+  const acceptedBatch = read(output, "acceptedBatch");
+  const identities = read(output, "identities");
+  const construction = read(identities, "construction");
+  const target = read(identities, "target");
+  const reports = read(output, "reports");
+  const outcomes = read(output, "outcomes");
+  const legs = read(acceptedBatch, "legs");
+  if (acceptedBatch !== void 0 || construction !== void 0 || target !== void 0) {
+    if (!isRecord3(acceptedBatch) || !isRecord3(construction) || !isRecord3(target) || !Array.isArray(legs))
+      throw new Error("Incomplete Reviewer accepted-batch identity");
+    const objectFormat = read(target, "objectFormat");
+    const objectId = (value) => typeof value === "string" && new RegExp(objectFormat === "sha1" ? "^[0-9a-f]{40}$" : "^[0-9a-f]{64}$").test(value);
+    const refs = read(target, "refs");
+    const skillText = read(read(identities, "canonicalSkill"), "text");
+    if (typeof skillText !== "string" || read(construction, "recipe") !== "reviewer-common-bundle-v1" || objectFormat !== "sha1" && objectFormat !== "sha256" || !objectId(read(target, "targetHead")) || !isRecord3(refs) || Object.values(refs).some((ref) => !isRecord3(ref) || !objectId(read(ref, "objectId")) || read(ref, "peeledCommitId") !== null && !objectId(read(ref, "peeledCommitId"))))
+      throw new Error("Invalid Reviewer construction or target identity");
+    const expectedAxes = legs.map((leg) => read(leg, "axis"));
+    if (expectedAxes[0] !== "standards" || expectedAxes.length === 2 && expectedAxes[1] !== "spec" || expectedAxes.length < 1 || expectedAxes.length > 2)
+      throw new Error("Invalid Reviewer accepted-leg projection");
+    if (!isRecord3(outcomes) || !isRecord3(reports)) throw new Error("Accepted Reviewer batch lacks outcomes or reports");
+    const outcomeAxes = Object.keys(outcomes).filter((axis) => axis === "standards" || axis === "spec");
+    if (outcomeAxes.length !== expectedAxes.length || outcomeAxes.some((axis, index) => axis !== expectedAxes[index]))
+      throw new Error("Reviewer outcomes must exactly cover accepted legs in canonical order");
+    for (const [index, axisValue] of expectedAxes.entries()) {
+      const axis = axisValue;
+      const outcome = read(outcomes, axis);
+      if (!isRecord3(outcome)) throw new Error("Reviewer accepted leg lacks outcome");
+      const expectedPrompt = read(read(legs[index], "prompt"), "text");
+      const actualPrompt = read(read(outcome, "prompt"), "text");
+      if (expectedPrompt !== actualPrompt) throw new Error("Reviewer outcome prompt disagrees with accepted leg");
+      const status2 = read(outcome, "status");
+      const report = read(reports, axis);
+      if (status2 === "successful" && report === void 0)
+        throw new Error("Successful Reviewer outcome lacks report");
+      if (status2 === "failed" && report !== void 0) throw new Error("Failed Reviewer outcome cannot bind a report");
+    }
+    const specDisposition = read(output, "specDisposition");
+    if (specDisposition === "launched") {
+      if (expectedAxes.length !== 2 || expectedAxes[0] !== "standards" || expectedAxes[1] !== "spec") {
+        throw new Error("Reviewer specDisposition launched requires Standards+Spec accepted legs");
+      }
+    } else if (specDisposition === "skipped-missing") {
+      if (expectedAxes.length !== 1 || expectedAxes[0] !== "standards") {
+        throw new Error("Reviewer specDisposition skipped-missing requires Standards-only accepted legs");
+      }
+    } else if (specDisposition !== void 0) {
+      throw new Error("Invalid Reviewer specDisposition");
+    }
+  }
+  return output;
+}
+var REVIEWER_OUTPUT_TOOL_NAME;
+var init_reviewer_output = __esm({
+  "src/package-contracts/reviewer-output.ts"() {
+    "use strict";
+    REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
+  }
+});
+
 // node_modules/.pnpm/typebox@1.3.8/node_modules/typebox/build/schema/types/_refine.mjs
 function IsRefine2(value) {
   return guard_exports.HasPropertyKey(value, "~refine") && guard_exports.IsArray(value["~refine"]) && guard_exports.Every(value["~refine"], 0, (value2) => guard_exports.IsObject(value2) && guard_exports.HasPropertyKey(value2, "check") && guard_exports.HasPropertyKey(value2, "error") && guard_exports.IsFunction(value2.check) && guard_exports.IsFunction(value2.error));
@@ -14329,128 +14513,47 @@ function validateFixerPrerequisites(value) {
   if (!value_exports.Check(fixerPrerequisitesSchema, value)) parseFailure(value);
   const entries = value;
   const ids = /* @__PURE__ */ new Set();
-  const prerequisites = entries.map((entry) => {
-    if (ids.has(entry.id)) {
-      fail(new Error(`Fixer prerequisites contain duplicate id: ${entry.id}`));
-    }
-    ids.add(entry.id);
-    return Object.freeze({ id: entry.id, requirement: entry.requirement });
-  });
-  return Object.freeze(prerequisites);
-}
-function parseFixerPrerequisites(source) {
-  let decoded;
-  try {
-    decoded = JSON.parse(source);
-  } catch (error) {
-    fail(error);
-  }
-  return validateFixerPrerequisites(decoded);
-}
-var FIXER_PREREQUISITE_ID_PATTERN, fixerPrerequisiteSchema, fixerPrerequisitesSchema, FixerPacketValidationError;
-var init_fixer_packet = __esm({
-  "src/package-contracts/fixer-packet.ts"() {
-    "use strict";
-    init_build();
-    init_value2();
-    FIXER_PREREQUISITE_ID_PATTERN = "^[A-Za-z0-9][A-Za-z0-9._-]*$";
-    fixerPrerequisiteSchema = typebox_exports.Object({
-      id: typebox_exports.String({ pattern: FIXER_PREREQUISITE_ID_PATTERN }),
-      requirement: typebox_exports.String({ pattern: "\\S" })
-    }, { additionalProperties: false });
-    fixerPrerequisitesSchema = typebox_exports.Array(fixerPrerequisiteSchema);
-    FixerPacketValidationError = class extends Error {
-      code = "AK_INVALID_FIX_PACKET";
-      constructor(cause) {
-        const prefix = "Fixer prerequisites or instructions violate the invocation contract";
-        super(
-          cause === void 0 ? prefix : `${prefix}: ${causeMessage(cause)}`,
-          cause === void 0 ? void 0 : { cause }
-        );
-        this.name = "FixerPacketValidationError";
-      }
-    };
-  }
-});
-
-// src/open-tool-schema.ts
-function described(name, schema) {
-  if (typeof schema.description === "string") return schema;
-  throw new Error(`Tool field ${name} has no semantic description at its schema owner`);
-}
-function declarationIdentity(schema) {
-  const { description: _description, ...semantic } = schema;
-  return JSON.stringify(semantic);
-}
-function openToolObjectFromUnion(schema) {
-  const declarations = /* @__PURE__ */ new Map();
-  for (const variant of schema.anyOf) {
-    for (const [name, declaration] of Object.entries(variant.properties ?? {})) {
-      const entries = declarations.get(name) ?? [];
-      const identity = declarationIdentity(declaration);
-      if (!entries.some((entry) => declarationIdentity(entry) === identity)) entries.push(declaration);
-      declarations.set(name, entries);
-    }
-  }
-  const properties = Object.fromEntries([...declarations].map(([name, entries]) => {
-    const descriptions = [...new Set(entries.map((entry) => entry.description).filter((value) => typeof value === "string"))].join(" ");
-    const declaration = entries.length === 1 ? entries[0] : typebox_exports.Union(entries, descriptions === "" ? {} : { description: descriptions });
-    return [name, typebox_exports.Optional(described(name, declaration))];
-  }));
-  const object = typebox_exports.Object(properties, { additionalProperties: true });
-  object.required = [];
-  return object;
-}
-function openToolObject(schema) {
-  const object = typebox_exports.Object(
-    Object.fromEntries(Object.entries(schema.properties).map(([name, declaration]) => [name, typebox_exports.Optional(described(name, declaration))])),
-    { additionalProperties: true }
-  );
-  object.required = [];
-  return object;
+  const prerequisites = entries.map((entry) => {
