@akagilnc/pi-workflow-roles 0.1.4620 → 0.1.4631

package/dist/acp-host/production-host.js

@@ -62,7 +62,7 @@ async function spawnEngineDetourOnce(input) {
   }
   const command = input.argv[0];
   const args = input.argv.slice(1);
-  return await new Promise((resolve22, reject) => {
+  return await new Promise((resolve21, reject) => {
     let settled = false;
     const signal = input.signal;
     const child = spawn(command, args, {
@@ -92,7 +92,7 @@ async function spawnEngineDetourOnce(input) {
       if (signal !== void 0) {
         signal.removeEventListener("abort", onAbort);
       }
-      resolve22(result);
+      resolve21(result);
     };
     const onAbort = () => {
       fail4(signal !== void 0 ? abortReasonError(signal) : new Error("aborted"));
@@ -202,7 +202,6 @@ var activation_ledger_topology_exports = {};
 __export(activation_ledger_topology_exports, {
   ActivationLedgerError: () => ActivationLedgerError,
   activationBookDirectory: () => activationBookDirectory,
-  activationWaitingLedgerPath: () => activationWaitingLedgerPath,
   assertLedgerFileInsideHome: () => assertLedgerFileInsideHome,
   ensureRealDirectoryTree: () => ensureRealDirectoryTree,
   errnoCode: () => errnoCode,
@@ -265,9 +264,6 @@ function resolveActivationLedgerHomeForPath(path) {
 function activationBookDirectory(ledgerHome, bookKey) {
   return join2(ledgerHome, "books", bookKey);
 }
-function activationWaitingLedgerPath(ledgerHome, bookKey) {
-  return join2(activationBookDirectory(ledgerHome, bookKey), "waiting.jsonl");
-}
 function pathContainedIn(root, candidate) {
   const rel = relative(root, candidate);
   return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
@@ -3443,9 +3439,6 @@ ${paths.join("\n")}`
       if (typeof process.env.AK_ROLE_AUDITOR_SUBJECT === "string" && process.env.AK_ROLE_AUDITOR_SUBJECT.trim() !== "") {
         env.AK_ROLE_AUDITOR_SUBJECT = process.env.AK_ROLE_AUDITOR_SUBJECT;
       }
-      if (request.correlationId !== void 0 && request.correlationId.trim() !== "") {
-        env.AK_CORRELATION_ID = request.correlationId;
-      }
       if (config.recordLaunchedRolePackageIdentity !== void 0 && config.observeLaunchedRolePackageIdentity !== void 0) {
         await config.recordLaunchedRolePackageIdentity(
           request.runDirectory,
@@ -4792,7 +4785,7 @@ function normalizeReviewComment(raw) {
 function createGhApiRunner(options = {}) {
   const spawnImpl = options.spawnImpl ?? spawn3;
   return async (args, runOptions = {}) => {
-    return await new Promise((resolve22, reject) => {
+    return await new Promise((resolve21, reject) => {
       const signal = runOptions.signal;
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
@@ -4865,11 +4858,11 @@ function createGhApiRunner(options = {}) {
               const value = line2.slice(idx + 1).trim();
               headers[name] = value;
             }
-            resolve22({ status, headers, bodyText });
+            resolve21({ status, headers, bodyText });
             return;
           }
           if (code === 0) {
-            resolve22({ status: 200, headers: {}, bodyText: stdout });
+            resolve21({ status: 200, headers: {}, bodyText: stdout });
             return;
           }
           const failure2 = new Error(
@@ -12618,12 +12611,12 @@ function createSystemCollectorClock() {
   return {
     wallNow: () => /* @__PURE__ */ new Date(),
     monoNow: () => Number(process.hrtime.bigint() - start) / 1e6,
-    sleep: (ms, signal) => new Promise((resolve22, reject) => {
+    sleep: (ms, signal) => new Promise((resolve21, reject) => {
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
         return;
       }
-      const timer = setTimeout(resolve22, ms);
+      const timer = setTimeout(resolve21, ms);
       const onAbort = () => {
         clearTimeout(timer);
         reject(signal?.reason ?? new Error("aborted"));
@@ -17033,10 +17026,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep = ((ms) => new Promise((resolve22) => {
+  const sleep = ((ms) => new Promise((resolve21) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve22();
+      resolve21();
     }, ms);
   }));
   sleep.cancel = () => {
@@ -17048,7 +17041,7 @@ function defaultNavigatorGraceSleep() {
   return sleep;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -17057,11 +17050,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep
       action();
     };
     void work.then(
-      (value) => finish(() => resolve22({ status: "done", value })),
+      (value) => finish(() => resolve21({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep(graceMs).then(() => {
-      finish(() => resolve22({ status: "timeout" }));
+      finish(() => resolve21({ status: "timeout" }));
     });
   });
 }
@@ -18067,6 +18060,24 @@ var init_public_run_credentials = __esm({
   }
 });
 
