@akagilnc/pi-workflow-roles 0.1.4528 → 0.1.4620

package/src/navigator-public-session.ts

@@ -2,9 +2,12 @@
  * Navigator attendance session factory (#675 r3).
  * Each prepare turn uses the public navigator activation path (summonPublicRole) —
  * same seat table and shared envelope as `ak-role navigator`.
- * Archivist createRecordSession only books route-memory nest under the parent;
- * no openPiInProcessSession second lifecycle / no agentDir patch on the old path.
+ * Archivist createRecordSession books the attendance nest under the parent;
+ * host conversation continuity uses CLI resume (`resumeRunId`), not a package
+ * advice ledger (development-closure: do not invent package-level memory).
  */
+import { basename } from "node:path";
+
 import { sitianReport } from "./sitian-facade.ts";
 import {
   NavigatorUnavailableError,
@@ -17,6 +20,8 @@ import {
 } from "./navigator-session-contracts.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import { runDirectoryFromHostContext, type HostContext } from "./host-contracts.ts";
+import type { PublicSummonResult } from "./public-role-summons.ts";
+import { CliUsageError } from "./public-cli/cli-errors.ts";
 
 /**
  * Ledger process home for navigator attendance: admitted HostContext.runDirectory
@@ -40,13 +45,73 @@ async function resolveNavigatorLedgerHome(context: HostContext): Promise<string
   return undefined;
 }
 
-export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
+/** Resume key only — points at a host run principal, never stores advice prose. */
+export const NAVIGATOR_HOST_RUN_POINTER_ENTRY = "ak-navigator-host-run";
+
+function exactRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+export function runIdFromNavigatorDirectory(runDirectory: string): string | undefined {
+  const entry = basename(runDirectory);
+  const suffix = "@navigator";
+  if (!entry.endsWith(suffix)) return undefined;
+  const runId = entry.slice(0, entry.length - suffix.length);
+  return runId.length > 0 ? runId : undefined;
+}
+
+export function readNavigatorHostRunPointer(entries: readonly unknown[]): string | undefined {
+  for (let index = entries.length - 1; index >= 0; index -= 1) {
+    const entry = entries[index];
+    if (!exactRecord(entry)) continue;
+    if (entry.type === "custom" && entry.customType === NAVIGATOR_HOST_RUN_POINTER_ENTRY) {
+      const data = entry.data;
+      if (exactRecord(data) && typeof data.runId === "string" && data.runId.trim() !== "") {
+        return data.runId.trim();
+      }
+    }
+  }
+  return undefined;
+}
+
+/**
+ * Typed preflight via public CLI load path: can this run reopen as navigator?
+ * CliUsageError (code AK_ROLE_USAGE) from loadResumableInstructionSeatRun means
+ * unknown id / principal unavailable / non-instruction seat — not resumable.
+ * Other throws propagate. Never reads stderr prose.
+ */
+export async function navigatorHostRunResumable(home: string, runId: string): Promise<boolean> {
+  const { piDurablePrincipalAuthority } = await import("./pi/durable-principal.ts");
+  const { loadResumableInstructionSeatRun } = await import("./public-cli/run-lifecycle.ts");
+  try {
+    const loaded = await loadResumableInstructionSeatRun(home, runId, piDurablePrincipalAuthority);
+    return loaded.admitted.role === "navigator";
+  } catch (error) {
+    if (error instanceof CliUsageError) return false;
+    throw error;
+  }
+}
+
+export type NavigatorPublicSummon = (options: {
+  readonly role: "navigator";
+  readonly argv: readonly string[];
+  readonly cwd: string;
+  readonly home?: string;
+  readonly resumeRunId?: string;
+}) => Promise<PublicSummonResult>;
+
+export function createNativeNavigatorSessionFactory(deps?: {
+  /** Test/composition inject — production leaves unset and uses public-role-summons. */
+  readonly summonPublicRole?: NavigatorPublicSummon;
+  /** Test inject — production uses navigatorHostRunResumable (typed CLI load). */
+  readonly hostRunResumable?: (home: string, runId: string) => Promise<boolean>;
+}): NavigatorSessionFactory {
   return async ({ context, subject, tool }) => {
     // Model is enforced at prepare (attendance seat resolve) and at prompt (summon).
     // Factory open only books the archivist nest — no package default, no eager seat read.
     let thinkingLevel: string | undefined;
 