+    if (ids.has(entry.id)) {
+      fail(new Error(`Fixer prerequisites contain duplicate id: ${entry.id}`));
+    }
+    ids.add(entry.id);
+    return Object.freeze({ id: entry.id, requirement: entry.requirement });
+  });
+  return Object.freeze(prerequisites);
 }
-var init_open_tool_schema = __esm({
-  "src/open-tool-schema.ts"() {
-    "use strict";
-    init_build();
+function parseFixerPrerequisites(source) {
+  let decoded;
+  try {
+    decoded = JSON.parse(source);
+  } catch (error) {
+    fail(error);
   }
-});
-
-// src/package-contracts/terminating-infrastructure.ts
-function withInfrastructureFailureDeclaration(schema) {
-  const baseProperties = schema.properties;
-  const properties = {
-    ...baseProperties ?? {},
-    [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: infrastructureFailureDeclarationSchema.properties[INFRASTRUCTURE_FAILURE_DECLARATION_KEY]
-  };
-  const object = typebox_exports.Object(properties, { additionalProperties: true });
-  object.required = [];
-  return object;
+  return validateFixerPrerequisites(decoded);
 }
-var INFRASTRUCTURE_FAILURE_DECLARATION_KEY, INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY, infrastructureFailureDeclarationSchema;
-var init_terminating_infrastructure = __esm({
-  "src/package-contracts/terminating-infrastructure.ts"() {
+var FIXER_PREREQUISITE_ID_PATTERN, fixerPrerequisiteSchema, fixerPrerequisitesSchema, FixerPacketValidationError;
+var init_fixer_packet = __esm({
+  "src/package-contracts/fixer-packet.ts"() {
     "use strict";
     init_build();
-    INFRASTRUCTURE_FAILURE_DECLARATION_KEY = "infrastructureFailure";
-    INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic";
-    infrastructureFailureDeclarationSchema = typebox_exports.Object(
-      {
-        [INFRASTRUCTURE_FAILURE_DECLARATION_KEY]: typebox_exports.Object(
-          {
-            [INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY]: typebox_exports.String({
-              minLength: 1,
-              description: "\u975E\u7A7A\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u8BCA\u65AD"
-            })
-          },
-          {
-            additionalProperties: true,
-            description: "\u57FA\u7840\u8BBE\u65BD\u5931\u8D25\u58F0\u660E"
-          }
-        )
-      },
-      { additionalProperties: true }
-    );
+    init_value2();
+    FIXER_PREREQUISITE_ID_PATTERN = "^[A-Za-z0-9][A-Za-z0-9._-]*$";
+    fixerPrerequisiteSchema = typebox_exports.Object({
+      id: typebox_exports.String({ pattern: FIXER_PREREQUISITE_ID_PATTERN }),
+      requirement: typebox_exports.String({ pattern: "\\S" })
+    }, { additionalProperties: false });
+    fixerPrerequisitesSchema = typebox_exports.Array(fixerPrerequisiteSchema);
+    FixerPacketValidationError = class extends Error {
+      code = "AK_INVALID_FIX_PACKET";
+      constructor(cause) {
+        const prefix = "Fixer prerequisites or instructions violate the invocation contract";
+        super(
+          cause === void 0 ? prefix : `${prefix}: ${causeMessage(cause)}`,
+          cause === void 0 ? void 0 : { cause }
+        );
+        this.name = "FixerPacketValidationError";
+      }
+    };
   }
 });
 
@@ -14532,11 +14635,11 @@ var init_canonical_json = __esm({
 });
 
 // src/doctor-contracts.ts
-function isRecord2(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function read2(value, key) {
-  if (!isRecord2(value)) return void 0;
+  if (!isRecord4(value)) return void 0;
   try {
     return value[key];
   } catch {
@@ -14754,25 +14857,25 @@ var init_merger_contracts = __esm({
 });
 
 // src/notary-contracts.ts
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asStringArray(value) {
+function asStringArray2(value) {
   if (!Array.isArray(value)) return [];
   return value.filter((item) => typeof item === "string");
 }
 function projectLawfulNotaryOutput(value) {
-  if (!isRecord3(value)) return void 0;
+  if (!isRecord5(value)) return void 0;
   const status = typeof value.status === "string" ? value.status : void 0;
   if (status === "bounce") {
     const clone = structuredClone(value);
     if (clone.disposition === void 0) clone.disposition = "rewrite";
-    if (!Array.isArray(clone.findings)) clone.findings = asStringArray(clone.findings);
+    if (!Array.isArray(clone.findings)) clone.findings = asStringArray2(clone.findings);
     return clone;
   }
   if (status === "pass") {
     const clone = structuredClone(value);
-    if (!Array.isArray(clone.findings)) clone.findings = asStringArray(clone.findings);
+    if (!Array.isArray(clone.findings)) clone.findings = asStringArray2(clone.findings);
     return clone;
   }
   return void 0;
@@ -14916,6 +15019,8 @@ var init_packaged_role_registry = __esm({
   "src/packaged-role-registry.ts"() {
     "use strict";
     init_collector_output();
+    init_gatekeeper_output();
+    init_navigator_output();
     init_judge_output();
     init_reviewer_output();
     init_worker_output();
@@ -15068,6 +15173,28 @@ var init_packaged_role_registry = __esm({
         phaseFlag: void 0,
         activationStage: "load-and-install",
         sessionMaterials: INSPECTOR_SESSION_MATERIALS
+      },
+      // #639: gatekeeper and navigator are roles like any other — public ak-role
+      // entries; automatic attendance (province dispatch, navigator sidecar) is
+      // unchanged and orthogonal to callability.
+      {
+        role: "gatekeeper",
+        phases: [null],
+        outputTool: GATEKEEPER_OUTPUT_TOOL_NAME,
+        inputFlag: void 0,
+        phaseFlag: void 0,
+        activationStage: "load-and-install",
+        // Province materials; officers reuse their own public records below.
+        sessionMaterials: ["CLAUDE.md", "souls/gatekeeper.md", "souls/quality-law.md", "souls/gate-output-guide.md"]
+      },
+      {
+        role: "navigator",
+        phases: [null],
+        outputTool: NAVIGATOR_OUTPUT_TOOL_NAME,
+        inputFlag: void 0,
+        phaseFlag: void 0,
+        activationStage: "load-and-install",
+        sessionMaterials: ["CLAUDE.md", "souls/navigator.md"]
       }
     ];
     ONE_SHOT_ROLES = [
@@ -15081,9 +15208,6 @@ var init_packaged_role_registry = __esm({
 });
 
 // src/public-cli/registry.ts
-function isAutomaticConfigurableSeat(value) {
-  return AUTOMATIC_CONFIGURABLE_SEATS.includes(value);
-}
 function seatModelOnly(seat) {
   if (seat?.provider === void 0 || seat.model === void 0) return void 0;
   return seat.thinking === void 0 ? { provider: seat.provider, model: seat.model } : { provider: seat.provider, model: seat.model, thinking: seat.thinking };
@@ -15123,7 +15247,7 @@ function isPublicConfigurableSeat(value) {
 function isPublicCliSupportCommand(value) {
   return PUBLIC_CLI_SUPPORT_COMMANDS.includes(value);
 }
-var INTERNAL_ROLE_ENTRYPOINT_RELATIVE, PUBLIC_CALLABLE_ROLES, AUTOMATIC_NAVIGATOR_SEAT, AUTOMATIC_GATEKEEPER_SEAT, AUTOMATIC_CONFIGURABLE_SEATS, PUBLIC_CONFIGURABLE_SEATS, PUBLIC_CLI_SUPPORT_COMMANDS, STARTUP_CANDIDATES, PUBLIC_DETERMINISTIC_COMMANDS;
+var INTERNAL_ROLE_ENTRYPOINT_RELATIVE, PUBLIC_CALLABLE_ROLES, PUBLIC_CONFIGURABLE_SEATS, PUBLIC_CLI_SUPPORT_COMMANDS, STARTUP_CANDIDATES, PUBLIC_DETERMINISTIC_COMMANDS;
 var init_registry2 = __esm({
   "src/public-cli/registry.ts"() {
     "use strict";
@@ -15132,15 +15256,8 @@ var init_registry2 = __esm({
     PUBLIC_CALLABLE_ROLES = PACKAGED_ROLE_REGISTRY.map(
       (entry) => entry.role
     );
-    AUTOMATIC_NAVIGATOR_SEAT = "navigator";
-    AUTOMATIC_GATEKEEPER_SEAT = "gatekeeper";
-    AUTOMATIC_CONFIGURABLE_SEATS = [
-      AUTOMATIC_GATEKEEPER_SEAT,
-      AUTOMATIC_NAVIGATOR_SEAT
-    ];
     PUBLIC_CONFIGURABLE_SEATS = [
-      ...PUBLIC_CALLABLE_ROLES,
-      ...AUTOMATIC_CONFIGURABLE_SEATS
+      ...PUBLIC_CALLABLE_ROLES
     ];
     PUBLIC_CLI_SUPPORT_COMMANDS = [
       "roles",
@@ -15187,7 +15304,8 @@ var init_registry2 = __esm({
       ],
       // #620: subordinate officers inherit gatekeeper; no package startup model.
