@akagilnc/pi-workflow-roles 0.1.4239 → 0.1.4259

package/dist/headless-host/production-host.js

@@ -3484,6 +3484,10 @@ ${paths.join("\n")}`
       };
       if (request.courtAttemptId === void 0) delete env.AK_ROLE_COURT_ATTEMPT;
       else env.AK_ROLE_COURT_ATTEMPT = request.courtAttemptId;
+      if (request.invocationScopeId === void 0) delete env.AK_ROLE_INVOCATION_SCOPE;
+      else env.AK_ROLE_INVOCATION_SCOPE = request.invocationScopeId;
+      if (request.host === void 0 || request.host.trim() === "") delete env.AK_ROLE_HOST;
+      else env.AK_ROLE_HOST = request.host.trim();
       applyEngineChildEnv(env, request.engine);
       if (typeof process.env.AK_ROLE_AUDITOR_SOURCE_RUN === "string" && process.env.AK_ROLE_AUDITOR_SOURCE_RUN.trim() !== "") {
         env.AK_ROLE_AUDITOR_SOURCE_RUN = process.env.AK_ROLE_AUDITOR_SOURCE_RUN;
@@ -10857,9 +10861,209 @@ var init_case_dossier_delivery = __esm({
   }
 });
 
+// src/engine-detour-usage.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import { readFileSync as readFileSync3 } from "node:fs";
+import { dirname as dirname14, join as join23 } from "node:path";
+function engineDetourStdoutByteLength(stdout) {
+  return Buffer.byteLength(stdout, "utf8");
+}
+function engineDetourCallIdentity(input) {
+  const scope = input.invocationScopeId ?? "";
+  return `engine-detour-call:${scope}:${input.toolCallId}`;
+}
+function reportEngineDetourCall(input) {
+  const payload = {
+    tool: ENGINE_DETOUR_TOOL_NAME,
+    toolCallId: input.toolCallId,
+    durationMs: input.durationMs
+  };
+  if (input.code !== void 0) payload.code = input.code;
+  if (input.stdoutByteLength !== void 0) {
+    payload.stdoutByteLength = input.stdoutByteLength;
+  }
+  if (input.invocationScopeId !== void 0) {
+    payload.invocationScopeId = input.invocationScopeId;
+  }
+  if (input.runId !== void 0) payload.runId = input.runId;
+  const subject = input.runId === void 0 ? void 0 : {
+    runId: input.runId,
+    ...input.invocationScopeId === void 0 ? {} : { invocationScopeId: input.invocationScopeId }
+  };
+  const pointer = sitianReport({
+    level: "event",
+    kind: ENGINE_DETOUR_CALL_KIND,
+    identity: engineDetourCallIdentity({
+      toolCallId: input.toolCallId,
+      ...input.invocationScopeId === void 0 ? {} : { invocationScopeId: input.invocationScopeId }
+    }),
+    cwd: input.cwd,
+    sessionParent: input.sessionParent,
+    source: "engine-detour-tool",
+    payload,
+    raw: {
+      sessionFile: input.sessionParent,
+      entryId: input.toolCallId
+    },
+    ...input.home === void 0 ? {} : { home: input.home },
+    ...input.host === void 0 ? {} : { host: input.host },
+    ...subject === void 0 ? {} : { subject }
+  });
+  return {
+    toolCallId: input.toolCallId,
+    durationMs: input.durationMs,
+    ...input.code === void 0 ? {} : { code: input.code },
+    ...input.stdoutByteLength === void 0 ? {} : { stdoutByteLength: input.stdoutByteLength },
+    recordPointer: pointer
+  };
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function callFactFromSitianPayload(payload, pointer) {
+  if (!isRecord7(payload)) return void 0;
+  if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
+  if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
+    return void 0;
+  }
+  if (typeof payload.durationMs !== "number" || !Number.isFinite(payload.durationMs)) {
+    return void 0;
+  }
+  return {
+    toolCallId: payload.toolCallId,
+    durationMs: payload.durationMs,
+    ...typeof payload.code === "number" ? { code: payload.code } : {},
+    ...typeof payload.stdoutByteLength === "number" ? { stdoutByteLength: payload.stdoutByteLength } : {},
+    recordPointer: pointer
+  };
+}
+function invocationScopeIdOfRecord(record4) {
+  if (isRecord7(record4.subject)) {
+    const fromSubject = record4.subject.invocationScopeId;
+    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
+  }
+  if (isRecord7(record4.payload)) {
+    const fromPayload = record4.payload.invocationScopeId;
+    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
+  }
+  return void 0;
+}
+async function readEngineDetourToolUsage(input) {
+  if (!input.engineMounted) return void 0;
+  const { recordFile } = resolveSitianRecordPath({
+    level: "event",
+    kind: ENGINE_DETOUR_CALL_KIND,
+    sessionParent: input.sessionParent,
+    ...input.home === void 0 ? {} : { home: input.home },
+    ...input.cwd === void 0 ? {} : { cwd: input.cwd }
+  });
+  const { records } = await readSitianRecords(recordFile);
+  const calls = [];
+  for (const record4 of records) {
+    if (record4.kind !== ENGINE_DETOUR_CALL_KIND) continue;
+    const boundScope = invocationScopeIdOfRecord(record4);
+    if (input.invocationScopeId !== void 0 && input.invocationScopeId.length > 0) {
+      if (boundScope !== input.invocationScopeId) continue;
+    } else if (boundScope !== void 0) {
+      continue;
+    }
+    const pointer = {
+      identity: record4.identity,
+      recordFile,
+      kind: record4.kind,
+      level: record4.level
+    };
+    const fact = callFactFromSitianPayload(record4.payload, pointer);
+    if (fact === void 0) continue;
+    calls.push(fact);
+  }
+  return { callCount: calls.length, calls };
+}
+function projectEngineDetourToolUsageForPublicTerminal(usage, options) {
+  if (options.discloseRecordFile) return usage;
+  return {
+    callCount: usage.callCount,
+    calls: usage.calls.map((call) => ({
+      toolCallId: call.toolCallId,
+      durationMs: call.durationMs,
+      ...call.code === void 0 ? {} : { code: call.code },
+      ...call.stdoutByteLength === void 0 ? {} : { stdoutByteLength: call.stdoutByteLength },
+      recordPointer: {
+        identity: call.recordPointer.identity,
+        kind: call.recordPointer.kind,
+        level: call.recordPointer.level,
+        recordFile: ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE
+      }
+    }))
+  };
+}
+function readInvocationRecord(runDirectory) {
+  try {
+    const raw = JSON.parse(
+      readFileSync3(join23(runDirectory, "invocation.json"), "utf8")
+    );
+    return isRecord7(raw) ? raw : void 0;
+  } catch (error) {
+    if (error?.code === "ENOENT") return void 0;
+    throw error;
+  }
+}
+async function readInvocationEngineMounted(runDirectory) {
+  const raw = readInvocationRecord(runDirectory);
+  if (raw === void 0) return false;
+  return typeof raw.engine === "string" && raw.engine.trim() !== "";
+}
+function readInvocationSelectedHost(runDirectory) {
+  const raw = readInvocationRecord(runDirectory);
+  if (raw === void 0) return void 0;
+  return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host.trim() : void 0;
+}
+function withEngineDetourToolUsageFact(outcome, usage) {
+  if (usage === void 0) return outcome;
+  const prior = isRecord7(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
+  return {
+    ...outcome,
+    decisiveFacts: {
+      ...prior,
+      [ENGINE_DETOUR_TOOL_USAGE_FACT_KEY]: usage
+    }
+  };
+}
+function runDirectoryFromSessionDirectory(sessionDirectory) {
+  return dirname14(sessionDirectory);
+}
+function sessionFileFromSessionDirectory(sessionDirectory) {
+  return join23(sessionDirectory, "session.jsonl");
+}
+function mintEngineDetourInvocationScope(input) {
+  const engine = input.effectiveEngine?.trim();
+  if (engine === void 0 || engine.length === 0) return void 0;
+  return randomUUID4();
+}
+function withEngineDetourInvocationScope(request, invocationScopeId) {
+  if (invocationScopeId === void 0 || invocationScopeId.length === 0) {
+    return request;
+  }
+  if (typeof request.invocationScopeId === "string" && request.invocationScopeId.length > 0) {
+    return request;
+  }
+  return { ...request, invocationScopeId };
+}
+var ENGINE_DETOUR_CALL_KIND, ENGINE_DETOUR_TOOL_USAGE_FACT_KEY, ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE;
+var init_engine_detour_usage = __esm({
+  "src/engine-detour-usage.ts"() {
+    "use strict";
+    init_engine_detour();
+    init_sitian_facade();
+    ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
+    ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
+    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = `session/${ENGINE_DETOUR_CALL_KIND}/records.jsonl`;
+  }
+});
+
 // src/host-transition-prior-native.ts
 import { access as access3, readdir as readdir5 } from "node:fs/promises";
-import { dirname as dirname14, join as join23 } from "node:path";
+import { dirname as dirname15, join as join24 } from "node:path";
 function isEnoent3(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -10873,7 +11077,7 @@ async function listPiNativeRecordPaths(sessionFile) {
   }
 }
 async function listSitianRecordPaths(sessionParent) {
-  const sessionRoot = dirname14(sessionParent);
+  const sessionRoot = dirname15(sessionParent);
   let entries;
   try {
     entries = await readdir5(sessionRoot, { withFileTypes: true });
@@ -10884,7 +11088,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join23(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join24(sessionRoot, entry.name, "records.jsonl");
     try {
       await access3(recordFile);
       recordPaths.push(recordFile);
@@ -11276,12 +11480,12 @@ var init_reviewer_dispatch = __esm({
 
