@akagilnc/pi-workflow-roles 0.1.3671 → 0.1.3682

package/dist/acp-host/production-host.js

@@ -3242,7 +3242,7 @@ function validateRecordedDiaristOutput(value) {
   } catch {
     throw new Error("Diarist output has no execution discriminator");
   }
-  if (status === "completed") {
+  if (status === "completed" || status === "escalate") {
     return value;
   }
   throw new Error("Diarist output has no execution discriminator");
@@ -3274,7 +3274,7 @@ var init_diarist_contracts = __esm({
     DIARIST_SOURCES_FLAG = {
       name: "ak-diarist-sources",
       definition: {
-        description: "Frozen per-ticket source catalog the diarist selects from",
+        description: "Frozen source catalog the diarist selects from (may be unbound until LLM asserts ticketNumber)",
         type: "string"
       }
     };
@@ -3496,7 +3496,7 @@ function validateAcceptedDetails(toolName, details) {
     [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
     [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
     [AUDITOR_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-    [DIARIST_OUTPUT_TOOL_NAME]: ["completed"]
+    [DIARIST_OUTPUT_TOOL_NAME]: ["completed", "escalate"]
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
   const baseDiscriminator = discriminator;
@@ -4643,27 +4643,6 @@ async function findLatestRunIdForSeatTicket(input) {
   }
   return best;
 }
-async function collectBookRunTicketNumbers(input) {
-  const ledgerHome = resolveActivationLedgerHome(input.home);
-  const runsDir = join11(
-    activationBookDirectory(ledgerHome, input.bookKey),
-    "runs"
-  );
-  let entries;
-  try {
-    entries = await readdir2(runsDir);
-  } catch (error) {
-    if (errorCodeOf2(error) === "ENOENT") return /* @__PURE__ */ new Set();
-    throw error;
-  }
-  const known = /* @__PURE__ */ new Set();
-  for (const entry of entries) {
-    if (!entry.includes("@")) continue;
-    const ticketNumber = await readRunTicketNumber(join11(runsDir, entry));
-    if (ticketNumber !== void 0) known.add(ticketNumber);
-  }
-  return known;
-}
 function parsePersistedTicketIdentity(record4) {
   const correlationId = typeof record4.correlationId === "string" && record4.correlationId.trim() !== "" ? record4.correlationId : void 0;
   const ticketNumber = typeof record4.ticketNumber === "number" && Number.isSafeInteger(record4.ticketNumber) && record4.ticketNumber >= 1 ? record4.ticketNumber : void 0;
@@ -6158,6 +6137,7 @@ __export(invocation_exports, {
   admitNotaryInvocation: () => admitNotaryInvocation,
   admitReviewerInvocation: () => admitReviewerInvocation,
   bindAdmittedTicketNumber: () => bindAdmittedTicketNumber,
+  bindTicketNumberOnRunDirectory: () => bindTicketNumberOnRunDirectory,
   buildCoderTransportPrompt: () => buildCoderTransportPrompt,
   buildCollectorTransportPrompt: () => buildCollectorTransportPrompt,
   buildCountersignTransportPrompt: () => buildCountersignTransportPrompt,
@@ -6206,6 +6186,7 @@ __export(invocation_exports, {
   resolveGitHubRemoteRepository: () => resolveGitHubRemoteRepository
 });
 import { execFileSync as execFileSync2 } from "node:child_process";
+import { existsSync as existsSync4 } from "node:fs";
 import {
   lstat as lstat3,
   mkdir,
@@ -6352,6 +6333,40 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
     "utf8"
   );
 }
+async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
+  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
+    throw new Error(
+      `bindTicketNumberOnRunDirectory requires a safe positive integer, got ${String(ticketNumber)}`
+    );
+  }
+  const admittedPath = join13(runDirectory, "admitted-request.json");
+  const invocationPath = join13(runDirectory, "invocation.json");