       notary: [],
-      // #453/#620: gatekeeper unset inherits audited session (province path only).
+      // #453/#620/#639: gatekeeper callable but no package startup model — caller
+      // configures it or the institutional resolution applies on the province path.
       gatekeeper: [],
       inspector: [],
       navigator: [
@@ -15387,11 +15505,6 @@ function setAutoResumeLimit(config, limit) {
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
-    if ((row?.engine !== void 0 || row?.host !== void 0) && !isPublicCallableRole(seat)) {
-      throw new Error(
-        `config seat ${seat} cannot persist call axes: no independent activation path; storing would be silently ineffective`
-      );
-    }
     if (row?.engine === void 0) continue;
     try {
       assertLegalEngineName(row.engine);
@@ -15584,12 +15697,10 @@ function attachEngineAxis(seat, config, invocation) {
   };
 }
 function resolveBaseSeat(config, seat, credentials) {
-  const automatic = isAutomaticConfigurableSeat(seat);
   if (seat === "notary" || seat === "inspector") {
     const resolved = resolveConfiguredProvinceOfficer(config, seat);
     return {
       seat,
-      automatic,
       source: resolved.source,
       ...resolved.selection === void 0 ? {} : { selection: resolved.selection },
       engineSource: "unconfigured"
@@ -15599,7 +15710,6 @@ function resolveBaseSeat(config, seat, credentials) {
   if (persistentModel !== void 0) {
     return {
       seat,
-      automatic,
       source: "persistent",
       selection: persistentModel,
       engineSource: "unconfigured"
@@ -15609,16 +15719,14 @@ function resolveBaseSeat(config, seat, credentials) {
   if (startup !== void 0) {
     return {
       seat,
-      automatic,
       source: "startup",
       selection: startup,
       engineSource: "unconfigured"
     };
   }
-  return { seat, automatic, source: "unconfigured", engineSource: "unconfigured" };
+  return { seat, source: "unconfigured", engineSource: "unconfigured" };
 }
 function resolveEffectiveSeat(config, seat, credentials, invocation) {
-  const automatic = isAutomaticConfigurableSeat(seat);
   const hasModelInvocation = invocation !== void 0 && (invocation.model !== void 0 || invocation.thinking !== void 0);
   let modelSeat;
   if (!hasModelInvocation || invocation === void 0) {
@@ -15627,7 +15735,6 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
     const spec = invocation.model.includes(":") || invocation.thinking === void 0 ? invocation.model : `${invocation.model}:${invocation.thinking}`;
     modelSeat = {
       seat,
-      automatic,
       source: "invocation",
       selection: parseModelSpec(spec),
       engineSource: "unconfigured"
@@ -15637,14 +15744,12 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
     if (base.selection === void 0 || invocation.thinking === void 0) {
       modelSeat = {
         seat,
-        automatic,
         source: "unconfigured",
         engineSource: "unconfigured"
       };
     } else {
       modelSeat = {
         seat,
-        automatic,
         source: "invocation",
         selection: { ...base.selection, thinking: invocation.thinking },
         engineSource: "unconfigured"
@@ -15935,7 +16040,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { basename as basename3, dirname as dirname5, join as join9, resolve as resolve3 } from "node:path";
-function isRecord4(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorCodeOf(error) {
@@ -15963,7 +16068,7 @@ function findIdentityPointer(recordFile, identity, kind, level) {
     if (!trimmed) continue;
     try {
       const parsed = JSON.parse(trimmed);
-      if (isRecord4(parsed) && parsed.identity === identity) {
+      if (isRecord6(parsed) && parsed.identity === identity) {
         return { identity, recordFile, kind, level };
       }
     } catch {
@@ -16151,7 +16256,7 @@ var init_sitian_appender = __esm({
 // src/sitian-reader.ts
 import { existsSync as existsSync5 } from "node:fs";
 import { readFile as readFile3 } from "node:fs/promises";
-function isRecord5(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
@@ -16167,7 +16272,7 @@ async function readSitianRecords(recordFile) {
     if (!line2.trim()) continue;
     try {
       const parsed = JSON.parse(line2);
-      if (isRecord5(parsed)) {
+      if (isRecord7(parsed)) {
         records2.push(parsed);
       } else {
         const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
@@ -16302,6 +16407,10 @@ function buildActivationFlagArgs(activation) {
       ];
     case "inspector":
       return ["--ak-role", "inspector"];
+    case "gatekeeper":
+      return ["--ak-role", "gatekeeper"];
+    case "navigator":
+      return ["--ak-role", "navigator"];
     default: {
       const _exhaustive = activation;
       return _exhaustive;
@@ -16671,7 +16780,9 @@ function validateAcceptedDetails(toolName, details) {
     [NOTARY_OUTPUT_TOOL_NAME]: ["pass", "bounce"],
     [COUNTERSIGN_OUTPUT_TOOL_NAME]: ["converged", "continue", "escalate"],
     [GLEANER_LEFT_OUTPUT_TOOL_NAME]: ["completed"],
-    [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce"]
+    [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce"],
+    [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
+    [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"]
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
   const baseDiscriminator = discriminator;
@@ -16703,6 +16814,10 @@ function validateAcceptedDetails(toolName, details) {
         return validateRecordedGleanerLeftOutput(details);
       case INSPECTOR_OUTPUT_TOOL_NAME:
         return validateRecordedInspectorOutput(details);
+      case GATEKEEPER_OUTPUT_TOOL_NAME:
+        return validateRecordedGatekeeperOutput(details);
+      case NAVIGATOR_OUTPUT_TOOL_NAME:
+        return validateRecordedNavigatorOutput(details);
     }
   } catch (error) {
     if (error instanceof Error && error.constructor === Error) throw new AcceptedDetailsContractError(error.message, { cause: error });
@@ -16718,6 +16833,8 @@ function acceptedFacts(toolName, details) {
     case NOTARY_OUTPUT_TOOL_NAME:
     case GLEANER_LEFT_OUTPUT_TOOL_NAME:
     case INSPECTOR_OUTPUT_TOOL_NAME:
+    case GATEKEEPER_OUTPUT_TOOL_NAME:
+    case NAVIGATOR_OUTPUT_TOOL_NAME:
       return { status: details.status };
     case JUDGE_OUTPUT_TOOL_NAME:
       return { status: details.judgeStatus };
@@ -16742,6 +16859,8 @@ var init_terminating_tools = __esm({
     init_audit_escalation();
     init_submission_correctable_error();
     init_doctor_contracts();
+    init_gatekeeper_output();
+    init_navigator_output();
     init_merger_contracts();
     init_notary_contracts();
     init_countersign_contracts();
@@ -16759,7 +16878,9 @@ var init_terminating_tools = __esm({
       NOTARY_OUTPUT_TOOL_NAME,
       COUNTERSIGN_OUTPUT_TOOL_NAME,
       GLEANER_LEFT_OUTPUT_TOOL_NAME,
-      INSPECTOR_OUTPUT_TOOL_NAME
+      INSPECTOR_OUTPUT_TOOL_NAME,
+      GATEKEEPER_OUTPUT_TOOL_NAME,
+      NAVIGATOR_OUTPUT_TOOL_NAME
     ];
     AcceptedDetailsContractError = class extends CorrectableSubmissionError {
       code = "accepted_details_contract";
@@ -17204,7 +17325,7 @@ async function readRoleRunStateDisk(runDirectory) {
   if (typeof record4.runId !== "string" || record4.runId.trim() === "") {
     return void 0;
   }
-  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector") {
+  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector" && record4.role !== "gatekeeper" && record4.role !== "navigator") {
     return void 0;
   }
   if (record4.state !== "admitted" && record4.state !== "running" && record4.state !== "resumable" && record4.state !== "terminal") {
@@ -18371,7 +18492,7 @@ function renderHumanOwnerOptionLines(owner, locale2 = "en") {
   }
   return lines;
 }
-var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, COUNTERSIGN_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
+var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, GATEKEEPER_OPTIONS, NAVIGATOR_OPTIONS, COUNTERSIGN_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
 var init_option_definitions = __esm({
   "src/public-cli/option-definitions.ts"() {
     "use strict";
@@ -18536,6 +18657,14 @@ var init_option_definitions = __esm({
       bindOwner("inspector", SHARED_PROJECT_SEMANTICS),
       bindOwner("inspector", SHARED_ATTACH_SEMANTICS)
     ];
+    GATEKEEPER_OPTIONS = [
+      bindOwner("gatekeeper", SHARED_PROJECT_SEMANTICS),
+      bindOwner("gatekeeper", SHARED_ATTACH_SEMANTICS)
+    ];
+    NAVIGATOR_OPTIONS = [
