@akagilnc/pi-workflow-roles 0.1.3652 → 0.1.3663

package/dist/acp-host/production-host.js

@@ -1116,8 +1116,8 @@ var init_durable_principal = __esm({
       async isAvailable(principal) {
         const { sessionFile } = this.decode(principal);
         try {
-          const stat2 = await lstat(sessionFile);
-          return stat2.isFile() && !stat2.isSymbolicLink();
+          const stat3 = await lstat(sessionFile);
+          return stat3.isFile() && !stat3.isSymbolicLink();
         } catch {
           return false;
         }
@@ -4102,6 +4102,13 @@ function instructResumeHandbookRead(prompt, engineMaterial) {
     return line2;
   }).join("\n");
 }
+function appendResumeMaterialReread(prompt, materialPath) {
+  const instruction = resumeRereadInstruction(materialPath, false);
+  const lines = prompt.split("\n");
+  if (lines.includes(instruction)) return prompt;
+  return prompt.length === 0 ? instruction : `${prompt}
+${instruction}`;
+}
 function selectResumeContinuationPrompt(message, engineMaterial) {
   const base = message !== void 0 ? message : RESUME_TRANSPORT_ENVELOPE;
   return instructResumeHandbookRead(
@@ -4636,21 +4643,38 @@ async function findLatestRunIdForSeatTicket(input) {
   }
   return best;
 }
+async function collectBookRunTicketNumbers(input) {
+  const ledgerHome = resolveActivationLedgerHome(input.home);
+  const runsDir = join11(
+    activationBookDirectory(ledgerHome, input.bookKey),
+    "runs"
+  );
+  let entries;
+  try {
+    entries = await readdir2(runsDir);
+  } catch (error) {
+    if (errorCodeOf2(error) === "ENOENT") return /* @__PURE__ */ new Set();
+    throw error;
+  }
+  const known = /* @__PURE__ */ new Set();
+  for (const entry of entries) {
+    const ticketNumber = await readRunTicketNumber(join11(runsDir, entry));
+    if (ticketNumber !== void 0) known.add(ticketNumber);
+  }
+  return known;
+}
 function parsePersistedTicketIdentity(record4) {
   const correlationId = typeof record4.correlationId === "string" && record4.correlationId.trim() !== "" ? record4.correlationId : void 0;
   const ticketNumber = typeof record4.ticketNumber === "number" && Number.isSafeInteger(record4.ticketNumber) && record4.ticketNumber >= 1 ? record4.ticketNumber : void 0;
-  const ticketResolution = record4.ticketResolution === "true-unbound" ? "true-unbound" : void 0;
   return {
     ...correlationId === void 0 ? {} : { correlationId },
-    ...ticketNumber === void 0 ? {} : { ticketNumber },
-    ...ticketResolution === void 0 ? {} : { ticketResolution }
+    ...ticketNumber === void 0 ? {} : { ticketNumber }
   };
 }
 function restoredTicketFields(fields) {
   return {
     ...fields.correlationId === void 0 ? {} : { correlationId: fields.correlationId },
-    ...fields.ticketNumber === void 0 ? {} : { ticketNumber: fields.ticketNumber },
-    ...fields.ticketResolution === void 0 ? {} : { ticketResolution: fields.ticketResolution }
+    ...fields.ticketNumber === void 0 ? {} : { ticketNumber: fields.ticketNumber }
   };
 }
 async function loadResumableRunRecord(home, runId, authority) {
@@ -4686,7 +4710,6 @@ async function loadResumableRunRecord(home, runId, authority) {
   let derived;
   let correlationId;
   let ticketNumber;
-  let ticketResolution;
   let prNumber;
   let repository;
   let repositoryDisplay;
@@ -4800,7 +4823,6 @@ async function loadResumableRunRecord(home, runId, authority) {
       const fromAdmitted = parsePersistedTicketIdentity(record4);
       correlationId = fromAdmitted.correlationId;
       ticketNumber = fromAdmitted.ticketNumber;
-      ticketResolution = fromAdmitted.ticketResolution;
     }
   } catch (error) {
     if (error instanceof CliUsageError) throw error;
@@ -4823,13 +4845,10 @@ async function loadResumableRunRecord(home, runId, authority) {
           ...typeof rec.thinking === "string" ? { thinking: rec.thinking } : {}
         };
       }
-      if (correlationId === void 0 || ticketNumber === void 0 || ticketResolution === void 0) {
+      if (correlationId === void 0 || ticketNumber === void 0) {
         const fromInvocation = parsePersistedTicketIdentity(rec);
         if (correlationId === void 0) correlationId = fromInvocation.correlationId;
         if (ticketNumber === void 0) ticketNumber = fromInvocation.ticketNumber;
-        if (ticketResolution === void 0) {
-          ticketResolution = fromInvocation.ticketResolution;
-        }
       }
     }
   } catch (error) {
@@ -4859,7 +4878,6 @@ async function loadResumableRunRecord(home, runId, authority) {
       ...derived === void 0 ? {} : { derived },
       ...correlationId === void 0 ? {} : { correlationId },
       ...ticketNumber === void 0 ? {} : { ticketNumber },
-      ...ticketResolution === void 0 ? {} : { ticketResolution },
       ...prNumber === void 0 ? {} : { prNumber },
       ...repository === void 0 ? {} : { repository },
       ...repositoryDisplay === void 0 ? {} : { repositoryDisplay },
@@ -5031,16 +5049,16 @@ async function requireRunDirectory(candidate, display) {
       { cause: error }
     );
   }
-  let stat2;
+  let stat3;
   try {
-    stat2 = await lstat2(real);
+    stat3 = await lstat2(real);
   } catch (error) {
     throw new NotarySourceRunError(
       `notary --source-run is not a readable run directory: ${display}`,
       { cause: error }
     );
   }
-  if (!stat2.isDirectory()) {
+  if (!stat3.isDirectory()) {
     throw new NotarySourceRunError(
       `notary --source-run must be a run directory: ${display}`
     );
@@ -6182,7 +6200,6 @@ __export(invocation_exports, {
   recordEffectiveInvocationModel: () => recordEffectiveInvocationModel,
   recordLaunchedPiIdentity: () => recordLaunchedPiIdentity,
   recordLaunchedRolePackageIdentity: () => recordLaunchedRolePackageIdentity,
-  recordTrueUnboundTicketResolution: () => recordTrueUnboundTicketResolution,
   requireAuthorityRef: () => requireAuthorityRef,
   resolveDoctorCaseRunsPath: () => resolveDoctorCaseRunsPath,
   resolveGitHubRemoteRepository: () => resolveGitHubRemoteRepository
@@ -6317,11 +6334,6 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
     throw new Error(`bindAdmittedTicketNumber requires a safe positive integer, got ${String(ticketNumber)}`);
   }
-  if (admitted.ticketResolution === "true-unbound") {
-    throw new Error(
-      "bindAdmittedTicketNumber refuses to replace durable true-unbound ticket resolution"
-    );
-  }
   if (admitted.ticketNumber !== void 0) {
     if (admitted.ticketNumber === ticketNumber) return;
     throw new Error(
@@ -6339,26 +6351,6 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
     "utf8"
   );
 }
-async function recordTrueUnboundTicketResolution(admitted) {
-  if (admitted.ticketNumber !== void 0) {
-    throw new Error(
-      `recordTrueUnboundTicketResolution refuses to overwrite ticket #${admitted.ticketNumber}`
-    );
-  }
-  if (admitted.ticketResolution === "true-unbound") return;
-  admitted.ticketResolution = "true-unbound";
-  await mergeInvocationIdentityPage(admitted.runDirectory, {
-    ticketResolution: "true-unbound"
-  });
-  const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile9(admittedPath, "utf8"));
-  await writeFile4(
-    admittedPath,
-    `${JSON.stringify({ ...current, ticketResolution: "true-unbound" }, null, 2)}
-`,
-    "utf8"
-  );
-}
 async function recordLaunchedPiIdentity(runDirectory, identity) {
   await mergeInvocationIdentityPage(runDirectory, {
     piExecutable: identity.executable,
@@ -9270,859 +9262,253 @@ var init_config = __esm({
   }
 });
 
-// src/diarist-ticket-resolution.ts
-import { existsSync as existsSync5, readFileSync as readFileSync2 } from "node:fs";
-import { join as join16 } from "node:path";
-import { fileURLToPath } from "node:url";
-function resolveDiaristResolveTicketMethodPath(packageRoot = fileURLToPath(new URL("..", import.meta.url))) {
-  return join16(packageRoot, DIARIST_RESOLVE_TICKET_METHOD_RELATIVE);
-}
-function instructionContainsTicketNumber(instruction, ticketNumber) {
-  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) return false;
-  return new RegExp(`(?<!\\d)${String(ticketNumber)}(?!\\d)`).test(instruction);
-}
-function parseDiaristTicketResolverStdout(stdout) {
-  const trimmed = stdout.trim();
-  if (trimmed.length === 0) {
-    throw new DiaristTicketResolutionError(
-      "empty-stdout",
-      "diarist ticket resolver stdout is empty"
-    );
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(trimmed);
-  } catch (error) {
-    throw new DiaristTicketResolutionError(
-      "unparseable-json",
-      "diarist ticket resolver stdout is not JSON",
-      { cause: error }
-    );
-  }
-  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    throw new DiaristTicketResolutionError(
-      "not-object",
-      "diarist ticket resolver stdout must be one JSON object"
-    );
-  }
-  const record4 = parsed;
-  if (!Object.prototype.hasOwnProperty.call(record4, "assertion")) {
-    throw new DiaristTicketResolutionError(
-      "assertion-missing",
-      "diarist ticket resolver stdout missing assertion"
-    );
+// src/ticket-provenance-contracts.ts
+function isRecord11(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function projectTicketProvenanceDiagnostic(value) {
+  if (!isRecord11(value)) return void 0;
+  if (value.recordClass !== TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
+    return void 0;
   }
-  if (record4.assertion === "true-unbound") return { kind: "true-unbound" };
-  const n = record4.ticketNumber;
-  if (record4.assertion === "ticket" && typeof n === "number" && Number.isSafeInteger(n) && n >= 1) {
-    return { kind: "ticket", ticketNumber: n };
+  if (typeof value.diagnosticKind !== "string" || !DIAGNOSTIC_KINDS.has(value.diagnosticKind)) {
+    return void 0;
   }
-  throw new DiaristTicketResolutionError(
-    "assertion-uninterpretable",
-    "diarist ticket resolver assertion is not ticket|true-unbound with safe ticketNumber"
-  );
-}
-function createHermesDiaristTicketResolver(options = {}) {
-  const methodPath = resolveDiaristResolveTicketMethodPath(options.packageRoot);
-  if (!existsSync5(methodPath)) {
-    throw new Error(`diarist resolve-ticket method material missing (${methodPath})`);
+  if (typeof value.cause !== "string" || value.cause.length === 0) {
+    return void 0;
   }
-  const method = readFileSync2(methodPath, "utf8");
-  if (method.trim().length === 0) {
-    throw new Error(`diarist resolve-ticket method material is empty (${methodPath})`);
+  if (typeof value.recordedAt !== "string" || value.recordedAt.length === 0) {
+    return void 0;
   }
-  const executable = options.executable ?? "hermes";
-  return async (input) => {
-    const argv = [
-      executable,
-      "chat",
-      "--query-file",
-      ENGINE_DETOUR_STAGED_PROMPT_TOKEN,
-      "-Q",
-      "--no-restore-cwd",
-      "--ignore-rules",
-      "-t",
-      HERMES_RESOLVER_TOOLSET
-    ];
-    let result;
-    try {
-      result = await runEngineDetourOnce({
-        argv,
-        stagedPrompt: JSON.stringify({ method, instruction: input.instruction }),
-        cwd: options.cwd ?? process.cwd(),
-        ...options.env === void 0 ? {} : { env: options.env },
-        ...input.signal === void 0 ? {} : { signal: input.signal }
-      });
-    } catch (error) {
-      throw new DiaristTicketResolutionError(
-        "engine-failed",
-        "diarist ticket resolver engine failed to launch",
-        { cause: error }
-      );
-    }
-    if (result.code !== 0) {
-      throw new DiaristTicketResolutionError(
-        "engine-failed",
-        `diarist ticket resolver engine exited ${result.code}: ${result.stderr.slice(0, 500)}`
-      );
-    }
-    return parseDiaristTicketResolverStdout(result.stdout);
-  };
-}
-function createGhTicketExistenceChecker(options) {
-  const runner = options?.runner ?? createGhApiRunner();
-  return async (input) => {
-    const projected = await projectGhIssueBody(runner, {
-      owner: input.owner,
-      repo: input.repo,
-      ticketNumber: input.ticketNumber,
-      ...input.signal === void 0 ? {} : { signal: input.signal }
-    });
-    if (projected.status === "available") return true;
-    if (projected.status === "unavailable" && projected.reason === "http-non-2xx" && projected.httpStatus === 404) {
-      return false;
-    }
-    if (projected.status === "unavailable" && projected.reason === "pull-request") {
-      throw new DiaristTicketResolutionError(
-        "ticket-is-pull-request",
-        `ticket #${input.ticketNumber} resolves to a pull request, not an issue`,
-        { cause: projected }
-      );
-    }
-    if (projected.status === "unavailable") {
-      throw new DiaristTicketResolutionError(
-        "ticket-unavailable",
-        `ticket verification unavailable for ${input.owner}/${input.repo}#${input.ticketNumber}`,
-        { cause: projected }
-      );
-    }
-    throw new DiaristTicketResolutionError(
-      "ticket-invalid",
-      `ticket verification returned an invalid issue payload for ${input.owner}/${input.repo}#${input.ticketNumber}`,
-      { cause: projected }
-    );
+  return {
+    recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
+    diagnosticKind: value.diagnosticKind,
+    cause: value.cause,
+    recordedAt: value.recordedAt,
+    ...typeof value.reason === "string" ? { reason: value.reason } : {}
   };
 }
-async function verifyDiaristTicketAssertion(input) {
-  if (input.assertion.kind === "true-unbound") return input.assertion;
-  const n = input.assertion.ticketNumber;
-  if (!instructionContainsTicketNumber(input.instruction, n)) {
-    throw new DiaristTicketResolutionError(
-      "number-not-in-instruction",
-      `diarist ticket assertion #${n} complete decimal number does not appear in accepted instruction`
-    );
-  }
-  if (input.origin === void 0) {
-    throw new DiaristTicketResolutionError(
-      "origin-unresolved",
-      `diarist ticket assertion #${n} requires a resolvable github.com origin remote`
-    );
+function projectTicketProvenanceEntry(value) {
+  if (!isRecord11(value)) return void 0;
+  if (value.recordClass === TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
+    return void 0;
   }
-  let exists;
-  try {
-    exists = await input.checkExistence({
-      owner: input.origin.owner,
-      repo: input.origin.repo,
-      ticketNumber: n,
-      ...input.signal === void 0 ? {} : { signal: input.signal }
-    });
-  } catch (error) {
-    if (error instanceof DiaristTicketResolutionError) throw error;
-    throw new DiaristTicketResolutionError(
-      "ticket-unavailable",
-      `diarist ticket assertion #${n} live verification failed`,
-      { cause: error }
-    );
+  if (!isRecord11(value.basis)) return void 0;
+  if (typeof value.basis.method !== "string" || !BASIS_METHODS.has(value.basis.method)) {
+    return void 0;
   }
-  if (!exists) {
-    throw new DiaristTicketResolutionError(
-      "ticket-missing",
-      `diarist ticket assertion #${n} does not exist as a live issue on ${input.origin.owner}/${input.origin.repo}`
-    );
+  if (typeof value.sourceKind !== "string" || !SOURCE_KINDS.has(value.sourceKind)) {
+    return void 0;
   }
-  return input.assertion;
-}
-async function resolveDiaristTicketFromInstruction(input) {
-  const assertion = await input.resolver({
-    instruction: input.instruction,
-    ...input.signal === void 0 ? {} : { signal: input.signal }
-  });
-  return verifyDiaristTicketAssertion({
-    assertion,
-    instruction: input.instruction,
-    origin: input.origin,
-    checkExistence: input.checkExistence,
-    ...input.signal === void 0 ? {} : { signal: input.signal }
-  });
-}
-var DIARIST_RESOLVE_TICKET_METHOD_RELATIVE, DiaristTicketResolutionError, HERMES_RESOLVER_TOOLSET;
-var init_diarist_ticket_resolution = __esm({
-  "src/diarist-ticket-resolution.ts"() {
-    "use strict";
-    init_collector_github();
-    init_engine_detour();
-    DIARIST_RESOLVE_TICKET_METHOD_RELATIVE = "resources/diarist-resolve-ticket.md";
-    DiaristTicketResolutionError = class extends Error {
-      code = "diarist-ticket-resolution";
-      reason;
-      constructor(reason, message, options) {
-        super(message, options);
-        this.name = "DiaristTicketResolutionError";
-        this.reason = reason;
-      }
-    };
-    HERMES_RESOLVER_TOOLSET = "context_engine";
+  if (!isRecord11(value.sourceRef)) return void 0;
+  if (typeof value.transcript !== "string" || value.transcript.length === 0) {
+    return void 0;
   }
-});
-
-// src/adr-path-refs.ts
-function extractReferencedAdrPaths(text) {
-  const seen = /* @__PURE__ */ new Set();
-  const paths = [];
-  for (const match of text.matchAll(ADR_PATH_IN_BODY)) {
-    const path = match[0];
-    if (seen.has(path)) continue;
-    seen.add(path);
-    paths.push(path);
+  if (typeof value.timestamp !== "string" || value.timestamp.length === 0) {
+    return void 0;
   }
-  return Object.freeze(paths);
+  const basis = {
+    method: value.basis.method,
+    ...Array.isArray(value.basis.anchors) ? {
+      anchors: value.basis.anchors.filter(
+        (item) => typeof item === "string"
+      )
+    } : {},
+    ...typeof value.basis.note === "string" ? { note: value.basis.note } : {}
+  };
+  const sourceRef = {
+    ...typeof value.sourceRef.sessionFile === "string" ? { sessionFile: value.sourceRef.sessionFile } : {},
+    ...typeof value.sourceRef.entryId === "string" || typeof value.sourceRef.entryId === "number" ? { entryId: value.sourceRef.entryId } : {},
+    ...typeof value.sourceRef.path === "string" ? { path: value.sourceRef.path } : {},
+    ...typeof value.sourceRef.url === "string" ? { url: value.sourceRef.url } : {}
+  };
+  return {
+    basis,
+    sourceKind: value.sourceKind,
+    sourceRef,
+    transcript: value.transcript,
+    timestamp: value.timestamp
+  };
 }
-var ADR_PATH_IN_BODY;
-var init_adr_path_refs = __esm({
-  "src/adr-path-refs.ts"() {
+var TICKET_PROVENANCE_KIND, TICKET_PROVENANCE_HUMAN_VIEW, TICKET_PROVENANCE_OFFERED_WATERMARK, TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC, SOURCE_KINDS, BASIS_METHODS, DIAGNOSTIC_KINDS;
+var init_ticket_provenance_contracts = __esm({
+  "src/ticket-provenance-contracts.ts"() {
     "use strict";
-    ADR_PATH_IN_BODY = /docs\/adr\/(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.md/g;
+    TICKET_PROVENANCE_KIND = "ticket-provenance";
+    TICKET_PROVENANCE_HUMAN_VIEW = "\u8D77\u5C45\u5F55.md";
+    TICKET_PROVENANCE_OFFERED_WATERMARK = "offered-identities.jsonl";
+    TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC = "diagnostic";
+    SOURCE_KINDS = /* @__PURE__ */ new Set([
+      "cc-session",
+      "issue-body-comment",
+      "adr-decision-key",
+      "ticket-decree-block"
+    ]);
+    BASIS_METHODS = /* @__PURE__ */ new Set(["llm-semantic"]);
+    DIAGNOSTIC_KINDS = /* @__PURE__ */ new Set([
+      "collector-failed",
+      "issue-source-failed",
+      "quote-verify-failed"
+    ]);
   }
 });
 