-    // Archivist nest for attendance route memory only (ADR 0018 / 0065) — not a session open.
+    // Archivist nest for attendance bookkeeping (ADR 0018 / 0065) — not a host session open.
     // #852: navigator/<work-subject> is the sole book-top exception; always pass subject so
     // unmaterialized/missing parent still gets a durable nest instead of silent in-memory.
     // Home comes from HostContext.runDirectory (or ledger parent path) — never context.home.
@@ -64,6 +129,14 @@ export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
     let noReceipt: NoReceiptLifecycleFacts | undefined;
     let disposed = false;
     let inFlightPrompt: Promise<unknown> | undefined;
+    /** In-factory host run id for CLI resume; durable pointer also lives on the nest. */
+    let hostRunId = readNavigatorHostRunPointer(sessionManager.getEntries() as readonly unknown[]);
+
+    const summon: NavigatorPublicSummon = deps?.summonPublicRole
+      ?? (async (options) => {
+        const { summonPublicRole } = await import("./public-role-summons.ts");
+        return summonPublicRole(options);
+      });
 
     return {
       prompt: async (text) => {
@@ -74,15 +147,28 @@ export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
         noReceipt = undefined;
         const run = (async () => {
         try {
-          const { summonPublicRole } = await import("./public-role-summons.ts");
           const summonHome = await resolveNavigatorLedgerHome(context);
-          // Public activation — same face as `ak-role navigator <instruction>` (#675).
-          const summoned = await summonPublicRole({
-            role: "navigator",
-            argv: [text],
+          const resumeRunId = hostRunId;
+
+          const baseSummon = {
+            role: "navigator" as const,
+            argv: [text] as const,
             cwd: context.cwd,
             ...(summonHome === undefined ? {} : { home: summonHome }),
-          });
+          };
+
+          // Prefer host CLI resume so prior advice stays on the host session.
+          // Fresh mint only when typed load says the principal cannot reopen.
+          const resumable = deps?.hostRunResumable ?? navigatorHostRunResumable;
+          let summoned: PublicSummonResult;
+          if (resumeRunId === undefined || summonHome === undefined) {
+            summoned = await summon(baseSummon);
+          } else if (await resumable(summonHome, resumeRunId)) {
+            summoned = await summon({ ...baseSummon, resumeRunId });
+          } else {
+            hostRunId = undefined;
+            summoned = await summon(baseSummon);
+          }
 
           const outcome = summoned.terminal?.roleOutcome;
           if (outcome === undefined) {
@@ -109,23 +195,40 @@ export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
             noReceipt = outcome;
             return;
           }
+
+          // Pin host run for the next attendance prompt on this subject (CLI resume key).
+          const runDirectory = summoned.runDirectory
+            ?? (typeof summoned.admitted?.runDirectory === "string"
+              ? summoned.admitted.runDirectory
+              : undefined);
+          if (typeof runDirectory === "string" && runDirectory.trim() !== "") {
+            const nextRunId = runIdFromNavigatorDirectory(runDirectory);
+            if (nextRunId !== undefined) {
+              hostRunId = nextRunId;
+              sessionManager.appendCustomEntry(NAVIGATOR_HOST_RUN_POINTER_ENTRY, { runId: nextRunId });
+            }
+          }
+
           if (outcome.kind !== "accepted") {
-            // Non-accepted kinds (e.g. audit_escalation): no route advice this turn.
+            // Non-accepted kinds (e.g. audit_escalation): no prose advice this turn.
             // Not a shape-unusable judgment on the navigator reply (#757).
             return;
           }
+          // #959: present navigator words as prose. No candidates/next parsing.
+          const { navigatorProseFromUnknown } = await import("./package-contracts/navigator-output.ts");
+          const proseParts: string[] = [];
           for (const payload of outcome.payloads ?? []) {
-            if (typeof payload !== "object" || payload === null || Array.isArray(payload)) continue;
-            const candidates = (payload as { candidates?: unknown }).candidates;
-            if (!Array.isArray(candidates)) continue;
-            await tool.execute(
-              "navigator-public-prepare",
-              { candidates },
-              undefined,
-              undefined,
-              context as never,
-            );
+            const prose = navigatorProseFromUnknown(payload);
+            if (prose !== undefined) proseParts.push(prose);
           }
+          if (proseParts.length === 0) return;
+          await tool.execute(
+            "navigator-public-prepare",
+            { prose: proseParts.join("\n\n") },
+            undefined,
+            undefined,
+            context as never,
+          );
         } catch (error) {
           if (error instanceof NavigatorUnavailableError) throw error;
           const fact = navigatorProviderFailureFromError(error);
@@ -166,10 +269,8 @@ export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
         } catch (error) {
           throw navigatorUnavailableError("model", error);
         }
-        // No live provider session is pinned here: every prompt is an independent
-        // public summon whose nested CLI reads the current seat table (#675 验收②
-        // / #617 DK-3). A seat edit between prepares therefore applies on the next
-        // summon — it is never an unavailable session.
+        // Resume and fresh mint both read the live seat table (#675 / #617 DK-3).
+        // A seat edit between prepares applies on the next host turn.
         thinkingLevel = nextThinking ?? nextParsed.thinkingLevel;
       },
       getThinkingLevel: () => thinkingLevel,

