@akagilnc/pi-workflow-roles 0.1.3377 → 0.1.3391

package/dist/grok/production-host.js

@@ -97,7 +97,7 @@ var init_activation_ledger_git = __esm({
 // src/activation-ledger-topology.ts
 import {
   lstatSync,
-  mkdirSync,
+  mkdirSync as mkdirSync2,
   realpathSync,
   statSync
 } from "node:fs";
@@ -185,7 +185,7 @@ function assertPhysicalLedgerRoot(absoluteRoot) {
   }
   if (st === void 0) {
     try {
-      mkdirSync(absoluteRoot, { recursive: true });
+      mkdirSync2(absoluteRoot, { recursive: true });
     } catch (error) {
       if (errnoCode(error) !== "EEXIST") {
         throw new ActivationLedgerError(
@@ -261,7 +261,7 @@ function ensureRealDirectoryTree(root, targetDir) {
         );
       }
       try {
-        mkdirSync(lexicalCursor);
+        mkdirSync2(lexicalCursor);
       } catch (mkdirError) {
         if (errnoCode(mkdirError) !== "EEXIST") {
           throw new ActivationLedgerError(
@@ -376,7 +376,7 @@ __export(archivist_record_entry_exports, {
   createRecordSession: () => createRecordSession
 });
 import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync2, realpathSync as realpathSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname8, resolve as resolve6, join as join10 } from "node:path";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
@@ -397,7 +397,7 @@ function readCurrentSession(sessionDir) {
 function writeCurrentSession(sessionDir, sessionFile) {
   const ledger = join10(sessionDir, CURRENT_SESSION_LEDGER);
   try {
-    writeFileSync2(ledger, `${JSON.stringify({ sessionFile })}
+    writeFileSync3(ledger, `${JSON.stringify({ sessionFile })}
 `, { flag: "wx" });
   } catch (error) {
     throw new ActivationLedgerError(
@@ -477,7 +477,7 @@ function createRecordSession(options) {
     if (file !== void 0 && !existsSync5(file)) {
       const header = session.getHeader();
       if (header !== null && header.type === "session") {
-        writeFileSync2(file, `${JSON.stringify(header)}
+        writeFileSync3(file, `${JSON.stringify(header)}
 `, { flag: "wx" });
         session.setSessionFile(file);
       }
@@ -1771,15 +1771,47 @@ ${marker}
 }
 
 // src/auditor-dossier-tool.ts
+import { mkdirSync, writeFileSync } from "node:fs";
 import { dirname as dirname2, join, resolve as resolve2 } from "node:path";
 import { Type } from "typebox";
 var AUDITOR_DOSSIER_TOOL_NAME = "ak_get_run_dossier";
+var GATE_SUBMISSION_CANDIDATE_FILE = "gate-submission-candidate.json";
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 function auditorRunDirectory(context) {
   const sessionFile = context.sessionManager?.getSessionFile?.();
   if (sessionFile === void 0) return void 0;
   return resolve2(dirname2(dirname2(sessionFile)));
 }
-function createAuditorDossierTool(runDirectory) {
+function readLatestToolCallLeaf(context) {
+  const entries = [...context.sessionManager?.getEntries?.() ?? []];
+  for (let i = entries.length - 1; i >= 0; i--) {
+    const entry = entries[i];
+    if (!isRecord2(entry) || entry.type !== "message" || !isRecord2(entry.message)) continue;
+    const message = entry.message;
+    if (message.role !== "assistant" || !Array.isArray(message.content)) continue;
+    for (const part of message.content) {
+      if (isRecord2(part) && part.type === "toolCall") {
+        return entry;
+      }
+    }
+  }
+  return void 0;
+}
+function gateSubmissionCandidatePath(runDirectory) {
+  return join(runDirectory, "artifacts", GATE_SUBMISSION_CANDIDATE_FILE);
+}
+function persistGateSubmissionCandidate(runDirectory, context) {
+  const leaf = readLatestToolCallLeaf(context);
+  if (leaf === void 0) return void 0;
+  const path = gateSubmissionCandidatePath(runDirectory);
+  mkdirSync(dirname2(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(leaf)}
+`, "utf8");
+  return path;
+}
+function createAuditorDossierTool(runDirectory, options) {
   return {
     name: AUDITOR_DOSSIER_TOOL_NAME,
     description: "\u5B9A\u4F4D\u672C\u5BA1\u8BA1\u5E2D\u7ED1\u5B9A\u7684 run \u5377\u5B97\u53CA\u5176\u8BC1\u636E\u5165\u53E3\u3002",
@@ -1791,12 +1823,15 @@ function createAuditorDossierTool(runDirectory) {
           details: void 0
         };
       }
+      const sessionPath = join(runDirectory, "session", "session.jsonl");
+      const submissionCandidate = options?.submissionCandidate;
       const details = {
         runDirectory,
         admittedRequest: join(runDirectory, "admitted-request.json"),
-        parentSessionCandidate: join(runDirectory, "session", "session.jsonl"),