-// src/diarist-mechanical.ts
-function extractCornerQuotes(text, minLength = DEFAULT_QUOTE_MIN) {
-  const out = [];
-  const re = /「([^」]+)」/g;
-  let match;
-  while ((match = re.exec(text)) !== null) {
-    const q = match[1].trim();
-    if (q.length >= minLength) out.push(q);
+// src/ticket-provenance.ts
+import { createHash as createHash5 } from "node:crypto";
+import { appendFileSync as appendFileSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { join as join16 } from "node:path";
+function ticketProvenanceSubject(ticketNumber) {
+  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
+    throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
   }
-  return out;
+  return String(ticketNumber);
 }
-function buildDiaristAnchors(input) {
-  const fromBody = input.ticketBody === void 0 ? [] : extractCornerQuotes(input.ticketBody);
-  const quotes = [...fromBody, ...input.extraQuotes ?? []];
-  const seen = /* @__PURE__ */ new Set();
-  const uniqueQuotes = [];
-  for (const q of quotes) {
-    if (seen.has(q)) continue;
-    seen.add(q);
-    uniqueQuotes.push(q);
-  }
-  return {
+function ticketProvenanceEntryIdentity(input) {
+  const ref = input.sourceRef;
+  const refKey = [
+    ref.sessionFile ?? "",
+    ref.entryId === void 0 ? "" : String(ref.entryId),
+    ref.path ?? "",
+    ref.url ?? ""
+  ].join("
");
+  const material = [
+    String(input.ticketNumber),
+    input.sourceKind,
+    refKey,
+    input.transcript
+  ].join("\0");
+  return createHash5("sha256").update(material, "utf8").digest("hex");
+}
+function appendTicketProvenanceEntry(input) {
+  const subject = ticketProvenanceSubject(input.ticketNumber);
+  const identity = ticketProvenanceEntryIdentity({
     ticketNumber: input.ticketNumber,
-    quotes: uniqueQuotes
-  };
+    sourceKind: input.entry.sourceKind,
+    sourceRef: input.entry.sourceRef,
+    transcript: input.entry.transcript
+  });
+  return sitianReport({
+    level: "event",
+    kind: TICKET_PROVENANCE_KIND,
+    identity,
+    subject,
+    cwd: input.cwd,
+    ...input.home === void 0 ? {} : { home: input.home },
+    host: input.host ?? "diarist",
+    source: input.source ?? "diarist",
+    payload: input.entry,
+    raw: input.entry.sourceRef.sessionFile !== void 0 && input.entry.sourceRef.entryId !== void 0 ? {
+      sessionFile: input.entry.sourceRef.sessionFile,
+      entryId: input.entry.sourceRef.entryId
+    } : void 0
+  });
 }
-function verifyQuotesVerbatim(sourceText, quotes) {
-  const failed2 = [];
-  for (const q of quotes) {
-    if (q.length === 0) continue;
-    if (!sourceText.includes(q)) failed2.push(q);
-  }
-  if (failed2.length === 0) return { ok: true };
-  return { ok: false, failedQuotes: failed2 };
-}
-function blockToLlmEntry(block, input) {
-  const verify = verifyQuotesVerbatim(block.transcript, input.quotes);
-  if (!verify.ok) {
-    return {
-      ok: false,
-      failedQuotes: verify.failedQuotes,
-      cause: `verbatim verify failed: ${verify.failedQuotes.join(" | ")}`
-    };
-  }
-  const anchorNotes = [`#${input.anchors.ticketNumber}`];
-  const seen = new Set(anchorNotes);
-  for (const q of [...input.anchors.quotes, ...input.quotes]) {
-    if (seen.has(q)) continue;
-    seen.add(q);
-    anchorNotes.push(q);
-    if (anchorNotes.length >= 12) break;
-  }
+function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
+  const path = resolveSitianRecordPath({
+    level: "event",
+    kind: TICKET_PROVENANCE_KIND,
+    subject: ticketProvenanceSubject(ticketNumber),
+    cwd,
+    ...home === void 0 ? {} : { home }
+  });
   return {
-    ok: true,
-    entry: {
-      basis: {
-        method: "llm-semantic",
-        anchors: anchorNotes,
-        ...input.note === void 0 ? {} : { note: input.note }
-      },
-      sourceKind: block.sourceKind,
-      sourceRef: block.sourceRef,
-      transcript: block.transcript,
-      timestamp: block.timestamp
-    }
+    recordFile: path.recordFile,
+    volumeDir: path.sessionDir,
+    humanViewFile: join16(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
+    offeredWatermarkFile: join16(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK)
   };
 }
-var DEFAULT_QUOTE_MIN;
-var init_diarist_mechanical = __esm({
-  "src/diarist-mechanical.ts"() {
-    "use strict";
-    init_activation_ledger_topology();
-    DEFAULT_QUOTE_MIN = 6;
+function readOfferedIdentities(ticketNumber, cwd, home) {
+  const { offeredWatermarkFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
+  if (!existsSync5(offeredWatermarkFile)) return /* @__PURE__ */ new Set();
+  let text;
+  try {
+    text = readFileSync2(offeredWatermarkFile, "utf8");
+  } catch (error) {
+    throw new TicketProvenanceWatermarkError(
+      "unreadable",
+      `ticket-provenance offered watermark unreadable (${offeredWatermarkFile})`,
+      { cause: error }
+    );
   }
-});
-
-// src/reviewer-git-snapshot.ts
-function parseReviewerRefSnapshot(raw) {
-  const refs = {};
-  for (const line2 of raw.split("\n")) {
-    if (!line2) continue;
-    const fields = line2.split("\0");
-    if (fields.length !== 5 || !fields[0] || !fields[1] || !fields[3]) {
-      throw new Error(`Malformed Git ref snapshot line: ${line2}`);
+  const seen = /* @__PURE__ */ new Set();
+  const lines = text.split("\n");
+  for (let index = 0; index < lines.length; index += 1) {
+    const trimmed = lines[index].trim();
+    if (!trimmed) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(trimmed);
+    } catch (error) {
+      throw new TicketProvenanceWatermarkError(
+        "malformed-json",
+        `ticket-provenance offered watermark malformed JSON at line ${index + 1} (${offeredWatermarkFile})`,
+        { cause: error }
+      );
     }
-    const peeledCommitId = fields[3] === "commit" ? fields[1] : fields[4] === "commit" && fields[2] ? fields[2] : null;
-    refs[fields[0]] = Object.freeze({
-      objectId: fields[1],
-      peeledCommitId
-    });
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) || typeof parsed.identity !== "string" || parsed.identity.length === 0) {
+      throw new TicketProvenanceWatermarkError(
+        "bad-shape",
+        `ticket-provenance offered watermark bad shape at line ${index + 1} (${offeredWatermarkFile})`
+      );
+    }
+    seen.add(parsed.identity);
   }
-  return refs;
-}
-function reviewerRefSnapshotArgs() {
-  return ["for-each-ref", "--format=%(refname)%00%(objectname)%00%(*objectname)%00%(objecttype)%00%(*objecttype)", ...REVIEW_REF_PREFIXES];
-}
-function immutableReviewerRefs(refs) {
-  return Object.freeze(Object.fromEntries(Object.entries(refs).sort(([a], [b]) => a.localeCompare(b)).map(([name, entry]) => [name, Object.freeze({ objectId: entry.objectId, peeledCommitId: entry.peeledCommitId })])));
-}
-function sameReviewerPinnedTarget(actual, expected) {
-  return actual.repositoryRoot === expected.repositoryRoot && actual.objectFormat === expected.objectFormat && actual.targetHead === expected.targetHead;
+  return seen;
 }
-var REVIEW_REF_PREFIXES;
-var init_reviewer_git_snapshot = __esm({
-  "src/reviewer-git-snapshot.ts"() {
-    "use strict";
-    REVIEW_REF_PREFIXES = ["refs/heads", "refs/tags", "refs/remotes"];
-  }
-});
-
-// src/reviewer-preflight-error.ts
-var ReviewerCorrectablePreflightError;
-var init_reviewer_preflight_error = __esm({
-  "src/reviewer-preflight-error.ts"() {
-    "use strict";
-    ReviewerCorrectablePreflightError = class extends Error {
-      constructor(code, diagnostic = `${code} constraint failed`, options) {
-        super(`${code}: ${diagnostic}`, options);
-        this.code = code;
-        this.diagnostic = diagnostic;
-        this.name = "ReviewerCorrectablePreflightError";
-      }
-      code;
-      diagnostic;
-    };
-  }
-});
-
-// src/reviewer-pinned-git.ts
-import { execFile as execFile3 } from "node:child_process";
-import { access as access2, realpath as realpath6 } from "node:fs/promises";
-import { promisify as promisify3 } from "node:util";
-async function execGit(args, options) {
-  try {
-    return await execFileAsync3("git", args, {
-      ...options,
-      env: { ...process.env, LC_ALL: "C" }
-    });
-  } catch (error) {
-    const source = error;
-    const wrapped = new Error("git process failed", { cause: error });
-    Object.assign(wrapped, { code: source.code ?? null, signal: source.signal ?? null, timedOut: source.killed === true && source.signal === "SIGTERM", aborted: source.name === "AbortError", stderr: String(source.stderr ?? ""), stdout: String(source.stdout ?? "") });
-    throw wrapped;
+function recordOfferedIdentities(input) {
+  if (input.identities.length === 0) return;
+  const { volumeDir, offeredWatermarkFile } = resolveTicketProvenanceVolume(
+    input.ticketNumber,
+    input.cwd,
+    input.home
+  );
+  const already = new Set(readOfferedIdentities(input.ticketNumber, input.cwd, input.home));
+  const rows = [];
+  for (const identity of input.identities) {
+    if (identity.length === 0 || already.has(identity)) continue;
+    rows.push(`${JSON.stringify({ identity })}
+`);
+    already.add(identity);
   }
+  if (rows.length === 0) return;
+  mkdirSync3(volumeDir, { recursive: true });
+  appendFileSync2(offeredWatermarkFile, rows.join(""), "utf8");
 }
-function exitCode(error) {
-  const code = typeof error === "object" && error !== null ? error.code : void 0;
-  return typeof code === "number" ? code : void 0;
-}
-function gitStderr(error) {
-  if (typeof error !== "object" || error === null) return "";
-  const stderr = error.stderr;
-  return typeof stderr === "string" ? stderr : "";
-}
-function isConfirmedMissingOriginRemote(error) {
-  return /No such remote ['"]origin['"]/.test(gitStderr(error));
-}
-function isConfirmedPinnedPathAbsent(error, path) {
-  const stderr = gitStderr(error);
-  const quoted = `'${path}'`;
-  return stderr.includes(`path ${quoted} does not exist in `) || stderr.includes(`path ${quoted} exists on disk, but not in `);
-}
-async function repositoryIsAvailable(root) {
-  try {
-    await access2(`${root}/.git`);
-    return { available: true };
-  } catch (cause) {
-    return { available: false, cause };
+async function readTicketProvenance(ticketNumber, cwd, home) {
+  const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
+  const { records: records2 } = await readSitianRecords(recordFile);
+  const entries = [];
+  const diagnostics = [];
+  let skipped = 0;
+  for (const record4 of records2) {
+    if (record4.kind !== TICKET_PROVENANCE_KIND) {
+      skipped += 1;
+      continue;
+    }
+    const diagnostic = projectTicketProvenanceDiagnostic(record4.payload);
+    if (diagnostic !== void 0) {
+      diagnostics.push(diagnostic);
+      continue;
+    }
+    const entry = projectTicketProvenanceEntry(record4.payload);
+    if (entry === void 0) {
+      skipped += 1;
+      continue;
+    }
+    entries.push(entry);
   }
+  return { entries, diagnostics, records: records2, recordFile, skipped };
 }
-function shortNameFromPinnedRef(refName) {
-  const short = refName.startsWith("refs/heads/") ? refName.slice("refs/heads/".length) : refName.startsWith("refs/tags/") ? refName.slice("refs/tags/".length) : refName.startsWith("refs/remotes/") ? refName.slice("refs/remotes/".length).replace(/^[^/]+\//, "") : refName;
-  const trimmed = short.trim();
-  return trimmed === "" ? void 0 : trimmed;
-}
-function branchNamesAtPinnedHead(pin) {
-  const names = /* @__PURE__ */ new Set();
-  for (const [refName, entry] of Object.entries(pin.refs)) {
-    if (entry.peeledCommitId !== pin.targetHead) continue;
-    if (!refName.startsWith("refs/heads/") && !refName.startsWith("refs/remotes/")) continue;
-    const short = shortNameFromPinnedRef(refName);
-    if (short !== void 0) names.add(short);
+function markdownFenceFor(text) {
+  let longest = 0;
+  const runs = text.match(/`+/g);
+  if (runs !== null) {
+    for (const run of runs) {
+      if (run.length > longest) longest = run.length;
+    }
   }
-  return Object.freeze([...names]);
-}
-async function gitText(root, args) {
-  const { stdout } = await execGit(["-C", root, ...args], { encoding: "utf8" });
-  return stdout.trim();
-}
-async function createReviewerPinnedGitReader(root = process.cwd()) {
-  const discoveredRoot = await gitText(root, ["rev-parse", "--show-toplevel"]);
-  const repositoryRoot = await realpath6(discoveredRoot);
-  const objectFormat = await gitText(repositoryRoot, ["rev-parse", "--show-object-format"]);
-  if (objectFormat !== "sha1" && objectFormat !== "sha256") throw new Error("Unsupported Git object format");
-  const oidWidth = objectFormat === "sha1" ? 40 : 64;
-  const targetHead = await gitText(repositoryRoot, ["rev-parse", "HEAD^{commit}"]);
-  const reachableCommitIds = Object.freeze((await gitText(repositoryRoot, ["rev-list", targetHead])).split("\n").filter(Boolean));
-  const refs = parseReviewerRefSnapshot(await gitText(repositoryRoot, reviewerRefSnapshotArgs()));
-  const pin = immutableReviewerPin({ repositoryRoot, objectFormat, targetHead, refs });
-  const invalid = (code, diagnostic, cause) => {
-    throw new ReviewerCorrectablePreflightError(code, diagnostic, cause === void 0 ? void 0 : { cause });
-  };
-  const symbolic = (base) => {
-    const selected = Object.hasOwn(refs, base) ? base : (() => {
-      const candidates = [`refs/heads/${base}`, `refs/tags/${base}`, `refs/remotes/${base}`].filter((name) => Object.hasOwn(refs, name));
-      if (candidates.length > 1) invalid("base-invalid", "base revision is ambiguous across pinned refs");
-      return candidates[0];
-    })();
-    if (selected === void 0) return void 0;
-    const commit = refs[selected]?.peeledCommitId;
-    if (commit === null) invalid("base-invalid", "base revision ref must resolve to a commit");
-    return commit ?? void 0;
-  };
-  return Object.freeze({
-    pin,
-    async snapshot() {
-      const liveObjectFormat = await gitText(repositoryRoot, ["rev-parse", "--show-object-format"]);
-      if (liveObjectFormat !== "sha1" && liveObjectFormat !== "sha256") throw new Error("Unsupported Git object format");
-      return immutableReviewerPin({ repositoryRoot, objectFormat: liveObjectFormat, targetHead: await gitText(repositoryRoot, ["rev-parse", "HEAD^{commit}"]), refs: parseReviewerRefSnapshot(await gitText(repositoryRoot, reviewerRefSnapshotArgs())) });
-    },
-    async resolve(base) {
-      if (!/^[A-Za-z0-9._/~^+-]+$/.test(base) || base.startsWith("-") || base.includes("..") || base.includes("@{")) {
-        invalid("base-invalid", "base revision syntax is invalid or uses a forbidden revision form");
-      }
-      let commit;
-      const headExpression = /^HEAD((?:~[0-9]+|\^[0-9]+)*)$/.exec(base);
-      if (headExpression) {
-        try {
-          commit = await gitText(repositoryRoot, ["rev-parse", "--verify", `${targetHead}${headExpression[1]}^{commit}`]);
-        } catch (error) {
-          if (exitCode(error) === 128) {
-            const repository = await repositoryIsAvailable(repositoryRoot);
-            if (repository.available) invalid("base-invalid", "base revision HEAD ancestry expression must resolve to a reachable commit", error);
-          }
-          throw error;
-        }
-      } else if (new RegExp(`^[0-9a-f]{${oidWidth}}$`).test(base)) commit = base;
-      else if (new RegExp(`^[0-9a-f]{4,${oidWidth - 1}}$`).test(base) && !(objectFormat === "sha256" && base.length === 40)) {
-        const matches = reachableCommitIds.filter((candidate) => candidate.startsWith(base));
-        if (matches.length !== 1) invalid("base-invalid", "base revision abbreviation must identify exactly one reachable commit");
-        commit = matches[0];
-      } else commit = symbolic(base);
-      if (commit === void 0) invalid("base-invalid", "base revision must name an existing pinned ref or reachable commit");
-      try {
-        commit = await gitText(repositoryRoot, ["rev-parse", "--verify", `${commit}^{commit}`]);
-      } catch (error) {
-        if (exitCode(error) === 128) {
-          const repository = await repositoryIsAvailable(repositoryRoot);
-          if (repository.available) invalid("base-invalid", "base revision must resolve to an existing commit", error);
-        }
-        throw error;
-      }
-      try {
-        await gitText(repositoryRoot, ["merge-base", "--is-ancestor", commit, targetHead]);
-      } catch (error) {
-        if (exitCode(error) === 1) invalid("base-invalid", "base revision must be an ancestor of the pinned target", error);
-        throw error;
-      }
-      return commit;
-    },
-    async range(base) {
-      let mergeBase;
-      try {
-        mergeBase = await gitText(repositoryRoot, ["merge-base", base, targetHead]);
-      } catch (error) {
-        if (exitCode(error) === 1) {
-          invalid("range-invalid", "review range requires a common ancestor for base and pinned target", error);
-        }
-        throw error;
-      }
-      if (!mergeBase) invalid("range-invalid", "review range requires a common ancestor for base and pinned target");
-      const diffCommand = `git diff ${mergeBase}...${targetHead}`;
-      const [{ stdout: diff }, commitsText] = await Promise.all([
-        execGit(["-C", repositoryRoot, "diff", `${mergeBase}...${targetHead}`], { encoding: "buffer", maxBuffer: 64 * 1024 * 1024 }),
-        gitText(repositoryRoot, ["rev-list", "--reverse", `${mergeBase}..${targetHead}`])
-      ]);
-      if (diff.length === 0) invalid("range-invalid", "review range must contain a non-empty diff between base and pinned target");
-      return Object.freeze({ base: mergeBase, target: targetHead, diffCommand, diffSha256: sha256Hex(Uint8Array.from(diff)), commits: Object.freeze(commitsText ? commitsText.split("\n") : []) });
-    },
-    async featureTokens() {
-      const names = /* @__PURE__ */ new Set();
-      for (const [refName, entry] of Object.entries(pin.refs)) {
-        if (entry.peeledCommitId !== targetHead) continue;
-        const short = shortNameFromPinnedRef(refName);
-        if (short !== void 0) names.add(short);
-      }
-      return Object.freeze([...names]);
-    },
-    async listSpecCandidatePaths() {
-      const roots = ["docs", "specs", ".scratch"];
-      const text = await gitText(repositoryRoot, [
-        "ls-tree",
-        "-r",
-        "--name-only",
-        targetHead,
-        "--",
-        ...roots
-      ]);
-      return Object.freeze(text === "" ? [] : text.split("\n").filter((line2) => line2.length > 0));
-    },
-    async originRepository() {
-      let remoteUrl;
-      try {
-        remoteUrl = await gitText(repositoryRoot, ["remote", "get-url", "origin"]);
-      } catch (error) {
-        if (isConfirmedMissingOriginRemote(error)) return void 0;
-        throw error;
-      }
-      return parseGitHubOriginRemote(remoteUrl);
-    },
-    async commitMessagesNewestFirst(base) {
-      const text = await gitText(repositoryRoot, [
-        "log",
-        "--format=%s",
-        `${base}..${targetHead}`
-      ]);
-      return Object.freeze(text === "" ? [] : text.split("\n"));
-    },
-    async readPinnedText(path) {
-      if (path.length === 0 || path.startsWith("/") || path.includes("\0") || path.split("/").some((part) => part === ".." || part === "")) {
-        return void 0;
-      }
-      try {
-        const { stdout } = await execGit(
-          ["-C", repositoryRoot, "show", `${targetHead}:${path}`],
-          { encoding: "utf8", maxBuffer: 8 * 1024 * 1024 }
-        );
-        return stdout;
-      } catch (error) {
-        if (isConfirmedPinnedPathAbsent(error, path)) return void 0;
-        throw error;
-      }
-    }
-  });
-}
-function parseGitHubOriginRemote(remoteUrl) {
-  const trimmed = remoteUrl.trim();
-  if (trimmed.length === 0) return void 0;
-  const scp = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(trimmed);
-  if (scp) return normalizeOrigin(scp[1], scp[2]);
-  const ssh = /^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i.exec(trimmed);
-  if (ssh) return normalizeOrigin(ssh[1], ssh[2]);
-  let parsed;
-  try {
-    parsed = new URL(trimmed);
-  } catch {
-    return void 0;
-  }
-  if (!/^github\.com$/i.test(parsed.hostname)) return void 0;
-  if (parsed.search !== "" || parsed.hash !== "") return void 0;
-  const parts = parsed.pathname.split("/").filter((p) => p.length > 0);
-  if (parts.length !== 2) return void 0;
-  return normalizeOrigin(parts[0], parts[1]);
-}
-function normalizeOrigin(ownerRaw, repoRaw) {
-  const owner = ownerRaw.trim();
-  const repo = stripGitSuffix2(repoRaw.trim());
-  if (owner.length === 0 || repo.length === 0) return void 0;
-  if (/[/?#@\\]/.test(owner) || /[/?#@\\]/.test(repo)) return void 0;
-  return Object.freeze({ owner, repo });
-}
-function stripGitSuffix2(name) {
-  return name.toLowerCase().endsWith(".git") ? name.slice(0, -4) : name;
-}
-var execFileAsync3, immutableReviewerPin;
-var init_reviewer_pinned_git = __esm({
-  "src/reviewer-pinned-git.ts"() {
-    "use strict";
-    init_reviewer_git_snapshot();
-    init_sha256();
-    init_reviewer_preflight_error();
-    execFileAsync3 = promisify3(execFile3);
-    immutableReviewerPin = (pin) => Object.freeze({
-      repositoryRoot: pin.repositoryRoot,
-      objectFormat: pin.objectFormat,
-      targetHead: pin.targetHead,
-      refs: immutableReviewerRefs(pin.refs)
-    });
-  }
-});
-
-// src/ticket-provenance-contracts.ts
-function isRecord11(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function projectTicketProvenanceDiagnostic(value) {
-  if (!isRecord11(value)) return void 0;
-  if (value.recordClass !== TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
-    return void 0;
-  }
-  if (typeof value.diagnosticKind !== "string" || !DIAGNOSTIC_KINDS.has(value.diagnosticKind)) {
-    return void 0;
-  }
-  if (typeof value.cause !== "string" || value.cause.length === 0) {
-    return void 0;
-  }
-  if (typeof value.recordedAt !== "string" || value.recordedAt.length === 0) {
-    return void 0;
-  }
-  return {
-    recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
-    diagnosticKind: value.diagnosticKind,
-    cause: value.cause,
-    recordedAt: value.recordedAt,
-    ...typeof value.reason === "string" ? { reason: value.reason } : {}
-  };
-}
-function projectTicketProvenanceEntry(value) {
-  if (!isRecord11(value)) return void 0;
-  if (value.recordClass === TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
-    return void 0;
-  }
-  if (!isRecord11(value.basis)) return void 0;
-  if (typeof value.basis.method !== "string" || !BASIS_METHODS.has(value.basis.method)) {
-    return void 0;
-  }
-  if (typeof value.sourceKind !== "string" || !SOURCE_KINDS.has(value.sourceKind)) {
-    return void 0;
-  }
-  if (!isRecord11(value.sourceRef)) return void 0;
-  if (typeof value.transcript !== "string" || value.transcript.length === 0) {
-    return void 0;
-  }
-  if (typeof value.timestamp !== "string" || value.timestamp.length === 0) {
-    return void 0;
-  }
-  const basis = {
-    method: value.basis.method,
-    ...Array.isArray(value.basis.anchors) ? {
-      anchors: value.basis.anchors.filter(
-        (item) => typeof item === "string"
-      )
-    } : {},
-    ...typeof value.basis.note === "string" ? { note: value.basis.note } : {}
-  };
-  const sourceRef = {
-    ...typeof value.sourceRef.sessionFile === "string" ? { sessionFile: value.sourceRef.sessionFile } : {},
-    ...typeof value.sourceRef.entryId === "string" || typeof value.sourceRef.entryId === "number" ? { entryId: value.sourceRef.entryId } : {},
-    ...typeof value.sourceRef.path === "string" ? { path: value.sourceRef.path } : {},
-    ...typeof value.sourceRef.url === "string" ? { url: value.sourceRef.url } : {}
-  };
-  return {
-    basis,
-    sourceKind: value.sourceKind,
-    sourceRef,
-    transcript: value.transcript,
-    timestamp: value.timestamp
-  };
-}
-var TICKET_PROVENANCE_KIND, TICKET_PROVENANCE_HUMAN_VIEW, TICKET_PROVENANCE_OFFERED_WATERMARK, TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC, SOURCE_KINDS, BASIS_METHODS, DIAGNOSTIC_KINDS;
-var init_ticket_provenance_contracts = __esm({
-  "src/ticket-provenance-contracts.ts"() {
-    "use strict";
-    TICKET_PROVENANCE_KIND = "ticket-provenance";
-    TICKET_PROVENANCE_HUMAN_VIEW = "\u8D77\u5C45\u5F55.md";
-    TICKET_PROVENANCE_OFFERED_WATERMARK = "offered-identities.jsonl";
-    TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC = "diagnostic";
-    SOURCE_KINDS = /* @__PURE__ */ new Set([
-      "cc-session",
-      "issue-body-comment",
-      "adr-decision-key",
-      "ticket-decree-block"
-    ]);
-    BASIS_METHODS = /* @__PURE__ */ new Set(["llm-semantic"]);
-    DIAGNOSTIC_KINDS = /* @__PURE__ */ new Set([
-      "collector-failed",
-      "issue-source-failed",
-      "quote-verify-failed"
-    ]);
-  }
-});
-
-// src/ticket-provenance.ts
-import { createHash as createHash5 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join17 } from "node:path";
-function ticketProvenanceSubject(ticketNumber) {
-  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
-    throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
-  }
-  return String(ticketNumber);
-}
-function ticketProvenanceEntryIdentity(input) {
-  const ref = input.sourceRef;
-  const refKey = [
-    ref.sessionFile ?? "",
-    ref.entryId === void 0 ? "" : String(ref.entryId),
-    ref.path ?? "",
-    ref.url ?? ""
-  ].join("
");
-  const material = [
-    String(input.ticketNumber),
-    input.sourceKind,
-    refKey,
-    input.transcript
-  ].join("\0");
-  return createHash5("sha256").update(material, "utf8").digest("hex");
-}
-function appendTicketProvenanceEntry(input) {
-  const subject = ticketProvenanceSubject(input.ticketNumber);
-  const identity = ticketProvenanceEntryIdentity({
-    ticketNumber: input.ticketNumber,
-    sourceKind: input.entry.sourceKind,
-    sourceRef: input.entry.sourceRef,
-    transcript: input.entry.transcript
-  });
-  return sitianReport({
-    level: "event",
-    kind: TICKET_PROVENANCE_KIND,
-    identity,
-    subject,
-    cwd: input.cwd,
-    ...input.home === void 0 ? {} : { home: input.home },
-    host: input.host ?? "diarist",
-    source: input.source ?? "diarist",
-    payload: input.entry,
-    raw: input.entry.sourceRef.sessionFile !== void 0 && input.entry.sourceRef.entryId !== void 0 ? {
-      sessionFile: input.entry.sourceRef.sessionFile,
-      entryId: input.entry.sourceRef.entryId
-    } : void 0
-  });
-}
-function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
-  const path = resolveSitianRecordPath({
-    level: "event",
-    kind: TICKET_PROVENANCE_KIND,
-    subject: ticketProvenanceSubject(ticketNumber),
-    cwd,
-    ...home === void 0 ? {} : { home }
-  });
-  return {
-    recordFile: path.recordFile,
-    volumeDir: path.sessionDir,
-    humanViewFile: join17(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
-    offeredWatermarkFile: join17(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK)
-  };
-}
-function readOfferedIdentities(ticketNumber, cwd, home) {
-  const { offeredWatermarkFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  if (!existsSync6(offeredWatermarkFile)) return /* @__PURE__ */ new Set();
-  let text;
-  try {
-    text = readFileSync3(offeredWatermarkFile, "utf8");
-  } catch (error) {
-    throw new TicketProvenanceWatermarkError(
-      "unreadable",
-      `ticket-provenance offered watermark unreadable (${offeredWatermarkFile})`,
-      { cause: error }
-    );
-  }
-  const seen = /* @__PURE__ */ new Set();
-  const lines = text.split("\n");
-  for (let index = 0; index < lines.length; index += 1) {
-    const trimmed = lines[index].trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch (error) {
-      throw new TicketProvenanceWatermarkError(
-        "malformed-json",
-        `ticket-provenance offered watermark malformed JSON at line ${index + 1} (${offeredWatermarkFile})`,
-        { cause: error }
-      );
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) || typeof parsed.identity !== "string" || parsed.identity.length === 0) {
-      throw new TicketProvenanceWatermarkError(
-        "bad-shape",
-        `ticket-provenance offered watermark bad shape at line ${index + 1} (${offeredWatermarkFile})`
-      );
-    }
-    seen.add(parsed.identity);
-  }
-  return seen;
-}
-function recordOfferedIdentities(input) {
-  if (input.identities.length === 0) return;
-  const { volumeDir, offeredWatermarkFile } = resolveTicketProvenanceVolume(
-    input.ticketNumber,
-    input.cwd,
-    input.home
-  );
-  const already = new Set(readOfferedIdentities(input.ticketNumber, input.cwd, input.home));
-  const rows = [];
-  for (const identity of input.identities) {
-    if (identity.length === 0 || already.has(identity)) continue;
-    rows.push(`${JSON.stringify({ identity })}
-`);
-    already.add(identity);
-  }
-  if (rows.length === 0) return;
-  mkdirSync3(volumeDir, { recursive: true });
-  appendFileSync2(offeredWatermarkFile, rows.join(""), "utf8");
-}
-async function readTicketProvenance(ticketNumber, cwd, home) {
-  const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  const { records: records2 } = await readSitianRecords(recordFile);
-  const entries = [];
-  const diagnostics = [];
-  let skipped = 0;
-  for (const record4 of records2) {
-    if (record4.kind !== TICKET_PROVENANCE_KIND) {
-      skipped += 1;
-      continue;
-    }
-    const diagnostic = projectTicketProvenanceDiagnostic(record4.payload);
-    if (diagnostic !== void 0) {
-      diagnostics.push(diagnostic);
-      continue;
-    }
-    const entry = projectTicketProvenanceEntry(record4.payload);
-    if (entry === void 0) {
-      skipped += 1;
-      continue;
-    }
-    entries.push(entry);
-  }
-  return { entries, diagnostics, records: records2, recordFile, skipped };
-}
-function markdownFenceFor(text) {
-  let longest = 0;
-  const runs = text.match(/`+/g);
-  if (runs !== null) {
-    for (const run of runs) {
-      if (run.length > longest) longest = run.length;
-    }
-  }
-  return "`".repeat(Math.max(3, longest + 1));
+  return "`".repeat(Math.max(3, longest + 1));
 }
 function renderTicketProvenanceMarkdown(input) {
   const lines = [
@@ -10224,203 +9610,86 @@ function writeTicketProvenanceHumanView(input) {
     ticketNumber: input.ticketNumber,
     entries: input.entries
   });
-  writeFileSync3(volume.humanViewFile, md, "utf8");
-  return volume.humanViewFile;
-}
-var TicketProvenanceWatermarkError;
-var init_ticket_provenance = __esm({
-  "src/ticket-provenance.ts"() {
-    "use strict";
-    init_sitian_facade();
-    init_ticket_provenance_contracts();
-    TicketProvenanceWatermarkError = class extends Error {
-      code = "ticket-provenance-watermark";
-      reason;
-      constructor(reason, message, options) {
-        super(message, options);
-        this.name = "TicketProvenanceWatermarkError";
-        this.reason = reason;
-      }
-    };
-  }
-});
-
-// src/diarist.ts
-import { readFileSync as readFileSync4 } from "node:fs";
-import { execFileSync as execFileSync3 } from "node:child_process";
-function resolveDiaristGithubOrigin(projectRoot) {
-  let remoteUrl;
-  try {
-    remoteUrl = execFileSync3("git", ["remote", "get-url", "origin"], {
-      cwd: projectRoot,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    }).trim();
-  } catch {
-    return void 0;
-  }
-  if (remoteUrl.length === 0) return void 0;
-  return parseGitHubOriginRemote(remoteUrl);
-}
-function blockEntryIdentity(ticketNumber, block) {
-  return ticketProvenanceEntryIdentity({
-    ticketNumber,
-    sourceKind: block.sourceKind,
-    sourceRef: block.sourceRef,
-    transcript: block.transcript
-  });
-}
-function loadDiaristSourceCatalog(path) {
-  const parsed = JSON.parse(readFileSync4(path, "utf8"));
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error(`diarist source catalog is not an object (${path})`);
-  }
-  const record4 = parsed;
-  if (typeof record4.ticketNumber !== "number" || typeof record4.cwd !== "string") {
-    throw new Error(`diarist source catalog is missing ticket coordinates (${path})`);
-  }
-  if (!Array.isArray(record4.candidates)) {
-    throw new Error(`diarist source catalog is missing candidates (${path})`);
-  }
-  return parsed;
-}
-async function commitDiaristSelections(input) {
-  const { ticketNumber, cwd } = input.catalog;
-  const homeOpt = input.catalog.home === void 0 ? {} : { home: input.catalog.home };
-  const volumePaths = ensureTicketProvenanceVolume(ticketNumber, cwd, input.catalog.home);
-  const anchors = buildDiaristAnchors({ ticketNumber });
-  const before = await readTicketProvenance(ticketNumber, cwd, input.catalog.home);
-  let acceptedRows = 0;
-  let rejectedQuotes = 0;
-  let unknownCandidate = false;
-  for (const selection of input.selections) {
-    const block = input.catalog.candidates[selection.candidateIndex];
-    if (block === void 0) {
-      unknownCandidate = true;
-      continue;
-    }
-    const projected = blockToLlmEntry(block, {
-      anchors,
-      quotes: selection.quotes,
-      ...selection.note === void 0 ? {} : { note: selection.note }
-    });
-    if (!projected.ok) {
-      rejectedQuotes += 1;
-      appendQuoteVerifyFailureDiagnostic({
-        ticketNumber,
-        cwd,
-        ...homeOpt,
-        cause: projected.cause
-      });
-      continue;
-    }
-    appendTicketProvenanceEntry({
-      ticketNumber,
-      cwd,
-      ...homeOpt,
-      entry: projected.entry,
-      source: "diarist"
-    });
-    acceptedRows += 1;
-  }
-  const identities = input.catalog.candidates.map(
-    (block) => blockEntryIdentity(ticketNumber, block)
-  );
-  const alreadyWatermarked = readOfferedIdentities(ticketNumber, cwd, input.catalog.home);
-  const watermarked = identities.filter((identity) => !alreadyWatermarked.has(identity)).length;
-  recordOfferedIdentities({ ticketNumber, cwd, ...homeOpt, identities });
-  const volume = await readTicketProvenance(ticketNumber, cwd, input.catalog.home);
-  const humanViewFile = writeTicketProvenanceHumanView({
-    ticketNumber,
-    cwd,
-    ...homeOpt,
-    entries: volume.entries
-  });
-  return {
-    ticketNumber,
-    offered: input.catalog.candidates.length,
-    appended: volume.entries.length - before.entries.length,
-    rejectedQuotes,
-    watermarked,
-    volumeRecordFile: volumePaths.recordFile,
-    humanViewFile,
-    collectorStatus: input.catalog.candidates.length === 0 ? "skipped-no-fresh" : acceptedRows > 0 ? "ok" : input.selections.length === 0 ? "empty-selection" : "nothing-appended",
-    failureCauses: [
-      ...unknownCandidate ? ["unknown-candidate"] : [],
-      ...rejectedQuotes > 0 ? ["quote-verify-rejected"] : []
-    ]
-  };
+  writeFileSync3(volume.humanViewFile, md, "utf8");
+  return volume.humanViewFile;
 }
-var init_diarist = __esm({
-  "src/diarist.ts"() {
+var TicketProvenanceWatermarkError;
+var init_ticket_provenance = __esm({
+  "src/ticket-provenance.ts"() {
     "use strict";
-    init_adr_path_refs();
-    init_collector_github();
-    init_diarist_mechanical();
-    init_reviewer_pinned_git();
-    init_ticket_provenance();
     init_sitian_facade();
+    init_ticket_provenance_contracts();
+    TicketProvenanceWatermarkError = class extends Error {
+      code = "ticket-provenance-watermark";
+      reason;
+      constructor(reason, message, options) {
+        super(message, options);
+        this.name = "TicketProvenanceWatermarkError";
+        this.reason = reason;
+      }
+    };
   }
 });
 
