@akagilnc/pi-workflow-roles 0.1.3280 → 0.1.3353

package/dist/public-cli/main.js

@@ -14878,6 +14878,9 @@ function projectLawfulNotaryOutput(value) {
     if (!Array.isArray(clone.findings)) clone.findings = asStringArray2(clone.findings);
     return clone;
   }
+  if (status === "escalate") {
+    return structuredClone(value);
+  }
   return void 0;
 }
 function validateRecordedNotaryOutput(value) {
@@ -14897,6 +14900,10 @@ function notaryDecisiveFacts(output) {
   if (status === "bounce") {
     facts.disposition = "rewrite";
   }
+  if (status === "escalate") {
+    const reason = output.reason;
+    if (reason !== void 0) facts.reason = reason;
+  }
   return facts;
 }
 var NOTARY_OUTPUT_TOOL_NAME, NOTARY_FIXED_KICKOFF, notaryOutputSchema;
@@ -14912,11 +14919,14 @@ var init_notary_contracts = __esm({
       openToolObject(
         typebox_exports.Object({
           status: typebox_exports.Unknown({
-            description: "pass | bounce \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+            description: "pass | bounce | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
           }),
           findings: typebox_exports.Unknown({
-            description: "string[] findings\uFF0C\u968F pass \u6216 bounce \u7559\u5B58"
-          })
+            description: "string[] findings\uFF0C\u968F pass\u3001bounce \u6216 escalate \u7559\u5B58"
+          }),
+          reason: typebox_exports.Optional(typebox_exports.Unknown({
+            description: "status \u4E3A escalate \u65F6\u7684\u4E0A\u5448\u7406\u7531"
+          }))
         })
       )
     );
@@ -14991,7 +15001,7 @@ function validateRecordedInspectorOutput(value) {
   } catch {
     throw new Error("Inspector output has no execution discriminator");
   }
-  if (status === "pass" || status === "bounce") {
+  if (status === "pass" || status === "bounce" || status === "escalate") {
     return value;
   }
   throw new Error("Inspector output has no execution discriminator");
@@ -15000,6 +15010,8 @@ function inspectorDecisiveFacts(output) {
   const facts = { status: output.status };
   const findings = output.findings;
   if (findings !== void 0) facts.findings = findings;
+  const reason = output.reason;
+  if (reason !== void 0) facts.reason = reason;
   return facts;
 }
 var INSPECTOR_OUTPUT_TOOL_NAME;
@@ -15014,7 +15026,7 @@ var init_inspector_contracts = __esm({
 function packagedRoleMetadata(role) {
   return PACKAGED_ROLE_REGISTRY.find((entry) => entry.role === role);
 }
-var NOTARY_SESSION_MATERIALS, INSPECTOR_SESSION_MATERIALS, PUBLIC_ROLE_RECORDS, ONE_SHOT_ROLES, PACKAGED_ROLE_REGISTRY;
+var NOTARY_SESSION_MATERIALS, INSPECTOR_SESSION_MATERIALS, PUBLIC_ROLE_RECORDS, PACKAGED_ROLE_REGISTRY;
 var init_packaged_role_registry = __esm({
   "src/packaged-role-registry.ts"() {
     "use strict";
@@ -15197,12 +15209,6 @@ var init_packaged_role_registry = __esm({
         sessionMaterials: ["CLAUDE.md", "souls/navigator.md"]
       }
     ];
-    ONE_SHOT_ROLES = [
-      "collector",
-      "doctor",
-      "notary",
-      "inspector"
-    ];
     PACKAGED_ROLE_REGISTRY = PUBLIC_ROLE_RECORDS.map(({ sessionMaterials: _omit, ...metadata }) => metadata);
   }
 });
@@ -17715,6 +17721,16 @@ async function loadResumableRunRecord(home, runId, authority) {
   let derived;
   let correlationId;
   let ticketNumber;
+  let prNumber;
+  let repository;
+  let repositoryDisplay;
+  let requestManifestPath;
+  let manifestDigest;
+  let issueNumber;
+  let caseRunsPath;
+  let caseIdentity2;
+  let sourceRunPath;
+  let sourceRun;
   try {
     const raw = JSON.parse(
       await readFile8(run.admittedRequestPath, "utf8")
@@ -17748,6 +17764,46 @@ async function loadResumableRunRecord(home, runId, authority) {
       if (typeof record4.baseRevision === "string" && record4.baseRevision.trim() !== "") {
         baseRevision = record4.baseRevision;
       }
+      if (typeof record4.prNumber === "number" && Number.isSafeInteger(record4.prNumber) && record4.prNumber >= 1) {
+        prNumber = record4.prNumber;
+      }
+      if (typeof record4.repository === "string" && record4.repository.trim() !== "") {
+        repository = record4.repository;
+      }
+      if (typeof record4.repositoryDisplay === "string" && record4.repositoryDisplay.trim() !== "") {
+        repositoryDisplay = record4.repositoryDisplay;
+      }
+      if (typeof record4.requestManifestPath === "string" && record4.requestManifestPath.trim() !== "") {
+        requestManifestPath = record4.requestManifestPath;
+      }
+      if (typeof record4.manifestDigest === "string" && record4.manifestDigest.trim() !== "") {
+        manifestDigest = record4.manifestDigest;
+      }
+      if (typeof record4.issueNumber === "number" && Number.isSafeInteger(record4.issueNumber) && record4.issueNumber >= 1) {
+        issueNumber = record4.issueNumber;
+      }
+      if (typeof record4.caseRunsPath === "string" && record4.caseRunsPath.trim() !== "") {
+        caseRunsPath = record4.caseRunsPath;
+      }
+      if (record4.caseIdentity !== null && typeof record4.caseIdentity === "object" && !Array.isArray(record4.caseIdentity)) {
+        const ci = record4.caseIdentity;
+        if (typeof ci.issueNumber === "number" && Number.isSafeInteger(ci.issueNumber) && ci.issueNumber >= 1 && typeof ci.runsPath === "string" && ci.runsPath.trim() !== "") {
+          caseIdentity2 = { issueNumber: ci.issueNumber, runsPath: ci.runsPath };
+        }
+      }
+      if (typeof record4.sourceRunPath === "string" && record4.sourceRunPath.trim() !== "") {
+        sourceRunPath = record4.sourceRunPath;
+      }
+      if (record4.sourceRun !== null && typeof record4.sourceRun === "object" && !Array.isArray(record4.sourceRun)) {
+        const sr = record4.sourceRun;
+        if (typeof sr.runId === "string" && sr.runId.trim() !== "" && typeof sr.role === "string" && sr.role.trim() !== "" && typeof sr.runDirectory === "string" && sr.runDirectory.trim() !== "") {
+          sourceRun = {
+            runId: sr.runId,
+            role: sr.role,
+            runDirectory: sr.runDirectory
+          };
+        }
+      }
       if (Array.isArray(record4.authorityRefs)) {
         authorityRefs = Object.freeze(
           record4.authorityRefs.map((ref) => {
@@ -17833,19 +17889,22 @@ async function loadResumableRunRecord(home, runId, authority) {
       ...derived === void 0 ? {} : { derived },
       ...correlationId === void 0 ? {} : { correlationId },
       ...ticketNumber === void 0 ? {} : { ticketNumber },
+      ...prNumber === void 0 ? {} : { prNumber },
+      ...repository === void 0 ? {} : { repository },
+      ...repositoryDisplay === void 0 ? {} : { repositoryDisplay },
+      ...requestManifestPath === void 0 ? {} : { requestManifestPath },
+      ...manifestDigest === void 0 ? {} : { manifestDigest },
+      ...issueNumber === void 0 ? {} : { issueNumber },
+      ...caseRunsPath === void 0 ? {} : { caseRunsPath },
+      ...caseIdentity2 === void 0 ? {} : { caseIdentity: caseIdentity2 },
+      ...sourceRunPath === void 0 ? {} : { sourceRunPath },
+      ...sourceRun === void 0 ? {} : { sourceRun },
       ...model === void 0 ? {} : { model }
     }
   };
 }
-async function loadResumableJudgeRun(home, runId, authority) {
-  const loaded = await loadResumableRunRecord(home, runId, authority);
-  if (loaded.run.role !== "judge") {
-    throw new CliUsageError(
-      `role run ${runId} belongs to ${loaded.run.role}, not judge`
-    );
-  }
-  const admitted = {
-    role: "judge",
+function resumedBaseAdmitted(loaded) {
+  return {
     runId: loaded.run.runId,
     bookKey: loaded.run.bookKey,
     projectRoot: loaded.run.projectRoot,
@@ -17858,12 +17917,27 @@ async function loadResumableJudgeRun(home, runId, authority) {
     ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
     ...restoredTicketFields(loaded.admittedFields)
   };
+}
+function seatLoadedResult(loaded, admitted) {
   return {
     admitted,
     run: loaded.run,
     ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
   };
 }
+async function loadResumableJudgeRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "judge") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not judge`
+    );
+  }
+  const admitted = {
+    role: "judge",
+    ...resumedBaseAdmitted(loaded)
+  };
+  return seatLoadedResult(loaded, admitted);
+}
 async function loadResumableCoderRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
   if (loaded.run.role !== "coder") {
@@ -17891,24 +17965,11 @@ async function loadResumableCoderRun(home, runId, authority) {