+      bindOwner("navigator", SHARED_PROJECT_SEMANTICS),
+      bindOwner("navigator", SHARED_ATTACH_SEMANTICS)
+    ];
     COUNTERSIGN_OPTIONS = [
       bindOwner("countersign", SHARED_PROJECT_SEMANTICS),
       bindOwner("countersign", SHARED_ATTACH_SEMANTICS),
@@ -18911,9 +19040,11 @@ var init_option_definitions = __esm({
       merger: MERGER_OPTIONS,
       notary: NOTARY_OPTIONS,
       inspector: INSPECTOR_OPTIONS,
+      gatekeeper: GATEKEEPER_OPTIONS,
+      navigator: NAVIGATOR_OPTIONS,
       analyst: ANALYST_OPTIONS
     };
-    PUBLIC_NAVIGATOR_HELP_NOTE = "Navigator attends automatically on every run; configure with `ak-role config set navigator <provider/model[:thinking]>` (not a caller command).";
+    PUBLIC_NAVIGATOR_HELP_NOTE = "Navigator also attends automatically on every run; that sidecar is unchanged by direct `ak-role navigator` calls.";
     TOP_LEVEL_HELP = {
       command: "top",
       summary: "public role CLI",
@@ -19013,6 +19144,22 @@ var init_option_definitions = __esm({
           'ak-role inspector --attach ./change.patch "Review this material."'
         ]
       },
+      gatekeeper: {
+        command: "gatekeeper",
+        summary: "Direct Gatekeeper (\u95E8\u4E0B\u7701) review: dispatch an officer or pass.",
+        usage: ["ak-role gatekeeper [options] [instruction]"],
+        examples: [
+          'ak-role gatekeeper --attach ./submission.json "\u5BA1\uFF1A\u8FD9\u6279\u6750\u6599\u8BE5\u8C01\u5BA1\uFF1F"'
+        ]
+      },
+      navigator: {
+        command: "navigator",
+        summary: "Direct Navigator (\u6E38\u5955\u4F7F) route advice: ordered next-role candidates.",
+        usage: ["ak-role navigator [options] [instruction]"],
+        examples: [
+          'ak-role navigator "\u521A\u5B8C\u6210 coder apply \u6536\u655B\uFF0C\u4E0B\u4E00\u6B65\uFF1F"'
+        ]
+      },
       notary: {
         command: "notary",
         summary: "Direct Notary document check (quote fidelity + ticket alignment); zero prompt/attachment.",
@@ -19373,6 +19520,12 @@ function parseCountersignArgv(args) {
 function parseInspectorArgv(args) {
   return parseInstructionArgv(args, "inspector");
 }
+function parseGatekeeperArgv(args) {
+  return parseInstructionArgv(args, "gatekeeper");
+}
+function parseNavigatorArgv(args) {
+  return parseInstructionArgv(args, "navigator");
+}
 function parseCoderArgv(args) {
   const attachmentPaths = [];
   let project;
@@ -19591,6 +19744,12 @@ async function admitJudgeInvocation(options) {
 async function admitInspectorInvocation(options) {
   return admitStandardMaterialInvocation("inspector", options);
 }
+async function admitGatekeeperInvocation(options) {
+  return admitStandardMaterialInvocation("gatekeeper", options);
+}
+async function admitNavigatorInvocation(options) {
+  return admitStandardMaterialInvocation("navigator", options);
+}
 function buildInstructionTransportPrompt(admitted, engineMaterial) {
   const lines = [admitted.instructionEmpty ? "" : admitted.instruction];
   if (admitted.attachments.length > 0) {
@@ -21242,11 +21401,11 @@ function resolvePackagedMethodSkillRoot(packageRoot2, name) {
 function resolvePackagedMethodSkillPath(packageRoot2, name) {
   return join15(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
 }
-function isRecord6(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord6(raw)) {
+  if (!isRecord8(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -21260,7 +21419,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord6(raw.upstream)) {
+  if (!isRecord8(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -21287,12 +21446,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord6(raw.files)) {
+  if (!isRecord8(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord6(entry)) {
+    if (!isRecord8(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -21451,7 +21610,7 @@ var init_method_skill = __esm({
 
 // src/ledger-session-read.ts
 import { readFile as readFile11 } from "node:fs/promises";
-function isRecord7(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readLedgerSessionJsonl(path) {
@@ -21475,7 +21634,7 @@ async function readLedgerSessionJsonl(path) {
       }
       break;
     }
-    if (!isRecord7(row)) {
+    if (!isRecord9(row)) {
       const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
       throw new LedgerSessionJsonlError(
         `complete non-object JSONL record in ${path} at line ${index + 1}: expected object, got ${kind}`,
@@ -21512,7 +21671,7 @@ function extractSessionModelSequence(rows) {
     if (row.type === "model_change" && typeof row.modelId === "string") {
       push(row.modelId);
     }
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord9(row.message) ? row.message : void 0;
     if (message?.role === "assistant" && typeof message.model === "string") {
       push(message.model);
     }
@@ -21528,11 +21687,11 @@ function extractSessionToolIntervals(rows) {
   const openById = /* @__PURE__ */ new Map();
   for (const row of rows) {
     const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord9(row.message) ? row.message : void 0;
     if (message?.role === "assistant" && Array.isArray(message.content)) {
       const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
       for (const part of message.content) {
-        if (!isRecord7(part) || part.type !== "toolCall") continue;
+        if (!isRecord9(part) || part.type !== "toolCall") continue;
         if (typeof part.id !== "string" || part.id.length === 0) {
           throw new Error("toolCall frame missing string id");
         }
@@ -21545,7 +21704,7 @@ function extractSessionToolIntervals(rows) {
         if (openById.has(part.id)) {
           throw new Error(`duplicate toolCall id ${part.id}`);
         }
-        const args = isRecord7(part.arguments) ? part.arguments : void 0;
+        const args = isRecord9(part.arguments) ? part.arguments : void 0;
         const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
         const interval = {
           toolCallId: part.id,
@@ -21614,7 +21773,7 @@ var init_ledger_session_read = __esm({
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir3 } from "node:fs/promises";
 import { join as join16 } from "node:path";
-function isRecord8(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isMissingDirectoryError(error) {
@@ -21639,7 +21798,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord8(row.message) ? row.message : void 0;
+    const message = isRecord10(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -21650,17 +21809,17 @@ function extractLastAcceptedGateToolCall(rows) {
   const acceptedIds = acceptedGateReceiptIds(rows);
   let last;
   for (const row of rows) {
-    const message = isRecord8(row.message) ? row.message : void 0;
+    const message = isRecord10(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord8(part) || part.type !== "toolCall") continue;
+      if (!isRecord10(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (!acceptedIds.has(part.id)) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
       last = {
         toolName: part.name,
-        args: isRecord8(part.arguments) ? part.arguments : void 0
+        args: isRecord10(part.arguments) ? part.arguments : void 0
       };
     }
   }
@@ -21826,14 +21985,14 @@ function isMissingPathError2(error) {
 function errorText2(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isRecord9(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readUsableTerminalArtifactBody(body) {
   if (body === null) {
     return { ok: false, reason: "terminal artifact JSON value is null" };
   }
-  if (!isRecord9(body)) {
+  if (!isRecord11(body)) {
     return {
       ok: false,
       reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
@@ -22044,7 +22203,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   }
   return fileURLToPath(new URL("..", moduleUrl));
 }
-var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS;
+var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS, GATEKEEPER_SESSION_MATERIALS;
 var init_session_opening_materials = __esm({
   "src/session-opening-materials.ts"() {
     "use strict";
@@ -22053,8 +22212,13 @@ var init_session_opening_materials = __esm({
     MAIN_ROLE_SESSION_MATERIALS = {
       ...Object.fromEntries(
         PUBLIC_ROLE_RECORDS.map((record4) => [record4.role, record4.sessionMaterials])
-      ),
-      navigator: ["CLAUDE.md", "souls/navigator.md"]
+      )
+    };
+    GATEKEEPER_SESSION_MATERIALS = {
+      // #639: single authority — the public gatekeeper record owns the province list.