 // src/public-cli/seat-ticket-binding.ts
-async function resolveInstructionTicket(instruction, projectRoot, env = {}) {
-  const resolver = createHermesDiaristTicketResolver({
-    ...env.packageRoot === void 0 ? {} : { packageRoot: env.packageRoot },
-    cwd: projectRoot
-  });
-  const checkExistence = createGhTicketExistenceChecker();
-  const origin = resolveDiaristGithubOrigin(projectRoot);
-  return resolveDiaristTicketFromInstruction({
-    instruction,
-    origin,
-    resolver,
-    checkExistence
-  });
-}
-async function probeInstructionTicket(instruction, projectRoot, env = {}) {
-  try {
-    const resolution = await resolveInstructionTicket(
-      instruction,
-      projectRoot,
-      env
+import { existsSync as existsSync6 } from "node:fs";
+function instructionTicketTokens(instruction) {
+  const tokens = /* @__PURE__ */ new Set();
+  for (const run of instruction.match(/\d+/g) ?? []) {
+    if (run.startsWith("0")) continue;
+    const parsed = Number(run);
+    if (!Number.isSafeInteger(parsed) || parsed < 1) continue;
+    tokens.add(parsed);
+  }
+  return [...tokens];
+}
+async function resolveKnownTicketNumber(input) {
+  const tokens = instructionTicketTokens(input.instruction);
+  if (tokens.length === 0) return void 0;
+  const known = [];
+  let runTickets;
+  for (const token of tokens) {
+    const volume = resolveTicketProvenanceVolume(
+      token,
+      input.projectRoot,
+      input.home
     );
-    return { kind: "resolved", resolution };
-  } catch (error) {
-    if (error instanceof DiaristTicketResolutionError) {
-      return { kind: "failed", error };
+    if (existsSync6(volume.volumeDir)) {
+      known.push(token);
+      continue;
     }
-    throw error;
+    if (runTickets === void 0) {
+      runTickets = await readBookRunTickets(input);
+    }
+    if (runTickets.has(token)) known.push(token);
   }
+  return known.length === 1 ? known[0] : void 0;
 }
-function ticketNumberFromProbe(probe) {
-  if (probe.kind !== "resolved") return void 0;
-  if (probe.resolution.kind !== "ticket") return void 0;
-  return probe.resolution.ticketNumber;
-}
-async function applyTicketResolution(admitted, resolution) {
-  if (resolution.kind === "ticket") {
-    await bindAdmittedTicketNumber(admitted, resolution.ticketNumber);
-  } else {
-    await recordTrueUnboundTicketResolution(admitted);
+async function readBookRunTickets(input) {
+  let bookKey;
+  try {
+    bookKey = input.bookKey ?? resolveBookKeyFromGit(input.projectRoot);
+  } catch (error) {
+    if (error instanceof ActivationGitRepositoryRequiredError) return /* @__PURE__ */ new Set();
+    throw error;
   }
+  return await collectBookRunTicketNumbers({ home: input.home, bookKey });
 }
-async function applyInstructionTicketProbe(admitted, probe) {
-  if (probe.kind === "failed") throw probe.error;
-  await applyTicketResolution(admitted, probe.resolution);
+async function bindReusedTicketNumber(admitted, ticketNumber) {
+  if (ticketNumber === void 0) return;
+  if (admitted.ticketNumber !== void 0) return;
+  await bindAdmittedTicketNumber(admitted, ticketNumber);
 }
-async function resolveSeatTicketBinding(admitted, env = {}) {
-  if (admitted.ticketNumber !== void 0) return void 0;
-  if (admitted.ticketResolution === "true-unbound") {
-    return { kind: "true-unbound" };
-  }
-  const resolution = await resolveInstructionTicket(
-    admitted.instruction,
-    admitted.projectRoot,
-    env
-  );
-  await applyTicketResolution(admitted, resolution);
-  return resolution;
+async function resolveSeatTicketBinding(admitted, env) {
+  if (admitted.ticketNumber !== void 0) return admitted.ticketNumber;
+  const ticketNumber = await resolveKnownTicketNumber({
+    instruction: admitted.instruction,
+    projectRoot: admitted.projectRoot,
+    home: env.home,
+    bookKey: admitted.bookKey
+  });
+  await bindReusedTicketNumber(admitted, ticketNumber);
+  return ticketNumber;
 }
 async function tryResumeSameTicketSeatRun(input) {
   if (input.freshSummons === true) return void 0;
@@ -10441,22 +9710,58 @@ var init_seat_ticket_binding = __esm({
   "src/public-cli/seat-ticket-binding.ts"() {
     "use strict";
     init_activation_ledger_git();
-    init_diarist_ticket_resolution();
-    init_diarist();
+    init_ticket_provenance();
     init_invocation();
     init_run_lifecycle();
   }
 });
 