   const admitted = {
     role: "coder",
     phase,
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
+    ...resumedBaseAdmitted(loaded),
     instructionEmpty: false,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
-    taskPath,
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
-  };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+    taskPath
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function loadResumableFixerRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
@@ -17938,26 +17999,13 @@ async function loadResumableFixerRun(home, runId, authority) {
   const admitted = {
     role: "fixer",
     phase,
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
+    ...resumedBaseAdmitted(loaded),
     instructionEmpty: false,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
     packetPath,
     ...loaded.admittedFields.prerequisitesPath === void 0 ? {} : { prerequisitesPath: loaded.admittedFields.prerequisitesPath },
-    prerequisites,
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
-  };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+    prerequisites
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function loadResumableReviewerRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
@@ -17974,25 +18022,11 @@ async function loadResumableReviewerRun(home, runId, authority) {
   }
   const admitted = {
     role: "reviewer",
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
-    instructionEmpty: loaded.admittedFields.instructionEmpty,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
+    ...resumedBaseAdmitted(loaded),
     baseRevision,
-    authorityRefs: Object.freeze([...loaded.admittedFields.authorityRefs ?? []]),
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
-  };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+    authorityRefs: Object.freeze([...loaded.admittedFields.authorityRefs ?? []])
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function loadResumableCountersignRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
@@ -18003,23 +18037,22 @@ async function loadResumableCountersignRun(home, runId, authority) {
   }
   const admitted = {
     role: "countersign",
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
-    instructionEmpty: loaded.admittedFields.instructionEmpty,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
+    ...resumedBaseAdmitted(loaded)
   };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+  return seatLoadedResult(loaded, admitted);
+}
+async function loadResumableInstructionSeatRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "gatekeeper" && loaded.run.role !== "navigator") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not an instruction seat`
+    );
+  }
+  const admitted = {
+    role: loaded.run.role,
+    ...resumedBaseAdmitted(loaded)
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function loadResumableGleanerLeftRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
@@ -18036,24 +18069,10 @@ async function loadResumableGleanerLeftRun(home, runId, authority) {
   }
   const admitted = {
     role: "gleaner-left",
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
-    instructionEmpty: loaded.admittedFields.instructionEmpty,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
-    baseRevision,
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
-  };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+    ...resumedBaseAdmitted(loaded),
+    baseRevision
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function loadResumableMergerRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
@@ -18081,25 +18100,103 @@ async function loadResumableMergerRun(home, runId, authority) {
   }
   const admitted = {
     role: "merger",
-    runId: loaded.run.runId,
-    bookKey: loaded.run.bookKey,
-    projectRoot: loaded.run.projectRoot,
-    instruction: loaded.admittedFields.instruction,
+    ...resumedBaseAdmitted(loaded),
     instructionEmpty: false,
-    attachments: loaded.admittedFields.attachments,
-    runDirectory: loaded.run.runDirectory,
-    principal: loaded.principal,
-    admittedRequestPath: loaded.run.admittedRequestPath,
     mergerInputPath,
-    derived,
-    ...loaded.admittedFields.model === void 0 ? {} : { model: loaded.admittedFields.model },
-    ...restoredTicketFields(loaded.admittedFields)
+    derived
   };
-  return {
-    admitted,
-    run: loaded.run,
-    ...loaded.observation === void 0 ? {} : { observation: loaded.observation }
+  return seatLoadedResult(loaded, admitted);
+}
+async function loadResumableCollectorRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "collector") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not collector`
+    );
+  }
+  const { prNumber, repository, repositoryDisplay, manifestDigest } = loaded.admittedFields;
+  if (prNumber === void 0 || repository === void 0 || repositoryDisplay === void 0 || manifestDigest === void 0) {
+    throw new CliUsageError(
+      `role run admitted collector repository identity is missing: ${runId}`
+    );
+  }
+  let parsedRepository;
+  try {
+    parsedRepository = parseCollectorRepository(repositoryDisplay);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    throw new CliUsageError(detail, { cause: error });
+  }
+  if (parsedRepository.canonical !== repository) {
+    throw new CliUsageError(
+      `role run admitted collector repository does not match its canonical form: ${runId}`
+    );
+  }
+  const admitted = {
+    role: "collector",
+    ...resumedBaseAdmitted(loaded),
+    prNumber,
+    repository: parsedRepository,
+    ...loaded.admittedFields.requestManifestPath === void 0 ? {} : { requestManifestPath: loaded.admittedFields.requestManifestPath },
+    manifestDigest
+  };
+  return seatLoadedResult(loaded, admitted);
+}
+async function loadResumableDoctorRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "doctor") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not doctor`
+    );
+  }
+  const { issueNumber, caseRunsPath, caseIdentity: caseIdentity2 } = loaded.admittedFields;
+  if (issueNumber === void 0 || caseRunsPath === void 0 || caseIdentity2 === void 0) {
+    throw new CliUsageError(
+      `role run admitted doctor case identity is missing: ${runId}`
+    );
+  }
+  const admitted = {
+    role: "doctor",
+    ...resumedBaseAdmitted(loaded),
+    issueNumber,
+    caseRunsPath,
+    caseIdentity: caseIdentity2
+  };
+  return seatLoadedResult(loaded, admitted);
+}
+async function loadResumableNotaryRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "notary") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not notary`
+    );
+  }
+  const { sourceRunPath, sourceRun } = loaded.admittedFields;
+  if (sourceRunPath === void 0 || sourceRun === void 0) {
+    throw new CliUsageError(
+      `role run admitted notary source-run locator is missing: ${runId}`
+    );
+  }
+  const admitted = {
+    role: "notary",
+    ...resumedBaseAdmitted(loaded),
+    sourceRunPath,
+    sourceRun
+  };
+  return seatLoadedResult(loaded, admitted);
+}
+async function loadResumableInspectorRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "inspector") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not inspector`
+    );
+  }
+  const admitted = {
+    role: "inspector",
+    ...resumedBaseAdmitted(loaded)
   };
+  return seatLoadedResult(loaded, admitted);
 }
 async function peekRoleRunRole(home, runId) {
   const runDirectory = await findRunDirectoryById(home, runId);
@@ -18115,6 +18212,7 @@ var init_run_lifecycle = __esm({
     init_cli_errors();
     init_typed_provider_http();
     init_typed_provider_http();
+    init_collector_config();
     init_engine_material();
     init_config2();
     init_invocation();
@@ -19113,7 +19211,7 @@ var init_option_definitions = __esm({
       },
       collector: {
         command: "collector",
-        summary: "Collect GitHub PR review evidence (one-shot).",
+        summary: "Collect GitHub PR review evidence.",
         usage: ["ak-role collector --pr <number> [options] [instruction]"],
         examples: [
           "ak-role collector --pr 42 --repo owner/repository",
@@ -19122,7 +19220,7 @@ var init_option_definitions = __esm({
       },
       doctor: {
         command: "doctor",
-        summary: "Diagnose one retained case (one-shot).",
+        summary: "Diagnose one retained case.",
         usage: ["ak-role doctor --issue <number> [options] [instruction]"],
         examples: [
           'ak-role doctor --issue 115 "Diagnose this retained case."'
