@akagilnc/pi-workflow-roles 0.1.4620 → 0.1.4641

package/dist/acp-host/production-host.js

@@ -62,7 +62,7 @@ async function spawnEngineDetourOnce(input) {
   }
   const command = input.argv[0];
   const args = input.argv.slice(1);
-  return await new Promise((resolve22, reject) => {
+  return await new Promise((resolve21, reject) => {
     let settled = false;
     const signal = input.signal;
     const child = spawn(command, args, {
@@ -92,7 +92,7 @@ async function spawnEngineDetourOnce(input) {
       if (signal !== void 0) {
         signal.removeEventListener("abort", onAbort);
       }
-      resolve22(result);
+      resolve21(result);
     };
     const onAbort = () => {
       fail4(signal !== void 0 ? abortReasonError(signal) : new Error("aborted"));
@@ -202,7 +202,6 @@ var activation_ledger_topology_exports = {};
 __export(activation_ledger_topology_exports, {
   ActivationLedgerError: () => ActivationLedgerError,
   activationBookDirectory: () => activationBookDirectory,
-  activationWaitingLedgerPath: () => activationWaitingLedgerPath,
   assertLedgerFileInsideHome: () => assertLedgerFileInsideHome,
   ensureRealDirectoryTree: () => ensureRealDirectoryTree,
   errnoCode: () => errnoCode,
@@ -265,9 +264,6 @@ function resolveActivationLedgerHomeForPath(path) {
 function activationBookDirectory(ledgerHome, bookKey) {
   return join2(ledgerHome, "books", bookKey);
 }
-function activationWaitingLedgerPath(ledgerHome, bookKey) {
-  return join2(activationBookDirectory(ledgerHome, bookKey), "waiting.jsonl");
-}
 function pathContainedIn(root, candidate) {
   const rel = relative(root, candidate);
   return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
@@ -930,6 +926,15 @@ var init_archivist_record_entry = __esm({
 });
 
 // src/run-ticket-number.ts
+var run_ticket_number_exports = {};
+__export(run_ticket_number_exports, {
+  MIGRATION_TICKET_DERIVATION_PAGE: () => MIGRATION_TICKET_DERIVATION_PAGE,
+  isSafePositiveTicketNumber: () => isSafePositiveTicketNumber,
+  readBoardTicketNumber: () => readBoardTicketNumber,
+  readMigrationDerivedTicketNumber: () => readMigrationDerivedTicketNumber,
+  readRunTicketNumber: () => readRunTicketNumber,
+  requireSafePositiveTicketNumber: () => requireSafePositiveTicketNumber
+});
 import { readFile } from "node:fs/promises";
 import { join as join5 } from "node:path";
 function isEnoent(error) {
@@ -969,9 +974,22 @@ async function readBoardPageTicketNumber(runDirectory, page) {
 async function readBoardTicketNumber(runDirectory) {
   return await readBoardPageTicketNumber(runDirectory, "admitted-request.json") ?? await readBoardPageTicketNumber(runDirectory, "invocation.json");
 }
+async function readMigrationDerivedTicketNumber(runDirectory) {
+  const record4 = await readJsonObject(
+    join5(runDirectory, MIGRATION_TICKET_DERIVATION_PAGE)
+  );
+  if (record4 === void 0) return void 0;
+  if (record4.derivation !== "worktree-path-basename") return void 0;
+  return ticketFromRecord(record4);
+}
+async function readRunTicketNumber(runDirectory) {
+  return await readBoardTicketNumber(runDirectory) ?? await readMigrationDerivedTicketNumber(runDirectory);
+}
+var MIGRATION_TICKET_DERIVATION_PAGE;
 var init_run_ticket_number = __esm({
   "src/run-ticket-number.ts"() {
     "use strict";
+    MIGRATION_TICKET_DERIVATION_PAGE = "migration-ticket-derivation.json";
   }
 });
 
@@ -1354,15 +1372,165 @@ var init_gatekeeper_output = __esm({
   }
 });
 
+// src/run-terminal-artifacts.ts
+var run_terminal_artifacts_exports = {};
+__export(run_terminal_artifacts_exports, {
+  RUN_TERMINAL_ARTIFACT_FILES: () => RUN_TERMINAL_ARTIFACT_FILES,
+  RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS: () => RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS,
+  isUniqueErrorFallbackName: () => isUniqueErrorFallbackName,
+  readRunTerminalArtifact: () => readRunTerminalArtifact,
+  runIdFromRunDirectory: () => runIdFromRunDirectory
+});
+import { readdir as readdir2, readFile as readFile2 } from "node:fs/promises";
+import { basename as basename3, dirname as dirname5, join as join8 } from "node:path";
+function isMissingPathError2(error) {
+  return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
+}
+function errorText2(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readUsableTerminalArtifactBody(body) {
+  if (body === null) {
+    return { ok: false, reason: "terminal artifact JSON value is null" };
+  }
+  if (!isRecord(body)) {
+    return {
+      ok: false,
+      reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
+    };
+  }
+  if (typeof body.role !== "string" || body.role.trim() === "") {
+    return {
+      ok: false,
+      reason: "terminal artifact missing nonblank producer-owned role field"
+    };
+  }
+  return { ok: true, body };
+}
+async function readTerminalArtifactAtPath(path, file) {
+  let raw;
+  try {
+    raw = await readFile2(path, "utf8");
+  } catch (error) {
+    if (isMissingPathError2(error)) return void 0;
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: errorText2(error)
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (error) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: error instanceof Error ? error.message : `terminal artifact JSON parse failed: ${String(error)}`
+    };
+  }
+  const usable = readUsableTerminalArtifactBody(parsed);
+  if (!usable.ok) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: usable.reason
+    };
+  }
+  return { status: "present", file, path, body: usable.body };
+}
+async function listUniqueErrorFallbackPaths(directories) {
+  const found = [];
+  for (const dir of directories) {
+    let names;
+    try {
+      names = await readdir2(dir);
+    } catch (error) {
+      if (isMissingPathError2(error)) continue;
+      throw error;
+    }
+    for (const name of names.sort((a, b) => a.localeCompare(b))) {
+      if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
+      found.push(join8(dir, name));
+    }
+  }
+  return found;
+}
+function runIdFromRunDirectory(runDirectory) {
+  const name = basename3(runDirectory);
+  const at = name.lastIndexOf("@");
+  if (at <= 0 || at === name.length - 1) return void 0;
+  return name.slice(0, at);
+}
+function presentUniqueFallbackBoundToRun(body, expectedRunId) {
+  if (expectedRunId === void 0) return false;
+  return typeof body.runId === "string" && body.runId === expectedRunId;
+}
+async function readRunTerminalArtifact(runDirectory) {
+  const artifactsDir = roleRunArtifactsDirectory(runDirectory);
+  for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
+    const path = join8(artifactsDir, file);
+    const read = await readTerminalArtifactAtPath(path, file);
+    if (read !== void 0) return read;
+  }
+  for (const relative5 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
+    const path = join8(runDirectory, relative5);
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read !== void 0) return read;
+  }
+  for (const path of await listUniqueErrorFallbackPaths([artifactsDir, runDirectory])) {
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read !== void 0) return read;
+  }
+  const expectedRunId = runIdFromRunDirectory(runDirectory);
+  for (const path of await listUniqueErrorFallbackPaths([dirname5(runDirectory)])) {
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read === void 0) continue;
+    if (read.status === "present") {
+      if (!presentUniqueFallbackBoundToRun(read.body, expectedRunId)) continue;
+      return read;
+    }
+  }
+  return { status: "absent" };
+}
+function isUniqueErrorFallbackName(name) {
+  return UNIQUE_ERROR_FALLBACK_NAME.test(basename3(name));
+}
+var RUN_TERMINAL_ARTIFACT_FILES, RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS, UNIQUE_ERROR_FALLBACK_NAME;
+var init_run_terminal_artifacts = __esm({
+  "src/run-terminal-artifacts.ts"() {
+    "use strict";
+    init_role_run_placement();
+    RUN_TERMINAL_ARTIFACT_FILES = [
+      "report.json",
+      "error.json",
+      "audit-incomplete.json"
+    ];
+    RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
+      "artifacts/error.settlement.json",
+      "error.settlement.json"
+    ];
+    UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
+  }
+});
+
 // src/gatekeeper-role.ts
 function gateSeatLabel(stage) {
   if (stage === "inspector") return "\u53F0\u9662";
   if (stage === "auditor") return "\u5BA1\u5211\u9662";
+  if (stage === "countersign") return "\u7ED9\u4E8B\u4E2D";
   return "\u7B26\u5B9D\u90CE";
 }
 function gateOfficerForSubject(subject) {
   if (subject.kind === "worker_completion") return "inspector";
   if (subject.kind === "judge_compliance") return "auditor";
+  if (subject.kind === "secretariat_verdict") return "countersign";
   return "notary";
 }
 function failureReason(error) {
@@ -1376,9 +1544,26 @@ function readRecord(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
   return value;
 }
+function gateStatusFromCountersign(status) {
+  if (status === "converged") return "pass";
+  if (status === "continue") return "bounce";
+  if (status === "escalate") return "escalate";
+  return void 0;
+}
 function projectOfficerDecision(officer, decision, fallbackStatus) {
   const receipt = retainedReceipt(decision);
   const record4 = readRecord(decision);
+  if (officer === "countersign") {
+    const countersignStatus = record4 !== void 0 && typeof record4.countersignStatus === "string" ? record4.countersignStatus : void 0;
+    const status2 = typeof countersignStatus === "string" ? gateStatusFromCountersign(countersignStatus) : void 0;
+    if (status2 === "pass") {
+      return { status: "pass", officer, receipt };
+    }
+    if (status2 === "bounce" || status2 === "escalate") {
+      return { status: status2, officer, receipt };
+    }
+    return { status: "needs_reask", officer, receipt };
+  }
   const status = (record4 !== void 0 && typeof record4.status === "string" ? record4.status : void 0) ?? fallbackStatus;
   if (status === "pass") {
     return { status: "pass", officer, receipt };
@@ -1409,6 +1594,26 @@ function projectOfficerPayloads(officer, payloads, fallbackStatus) {
   }
   return projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
 }
+function officerRunIdFromSummoned(summoned) {
+  if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
+    const fromDir = runIdFromRunDirectory(summoned.runDirectory);
+    if (fromDir !== void 0) return fromDir;
+  }
+  const terminal = summoned.terminal;
+  if (terminal !== void 0 && typeof terminal.runId === "string" && terminal.runId.trim() !== "") {
+    return terminal.runId;
+  }
+  return void 0;
+}
+function withOfficerRunId(result, summoned) {
+  if (result.status !== "pass" && result.status !== "bounce" && result.status !== "escalate" && result.status !== "needs_reask") {
+    return result;
+  }
+  if (typeof result.runId === "string" && result.runId.trim() !== "") return result;
+  const runId = officerRunIdFromSummoned(summoned);
+  if (runId === void 0) return result;
+  return { ...result, runId };
+}
 function projectOfficerTerminal(officer, summoned) {
   const terminal = summoned.terminal;
   const outcome = terminal?.roleOutcome;
@@ -1441,22 +1646,34 @@ function projectOfficerTerminal(officer, summoned) {
     };
   }
   if (outcome.kind === "audit_escalation") {
-    return {
-      status: "escalate",
-      officer,
-      // This-court receipt only (#879) — historical rows remain on terminal.submissions.
-      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
-    };
+    return withOfficerRunId(
+      {
+        status: "escalate",
+        officer,
+        // This-court receipt only (#879) — historical rows remain on terminal.submissions.
+        receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+      },
+      summoned
+    );
   }
   if (outcome.kind === "accepted") {
-    return projectOfficerPayloads(officer, thisCourt, outcome.status);
+    return withOfficerRunId(
+      projectOfficerPayloads(officer, thisCourt, outcome.status),
+      summoned
+    );
   }
-  return {
-    status: "needs_reask",
-    officer,
-    // This-court receipt only (#879).
-    receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
-  };
+  return withOfficerRunId(
+    {
+      status: "needs_reask",
+      officer,
+      // This-court receipt only (#879).
+      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+    },
+    summoned
+  );
+}
+function officerConclusionReask(officer) {
+  return officer === "countersign" ? COUNTERSIGN_CONCLUSION_REASK : OFFICER_CONCLUSION_REASK;
 }
 async function projectGatekeeperRun(options) {
   const officer = gateOfficerForSubject(options.subject);
@@ -1492,7 +1709,7 @@ async function projectGatekeeperRun(options) {
     summoned
   };
 }
-var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK;
+var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK, COUNTERSIGN_CONCLUSION_REASK;
 var init_gatekeeper_role = __esm({
   "src/gatekeeper-role.ts"() {
     "use strict";
@@ -1500,6 +1717,7 @@ var init_gatekeeper_role = __esm({
     init_submission_errors();
     init_inspector_contracts();
     init_gatekeeper_output();
+    init_run_terminal_artifacts();
     init_submission_errors();
     GATEKEEPER_TOOL_SPEC = {
       name: GATEKEEPER_OUTPUT_TOOL_NAME,
@@ -1509,6 +1727,7 @@ var init_gatekeeper_role = __esm({
       parameters: gatekeeperOutputSchema
     };
     OFFICER_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684\u7ED3\u8BBA\u4E0D\u662F pass\u3001bounce\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0C\u7ED3\u8BBA\u5B57\u6BB5\u5199\u660E\u5176\u4E00\uFF1B\u6253\u56DE\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
+    COUNTERSIGN_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684 countersignStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0CcountersignStatus \u5199\u660E\u5176\u4E00\uFF1B\u5C01\u9A73\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
   }
 });
 
