@akagilnc/pi-workflow-roles 0.1.4243 → 0.1.4259

package/dist/acp-host/production-host.js

@@ -3181,6 +3181,10 @@ ${paths.join("\n")}`
       };
       if (request.courtAttemptId === void 0) delete env.AK_ROLE_COURT_ATTEMPT;
       else env.AK_ROLE_COURT_ATTEMPT = request.courtAttemptId;
+      if (request.invocationScopeId === void 0) delete env.AK_ROLE_INVOCATION_SCOPE;
+      else env.AK_ROLE_INVOCATION_SCOPE = request.invocationScopeId;
+      if (request.host === void 0 || request.host.trim() === "") delete env.AK_ROLE_HOST;
+      else env.AK_ROLE_HOST = request.host.trim();
       applyEngineChildEnv(env, request.engine);
       if (typeof process.env.AK_ROLE_AUDITOR_SOURCE_RUN === "string" && process.env.AK_ROLE_AUDITOR_SOURCE_RUN.trim() !== "") {
         env.AK_ROLE_AUDITOR_SOURCE_RUN = process.env.AK_ROLE_AUDITOR_SOURCE_RUN;
@@ -3384,10 +3388,10 @@ __export(session_assistant_usage_exports, {
 });
 import { join as join13 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile26 } = await import("node:fs/promises");
+  const { readFile: readFile25 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile26(sessionFile, "utf8");
+    text = await readFile25(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -11466,9 +11470,209 @@ var init_case_dossier_delivery = __esm({
   }
 });
 
+// src/engine-detour-usage.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { dirname as dirname14, join as join26 } from "node:path";
+function engineDetourStdoutByteLength(stdout) {
+  return Buffer.byteLength(stdout, "utf8");
+}
+function engineDetourCallIdentity(input) {
+  const scope = input.invocationScopeId ?? "";
+  return `engine-detour-call:${scope}:${input.toolCallId}`;
+}
+function reportEngineDetourCall(input) {
+  const payload = {
+    tool: ENGINE_DETOUR_TOOL_NAME,
+    toolCallId: input.toolCallId,
+    durationMs: input.durationMs
+  };
+  if (input.code !== void 0) payload.code = input.code;
+  if (input.stdoutByteLength !== void 0) {
+    payload.stdoutByteLength = input.stdoutByteLength;
+  }
+  if (input.invocationScopeId !== void 0) {
+    payload.invocationScopeId = input.invocationScopeId;
+  }
+  if (input.runId !== void 0) payload.runId = input.runId;
+  const subject = input.runId === void 0 ? void 0 : {
+    runId: input.runId,
+    ...input.invocationScopeId === void 0 ? {} : { invocationScopeId: input.invocationScopeId }
+  };
+  const pointer = sitianReport({
+    level: "event",
+    kind: ENGINE_DETOUR_CALL_KIND,
+    identity: engineDetourCallIdentity({
+      toolCallId: input.toolCallId,
+      ...input.invocationScopeId === void 0 ? {} : { invocationScopeId: input.invocationScopeId }
+    }),
+    cwd: input.cwd,
+    sessionParent: input.sessionParent,
+    source: "engine-detour-tool",
+    payload,
+    raw: {
+      sessionFile: input.sessionParent,
+      entryId: input.toolCallId
+    },
+    ...input.home === void 0 ? {} : { home: input.home },
+    ...input.host === void 0 ? {} : { host: input.host },
+    ...subject === void 0 ? {} : { subject }
+  });
+  return {
+    toolCallId: input.toolCallId,
+    durationMs: input.durationMs,
+    ...input.code === void 0 ? {} : { code: input.code },
+    ...input.stdoutByteLength === void 0 ? {} : { stdoutByteLength: input.stdoutByteLength },
+    recordPointer: pointer
+  };
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function callFactFromSitianPayload(payload, pointer) {
+  if (!isRecord7(payload)) return void 0;
+  if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
+  if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
+    return void 0;
+  }
+  if (typeof payload.durationMs !== "number" || !Number.isFinite(payload.durationMs)) {
+    return void 0;
+  }
+  return {
+    toolCallId: payload.toolCallId,
+    durationMs: payload.durationMs,
+    ...typeof payload.code === "number" ? { code: payload.code } : {},
+    ...typeof payload.stdoutByteLength === "number" ? { stdoutByteLength: payload.stdoutByteLength } : {},
+    recordPointer: pointer
+  };
+}
+function invocationScopeIdOfRecord(record4) {
+  if (isRecord7(record4.subject)) {
+    const fromSubject = record4.subject.invocationScopeId;
+    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
+  }
+  if (isRecord7(record4.payload)) {
+    const fromPayload = record4.payload.invocationScopeId;
+    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
+  }
+  return void 0;
+}
+async function readEngineDetourToolUsage(input) {
+  if (!input.engineMounted) return void 0;
+  const { recordFile } = resolveSitianRecordPath({
+    level: "event",
+    kind: ENGINE_DETOUR_CALL_KIND,
+    sessionParent: input.sessionParent,
+    ...input.home === void 0 ? {} : { home: input.home },
+    ...input.cwd === void 0 ? {} : { cwd: input.cwd }
+  });
+  const { records } = await readSitianRecords(recordFile);
+  const calls = [];
+  for (const record4 of records) {
+    if (record4.kind !== ENGINE_DETOUR_CALL_KIND) continue;
+    const boundScope = invocationScopeIdOfRecord(record4);
+    if (input.invocationScopeId !== void 0 && input.invocationScopeId.length > 0) {
+      if (boundScope !== input.invocationScopeId) continue;
+    } else if (boundScope !== void 0) {
+      continue;
+    }
+    const pointer = {
+      identity: record4.identity,
+      recordFile,
+      kind: record4.kind,
+      level: record4.level
+    };
+    const fact = callFactFromSitianPayload(record4.payload, pointer);
+    if (fact === void 0) continue;
+    calls.push(fact);
+  }
+  return { callCount: calls.length, calls };
+}
+function projectEngineDetourToolUsageForPublicTerminal(usage, options) {
+  if (options.discloseRecordFile) return usage;
+  return {
+    callCount: usage.callCount,
+    calls: usage.calls.map((call) => ({
+      toolCallId: call.toolCallId,
+      durationMs: call.durationMs,
+      ...call.code === void 0 ? {} : { code: call.code },
+      ...call.stdoutByteLength === void 0 ? {} : { stdoutByteLength: call.stdoutByteLength },
+      recordPointer: {
+        identity: call.recordPointer.identity,
+        kind: call.recordPointer.kind,
+        level: call.recordPointer.level,
+        recordFile: ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE
+      }
+    }))
+  };
+}
+function readInvocationRecord(runDirectory) {
+  try {
+    const raw = JSON.parse(
+      readFileSync4(join26(runDirectory, "invocation.json"), "utf8")
+    );
+    return isRecord7(raw) ? raw : void 0;
+  } catch (error) {
+    if (error?.code === "ENOENT") return void 0;
+    throw error;
+  }
+}
+async function readInvocationEngineMounted(runDirectory) {
+  const raw = readInvocationRecord(runDirectory);
+  if (raw === void 0) return false;
+  return typeof raw.engine === "string" && raw.engine.trim() !== "";
+}
+function readInvocationSelectedHost(runDirectory) {
+  const raw = readInvocationRecord(runDirectory);
+  if (raw === void 0) return void 0;
+  return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host.trim() : void 0;
+}
+function withEngineDetourToolUsageFact(outcome, usage) {
+  if (usage === void 0) return outcome;
+  const prior = isRecord7(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
+  return {
+    ...outcome,
+    decisiveFacts: {
+      ...prior,
+      [ENGINE_DETOUR_TOOL_USAGE_FACT_KEY]: usage
+    }
+  };
+}
+function runDirectoryFromSessionDirectory(sessionDirectory) {
+  return dirname14(sessionDirectory);
+}
+function sessionFileFromSessionDirectory(sessionDirectory) {
+  return join26(sessionDirectory, "session.jsonl");
+}
+function mintEngineDetourInvocationScope(input) {
+  const engine = input.effectiveEngine?.trim();
+  if (engine === void 0 || engine.length === 0) return void 0;
+  return randomUUID4();
+}
+function withEngineDetourInvocationScope(request, invocationScopeId) {
+  if (invocationScopeId === void 0 || invocationScopeId.length === 0) {
+    return request;
+  }
+  if (typeof request.invocationScopeId === "string" && request.invocationScopeId.length > 0) {
+    return request;
+  }
+  return { ...request, invocationScopeId };
+}
+var ENGINE_DETOUR_CALL_KIND, ENGINE_DETOUR_TOOL_USAGE_FACT_KEY, ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE;
+var init_engine_detour_usage = __esm({
+  "src/engine-detour-usage.ts"() {
+    "use strict";
+    init_engine_detour();
+    init_sitian_facade();
+    ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
+    ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
+    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = `session/${ENGINE_DETOUR_CALL_KIND}/records.jsonl`;
+  }
+});
+
 // src/host-transition-prior-native.ts
 import { access as access3, readdir as readdir5 } from "node:fs/promises";
-import { dirname as dirname14, join as join26 } from "node:path";
+import { dirname as dirname15, join as join27 } from "node:path";
 function isEnoent3(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -11482,7 +11686,7 @@ async function listPiNativeRecordPaths(sessionFile) {
   }
 }
 async function listSitianRecordPaths(sessionParent) {
-  const sessionRoot = dirname14(sessionParent);
+  const sessionRoot = dirname15(sessionParent);
   let entries;
   try {
     entries = await readdir5(sessionRoot, { withFileTypes: true });
@@ -11493,7 +11697,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join26(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join27(sessionRoot, entry.name, "records.jsonl");
     try {
       await access3(recordFile);
       recordPaths.push(recordFile);
@@ -11885,12 +12089,12 @@ var init_reviewer_dispatch = __esm({
 