package/src/navigator-role.ts

@@ -2,12 +2,12 @@ import { NAVIGATOR_OUTPUT_TOOL_NAME, navigatorOutputSchema } from "./package-con
 
 /**
  * 决定工具规格。生命周期装配归注册信封 owner——src/role-runtime.ts（ADR 0018）。
- * Candidates share the route-advice shape the attendance prepare tool owns.
+ * #959: navigator speaks free-form prose; tool is a lifecycle vehicle only.
  */
 export const NAVIGATOR_TOOL_SPEC = {
   name: NAVIGATOR_OUTPUT_TOOL_NAME,
   label: "游奕使建议",
-  description: "游奕使终局回执：排好序的下一步角色路线建议。",
+  description: "游奕使终局回执：散文建议，原样呈现。",
   promptSnippet: "游奕使建议",
   parameters: navigatorOutputSchema,
 } as const;

package/src/package-contracts/navigator-output.ts

@@ -1,7 +1,8 @@
 /**
- * Public Navigator (游奕使) terminating receipt contracts (#639).
- * Direct public seat submits route advice with the same candidate shape the
- * attendance prepare tool owns — one shape authority for navigator advice.
+ * Public Navigator (游奕使) terminating receipt contracts (#639 / #959).
+ * Navigator speaks free-form prose. The tool is only a lifecycle vehicle so the
+ * host can seal a turn; the model-facing content is prose, not structured route
+ * candidates. Code does not parse, rank, or judge the advice.
  * No usable result is infrastructure failure via public settlement, not a judgment status (#475).
  */
 import { Type } from "typebox";
@@ -15,42 +16,57 @@ export const NAVIGATOR_ACCEPTED_TEXT = "游奕使建议已受理";
 export const navigatorOutputSchema = withTerminatingOutputDeclarations(
   openToolObject(
     Type.Object({
-      status: Type.Unknown({
-        description: "advice — 形状指引，非 schema 闸",
-      }),
-      candidates: Type.Unknown({
-        description: "排好序的路线建议数组，元素含 next/phase/reason — 形状指引，非 schema 闸",
+      prose: Type.Unknown({
+        description: "游奕使散文建议，原样呈现。不要求 candidates/next 等结构化字段。形状指引，非 schema 闸",
       }),
     }),
   ),
 );
 
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
-export type NavigatorAdvice = { readonly status: "advice"; readonly candidates: readonly unknown[] };
+export type NavigatorAdvice = { readonly prose: string };
 