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { readFile as readFile17, unlink as unlink3 } from "node:fs/promises";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join24(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join25(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 async function clearReviewerDispatchRejection(runDirectory) {
   try {
@@ -11333,8 +11537,8 @@ var init_reviewer_dispatch_rejection = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir6 } from "node:fs/promises";
-import { join as join25 } from "node:path";
-function isRecord7(value) {
+import { join as join26 } from "node:path";
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isParentAttemptBindingRow(row) {
@@ -11364,7 +11568,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord8(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -11399,7 +11603,7 @@ function nearestAttemptBindingBefore(rows, beforeIndex) {
   for (let i = beforeIndex - 1; i >= 0; i -= 1) {
     const row = rows[i];
     if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord7(row.data) || !isRecord7(row.data.parent)) continue;
+    if (!isRecord8(row.data) || !isRecord8(row.data.parent)) continue;
     const id = row.data.parent.attemptEntryId;
     const sessionFile = row.data.parent.sessionFile;
     return {
@@ -11414,10 +11618,10 @@ function extractAllAcceptedGateToolCalls(rows) {
   const out = [];
   for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
     const row = rows[rowIndex];
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord8(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord7(part) || part.type !== "toolCall") continue;
+      if (!isRecord8(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
@@ -11425,7 +11629,7 @@ function extractAllAcceptedGateToolCalls(rows) {
       const binding = nearestAttemptBindingBefore(rows, rowIndex);
       out.push({
         toolName: part.name,
-        args: isRecord7(part.arguments) ? part.arguments : void 0,
+        args: isRecord8(part.arguments) ? part.arguments : void 0,
         accepted: true,
         rowIndex,
         ...binding
@@ -11548,17 +11752,17 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile26 } = await import("node:fs/promises");
+  const { readFile: readFile25 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile26(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile25(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
       { cause: error }
     );
   }
-  if (!isRecord7(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
+  if (!isRecord8(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
     throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
   }
   const sessionFile = raw.sessionFile;
@@ -11583,7 +11787,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join25(directory, name);
+      const path = join26(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -11722,7 +11926,7 @@ var init_audit_escalation = __esm({
 });
 
 // src/run-terminal-artifacts.ts
-import { basename as basename8, dirname as dirname15, join as join26 } from "node:path";
+import { basename as basename8, dirname as dirname16, join as join27 } from "node:path";
 function runIdFromRunDirectory(runDirectory) {
   const name = basename8(runDirectory);
   const at = name.lastIndexOf("@");
@@ -11737,7 +11941,7 @@ var init_run_terminal_artifacts = __esm({
 });
 
 // src/submission-ledger.ts
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function runIdentity(context) {
   const directory = runDirectoryFromHostContext(context);
   if (directory !== void 0) {
@@ -11759,7 +11963,7 @@ async function submissionRecordFile(cwd, runId, scope) {
   if (sessionParent === void 0) {
     const discoveredRun = await findRunDirectoryById(scope.home, runId);
     if (discoveredRun === void 0) return void 0;
-    sessionParent = join27(discoveredRun, "session", "session.jsonl");
+    sessionParent = join28(discoveredRun, "session", "session.jsonl");
   }
   return resolveSitianRecordPathInLedger({
     level: "event",
@@ -11964,13 +12168,13 @@ function createSubmissionLedgerHost(host, outputTools, failInfrastructure2 = (er
   const sessionParentFromContext = (context) => {
     const runDirectory = runDirectoryFromHostContext(context);
     if (runDirectory !== void 0) {
-      return join27(runDirectory, "session", "session.jsonl");
+      return join28(runDirectory, "session", "session.jsonl");
     }
     const sessionFile = context.sessionManager.getSessionFile?.();
     if (typeof sessionFile === "string" && sessionFile.length > 0) return sessionFile;
     const sessionDir = context.sessionManager.getSessionDir?.();
     if (typeof sessionDir === "string" && sessionDir.length > 0) {
-      return join27(sessionDir, "session.jsonl");
+      return join28(sessionDir, "session.jsonl");
     }
     return void 0;
   };
@@ -12133,15 +12337,15 @@ var init_submission_ledger = __esm({
 // src/session-opening-materials.ts
 import { existsSync as existsSync8 } from "node:fs";
 import { readFile as readFile18 } from "node:fs/promises";
-import { dirname as dirname16, join as join28 } from "node:path";
+import { dirname as dirname17, join as join29 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname16(fileURLToPath(moduleUrl));
+  let dir = dirname17(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync8(join28(dir, "package.json")) && existsSync8(join28(dir, "souls"))) {
+    if (existsSync8(join29(dir, "package.json")) && existsSync8(join29(dir, "souls"))) {
       return dir;
     }
-    const parent = dirname16(dir);
+    const parent = dirname17(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -13502,13 +13706,13 @@ function resolveAuditDossier(source) {
   }
   return { status: "ok", runDirectory };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readDoctorAuditSubjects(context) {
   const entries = context.sessionManager.getEntries?.() ?? [];
   for (const entry of entries) {
-    if (isRecord8(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+    if (isRecord9(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       return { status: "ok" };
     }
   }
@@ -13543,7 +13747,7 @@ var init_dossier_resolution = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash6 } from "node:crypto";
 import { readFile as readFile19, realpath as realpath7 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -13560,16 +13764,16 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot, name) {
-  return join29(packageRoot, packagedMethodSkillRelativeDirectory(name));
+  return join30(packageRoot, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot, name) {
-  return join29(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
+  return join30(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord9(raw)) {
+  if (!isRecord10(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -13583,7 +13787,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord9(raw.upstream)) {
+  if (!isRecord10(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -13610,12 +13814,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord9(raw.files)) {
+  if (!isRecord10(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord9(entry)) {
+    if (!isRecord10(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -13657,8 +13861,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot, name);
-  const skillPathConfigured = join29(rootDirectory, "SKILL.md");
-  const provenancePath = join29(rootDirectory, "provenance.json");
+  const skillPathConfigured = join30(rootDirectory, "SKILL.md");
+  const provenancePath = join30(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile19(provenancePath, "utf8");
@@ -13675,7 +13879,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join29(rootDirectory, rel);
+    const absolute = join30(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile19(absolute);
@@ -13958,11 +14162,11 @@ var init_navigator_invocation_identity = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord10(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord10(item) && typeof item.reason === "string")) {
+  if (!isRecord11(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord11(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -14180,16 +14384,16 @@ var init_terminal = __esm({
 });
 