+  const admitted = JSON.parse(await readFile9(admittedPath, "utf8"));
+  const existing = admitted.ticketNumber;
+  if (typeof existing === "number") {
+    if (existing === ticketNumber) return;
+    throw new Error(
+      `bindTicketNumberOnRunDirectory refuses to replace existing ticket #${existing} with #${ticketNumber}`
+    );
+  }
+  if (existsSync4(invocationPath)) {
+    const invocation = JSON.parse(
+      await readFile9(invocationPath, "utf8")
+    );
+    if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
+      throw new Error(
+        `bindTicketNumberOnRunDirectory refuses to replace invocation ticket #${invocation.ticketNumber} with #${ticketNumber}`
+      );
+    }
+  }
+  await writeFile4(
+    admittedPath,
+    `${JSON.stringify({ ...admitted, ticketNumber }, null, 2)}
+`,
+    "utf8"
+  );
+  await mergeInvocationIdentityPage(runDirectory, { ticketNumber });
+}
 async function recordLaunchedPiIdentity(runDirectory, identity) {
   await mergeInvocationIdentityPage(runDirectory, {
     piExecutable: identity.executable,
@@ -8388,7 +8403,7 @@ var load_production_acp_host_exports = {};
 __export(load_production_acp_host_exports, {
   loadProductionAcpHostFactory: () => loadProductionAcpHostFactory
 });
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync5 } from "node:fs";
 import { join as join14 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot, host) {
@@ -8398,7 +8413,7 @@ async function loadProductionAcpHostFactory(packageRoot, host) {
   }
   const built = join14(packageRoot, "dist/acp-host/production-host.js");
   const source = join14(packageRoot, "src/acp-host/production-host.ts");
-  const target = existsSync4(built) ? built : source;
+  const target = existsSync5(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
   const create = mod.createProductionAcpRoleTurnHost;
@@ -9263,6 +9278,30 @@ var init_config = __esm({
   }
 });
 
+// src/public-cli/seat-ticket-binding.ts
+async function tryResumeSameTicketSeatRun(input) {
+  if (input.freshSummons === true) return void 0;
+  if (input.parentRunPath === void 0 && input.ticketNumber === void 0) {
+    return void 0;
+  }
+  const previousRunId = await findLatestRunIdForSeatTicket({
+    home: input.home,
+    bookKey: resolveBookKeyFromGit(input.projectRoot),
+    role: input.role,
+    ...input.parentRunPath === void 0 ? {} : { parentRunPath: input.parentRunPath },
+    ...input.ticketNumber === void 0 ? {} : { ticketNumber: input.ticketNumber }
+  });
+  if (previousRunId === void 0) return void 0;
+  return await input.resume(previousRunId, input.summons);
+}
+var init_seat_ticket_binding = __esm({
+  "src/public-cli/seat-ticket-binding.ts"() {
+    "use strict";
+    init_activation_ledger_git();
+    init_run_lifecycle();
+  }
+});
+
 // src/ticket-provenance-contracts.ts
 function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -9356,7 +9395,7 @@ var init_ticket_provenance_contracts = __esm({
 
 // src/ticket-provenance.ts
 import { createHash as createHash5 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join16 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
@@ -9421,7 +9460,7 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
 }
 function readOfferedIdentities(ticketNumber, cwd, home) {
   const { offeredWatermarkFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  if (!existsSync5(offeredWatermarkFile)) return /* @__PURE__ */ new Set();
+  if (!existsSync6(offeredWatermarkFile)) return /* @__PURE__ */ new Set();
   let text;
   try {
     text = readFileSync2(offeredWatermarkFile, "utf8");
@@ -9632,91 +9671,6 @@ var init_ticket_provenance = __esm({
   }
 });
 
-// src/public-cli/seat-ticket-binding.ts