+// src/public-cli/process-cancel.ts
+function processCancelSignalName(signal) {
+  if (signal === void 0 || signal.aborted !== true) return void 0;
+  const reason = signal.reason;
+  if (reason === "SIGTERM" || reason === "SIGINT" || reason === "SIGHUP") {
+    return reason;
+  }
+  return void 0;
+}
+function processCancelDiagnostic(signalName) {
+  return `ak-role terminated by ${signalName}`;
+}
+var init_process_cancel = __esm({
+  "src/public-cli/process-cancel.ts"() {
+    "use strict";
+  }
+});
+
 // src/public-cli/auto-resume.ts
 import { constants as fsConstants2 } from "node:fs";
 import { randomUUID as randomUUID5 } from "node:crypto";
@@ -18369,6 +18380,10 @@ async function runWithAutoResumeLoop(options) {
         if (terminal !== void 0) presentTerminal(terminal, options.io);
         return result;
       }
+      if (processCancelSignalName(options.signal) !== void 0) {
+        if (terminal !== void 0) presentTerminal(terminal, options.io);
+        return result;
+      }
     }
     if (result !== void 0) {
       const terminal = result.terminal;
@@ -18402,6 +18417,28 @@ async function runWithAutoResumeLoop(options) {
           terminal
         };
       }
+      const cancelName = processCancelSignalName(options.signal);
+      if (cancelName !== void 0) {
+        const terminal = await attachDispatchExceptionTerminal(
+          options.admitted,
+          dispatchExceptionFailureTerminal({
+            role: options.admitted.role,
+            runId: options.admitted.runId,
+            causeError: lastThrownError,
+            errorFiles: retainedErrorFiles,
+            autoResumeAttempts,
+            endReason: `ak-role terminated by ${cancelName}`,
+            everyAttemptThrew
+          }),
+          options.io
+        );
+        await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
+        presentTerminal(terminal, options.io);
+        return {
+          exitCode: 1,
+          terminal
+        };
+      }
       if (!await isPrincipalAvailable(options.admitted.principal)) {
         const terminal = await attachDispatchExceptionTerminal(
           options.admitted,
@@ -18438,6 +18475,7 @@ var init_auto_resume = __esm({
     init_role_run_placement();
     init_run_lifecycle();
     init_config();
+    init_process_cancel();
     init_terminal();
     init_settlement();
     dummyIo = { stdout: () => {
@@ -18470,6 +18508,36 @@ function describeCaughtError(error) {
 function isStationChildOfficerDialogue(role, env) {
   return env.stationChild === true && isOfficerReviewSeat(role);
 }
+function withProcessCancelSkipAutoResume(result, signal) {
+  if (processCancelSignalName(signal) === void 0) {
+    return result;
+  }
+  return { ...result, skipAutoResume: true };
+}
+async function settleProcessCancelAfterTurn(input) {
+  const failed = await settleAfterTurnStarted(
+    input.admitted,
+    withEngineDetourInvocationScope(
+      {
+        timedOut: input.result.timedOut,
+        code: input.result.code,
+        stderr: input.result.stderr,
+        knownDiagnostic: processCancelDiagnostic(input.cancelName)
+      },
+      input.invocationScopeId
+    ),
+    input.adapters,
+    input.env.principalAuthority,
+    input.io,
+    input.persistRunState
+  );
+  return {
+    ...failed,
+    turnDispatched: true,
+    skipAutoResume: true,
+    ...input.deferredPersist
+  };
+}
 function withOnceSuccessfulBeforeDispatch(adapters) {
   const hook = adapters.beforeDispatch;
   if (hook === void 0) return adapters;
@@ -18630,6 +18698,31 @@ async function dispatchPostAdmissionTurn(input) {
   const finishAfterTurn = async (result) => {
     if (afterDispatchApplied) return result;
     afterDispatchApplied = true;
+    const cancelBeforeFinish = processCancelSignalName(env.signal);
+    if (cancelBeforeFinish !== void 0 && result.terminal !== void 0 && isLawfulTypedTerminalOutcome(result.terminal.roleOutcome)) {
+      result = {
+        ...await settleAfterTurnStarted(
+          admitted,
+          withEngineDetourInvocationScope(
+            {
+              timedOut: false,
+              code: null,
+              stderr: "",
+              knownDiagnostic: processCancelDiagnostic(cancelBeforeFinish),
+              skipRunStateWrite: true
+            },
+            request.invocationScopeId
+          ),
+          adapters,
+          env.principalAuthority,
+          io,
+          persistRunState
+        ),
+        turnDispatched: true,
+        skipAutoResume: true,
+        ...deferredPersist
+      };
+    }
     try {
       if (admitted.ticketNumber === void 0) {
         const rows = await readRecordedSubmissionRows(
@@ -18776,20 +18869,26 @@ async function dispatchPostAdmissionTurn(input) {
     try {
       result = await env.roleTurnHost.executeTurn(turnRequest);
     } catch (error) {
