@akagilnc/pi-workflow-roles 0.1.4363 → 0.1.4387

package/dist/acp-host/production-host.js

@@ -1354,9 +1354,268 @@ var init_gatekeeper_output = __esm({
   }
 });
 
+// src/gatekeeper-role.ts
+function gateSeatLabel(stage) {
+  if (stage === "inspector") return "\u53F0\u9662";
+  if (stage === "auditor") return "\u5BA1\u5211\u9662";
+  return "\u7B26\u5B9D\u90CE";
+}
+function gateOfficerForSubject(subject) {
+  if (subject.kind === "worker_completion") return "inspector";
+  if (subject.kind === "judge_compliance") return "auditor";
+  return "notary";
+}
+function failureReason(error) {
+  if (error instanceof AggregateError) return error.errors.map(failureReason).join("; ");
+  return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+}
+function retainedReceipt(decision) {
+  return decision;
+}
+function readRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+  return value;
+}
+function projectOfficerDecision(officer, decision, fallbackStatus) {
+  const receipt = retainedReceipt(decision);
+  const record4 = readRecord(decision);
+  const status = (record4 !== void 0 && typeof record4.status === "string" ? record4.status : void 0) ?? fallbackStatus;
+  if (status === "pass") {
+    return { status: "pass", officer, receipt };
+  }
+  if (status === "bounce" || status === "escalate") {
+    return { status, officer, receipt };
+  }
+  return { status: "needs_reask", officer, receipt };
+}
+function thisCourtOfficerPayloads(terminal) {
+  const outcome = terminal?.roleOutcome;
+  if (outcome !== void 0 && (outcome.kind === "accepted" || outcome.kind === "audit_escalation")) {
+    if (outcome.payloads !== void 0 && outcome.payloads.length > 0) return outcome.payloads;
+  }
+  if (outcome?.kind === "failure" && outcome.payloads !== void 0 && outcome.payloads.length > 0) {
+    return outcome.payloads;
+  }
+  return [];
+}
+function officerFailurePayloads(terminal) {
+  const outcome = terminal?.roleOutcome;
+  if (outcome?.kind === "failure") return outcome.payloads ?? terminal?.submissions ?? [];
+  return terminal?.submissions ?? [];
+}
+function projectOfficerPayloads(officer, payloads, fallbackStatus) {
+  if (payloads.length === 0) {
+    return projectOfficerDecision(officer, void 0, fallbackStatus);
+  }
+  return projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
+}
+function projectOfficerTerminal(officer, summoned) {
+  const terminal = summoned.terminal;
+  const outcome = terminal?.roleOutcome;
+  const thisCourt = thisCourtOfficerPayloads(terminal);
+  if (outcome === void 0) {
+    const detail = summoned.stderr ?? "";
+    const failurePayloads = officerFailurePayloads(terminal);
+    return {
+      status: "transport_failure",
+      stage: officer,
+      reason: detail.length > 0 ? `${gateSeatLabel(officer)} public summon exit ${summoned.exitCode}: ${detail}` : `${gateSeatLabel(officer)} public summon produced no terminal (exit ${summoned.exitCode})`,
+      submission: failurePayloads.length > 0 ? failurePayloads : summoned
+    };
+  }
+  if (outcome.kind === "no_receipt") {
+    return {
+      status: "no_receipt",
+      stage: officer,
+      reason: typeof outcome.status === "string" && outcome.status.length > 0 ? outcome.status : "no_receipt",
+      facts: outcome
+    };
+  }
+  if (outcome.kind === "failure") {
+    const failurePayloads = officerFailurePayloads(terminal);
+    return {
+      status: "transport_failure",
+      stage: officer,
+      reason: outcome.diagnostic,
+      submission: failurePayloads.length > 0 ? failurePayloads : outcome.decisiveFacts
+    };
+  }
+  if (outcome.kind === "audit_escalation") {
+    return {
+      status: "escalate",
+      officer,
+      // This-court receipt only (#879) — historical rows remain on terminal.submissions.
+      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+    };
+  }
+  if (outcome.kind === "accepted") {
+    return projectOfficerPayloads(officer, thisCourt, outcome.status);
+  }
+  return {
+    status: "needs_reask",
+    officer,
+    // This-court receipt only (#879).
+    receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+  };
+}
+async function projectGatekeeperRun(options) {
+  const officer = gateOfficerForSubject(options.subject);
+  const runDirectory = options.runDirectory ?? auditorRunDirectory(options.context);
+  if (runDirectory === void 0) {
+    return {
+      officer,
+      result: {
+        status: "transport_failure",
+        stage: officer,
+        reason: `${gateSeatLabel(officer)} requires a parent run directory pointer`
+      }
+    };
+  }
+  let summoned;
+  try {
+    summoned = await options.summonOfficer(
+      officer,
+      runDirectory,
+      options.signal,
+      options.reask,
+      options.submission
+    );
+  } catch (error) {
+    return {
+      officer,
+      result: { status: "transport_failure", stage: officer, reason: failureReason(error) }
+    };
+  }
+  return {
+    officer,
+    result: projectOfficerTerminal(officer, summoned),
+    summoned
+  };
+}
+var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK;
+var init_gatekeeper_role = __esm({
+  "src/gatekeeper-role.ts"() {
+    "use strict";
+    init_auditor_dossier_tool();
+    init_submission_errors();
+    init_inspector_contracts();
+    init_gatekeeper_output();
+    init_submission_errors();
+    GATEKEEPER_TOOL_SPEC = {
+      name: GATEKEEPER_OUTPUT_TOOL_NAME,
+      label: "\u95E8\u4E0B\u7701\u51B3\u8BAE",
+      description: "\u95E8\u4E0B\u7701\u7EC8\u5C40\u51B3\u8BAE\uFF0C\u72B6\u6001\u4E3A dispatch \u6216 pass\u3002",
+      promptSnippet: "\u95E8\u4E0B\u7701\u51B3\u8BAE",
+      parameters: gatekeeperOutputSchema
+    };
+    OFFICER_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684\u7ED3\u8BBA\u4E0D\u662F pass\u3001bounce\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0C\u7ED3\u8BBA\u5B57\u6BB5\u5199\u660E\u5176\u4E00\uFF1B\u6253\u56DE\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
+  }
+});
+
+// src/session-assistant-usage.ts
+var session_assistant_usage_exports = {};
+__export(session_assistant_usage_exports, {
+  readAssistantUsageFromSessionFile: () => readAssistantUsageFromSessionFile,
+  sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
+  usageFromPublicSummon: () => usageFromPublicSummon
+});
+import { join as join8 } from "node:path";
+async function readAssistantUsageFromSessionFile(sessionFile) {
+  const { readFile: readFile25 } = await import("node:fs/promises");
+  let text;
+  try {
+    text = await readFile25(sessionFile, "utf8");
+  } catch (error) {
+    if (error?.code === "ENOENT") return void 0;
+    throw error;
+  }
+  let rows;
+  try {
+    rows = text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
+  } catch (error) {
+    throw new Error(
+      `session usage parse failed (${sessionFile}): ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error }
+    );
+  }
+  let total = 0;
+  let input = 0;
+  let output = 0;
+  let cacheRead = 0;
+  let cacheWrite = 0;
+  let costInput = 0;
+  let costOutput = 0;
+  let costCacheRead = 0;
+  let costCacheWrite = 0;
+  let costTotal = 0;
+  let sawCost = false;
+  for (const row of rows) {
+    if (row.type !== "message" || row.message?.role !== "assistant") continue;
+    const usage = row.message.usage;
+    if (usage === void 0) continue;
+    total += usage.totalTokens ?? 0;
+    input += usage.input ?? 0;
+    output += usage.output ?? 0;
+    cacheRead += usage.cacheRead ?? 0;
+    cacheWrite += usage.cacheWrite ?? 0;
+    if (usage.cost !== void 0) {
+      sawCost = true;
+      costInput += usage.cost.input ?? 0;
+      costOutput += usage.cost.output ?? 0;
+      costCacheRead += usage.cost.cacheRead ?? 0;
+      costCacheWrite += usage.cost.cacheWrite ?? 0;
+      costTotal += usage.cost.total ?? 0;
+    }
+  }
+  if (total <= 0 && input <= 0 && output <= 0) return void 0;
+  const base = {
+    input,
+    output,
+    cacheRead,
+    cacheWrite,
+    totalTokens: total > 0 ? total : input + output + cacheRead + cacheWrite
+  };
+  if (!sawCost) return base;
+  return {
+    ...base,
+    cost: {
+      input: costInput,
+      output: costOutput,
+      cacheRead: costCacheRead,
+      cacheWrite: costCacheWrite,
+      total: costTotal
+    }
+  };
+}
+function sessionFileFromPublicSummon(summoned) {
+  if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
+    return join8(summoned.runDirectory, "session", "session.jsonl");
+  }
+  const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
+  if (fromArtifacts !== void 0) return fromArtifacts;
+  const outcome = summoned.terminal?.roleOutcome;
+  if (outcome === void 0) return void 0;
+  const facts = outcome.decisiveFacts;
+  const pointer = facts?.runPointer;
+  if (typeof pointer === "string" && pointer.trim() !== "") {
+    return join8(pointer, "session", "session.jsonl");
+  }
+  return void 0;
+}
+async function usageFromPublicSummon(summoned) {
+  const sessionFile = sessionFileFromPublicSummon(summoned);
+  if (sessionFile === void 0) return void 0;
+  return readAssistantUsageFromSessionFile(sessionFile);
+}
+var init_session_assistant_usage = __esm({
+  "src/session-assistant-usage.ts"() {
+    "use strict";
+  }
+});
+
 // src/package-resources/engine-material.ts
 import { existsSync as existsSync2, readdirSync as readdirSync2 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 function pickEngineAxis(source) {
   return {
     ...source.engine === void 0 ? {} : { engine: source.engine },
@@ -1377,11 +1636,11 @@ function isEngineNameSyntax(name) {
   return true;
 }
 function resolveEngineMaterialDirectory(packageRoot) {
-  return join8(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
+  return join9(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
 }
 function resolveEngineMaterialPath(packageRoot, name) {
   const legal = assertLegalEngineName(name);
-  return join8(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
+  return join9(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
 }
 function assertLegalEngineName(name) {
   if (!isEngineNameSyntax(name)) {
@@ -1439,7 +1698,7 @@ __export(durable_principal_exports, {
   piDurablePrincipalAuthority: () => piDurablePrincipalAuthority
 });
 import { lstat } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 function encode(coordinates) {
   return coordinates;
 }
@@ -1489,7 +1748,7 @@ var init_durable_principal = __esm({
         }
         return {
           sessionDirectory: record4.sessionDirectory,
-          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join9(record4.sessionDirectory, "session.jsonl")
+          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join10(record4.sessionDirectory, "session.jsonl")
         };
       },
       async isAvailable(principal) {
@@ -2259,6 +2518,17 @@ var init_diarist_contracts = __esm({
   }
 });
 