 // src/public-cli/settlement.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile20, readdir as readdir7, writeFile as writeFile10 } from "node:fs/promises";
-import { dirname as dirname17, join as join30 } from "node:path";
+import { dirname as dirname18, join as join31 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
 function ledgerReadScope(admitted, scope) {
   return {
     home: sealedLedgerHome(admitted),
-    sessionParent: join30(admitted.runDirectory, "session", "session.jsonl"),
+    sessionParent: join31(admitted.runDirectory, "session", "session.jsonl"),
     ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { attemptId: scope.courtAttemptId }
   };
 }
@@ -14252,7 +14456,7 @@ async function attachRecordedSubmissions(admitted, terminal, scope) {
     await recordedSubmissionPayloads(admitted, void 0)
   );
 }
-async function settleHostEndedNoReceipt(admitted, authority) {
+async function settleHostEndedNoReceipt(admitted, authority, scope) {
   const facts = noReceiptLifecycleFacts({
     terminalToolCalled: false,
     rejectedReceipts: [],
@@ -14274,7 +14478,8 @@ async function settleHostEndedNoReceipt(admitted, authority) {
       artifacts: [],
       runId: admitted.runId
     },
-    coordinates.sessionDirectory
+    coordinates.sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function closedLedgerOutcome(admitted, role, scope) {
@@ -14612,12 +14817,12 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
       kind: "auditor",
       sessionParent: sessionFile,
       // Path is driven by sessionParent when under ledger home; cwd is a fallback only.
-      cwd: dirname17(sessionFile)
+      cwd: dirname18(sessionFile)
     });
     const { records } = await readSitianRecords(recordFile);
     for (let i = records.length - 1; i >= 0; i -= 1) {
       const payload = records[i]?.payload;
-      if (!isRecord11(payload) || !isRecord11(payload.response)) continue;
+      if (!isRecord12(payload) || !isRecord12(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -14638,7 +14843,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join30(dirname17(sessionFile), "evidence-children");
+  const childDirectory = join31(dirname18(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir7(childDirectory);
@@ -14649,12 +14854,12 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join30(childDirectory, file));
+      entries = await readBoundSessionEntries(join31(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord11(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord12(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -14687,12 +14892,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     return body.startsWith("\u672C\u6B21\u914D\u7F6E\u7684\u52B3\u52A1\u5F15\u64CE\u53CA\u5176\u624B\u518C\uFF1A") || body.startsWith("- engine:");
   };
   const isResumeEnvelope = (msg) => {
-    if (!isRecord11(msg) || msg.role !== "user") return false;
+    if (!isRecord12(msg) || msg.role !== "user") return false;
     const text = typeof msg.text === "string" ? msg.text : typeof msg.content === "string" ? msg.content : void 0;
     if (isResumeEnvelopeBytes(text)) return true;
     const content = msg.content;
     if (Array.isArray(content)) {
-      return content.some((p) => isRecord11(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
+      return content.some((p) => isRecord12(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
     }
     return false;
   };
@@ -14704,7 +14909,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join30(dirname17(sessionFile), "auditor-roles")];
+  const childDirectories = [join31(dirname18(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -14719,12 +14924,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join30(childDirectory, file));
+        entries = await readBoundSessionEntries(join31(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord11(header)) continue;
+      if (!isRecord12(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -14738,7 +14943,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord11(bindingEntry.data) && isRecord11(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord12(bindingEntry.data) && isRecord12(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
@@ -14765,12 +14970,12 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord11(entry.data)) continue;
-      const parent = isRecord11(entry.data.parent) ? entry.data.parent : void 0;
-      const failure2 = isRecord11(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord12(entry.data)) continue;
+      const parent = isRecord12(entry.data.parent) ? entry.data.parent : void 0;
+      const failure2 = isRecord12(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId) continue;
       if (failure2 === void 0) continue;
-      const identity = isRecord11(failure2.identity) ? failure2.identity : void 0;
+      const identity = isRecord12(failure2.identity) ? failure2.identity : void 0;
       const typedCause = failure2.cause === "provider" || failure2.cause === "activation" || failure2.cause === "session" || failure2.cause === "output" || failure2.cause === "timeout" ? failure2.cause : void 0;
       return {
         ...typedCause === void 0 ? {} : { cause: typedCause },
@@ -14779,7 +14984,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure2.diagnostic === "string" ? { diagnostic: failure2.diagnostic } : {},
-        ...isRecord11(failure2.details) ? { details: failure2.details } : {}
+        ...isRecord12(failure2.details) ? { details: failure2.details } : {}
       };
     }
   }
@@ -14826,9 +15031,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord11(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord11(textPart) ? textPart.text : void 0;
-    const details = isRecord11(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord12(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord12(textPart) ? textPart.text : void 0;
+    const details = isRecord12(message.details) ? message.details : classification.fact;
     return {
       cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -14986,7 +15191,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function toolResultText(message) {
@@ -15011,7 +15216,7 @@ function extractCollectorTargetBindRejection(entries) {
     const diagnostic = toolResultText(message);
     if (diagnostic.length === 0) return void 0;
     const details = message.details;
-    const code = isRecord11(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
+    const code = isRecord12(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
     return code === void 0 ? { diagnostic } : { diagnostic, code };
   }
   return void 0;
@@ -15072,7 +15277,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord11(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord12(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -15109,7 +15314,7 @@ async function appendRunAttemptHistory(source, outcome) {
     type: "custom",
     customType: ATTEMPT_HISTORY_ENTRY_TYPE,
     data: attemptData,
-    id: randomUUID4(),
+    id: randomUUID5(),
     parentId,
     timestamp: timestamp2
   })}
@@ -15144,7 +15349,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord11(next) || typeof next.role !== "string") {
+    if (!isRecord12(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -15152,7 +15357,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord11).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord12).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -15215,18 +15420,50 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join30(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join30(sessionDirectory, "session.jsonl");
+  const directories = [join31(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join31(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
   return projectTerminalGateFact(rounds);
 }
+async function attachEngineDetourToolUsage(base, sessionDirectory, gateContext = {}) {
+  const runDirectory = typeof gateContext.runDirectory === "string" && gateContext.runDirectory.length > 0 ? gateContext.runDirectory : runDirectoryFromSessionDirectory(sessionDirectory);
+  const engineMounted = await readInvocationEngineMounted(runDirectory);
+  if (!engineMounted) return base;