@@ -1519,12 +1738,12 @@ __export(session_assistant_usage_exports, {
   sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
   usageFromPublicSummon: () => usageFromPublicSummon
 });
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile23 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile23(sessionFile, "utf8");
+    text = await readFile24(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -1589,7 +1808,7 @@ async function readAssistantUsageFromSessionFile(sessionFile) {
 }
 function sessionFileFromPublicSummon(summoned) {
   if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join8(summoned.runDirectory, "session", "session.jsonl");
+    return join9(summoned.runDirectory, "session", "session.jsonl");
   }
   const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
   if (fromArtifacts !== void 0) return fromArtifacts;
@@ -1598,7 +1817,7 @@ function sessionFileFromPublicSummon(summoned) {
   const facts = outcome.decisiveFacts;
   const pointer = facts?.runPointer;
   if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join8(pointer, "session", "session.jsonl");
+    return join9(pointer, "session", "session.jsonl");
   }
   return void 0;
 }
@@ -1615,7 +1834,7 @@ var init_session_assistant_usage = __esm({
 
 // src/package-resources/engine-material.ts
 import { existsSync as existsSync2, readdirSync as readdirSync2 } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 function pickEngineAxis(source) {
   return {
     ...source.engine === void 0 ? {} : { engine: source.engine },
@@ -1636,11 +1855,11 @@ function isEngineNameSyntax(name) {
   return true;
 }
 function resolveEngineMaterialDirectory(packageRoot) {
-  return join9(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
+  return join10(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
 }
 function resolveEngineMaterialPath(packageRoot, name) {
   const legal = assertLegalEngineName(name);
-  return join9(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
+  return join10(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
 }
 function assertLegalEngineName(name) {
   if (!isEngineNameSyntax(name)) {
@@ -1698,7 +1917,7 @@ __export(durable_principal_exports, {
   piDurablePrincipalAuthority: () => piDurablePrincipalAuthority
 });
 import { lstat } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function encode(coordinates) {
   return coordinates;
 }
@@ -1748,7 +1967,7 @@ var init_durable_principal = __esm({
         }
         return {
           sessionDirectory: record4.sessionDirectory,
-          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join10(record4.sessionDirectory, "session.jsonl")
+          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join11(record4.sessionDirectory, "session.jsonl")
         };
       },
       async isAvailable(principal) {
@@ -2354,7 +2573,7 @@ var init_auditor_output = __esm({
 });
 
 // src/ticket-provenance-contracts.ts
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function positiveInteger(value) {
@@ -2377,7 +2596,7 @@ function projectSpeaker(value) {
   return value === "owner" || value === "runner" ? value : void 0;
 }
 function projectBound(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const id = typeof value.id === "string" && value.id !== "" ? value.id : void 0;
   const line2 = positiveInteger(value.line);
   if (id === void 0 && line2 === void 0) return void 0;
@@ -2388,13 +2607,13 @@ function projectTicketProvenanceSessions(value) {
   if (value.length === 0) return [];
   const sessions = [];
   for (const raw of value) {
-    if (!isRecord(raw)) return void 0;
+    if (!isRecord2(raw)) return void 0;
     const path = raw.path;
     if (typeof path !== "string" || path.trim() === "") return void 0;
     if (!Array.isArray(raw.ranges) || raw.ranges.length === 0) return void 0;
     const ranges = [];
     for (const rawRange of raw.ranges) {
-      if (!isRecord(rawRange)) return void 0;
+      if (!isRecord2(rawRange)) return void 0;
       const from = projectBound(rawRange.from);
       const to = projectBound(rawRange.to);
       if (from === void 0 || to === void 0) return void 0;
@@ -2405,7 +2624,7 @@ function projectTicketProvenanceSessions(value) {
   return sessions;
 }
 function projectTicketProvenanceHeader(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const ticket = positiveInteger(value.ticket);
   if (ticket === void 0) return void 0;
   if (typeof value.repo !== "string") return void 0;
@@ -2423,7 +2642,7 @@ function projectTicketProvenanceHeader(value) {
   };
 }
 function projectTicketProvenanceLine(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const speaker = projectSpeaker(value.speaker);
   const s = nonNegativeInteger(value.s);
   if (speaker === void 0 || s === void 0) return void 0;
@@ -2539,13 +2758,23 @@ var init_diarist_contracts = __esm({
 });
 
 // src/secretariat-contracts.ts
-var SECRETARIAT_OUTPUT_TOOL_NAME, SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME, SECRETARIAT_ACCEPTED_TEXT;
+var secretariat_contracts_exports = {};
+__export(secretariat_contracts_exports, {
+  SECRETARIAT_ACCEPTED_TEXT: () => SECRETARIAT_ACCEPTED_TEXT,
+  SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY: () => SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY,
+  SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: () => SECRETARIAT_GATE_OFFICER_ENTRY_TYPE,
+  SECRETARIAT_OUTPUT_TOOL_NAME: () => SECRETARIAT_OUTPUT_TOOL_NAME,
+  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME: () => SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME
+});
+var SECRETARIAT_OUTPUT_TOOL_NAME, SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME, SECRETARIAT_ACCEPTED_TEXT, SECRETARIAT_GATE_OFFICER_ENTRY_TYPE, SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY;
 var init_secretariat_contracts = __esm({
   "src/secretariat-contracts.ts"() {
     "use strict";
     SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
     SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME = "ak_secretariat_summon_countersign";
     SECRETARIAT_ACCEPTED_TEXT = "\u4E2D\u4E66\u7701\u56DE\u6267\u5DF2\u63A5\u53D7";
+    SECRETARIAT_GATE_OFFICER_ENTRY_TYPE = "ak-secretariat-gate-officer";
+    SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY = "countersignTerminal";
   }
 });
 
@@ -2892,8 +3121,8 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname5, join as join11 } from "node:path";
-function isRecord2(value) {
+import { dirname as dirname6, join as join12 } from "node:path";
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorCodeOf(error) {
@@ -2921,7 +3150,7 @@ function findIdentityPointer(recordFile, identity, kind, level) {
     if (!trimmed) continue;
     try {
       const parsed = JSON.parse(trimmed);
-      if (isRecord2(parsed) && parsed.identity === identity) {
+      if (isRecord3(parsed) && parsed.identity === identity) {
         return { identity, recordFile, kind, level };
       }
     } catch {
@@ -3020,8 +3249,8 @@ function resolveSitianVolumeCategory(kind) {
   return kind;
 }
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
-  const sessionDir = join11(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join11(sessionDir, SITIAN_RECORDS_LEAF) };
+  const sessionDir = join12(activationBookDirectory(ledgerHome, bookKey), ticketId);
+  return { sessionDir, recordFile: join12(sessionDir, SITIAN_RECORDS_LEAF) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
@@ -3040,14 +3269,14 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join11(dirname5(input.sessionParent), category);
-    recordFile = join11(sessionDir, SITIAN_RECORDS_LEAF);
+    sessionDir = join12(dirname6(input.sessionParent), category);
+    recordFile = join12(sessionDir, SITIAN_RECORDS_LEAF);
   }
   return { sessionDir, recordFile, ledgerHome };
 }
 function projectTicketRecordsPathShape() {
   const { recordFile } = ticketProvenanceUnderBookPaths(
-    join11("~", ".ak-roles"),
+    join12("~", ".ak-roles"),
     "<\u7C3F>",
     "<\u7968\u53F7>"
   );
@@ -3109,15 +3338,15 @@ var init_sitian_appender = __esm({
 
 // src/sitian-reader.ts
 import { existsSync as existsSync4 } from "node:fs";
-import { readFile as readFile2 } from "node:fs/promises";
-function isRecord3(value) {
+import { readFile as readFile3 } from "node:fs/promises";
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
   if (!existsSync4(recordFile)) {
     return { records: [], diagnostics: [] };
   }
-  const text = await readFile2(recordFile, "utf8");
+  const text = await readFile3(recordFile, "utf8");
   const lines = text.split("\n");
   const records = [];
   const diagnostics = [];
@@ -3126,7 +3355,7 @@ async function readSitianRecords(recordFile) {
     if (!line2.trim()) continue;
     try {
       const parsed = JSON.parse(line2);
-      if (isRecord3(parsed)) {
+      if (isRecord4(parsed)) {
         records.push(parsed);
       } else {
         const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
@@ -3182,13 +3411,13 @@ __export(role_turn_host_exports, {
 });
 import { execFile, spawn as spawn2 } from "node:child_process";
 import { constants } from "node:fs";
-import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
-import { basename as basename3, delimiter, dirname as dirname6, isAbsolute as isAbsolute3, join as join12, resolve as resolve5 } from "node:path";
+import { access, appendFile, readFile as readFile4, realpath } from "node:fs/promises";
+import { basename as basename4, delimiter, dirname as dirname7, isAbsolute as isAbsolute3, join as join13, resolve as resolve5 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot) {
-  return join12(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
+  return join13(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -3224,7 +3453,7 @@ function buildMethodArgs(methods) {
 function applyPiNativeSkillInvocation(methods, prompt) {
   const skills = methods.filter((method) => method.kind === "skill");
   if (skills.length !== 1) return prompt;
-  const name = basename3(dirname6(skills[0].path));
+  const name = basename4(dirname7(skills[0].path));
   if (name.length === 0) return prompt;
   const token = `/skill:${name}`;
   const trimmed = prompt.trimStart();
@@ -3443,9 +3672,6 @@ ${paths.join("\n")}`
       if (typeof process.env.AK_ROLE_AUDITOR_SUBJECT === "string" && process.env.AK_ROLE_AUDITOR_SUBJECT.trim() !== "") {
         env.AK_ROLE_AUDITOR_SUBJECT = process.env.AK_ROLE_AUDITOR_SUBJECT;
       }
-      if (request.correlationId !== void 0 && request.correlationId.trim() !== "") {
-        env.AK_CORRELATION_ID = request.correlationId;
-      }
       if (config.recordLaunchedRolePackageIdentity !== void 0 && config.observeLaunchedRolePackageIdentity !== void 0) {
         await config.recordLaunchedRolePackageIdentity(
           request.runDirectory,
@@ -3465,7 +3691,7 @@ ${paths.join("\n")}`
 }
 async function appendPiSessionCustomEntry(authority, principal, customType, data) {
   const { sessionFile } = authority.decode(principal);
-  const text = await readFile3(sessionFile, "utf8");
+  const text = await readFile4(sessionFile, "utf8");
   let parentId = null;
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     const entry = JSON.parse(line2);
@@ -3756,8 +3982,8 @@ var init_compliance_transport = __esm({
 