@@ -19219,7 +19317,7 @@ var init_option_definitions = __esm({
       },
       resume: {
         command: "resume",
-        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist.",
+        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. [message] applies only to seats that accept caller instruction; Notary/\u7B26\u5B9D\u90CE must omit message and derives evidence from the existing source-run/dossier binding.",
         usage: ["ak-role resume <runId> [message]"],
         examples: [
           "ak-role resume 01abc\u2026",
@@ -21976,228 +22074,66 @@ var init_analyst_gate_cycles_read = __esm({
   }
 });
 
-// src/run-terminal-artifacts.ts
-import { readdir as readdir4, readFile as readFile12 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname8, join as join17 } from "node:path";
-function isMissingPathError2(error) {
-  return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
-}
-function errorText2(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-function isRecord11(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function readUsableTerminalArtifactBody(body) {
-  if (body === null) {
-    return { ok: false, reason: "terminal artifact JSON value is null" };
-  }
-  if (!isRecord11(body)) {
-    return {
-      ok: false,
-      reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
-    };
-  }
-  if (typeof body.role !== "string" || body.role.trim() === "") {
-    return {
-      ok: false,
-      reason: "terminal artifact missing nonblank producer-owned role field"
-    };
+// src/auditor-dossier-tool.ts
+var init_auditor_dossier_tool = __esm({
+  "src/auditor-dossier-tool.ts"() {
+    "use strict";
+    init_build();
   }
-  return { ok: true, body };
+});
+
+// src/compliance-transport.ts
+function createComplianceDecisionTool(name, description) {
+  return { name, description, parameters: complianceDecisionSchema, async execute(_id, params) {
+    return { content: [{ type: "text", text: "\u5BA1\u8BA1\u51B3\u8BAE\u5DF2\u6536" }], details: params, terminate: true };
+  } };
 }
-async function readTerminalArtifactAtPath(path, file) {
-  let raw;
-  try {
-    raw = await readFile12(path, "utf8");
-  } catch (error) {
-    if (isMissingPathError2(error)) return void 0;
-    return {
-      status: "unreadable",
-      file,
-      path,
-      reason: errorText2(error)
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (error) {
-    return {
-      status: "unreadable",
-      file,
-      path,
-      reason: error instanceof Error ? error.message : `terminal artifact JSON parse failed: ${String(error)}`
-    };
-  }
-  const usable = readUsableTerminalArtifactBody(parsed);
-  if (!usable.ok) {
-    return {
-      status: "unreadable",
-      file,
-      path,
-      reason: usable.reason
-    };
-  }
-  return { status: "present", file, path, body: usable.body };
-}
-async function listUniqueErrorFallbackPaths(directories) {
-  const found = [];
-  for (const dir of directories) {
-    let names;
-    try {
-      names = await readdir4(dir);
-    } catch (error) {
-      if (isMissingPathError2(error)) continue;
-      throw error;
-    }
-    for (const name of names.sort((a, b) => a.localeCompare(b))) {
-      if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join17(dir, name));
-    }
-  }
-  return found;
-}
-function runIdFromRunDirectory(runDirectory) {
-  const name = basename6(runDirectory);
-  const at = name.lastIndexOf("@");
-  if (at <= 0 || at === name.length - 1) return void 0;
-  return name.slice(0, at);
-}
-function presentUniqueFallbackBoundToRun(body, expectedRunId) {
-  if (expectedRunId === void 0) return false;
-  return typeof body.runId === "string" && body.runId === expectedRunId;
-}
-async function readRunTerminalArtifact(runDirectory) {
-  const artifactsDir = join17(runDirectory, "artifacts");
-  for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    const path = join17(artifactsDir, file);
-    const read3 = await readTerminalArtifactAtPath(path, file);
-    if (read3 !== void 0) return read3;
-  }
-  for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    const path = join17(runDirectory, relative3);
-    const read3 = await readTerminalArtifactAtPath(path, "error.json");
-    if (read3 !== void 0) return read3;
-  }
-  for (const path of await listUniqueErrorFallbackPaths([artifactsDir, runDirectory])) {
-    const read3 = await readTerminalArtifactAtPath(path, "error.json");
-    if (read3 !== void 0) return read3;
-  }
-  const expectedRunId = runIdFromRunDirectory(runDirectory);
-  for (const path of await listUniqueErrorFallbackPaths([dirname8(runDirectory)])) {
-    const read3 = await readTerminalArtifactAtPath(path, "error.json");
-    if (read3 === void 0) continue;
-    if (read3.status === "present") {
-      if (!presentUniqueFallbackBoundToRun(read3.body, expectedRunId)) continue;
-      return read3;
-    }
-  }
-  return { status: "absent" };
-}
-var RUN_TERMINAL_ARTIFACT_FILES, RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS, UNIQUE_ERROR_FALLBACK_NAME;
-var init_run_terminal_artifacts = __esm({
-  "src/run-terminal-artifacts.ts"() {
+var nonblank2, decisionGateSchema, complianceDecisionSchema, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
+var init_compliance_transport = __esm({
+  "src/compliance-transport.ts"() {
     "use strict";
-    RUN_TERMINAL_ARTIFACT_FILES = [
-      "report.json",
-      "error.json",
-      "audit-incomplete.json"
-    ];
-    RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
-      "artifacts/error.settlement.json",
-      "error.settlement.json"
-    ];
-    UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
+    init_build();
+    init_evidence_child_executor();
+    init_auditor_dossier_tool();
+    init_sitian_facade();
+    nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
+    decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
+    complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "pass | revise | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), violations: typebox_exports.Array(nonblank2, { description: "\u89C2\u5BDF\u5230\u7684\u5408\u89C4\u8FDD\u89C4" }), conflicts: typebox_exports.Array(nonblank2, { description: "\u672A\u51B3\u6743\u5A01\u6216\u6267\u884C\u51B2\u7A81" }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "\u5347\u7EA7\u95EE\u9898\u4E0E\u53EF\u9009\u9009\u9879" }) }, { additionalProperties: true, required: [] });
+    AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding";
+    AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure";
   }
 });
 
-// src/submission-ledger.ts
-function isAcceptedProjection(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const candidate = value;
-  return candidate.kind === "accepted" && typeof candidate.role === "string" && typeof candidate.status === "string" && typeof candidate.decisiveFacts === "object" && candidate.decisiveFacts !== null;
-}
-function isAuditEscalationTerminalProjection(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const candidate = value;
-  return candidate.kind === "audit_escalation" && typeof candidate.role === "string" && candidate.status === "audit_escalation" && typeof candidate.decisiveFacts === "object" && candidate.decisiveFacts !== null;
-}
-function submissionRecordFile(cwd, runId, home) {
-  const ledgerHome = resolveActivationLedgerHome(home);
-  return resolveSitianRecordPathInLedger({
-    level: "event",
-    kind: "candidate",
-    subject: { runId },
-    cwd
-  }, ledgerHome).recordFile;
-}
-async function readOwnedSubmissionRecords(cwd, runId, home) {
-  const file = submissionRecordFile(cwd, runId, home);
-  const { records: records2 } = await readSitianRecords(file);
-  return {
-    file,
-    owned: records2.filter((record4) => typeof record4.subject === "object" && record4.subject !== null && record4.subject.runId === runId)
-  };
-}
-async function readSealedSubmission(cwd, runId, home) {
-  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
-  for (let index = owned.length - 1; index >= 0; index -= 1) {
-    const record4 = owned[index];
-    if (record4?.kind === "post-seal-anomaly") return void 0;
-    if (record4?.kind !== "sealed") continue;
-    const payload = record4.payload;
-    if (payload?.type === "sealed" && isAcceptedProjection(payload.projection)) return payload.projection;
-  }
-  return void 0;
-}
-async function readAuditEscalationSubmission(cwd, runId, home) {
-  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
-  for (let index = owned.length - 1; index >= 0; index -= 1) {
-    const record4 = owned[index];
-    if (record4?.kind !== "outcome") continue;
-    const payload = record4.payload;
-    if (payload?.type !== "outcome" || payload.outcome !== "audit-escalation") continue;
-    if (isAuditEscalationTerminalProjection(payload.projection)) return payload.projection;
-  }
-  return void 0;
-}
-async function readLatestSubmissionOutcome(cwd, runId, home) {
-  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
-  for (let index = owned.length - 1; index >= 0; index -= 1) {
-    const record4 = owned[index];
-    if (record4?.kind !== "outcome") continue;
-    const payload = record4.payload;
-    if (payload?.type === "outcome" && typeof payload.outcome === "string") {
-      return payload;
-    }
-  }
-  return void 0;
-}
-var init_submission_ledger = __esm({
-  "src/submission-ledger.ts"() {
+// src/engine-detour-tool.ts