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { readFile as readFile16, unlink as unlink3 } from "node:fs/promises";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join27(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join28(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 async function clearReviewerDispatchRejection(runDirectory) {
   try {
@@ -11942,8 +12146,8 @@ var init_reviewer_dispatch_rejection = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir6 } from "node:fs/promises";
-import { join as join28 } from "node:path";
-function isRecord7(value) {
+import { join as join29 } from "node:path";
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isParentAttemptBindingRow(row) {
@@ -11973,7 +12177,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord8(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -12008,7 +12212,7 @@ function nearestAttemptBindingBefore(rows, beforeIndex) {
   for (let i = beforeIndex - 1; i >= 0; i -= 1) {
     const row = rows[i];
     if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord7(row.data) || !isRecord7(row.data.parent)) continue;
+    if (!isRecord8(row.data) || !isRecord8(row.data.parent)) continue;
     const id = row.data.parent.attemptEntryId;
     const sessionFile = row.data.parent.sessionFile;
     return {
@@ -12023,10 +12227,10 @@ function extractAllAcceptedGateToolCalls(rows) {
   const out = [];
   for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
     const row = rows[rowIndex];
-    const message = isRecord7(row.message) ? row.message : void 0;
+    const message = isRecord8(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord7(part) || part.type !== "toolCall") continue;
+      if (!isRecord8(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
@@ -12034,7 +12238,7 @@ function extractAllAcceptedGateToolCalls(rows) {
       const binding = nearestAttemptBindingBefore(rows, rowIndex);
       out.push({
         toolName: part.name,
-        args: isRecord7(part.arguments) ? part.arguments : void 0,
+        args: isRecord8(part.arguments) ? part.arguments : void 0,
         accepted: true,
         rowIndex,
         ...binding
@@ -12157,17 +12361,17 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile26 } = await import("node:fs/promises");
+  const { readFile: readFile25 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile26(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile25(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
       { cause: error }
     );
   }
-  if (!isRecord7(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
+  if (!isRecord8(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
     throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
   }
   const sessionFile = raw.sessionFile;
@@ -12192,7 +12396,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join28(directory, name);
+      const path = join29(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -12331,7 +12535,7 @@ var init_audit_escalation = __esm({
 });
 
 // src/run-terminal-artifacts.ts
-import { basename as basename8, dirname as dirname15, join as join29 } from "node:path";
+import { basename as basename8, dirname as dirname16, join as join30 } from "node:path";
 function runIdFromRunDirectory(runDirectory) {
   const name = basename8(runDirectory);
   const at = name.lastIndexOf("@");
@@ -12346,7 +12550,7 @@ var init_run_terminal_artifacts = __esm({
 });
 
 // src/submission-ledger.ts
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function runIdentity(context) {
   const directory = runDirectoryFromHostContext(context);
   if (directory !== void 0) {
@@ -12368,7 +12572,7 @@ async function submissionRecordFile(cwd, runId, scope) {
   if (sessionParent === void 0) {
     const discoveredRun = await findRunDirectoryById(scope.home, runId);
     if (discoveredRun === void 0) return void 0;
-    sessionParent = join30(discoveredRun, "session", "session.jsonl");
+    sessionParent = join31(discoveredRun, "session", "session.jsonl");
   }
   return resolveSitianRecordPathInLedger({
     level: "event",
@@ -12573,13 +12777,13 @@ function createSubmissionLedgerHost(host, outputTools, failInfrastructure2 = (er
   const sessionParentFromContext = (context) => {
     const runDirectory = runDirectoryFromHostContext(context);
     if (runDirectory !== void 0) {
-      return join30(runDirectory, "session", "session.jsonl");
+      return join31(runDirectory, "session", "session.jsonl");
     }
     const sessionFile = context.sessionManager.getSessionFile?.();
     if (typeof sessionFile === "string" && sessionFile.length > 0) return sessionFile;
     const sessionDir = context.sessionManager.getSessionDir?.();
     if (typeof sessionDir === "string" && sessionDir.length > 0) {
-      return join30(sessionDir, "session.jsonl");
+      return join31(sessionDir, "session.jsonl");
     }
     return void 0;
   };
@@ -12742,15 +12946,15 @@ var init_submission_ledger = __esm({
 // src/session-opening-materials.ts
 import { existsSync as existsSync9 } from "node:fs";
 import { readFile as readFile17 } from "node:fs/promises";
-import { dirname as dirname16, join as join31 } from "node:path";
+import { dirname as dirname17, join as join32 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname16(fileURLToPath(moduleUrl));
+  let dir = dirname17(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync9(join31(dir, "package.json")) && existsSync9(join31(dir, "souls"))) {
+    if (existsSync9(join32(dir, "package.json")) && existsSync9(join32(dir, "souls"))) {
       return dir;
     }
-    const parent = dirname16(dir);
+    const parent = dirname17(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -12883,13 +13087,13 @@ function resolveAuditDossier(source) {
   }
   return { status: "ok", runDirectory };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readDoctorAuditSubjects(context) {
   const entries = context.sessionManager.getEntries?.() ?? [];
   for (const entry of entries) {
-    if (isRecord8(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+    if (isRecord9(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       return { status: "ok" };
     }
   }
@@ -14177,7 +14381,7 @@ var init_collector_ledger = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash7 } from "node:crypto";
 import { readFile as readFile18, realpath as realpath6 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -14194,16 +14398,16 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot, name) {
-  return join32(packageRoot, packagedMethodSkillRelativeDirectory(name));
+  return join33(packageRoot, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot, name) {
-  return join32(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
+  return join33(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord9(raw)) {
+  if (!isRecord10(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -14217,7 +14421,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord9(raw.upstream)) {
+  if (!isRecord10(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -14244,12 +14448,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord9(raw.files)) {
+  if (!isRecord10(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord9(entry)) {
+    if (!isRecord10(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -14291,8 +14495,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot, name);
-  const skillPathConfigured = join32(rootDirectory, "SKILL.md");
-  const provenancePath = join32(rootDirectory, "provenance.json");
+  const skillPathConfigured = join33(rootDirectory, "SKILL.md");
+  const provenancePath = join33(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile18(provenancePath, "utf8");
@@ -14309,7 +14513,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join32(rootDirectory, rel);
+    const absolute = join33(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile18(absolute);
@@ -14592,11 +14796,11 @@ var init_navigator_invocation_identity = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord10(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord10(item) && typeof item.reason === "string")) {
+  if (!isRecord11(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord11(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -14814,16 +15018,16 @@ var init_terminal = __esm({
 });
 