 // src/role-run-relocation.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join13, sep as sep2 } from "node:path";
+import { readdir as readdir3, readFile as readFile5, writeFile as writeFile2 } from "node:fs/promises";
+import { join as join14, sep as sep2 } from "node:path";
 function isEnoent2(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -3846,7 +4072,7 @@ function rewriteSummonsMaterials(value, rewrites) {
 }
 async function rewriteJsonObjectFile(path, fields, rewrites) {
   if (!existsSync5(path)) return;
-  const page = JSON.parse(await readFile4(path, "utf8"));
+  const page = JSON.parse(await readFile5(path, "utf8"));
   if (!isPlainObject(page)) return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(page, fields, rewrites);
   await writeFile2(path, `${JSON.stringify(page, null, 2)}
@@ -3854,7 +4080,7 @@ async function rewriteJsonObjectFile(path, fields, rewrites) {
 }
 async function rewriteOfficerPointerFile(path, rewrites) {
   if (!existsSync5(path)) return;
-  const page = JSON.parse(await readFile4(path, "utf8"));
+  const page = JSON.parse(await readFile5(path, "utf8"));
   if (!isPlainObject(page)) return;
   if (page.kind !== "direct-officer-run-pointer") return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(
@@ -3867,7 +4093,7 @@ async function rewriteOfficerPointerFile(path, rewrites) {
 }
 async function rewriteSitianRecordsJsonl(path, rewrites) {
   if (!existsSync5(path)) return;
-  const raw = await readFile4(path, "utf8");
+  const raw = await readFile5(path, "utf8");
   if (raw.length === 0) return;
   const endsWithNewline = raw.endsWith("\n");
   const lines = raw.split("\n");
@@ -3918,7 +4144,7 @@ async function rewriteSitianRecordsJsonl(path, rewrites) {
 }
 async function rewriteSessionTranscriptBindings(path, rewrites) {
   if (!existsSync5(path)) return;
-  const raw = await readFile4(path, "utf8");
+  const raw = await readFile5(path, "utf8");
   if (raw.length === 0) return;
   const endsWithNewline = raw.endsWith("\n");
   const lines = raw.split("\n");
@@ -3977,17 +4203,17 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
   );
 }
 async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-  const sessionRoot = join13(pagesDirectory, "session");
+  const sessionRoot = join14(pagesDirectory, "session");
   async function walk(directory) {
     let entries;
     try {
-      entries = await readdir2(directory, { withFileTypes: true });
+      entries = await readdir3(directory, { withFileTypes: true });
     } catch (error) {
       if (isEnoent2(error)) return;
       throw error;
     }
     for (const entry of entries) {
-      const path = join13(directory, entry.name);
+      const path = join14(directory, entry.name);
       if (entry.isDirectory()) {
         await walk(path);
         continue;
@@ -4009,9 +4235,9 @@ async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
 async function rewriteRoleRunDurablePages(input) {
   const { pagesDirectory } = input;
   const rewrites = collectRewrites(input);
-  const admittedPath = join13(pagesDirectory, "admitted-request.json");
+  const admittedPath = join14(pagesDirectory, "admitted-request.json");
   if (existsSync5(admittedPath)) {
-    const page = JSON.parse(await readFile4(admittedPath, "utf8"));
+    const page = JSON.parse(await readFile5(admittedPath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       ADMITTED_PAGE_FIELDS,
@@ -4039,9 +4265,9 @@ async function rewriteRoleRunDurablePages(input) {
     await writeFile2(admittedPath, `${JSON.stringify(page, null, 2)}
 `, "utf8");
   }
-  const invocationPath = join13(pagesDirectory, "invocation.json");
+  const invocationPath = join14(pagesDirectory, "invocation.json");
   if (existsSync5(invocationPath)) {
-    const page = JSON.parse(await readFile4(invocationPath, "utf8"));
+    const page = JSON.parse(await readFile5(invocationPath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       INVOCATION_PAGE_FIELDS,
@@ -4054,9 +4280,9 @@ async function rewriteRoleRunDurablePages(input) {
       "utf8"
     );
   }
-  const statePath = join13(pagesDirectory, "run-state.json");
+  const statePath = join14(pagesDirectory, "run-state.json");
   if (existsSync5(statePath)) {
-    const page = JSON.parse(await readFile4(statePath, "utf8"));
+    const page = JSON.parse(await readFile5(statePath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       RUN_STATE_PAGE_FIELDS,
@@ -4244,15 +4470,15 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir3, readFile as readFile5, realpath as realpath2, stat } from "node:fs/promises";
-import { dirname as dirname7, relative as relative2, resolve as resolve6, sep as sep3 } from "node:path";
+import { readdir as readdir4, readFile as readFile6, realpath as realpath2, stat } from "node:fs/promises";
+import { dirname as dirname8, relative as relative2, resolve as resolve6, sep as sep3 } from "node:path";
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function discoverCaseFiles(root) {
   const found = [];
   async function walk(dir, depth) {
-    for (const item of await readdir3(dir, { withFileTypes: true })) {
+    for (const item of await readdir4(dir, { withFileTypes: true })) {
       const path = resolve6(dir, item.name);
       if (item.isDirectory()) {
         await walk(path, depth + 1);
@@ -4272,7 +4498,7 @@ function accumulate(metric, value, source) {
 function timestamp(row) {
   return typeof row.timestamp === "string" && Number.isFinite(Date.parse(row.timestamp)) ? row.timestamp : void 0;
 }
-function isMissingPathError2(error) {
+function isMissingPathError3(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 async function stableRunsIdentity(root) {
@@ -4282,9 +4508,9 @@ async function stableRunsIdentity(root) {
       const git3 = await stat(resolve6(cursor, ".git"));
       if (git3.isDirectory() || git3.isFile()) return relative2(cursor, root).split(sep3).join("/");
     } catch (error) {
-      if (!isMissingPathError2(error)) throw error;
+      if (!isMissingPathError3(error)) throw error;
     }
-    const parent = dirname7(cursor);
+    const parent = dirname8(cursor);
     if (parent === cursor) return root;
     cursor = parent;
   }
@@ -4360,7 +4586,7 @@ async function loadDoctorCase(runsPath) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep3).join("/");
-    const bytes = await readFile5(path);
+    const bytes = await readFile6(path);
     const content = bytes.toString("utf8");
     const kind = id.endsWith(".jsonl") ? "session" : "stderr";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -4373,7 +4599,7 @@ async function loadDoctorCase(runsPath) {
     accumulate(calls, result.calls, id);
     accumulate(tokens, result.tokens, id);
   }
-  const runDirs = (await readdir3(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
+  const runDirs = (await readdir4(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
   const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
   const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
   const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
@@ -4390,7 +4616,7 @@ var init_doctor_evidence = __esm({
 
 // src/collector-config.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile6 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 function fail3(message, cause) {
   throw new Error(message, cause === void 0 ? void 0 : { cause });
 }
@@ -4433,7 +4659,7 @@ function emptyCollectorManifest() {
 async function loadCollectorManifest(path) {
   let bytes;
   try {
-    bytes = await readFile6(path);
+    bytes = await readFile7(path);
   } catch (error) {
     fail3(`Collector request manifest is unreadable at ${path}`, error);
   }
@@ -4469,7 +4695,7 @@ var init_collector_config = __esm({
 // src/collector-github.ts
 import { spawn as spawn3 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireString(value, label) {
@@ -4508,7 +4734,7 @@ function parsePullRequestNumberList(raw, label) {
   }
   const numbers = [];
   for (const item of raw) {
-    if (!isRecord4(item)) {
+    if (!isRecord5(item)) {
       throw new Error(`GitHub ${label} payload contains a non-object pull request entry`);
     }
     try {
@@ -4576,7 +4802,7 @@ async function listPullRequestNumbersByTicket(runner, input) {
     });
   }
   const issueRaw = parseJson(issueResponse.bodyText, issuePath);
-  if (!isRecord4(issueRaw)) {
+  if (!isRecord5(issueRaw)) {
     throw new Error(`GitHub ${issuePath} payload is not an object`);
   }
   if (Object.hasOwn(issueRaw, "pull_request")) {
@@ -4635,7 +4861,7 @@ async function listPullRequestNumbersByTicket(runner, input) {
   } catch (error) {
     throw new Error("GitHub GraphQL issue\u2192PR returned malformed JSON", { cause: error });
   }
-  if (!isRecord4(payload)) {
+  if (!isRecord5(payload)) {
     throw new Error("GitHub GraphQL issue\u2192PR payload is not an object");
   }
   if (payload.errors !== void 0) {
@@ -4644,30 +4870,30 @@ async function listPullRequestNumbersByTicket(runner, input) {
     });
   }
   const data = payload.data;
-  if (!isRecord4(data)) return [];
+  if (!isRecord5(data)) return [];
   const repository = data["repository"];
-  if (!isRecord4(repository)) return [];
+  if (!isRecord5(repository)) return [];
   const issue = repository["issue"];
-  if (!isRecord4(issue)) return [];
+  if (!isRecord5(issue)) return [];
   const numbers = [];
   const closedBy = issue["closedByPullRequestsReferences"];
-  if (isRecord4(closedBy) && Array.isArray(closedBy["nodes"])) {
+  if (isRecord5(closedBy) && Array.isArray(closedBy["nodes"])) {
     for (const node of closedBy["nodes"]) {
-      if (isRecord4(node) && typeof node["number"] === "number") {
+      if (isRecord5(node) && typeof node["number"] === "number") {
         numbers.push(parseCollectorPrNumber(node["number"]));
       }
     }
   }
   const timeline = issue["timelineItems"];
-  if (isRecord4(timeline) && Array.isArray(timeline["nodes"])) {
+  if (isRecord5(timeline) && Array.isArray(timeline["nodes"])) {
     for (const node of timeline["nodes"]) {
-      if (!isRecord4(node)) continue;
+      if (!isRecord5(node)) continue;
       const source = node["source"];
-      if (isRecord4(source) && typeof source["number"] === "number") {
+      if (isRecord5(source) && typeof source["number"] === "number") {
         numbers.push(parseCollectorPrNumber(source["number"]));
       }
       const subject = node["subject"];
-      if (isRecord4(subject) && typeof subject["number"] === "number") {
+      if (isRecord5(subject) && typeof subject["number"] === "number") {
         numbers.push(parseCollectorPrNumber(subject["number"]));
       }
     }
@@ -4682,25 +4908,25 @@ function commentFailureCause(error) {
   };
 }
 function requireUserLogin(raw) {
-  if (!isRecord4(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord5(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function optionalUserLogin(raw) {
   if (raw === null) return null;
-  if (!isRecord4(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord5(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function machineIdentity(raw) {
   const user = raw["user"];
-  if (!isRecord4(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
+  if (!isRecord5(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
     return null;
   }
   const app = raw["performed_via_github_app"];
-  const appId = isRecord4(app) && typeof app["id"] === "number" ? app["id"] : void 0;
+  const appId = isRecord5(app) && typeof app["id"] === "number" ? app["id"] : void 0;
   return {
     userType: user["type"],
     userId: user["id"],
@@ -4708,9 +4934,9 @@ function machineIdentity(raw) {
   };
 }
 function normalizePullRequest(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub pull request payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub pull request payload must be an object");
   const head = raw["head"];
-  if (!isRecord4(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
+  if (!isRecord5(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
     throw new Error("GitHub pull request payload missing head.sha");
   }
   const number = requireNumber(raw["number"], "number");
@@ -4729,7 +4955,7 @@ function normalizePullRequest(raw) {
   };
 }
 function normalizePullRequestReaction(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub reaction payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub reaction payload must be an object");
   return {
     id: requireNumber(raw["id"], "reaction.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -4740,7 +4966,7 @@ function normalizePullRequestReaction(raw) {
   };
 }
 function normalizeReview(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub review payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub review payload must be an object");
   return {
     id: requireNumber(raw["id"], "review.id"),
     ...typeof raw["node_id"] === "string" ? { nodeId: raw["node_id"] } : {},
@@ -4755,7 +4981,7 @@ function normalizeReview(raw) {
   };
 }
 function normalizeIssueComment(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub issue comment payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub issue comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "comment.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -4768,7 +4994,7 @@ function normalizeIssueComment(raw) {
   };
 }
 function normalizeReviewComment(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub review comment payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub review comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "review_comment.id"),
     pullRequestReviewId: typeof raw["pull_request_review_id"] === "number" ? raw["pull_request_review_id"] : null,
@@ -4792,7 +5018,7 @@ function normalizeReviewComment(raw) {
 function createGhApiRunner(options = {}) {
   const spawnImpl = options.spawnImpl ?? spawn3;
   return async (args, runOptions = {}) => {
-    return await new Promise((resolve22, reject) => {
+    return await new Promise((resolve21, reject) => {
       const signal = runOptions.signal;
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
@@ -4865,11 +5091,11 @@ function createGhApiRunner(options = {}) {
               const value = line2.slice(idx + 1).trim();
               headers[name] = value;
             }
-            resolve22({ status, headers, bodyText });
+            resolve21({ status, headers, bodyText });
             return;
           }
           if (code === 0) {
-            resolve22({ status: 200, headers: {}, bodyText: stdout });
+            resolve21({ status: 200, headers: {}, bodyText: stdout });
             return;
           }
           const failure2 = new Error(
@@ -5027,11 +5253,11 @@ function createGhCollectorGitHubTransport(runner = createGhApiRunner()) {
         if (input.signal?.aborted) {
           throw error;
         }
-        if (isRecord4(error) && error["ambiguousGhFailure"] === true) {
+        if (isRecord5(error) && error["ambiguousGhFailure"] === true) {
           const cause = commentFailureCause(error);
           return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
         }
-        if (isRecord4(error) && error["name"] === "AbortError") {
+        if (isRecord5(error) && error["name"] === "AbortError") {
           throw error;
         }
         throw error;
@@ -5273,7 +5499,7 @@ var init_git_object_id = __esm({
 
 // src/merger-git-state.ts
 import { execFile as execFile2 } from "node:child_process";
-import { access as access2, readFile as readFile7 } from "node:fs/promises";
+import { access as access2, readFile as readFile8 } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -5343,7 +5569,7 @@ function createProductionMergerGitState(repositoryRoot = process.cwd()) {
       const mergeHeadPath = isAbsolute4(mergeHeadReported) ? mergeHeadReported : resolve7(repositoryRoot, mergeHeadReported);
       let sourceObjectId = "";
       if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile7(mergeHeadPath), "Git MERGE_HEAD");
+        const raw = exactUtf8(await readFile8(mergeHeadPath), "Git MERGE_HEAD");
         const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
         if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
         if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
@@ -5395,10 +5621,10 @@ var init_uuidv7 = __esm({
 });
 