+      const processCancelName = processCancelSignalName(env.signal);
       const settled2 = await settleAfterTurnStarted(
         admitted,
         withEngineDetourInvocationScope({
           timedOut: false,
           code: null,
           stderr: "",
-          thrown: error
+          thrown: processCancelName === void 0 ? error : new Error(processCancelDiagnostic(processCancelName), { cause: error })
         }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
         persistRunState
       );
-      return await finishAfterTurn({ ...settled2, turnDispatched: true, ...deferredPersist });
+      return await finishAfterTurn(
+        withProcessCancelSkipAutoResume(
+          { ...settled2, turnDispatched: true, ...deferredPersist },
+          env.signal
+        )
+      );
     }
     let stderrLogWriteFailure;
     try {
@@ -18829,7 +18928,8 @@ async function dispatchPostAdmissionTurn(input) {
         credential: credentialFailure,
         runDirectory: admitted.runDirectory
       });
-      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0;
+      const processCancelName = processCancelSignalName(env.signal);
+      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0 || processCancelName !== void 0;
       hostSignalFailed = directHostFailureSignal || result.code !== null && result.code !== 0 || resolution.knownFailure !== void 0;
       settled = await adapters.trySettle(admitted, env.principalAuthority, courtScope);
       if (settled !== void 0) {
@@ -18837,7 +18937,8 @@ async function dispatchPostAdmissionTurn(input) {
       }
       const settledIsFreshThisAttempt = settled === void 0 || settled.roleOutcome.kind !== "accepted" && settled.roleOutcome.kind !== "audit_escalation" ? true : await attemptProducedFreshSubmission(admitted, courtScope);
       const staleAcceptanceOutranksRealFailure = !settledIsFreshThisAttempt && hostSignalFailed;
-      if (settled !== void 0 && shouldPresent(settled) && !directHostFailureSignal && !staleAcceptanceOutranksRealFailure && stderrLogWriteFailure === void 0) {
+      const cancelAfterSettle = processCancelSignalName(env.signal);
+      if (settled !== void 0 && shouldPresent(settled) && !directHostFailureSignal && !staleAcceptanceOutranksRealFailure && stderrLogWriteFailure === void 0 && cancelAfterSettle === void 0) {
         if (settled.roleOutcome.kind === "accepted" && request.courtAttemptId !== void 0 && request.courtAttemptId.length > 0) {
           try {
             await clearCurrentCourt(admitted.runDirectory, request.courtAttemptId);
@@ -18874,6 +18975,22 @@ async function dispatchPostAdmissionTurn(input) {
       return await finishAfterTurn({ ...settledFailure, turnDispatched: true, ...deferredPersist });
     }
     if (settledOutcome !== void 0) {
+      const lateCancel = processCancelSignalName(env.signal);
+      if (lateCancel !== void 0) {
+        return await finishAfterTurn(
+          await settleProcessCancelAfterTurn({
+            admitted,
+            cancelName: lateCancel,
+            result,
+            adapters,
+            env,
+            io,
+            persistRunState,
+            deferredPersist,
+            invocationScopeId: request.invocationScopeId
+          })
+        );
+      }
       if (persistRunState) {
         try {
           await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
@@ -18892,13 +19009,19 @@ async function dispatchPostAdmissionTurn(input) {
             io,
             persistRunState
           );
-          return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+          return await finishAfterTurn(
+            withProcessCancelSkipAutoResume(
+              { ...failed, turnDispatched: true, ...deferredPersist },
+              env.signal
+            )
+          );
         }
       }
       return await finishAfterTurn({ ...settledOutcome, ...deferredPersist });
     }
     if (hostSignalFailed) {
       const resolutionInput = controlledFailureInputFromResolution(resolution);
+      const processCancelName = processCancelSignalName(env.signal);
       const stderrLogWriteDetails = stderrLogWriteFailure === void 0 ? void 0 : { stderrLogWriteFailure: describeCaughtError(stderrLogWriteFailure) };
       const failed = await settleAfterTurnStarted(
         admitted,
@@ -18907,6 +19030,7 @@ async function dispatchPostAdmissionTurn(input) {
           code: result.code,
           stderr: result.stderr,
           ...resolutionInput,
+          ...processCancelName === void 0 ? {} : { knownDiagnostic: processCancelDiagnostic(processCancelName) },
           // Secondary fact only — never the cause. Rides on whichever channel
           // classification actually reads (knownFailure.details owns it when
           // a knownFailure exists; the top-level knownDetails otherwise).