 // src/public-cli/settlement.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile19, readdir as readdir7, writeFile as writeFile10 } from "node:fs/promises";
-import { dirname as dirname17, join as join33 } from "node:path";
+import { dirname as dirname18, join as join34 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
 function ledgerReadScope(admitted, scope) {
   return {
     home: sealedLedgerHome(admitted),
-    sessionParent: join33(admitted.runDirectory, "session", "session.jsonl"),
+    sessionParent: join34(admitted.runDirectory, "session", "session.jsonl"),
     ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { attemptId: scope.courtAttemptId }
   };
 }
@@ -14886,7 +15090,7 @@ async function attachRecordedSubmissions(admitted, terminal, scope) {
     await recordedSubmissionPayloads(admitted, void 0)
   );
 }
-async function settleHostEndedNoReceipt(admitted, authority) {
+async function settleHostEndedNoReceipt(admitted, authority, scope) {
   const facts = noReceiptLifecycleFacts({
     terminalToolCalled: false,
     rejectedReceipts: [],
@@ -14908,7 +15112,8 @@ async function settleHostEndedNoReceipt(admitted, authority) {
       artifacts: [],
       runId: admitted.runId
     },
-    coordinates.sessionDirectory
+    coordinates.sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function closedLedgerOutcome(admitted, role, scope) {
@@ -15246,12 +15451,12 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
       kind: "auditor",
       sessionParent: sessionFile,
       // Path is driven by sessionParent when under ledger home; cwd is a fallback only.
-      cwd: dirname17(sessionFile)
+      cwd: dirname18(sessionFile)
     });
     const { records } = await readSitianRecords(recordFile);
     for (let i = records.length - 1; i >= 0; i -= 1) {
       const payload = records[i]?.payload;
-      if (!isRecord11(payload) || !isRecord11(payload.response)) continue;
+      if (!isRecord12(payload) || !isRecord12(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -15272,7 +15477,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join33(dirname17(sessionFile), "evidence-children");
+  const childDirectory = join34(dirname18(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir7(childDirectory);
@@ -15283,12 +15488,12 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join33(childDirectory, file));
+      entries = await readBoundSessionEntries(join34(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord11(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord12(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -15321,12 +15526,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     return body.startsWith("\u672C\u6B21\u914D\u7F6E\u7684\u52B3\u52A1\u5F15\u64CE\u53CA\u5176\u624B\u518C\uFF1A") || body.startsWith("- engine:");
   };
   const isResumeEnvelope = (msg) => {
-    if (!isRecord11(msg) || msg.role !== "user") return false;
+    if (!isRecord12(msg) || msg.role !== "user") return false;
     const text = typeof msg.text === "string" ? msg.text : typeof msg.content === "string" ? msg.content : void 0;
     if (isResumeEnvelopeBytes(text)) return true;
     const content = msg.content;
     if (Array.isArray(content)) {
-      return content.some((p) => isRecord11(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
+      return content.some((p) => isRecord12(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
     }
     return false;
   };
@@ -15338,7 +15543,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join33(dirname17(sessionFile), "auditor-roles")];
+  const childDirectories = [join34(dirname18(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -15353,12 +15558,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join33(childDirectory, file));
+        entries = await readBoundSessionEntries(join34(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord11(header)) continue;
+      if (!isRecord12(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -15372,7 +15577,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord11(bindingEntry.data) && isRecord11(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord12(bindingEntry.data) && isRecord12(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
@@ -15399,12 +15604,12 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord11(entry.data)) continue;
-      const parent = isRecord11(entry.data.parent) ? entry.data.parent : void 0;
-      const failure2 = isRecord11(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord12(entry.data)) continue;
+      const parent = isRecord12(entry.data.parent) ? entry.data.parent : void 0;
+      const failure2 = isRecord12(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId) continue;
       if (failure2 === void 0) continue;
-      const identity = isRecord11(failure2.identity) ? failure2.identity : void 0;
+      const identity = isRecord12(failure2.identity) ? failure2.identity : void 0;
       const typedCause = failure2.cause === "provider" || failure2.cause === "activation" || failure2.cause === "session" || failure2.cause === "output" || failure2.cause === "timeout" ? failure2.cause : void 0;
       return {
         ...typedCause === void 0 ? {} : { cause: typedCause },
@@ -15413,7 +15618,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure2.diagnostic === "string" ? { diagnostic: failure2.diagnostic } : {},
-        ...isRecord11(failure2.details) ? { details: failure2.details } : {}
+        ...isRecord12(failure2.details) ? { details: failure2.details } : {}
       };
     }
   }
@@ -15460,9 +15665,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord11(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord11(textPart) ? textPart.text : void 0;
-    const details = isRecord11(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord12(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord12(textPart) ? textPart.text : void 0;
+    const details = isRecord12(message.details) ? message.details : classification.fact;
     return {
       cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -15620,7 +15825,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function toolResultText(message) {
@@ -15645,7 +15850,7 @@ function extractCollectorTargetBindRejection(entries) {
     const diagnostic = toolResultText(message);
     if (diagnostic.length === 0) return void 0;
     const details = message.details;
-    const code = isRecord11(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
+    const code = isRecord12(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
     return code === void 0 ? { diagnostic } : { diagnostic, code };
   }
   return void 0;
@@ -15706,7 +15911,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord11(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord12(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -15743,7 +15948,7 @@ async function appendRunAttemptHistory(source, outcome) {
     type: "custom",
     customType: ATTEMPT_HISTORY_ENTRY_TYPE,
     data: attemptData,
-    id: randomUUID4(),
+    id: randomUUID5(),
     parentId,
     timestamp: timestamp2
   })}
@@ -15778,7 +15983,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord11(next) || typeof next.role !== "string") {
+    if (!isRecord12(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -15786,7 +15991,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord11).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord12).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -15849,18 +16054,50 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join33(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join33(sessionDirectory, "session.jsonl");
+  const directories = [join34(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join34(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
   return projectTerminalGateFact(rounds);
 }
+async function attachEngineDetourToolUsage(base, sessionDirectory, gateContext = {}) {
+  const runDirectory = typeof gateContext.runDirectory === "string" && gateContext.runDirectory.length > 0 ? gateContext.runDirectory : runDirectoryFromSessionDirectory(sessionDirectory);
+  const engineMounted = await readInvocationEngineMounted(runDirectory);
+  if (!engineMounted) return base;