 // src/typed-provider-http.ts
-import { readFile as readFile8, unlink, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { readFile as readFile9, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join15 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join14(runDirectory, TYPED_HTTP_FILE);
+  return join15(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -5429,7 +5655,7 @@ async function recordTypedProviderHttpStatus(runDirectory, observation) {
 async function readLatestTypedProviderHttpObservation(runDirectory) {
   let text;
   try {
-    text = await readFile8(typedProviderHttpPath(runDirectory), "utf8");
+    text = await readFile9(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return void 0;
@@ -5508,8 +5734,8 @@ __export(run_lifecycle_exports, {
   selectResumeContinuationPrompt: () => selectResumeContinuationPrompt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile9, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
-import { basename as basename4, join as join15 } from "node:path";
+import { chmod, lstat as lstat2, open, readdir as readdir5, readFile as readFile10, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { basename as basename5, join as join16 } from "node:path";
 function selectResumeContinuationPrompt(message, engineMaterial) {
   const lines = message !== void 0 ? [message] : [];
   return appendEngineSessionMaterial(lines, engineMaterial).join("\n");
@@ -5548,7 +5774,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile4(
-    join15(runDirectory, RUN_STATE_FILE),
+    join16(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -5598,7 +5824,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile9(join15(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile10(join16(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -5666,7 +5892,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile4(
-    join15(runDirectory, RUN_STATE_FILE),
+    join16(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -5838,7 +6064,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile9(lockPath, "utf8");
+    content = await readFile10(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -5897,7 +6123,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join15(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join16(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
@@ -5936,10 +6162,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join15(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join16(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join15(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join16(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -5994,10 +6220,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join15(ledgerHome, "books");
+  const booksRoot = join16(ledgerHome, "books");
   let bookKeys;
   try {
-    bookKeys = await readdir4(booksRoot);
+    bookKeys = await readdir5(booksRoot);
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -6014,7 +6240,7 @@ async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const entry = basename4(runDirectory);
+      const entry = basename5(runDirectory);
       if (onlyRole === void 0 && (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) || entry === `${runId}@${onlyRole}`) {
         matches.push(runDirectory);
       }
@@ -6035,7 +6261,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile9(join15(runDirectory, "admitted-request.json"), "utf8")
+      await readFile10(join16(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -6056,7 +6282,7 @@ async function readRunParentPath(runDirectory) {
 async function runHasFormedSessionPrincipal(runDirectory) {
   const disk = await readRoleRunStateDisk(runDirectory);
   if (disk === void 0) return false;
-  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join15(disk.principalWire.sessionDirectory, "session.jsonl");
+  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join16(disk.principalWire.sessionDirectory, "session.jsonl");
   try {
     const stat2 = await lstat2(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
@@ -6081,7 +6307,7 @@ async function findLatestRunIdForSeatTicket(input) {
   const suffix = `@${input.role}`;
   let best;
   for (const runDirectory of runDirectories) {
-    const entry = basename4(runDirectory);
+    const entry = basename5(runDirectory);
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
@@ -6204,7 +6430,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile9(run.admittedRequestPath, "utf8")
+      await readFile10(run.admittedRequestPath, "utf8")
     );
     if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
       const record4 = raw;
@@ -6322,7 +6548,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile9(join15(run.runDirectory, "invocation.json"), "utf8")
+      await readFile10(join16(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -6791,7 +7017,7 @@ __export(notary_source_run_exports, {
   loadNotarySourceRunLocator: () => loadNotarySourceRunLocator,
   resolveNotarySourceRunLocator: () => resolveNotarySourceRunLocator
 });
-import { dirname as dirname8, isAbsolute as isAbsolute6, join as join16, resolve as resolve8, basename as basename5 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute6, join as join17, resolve as resolve8, basename as basename6 } from "node:path";
 import { lstat as lstat3, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -6822,10 +7048,10 @@ async function requireRunDirectory(candidate, display) {
       `notary --source-run must be a run directory: ${display}`
     );
   }
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   if (identity === void 0) {
     throw new NotarySourceRunError(
-      `notary --source-run must be named <runId>@<role>: ${basename5(real)}`
+      `notary --source-run must be named <runId>@<role>: ${basename6(real)}`
     );
   }
   return real;
@@ -6837,20 +7063,20 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join16(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookRunsRoot = join17(activationBookDirectory(ledgerHome, bookKey), "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join16(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join17(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute6(raw) ? raw : resolve8(options.projectRoot, raw);
   }
   const real = await requireRunDirectory(candidate, raw);
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   const bookIdentity = physicalPathIdentity(activationBookDirectory(ledgerHome, bookKey));
-  const parentIdentity = physicalPathIdentity(dirname8(real));
-  const subjectBookIdentity = physicalPathIdentity(dirname8(dirname8(dirname8(real))));
-  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename5(dirname8(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
+  const parentIdentity = physicalPathIdentity(dirname9(real));
+  const subjectBookIdentity = physicalPathIdentity(dirname9(dirname9(dirname9(real))));
+  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename6(dirname9(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
     throw new NotarySourceRunError(
       "notary --source-run must resolve to a retained run under the project machine-ledger book"
     );
@@ -6884,7 +7110,7 @@ async function resolveNotarySourceRunLocator(options) {
 }
 async function loadNotarySourceRunLocator(path) {
   const real = await requireRunDirectory(path, path);
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   const runState = await readRoleRunIdentity(real);
   if (runState === void 0) {
     throw new NotarySourceRunError(
@@ -8033,14 +8259,14 @@ import { existsSync as existsSync6 } from "node:fs";
 import {
   lstat as lstat4,
   mkdtemp as mkdtemp2,
-  readFile as readFile10,
+  readFile as readFile11,
   realpath as realpath4,
   rename,
   rm as rm2,
   writeFile as writeFile5
 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute7, join as join17, resolve as resolve9, sep as sep4 } from "node:path";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute7, join as join18, resolve as resolve9, sep as sep4 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -8094,15 +8320,15 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile5(
-    join17(source.runDirectory, "invocation.json"),
+    join18(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  const ledgerPath = join17(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
+  const ledgerPath = join18(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
     next.provider = model.provider;
@@ -8134,8 +8360,8 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join17(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
+  const ledgerPath = join18(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
   await writeFile5(
     ledgerPath,
     `${JSON.stringify({
@@ -8151,7 +8377,7 @@ async function persistAdmittedSourceRunPath(admitted, sourceRunPath) {
     throw new Error("persistAdmittedSourceRunPath requires a non-empty sourceRunPath");
   }
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
   if (typeof current.sourceRunPath === "string") {
     if (current.sourceRunPath === sourceRunPath) return;
     throw new Error(
@@ -8177,7 +8403,7 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
 }
 async function recordAdmittedCorrelation(admitted, correlationId) {
   const current = JSON.parse(
-    await readFile10(admitted.admittedRequestPath, "utf8")
+    await readFile11(admitted.admittedRequestPath, "utf8")
   );
   const prior = [
     ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
@@ -8225,7 +8451,7 @@ async function bindCourtTicketNumbersOnAdmitted(admitted, courtTicketNumbers) {
   }
   const frozen = Object.freeze([...projected]);
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
   await writeFile5(
     admittedPath,
     `${JSON.stringify({ ...current, courtTicketNumbers: frozen }, null, 2)}
@@ -8247,7 +8473,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     runId: admitted.runId,
     role: admitted.role
   });
-  ensureRoleRunDirectory(ledgerHome, dirname9(target.runDirectory));
+  ensureRoleRunDirectory(ledgerHome, dirname10(target.runDirectory));
   await rename(oldRunDirectory, target.runDirectory);
   heldLease?.relocate(target.runDirectory);
   const admittedRecord = admitted;
@@ -8285,9 +8511,9 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     ticketNumber,
     "bindTicketNumberOnRunDirectory"
   );
-  const admittedPath = join17(runDirectory, "admitted-request.json");
-  const invocationPath = join17(runDirectory, "invocation.json");
-  const admitted = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const admittedPath = join18(runDirectory, "admitted-request.json");
+  const invocationPath = join18(runDirectory, "invocation.json");
+  const admitted = JSON.parse(await readFile11(admittedPath, "utf8"));
   const existing = admitted.ticketNumber;
   if (typeof existing === "number") {
     if (existing === ticketNumber) return;
@@ -8297,7 +8523,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   }
   if (existsSync6(invocationPath)) {
     const invocation = JSON.parse(
-      await readFile10(invocationPath, "utf8")
+      await readFile11(invocationPath, "utf8")
     );
     if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
       throw new Error(
@@ -8322,7 +8548,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot, selectedRoleEntry) {
   const rolePackageRoot = packageRoot;
   const raw = JSON.parse(
-    await readFile10(join17(rolePackageRoot, "package.json"), "utf8")
+    await readFile11(join18(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -8607,7 +8833,7 @@ async function readRegularFileAttachment(sourcePath) {
     );
   }
   try {
-    return { absolute, bytes: await readFile10(absolute) };
+    return { absolute, bytes: await readFile11(absolute) };
   } catch (error) {
     throw new CliUsageError(
       `attachment is not a readable regular file: ${sourcePath}`,
@@ -8620,13 +8846,13 @@ async function removePreparedAttachmentDirectory(stagingDirectory) {
 }
 async function withPreparedAttachments(attachmentPaths, use) {
   if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp2(join17(tmpdir2(), "ak-role-attachments-"));
+  const stagingDirectory = await mkdtemp2(join18(tmpdir2(), "ak-role-attachments-"));
   const prepared = [];
   let result;
   try {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join17(stagingDirectory, String(index).padStart(6, "0"));
+      const snapshotPath = join18(stagingDirectory, String(index).padStart(6, "0"));
       await writeFile5(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
@@ -8647,9 +8873,9 @@ async function withPreparedAttachments(attachmentPaths, use) {
   return result;
 }
 async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join17(
+  const frozenPath = join18(
     destinationDir,
-    `${String(index).padStart(2, "0")}-${basename6(provenancePath)}`
+    `${String(index).padStart(2, "0")}-${basename7(provenancePath)}`
   );
   await writeFile5(frozenPath, bytes);
   return {
@@ -8663,7 +8889,7 @@ async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, inde
 async function freezePreparedAttachment(prepared, destinationDir, index) {
   return freezeAttachmentBytes(
     prepared.absolute,
-    await readFile10(prepared.snapshotPath),
+    await readFile11(prepared.snapshotPath),
     destinationDir,
     index
   );
@@ -8690,14 +8916,14 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join17(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join18(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
 async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
   if (prepared.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join17(runDirectory, "attachments") : join17(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = summonsKey === void 0 ? join18(runDirectory, "attachments") : join18(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = [];
   for (let index = 0; index < prepared.length; index += 1) {
@@ -8759,7 +8985,7 @@ async function admitStandardMaterialInvocation(role, options) {
     })),
     ...ticketFields
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -8868,7 +9094,7 @@ async function admitCountersignInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   if (options.deferPersistence !== true) {
     await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
       sessionDirectory,
@@ -8919,7 +9145,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
 async function loadAdmittedJudgeRequest(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile10(join17(runDirectory, "admitted-request.json"), "utf8")
+      await readFile11(join18(runDirectory, "admitted-request.json"), "utf8")
     );
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
     const record4 = raw;
@@ -8974,7 +9200,7 @@ async function admitCoderInvocation(options) {
     home: options.home
   });
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
-  const taskPath = join17(runDirectory, "task.md");
+  const taskPath = join18(runDirectory, "task.md");
   await writeFile5(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
@@ -8995,7 +9221,7 @@ async function admitCoderInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9045,7 +9271,7 @@ async function admitFixerInvocation(options) {
   if (options.prerequisitesPath !== void 0) {
     const absolutePrereq = isAbsolute7(options.prerequisitesPath) ? options.prerequisitesPath : resolve9(options.prerequisitesPath);
     try {
-      prerequisitesSource = await readFile10(absolutePrereq, "utf8");
+      prerequisitesSource = await readFile11(absolutePrereq, "utf8");
     } catch (error) {
       throw new CliUsageError(
         `fixer prerequisites path is unreadable: ${options.prerequisitesPath}`,
@@ -9081,7 +9307,7 @@ async function admitFixerInvocation(options) {
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
-    prerequisitesPath = join17(runDirectory, "prerequisites.json");
+    prerequisitesPath = join18(runDirectory, "prerequisites.json");
     await writeFile5(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
@@ -9089,7 +9315,7 @@ async function admitFixerInvocation(options) {
       "utf8"
     );
   }
-  const packetPath = join17(runDirectory, "fix-packet.md");
+  const packetPath = join18(runDirectory, "fix-packet.md");
   await writeFile5(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
@@ -9115,7 +9341,7 @@ async function admitFixerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9335,7 +9561,7 @@ async function admitCollectorInvocation(options) {
   const prNumber = target.kind === "bound" ? target.prNumber : void 0;
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
-    requestManifestPath = join17(runDirectory, "request-manifest.json");
+    requestManifestPath = join18(runDirectory, "request-manifest.json");
     await writeFile5(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const admitted = {
@@ -9361,7 +9587,7 @@ async function admitCollectorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9459,7 +9685,7 @@ function parseDoctorArgv(args) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join17(
+  const defaultRuns = join18(
     activationBookDirectory(ledgerHome, options.bookKey),
     String(options.issueNumber),
     "runs"
@@ -9590,7 +9816,7 @@ async function admitDoctorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9722,7 +9948,7 @@ async function admitNotaryInvocation(options) {
     ...ticketFields,
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9825,7 +10051,7 @@ async function admitGleanerLeftInvocation(options) {
     attachments: [],
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9964,7 +10190,7 @@ async function admitReviewerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -10116,7 +10342,7 @@ async function admitMergerInvocation(options) {
     resolutionScope: [...derived.resolutionScope],
     authorizedChecks: []
   });
-  const mergerInputPath = join17(runDirectory, "merger-input.json");
+  const mergerInputPath = join18(runDirectory, "merger-input.json");
   await writeFile5(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
@@ -10147,7 +10373,7 @@ async function admitMergerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -10431,15 +10657,15 @@ var init_invocation = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join18(packageRoot, "dist/acp-host/production-host.js");
-  const source = join18(packageRoot, "src/acp-host/production-host.ts");
+  const built = join19(packageRoot, "dist/acp-host/production-host.js");
+  const source = join19(packageRoot, "src/acp-host/production-host.ts");
   const target = existsSync7(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -10455,15 +10681,15 @@ var init_load_production_acp_host = __esm({
 
 // src/public-cli/load-production-headless-host.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot, host) {
   const description = lookupHeadlessHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered headless host: ${host}`);
   }
-  const built = join19(packageRoot, "dist/headless-host/production-host.js");
-  const source = join19(packageRoot, "src/headless-host/production-host.ts");
+  const built = join20(packageRoot, "dist/headless-host/production-host.js");
+  const source = join20(packageRoot, "src/headless-host/production-host.ts");
   const target = existsSync8(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
@@ -10712,8 +10938,8 @@ __export(config_exports, {
   setPersistentSeatHost: () => setPersistentSeatHost,
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
-import { mkdir, readFile as readFile11, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname10, join as join20 } from "node:path";
+import { mkdir, readFile as readFile12, writeFile as writeFile6 } from "node:fs/promises";
+import { dirname as dirname11, join as join21 } from "node:path";
 function isGateOfficerSeat(value) {
   return GATE_OFFICER_SEATS.includes(value);
 }
@@ -10721,12 +10947,12 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join20(home, ".ak-roles", "public-cli.json");
+  return join21(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
   try {
-    const raw = await readFile11(path, "utf8");
+    const raw = await readFile12(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -10737,7 +10963,7 @@ async function loadPublicCliConfig(home) {
 }
 async function savePublicCliConfig(config, home) {
   const path = publicCliConfigPath(home);
-  await mkdir(dirname10(path), { recursive: true });
+  await mkdir(dirname11(path), { recursive: true });
   const normalized = parsePublicCliConfig(config);
   await writeFile6(
     path,
@@ -11184,7 +11410,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile11(join20(agentDir, "auth.json"), "utf8");
+    const raw = await readFile12(join21(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -11223,15 +11449,15 @@ __export(host_providers_exports, {
   renderHostProvidersTable: () => renderHostProvidersTable
 });
 import { readFileSync as readFileSync3 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function hostProvidersPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join21(home, ".ak-roles", "host-providers.json");
+  return join22(home, ".ak-roles", "host-providers.json");
 }
 function hermesProviderModelsCachePath(home) {
-  return join21(home, ".hermes", "provider_models_cache.json");
+  return join22(home, ".hermes", "provider_models_cache.json");
 }
 function parseHostProvidersTable(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -11386,12 +11612,12 @@ var init_host_providers = __esm({
 });
 
