@akagilnc/pi-workflow-roles 0.1.3558 → 0.1.3572

package/src/host-transition-prior-native.ts

@@ -1,19 +1,13 @@
 /**
  * Single authority for #617 DK-4 cross-host prior-native projection.
- * Closed host discriminators only; unknown previous/live hosts never inject.
+ * Classifies the prior volume into the two record families that exist
+ * (Pi native session file / sitian run records), never by host name.
  */
 import { access, readdir } from "node:fs/promises";
 import { dirname, join } from "node:path";
 
 import type { RoleTurnHostTransition } from "./host-contracts.ts";
 
-const KNOWN_ROLE_TURN_HOSTS = ["pi", "grok-build"] as const;
-type KnownRoleTurnHost = (typeof KNOWN_ROLE_TURN_HOSTS)[number];
-
-function isKnownRoleTurnHost(value: string): value is KnownRoleTurnHost {
-  return (KNOWN_ROLE_TURN_HOSTS as readonly string[]).includes(value);
-}
-
 function isEnoent(error: unknown): boolean {
   return typeof error === "object" && error !== null && (error as NodeJS.ErrnoException).code === "ENOENT";
 }
@@ -59,13 +53,12 @@ async function listSitianRecordPaths(sessionParent: string): Promise<string[]> {
 }
 
 /**
- * Project one hostTransition only for a real switch between known hosts.
- * Unknown host names → undefined (no inject). Empty native volume still
- * yields a typed switch (empty path list).
+ * Project one hostTransition only for a real host switch. Empty native volume
+ * still yields a typed switch (empty path list).
  *
- * Pi previous → Pi session.jsonl path.
- * Grok previous → sitian records on the live run (#717). Grok CLI journals
- * stay in the operator grok home; they are not copied here.
+ * Pi wrote its own session.jsonl; every other host's run volume is the sitian
+ * record set on the live run (ADR 0077 `record-scope-phase-two`, #717) — the CLI's
+ * own journals stay in the operator home and are never copied here.
  */
 export async function projectHostTransitionPriorNative(input: {
   readonly previousHost: string;
@@ -73,20 +66,15 @@ export async function projectHostTransitionPriorNative(input: {
   readonly piSessionFile: string;
 }): Promise<RoleTurnHostTransition | undefined> {
   if (input.previousHost === input.liveHost) return undefined;
-  if (!isKnownRoleTurnHost(input.previousHost) || !isKnownRoleTurnHost(input.liveHost)) {
-    return undefined;
-  }
   if (input.previousHost === "pi") {
-    const paths = await listPiNativeRecordPaths(input.piSessionFile);
     return {
-      previousHost: "pi",
-      priorNativePaths: paths,
+      priorNativeKind: "pi-native",
+      priorNativePaths: await listPiNativeRecordPaths(input.piSessionFile),
     };
   }
-  // previousHost === "grok-build": sitian path handoff only — do not read bytes.
-  const paths = await listSitianRecordPaths(input.piSessionFile);
+  // Sitian path handoff only — do not read bytes.
   return {
-    previousHost: "grok-build",
-    priorNativePaths: paths,
+    priorNativeKind: "sitian",
+    priorNativePaths: await listSitianRecordPaths(input.piSessionFile),
   };
 }