+  const invocationScopeId = typeof gateContext.invocationScopeId === "string" && gateContext.invocationScopeId.length > 0 ? gateContext.invocationScopeId : void 0;
+  const sessionFile = sessionFileFromSessionDirectory(sessionDirectory);
+  const usage = await readEngineDetourToolUsage({
+    sessionParent: sessionFile,
+    engineMounted: true,
+    ...invocationScopeId === void 0 ? {} : { invocationScopeId },
+    cwd: runDirectory
+  });
+  const projected = usage === void 0 ? void 0 : projectEngineDetourToolUsageForPublicTerminal(usage, {
+    // Resumable Terminal: run ID only in resume.command — relative openable path.
+    discloseRecordFile: base.resume === void 0
+  });
+  return {
+    ...base,
+    roleOutcome: withEngineDetourToolUsageFact(base.roleOutcome, projected)
+  };
+}
+function detourGateContext(admitted, scope) {
+  return {
+    runDirectory: admitted.runDirectory,
+    ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { courtAttemptId: scope.courtAttemptId },
+    ...scope?.invocationScopeId === void 0 || scope.invocationScopeId.length === 0 ? {} : { invocationScopeId: scope.invocationScopeId }
+  };
+}
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  if (isRecord11(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
-  const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
-  return gate === void 0 ? base : { ...base, gate };
+  const skipGate = isRecord12(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
+  let next = base;
+  if (!skipGate) {
+    const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
+    if (gate !== void 0) next = { ...base, gate };
+  }
+  return attachEngineDetourToolUsage(next, sessionDirectory, gateContext);
 }
 function extractNavigatorFact(entries) {
   const terminal = findLatestDurablePackagedRoleTerminal(entries);
@@ -15264,7 +15501,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord11(details)) {
+      if (!isRecord12(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -15314,8 +15551,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join30(artifactsDir, "report.json");
-  const evidencePath = join30(artifactsDir, "evidence.json");
+  const reportPath = join31(artifactsDir, "report.json");
+  const evidencePath = join31(artifactsDir, "evidence.json");
   await writeFile10(
     reportPath,
     `${JSON.stringify(
@@ -15385,7 +15622,8 @@ async function settleLawfulJudgeTerminalResult(admitted, authority, scope) {
       artifacts,
       runId: admitted.runId
     },
-    coordinates.sessionDirectory
+    coordinates.sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function trySettleJudgeTerminalResult(admitted, authority, scope) {
@@ -15397,7 +15635,7 @@ function extractDoctorCandidateCostFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.cost : void 0;
+      return isRecord12(data) ? data.cost : void 0;
     }
   }
   return void 0;
@@ -15408,7 +15646,7 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.auditNoReceipt : void 0;
+      return isRecord12(data) ? data.auditNoReceipt : void 0;
     }
   }
   return void 0;
@@ -15416,8 +15654,8 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join30(artifactsDir, "report.json");
-  const evidencePath = join30(artifactsDir, "evidence.json");
+  const reportPath = join31(artifactsDir, "report.json");
+  const evidencePath = join31(artifactsDir, "evidence.json");
   await writeFile10(
     reportPath,
     `${JSON.stringify(
@@ -15479,7 +15717,8 @@ async function settleLawfulDoctorTerminalResult(admitted, authority, scope) {
         artifacts: artifacts2,
         runId: admitted.runId
       },
-      sessionDirectory
+      sessionDirectory,
+      detourGateContext(admitted, scope)
     );
   }
   const roleOutcome = sealed;
@@ -15502,7 +15741,8 @@ async function settleLawfulDoctorTerminalResult(admitted, authority, scope) {
       artifacts,
       runId: admitted.runId
     },
-    sessionDirectory
+    sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function trySettleDoctorTerminalResult(admitted, authority, scope) {
@@ -15533,12 +15773,17 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       spec.toolName
     );
     if (residual !== void 0) {
-      const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(admitted, {
-        cause: "output",
-        diagnostic: residual.diagnostic,
-        details
-      }, authority);
+      const details = isRecord12(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+      const failed = await settleFailureTerminalResult(
+        admitted,
+        {
+          cause: "output",
+          diagnostic: residual.diagnostic,
+          details
+        },
+        authority,
+        scope ?? {}
+      );
       return withSubmissions(failed, submissions);
     }
   }
@@ -15553,7 +15798,8 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
           artifacts: [],
           runId: admitted.runId
         },
-        sessionDirectory
+        sessionDirectory,
+        detourGateContext(admitted, scope)
       ),
       submissions
     );
@@ -15568,7 +15814,8 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
           artifacts: [],
           runId: admitted.runId
         },
-        sessionDirectory
+        sessionDirectory,
+        detourGateContext(admitted, scope)
       ),
       submissions
     );
@@ -15648,7 +15895,7 @@ function publicationAttemptFromError(path, error) {
 }
 function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   const dirs = [];
-  for (const dir of [baseDir, runDirectory, dirname17(runDirectory)]) {
+  for (const dir of [baseDir, runDirectory, dirname18(runDirectory)]) {
     if (!dirs.includes(dir)) dirs.push(dir);
   }
   return dirs;
@@ -15670,7 +15917,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join30(dir, `${stem}.${randomUUID4()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join31(dir, `${stem}.${randomUUID5()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -15721,20 +15968,20 @@ async function publishFailureArtifacts(admitted, failure2, authority) {
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join30(baseDir, "error.json"),
-    join30(baseDir, "error.settlement.json"),
-    join30(admitted.runDirectory, "error.settlement.json")
+    join31(baseDir, "error.json"),
+    join31(baseDir, "error.settlement.json"),
+    join31(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join30(baseDir, "error.settlement.json"),
-    join30(baseDir, "error.json")
+    join31(baseDir, "error.settlement.json"),
+    join31(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join30(baseDir, "evidence.json"),
-    join30(baseDir, "evidence.settlement.json"),
-    join30(admitted.runDirectory, "evidence.settlement.json")
+    join31(baseDir, "evidence.json"),
+    join31(baseDir, "evidence.settlement.json"),
+    join31(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join30(baseDir, "evidence.settlement.json"),
-    join30(baseDir, "evidence.json")
+    join31(baseDir, "evidence.settlement.json"),
+    join31(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -15816,7 +16063,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
                 artifacts: [],
                 runId: admitted.runId
               },
-              sessionDirectory
+              sessionDirectory,
+              detourGateContext(admitted, options)
             );
           }
         } catch {
@@ -15854,7 +16102,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
         artifacts: [],
         resume: options.resume
       },
-      sessionDirectory
+      sessionDirectory,
+      detourGateContext(admitted, options)
     );
   }
   const roleOutcome = {
@@ -15871,7 +16120,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
       artifacts,
       runId: admitted.runId
     },
-    sessionDirectory
+    sessionDirectory,
+    detourGateContext(admitted, options)
   );
 }
 function presentFailureTerminal(terminal, io) {
@@ -15945,6 +16195,7 @@ var init_settlement = __esm({
     init_compliance_transport();
     init_collector_ledger();
     init_engine_detour();
+    init_engine_detour_usage();
     init_judge_output();
     init_collector_output();
     init_worker_output();
@@ -15978,9 +16229,9 @@ var init_settlement = __esm({
 