 // src/ledger-session-read.ts
-import { readFile as readFile12 } from "node:fs/promises";
-function isRecord5(value) {
+import { readFile as readFile13 } from "node:fs/promises";
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile12(path, "utf8");
+  const text = await readFile13(path, "utf8");
   const lines = text.split("\n");
   const out = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -11412,7 +11638,7 @@ async function readLedgerSessionJsonlLines(path) {
       });
       continue;
     }
-    if (!isRecord5(row)) {
+    if (!isRecord6(row)) {
       const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
       out.push({
         line: lineNumber,
@@ -11489,9 +11715,9 @@ var init_ledger_session_read = __esm({
 });
 
 // src/analyst-gate-cycles-read.ts
-import { readdir as readdir5 } from "node:fs/promises";
-import { join as join22 } from "node:path";
-function isRecord6(value) {
+import { readdir as readdir6 } from "node:fs/promises";
+import { join as join23 } from "node:path";
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isParentAttemptBindingRow(row) {
@@ -11521,7 +11747,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord6(row.message) ? row.message : void 0;
+    const message = isRecord7(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -11556,7 +11782,7 @@ function nearestAttemptBindingBefore(rows, beforeIndex) {
   for (let i = beforeIndex - 1; i >= 0; i -= 1) {
     const row = rows[i];
     if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord6(row.data) || !isRecord6(row.data.parent)) continue;
+    if (!isRecord7(row.data) || !isRecord7(row.data.parent)) continue;
     const id = row.data.parent.attemptEntryId;
     const sessionFile = row.data.parent.sessionFile;
     return {
@@ -11571,10 +11797,10 @@ function extractAllAcceptedGateToolCalls(rows) {
   const out = [];
   for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
     const row = rows[rowIndex];
-    const message = isRecord6(row.message) ? row.message : void 0;
+    const message = isRecord7(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord6(part) || part.type !== "toolCall") continue;
+      if (!isRecord7(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
@@ -11582,7 +11808,7 @@ function extractAllAcceptedGateToolCalls(rows) {
       const binding = nearestAttemptBindingBefore(rows, rowIndex);
       out.push({
         toolName: part.name,
-        args: isRecord6(part.arguments) ? part.arguments : void 0,
+        args: isRecord7(part.arguments) ? part.arguments : void 0,
         accepted: true,
         rowIndex,
         ...binding
@@ -11705,17 +11931,17 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile23 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile23(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile24(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
       { cause: error }
     );
   }
-  if (!isRecord6(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
+  if (!isRecord7(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
     throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
   }
   const sessionFile = raw.sessionFile;
@@ -11731,7 +11957,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
   for (const directory of directories) {
     let names;
     try {
-      const entries = await readdir5(directory, { withFileTypes: true });
+      const entries = await readdir6(directory, { withFileTypes: true });
       names = entries.filter(
         (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
       ).map((e) => e.name).sort();
@@ -11740,7 +11966,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join22(directory, name);
+      const path = join23(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -11782,6 +12008,15 @@ var init_analyst_gate_cycles_read = __esm({
 });
 
 // src/audit-escalation.ts
+var audit_escalation_exports = {};
+__export(audit_escalation_exports, {
+  AUDIT_ESCALATION_KIND: () => AUDIT_ESCALATION_KIND,
+  buildAuditEscalationResult: () => buildAuditEscalationResult,
+  disposeComplianceDecision: () => disposeComplianceDecision,
+  isAuditEscalationProjection: () => isAuditEscalationProjection,
+  isAuditEscalationResult: () => isAuditEscalationResult,
+  projectAuditEscalation: () => projectAuditEscalation
+});
 function buildAuditEscalationResult(decision, deliveredOutput) {
   const auditOwned = {
     kind: AUDIT_ESCALATION_KIND
@@ -11878,21 +12113,6 @@ var init_audit_escalation = __esm({
   }
 });
 
-// src/run-terminal-artifacts.ts
-import { basename as basename7, dirname as dirname11, join as join23 } from "node:path";
-function runIdFromRunDirectory(runDirectory) {
-  const name = basename7(runDirectory);
-  const at = name.lastIndexOf("@");
-  if (at <= 0 || at === name.length - 1) return void 0;
-  return name.slice(0, at);
-}
-var init_run_terminal_artifacts = __esm({
-  "src/run-terminal-artifacts.ts"() {
-    "use strict";
-    init_role_run_placement();
-  }
-});
-
 // src/submission-ledger.ts
 import { join as join24 } from "node:path";
 function runIdentity(context) {
@@ -12316,7 +12536,7 @@ var init_submission_ledger = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFile as readFile14 } from "node:fs/promises";
 import { dirname as dirname12, join as join25 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
@@ -12332,7 +12552,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile13(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile14(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -12478,13 +12698,13 @@ function resolveAuditDossier(source) {
   }
   return { status: "ok", runDirectory };
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readDoctorAuditSubjects(context) {
   const entries = context.sessionManager.getEntries?.() ?? [];
   for (const entry of entries) {
-    if (isRecord7(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+    if (isRecord8(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       return { status: "ok" };
     }
   }
@@ -12618,12 +12838,12 @@ function createSystemCollectorClock() {
   return {
     wallNow: () => /* @__PURE__ */ new Date(),
     monoNow: () => Number(process.hrtime.bigint() - start) / 1e6,
-    sleep: (ms, signal) => new Promise((resolve22, reject) => {
+    sleep: (ms, signal) => new Promise((resolve21, reject) => {
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
         return;
       }
-      const timer = setTimeout(resolve22, ms);
+      const timer = setTimeout(resolve21, ms);
       const onAbort = () => {
         clearTimeout(timer);
         reject(signal?.reason ?? new Error("aborted"));
@@ -13825,11 +14045,11 @@ function reportEngineDetourCall(input) {
     recordPointer: pointer
   };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function callFactFromSitianPayload(payload, pointer) {
-  if (!isRecord8(payload)) return void 0;
+  if (!isRecord9(payload)) return void 0;
   if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
   if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
     return void 0;
@@ -13846,11 +14066,11 @@ function callFactFromSitianPayload(payload, pointer) {
   };
 }
 function invocationScopeIdOfRecord(record4) {
-  if (isRecord8(record4.subject)) {
+  if (isRecord9(record4.subject)) {
     const fromSubject = record4.subject.invocationScopeId;
     if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
   }
-  if (isRecord8(record4.payload)) {
+  if (isRecord9(record4.payload)) {
     const fromPayload = record4.payload.invocationScopeId;
     if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
   }
@@ -13910,7 +14130,7 @@ function readInvocationRecord(runDirectory) {
     const raw = JSON.parse(
       readFileSync4(join26(runDirectory, "invocation.json"), "utf8")
     );
-    return isRecord8(raw) ? raw : void 0;
+    return isRecord9(raw) ? raw : void 0;
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -13928,7 +14148,7 @@ function readInvocationSelectedHost(runDirectory) {
 }
 function withEngineDetourToolUsageFact(outcome, usage) {
   if (usage === void 0) return outcome;
-  const prior = isRecord8(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
+  const prior = isRecord9(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
   return {
     ...outcome,
     decisiveFacts: {
@@ -13971,7 +14191,7 @@ var init_engine_detour_usage = __esm({
 