@@ -18922,7 +19046,12 @@ async function dispatchPostAdmissionTurn(input) {
         io,
         persistRunState
       );
-      return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+      return await finishAfterTurn(
+        withProcessCancelSkipAutoResume(
+          { ...failed, turnDispatched: true, ...deferredPersist },
+          env.signal
+        )
+      );
     }
     if (stderrLogWriteFailure !== void 0) {
       const failed = await settleAfterTurnStarted(
@@ -18945,6 +19074,22 @@ async function dispatchPostAdmissionTurn(input) {
       await settleHostEndedNoReceipt(admitted, env.principalAuthority, courtScope),
       courtScope
     );
+    const noReceiptCancel = processCancelSignalName(env.signal);
+    if (noReceiptCancel !== void 0) {
+      return await finishAfterTurn(
+        await settleProcessCancelAfterTurn({
+          admitted,
+          cancelName: noReceiptCancel,
+          result,
+          adapters,
+          env,
+          io,
+          persistRunState,
+          deferredPersist,
+          invocationScopeId: request.invocationScopeId
+        })
+      );
+    }
     if (persistRunState) {
       try {
         await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
@@ -18963,7 +19108,12 @@ async function dispatchPostAdmissionTurn(input) {
           io,
           persistRunState
         );
-        return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+        return await finishAfterTurn(
+          withProcessCancelSkipAutoResume(
+            { ...failed, turnDispatched: true, ...deferredPersist },
+            env.signal
+          )
+        );
       }
     }
     return await finishAfterTurn({
@@ -19159,6 +19309,7 @@ async function runPostAdmissionSeatResume(input) {
         io: input.io,
         sessionAppender: env.sessionAppender,
         autoResumeLimit: env.autoResumeLimit,
+        ...env.signal === void 0 ? {} : { signal: env.signal },
         buildInitialPayload: () => ({ resumeTurn: false }),
         buildResumePayload: () => ({ resumeTurn: true }),
         // Same as public manual resume: prior-court sealed acceptance is not a
@@ -19262,6 +19413,7 @@ async function runPostAdmissionResumable(input) {
     io,
     sessionAppender: env.sessionAppender,
     autoResumeLimit: env.autoResumeLimit,
+    ...env.signal === void 0 ? {} : { signal: env.signal },
     buildInitialPayload: buildScopedInitial,
     buildResumePayload: buildScopedResume,
     dispatch: async (request, lease, _isFirst, attemptIo) => {
@@ -19370,6 +19522,7 @@ var init_post_admission = __esm({
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
+    init_process_cancel();
     init_activation_ledger_topology();
     init_settlement();
     init_terminal();
@@ -21935,7 +22088,7 @@ init_engine_detour();
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { appendFile as appendFile3, mkdir as mkdir7, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { dirname as dirname22, join as join41 } from "node:path";
+import { dirname as dirname21, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -22064,7 +22217,7 @@ init_sitian_facade();
 init_submission_ledger();
 init_collector_ledger();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { readFileSync as readFileSync6, writeSync as writeSync4 } from "node:fs";
+import { readFileSync as readFileSync6, writeSync as writeSync3 } from "node:fs";
 import { join as join40 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
@@ -22106,16 +22259,7 @@ function namedActivationCause(error) {
 init_activation_ledger_topology();
 
 // src/activation-ledger.ts
-init_activation_ledger_topology();
 init_activation_ledger_git();
-import {
-  constants as constants2,
-  closeSync as closeSync2,
-  fstatSync,
-  openSync as openSync2,
-  writeSync
-} from "node:fs";
-import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve16 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -22219,129 +22363,11 @@ function durableSessionPointer(sessionManager) {
 
 // src/activation-ledger.ts
 init_activation_ledger_topology();
-var ACTIVATION_LEDGER_APPEND_OPEN_FLAGS = constants2.O_APPEND | constants2.O_CREAT | constants2.O_WRONLY | constants2.O_NOFOLLOW;
-var ACCEPTED_ACTIVATION_EVENT = "accepted-activation";
-var ACCEPTED_ACTIVATION_FACT_KEYS = Object.freeze([
-  "event",
-  "role",
-  "observedAt",
-  "bookKey",
-  "session",
-  "correlation"
-]);
-function correlationIdentityFromEnv(env = process.env) {
-  const raw = env.AK_CORRELATION_ID;
-  if (typeof raw === "string" && raw.trim().length > 0) {
-    return { kind: "caller", id: raw };
-  }
-  return { kind: "absent" };
-}
-function projectAcceptedActivationFact(input) {
