@akagilnc/pi-workflow-roles 0.1.4276 → 0.1.4286

package/dist/acp-host/production-host.js

@@ -16142,32 +16142,29 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   const submissions = await recordedSubmissionPayloads(admitted, scope);
   const scanStart = currentAttemptStartIndex(entries);
+  let thisAttemptHasSeatSuccess = false;
+  let residual;
   for (let index = entries.length - 1; index >= scanStart; index -= 1) {
     const message = entries[index]?.message;
     if (message?.role !== "toolResult") continue;
-    const residual = boundErroredToolCandidate(
-      entries,
-      index,
-      message,
-      spec.toolName
-    );
-    if (residual !== void 0) {
-      const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(
-        admitted,
-        {
-          cause: "output",
-          diagnostic: residual.diagnostic,
-          details
-        },
-        authority,
-        scope ?? {}
+    if (message.toolName !== spec.toolName) continue;
+    if (message.isError === false) {
+      if (boundRoleToolCallForResult(entries, index, message, spec.toolName) !== void 0) {
+        thisAttemptHasSeatSuccess = true;
+      }
+      continue;
+    }
+    if (residual === void 0) {
+      residual = boundErroredToolCandidate(
+        entries,
+        index,
+        message,
+        spec.toolName
       );
-      return withSubmissions(failed, submissions);
     }
   }
   const roleOutcome = await closedLedgerOutcome(admitted, spec.role, scope);
-  if (roleOutcome?.kind === "audit_escalation") {
+  if (roleOutcome !== void 0 && (thisAttemptHasSeatSuccess || residual === void 0)) {
     const navigator = extractNavigatorFact(entries);
     return withSubmissions(
       await withOptionalGateProjection(
@@ -16183,21 +16180,19 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       submissions
     );
   }
-  if (roleOutcome?.role === spec.role) {
-    const navigator = extractNavigatorFact(entries);
-    return withSubmissions(
-      await withOptionalGateProjection(
-        {
-          roleOutcome,
-          navigator,
-          artifacts: [],
-          runId: admitted.runId
-        },
-        sessionDirectory,
-        detourGateContext(admitted, scope)
-      ),
-      submissions
+  if (residual !== void 0) {
+    const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+    const failed = await settleFailureTerminalResult(
+      admitted,
+      {
+        cause: "output",
+        diagnostic: residual.diagnostic,
+        details
+      },
+      authority,
+      scope ?? {}
     );
+    return withSubmissions(failed, submissions);
   }
   return void 0;
 }

package/dist/headless-host/production-host.js

@@ -15508,32 +15508,29 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   const submissions = await recordedSubmissionPayloads(admitted, scope);
   const scanStart = currentAttemptStartIndex(entries);
+  let thisAttemptHasSeatSuccess = false;
+  let residual;
   for (let index = entries.length - 1; index >= scanStart; index -= 1) {
     const message = entries[index]?.message;
     if (message?.role !== "toolResult") continue;
-    const residual = boundErroredToolCandidate(
-      entries,
-      index,
-      message,
-      spec.toolName
-    );
-    if (residual !== void 0) {
-      const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(
-        admitted,
-        {
-          cause: "output",
-          diagnostic: residual.diagnostic,
-          details
-        },
-        authority,
-        scope ?? {}
+    if (message.toolName !== spec.toolName) continue;
+    if (message.isError === false) {
+      if (boundRoleToolCallForResult(entries, index, message, spec.toolName) !== void 0) {
+        thisAttemptHasSeatSuccess = true;
+      }
+      continue;
+    }
+    if (residual === void 0) {
+      residual = boundErroredToolCandidate(
+        entries,
+        index,
+        message,
+        spec.toolName
       );
-      return withSubmissions(failed, submissions);
     }
   }
   const roleOutcome = await closedLedgerOutcome(admitted, spec.role, scope);
-  if (roleOutcome?.kind === "audit_escalation") {
+  if (roleOutcome !== void 0 && (thisAttemptHasSeatSuccess || residual === void 0)) {
     const navigator = extractNavigatorFact(entries);
     return withSubmissions(
       await withOptionalGateProjection(
@@ -15549,21 +15546,19 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       submissions
     );
   }
-  if (roleOutcome?.role === spec.role) {
-    const navigator = extractNavigatorFact(entries);
-    return withSubmissions(
-      await withOptionalGateProjection(
-        {
-          roleOutcome,
-          navigator,
-          artifacts: [],
-          runId: admitted.runId
-        },
-        sessionDirectory,
-        detourGateContext(admitted, scope)
-      ),
-      submissions
+  if (residual !== void 0) {
+    const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+    const failed = await settleFailureTerminalResult(
+      admitted,
+      {
+        cause: "output",
+        diagnostic: residual.diagnostic,
+        details
+      },
+      authority,
+      scope ?? {}
     );
+    return withSubmissions(failed, submissions);
   }
   return void 0;
 }