 // src/public-cli/auto-resume.ts
 import { constants as fsConstants2 } from "node:fs";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 import { lstat as lstat6, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 async function persistReturnedRunState(admitted, authority, options) {
   if (options?.lawful === true) {
     await markRunTerminal(admitted.runDirectory);
@@ -16095,7 +16346,7 @@ function jsonSafeReplacer() {
   };
 }
 async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
-  const filePath = join31(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
+  const filePath = join32(artifactsDir, `${namePrefix}-${randomUUID6()}.json`);
   const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}
 `;
   const noFollowFlag = typeof fsConstants2.O_NOFOLLOW === "number" ? fsConstants2.O_NOFOLLOW : 0;
@@ -16366,9 +16617,9 @@ var init_auto_resume = __esm({
 });
 
 // src/public-cli/post-admission.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
-import { readFile as readFile21, writeFile as writeFile11 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join32, resolve as resolve13 } from "node:path";
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { writeFile as writeFile11 } from "node:fs/promises";
+import { isAbsolute as isAbsolute8, join as join33, resolve as resolve13 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -16413,7 +16664,7 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
       await writeFile11(
-        join32(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
+        join33(artifactsDir, `post-admission-diagnostic-${randomUUID7()}.json`),
         `${JSON.stringify({ version: 1, ...payload }, null, 2)}
 `,
         { encoding: "utf8", flag: "wx" }
@@ -16427,15 +16678,6 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     }
   }
 }
-async function readInvocationHost(runDirectory) {
-  try {
-    const raw = JSON.parse(await readFile21(join32(runDirectory, "invocation.json"), "utf8"));
-    return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
-  } catch (error) {
-    if (error.code === "ENOENT") return void 0;
-    throw error;
-  }
-}
 async function presentControlledFailure(admitted, failureInput, adapters, authority, io, persistRunState = true) {
   const hasThrown = Object.hasOwn(failureInput, "thrown");
   const resumeObservation = await resolveControlledFailureResumeObservation({
@@ -16475,7 +16717,10 @@ async function presentControlledFailure(admitted, failureInput, adapters, author
       admitted,
       failure2,
       authority,
-      resumable ? { resume: { command: renderResumeCommand(admitted.runId) } } : {}
+      {
+        ...resumable ? { resume: { command: renderResumeCommand(admitted.runId) } } : {},
+        ...failureInput.invocationScopeId === void 0 || failureInput.invocationScopeId.length === 0 ? {} : { invocationScopeId: failureInput.invocationScopeId }
+      }
     )
   );
   presentFailureTerminal(terminal, io);
@@ -16544,12 +16789,12 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -16570,7 +16815,7 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          missingCredential,
+          withEngineDetourInvocationScope(missingCredential, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -16584,7 +16829,7 @@ async function dispatchPostAdmissionTurn(input) {
     const principalCoordinates = admitted.principal === void 0 ? void 0 : env.principalAuthority.decode(admitted.principal);
     let hostTransition;
     try {
-      previousHost = await readInvocationHost(admitted.runDirectory);
+      previousHost = readInvocationSelectedHost(admitted.runDirectory);
       hostTransition = previousHost !== void 0 && liveHost !== void 0 && principalCoordinates !== void 0 ? await projectHostTransitionPriorNative({
         previousHost,
         liveHost,
@@ -16594,12 +16839,12 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -16616,12 +16861,12 @@ async function dispatchPostAdmissionTurn(input) {
       } catch (error) {
         const settled2 = await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -16640,6 +16885,9 @@ async function dispatchPostAdmissionTurn(input) {
     if (hostTransition !== void 0) {
       turnRequest = { ...turnRequest, hostTransition };
     }
+    if (typeof liveHost === "string" && liveHost.trim() !== "") {
+      turnRequest = { ...turnRequest, host: liveHost.trim() };
+    }
     if (isStationChildOfficerDialogue(admitted.role, env)) {
       await deliverCaseDossierAsAttachment({
         ticketNumber: admitted.ticketNumber,
@@ -16676,12 +16924,12 @@ async function dispatchPostAdmissionTurn(input) {
     } catch (error) {
       const settled2 = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: null,
           stderr: "",
           thrown: error
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -16692,7 +16940,7 @@ async function dispatchPostAdmissionTurn(input) {
     let stderrLogWriteFailure;
     try {
       await writeFile11(
-        join32(admitted.runDirectory, "stderr.log"),
+        join33(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -16705,7 +16953,10 @@ async function dispatchPostAdmissionTurn(input) {
         io
       );
     }
-    const courtScope = request.courtAttemptId === void 0 || request.courtAttemptId.length === 0 ? void 0 : { courtAttemptId: request.courtAttemptId };
+    const courtScope = (request.courtAttemptId === void 0 || request.courtAttemptId.length === 0) && (request.invocationScopeId === void 0 || request.invocationScopeId.length === 0) ? void 0 : {
+      ...request.courtAttemptId === void 0 || request.courtAttemptId.length === 0 ? {} : { courtAttemptId: request.courtAttemptId },
+      ...request.invocationScopeId === void 0 || request.invocationScopeId.length === 0 ? {} : { invocationScopeId: request.invocationScopeId }
+    };
     let settled;
     let settledOutcome;
     let hostSignalFailed = false;
@@ -16755,12 +17006,12 @@ async function dispatchPostAdmissionTurn(input) {
     } catch (error) {
       const settledFailure = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: result.code,
           stderr: result.stderr,
           thrown: error
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -16775,13 +17026,13 @@ async function dispatchPostAdmissionTurn(input) {
         } catch (error) {
           const failed = await settleAfterTurnStarted(
             admitted,
-            {
+            withEngineDetourInvocationScope({
               timedOut: false,
               code: null,
               stderr: "",
               thrown: error,
               skipRunStateWrite: true
-            },
+            }, request.invocationScopeId),
             adapters,
             env.principalAuthority,
             io,
@@ -16797,7 +17048,7 @@ async function dispatchPostAdmissionTurn(input) {
       const stderrLogWriteDetails = stderrLogWriteFailure === void 0 ? void 0 : { stderrLogWriteFailure: describeCaughtError(stderrLogWriteFailure) };
       const failed = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: result.timedOut,
           code: result.code,
           stderr: result.stderr,
@@ -16811,7 +17062,7 @@ async function dispatchPostAdmissionTurn(input) {
               details: { ...resolutionInput.knownFailure.details ?? {}, ...stderrLogWriteDetails }
             }
           } : { knownDetails: stderrLogWriteDetails }
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -16822,12 +17073,12 @@ async function dispatchPostAdmissionTurn(input) {
     if (stderrLogWriteFailure !== void 0) {
       const failed = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: result.code,
           stderr: result.stderr,
           thrown: stderrLogWriteFailure
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -16837,7 +17088,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     const noReceipt = await attachRecordedSubmissions(
       admitted,
-      await settleHostEndedNoReceipt(admitted, env.principalAuthority),
+      await settleHostEndedNoReceipt(admitted, env.principalAuthority, courtScope),
       courtScope
     );
     if (persistRunState) {
@@ -16846,13 +17097,13 @@ async function dispatchPostAdmissionTurn(input) {
       } catch (error) {
         const failed = await settleAfterTurnStarted(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error,
             skipRunStateWrite: true
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -16921,7 +17172,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
       kind: "resume",
       prompt
     },
-    ...request.message === void 0 ? {} : { courtAttemptId: randomUUID6() },
+    ...request.message === void 0 ? {} : { courtAttemptId: randomUUID7() },
     ...env.stationChild === void 0 ? {} : { stationChild: env.stationChild }
   };
 }
@@ -16939,7 +17190,7 @@ async function dispatchAfterWriterLease(input) {
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve13(attachmentPath);
-  return pathContainedIn(join32(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join33(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -17018,7 +17269,7 @@ async function runPostAdmissionSeatResume(input) {
     }
     let turnRequest = await input.buildTurnRequest(admittedForBuild, request);
     if (openCourtAttemptId !== void 0 || request.summons !== void 0 || request.message !== void 0) {
-      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID6());
+      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID7());
       turnRequest = { ...turnRequest, courtAttemptId };
       if (openCourtAttemptId === void 0) {
         const court = {
@@ -17034,6 +17285,9 @@ async function runPostAdmissionSeatResume(input) {
     if (input.env.stationChild === true) {
       let firstTurn;
       const stationAdapters = withOnceSuccessfulBeforeDispatch(adapters);
+      const invocationScopeId = mintEngineDetourInvocationScope({
+        ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
+      });
       return await runWithAutoResumeLoop({
         admitted: loaded.admitted,
         principalAuthority: input.env.principalAuthority,
@@ -17060,7 +17314,10 @@ async function runPostAdmissionSeatResume(input) {
                 }
               };
             }
-            const turnRequest = await buildRequestAfterLease();
+            const turnRequest = withEngineDetourInvocationScope(
+              await buildRequestAfterLease(),
+              invocationScopeId
+            );
             firstTurn = turnRequest;
             return turnRequest;
           },
@@ -17131,6 +17388,11 @@ async function runPostAdmissionOneShot(input) {
 async function runPostAdmissionResumable(input) {
   const { admitted, env, io, buildInitialRequest, buildResumeRequest, effectiveEngine } = input;
   const adapters = withOnceSuccessfulBeforeDispatch(input.adapters);
+  const invocationScopeId = mintEngineDetourInvocationScope({
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
+  });
+  const buildScopedInitial = () => withEngineDetourInvocationScope(buildInitialRequest(), invocationScopeId);
+  const buildScopedResume = () => withEngineDetourInvocationScope(buildResumeRequest(), invocationScopeId);
   return runWithAutoResumeLoop({
     admitted,
     principalAuthority: env.principalAuthority,
@@ -17138,8 +17400,8 @@ async function runPostAdmissionResumable(input) {
     io,
     sessionAppender: env.sessionAppender,
     autoResumeLimit: env.autoResumeLimit,
-    buildInitialPayload: buildInitialRequest,
-    buildResumePayload: buildResumeRequest,
+    buildInitialPayload: buildScopedInitial,
+    buildResumePayload: buildScopedResume,
     dispatch: async (request, lease, _isFirst, attemptIo) => {
       const result = await dispatchPostAdmissionTurn({
         admitted,
@@ -17187,6 +17449,9 @@ async function runPostAdmissionManualResume(input) {
     }
     throw error;
   }
+  const invocationScopeId = mintEngineDetourInvocationScope({
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
+  });
   const result = await dispatchAfterWriterLease({
     lease,
     build: async () => {
@@ -17198,6 +17463,7 @@ async function runPostAdmissionManualResume(input) {
         }
         request = await buildRequestAfterLease();
       }
+      request = withEngineDetourInvocationScope(request, invocationScopeId);
       return request;
     },
     dispatch: (turnRequest) => dispatchPostAdmissionTurn({
@@ -17237,6 +17503,7 @@ var init_post_admission = __esm({
     init_session_identity();
     init_host_contracts();
     init_case_dossier_delivery();
+    init_engine_detour_usage();
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
@@ -17271,6 +17538,7 @@ function projectRoleTurnRequest(admitted, roleDetails, options) {
     ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
     ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
     ...options.courtAttemptId === void 0 || options.courtAttemptId.length === 0 ? {} : { courtAttemptId: options.courtAttemptId },
+    ...options.invocationScopeId === void 0 || options.invocationScopeId.length === 0 ? {} : { invocationScopeId: options.invocationScopeId },
     ...options.stationChild === void 0 ? {} : { stationChild: options.stationChild }
   };
 }
@@ -18289,7 +18557,7 @@ __export(public_role_summons_exports, {
   summonPublicRole: () => summonPublicRole
 });
 import { existsSync as existsSync10 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 function createCapturingIo() {
   const chunks = [];
   return {
@@ -18312,7 +18580,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync10(join33(dir, "package.json")) && existsSync10(join33(dir, "souls"))) {
+    if (existsSync10(join34(dir, "package.json")) && existsSync10(join34(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -18406,7 +18674,7 @@ async function createSummonEnv(options) {
 async function summonPublicRole(options) {
   const packageRoot = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join33(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join34(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -18788,12 +19056,12 @@ __export(session_assistant_usage_exports, {
   sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
   usageFromPublicSummon: () => usageFromPublicSummon
 });
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile26 } = await import("node:fs/promises");
+  const { readFile: readFile25 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile26(sessionFile, "utf8");
+    text = await readFile25(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -18858,7 +19126,7 @@ async function readAssistantUsageFromSessionFile(sessionFile) {
 }
 function sessionFileFromPublicSummon(summoned) {
   if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join34(summoned.runDirectory, "session", "session.jsonl");
+    return join35(summoned.runDirectory, "session", "session.jsonl");
   }
   const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
   if (fromArtifacts !== void 0) return fromArtifacts;
@@ -18867,7 +19135,7 @@ function sessionFileFromPublicSummon(summoned) {
   const facts = outcome.decisiveFacts;
   const pointer = facts?.runPointer;
   if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join34(pointer, "session", "session.jsonl");
+    return join35(pointer, "session", "session.jsonl");
   }
   return void 0;
 }
@@ -19047,7 +19315,7 @@ var init_doctor_auditor = __esm({
 