+// src/public-cli/case-dossier-delivery.ts
+import { stat as stat2 } from "node:fs/promises";
+async function describeDossierFile(path) {
+  try {
+    const stats = await stat2(path);
+    if (!stats.isFile()) return `\u4E0D\u53EF\u8BFB\uFF08\u975E\u666E\u901A\u6587\u4EF6\uFF09\uFF1A${path}`;
+    return path;
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT") return `\u5C1A\u672A\u751F\u6210\uFF1A${path}`;
+    return `\u4E0D\u53EF\u8BFB\uFF08${code ?? "\u672A\u77E5\u9519\u8BEF"}\uFF09\uFF1A${path}`;
+  }
+}
+async function projectCaseDossierPointerSection(input) {
+  if (input.ticketNumber === void 0) return void 0;
+  const volume = resolveTicketProvenanceVolume(
+    input.ticketNumber,
+    input.projectRoot,
+    input.home
+  );
+  return [
+    CASE_DOSSIER_SECTION_HEADING,
+    "",
+    `\u7968\u53F7\uFF1A#${input.ticketNumber}`,
+    `\u4EBA\u8BFB\u89C6\u56FE\uFF1A${await describeDossierFile(volume.humanViewFile)}`,
+    `\u8BB0\u5F55\u5377\u5B97\uFF1A${await describeDossierFile(volume.recordFile)}`
+  ].join("\n");
+}
+var CASE_DOSSIER_SECTION_HEADING;
+var init_case_dossier_delivery = __esm({
+  "src/public-cli/case-dossier-delivery.ts"() {
+    "use strict";
+    init_ticket_provenance();
+    CASE_DOSSIER_SECTION_HEADING = "## \u672C\u7968\u8D77\u5C45\u5F55\uFF08\u7CFB\u7EDF\u968F\u6848\u63D0\u4F9B\uFF09";
+  }
+});
+
 // src/host-transition-prior-native.ts
-import { access as access3, readdir as readdir3 } from "node:fs/promises";
-import { dirname as dirname9, join as join18 } from "node:path";
+import { access as access2, readdir as readdir3 } from "node:fs/promises";
+import { dirname as dirname9, join as join17 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
 async function listPiNativeRecordPaths(sessionFile) {
   try {
-    await access3(sessionFile);
+    await access2(sessionFile);
     return [sessionFile];
   } catch (error) {
     if (isEnoent2(error)) return [];
@@ -10475,9 +9780,9 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join18(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join17(sessionRoot, entry.name, "records.jsonl");
     try {
-      await access3(recordFile);
+      await access2(recordFile);
       recordPaths.push(recordFile);
     } catch (error) {
       if (!isEnoent2(error)) throw error;
@@ -10737,7 +10042,7 @@ var init_gatekeeper_role = __esm({
 });
 