 // src/package-resources/method-skill.ts
 import { createHash as createHash7 } from "node:crypto";
-import { readFile as readFile14, realpath as realpath5 } from "node:fs/promises";
+import { readFile as readFile15, realpath as realpath5 } from "node:fs/promises";
 import { join as join27 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
@@ -13994,11 +14214,11 @@ function resolvePackagedMethodSkillRoot(packageRoot, name) {
 function resolvePackagedMethodSkillPath(packageRoot, name) {
   return join27(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord9(raw)) {
+  if (!isRecord10(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -14012,7 +14232,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord9(raw.upstream)) {
+  if (!isRecord10(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -14039,12 +14259,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord9(raw.files)) {
+  if (!isRecord10(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord9(entry)) {
+    if (!isRecord10(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -14090,7 +14310,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const provenancePath = join27(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
-    provenanceRaw = await readFile14(provenancePath, "utf8");
+    provenanceRaw = await readFile15(provenancePath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
   }
@@ -14107,7 +14327,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
     const absolute = join27(rootDirectory, rel);
     let bytes;
     try {
-      bytes = await readFile14(absolute);
+      bytes = await readFile15(absolute);
     } catch (error) {
       throw new PackagedMethodSkillUnavailableError(name, absolute, error);
     }
@@ -14123,7 +14343,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   let raw;
   try {
     skillPath = await realpath5(skillPathConfigured);
-    raw = await readFile14(skillPath, "utf8");
+    raw = await readFile15(skillPath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
   }
@@ -14415,11 +14635,11 @@ var init_navigator_invocation_identity = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord10(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord10(item) && typeof item.reason === "string")) {
+  if (!isRecord11(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord11(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -14678,7 +14898,7 @@ __export(settlement_exports, {
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { appendFile as appendFile2, readFile as readFile15, readdir as readdir6, writeFile as writeFile7 } from "node:fs/promises";
+import { appendFile as appendFile2, readFile as readFile16, readdir as readdir7, writeFile as writeFile7 } from "node:fs/promises";
 import { dirname as dirname14, join as join28 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
@@ -14822,10 +15042,10 @@ function presentControlledFailure(failure2, io) {
 }
 async function inspectJudgeSession(sessionFile) {
   try {
-    await readFile15(sessionFile, "utf8");
+    await readFile16(sessionFile, "utf8");
     return { state: "present" };
   } catch (error) {
-    if (isMissingPathError3(error)) return { state: "missing" };
+    if (isMissingPathError4(error)) return { state: "missing" };
     return {
       state: "unreadable",
       diagnostic: error instanceof Error ? error.message || error.name : String(error)
@@ -15025,7 +15245,7 @@ function explicitInternalKnownFailureClassificationInput(failure2) {
     ...failure2.details === void 0 ? {} : { knownDetails: failure2.details }
   };
 }
-function isMissingPathError3(error) {
+function isMissingPathError4(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 function sessionReadFailure(error, fallbackMessage) {
@@ -15054,7 +15274,7 @@ function sessionReadFailure(error, fallbackMessage) {
   return failed;
 }
 async function readBoundSessionEntries(sessionFile) {
-  const text = await readFile15(sessionFile, "utf8");
+  const text = await readFile16(sessionFile, "utf8");
   const entries = [];
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     try {
@@ -15120,7 +15340,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
     const { records } = await readSitianRecords(recordFile);
     for (let i = records.length - 1; i >= 0; i -= 1) {
       const payload = records[i]?.payload;
-      if (!isRecord11(payload) || !isRecord11(payload.response)) continue;
+      if (!isRecord12(payload) || !isRecord12(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -15145,7 +15365,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
   try {
     parentEntries = await readBoundSessionEntries(sessionFile);
   } catch (error) {
-    if (isMissingPathError3(error)) return void 0;
+    if (isMissingPathError4(error)) return void 0;
     throw sessionReadFailure(error, "failed to read parent session for auditor binding");
   }
   const parentId = parentEntries.find((entry) => entry.type === "session")?.id;
@@ -15156,10 +15376,10 @@ async function loadBoundAuditorVolumes(sessionFile) {
   for (const childDirectory of childDirectories) {
     let names;
     try {
-      names = await readdir6(childDirectory);
+      names = await readdir7(childDirectory);
       sawAnyDirectory = true;
     } catch (error) {
-      if (isMissingPathError3(error)) continue;
+      if (isMissingPathError4(error)) continue;
       throw sessionReadFailure(error, "failed to read bound auditor session directory");
     }
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
@@ -15170,7 +15390,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord11(header)) continue;
+      if (!isRecord12(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -15184,7 +15404,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord11(bindingEntry.data) && isRecord11(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord12(bindingEntry.data) && isRecord12(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
         if (boundSessionFile !== sessionFile) continue;
@@ -15208,12 +15428,12 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord11(entry.data)) continue;
-      const parent = isRecord11(entry.data.parent) ? entry.data.parent : void 0;
-      const failure2 = isRecord11(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord12(entry.data)) continue;
+      const parent = isRecord12(entry.data.parent) ? entry.data.parent : void 0;
+      const failure2 = isRecord12(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId) continue;
       if (failure2 === void 0) continue;
-      const identity = isRecord11(failure2.identity) ? failure2.identity : void 0;
+      const identity = isRecord12(failure2.identity) ? failure2.identity : void 0;
       const typedCause = failure2.cause === "provider" || failure2.cause === "activation" || failure2.cause === "session" || failure2.cause === "output" || failure2.cause === "timeout" ? failure2.cause : void 0;
       return {
         ...typedCause === void 0 ? {} : { cause: typedCause },
@@ -15222,7 +15442,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure2.diagnostic === "string" ? { diagnostic: failure2.diagnostic } : {},
-        ...isRecord11(failure2.details) ? { details: failure2.details } : {}
+        ...isRecord12(failure2.details) ? { details: failure2.details } : {}
       };
     }
   }
@@ -15269,9 +15489,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord11(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord11(textPart) ? textPart.text : void 0;
-    const details = isRecord11(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord12(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord12(textPart) ? textPart.text : void 0;
+    const details = isRecord12(message.details) ? message.details : classification.fact;
     return {
       cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -15307,7 +15527,7 @@ async function resolveAuditedRunnerFailureResolution(input) {
     );
     if (terminatingFailure !== void 0) return resolutionOf(terminatingFailure);
   } catch (error) {
-    if (!isMissingPathError3(error)) {
+    if (!isMissingPathError4(error)) {
       const failure2 = sessionReadFailure(error, "failed to recover typed terminating-tool failure");
       return resolutionOf({
         cause: "session",
@@ -15408,7 +15628,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function toolResultText(message) {
@@ -15433,7 +15653,7 @@ function extractCollectorTargetBindRejection(entries) {
     const diagnostic = toolResultText(message);
     if (diagnostic.length === 0) return void 0;
     const details = message.details;
-    const code = isRecord11(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
+    const code = isRecord12(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
     return code === void 0 ? { diagnostic } : { diagnostic, code };
   }
   return void 0;
@@ -15515,7 +15735,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord11(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord12(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -15586,7 +15806,7 @@ function parseNavigatorAttendanceDetails(details) {
     if (typeof details.prose === "string" && details.prose.trim() !== "") {
       prose = details.prose;
     } else {
-      const next = isRecord11(details.next) && typeof details.next.role === "string" ? details.next.role : void 0;
+      const next = isRecord12(details.next) && typeof details.next.role === "string" ? details.next.role : void 0;
       const reason = typeof details.reason === "string" && details.reason.trim() !== "" ? details.reason : void 0;
       const command = typeof details.command === "string" && details.command.trim() !== "" ? details.command : void 0;
       if (reason !== void 0 && next !== void 0) {
@@ -15695,7 +15915,7 @@ function detourGateContext(admitted, scope) {
 }
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  const skipGate = isRecord11(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
+  const skipGate = isRecord12(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
   let next = base;
   if (!skipGate) {
     const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
@@ -15739,7 +15959,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord11(details)) {
+      if (!isRecord12(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -15772,7 +15992,7 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
     const entries = await readBoundSessionEntries(sessionFile);
     return extractNavigatorFact(entries);
   } catch (error) {
-    if (isMissingPathError3(error)) {
+    if (isMissingPathError4(error)) {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -15885,7 +16105,7 @@ async function readLawfulSettlementEntries(sessionFile) {
   try {
     return await readBoundSessionEntries(sessionFile);
   } catch (error) {
-    if (isMissingPathError3(error)) return void 0;
+    if (isMissingPathError4(error)) return void 0;
     throw error instanceof Error && error.knownCause === "session" ? error : sessionReadFailure(error, "session unreadable");
   }
 }
@@ -16149,7 +16369,7 @@ async function settleLawfulCollectorTerminalResult(admitted, authority, scope) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const details = isRecord11(candidate) ? candidate : { candidate };
+      const details = isRecord12(candidate) ? candidate : { candidate };
       const failed = await settleFailureTerminalResult(
         admitted,
         {
@@ -16204,7 +16424,7 @@ function extractDoctorCandidateCostFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.cost : void 0;
+      return isRecord12(data) ? data.cost : void 0;
     }
   }
   return void 0;
@@ -16215,7 +16435,7 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.auditNoReceipt : void 0;
+      return isRecord12(data) ? data.auditNoReceipt : void 0;
     }
   }
   return void 0;
@@ -16380,7 +16600,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
     );
   }
   if (residual !== void 0) {
-    const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+    const details = isRecord12(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
     const failed = await settleFailureTerminalResult(
       admitted,
       {
@@ -16458,11 +16678,75 @@ async function settleLawfulDiaristTerminalResult(admitted, authority, scope) {
 async function trySettleDiaristTerminalResult(admitted, authority, scope) {
   return settleLawfulDiaristTerminalResult(admitted, authority, scope);
 }
+function countersignTerminalFromEntries(entries) {
+  for (let index = entries.length - 1; index >= 0; index -= 1) {
+    const entry = entries[index];
+    if (entry?.type !== "custom") continue;
+    if (entry.customType !== SECRETARIAT_GATE_OFFICER_ENTRY_TYPE) continue;
+    const data = entry.data !== null && typeof entry.data === "object" && !Array.isArray(entry.data) ? entry.data : void 0;
+    if (data?.officer !== "countersign") continue;
+    if (data.receipt === void 0) continue;
+    const runId = typeof data.runId === "string" && data.runId.trim() !== "" ? data.runId : void 0;
+    return {
+      receipt: data.receipt,
+      ...runId === void 0 ? {} : { runId }
+    };
+  }
+  return void 0;
+}
+function withCountersignTerminalFact(roleOutcome, officer) {
+  const prior = roleOutcome.decisiveFacts !== void 0 && isRecord12(roleOutcome.decisiveFacts) ? roleOutcome.decisiveFacts : {};
+  return {
+    ...roleOutcome,
+    decisiveFacts: {
+      ...prior,
+      [SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY]: officer
+    }
+  };
+}
+function acceptedSecretariatDefinesOfficerProjection(roleOutcome) {
+  const payloads = roleOutcome.payloads ?? [];
+  for (let index = payloads.length - 1; index >= 0; index -= 1) {
+    const payload = payloads[index];
+    if (!isRecord12(payload)) continue;
+    const status = payload.secretariatStatus;
+    if (typeof status !== "string") continue;
+    return status === "converged";
+  }
+  return false;
+}
 async function settleLawfulSecretariatTerminalResult(admitted, authority, scope) {
-  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
+  const settled = await settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "secretariat",
     toolName: SECRETARIAT_OUTPUT_TOOL_NAME
   }, scope);
+  if (settled === void 0) return void 0;
+  const coordinates = coordinatesFromAdmitted(authority, admitted);
+  const entries = await readLawfulSettlementEntries(coordinates.sessionFile) ?? [];
+  const officer = countersignTerminalFromEntries(entries);
+  if (officer === void 0) return settled;
+  if (settled.roleOutcome.kind === "audit_escalation") {
+    return {
+      ...settled,
+      roleOutcome: withCountersignTerminalFact(
+        {
+          ...settled.roleOutcome,
+          payloads: [officer.receipt]
+        },
+        officer
+      )
+    };
+  }
+  if (settled.roleOutcome.kind === "accepted") {
+    if (!acceptedSecretariatDefinesOfficerProjection(settled.roleOutcome)) {
+      return settled;
+    }
+    return {
+      ...settled,
+      roleOutcome: withCountersignTerminalFact(settled.roleOutcome, officer)
+    };
+  }
+  return settled;
 }
 async function trySettleSecretariatTerminalResult(admitted, authority, scope) {
   return settleLawfulSecretariatTerminalResult(admitted, authority, scope);
@@ -16704,7 +16988,7 @@ async function settleLawfulMergerTerminalResult(admitted, authority, options, sc
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const details = isRecord11(candidate) ? candidate : { candidate };
+      const details = isRecord12(candidate) ? candidate : { candidate };
       const failed = await settleFailureTerminalResult(
         admitted,
         {
@@ -17033,10 +17317,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep = ((ms) => new Promise((resolve22) => {
+  const sleep = ((ms) => new Promise((resolve21) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve22();
+      resolve21();
     }, ms);
   }));
   sleep.cancel = () => {
@@ -17048,7 +17332,7 @@ function defaultNavigatorGraceSleep() {
   return sleep;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -17057,11 +17341,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep
       action();
     };
     void work.then(
-      (value) => finish(() => resolve22({ status: "done", value })),
+      (value) => finish(() => resolve21({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep(graceMs).then(() => {
-      finish(() => resolve22({ status: "timeout" }));
+      finish(() => resolve21({ status: "timeout" }));
     });
   });
 }
@@ -17153,7 +17437,7 @@ var init_seat_ticket_binding = __esm({
 });
 
 // src/session-identity.ts
-import { mkdir as mkdir3, readFile as readFile16, rename as rename2, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile as readFile17, rename as rename2, writeFile as writeFile8 } from "node:fs/promises";
 import { dirname as dirname15, join as join29 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
   const bindingPath = (principal) => join29(authority.decode(principal).sessionDirectory, sessionBindingFile);
@@ -17163,7 +17447,7 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
     },
     async load(principal) {
       try {
-        const value = JSON.parse(await readFile16(bindingPath(principal), "utf8"));
+        const value = JSON.parse(await readFile17(bindingPath(principal), "utf8"));
         if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
           throw new Error("durable session binding is invalid");
         }
@@ -17202,7 +17486,7 @@ var init_session_identity = __esm({
 });
 
 // src/session-dialogue.ts
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function nativeEventId(row) {
@@ -17212,7 +17496,7 @@ function nativeEventId(row) {
   }
   for (const nestKey of ["message", "payload"]) {
     const nested = row[nestKey];
-    if (!isRecord12(nested)) continue;
+    if (!isRecord13(nested)) continue;
     for (const key of ["uuid", "id"]) {
       const value = nested[key];
       if (typeof value === "string" && value !== "") return value;
@@ -17225,19 +17509,19 @@ function textParts(content) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const part of content) {
-    if (!isRecord12(part) || !SPEAKER_TEXT_PART_TYPES.has(String(part.type))) continue;
+    if (!isRecord13(part) || !SPEAKER_TEXT_PART_TYPES.has(String(part.type))) continue;
     const text = part.text;
     if (typeof text === "string" && text !== "") out.push(text);
   }
   return out;
 }
 function responseItemMessage(row) {
-  if (row.type !== "response_item" || !isRecord12(row.payload)) return void 0;
+  if (row.type !== "response_item" || !isRecord13(row.payload)) return void 0;
   if (row.payload.type !== "message") return void 0;
   return row.payload;
 }
 function messageBody(row) {
-  if (isRecord12(row.message)) return row.message;
+  if (isRecord13(row.message)) return row.message;
   return responseItemMessage(row);
 }
 function speakerOf(message) {
@@ -17247,7 +17531,7 @@ function speakerOf(message) {
 }
 function codexContentItemKinds(message) {
   const pass = message.internal_chat_message_metadata_passthrough;
-  if (!isRecord12(pass) || !Array.isArray(pass.content_item_kinds)) return void 0;
+  if (!isRecord13(pass) || !Array.isArray(pass.content_item_kinds)) return void 0;
   const kinds = [];
   for (const kind of pass.content_item_kinds) {
     if (typeof kind === "string" && kind !== "") kinds.push(kind);
@@ -17276,7 +17560,7 @@ function isFixedNonOwnerEnqueueShape(content) {
   return hasFixedOpenTagPrefix(content, TASK_NOTIFICATION_OPEN_TAG);
 }
 function materializationOriginKind(row) {
-  if (!isRecord12(row.origin)) return void 0;
+  if (!isRecord13(row.origin)) return void 0;
   const kind = row.origin.kind;
   return typeof kind === "string" && kind !== "" ? kind : void 0;
 }
@@ -17324,7 +17608,7 @@ var init_session_dialogue = __esm({
 
 // src/ticket-provenance.ts
 import { createHash as createHash8 } from "node:crypto";
-import { readFile as readFile17 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname16, join as join30, resolve as resolve12 } from "node:path";
 function dialogueSessionSourceRoots(home) {
   const machineHome = typeof home === "string" && home.trim() !== "" ? home : packageMachineHome();
@@ -17420,7 +17704,7 @@ async function readTicketProvenance(ticketNumber, cwd, home) {
   const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
   let text;
   try {
-    text = await readFile17(recordFile, "utf8");
+    text = await readFile18(recordFile, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") {
       return {
@@ -17900,7 +18184,7 @@ __export(case_dossier_delivery_exports, {
   loadCaseDossierReadingMaterial: () => loadCaseDossierReadingMaterial,
   projectCaseDossierPointerSection: () => projectCaseDossierPointerSection
 });
-import { mkdtemp as mkdtemp3, readFile as readFile18, rm as rm3, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile19, rm as rm3, writeFile as writeFile9 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join31 } from "node:path";
 async function projectCaseDossierPointerSection(input) {
@@ -17952,7 +18236,7 @@ async function loadCaseDossierReadingMaterial(runDirectory) {
   );
   let section;
   try {
-    section = await readFile18(frozenPath, "utf8");
+    section = await readFile19(frozenPath, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -17975,7 +18259,7 @@ var init_case_dossier_delivery = __esm({
 });
 
 // src/host-transition-prior-native.ts
-import { access as access3, readdir as readdir7 } from "node:fs/promises";
+import { access as access3, readdir as readdir8 } from "node:fs/promises";
 import { dirname as dirname17, join as join32 } from "node:path";
 function isEnoent3(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
@@ -17993,7 +18277,7 @@ async function listSitianRecordPaths(sessionParent) {
   const sessionRoot = dirname17(sessionParent);
   let entries;
   try {
-    entries = await readdir7(sessionRoot, { withFileTypes: true });
+    entries = await readdir8(sessionRoot, { withFileTypes: true });
   } catch (error) {
     if (isEnoent3(error)) return [];
     throw error;
@@ -18067,6 +18351,24 @@ var init_public_run_credentials = __esm({
   }
 });
 