+var engineDetourArgsSchema;
+var init_engine_detour_tool = __esm({
+  "src/engine-detour-tool.ts"() {
     "use strict";
-    init_activation_ledger_topology();
-    init_audit_escalation();
-    init_terminating_tools();
-    init_run_terminal_artifacts();
-    init_sitian_facade();
-    init_submission_correctable_error();
-    init_terminating_infrastructure();
+    init_build();
+    init_engine_detour();
+    engineDetourArgsSchema = typebox_exports.Object(
+      {
+        argv: typebox_exports.Array(typebox_exports.String({ minLength: 1 }), {
+          minItems: 1,
+          description: "\u9996\u9879\u4E3A PATH \u4E2D\u7684\u53EF\u6267\u884C\u6587\u4EF6\uFF0C\u5176\u4F59\u9879\u4E3A\u53C2\u6570\u3002"
+        })
+      },
+      { additionalProperties: false }
+    );
   }
 });
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { dirname as dirname9, join as join18 } from "node:path";
+import { dirname as dirname8, join as join17 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname9(fileURLToPath(moduleUrl));
+  let dir = dirname8(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync6(join18(dir, "package.json")) && existsSync6(join18(dir, "souls"))) {
+    if (existsSync6(join17(dir, "package.json")) && existsSync6(join17(dir, "souls"))) {
       return dir;
     }
-    const parent = dirname9(dir);
+    const parent = dirname8(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -22223,41 +22159,6 @@ var init_session_opening_materials = __esm({
   }
 });
 
-// src/auditor-soul.ts
-var init_auditor_soul = __esm({
-  "src/auditor-soul.ts"() {
-    "use strict";
-    init_session_opening_materials();
-  }
-});
-
-// src/auditor-dossier-tool.ts
-var init_auditor_dossier_tool = __esm({
-  "src/auditor-dossier-tool.ts"() {
-    "use strict";
-    init_build();
-  }
-});
-
-// src/engine-detour-tool.ts
-var engineDetourArgsSchema;
-var init_engine_detour_tool = __esm({
-  "src/engine-detour-tool.ts"() {
-    "use strict";
-    init_build();
-    init_engine_detour();
-    engineDetourArgsSchema = typebox_exports.Object(
-      {
-        argv: typebox_exports.Array(typebox_exports.String({ minLength: 1 }), {
-          minItems: 1,
-          description: "\u9996\u9879\u4E3A PATH \u4E2D\u7684\u53EF\u6267\u884C\u6587\u4EF6\uFF0C\u5176\u4F59\u9879\u4E3A\u53C2\u6570\u3002"
-        })
-      },
-      { additionalProperties: false }
-    );
-  }
-});
-
 // src/navigator-session-contracts.ts
 var navigatorProviderFailureSchema;
 var init_navigator_session_contracts = __esm({
@@ -22293,11 +22194,11 @@ var init_navigator_session_contracts = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord12(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord12(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord12(item) && typeof item.reason === "string")) {
+  if (!isRecord11(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord11(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -22313,75 +22214,307 @@ function parseNoReceiptLifecycleFacts(input) {
     acceptedReceipt: false
   };
 }
-var RECEIPT_DELIVERY_TURN_LIMIT, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE;
-var init_receipt_delivery_policy = __esm({
-  "src/receipt-delivery-policy.ts"() {
+var RECEIPT_DELIVERY_TURN_LIMIT, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE;
+var init_receipt_delivery_policy = __esm({
+  "src/receipt-delivery-policy.ts"() {
+    "use strict";
+    RECEIPT_DELIVERY_TURN_LIMIT = 2;
+    NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+  }
+});
+
+// src/upstream-error-testimony.ts
+function isNonSuccessHttpStatus(status) {
+  return typeof status === "number" && (status < 200 || status >= 300);
+}
+function hasUpstreamErrorTestimony(input) {
+  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
+  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
+}
+function projectConfirmedRemotePayload(input) {
+  return {
+    ...input.body === void 0 ? {} : { body: input.body },
+    ...input.code === void 0 ? {} : { code: input.code },
+    ...input.errno === void 0 ? {} : { errno: input.errno }
+  };
+}
+var init_upstream_error_testimony = __esm({
+  "src/upstream-error-testimony.ts"() {
+    "use strict";
+  }
+});
+
+// src/evidence-child-executor.ts
+var init_evidence_child_executor = __esm({
+  "src/evidence-child-executor.ts"() {
+    "use strict";
+    init_compliance_transport();
+    init_auditor_dossier_tool();
+    init_sitian_facade();
+    init_engine_detour_tool();
+    init_engine_detour();
+    init_engine_material();
+    init_session_opening_materials();
+    init_config2();
+    init_institutional_resolution();
+    init_navigator_session_contracts();
+    init_receipt_delivery_policy();
+    init_typed_provider_http();
+    init_upstream_error_testimony();
+  }
+});
+
+// src/gatekeeper-role.ts
+var officerDecisionSchema, MISSING_ARGUMENTS_SUBMISSION;
+var init_gatekeeper_role = __esm({
+  "src/gatekeeper-role.ts"() {
+    "use strict";
+    init_build();
+    init_evidence_child_executor();
+    init_open_tool_schema();
+    init_session_opening_materials();
+    init_submission_errors();
+    init_inspector_contracts();
+    init_gatekeeper_output();
+    init_submission_errors();
+    officerDecisionSchema = openToolObject(typebox_exports.Object({
+      status: typebox_exports.Unknown({ description: "pass | bounce | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }),
+      reason: typebox_exports.Optional(typebox_exports.Unknown({ description: "status \u4E3A escalate \u65F6\u7684\u7406\u7531" })),
+      findings: typebox_exports.Unknown({ description: "string[] findings\uFF0C\u968F pass\u3001bounce \u6216 escalate \u7559\u5B58" })
+    }));
+    MISSING_ARGUMENTS_SUBMISSION = Object.freeze({ missing: "arguments" });
+  }
+});
+
+// src/run-terminal-artifacts.ts
+import { readdir as readdir4, readFile as readFile12 } from "node:fs/promises";
+import { basename as basename6, dirname as dirname9, join as join18 } from "node:path";
+function isMissingPathError2(error) {
+  return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
+}
+function errorText2(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function isRecord12(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readUsableTerminalArtifactBody(body) {
+  if (body === null) {
+    return { ok: false, reason: "terminal artifact JSON value is null" };
+  }
+  if (!isRecord12(body)) {
+    return {
+      ok: false,
+      reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
+    };
+  }
+  if (typeof body.role !== "string" || body.role.trim() === "") {
+    return {
+      ok: false,
+      reason: "terminal artifact missing nonblank producer-owned role field"
+    };
+  }
+  return { ok: true, body };
+}
+async function readTerminalArtifactAtPath(path, file) {
+  let raw;
+  try {
+    raw = await readFile12(path, "utf8");
+  } catch (error) {
+    if (isMissingPathError2(error)) return void 0;
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: errorText2(error)
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (error) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: error instanceof Error ? error.message : `terminal artifact JSON parse failed: ${String(error)}`
+    };
+  }
+  const usable = readUsableTerminalArtifactBody(parsed);
+  if (!usable.ok) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: usable.reason
+    };
+  }
+  return { status: "present", file, path, body: usable.body };
+}
+async function listUniqueErrorFallbackPaths(directories) {
+  const found = [];
+  for (const dir of directories) {
+    let names;
+    try {
+      names = await readdir4(dir);
+    } catch (error) {
+      if (isMissingPathError2(error)) continue;
+      throw error;
+    }
+    for (const name of names.sort((a, b) => a.localeCompare(b))) {
+      if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
+      found.push(join18(dir, name));
+    }
+  }
+  return found;
+}
+function runIdFromRunDirectory(runDirectory) {
+  const name = basename6(runDirectory);
+  const at = name.lastIndexOf("@");
+  if (at <= 0 || at === name.length - 1) return void 0;
+  return name.slice(0, at);
+}
+function presentUniqueFallbackBoundToRun(body, expectedRunId) {
+  if (expectedRunId === void 0) return false;
+  return typeof body.runId === "string" && body.runId === expectedRunId;
+}
+async function readRunTerminalArtifact(runDirectory) {
+  const artifactsDir = join18(runDirectory, "artifacts");
+  for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
+    const path = join18(artifactsDir, file);
+    const read3 = await readTerminalArtifactAtPath(path, file);
+    if (read3 !== void 0) return read3;
+  }
+  for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
+    const path = join18(runDirectory, relative3);
+    const read3 = await readTerminalArtifactAtPath(path, "error.json");
+    if (read3 !== void 0) return read3;
+  }
+  for (const path of await listUniqueErrorFallbackPaths([artifactsDir, runDirectory])) {
+    const read3 = await readTerminalArtifactAtPath(path, "error.json");
+    if (read3 !== void 0) return read3;
+  }
+  const expectedRunId = runIdFromRunDirectory(runDirectory);
+  for (const path of await listUniqueErrorFallbackPaths([dirname9(runDirectory)])) {
+    const read3 = await readTerminalArtifactAtPath(path, "error.json");
+    if (read3 === void 0) continue;
+    if (read3.status === "present") {