+  const invocationScopeId = typeof gateContext.invocationScopeId === "string" && gateContext.invocationScopeId.length > 0 ? gateContext.invocationScopeId : void 0;
+  const sessionFile = sessionFileFromSessionDirectory(sessionDirectory);
+  const usage = await readEngineDetourToolUsage({
+    sessionParent: sessionFile,
+    engineMounted: true,
+    ...invocationScopeId === void 0 ? {} : { invocationScopeId },
+    cwd: runDirectory
+  });
+  const projected = usage === void 0 ? void 0 : projectEngineDetourToolUsageForPublicTerminal(usage, {
+    // Resumable Terminal: run ID only in resume.command — relative openable path.
+    discloseRecordFile: base.resume === void 0
+  });
+  return {
+    ...base,
+    roleOutcome: withEngineDetourToolUsageFact(base.roleOutcome, projected)
+  };
+}
+function detourGateContext(admitted, scope) {
+  return {
+    runDirectory: admitted.runDirectory,
+    ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { courtAttemptId: scope.courtAttemptId },
+    ...scope?.invocationScopeId === void 0 || scope.invocationScopeId.length === 0 ? {} : { invocationScopeId: scope.invocationScopeId }
+  };
+}
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  if (isRecord11(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
-  const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
-  return gate === void 0 ? base : { ...base, gate };
+  const skipGate = isRecord12(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
+  let next = base;
+  if (!skipGate) {
+    const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
+    if (gate !== void 0) next = { ...base, gate };
+  }
+  return attachEngineDetourToolUsage(next, sessionDirectory, gateContext);
 }
 function extractNavigatorFact(entries) {
   const terminal = findLatestDurablePackagedRoleTerminal(entries);
@@ -15898,7 +16135,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord11(details)) {
+      if (!isRecord12(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -15948,8 +16185,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join33(artifactsDir, "report.json");
-  const evidencePath = join33(artifactsDir, "evidence.json");
+  const reportPath = join34(artifactsDir, "report.json");
+  const evidencePath = join34(artifactsDir, "evidence.json");
   await writeFile10(
     reportPath,
     `${JSON.stringify(
@@ -16019,7 +16256,8 @@ async function settleLawfulJudgeTerminalResult(admitted, authority, scope) {
       artifacts,
       runId: admitted.runId
     },
-    coordinates.sessionDirectory
+    coordinates.sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function trySettleJudgeTerminalResult(admitted, authority, scope) {
@@ -16031,7 +16269,7 @@ function extractDoctorCandidateCostFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.cost : void 0;
+      return isRecord12(data) ? data.cost : void 0;
     }
   }
   return void 0;
@@ -16042,7 +16280,7 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.auditNoReceipt : void 0;
+      return isRecord12(data) ? data.auditNoReceipt : void 0;
     }
   }
   return void 0;
@@ -16050,8 +16288,8 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join33(artifactsDir, "report.json");
-  const evidencePath = join33(artifactsDir, "evidence.json");
+  const reportPath = join34(artifactsDir, "report.json");
+  const evidencePath = join34(artifactsDir, "evidence.json");
   await writeFile10(
     reportPath,
     `${JSON.stringify(
@@ -16113,7 +16351,8 @@ async function settleLawfulDoctorTerminalResult(admitted, authority, scope) {
         artifacts: artifacts2,
         runId: admitted.runId
       },
-      sessionDirectory
+      sessionDirectory,
+      detourGateContext(admitted, scope)
     );
   }
   const roleOutcome = sealed;
@@ -16136,7 +16375,8 @@ async function settleLawfulDoctorTerminalResult(admitted, authority, scope) {
       artifacts,
       runId: admitted.runId
     },
-    sessionDirectory
+    sessionDirectory,
+    detourGateContext(admitted, scope)
   );
 }
 async function trySettleDoctorTerminalResult(admitted, authority, scope) {
@@ -16167,12 +16407,17 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       spec.toolName
     );
     if (residual !== void 0) {
-      const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(admitted, {
-        cause: "output",
-        diagnostic: residual.diagnostic,
-        details
-      }, authority);
+      const details = isRecord12(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+      const failed = await settleFailureTerminalResult(
+        admitted,
+        {
+          cause: "output",
+          diagnostic: residual.diagnostic,
+          details
+        },
+        authority,
+        scope ?? {}
+      );
       return withSubmissions(failed, submissions);
     }
   }
@@ -16187,7 +16432,8 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
           artifacts: [],
           runId: admitted.runId
         },
-        sessionDirectory
+        sessionDirectory,
+        detourGateContext(admitted, scope)
       ),
       submissions
     );
@@ -16202,7 +16448,8 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
           artifacts: [],
           runId: admitted.runId
         },
-        sessionDirectory
+        sessionDirectory,
+        detourGateContext(admitted, scope)
       ),
       submissions
     );
@@ -16282,7 +16529,7 @@ function publicationAttemptFromError(path, error) {
 }
 function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   const dirs = [];
-  for (const dir of [baseDir, runDirectory, dirname17(runDirectory)]) {
+  for (const dir of [baseDir, runDirectory, dirname18(runDirectory)]) {
     if (!dirs.includes(dir)) dirs.push(dir);
   }
   return dirs;
@@ -16304,7 +16551,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join33(dir, `${stem}.${randomUUID4()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join34(dir, `${stem}.${randomUUID5()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -16355,20 +16602,20 @@ async function publishFailureArtifacts(admitted, failure2, authority) {
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join33(baseDir, "error.json"),
-    join33(baseDir, "error.settlement.json"),
-    join33(admitted.runDirectory, "error.settlement.json")
+    join34(baseDir, "error.json"),
+    join34(baseDir, "error.settlement.json"),
+    join34(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join33(baseDir, "error.settlement.json"),
-    join33(baseDir, "error.json")
+    join34(baseDir, "error.settlement.json"),
+    join34(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join33(baseDir, "evidence.json"),
-    join33(baseDir, "evidence.settlement.json"),
-    join33(admitted.runDirectory, "evidence.settlement.json")
+    join34(baseDir, "evidence.json"),
+    join34(baseDir, "evidence.settlement.json"),
+    join34(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join33(baseDir, "evidence.settlement.json"),
-    join33(baseDir, "evidence.json")
+    join34(baseDir, "evidence.settlement.json"),
+    join34(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -16450,7 +16697,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
                 artifacts: [],
                 runId: admitted.runId
               },
-              sessionDirectory
+              sessionDirectory,
+              detourGateContext(admitted, options)
             );
           }
         } catch {
@@ -16488,7 +16736,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
         artifacts: [],
         resume: options.resume
       },
-      sessionDirectory
+      sessionDirectory,
+      detourGateContext(admitted, options)
     );
   }
   const roleOutcome = {
@@ -16505,7 +16754,8 @@ async function settleFailureTerminalResult(admitted, failure2, authority, option
       artifacts,
       runId: admitted.runId
     },
-    sessionDirectory
+    sessionDirectory,
+    detourGateContext(admitted, options)
   );
 }
 function presentFailureTerminal(terminal, io) {
@@ -16579,6 +16829,7 @@ var init_settlement = __esm({
     init_compliance_transport();
     init_collector_ledger();
     init_engine_detour();
+    init_engine_detour_usage();
     init_judge_output();
     init_collector_output();
     init_worker_output();
@@ -16612,9 +16863,9 @@ var init_settlement = __esm({
 