 /**
- * Project one lawful explicit Navigator advice receipt: candidates array,
- * each candidate a record. Broken ancillary fields are preserved as submitted —
- * shape is not an admission gate (ADR 0055 / 第 0 条).
+ * Project one Navigator advice receipt as prose.
+ * Accepts { prose }, a bare string, or any object — objects stringify as the
+ * prose body so historical / free-form submissions still present. Shape is not
+ * an admission gate (ADR 0055 / 第 0 条 / #959).
  */
 export function projectLawfulNavigatorOutput(value: unknown): NavigatorAdvice | undefined {
-  // #836: no field drop
-  return (typeof value === "object" && value !== null && !Array.isArray(value))
-    ? (value as NavigatorAdvice)
-    : undefined;
+  if (value === undefined || value === null) return undefined;
+  if (typeof value === "string") return { prose: value };
+  if (typeof value === "object" && !Array.isArray(value)) {
+    const record = value as Record<string, unknown>;
+    if (typeof record.prose === "string") return { prose: record.prose };
+    if (record.prose !== undefined && record.prose !== null) {
+      return { prose: typeof record.prose === "string" ? record.prose : String(record.prose) };
+    }
+    // Free-form object submission: present the whole body as prose when it has content.
+    const keys = Object.keys(record);
+    if (keys.length === 0) return { prose: "" };
+    try {
+      return { prose: JSON.stringify(record) };
+    } catch {
+      return { prose: String(record) };
+    }
+  }
+  return { prose: String(value) };
 }
 
 /**
- * Settlement/recording path: only lawful recorded candidate arrays.
- * Does not gate role admission — callers must not use this to reject a submission.
+ * Settlement/recording path: project prose. Does not gate role admission.
  */
 export function validateRecordedNavigatorOutput(value: unknown): NavigatorAdvice {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new Error("Navigator output is not an object");
+  const projected = projectLawfulNavigatorOutput(value);
+  if (projected === undefined) {
+    throw new Error("Navigator output is empty");
   }
-  return value as NavigatorAdvice;
+  return projected;
 }
 
+/** Extract display prose from any navigator payload / attendance body. */
+export function navigatorProseFromUnknown(value: unknown): string | undefined {
+  const projected = projectLawfulNavigatorOutput(value);
+  if (projected === undefined) return undefined;
+  const trimmed = projected.prose.trim();
+  return trimmed === "" ? undefined : projected.prose;
+}

package/src/public-cli/coder-run.ts

@@ -22,7 +22,7 @@ import {
   type AdmittedCoderInvocation,
 } from "./invocation.ts";
 import {
-  buildResumeContinuationPrompt,
+  buildAutoResumeContinuationPrompt,
   loadResumableCoderRun,
   markRunAdmitted,
   type PublicResumeRequest,
@@ -198,7 +198,7 @@ export async function runPublicCoder(
           : { correlationId: admitted.correlationId ?? env.correlationId }),
         continuation: {
           kind: "resume",
-          prompt: buildResumeContinuationPrompt({
+          prompt: buildAutoResumeContinuationPrompt({
             packageRoot: env.packageRoot,
             ...pickEngineAxis(env),
           }),

package/src/public-cli/fixer-run.ts

@@ -25,7 +25,7 @@ import {
   type AdmittedFixerInvocation,
 } from "./invocation.ts";
 import {
-  buildResumeContinuationPrompt,
+  buildAutoResumeContinuationPrompt,
   loadResumableFixerRun,
   markRunAdmitted,
   type PublicResumeRequest,
@@ -213,7 +213,7 @@ export async function runPublicFixer(
           : { correlationId: admitted.correlationId ?? env.correlationId }),
         continuation: {
           kind: "resume",
-          prompt: buildResumeContinuationPrompt({
+          prompt: buildAutoResumeContinuationPrompt({
             packageRoot: env.packageRoot,
             ...pickEngineAxis(env),
           }),

package/src/public-cli/invocation.ts

@@ -239,14 +239,14 @@ export type AdmittedNotaryInvocation = AdmittedRoleInvocationBase & {
   readonly sourceRun: NotarySourceRunLocator;
 };
 