+      if (!presentUniqueFallbackBoundToRun(read3.body, expectedRunId)) continue;
+      return read3;
+    }
+  }
+  return { status: "absent" };
+}
+var RUN_TERMINAL_ARTIFACT_FILES, RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS, UNIQUE_ERROR_FALLBACK_NAME;
+var init_run_terminal_artifacts = __esm({
+  "src/run-terminal-artifacts.ts"() {
     "use strict";
-    RECEIPT_DELIVERY_TURN_LIMIT = 2;
-    NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+    RUN_TERMINAL_ARTIFACT_FILES = [
+      "report.json",
+      "error.json",
+      "audit-incomplete.json"
+    ];
+    RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
+      "artifacts/error.settlement.json",
+      "error.settlement.json"
+    ];
+    UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
   }
 });
 
-// src/upstream-error-testimony.ts
-function isNonSuccessHttpStatus(status) {
-  return typeof status === "number" && (status < 200 || status >= 300);
+// src/submission-ledger.ts
+function latestUserAttemptId(entries) {
+  const ordered = [...entries];
+  for (let index = ordered.length - 1; index >= 0; index -= 1) {
+    const entry = ordered[index];
+    if (entry?.message?.role === "user" && typeof entry.id === "string") return entry.id;
+  }
+  return void 0;
 }
-function hasUpstreamErrorTestimony(input) {
-  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
-  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
+function isAcceptedProjection(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const candidate = value;
+  return candidate.kind === "accepted" && typeof candidate.role === "string" && typeof candidate.status === "string" && typeof candidate.decisiveFacts === "object" && candidate.decisiveFacts !== null;
 }
-function projectConfirmedRemotePayload(input) {
+function isAuditEscalationTerminalProjection(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const candidate = value;
+  return candidate.kind === "audit_escalation" && typeof candidate.role === "string" && candidate.status === "audit_escalation" && typeof candidate.decisiveFacts === "object" && candidate.decisiveFacts !== null;
+}
+function submissionRecordFile(cwd, runId, home) {
+  const ledgerHome = resolveActivationLedgerHome(home);
+  return resolveSitianRecordPathInLedger({
+    level: "event",
+    kind: "candidate",
+    subject: { runId },
+    cwd
+  }, ledgerHome).recordFile;
+}
+async function readOwnedSubmissionRecords(cwd, runId, home) {
+  const file = submissionRecordFile(cwd, runId, home);
+  const { records: records2 } = await readSitianRecords(file);
   return {
-    ...input.body === void 0 ? {} : { body: input.body },
-    ...input.code === void 0 ? {} : { code: input.code },
-    ...input.errno === void 0 ? {} : { errno: input.errno }
+    file,
+    owned: records2.filter((record4) => typeof record4.subject === "object" && record4.subject !== null && record4.subject.runId === runId)
   };
 }
-var init_upstream_error_testimony = __esm({
-  "src/upstream-error-testimony.ts"() {
-    "use strict";
+async function readSealedSubmission(cwd, runId, home) {
+  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
+  for (let index = owned.length - 1; index >= 0; index -= 1) {
+    const record4 = owned[index];
+    if (record4?.kind === "post-seal-anomaly") return void 0;
+    if (record4?.kind !== "sealed") continue;
+    const payload = record4.payload;
+    if (payload?.type === "sealed" && isAcceptedProjection(payload.projection)) return payload.projection;
   }
-});
-
-// src/evidence-child-executor.ts
-var init_evidence_child_executor = __esm({
-  "src/evidence-child-executor.ts"() {
+  return void 0;
+}
+async function readAuditEscalationSubmission(cwd, runId, home, currentAttemptId) {
+  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
+  const latestAttemptId = currentAttemptId ?? owned.at(-1)?.subject?.attemptId;
+  if (typeof latestAttemptId !== "string") return void 0;
+  for (let index = owned.length - 1; index >= 0; index -= 1) {
+    const record4 = owned[index];
+    if (record4?.subject?.attemptId !== latestAttemptId) continue;
+    if (record4?.kind !== "outcome") continue;
+    const payload = record4.payload;
+    if (payload?.type !== "outcome") continue;
+    if (payload.outcome !== "audit-escalation") return void 0;
+    if (isAuditEscalationTerminalProjection(payload.projection)) return payload.projection;
+  }
+  return void 0;
+}
+async function readLatestSubmissionOutcome(cwd, runId, home) {
+  const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
+  for (let index = owned.length - 1; index >= 0; index -= 1) {
+    const record4 = owned[index];
+    if (record4?.kind !== "outcome") continue;
+    const payload = record4.payload;
+    if (payload?.type === "outcome" && typeof payload.outcome === "string") {
+      return payload;
+    }
+  }
+  return void 0;
+}
+var init_submission_ledger = __esm({
+  "src/submission-ledger.ts"() {
     "use strict";
-    init_compliance_transport();
-    init_auditor_dossier_tool();
+    init_activation_ledger_topology();
+    init_audit_escalation();
+    init_gatekeeper_role();
+    init_terminating_tools();
+    init_run_terminal_artifacts();
     init_sitian_facade();
-    init_engine_detour_tool();
-    init_engine_detour();
-    init_engine_material();
-    init_session_opening_materials();
-    init_config2();
-    init_institutional_resolution();
-    init_navigator_session_contracts();
-    init_receipt_delivery_policy();
-    init_typed_provider_http();
-    init_upstream_error_testimony();
+    init_submission_correctable_error();
+    init_terminating_infrastructure();
   }
 });
 
-// src/compliance-transport.ts
-function createComplianceDecisionTool(name, description) {
-  return { name, description, parameters: complianceDecisionSchema, async execute(_id, params) {
-    return { content: [{ type: "text", text: "\u5BA1\u8BA1\u51B3\u8BAE\u5DF2\u6536" }], details: params, terminate: true };
-  } };
-}
-var nonblank2, decisionGateSchema, complianceDecisionSchema, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
-var init_compliance_transport = __esm({
-  "src/compliance-transport.ts"() {
+// src/auditor-soul.ts
+var init_auditor_soul = __esm({
+  "src/auditor-soul.ts"() {
     "use strict";
-    init_build();
-    init_evidence_child_executor();
-    init_auditor_dossier_tool();
-    init_sitian_facade();
-    nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
-    decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
-    complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "pass | revise | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), violations: typebox_exports.Array(nonblank2, { description: "\u89C2\u5BDF\u5230\u7684\u5408\u89C4\u8FDD\u89C4" }), conflicts: typebox_exports.Array(nonblank2, { description: "\u672A\u51B3\u6743\u5A01\u6216\u6267\u884C\u51B2\u7A81" }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "\u5347\u7EA7\u95EE\u9898\u4E0E\u53EF\u9009\u9009\u9879" }) }, { additionalProperties: true, required: [] });
-    AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding";
-    AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure";
+    init_session_opening_materials();
   }
 });
 
@@ -23455,15 +23588,25 @@ async function sealedLedgerOutcome(admitted) {
 async function hasSealedAcceptedProjection(admitted) {
   return await sealedLedgerOutcome(admitted) !== void 0;
 }
-async function auditEscalationLedgerOutcome(admitted, role) {
+async function auditEscalationLedgerOutcome(admitted, role, authority) {
+  let currentAttemptId;
+  if (role === "coder" || role === "fixer") {
+    const entries = await readBoundSessionEntries(coordinatesFromAdmitted(authority, admitted).sessionFile);
+    currentAttemptId = latestUserAttemptId(entries);
+  }
   const projection = await readAuditEscalationSubmission(
     admitted.projectRoot,
     admitted.runId,
-    sealedLedgerHome(admitted)
+    sealedLedgerHome(admitted),
+    currentAttemptId
   );
   if (projection?.role !== role) return void 0;
   return projection;
 }
+async function closedLedgerOutcome(admitted, role, authority) {
+  const sealed = await sealedLedgerOutcome(admitted);
+  return sealed?.role === role ? sealed : auditEscalationLedgerOutcome(admitted, role, authority);
+}
 function coordinatesFromAdmitted(authority, admitted) {
   return authority.decode(admitted.principal);
 }
@@ -24382,9 +24525,12 @@ function extractInfrastructureToolFailure(entries, spec) {
   }
   return void 0;
 }
-async function readInfrastructureToolFailure(sessionFile, spec) {
+async function readInfrastructureToolFailure(sessionFile, spec, options = {}) {
   try {
-    const entries = await readBoundSessionEntries(sessionFile);
+    let entries = await readBoundSessionEntries(sessionFile);
+    if (options.currentAttemptOnly === true) {
+      entries = entries.slice(currentAttemptStartIndex(entries));
+    }
     return extractInfrastructureToolFailure(entries, spec);
   } catch {
     return void 0;
@@ -24393,7 +24539,10 @@ async function readInfrastructureToolFailure(sessionFile, spec) {
 async function readCollectorInfrastructureFailure(sessionFile) {
   return readInfrastructureToolFailure(
     sessionFile,
-    COLLECTOR_INFRASTRUCTURE_FAILURE_SPEC
+    COLLECTOR_INFRASTRUCTURE_FAILURE_SPEC,
+    // Multi-attempt resume: only a current-attempt infrastructure failure
+    // may preempt the current failure cause (#633).