 // src/archivist-record-topology.ts
 import { createHash as createHash7 } from "node:crypto";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 function resolveNavigatorWorkSubjectPlacement(input) {
   let ledgerHome;
   if (input.parentSessionFile !== void 0 && input.parentSessionFile.length > 0) {
@@ -19060,7 +19328,7 @@ function resolveNavigatorWorkSubjectPlacement(input) {
   const digest = createHash7("sha256").update(input.subject).digest("hex").slice(0, 32);
   return {
     ledgerHome,
-    sessionDir: join35(
+    sessionDir: join36(
       activationBookDirectory(ledgerHome, resolveBookKeyFromGit(input.cwd)),
       NAVIGATOR_RECORD_KIND,
       digest
@@ -19094,19 +19362,19 @@ import {
   mkdirSync as mkdirSync2,
   openSync,
   readdirSync as readdirSync2,
-  readFileSync as readFileSync3,
+  readFileSync as readFileSync4,
   readSync,
   realpathSync as realpathSync2,
   statSync as statSync3,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname18, resolve as resolve14, join as join36 } from "node:path";
+import { dirname as dirname19, resolve as resolve14, join as join37 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
-  const ledger = join36(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join37(sessionDir, CURRENT_SESSION_LEDGER);
   try {
-    const value = JSON.parse(readFileSync3(ledger, "utf8"));
+    const value = JSON.parse(readFileSync4(ledger, "utf8"));
     if (typeof value !== "object" || value === null || typeof value.sessionFile !== "string" || value.sessionFile.length === 0) {
       throw new Error("sessionFile is missing");
     }
@@ -19119,7 +19387,7 @@ function readCurrentSession(sessionDir) {
   }
 }
 function writeCurrentSession(sessionDir, sessionFile) {
-  const ledger = join36(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join37(sessionDir, CURRENT_SESSION_LEDGER);
   try {
     writeFileSync2(ledger, `${JSON.stringify({ sessionFile })}
 `, { flag: "wx" });
@@ -19135,7 +19403,7 @@ function isCurrentSessionClaimRace(error) {
   return errnoCode(error.cause) === "EEXIST";
 }
 function currentSessionLedgerPath(sessionDir) {
-  return join36(sessionDir, CURRENT_SESSION_LEDGER);
+  return join37(sessionDir, CURRENT_SESSION_LEDGER);
 }
 function readBoundedSessionHeader(filePath) {
   const fd = openSync(filePath, "r");
@@ -19222,7 +19490,7 @@ function mostRecentNavigatorSessionFile(sessionDir, cwd) {
   const matched = [];
   for (const name of names) {
     if (!name.endsWith(".jsonl")) continue;
-    const filePath = join36(absoluteSessionDir, name);
+    const filePath = join37(absoluteSessionDir, name);
     let st;
     try {
       st = statSync3(filePath);
@@ -19334,7 +19602,7 @@ function createRecordSessionOpen(options) {
     if (!physicallyContainedIn(ledgerHome, parentResolved)) {
       throw new Error("Durable record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join36(dirname18(parentResolved), options.kind);
+    sessionDir = join37(dirname19(parentResolved), options.kind);
     parentSession = parentFile;
     mayResumeSameNest = options.kind === WORKER_SUBMISSION_GATE_KIND;
   }
@@ -19383,7 +19651,7 @@ function createRecordSession(options) {
   return createRecordSessionOpen(options).session;
 }
 function bookDirectOfficerRunPointer(options) {
-  const nest = join36(dirname18(options.parentSessionFile), "auditor-roles");
+  const nest = join37(dirname19(options.parentSessionFile), "auditor-roles");
   mkdirSync2(nest, { recursive: true });
   const pointer = {
     version: 1,
@@ -19393,7 +19661,7 @@ function bookDirectOfficerRunPointer(options) {
     ...options.runDirectory !== void 0 && options.runDirectory.trim() !== "" ? { runDirectory: options.runDirectory } : {}
   };
   writeFileSync2(
-    join36(nest, `${options.officer}.pointer.json`),
+    join37(nest, `${options.officer}.pointer.json`),
     `${JSON.stringify(pointer)}
 `,
     "utf8"
@@ -19416,10 +19684,10 @@ var init_archivist_record_entry = __esm({
 });
 
 // src/headless-host/production-host.ts
-import { randomUUID as randomUUID9 } from "node:crypto";
+import { randomUUID as randomUUID10 } from "node:crypto";
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile24 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/canonical-skill-binding.ts
@@ -20468,7 +20736,7 @@ ${helpContext}
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile21 } from "node:fs/promises";
 import { resolve as resolve16 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
@@ -20481,7 +20749,7 @@ function navigatorInputReference(getFlag, role) {
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile22(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile21(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -20538,7 +20806,7 @@ async function loadNavigatorWorkContext(options) {
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile22(path, "utf8");
+      const content = await readFile21(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -20563,7 +20831,7 @@ async function loadNavigatorWorkContext(options) {
 init_notary_source_run();
 
 // src/package-resources/method-skill-binding.ts
-import { dirname as dirname20 } from "node:path";
+import { dirname as dirname21 } from "node:path";
 init_method_skill();
 async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const material = await loadPackagedMethodSkillMaterial(packageRoot, name);
@@ -20571,7 +20839,7 @@ async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const snapshot = Object.freeze({
     raw: material.raw,
     path: material.skillPath,
-    baseDir: dirname20(material.skillPath),
+    baseDir: dirname21(material.skillPath),
     body: material.body,
     snapshotIdentity: Object.freeze({ text: material.raw })
   });
@@ -20596,8 +20864,8 @@ init_host_contracts();
 init_sitian_facade();
 init_submission_ledger();
 init_collector_ledger();
-import { readFileSync as readFileSync5, writeSync as writeSync4 } from "node:fs";
-import { join as join39 } from "node:path";
+import { readFileSync as readFileSync6, writeSync as writeSync4 } from "node:fs";
+import { join as join40 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
 // src/activation-trace.ts
@@ -20647,7 +20915,7 @@ import {
   openSync as openSync2,
   writeSync
 } from "node:fs";
-import { dirname as dirname21, isAbsolute as isAbsolute10, resolve as resolve18 } from "node:path";
+import { dirname as dirname22, isAbsolute as isAbsolute10, resolve as resolve18 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -20796,7 +21064,7 @@ function appendActivationLedgerLine(ledgerPath, line2, options) {
   }
   const resolvedLedger = resolve18(ledgerPath);
   const resolvedHome = resolve18(options.ledgerHome);
-  const parent = dirname21(resolvedLedger);
+  const parent = dirname22(resolvedLedger);
   ensureRealDirectoryTree(resolvedHome, parent);
   assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
   if (typeof constants2.O_NOFOLLOW !== "number") {
@@ -21010,7 +21278,15 @@ init_engine_material();
 