 // src/public-cli/auto-resume.ts
 import { constants as fsConstants2 } from "node:fs";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 import { lstat as lstat6, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 async function persistReturnedRunState(admitted, authority, options) {
   if (options?.lawful === true) {
     await markRunTerminal(admitted.runDirectory);
@@ -16729,7 +16980,7 @@ function jsonSafeReplacer() {
   };
 }
 async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
-  const filePath = join34(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
+  const filePath = join35(artifactsDir, `${namePrefix}-${randomUUID6()}.json`);
   const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}
 `;
   const noFollowFlag = typeof fsConstants2.O_NOFOLLOW === "number" ? fsConstants2.O_NOFOLLOW : 0;
@@ -17000,9 +17251,9 @@ var init_auto_resume = __esm({
 });
 
 // src/public-cli/post-admission.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
-import { readFile as readFile20, writeFile as writeFile11 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join35, resolve as resolve13 } from "node:path";
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { writeFile as writeFile11 } from "node:fs/promises";
+import { isAbsolute as isAbsolute8, join as join36, resolve as resolve13 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -17047,7 +17298,7 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
       await writeFile11(
-        join35(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
+        join36(artifactsDir, `post-admission-diagnostic-${randomUUID7()}.json`),
         `${JSON.stringify({ version: 1, ...payload }, null, 2)}
 `,
         { encoding: "utf8", flag: "wx" }
@@ -17061,15 +17312,6 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     }
   }
 }
-async function readInvocationHost(runDirectory) {
-  try {
-    const raw = JSON.parse(await readFile20(join35(runDirectory, "invocation.json"), "utf8"));
-    return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
-  } catch (error) {
-    if (error.code === "ENOENT") return void 0;
-    throw error;
-  }
-}
 async function presentControlledFailure(admitted, failureInput, adapters, authority, io, persistRunState = true) {
   const hasThrown = Object.hasOwn(failureInput, "thrown");
   const resumeObservation = await resolveControlledFailureResumeObservation({
@@ -17109,7 +17351,10 @@ async function presentControlledFailure(admitted, failureInput, adapters, author
       admitted,
       failure2,
       authority,
-      resumable ? { resume: { command: renderResumeCommand(admitted.runId) } } : {}
+      {
+        ...resumable ? { resume: { command: renderResumeCommand(admitted.runId) } } : {},
+        ...failureInput.invocationScopeId === void 0 || failureInput.invocationScopeId.length === 0 ? {} : { invocationScopeId: failureInput.invocationScopeId }
+      }
     )
   );
   presentFailureTerminal(terminal, io);
@@ -17178,12 +17423,12 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -17204,7 +17449,7 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          missingCredential,
+          withEngineDetourInvocationScope(missingCredential, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -17218,7 +17463,7 @@ async function dispatchPostAdmissionTurn(input) {
     const principalCoordinates = admitted.principal === void 0 ? void 0 : env.principalAuthority.decode(admitted.principal);
     let hostTransition;
     try {
-      previousHost = await readInvocationHost(admitted.runDirectory);
+      previousHost = readInvocationSelectedHost(admitted.runDirectory);
       hostTransition = previousHost !== void 0 && liveHost !== void 0 && principalCoordinates !== void 0 ? await projectHostTransitionPriorNative({
         previousHost,
         liveHost,
@@ -17228,12 +17473,12 @@ async function dispatchPostAdmissionTurn(input) {
       return {
         ...await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -17250,12 +17495,12 @@ async function dispatchPostAdmissionTurn(input) {
       } catch (error) {
         const settled2 = await presentControlledFailure(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -17274,6 +17519,9 @@ async function dispatchPostAdmissionTurn(input) {
     if (hostTransition !== void 0) {
       turnRequest = { ...turnRequest, hostTransition };
     }
+    if (typeof liveHost === "string" && liveHost.trim() !== "") {
+      turnRequest = { ...turnRequest, host: liveHost.trim() };
+    }
     if (isStationChildOfficerDialogue(admitted.role, env)) {
       await deliverCaseDossierAsAttachment({
         ticketNumber: admitted.ticketNumber,
@@ -17310,12 +17558,12 @@ async function dispatchPostAdmissionTurn(input) {
     } catch (error) {
       const settled2 = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: null,
           stderr: "",
           thrown: error
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -17326,7 +17574,7 @@ async function dispatchPostAdmissionTurn(input) {
     let stderrLogWriteFailure;
     try {
       await writeFile11(
-        join35(admitted.runDirectory, "stderr.log"),
+        join36(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -17339,7 +17587,10 @@ async function dispatchPostAdmissionTurn(input) {
         io
       );
     }
-    const courtScope = request.courtAttemptId === void 0 || request.courtAttemptId.length === 0 ? void 0 : { courtAttemptId: request.courtAttemptId };
+    const courtScope = (request.courtAttemptId === void 0 || request.courtAttemptId.length === 0) && (request.invocationScopeId === void 0 || request.invocationScopeId.length === 0) ? void 0 : {
+      ...request.courtAttemptId === void 0 || request.courtAttemptId.length === 0 ? {} : { courtAttemptId: request.courtAttemptId },
+      ...request.invocationScopeId === void 0 || request.invocationScopeId.length === 0 ? {} : { invocationScopeId: request.invocationScopeId }
+    };
     let settled;
     let settledOutcome;
     let hostSignalFailed = false;
@@ -17389,12 +17640,12 @@ async function dispatchPostAdmissionTurn(input) {
     } catch (error) {
       const settledFailure = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: result.code,
           stderr: result.stderr,
           thrown: error
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -17409,13 +17660,13 @@ async function dispatchPostAdmissionTurn(input) {
         } catch (error) {
           const failed = await settleAfterTurnStarted(
             admitted,
-            {
+            withEngineDetourInvocationScope({
               timedOut: false,
               code: null,
               stderr: "",
               thrown: error,
               skipRunStateWrite: true
-            },
+            }, request.invocationScopeId),
             adapters,
             env.principalAuthority,
             io,
@@ -17431,7 +17682,7 @@ async function dispatchPostAdmissionTurn(input) {
       const stderrLogWriteDetails = stderrLogWriteFailure === void 0 ? void 0 : { stderrLogWriteFailure: describeCaughtError(stderrLogWriteFailure) };
       const failed = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: result.timedOut,
           code: result.code,
           stderr: result.stderr,
@@ -17445,7 +17696,7 @@ async function dispatchPostAdmissionTurn(input) {
               details: { ...resolutionInput.knownFailure.details ?? {}, ...stderrLogWriteDetails }
             }
           } : { knownDetails: stderrLogWriteDetails }
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -17456,12 +17707,12 @@ async function dispatchPostAdmissionTurn(input) {
     if (stderrLogWriteFailure !== void 0) {
       const failed = await settleAfterTurnStarted(
         admitted,
-        {
+        withEngineDetourInvocationScope({
           timedOut: false,
           code: result.code,
           stderr: result.stderr,
           thrown: stderrLogWriteFailure
-        },
+        }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
@@ -17471,7 +17722,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     const noReceipt = await attachRecordedSubmissions(
       admitted,
-      await settleHostEndedNoReceipt(admitted, env.principalAuthority),
+      await settleHostEndedNoReceipt(admitted, env.principalAuthority, courtScope),
       courtScope
     );
     if (persistRunState) {
@@ -17480,13 +17731,13 @@ async function dispatchPostAdmissionTurn(input) {
       } catch (error) {
         const failed = await settleAfterTurnStarted(
           admitted,
-          {
+          withEngineDetourInvocationScope({
             timedOut: false,
             code: null,
             stderr: "",
             thrown: error,
             skipRunStateWrite: true
-          },
+          }, request.invocationScopeId),
           adapters,
           env.principalAuthority,
           io,
@@ -17555,7 +17806,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
       kind: "resume",
       prompt
     },
-    ...request.message === void 0 ? {} : { courtAttemptId: randomUUID6() },
+    ...request.message === void 0 ? {} : { courtAttemptId: randomUUID7() },
     ...env.stationChild === void 0 ? {} : { stationChild: env.stationChild }
   };
 }
@@ -17573,7 +17824,7 @@ async function dispatchAfterWriterLease(input) {
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve13(attachmentPath);
-  return pathContainedIn(join35(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join36(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -17652,7 +17903,7 @@ async function runPostAdmissionSeatResume(input) {
     }
     let turnRequest = await input.buildTurnRequest(admittedForBuild, request);
     if (openCourtAttemptId !== void 0 || request.summons !== void 0 || request.message !== void 0) {
-      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID6());
+      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID7());
       turnRequest = { ...turnRequest, courtAttemptId };
       if (openCourtAttemptId === void 0) {
         const court = {
@@ -17668,6 +17919,9 @@ async function runPostAdmissionSeatResume(input) {
     if (input.env.stationChild === true) {
       let firstTurn;
       const stationAdapters = withOnceSuccessfulBeforeDispatch(adapters);
+      const invocationScopeId = mintEngineDetourInvocationScope({
+        ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
+      });
       return await runWithAutoResumeLoop({
         admitted: loaded.admitted,
         principalAuthority: input.env.principalAuthority,
@@ -17694,7 +17948,10 @@ async function runPostAdmissionSeatResume(input) {
                 }
               };
             }
-            const turnRequest = await buildRequestAfterLease();
+            const turnRequest = withEngineDetourInvocationScope(
+              await buildRequestAfterLease(),
+              invocationScopeId
+            );
             firstTurn = turnRequest;
             return turnRequest;
           },
@@ -17765,6 +18022,11 @@ async function runPostAdmissionOneShot(input) {
 async function runPostAdmissionResumable(input) {
   const { admitted, env, io, buildInitialRequest, buildResumeRequest, effectiveEngine } = input;
   const adapters = withOnceSuccessfulBeforeDispatch(input.adapters);
+  const invocationScopeId = mintEngineDetourInvocationScope({
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
+  });
+  const buildScopedInitial = () => withEngineDetourInvocationScope(buildInitialRequest(), invocationScopeId);
+  const buildScopedResume = () => withEngineDetourInvocationScope(buildResumeRequest(), invocationScopeId);
   return runWithAutoResumeLoop({
     admitted,
     principalAuthority: env.principalAuthority,
@@ -17772,8 +18034,8 @@ async function runPostAdmissionResumable(input) {
     io,
     sessionAppender: env.sessionAppender,
     autoResumeLimit: env.autoResumeLimit,
-    buildInitialPayload: buildInitialRequest,
-    buildResumePayload: buildResumeRequest,
+    buildInitialPayload: buildScopedInitial,
+    buildResumePayload: buildScopedResume,
     dispatch: async (request, lease, _isFirst, attemptIo) => {
       const result = await dispatchPostAdmissionTurn({
         admitted,
@@ -17821,6 +18083,9 @@ async function runPostAdmissionManualResume(input) {
     }
     throw error;
   }
+  const invocationScopeId = mintEngineDetourInvocationScope({
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
+  });
   const result = await dispatchAfterWriterLease({
     lease,
     build: async () => {
@@ -17832,6 +18097,7 @@ async function runPostAdmissionManualResume(input) {
         }
         request = await buildRequestAfterLease();
       }
+      request = withEngineDetourInvocationScope(request, invocationScopeId);
       return request;
     },
     dispatch: (turnRequest) => dispatchPostAdmissionTurn({
@@ -17871,6 +18137,7 @@ var init_post_admission = __esm({
     init_session_identity();
     init_host_contracts();
     init_case_dossier_delivery();
+    init_engine_detour_usage();
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
@@ -17905,6 +18172,7 @@ function projectRoleTurnRequest(admitted, roleDetails, options) {
     ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
     ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
     ...options.courtAttemptId === void 0 || options.courtAttemptId.length === 0 ? {} : { courtAttemptId: options.courtAttemptId },
+    ...options.invocationScopeId === void 0 || options.invocationScopeId.length === 0 ? {} : { invocationScopeId: options.invocationScopeId },
     ...options.stationChild === void 0 ? {} : { stationChild: options.stationChild }
   };
 }
@@ -18923,7 +19191,7 @@ __export(public_role_summons_exports, {
   summonPublicRole: () => summonPublicRole
 });
 import { existsSync as existsSync11 } from "node:fs";
-import { join as join36 } from "node:path";
+import { join as join37 } from "node:path";
 function createCapturingIo() {
   const chunks = [];
   return {
@@ -18946,7 +19214,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync11(join36(dir, "package.json")) && existsSync11(join36(dir, "souls"))) {
+    if (existsSync11(join37(dir, "package.json")) && existsSync11(join37(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -19040,7 +19308,7 @@ async function createSummonEnv(options) {
 async function summonPublicRole(options) {
   const packageRoot = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join36(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join37(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -19416,14 +19684,14 @@ var init_gatekeeper_role = __esm({
 });
 