+    { currentAttemptOnly: true }
   );
 }
 async function readEngineDetourInfrastructureFailure(sessionFile) {
@@ -24779,7 +24928,7 @@ async function readLawfulJudgeRoleOutcome(admitted, authority) {
       decisiveFacts: judgeDecisiveFacts(details, sealed.status)
     };
   }
-  return auditEscalationLedgerOutcome(admitted, "judge");
+  return auditEscalationLedgerOutcome(admitted, "judge", authority);
 }
 async function hasLawfulJudgeTerminalResult(admitted, authority) {
   try {
@@ -24814,24 +24963,28 @@ async function trySettleJudgeTerminalResult(admitted, authority) {
   return settleLawfulJudgeTerminalResult(admitted, authority);
 }
 async function settleLawfulCoderTerminalResult(admitted, authority, options = {}) {
-  const sealed = await sealedLedgerOutcome(admitted);
-  if (sealed?.role !== "coder") return void 0;
+  const ledgerOutcome = await closedLedgerOutcome(admitted, "coder", authority);
+  if (ledgerOutcome === void 0) return void 0;
+  let roleOutcome = ledgerOutcome;
+  let output;
+  if (ledgerOutcome.kind === "accepted") {
+    output = validateAcceptedCoderDetails(ledgerOutcome.decisiveFacts);
+    roleOutcome = {
+      kind: "accepted",
+      role: "coder",
+      status: ledgerOutcome.status,
+      decisiveFacts: coderDecisiveFacts(output)
+    };
+  }
   const coordinates = coordinatesFromAdmitted(authority, admitted);
   const entries = await readLawfulSettlementEntries(coordinates.sessionFile) ?? [];
-  const output = validateAcceptedCoderDetails(sealed.decisiveFacts);
-  const roleOutcome = {
-    kind: "accepted",
-    role: "coder",
-    status: sealed.status,
-    decisiveFacts: coderDecisiveFacts(output)
-  };
   const navigator = extractNavigatorFact(entries);
   const artifacts = await publishCoderArtifacts(
     admitted,
     roleOutcome,
     coordinates,
     {
-      coderOutput: output,
+      ...output === void 0 ? {} : { coderOutput: output },
       ...options.methodProvenance === void 0 ? {} : { methodProvenance: options.methodProvenance }
     }
   );
@@ -24930,18 +25083,22 @@ async function publishFixerArtifacts(admitted, roleOutcome, coordinates, options
   ];
 }
 async function settleLawfulFixerTerminalResult(admitted, authority, options) {
-  const sealed = await sealedLedgerOutcome(admitted);
-  if (sealed?.role !== "fixer") return void 0;
+  const ledgerOutcome = await closedLedgerOutcome(admitted, "fixer", authority);
+  if (ledgerOutcome === void 0) return void 0;
+  let roleOutcome = ledgerOutcome;
+  let output;
+  if (ledgerOutcome.kind === "accepted") {
+    output = validateFixerOutput(ledgerOutcome.decisiveFacts);
+    roleOutcome = {
+      kind: "accepted",
+      role: "fixer",
+      status: ledgerOutcome.status,
+      decisiveFacts: fixerDecisiveFacts(output)
+    };
+  }
   const coordinates = coordinatesFromAdmitted(authority, admitted);
   const { sessionDirectory, sessionFile } = coordinates;
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
-  const output = validateFixerOutput(sealed.decisiveFacts);
-  const roleOutcome = {
-    kind: "accepted",
-    role: "fixer",
-    status: sealed.status,
-    decisiveFacts: fixerDecisiveFacts(output)
-  };
   const navigator = extractNavigatorFact(entries);
   const methodInvocations = extractFixerMethodInvocations(entries, {
     allowedLocations: [
@@ -24954,7 +25111,7 @@ async function settleLawfulFixerTerminalResult(admitted, authority, options) {
     roleOutcome,
     coordinates,
     {
-      fixerOutput: output,
+      ...output === void 0 ? {} : { fixerOutput: output },
       methodProvenance: options.methodProvenance,
       methodInvocations
     }
@@ -25025,7 +25182,8 @@ async function settleLawfulCollectorTerminalResult(admitted, authority) {
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   const roleOutcome = await sealedLedgerOutcome(admitted);
   if (roleOutcome?.role !== "collector") {
-    for (let index = entries.length - 1; index >= 0; index -= 1) {
+    const scanStart = currentAttemptStartIndex(entries);
+    for (let index = entries.length - 1; index >= scanStart; index -= 1) {
       const message = entries[index]?.message;
       if (message?.role !== "toolResult") continue;
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
@@ -25132,7 +25290,7 @@ async function settleLawfulDoctorTerminalResult(admitted, authority) {
   const { sessionDirectory, sessionFile } = coordinates;
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   if (sealed?.role !== "doctor") {
-    const escalation = await auditEscalationLedgerOutcome(admitted, "doctor");
+    const escalation = await auditEscalationLedgerOutcome(admitted, "doctor", authority);
     if (escalation === void 0) return void 0;
     const artifacts2 = await publishDoctorArtifacts(admitted, escalation, coordinates);
     return withOptionalGateProjection(
@@ -25192,13 +25350,25 @@ function currentAttemptStartIndex(entries) {
   }
   return 0;
 }
-async function settleLawfulOneShotAcceptedTerminalResult(admitted, authority, spec) {
+async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec) {
   const coordinates = coordinatesFromAdmitted(authority, admitted);
   const { sessionDirectory, sessionFile } = coordinates;
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
-  const roleOutcome = await sealedLedgerOutcome(admitted);
+  const roleOutcome = await closedLedgerOutcome(admitted, spec.role, authority);
+  if (roleOutcome?.kind === "audit_escalation") {
+    const navigator2 = extractNavigatorFact(entries);
+    return withOptionalGateProjection(
+      {
+        roleOutcome,
+        navigator: navigator2,
+        artifacts: [],
+        runId: admitted.runId
+      },
+      sessionDirectory
+    );
+  }
   if (roleOutcome?.role !== spec.role) {
-    const scanStart = spec.residualScanCurrentAttemptOnly === true ? currentAttemptStartIndex(entries) : 0;
+    const scanStart = currentAttemptStartIndex(entries);
     let acceptedNonUsable;
     for (let index = entries.length - 1; index >= scanStart; index -= 1) {
       const message = entries[index]?.message;
@@ -25265,10 +25435,10 @@ function tryAcceptWithValidator(validate) {
   };
 }
 async function settleLawfulNotaryTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "notary",
     toolName: NOTARY_OUTPUT_TOOL_NAME,
-    nonUsableDiagnostic: "\u7B26\u5B9D\u90CE\u56DE\u6267\u65E0\u663E\u5F0F pass/bounce",
+    nonUsableDiagnostic: "\u7B26\u5B9D\u90CE\u56DE\u6267\u65E0\u663E\u5F0F pass/bounce/escalate",
     tryAcceptDetails: tryAcceptWithValidator(validateRecordedNotaryOutput),
     projectAccepted: (sealed) => {
       const output = validateRecordedNotaryOutput(sealed.decisiveFacts);
@@ -25286,11 +25456,10 @@ async function trySettleNotaryTerminalResult(admitted, authority) {
   return settleLawfulNotaryTerminalResult(admitted, authority);
 }
 async function settleLawfulCountersignTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "countersign",
     toolName: COUNTERSIGN_OUTPUT_TOOL_NAME,
     nonUsableDiagnostic: "\u7ED9\u4E8B\u4E2D\u56DE\u6267\u65E0\u663E\u5F0F \u7F72/\u5C01\u9A73/\u4E0A\u5448",
-    residualScanCurrentAttemptOnly: true,
     tryAcceptDetails: tryAcceptWithValidator(validateRecordedCountersignOutput),
     projectAccepted: (sealed) => {
       const verdict = validateRecordedCountersignOutput(sealed.decisiveFacts);
@@ -25308,11 +25477,10 @@ async function trySettleCountersignTerminalResult(admitted, authority) {
   return settleLawfulCountersignTerminalResult(admitted, authority);
 }
 async function settleLawfulGleanerLeftTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "gleaner-left",
     toolName: GLEANER_LEFT_OUTPUT_TOOL_NAME,
     nonUsableDiagnostic: "\u5DE6\u62FE\u9057\u56DE\u6267\u65E0\u663E\u5F0F completed",
-    residualScanCurrentAttemptOnly: true,
     tryAcceptDetails: tryAcceptWithValidator(validateRecordedGleanerLeftOutput),
     projectAccepted: (sealed) => {
       const output = validateRecordedGleanerLeftOutput(sealed.decisiveFacts);
@@ -25330,10 +25498,10 @@ async function trySettleGleanerLeftTerminalResult(admitted, authority) {
   return settleLawfulGleanerLeftTerminalResult(admitted, authority);
 }
 async function settleLawfulInspectorTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "inspector",
     toolName: INSPECTOR_OUTPUT_TOOL_NAME,
-    nonUsableDiagnostic: "\u5BDF\u9662\u56DE\u6267\u65E0\u663E\u5F0F pass/bounce",
+    nonUsableDiagnostic: "\u5BDF\u9662\u56DE\u6267\u65E0\u663E\u5F0F pass/bounce/escalate",
     tryAcceptDetails: tryAcceptWithValidator(validateRecordedInspectorOutput),
     projectAccepted: (sealed) => {
       const output = validateRecordedInspectorOutput(sealed.decisiveFacts);
@@ -25351,7 +25519,7 @@ async function trySettleInspectorTerminalResult(admitted, authority) {
   return settleLawfulInspectorTerminalResult(admitted, authority);
 }
 async function settleLawfulGatekeeperTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "gatekeeper",
     toolName: GATEKEEPER_OUTPUT_TOOL_NAME,
     nonUsableDiagnostic: "\u95E8\u4E0B\u7701\u51B3\u8BAE\u65E0\u663E\u5F0F dispatch/pass",
@@ -25372,7 +25540,7 @@ async function trySettleGatekeeperTerminalResult(admitted, authority) {
   return settleLawfulGatekeeperTerminalResult(admitted, authority);
 }
 async function settleLawfulNavigatorTerminalResult(admitted, authority) {
-  return settleLawfulOneShotAcceptedTerminalResult(admitted, authority, {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "navigator",
     toolName: NAVIGATOR_OUTPUT_TOOL_NAME,
     nonUsableDiagnostic: "\u6E38\u5955\u4F7F\u56DE\u6267\u65E0\u663E\u5F0F\u8DEF\u7EBF\u5EFA\u8BAE",
@@ -26767,6 +26935,45 @@ async function dispatchPostAdmissionTurn(input) {
     await lease.release();
   }