+// src/secretariat-contracts.ts
+var SECRETARIAT_OUTPUT_TOOL_NAME, SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME, SECRETARIAT_ACCEPTED_TEXT;
+var init_secretariat_contracts = __esm({
+  "src/secretariat-contracts.ts"() {
+    "use strict";
+    SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
+    SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME = "ak_secretariat_summon_countersign";
+    SECRETARIAT_ACCEPTED_TEXT = "\u4E2D\u4E66\u7701\u56DE\u6267\u5DF2\u63A5\u53D7";
+  }
+});
+
 // src/packaged-role-registry.ts
 function packagedRoleMetadata(role) {
   return PACKAGED_ROLE_REGISTRY.find((entry) => entry.role === role);
@@ -2290,10 +2560,12 @@ var init_packaged_role_registry = __esm({
     init_inspector_contracts();
     init_auditor_output();
     init_diarist_contracts();
+    init_secretariat_contracts();
     NOTARY_SESSION_MATERIALS = [
       "CLAUDE.md",
       "souls/notary.md",
       "souls/audit-law.md",
+      "souls/ticket-law.md",
       "souls/gate-output-guide.md"
     ];
     INSPECTOR_SESSION_MATERIALS = [
@@ -2416,7 +2688,24 @@ var init_packaged_role_registry = __esm({
         inputFlag: void 0,
         phaseFlag: void 0,
         activationStage: "load-and-install",
-        sessionMaterials: ["CLAUDE.md", "souls/countersign.md"]
+        // #924: 公用《票面法》三席同装
+        sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md"]
+      },
+      {
+        role: "secretariat",
+        phases: [null],
+        outputTool: SECRETARIAT_OUTPUT_TOOL_NAME,
+        inputFlag: void 0,
+        phaseFlag: void 0,
+        activationStage: "load-and-install",
+        // #924: owner-finalized Soul + 票面法 + 给事中/符宝郎行为指南
+        sessionMaterials: [
+          "CLAUDE.md",
+          "souls/secretariat.md",
+          "souls/ticket-law.md",
+          "souls/countersign.md",
+          "souls/notary.md"
+        ]
       },
       {
         role: "gleaner-left",
@@ -2582,7 +2871,7 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname5, join as join10 } from "node:path";
+import { dirname as dirname5, join as join11 } from "node:path";
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -2710,8 +2999,8 @@ function resolveSitianVolumeCategory(kind) {
   return kind;
 }
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
-  const sessionDir = join10(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join10(sessionDir, SITIAN_RECORDS_LEAF) };
+  const sessionDir = join11(activationBookDirectory(ledgerHome, bookKey), ticketId);
+  return { sessionDir, recordFile: join11(sessionDir, SITIAN_RECORDS_LEAF) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
@@ -2730,14 +3019,14 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join10(dirname5(input.sessionParent), category);
-    recordFile = join10(sessionDir, SITIAN_RECORDS_LEAF);
+    sessionDir = join11(dirname5(input.sessionParent), category);
+    recordFile = join11(sessionDir, SITIAN_RECORDS_LEAF);
   }
   return { sessionDir, recordFile, ledgerHome };
 }
 function projectTicketRecordsPathShape() {
   const { recordFile } = ticketProvenanceUnderBookPaths(
-    join10("~", ".ak-roles"),
+    join11("~", ".ak-roles"),
     "<\u7C3F>",
     "<\u7968\u53F7>"
   );
@@ -2873,12 +3162,12 @@ __export(role_turn_host_exports, {
 import { execFile, spawn as spawn2 } from "node:child_process";
 import { constants } from "node:fs";
 import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
-import { basename as basename3, delimiter, dirname as dirname6, isAbsolute as isAbsolute3, join as join11, resolve as resolve5 } from "node:path";
+import { basename as basename3, delimiter, dirname as dirname6, isAbsolute as isAbsolute3, join as join12, resolve as resolve5 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot) {
-  return join11(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
+  return join12(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -3269,155 +3558,54 @@ var init_host_descriptions = __esm({
         modelPassing: "set_model",
         boundResume: "session/load",
         sessionBindingFile: "hermes-acp-session.json",
-        childEnv: Object.freeze({}),
-        seatProfileSoul: Object.freeze({
-          flag: "-p",
-          namePrefix: "ak-",
-          profilesRootFromHome: Object.freeze([".hermes", "profiles"]),
-          soulFileName: "SOUL.md"
-        })
-      })
-    });
-    HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
-      "claude": Object.freeze({
-        protocol: "claude-print",
-        binaryFromHome: Object.freeze([".local", "bin", "claude"]),
-        sessionBindingFile: "claude-headless-session.json",
-        fixedArgs: Object.freeze([
-          // Live NDJSON events → sitian host-session records (#811); last line is the result receipt.
-          "--output-format",
-          "stream-json",
-          // Intermediate assistant/tool/system events require verbose with stream-json.
-          "--verbose",
-          "--permission-mode",
-          "bypassPermissions",
-          // Empty sources: no user/project/local operator surface (envelope owns materials).
-          "--setting-sources",
-          "",
-          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
-          "--strict-mcp-config"
-        ]),
-        promptFlag: "-p",
-        modelFlag: "--model",
-        effortFlag: "--effort",
-        // File path keeps large role envelopes off ARG_MAX.
-        systemPromptFlag: "--system-prompt-file",
-        jsonSchemaFlag: "--json-schema",
-        mcpConfigFlag: "--mcp-config",
-        sessionIdFlag: "--session-id",
-        resumeFlag: "--resume"
-      }),
-      /**
-       * Codex headless (#646). Binary under operator home; auth stays in CODEX_HOME.
-       * Argv/parse/schema-close are codex-exec helpers — not Claude flag mapping.
-       */
-      "codex": Object.freeze({
-        protocol: "codex-exec",
-        binaryFromHome: Object.freeze([".local", "bin", "codex"]),
-        sessionBindingFile: "codex-headless-session.json"
-      })
-    });
-  }
-});
-
-// src/session-assistant-usage.ts
-var session_assistant_usage_exports = {};
-__export(session_assistant_usage_exports, {
-  readAssistantUsageFromSessionFile: () => readAssistantUsageFromSessionFile,
-  sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
-  usageFromPublicSummon: () => usageFromPublicSummon
-});
-import { join as join12 } from "node:path";
-async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile25 } = await import("node:fs/promises");
-  let text;
-  try {
-    text = await readFile25(sessionFile, "utf8");
-  } catch (error) {
-    if (error?.code === "ENOENT") return void 0;
-    throw error;
-  }
-  let rows;
-  try {
-    rows = text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
-  } catch (error) {
-    throw new Error(
-      `session usage parse failed (${sessionFile}): ${error instanceof Error ? error.message : String(error)}`,
-      { cause: error }
-    );
-  }
-  let total = 0;
-  let input = 0;
-  let output = 0;
-  let cacheRead = 0;
-  let cacheWrite = 0;
-  let costInput = 0;
-  let costOutput = 0;
-  let costCacheRead = 0;
-  let costCacheWrite = 0;
-  let costTotal = 0;
-  let sawCost = false;
-  for (const row of rows) {
-    if (row.type !== "message" || row.message?.role !== "assistant") continue;
-    const usage = row.message.usage;
-    if (usage === void 0) continue;
-    total += usage.totalTokens ?? 0;
-    input += usage.input ?? 0;
-    output += usage.output ?? 0;
-    cacheRead += usage.cacheRead ?? 0;
-    cacheWrite += usage.cacheWrite ?? 0;
-    if (usage.cost !== void 0) {
-      sawCost = true;
-      costInput += usage.cost.input ?? 0;
-      costOutput += usage.cost.output ?? 0;
-      costCacheRead += usage.cost.cacheRead ?? 0;
-      costCacheWrite += usage.cost.cacheWrite ?? 0;
-      costTotal += usage.cost.total ?? 0;
-    }
-  }
-  if (total <= 0 && input <= 0 && output <= 0) return void 0;
-  const base = {
-    input,
-    output,
-    cacheRead,
-    cacheWrite,
-    totalTokens: total > 0 ? total : input + output + cacheRead + cacheWrite
-  };
-  if (!sawCost) return base;
-  return {
-    ...base,
-    cost: {
-      input: costInput,
-      output: costOutput,
-      cacheRead: costCacheRead,
-      cacheWrite: costCacheWrite,
-      total: costTotal
-    }
-  };
-}
-function sessionFileFromPublicSummon(summoned) {
-  if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join12(summoned.runDirectory, "session", "session.jsonl");
-  }
-  const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
-  if (fromArtifacts !== void 0) return fromArtifacts;
-  const outcome = summoned.terminal?.roleOutcome;
-  if (outcome === void 0) return void 0;
-  const facts = outcome.decisiveFacts;
-  const pointer = facts?.runPointer;
-  if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join12(pointer, "session", "session.jsonl");
-  }
-  return void 0;
-}
-async function usageFromPublicSummon(summoned) {
-  const sessionFile = sessionFileFromPublicSummon(summoned);
-  if (sessionFile === void 0) return void 0;
-  return readAssistantUsageFromSessionFile(sessionFile);
-}
-var init_session_assistant_usage = __esm({
-  "src/session-assistant-usage.ts"() {
-    "use strict";
+        childEnv: Object.freeze({}),
+        seatProfileSoul: Object.freeze({
+          flag: "-p",
+          namePrefix: "ak-",
+          profilesRootFromHome: Object.freeze([".hermes", "profiles"]),
+          soulFileName: "SOUL.md"
+        })
+      })
+    });
+    HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
+      "claude": Object.freeze({
+        protocol: "claude-print",
+        binaryFromHome: Object.freeze([".local", "bin", "claude"]),
+        sessionBindingFile: "claude-headless-session.json",
+        fixedArgs: Object.freeze([
+          // Live NDJSON events → sitian host-session records (#811); last line is the result receipt.
+          "--output-format",
+          "stream-json",
+          // Intermediate assistant/tool/system events require verbose with stream-json.
+          "--verbose",
+          "--permission-mode",
+          "bypassPermissions",
+          // Empty sources: no user/project/local operator surface (envelope owns materials).
+          "--setting-sources",
+          "",
+          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
+          "--strict-mcp-config"
+        ]),
+        promptFlag: "-p",
+        modelFlag: "--model",
+        effortFlag: "--effort",
+        // File path keeps large role envelopes off ARG_MAX.
+        systemPromptFlag: "--system-prompt-file",
+        jsonSchemaFlag: "--json-schema",
+        mcpConfigFlag: "--mcp-config",
+        sessionIdFlag: "--session-id",
+        resumeFlag: "--resume"
+      }),
+      /**
+       * Codex headless (#646). Binary under operator home; auth stays in CODEX_HOME.
+       * Argv/parse/schema-close are codex-exec helpers — not Claude flag mapping.
+       */
+      "codex": Object.freeze({
+        protocol: "codex-exec",
+        binaryFromHome: Object.freeze([".local", "bin", "codex"]),
+        sessionBindingFile: "codex-headless-session.json"
+      })
+    });
   }
 });
 