-import { existsSync as existsSync6 } from "node:fs";
-function instructionTicketTokens(instruction) {
-  const tokens = /* @__PURE__ */ new Set();
-  for (const run of instruction.match(/\d+/g) ?? []) {
-    if (run.startsWith("0")) continue;
-    const parsed = Number(run);
-    if (!Number.isSafeInteger(parsed) || parsed < 1) continue;
-    tokens.add(parsed);
-  }
-  return [...tokens];
-}
-async function resolveKnownTicketNumber(input) {
-  const tokens = instructionTicketTokens(input.instruction);
-  if (tokens.length === 0) return void 0;
-  const known = [];
-  let runTickets;
-  for (const token of tokens) {
-    const volume = resolveTicketProvenanceVolume(
-      token,
-      input.projectRoot,
-      input.home
-    );
-    if (existsSync6(volume.volumeDir)) {
-      known.push(token);
-      continue;
-    }
-    if (runTickets === void 0) {
-      runTickets = await readBookRunTickets(input);
-    }
-    if (runTickets.has(token)) known.push(token);
-  }
-  return known.length === 1 ? known[0] : void 0;
-}
-async function readBookRunTickets(input) {
-  let bookKey;
-  try {
-    bookKey = input.bookKey ?? resolveBookKeyFromGit(input.projectRoot);
-  } catch (error) {
-    if (error instanceof ActivationGitRepositoryRequiredError) return /* @__PURE__ */ new Set();
-    throw error;
-  }
-  return await collectBookRunTicketNumbers({ home: input.home, bookKey });
-}
-async function bindReusedTicketNumber(admitted, ticketNumber) {
-  if (ticketNumber === void 0) return;
-  if (admitted.ticketNumber !== void 0) return;
-  await bindAdmittedTicketNumber(admitted, ticketNumber);
-}
-async function resolveSeatTicketBinding(admitted, env) {
-  if (admitted.ticketNumber !== void 0) return admitted.ticketNumber;
-  const ticketNumber = await resolveKnownTicketNumber({
-    instruction: admitted.instruction,
-    projectRoot: admitted.projectRoot,
-    home: env.home,
-    bookKey: admitted.bookKey
-  });
-  await bindReusedTicketNumber(admitted, ticketNumber);
-  return ticketNumber;
-}
-async function tryResumeSameTicketSeatRun(input) {
-  if (input.freshSummons === true) return void 0;
-  if (input.parentRunPath === void 0 && input.ticketNumber === void 0) {
-    return void 0;
-  }
-  const previousRunId = await findLatestRunIdForSeatTicket({
-    home: input.home,
-    bookKey: resolveBookKeyFromGit(input.projectRoot),
-    role: input.role,
-    ...input.parentRunPath === void 0 ? {} : { parentRunPath: input.parentRunPath },
-    ...input.ticketNumber === void 0 ? {} : { ticketNumber: input.ticketNumber }
-  });
-  if (previousRunId === void 0) return void 0;
-  return await input.resume(previousRunId, input.summons);
-}
-var init_seat_ticket_binding = __esm({
-  "src/public-cli/seat-ticket-binding.ts"() {
-    "use strict";
-    init_activation_ledger_git();
-    init_ticket_provenance();
-    init_invocation();
-    init_run_lifecycle();
-  }
-});
-
 // src/public-cli/case-dossier-delivery.ts
 import { stat as stat2 } from "node:fs/promises";
 async function describeDossierFile(path) {
@@ -16489,11 +16443,6 @@ async function runPublicInspector(argv, env, io, parseInspectorArgv2) {
     throw error;
   }
   const projectRoot = parsed.project ?? env.cwd;
-  const reusedTicketNumber = await resolveKnownTicketNumber({
-    instruction: parsed.instruction,
-    projectRoot,
-    home: env.home
-  });
   const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
   if (parentRunPath !== void 0) {
     const summons = {
@@ -16559,11 +16508,7 @@ async function runPublicInspector(argv, env, io, parseInspectorArgv2) {
     env,
     io,
     request: turnRequest,
-    adapters: inspectorAdapters({
-      beforeDispatch: async (admittedSeat) => {