-  const closed = {
-    event: ACCEPTED_ACTIVATION_EVENT,
-    role: input.role,
-    observedAt: input.observedAt,
-    bookKey: input.bookKey,
-    session: { kind: "session-file", path: input.session.path },
-    correlation: input.correlation.kind === "caller" ? { kind: "caller", id: input.correlation.id } : { kind: "absent" }
-  };
-  return Object.fromEntries(
-    ACCEPTED_ACTIVATION_FACT_KEYS.map((key) => [key, closed[key]])
-  );
-}
-function buildAcceptedActivationFact(input) {
-  return projectAcceptedActivationFact(input);
-}
-function serializeAcceptedActivationFact(fact) {
-  return `${JSON.stringify(projectAcceptedActivationFact(fact))}
-`;
-}
-function appendActivationLedgerLine(ledgerPath, line2, options) {
-  if (!isAbsolute10(options.ledgerHome)) {
-    throw new ActivationLedgerError(
-      `activation ledger home must be absolute: ${options.ledgerHome}`
-    );
-  }
-  const resolvedLedger = resolve16(ledgerPath);
-  const resolvedHome = resolve16(options.ledgerHome);
-  const parent = dirname19(resolvedLedger);
-  ensureRealDirectoryTree(resolvedHome, parent);
-  assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
-  if (typeof constants2.O_NOFOLLOW !== "number") {
-    throw new ActivationLedgerError(
-      "activation ledger append requires O_NOFOLLOW open-flag support (anti-symlink TOCTOU protection must not be silently dropped); refusing to append"
-    );
-  }
-  const bytes = Buffer.isBuffer(line2) ? line2 : Buffer.from(line2);
-  let ledgerFd;
-  let primaryFailure;
-  try {
-    try {
-      ledgerFd = openSync2(resolvedLedger, ACTIVATION_LEDGER_APPEND_OPEN_FLAGS, 420);
-    } catch (error) {
-      throw new ActivationLedgerError(
-        `activation ledger failed to open ledger file (${resolvedLedger}): ${errorText(error)}`,
-        { cause: error }
-      );
-    }
-    let opened;
-    try {
-      opened = fstatSync(ledgerFd);
-    } catch (error) {
-      throw new ActivationLedgerError(
-        `activation ledger failed to fstat ledger file (${resolvedLedger}): ${errorText(error)}`,
-        { cause: error }
-      );
-    }
-    if (!opened.isFile()) {
-      throw new ActivationLedgerError(
-        `activation ledger is not a regular file: ${resolvedLedger}`
-      );
-    }
-    const written = writeSync(ledgerFd, bytes, 0, bytes.length, null);
-    if (written !== bytes.length) {
-      throw new ActivationLedgerError(
-        `activation ledger short write: wrote ${written} of ${bytes.length} bytes to ${resolvedLedger}`
-      );
-    }
-  } catch (error) {
-    primaryFailure = error;
-  }
-  if (ledgerFd !== void 0) {
-    try {
-      closeSync2(ledgerFd);
-    } catch (closeFailure) {
-      if (primaryFailure !== void 0) {
-        throw new AggregateError(
-          [primaryFailure, closeFailure],
-          "activation ledger operation and close failed",
-          { cause: primaryFailure }
-        );
-      }
-      throw closeFailure;
-    }
-  }
-  if (primaryFailure !== void 0) throw primaryFailure;
-}
-function appendAcceptedActivationFact(ledgerPath, fact, options) {
-  appendActivationLedgerLine(
-    ledgerPath,
-    Buffer.from(serializeAcceptedActivationFact(fact), "utf8"),
-    { ledgerHome: options.ledgerHome }
-  );
-}
-function appendAcceptedActivationToBook(options) {
-  appendAcceptedActivationFact(
-    activationWaitingLedgerPath(options.ledgerHome, options.fact.bookKey),
-    options.fact,
-    { ledgerHome: options.ledgerHome }
-  );
-}
 
 // src/stderr-jsonl.ts
-import { writeSync as writeSync2 } from "node:fs";
+import { writeSync } from "node:fs";
 var STDERR_JSONL_WRITE_RETRY_LIMIT = 100;
-function writeStderrJsonlRecord(record4, write = writeSync2) {
+function writeStderrJsonlRecord(record4, write = writeSync) {
   const bytes = Buffer.from(`${JSON.stringify(record4)}
 `);
   let offset = 0;
@@ -22361,7 +22387,7 @@ function writeStderrJsonlRecord(record4, write = writeSync2) {
 }
 
 // src/tool-execution-observation.ts
-import { writeSync as writeSync3 } from "node:fs";
+import { writeSync as writeSync2 } from "node:fs";
 import { Type as Type13 } from "typebox";
 import { Value as Value2 } from "typebox/value";
 var TOOL_EXECUTION_UPDATE_THROTTLE_MS = 3e4;
@@ -22392,7 +22418,7 @@ function validateToolExecutionObservationRecord(record4) {
   }
   return record4;
 }
-function writeToolExecutionObservationRecord(record4, write = writeSync3) {
+function writeToolExecutionObservationRecord(record4, write = writeSync2) {
   writeStderrJsonlRecord(validateToolExecutionObservationRecord(record4), write);
 }
 function isProducingToolUpdate(partialResult) {