+      gatekeeper: PUBLIC_ROLE_RECORDS.find((entry) => entry.role === "gatekeeper").sessionMaterials,
+      inspector: INSPECTOR_SESSION_MATERIALS,
+      notary: NOTARY_SESSION_MATERIALS
     };
   }
 });
@@ -22129,11 +22293,11 @@ var init_navigator_session_contracts = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord10(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord10(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord10(item) && typeof item.reason === "string")) {
+  if (!isRecord12(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord12(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -22505,7 +22669,7 @@ var init_collector_evidence = __esm({
 
 // src/collector-github.ts
 import { spawn as spawn3 } from "node:child_process";
-function isRecord11(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireString(value, label) {
@@ -22546,25 +22710,25 @@ function commentFailureCause(error) {
   };
 }
 function requireUserLogin(raw) {
-  if (!isRecord11(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord13(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function optionalUserLogin(raw) {
   if (raw === null) return null;
-  if (!isRecord11(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord13(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function machineIdentity(raw) {
   const user = raw["user"];
-  if (!isRecord11(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
+  if (!isRecord13(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
     return null;
   }
   const app = raw["performed_via_github_app"];
-  const appId = isRecord11(app) && typeof app["id"] === "number" ? app["id"] : void 0;
+  const appId = isRecord13(app) && typeof app["id"] === "number" ? app["id"] : void 0;
   return {
     userType: user["type"],
     userId: user["id"],
@@ -22572,9 +22736,9 @@ function machineIdentity(raw) {
   };
 }
 function normalizePullRequest(raw) {
-  if (!isRecord11(raw)) throw new Error("GitHub pull request payload must be an object");
+  if (!isRecord13(raw)) throw new Error("GitHub pull request payload must be an object");
   const head = raw["head"];
-  if (!isRecord11(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
+  if (!isRecord13(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
     throw new Error("GitHub pull request payload missing head.sha");
   }
   const number = requireNumber(raw["number"], "number");
@@ -22590,7 +22754,7 @@ function normalizePullRequest(raw) {
   };
 }
 function normalizePullRequestReaction(raw) {
-  if (!isRecord11(raw)) throw new Error("GitHub reaction payload must be an object");
+  if (!isRecord13(raw)) throw new Error("GitHub reaction payload must be an object");
   return {
     id: requireNumber(raw["id"], "reaction.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -22601,7 +22765,7 @@ function normalizePullRequestReaction(raw) {
   };
 }
 function normalizeReview(raw) {
-  if (!isRecord11(raw)) throw new Error("GitHub review payload must be an object");
+  if (!isRecord13(raw)) throw new Error("GitHub review payload must be an object");
   return {
     id: requireNumber(raw["id"], "review.id"),
     ...typeof raw["node_id"] === "string" ? { nodeId: raw["node_id"] } : {},
@@ -22616,7 +22780,7 @@ function normalizeReview(raw) {
   };
 }
 function normalizeIssueComment(raw) {
-  if (!isRecord11(raw)) throw new Error("GitHub issue comment payload must be an object");
+  if (!isRecord13(raw)) throw new Error("GitHub issue comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "comment.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -22629,7 +22793,7 @@ function normalizeIssueComment(raw) {
   };
 }
 function normalizeReviewComment(raw) {
-  if (!isRecord11(raw)) throw new Error("GitHub review comment payload must be an object");
+  if (!isRecord13(raw)) throw new Error("GitHub review comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "review_comment.id"),
     pullRequestReviewId: typeof raw["pull_request_review_id"] === "number" ? raw["pull_request_review_id"] : null,
@@ -22938,11 +23102,11 @@ function createGhCollectorGitHubTransport(runner = createGhApiRunner()) {
         if (input.signal?.aborted) {
           throw error;
         }
-        if (isRecord11(error) && error["ambiguousGhFailure"] === true) {
+        if (isRecord13(error) && error["ambiguousGhFailure"] === true) {
           const cause = commentFailureCause(error);
           return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
         }
-        if (isRecord11(error) && error["name"] === "AbortError") {
+        if (isRecord13(error) && error["name"] === "AbortError") {
           throw error;
         }
         throw error;
@@ -23122,7 +23286,7 @@ var init_navigator_invocation_identity = __esm({
 
 // src/public-command-renderer.ts
 function isPublicCallableRole2(role) {
-  return PUBLIC_CALLABLE_ROLES2.has(role);
+  return PUBLIC_CALLABLE_ROLES3.has(role);
 }
 function renderPublicAkRoleCommand(target) {
   if (!isPublicCallableRole2(target.role)) return void 0;
@@ -23139,12 +23303,12 @@ function renderPublicAkRoleCommand(target) {
   }
   return `ak-role ${role}`;
 }
-var PUBLIC_CALLABLE_ROLES2;
+var PUBLIC_CALLABLE_ROLES3;
 var init_public_command_renderer = __esm({
   "src/public-command-renderer.ts"() {
     "use strict";
     init_packaged_role_registry();
-    PUBLIC_CALLABLE_ROLES2 = new Set(
+    PUBLIC_CALLABLE_ROLES3 = new Set(
       PACKAGED_ROLE_REGISTRY.map((entry) => entry.role)
     );
   }
@@ -23570,7 +23734,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
     const { records: records2 } = await readSitianRecords(recordFile);
     for (let i = records2.length - 1; i >= 0; i -= 1) {
       const payload = records2[i]?.payload;
-      if (!isRecord12(payload) || !isRecord12(payload.response)) continue;
+      if (!isRecord14(payload) || !isRecord14(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -23607,7 +23771,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord12(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord14(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -23639,12 +23803,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     return firstLine === RESUME_ENVELOPE;
   };
   const isResumeEnvelope = (msg) => {
-    if (!isRecord12(msg) || msg.role !== "user") return false;
+    if (!isRecord14(msg) || msg.role !== "user") return false;
     const text = typeof msg.text === "string" ? msg.text : typeof msg.content === "string" ? msg.content : void 0;
     if (isResumeEnvelopeBytes(text)) return true;
     const content = msg.content;
     if (Array.isArray(content)) {
-      return content.some((p) => isRecord12(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
+      return content.some((p) => isRecord14(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
     }
     return false;
   };
@@ -23673,9 +23837,9 @@ async function loadBoundAuditorVolumes(sessionFile) {
       throw sessionReadFailure(error, "failed to read discovered auditor session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord12(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord14(header) || header.parentSession !== sessionFile) continue;
     const bindingEntry = entries.find((entry) => entry.type === "custom" && entry.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE);
-    const bindingParent = isRecord12(bindingEntry?.data) && isRecord12(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+    const bindingParent = isRecord14(bindingEntry?.data) && isRecord14(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
     const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
     const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
     if (bindingParent?.sessionId !== parentId || bindingParent.sessionFile !== sessionFile || attemptEntryIndex < latestParentUserIndex) continue;
@@ -23694,11 +23858,11 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord12(entry.data)) continue;
-      const parent = isRecord12(entry.data.parent) ? entry.data.parent : void 0;
-      const failure = isRecord12(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord14(entry.data)) continue;
+      const parent = isRecord14(entry.data.parent) ? entry.data.parent : void 0;
+      const failure = isRecord14(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId || failure?.cause !== "provider" && failure?.cause !== "unrecognized") continue;