package/src/package-contracts/terminating-tools.ts

@@ -34,6 +34,7 @@ import { NOTARY_ACCEPTED_TEXT, NOTARY_OUTPUT_TOOL_NAME, validateRecordedNotaryOu
 import { COUNTERSIGN_ACCEPTED_TEXT, COUNTERSIGN_OUTPUT_TOOL_NAME, validateRecordedCountersignOutput, type CountersignVerdict } from "../countersign-contracts.ts";
 import { GLEANER_LEFT_ACCEPTED_TEXT, GLEANER_LEFT_OUTPUT_TOOL_NAME, validateRecordedGleanerLeftOutput, type GleanerLeftOutput } from "../gleaner-left-contracts.ts";
 import { INSPECTOR_ACCEPTED_TEXT, INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput, type InspectorOutput } from "../inspector-contracts.ts";
+import { DIARIST_ACCEPTED_TEXT, DIARIST_OUTPUT_TOOL_NAME, validateRecordedDiaristOutput, type DiaristOutput } from "../diarist-contracts.ts";
 import {
   CODER_ACCEPTED_TEXT,
   CODER_OUTPUT_TOOL_NAME,
@@ -71,6 +72,7 @@ export {
   validateRecordedInspectorOutput,
   validateRecordedGatekeeperOutput,
   validateRecordedNavigatorOutput,
+  validateRecordedDiaristOutput,
 };
 export type {
   CollectorReceipt,
@@ -87,6 +89,7 @@ export type {
   InspectorOutput,
   GatekeeperDirectOutput,
   NavigatorAdvice,
+  DiaristOutput,
 };
 
 export const TERMINATING_TOOL_NAMES = [
@@ -103,6 +106,7 @@ export const TERMINATING_TOOL_NAMES = [
   INSPECTOR_OUTPUT_TOOL_NAME,
   GATEKEEPER_OUTPUT_TOOL_NAME,
   NAVIGATOR_OUTPUT_TOOL_NAME,
+  DIARIST_OUTPUT_TOOL_NAME,
 ] as const;
 
 export type TerminatingToolName = (typeof TERMINATING_TOOL_NAMES)[number];
@@ -119,7 +123,8 @@ export type AcceptedDetails =
   | GleanerLeftOutput
   | InspectorOutput
   | GatekeeperDirectOutput
-  | NavigatorAdvice;
+  | NavigatorAdvice
+  | DiaristOutput;
 
 export function isTerminatingToolName(
   name: string,
@@ -155,6 +160,8 @@ export function acceptedTextFor(toolName: TerminatingToolName): string {
       return GATEKEEPER_ACCEPTED_TEXT;
     case NAVIGATOR_OUTPUT_TOOL_NAME:
       return NAVIGATOR_ACCEPTED_TEXT;
+    case DIARIST_OUTPUT_TOOL_NAME:
+      return DIARIST_ACCEPTED_TEXT;
   }
 }
 
@@ -213,6 +220,7 @@ export function validateAcceptedDetails(
     [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce"],
     [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
     [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
+    [DIARIST_OUTPUT_TOOL_NAME]: ["completed"],
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
   const baseDiscriminator = discriminator;
@@ -253,6 +261,8 @@ export function validateAcceptedDetails(
       return validateRecordedGatekeeperOutput(details);
     case NAVIGATOR_OUTPUT_TOOL_NAME:
       return validateRecordedNavigatorOutput(details);
+    case DIARIST_OUTPUT_TOOL_NAME:
+      return validateRecordedDiaristOutput(details);
     }
   } catch (error) {
     if (error instanceof Error && error.constructor === Error) throw new AcceptedDetailsContractError(error.message, { cause: error });
@@ -280,6 +290,15 @@ export function validateAcceptedLifecycle(
     if (!deepEqual(testimony, projected)) throw new Error("accepted tool lifecycle details mismatch");
     return details;
   }
+  if (toolName === DIARIST_OUTPUT_TOOL_NAME) {
+    // Envelope-owned mechanical sitian facts are runtime-bound on details only
+    // (same shape as the Doctor runtime cost); the submitted arguments carry the
+    // role's own selections. Machine facts never come from model self-report.
+    const { sitian: _mechanical, ...submitted } = details as DiaristOutput & { sitian?: unknown };
+    const testimony = validateAcceptedDetails(toolName, argumentsValue);
+    if (!deepEqual(testimony, submitted)) throw new Error("accepted tool lifecycle details mismatch");
+    return details;
+  }
   const argumentsDetails = validateAcceptedDetails(toolName, argumentsValue);
   if (!deepEqual(argumentsDetails, details)) throw new Error("accepted tool lifecycle details mismatch");
   return details;
@@ -301,7 +320,8 @@ export function acceptedFacts(toolName: TerminatingToolName, details: AcceptedDe
     case GLEANER_LEFT_OUTPUT_TOOL_NAME:
     case INSPECTOR_OUTPUT_TOOL_NAME:
     case GATEKEEPER_OUTPUT_TOOL_NAME:
-    case NAVIGATOR_OUTPUT_TOOL_NAME: return { status: (details as { status: string }).status };
+    case NAVIGATOR_OUTPUT_TOOL_NAME:
+    case DIARIST_OUTPUT_TOOL_NAME: return { status: (details as { status: string }).status };
     case JUDGE_OUTPUT_TOOL_NAME: return { status: (details as { judgeStatus: string }).judgeStatus };
     case COUNTERSIGN_OUTPUT_TOOL_NAME: return { status: (details as { countersignStatus: string }).countersignStatus };
     case MERGER_OUTPUT_TOOL_NAME: {