@@ -3985,6 +4173,8 @@ function acceptedFacts(toolName, details) {
       return typeof record4.judgeStatus === "string" ? { status: record4.judgeStatus } : {};
     case COUNTERSIGN_OUTPUT_TOOL_NAME:
       return typeof record4.countersignStatus === "string" ? { status: record4.countersignStatus } : {};
+    case SECRETARIAT_OUTPUT_TOOL_NAME:
+      return typeof record4.secretariatStatus === "string" ? { status: record4.secretariatStatus } : {};
     case MERGER_OUTPUT_TOOL_NAME: {
       const status = typeof record4.status === "string" ? record4.status : void 0;
       return {
@@ -4016,6 +4206,7 @@ var init_terminating_tools = __esm({
     init_gleaner_left_contracts();
     init_inspector_contracts();
     init_diarist_contracts();
+    init_secretariat_contracts();
     init_worker_output();
     TERMINATING_TOOL_NAMES = [
       CODER_OUTPUT_TOOL_NAME,
@@ -4032,7 +4223,8 @@ var init_terminating_tools = __esm({
       GATEKEEPER_OUTPUT_TOOL_NAME,
       NAVIGATOR_OUTPUT_TOOL_NAME,
       AUDITOR_OUTPUT_TOOL_NAME,
-      DIARIST_OUTPUT_TOOL_NAME
+      DIARIST_OUTPUT_TOOL_NAME,
+      SECRETARIAT_OUTPUT_TOOL_NAME
     ];
     AcceptedDetailsContractError = class extends CorrectableSubmissionError {
       code = "accepted_details_contract";
@@ -5352,7 +5544,7 @@ async function readRoleRunStateDisk(runDirectory) {
   if (typeof record4.runId !== "string" || record4.runId.trim() === "") {
     return void 0;
   }
-  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector" && record4.role !== "gatekeeper" && record4.role !== "navigator" && record4.role !== "auditor" && record4.role !== "diarist") {
+  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector" && record4.role !== "gatekeeper" && record4.role !== "navigator" && record4.role !== "auditor" && record4.role !== "diarist" && record4.role !== "secretariat") {
     return void 0;
   }
   if (record4.state !== "admitted" && record4.state !== "running" && record4.state !== "resumable" && record4.state !== "terminal") {
@@ -6165,6 +6357,24 @@ async function loadResumableJudgeRun(home, runId, authority) {
   };
   return seatLoadedResult(loaded, admitted);
 }
+async function loadResumableCountersignRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "countersign") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not countersign`
+    );
+  }
+  const base = resumedBaseAdmitted(loaded);
+  const admitted = {
+    role: "countersign",
+    ...base,
+    ...base.courtTicketNumbers === void 0 ? {} : { courtTicketNumbers: base.courtTicketNumbers },
+    ...loaded.admittedFields.courtTicketNumbersDamage === void 0 ? {} : {
+      courtTicketNumbersDamage: loaded.admittedFields.courtTicketNumbersDamage
+    }
+  };
+  return seatLoadedResult(loaded, admitted);
+}
 async function loadResumableInstructionSeatRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
   if (loaded.run.role !== "gatekeeper" && loaded.run.role !== "navigator" && loaded.run.role !== "auditor") {
@@ -6610,7 +6820,7 @@ function createTypedOptionConsumer(definitions) {
     }
   };
 }
-var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, GATEKEEPER_OPTIONS, NAVIGATOR_OPTIONS, AUDITOR_OPTIONS, COUNTERSIGN_OPTIONS, DIARIST_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
+var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, GATEKEEPER_OPTIONS, NAVIGATOR_OPTIONS, AUDITOR_OPTIONS, COUNTERSIGN_OPTIONS, DIARIST_OPTIONS, SECRETARIAT_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
 var init_option_definitions = __esm({
   "src/public-cli/option-definitions.ts"() {
     "use strict";
@@ -6823,6 +7033,10 @@ var init_option_definitions = __esm({
       bindOwner("diarist", SHARED_PROJECT_SEMANTICS),
       bindOwner("diarist", SHARED_ATTACH_SEMANTICS)
     ];
+    SECRETARIAT_OPTIONS = [
+      bindOwner("secretariat", SHARED_PROJECT_SEMANTICS),
+      bindOwner("secretariat", SHARED_ATTACH_SEMANTICS)
+    ];
     CODER_OPTIONS = [
       {
         id: "phase",
@@ -7185,6 +7399,7 @@ var init_option_definitions = __esm({
       navigator: NAVIGATOR_OPTIONS,
       auditor: AUDITOR_OPTIONS,
       diarist: DIARIST_OPTIONS,
+      secretariat: SECRETARIAT_OPTIONS,
       analyst: ANALYST_OPTIONS
     };
     TOP_LEVEL_HELP = {
@@ -7321,6 +7536,14 @@ var init_option_definitions = __esm({
           'ak-role diarist --attach ./design.md "\u8865\u5F55\u672C\u8F6E\u8BBE\u8BA1\u4FEE\u8BA2\u3002"'
         ]
       },
+      secretariat: {
+        command: "secretariat",
+        summary: "Secretariat (\u4E2D\u4E66\u7701): rewrite ticket per \u7968\u9762\u6CD5 and drive countersign to converged or escalate.",
+        usage: ["ak-role secretariat [options] [instruction]"],
+        examples: [
+          'ak-role secretariat "\u6574\u7406 #924 \u7968\u9762\u5E76\u9001\u5EAD\u3002"'
+        ]
+      },
       notary: {
         command: "notary",
         summary: "Direct Notary document check (quote fidelity + ticket alignment); zero prompt/attachment.",
@@ -7431,6 +7654,7 @@ __export(invocation_exports, {
   admitNavigatorInvocation: () => admitNavigatorInvocation,
   admitNotaryInvocation: () => admitNotaryInvocation,
   admitReviewerInvocation: () => admitReviewerInvocation,
+  admitSecretariatInvocation: () => admitSecretariatInvocation,
   bindAdmittedTicketNumber: () => bindAdmittedTicketNumber,
   bindCourtTicketNumbersOnAdmitted: () => bindCourtTicketNumbersOnAdmitted,
   bindTicketNumberOnRunDirectory: () => bindTicketNumberOnRunDirectory,
@@ -7446,6 +7670,7 @@ __export(invocation_exports, {
   buildMergerTransportPrompt: () => buildMergerTransportPrompt,
   buildNotaryTransportPrompt: () => buildNotaryTransportPrompt,
   buildReviewerTransportPrompt: () => buildReviewerTransportPrompt,
+  buildSecretariatTransportPrompt: () => buildSecretariatTransportPrompt,
   deriveMergerEnvelopeFromActiveMerge: () => deriveMergerEnvelopeFromActiveMerge,
   ensureRunArtifactsDir: () => ensureRunArtifactsDir,
   freezeAttachmentsIntoRun: () => freezeAttachmentsIntoRun,
@@ -7473,6 +7698,7 @@ __export(invocation_exports, {
   parseNotaryArgv: () => parseNotaryArgv,
   parsePositiveTicketNumber: () => parsePositiveTicketNumber,
   parseReviewerArgv: () => parseReviewerArgv,
+  parseSecretariatArgv: () => parseSecretariatArgv,
   persistAdmittedSourceRunPath: () => persistAdmittedSourceRunPath,
   recordEffectiveInvocationModel: () => recordEffectiveInvocationModel,
   recordLaunchedPiIdentity: () => recordLaunchedPiIdentity,
@@ -7902,6 +8128,9 @@ function parseAuditorArgv(args) {
 function parseDiaristArgv(args) {
   return parseInstructionArgv(args, "diarist");
 }
+function parseSecretariatArgv(args) {
+  return parseInstructionArgv(args, "secretariat");
+}
 function parseCoderArgv(args) {
   const attachmentPaths = [];
   let project;
@@ -8135,6 +8364,9 @@ async function admitAuditorInvocation(options) {
 async function admitDiaristInvocation(options) {
   return admitStandardMaterialInvocation("diarist", options);
 }
+async function admitSecretariatInvocation(options) {
+  return admitStandardMaterialInvocation("secretariat", options);
+}
 function buildInstructionTransportPrompt(admitted, engineMaterial) {
   const lines = [admitted.instructionEmpty ? "" : admitted.instruction];
   if (admitted.attachments.length > 0) {
@@ -8149,6 +8381,9 @@ function buildInstructionTransportPrompt(admitted, engineMaterial) {
 function buildJudgeTransportPrompt(admitted, engineMaterial) {
   return buildInstructionTransportPrompt(admitted, engineMaterial);
 }
+function buildSecretariatTransportPrompt(admitted, engineMaterial) {
+  return buildInstructionTransportPrompt(admitted, engineMaterial);
+}
 function buildInspectorTransportPrompt(admitted, engineMaterial) {
   return buildInstructionTransportPrompt(admitted, engineMaterial);
 }
@@ -14327,6 +14562,7 @@ __export(settlement_exports, {
   trySettleNavigatorTerminalResult: () => trySettleNavigatorTerminalResult,
   trySettleNotaryTerminalResult: () => trySettleNotaryTerminalResult,
   trySettleReviewerTerminalResult: () => trySettleReviewerTerminalResult,
+  trySettleSecretariatTerminalResult: () => trySettleSecretariatTerminalResult,
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
@@ -16165,6 +16401,15 @@ async function settleLawfulDiaristTerminalResult(admitted, authority, scope) {
 async function trySettleDiaristTerminalResult(admitted, authority, scope) {
   return settleLawfulDiaristTerminalResult(admitted, authority, scope);
 }
+async function settleLawfulSecretariatTerminalResult(admitted, authority, scope) {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
+    role: "secretariat",
+    toolName: SECRETARIAT_OUTPUT_TOOL_NAME
+  }, scope);
+}
+async function trySettleSecretariatTerminalResult(admitted, authority, scope) {
+  return settleLawfulSecretariatTerminalResult(admitted, authority, scope);
+}
 async function settleLawfulInspectorTerminalResult(admitted, authority, scope) {
   return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "inspector",
@@ -16791,6 +17036,7 @@ var init_settlement = __esm({
     init_countersign_contracts();
     init_gleaner_left_contracts();
     init_diarist_contracts();
+    init_secretariat_contracts();
     init_inspector_contracts();
     init_gatekeeper_output();
     init_navigator_output();
@@ -18590,7 +18836,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
     ...env.model === void 0 ? {} : { model: env.model },
     ...pickEngineAxis(env),
     ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...admitted.correlationId === void 0 && env.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? env.correlationId },
+    ...env.correlationId === void 0 && admitted.correlationId === void 0 ? {} : { correlationId: env.correlationId ?? admitted.correlationId },
     continuation: {
       kind: "resume",
       prompt
@@ -18747,10 +18993,7 @@ async function runPostAdmissionSeatResume(input) {
           dispatch: async (turnRequest) => {
             const result = await dispatchPostAdmissionTurn({
               admitted: loaded.admitted,
-              env: {
-                ...input.env,
-                ...loaded.admitted.correlationId === void 0 ? {} : { correlationId: loaded.admitted.correlationId }
-              },
+              env: input.env,
               io: attemptIo,
               request: turnRequest,
               lease,
@@ -19845,12 +20088,294 @@ function diaristAdapters(env) {
     afterDispatch: async (admitted, lease) => {
       await bindAndRelocateDiaristIfBoardBound(admitted, env.principalAuthority, lease);
     }
-  };
+  };
+}
+async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
+  let parsed;
+  try {
+    parsed = parseDiaristArgv2(argv);
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  const projectRoot = parsed.project ?? env.cwd;
+  const handoffTicket = env.boundTicketNumber;
+  if (typeof handoffTicket === "number" && Number.isSafeInteger(handoffTicket) && handoffTicket >= 1) {
+    const summons = {
+      instruction: parsed.instruction,
+      instructionEmpty: parsed.instruction.trim() === "",
+      attachmentPaths: parsed.attachmentPaths
+    };
+    const resumed = await tryResumeSameTicketSeatRun({
+      home: env.home,
+      projectRoot,
+      role: "diarist",
+      ticketNumber: handoffTicket,
+      freshSummons: env.freshSummons,
+      summons,
+      resume: (runId, materials) => runPublicDiaristResume(
+        { runId, ...materials === void 0 ? {} : { summons: materials } },
+        env,
+        io
+      )
+    });
+    if (resumed !== void 0) return resumed;
+  }
+  let admitted;
+  try {
+    admitted = await admitDiaristInvocation({
+      home: env.home,
+      principalAuthority: env.principalAuthority,
+      cwd: env.cwd,
+      instruction: parsed.instruction,
+      attachmentPaths: parsed.attachmentPaths,
+      ...parsed.project === void 0 ? {} : { project: parsed.project },
+      ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
+      ...env.model === void 0 ? {} : { model: env.model },
+      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
+      ...handoffTicket === void 0 ? {} : { assertedTicketNumber: handoffTicket }
+    });
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  await markRunAdmitted(admitted, env.principalAuthority);
+  const turnProjection = {
+    packageRoot: env.packageRoot,
+    home: env.home,
+    agentDir: env.agentDir,
+    ...env.model === void 0 ? {} : { model: env.model },
+    ...pickEngineAxis(env),
+    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
+    ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
+    continuation: {
+      kind: "initial",
+      prompt: buildInstructionTransportPrompt(
+        admitted,
+        engineSessionMaterialFromOptions({
+          ...pickEngineAxis(env),
+          packageRoot: env.packageRoot
+        })
+      )
+    }
+  };
+  const turnRequest = buildDiaristTurnRequest(admitted, turnProjection);
+  return await runPostAdmissionOneShot({
+    admitted,
+    env,
+    io,
+    request: turnRequest,
+    adapters: diaristAdapters(env),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+async function runPublicDiaristResume(request, env, io) {
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: (effective) => loadResumableDiaristRun(env.home, effective.runId, env.principalAuthority),
+    buildTurnRequest: async (admitted, effective) => {
+      const summonsPrepared = await prepareSummonsResumeMaterials(
+        admitted.runDirectory,
+        effective.summons
+      );
+      return buildDiaristTurnRequest(
+        admitted,
+        resumeTurnRequestProjectionOptions(
+          admitted,
+          effective,
+          env,
+          summonsPrepared
+        )
+      );
+    },
+    adapters: diaristAdapters(env),
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+var init_diarist_run = __esm({
+  "src/public-cli/diarist-run.ts"() {
+    "use strict";
+    init_engine_material();
+    init_cli_errors();
+    init_invocation();
+    init_post_admission();
+    init_run_lifecycle();
+    init_seat_ticket_binding();
+    init_settlement();
+    init_turn_request();
+    init_run_ticket_number();
+  }
+});
+
+// src/public-cli/countersign-run.ts
+var countersign_run_exports = {};
+__export(countersign_run_exports, {
+  buildCountersignTurnRequest: () => buildCountersignTurnRequest,
+  invokeCourtDiarist: () => invokeCourtDiarist,
+  runCountersignCourtDiaristStation: () => runCountersignCourtDiaristStation,
+  runPublicCountersign: () => runPublicCountersign,
+  runPublicCountersignResume: () => runPublicCountersignResume
+});
+function buildCountersignTurnRequest(admitted, options) {
+  return projectRoleTurnRequest(
+    admitted,
+    {
+      activation: {
+        role: "countersign",
+        // Admitted typed binding rides the turn activation seam to the Notary gate.
+        ...admitted.ticketNumber === void 0 ? {} : { ticketNumber: admitted.ticketNumber }
+      }
+    },
+    options
+  );
+}
+function courtTicketNumbersFromOutcome(roleOutcome, principalTicket) {
+  if (roleOutcome === void 0) return void 0;
+  const payloads = roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation" || roleOutcome.kind === "failure" ? roleOutcome.payloads ?? [] : [];
+  let latest;
+  for (const payload of payloads) {
+    if (typeof payload !== "object" || payload === null || Array.isArray(payload)) {
+      continue;
+    }
+    const record4 = payload;
+    if (!Object.hasOwn(record4, "courtTicketNumbers")) continue;
+    const raw = record4.courtTicketNumbers;
+    if (!Array.isArray(raw)) continue;
+    const members = projectCourtTicketNumbers(raw);
+    if (members === null) continue;
+    if (members.length === 0) {
+      if (raw.length === 0) {
+        latest = projectCourtTicketNumbers([], { principalTicket }) ?? void 0;
+      }
+      continue;
+    }
+    latest = projectCourtTicketNumbers(raw, { principalTicket }) ?? void 0;
+  }
+  return latest;
+}
+function courtDiaristEscalated(roleOutcome) {
+  if (roleOutcome === void 0) return false;
+  if (roleOutcome.kind === "audit_escalation") return true;
+  if (roleOutcome.kind !== "accepted") return false;
+  return (roleOutcome.payloads ?? []).some((payload) => {
+    if (typeof payload !== "object" || payload === null || Array.isArray(payload)) return false;
+    const record4 = payload;
+    return record4.status === "escalate" || record4.countersignStatus === "escalate";
+  });
+}
+async function invokeCourtDiarist(input, env, io) {
+  const quietIo = {
+    stdout() {
+    },
+    stderr(text) {
+      if (text.trim() !== "") io.stderr(text);
+    }
+  };
+  const { summonPublicRole: summonPublicRole2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+  const result = await summonPublicRole2({
+    role: "diarist",
+    argv: [
+      "--project",
+      input.projectRoot,
+      ...(input.attachmentPaths ?? []).flatMap((path) => ["--attach", path]),
+      "--",
+      input.instruction
+    ],
+    cwd: env.cwd,
+    home: env.home,
+    agentDir: env.agentDir,
+    packageRoot: env.packageRoot,
+    io: quietIo,
+    ...env.credentials === void 0 ? {} : { credentials: env.credentials },
+    ...env.signal === void 0 ? {} : { signal: env.signal },
+    ...input.correlationId === void 0 ? {} : { correlationId: input.correlationId },
+    ...input.boundTicketNumber === void 0 ? {} : { boundTicketNumber: input.boundTicketNumber },
+    // Child seat selects from the composition-root table. Do not pass the
+    // already-selected parent adapter (#840 / ADR 0082: --host 旗标>席位配置>缺省 pi).
+    ...env.hostAdapters === void 0 ? {} : { hostAdapters: env.hostAdapters }
+  });
+  const roleOutcome = result.terminal?.roleOutcome;
+  if (courtDiaristEscalated(roleOutcome)) {
+    return {
+      identity: { kind: "escalate" }
+    };
+  }
+  if (result.exitCode !== 0) {
+    const diagnostic = roleOutcome?.kind === "failure" ? roleOutcome.diagnostic : result.stderr?.trim() || `exit ${result.exitCode}`;
+    return {
+      identity: { kind: "unbound" },
+      failedWithoutEscalate: {
+        diagnostic: `court diarist station failed for ${input.failureLabel}: ${diagnostic}`
+      }
+    };
+  }
+  const asserted = result.admitted?.ticketNumber;
+  if (isSafePositiveTicketNumber(asserted)) {
+    const courtTicketNumbers = courtTicketNumbersFromOutcome(roleOutcome, asserted);
+    return {
+      identity: {
+        kind: "ticket",
+        ticketNumber: asserted,
+        ...courtTicketNumbers === void 0 ? {} : { courtTicketNumbers }
+      }
+    };
+  }
+  return {
+    identity: { kind: "unbound" }
+  };
+}
+async function runCountersignCourtDiaristStation(admitted, env, io) {
+  if (env.runCourtDiaristStation !== void 0) {
+    await env.runCourtDiaristStation(admitted);
+    return;
+  }
+  if (admitted.ticketNumber === void 0) return;
+  let refreshTickets;
+  if (admitted.courtTicketNumbers !== void 0) {
+    if (admitted.courtTicketNumbers.length === 0 || !admitted.courtTicketNumbers.includes(admitted.ticketNumber)) {
+      throw new StationChildExhaustedError(
+        `court diarist station: courtTicketNumbers is damaged (empty or missing principal #${admitted.ticketNumber})`
+      );
+    }
+    refreshTickets = admitted.courtTicketNumbers;
+  } else {
+    refreshTickets = [admitted.ticketNumber];
+  }
+  for (const ticketNumber of refreshTickets) {
+    const outcome = await invokeCourtDiarist(
+      {
+        instruction: `\u6574\u7406 #${ticketNumber} \u7684\u672C\u6848\u4F9D\u636E\u3002`,
+        projectRoot: admitted.projectRoot,
+        failureLabel: `ticket #${ticketNumber}`,
+        correlationId: admitted.runId,
+        // Refresh holds a typed key — hand it off so identity is bound before turn.
+        boundTicketNumber: ticketNumber
+      },
+      env,
+      io
+    );
+    if (outcome.identity.kind === "escalate") {
+      throw new StationChildExhaustedError(
+        "court diarist station escalated (cannot identify court target)"
+      );
+    }
+    if (outcome.failedWithoutEscalate !== void 0) {
+      throw new StationChildExhaustedError(outcome.failedWithoutEscalate.diagnostic);
+    }
+  }
 }
-async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
+async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
   let parsed;
   try {
-    parsed = parseDiaristArgv2(argv);
+    parsed = parseCountersignArgv2(argv);
   } catch (error) {
     if (error instanceof CliUsageError) {
       presentStructuralRejection(error, io);
@@ -19858,32 +20383,9 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
     }
     throw error;
   }
-  const projectRoot = parsed.project ?? env.cwd;
-  const handoffTicket = env.boundTicketNumber;
-  if (typeof handoffTicket === "number" && Number.isSafeInteger(handoffTicket) && handoffTicket >= 1) {
-    const summons = {
-      instruction: parsed.instruction,
-      instructionEmpty: parsed.instruction.trim() === "",
-      attachmentPaths: parsed.attachmentPaths
-    };
-    const resumed = await tryResumeSameTicketSeatRun({
-      home: env.home,
-      projectRoot,
-      role: "diarist",
-      ticketNumber: handoffTicket,
-      freshSummons: env.freshSummons,
-      summons,
-      resume: (runId, materials) => runPublicDiaristResume(
-        { runId, ...materials === void 0 ? {} : { summons: materials } },
-        env,
-        io
-      )
-    });
-    if (resumed !== void 0) return resumed;
-  }
   let admitted;
   try {
-    admitted = await admitDiaristInvocation({
+    admitted = await admitCountersignInvocation({
       home: env.home,
       principalAuthority: env.principalAuthority,
       cwd: env.cwd,
@@ -19892,8 +20394,7 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
       ...parsed.project === void 0 ? {} : { project: parsed.project },
       ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
       ...env.model === void 0 ? {} : { model: env.model },
-      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
-      ...handoffTicket === void 0 ? {} : { assertedTicketNumber: handoffTicket }
+      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId }
     });
   } catch (error) {
     if (error instanceof CliUsageError) {
@@ -19903,6 +20404,112 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
     throw error;
   }
   await markRunAdmitted(admitted, env.principalAuthority);
+  let typedTicket;
+  let typedCourtTicketNumbers;
+  let identityDiaristRan = false;
+  if (env.runCourtDiaristStation === void 0) {
+    const outcome = await invokeCourtDiarist(
+      {
+        instruction: parsed.instruction,
+        projectRoot: admitted.projectRoot,
+        failureLabel: "unbound summons",
+        correlationId: admitted.runId
+      },
+      env,
+      io
+    );
+    identityDiaristRan = true;
+    if (outcome.identity.kind === "escalate") {
+      return await presentControlledFailure2(
+        admitted,
+        {
+          timedOut: false,
+          code: null,
+          stderr: "",
+          thrown: new Error(
+            "court diarist station escalated (cannot identify court target)"
+          )
+        },
+        countersignAdapters(),
+        env.principalAuthority,
+        io
+      );
+    }
+    if (outcome.failedWithoutEscalate !== void 0) {
+      return await presentControlledFailure2(
+        admitted,
+        {
+          timedOut: false,
+          code: null,
+          stderr: "",
+          thrown: new Error(outcome.failedWithoutEscalate.diagnostic)
+        },
+        countersignAdapters(),
+        env.principalAuthority,
+        io
+      );
+    }
+    if (outcome.identity.kind === "ticket") {
+      const assertedTicket = outcome.identity.ticketNumber;
+      typedTicket = assertedTicket;
+      typedCourtTicketNumbers = outcome.identity.courtTicketNumbers;
+      const summons = {
+        instruction: parsed.instruction,
+        instructionEmpty: parsed.instruction.trim() === "",
+        attachmentPaths: parsed.attachmentPaths
+      };
+      const resumed = await tryResumeSameTicketSeatRun({
+        home: env.home,
+        projectRoot: admitted.projectRoot,
+        role: "countersign",
+        ticketNumber: typedTicket,
+        freshSummons: env.freshSummons,
+        summons,
+        resume: async (runId, materials) => {
+          await bindAdmittedTicketNumber(admitted, assertedTicket);
+          await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
+          await markRunTerminal(admitted.runDirectory);
+          return await runPublicCountersignResume(
+            {
+              runId,
+              ...materials === void 0 ? {} : { summons: materials }
+            },
+            {
+              ...env,
+              ...typedCourtTicketNumbers === void 0 ? {} : { pendingCourtTicketNumbers: typedCourtTicketNumbers }
+            },
+            io
+          );
+        }
+      });
+      if (resumed !== void 0) {
+        return resumed;
+      }
+    }
+  }
+  if (identityDiaristRan && typedTicket !== void 0) {
+    try {
+      await bindAdmittedTicketNumber(admitted, typedTicket);
+      await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
+      await bindCourtTicketNumbersOnAdmitted(
+        admitted,
+        typedCourtTicketNumbers ?? [typedTicket]
+      );
+    } catch (error) {
+      return await presentControlledFailure2(
+        admitted,
+        {
+          timedOut: false,
+          code: null,
+          stderr: "",
+          thrown: error
+        },
+        countersignAdapters(),
+        env.principalAuthority,
+        io
+      );
+    }
+  }
   const turnProjection = {
     packageRoot: env.packageRoot,
     home: env.home,
@@ -19913,7 +20520,7 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
     ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
     continuation: {
       kind: "initial",
-      prompt: buildInstructionTransportPrompt(
+      prompt: buildCountersignTransportPrompt(
         admitted,
         engineSessionMaterialFromOptions({
           ...pickEngineAxis(env),
@@ -19922,28 +20529,59 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
       )
     }
   };
-  const turnRequest = buildDiaristTurnRequest(admitted, turnProjection);
-  return await runPostAdmissionOneShot({
+  const turnRequest = buildCountersignTurnRequest(admitted, turnProjection);
+  const result = await runPostAdmissionOneShot({
     admitted,
     env,
     io,
     request: turnRequest,
-    adapters: diaristAdapters(env),
+    adapters: countersignAdapters({
+      beforeDispatch: async (admittedSeat, lease) => {
+        if (!identityDiaristRan) {
+          await runCountersignCourtDiaristStation(admittedSeat, env, io);
+        } else if (typedTicket !== void 0) {
+          await runCountersignCourtDiaristStation(admittedSeat, env, io);
+        }
+        await relocateAdmittedRunToTicket(
+          admittedSeat,
+          env.principalAuthority,
+          lease
+        );
+        Object.assign(
+          turnRequest,
+          buildCountersignTurnRequest(admittedSeat, turnProjection)
+        );
+      }
+    }),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
+  await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
+  return result;
 }
-async function runPublicDiaristResume(request, env, io) {
+function countersignAdapters(options) {
+  return {
+    trySettle: (admitted, authority, scope) => trySettleCountersignTerminalResult(admitted, authority, scope),
+    // Accepted receipts and failure terminals both present via shared path.
+    shouldPresentSettled: () => true,
+    ...options?.beforeDispatch === void 0 ? {} : { beforeDispatch: options.beforeDispatch }
+  };
+}
+async function runPublicCountersignResume(request, env, io) {
   return await runPostAdmissionSeatResume({
     request,
     env,
     io,
-    load: (effective) => loadResumableDiaristRun(env.home, effective.runId, env.principalAuthority),
+    load: (effective) => loadResumableCountersignRun(
+      env.home,
+      effective.runId,
+      env.principalAuthority
+    ),
     buildTurnRequest: async (admitted, effective) => {
       const summonsPrepared = await prepareSummonsResumeMaterials(
         admitted.runDirectory,
         effective.summons
       );
-      return buildDiaristTurnRequest(
+      return buildCountersignTurnRequest(
         admitted,
         resumeTurnRequestProjectionOptions(
           admitted,
@@ -19953,22 +20591,36 @@ async function runPublicDiaristResume(request, env, io) {
         )
       );
     },
-    adapters: diaristAdapters(env),
+    adapters: countersignAdapters({
+      beforeDispatch: async (admitted) => {
+        if (admitted.courtTicketNumbersDamage !== void 0) {
+          throw new StationChildExhaustedError(admitted.courtTicketNumbersDamage);
+        }
+        if (env.pendingCourtTicketNumbers !== void 0) {
+          await bindCourtTicketNumbersOnAdmitted(
+            admitted,
+            env.pendingCourtTicketNumbers
+          );
+        }
+        await runCountersignCourtDiaristStation(admitted, env, io);
+      }
+    }),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
-var init_diarist_run = __esm({
-  "src/public-cli/diarist-run.ts"() {
+var init_countersign_run = __esm({
+  "src/public-cli/countersign-run.ts"() {
     "use strict";
     init_engine_material();
     init_cli_errors();
+    init_diarist_contracts();
+    init_run_ticket_number();
     init_invocation();
     init_post_admission();
     init_run_lifecycle();
     init_seat_ticket_binding();
     init_settlement();
     init_turn_request();
-    init_run_ticket_number();
   }
 });
 