-        await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
-      }
-    }),
+    adapters: inspectorAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -16744,7 +16689,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
   let auditorSubject;
   let auditorSourceRun;
   let auditorSourceTicket;
-  let reusedTicketNumber;
   const projectRoot = parsed.project ?? env.cwd;
   if (role === "auditor") {
     if (parsed.subject !== "judge" && parsed.subject !== "doctor") {
@@ -16779,12 +16723,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
       );
       return { exitCode: 2 };
     }
-  } else {
-    reusedTicketNumber = await resolveKnownTicketNumber({
-      instruction: parsed.instruction,
-      projectRoot,
-      home: env.home
-    });
   }
   const summons = {
     instruction: parsed.instruction,
@@ -16810,21 +16748,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
       })
     });
     if (resumed !== void 0) return resumed;
-  } else if (reusedTicketNumber !== void 0) {
-    const resumed = await tryResumeSameTicketSeatRun({
-      home: env.home,
-      projectRoot,
-      role,
-      ticketNumber: reusedTicketNumber,
-      freshSummons: env.freshSummons,
-      summons,
-      resume: (runId, materials) => runPublicInstructionSeatResume(
-        { runId, ...materials === void 0 ? {} : { summons: materials } },
-        env,
-        io
-      )
-    });
-    if (resumed !== void 0) return resumed;
   }
   let admitted;
   try {
@@ -16882,8 +16805,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
           beforeDispatch: async (admittedSeat) => {
             if (auditorSourceTicket !== void 0) {
               await bindAdmittedTicketNumber(admittedSeat, auditorSourceTicket);
-            } else {
-              await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
             }
           }
         }),
@@ -16991,12 +16912,7 @@ async function runPublicJudge(argv, env, io, parseJudgeArgv2) {
         })
       }
     }),
-    adapters: {
-      ...judgeAdapters(),
-      beforeDispatch: async (admittedSeat) => {
-        await resolveSeatTicketBinding(admittedSeat, env);
-      }
-    },
+    adapters: judgeAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -17020,7 +16936,6 @@ var init_judge_run = __esm({
     init_engine_material();
     init_cli_errors();
     init_invocation();
-    init_seat_ticket_binding();
     init_run_lifecycle();
     init_settlement();
     init_turn_request();
@@ -20446,8 +20361,18 @@ var init_diarist_role = __esm({
       openToolObject(
         Type23.Object({
           status: Type23.Unknown({
-            description: "completed \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+            description: "completed | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
           }),
+          ticketNumber: Type23.Optional(
+            Type23.Unknown({
+              description: "\u672C\u5EAD\u5BF9\u8C61\u7968\u53F7\uFF08\u6B63\u6574\u6570\uFF09\u6216 null/\u7701\u7565\uFF1D\u771F\u65E0\u7968\uFF1B\u673A\u68B0\u9A8C\u771F\u540E\u4E0B\u6E38\u8D70 typed \u952E\uFF1B\u8BA4\u4E0D\u51FA\u7528 status=escalate\uFF0C\u4E0D\u6D17\u6210\u65E0\u5F55"
+            })
+          ),
+          reason: Type23.Optional(
+            Type23.String({
+              description: "status \u4E3A escalate \u65F6\uFF1A\u8BA4\u4E0D\u51FA\u672C\u5EAD\u5BF9\u8C61\u7684\u539F\u56E0"
+            })
+          ),
           selections: Type23.Array(
             Type23.Object(
               {
@@ -20461,7 +20386,7 @@ var init_diarist_role = __esm({
               },
               { additionalProperties: true, description: "\u4E00\u6761\u5165\u5F55\u9009\u62E9" }
             ),