package/src/packaged-role-registry.ts

@@ -11,6 +11,10 @@ import { NOTARY_OUTPUT_TOOL_NAME } from "./notary-contracts.ts";
 import { COUNTERSIGN_OUTPUT_TOOL_NAME } from "./countersign-contracts.ts";
 import { GLEANER_LEFT_OUTPUT_TOOL_NAME } from "./gleaner-left-contracts.ts";
 import { INSPECTOR_OUTPUT_TOOL_NAME } from "./inspector-contracts.ts";
+import {
+  DIARIST_OUTPUT_TOOL_NAME,
+  DIARIST_SOURCES_FLAG,
+} from "./diarist-contracts.ts";
 
 /** Shared by public notary and gatekeeper-province notary. */
 export const NOTARY_SESSION_MATERIALS = [
@@ -185,6 +189,22 @@ export const PUBLIC_ROLE_RECORDS = [
     activationStage: "load-and-install",
     sessionMaterials: ["CLAUDE.md", "souls/navigator.md"],
   },
+  // #708 / ADR 0075 `diarist-is-role`: 起居郎 is a seat like any other. The
+  // frozen source catalog rides the shared input-flag seam; it is absent for a
+  // true-unbound summons (no ticket → no diary).
+  {
+    role: "diarist",
+    phases: [null],
+    outputTool: DIARIST_OUTPUT_TOOL_NAME,
+    inputFlag: DIARIST_SOURCES_FLAG.name,
+    phaseFlag: undefined,
+    activationStage: "load-and-install",
+    sessionMaterials: [
+      "CLAUDE.md",
+      "souls/diarist.md",
+      "resources/diarist-collect.md",
+    ],
+  },
 ] as const;
 
 export type PublicRoleRecord = (typeof PUBLIC_ROLE_RECORDS)[number];

package/src/pi/role-turn-host.ts

@@ -146,6 +146,14 @@ function buildActivationFlagArgs(activation: RoleTurnActivation): string[] {
       return ["--ak-role", "gatekeeper"];
     case "navigator":
       return ["--ak-role", "navigator"];
+    case "diarist":
+      return [
+        "--ak-role",
+        "diarist",
+        ...(activation.sourcesPath === undefined
+          ? []
+          : ["--ak-diarist-sources", activation.sourcesPath]),
+      ];
     default: {
       const _exhaustive: never = activation;
       return _exhaustive;
@@ -406,9 +414,10 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
   return {
     async executeTurn(request: RoleTurnRequest): Promise<RoleTurnResult> {
       // #617 DK-7: Pi argv gets projected native paths once; never record bytes.
+      // Pi already owns its own session file, so only sitian prior volume rides in.
       let turnRequest = request;
       const paths =
-        request.hostTransition?.previousHost === "grok-build"
+        request.hostTransition?.priorNativeKind === "sitian"
           ? request.hostTransition.priorNativePaths
           : undefined;
       if (