+        parentSessionCandidate: submissionCandidate ?? sessionPath,
         attachments: join(runDirectory, "attachments"),
-        artifacts: join(runDirectory, "artifacts")
+        artifacts: join(runDirectory, "artifacts"),
+        ...submissionCandidate === void 0 ? {} : { submissionCandidate }
       };
       return {
         content: [{ type: "text", text: JSON.stringify(details) }],
@@ -1999,7 +2034,7 @@ var gatekeeperDecisionSchema = openToolObject(
 var gatekeeperOutputSchema = withInfrastructureFailureDeclaration(
   gatekeeperDecisionSchema
 );
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asStringArray(value) {
@@ -2007,7 +2042,7 @@ function asStringArray(value) {
   return value.filter((item) => typeof item === "string");
 }
 function projectLawfulGatekeeperOutput(value) {
-  if (!isRecord2(value)) return void 0;
+  if (!isRecord3(value)) return void 0;
   if (value.status === "pass") {
     return Array.isArray(value.findings) ? { status: "pass", findings: asStringArray(value.findings) } : { status: "pass" };
   }
@@ -2040,13 +2075,13 @@ var navigatorOutputSchema = withInfrastructureFailureDeclaration(
     })
   )
 );
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function projectLawfulNavigatorOutput(value) {
-  if (!isRecord3(value) || !Array.isArray(value.candidates)) return void 0;
+  if (!isRecord4(value) || !Array.isArray(value.candidates)) return void 0;
   if (value.status !== "advice") return void 0;
-  return { status: "advice", candidates: value.candidates.filter(isRecord3) };
+  return { status: "advice", candidates: value.candidates.filter(isRecord4) };
 }
 function validateRecordedNavigatorOutput(value) {
   const projected = projectLawfulNavigatorOutput(value);
@@ -2080,11 +2115,11 @@ function validateAcceptedJudgeDetails(verdict) {
 // src/package-contracts/reviewer-output.ts
 var REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
 var REVIEWER_ACCEPTED_TEXT = "\u5FA1\u53F2\u53F0\u56DE\u6267\u5DF2\u63A5\u53D7";
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function read(value, key) {
-  if (!isRecord4(value)) return void 0;
+  if (!isRecord5(value)) return void 0;
   try {
     return value[key];
   } catch {
@@ -2093,7 +2128,7 @@ function read(value, key) {
 }
 function readAmendments(output) {
   const amendments = read(output, "amendments");
-  if (!isRecord4(amendments)) return void 0;
+  if (!isRecord5(amendments)) return void 0;
   const slots = {};
   for (const axis of ["standards", "spec"]) {
     const value = read(amendments, axis);
@@ -2123,25 +2158,25 @@ function validateRuntimeReviewerReceipt(output) {
   const outcomes = read(output, "outcomes");
   const legs = read(acceptedBatch, "legs");
   if (acceptedBatch !== void 0 || construction !== void 0 || target !== void 0) {
-    if (!isRecord4(acceptedBatch) || !isRecord4(construction) || !isRecord4(target) || !Array.isArray(legs))
+    if (!isRecord5(acceptedBatch) || !isRecord5(construction) || !isRecord5(target) || !Array.isArray(legs))
       throw new Error("Incomplete Reviewer accepted-batch identity");
     const objectFormat = read(target, "objectFormat");
     const objectId = (value) => typeof value === "string" && new RegExp(objectFormat === "sha1" ? "^[0-9a-f]{40}$" : "^[0-9a-f]{64}$").test(value);
     const refs = read(target, "refs");
     const skillText = read(read(identities, "canonicalSkill"), "text");
-    if (typeof skillText !== "string" || read(construction, "recipe") !== "reviewer-common-bundle-v1" || objectFormat !== "sha1" && objectFormat !== "sha256" || !objectId(read(target, "targetHead")) || !isRecord4(refs) || Object.values(refs).some((ref) => !isRecord4(ref) || !objectId(read(ref, "objectId")) || read(ref, "peeledCommitId") !== null && !objectId(read(ref, "peeledCommitId"))))
+    if (typeof skillText !== "string" || read(construction, "recipe") !== "reviewer-common-bundle-v1" || objectFormat !== "sha1" && objectFormat !== "sha256" || !objectId(read(target, "targetHead")) || !isRecord5(refs) || Object.values(refs).some((ref) => !isRecord5(ref) || !objectId(read(ref, "objectId")) || read(ref, "peeledCommitId") !== null && !objectId(read(ref, "peeledCommitId"))))
       throw new Error("Invalid Reviewer construction or target identity");
     const expectedAxes = legs.map((leg) => read(leg, "axis"));
     if (expectedAxes[0] !== "standards" || expectedAxes.length === 2 && expectedAxes[1] !== "spec" || expectedAxes.length < 1 || expectedAxes.length > 2)