 }
+function resumeTurnRequestProjectionOptions(admitted, request, env) {
+  return {
+    packageRoot: env.packageRoot,
+    home: env.home,
+    agentDir: env.agentDir,
+    ...env.model === void 0 ? {} : { model: env.model },
+    ...env.engine === void 0 ? {} : { engine: env.engine },
+    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
+    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
+    continuation: {
+      kind: "resume",
+      prompt: buildResumeContinuationPrompt({
+        packageRoot: env.packageRoot,
+        ...env.engine === void 0 ? {} : { engine: env.engine },
+        ...request.message === void 0 ? {} : { message: request.message }
+      })
+    }
+  };
+}
+async function runPostAdmissionSeatResume(input) {
+  let loaded;
+  try {
+    loaded = await input.load();
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, input.io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  return await runPostAdmissionManualResume({
+    admitted: loaded.admitted,
+    env: input.env,
+    io: input.io,
+    request: input.buildTurnRequest(loaded.admitted),
+    adapters: input.adapters,
+    ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
+  });
+}
 async function runPostAdmissionOneShot(input) {
   const { admitted, env, io, request, adapters, effectiveEngine } = input;
   let lease;
@@ -26898,6 +27105,8 @@ async function runPostAdmissionManualResume(input) {
 var init_post_admission = __esm({
   "src/public-cli/post-admission.ts"() {
     "use strict";
+    init_run_lifecycle();
+    init_cli_errors();
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
@@ -27060,23 +27269,10 @@ async function runPublicCoderResume(request, env, io) {
       );
     }
   }
-  const turnRequest = buildCoderTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
+  const turnRequest = buildCoderTurnRequest(
+    admitted,
+    resumeTurnRequestProjectionOptions(admitted, request, env)
+  );
   return await runPostAdmissionManualResume({
     admitted,
     env,
@@ -27119,6 +27315,24 @@ function instructionSeatAdapters() {
     shouldPresentSettled: () => true
   };
 }
+async function runPublicInstructionSeatResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableInstructionSeatRun(
+      env.home,
+      request.runId,
+      env.principalAuthority
+    ),
+    buildTurnRequest: (admitted) => buildInstructionSeatTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
+    adapters: instructionSeatAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
 async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
   let admitted;
   try {
@@ -27241,19 +27455,40 @@ async function runPublicCollector(argv, env, io, parseCollectorArgv2) {
     admitted,
     env,
     io,
-    request: turnRequest,
-    adapters: {
-      trySettle: (admitted2, authority) => trySettleCollectorTerminalResult(admitted2, authority),
-      shouldPresentSettled: () => true,
-      resolveRunnerKnownFailure: async ({ result: result2, sessionFile }) => {
-        const infrastructureFailure = await readCollectorInfrastructureFailure(sessionFile);
-        return result2.knownFailure ?? (infrastructureFailure === void 0 ? void 0 : {
-          cause: infrastructureFailure.cause,
-          diagnostic: infrastructureFailure.diagnostic,
-          ...infrastructureFailure.identity === void 0 ? {} : { identity: infrastructureFailure.identity }
-        });
-      }
-    },
+    request: turnRequest,
+    adapters: collectorAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+function collectorAdapters() {
+  return {
+    trySettle: (admitted, authority) => trySettleCollectorTerminalResult(admitted, authority),
+    shouldPresentSettled: () => true,
+    resolveRunnerKnownFailure: async ({ result: result2, sessionFile }) => {
+      const infrastructureFailure = await readCollectorInfrastructureFailure(sessionFile);
+      return result2.knownFailure ?? (infrastructureFailure === void 0 ? void 0 : {
+        cause: infrastructureFailure.cause,
+        diagnostic: infrastructureFailure.diagnostic,
+        ...infrastructureFailure.identity === void 0 ? {} : { identity: infrastructureFailure.identity }
+      });
+    }
+  };
+}
+async function runPublicCollectorResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableCollectorRun(
+      env.home,
+      request.runId,
+      env.principalAuthority
+    ),
+    buildTurnRequest: (admitted) => buildCollectorTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
+    adapters: collectorAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -27444,8 +27679,11 @@ function readCcSessionBlocks(options) {
         }
         if (!isRecord15(parsed)) continue;
         const type = typeof parsed.type === "string" ? parsed.type : "";
-        if (type !== "user" && type !== "assistant") continue;
-        const transcript = messageText(parsed.message ?? parsed);
+        const queuedCommand = type === "attachment" && isRecord15(parsed.attachment) && parsed.attachment.type === "queued_command" && isRecord15(parsed.attachment.origin) && parsed.attachment.origin.kind === "human" && typeof parsed.attachment.prompt === "string" ? parsed.attachment.prompt : void 0;
+        if (type !== "user" && type !== "assistant" && queuedCommand === void 0) {
+          continue;
+        }
+        const transcript = queuedCommand ?? messageText(parsed.message ?? parsed);
         if (transcript.trim() === "") continue;
         const entryId = typeof parsed.uuid === "string" ? parsed.uuid : typeof parsed.id === "string" ? parsed.id : `${basename7(sessionFile)}:${lineNo + 1}`;
         const timestamp2 = typeof parsed.timestamp === "string" ? parsed.timestamp : (/* @__PURE__ */ new Date(0)).toISOString();
@@ -27455,7 +27693,7 @@ function readCcSessionBlocks(options) {
           sourceRef: { sessionFile, entryId },
           transcript,
           timestamp: timestamp2,
-          isUserTurn: type === "user",
+          isUserTurn: type === "user" || queuedCommand !== void 0,
           isNotification: notification
         });
       }
@@ -28782,43 +29020,19 @@ function countersignAdapters(options) {
   };
 }
 async function runPublicCountersignResume(request, env, io) {
-  let loaded;
-  try {
-    loaded = await loadResumableCountersignRun(
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableCountersignRun(
       env.home,
       request.runId,
       env.principalAuthority
-    );
-  } catch (error) {
-    if (error instanceof CliUsageError) {
-      presentStructuralRejection(error, io);
-      return { exitCode: 2 };
-    }
-    throw error;
-  }
-  const { admitted } = loaded;
-  const turnRequest = buildCountersignTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
-  return await runPostAdmissionManualResume({
-    admitted,
-    env,
-    io,
-    request: turnRequest,
+    ),
+    buildTurnRequest: (admitted) => buildCountersignTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
     adapters: countersignAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
@@ -28999,43 +29213,19 @@ function gleanerLeftAdapters() {
   };
 }
 async function runPublicGleanerLeftResume(request, env, io) {
-  let loaded;
-  try {
-    loaded = await loadResumableGleanerLeftRun(
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableGleanerLeftRun(
       env.home,
       request.runId,
       env.principalAuthority
-    );
-  } catch (error) {
-    if (error instanceof CliUsageError) {
-      presentStructuralRejection(error, io);
-      return { exitCode: 2 };
-    }
-    throw error;
-  }
-  const { admitted } = loaded;
-  const turnRequest = buildGleanerLeftTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
-  return await runPostAdmissionManualResume({
-    admitted,
-    env,
-    io,
-    request: turnRequest,
+    ),
+    buildTurnRequest: (admitted) => buildGleanerLeftTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
     adapters: gleanerLeftAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
@@ -29105,10 +29295,31 @@ async function runPublicDoctor(argv, env, io, parseDoctorArgv2) {
     env,
     io,
     request: turnRequest,
-    adapters: {
-      trySettle: (admitted2, authority) => trySettleDoctorTerminalResult(admitted2, authority),
-      shouldPresentSettled: (terminal) => isLawfulTypedTerminalOutcome(terminal.roleOutcome)
-    },
+    adapters: doctorAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+function doctorAdapters() {
+  return {
+    trySettle: (admitted, authority) => trySettleDoctorTerminalResult(admitted, authority),
+    shouldPresentSettled: (terminal) => isLawfulTypedTerminalOutcome(terminal.roleOutcome)
+  };
+}
+async function runPublicDoctorResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableDoctorRun(
+      env.home,
+      request.runId,
+      env.principalAuthority
+    ),
+    buildTurnRequest: (admitted) => buildDoctorTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
+    adapters: doctorAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -29278,23 +29489,10 @@ async function runPublicFixerResume(request, env, io) {
       io
     );
   }
-  const turnRequest = buildFixerTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
+  const turnRequest = buildFixerTurnRequest(
+    admitted,
+    resumeTurnRequestProjectionOptions(admitted, request, env)
+  );
   return await runPostAdmissionManualResume({
     admitted,
     env,
@@ -29374,11 +29572,39 @@ async function runPublicNotary(argv, env, io, parseNotaryArgv2) {
     env,
     io,
     request: turnRequest,
-    adapters: {
-      trySettle: (admitted2, authority) => trySettleNotaryTerminalResult(admitted2, authority),
-      // Accepted receipts and failure terminals both present via shared path.