 // src/run-terminal-artifacts.ts
-import { basename as basename6, dirname as dirname10, join as join19 } from "node:path";
+import { basename as basename6, dirname as dirname10, join as join18 } from "node:path";
 function runIdFromRunDirectory(runDirectory) {
   const name = basename6(runDirectory);
   const at = name.lastIndexOf("@");
@@ -11159,7 +10464,7 @@ var init_ledger_session_read = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir4 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join19 } from "node:path";
 function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -11420,7 +10725,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join20(directory, name);
+      const path = join19(directory, name);
       const sessionPath = name.endsWith(".pointer.json") ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
       const classified = await classifyAuditorVolume(sessionPath);
@@ -11459,22 +10764,22 @@ var init_analyst_gate_cycles_read = __esm({
 // src/session-opening-materials.ts
 import { existsSync as existsSync7 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { dirname as dirname11, join as join21 } from "node:path";
-import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
+import { dirname as dirname11, join as join20 } from "node:path";
+import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname11(fileURLToPath2(moduleUrl));
+  let dir = dirname11(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync7(join21(dir, "package.json")) && existsSync7(join21(dir, "souls"))) {
+    if (existsSync7(join20(dir, "package.json")) && existsSync7(join20(dir, "souls"))) {
       return dir;
     }
     const parent = dirname11(dir);
     if (parent === dir) break;
     dir = parent;
   }
-  return fileURLToPath2(new URL("..", moduleUrl));
+  return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile12(fileURLToPath2(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile12(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -11671,75 +10976,400 @@ function createPiJudgeAuditor() {
     });
   };
 }
-var init_judge_auditor = __esm({
-  "src/judge-auditor.ts"() {
-    "use strict";
-    init_compliance_transport();
-    init_auditor_dossier_tool();
-    init_dossier_resolution();
+var init_judge_auditor = __esm({
+  "src/judge-auditor.ts"() {
+    "use strict";
+    init_compliance_transport();
+    init_auditor_dossier_tool();
+    init_dossier_resolution();
+  }
+});
+
+// src/upstream-error-testimony.ts
+function isNonSuccessHttpStatus(status) {
+  return typeof status === "number" && (status < 200 || status >= 300);
+}
+function hasUpstreamErrorTestimony(input) {
+  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
+  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
+}
+function projectConfirmedRemotePayload(input) {
+  return {
+    ...input.body === void 0 ? {} : { body: input.body },
+    ...input.code === void 0 ? {} : { code: input.code },
+    ...input.errno === void 0 ? {} : { errno: input.errno }
+  };
+}
+var init_upstream_error_testimony = __esm({
+  "src/upstream-error-testimony.ts"() {
+    "use strict";
+  }
+});
+
+// src/pi/known-failure.ts
+function nonEmptyString(value) {
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function sessionStopDetails(input) {
+  const details = {};
+  const errorMessage = nonEmptyString(input.errorMessage);
+  if (errorMessage !== void 0) details.errorMessage = errorMessage;
+  const api = nonEmptyString(input.api);
+  if (api !== void 0) details.api = api;
+  const rawStopReason = nonEmptyString(input.rawStopReason);
+  if (rawStopReason !== void 0) details.rawStopReason = rawStopReason;
+  const testimony = hasUpstreamErrorTestimony(input);
+  if (testimony) {
+    const provider = nonEmptyString(input.provider);
+    if (provider !== void 0) details.provider = provider;
+    const model = nonEmptyString(input.model);
+    if (model !== void 0) details.model = model;
+  }
+  if (typeof input.httpStatus === "number") details.httpStatus = input.httpStatus;
+  if (input.diagnostics !== void 0) details.diagnostics = input.diagnostics;
+  if (testimony) Object.assign(details, projectConfirmedRemotePayload(input));
+  return details;
+}
+function knownFailureFromProviderStop(input) {
+  if (input.stopReason !== "error" && input.stopReason !== "aborted") return void 0;
+  const diagnostic = nonEmptyString(input.errorMessage);
+  const details = sessionStopDetails(input);
+  return {
+    cause: hasUpstreamErrorTestimony(input) ? "provider" : "unrecognized",
+    ...diagnostic === void 0 ? {} : { diagnostic },
+    ...Object.keys(details).length === 0 ? {} : { details }
+  };
+}
+var init_known_failure = __esm({
+  "src/pi/known-failure.ts"() {
+    "use strict";
+    init_upstream_error_testimony();
+    init_upstream_error_testimony();
+  }
+});
+
+// src/adr-path-refs.ts
+function extractReferencedAdrPaths(text) {
+  const seen = /* @__PURE__ */ new Set();
+  const paths = [];
+  for (const match of text.matchAll(ADR_PATH_IN_BODY)) {
+    const path = match[0];
+    if (seen.has(path)) continue;
+    seen.add(path);
+    paths.push(path);
+  }
+  return Object.freeze(paths);
+}
+var ADR_PATH_IN_BODY;
+var init_adr_path_refs = __esm({
+  "src/adr-path-refs.ts"() {
+    "use strict";
+    ADR_PATH_IN_BODY = /docs\/adr\/(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.md/g;
+  }
+});
+
+// src/reviewer-git-snapshot.ts
+function parseReviewerRefSnapshot(raw) {
+  const refs = {};
+  for (const line2 of raw.split("\n")) {
+    if (!line2) continue;
+    const fields = line2.split("\0");
+    if (fields.length !== 5 || !fields[0] || !fields[1] || !fields[3]) {
+      throw new Error(`Malformed Git ref snapshot line: ${line2}`);
+    }
+    const peeledCommitId = fields[3] === "commit" ? fields[1] : fields[4] === "commit" && fields[2] ? fields[2] : null;
+    refs[fields[0]] = Object.freeze({
+      objectId: fields[1],
+      peeledCommitId
+    });
+  }
+  return refs;
+}
+function reviewerRefSnapshotArgs() {
+  return ["for-each-ref", "--format=%(refname)%00%(objectname)%00%(*objectname)%00%(objecttype)%00%(*objecttype)", ...REVIEW_REF_PREFIXES];
+}
+function immutableReviewerRefs(refs) {
+  return Object.freeze(Object.fromEntries(Object.entries(refs).sort(([a], [b]) => a.localeCompare(b)).map(([name, entry]) => [name, Object.freeze({ objectId: entry.objectId, peeledCommitId: entry.peeledCommitId })])));
+}
+function sameReviewerPinnedTarget(actual, expected) {
+  return actual.repositoryRoot === expected.repositoryRoot && actual.objectFormat === expected.objectFormat && actual.targetHead === expected.targetHead;
+}
+var REVIEW_REF_PREFIXES;
+var init_reviewer_git_snapshot = __esm({
+  "src/reviewer-git-snapshot.ts"() {
+    "use strict";
+    REVIEW_REF_PREFIXES = ["refs/heads", "refs/tags", "refs/remotes"];
+  }
+});
+
+// src/reviewer-preflight-error.ts
+var ReviewerCorrectablePreflightError;
+var init_reviewer_preflight_error = __esm({
+  "src/reviewer-preflight-error.ts"() {
+    "use strict";
+    ReviewerCorrectablePreflightError = class extends Error {
+      constructor(code, diagnostic = `${code} constraint failed`, options) {
+        super(`${code}: ${diagnostic}`, options);
+        this.code = code;
+        this.diagnostic = diagnostic;
+        this.name = "ReviewerCorrectablePreflightError";
+      }
+      code;
+      diagnostic;
+    };
+  }
+});
+
+// src/reviewer-pinned-git.ts
+import { execFile as execFile3 } from "node:child_process";
+import { access as access3, realpath as realpath6 } from "node:fs/promises";
+import { promisify as promisify3 } from "node:util";
+async function execGit(args, options) {
+  try {
+    return await execFileAsync3("git", args, {
+      ...options,
+      env: { ...process.env, LC_ALL: "C" }
+    });
+  } catch (error) {
+    const source = error;
+    const wrapped = new Error("git process failed", { cause: error });
+    Object.assign(wrapped, { code: source.code ?? null, signal: source.signal ?? null, timedOut: source.killed === true && source.signal === "SIGTERM", aborted: source.name === "AbortError", stderr: String(source.stderr ?? ""), stdout: String(source.stdout ?? "") });
+    throw wrapped;
+  }
+}
+function exitCode(error) {
+  const code = typeof error === "object" && error !== null ? error.code : void 0;
+  return typeof code === "number" ? code : void 0;
+}
+function gitStderr(error) {
+  if (typeof error !== "object" || error === null) return "";
+  const stderr = error.stderr;
+  return typeof stderr === "string" ? stderr : "";
+}
+function isConfirmedMissingOriginRemote(error) {
+  return /No such remote ['"]origin['"]/.test(gitStderr(error));
+}
+function isConfirmedPinnedPathAbsent(error, path) {
+  const stderr = gitStderr(error);
+  const quoted = `'${path}'`;
+  return stderr.includes(`path ${quoted} does not exist in `) || stderr.includes(`path ${quoted} exists on disk, but not in `);
+}
+async function repositoryIsAvailable(root) {
+  try {
+    await access3(`${root}/.git`);
+    return { available: true };
+  } catch (cause) {
+    return { available: false, cause };
+  }
+}
+function shortNameFromPinnedRef(refName) {
+  const short = refName.startsWith("refs/heads/") ? refName.slice("refs/heads/".length) : refName.startsWith("refs/tags/") ? refName.slice("refs/tags/".length) : refName.startsWith("refs/remotes/") ? refName.slice("refs/remotes/".length).replace(/^[^/]+\//, "") : refName;
+  const trimmed = short.trim();
+  return trimmed === "" ? void 0 : trimmed;
+}
+function branchNamesAtPinnedHead(pin) {
+  const names = /* @__PURE__ */ new Set();
+  for (const [refName, entry] of Object.entries(pin.refs)) {
+    if (entry.peeledCommitId !== pin.targetHead) continue;
+    if (!refName.startsWith("refs/heads/") && !refName.startsWith("refs/remotes/")) continue;
+    const short = shortNameFromPinnedRef(refName);
+    if (short !== void 0) names.add(short);
   }
-});
-
-// src/upstream-error-testimony.ts
-function isNonSuccessHttpStatus(status) {
-  return typeof status === "number" && (status < 200 || status >= 300);
+  return Object.freeze([...names]);
 }
-function hasUpstreamErrorTestimony(input) {
-  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
-  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
+async function gitText(root, args) {
+  const { stdout } = await execGit(["-C", root, ...args], { encoding: "utf8" });
+  return stdout.trim();
 }
-function projectConfirmedRemotePayload(input) {
-  return {
-    ...input.body === void 0 ? {} : { body: input.body },
-    ...input.code === void 0 ? {} : { code: input.code },
-    ...input.errno === void 0 ? {} : { errno: input.errno }
+async function createReviewerPinnedGitReader(root = process.cwd()) {
+  const discoveredRoot = await gitText(root, ["rev-parse", "--show-toplevel"]);
+  const repositoryRoot = await realpath6(discoveredRoot);
+  const objectFormat = await gitText(repositoryRoot, ["rev-parse", "--show-object-format"]);
+  if (objectFormat !== "sha1" && objectFormat !== "sha256") throw new Error("Unsupported Git object format");
+  const oidWidth = objectFormat === "sha1" ? 40 : 64;
+  const targetHead = await gitText(repositoryRoot, ["rev-parse", "HEAD^{commit}"]);
+  const reachableCommitIds = Object.freeze((await gitText(repositoryRoot, ["rev-list", targetHead])).split("\n").filter(Boolean));
+  const refs = parseReviewerRefSnapshot(await gitText(repositoryRoot, reviewerRefSnapshotArgs()));
+  const pin = immutableReviewerPin({ repositoryRoot, objectFormat, targetHead, refs });
+  const invalid = (code, diagnostic, cause) => {
+    throw new ReviewerCorrectablePreflightError(code, diagnostic, cause === void 0 ? void 0 : { cause });
+  };
+  const symbolic = (base) => {
+    const selected = Object.hasOwn(refs, base) ? base : (() => {
+      const candidates = [`refs/heads/${base}`, `refs/tags/${base}`, `refs/remotes/${base}`].filter((name) => Object.hasOwn(refs, name));
+      if (candidates.length > 1) invalid("base-invalid", "base revision is ambiguous across pinned refs");
+      return candidates[0];
+    })();
+    if (selected === void 0) return void 0;
+    const commit = refs[selected]?.peeledCommitId;
+    if (commit === null) invalid("base-invalid", "base revision ref must resolve to a commit");
+    return commit ?? void 0;
   };
+  return Object.freeze({
+    pin,
+    async snapshot() {
+      const liveObjectFormat = await gitText(repositoryRoot, ["rev-parse", "--show-object-format"]);
+      if (liveObjectFormat !== "sha1" && liveObjectFormat !== "sha256") throw new Error("Unsupported Git object format");
+      return immutableReviewerPin({ repositoryRoot, objectFormat: liveObjectFormat, targetHead: await gitText(repositoryRoot, ["rev-parse", "HEAD^{commit}"]), refs: parseReviewerRefSnapshot(await gitText(repositoryRoot, reviewerRefSnapshotArgs())) });
+    },
+    async resolve(base) {
+      if (!/^[A-Za-z0-9._/~^+-]+$/.test(base) || base.startsWith("-") || base.includes("..") || base.includes("@{")) {
+        invalid("base-invalid", "base revision syntax is invalid or uses a forbidden revision form");
+      }
+      let commit;
+      const headExpression = /^HEAD((?:~[0-9]+|\^[0-9]+)*)$/.exec(base);
+      if (headExpression) {
+        try {
+          commit = await gitText(repositoryRoot, ["rev-parse", "--verify", `${targetHead}${headExpression[1]}^{commit}`]);
+        } catch (error) {
+          if (exitCode(error) === 128) {
+            const repository = await repositoryIsAvailable(repositoryRoot);
+            if (repository.available) invalid("base-invalid", "base revision HEAD ancestry expression must resolve to a reachable commit", error);
+          }
+          throw error;
+        }
+      } else if (new RegExp(`^[0-9a-f]{${oidWidth}}$`).test(base)) commit = base;
+      else if (new RegExp(`^[0-9a-f]{4,${oidWidth - 1}}$`).test(base) && !(objectFormat === "sha256" && base.length === 40)) {
+        const matches = reachableCommitIds.filter((candidate) => candidate.startsWith(base));
+        if (matches.length !== 1) invalid("base-invalid", "base revision abbreviation must identify exactly one reachable commit");
+        commit = matches[0];
+      } else commit = symbolic(base);
+      if (commit === void 0) invalid("base-invalid", "base revision must name an existing pinned ref or reachable commit");
+      try {
+        commit = await gitText(repositoryRoot, ["rev-parse", "--verify", `${commit}^{commit}`]);
+      } catch (error) {
+        if (exitCode(error) === 128) {
+          const repository = await repositoryIsAvailable(repositoryRoot);
+          if (repository.available) invalid("base-invalid", "base revision must resolve to an existing commit", error);
+        }
+        throw error;
+      }
+      try {
+        await gitText(repositoryRoot, ["merge-base", "--is-ancestor", commit, targetHead]);
+      } catch (error) {
+        if (exitCode(error) === 1) invalid("base-invalid", "base revision must be an ancestor of the pinned target", error);
+        throw error;
+      }
+      return commit;
+    },
+    async range(base) {
+      let mergeBase;
+      try {
+        mergeBase = await gitText(repositoryRoot, ["merge-base", base, targetHead]);
+      } catch (error) {
+        if (exitCode(error) === 1) {
+          invalid("range-invalid", "review range requires a common ancestor for base and pinned target", error);
+        }
+        throw error;
+      }
+      if (!mergeBase) invalid("range-invalid", "review range requires a common ancestor for base and pinned target");
+      const diffCommand = `git diff ${mergeBase}...${targetHead}`;
+      const [{ stdout: diff }, commitsText] = await Promise.all([
+        execGit(["-C", repositoryRoot, "diff", `${mergeBase}...${targetHead}`], { encoding: "buffer", maxBuffer: 64 * 1024 * 1024 }),
+        gitText(repositoryRoot, ["rev-list", "--reverse", `${mergeBase}..${targetHead}`])
+      ]);
+      if (diff.length === 0) invalid("range-invalid", "review range must contain a non-empty diff between base and pinned target");
+      return Object.freeze({ base: mergeBase, target: targetHead, diffCommand, diffSha256: sha256Hex(Uint8Array.from(diff)), commits: Object.freeze(commitsText ? commitsText.split("\n") : []) });
+    },
+    async featureTokens() {
+      const names = /* @__PURE__ */ new Set();
+      for (const [refName, entry] of Object.entries(pin.refs)) {
+        if (entry.peeledCommitId !== targetHead) continue;
+        const short = shortNameFromPinnedRef(refName);
+        if (short !== void 0) names.add(short);
+      }
+      return Object.freeze([...names]);
+    },
+    async listSpecCandidatePaths() {
+      const roots = ["docs", "specs", ".scratch"];
+      const text = await gitText(repositoryRoot, [
+        "ls-tree",
+        "-r",
+        "--name-only",
+        targetHead,
+        "--",
+        ...roots
+      ]);
+      return Object.freeze(text === "" ? [] : text.split("\n").filter((line2) => line2.length > 0));
+    },
+    async originRepository() {
+      let remoteUrl;
+      try {
+        remoteUrl = await gitText(repositoryRoot, ["remote", "get-url", "origin"]);
+      } catch (error) {
+        if (isConfirmedMissingOriginRemote(error)) return void 0;
+        throw error;
+      }
+      return parseGitHubOriginRemote(remoteUrl);
+    },
+    async commitMessagesNewestFirst(base) {
+      const text = await gitText(repositoryRoot, [
+        "log",
+        "--format=%s",
+        `${base}..${targetHead}`
+      ]);
+      return Object.freeze(text === "" ? [] : text.split("\n"));
+    },
+    async readPinnedText(path) {
+      if (path.length === 0 || path.startsWith("/") || path.includes("\0") || path.split("/").some((part) => part === ".." || part === "")) {
+        return void 0;
+      }
+      try {
+        const { stdout } = await execGit(
+          ["-C", repositoryRoot, "show", `${targetHead}:${path}`],
+          { encoding: "utf8", maxBuffer: 8 * 1024 * 1024 }
+        );
+        return stdout;
+      } catch (error) {
+        if (isConfirmedPinnedPathAbsent(error, path)) return void 0;
+        throw error;
+      }
+    }
+  });
 }
-var init_upstream_error_testimony = __esm({
-  "src/upstream-error-testimony.ts"() {
-    "use strict";
+function parseGitHubOriginRemote(remoteUrl) {
+  const trimmed = remoteUrl.trim();
+  if (trimmed.length === 0) return void 0;
+  const scp = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(trimmed);
+  if (scp) return normalizeOrigin(scp[1], scp[2]);
+  const ssh = /^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i.exec(trimmed);
+  if (ssh) return normalizeOrigin(ssh[1], ssh[2]);
+  let parsed;
+  try {
+    parsed = new URL(trimmed);
+  } catch {
+    return void 0;
   }
-});
-
-// src/pi/known-failure.ts
-function nonEmptyString(value) {
-  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+  if (!/^github\.com$/i.test(parsed.hostname)) return void 0;
+  if (parsed.search !== "" || parsed.hash !== "") return void 0;
+  const parts = parsed.pathname.split("/").filter((p) => p.length > 0);
+  if (parts.length !== 2) return void 0;
+  return normalizeOrigin(parts[0], parts[1]);
 }
-function sessionStopDetails(input) {
-  const details = {};
-  const errorMessage = nonEmptyString(input.errorMessage);
-  if (errorMessage !== void 0) details.errorMessage = errorMessage;
-  const api = nonEmptyString(input.api);
-  if (api !== void 0) details.api = api;
-  const rawStopReason = nonEmptyString(input.rawStopReason);
-  if (rawStopReason !== void 0) details.rawStopReason = rawStopReason;
-  const testimony = hasUpstreamErrorTestimony(input);
-  if (testimony) {
-    const provider = nonEmptyString(input.provider);
-    if (provider !== void 0) details.provider = provider;
-    const model = nonEmptyString(input.model);
-    if (model !== void 0) details.model = model;
-  }
-  if (typeof input.httpStatus === "number") details.httpStatus = input.httpStatus;
-  if (input.diagnostics !== void 0) details.diagnostics = input.diagnostics;
-  if (testimony) Object.assign(details, projectConfirmedRemotePayload(input));
-  return details;
+function normalizeOrigin(ownerRaw, repoRaw) {
+  const owner = ownerRaw.trim();
+  const repo = stripGitSuffix2(repoRaw.trim());
+  if (owner.length === 0 || repo.length === 0) return void 0;
+  if (/[/?#@\\]/.test(owner) || /[/?#@\\]/.test(repo)) return void 0;
+  return Object.freeze({ owner, repo });
 }
-function knownFailureFromProviderStop(input) {
-  if (input.stopReason !== "error" && input.stopReason !== "aborted") return void 0;
-  const diagnostic = nonEmptyString(input.errorMessage);
-  const details = sessionStopDetails(input);
-  return {
-    cause: hasUpstreamErrorTestimony(input) ? "provider" : "unrecognized",
-    ...diagnostic === void 0 ? {} : { diagnostic },
-    ...Object.keys(details).length === 0 ? {} : { details }
-  };
+function stripGitSuffix2(name) {
+  return name.toLowerCase().endsWith(".git") ? name.slice(0, -4) : name;
 }
-var init_known_failure = __esm({
-  "src/pi/known-failure.ts"() {
+var execFileAsync3, immutableReviewerPin;
+var init_reviewer_pinned_git = __esm({
+  "src/reviewer-pinned-git.ts"() {
     "use strict";
-    init_upstream_error_testimony();
-    init_upstream_error_testimony();
+    init_reviewer_git_snapshot();
+    init_sha256();
+    init_reviewer_preflight_error();
+    execFileAsync3 = promisify3(execFile3);
+    immutableReviewerPin = (pin) => Object.freeze({
+      repositoryRoot: pin.repositoryRoot,
+      objectFormat: pin.objectFormat,
+      targetHead: pin.targetHead,
+      refs: immutableReviewerRefs(pin.refs)
+    });
   }
 });
 