-            { description: "\u5165\u5F55\u9009\u62E9\uFF1B\u7A7A\u5217\u8868\u5408\u6CD5\u5B8C\u5C40" }
+            { description: "\u5165\u5F55\u9009\u62E9\uFF1B\u7A7A\u5217\u8868\u5408\u6CD5\u5B8C\u5C40\uFF1Bescalate \u65F6\u53EF\u4E0D\u4EA4" }
           )
         })
       )
@@ -20469,8 +20394,8 @@ var init_diarist_role = __esm({
     DIARIST_TOOL_SPEC = {
       name: DIARIST_OUTPUT_TOOL_NAME,
       label: "\u8D77\u5C45\u90CE\u8F93\u51FA",
-      description: "\u8D77\u5C45\u90CE\u5165\u5F55\u9009\u62E9\u3002",
-      promptSnippet: "\u8D77\u5C45\u90CE\u5165\u5F55\u9009\u62E9",
+      description: "\u8D77\u5C45\u90CE\u5165\u5F55\u9009\u62E9\u4E0E\u672C\u7968\u8EAB\u4EFD\u65AD\u8A00\uFF1B\u8BA4\u4E0D\u51FA\u672C\u5EAD\u5BF9\u8C61\u5219 escalate\u3002",
+      promptSnippet: "\u8D77\u5C45\u90CE\u5165\u5F55\u9009\u62E9\u4E0E\u672C\u7968\u8EAB\u4EFD",
       parameters: diaristOutputSchema
     };
   }
@@ -20554,6 +20479,83 @@ var init_diarist_mechanical = __esm({
 
 // src/diarist.ts
 import { readFileSync as readFileSync4 } from "node:fs";
+import { execFileSync as execFileSync3 } from "node:child_process";
+function instructionContainsTicketNumber(instruction, ticketNumber) {
+  if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) return false;
+  return new RegExp("(?<!\\d)" + String(ticketNumber) + "(?!\\d)").test(
+    instruction
+  );
+}
+function createGhTicketExistenceChecker(options) {
+  const runner = options?.runner ?? createGhApiRunner();
+  return async (input) => {
+    const projected = await projectGhIssueBody(runner, {
+      owner: input.owner,
+      repo: input.repo,
+      ticketNumber: input.ticketNumber,
+      ...input.signal === void 0 ? {} : { signal: input.signal }
+    });
+    return projected.status === "available";
+  };
+}
+async function verifyAssertedTicketNumber(input) {
+  const n = input.ticketNumber;
+  if (!Number.isSafeInteger(n) || n < 1) {
+    throw new DiaristTicketVerificationError(
+      "assertion-uninterpretable",
+      `diarist ticket assertion must be a safe integer >= 1, got ${String(n)}`
+    );
+  }
+  if (!instructionContainsTicketNumber(input.instruction, n)) {
+    throw new DiaristTicketVerificationError(
+      "number-not-in-instruction",
+      `diarist ticket assertion #${n} complete decimal number does not appear in accepted instruction`
+    );
+  }
+  const origin = resolveDiaristGithubOrigin(input.projectRoot);
+  if (origin === void 0) {
+    throw new DiaristTicketVerificationError(
+      "origin-unresolved",
+      `diarist ticket assertion #${n} requires a resolvable github.com origin remote for live verification`
+    );
+  }
+  const checkExistence = input.checkExistence ?? createGhTicketExistenceChecker();
+  let exists;
+  try {
+    exists = await checkExistence({
+      owner: origin.owner,
+      repo: origin.repo,
+      ticketNumber: n,
+      ...input.signal === void 0 ? {} : { signal: input.signal }
+    });
+  } catch (error) {
+    throw new DiaristTicketVerificationError(
+      "ticket-missing",
+      `diarist ticket assertion #${n} live verification failed`,
+      { cause: error }
+    );
+  }
+  if (!exists) {
+    throw new DiaristTicketVerificationError(
+      "ticket-missing",
+      `diarist ticket assertion #${n} does not exist as a live issue on ${origin.owner}/${origin.repo}`
+    );
+  }
+}
+function resolveDiaristGithubOrigin(projectRoot) {
+  let remoteUrl;
+  try {
+    remoteUrl = execFileSync3("git", ["remote", "get-url", "origin"], {
+      cwd: projectRoot,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return void 0;
+  }
+  if (remoteUrl.length === 0) return void 0;
+  return parseGitHubOriginRemote(remoteUrl);
+}