-      shouldPresentSettled: () => true
+    adapters: notaryAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+function notaryAdapters() {
+  return {
+    trySettle: (admitted, authority) => trySettleNotaryTerminalResult(admitted, authority),
+    // Accepted receipts and failure terminals both present via shared path.
+    shouldPresentSettled: () => true
+  };
+}
+async function runPublicNotaryResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => {
+      if (request.message !== void 0) {
+        throw new CliUsageError(
+          "notary rejects caller prompt/instruction; only zero caller-prompt continuation admitted"
+        );
+      }
+      return loadResumableNotaryRun(
+        env.home,
+        request.runId,
+        env.principalAuthority
+      );
     },
+    buildTurnRequest: (admitted) => buildNotaryTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
+    adapters: notaryAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -29454,10 +29680,31 @@ async function runPublicInspector(argv, env, io, parseInspectorArgv2) {
     env,
     io,
     request: turnRequest,
-    adapters: {
-      trySettle: (admitted2, authority) => trySettleInspectorTerminalResult(admitted2, authority),
-      shouldPresentSettled: () => true
-    },
+    adapters: inspectorAdapters(),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+function inspectorAdapters() {
+  return {
+    trySettle: (admitted, authority) => trySettleInspectorTerminalResult(admitted, authority),
+    shouldPresentSettled: () => true
+  };
+}
+async function runPublicInspectorResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: () => loadResumableInspectorRun(
+      env.home,
+      request.runId,
+      env.principalAuthority
+    ),
+    buildTurnRequest: (admitted) => buildInspectorTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
+    adapters: inspectorAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -29559,39 +29806,15 @@ async function runPublicJudge(argv, env, io, parseJudgeArgv2) {
   });
 }
 async function runPublicResume(request, env, io) {
-  let loaded;
-  try {
-    loaded = await loadResumableJudgeRun(env.home, request.runId, env.principalAuthority);
-  } catch (error) {
-    if (error instanceof CliUsageError) {
-      presentStructuralRejection(error, io);
-      return { exitCode: 2 };
-    }
-    throw error;
-  }
-  const { admitted } = loaded;
-  const turnRequest = buildJudgeTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
-  return await runPostAdmissionManualResume({
-    admitted,
+  return await runPostAdmissionSeatResume({
+    request,
     env,
     io,
-    request: turnRequest,
+    load: () => loadResumableJudgeRun(env.home, request.runId, env.principalAuthority),
+    buildTurnRequest: (admitted) => buildJudgeTurnRequest(
+      admitted,
+      resumeTurnRequestProjectionOptions(admitted, request, env)
+    ),
     adapters: judgeAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
@@ -29870,23 +30093,10 @@ async function runPublicMergerResume(request, env, io) {
       io
     );
   }
-  const turnRequest = buildMergerTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
+  const turnRequest = buildMergerTurnRequest(
+    admitted,
+    resumeTurnRequestProjectionOptions(admitted, request, env)
+  );
   return await runPostAdmissionManualResume({
     admitted,
     env,
@@ -30070,23 +30280,10 @@ async function runPublicReviewerResume(request, env, io) {
       io
     );
   }
-  const turnRequest = buildReviewerTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
-    continuation: {
-      kind: "resume",
-      prompt: buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...env.engine === void 0 ? {} : { engine: env.engine },
-        ...request.message === void 0 ? {} : { message: request.message }
-      })
-    }
-  });
+  const turnRequest = buildReviewerTurnRequest(
+    admitted,
+    resumeTurnRequestProjectionOptions(admitted, request, env)
+  );
   return await runPostAdmissionManualResume({
     admitted,
     env,
@@ -32819,118 +33016,17 @@ async function runAkRole(argv, env) {
       const credentials = env.credentials ?? await loadCredentialProviders(agentDir);
       const resumeRequest = parseResumeRequest(parsed.args);
       const resumeRole = await peekRoleRunRole(home, resumeRequest.runId);
-      if (resumeRole !== void 0 && ONE_SHOT_ROLES.includes(resumeRole)) {
-        throw new CliUsageError(
-          `${resumeRole} role runs are one-shot and cannot be resumed`
-        );
-      }
-      const resumeSeatRole = resumeRole === "coder" ? "coder" : resumeRole === "fixer" ? "fixer" : resumeRole === "reviewer" ? "reviewer" : resumeRole === "merger" ? "merger" : resumeRole === "countersign" ? "countersign" : resumeRole === "gleaner-left" ? "gleaner-left" : "judge";
+      const dispatch = resumeRole === void 0 ? RESUME_SEAT_DISPATCH.judge : RESUME_SEAT_DISPATCH[resumeRole];
       const seat = resolveEffectiveSeat(
         config,
-        resumeSeatRole,
+        dispatch.seat,
         credentials,
         invocationFromParsed(parsed)
       );
-      if (resumeRole === "coder") {
-        const result3 = await runPublicCoderResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "coder",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      if (resumeRole === "fixer") {
-        const result3 = await runPublicFixerResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "fixer",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      if (resumeRole === "reviewer") {
-        const result3 = await runPublicReviewerResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "reviewer",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      if (resumeRole === "merger") {
-        const result3 = await runPublicMergerResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "merger",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      if (resumeRole === "countersign") {
-        const result3 = await runPublicCountersignResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "countersign",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      if (resumeRole === "gleaner-left") {
-        const result3 = await runPublicGleanerLeftResume(
-          resumeRequest,
-          createRoleEnvironment(env, {
-            role: "gleaner-left",
-            home,
-            agentDir,
-            cwd,
-            credentials,
-            seat,
-            config
-          }),
-          io
-        );
-        return cliResultFromRoleRun(result3);
-      }
-      const result2 = await runPublicResume(
+      const result2 = await dispatch.run(
         resumeRequest,
         createRoleEnvironment(env, {
-          role: "judge",
+          role: dispatch.seat,
           home,
           agentDir,
           cwd,
@@ -33239,7 +33335,7 @@ async function runAkRole(argv, env) {
     return { exitCode: 1 };
   }
 }
-var PUBLIC_ROLE_ARGV, PUBLIC_GLOBAL_OPTIONS, HostSelectionError, THINKING_LEVELS2;
+var RESUME_SEAT_DISPATCH, PUBLIC_ROLE_ARGV, PUBLIC_GLOBAL_OPTIONS, HostSelectionError, THINKING_LEVELS2;
 var init_cli = __esm({
   "src/public-cli/cli.ts"() {
     "use strict";
@@ -33259,7 +33355,6 @@ var init_cli = __esm({
     init_collector_run();
     init_countersign_run();
     init_gleaner_left_run();
-    init_packaged_role_registry();
     init_doctor_run();
     init_fixer_run();
     init_notary_run();
@@ -33273,6 +33368,21 @@ var init_cli = __esm({
     init_settlement();
     init_role_turn_host();
     init_cli_errors();
+    RESUME_SEAT_DISPATCH = {
+      judge: { seat: "judge", run: runPublicResume },
+      coder: { seat: "coder", run: runPublicCoderResume },
+      fixer: { seat: "fixer", run: runPublicFixerResume },
+      reviewer: { seat: "reviewer", run: runPublicReviewerResume },
+      merger: { seat: "merger", run: runPublicMergerResume },
+      countersign: { seat: "countersign", run: runPublicCountersignResume },
+      "gleaner-left": { seat: "gleaner-left", run: runPublicGleanerLeftResume },
+      collector: { seat: "collector", run: runPublicCollectorResume },
+      doctor: { seat: "doctor", run: runPublicDoctorResume },
+      notary: { seat: "notary", run: runPublicNotaryResume },
+      inspector: { seat: "inspector", run: runPublicInspectorResume },
+      gatekeeper: { seat: "gatekeeper", run: runPublicInstructionSeatResume },
+      navigator: { seat: "navigator", run: runPublicInstructionSeatResume }
+    };
     PUBLIC_ROLE_ARGV = {
       judge: { parse: parseJudgeArgv, options: optionsForOwner("judge") },
       countersign: { parse: parseCountersignArgv, options: optionsForOwner("countersign") },