package/src/public-cli/cli.ts

@@ -38,8 +38,9 @@ import { seatModelOnly } from "./registry.ts";
 import { CliUsageError } from "./cli-errors.ts";
 import type { CliIo } from "./cli-io.ts";
 import type { PostAdmissionEnv } from "./post-admission.ts";
-import type { RoleTurnHost } from "../host-contracts.ts";
-import { loadProductionGrokHostFactory } from "./load-production-grok-host.ts";
+import type { RoleTurnHost, RoleTurnRequest } from "../host-contracts.ts";
+import { packagedExternalHostNames } from "../host-descriptions.ts";
+import { loadProductionAcpHostFactory } from "./load-production-acp-host.ts";
 import {
   createPiRoleTurnHost,
   appendPiSessionCustomEntry,
@@ -50,6 +51,7 @@ import {
   parseCoderArgv,
   parseCollectorArgv,
   parseCountersignArgv,
+  parseDiaristArgv,
   parseGleanerLeftArgv,
   parseDoctorArgv,
   parseFixerArgv,
@@ -77,6 +79,7 @@ import { runPublicCoder, runPublicCoderResume } from "./coder-run.ts";
 import { runPublicInstructionSeat, runPublicInstructionSeatResume } from "./instruction-seat-run.ts";
 import { runPublicCollector, runPublicCollectorResume } from "./collector-run.ts";
 import { runPublicCountersign, runPublicCountersignResume } from "./countersign-run.ts";
+import { runPublicDiarist, runPublicDiaristResume } from "./diarist-run.ts";
 import { runPublicGleanerLeft, runPublicGleanerLeftResume } from "./gleaner-left-run.ts";
 import { runPublicDoctor, runPublicDoctorResume } from "./doctor-run.ts";
 import { runPublicFixer, runPublicFixerResume } from "./fixer-run.ts";
@@ -125,6 +128,7 @@ const RESUME_SEAT_DISPATCH: Record<
   inspector: { seat: "inspector", run: runPublicInspectorResume },
   gatekeeper: { seat: "gatekeeper", run: runPublicInstructionSeatResume },
   navigator: { seat: "navigator", run: runPublicInstructionSeatResume },
+  diarist: { seat: "diarist", run: runPublicDiaristResume },
 };
 import {
   INTERNAL_ROLE_ENTRYPOINT_RELATIVE,
@@ -167,6 +171,7 @@ export const PUBLIC_ROLE_ARGV = {
   reviewer: { parse: parseReviewerArgv, options: optionsForOwner("reviewer") },
   gatekeeper: { parse: parseGatekeeperArgv, options: optionsForOwner("gatekeeper") },
   navigator: { parse: parseNavigatorArgv, options: optionsForOwner("navigator") },
+  diarist: { parse: parseDiaristArgv, options: optionsForOwner("diarist") },
   /** Deterministic analysis seat (#336) — argv parse only; no LLM admission. */
   analyst: { parse: parseAnalystArgv, options: optionsForOwner("analyst") },
 } as const;
@@ -321,19 +326,19 @@ function resolveRoleTurnHost(
     recordLaunchedRolePackageIdentity,
     observeLaunchedRolePackageIdentity,
   });
-  // Composition-root unique adapter table (#522 / #580): pi + S6 grok-build true adapter.
-  const adapters = env.hostAdapters ?? [
+  // Composition-root adapter table: pi (in-process default) + one ACP adapter per description-table key.
+  const adapters: readonly NamedRoleTurnHostAdapter[] = env.hostAdapters ?? [
     { name: "pi", create: () => ({ ok: true as const, host: piHost }) },
-    {
-      name: "grok-build",
+    ...packagedExternalHostNames().map((name) => ({
+      name,
       create: () => {
         // Factory loads outside the public bin static graph (ADR 0052 peer-free discovery).
         let hostPromise: Promise<RoleTurnHost> | undefined;
         return {
           ok: true as const,
           host: {
-            executeTurn: async (request) => {
-              hostPromise ??= loadProductionGrokHostFactory(env.packageRoot).then((create) =>
+            executeTurn: async (request: RoleTurnRequest) => {
+              hostPromise ??= loadProductionAcpHostFactory(env.packageRoot, name).then((create) =>
                 create({
                   packageRoot: env.packageRoot,
                   principalAuthority: options.principalAuthority,
@@ -344,7 +349,7 @@ function resolveRoleTurnHost(
           },
         };
       },
-    },
+    })),
   ];
   const hostName = options.seat.host;
   const adapter = adapters.find((candidate) => candidate.name === hostName);
@@ -1310,6 +1315,31 @@ export async function runAkRole(
       };
     }
 