@@ -20149,11 +20801,15 @@ async function summonPublicRole(options) {
         env: {
           ...built.env,
           stationChild: true,
+          // Forward composition-root adapters so nested court stations (e.g.
+          // countersign → diarist) select the same faux/production table (#924).
+          ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
           ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
           ...options.signal === void 0 ? {} : { signal: options.signal },
           ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
           ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
           ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
+          ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
           ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
         }
       };
@@ -20256,245 +20912,82 @@ async function summonPublicRole(options) {
       result = stepped.ok;
       break;
     }
+    case "countersign": {
+      const [{ runPublicCountersign: runPublicCountersign2 }, { parseCountersignArgv: parseCountersignArgv2 }] = await Promise.all([
+        Promise.resolve().then(() => (init_countersign_run(), countersign_run_exports)),
+        Promise.resolve().then(() => (init_invocation(), invocation_exports))
+      ]);
+      const stepped = await runPrepared(parseCountersignArgv2, (env, once) => runPublicCountersign2(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
+      break;
+    }
   }
-  const stderr = captured?.stderrText();
-  const runDirectory = result.admitted?.runDirectory;
-  return {
-    exitCode: result.exitCode,
-    ...result.terminal === void 0 ? {} : { terminal: result.terminal },
-    ...result.admitted === void 0 ? {} : { admitted: result.admitted },
-    ...typeof runDirectory === "string" && runDirectory.trim() !== "" ? { runDirectory } : {},
-    ...stderr === void 0 || stderr === "" ? {} : { stderr }
-  };
-}
-async function summonGateOfficer(options) {
-  let home = options.home;
-  if (home === void 0) {
-    const { homeFromRunDirectory: homeFromRunDirectory2 } = await Promise.resolve().then(() => (init_activation_ledger_topology(), activation_ledger_topology_exports));
-    home = homeFromRunDirectory2(options.sourceRunDirectory);
-  }
-  let gateReviewInstruction;
-  if (options.reask === void 0 && options.submission !== void 0) {
-    const { readableGateItem: readableGateItem2 } = await Promise.resolve().then(() => (init_readable_gate_item(), readable_gate_item_exports));
-    gateReviewInstruction = readableGateItem2(options.submission);
-  }
-  const common = {
-    cwd: options.cwd,
-    ...home === void 0 ? {} : { home },
-    ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
-    ...options.io === void 0 ? {} : { io: options.io },
-    ...options.signal === void 0 ? {} : { signal: options.signal },
-    ...options.reask === void 0 ? {} : { reviewReask: options.reask },
-    ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction },
-    ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
-    ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
-    ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
-  };
-  if (options.officer === "notary") {
-    return summonPublicRole({
-      role: "notary",
-      argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
-      ...common
-    });
-  }
-  if (options.officer === "auditor") {
-    return summonPublicRole({
-      role: "auditor",
-      argv: [
-        "--subject",
-        "judge",
-        "--source-run",
-        options.sourceRunDirectory,
-        `\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`
-      ],
-      ...common
-    });
-  }
-  return summonPublicRole({
-    role: "inspector",
-    argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
-    ...common
-  });
-}
-var AK_ROLE_PACKAGE_ROOT_ENV;
-var init_public_role_summons = __esm({
-  "src/public-role-summons.ts"() {
-    "use strict";
-    init_engine_material();
-    AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
-  }
-});
-
-// src/gatekeeper-role.ts
-function gateSeatLabel(stage) {
-  if (stage === "inspector") return "\u53F0\u9662";
-  if (stage === "auditor") return "\u5BA1\u5211\u9662";
-  return "\u7B26\u5B9D\u90CE";
-}
-function gateOfficerForSubject(subject) {
-  if (subject.kind === "worker_completion") return "inspector";
-  if (subject.kind === "judge_compliance") return "auditor";
-  return "notary";
-}
-function failureReason(error) {
-  if (error instanceof AggregateError) return error.errors.map(failureReason).join("; ");
-  return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
-}
-function retainedReceipt(decision) {
-  return decision;
-}
-function readRecord(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-  return value;
-}
-function projectOfficerDecision(officer, decision, fallbackStatus) {
-  const receipt = retainedReceipt(decision);
-  const record4 = readRecord(decision);
-  const status = (record4 !== void 0 && typeof record4.status === "string" ? record4.status : void 0) ?? fallbackStatus;
-  if (status === "pass") {
-    return { status: "pass", officer, receipt };
-  }
-  if (status === "bounce" || status === "escalate") {
-    return { status, officer, receipt };
-  }
-  return { status: "needs_reask", officer, receipt };
-}
-function thisCourtOfficerPayloads(terminal) {
-  const outcome = terminal?.roleOutcome;
-  if (outcome !== void 0 && (outcome.kind === "accepted" || outcome.kind === "audit_escalation")) {
-    if (outcome.payloads !== void 0 && outcome.payloads.length > 0) return outcome.payloads;
-  }
-  if (outcome?.kind === "failure" && outcome.payloads !== void 0 && outcome.payloads.length > 0) {
-    return outcome.payloads;
-  }
-  return [];
-}
-function officerFailurePayloads(terminal) {
-  const outcome = terminal?.roleOutcome;
-  if (outcome?.kind === "failure") return outcome.payloads ?? terminal?.submissions ?? [];
-  return terminal?.submissions ?? [];
-}
-function projectOfficerPayloads(officer, payloads, fallbackStatus) {
-  if (payloads.length === 0) {
-    return projectOfficerDecision(officer, void 0, fallbackStatus);
-  }
-  return projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
+  const stderr = captured?.stderrText();
+  const runDirectory = result.admitted?.runDirectory;
+  return {
+    exitCode: result.exitCode,
+    ...result.terminal === void 0 ? {} : { terminal: result.terminal },
+    ...result.admitted === void 0 ? {} : { admitted: result.admitted },
+    ...typeof runDirectory === "string" && runDirectory.trim() !== "" ? { runDirectory } : {},
+    ...stderr === void 0 || stderr === "" ? {} : { stderr }
+  };
 }
-function projectOfficerTerminal(officer, summoned) {
-  const terminal = summoned.terminal;
-  const outcome = terminal?.roleOutcome;
-  const thisCourt = thisCourtOfficerPayloads(terminal);
-  if (outcome === void 0) {
-    const detail = summoned.stderr ?? "";
-    const failurePayloads = officerFailurePayloads(terminal);
-    return {
-      status: "transport_failure",
-      stage: officer,
-      reason: detail.length > 0 ? `${gateSeatLabel(officer)} public summon exit ${summoned.exitCode}: ${detail}` : `${gateSeatLabel(officer)} public summon produced no terminal (exit ${summoned.exitCode})`,
-      submission: failurePayloads.length > 0 ? failurePayloads : summoned
-    };
-  }
-  if (outcome.kind === "no_receipt") {
-    return {
-      status: "no_receipt",
-      stage: officer,
-      reason: typeof outcome.status === "string" && outcome.status.length > 0 ? outcome.status : "no_receipt",
-      facts: outcome
-    };
-  }
-  if (outcome.kind === "failure") {
-    const failurePayloads = officerFailurePayloads(terminal);
-    return {
-      status: "transport_failure",
-      stage: officer,
-      reason: outcome.diagnostic,
-      submission: failurePayloads.length > 0 ? failurePayloads : outcome.decisiveFacts
-    };
-  }
-  if (outcome.kind === "audit_escalation") {
-    return {
-      status: "escalate",
-      officer,
-      // This-court receipt only (#879) — historical rows remain on terminal.submissions.
-      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
-    };
+async function summonGateOfficer(options) {
+  let home = options.home;
+  if (home === void 0) {
+    const { homeFromRunDirectory: homeFromRunDirectory2 } = await Promise.resolve().then(() => (init_activation_ledger_topology(), activation_ledger_topology_exports));
+    home = homeFromRunDirectory2(options.sourceRunDirectory);
   }
-  if (outcome.kind === "accepted") {
-    return projectOfficerPayloads(officer, thisCourt, outcome.status);
+  let gateReviewInstruction;
+  if (options.reask === void 0 && options.submission !== void 0) {
+    const { readableGateItem: readableGateItem2 } = await Promise.resolve().then(() => (init_readable_gate_item(), readable_gate_item_exports));
+    gateReviewInstruction = readableGateItem2(options.submission);
   }
-  return {
-    status: "needs_reask",
-    officer,
-    // This-court receipt only (#879).
-    receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+  const common = {
+    cwd: options.cwd,
+    ...home === void 0 ? {} : { home },
+    ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
+    ...options.io === void 0 ? {} : { io: options.io },
+    ...options.signal === void 0 ? {} : { signal: options.signal },
+    ...options.reask === void 0 ? {} : { reviewReask: options.reask },
+    ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction },
+    ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+    ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
+    ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
   };
-}
-async function projectGatekeeperRun(options) {
-  const officer = gateOfficerForSubject(options.subject);
-  const runDirectory = options.runDirectory ?? auditorRunDirectory(options.context);
-  if (runDirectory === void 0) {
-    return {
-      officer,
-      result: {
-        status: "transport_failure",
-        stage: officer,
-        reason: `${gateSeatLabel(officer)} requires a parent run directory pointer`
-      }
-    };
+  if (options.officer === "notary") {
+    return summonPublicRole({
+      role: "notary",
+      argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
+      ...common
+    });
   }
-  let summoned;
-  try {
-    const summon = options.summonOfficer ?? (async (nextOfficer, sourceRunDirectory, officerSignal, reask, nextSubmission) => {
-      const { summonGateOfficer: summonGateOfficer2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
-      return summonGateOfficer2({
-        officer: nextOfficer,
-        sourceRunDirectory,
-        cwd: options.context.cwd ?? process.cwd(),
-        ...officerSignal === void 0 ? {} : { signal: officerSignal },
-        ...reask === void 0 ? {} : { reask },
-        ...nextSubmission === void 0 ? {} : { submission: nextSubmission },
-        ...options.home === void 0 ? {} : { home: options.home },
-        ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
-        ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
-        ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
-      });
+  if (options.officer === "auditor") {
+    return summonPublicRole({
+      role: "auditor",
+      argv: [
+        "--subject",
+        "judge",
+        "--source-run",
+        options.sourceRunDirectory,
+        `\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`
+      ],
+      ...common
     });
-    summoned = await summon(
-      officer,
-      runDirectory,
-      options.signal,
-      options.reask,
-      options.submission
-    );
-  } catch (error) {
-    return {
-      officer,
-      result: { status: "transport_failure", stage: officer, reason: failureReason(error) }
-    };
   }
-  return {
-    officer,
-    result: projectOfficerTerminal(officer, summoned),
-    summoned
-  };
+  return summonPublicRole({
+    role: "inspector",
+    argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
+    ...common
+  });
 }
-var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK;
-var init_gatekeeper_role = __esm({
-  "src/gatekeeper-role.ts"() {
+var AK_ROLE_PACKAGE_ROOT_ENV;
+var init_public_role_summons = __esm({
+  "src/public-role-summons.ts"() {
     "use strict";
-    init_auditor_dossier_tool();
-    init_submission_errors();
-    init_inspector_contracts();
-    init_gatekeeper_output();
-    init_submission_errors();
-    GATEKEEPER_TOOL_SPEC = {
-      name: GATEKEEPER_OUTPUT_TOOL_NAME,
-      label: "\u95E8\u4E0B\u7701\u51B3\u8BAE",
-      description: "\u95E8\u4E0B\u7701\u7EC8\u5C40\u51B3\u8BAE\uFF0C\u72B6\u6001\u4E3A dispatch \u6216 pass\u3002",
-      promptSnippet: "\u95E8\u4E0B\u7701\u51B3\u8BAE",
-      parameters: gatekeeperOutputSchema
-    };
-    OFFICER_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684\u7ED3\u8BBA\u4E0D\u662F pass\u3001bounce\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0C\u7ED3\u8BBA\u5B57\u6BB5\u5199\u660E\u5176\u4E00\uFF1B\u6253\u56DE\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
+    init_engine_material();
+    AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
   }
 });
 