package/dist/public-cli/main.js

@@ -26701,32 +26701,29 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   const submissions = await recordedSubmissionPayloads(admitted, scope);
   const scanStart = currentAttemptStartIndex(entries);
+  let thisAttemptHasSeatSuccess = false;
+  let residual;
   for (let index = entries.length - 1; index >= scanStart; index -= 1) {
     const message = entries[index]?.message;
     if (message?.role !== "toolResult") continue;
-    const residual = boundErroredToolCandidate(
-      entries,
-      index,
-      message,
-      spec.toolName
-    );
-    if (residual !== void 0) {
-      const details = isRecord10(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(
-        admitted,
-        {
-          cause: "output",
-          diagnostic: residual.diagnostic,
-          details
-        },
-        authority,
-        scope ?? {}
+    if (message.toolName !== spec.toolName) continue;
+    if (message.isError === false) {
+      if (boundRoleToolCallForResult(entries, index, message, spec.toolName) !== void 0) {
+        thisAttemptHasSeatSuccess = true;
+      }
+      continue;
+    }
+    if (residual === void 0) {
+      residual = boundErroredToolCandidate(
+        entries,
+        index,
+        message,
+        spec.toolName
       );
-      return withSubmissions(failed, submissions);
     }
   }
   const roleOutcome = await closedLedgerOutcome(admitted, spec.role, scope);
-  if (roleOutcome?.kind === "audit_escalation") {
+  if (roleOutcome !== void 0 && (thisAttemptHasSeatSuccess || residual === void 0)) {
     const navigator = extractNavigatorFact(entries);
     return withSubmissions(
       await withOptionalGateProjection(
@@ -26742,21 +26739,19 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       submissions
     );
   }
-  if (roleOutcome?.role === spec.role) {
-    const navigator = extractNavigatorFact(entries);
-    return withSubmissions(
-      await withOptionalGateProjection(
-        {
-          roleOutcome,
-          navigator,
-          artifacts: [],
-          runId: admitted.runId
-        },
-        sessionDirectory,
-        detourGateContext(admitted, scope)
-      ),
-      submissions
+  if (residual !== void 0) {
+    const details = isRecord10(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+    const failed = await settleFailureTerminalResult(
+      admitted,
+      {
+        cause: "output",
+        diagnostic: residual.diagnostic,
+        details
+      },
+      authority,
+      scope ?? {}
     );
+    return withSubmissions(failed, submissions);
   }
   return void 0;
 }

package/dist/public-cli/settlement.js

@@ -2244,27 +2244,37 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
     const { sessionDirectory, sessionFile } = coordinates;
     const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
     const submissions = await recordedSubmissionPayloads(admitted, scope);
-    // Host isError residual wins over any recorded projection (#836 A.3 coexistence).
+    // #843: collector shape (ledger closed first) plus current user-turn freshness.
+    // A lawful bound non-error seat toolResult (isError === false + one-to-one call
+    // bind, same grade as residual) means this turn sealed — a prior bounce residual
+    // in the same turn must not outrank it. Missing isError, unbound, or mis-bound
+    // results do not establish success and do not reject/abort. A current-attempt
+    // residual without that success is this turn's own failure and must not be
+    // masked by run-scoped stale acceptance (bare resume without courtAttemptId).
+    // Same-turn accept-then-bounce keeps the success marker: terminal stays
+    // accepted; rejection facts remain on payloads/gate (not latest-wins flip).
     const scanStart = currentAttemptStartIndex(entries);
+    let thisAttemptHasSeatSuccess = false;
+    let residual;
     for (let index = entries.length - 1; index >= scanStart; index -= 1) {
         const message = entries[index]?.message;
         if (message?.role !== "toolResult")
             continue;
-        const residual = boundErroredToolCandidate(entries, index, message, spec.toolName);
-        if (residual !== undefined) {
-            const details = isRecord(residual.candidate)
-                ? residual.candidate
-                : { candidate: residual.candidate };
-            const failed = await settleFailureTerminalResult(admitted, {
-                cause: "output",
-                diagnostic: residual.diagnostic,
-                details,
-            }, authority, scope ?? {});
-            return withSubmissions(failed, submissions);
+        if (message.toolName !== spec.toolName)
+            continue;
+        if (message.isError === false) {
+            if (boundRoleToolCallForResult(entries, index, message, spec.toolName) !==
+                undefined) {
+                thisAttemptHasSeatSuccess = true;
+            }
+            continue;
+        }
+        if (residual === undefined) {
+            residual = boundErroredToolCandidate(entries, index, message, spec.toolName);
         }
     }
     const roleOutcome = await closedLedgerOutcome(admitted, spec.role, scope);
-    if (roleOutcome?.kind === "audit_escalation") {
+    if (roleOutcome !== undefined && (thisAttemptHasSeatSuccess || residual === undefined)) {
         const navigator = extractNavigatorFact(entries);
         return withSubmissions(await withOptionalGateProjection({
             roleOutcome,
@@ -2273,14 +2283,16 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
             runId: admitted.runId,
         }, sessionDirectory, detourGateContext(admitted, scope)), submissions);
     }
-    if (roleOutcome?.role === spec.role) {
-        const navigator = extractNavigatorFact(entries);
-        return withSubmissions(await withOptionalGateProjection({
-            roleOutcome,
-            navigator,
-            artifacts: [],
-            runId: admitted.runId,
-        }, sessionDirectory, detourGateContext(admitted, scope)), submissions);
+    if (residual !== undefined) {
+        const details = isRecord(residual.candidate)
+            ? residual.candidate
+            : { candidate: residual.candidate };
+        const failed = await settleFailureTerminalResult(admitted, {
+            cause: "output",
+            diagnostic: residual.diagnostic,
+            details,
+        }, authority, scope ?? {});
+        return withSubmissions(failed, submissions);
     }
     return undefined;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4276",
+  "version": "0.1.4286",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/countersign.md