 function blockEntryIdentity(ticketNumber, block) {
   return ticketProvenanceEntryIdentity({
     ticketNumber,
@@ -20568,8 +20570,20 @@ function loadDiaristSourceCatalog(path) {
     throw new Error(`diarist source catalog is not an object (${path})`);
   }
   const record4 = parsed;
-  if (typeof record4.ticketNumber !== "number" || typeof record4.cwd !== "string") {
-    throw new Error(`diarist source catalog is missing ticket coordinates (${path})`);
+  if (typeof record4.cwd !== "string") {
+    throw new Error(`diarist source catalog is missing cwd (${path})`);
+  }
+  if (typeof record4.instruction !== "string") {
+    throw new Error(`diarist source catalog is missing instruction (${path})`);
+  }
+  if (typeof record4.runDirectory !== "string") {
+    throw new Error(`diarist source catalog is missing runDirectory (${path})`);
+  }
+  if (typeof record4.projectRoot !== "string") {
+    throw new Error(`diarist source catalog is missing projectRoot (${path})`);
+  }
+  if (record4.ticketNumber !== void 0 && (typeof record4.ticketNumber !== "number" || !Number.isSafeInteger(record4.ticketNumber) || record4.ticketNumber < 1)) {
+    throw new Error(`diarist source catalog ticketNumber is not a safe ticket (${path})`);
   }
   if (!Array.isArray(record4.candidates)) {
     throw new Error(`diarist source catalog is missing candidates (${path})`);
@@ -20577,7 +20591,13 @@ function loadDiaristSourceCatalog(path) {
   return parsed;
 }
 async function commitDiaristSelections(input) {
-  const { ticketNumber, cwd } = input.catalog;
+  const ticketNumber = input.catalog.ticketNumber;
+  if (ticketNumber === void 0) {
+    throw new Error(
+      "commitDiaristSelections requires a bound ticketNumber on the catalog"
+    );
+  }
+  const { cwd } = input.catalog;
   const homeOpt = input.catalog.home === void 0 ? {} : { home: input.catalog.home };
   const volumePaths = ensureTicketProvenanceVolume(ticketNumber, cwd, input.catalog.home);
   const anchors = buildDiaristAnchors({ ticketNumber });
@@ -20643,6 +20663,7 @@ async function commitDiaristSelections(input) {
     ]
   };
 }
+var DiaristTicketVerificationError;
 var init_diarist = __esm({
   "src/diarist.ts"() {
     "use strict";
@@ -20652,6 +20673,15 @@ var init_diarist = __esm({
     init_reviewer_pinned_git();
     init_ticket_provenance();
     init_sitian_facade();
+    DiaristTicketVerificationError = class extends Error {
+      code = "diarist-ticket-verification";
+      reason;
+      constructor(reason, message, options) {
+        super(message, options);
+        this.name = "DiaristTicketVerificationError";
+        this.reason = reason;
+      }
+    };
   }
 });
 
@@ -21189,11 +21219,11 @@ var init_reviewer_role = __esm({
 });
 
 // src/worker-submission-gates.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve18 } from "node:path";
 function git2(cwd, args) {
-  return execFileSync3("git", args, {
+  return execFileSync4("git", args, {
     cwd,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
@@ -21201,7 +21231,7 @@ function git2(cwd, args) {
   }).trim();
 }
 function gitFile(file, args) {
-  return execFileSync3("git", ["config", "--file", file, ...args], {
+  return execFileSync4("git", ["config", "--file", file, ...args], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
     env: { ...process.env, GIT_DIR: void 0, GIT_WORK_TREE: void 0, GIT_COMMON_DIR: void 0 }
@@ -22288,6 +22318,26 @@ function createAuditorRoleRuntime(roleHost, dependencies) {
     }
   };
 }
+function readDiaristTicketAssertion(submitted) {
+  if (submitted === void 0 || !("ticketNumber" in submitted)) {
+    return { kind: "true-unbound" };
+  }
+  const raw = submitted.ticketNumber;