+    // Diarist public run path (#708): 起居郎 is summoned like any other seat.
+    if (parsed.command === "diarist") {
+      const agentDir = resolveAgentDir(env, home);
+      const cwd = env.cwd ?? process.cwd();
+      const config = await loadAndValidateConfig(home, env.packageRoot);
+      const credentials =
+        env.credentials ?? (await loadCredentialProviders(agentDir));
+      const seat = resolveEffectiveSeat(
+        config,
+        "diarist",
+        credentials,
+        invocationFromParsed(parsed),
+      );
+      const result = await runPublicDiarist(
+        parsed.args,
+        createRoleEnvironment(env, { role: "diarist", home, agentDir, cwd, credentials, seat, config }),
+        io,
+        PUBLIC_ROLE_ARGV.diarist.parse,
+      );
+      return {
+        exitCode: result.exitCode,
+        ...(result.terminal === undefined ? {} : { terminal: result.terminal }),
+      };
+    }
+
     // Coder public run path with package-owned TDD method (#109).
     if (parsed.command === "coder") {
       const agentDir = resolveAgentDir(env, home);

package/src/public-cli/config.ts

@@ -4,6 +4,7 @@
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 
+import { assertRegisteredHostName, DEFAULT_ROLE_TURN_HOST } from "../host-descriptions.ts";
 import { assertLegalEngineName } from "../package-resources/engine-material.ts";
 import { resolveConfiguredProvinceOfficer } from "../institutional-resolution.ts";
 import {
@@ -218,7 +219,8 @@ export function setPersistentSeatHost(
     }
     return { ...config, seats: { ...config.seats, [seat]: rest } };
   }
-  return { ...config, seats: { ...config.seats, [seat]: { ...previous, host } } };
+  const registered = assertRegisteredHostName(host);
+  return { ...config, seats: { ...config.seats, [seat]: { ...previous, host: registered } } };
 }
 
 /**
@@ -295,7 +297,7 @@ export function setAutoResumeLimit(
  * Config-parse seam: persistent call axes belong to PUBLIC_CALLABLE_ROLES;
  * engine names need only path-safety syntax (no closed material catalog;
  * #376 / #378 / #391 / ADR 0069). Syntax authority = assertLegalEngineName
- * (no injected duplicate).
+ * (no injected duplicate). Persistent host must be pi or a description-table key (#510 / #731).
  */
 export function validatePublicCliConfigAxes(
   config: PublicCliConfig,
@@ -303,14 +305,25 @@ export function validatePublicCliConfigAxes(
 ): void {
   for (const seat of Object.keys(config.seats) as PublicConfigurableSeat[]) {
     const row = config.seats[seat];
-    if (row?.engine === undefined) continue;
-    try {
-      assertLegalEngineName(row.engine);
-    } catch (error) {
-      throw new Error(
-        `config seat ${seat} engine is illegal: ${row.engine}`,
-        { cause: error },
-      );
+    if (row?.engine !== undefined) {
+      try {
+        assertLegalEngineName(row.engine);
+      } catch (error) {
+        throw new Error(
+          `config seat ${seat} engine is illegal: ${row.engine}`,
+          { cause: error },
+        );
+      }
+    }
+    if (row?.host !== undefined) {
+      try {
+        assertRegisteredHostName(row.host);
+      } catch (error) {
+        throw new Error(
+          `config seat ${seat} host is unregistered: ${row.host}`,
+          { cause: error },
+        );
+      }
     }
   }
 }
@@ -550,7 +563,7 @@ function attachHostAxis(
   if (invocation?.host !== undefined) return { ...seat, host: invocation.host, hostSource: "invocation" };
   const persistent = config.seats[seat.seat]?.host;
   if (persistent !== undefined) return { ...seat, host: persistent, hostSource: "persistent" };
-  return { ...seat, host: "pi", hostSource: "default" };
+  return { ...seat, host: DEFAULT_ROLE_TURN_HOST, hostSource: "default" };
 }
 