@@ -44,3 +44,6 @@
 
 
 主张必须附证据或法的具体条目。finding 提类别，同类一次说全（审刑院法典·审官纪律）。
+
+案例：
+#858 seal 5 核「擅加」的手段是 rg 一串已驳旧措辞（「该席申报」「待建接缝」「typed 交卷里申报」…），旧词零命中即判「未见擅加」放行开工；放过的是同一个被驳方案换了说法的版本——「新增前置读取接缝」，其授权栏挂着陛下两句驳回。

package/src/public-cli/settlement.ts

@@ -3226,36 +3226,42 @@ async function settleLawfulSeatAcceptedTerminalResult(
   const { sessionDirectory, sessionFile } = coordinates;
   const entries = await readLawfulSettlementEntries(sessionFile) ?? [];
   const submissions = await recordedSubmissionPayloads(admitted, scope);
-  // Host isError residual wins over any recorded projection (#836 A.3 coexistence).
+  // #843: collector shape (ledger closed first) plus current user-turn freshness.
+  // A lawful bound non-error seat toolResult (isError === false + one-to-one call
+  // bind, same grade as residual) means this turn sealed — a prior bounce residual
+  // in the same turn must not outrank it. Missing isError, unbound, or mis-bound
+  // results do not establish success and do not reject/abort. A current-attempt
+  // residual without that success is this turn's own failure and must not be
+  // masked by run-scoped stale acceptance (bare resume without courtAttemptId).
+  // Same-turn accept-then-bounce keeps the success marker: terminal stays
+  // accepted; rejection facts remain on payloads/gate (not latest-wins flip).
   const scanStart = currentAttemptStartIndex(entries);
+  let thisAttemptHasSeatSuccess = false;
+  let residual: BoundErroredToolCandidate | undefined;
   for (let index = entries.length - 1; index >= scanStart; index -= 1) {
     const message = entries[index]?.message;
     if (message?.role !== "toolResult") continue;
-    const residual = boundErroredToolCandidate(
-      entries,
-      index,
-      message,
-      spec.toolName,
-    );
-    if (residual !== undefined) {
-      const details = isRecord(residual.candidate)
-        ? residual.candidate
-        : { candidate: residual.candidate };
-      const failed = await settleFailureTerminalResult(
-        admitted,
-        {
-          cause: "output",
-          diagnostic: residual.diagnostic,
-          details,
-        },
-        authority,
-        scope ?? {},
+    if (message.toolName !== spec.toolName) continue;
+    if (message.isError === false) {
+      if (
+        boundRoleToolCallForResult(entries, index, message, spec.toolName) !==
+          undefined
+      ) {
+        thisAttemptHasSeatSuccess = true;
+      }
+      continue;
+    }
+    if (residual === undefined) {
+      residual = boundErroredToolCandidate(
+        entries,
+        index,
+        message,
+        spec.toolName,
       );
-      return withSubmissions(failed, submissions);
     }
   }
   const roleOutcome = await closedLedgerOutcome(admitted, spec.role as TerminalRoleName, scope);
-  if (roleOutcome?.kind === "audit_escalation") {
+  if (roleOutcome !== undefined && (thisAttemptHasSeatSuccess || residual === undefined)) {
     const navigator = extractNavigatorFact(entries);
     return withSubmissions(
       await withOptionalGateProjection(
@@ -3271,21 +3277,21 @@ async function settleLawfulSeatAcceptedTerminalResult(
       submissions,
     );
   }
-  if (roleOutcome?.role === spec.role) {
-    const navigator = extractNavigatorFact(entries);
-    return withSubmissions(
-      await withOptionalGateProjection(
-        {
-          roleOutcome,
-          navigator,
-          artifacts: [],
-          runId: admitted.runId,
-        },
-        sessionDirectory,
-        detourGateContext(admitted, scope),
-      ),
-      submissions,
+  if (residual !== undefined) {
+    const details = isRecord(residual.candidate)
+      ? residual.candidate
+      : { candidate: residual.candidate };
+    const failed = await settleFailureTerminalResult(
+      admitted,
+      {
+        cause: "output",
+        diagnostic: residual.diagnostic,
+        details,
+      },
+      authority,
+      scope ?? {},
     );
+    return withSubmissions(failed, submissions);
   }
   return undefined;
 }