       throw new Error("Invalid Reviewer accepted-leg projection");
-    if (!isRecord4(outcomes) || !isRecord4(reports)) throw new Error("Accepted Reviewer batch lacks outcomes or reports");
+    if (!isRecord5(outcomes) || !isRecord5(reports)) throw new Error("Accepted Reviewer batch lacks outcomes or reports");
     const outcomeAxes = Object.keys(outcomes).filter((axis) => axis === "standards" || axis === "spec");
     if (outcomeAxes.length !== expectedAxes.length || outcomeAxes.some((axis, index) => axis !== expectedAxes[index]))
       throw new Error("Reviewer outcomes must exactly cover accepted legs in canonical order");
     for (const [index, axisValue] of expectedAxes.entries()) {
       const axis = axisValue;
       const outcome = read(outcomes, axis);
-      if (!isRecord4(outcome)) throw new Error("Reviewer accepted leg lacks outcome");
+      if (!isRecord5(outcome)) throw new Error("Reviewer accepted leg lacks outcome");
       const expectedPrompt = read(read(legs[index], "prompt"), "text");
       const actualPrompt = read(read(outcome, "prompt"), "text");
       if (expectedPrompt !== actualPrompt) throw new Error("Reviewer outcome prompt disagrees with accepted leg");
@@ -2457,11 +2492,11 @@ var doctorEvidenceReadSchema = Type8.Object({ evidenceId: Type8.String({ minLeng
 var DoctorSubmissionContractError = class extends Error {
   name = "DoctorSubmissionContractError";
 };
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function read2(value, key) {
-  if (!isRecord5(value)) return void 0;
+  if (!isRecord6(value)) return void 0;
   try {
     return value[key];
   } catch {
@@ -2540,7 +2575,7 @@ function validateDoctorOutput(value, patient, store) {
     const targetKey = read2(finding2, "targetKey");
     readCitations(read2(finding2, "evidenceIds"), "finding");
     const assetEvidence = read2(finding2, "assetEvidence");
-    if (!isRecord5(assetEvidence)) {
+    if (!isRecord6(assetEvidence)) {
       assertTarget(targetKey);
       continue;
     }
@@ -2708,7 +2743,7 @@ var notaryOutputSchema = withInfrastructureFailureDeclaration(
     })
   )
 );
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function asStringArray2(value) {
@@ -2716,7 +2751,7 @@ function asStringArray2(value) {
   return value.filter((item) => typeof item === "string");
 }
 function projectLawfulNotaryOutput(value) {
-  if (!isRecord6(value)) return void 0;
+  if (!isRecord7(value)) return void 0;
   const status = typeof value.status === "string" ? value.status : void 0;
   if (status === "bounce") {
     const clone = structuredClone(value);
@@ -3082,7 +3117,7 @@ import {
   existsSync as existsSync2,
   readFileSync,
   unlinkSync,
-  writeFileSync
+  writeFileSync as writeFileSync2
 } from "node:fs";
 import { basename as basename3, dirname as dirname6, join as join4, resolve as resolve5 } from "node:path";
 
@@ -3102,7 +3137,7 @@ var SitianInfrastructureError = class extends Error {
 };
 
 // src/sitian-appender.ts
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorCodeOf(error) {
@@ -3113,7 +3148,7 @@ function identityClaimPath(recordFile, identity) {
   return `${recordFile}.id-${digest}`;
 }
 function createExclusiveFile(path, contents) {
-  writeFileSync(path, contents, { encoding: "utf8", flag: "wx" });
+  writeFileSync2(path, contents, { encoding: "utf8", flag: "wx" });
 }
 function sealTornTail(recordFile) {
   if (!existsSync2(recordFile)) return;
@@ -3130,7 +3165,7 @@ function findIdentityPointer(recordFile, identity, kind, level) {
     if (!trimmed) continue;
     try {
       const parsed = JSON.parse(trimmed);
-      if (isRecord7(parsed) && parsed.identity === identity) {
+      if (isRecord8(parsed) && parsed.identity === identity) {
         return { identity, recordFile, kind, level };
       }
     } catch {
@@ -3309,7 +3344,7 @@ function appendSitianRecord(input) {
 // src/sitian-reader.ts
 import { existsSync as existsSync3 } from "node:fs";
 import { readFile as readFile3 } from "node:fs/promises";
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
@@ -3325,7 +3360,7 @@ async function readSitianRecords(recordFile) {
     if (!line2.trim()) continue;
     try {
       const parsed = JSON.parse(line2);
-      if (isRecord8(parsed)) {
+      if (isRecord9(parsed)) {
         records2.push(parsed);
       } else {
         const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
@@ -4891,7 +4926,7 @@ function resolveAuditDossier(env = process.env) {
   }