@@ -20506,13 +20999,30 @@ init_engine_detour();
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile21, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename10, dirname as dirname21, join as join41 } from "node:path";
+import { basename as basename9, dirname as dirname21, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
 init_archivist_record_entry();
 init_gatekeeper_role();
 init_session_assistant_usage();
+function createDefaultGateOfficerSummon(options) {
+  return async (officer, sourceRunDirectory, signal, reask, submission) => {
+    const { summonGateOfficer: summonGateOfficer2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+    return summonGateOfficer2({
+      officer,
+      sourceRunDirectory,
+      cwd: options.cwd,
+      ...signal === void 0 ? {} : { signal },
+      ...reask === void 0 ? {} : { reask },
+      ...submission === void 0 ? {} : { submission },
+      ...options.home === void 0 ? {} : { home: options.home },
+      ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
+      ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+      ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
+    });
+  };
+}
 function bookDirectOfficerPointer(context, officer, result, summoned) {
   if (result.status !== "pass" && result.status !== "bounce" && result.status !== "escalate" && result.status !== "needs_reask" && result.status !== "transport_failure") {
     return;
@@ -20532,12 +21042,15 @@ function bookDirectOfficerPointer(context, officer, result, summoned) {
 }
 async function requireGatekeeperPass(options) {
   let reask;
+  const summonOfficer = options.summonOfficer ?? createDefaultGateOfficerSummon({
+    cwd: options.context.cwd ?? process.cwd()
+  });
   for (; ; ) {
     const projected = await projectGatekeeperRun({
       context: options.context,
       subject: options.subject,
+      summonOfficer,
       ...options.signal === void 0 ? {} : { signal: options.signal },
-      ...options.summonOfficer === void 0 ? {} : { summonOfficer: options.summonOfficer },
       ...options.submission === void 0 ? {} : { submission: options.submission },
       ...reask === void 0 ? {} : { reask }
     });
@@ -20995,14 +21508,8 @@ init_engine_material();
 // src/engine-detour-tool.ts
 init_engine_detour();
 init_engine_detour_usage();
-import { basename as basename9 } from "node:path";
+init_run_terminal_artifacts();
 import { Type as Type14 } from "typebox";
-function basenameRunId(runDirectory) {
-  const leaf = basename9(runDirectory);
-  const at = leaf.indexOf("@");
-  if (at <= 0) return void 0;
-  return leaf.slice(0, at);
-}
 var engineDetourArgsSchema = Type14.Object(
   {
     argv: Type14.Array(Type14.String({ minLength: 1 }), {
@@ -21045,7 +21552,7 @@ function createEngineDetourToolDefinition(input) {
       const sessionParent = ctx.sessionManager?.getSessionFile?.();
       const startedAt = Date.now();
       const runDirectory = typeof ctx.runDirectory === "string" && ctx.runDirectory.length > 0 ? ctx.runDirectory : void 0;
-      const runId = runDirectory === void 0 ? void 0 : basenameRunId(runDirectory);
+      const runId = runDirectory === void 0 ? void 0 : runIdFromRunDirectory(runDirectory);
       const invocationScopeId = typeof ctx.invocationScopeId === "string" && ctx.invocationScopeId.trim() !== "" ? ctx.invocationScopeId.trim() : void 0;
       const host = typeof ctx.host === "string" && ctx.host.trim() !== "" ? ctx.host.trim() : void 0;
       const recordCall = (observed2) => {
@@ -21136,6 +21643,7 @@ function registerEngineDetourTool(roleHost, hostActions) {
 }
 