-      const identity = isRecord12(failure.identity) ? failure.identity : void 0;
+      const identity = isRecord14(failure.identity) ? failure.identity : void 0;
       return {
         cause: failure.cause === "provider" ? "provider" : "unrecognized",
         ...identity === void 0 ? {} : { identity: {
@@ -23706,7 +23870,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure.diagnostic === "string" ? { diagnostic: failure.diagnostic } : {},
-        ...isRecord12(failure.details) ? { details: failure.details } : {}
+        ...isRecord14(failure.details) ? { details: failure.details } : {}
       };
     }
   }
@@ -23753,9 +23917,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord12(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord12(textPart) ? textPart.text : void 0;
-    const details = isRecord12(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord14(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord14(textPart) ? textPart.text : void 0;
+    const details = isRecord14(message.details) ? message.details : classification.fact;
     return {
       cause: "output",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -23913,7 +24077,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord12(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function safelyRead(object, key) {
@@ -23936,7 +24100,7 @@ function countersignDecisiveFacts(verdict, countersignStatus) {
   const facts = { countersignStatus };
   if (countersignStatus === "continue") {
     const fix = safelyRead(verdict, "fix");
-    if (fix.readable && isRecord12(fix.value)) {
+    if (fix.readable && isRecord14(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
       if (summary.readable && typeof summary.value === "string") {
         facts.fixSummary = summary.value;
@@ -23945,7 +24109,7 @@ function countersignDecisiveFacts(verdict, countersignStatus) {
   }
   if (countersignStatus === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
-    if (gate.readable && isRecord12(gate.value)) {
+    if (gate.readable && isRecord14(gate.value)) {
       const question = safelyRead(gate.value, "question");
       const options = safelyRead(gate.value, "options");
       if (question.readable && typeof question.value === "string") {
@@ -23970,7 +24134,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
   const statusBase = judgeStatus;
   if (statusBase === "continue") {
     const fix = safelyRead(verdict, "fix");
-    if (fix.readable && isRecord12(fix.value)) {
+    if (fix.readable && isRecord14(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
       if (summary.readable && typeof summary.value === "string") {
         facts.fixSummary = summary.value;
@@ -23980,7 +24144,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
     if (classes.readable && Array.isArray(classes.value)) {
       try {
         facts.classes = classes.value.map((entry) => {
-          if (!isRecord12(entry)) throw new Error("unreadable Judge class");
+          if (!isRecord14(entry)) throw new Error("unreadable Judge class");
           return {
             name: entry.name,
             owner: entry.owner,
@@ -23995,7 +24159,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
   }
   if (statusBase === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
-    if (gate.readable && isRecord12(gate.value)) {
+    if (gate.readable && isRecord14(gate.value)) {
       const question = safelyRead(gate.value, "question");
       const options = safelyRead(gate.value, "options");
       if (question.readable && typeof question.value === "string") {
@@ -24041,7 +24205,7 @@ function fixerDecisiveFacts(output) {
     facts.reason = reason.value;
   }
   const blockerRead = safelyRead(candidate, "blocker");
-  if (statusBase === "refused" && blockerRead.readable && isRecord12(blockerRead.value)) {
+  if (statusBase === "refused" && blockerRead.readable && isRecord14(blockerRead.value)) {
     const cause = safelyRead(blockerRead.value, "cause");
     if (cause.readable && typeof cause.value === "string") facts.blockerCause = cause.value;
     const prerequisiteId = safelyRead(blockerRead.value, "prerequisiteId");
@@ -24053,13 +24217,13 @@ function fixerDecisiveFacts(output) {
     const blockers = [];
     try {
       for (const entry of classResults.value) {
-        if (!isRecord12(entry)) throw new Error("unreadable class result");
+        if (!isRecord14(entry)) throw new Error("unreadable class result");
         const name = safelyRead(entry, "name");
         const disposition = safelyRead(entry, "disposition");
         if (!name.readable || !disposition.readable) throw new Error("unreadable class result");
         rows.push({ name: name.value, disposition: disposition.value });
         const blocker = safelyRead(entry, "blocker");
-        if (disposition.value === "refused" && blocker.readable && isRecord12(blocker.value)) blockers.push(blocker.value);
+        if (disposition.value === "refused" && blocker.readable && isRecord14(blocker.value)) blockers.push(blocker.value);
       }
       facts.classResultCount = rows.length;
       facts.classDispositions = rows;
@@ -24092,7 +24256,7 @@ function collectorDecisiveFacts(receipt) {
   if (groups.readable && Array.isArray(groups.value)) {
     try {
       facts.groups = groups.value.map((group) => {
-        if (!isRecord12(group)) throw new Error("unreadable Collector group");
+        if (!isRecord14(group)) throw new Error("unreadable Collector group");
         const identity = safelyRead(group, "identity");
         const attendance = safelyRead(group, "attendance");
         const materials = safelyRead(group, "materials");
@@ -24126,7 +24290,7 @@ function doctorDecisiveFacts(output) {
     return facts;
   }
   const caseValue = safelyRead(candidate, "case");
-  if (caseValue.readable && isRecord12(caseValue.value)) {
+  if (caseValue.readable && isRecord14(caseValue.value)) {
     const issueNumber = safelyRead(caseValue.value, "issueNumber");
     const runsPath = safelyRead(caseValue.value, "runsPath");
     if (issueNumber.readable && issueNumber.value !== void 0) facts.issueNumber = issueNumber.value;
@@ -24137,7 +24301,7 @@ function doctorDecisiveFacts(output) {
   return facts;
 }
 function reviewerAxes(value) {
-  if (!isRecord12(value)) return [];
+  if (!isRecord14(value)) return [];
   return ["standards", "spec"].filter((axis) => {
     const projected = safelyRead(value, axis);
     return projected.readable && projected.value !== void 0;
@@ -24265,7 +24429,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord12(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord14(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -24337,7 +24501,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord12(next) || typeof next.role !== "string") {
+    if (!isRecord14(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -24345,7 +24509,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord12).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord14).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -24413,7 +24577,7 @@ async function extractGateFactFromSessionDirectory(sessionDirectory) {
 }
 async function withOptionalGateProjection(base, sessionDirectory) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  if (isRecord12(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
+  if (isRecord14(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
   const gate = await extractGateFactFromSessionDirectory(sessionDirectory);
   return gate === void 0 ? base : { ...base, gate };
 }
@@ -24453,7 +24617,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord12(details)) {
+      if (!isRecord14(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -24867,7 +25031,7 @@ async function settleLawfulCollectorTerminalResult(admitted, authority) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const duration = isRecord12(candidate) ? candidate.durationMs : void 0;
+      const duration = isRecord14(candidate) ? candidate.durationMs : void 0;
       if (Number.isSafeInteger(duration) && duration >= 1 && duration <= 9e5) {
         continue;
       }
@@ -25067,10 +25231,22 @@ async function settleLawfulOneShotAcceptedTerminalResult(admitted, authority, sp
     }
     return void 0;
   }
+  if (!spec.tryAcceptDetails(roleOutcome.decisiveFacts)) {
+    return settleFailureTerminalResult(