+// src/public-cli/process-cancel.ts
+function processCancelSignalName(signal) {
+  if (signal === void 0 || signal.aborted !== true) return void 0;
+  const reason = signal.reason;
+  if (reason === "SIGTERM" || reason === "SIGINT" || reason === "SIGHUP") {
+    return reason;
+  }
+  return void 0;
+}
+function processCancelDiagnostic(signalName) {
+  return `ak-role terminated by ${signalName}`;
+}
+var init_process_cancel = __esm({
+  "src/public-cli/process-cancel.ts"() {
+    "use strict";
+  }
+});
+
 // src/public-cli/auto-resume.ts
 import { constants as fsConstants2 } from "node:fs";
 import { randomUUID as randomUUID5 } from "node:crypto";
@@ -18118,7 +18420,7 @@ async function ensureRealArtifactsDirectory(runDirectory) {
       throw new Error("run artifact retention: artifacts path is not a real directory");
     }
   } catch (error) {
-    if (!isMissingPathError4(error)) throw error;
+    if (!isMissingPathError5(error)) throw error;
     await mkdir4(artifactsDir, { recursive: true });
     const created = await lstat6(artifactsDir);
     if (created.isSymbolicLink() || !created.isDirectory()) {
@@ -18150,7 +18452,7 @@ function serializeThrownValue(value, depth = 0, seen = /* @__PURE__ */ new WeakS
   }
   return value;
 }
-function isMissingPathError4(error) {
+function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 function transferNestedValue(value, depth, seen) {
@@ -18369,6 +18671,10 @@ async function runWithAutoResumeLoop(options) {
         if (terminal !== void 0) presentTerminal(terminal, options.io);
         return result;
       }
+      if (processCancelSignalName(options.signal) !== void 0) {
+        if (terminal !== void 0) presentTerminal(terminal, options.io);
+        return result;
+      }
     }
     if (result !== void 0) {
       const terminal = result.terminal;
@@ -18402,6 +18708,28 @@ async function runWithAutoResumeLoop(options) {
           terminal
         };
       }
+      const cancelName = processCancelSignalName(options.signal);
+      if (cancelName !== void 0) {
+        const terminal = await attachDispatchExceptionTerminal(
+          options.admitted,
+          dispatchExceptionFailureTerminal({
+            role: options.admitted.role,
+            runId: options.admitted.runId,
+            causeError: lastThrownError,
+            errorFiles: retainedErrorFiles,
+            autoResumeAttempts,
+            endReason: `ak-role terminated by ${cancelName}`,
+            everyAttemptThrew
+          }),
+          options.io
+        );
+        await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
+        presentTerminal(terminal, options.io);
+        return {
+          exitCode: 1,
+          terminal
+        };
+      }
       if (!await isPrincipalAvailable(options.admitted.principal)) {
         const terminal = await attachDispatchExceptionTerminal(
           options.admitted,
@@ -18438,6 +18766,7 @@ var init_auto_resume = __esm({
     init_role_run_placement();
     init_run_lifecycle();
     init_config();
+    init_process_cancel();
     init_terminal();
     init_settlement();
     dummyIo = { stdout: () => {
@@ -18470,6 +18799,36 @@ function describeCaughtError(error) {
 function isStationChildOfficerDialogue(role, env) {
   return env.stationChild === true && isOfficerReviewSeat(role);
 }
+function withProcessCancelSkipAutoResume(result, signal) {
+  if (processCancelSignalName(signal) === void 0) {
+    return result;
+  }
+  return { ...result, skipAutoResume: true };
+}
+async function settleProcessCancelAfterTurn(input) {
+  const failed = await settleAfterTurnStarted(
+    input.admitted,
+    withEngineDetourInvocationScope(
+      {
+        timedOut: input.result.timedOut,
+        code: input.result.code,
+        stderr: input.result.stderr,
+        knownDiagnostic: processCancelDiagnostic(input.cancelName)
+      },
+      input.invocationScopeId
+    ),
+    input.adapters,
+    input.env.principalAuthority,
+    input.io,
+    input.persistRunState
+  );
+  return {
+    ...failed,
+    turnDispatched: true,
+    skipAutoResume: true,
+    ...input.deferredPersist
+  };
+}
 function withOnceSuccessfulBeforeDispatch(adapters) {
   const hook = adapters.beforeDispatch;
   if (hook === void 0) return adapters;
@@ -18630,6 +18989,31 @@ async function dispatchPostAdmissionTurn(input) {
   const finishAfterTurn = async (result) => {
     if (afterDispatchApplied) return result;
     afterDispatchApplied = true;
+    const cancelBeforeFinish = processCancelSignalName(env.signal);
+    if (cancelBeforeFinish !== void 0 && result.terminal !== void 0 && isLawfulTypedTerminalOutcome(result.terminal.roleOutcome)) {
+      result = {
+        ...await settleAfterTurnStarted(
+          admitted,
+          withEngineDetourInvocationScope(
+            {
+              timedOut: false,
+              code: null,
+              stderr: "",
+              knownDiagnostic: processCancelDiagnostic(cancelBeforeFinish),
+              skipRunStateWrite: true
+            },
+            request.invocationScopeId
+          ),
+          adapters,
+          env.principalAuthority,
+          io,
+          persistRunState
+        ),
+        turnDispatched: true,
+        skipAutoResume: true,
+        ...deferredPersist
+      };
+    }
     try {
       if (admitted.ticketNumber === void 0) {
         const rows = await readRecordedSubmissionRows(
@@ -18776,20 +19160,26 @@ async function dispatchPostAdmissionTurn(input) {
     try {
       result = await env.roleTurnHost.executeTurn(turnRequest);
     } catch (error) {
+      const processCancelName = processCancelSignalName(env.signal);
       const settled2 = await settleAfterTurnStarted(
         admitted,
         withEngineDetourInvocationScope({
           timedOut: false,
           code: null,
           stderr: "",
-          thrown: error
+          thrown: processCancelName === void 0 ? error : new Error(processCancelDiagnostic(processCancelName), { cause: error })
         }, request.invocationScopeId),
         adapters,
         env.principalAuthority,
         io,
         persistRunState
       );
-      return await finishAfterTurn({ ...settled2, turnDispatched: true, ...deferredPersist });
+      return await finishAfterTurn(
+        withProcessCancelSkipAutoResume(
+          { ...settled2, turnDispatched: true, ...deferredPersist },
+          env.signal
+        )
+      );
     }
     let stderrLogWriteFailure;
     try {
@@ -18829,7 +19219,8 @@ async function dispatchPostAdmissionTurn(input) {
         credential: credentialFailure,
         runDirectory: admitted.runDirectory
       });
-      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0;
+      const processCancelName = processCancelSignalName(env.signal);
+      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0 || processCancelName !== void 0;
       hostSignalFailed = directHostFailureSignal || result.code !== null && result.code !== 0 || resolution.knownFailure !== void 0;
       settled = await adapters.trySettle(admitted, env.principalAuthority, courtScope);
       if (settled !== void 0) {
@@ -18837,7 +19228,8 @@ async function dispatchPostAdmissionTurn(input) {
       }
       const settledIsFreshThisAttempt = settled === void 0 || settled.roleOutcome.kind !== "accepted" && settled.roleOutcome.kind !== "audit_escalation" ? true : await attemptProducedFreshSubmission(admitted, courtScope);
       const staleAcceptanceOutranksRealFailure = !settledIsFreshThisAttempt && hostSignalFailed;
-      if (settled !== void 0 && shouldPresent(settled) && !directHostFailureSignal && !staleAcceptanceOutranksRealFailure && stderrLogWriteFailure === void 0) {
+      const cancelAfterSettle = processCancelSignalName(env.signal);
+      if (settled !== void 0 && shouldPresent(settled) && !directHostFailureSignal && !staleAcceptanceOutranksRealFailure && stderrLogWriteFailure === void 0 && cancelAfterSettle === void 0) {
         if (settled.roleOutcome.kind === "accepted" && request.courtAttemptId !== void 0 && request.courtAttemptId.length > 0) {
           try {
             await clearCurrentCourt(admitted.runDirectory, request.courtAttemptId);
@@ -18874,6 +19266,22 @@ async function dispatchPostAdmissionTurn(input) {
       return await finishAfterTurn({ ...settledFailure, turnDispatched: true, ...deferredPersist });
     }
     if (settledOutcome !== void 0) {
+      const lateCancel = processCancelSignalName(env.signal);
+      if (lateCancel !== void 0) {
+        return await finishAfterTurn(
+          await settleProcessCancelAfterTurn({
+            admitted,
+            cancelName: lateCancel,
+            result,
+            adapters,
+            env,
+            io,
+            persistRunState,
+            deferredPersist,
+            invocationScopeId: request.invocationScopeId
+          })
+        );
+      }
       if (persistRunState) {
         try {
           await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
@@ -18892,13 +19300,19 @@ async function dispatchPostAdmissionTurn(input) {
             io,
             persistRunState
           );
-          return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+          return await finishAfterTurn(
+            withProcessCancelSkipAutoResume(
+              { ...failed, turnDispatched: true, ...deferredPersist },
+              env.signal
+            )
+          );
         }
       }
       return await finishAfterTurn({ ...settledOutcome, ...deferredPersist });
     }
     if (hostSignalFailed) {
       const resolutionInput = controlledFailureInputFromResolution(resolution);
+      const processCancelName = processCancelSignalName(env.signal);
       const stderrLogWriteDetails = stderrLogWriteFailure === void 0 ? void 0 : { stderrLogWriteFailure: describeCaughtError(stderrLogWriteFailure) };
       const failed = await settleAfterTurnStarted(
         admitted,
@@ -18907,6 +19321,7 @@ async function dispatchPostAdmissionTurn(input) {
           code: result.code,
           stderr: result.stderr,
           ...resolutionInput,
+          ...processCancelName === void 0 ? {} : { knownDiagnostic: processCancelDiagnostic(processCancelName) },
           // Secondary fact only — never the cause. Rides on whichever channel
           // classification actually reads (knownFailure.details owns it when
           // a knownFailure exists; the top-level knownDetails otherwise).
@@ -18922,7 +19337,12 @@ async function dispatchPostAdmissionTurn(input) {
         io,
         persistRunState
       );
-      return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+      return await finishAfterTurn(
+        withProcessCancelSkipAutoResume(
+          { ...failed, turnDispatched: true, ...deferredPersist },
+          env.signal
+        )
+      );
     }
     if (stderrLogWriteFailure !== void 0) {
       const failed = await settleAfterTurnStarted(
@@ -18945,6 +19365,22 @@ async function dispatchPostAdmissionTurn(input) {
       await settleHostEndedNoReceipt(admitted, env.principalAuthority, courtScope),
       courtScope
     );
+    const noReceiptCancel = processCancelSignalName(env.signal);
+    if (noReceiptCancel !== void 0) {
+      return await finishAfterTurn(
+        await settleProcessCancelAfterTurn({
+          admitted,
+          cancelName: noReceiptCancel,
+          result,
+          adapters,
+          env,
+          io,
+          persistRunState,
+          deferredPersist,
+          invocationScopeId: request.invocationScopeId
+        })
+      );
+    }
     if (persistRunState) {
       try {
         await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
@@ -18963,7 +19399,12 @@ async function dispatchPostAdmissionTurn(input) {
           io,
           persistRunState
         );
-        return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
+        return await finishAfterTurn(
+          withProcessCancelSkipAutoResume(
+            { ...failed, turnDispatched: true, ...deferredPersist },
+            env.signal
+          )
+        );
       }
     }
     return await finishAfterTurn({
@@ -19159,6 +19600,7 @@ async function runPostAdmissionSeatResume(input) {
         io: input.io,
         sessionAppender: env.sessionAppender,
         autoResumeLimit: env.autoResumeLimit,
+        ...env.signal === void 0 ? {} : { signal: env.signal },
         buildInitialPayload: () => ({ resumeTurn: false }),
         buildResumePayload: () => ({ resumeTurn: true }),
         // Same as public manual resume: prior-court sealed acceptance is not a
@@ -19262,6 +19704,7 @@ async function runPostAdmissionResumable(input) {
     io,
     sessionAppender: env.sessionAppender,
     autoResumeLimit: env.autoResumeLimit,
+    ...env.signal === void 0 ? {} : { signal: env.signal },
     buildInitialPayload: buildScopedInitial,
     buildResumePayload: buildScopedResume,
     dispatch: async (request, lease, _isFirst, attemptIo) => {
@@ -19370,6 +19813,7 @@ var init_post_admission = __esm({
     init_host_transition_prior_native();
     init_public_run_credentials();
     init_run_lifecycle();
+    init_process_cancel();
     init_activation_ledger_topology();
     init_settlement();
     init_terminal();
@@ -20630,7 +21074,9 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
               {
                 instruction: parsed.instruction,
                 projectRoot: admitted.projectRoot,
-                failureLabel: "unbound summons"
+                failureLabel: "unbound summons",
+                // #969: parent durable ticket is the resume/bind key (ADR 0079).
+                ...env.boundTicketNumber === void 0 ? {} : { boundTicketNumber: env.boundTicketNumber }
               },
               env,
               io
@@ -20682,12 +21128,16 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
             );
           }
           if (outcome.identity.kind === "ticket") {
-            const assertedTicket = outcome.identity.ticketNumber;
-            typedTicket = assertedTicket;
+            typedTicket = isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : outcome.identity.ticketNumber;
             typedCourtTicketNumbers = outcome.identity.courtTicketNumbers;
+          } else if (isSafePositiveTicketNumber(env.boundTicketNumber)) {
+            typedTicket = env.boundTicketNumber;
+          }
+          if (typedTicket !== void 0) {
+            const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction;
             const summons = {
-              instruction: parsed.instruction,
-              instructionEmpty: parsed.instruction.trim() === ""
+              instruction: resumeInstruction,
+              instructionEmpty: resumeInstruction.trim() === ""
             };
             const resumed = await tryResumeSameTicketSeatRun({
               home: env.home,
@@ -20769,7 +21219,9 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
           ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
           continuation: {
             kind: "initial",
-            prompt: buildCountersignTransportPrompt(
+            // #969/#879: gate path first mint carries parent payload as dialogue content;
+            // ordinary public entry keeps package transport prompt.
+            prompt: env.reviewReask ?? env.gateReviewInstruction ?? buildCountersignTransportPrompt(
               admitted,
               engineSessionMaterialFromOptions({
                 ...pickEngineAxis(env),
@@ -21911,6 +22363,25 @@ async function summonGateOfficer(options) {
       ...common
     });
   }
+  if (options.officer === "countersign") {
+    const { runIdFromRunDirectory: runIdFromRunDirectory2 } = await Promise.resolve().then(() => (init_run_terminal_artifacts(), run_terminal_artifacts_exports));
+    const correlationId = runIdFromRunDirectory2(options.sourceRunDirectory);
+    if (correlationId === void 0 || correlationId.trim() === "") {
+      throw new Error(
+        `countersign gate summon requires parent runId from sourceRunDirectory: ${options.sourceRunDirectory}`
+      );
+    }
+    const { readBoardTicketNumber: readBoardTicketNumber2 } = await Promise.resolve().then(() => (init_run_ticket_number(), run_ticket_number_exports));
+    const parentTicket = await readBoardTicketNumber2(options.sourceRunDirectory);
+    const instruction = options.reask ?? gateReviewInstruction ?? "";
+    return summonPublicRole({
+      role: "countersign",
+      argv: ["--project", options.cwd, "--", instruction],
+      ...common,
+      correlationId,
+      ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket }
+    });
+  }
   return summonPublicRole({
     role: "inspector",
     argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
@@ -21935,7 +22406,7 @@ init_engine_detour();
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { appendFile as appendFile3, mkdir as mkdir7, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { dirname as dirname22, join as join41 } from "node:path";
+import { dirname as dirname21, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -21955,6 +22426,7 @@ function createDefaultGateOfficerSummon(options) {
       ...options.home === void 0 ? {} : { home: options.home },
       ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
       ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+      ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
       ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
     });
   };
@@ -22003,9 +22475,15 @@ async function requireGatekeeperPass(options) {
         options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
       }
     }
-    if (gatekeeper.status === "pass") return;
+    if (gatekeeper.status === "pass") {
+      return {
+        officer: projected.officer,
+        receipt: gatekeeper.receipt,
+        ...typeof gatekeeper.runId === "string" && gatekeeper.runId.trim() !== "" ? { runId: gatekeeper.runId } : {}
+      };
+    }
     if (gatekeeper.status === "needs_reask") {
-      reask = OFFICER_CONCLUSION_REASK;
+      reask = officerConclusionReask(projected.officer);
       continue;
     }
     if (gatekeeper.status === "transport_failure") {
@@ -22015,6 +22493,9 @@ async function requireGatekeeperPass(options) {
       });
       options.hostActions.failInfrastructure(failure2, options.context, options.toolCallId);
     }
+    if (gatekeeper.status === "escalate" && options.subject.kind === "secretariat_verdict") {
+      throw new GatekeeperDecisionError(gatekeeper);
+    }
     options.hostActions.bindSubmissionNonPass(options.toolCallId, gatekeeper);
     throw new GatekeeperDecisionError(gatekeeper);
   }
@@ -22064,7 +22545,7 @@ init_sitian_facade();
 init_submission_ledger();
 init_collector_ledger();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { readFileSync as readFileSync6, writeSync as writeSync4 } from "node:fs";
+import { readFileSync as readFileSync6, writeSync as writeSync3 } from "node:fs";
 import { join as join40 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
@@ -22106,16 +22587,7 @@ function namedActivationCause(error) {
 init_activation_ledger_topology();
 