+  if (raw === null) return { kind: "true-unbound" };
+  if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) {
+    return { kind: "ticket", ticketNumber: raw };
+  }
+  if (typeof raw === "string" && /^[1-9]\d*$/.test(raw)) {
+    const n = Number(raw);
+    if (Number.isSafeInteger(n) && n >= 1) {
+      return { kind: "ticket", ticketNumber: n };
+    }
+  }
+  throw new DiaristTicketVerificationError(
+    "assertion-uninterpretable",
+    "diarist ticketNumber must be a safe integer >= 1, null, or absent"
+  );
+}
 function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag) {
   let catalog;
   const runtime = createFiledOfficerRuntime(
@@ -22299,17 +22349,72 @@ function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag) {
       soulTag: "diarist",
       beforeAccept: async ({ parameters }) => {
         const submitted = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
+        if (submitted?.status === "escalate") {
+          if (!("sitian" in submitted) && !("ticketNumber" in submitted)) {
+            return submitted;
+          }
+          const stripped = { ...submitted };
+          delete stripped.sitian;
+          delete stripped.ticketNumber;
+          return stripped;
+        }
+        const assertion = readDiaristTicketAssertion(submitted);
         if (catalog === void 0) {
+          if (assertion.kind === "ticket") {
+            throw new DiaristTicketVerificationError(
+              "assertion-uninterpretable",
+              `diarist asserted ticket #${assertion.ticketNumber} but no source catalog was frozen for this turn`
+            );
+          }
           if (submitted === void 0 || !("sitian" in submitted)) return void 0;
           const stripped = { ...submitted };
           delete stripped.sitian;
           return stripped;
         }
+        if (catalog.ticketNumber !== void 0) {
+          const facts2 = await commitDiaristSelections({
+            catalog,
+            selections: projectDiaristSelections(parameters)
+          });
+          return {
+            ...submitted ?? { receipt: parameters },
+            ticketNumber: catalog.ticketNumber,
+            sitian: facts2
+          };
+        }
+        if (assertion.kind === "true-unbound") {
+          if (submitted === void 0 || !("sitian" in submitted)) {
+            return { ...submitted ?? { receipt: parameters }, ticketNumber: null };
+          }
+          const stripped = {
+            ...submitted,
+            ticketNumber: null
+          };
+          delete stripped.sitian;
+          return stripped;
+        }
+        await verifyAssertedTicketNumber({
+          ticketNumber: assertion.ticketNumber,
+          instruction: catalog.instruction,
+          projectRoot: catalog.projectRoot
+        });
+        await bindTicketNumberOnRunDirectory(
+          catalog.runDirectory,
+          assertion.ticketNumber
+        );
+        const boundCatalog = {
+          ...catalog,
+          ticketNumber: assertion.ticketNumber
+        };
         const facts = await commitDiaristSelections({
-          catalog,
+          catalog: boundCatalog,
           selections: projectDiaristSelections(parameters)
         });
-        return { ...submitted ?? { receipt: parameters }, sitian: facts };
+        return {
+          ...submitted ?? { receipt: parameters },
+          ticketNumber: assertion.ticketNumber,
+          sitian: facts
+        };
       }
     },
     dependencies
@@ -23100,6 +23205,7 @@ var init_role_runtime = __esm({
     init_diarist_role();
     init_diarist_contracts();
     init_diarist();
+    init_invocation();
     init_gatekeeper_role();
     init_navigator_role();
     init_auditor_role();