   return { status: "ok", runDirectory };
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readJudgeAuditSubjects(context) {
@@ -4899,15 +4934,15 @@ function readJudgeAuditSubjects(context) {
   let hasAssignment = false;
   let hasCandidate = false;
   for (const entry of entries) {
-    if (!isRecord9(entry) || entry.type !== "message" || !isRecord9(entry.message)) continue;
+    if (!isRecord10(entry) || entry.type !== "message" || !isRecord10(entry.message)) continue;
     const message = entry.message;
     if (message.role === "user") {
-      const text = typeof message.content === "string" ? message.content : Array.isArray(message.content) ? message.content.map((part) => isRecord9(part) && part.type === "text" && typeof part.text === "string" ? part.text : "").join("") : "";
+      const text = typeof message.content === "string" ? message.content : Array.isArray(message.content) ? message.content.map((part) => isRecord10(part) && part.type === "text" && typeof part.text === "string" ? part.text : "").join("") : "";
       if (text.trim().length > 0) hasAssignment = true;
     }
     if (message.role === "assistant" && Array.isArray(message.content)) {
       for (const part of message.content) {
-        if (isRecord9(part) && part.type === "toolCall" && part.name === JUDGE_OUTPUT_TOOL_NAME2 && isRecord9(part.arguments)) {
+        if (isRecord10(part) && part.type === "toolCall" && part.name === JUDGE_OUTPUT_TOOL_NAME2 && isRecord10(part.arguments)) {
           hasCandidate = true;
         }
       }
@@ -4924,7 +4959,7 @@ function readJudgeAuditSubjects(context) {
 function readDoctorAuditSubjects(context) {
   const entries = context.sessionManager.getEntries?.() ?? [];
   for (const entry of entries) {
-    if (isRecord9(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+    if (isRecord10(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       return { status: "ok" };
     }
   }
@@ -6551,21 +6586,7 @@ var NAVIGATOR_OPTIONS = [
 ];
 var COUNTERSIGN_OPTIONS = [
   bindOwner("countersign", SHARED_PROJECT_SEMANTICS),
-  bindOwner("countersign", SHARED_ATTACH_SEMANTICS),
-  {
-    id: "ticket",
-    owner: "countersign",
-    canonical: "--ticket",
-    aliases: [],
-    valueMetavar: "number",
-    required: false,
-    repeatable: false,
-    form: "option",
-    description: {
-      en: "Ticket/issue number for court diary (diarist) and ticket-keyed provenance. Overrides attachment frontmatter when both present.",
-      zh: "\u7968\u53F7\uFF1A\u8D77\u5C45\u90CE\u6D41\u6C34\u7EBF\u4E0E\u8D77\u5C45\u5F55\u7968\u952E\u3002\u4E0E\u9644\u4EF6 frontmatter \u5E76\u5B58\u65F6\u4EE5\u672C\u65D7\u4E3A\u51C6\u3002"
-    }
-  }
+  bindOwner("countersign", SHARED_ATTACH_SEMANTICS)
 ];
 var CODER_OPTIONS = [
   {
@@ -6746,20 +6767,6 @@ var NOTARY_OPTIONS = [
       en: "Required source run locator (runId@role under the book home, or path to that run directory). Zero prompt/attachment projection.",
       zh: "\u5FC5\u586B\u6E90 run \u5B9A\u4F4D\u7B26\uFF08\u7C3F\u5185 runId@role\uFF0C\u6216\u8BE5 run \u76EE\u5F55\u8DEF\u5F84\uFF09\u3002\u96F6 prompt/\u9644\u4EF6\u6295\u5F71\u3002"
     }
-  },
-  {
-    id: "ticket",
-    owner: "notary",
-    canonical: "--ticket",
-    aliases: [],
-    valueMetavar: "number",
-    required: false,
-    repeatable: false,
-    form: "option",
-    description: {
-      en: "Optional ticket/issue number when Notary reads the court diary (ticket-provenance) for a ticket.",
-      zh: "\u53EF\u9009\u7968\u53F7\uFF1A\u7B26\u5B9D\u90CE\u6309\u7968\u952E\u8C03\u53D6\u8D77\u5C45\u5F55\u65F6\u4F7F\u7528\u3002"
-    }
   }
 ];
 var MERGER_OPTIONS = [
@@ -6807,7 +6814,7 @@ var ROLE_COMMAND_HELP = {
     summary: "Ticket-court review before work starts; five questions, \u7F72/\u5C01\u9A73/\u4E0A\u5448.",
     usage: ["ak-role countersign [options] [instruction]"],
     examples: [
-      'ak-role countersign --ticket 582 --attach ./ticket.md "\u88C1\uFF1A\u672C\u7968\u662F\u5426\u8DB3\u4EE5\u5F00\u5DE5\u3002"',
+      'ak-role countersign --attach ./ticket.md "\u88C1\uFF1A\u672C\u7968 #582 \u662F\u5426\u8DB3\u4EE5\u5F00\u5DE5\u3002"',
       'ak-role countersign --attach ./plan.md --attach ./adr.md "\u88C1\uFF1A\u65B9\u6848\u4E94\u95EE\u3002"'
     ]
   },
@@ -6901,7 +6908,7 @@ var ROLE_COMMAND_HELP = {
     usage: ["ak-role notary --source-run <runId@role|path> [options]"],
     examples: [
       "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@judge",