 // src/role-runtime.ts
+init_run_terminal_artifacts();
 init_receipt_delivery_policy();
 
 // src/collector-role.ts
@@ -22315,7 +22823,121 @@ var DIARIST_TOOL_SPEC = {
   parameters: diaristOutputSchema
 };
 
+// src/secretariat-role.ts
+init_terminating_infrastructure();
+init_secretariat_contracts();
+init_run_terminal_artifacts();
+init_secretariat_contracts();
+import { Type as Type20 } from "typebox";
+var secretariatVerdictSchema = withTerminatingOutputDeclarations(
+  Type20.Object(
+    {
+      secretariatStatus: Type20.Unknown({
+        description: "converged | escalate\uFF08\u7EC8\u5C40\u5F62\u72B6\u6307\u5F15\uFF0C\u975E\u95F8\uFF09"
+      }),
+      ticketNumber: Type20.Optional(
+        Type20.Number({ description: "\u672C\u7968\u53F7\uFF1B\u7F72\u65F6\u6307\u5411\u6700\u7EC8\u6B63\u6587\u6240\u5728\u7968" })
+      ),
+      note: Type20.Optional(Type20.String({ description: "\u9644\u6CE8" })),
+      evidence: Type20.Optional(Type20.Unknown({ description: "\u7559\u5B58\u8BC1\u636E" })),
+      decisionGate: Type20.Optional(
+        Type20.Object(
+          {
+            question: Type20.Optional(Type20.String()),
+            options: Type20.Optional(Type20.Array(Type20.String()))
+          },
+          { additionalProperties: true, description: "\u9700\u965B\u4E0B\u5904\u7F6E\u7684\u95EE\u9898\u4E0E\u9009\u9879" }
+        )
+      )
+    },
+    { additionalProperties: true }
+  )
+);
+secretariatVerdictSchema.required = [];
+var secretariatSummonCountersignSchema = Type20.Object(
+  {
+    instruction: Type20.Optional(
+      Type20.String({
+        description: "\u4F20\u53EC\u6563\u6587\uFF1B\u7968\u53F7\u5199\u5728\u5176\u4E2D\u3002\u7A7A\u5219\u6CBF\u7528\u672C\u5C40\u6307\u4EE4\u3002"
+      })
+    )
+  },
+  { additionalProperties: true }
+);
+secretariatSummonCountersignSchema.required = [];
+var SECRETARIAT_OUTPUT_TOOL_SPEC = {
+  name: SECRETARIAT_OUTPUT_TOOL_NAME,
+  label: "\u4E2D\u4E66\u7701\u8F93\u51FA",
+  description: "\u4E2D\u4E66\u7701\u7EC8\u5C40\u56DE\u6267\uFF08\u7F72\u6216\u4E0A\u5448\uFF09\uFF1B\u7ED9\u4E8B\u4E2D\u5C01\u9A73\u987B\u6539\u7968\u91CD\u9001\uFF0C\u4E0D\u5728\u6B64\u7EC8\u5C40\u3002",
+  promptSnippet: "\u4E2D\u4E66\u7701\u7EC8\u5C40\u56DE\u6267",
+  parameters: secretariatVerdictSchema
+};
+var SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC = {
+  name: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
+  label: "\u4F20\u53EC\u7ED9\u4E8B\u4E2D",
+  description: "\u7ECF\u5171\u4EAB\u6267\u884C\u63A5\u7F1D\u4F20\u53EC\u7ED9\u4E8B\u4E2D\u5BA1\u7968\uFF1B\u5C01\u9A73\u540E\u7EED\u540C\u4E00 run \u518D\u9001\u3002",
+  promptSnippet: "\u4F20\u53EC\u7ED9\u4E8B\u4E2D",
+  parameters: secretariatSummonCountersignSchema
+};
+function latestObjectPayload(payloads) {
+  if (payloads === void 0 || payloads.length === 0) return void 0;
+  const latest = payloads[payloads.length - 1];
+  if (latest === null || typeof latest !== "object" || Array.isArray(latest)) {
+    return void 0;
+  }
+  return latest;
+}
+function projectSecretariatSummonResult(summoned) {
+  const terminal = summoned.terminal;
+  const roleOutcome = terminal?.roleOutcome;
+  const runDirectory = summoned.runDirectory;
+  const runId = typeof runDirectory === "string" && runDirectory.trim() !== "" ? runIdFromRunDirectory(runDirectory) : void 0;
+  const base = {
+    exitCode: summoned.exitCode,
+    ...runId === void 0 ? {} : { runId },
+    ...runDirectory === void 0 ? {} : { runDirectory },
+    ...summoned.stderr === void 0 || summoned.stderr === "" ? {} : { stderr: summoned.stderr }
+  };
+  if (roleOutcome === void 0) {
+    return { ...base, outcomeKind: "no_terminal" };
+  }
+  if (roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation") {
+    const payloads = Array.isArray(roleOutcome.payloads) ? roleOutcome.payloads : void 0;
+    const latest = latestObjectPayload(payloads);
+    const countersignStatus = latest !== void 0 && typeof latest.countersignStatus === "string" ? latest.countersignStatus : void 0;
+    return {
+      ...base,
+      outcomeKind: roleOutcome.kind,
+      // audit_escalation carries typed status; accepted may carry fixture/compat status.
+      ..."status" in roleOutcome && typeof roleOutcome.status === "string" && roleOutcome.status.length > 0 ? { status: roleOutcome.status } : {},
+      ...countersignStatus === void 0 ? {} : { countersignStatus },
+      ...latest === void 0 ? {} : { receipt: latest },
+      ...payloads === void 0 ? {} : { payloads },
+      ...roleOutcome.decisiveFacts === void 0 ? {} : { decisiveFacts: roleOutcome.decisiveFacts }
+    };
+  }
+  if (roleOutcome.kind === "failure") {
+    const payloads = Array.isArray(roleOutcome.payloads) ? roleOutcome.payloads : void 0;
+    return {
+      ...base,
+      outcomeKind: "failure",
+      diagnostic: roleOutcome.diagnostic,
+      ...roleOutcome.cause === void 0 ? {} : { cause: roleOutcome.cause },
+      ...roleOutcome.decisiveFacts === void 0 ? {} : { decisiveFacts: roleOutcome.decisiveFacts },
+      ...payloads === void 0 ? {} : { payloads },
+      ...latestObjectPayload(payloads) === void 0 ? {} : { receipt: latestObjectPayload(payloads) }
+    };
+  }
+  return {
+    ...base,
+    outcomeKind: roleOutcome.kind,
+    ..."status" in roleOutcome && typeof roleOutcome.status === "string" && roleOutcome.status.length > 0 ? { status: roleOutcome.status } : {},
+    ..."decisiveFacts" in roleOutcome && roleOutcome.decisiveFacts !== void 0 ? { decisiveFacts: roleOutcome.decisiveFacts } : {}
+  };
+}
+
 // src/role-runtime.ts
+init_secretariat_contracts();
 init_diarist_contracts();
 