@@ -12113,12 +11743,12 @@ var init_reviewer_dispatch = __esm({
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { writeFileSync as writeFileSync4 } from "node:fs";
 import { readFile as readFile13, unlink as unlink3 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { join as join21 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join22(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join21(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 function recordReviewerDispatchRejectionSync(runDirectory, rejection) {
   writeFileSync4(
@@ -13284,7 +12914,7 @@ var init_collector_ledger = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash7 } from "node:crypto";
 import { readFile as readFile14, realpath as realpath7 } from "node:fs/promises";
-import { join as join23 } from "node:path";
+import { join as join22 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -13301,10 +12931,10 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot, name) {
-  return join23(packageRoot, packagedMethodSkillRelativeDirectory(name));
+  return join22(packageRoot, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot, name) {
-  return join23(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
+  return join22(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
 function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -13398,8 +13028,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot, name);
-  const skillPathConfigured = join23(rootDirectory, "SKILL.md");
-  const provenancePath = join23(rootDirectory, "provenance.json");
+  const skillPathConfigured = join22(rootDirectory, "SKILL.md");
+  const provenancePath = join22(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile14(provenancePath, "utf8");
@@ -13416,7 +13046,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join23(rootDirectory, rel);
+    const absolute = join22(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile14(absolute);
@@ -13932,7 +13562,7 @@ var init_terminal = __esm({
 // src/public-cli/settlement.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname12, join as join24 } from "node:path";
+import { dirname as dirname12, join as join23 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -14328,7 +13958,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join24(dirname12(sessionFile), "evidence-children");
+  const childDirectory = join23(dirname12(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir5(childDirectory);
@@ -14339,7 +13969,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join24(childDirectory, file));
+      entries = await readBoundSessionEntries(join23(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
@@ -14393,7 +14023,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join24(dirname12(sessionFile), "auditor-roles")];
+  const childDirectories = [join23(dirname12(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -14408,7 +14038,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join24(childDirectory, file));
+        entries = await readBoundSessionEntries(join23(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -14908,8 +14538,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join24(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join24(sessionDirectory, "session.jsonl");
+  const directories = [join23(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join23(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -15007,8 +14637,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
   await writeFile6(
     reportPath,
     `${JSON.stringify(
@@ -15098,8 +14728,8 @@ async function trySettleJudgeTerminalResult(admitted, authority) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
   await writeFile6(
     reportPath,
     `${JSON.stringify(
@@ -15332,7 +14962,7 @@ function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   return dirs;
 }
 async function resolveFailureArtifactsBase(runDirectory) {
-  const artifactsDir = join24(runDirectory, "artifacts");
+  const artifactsDir = join23(runDirectory, "artifacts");
   try {
     await ensureRunArtifactsDir(runDirectory);
     return { baseDir: artifactsDir };
@@ -15348,7 +14978,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join24(dir, `${stem}.${randomUUID3()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join23(dir, `${stem}.${randomUUID3()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -15393,26 +15023,26 @@ async function publishFailureArtifacts(admitted, failure2, authority) {
   } catch (error) {
     priorIssues.push(publicationAttemptFromError(sessionFile, error));
   }
-  const underArtifacts = baseDir === join24(admitted.runDirectory, "artifacts");
+  const underArtifacts = baseDir === join23(admitted.runDirectory, "artifacts");
   const uniqueFallbackDirs = uniqueFailureFallbackDirs(
     admitted.runDirectory,
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join24(baseDir, "error.json"),
-    join24(baseDir, "error.settlement.json"),
-    join24(admitted.runDirectory, "error.settlement.json")
+    join23(baseDir, "error.json"),
+    join23(baseDir, "error.settlement.json"),
+    join23(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join24(baseDir, "error.settlement.json"),
-    join24(baseDir, "error.json")
+    join23(baseDir, "error.settlement.json"),
+    join23(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join24(baseDir, "evidence.json"),
-    join24(baseDir, "evidence.settlement.json"),
-    join24(admitted.runDirectory, "evidence.settlement.json")
+    join23(baseDir, "evidence.json"),
+    join23(baseDir, "evidence.settlement.json"),
+    join23(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join24(baseDir, "evidence.settlement.json"),
-    join24(baseDir, "evidence.json")
+    join23(baseDir, "evidence.settlement.json"),
+    join23(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -15683,7 +15313,7 @@ var init_settlement = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join25 } from "node:path";
+import { join as join24 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
     presentFailureTerminal(terminal, io);
@@ -15702,7 +15332,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
   }
 }
 function runArtifactsDirectory(runDirectory) {
-  return join25(runDirectory, "artifacts");
+  return join24(runDirectory, "artifacts");
 }
 async function ensureRealArtifactsDirectory(runDirectory) {
   const runStat = await lstat5(runDirectory);
@@ -15785,7 +15415,7 @@ function jsonSafeReplacer() {
 }
 async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
   const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-  const filePath = join25(
+  const filePath = join24(
     artifactsDir,
     `dispatch-error-attempt-${attempt}-${randomUUID4()}.json`
   );
@@ -16034,10 +15664,16 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { readFile as readFile16, writeFile as writeFile7 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join26, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join25, resolve as resolve12 } from "node:path";
+function appendContinuationSection(continuation, section) {
+  const prompt = `${continuation.prompt}
+
+${section}`;
+  return continuation.kind === "initial" ? { kind: "initial", prompt } : { kind: "resume", prompt };
+}
 async function readInvocationHost(runDirectory) {
   try {
-    const raw = JSON.parse(await readFile16(join26(runDirectory, "invocation.json"), "utf8"));
+    const raw = JSON.parse(await readFile16(join25(runDirectory, "invocation.json"), "utf8"));
     return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
@@ -16112,18 +15748,14 @@ async function dispatchPostAdmissionTurn(input) {
     let previousHost;
     const liveHost = env.host;
     const principalCoordinates = admitted.principal === void 0 ? void 0 : env.principalAuthority.decode(admitted.principal);
-    let turnRequest;
+    let hostTransition;
     try {
       previousHost = await readInvocationHost(admitted.runDirectory);
-      const hostTransition = previousHost !== void 0 && liveHost !== void 0 && principalCoordinates !== void 0 ? await projectHostTransitionPriorNative({
+      hostTransition = previousHost !== void 0 && liveHost !== void 0 && principalCoordinates !== void 0 ? await projectHostTransitionPriorNative({
         previousHost,
         liveHost,
         piSessionFile: principalCoordinates.sessionFile
       }) : void 0;
-      turnRequest = env.signal === void 0 ? request : { ...request, signal: env.signal };
-      if (hostTransition !== void 0) {
-        turnRequest = { ...turnRequest, hostTransition };
-      }
     } catch (error) {
       return await presentControlledFailure(
         admitted,
@@ -16158,6 +15790,24 @@ async function dispatchPostAdmissionTurn(input) {
         );
       }
     }
+    let turnRequest = env.signal === void 0 ? request : { ...request, signal: env.signal };
+    if (hostTransition !== void 0) {
+      turnRequest = { ...turnRequest, hostTransition };
+    }
+    const dossierSection = await projectCaseDossierPointerSection({
+      ticketNumber: admitted.ticketNumber,
+      projectRoot: admitted.projectRoot,
+      home: env.home
+    });
+    if (dossierSection !== void 0) {
+      turnRequest = {
+        ...turnRequest,
+        continuation: appendContinuationSection(
+          turnRequest.continuation,
+          dossierSection
+        )
+      };
+    }
     let result;
     try {
       result = await env.roleTurnHost.executeTurn(turnRequest);
@@ -16177,7 +15827,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     try {
       await writeFile7(
-        join26(admitted.runDirectory, "stderr.log"),
+        join25(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -16243,16 +15893,24 @@ async function dispatchPostAdmissionTurn(input) {
   }
 }
 function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
+  const engineMaterial = engineSessionMaterialFromOptions({
+    ...env.engine === void 0 ? {} : { engine: env.engine },
+    packageRoot: env.packageRoot
+  });
   let prompt;
   if (request.message !== void 0) {
-    if (summonsPrepared !== void 0) {
-      prompt = buildInstructionTransportPrompt({
-        instruction: request.message,
-        instructionEmpty: false,
-        attachments: summonsPrepared.attachments
-      });
-    } else if (request.summons !== void 0) {
-      prompt = request.message;
+    if (summonsPrepared !== void 0 && summonsPrepared.attachments.length > 0) {
+      prompt = instructResumeHandbookRead(
+        buildInstructionTransportPrompt(
+          {
+            instruction: request.message,
+            instructionEmpty: false,
+            attachments: summonsPrepared.attachments
+          },
+          engineMaterial
+        ),
+        engineMaterial
+      );
     } else {
       prompt = buildResumeContinuationPrompt({
         packageRoot: env.packageRoot,
@@ -16261,9 +15919,10 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
       });
     }
   } else if (summonsPrepared !== void 0) {
-    prompt = buildInstructionTransportPrompt(summonsPrepared);
-  } else if (request.summons !== void 0) {
-    prompt = RESUME_TRANSPORT_ENVELOPE;
+    prompt = instructResumeHandbookRead(
+      buildInstructionTransportPrompt(summonsPrepared, engineMaterial),
+      engineMaterial
+    );
   } else {
     prompt = buildResumeContinuationPrompt({
       packageRoot: env.packageRoot,
@@ -16286,7 +15945,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute7(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
-  return pathContainedIn(join26(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join25(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -16578,6 +16237,8 @@ var init_post_admission = __esm({
     init_cli_errors();
     init_invocation();
     init_activation_ledger_topology();
+    init_engine_material();
+    init_case_dossier_delivery();
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
@@ -16622,6 +16283,7 @@ __export(notary_run_exports, {
   runPublicNotary: () => runPublicNotary,
   runPublicNotaryResume: () => runPublicNotaryResume
 });
+import { existsSync as existsSync9 } from "node:fs";
 function buildNotaryTurnRequest(admitted, options) {
   return projectRoleTurnRequest(
     admitted,
@@ -16763,14 +16425,19 @@ async function runPublicNotaryResume(request, env, io) {
       }
       return loaded;
     },
-    buildTurnRequest: (admitted, effective) => (
-      // #755: review continuation is plain dialogue / resume envelope — no
-      //「重新读」candidate line, no engine handbook packaging.
-      buildNotaryTurnRequest(
+    buildTurnRequest: (admitted, effective) => {
+      const projection = resumeTurnRequestProjectionOptions(
         admitted,
-        resumeTurnRequestProjectionOptions(admitted, effective, env)
-      )
-    ),
+        effective,
+        env
+      );
+      const candidatePath = gateSubmissionCandidatePath(admitted.sourceRunPath);
+      const prompt = existsSync9(candidatePath) ? appendResumeMaterialReread(projection.continuation.prompt, candidatePath) : projection.continuation.prompt;
+      return buildNotaryTurnRequest(admitted, {
+        ...projection,
+        continuation: { kind: "resume", prompt }
+      });
+    },
     adapters: notaryAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
@@ -16778,6 +16445,7 @@ async function runPublicNotaryResume(request, env, io) {
 var init_notary_run = __esm({
   "src/public-cli/notary-run.ts"() {
     "use strict";
+    init_auditor_dossier_tool();
     init_notary_source_run();
     init_engine_material();
     init_cli_errors();
@@ -16820,11 +16488,11 @@ async function runPublicInspector(argv, env, io, parseInspectorArgv2) {
     throw error;
   }
   const projectRoot = parsed.project ?? env.cwd;
-  const ticketProbe = await probeInstructionTicket(
-    parsed.instruction,
+  const reusedTicketNumber = await resolveKnownTicketNumber({
+    instruction: parsed.instruction,
     projectRoot,
-    env
-  );
+    home: env.home
+  });
   const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
   if (parentRunPath !== void 0) {
     const summons = {
@@ -16892,7 +16560,7 @@ async function runPublicInspector(argv, env, io, parseInspectorArgv2) {
     request: turnRequest,
     adapters: inspectorAdapters({
       beforeDispatch: async (admittedSeat) => {
-        await applyInstructionTicketProbe(admittedSeat, ticketProbe);
+        await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
       }
     }),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
@@ -17075,7 +16743,7 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
   let auditorSubject;
   let auditorSourceRun;
   let auditorSourceTicket;
-  let ticketProbe;
+  let reusedTicketNumber;
   const projectRoot = parsed.project ?? env.cwd;
   if (role === "auditor") {
     if (parsed.subject !== "judge" && parsed.subject !== "doctor") {
@@ -17111,11 +16779,11 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
       return { exitCode: 2 };
     }
   } else {
-    ticketProbe = await probeInstructionTicket(
-      parsed.instruction,
+    reusedTicketNumber = await resolveKnownTicketNumber({
+      instruction: parsed.instruction,
       projectRoot,
-      env
-    );
+      home: env.home
+    });
   }
   const summons = {
     instruction: parsed.instruction,
@@ -17141,24 +16809,21 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
       })
     });
     if (resumed !== void 0) return resumed;
-  } else {
-    const probedTicketNumber = ticketProbe === void 0 ? void 0 : ticketNumberFromProbe(ticketProbe);
-    if (probedTicketNumber !== void 0) {
-      const resumed = await tryResumeSameTicketSeatRun({
-        home: env.home,
-        projectRoot,
-        role,
-        ticketNumber: probedTicketNumber,
-        freshSummons: env.freshSummons,
-        summons,
-        resume: (runId, materials) => runPublicInstructionSeatResume(
-          { runId, ...materials === void 0 ? {} : { summons: materials } },
-          env,
-          io
-        )
-      });
-      if (resumed !== void 0) return resumed;
-    }
+  } else if (reusedTicketNumber !== void 0) {
+    const resumed = await tryResumeSameTicketSeatRun({
+      home: env.home,
+      projectRoot,
+      role,
+      ticketNumber: reusedTicketNumber,
+      freshSummons: env.freshSummons,
+      summons,
+      resume: (runId, materials) => runPublicInstructionSeatResume(
+        { runId, ...materials === void 0 ? {} : { summons: materials } },
+        env,
+        io
+      )
+    });
+    if (resumed !== void 0) return resumed;
   }
   let admitted;
   try {
@@ -17216,8 +16881,8 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
           beforeDispatch: async (admittedSeat) => {
             if (auditorSourceTicket !== void 0) {
               await bindAdmittedTicketNumber(admittedSeat, auditorSourceTicket);
-            } else if (ticketProbe !== void 0) {
-              await applyInstructionTicketProbe(admittedSeat, ticketProbe);
+            } else {
+              await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
             }
           }
         }),
@@ -17470,8 +17135,8 @@ __export(public_role_summons_exports, {
   summonGateOfficer: () => summonGateOfficer,
   summonPublicRole: () => summonPublicRole
 });
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join27 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join26 } from "node:path";
 function createCapturingIo() {
   const chunks = [];
   return {
@@ -17494,7 +17159,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync9(join27(dir, "package.json")) && existsSync9(join27(dir, "souls"))) {
+    if (existsSync10(join26(dir, "package.json")) && existsSync10(join26(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -17610,7 +17275,7 @@ async function createSummonEnv(options) {
 async function summonPublicRole(options) {
   const packageRoot = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join27(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join26(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -18076,11 +17741,11 @@ var init_navigator_session_contracts = __esm({
 