-      "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@countersign --ticket 582"
+      "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@countersign"
     ]
   },
   analyst: {
@@ -7267,11 +7274,11 @@ function resolvePackagedMethodSkillRoot(packageRoot, name) {
 function resolvePackagedMethodSkillPath(packageRoot, name) {
   return join17(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord10(raw)) {
+  if (!isRecord11(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -7285,7 +7292,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord10(raw.upstream)) {
+  if (!isRecord11(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -7312,12 +7319,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord10(raw.files)) {
+  if (!isRecord11(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord10(entry)) {
+    if (!isRecord11(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -7766,8 +7773,7 @@ function createPerDispatchReviewerAgent(dependencies = {}) {
 }
 
 // src/role-runtime.ts
-import { readFileSync as readFileSync4, writeSync as writeSync4 } from "node:fs";
-import { join as pathJoin } from "node:path";
+import { writeSync as writeSync4 } from "node:fs";
 
 // src/host-contracts.ts
 import { Type as Type15 } from "typebox";
@@ -7791,7 +7797,7 @@ function stringEnum(values, options = {}) {
 }
 
 // src/public-cli/reviewer-dispatch-rejection.ts
-import { writeFileSync as writeFileSync3 } from "node:fs";
+import { writeFileSync as writeFileSync4 } from "node:fs";
 import { join as join19 } from "node:path";
 
 // src/adr-path-refs.ts
@@ -8394,7 +8400,7 @@ function reviewerDispatchRejectionPath(runDirectory) {
   return join19(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 function recordReviewerDispatchRejectionSync(runDirectory, rejection) {
-  writeFileSync3(
+  writeFileSync4(
     reviewerDispatchRejectionPath(runDirectory),
     `${JSON.stringify(rejection)}
 `,
@@ -8412,7 +8418,6 @@ init_activation_ledger_topology();
 import { Type as Type16 } from "typebox";
 var INSPECTOR_OUTPUT_TOOL = INSPECTOR_OUTPUT_TOOL_NAME;
 var NOTARY_OUTPUT_TOOL = "ak_notary_output";
-var SUBJECT_TOOL = "ak_gatekeeper_subject";
 function gateSeatLabel(stage) {
   return stage === "inspector" ? "\u5BDF\u9662" : "\u7B26\u5B9D\u90CE";
 }
@@ -8439,16 +8444,6 @@ var GATEKEEPER_TOOL_SPEC = {
 function result(content, details) {
   return { content: [{ type: "text", text: content }], details };
 }
-function subjectTool(subject) {
-  return {
-    name: SUBJECT_TOOL,
-    description: "\u8BFB\u53D6\u5DF2\u53D7\u7406\u5377\u5B97\uFF1B\u53EA\u4F9B\u53D6\u9605\uFF0C\u4E0D\u8BC4\u5224\u4E0D\u6539\u52A8\u3002",
-    parameters: Type16.Object({}, { additionalProperties: false }),
-    async execute() {
-      return result(JSON.stringify(subject), subject);
-    }
-  };
-}
 function createOfficerDecisionTool(name) {
   return {
     name,
@@ -8471,11 +8466,11 @@ function asStringArray3(value) {
   return value.filter((item) => typeof item === "string");
 }
 var MISSING_ARGUMENTS_SUBMISSION = Object.freeze({ missing: "arguments" });
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function retainedSubmission(decision) {
-  return decision === void 0 || isRecord11(decision) && Object.keys(decision).length === 0 ? MISSING_ARGUMENTS_SUBMISSION : decision;
+  return decision === void 0 || isRecord12(decision) && Object.keys(decision).length === 0 ? MISSING_ARGUMENTS_SUBMISSION : decision;
 }
 function noUsableReleaseFailure(stage, decision) {
   return {
@@ -8522,6 +8517,8 @@ function projectOfficerDecision(officer, decision) {
 async function runGatekeeper(options) {
   const loadSoul = options.loadSoul ?? defaultLoadSoul;
   const officer = options.subject.kind === "worker_completion" ? "inspector" : "notary";
+  const runDirectory = options.runDirectory ?? auditorRunDirectory(options.context);
+  const submissionCandidate = runDirectory === void 0 ? void 0 : persistGateSubmissionCandidate(runDirectory, options.context);
   try {
     const officerRun = await executeAuditorChild({
       context: options.context,
@@ -8530,9 +8527,13 @@ async function runGatekeeper(options) {
       systemPrompt: await loadSoul(officer),
       prompt: "\u5377\u5B97\u5DF2\u53D7\u7406\u3002",
       tool: createOfficerDecisionTool(officer === "inspector" ? INSPECTOR_OUTPUT_TOOL : NOTARY_OUTPUT_TOOL),
-      dossierTool: subjectTool(options.subject),
+      // Same locator as 审刑院 — run directory + path identifiers only; no receipt body (#632).