-/** Public Reviewer single-lens token; no default and no `all` (caller-selected parent run). */
+/** Durable single-axis Reviewer lens. Parallel default is parse-only omission, never admitted. */
 export type ReviewerLens = "completeness" | "correctness";
 
 export type AdmittedReviewerInvocation = AdmittedRoleInvocationBase & {
   readonly role: "reviewer";
   /** Required fixed base revision for the pinned review target (ADR 0037). */
   readonly baseRevision: string;
-  /** Required single lens; frozen at admission and reused on resume. */
+  /** Frozen single-axis shape for an ordinary Reviewer run; reused on resume. */
   readonly lens: ReviewerLens;
   /**
    * Required durable authority references/URLs frozen at admission.
@@ -929,8 +929,11 @@ export type ParseReviewerArgvResult = {
   attachmentPaths: string[];
   /** Required fixed base revision for the pinned review target. */
   baseRevision: string;
-  /** Required single lens; no default. */
-  lens: ReviewerLens;
+  /**
+   * Explicit single-axis override. Omitted public `--lens` is the internal
+   * parallel two-axis branch mark only — never persisted on an admitted run.
+   */
+  lens?: ReviewerLens;
   /** Repeatable durable authority references/URLs (exact order preserved; at least one). */
   authorityRefs: string[];
   project?: string;
@@ -1048,7 +1051,7 @@ export function isReviewerLens(value: unknown): value is ReviewerLens {
   return value === "completeness" || value === "correctness";
 }
 
-/** Public --lens enum; sole owner for parse + fresh admission. */
+/** Admitted single-axis lens enum; public `--lens all` and bare omission are not admitted values. */
 export function requireReviewerLens(value: string | undefined): ReviewerLens {
   const trimmed = (value ?? "").trim();
   if (!isReviewerLens(trimmed)) {
@@ -3073,7 +3076,7 @@ export function parseReviewerArgv(
         continue;
       }
       if (taken.def.id === "lens") {
-        // Empty and other non-enum values share one message — do not borrow path helper.
+        // Public override is single-axis only; omission stays undefined for the parallel branch.
         lens = requireReviewerLens(taken.value);
         continue;
       }
@@ -3090,13 +3093,13 @@ export function parseReviewerArgv(
     positional.push(token);
   }
 
-  // Unconditional required (--base/--lens/--authority-ref) from typed table (#342).
+  // Base and authority are required; omitted lens selects the parallel two-axis mode.
   options.assertRequired();
   return {
     instruction: positional.join(" "),
     attachmentPaths,
     baseRevision: baseRevision!,
-    lens: lens!,
+    ...(lens === undefined ? {} : { lens }),
     authorityRefs,
     ...(project === undefined ? {} : { project }),
   };
@@ -3110,12 +3113,13 @@ export type AdmitReviewerInvocationOptions = {
   instruction: string;
   attachmentPaths: readonly string[];
   baseRevision: string;
-  /** Required single lens; frozen unchanged at admission. */
+  /** Explicit single-axis shape, frozen unchanged at admission and resume. */
   lens: ReviewerLens;
   /** Required durable authority references/URLs; frozen unchanged at admission. */
   authorityRefs: readonly string[];
   project?: string;
   createRunId?: () => string;
+  correlationId?: string;
   /** Effective model for this invocation — written onto invocation.json. */
   model?: InvocationEffectiveModel;
 };
@@ -3175,6 +3179,9 @@ export async function admitReviewerInvocation(
     baseRevision,
     lens,
     authorityRefs: [...authorityRefs],
+    ...(options.correlationId === undefined
+      ? {}
+      : { correlationId: options.correlationId }),
     attachments: attachments.map((a) => ({
       provenancePath: a.provenancePath,
       frozenPath: a.frozenPath,
@@ -3204,6 +3211,9 @@ export async function admitReviewerInvocation(
     baseRevision,
     lens,
     authorityRefs,
+    ...(options.correlationId === undefined
+      ? {}
+      : { correlationId: options.correlationId }),
   };
 }
 

package/src/public-cli/judge-run.ts

@@ -18,7 +18,7 @@ import {
 import {
   loadResumableJudgeRun,
   markRunAdmitted,
-  buildResumeContinuationPrompt,
+  buildAutoResumeContinuationPrompt,
   type PublicResumeRequest,
 } from "./run-lifecycle.ts";
 import {
@@ -152,7 +152,7 @@ export async function runPublicJudge(
           : { correlationId: admitted.correlationId ?? env.correlationId }),
         continuation: {
           kind: "resume",
-          prompt: buildResumeContinuationPrompt({
+          prompt: buildAutoResumeContinuationPrompt({
             packageRoot: env.packageRoot,
             ...pickEngineAxis(env),
           }),