 function attachEngineAxis(

package/src/public-cli/countersign-run.ts

@@ -1,20 +1,11 @@
 /**
- * Public Countersign Role run: admit ticket materials → diarist pipeline step →
- * shared post-admission coordinator → settle Terminal result
- * (#572 / ADR 0074 / ADR 0075). #599: manual resume continues the exact session.
- * Diarist is a prior station on the court pipeline, not a countersign call.
- * Unbound admission resolves ticket via shared seat LLM bind (#635) before the diary station.
+ * Public Countersign Role run: admit ticket materials → shared post-admission
+ * coordinator → settle Terminal result (#572 / ADR 0074). #599: manual resume
+ * continues the exact session. Unbound admission resolves its ticket via the
+ * shared seat LLM bind (#635). Who runs 起居郎, and when, is the caller's
+ * composition (ADR 0010 / ADR 0075 `no-call-rule`) — not this seat's business.
  */
 import type { DurablePrincipalAuthority, RoleTurnRequest } from "../host-contracts.ts";
-import {
-  createDiaristIssueFaceFetcher,
-  DiaristIssueSourceError,
-  resolveDiaristGithubOrigin,
-  runDiarist,
-  type DiaristIssueFace,
-  type DiaristRunResult,
-} from "../diarist.ts";
-import { appendIssueSourceFailureDiagnostic } from "../ticket-provenance.ts";
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.ts";
 import { CliUsageError } from "./cli-errors.ts";
 import {
@@ -29,7 +20,6 @@ import {
   ticketNumberFromProbe,
   tryResumeSameTicketSeatRun,
 } from "./seat-ticket-binding.ts";
-import { tryHomeFromAkRolesPath } from "../activation-ledger-topology.ts";
 import {
   prepareSummonsResumeMaterials,
   runPostAdmissionOneShot,
@@ -194,7 +184,6 @@ export async function runPublicCountersign(
           turnRequest,
           buildCountersignTurnRequest(admitted, turnProjection),
         );
-        await runCountersignDiaristStation(admitted, env);
       },
     }),
     ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
@@ -222,10 +211,9 @@ function countersignAdapters(options?: {
 