+      dossierTool: createAuditorDossierTool(
+        runDirectory,
+        submissionCandidate === void 0 ? void 0 : { submissionCandidate }
+      ),
       ...options.signal === void 0 ? {} : { signal: options.signal },
-      ...options.runDirectory === void 0 ? {} : { runDirectory: options.runDirectory }
+      ...runDirectory === void 0 ? {} : { runDirectory }
     });
     if (officerRun.noReceiptLifecycle !== void 0) {
       return { status: "no_receipt", stage: officer, reason: `${gateSeatLabel(officer)}\u672A\u4EA7\u751F\u5DF2\u63A5\u53D7\u56DE\u6267\u5373\u6563\u5C40`, facts: officerRun.noReceiptLifecycle };
@@ -9964,7 +9965,7 @@ import {
   lstatSync as lstatSync2,
   realpathSync as realpathSync3,
   statSync as statSync3,
-  writeFileSync as writeFileSync4
+  writeFileSync as writeFileSync5
 } from "node:fs";
 import { isAbsolute as isAbsolute5, resolve as resolve14 } from "node:path";
 var ActivationSessionFileMissingError = class extends Error {
@@ -9985,7 +9986,7 @@ function materializeDeferredSessionFile(sessionManager, resolvedFile) {
     throw new ActivationSessionFileMissingError(resolvedFile);
   }
   try {
-    writeFileSync4(resolvedFile, `${JSON.stringify(header)}
+    writeFileSync5(resolvedFile, `${JSON.stringify(header)}
 `, { flag: "wx" });
   } catch (error) {
     if (errnoCode(error) !== "EEXIST") {
@@ -11338,7 +11339,7 @@ function createJudgeRoleRuntime(pi, dependencies, hostActions) {
             const verdict = validateVerdict(parameters);
             await pi.requireGatekeeperPass({
               context: ctx,
-              subject: { kind: "judge_draft", material: JSON.stringify(verdict) },
+              subject: { kind: "judge_draft" },
               ...signal === void 0 ? {} : { signal },
               hostActions,
               toolCallId
@@ -11843,7 +11844,7 @@ function uninstallPackageWorkerHooks(cwd) {
     rmOwnedDir(resolve16(gitDir, HOOKS_DIR));
   }
 }
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unfinishedReasonPresent(details) {
@@ -11859,7 +11860,7 @@ function readGateState(session) {
     if (entry.type !== "custom") continue;
     if (entry.customType === WORKER_COMMIT_BASELINE_ENTRY_TYPE) {
       const data = entry.data;
-      if (isRecord12(data) && (data.head === null || typeof data.head === "string")) {
+      if (isRecord13(data) && (data.head === null || typeof data.head === "string")) {
         baseline = data.head;
       }
     } else if (entry.customType === WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE) {
@@ -12087,6 +12088,8 @@ function assertAcceptableThroughHost(submissionGate, status, details, hostAction
 function createFixerRoleRuntime(pi, dependencies, hostActions) {
   let soul;
   let packet;
+  let packetPath;
+  let prerequisitesPath;
   let phase;
   let lifecycleRegistered = false;
   const submissionGate = createWorkerSubmissionGate();
@@ -12113,21 +12116,23 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
         );
       }
       phase = selectedPhase;
-      const packetPath = pi.getFlag(FIXER_FLAG_DEFINITIONS.packet.name);
-      if (typeof packetPath !== "string" || packetPath.trim().length === 0) {
+      const resolvedPacketPath = pi.getFlag(FIXER_FLAG_DEFINITIONS.packet.name);
+      if (typeof resolvedPacketPath !== "string" || resolvedPacketPath.trim().length === 0) {
         throw new Error("Fixer role requires --ak-fix-packet");
       }
+      packetPath = resolvedPacketPath;
       const instructions = await dependencies.loadPacket(packetPath);
       if (instructions.trim().length === 0) {
         throw new FixerPacketValidationError(
           new Error("Fixer instructions must be nonblank")
         );
       }
-      const prerequisitesPath = pi.getFlag(FIXER_FLAG_DEFINITIONS.prerequisites.name);
-      if (prerequisitesPath !== void 0 && (typeof prerequisitesPath !== "string" || prerequisitesPath.trim().length === 0)) {
+      const resolvedPrerequisitesPath = pi.getFlag(FIXER_FLAG_DEFINITIONS.prerequisites.name);
+      if (resolvedPrerequisitesPath !== void 0 && (typeof resolvedPrerequisitesPath !== "string" || resolvedPrerequisitesPath.trim().length === 0)) {
         throw new Error("Fixer --ak-fixer-prerequisites path must be nonblank when supplied");
       }
-      const prerequisites = typeof prerequisitesPath === "string" ? parseFixerPrerequisites(await dependencies.loadPacket(prerequisitesPath)) : Object.freeze([]);