 // src/acp-host/production-host.ts
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { randomUUID as randomUUID9 } from "node:crypto";
 
 // src/role-envelope.ts
 init_engine_detour();
-import { randomUUID as randomUUID7 } from "node:crypto";
-import { mkdir as mkdir5, readFile as readFile22, writeFile as writeFile12 } from "node:fs/promises";
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { mkdir as mkdir5, readFile as readFile21, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename9, dirname as dirname20, join as join40 } from "node:path";
+import { basename as basename10, dirname as dirname21, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -19497,8 +19765,8 @@ init_host_contracts();
 init_sitian_facade();
 init_submission_ledger();
 init_collector_ledger();
-import { readFileSync as readFileSync5, writeSync as writeSync4 } from "node:fs";
-import { join as join39 } from "node:path";
+import { readFileSync as readFileSync6, writeSync as writeSync4 } from "node:fs";
+import { join as join40 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
 // src/activation-trace.ts
@@ -19548,7 +19816,7 @@ import {
   openSync as openSync2,
   writeSync
 } from "node:fs";
-import { dirname as dirname18, isAbsolute as isAbsolute10, resolve as resolve15 } from "node:path";
+import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve15 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -19697,7 +19965,7 @@ function appendActivationLedgerLine(ledgerPath, line2, options) {
   }
   const resolvedLedger = resolve15(ledgerPath);
   const resolvedHome = resolve15(options.ledgerHome);
-  const parent = dirname18(resolvedLedger);
+  const parent = dirname19(resolvedLedger);
   ensureRealDirectoryTree(resolvedHome, parent);
   assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
   if (typeof constants2.O_NOFOLLOW !== "number") {
@@ -19911,7 +20179,15 @@ init_engine_material();
 