 // src/archivist-record-topology.ts
 import { createHash as createHash8 } from "node:crypto";
-import { join as join28 } from "node:path";
+import { join as join27 } from "node:path";
 function subjectKeyedRecordDirectory(input) {
   const ledgerHome = input.parentSessionFile !== void 0 && input.parentSessionFile.length > 0 ? resolveActivationLedgerHomeForPath(input.parentSessionFile) : resolveActivationLedgerHome(input.home);
   const digest = createHash8("sha256").update(input.subject).digest("hex").slice(0, 32);
-  return join28(
+  return join27(
     activationBookDirectory(ledgerHome, resolveBookKeyFromGit(input.cwd)),
     input.kind,
     digest
@@ -18104,13 +17769,13 @@ __export(archivist_record_entry_exports, {
   createRecordSessionOpen: () => createRecordSessionOpen,
   subjectKeyedRecordDirectory: () => subjectKeyedRecordDirectory
 });
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync5, realpathSync as realpathSync2, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname13, resolve as resolve13, join as join29 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync3, realpathSync as realpathSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname13, resolve as resolve13, join as join28 } from "node:path";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
-  const ledger = join29(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join28(sessionDir, CURRENT_SESSION_LEDGER);
   try {
-    const value = JSON.parse(readFileSync5(ledger, "utf8"));
+    const value = JSON.parse(readFileSync3(ledger, "utf8"));
     if (typeof value !== "object" || value === null || typeof value.sessionFile !== "string" || value.sessionFile.length === 0) {
       throw new Error("sessionFile is missing");
     }
@@ -18123,7 +17788,7 @@ function readCurrentSession(sessionDir) {
   }
 }
 function writeCurrentSession(sessionDir, sessionFile) {
-  const ledger = join29(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join28(sessionDir, CURRENT_SESSION_LEDGER);
   try {
     writeFileSync5(ledger, `${JSON.stringify({ sessionFile })}
 `, { flag: "wx" });
@@ -18184,10 +17849,10 @@ function createRecordSessionOpen(options) {
     return { session: SessionManager.inMemory(cwd), resumed: false };
   } else {
     const parentResolved = resolve13(parentFile);
-    sessionDir = physicallyContainedIn(ledgerHome, parentResolved) ? join29(dirname13(parentResolved), options.kind) : join29(activationBookDirectory(ledgerHome, resolveBookKeyFromGit(cwd)), options.kind);
+    sessionDir = physicallyContainedIn(ledgerHome, parentResolved) ? join28(dirname13(parentResolved), options.kind) : join28(activationBookDirectory(ledgerHome, resolveBookKeyFromGit(cwd)), options.kind);
     parentSession = parentFile;
   }
-  const nestAlreadyExists = existsSync10(sessionDir);
+  const nestAlreadyExists = existsSync11(sessionDir);
   ensureRealDirectoryTree(ledgerHome, sessionDir);
   const mayResumeSameNest = options.subject !== void 0 || options.kind === WORKER_SUBMISSION_GATE_KIND;
   if (mayResumeSameNest && nestAlreadyExists) {
@@ -18205,7 +17870,7 @@ function createRecordSessionOpen(options) {
   );
   if (session.isPersisted()) {
     const file = session.getSessionFile();
-    if (file !== void 0 && !existsSync10(file)) {
+    if (file !== void 0 && !existsSync11(file)) {
       const header = session.getHeader();
       if (header !== null && header.type === "session") {
         writeFileSync5(file, `${JSON.stringify(header)}
@@ -18223,7 +17888,7 @@ function createRecordSession(options) {
   return createRecordSessionOpen(options).session;
 }
 function bookDirectOfficerRunPointer(options) {
-  const nest = join29(dirname13(options.parentSessionFile), "auditor-roles");
+  const nest = join28(dirname13(options.parentSessionFile), "auditor-roles");
   mkdirSync4(nest, { recursive: true });
   const pointer = {
     version: 1,
@@ -18233,7 +17898,7 @@ function bookDirectOfficerRunPointer(options) {
     ...options.runDirectory !== void 0 && options.runDirectory.trim() !== "" ? { runDirectory: options.runDirectory } : {}
   };
   writeFileSync5(
-    join29(nest, `${options.officer}-${Date.now().toString(36)}.pointer.json`),
+    join28(nest, `${options.officer}-${Date.now().toString(36)}.pointer.json`),
     `${JSON.stringify(pointer)}
 `,
     "utf8"
@@ -20810,6 +20475,185 @@ var init_diarist_role = __esm({
   }
 });
 