+      prerequisitesPath = typeof resolvedPrerequisitesPath === "string" ? resolvedPrerequisitesPath : void 0;
+      const prerequisites = prerequisitesPath !== void 0 ? parseFixerPrerequisites(await dependencies.loadPacket(prerequisitesPath)) : Object.freeze([]);
       packet = Object.freeze({ instructions, prerequisites });
       if (!lifecycleRegistered) {
         lifecycleRegistered = true;
@@ -12153,7 +12158,7 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
             if (WORKER_DONE_STATUSES.has(output.status)) {
               await pi.requireGatekeeperPass({
                 context: ctx,
-                subject: { kind: "worker_completion", material: JSON.stringify(output) },
+                subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
                 hostActions,
                 toolCallId
@@ -12180,6 +12185,12 @@ function createFixerRoleRuntime(pi, dependencies, hostActions) {
         });
         pi.on("before_agent_start", (event) => {
           if (soul === void 0) throw new Error("\u4FEE\u5185\u53F8\u804C\u5206\u672A\u88C5\u8F7D");
+          if (packetPath === void 0) throw new Error("\u4FEE\u5185\u53F8\u4FEE\u7406\u5305\u8DEF\u5F84\u672A\u88C5\u8F7D");
+          const prerequisitesBlock = prerequisitesPath === void 0 ? "" : `
+
+<fixer_prerequisites_path>
+${prerequisitesPath}
+</fixer_prerequisites_path>`;
           return {
             systemPrompt: `${event.systemPrompt}
 
@@ -12191,13 +12202,9 @@ ${soul}
 ${phase ?? ""}
 </fixer_phase>
 
-<fix_packet>
-${packet?.instructions ?? ""}
-</fix_packet>
-
-<fixer_prerequisites>
-${JSON.stringify(packet?.prerequisites ?? [])}
-</fixer_prerequisites>`
+<fix_packet_path>
+${packetPath}
+</fix_packet_path>${prerequisitesBlock}`
           };
         });
       }
@@ -12290,7 +12297,7 @@ function createCoderRoleRuntime(pi, dependencies, hostActions) {
             if (WORKER_DONE_STATUSES.has(output.status)) {
               await pi.requireGatekeeperPass({
                 context: ctx2,
-                subject: { kind: "worker_completion", material: JSON.stringify(output) },
+                subject: { kind: "worker_completion" },
                 ..._signal === void 0 ? {} : { signal: _signal },
                 hostActions,
                 toolCallId
@@ -12472,15 +12479,6 @@ var REVIEWER_TRANSPORT_FLAGS = Object.freeze([
     })
   })
 ]);
-var COUNTERSIGN_TRANSPORT_FLAGS = Object.freeze([
-  Object.freeze({
-    name: "ak-countersign-ticket-number",
-    definition: Object.freeze({
-      description: "Admitted ticketNumber for countersign Notary inner-gate material",
-      type: "string"
-    })
-  })
-]);
 var NOTARY_TRANSPORT_FLAGS = Object.freeze([
   Object.freeze({
     name: NOTARY_TICKET_FLAG.name,
@@ -12729,84 +12727,6 @@ async function projectClosedSubmissionLifecycle(projection, context, phase, reco
   context.sessionManager.appendCustomEntry?.("ak-role-submission-closure", closure);
   await settle(publicNavigatorSettlement(projection.role, phase, closure));
 }
-var CountersignInvocationBindingError = class extends Error {
-  code = "countersign-invocation-binding";
-  reason;
-  constructor(reason, message, options) {
-    super(message, options);
-    this.name = "CountersignInvocationBindingError";
-    this.reason = reason;
-  }
-};
-function readBoundTicketNumberForNotaryGate(roleHost) {
-  const fromFlag = roleHost.getFlag("ak-countersign-ticket-number");
-  if (fromFlag !== void 0) {
-    if (typeof fromFlag === "string" && /^[1-9]\d*$/.test(fromFlag)) {
-      const n = Number(fromFlag);
-      if (Number.isSafeInteger(n) && n >= 1) return n;
-    }
-    throw new CountersignInvocationBindingError(
-      "flag-invalid",
-      "countersign Notary gate: ak-countersign-ticket-number is present but not a safe positive integer string"
-    );
-  }
-  const runDir = process.env.AK_ROLE_RUN_DIR;
-  if (typeof runDir !== "string" || runDir.trim() === "") return void 0;
-  const invocationPath = pathJoin(runDir, "invocation.json");
-  let rawText;
-  try {
-    rawText = readFileSync4(invocationPath, "utf8");
-  } catch (error) {
-    const err = error;
-    if (err && err.code === "ENOENT") return void 0;
-    throw new CountersignInvocationBindingError(
-      "unreadable",
-      `countersign Notary gate: invocation.json unreadable (${invocationPath})`,
-      { cause: error }
-    );
-  }
-  let raw;
-  try {
-    raw = JSON.parse(rawText);
-  } catch (error) {
-    throw new CountersignInvocationBindingError(
-      "unparseable",