 // src/engine-detour-tool.ts
 init_engine_detour();
+init_engine_detour_usage();
+import { basename as basename9 } from "node:path";
 import { Type as Type16 } from "typebox";
+function basenameRunId(runDirectory) {
+  const leaf = basename9(runDirectory);
+  const at = leaf.indexOf("@");
+  if (at <= 0) return void 0;
+  return leaf.slice(0, at);
+}
 var engineDetourArgsSchema = Type16.Object(
   {
     argv: Type16.Array(Type16.String({ minLength: 1 }), {
@@ -21027,6 +21303,9 @@ function isCallerCancellation(error, signal) {
   }
   return false;
 }
+function asError(error, fallback) {
+  return error instanceof Error ? error : new Error(String(error).trim() || fallback);
+}
 function createEngineDetourToolDefinition(input) {
   const engineName = input.engineName;
   const engineModel = input.engineModel;
@@ -21047,6 +21326,45 @@ function createEngineDetourToolDefinition(input) {
           ctx
         );
       }
+      const sessionParent = ctx.sessionManager?.getSessionFile?.();
+      const startedAt = Date.now();
+      const runDirectory = typeof ctx.runDirectory === "string" && ctx.runDirectory.length > 0 ? ctx.runDirectory : void 0;
+      const runId = runDirectory === void 0 ? void 0 : basenameRunId(runDirectory);
+      const invocationScopeId = typeof ctx.invocationScopeId === "string" && ctx.invocationScopeId.trim() !== "" ? ctx.invocationScopeId.trim() : void 0;
+      const host = typeof ctx.host === "string" && ctx.host.trim() !== "" ? ctx.host.trim() : void 0;
+      const recordCall = (observed2) => {
+        if (typeof sessionParent !== "string" || sessionParent.length === 0) return;
+        reportEngineDetourCall({
+          toolCallId,
+          durationMs: Math.max(0, Date.now() - startedAt),
+          cwd: ctx.cwd,
+          sessionParent,
+          ...runId === void 0 ? {} : { runId },
+          ...invocationScopeId === void 0 ? {} : { invocationScopeId },
+          ...host === void 0 ? {} : { host },
+          ...observed2.code === void 0 ? {} : { code: observed2.code },
+          ...observed2.stdoutByteLength === void 0 ? {} : { stdoutByteLength: observed2.stdoutByteLength }
+        });
+      };
+      const failAfterLedger = (engineCause, observed2, aggregateMessage) => {
+        try {
+          recordCall(observed2);
+        } catch (recordError) {
+          input.fail(
+            new AggregateError(
+              [
+                engineCause,
+                asError(recordError, "engine detour usage ledger write failed")
+              ],
+              aggregateMessage,
+              { cause: engineCause }
+            ),
+            toolCallId,
+            ctx
+          );
+        }
+        input.fail(engineCause, toolCallId, ctx);
+      };
       let result;
       try {
         result = await runEngineDetourOnce({
@@ -21056,16 +21374,22 @@ function createEngineDetourToolDefinition(input) {
         });
       } catch (error) {
         if (isCallerCancellation(error, signal)) throw error;
-        const cause = error instanceof Error ? error : new Error(String(error).trim() || "\u52B3\u52A1\u5F15\u64CE spawn \u5931\u8D25");
-        input.fail(cause, toolCallId, ctx);
+        return failAfterLedger(
+          asError(error, "\u52B3\u52A1\u5F15\u64CE spawn \u5931\u8D25"),
+          {},
+          "engine detour spawn and usage ledger both failed"
+        );
       }
+      const stdoutByteLength = engineDetourStdoutByteLength(result.stdout);
+      const observed = { code: result.code, stdoutByteLength };
       if (isEngineDetourFailure(result)) {
-        input.fail(
+        return failAfterLedger(
           new Error(engineDetourFailureDiagnostic(result)),
-          toolCallId,
-          ctx
+          observed,
+          "engine detour child-close and usage ledger both failed"
         );
       }
+      recordCall(observed);
       return {
         content: [{ type: "text", text: result.stdout }],
         details: {
@@ -21106,8 +21430,8 @@ init_collector_github();
 // src/collector-handbook.ts
 init_atomic_write();
 init_activation_ledger_topology();
-import { readFile as readFile23 } from "node:fs/promises";
-import { join as join38, sep as sep5 } from "node:path";
+import { readFile as readFile22 } from "node:fs/promises";
+import { join as join39, sep as sep5 } from "node:path";
 
 // src/collector-tool-schemas.ts
 init_open_tool_schema();
@@ -21222,7 +21546,7 @@ function resolveCollectorHandbookRoot(sessionPath) {
     throw new Error(`\u901A\u8FDB\u53F8\u624B\u518C\u62D2\u7EDD\u4E0D\u5B89\u5168 bookKey ${JSON.stringify(bookKey)}`);
   }
   const ledgerHome = resolveActivationLedgerHomeForPath(sessionPath);
-  const root = join38(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
+  const root = join39(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
   return { ledgerHome, bookKey, root };
 }
 function collectorHandbookRepoFileName(repositoryCanonical) {
@@ -21234,9 +21558,9 @@ function collectorHandbookRepoFileName(repositoryCanonical) {
   return `${repositoryCanonical.replaceAll("/", "__")}.md`;
 }
 function createCollectorHandbookStore(input) {
-  const generalPath = join38(input.handbookRoot, "general.md");
-  const repoDir = join38(input.handbookRoot, "repos");
-  const repoPath = join38(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
+  const generalPath = join39(input.handbookRoot, "general.md");
+  const repoDir = join39(input.handbookRoot, "repos");
+  const repoPath = join39(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
   const assertHandbookBudget = (body, label) => {
     const byteLength = Buffer.byteLength(body, "utf8");
     if (byteLength > COLLECTOR_HANDBOOK_MAX_BYTES) {
@@ -21250,7 +21574,7 @@ function createCollectorHandbookStore(input) {
     ensureRealDirectoryTree(input.ledgerHome, parentDir2);
     assertLedgerFileInsideHome(path, input.ledgerHome);
     try {
-      const body = await readFile23(path, "utf8");
+      const body = await readFile22(path, "utf8");
       assertHandbookBudget(body, "\u6B63\u6587");
       return body;
     } catch (error) {
@@ -22509,7 +22833,7 @@ init_sitian_facade();
 init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync4, rmdirSync, rmSync } from "node:fs";
+import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve19 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
@@ -22551,7 +22875,7 @@ function tryGetAll(file, key) {
 }
 function ownedHook(path) {
   if (!existsSync12(path)) return false;
-  return readFileSync4(path, "utf8").includes(HOOK_MARKER);
+  return readFileSync5(path, "utf8").includes(HOOK_MARKER);
 }
 function escapeGitConfigValueRegex(value) {
   return value.replace(/[\\^$.*+?()[\]{}|]/g, "\\$&");
@@ -22606,7 +22930,7 @@ function uninstallPackageWorkerHooks(cwd) {
     rmOwnedDir(resolve19(gitDir, HOOKS_DIR));
   }
 }
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unfinishedReasonPresent(details) {
@@ -22622,7 +22946,7 @@ function readGateState(session) {
     if (entry.type !== "custom") continue;
     if (entry.customType === WORKER_COMMIT_BASELINE_ENTRY_TYPE) {
       const data = entry.data;
-      if (isRecord12(data) && (data.head === null || typeof data.head === "string")) {
+      if (isRecord13(data) && (data.head === null || typeof data.head === "string")) {
         baseline = data.head;
       }
     } else if (entry.customType === WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE) {
@@ -23593,8 +23917,8 @@ function readDiaristRunCoordinates(ctx) {
   if (runDirectory === void 0) {
     throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
   }
-  const admittedPath = join39(runDirectory, "admitted-request.json");
-  const admitted = JSON.parse(readFileSync5(admittedPath, "utf8"));
+  const admittedPath = join40(runDirectory, "admitted-request.json");
+  const admitted = JSON.parse(readFileSync6(admittedPath, "utf8"));
   if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
     throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
   }
@@ -24573,13 +24897,13 @@ function createRoleRuntimeDependencies(packageRoot) {
     packageRoot,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile24(path, "utf8"),
+    loadFixPacket: (path) => readFile23(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile24(path, "utf8"),
+    loadCoderTask: (path) => readFile23(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     createReviewerPinnedGitReader: () => createReviewerPinnedGitReader(),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile24(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile23(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -24593,7 +24917,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadDiaristSoul: () => loadMainRoleSessionMaterials("diarist"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile24(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile23(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -24619,7 +24943,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile24(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile23(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },
@@ -24630,10 +24954,10 @@ function createRoleRuntimeDependencies(packageRoot) {
 