package/src/public-cli/merger-run.ts

@@ -24,7 +24,7 @@ import {
 import {
   loadResumableMergerRun,
   markRunAdmitted,
-  buildResumeContinuationPrompt,
+  buildAutoResumeContinuationPrompt,
   type PublicResumeRequest,
 } from "./run-lifecycle.ts";
 import {
@@ -241,7 +241,7 @@ export async function runPublicMerger(
           : { correlationId: admitted.correlationId ?? env.correlationId }),
         continuation: {
           kind: "resume",
-          prompt: buildResumeContinuationPrompt({
+          prompt: buildAutoResumeContinuationPrompt({
             packageRoot: env.packageRoot,
             ...pickEngineAxis(env),
           }),

package/src/public-cli/option-definitions.ts

@@ -552,12 +552,12 @@ const REVIEWER_OPTIONS = [
     canonical: "--lens",
     aliases: [],
     valueMetavar: "completeness|correctness",
-    required: true,
+    required: false,
     repeatable: false,
     form: "option",
     description: {
-      en: "Required single review lens: completeness or correctness (no default).",
-      zh: "必填单 lens：completeness 或 correctness（无默认值）。",
+      en: "Optional single-lens override: completeness or correctness; omitted runs both in parallel.",
+      zh: "可选单 lens 覆盖：completeness 或 correctness；省略时并行运行两轴。",
     },
   },
   {
@@ -1227,9 +1227,9 @@ const ROLE_COMMAND_HELP = {
   },
   reviewer: {
     command: "reviewer",
-    summary: "Fixed-target single-lens review (completeness or correctness).",
+    summary: "Fixed-target parallel two-lens review, with an optional single-lens override.",
     usage: [
-      "ak-role reviewer --base <revision> --lens completeness|correctness --authority-ref <ref> [options] <instruction>",
+      "ak-role reviewer --base <revision> [--lens completeness|correctness] --authority-ref <ref> [options] <instruction>",
     ],
     examples: [
       'ak-role reviewer --base main --lens completeness --authority-ref docs/adr/0001.md "Review the branch."',
@@ -1280,7 +1280,7 @@ const ROLE_COMMAND_HELP = {
   },
   navigator: {
     command: "navigator",
-    summary: "Direct Navigator (游奕使) route advice: ordered next-role candidates.",
+    summary: "Direct Navigator (游奕使) free-form prose route advice.",
     usage: ["ak-role navigator [options] [instruction]"],
     examples: [
       'ak-role navigator "刚完成 coder apply 收敛，下一步？"',

package/src/public-cli/post-admission.ts

@@ -10,6 +10,7 @@ import { writeFile } from "node:fs/promises";
 import { isAbsolute, join, resolve } from "node:path";
 
 import {
+  buildAutoResumeContinuationPrompt,
   buildResumeContinuationPrompt,
   RESUME_TRANSPORT_ENVELOPE,
   type PublicResumeRequest,
@@ -236,6 +237,12 @@ export type PostAdmissionEnv = {
   freshSummons?: true;
   /** Station child role run (#840): omit automatic navigator attendance. */
   stationChild?: boolean;
+  /**
+   * Ephemeral host-turn cwd for Reviewer fresh-copy execution (#946 统一新副本).
+   * Admission and durable projectRoot stay on the caller project; the host turn
+   * (initial and resume) runs in this sandbox when present.
+   */
+  executionCwd?: string;
 };
 
 /**
@@ -1352,6 +1359,16 @@ export async function runPostAdmissionSeatResume<
   afterAdmittedLoad?: (
     admitted: A,
   ) => Promise<AfterAdmittedLoadResult<A, T>>;
+  /**
+   * After the single pre-lease load (and optional afterAdmittedLoad), prepare
+   * call-local execution context. Reviewer fresh-copy (#946) mints an ephemeral
+   * worktree from the admitted projectRoot here — reuses this load, does not
+   * pre-load outside the coordinator. cleanup runs after dispatch settles.
+   */
+  afterAdmittedPrepare?: (admitted: A) => Promise<{
+    readonly env?: PostAdmissionEnv;
+    readonly cleanup?: () => Promise<void>;
+  }>;
   effectiveEngine?: string;
 }): Promise<{ exitCode: number; admitted?: A; terminal?: T }> {
   let request = input.request;
@@ -1382,6 +1399,10 @@ export async function runPostAdmissionSeatResume<
     adapters = prepared.adapters;
   }
 