-      `countersign Notary gate: invocation.json unparseable (${invocationPath})`,
-      { cause: error }
-    );
-  }
-  if (typeof raw === "object" && raw !== null && typeof raw.ticketNumber === "number" && Number.isSafeInteger(raw.ticketNumber) && raw.ticketNumber >= 1) {
-    return raw.ticketNumber;
-  }
-  return void 0;
-}
-async function buildCountersignNotaryGateMaterial(input) {
-  const ticketNumber = readBoundTicketNumberForNotaryGate(input.roleHost);
-  if (ticketNumber !== void 0) {
-    return JSON.stringify({ verdict: input.parameters, ticketNumber });
-  }
-  const runDir = process.env.AK_ROLE_RUN_DIR;
-  if (typeof runDir !== "string" || runDir.trim() === "") {
-    throw new CountersignInvocationBindingError(
-      "unreadable",
-      "countersign Notary gate: true-unbound material requires AK_ROLE_RUN_DIR source-run locator"
-    );
-  }
-  let sourceRun;
-  try {
-    sourceRun = await loadNotarySourceRunLocator(runDir);
-  } catch (error) {
-    if (error instanceof NotarySourceRunError) {
-      throw new CountersignInvocationBindingError(
-        "unreadable",
-        `countersign Notary gate: source-run locator unusable (${error.message})`,
-        { cause: error }
-      );
-    }
-    throw error;
-  }
-  return JSON.stringify({ verdict: input.parameters, sourceRun });
-}
 function createFiledOfficerRuntime(roleHost, spec, dependencies) {
   let soul;
   let registered = false;
@@ -12908,14 +12828,10 @@ function createNavigatorRoleRuntime(roleHost, dependencies) {
   );
 }
 function createCountersignRoleRuntime(roleHost, dependencies, hostActions) {
-  const beforeAccept = hostActions !== void 0 && roleHost.requireGatekeeperPass !== void 0 ? async ({ toolCallId, parameters, signal, ctx }) => {
-    const material = await buildCountersignNotaryGateMaterial({
-      roleHost,
-      parameters
-    });
+  const beforeAccept = hostActions !== void 0 && roleHost.requireGatekeeperPass !== void 0 ? async ({ toolCallId, signal, ctx }) => {
     await roleHost.requireGatekeeperPass({
       context: ctx,
-      subject: { kind: "countersign_verdict", material },
+      subject: { kind: "countersign_verdict" },
       ...signal === void 0 ? {} : { signal },
       hostActions,
       toolCallId
@@ -12948,9 +12864,6 @@ function createRoleRuntimeExtension(dependencies) {
     for (const flag of REVIEWER_TRANSPORT_FLAGS) {
       roleHost.registerFlag(flag.name, flag.definition);
     }
-    for (const flag of COUNTERSIGN_TRANSPORT_FLAGS) {
-      roleHost.registerFlag(flag.name, flag.definition);
-    }
     for (const flag of NOTARY_TRANSPORT_FLAGS) {
       roleHost.registerFlag(flag.name, flag.definition);
     }
@@ -14242,9 +14155,6 @@ function projectGrokActivationFlags(request) {
     flags.set("ak-review-authority-refs", JSON.stringify(activation.authorityRefs));
     if (activation.ticketNumber !== void 0) flags.set("ak-review-ticket-number", String(activation.ticketNumber));
   }
-  if (activation.role === "countersign" && activation.ticketNumber !== void 0) {
-    flags.set("ak-countersign-ticket-number", String(activation.ticketNumber));
-  }
   if (activation.role === "notary" && activation.ticketNumber !== void 0) {
     flags.set("ak-notary-ticket-number", String(activation.ticketNumber));
   }
@@ -14712,14 +14622,13 @@ async function prepareGrokRoleEnvelope(options) {
         message: { role: "user", content: prompt }
       });
     }
-    const basePrompt = await loadMainRoleSessionMaterials(request.activation.role);
     const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile13(path, "utf8")))).join("\n\n");
     const promptResults = await emit("before_agent_start", {
       prompt,
-      systemPrompt: [basePrompt, methodPrompt].filter(Boolean).join("\n\n"),
+      systemPrompt: methodPrompt,
       systemPromptOptions: {}
     });
-    const systemPromptBody = [...promptResults].reverse().find((value) => typeof value === "object" && value !== null && "systemPrompt" in value && typeof value.systemPrompt === "string")?.systemPrompt ?? [basePrompt, methodPrompt].filter(Boolean).join("\n\n");
+    const systemPromptBody = [...promptResults].reverse().find((value) => typeof value === "object" && value !== null && "systemPrompt" in value && typeof value.systemPrompt === "string")?.systemPrompt ?? methodPrompt;
     const readingMaterials = [];
     for (const value of promptResults) {
       if (typeof value !== "object" || value === null) continue;