@@ -22629,9 +22655,9 @@ import { join as join38, sep as sep6 } from "node:path";
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { rename as rename3, rm as rm5, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname20, join as join37 } from "node:path";
+import { dirname as dirname19, join as join37 } from "node:path";
 async function writeFileAtomically(destination, contents) {
-  const parent = dirname20(destination);
+  const parent = dirname19(destination);
   const temporary = join37(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
     await writeFile11(temporary, contents);
@@ -23935,7 +23961,7 @@ import { createHash as createHash9 } from "node:crypto";
 init_navigator_invocation_identity();
 init_packaged_role_registry();
 init_activation_ledger_topology();
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve16 } from "node:path";
 import "@earendil-works/pi-coding-agent";
 import { Type as Type22 } from "typebox";
 
@@ -24383,7 +24409,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
-  const resolvedReference = resolve17(cwd, reference);
+  const resolvedReference = resolve16(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
     return subjectRoot;
@@ -25085,7 +25111,7 @@ init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
 var WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE = "commit-reminder-bounce";
@@ -25134,7 +25160,7 @@ function escapeGitConfigValueRegex(value) {
 function unsetOwnedHooksPath(file) {
   const owned = [];
   for (const value of tryGetAll(file, "core.hooksPath")) {
-    if (!ownedHook(resolve18(value, HOOK_FILE))) continue;
+    if (!ownedHook(resolve17(value, HOOK_FILE))) continue;
     try {
       gitFile(file, [
         "--unset-all",
@@ -25149,15 +25175,15 @@ function unsetOwnedHooksPath(file) {
   return owned;
 }
 function rmOwnedDir(dir) {
-  const hookPath = resolve18(dir, HOOK_FILE);
+  const hookPath = resolve17(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
   if (existsSync12(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
-  const root = resolve18(commonDir, "worktrees");
+  const root = resolve17(commonDir, "worktrees");
   if (!existsSync12(root)) return [];
-  return readdirSync3(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
+  return readdirSync3(root).map((name) => resolve17(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
   let inside;
@@ -25171,14 +25197,14 @@ function uninstallPackageWorkerHooks(cwd) {
   const clear = (configFile) => {
     for (const hooks of unsetOwnedHooksPath(configFile)) rmOwnedDir(hooks);
   };
-  clear(resolve18(commonDir, "config"));
-  clear(resolve18(commonDir, "config.worktree"));
-  rmOwnedDir(resolve18(commonDir, HOOKS_DIR));
-  const legacy = resolve18(commonDir, "hooks", HOOK_FILE);
+  clear(resolve17(commonDir, "config"));
+  clear(resolve17(commonDir, "config.worktree"));
+  rmOwnedDir(resolve17(commonDir, HOOKS_DIR));
+  const legacy = resolve17(commonDir, "hooks", HOOK_FILE);
   if (ownedHook(legacy)) rmSync(legacy, { force: true });
   for (const gitDir of linkedGitDirs(commonDir)) {
-    clear(resolve18(gitDir, "config.worktree"));
-    rmOwnedDir(resolve18(gitDir, HOOKS_DIR));
+    clear(resolve17(gitDir, "config.worktree"));
+    rmOwnedDir(resolve17(gitDir, HOOKS_DIR));
   }
 }
 function isRecord13(value) {
@@ -25931,7 +25957,7 @@ async function executeActivationStage(role, stage, infrastructure) {
     throw activationError;
   }
 }
-function writeActivationTraceRecord(record4, write = writeSync4) {
+function writeActivationTraceRecord(record4, write = writeSync3) {
   writeStderrJsonlRecord(record4, write);
 }
 var ActivationBarrierError = class extends Error {
@@ -27163,11 +27189,8 @@ function createRoleRuntimeExtension(dependencies) {
         }
       };
       try {
-        const bookKey = resolveBookKeyFromGit(ctx.cwd);
-        const correlation = correlationIdentityFromEnv();
-        const sessionFile = ctx.sessionManager.getSessionFile?.() || ctx.sessionManager.getSessionDir?.();
-        const ledgerHome = resolveActivationLedgerHomeForPath(sessionFile);
-        const session = durableSessionPointer(ctx.sessionManager);
+        resolveBookKeyFromGit(ctx.cwd);
+        durableSessionPointer(ctx.sessionManager);
         const isStationChild = roleHost.getFlag(STATION_CHILD_FLAG.name) === true;
         if (dependencies.createNavigatorAttendance !== void 0 && entry.role !== "navigator" && !isStationChild) {
           navigatorSessionParent = ctx.sessionManager.getSessionFile();
@@ -27254,16 +27277,6 @@ function createRoleRuntimeExtension(dependencies) {
           if (entry.role === "coder") coder.armSubmissionGate(ctx.cwd, ctx.sessionManager);