 // src/role-envelope.ts
 init_engine_detour();
-import { randomUUID as randomUUID7 } from "node:crypto";
-import { mkdir as mkdir5, readFile as readFile25, writeFile as writeFile12 } from "node:fs/promises";
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { mkdir as mkdir5, readFile as readFile24, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename9, dirname as dirname22, join as join40 } from "node:path";
+import { basename as basename10, dirname as dirname23, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -24756,16 +25080,16 @@ async function prepareRoleEnvelope(options) {
   let rejection;
   let infrastructureRoundFailure;
   const hostAbort = new AbortController();
-  const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID7();
+  const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID8();
   await mkdir5(request.runDirectory, { recursive: true });
   for (const method of request.methods) {
     if (method.kind !== "skill") continue;
-    const name = basename9(dirname22(method.path));
-    const raw = await readFile25(method.path, "utf8");
+    const name = basename10(dirname23(method.path));
+    const raw = await readFile24(method.path, "utf8");
     methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
   }
-  let sessionFile = options.sessionFile ?? join40(request.runDirectory, "session", "session.jsonl");
-  await mkdir5(dirname22(sessionFile), { recursive: true });
+  let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
+  await mkdir5(dirname23(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -24790,11 +25114,13 @@ async function prepareRoleEnvelope(options) {
     model: request.model === void 0 ? void 0 : { provider: request.model.provider },
     runDirectory: request.runDirectory,
     ...request.courtAttemptId === void 0 ? {} : { courtAttemptId: request.courtAttemptId },
+    ...request.invocationScopeId === void 0 ? {} : { invocationScopeId: request.invocationScopeId },
+    ...request.host === void 0 || request.host.trim() === "" ? {} : { host: request.host.trim() },
     sessionManager: {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname22(sessionFile),
+      getSessionDir: () => dirname23(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -24895,7 +25221,7 @@ async function prepareRoleEnvelope(options) {
     }
   };
   createRoleRuntimeExtension(options.dependencies)(envelope);
-  const token = randomUUID7();
+  const token = randomUUID8();
   const server = createServer((socket) => serveSocket(socket));
   function rememberProjectedRejection(details, toolCallId, content) {
     if (typeof details !== "object" || details === null) return;
@@ -24976,7 +25302,7 @@ async function prepareRoleEnvelope(options) {
   async function invokeAkTool(name, args) {
     const tool = tools.get(name);
     if (tool === void 0) throw new Error(`Unknown AK tool: ${name}`);
-    const toolCallId = randomUUID7();
+    const toolCallId = randomUUID8();
     calls.push({ toolCallId, toolName: name });
     sessionEntries.push({
       type: "message",
@@ -25169,7 +25495,7 @@ async function prepareRoleEnvelope(options) {
         message: { role: "user", content: prompt }
       });
     }
-    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile25(path, "utf8")))).join("\n\n");
+    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile24(path, "utf8")))).join("\n\n");
     const promptResults = await emit("before_agent_start", {
       prompt,
       systemPrompt: methodPrompt,
@@ -25230,7 +25556,7 @@ async function prepareRoleEnvelope(options) {
 init_session_identity();
 
 // src/headless-host/description.ts
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function isClaudePrintDescription(description) {
   return description.protocol === "claude-print";
 }
@@ -25238,7 +25564,7 @@ function isCodexExecDescription(description) {
   return description.protocol === "codex-exec";
 }
 function resolveHeadlessBinary(description, operatorHome) {
-  return join41(operatorHome, ...description.binaryFromHome);
+  return join42(operatorHome, ...description.binaryFromHome);
 }
 function headlessTurnArgs(options) {
   const { description } = options;
@@ -25491,10 +25817,10 @@ function headlessMcpConfigDocument(mcpServers) {
 
 // src/headless-host/role-turn-host.ts
 import { spawn as spawn4, spawnSync } from "node:child_process";
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { randomUUID as randomUUID9 } from "node:crypto";
 import { existsSync as existsSync13 } from "node:fs";
 import { writeFile as writeFile13 } from "node:fs/promises";
-import { dirname as dirname23, isAbsolute as isAbsolute11, join as join42, resolve as resolve20 } from "node:path";
+import { dirname as dirname24, isAbsolute as isAbsolute11, join as join43, resolve as resolve20 } from "node:path";
 
 // src/external-host-turn-loop.ts
 init_host_contracts();
@@ -25713,8 +26039,8 @@ function formatCodexFailurePayload(payload) {
 function cwdIsGitWorkTree(cwd) {
   let dir = cwd;
   for (; ; ) {
-    if (existsSync13(join42(dir, ".git"))) return true;
-    const parent = dirname23(dir);
+    if (existsSync13(join43(dir, ".git"))) return true;
+    const parent = dirname24(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -25916,21 +26242,21 @@ function createHeadlessRoleTurnHost(config) {
       let sessionId = await config.sessionIdentity.load(request.principal);
       let sessionKind = request.continuation.kind === "resume" && sessionId !== void 0 && sessionId !== "" ? "resume" : "new";
       if (sessionKind === "new" && !codex) {
-        sessionId = randomUUID8();
+        sessionId = randomUUID9();
         await config.sessionIdentity.bind(request.principal, sessionId);
       }
       const env = { ...process.env, ...config.env ?? {} };
-      const systemPromptPath = join42(request.runDirectory, "headless-system-prompt.txt");
+      const systemPromptPath = join43(request.runDirectory, "headless-system-prompt.txt");
       await writeFile13(systemPromptPath, systemPrompt, "utf8");
       let mcpConfigPath;
       let outputSchemaPath;
       if (codex) {
-        outputSchemaPath = join42(request.runDirectory, "headless-output-schema.json");
+        outputSchemaPath = join43(request.runDirectory, "headless-output-schema.json");
         const closed = closeJsonSchemaForCodex(prepared.jsonSchema);
         await writeFile13(outputSchemaPath, `${JSON.stringify(closed, null, 2)}
 `, "utf8");
       } else {
-        mcpConfigPath = join42(request.runDirectory, "headless-mcp-config.json");
+        mcpConfigPath = join43(request.runDirectory, "headless-mcp-config.json");
         await writeFile13(
           mcpConfigPath,
           `${JSON.stringify(headlessMcpConfigDocument(prepared.mcpServers), null, 2)}
@@ -26157,7 +26483,7 @@ function createProductionHeadlessRoleTurnHost(options) {
       sessionFile: sessionIdentity.resolveSessionFile(request.principal),
       // Same MCP relay as ACP so intermediate AK tools stay reachable;
       // headless adapter projects the row into --mcp-config.
-      socketPath: `/tmp/ak-headless-mcp-${randomUUID9()}.sock`,
+      socketPath: `/tmp/ak-headless-mcp-${randomUUID10()}.sock`,
       // Schema channel owns the terminating receipt; hide it from MCP list.
       listTerminatingToolOnMcp: false
     })