+      admitted,
+      {
+        cause: "output",
+        diagnostic: spec.nonUsableDiagnostic,
+        details: { candidate: roleOutcome.decisiveFacts, acceptedReceipt: false }
+      },
+      authority
+    );
+  }
+  const acceptedOutcome = spec.projectAccepted(roleOutcome);
   const navigator = extractNavigatorFact(entries);
   return withOptionalGateProjection(
     {
-      roleOutcome: spec.projectAccepted(roleOutcome),
+      roleOutcome: acceptedOutcome,
       navigator,
       artifacts: [],
       runId: admitted.runId
@@ -25174,6 +25350,48 @@ async function settleLawfulInspectorTerminalResult(admitted, authority) {
 async function trySettleInspectorTerminalResult(admitted, authority) {
   return settleLawfulInspectorTerminalResult(admitted, authority);
 }
+async function settleLawfulGatekeeperTerminalResult(admitted, authority) {
+  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+    role: "gatekeeper",
+    toolName: GATEKEEPER_OUTPUT_TOOL_NAME,
+    nonUsableDiagnostic: "\u95E8\u4E0B\u7701\u51B3\u8BAE\u65E0\u663E\u5F0F dispatch/pass",
+    tryAcceptDetails: tryAcceptWithValidator(validateRecordedGatekeeperOutput),
+    projectAccepted: (sealed) => {
+      const output = validateRecordedGatekeeperOutput(sealed.decisiveFacts);
+      const accepted = {
+        kind: "accepted",
+        role: "gatekeeper",
+        status: output.status,
+        decisiveFacts: gatekeeperDecisiveFacts(output)
+      };
+      return accepted;
+    }
+  });
+}
+async function trySettleGatekeeperTerminalResult(admitted, authority) {
+  return settleLawfulGatekeeperTerminalResult(admitted, authority);
+}
+async function settleLawfulNavigatorTerminalResult(admitted, authority) {
+  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+    role: "navigator",
+    toolName: NAVIGATOR_OUTPUT_TOOL_NAME,
+    nonUsableDiagnostic: "\u6E38\u5955\u4F7F\u56DE\u6267\u65E0\u663E\u5F0F\u8DEF\u7EBF\u5EFA\u8BAE",
+    tryAcceptDetails: tryAcceptWithValidator(validateRecordedNavigatorOutput),
+    projectAccepted: (sealed) => {
+      const output = validateRecordedNavigatorOutput(sealed.decisiveFacts);
+      const accepted = {
+        kind: "accepted",
+        role: "navigator",
+        status: "advice",
+        decisiveFacts: navigatorDecisiveFacts(output)
+      };
+      return accepted;
+    }
+  });
+}
+async function trySettleNavigatorTerminalResult(admitted, authority) {
+  return settleLawfulNavigatorTerminalResult(admitted, authority);
+}
 async function trySettleCoderTerminalResult(admitted, authority, options = {}) {
   return settleLawfulCoderTerminalResult(admitted, authority, options);
 }
@@ -25419,7 +25637,7 @@ async function settleLawfulMergerTerminalResult(admitted, authority, options) {
       if (message?.role !== "toolResult") continue;
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
-      const attemptId = isRecord12(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
+      const attemptId = isRecord14(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
       if (!attemptId.readable || attemptId.value !== admitted.runId) continue;
       try {
         validateMergerOutput(residual.candidate, admitted.runId);
@@ -25802,6 +26020,8 @@ var init_settlement = __esm({
     init_countersign_contracts();
     init_gleaner_left_contracts();
     init_inspector_contracts();
+    init_gatekeeper_output();
+    init_navigator_output();
     init_method_skill();
     init_navigator_invocation_identity();
     init_receipt_delivery_policy();
@@ -26880,6 +27100,90 @@ var init_coder_run = __esm({
   }
 });
 
+// src/public-cli/instruction-seat-run.ts
+function buildInstructionSeatTurnRequest(admitted, options) {
+  return projectRoleTurnRequest(
+    admitted,
+    {
+      activation: {
+        role: admitted.role
+      }
+    },
+    options
+  );
+}
+function instructionSeatAdapters() {
+  return {
+    trySettle: (admitted, authority) => admitted.role === "gatekeeper" ? trySettleGatekeeperTerminalResult(admitted, authority) : trySettleNavigatorTerminalResult(admitted, authority),
+    // Accepted receipts and failure terminals both present via shared path.
+    shouldPresentSettled: () => true
+  };
+}
+async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
+  let admitted;
+  try {
+    const parsed = parseArgv2(argv);
+    const options = {
+      home: env.home,
+      principalAuthority: env.principalAuthority,
+      cwd: env.cwd,
+      instruction: parsed.instruction,
+      attachmentPaths: parsed.attachmentPaths,
+      ...parsed.project === void 0 ? {} : { project: parsed.project },
+      ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
+      ...env.model === void 0 ? {} : { model: env.model },
+      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId }
+    };
+    admitted = role === "gatekeeper" ? await admitGatekeeperInvocation(options) : await admitNavigatorInvocation(options);
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  await markRunAdmitted(admitted, env.principalAuthority);
+  const turnRequest = buildInstructionSeatTurnRequest(admitted, {
+    packageRoot: env.packageRoot,
+    home: env.home,
+    agentDir: env.agentDir,
+    ...env.model === void 0 ? {} : { model: env.model },
+    ...env.engine === void 0 ? {} : { engine: env.engine },
+    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
+    ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
+    continuation: {
+      kind: "initial",
+      prompt: buildInstructionTransportPrompt(
+        admitted,
+        engineSessionMaterialFromOptions({
+          ...env.engine === void 0 ? {} : { engine: env.engine },
+          packageRoot: env.packageRoot
+        })
+      )
+    }
+  });
+  return await runPostAdmissionOneShot({
+    admitted,
+    env,
+    io,
+    request: turnRequest,
+    adapters: instructionSeatAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+var init_instruction_seat_run = __esm({
+  "src/public-cli/instruction-seat-run.ts"() {
+    "use strict";
+    init_engine_material();
+    init_cli_errors();
+    init_invocation();
+    init_post_admission();
+    init_run_lifecycle();
+    init_settlement();
+    init_turn_request();
+  }
+});
+
 // src/public-cli/collector-run.ts
 function buildCollectorTurnRequest(admitted, options) {
   return projectRoleTurnRequest(
@@ -27037,12 +27341,12 @@ function encodeClaudeProjectDir(cwd) {
   const abs = cwd.startsWith("/") ? cwd : `/${cwd}`;
   return abs.replace(/\//g, "-");
 }
-function isRecord13(value) {
+function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function messageText(message) {
   if (typeof message === "string") return message;
-  if (!isRecord13(message)) return "";
+  if (!isRecord15(message)) return "";
   const content = message.content;
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -27052,7 +27356,7 @@ function messageText(message) {
       parts.push(part);
       continue;
     }
-    if (!isRecord13(part)) continue;
+    if (!isRecord15(part)) continue;
     if (typeof part.text === "string") parts.push(part.text);
     else if (typeof part.content === "string") parts.push(part.content);
   }
@@ -27138,7 +27442,7 @@ function readCcSessionBlocks(options) {
             { cause: error }
           );
         }
-        if (!isRecord13(parsed)) continue;
+        if (!isRecord15(parsed)) continue;
         const type = typeof parsed.type === "string" ? parsed.type : "";
         if (type !== "user" && type !== "assistant") continue;
         const transcript = messageText(parsed.message ?? parsed);
@@ -27342,7 +27646,7 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveDiaristCollectMethodPath(packageRoot2 = fileURLToPath2(packageRootUrl2)) {
   return join25(packageRoot2, DIARIST_COLLECT_METHOD_RELATIVE);
 }
-function isRecord14(value) {
+function isRecord16(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseDiaristLlmStdout(stdout, candidateCount) {
@@ -27360,7 +27664,7 @@ function parseDiaristLlmStdout(stdout, candidateCount) {
       { cause: error }
     );
   }
-  if (!isRecord14(parsed)) {
+  if (!isRecord16(parsed)) {
     throw new DiaristLlmStdoutError(
       "not-object",
       "diarist collector stdout must be one JSON object"
@@ -27381,7 +27685,7 @@ function parseDiaristLlmStdout(stdout, candidateCount) {
   const out = [];
   for (let rowIndex = 0; rowIndex < parsed.selections.length; rowIndex += 1) {