+  // Call-local execution env; afterAdmittedPrepare may replace it (Reviewer fresh-copy).
+  let env = input.env;
+  let preparedCleanup: (() => Promise<void>) | undefined;
+
   const buildRequestAfterLease = async (): Promise<RoleTurnRequest> => {
         let openCourtAttemptId: string | undefined;
         // Build uses the admitted judged under this lease (rehydrated when open
@@ -1464,8 +1485,14 @@ export async function runPostAdmissionSeatResume<
   // Court recovery / open under lease, then dispatch.
   // Station-child same-ticket/same-parent resume is call-local auto-resume
   // (#840 / #416). Public `ak-role resume` stays one-shot (ADR 0080).
+  // afterAdmittedPrepare runs inside this try so mint failure and cleanup share one finally.
   try {
-    if (input.env.stationChild === true) {
+    if (input.afterAdmittedPrepare !== undefined) {
+      const prepared = await input.afterAdmittedPrepare(loaded.admitted);
+      if (prepared.env !== undefined) env = prepared.env;
+      preparedCleanup = prepared.cleanup;
+    }
+    if (env.stationChild === true) {
       let firstTurn: RoleTurnRequest | undefined;
       const stationAdapters = withOnceSuccessfulBeforeDispatch(adapters);
       type StationChildAttempt = { readonly resumeTurn: boolean };
@@ -1477,14 +1504,14 @@ export async function runPostAdmissionSeatResume<
       });
       return await runWithAutoResumeLoop({
         admitted: loaded.admitted,
-        principalAuthority: input.env.principalAuthority,
+        principalAuthority: env.principalAuthority,
         isPrincipalAvailable: resolveHostAwareSessionAvailability(
-          input.env.host,
-          input.env.principalAuthority,
+          env.host,
+          env.principalAuthority,
         ),
         io: input.io,
-        sessionAppender: input.env.sessionAppender,
-        autoResumeLimit: input.env.autoResumeLimit,
+        sessionAppender: env.sessionAppender,
+        autoResumeLimit: env.autoResumeLimit,
         buildInitialPayload: (): StationChildAttempt => ({ resumeTurn: false }),
         buildResumePayload: (): StationChildAttempt => ({ resumeTurn: true }),
         // Same as public manual resume: prior-court sealed acceptance is not a
@@ -1522,7 +1549,7 @@ export async function runPostAdmissionSeatResume<
             dispatch: async (turnRequest) => {
               const result = await dispatchPostAdmissionTurn({
                 admitted: loaded.admitted,
-                env: input.env,
+                env,
                 io: attemptIo,
                 request: turnRequest,
                 lease,
@@ -1534,7 +1561,7 @@ export async function runPostAdmissionSeatResume<
               });
               return settleDeferredPersist(
                 loaded.admitted,
-                input.env.principalAuthority,
+                env.principalAuthority,
                 stationAdapters,
                 attemptIo,
                 result,
@@ -1545,7 +1572,7 @@ export async function runPostAdmissionSeatResume<
     }
     return await runPostAdmissionManualResume({
       admitted: loaded.admitted,
-      env: input.env,
+      env,
       io: input.io,
       adapters,
       ...(input.effectiveEngine === undefined
@@ -1561,6 +1588,10 @@ export async function runPostAdmissionSeatResume<
       return { exitCode: 2 };
     }
     throw error;
+  } finally {
+    if (preparedCleanup !== undefined) {
+      await preparedCleanup();
+    }
   }
 }
 
@@ -1594,7 +1625,7 @@ export async function runPostAdmissionOneShot<
       ...input.request,
       continuation: {
         kind: "resume",
-        prompt: buildResumeContinuationPrompt({
+        prompt: buildAutoResumeContinuationPrompt({
           packageRoot: input.env.packageRoot,
           ...pickEngineAxis({
             engine: input.effectiveEngine ?? input.env.engine,