 // src/diarist.ts
@@ -22373,13 +22995,13 @@ init_packaged_role_registry();
 init_activation_ledger_topology();
 import { resolve as resolve16 } from "node:path";
 import "@earendil-works/pi-coding-agent";
-import { Type as Type21 } from "typebox";
+import { Type as Type22 } from "typebox";
 
 // src/navigator-public-session.ts
 init_sitian_facade();
 
 // src/navigator-session-contracts.ts
-import { Type as Type20 } from "typebox";
+import { Type as Type21 } from "typebox";
 import { Value as Value3 } from "typebox/value";
 var NAVIGATOR_PREPARE_TOOL_NAME = "ak_navigator_prepare";
 var NAVIGATOR_UNAVAILABLE_KEYS = /* @__PURE__ */ new Set([
@@ -22487,26 +23109,26 @@ function navigatorProviderFailureFromPublicTerminal(outcome) {
   if (typed !== void 0) return { source: typed, cause: typed };
   return { source: "unknown", cause: "unknown" };
 }
-var navigatorProviderFailureSchema = Type20.Object({
-  source: Type20.Union([
-    Type20.Literal("context"),
-    Type20.Literal("session"),
-    Type20.Literal("model"),
-    Type20.Literal("thinking"),
-    Type20.Literal("auth"),
-    Type20.Literal("quota"),
-    Type20.Literal("transport"),
-    Type20.Literal("unknown")
+var navigatorProviderFailureSchema = Type21.Object({
+  source: Type21.Union([
+    Type21.Literal("context"),
+    Type21.Literal("session"),
+    Type21.Literal("model"),
+    Type21.Literal("thinking"),
+    Type21.Literal("auth"),
+    Type21.Literal("quota"),
+    Type21.Literal("transport"),
+    Type21.Literal("unknown")
   ]),
-  cause: Type20.Union([
-    Type20.Literal("context"),
-    Type20.Literal("session"),
-    Type20.Literal("model"),
-    Type20.Literal("thinking"),
-    Type20.Literal("auth"),
-    Type20.Literal("quota"),
-    Type20.Literal("transport"),
-    Type20.Literal("unknown")
+  cause: Type21.Union([
+    Type21.Literal("context"),
+    Type21.Literal("session"),
+    Type21.Literal("model"),
+    Type21.Literal("thinking"),
+    Type21.Literal("auth"),
+    Type21.Literal("quota"),
+    Type21.Literal("transport"),
+    Type21.Literal("unknown")
   ])
 }, { additionalProperties: false });
 function parseNavigatorModelSetting(value) {
@@ -22712,8 +23334,8 @@ function resolveNavigatorAuthorityMaterial(roleInput, fileAuthority) {
   return void 0;
 }
 var NAVIGATOR_TARGETS = PACKAGED_ROLE_REGISTRY.map(({ role, phases }) => ({ role, phases }));
-var prepareSchema = Type21.Object({
-  candidates: Type21.Optional(Type21.Unknown({
+var prepareSchema = Type22.Object({
+  candidates: Type22.Optional(Type22.Unknown({
     description: "\u65B9\u5411\u5019\u9009\uFF1Bcandidates[].next.role \u5FC5\u586B\uFF0Cphase \u53EF\u9009\uFF0Croute/matches/reason/command \u53EF\u9009\u4E0A\u4E0B\u6587\uFF0C\u975E\u53D7\u7406\u95F8"
   }))
 }, { additionalProperties: true });
@@ -23343,32 +23965,32 @@ init_audit_escalation();
 init_terminating_infrastructure();
 init_submission_errors();
 init_judge_output();
-import { Type as Type22 } from "typebox";
+import { Type as Type23 } from "typebox";
 var JUDGE_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "continue", "escalate"]);
 var JUDGE_STATUS_REASK = "judgeStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
 var judgeVerdictSchema = withTerminatingOutputDeclarations(
-  Type22.Object(
+  Type23.Object(
     {
-      judgeStatus: Type22.Unknown({ description: "converged | continue | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }),
-      fix: Type22.Optional(
-        Type22.Object(
-          { summary: Type22.Optional(Type22.String({ description: "continue \u65F6\u7684\u8865\u6551\u6458\u8981" })) },
+      judgeStatus: Type23.Unknown({ description: "converged | continue | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }),
+      fix: Type23.Optional(
+        Type23.Object(
+          { summary: Type23.Optional(Type23.String({ description: "continue \u65F6\u7684\u8865\u6551\u6458\u8981" })) },
           { additionalProperties: true, description: "continue \u65F6\u7684\u8865\u6551\u8BF4\u660E" }
         )
       ),
-      classes: Type22.Optional(Type22.Array(Type22.Object({
-        name: Type22.Optional(Type22.String()),
-        owner: Type22.Optional(Type22.String()),
-        boundary: Type22.Optional(Type22.String()),
-        disposition: Type22.Optional(Type22.String())
+      classes: Type23.Optional(Type23.Array(Type23.Object({
+        name: Type23.Optional(Type23.String()),
+        owner: Type23.Optional(Type23.String()),
+        boundary: Type23.Optional(Type23.String()),
+        disposition: Type23.Optional(Type23.String())
       }, { additionalProperties: true }), { description: "\u5DF2\u88C1\u51B3 finding \u7C7B\u53CA\u5176 owner \u4E0E\u4FEE\u7406\u8FB9\u754C" })),
-      note: Type22.Optional(Type22.String({ description: "\u53EF\u9009\u88C1\u51B3\u9644\u6CE8" })),
-      evidence: Type22.Optional(Type22.Unknown({ description: "\u7559\u5B58\u7684\u88C1\u51B3\u8BC1\u636E" })),
-      decisionGate: Type22.Optional(
-        Type22.Object(
+      note: Type23.Optional(Type23.String({ description: "\u53EF\u9009\u88C1\u51B3\u9644\u6CE8" })),
+      evidence: Type23.Optional(Type23.Unknown({ description: "\u7559\u5B58\u7684\u88C1\u51B3\u8BC1\u636E" })),
+      decisionGate: Type23.Optional(
+        Type23.Object(
           {
-            question: Type22.Optional(Type22.String()),
-            options: Type22.Optional(Type22.Array(Type22.String()))
+            question: Type23.Optional(Type23.String()),
+            options: Type23.Optional(Type23.Array(Type23.String()))
           },
           { additionalProperties: true, description: "\u9700\u4EBA\u6743\u5A01\u5904\u7F6E\u7684\u95EE\u9898\u4E0E\u9009\u9879" }
         )
@@ -23456,21 +24078,21 @@ init_open_tool_schema();
 init_terminating_infrastructure();
 init_reviewer_pinned_git();
 init_reviewer_output();
-import { Type as Type23 } from "typebox";
-var reviewerAmendmentsSchema = Type23.Object({
-  standards: Type23.Optional(Type23.String({ description: "\u6807\u51C6\u8F74\u5F39\u7AE0\u6B63\u6587" })),
-  spec: Type23.Optional(Type23.String({ description: "\u89C4\u683C\u8F74\u5F39\u7AE0\u6B63\u6587" }))
+import { Type as Type24 } from "typebox";
+var reviewerAmendmentsSchema = Type24.Object({
+  standards: Type24.Optional(Type24.String({ description: "\u6807\u51C6\u8F74\u5F39\u7AE0\u6B63\u6587" })),
+  spec: Type24.Optional(Type24.String({ description: "\u89C4\u683C\u8F74\u5F39\u7AE0\u6B63\u6587" }))
 }, { additionalProperties: true, description: "\u9010\u8F74\u5F39\u7AE0\u6B63\u6587\uFF1B\u65E0\u5F39\u7AE0\u7684\u8F74\u53EF\u7701\u7565\u3002" });
 var REVIEWER_STATUS_DESCRIPTION = "completed | refused \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8";
-var reviewerOutputVariants = Type23.Union([
-  Type23.Object({
-    status: Type23.Unknown({ description: REVIEWER_STATUS_DESCRIPTION }),
-    amendments: Type23.Optional(reviewerAmendmentsSchema)
+var reviewerOutputVariants = Type24.Union([
+  Type24.Object({
+    status: Type24.Unknown({ description: REVIEWER_STATUS_DESCRIPTION }),
+    amendments: Type24.Optional(reviewerAmendmentsSchema)
   }, { additionalProperties: false }),
-  Type23.Object({
-    status: Type23.Unknown({ description: REVIEWER_STATUS_DESCRIPTION }),
-    diagnostic: Type23.String({ description: "\u62D2\u7EDD\u8BCA\u65AD\u8BF4\u660E" }),
-    amendments: Type23.Optional(reviewerAmendmentsSchema)
+  Type24.Object({
+    status: Type24.Unknown({ description: REVIEWER_STATUS_DESCRIPTION }),
+    diagnostic: Type24.String({ description: "\u62D2\u7EDD\u8BCA\u65AD\u8BF4\u660E" }),
+    amendments: Type24.Optional(reviewerAmendmentsSchema)
   }, { additionalProperties: false })
 ]);
 var reviewerOutputSchema = withTerminatingOutputDeclarations(
@@ -23526,7 +24148,7 @@ init_submission_correctable_error();
 init_worker_output();
 init_fixer_output();
 init_fixer_packet();
-import { Type as Type24 } from "typebox";
+import { Type as Type25 } from "typebox";
 
 // src/worker-submission-gates.ts
 init_archivist_record_entry();
@@ -23791,20 +24413,20 @@ function fixerBashSeatbeltDenyReason(matched) {
 