           else fixer.armSubmissionGate(ctx.cwd, ctx.sessionManager);
         }
-        appendAcceptedActivationToBook({
-          ledgerHome,
-          fact: buildAcceptedActivationFact({
-            role: entry.role,
-            observedAt: clock(),
-            bookKey,
-            session,
-            correlation
-          })
-        });
         admitted = true;
       } catch (error) {
         failInfrastructure(error, ctx);
@@ -27277,11 +27290,11 @@ init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
 async function listen(server, path) {
-  await new Promise((resolve22, reject) => {
+  await new Promise((resolve21, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve22();
+      resolve21();
     });
   });
 }
@@ -27317,7 +27330,7 @@ async function prepareRoleEnvelope(options) {
   const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID9();
   await mkdir7(request.runDirectory, { recursive: true });
   let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
-  await mkdir7(dirname22(sessionFile), { recursive: true });
+  await mkdir7(dirname21(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -27367,7 +27380,7 @@ async function prepareRoleEnvelope(options) {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname22(sessionFile),
+      getSessionDir: () => dirname21(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -27714,8 +27727,8 @@ async function prepareRoleEnvelope(options) {
     try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
-      await new Promise((resolve22, reject) => {
-        server.close((error) => error ? reject(error) : resolve22());
+      await new Promise((resolve21, reject) => {
+        server.close((error) => error ? reject(error) : resolve21());
       });
     } catch (error) {
       cleanupFailures.push(error);
@@ -27857,12 +27870,12 @@ import { join as join42 } from "node:path";
 // src/canonical-skill-binding.ts
 import { readFile as readFile20, realpath as realpath8 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname as dirname23, resolve as resolve19 } from "node:path";
+import { dirname as dirname22, resolve as resolve18 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
 function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
   const matchedPath = evidence?.location === configuredPath ? configuredPath : evidence?.location === snapshot.path ? snapshot.path : void 0;
   const expectedContent = matchedPath === void 0 ? void 0 : snapshot.body;
-  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname23(matchedPath)}.
+  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname22(matchedPath)}.
 
 ${snapshot.body}`;
   if (evidence?.name !== name || matchedPath === void 0 || evidence.content !== expectedContent && evidence.content !== prefixedContent || evidence.userMessage !== originalRequest) {
@@ -27880,7 +27893,7 @@ var CanonicalSkillUnavailableError = class extends Error {
   code = "canonical-skill-unavailable";
 };
 async function loadCanonicalSkillBinding(name) {
-  const configuredPath = resolve19(
+  const configuredPath = resolve18(
     homedir(),
     `.agents/skills/${name}/SKILL.md`
   );
@@ -27899,7 +27912,7 @@ async function loadCanonicalSkillBinding(name) {
   const snapshot = Object.freeze({
     raw,
     path,
-    baseDir: dirname23(path),
+    baseDir: dirname22(path),
     body,
     snapshotIdentity: Object.freeze({ text: raw })
   });
@@ -27928,7 +27941,7 @@ init_doctor_evidence();
 init_doctor_evidence();
 init_host_contracts();
 import { readFile as readFile21 } from "node:fs/promises";
-import { resolve as resolve20 } from "node:path";
+import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
 init_invocation();
@@ -27936,7 +27949,7 @@ function navigatorInputReference(getFlag, role) {
   if (getFlag === void 0) return void 0;
   const name = packagedRoleInputFlag(role);
   const value = name === void 0 ? void 0 : getFlag(name);
-  return typeof value === "string" && value !== "" ? resolve20(value) : void 0;
+  return typeof value === "string" && value !== "" ? resolve19(value) : void 0;
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
@@ -27957,7 +27970,7 @@ async function loadNavigatorWorkContext(options) {
   }
   const publicRunDir = runDirectoryFromHostContext(options.context);
   const currentSessionDir = options.context.sessionManager.getSessionDir();
-  const isBoundPublicRun = publicRunDir !== void 0 && resolve20(currentSessionDir) === resolve20(publicRunDir, "session");
+  const isBoundPublicRun = publicRunDir !== void 0 && resolve19(currentSessionDir) === resolve19(publicRunDir, "session");
   if (options.role === "judge" && isBoundPublicRun) {