     const row = parsed.selections[rowIndex];
-    if (!isRecord14(row)) {
+    if (!isRecord16(row)) {
       throw new DiaristLlmStdoutError(
         "selection-uninterpretable",
         `diarist collector selection[${rowIndex}] is not an object`
@@ -27523,11 +27827,11 @@ var init_diarist_llm_collector = __esm({
 });
 
 // src/ticket-provenance-contracts.ts
-function isRecord15(value) {
+function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function projectTicketProvenanceDiagnostic(value) {
-  if (!isRecord15(value)) return void 0;
+  if (!isRecord17(value)) return void 0;
   if (value.recordClass !== TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
     return void 0;
   }
@@ -27549,18 +27853,18 @@ function projectTicketProvenanceDiagnostic(value) {
   };
 }
 function projectTicketProvenanceEntry(value) {
-  if (!isRecord15(value)) return void 0;
+  if (!isRecord17(value)) return void 0;
   if (value.recordClass === TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
     return void 0;
   }
-  if (!isRecord15(value.basis)) return void 0;
+  if (!isRecord17(value.basis)) return void 0;
   if (typeof value.basis.method !== "string" || !BASIS_METHODS.has(value.basis.method)) {
     return void 0;
   }
   if (typeof value.sourceKind !== "string" || !SOURCE_KINDS.has(value.sourceKind)) {
     return void 0;
   }
-  if (!isRecord15(value.sourceRef)) return void 0;
+  if (!isRecord17(value.sourceRef)) return void 0;
   if (typeof value.transcript !== "string" || value.transcript.length === 0) {
     return void 0;
   }
@@ -30203,7 +30507,7 @@ function isMissingPathError5(error) {
 function errorText3(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isRecord16(value) {
+function isRecord18(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readExistingRunLifecycleState(runDirectory) {
@@ -30211,7 +30515,7 @@ async function readExistingRunLifecycleState(runDirectory) {
     const raw = JSON.parse(
       await readFile17(join31(runDirectory, "run-state.json"), "utf8")
     );
-    if (!isRecord16(raw) || typeof raw.state !== "string") return void 0;
+    if (!isRecord18(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
   } catch {
     return void 0;
@@ -30247,7 +30551,7 @@ async function readInvocationScopeFields(runDirectory) {
     throw error;
   }
   const parsed = JSON.parse(raw);
-  if (!isRecord16(parsed)) return void 0;
+  if (!isRecord18(parsed)) return void 0;
   if (typeof parsed.projectRoot !== "string" || parsed.projectRoot.trim() === "") {
     return void 0;
   }
@@ -30275,7 +30579,7 @@ async function resolveSessionFile(runDirectory) {
   try {
     const raw = await readFile17(join31(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
-    if (isRecord16(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
+    if (isRecord18(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
     }
   } catch (error) {
@@ -30516,7 +30820,7 @@ var init_analyst_ledger = __esm({
 });
 
 // src/analyst-metric-families/acceptance-success-rework.ts
-function isRecord17(value) {
+function isRecord19(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan(span) {
@@ -30525,21 +30829,21 @@ function wallMsFromSpan(span) {
 function findCollectorGroups(body) {
   if (Array.isArray(body.groups)) return body.groups;
   const receipt = body.receipt;
-  if (isRecord17(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
+  if (isRecord19(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
   const outcome = body.outcome;
-  if (isRecord17(outcome)) {
+  if (isRecord19(outcome)) {
     const facts = outcome.decisiveFacts;
-    if (isRecord17(facts) && Array.isArray(facts.groups)) return facts.groups;
+    if (isRecord19(facts) && Array.isArray(facts.groups)) return facts.groups;
   }
   return void 0;
 }
 function extractStatus(body) {
   const outcome = body.outcome;
-  if (isRecord17(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
+  if (isRecord19(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
     return outcome.status;
   }
   const receipt = body.receipt;
-  if (isRecord17(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
+  if (isRecord19(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
     return receipt.status;
   }
   if (typeof body.status === "string" && body.status.trim() !== "") {
@@ -31163,21 +31467,21 @@ var init_leg_wall_clock = __esm({
 });
 
 // src/analyst-metric-families/round-timeline.ts
-function isRecord18(value) {
+function isRecord20(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan2(startedAt, endedAt) {
   return Date.parse(endedAt) - Date.parse(startedAt);
 }
 function readOutcomeStatus(body) {
-  if (!isRecord18(body.outcome)) return void 0;
+  if (!isRecord20(body.outcome)) return void 0;
   const status = body.outcome.status;
   if (typeof status !== "string" || status.trim() === "") return void 0;
   return status;
 }
 function readClassCount(body) {
-  if (!isRecord18(body.outcome)) return void 0;
-  if (!isRecord18(body.outcome.decisiveFacts)) return void 0;
+  if (!isRecord20(body.outcome)) return void 0;
+  if (!isRecord20(body.outcome.decisiveFacts)) return void 0;
   const classCount = body.outcome.decisiveFacts.classCount;
   if (typeof classCount !== "number" || !Number.isFinite(classCount)) {
     return void 0;
@@ -32105,11 +32409,6 @@ function requireLegalEngineName(name) {
   }
 }
 function requireCallableSeat(seat, axis, verb) {
-  if (isAutomaticConfigurableSeat(seat)) {
-    throw new CliUsageError(
-      `config ${verb} refuses ${seat}: no independent activation path; storing would be silently ineffective`
-    );
-  }
   if (!isPublicCallableRole(seat)) {
     throw new CliUsageError(`unknown ${axis}-axis seat: ${seat}`);
   }
@@ -32240,11 +32539,10 @@ function renderCommandHelp(command) {
 `;
 }
 function renderRoles(seats) {
-  const lines = ["seat	kind	source	model"];
+  const lines = ["seat	source	model"];
   for (const seat of seats) {
-    const kind = seat.automatic ? "automatic" : "callable";
     const model = seat.selection === void 0 ? "-" : formatModelSpec(seat.selection);
-    lines.push(`${seat.seat}	${kind}	${seat.source}	${model}`);
+    lines.push(`${seat.seat}	${seat.source}	${model}`);
   }
   return `${lines.join("\n")}
 `;
@@ -32889,6 +33187,29 @@ async function runAkRole(argv, env) {
         ...result2.terminal === void 0 ? {} : { terminal: result2.terminal }
       };
     }
+    if (parsed.command === "gatekeeper" || parsed.command === "navigator") {
+      const agentDir = resolveAgentDir(env, home);
+      const cwd = env.cwd ?? process.cwd();
+      const config = await loadAndValidateConfig(home, env.packageRoot);
+      const credentials = env.credentials ?? await loadCredentialProviders(agentDir);
+      const seat = resolveEffectiveSeat(
+        config,
+        parsed.command,
+        credentials,
+        invocationFromParsed(parsed)
+      );
+      const result2 = await runPublicInstructionSeat(
+        parsed.args,
+        createRoleEnvironment(env, { role: parsed.command, home, agentDir, cwd, credentials, seat, config }),
+        io,
+        parsed.command,
+        parsed.command === "gatekeeper" ? PUBLIC_ROLE_ARGV.gatekeeper.parse : PUBLIC_ROLE_ARGV.navigator.parse
+      );
+      return {
+        exitCode: result2.exitCode,
+        ...result2.terminal === void 0 ? {} : { terminal: result2.terminal }
+      };
+    }
     if (parsed.command === "analyst") {
       const result2 = await runPublicAnalyst(
         parsed.args,
@@ -32934,6 +33255,7 @@ var init_cli = __esm({
     init_invocation();
     init_option_definitions();
     init_coder_run();
+    init_instruction_seat_run();
     init_collector_run();
     init_countersign_run();
     init_gleaner_left_run();
@@ -32963,6 +33285,8 @@ var init_cli = __esm({
       notary: { parse: parseNotaryArgv, options: optionsForOwner("notary") },
       inspector: { parse: parseInspectorArgv, options: optionsForOwner("inspector") },
       reviewer: { parse: parseReviewerArgv, options: optionsForOwner("reviewer") },
+      gatekeeper: { parse: parseGatekeeperArgv, options: optionsForOwner("gatekeeper") },
+      navigator: { parse: parseNavigatorArgv, options: optionsForOwner("navigator") },
       /** Deterministic analysis seat (#336) — argv parse only; no LLM admission. */
       analyst: { parse: parseAnalystArgv, options: optionsForOwner("analyst") }
     };