 // src/engine-detour-tool.ts
 init_engine_detour();
+init_engine_detour_usage();
+import { basename as basename9 } from "node:path";
 import { Type as Type14 } from "typebox";
+function basenameRunId(runDirectory) {
+  const leaf = basename9(runDirectory);
+  const at = leaf.indexOf("@");
+  if (at <= 0) return void 0;
+  return leaf.slice(0, at);
+}
 var engineDetourArgsSchema = Type14.Object(
   {
     argv: Type14.Array(Type14.String({ minLength: 1 }), {
@@ -19928,6 +20204,9 @@ function isCallerCancellation(error, signal) {
   }
   return false;
 }
+function asError(error, fallback) {
+  return error instanceof Error ? error : new Error(String(error).trim() || fallback);
+}
 function createEngineDetourToolDefinition(input) {
   const engineName = input.engineName;
   const engineModel = input.engineModel;
@@ -19948,6 +20227,45 @@ function createEngineDetourToolDefinition(input) {
           ctx
         );
       }
+      const sessionParent = ctx.sessionManager?.getSessionFile?.();
+      const startedAt = Date.now();
+      const runDirectory = typeof ctx.runDirectory === "string" && ctx.runDirectory.length > 0 ? ctx.runDirectory : void 0;
+      const runId = runDirectory === void 0 ? void 0 : basenameRunId(runDirectory);
+      const invocationScopeId = typeof ctx.invocationScopeId === "string" && ctx.invocationScopeId.trim() !== "" ? ctx.invocationScopeId.trim() : void 0;
+      const host = typeof ctx.host === "string" && ctx.host.trim() !== "" ? ctx.host.trim() : void 0;
+      const recordCall = (observed2) => {
+        if (typeof sessionParent !== "string" || sessionParent.length === 0) return;
+        reportEngineDetourCall({
+          toolCallId,
+          durationMs: Math.max(0, Date.now() - startedAt),
+          cwd: ctx.cwd,
+          sessionParent,
+          ...runId === void 0 ? {} : { runId },
+          ...invocationScopeId === void 0 ? {} : { invocationScopeId },
+          ...host === void 0 ? {} : { host },
+          ...observed2.code === void 0 ? {} : { code: observed2.code },
+          ...observed2.stdoutByteLength === void 0 ? {} : { stdoutByteLength: observed2.stdoutByteLength }
+        });
+      };
+      const failAfterLedger = (engineCause, observed2, aggregateMessage) => {
+        try {
+          recordCall(observed2);
+        } catch (recordError) {
+          input.fail(
+            new AggregateError(
+              [
+                engineCause,
+                asError(recordError, "engine detour usage ledger write failed")
+              ],
+              aggregateMessage,
+              { cause: engineCause }
+            ),
+            toolCallId,
+            ctx
+          );
+        }
+        input.fail(engineCause, toolCallId, ctx);
+      };
       let result;
       try {
         result = await runEngineDetourOnce({
@@ -19957,16 +20275,22 @@ function createEngineDetourToolDefinition(input) {
         });
       } catch (error) {
         if (isCallerCancellation(error, signal)) throw error;
-        const cause = error instanceof Error ? error : new Error(String(error).trim() || "\u52B3\u52A1\u5F15\u64CE spawn \u5931\u8D25");
-        input.fail(cause, toolCallId, ctx);
+        return failAfterLedger(
+          asError(error, "\u52B3\u52A1\u5F15\u64CE spawn \u5931\u8D25"),
+          {},
+          "engine detour spawn and usage ledger both failed"
+        );
       }
+      const stdoutByteLength = engineDetourStdoutByteLength(result.stdout);
+      const observed = { code: result.code, stdoutByteLength };
       if (isEngineDetourFailure(result)) {
-        input.fail(
+        return failAfterLedger(
           new Error(engineDetourFailureDiagnostic(result)),
-          toolCallId,
-          ctx
+          observed,
+          "engine detour child-close and usage ledger both failed"
         );
       }
+      recordCall(observed);
       return {
         content: [{ type: "text", text: result.stdout }],
         details: {
@@ -20007,8 +20331,8 @@ init_collector_github();
 // src/collector-handbook.ts
 init_atomic_write();
 init_activation_ledger_topology();
-import { readFile as readFile21 } from "node:fs/promises";
-import { join as join37, sep as sep5 } from "node:path";
+import { readFile as readFile20 } from "node:fs/promises";
+import { join as join38, sep as sep5 } from "node:path";
 
 // src/collector-tool-schemas.ts
 init_open_tool_schema();
@@ -20123,7 +20447,7 @@ function resolveCollectorHandbookRoot(sessionPath) {
     throw new Error(`\u901A\u8FDB\u53F8\u624B\u518C\u62D2\u7EDD\u4E0D\u5B89\u5168 bookKey ${JSON.stringify(bookKey)}`);
   }
   const ledgerHome = resolveActivationLedgerHomeForPath(sessionPath);
-  const root = join37(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
+  const root = join38(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
   return { ledgerHome, bookKey, root };
 }
 function collectorHandbookRepoFileName(repositoryCanonical) {
@@ -20135,9 +20459,9 @@ function collectorHandbookRepoFileName(repositoryCanonical) {
   return `${repositoryCanonical.replaceAll("/", "__")}.md`;
 }
 function createCollectorHandbookStore(input) {
-  const generalPath = join37(input.handbookRoot, "general.md");
-  const repoDir = join37(input.handbookRoot, "repos");
-  const repoPath = join37(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
+  const generalPath = join38(input.handbookRoot, "general.md");
+  const repoDir = join38(input.handbookRoot, "repos");
+  const repoPath = join38(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
   const assertHandbookBudget = (body, label) => {
     const byteLength = Buffer.byteLength(body, "utf8");
     if (byteLength > COLLECTOR_HANDBOOK_MAX_BYTES) {
@@ -20151,7 +20475,7 @@ function createCollectorHandbookStore(input) {
     ensureRealDirectoryTree(input.ledgerHome, parentDir2);
     assertLedgerFileInsideHome(path, input.ledgerHome);
     try {
-      const body = await readFile21(path, "utf8");
+      const body = await readFile20(path, "utf8");
       assertHandbookBudget(body, "\u6B63\u6587");
       return body;
     } catch (error) {
@@ -22385,7 +22709,7 @@ init_sitian_facade();
 init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync4, rmdirSync, rmSync } from "node:fs";
+import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve17 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
@@ -22427,7 +22751,7 @@ function tryGetAll(file, key) {
 }
 function ownedHook(path) {
   if (!existsSync12(path)) return false;
-  return readFileSync4(path, "utf8").includes(HOOK_MARKER);
+  return readFileSync5(path, "utf8").includes(HOOK_MARKER);
 }
 function escapeGitConfigValueRegex(value) {
   return value.replace(/[\\^$.*+?()[\]{}|]/g, "\\$&");
@@ -22482,7 +22806,7 @@ function uninstallPackageWorkerHooks(cwd) {
     rmOwnedDir(resolve17(gitDir, HOOKS_DIR));
   }
 }
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unfinishedReasonPresent(details) {
@@ -22498,7 +22822,7 @@ function readGateState(session) {
     if (entry.type !== "custom") continue;
     if (entry.customType === WORKER_COMMIT_BASELINE_ENTRY_TYPE) {
       const data = entry.data;
-      if (isRecord12(data) && (data.head === null || typeof data.head === "string")) {
+      if (isRecord13(data) && (data.head === null || typeof data.head === "string")) {
         baseline = data.head;
       }
     } else if (entry.customType === WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE) {
@@ -23469,8 +23793,8 @@ function readDiaristRunCoordinates(ctx) {
   if (runDirectory === void 0) {
     throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
   }
-  const admittedPath = join39(runDirectory, "admitted-request.json");
-  const admitted = JSON.parse(readFileSync5(admittedPath, "utf8"));
+  const admittedPath = join40(runDirectory, "admitted-request.json");
+  const admitted = JSON.parse(readFileSync6(admittedPath, "utf8"));
   if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
     throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
   }
@@ -24488,16 +24812,16 @@ async function prepareRoleEnvelope(options) {
   let rejection;
   let infrastructureRoundFailure;
   const hostAbort = new AbortController();
-  const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID7();
+  const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID8();
   await mkdir5(request.runDirectory, { recursive: true });
   for (const method of request.methods) {
     if (method.kind !== "skill") continue;
-    const name = basename9(dirname20(method.path));
-    const raw = await readFile22(method.path, "utf8");
+    const name = basename10(dirname21(method.path));
+    const raw = await readFile21(method.path, "utf8");
     methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
   }
-  let sessionFile = options.sessionFile ?? join40(request.runDirectory, "session", "session.jsonl");
-  await mkdir5(dirname20(sessionFile), { recursive: true });
+  let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
+  await mkdir5(dirname21(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -24522,11 +24846,13 @@ async function prepareRoleEnvelope(options) {
     model: request.model === void 0 ? void 0 : { provider: request.model.provider },
     runDirectory: request.runDirectory,
     ...request.courtAttemptId === void 0 ? {} : { courtAttemptId: request.courtAttemptId },
+    ...request.invocationScopeId === void 0 ? {} : { invocationScopeId: request.invocationScopeId },
+    ...request.host === void 0 || request.host.trim() === "" ? {} : { host: request.host.trim() },
     sessionManager: {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname20(sessionFile),
+      getSessionDir: () => dirname21(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -24627,7 +24953,7 @@ async function prepareRoleEnvelope(options) {
     }
   };
   createRoleRuntimeExtension(options.dependencies)(envelope);
-  const token = randomUUID7();
+  const token = randomUUID8();
   const server = createServer((socket) => serveSocket(socket));
   function rememberProjectedRejection(details, toolCallId, content) {
     if (typeof details !== "object" || details === null) return;
@@ -24708,7 +25034,7 @@ async function prepareRoleEnvelope(options) {
   async function invokeAkTool(name, args) {
     const tool = tools.get(name);
     if (tool === void 0) throw new Error(`Unknown AK tool: ${name}`);
-    const toolCallId = randomUUID7();
+    const toolCallId = randomUUID8();
     calls.push({ toolCallId, toolName: name });
     sessionEntries.push({
       type: "message",
@@ -24901,7 +25227,7 @@ async function prepareRoleEnvelope(options) {
         message: { role: "user", content: prompt }
       });
     }
-    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile22(path, "utf8")))).join("\n\n");
+    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile21(path, "utf8")))).join("\n\n");
     const promptResults = await emit("before_agent_start", {
       prompt,
       systemPrompt: methodPrompt,
@@ -24959,18 +25285,18 @@ async function prepareRoleEnvelope(options) {
 }
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile25 } from "node:fs/promises";
+import { readFile as readFile24 } from "node:fs/promises";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/canonical-skill-binding.ts
-import { readFile as readFile23, realpath as realpath7 } from "node:fs/promises";
+import { readFile as readFile22, realpath as realpath7 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname as dirname21, resolve as resolve18 } from "node:path";
+import { dirname as dirname22, resolve as resolve18 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
 function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
   const matchedPath = evidence?.location === configuredPath ? configuredPath : evidence?.location === snapshot.path ? snapshot.path : void 0;
   const expectedContent = matchedPath === void 0 ? void 0 : snapshot.body;
-  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname21(matchedPath)}.
+  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname22(matchedPath)}.
 