     let admitted;
     try {
@@ -27990,9 +28003,9 @@ async function loadNavigatorWorkContext(options) {
   }
   const workRoot = subjectRoot.includes("/.ak/work/") ? subjectRoot : void 0;
   const authorityFiles = workRoot === void 0 ? [] : [
-    resolve20(workRoot, "authority.md"),
-    resolve20(workRoot, "authority.txt"),
-    resolve20(workRoot, "design-v2/owner-direction.md")
+    resolve19(workRoot, "authority.md"),
+    resolve19(workRoot, "authority.txt"),
+    resolve19(workRoot, "design-v2/owner-direction.md")
   ];
   let authorityMaterial;
   for (const path of authorityFiles) {
@@ -28022,7 +28035,7 @@ async function loadNavigatorWorkContext(options) {
 init_notary_source_run();
 
 // src/package-resources/method-skill-binding.ts
-import { dirname as dirname24 } from "node:path";
+import { dirname as dirname23 } from "node:path";
 init_method_skill();
 async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const material = await loadPackagedMethodSkillMaterial(packageRoot, name);
@@ -28030,7 +28043,7 @@ async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const snapshot = Object.freeze({
     raw: material.raw,
     path: material.skillPath,
-    baseDir: dirname24(material.skillPath),
+    baseDir: dirname23(material.skillPath),
     body: material.body,
     snapshotIdentity: Object.freeze({ text: material.raw })
   });
@@ -28176,7 +28189,7 @@ function hostAbortedError(message = "host aborted") {
 function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
   if (abortSignal?.aborted) return Promise.reject(hostAbortedError(message));
   if (abortSignal === void 0) return work;
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const onAbort = () => {
       if (settled) return;
@@ -28191,7 +28204,7 @@ function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
         if (settled) return;
         settled = true;
         abortSignal.removeEventListener("abort", onAbort);
-        resolve22(value);
+        resolve21(value);
       },
       (error) => {
         if (settled) return;
@@ -28431,8 +28444,8 @@ function connectAcpStdio(options) {
     request(method, params) {
       if (closed) return Promise.reject(terminalError ?? acpError("acp-connection-closed", "ACP connection is closed"));
       const id = ++nextId;
-      return new Promise((resolve22, reject) => {
-        pending.set(id, { resolve: resolve22, reject });
+      return new Promise((resolve21, reject) => {
+        pending.set(id, { resolve: resolve21, reject });
         child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `, (error) => {
           if (error === null || error === void 0) return;
@@ -28459,7 +28472,7 @@ function connectAcpStdio(options) {
       settleClosed(acpError("acp-connection-closed", "ACP connection is closed"));
       child.stdin.end();
       child.kill("SIGTERM");
-      await new Promise((resolve22) => child.once("close", () => resolve22()));
+      await new Promise((resolve21) => child.once("close", () => resolve21()));
     }
   });
 }
@@ -28657,9 +28670,9 @@ function createAcpRoleTurnHost(config) {
 }
 
 // src/acp-host/seat-profile-soul.ts
-import { constants as constants3 } from "node:fs";
+import { constants as constants2 } from "node:fs";
 import { access as access4, copyFile, lstat as lstat8, mkdir as mkdir8, readlink as readlink2, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname25, join as join44, relative as relative4, resolve as resolve21 } from "node:path";
+import { dirname as dirname24, join as join44, relative as relative4, resolve as resolve20 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
@@ -28668,7 +28681,7 @@ function packageRoleSoulPath(packageRoot, role) {
 }
 async function pathExists2(path) {
   try {
-    await access4(path, constants3.F_OK);
+    await access4(path, constants2.F_OK);
     return true;
   } catch {
     return false;
@@ -28677,13 +28690,13 @@ async function pathExists2(path) {
 async function ensureSeatProfileSoul(options) {
   const { spec, operatorHome, packageRoot, role } = options;
   const profileName = seatProfileName(spec, role);
-  const soulTarget = resolve21(packageRoleSoulPath(packageRoot, role));
+  const soulTarget = resolve20(packageRoleSoulPath(packageRoot, role));
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
   const profilesRoot = join44(operatorHome, ...spec.profilesRootFromHome);
   const profileDir = join44(profilesRoot, profileName);
-  const hostRoot = dirname25(profilesRoot);
+  const hostRoot = dirname24(profilesRoot);
   const soulPath = join44(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
     await mkdir8(profileDir, { recursive: true });