 /**
  * Resume a previously admitted Countersign run (#599 / DK-3 / #637).
- * Restores role/ticket/session identity. Every court re-entry runs the diarist
- * station first (ADR 0075 refresh-every-court). Same-ticket summons deliver this
- * turn's instruction + frozen attachments on the resume prompt; manual resume
- * keeps package-envelope / caller-message semantics and birth attachments.
+ * Restores role/ticket/session identity. Same-ticket summons deliver this turn's
+ * instruction + frozen attachments on the resume prompt; manual resume keeps
+ * package-envelope / caller-message semantics and birth attachments.
  */
 export async function runPublicCountersignResume(
   request: PublicResumeRequest,
@@ -261,115 +249,7 @@ export async function runPublicCountersignResume(
         ),
       );
     },
-    adapters: countersignAdapters({
-      beforeDispatch: async (admitted) => {
-        await runCountersignDiaristStation(admitted, env);
-      },
-    }),
+    adapters: countersignAdapters(),
     ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
   });
 }
-
-/**
- * Court-pipeline prior station: refresh ticket-provenance before countersign turn.
- * Caller-invisible — collector failures append durable volume diagnostics and the
- * station continues; issue-source / ADR source-read / watermark honesty failures
- * leave typed durable diagnostics and propagate (失败诚实).
- * Missing ticketNumber (true-unbound after pre-court resolution) skips the station
- * — no diary is minted for a true-unbound run.
- *
- * Issue body/comments come from the shared GitHub seam only. Attachments stay
- * attachments — never merged and mislabeled as issue-body-comment.
- * Bound ticket never silently degrades to “no issue face”.
- */
-export async function runCountersignDiaristStation(
-  admitted: AdmittedCountersignInvocation,
-  env: Pick<CountersignRunEnv, "cwd" | "packageRoot">,
-): Promise<DiaristRunResult | undefined> {
-  if (admitted.ticketNumber === undefined) return undefined;
-
-  const issueFace = await loadBoundIssueFace(admitted);
-  const home = tryHomeFromAkRolesPath(admitted.runDirectory);
-
-  const result = await runDiarist({
-    ticketNumber: admitted.ticketNumber,
-    cwd: admitted.projectRoot,
-    ...(home === undefined ? {} : { home }),
-    issueFace,
-    sessionCwds: [admitted.projectRoot, env.cwd],
-    ...(env.packageRoot === undefined ? {} : { packageRoot: env.packageRoot }),
-  });
-  return result;
-}
-
-/**
- * Acquire issue face for a bound ticket. Failures are typed + durable on the
- * ticket-provenance volume, then propagated — never washed into empty face.
- */
-function persistIssueSourceFailure(
-  admitted: AdmittedCountersignInvocation,
-  ticketNumber: number,
-  error: DiaristIssueSourceError,
-): never {
-  const home = tryHomeFromAkRolesPath(admitted.runDirectory);
-  appendIssueSourceFailureDiagnostic({
-    ticketNumber,
-    cwd: admitted.projectRoot,
-    ...(home === undefined ? {} : { home }),
-    cause: error.message,
-    reason: error.reason,
-  });
-  throw error;
-}
-
-async function loadBoundIssueFace(
-  admitted: AdmittedCountersignInvocation,
-): Promise<DiaristIssueFace> {
-  const ticketNumber = admitted.ticketNumber;
-  if (ticketNumber === undefined) {
-    throw new Error("loadBoundIssueFace requires a bound ticketNumber");
-  }
-
-  const origin = resolveDiaristGithubOrigin(admitted.projectRoot);
-  if (origin === undefined) {
-    persistIssueSourceFailure(
-      admitted,
-      ticketNumber,
-      new DiaristIssueSourceError(
-        "origin-unresolved",
-        `bound ticket #${ticketNumber} issue face requires a resolvable github.com origin remote`,
-      ),
-    );
-  }
-
-  const fetcher = createDiaristIssueFaceFetcher();
-  let face: DiaristIssueFace | undefined;
-  try {
-    face = await fetcher({
-      owner: origin.owner,
-      repo: origin.repo,
-      ticketNumber,
-    });
-  } catch (error) {
-    const typed =
-      error instanceof DiaristIssueSourceError
-        ? error
-        : new DiaristIssueSourceError(
-            "issue-unavailable",
-            `issue face fetch failed for ${origin.owner}/${origin.repo}#${ticketNumber}`,
-            { cause: error },
-          );
-    persistIssueSourceFailure(admitted, ticketNumber, typed);
-  }
-  if (face === undefined) {
-    persistIssueSourceFailure(
-      admitted,
-      ticketNumber,
-      new DiaristIssueSourceError(
-        "issue-unavailable",
-        `issue face unavailable for ${origin.owner}/${origin.repo}#${ticketNumber}`,
-      ),
-    );
-  }
-  return face;
-}