 // src/worker-role.ts
 var CODER_STATUS_DESCRIPTION = "planned | completed | refused | unfinished \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\uFF1Bcompleted \u56DE\u6267\u542B TDD\u3001\u540C\u6A21\u5F0F\u3001\u5F15\u5165\u56DE\u5F52\u3001\u884C\u4E3A\u4E8B\u5B9E\u56DB\u9879\u8BC1\u636E\uFF1Bunfinished \u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u81F4\u672C\u5C40\u672A\u5B8C\u6210\u65F6\u53EF\u7528\uFF0C\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002";
-var coderOutputVariants = Type24.Union([
-  Type24.Object({
-    status: Type24.Unknown({ description: CODER_STATUS_DESCRIPTION }),
-    report: Type24.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" })
+var coderOutputVariants = Type25.Union([
+  Type25.Object({
+    status: Type25.Unknown({ description: CODER_STATUS_DESCRIPTION }),
+    report: Type25.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" })
   }, { additionalProperties: false }),
-  Type24.Object({
-    status: Type24.Unknown({ description: CODER_STATUS_DESCRIPTION }),
-    report: Type24.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" })
+  Type25.Object({
+    status: Type25.Unknown({ description: CODER_STATUS_DESCRIPTION }),
+    report: Type25.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" })
   }, { additionalProperties: false }),
-  Type24.Object({
-    status: Type24.Unknown({ description: CODER_STATUS_DESCRIPTION }),
-    report: Type24.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }),
-    remainingScope: Type24.String({ description: "\u672C\u5C40\u540E\u5269\u4F59\u5DE5\u4F5C" }),
-    reason: Type24.Optional(Type24.String({
+  Type25.Object({
+    status: Type25.Unknown({ description: CODER_STATUS_DESCRIPTION }),
+    report: Type25.String({ description: "\u5982\u5B9E\u7ED3\u679C\u62A5\u544A" }),
+    remainingScope: Type25.String({ description: "\u672C\u5C40\u540E\u5269\u4F59\u5DE5\u4F5C" }),
+    reason: Type25.Optional(Type25.String({
       minLength: 1,
       description: "\u963B\u65AD\u539F\u56E0\uFF1A\u7F3A\u524D\u7F6E\u6216\u8FDD\u5BAA\u7EA6\u675F\u3002\u7F3A\u5F85\u51B3 owner \u51B3\u5B9A\u6216\u7B54\u590D\u5C5E\u7F3A\u524D\u7F6E\u3002"
     }))
@@ -24356,6 +24978,8 @@ function activationStage(role, runtime) {
       return { id: "load-and-install", run: async () => runtime.auditor.activate() };
     case "diarist":
       return { id: "load-and-install", run: async () => runtime.diarist.activate() };
+    case "secretariat":
+      return { id: "load-and-install", run: async () => runtime.secretariat.activate() };
     case "merger":
       return { id: "prepare-git-and-install", run: async () => runtime.merger() };
   }
@@ -24459,7 +25083,7 @@ function publicNavigatorSettlement(role, phase, event) {
   if (isAuditEscalationProjection(event.details)) {
     return { kind: "human_decision", role, phase, status: "audit_escalation" };
   }
-  const status = typeof details.status === "string" ? details.status : typeof details.judgeStatus === "string" ? details.judgeStatus : typeof details.countersignStatus === "string" ? details.countersignStatus : void 0;
+  const status = typeof details.status === "string" ? details.status : typeof details.judgeStatus === "string" ? details.judgeStatus : typeof details.countersignStatus === "string" ? details.countersignStatus : typeof details.secretariatStatus === "string" ? details.secretariatStatus : void 0;
   if (status !== void 0 && status === "escalate") {
     return { kind: "human_decision", role, phase, status };
   }
@@ -24613,21 +25237,28 @@ function readDiaristTicketAssertion(submitted) {
   }
   return { kind: "invalid" };
 }
-function readDiaristRunCoordinates(ctx) {
+function readRoleRunCoordinates(ctx, label) {
   const runDirectory = runDirectoryFromHostContext(ctx);
-  if (runDirectory === void 0) {
-    throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
-  }
+  if (runDirectory === void 0) throw new Error(`${label} requires AK_ROLE_RUN_DIR`);
   const admittedPath = join40(runDirectory, "admitted-request.json");
   const admitted = JSON.parse(readFileSync6(admittedPath, "utf8"));
   if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
-    throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
+    throw new Error(`${label} admitted-request missing projectRoot (${admittedPath})`);
   }
-  const bound = typeof admitted.ticketNumber === "number" && Number.isSafeInteger(admitted.ticketNumber) && admitted.ticketNumber >= 1 ? admitted.ticketNumber : void 0;
   return {
     runDirectory,
     projectRoot: admitted.projectRoot,
     home: homeFromRunDirectory(runDirectory),
+    admitted
+  };
+}
+function readDiaristRunCoordinates(ctx) {
+  const coordinates = readRoleRunCoordinates(ctx, "diarist accept");
+  const bound = typeof coordinates.admitted.ticketNumber === "number" && Number.isSafeInteger(coordinates.admitted.ticketNumber) && coordinates.admitted.ticketNumber >= 1 ? coordinates.admitted.ticketNumber : void 0;
+  return {
+    runDirectory: coordinates.runDirectory,
+    projectRoot: coordinates.projectRoot,
+    home: coordinates.home,
     ...bound === void 0 ? {} : { boundTicketNumber: bound }
   };
 }
@@ -24696,6 +25327,100 @@ ${error.message}`
 }
 var COUNTERSIGN_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "continue", "escalate"]);
 var COUNTERSIGN_STATUS_REASK = "countersignStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
+function createSecretariatRoleRuntime(roleHost, dependencies) {
+  let parentInstruction = "";
+  const base = createFiledOfficerRuntime(
+    roleHost,
+    {
+      role: "secretariat",
+      tool: SECRETARIAT_OUTPUT_TOOL_SPEC,
+      acceptedText: SECRETARIAT_ACCEPTED_TEXT,
+      soulTag: "secretariat"
+    },
+    dependencies
+  );
+  let summonRegistered = false;
+  return {
+    async activate() {
+      await base.activate();
+      if (!summonRegistered) {
+        summonRegistered = true;
+        roleHost.on("before_agent_start", (event) => {
+          if (typeof event.prompt === "string" && event.prompt.trim() !== "") {
+            parentInstruction = event.prompt;
+          }
+        });
+        roleHost.registerTool({
+          name: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
+          label: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.label,
+          description: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.description,
+          promptSnippet: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.promptSnippet,
+          parameters: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.parameters,
+          async execute(_toolCallId, parameters, signal, _onUpdate, ctx) {
+            const fromArgs = typeof parameters?.instruction === "string" ? parameters.instruction.trim() : "";
+            const instruction = fromArgs !== "" ? fromArgs : parentInstruction.trim();
+            const correlationId = (() => {
+              const runDirectory = runDirectoryFromHostContext(ctx);
+              if (runDirectory === void 0) return void 0;
+              return runIdFromRunDirectory(runDirectory);
+            })();
+            const summon = dependencies.summonCountersign;
+            const summoned = summon === void 0 ? await (async () => {
+              const coordinates = readRoleRunCoordinates(ctx, "secretariat summons");
+              const { summonPublicRole: summonPublicRole2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+              return summonPublicRole2({
+                role: "countersign",
+                argv: ["--project", coordinates.projectRoot, "--", instruction],
+                cwd: coordinates.projectRoot,
+                home: coordinates.home,
+                ...signal === void 0 ? {} : { signal },
+                ...correlationId === void 0 ? {} : { correlationId },
+                ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot },
+                ...dependencies.hostAdapters === void 0 ? {} : { hostAdapters: dependencies.hostAdapters }
+              });
+            })() : await summon({
+              instruction,
+              cwd: ctx.cwd,
+              ...signal === void 0 ? {} : { signal },
+              ...correlationId === void 0 ? {} : { correlationId },
+              ...dependencies.home === void 0 ? {} : { home: dependencies.home },
+              ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot }
+            });
+            const details = projectSecretariatSummonResult(summoned);
+            const outcomeKind = typeof details.outcomeKind === "string" ? details.outcomeKind : "unknown";
+            const contentText = outcomeKind === "accepted" || outcomeKind === "audit_escalation" ? "\u7ED9\u4E8B\u4E2D\u56DE\u6267\u5DF2\u9001\u8FBE\u4E2D\u4E66\u7701" : outcomeKind === "failure" ? "\u7ED9\u4E8B\u4E2D\u4F20\u53EC\u5931\u8D25" : outcomeKind === "no_receipt" ? "\u7ED9\u4E8B\u4E2D\u65E0\u56DE\u6267" : "\u7ED9\u4E8B\u4E2D\u4F20\u53EC\u672A\u5F97\u7EC8\u5C40";
+            return {
+              content: [{ type: "text", text: contentText }],
+              details
+            };
+          }
+        });
+      }
+      const packageRequired = [
+        SECRETARIAT_OUTPUT_TOOL_NAME,
+        SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME
+      ];
+      const all = roleHost.getAllTools().map((tool) => tool.name);
+      for (const name of packageRequired) {
+        if (all.filter((item) => item === name).length !== 1) {
+          throw new Error(`secretariat required tool collision or missing: ${name}`);
+        }
+      }
+      const priorActive = roleHost.getActiveTools();
+      const hostSurface = priorActive.length > 0 ? priorActive : all;
+      const nextActive = [
+        .../* @__PURE__ */ new Set([...hostSurface, ...packageRequired])
+      ];
+      roleHost.setActiveTools(nextActive);
+      const active = roleHost.getActiveTools();
+      for (const name of packageRequired) {
+        if (!active.includes(name)) {
+          throw new Error(`secretariat failed to activate required tool ${name}`);
+        }
+      }
+    }
+  };
+}
 function createCountersignRoleRuntime(roleHost, dependencies, hostActions) {
   const beforeAccept = hostActions !== void 0 && roleHost.requireGatekeeperPass !== void 0 ? async ({ toolCallId, parameters, signal, ctx }) => {
     const record4 = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
@@ -25240,6 +25965,13 @@ function createRoleRuntimeExtension(dependencies) {
         }
       }
     );
+    const secretariat = createSecretariatRoleRuntime(roleHost, {
+      async loadSoul() {
+        if (!dependencies.loadSecretariatSoul) throw new Error("Secretariat runtime dependencies are not configured");
+        return dependencies.loadSecretariatSoul();
+      },
+      ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot }
+    });
     const merger = createMergerRoleRuntime(roleHost, {
       async loadSoul() {
         if (!dependencies.loadMergerSoul) throw new Error("Merger runtime dependencies are not configured");
@@ -25473,6 +26205,7 @@ function createRoleRuntimeExtension(dependencies) {
         navigator,
         auditor,
         diarist,
+        secretariat,
         merger: async () => {
           await merger.activate();
         }
@@ -25559,6 +26292,11 @@ function createRoleRuntimeExtension(dependencies) {
         if (!engineDetourRegistered) {
           engineDetourRegistered = registerEngineDetourTool(roleHost, hostActions);
         }
+        if (entry.role === "secretariat" && engineDetourRegistered) {
+          roleHost.setActiveTools([
+            .../* @__PURE__ */ new Set([...roleHost.getActiveTools(), ENGINE_DETOUR_TOOL_NAME])
+          ]);
+        }
         if (entry.role === "coder" || entry.role === "fixer") {
           if (entry.role === "coder") coder.armSubmissionGate(ctx.cwd, ctx.sessionManager);
           else fixer.armSubmissionGate(ctx.cwd, ctx.sessionManager);
@@ -25641,7 +26379,7 @@ async function prepareRoleEnvelope(options) {
   await mkdir5(request.runDirectory, { recursive: true });
   for (const method of request.methods) {
     if (method.kind !== "skill") continue;
-    const name = basename10(dirname21(method.path));
+    const name = basename9(dirname21(method.path));
     const raw = await readFile21(method.path, "utf8");
     methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
   }
@@ -26344,6 +27082,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadCountersignSoul: () => loadMainRoleSessionMaterials("countersign"),
     loadGleanerLeftSoul: () => loadMainRoleSessionMaterials("gleaner-left"),
     loadDiaristSoul: () => loadMainRoleSessionMaterials("diarist"),
+    loadSecretariatSoul: () => loadMainRoleSessionMaterials("secretariat"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
     loadMergerInput: async (path) => JSON.parse(await readFile24(path, "utf8")),