+// src/diarist-mechanical.ts
+function extractCornerQuotes(text, minLength = DEFAULT_QUOTE_MIN) {
+  const out = [];
+  const re = /「([^」]+)」/g;
+  let match;
+  while ((match = re.exec(text)) !== null) {
+    const q = match[1].trim();
+    if (q.length >= minLength) out.push(q);
+  }
+  return out;
+}
+function buildDiaristAnchors(input) {
+  const fromBody = input.ticketBody === void 0 ? [] : extractCornerQuotes(input.ticketBody);
+  const quotes = [...fromBody, ...input.extraQuotes ?? []];
+  const seen = /* @__PURE__ */ new Set();
+  const uniqueQuotes = [];
+  for (const q of quotes) {
+    if (seen.has(q)) continue;
+    seen.add(q);
+    uniqueQuotes.push(q);
+  }
+  return {
+    ticketNumber: input.ticketNumber,
+    quotes: uniqueQuotes
+  };
+}
+function verifyQuotesVerbatim(sourceText, quotes) {
+  const failed2 = [];
+  for (const q of quotes) {
+    if (q.length === 0) continue;
+    if (!sourceText.includes(q)) failed2.push(q);
+  }
+  if (failed2.length === 0) return { ok: true };
+  return { ok: false, failedQuotes: failed2 };
+}
+function blockToLlmEntry(block, input) {
+  const verify = verifyQuotesVerbatim(block.transcript, input.quotes);
+  if (!verify.ok) {
+    return {
+      ok: false,
+      failedQuotes: verify.failedQuotes,
+      cause: `verbatim verify failed: ${verify.failedQuotes.join(" | ")}`
+    };
+  }
+  const anchorNotes = [`#${input.anchors.ticketNumber}`];
+  const seen = new Set(anchorNotes);
+  for (const q of [...input.anchors.quotes, ...input.quotes]) {
+    if (seen.has(q)) continue;
+    seen.add(q);
+    anchorNotes.push(q);
+    if (anchorNotes.length >= 12) break;
+  }
+  return {
+    ok: true,
+    entry: {
+      basis: {
+        method: "llm-semantic",
+        anchors: anchorNotes,
+        ...input.note === void 0 ? {} : { note: input.note }
+      },
+      sourceKind: block.sourceKind,
+      sourceRef: block.sourceRef,
+      transcript: block.transcript,
+      timestamp: block.timestamp
+    }
+  };
+}
+var DEFAULT_QUOTE_MIN;
+var init_diarist_mechanical = __esm({
+  "src/diarist-mechanical.ts"() {
+    "use strict";
+    init_activation_ledger_topology();
+    DEFAULT_QUOTE_MIN = 6;
+  }
+});
+
+// src/diarist.ts
+import { readFileSync as readFileSync4 } from "node:fs";
+function blockEntryIdentity(ticketNumber, block) {
+  return ticketProvenanceEntryIdentity({
+    ticketNumber,
+    sourceKind: block.sourceKind,
+    sourceRef: block.sourceRef,
+    transcript: block.transcript
+  });
+}
+function loadDiaristSourceCatalog(path) {
+  const parsed = JSON.parse(readFileSync4(path, "utf8"));
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`diarist source catalog is not an object (${path})`);
+  }
+  const record4 = parsed;
+  if (typeof record4.ticketNumber !== "number" || typeof record4.cwd !== "string") {
+    throw new Error(`diarist source catalog is missing ticket coordinates (${path})`);
+  }
+  if (!Array.isArray(record4.candidates)) {
+    throw new Error(`diarist source catalog is missing candidates (${path})`);
+  }
+  return parsed;
+}
+async function commitDiaristSelections(input) {
+  const { ticketNumber, cwd } = input.catalog;
+  const homeOpt = input.catalog.home === void 0 ? {} : { home: input.catalog.home };
+  const volumePaths = ensureTicketProvenanceVolume(ticketNumber, cwd, input.catalog.home);
+  const anchors = buildDiaristAnchors({ ticketNumber });
+  const before = await readTicketProvenance(ticketNumber, cwd, input.catalog.home);
+  let acceptedRows = 0;
+  let rejectedQuotes = 0;
+  let unknownCandidate = false;
+  for (const selection of input.selections) {
+    const block = input.catalog.candidates[selection.candidateIndex];
+    if (block === void 0) {
+      unknownCandidate = true;
+      continue;
+    }
+    const projected = blockToLlmEntry(block, {
+      anchors,
+      quotes: selection.quotes,
+      ...selection.note === void 0 ? {} : { note: selection.note }
+    });
+    if (!projected.ok) {
+      rejectedQuotes += 1;
+      appendQuoteVerifyFailureDiagnostic({
+        ticketNumber,
+        cwd,
+        ...homeOpt,
+        cause: projected.cause
+      });
+      continue;
+    }
+    appendTicketProvenanceEntry({
+      ticketNumber,
+      cwd,
+      ...homeOpt,
+      entry: projected.entry,
+      source: "diarist"
+    });
+    acceptedRows += 1;
+  }
+  const identities = input.catalog.candidates.map(
+    (block) => blockEntryIdentity(ticketNumber, block)
+  );
+  const alreadyWatermarked = readOfferedIdentities(ticketNumber, cwd, input.catalog.home);
+  const watermarked = identities.filter((identity) => !alreadyWatermarked.has(identity)).length;
+  recordOfferedIdentities({ ticketNumber, cwd, ...homeOpt, identities });
+  const volume = await readTicketProvenance(ticketNumber, cwd, input.catalog.home);
+  const humanViewFile = writeTicketProvenanceHumanView({
+    ticketNumber,
+    cwd,
+    ...homeOpt,
+    entries: volume.entries
+  });
+  return {
+    ticketNumber,
+    offered: input.catalog.candidates.length,
+    appended: volume.entries.length - before.entries.length,
+    rejectedQuotes,
+    watermarked,
+    volumeRecordFile: volumePaths.recordFile,
+    humanViewFile,
+    collectorStatus: input.catalog.candidates.length === 0 ? "skipped-no-fresh" : acceptedRows > 0 ? "ok" : input.selections.length === 0 ? "empty-selection" : "nothing-appended",
+    failureCauses: [
+      ...unknownCandidate ? ["unknown-candidate"] : [],
+      ...rejectedQuotes > 0 ? ["quote-verify-rejected"] : []
+    ]
+  };
+}
+var init_diarist = __esm({
+  "src/diarist.ts"() {
+    "use strict";
+    init_adr_path_refs();
+    init_collector_github();
+    init_diarist_mechanical();
+    init_reviewer_pinned_git();
+    init_ticket_provenance();
+    init_sitian_facade();
+  }
+});
+
 // src/navigator-role.ts
 var NAVIGATOR_TOOL_SPEC;
 var init_navigator_role = __esm({
@@ -21344,11 +21188,11 @@ var init_reviewer_role = __esm({
 });
 
 // src/worker-submission-gates.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync11, lstatSync as lstatSync3, readdirSync as readdirSync2, readFileSync as readFileSync6, rmdirSync, rmSync } from "node:fs";
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve18 } from "node:path";
 function git2(cwd, args) {
-  return execFileSync4("git", args, {
+  return execFileSync3("git", args, {
     cwd,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
@@ -21356,7 +21200,7 @@ function git2(cwd, args) {
   }).trim();
 }
 function gitFile(file, args) {
-  return execFileSync4("git", ["config", "--file", file, ...args], {
+  return execFileSync3("git", ["config", "--file", file, ...args], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
     env: { ...process.env, GIT_DIR: void 0, GIT_WORK_TREE: void 0, GIT_COMMON_DIR: void 0 }
@@ -21366,7 +21210,7 @@ function statusOf(error) {
   return typeof error === "object" && error !== null && "status" in error ? error.status : void 0;
 }
 function tryGetAll(file, key) {
-  if (!existsSync11(file)) return [];
+  if (!existsSync12(file)) return [];
   try {
     const out = gitFile(file, ["--get-all", key]);
     return out.length === 0 ? [] : out.split("\n");
@@ -21376,8 +21220,8 @@ function tryGetAll(file, key) {
   }
 }
 function ownedHook(path) {
-  if (!existsSync11(path)) return false;
-  return readFileSync6(path, "utf8").includes(HOOK_MARKER);
+  if (!existsSync12(path)) return false;
+  return readFileSync5(path, "utf8").includes(HOOK_MARKER);
 }
 function escapeGitConfigValueRegex(value) {
   return value.replace(/[\\^$.*+?()[\]{}|]/g, "\\$&");
@@ -21403,11 +21247,11 @@ function rmOwnedDir(dir) {
   const hookPath = resolve18(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
-  if (existsSync11(dir) && readdirSync2(dir).length === 0) rmdirSync(dir);
+  if (existsSync12(dir) && readdirSync2(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
   const root = resolve18(commonDir, "worktrees");
-  if (!existsSync11(root)) return [];
+  if (!existsSync12(root)) return [];
   return readdirSync2(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
@@ -23660,7 +23504,7 @@ __export(in_process_session_exports, {
 });
 import { mkdtemp as mkdtemp2, rm as rm2 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join30 } from "node:path";
 import {
   createAgentSession,
   DefaultResourceLoader,
@@ -23783,7 +23627,7 @@ async function openPiInProcessSession(options) {
   let scratchDir;
   let resolvedAgentDir = options.agentDir;
   if (resolvedAgentDir === void 0) {
-    scratchDir = await mkdtemp2(join31(options.credentialScratchParent ?? tmpdir2(), "ak-institutional-"));
+    scratchDir = await mkdtemp2(join30(options.credentialScratchParent ?? tmpdir2(), "ak-institutional-"));
     resolvedAgentDir = scratchDir;
   }
   try {
@@ -24479,7 +24323,7 @@ var init_reviewer_child_executor = __esm({
 import { spawn as spawn4 } from "node:child_process";
 import { mkdtemp as mkdtemp3, rm as rm3 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 async function runCommand(command, args, options = {}) {
   return await new Promise((resolve19, reject) => {
     const child = spawn4(command, args, { ...options.cwd === void 0 ? {} : { cwd: options.cwd }, stdio: ["ignore", "pipe", "pipe"], signal: options.signal });
@@ -24528,8 +24372,8 @@ async function prepareSnapshot(accepted, signal, dependencies) {
     if (!sameReviewerPinnedTarget({ repositoryRoot: accepted.repositoryRoot, objectFormat, targetHead }, accepted)) throw new Error("Accepted Reviewer target identity no longer matches the repository");
     await git3(accepted.repositoryRoot, ["cat-file", "-e", `${targetHead}^{commit}`], signal);
     dependencies.fault?.("mirror.before-create");
-    mirrorRoot = await mkdtemp3(join32(tmpdir3(), "ak-reviewer-snapshot-"));
-    const mirrorPath = join32(mirrorRoot, "repository.git");
+    mirrorRoot = await mkdtemp3(join31(tmpdir3(), "ak-reviewer-snapshot-"));
+    const mirrorPath = join31(mirrorRoot, "repository.git");
     dependencies.fault?.("mirror.create");
     await runCommand("git", ["init", "--bare", `--object-format=${accepted.objectFormat}`, mirrorPath], signal === void 0 ? {} : { signal });
     await git3(mirrorPath, ["fetch", "--no-tags", accepted.repositoryRoot, targetHead], signal);
@@ -24546,7 +24390,7 @@ async function prepareClone(snapshot, signal, dependencies) {
   const target = { repositoryRoot: snapshot.repositoryRoot, objectFormat: snapshot.objectFormat, targetHead: snapshot.targetHead, refs: { ...snapshot.refs } };
   try {
     dependencies.fault?.("workspace.before-create");
-    workspace = await mkdtemp3(join32(tmpdir3(), "ak-reviewer-leg-"));
+    workspace = await mkdtemp3(join31(tmpdir3(), "ak-reviewer-leg-"));
     dependencies.fault?.("workspace.init");
     await git3(workspace, ["init", `--object-format=${snapshot.objectFormat}`, "--initial-branch=ak-reviewer-unborn"], signal);
     dependencies.fault?.("workspace.fetch");
@@ -24748,7 +24592,7 @@ var init_reviewer_agent = __esm({
 
 // src/acp-host/production-host.ts
 import { readFile as readFile20 } from "node:fs/promises";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/canonical-skill-binding.ts
 import { readFile, realpath } from "node:fs/promises";
@@ -24962,9 +24806,9 @@ init_auditor_soul();
 init_session_opening_materials();
 
 // src/acp-host/description.ts
-import { join as join33 } from "node:path";
+import { join as join32 } from "node:path";
 function resolveAcpBinary(description, operatorHome) {
-  return join33(operatorHome, ...description.binaryFromHome);
+  return join32(operatorHome, ...description.binaryFromHome);
 }
 function acpStdioArgs(description, model) {
   const { prefix, suffix, modelFlag, thinkingFlag } = description.argv;
@@ -24985,8 +24829,8 @@ init_role_runtime();
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile18, writeFile as writeFile8 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename7, dirname as dirname17, join as join34 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
+import { basename as basename7, dirname as dirname17, join as join33 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/acp-host/role-turn-host.ts
 init_agent_start_materials();
@@ -25352,7 +25196,7 @@ async function prepareAcpRoleEnvelope(options) {
     const raw = await readFile18(method.path, "utf8");
     methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
   }
-  let sessionFile = options.sessionFile ?? join34(request.runDirectory, "session", "session.jsonl");
+  let sessionFile = options.sessionFile ?? join33(request.runDirectory, "session", "session.jsonl");
   await mkdir5(dirname17(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
@@ -25676,7 +25520,7 @@ async function prepareAcpRoleEnvelope(options) {
     });
   }
   await listen(server, options.socketPath);
-  const relay = fileURLToPath3(new URL("./mcp-relay.mjs", import.meta.url));
+  const relay = fileURLToPath2(new URL("./mcp-relay.mjs", import.meta.url));
   let disposed = false;
   let priorAkRoleRunDir;
   let priorAkRoleCourtAttempt;
@@ -25817,9 +25661,9 @@ async function prepareAcpRoleEnvelope(options) {
 
 // src/acp-host/session-identity.ts
 import { mkdir as mkdir6, readFile as readFile19, rename, writeFile as writeFile9 } from "node:fs/promises";
-import { dirname as dirname18, join as join35 } from "node:path";
+import { dirname as dirname18, join as join34 } from "node:path";
 function createAcpSessionIdentityAuthority(authority, sessionBindingFile) {
-  const bindingPath = (principal) => join35(authority.decode(principal).sessionDirectory, sessionBindingFile);
+  const bindingPath = (principal) => join34(authority.decode(principal).sessionDirectory, sessionBindingFile);
   return {
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;
@@ -25848,7 +25692,7 @@ function createAcpSessionIdentityAuthority(authority, sessionBindingFile) {
 }
 
 // src/acp-host/production-host.ts
-var navigatorRoutePlaybookPath = fileURLToPath4(
+var navigatorRoutePlaybookPath = fileURLToPath3(
   new URL("../../resources/navigator-route-playbook.md", import.meta.url)
 );
 function createAcpRoleRuntimeDependencies(packageRoot) {