 ${snapshot.body}`;
   if (evidence?.name !== name || matchedPath === void 0 || evidence.content !== expectedContent && evidence.content !== prefixedContent || evidence.userMessage !== originalRequest) {
@@ -24996,7 +25322,7 @@ async function loadCanonicalSkillBinding(name) {
   let raw;
   try {
     path = await realpath7(configuredPath);
-    raw = await readFile23(path, "utf8");
+    raw = await readFile22(path, "utf8");
   } catch (error) {
     throw new CanonicalSkillUnavailableError(name, configuredPath, error);
   }
@@ -25007,7 +25333,7 @@ async function loadCanonicalSkillBinding(name) {
   const snapshot = Object.freeze({
     raw,
     path,
-    baseDir: dirname21(path),
+    baseDir: dirname22(path),
     body,
     snapshotIdentity: Object.freeze({ text: raw })
   });
@@ -25035,7 +25361,7 @@ init_doctor_evidence();
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile24 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
@@ -25048,7 +25374,7 @@ function navigatorInputReference(getFlag, role) {
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile24(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile23(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -25105,7 +25431,7 @@ async function loadNavigatorWorkContext(options) {
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile24(path, "utf8");
+      const content = await readFile23(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -25130,7 +25456,7 @@ async function loadNavigatorWorkContext(options) {
 init_notary_source_run();
 
 // src/package-resources/method-skill-binding.ts
-import { dirname as dirname22 } from "node:path";
+import { dirname as dirname23 } from "node:path";
 init_method_skill();
 async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const material = await loadPackagedMethodSkillMaterial(packageRoot, name);
@@ -25138,7 +25464,7 @@ async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const snapshot = Object.freeze({
     raw: material.raw,
     path: material.skillPath,
-    baseDir: dirname22(material.skillPath),
+    baseDir: dirname23(material.skillPath),
     body: material.body,
     snapshotIdentity: Object.freeze({ text: material.raw })
   });
@@ -25175,13 +25501,13 @@ function createRoleRuntimeDependencies(packageRoot) {
     packageRoot,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile25(path, "utf8"),
+    loadFixPacket: (path) => readFile24(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile25(path, "utf8"),
+    loadCoderTask: (path) => readFile24(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     createReviewerPinnedGitReader: () => createReviewerPinnedGitReader(),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile25(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile24(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -25195,7 +25521,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadDiaristSoul: () => loadMainRoleSessionMaterials("diarist"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile25(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile24(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -25221,7 +25547,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile25(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile24(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },
@@ -25234,9 +25560,9 @@ function createRoleRuntimeDependencies(packageRoot) {
 init_session_identity();
 
 // src/acp-host/description.ts
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function resolveAcpBinary(description, operatorHome) {
-  return join41(operatorHome, ...description.binaryFromHome);
+  return join42(operatorHome, ...description.binaryFromHome);
 }
 function acpStdioArgs(description, model, seat) {
   const { prefix, suffix, modelFlag, thinkingFlag } = description.argv;
@@ -25683,12 +26009,12 @@ function createAcpRoleTurnHost(config) {
 // src/acp-host/seat-profile-soul.ts
 import { constants as constants3 } from "node:fs";
 import { access as access5, copyFile, lstat as lstat7, mkdir as mkdir6, readlink, symlink, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname23, join as join42, relative as relative3, resolve as resolve20 } from "node:path";
+import { dirname as dirname24, join as join43, relative as relative3, resolve as resolve20 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
 function packageRoleSoulPath(packageRoot, role) {
-  return join42(packageRoot, "souls", `${role}.md`);
+  return join43(packageRoot, "souls", `${role}.md`);
 }
 async function pathExists2(path) {
   try {
@@ -25705,16 +26031,16 @@ async function ensureSeatProfileSoul(options) {
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
-  const profilesRoot = join42(operatorHome, ...spec.profilesRootFromHome);
-  const profileDir = join42(profilesRoot, profileName);
-  const hostRoot = dirname23(profilesRoot);
-  const soulPath = join42(profileDir, spec.soulFileName);
+  const profilesRoot = join43(operatorHome, ...spec.profilesRootFromHome);
+  const profileDir = join43(profilesRoot, profileName);
+  const hostRoot = dirname24(profilesRoot);
+  const soulPath = join43(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
     await mkdir6(profileDir, { recursive: true });
     for (const name of ["auth.json", ".env", "config.yaml"]) {
-      const source = join42(hostRoot, name);
+      const source = join43(hostRoot, name);
       if (!await pathExists2(source)) continue;
-      await copyFile(source, join42(profileDir, name));
+      await copyFile(source, join43(profileDir, name));
     }
   } else {
     await mkdir6(profileDir, { recursive: true });
@@ -25747,7 +26073,7 @@ function createComposedAcpRoleTurnHost(config) {
       request,
       dependencies: config.roleRuntimeDependencies,
       sessionFile: config.sessionIdentity.resolveSessionFile(request.principal),
-      socketPath: config.socketPath?.(request) ?? `/tmp/ak-acp-mcp-${randomUUID8()}.sock`
+      socketPath: config.socketPath?.(request) ?? `/tmp/ak-acp-mcp-${randomUUID9()}.sock`
     })
   });
 }