 // src/activation-ledger.ts
-init_activation_ledger_topology();
 init_activation_ledger_git();
-import {
-  constants as constants2,
-  closeSync as closeSync2,
-  fstatSync,
-  openSync as openSync2,
-  writeSync
-} from "node:fs";
-import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve16 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -22219,129 +22691,11 @@ function durableSessionPointer(sessionManager) {
 
 // src/activation-ledger.ts
 init_activation_ledger_topology();
-var ACTIVATION_LEDGER_APPEND_OPEN_FLAGS = constants2.O_APPEND | constants2.O_CREAT | constants2.O_WRONLY | constants2.O_NOFOLLOW;
-var ACCEPTED_ACTIVATION_EVENT = "accepted-activation";
-var ACCEPTED_ACTIVATION_FACT_KEYS = Object.freeze([
-  "event",
-  "role",
-  "observedAt",
-  "bookKey",
-  "session",
-  "correlation"
-]);
-function correlationIdentityFromEnv(env = process.env) {
-  const raw = env.AK_CORRELATION_ID;
-  if (typeof raw === "string" && raw.trim().length > 0) {
-    return { kind: "caller", id: raw };
-  }
-  return { kind: "absent" };
-}
-function projectAcceptedActivationFact(input) {
-  const closed = {
-    event: ACCEPTED_ACTIVATION_EVENT,
-    role: input.role,
-    observedAt: input.observedAt,
-    bookKey: input.bookKey,
-    session: { kind: "session-file", path: input.session.path },
-    correlation: input.correlation.kind === "caller" ? { kind: "caller", id: input.correlation.id } : { kind: "absent" }
-  };
-  return Object.fromEntries(
-    ACCEPTED_ACTIVATION_FACT_KEYS.map((key) => [key, closed[key]])
-  );
-}
-function buildAcceptedActivationFact(input) {
-  return projectAcceptedActivationFact(input);
-}
-function serializeAcceptedActivationFact(fact) {
-  return `${JSON.stringify(projectAcceptedActivationFact(fact))}
-`;
-}
-function appendActivationLedgerLine(ledgerPath, line2, options) {
-  if (!isAbsolute10(options.ledgerHome)) {
-    throw new ActivationLedgerError(
-      `activation ledger home must be absolute: ${options.ledgerHome}`
-    );
-  }
-  const resolvedLedger = resolve16(ledgerPath);
-  const resolvedHome = resolve16(options.ledgerHome);
-  const parent = dirname19(resolvedLedger);
-  ensureRealDirectoryTree(resolvedHome, parent);
-  assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
-  if (typeof constants2.O_NOFOLLOW !== "number") {
-    throw new ActivationLedgerError(
-      "activation ledger append requires O_NOFOLLOW open-flag support (anti-symlink TOCTOU protection must not be silently dropped); refusing to append"
-    );
-  }
-  const bytes = Buffer.isBuffer(line2) ? line2 : Buffer.from(line2);
-  let ledgerFd;
-  let primaryFailure;
-  try {
-    try {
-      ledgerFd = openSync2(resolvedLedger, ACTIVATION_LEDGER_APPEND_OPEN_FLAGS, 420);
-    } catch (error) {
-      throw new ActivationLedgerError(
-        `activation ledger failed to open ledger file (${resolvedLedger}): ${errorText(error)}`,
-        { cause: error }
-      );
-    }
-    let opened;
-    try {
-      opened = fstatSync(ledgerFd);
-    } catch (error) {
-      throw new ActivationLedgerError(
-        `activation ledger failed to fstat ledger file (${resolvedLedger}): ${errorText(error)}`,
-        { cause: error }
-      );
-    }
-    if (!opened.isFile()) {
-      throw new ActivationLedgerError(
-        `activation ledger is not a regular file: ${resolvedLedger}`
-      );
-    }
-    const written = writeSync(ledgerFd, bytes, 0, bytes.length, null);
-    if (written !== bytes.length) {
-      throw new ActivationLedgerError(
-        `activation ledger short write: wrote ${written} of ${bytes.length} bytes to ${resolvedLedger}`
-      );
-    }
-  } catch (error) {
-    primaryFailure = error;
-  }
-  if (ledgerFd !== void 0) {
-    try {
-      closeSync2(ledgerFd);
-    } catch (closeFailure) {
-      if (primaryFailure !== void 0) {
-        throw new AggregateError(
-          [primaryFailure, closeFailure],
-          "activation ledger operation and close failed",
-          { cause: primaryFailure }
-        );
-      }
-      throw closeFailure;
-    }
-  }
-  if (primaryFailure !== void 0) throw primaryFailure;
-}
-function appendAcceptedActivationFact(ledgerPath, fact, options) {
-  appendActivationLedgerLine(
-    ledgerPath,
-    Buffer.from(serializeAcceptedActivationFact(fact), "utf8"),
-    { ledgerHome: options.ledgerHome }
-  );
-}
-function appendAcceptedActivationToBook(options) {
-  appendAcceptedActivationFact(
-    activationWaitingLedgerPath(options.ledgerHome, options.fact.bookKey),
-    options.fact,
-    { ledgerHome: options.ledgerHome }
-  );
-}
 
 // src/stderr-jsonl.ts
-import { writeSync as writeSync2 } from "node:fs";
+import { writeSync } from "node:fs";
 var STDERR_JSONL_WRITE_RETRY_LIMIT = 100;
-function writeStderrJsonlRecord(record4, write = writeSync2) {
+function writeStderrJsonlRecord(record4, write = writeSync) {
   const bytes = Buffer.from(`${JSON.stringify(record4)}
 `);
   let offset = 0;
@@ -22361,7 +22715,7 @@ function writeStderrJsonlRecord(record4, write = writeSync2) {
 }
 
 // src/tool-execution-observation.ts
-import { writeSync as writeSync3 } from "node:fs";
+import { writeSync as writeSync2 } from "node:fs";
 import { Type as Type13 } from "typebox";
 import { Value as Value2 } from "typebox/value";
 var TOOL_EXECUTION_UPDATE_THROTTLE_MS = 3e4;
@@ -22392,7 +22746,7 @@ function validateToolExecutionObservationRecord(record4) {
   }
   return record4;
 }
-function writeToolExecutionObservationRecord(record4, write = writeSync3) {
+function writeToolExecutionObservationRecord(record4, write = writeSync2) {
   writeStderrJsonlRecord(validateToolExecutionObservationRecord(record4), write);
 }
 function isProducingToolUpdate(partialResult) {
@@ -22623,15 +22977,15 @@ init_collector_evidence();
 init_collector_github();
 
 // src/collector-handbook.ts
-import { readFile as readFile19 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 import { join as join38, sep as sep6 } from "node:path";
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { rename as rename3, rm as rm5, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname20, join as join37 } from "node:path";
+import { dirname as dirname19, join as join37 } from "node:path";
 async function writeFileAtomically(destination, contents) {
-  const parent = dirname20(destination);
+  const parent = dirname19(destination);
   const temporary = join37(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
     await writeFile11(temporary, contents);
@@ -22786,7 +23140,7 @@ function createCollectorHandbookStore(input) {
     ensureRealDirectoryTree(input.ledgerHome, parentDir2);
     assertLedgerFileInsideHome(path, input.ledgerHome);
     try {
-      const body = await readFile19(path, "utf8");
+      const body = await readFile20(path, "utf8");
       assertHandbookBudget(body, "\u6B63\u6587");
       return body;
     } catch (error) {
@@ -23935,7 +24289,7 @@ import { createHash as createHash9 } from "node:crypto";
 init_navigator_invocation_identity();
 init_packaged_role_registry();
 init_activation_ledger_topology();
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve16 } from "node:path";
 import "@earendil-works/pi-coding-agent";
 import { Type as Type22 } from "typebox";
 
@@ -24383,7 +24737,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
-  const resolvedReference = resolve17(cwd, reference);
+  const resolvedReference = resolve16(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
     return subjectRoot;
@@ -25085,7 +25439,7 @@ init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
 var WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE = "commit-reminder-bounce";
@@ -25134,7 +25488,7 @@ function escapeGitConfigValueRegex(value) {
 function unsetOwnedHooksPath(file) {
   const owned = [];
   for (const value of tryGetAll(file, "core.hooksPath")) {
-    if (!ownedHook(resolve18(value, HOOK_FILE))) continue;
+    if (!ownedHook(resolve17(value, HOOK_FILE))) continue;
     try {
       gitFile(file, [
         "--unset-all",
@@ -25149,15 +25503,15 @@ function unsetOwnedHooksPath(file) {
   return owned;
 }
 function rmOwnedDir(dir) {
-  const hookPath = resolve18(dir, HOOK_FILE);
+  const hookPath = resolve17(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
   if (existsSync12(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
-  const root = resolve18(commonDir, "worktrees");
+  const root = resolve17(commonDir, "worktrees");
   if (!existsSync12(root)) return [];
-  return readdirSync3(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
+  return readdirSync3(root).map((name) => resolve17(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
   let inside;
@@ -25171,17 +25525,17 @@ function uninstallPackageWorkerHooks(cwd) {
   const clear = (configFile) => {
     for (const hooks of unsetOwnedHooksPath(configFile)) rmOwnedDir(hooks);
   };
-  clear(resolve18(commonDir, "config"));
-  clear(resolve18(commonDir, "config.worktree"));
-  rmOwnedDir(resolve18(commonDir, HOOKS_DIR));
-  const legacy = resolve18(commonDir, "hooks", HOOK_FILE);
+  clear(resolve17(commonDir, "config"));
+  clear(resolve17(commonDir, "config.worktree"));
+  rmOwnedDir(resolve17(commonDir, HOOKS_DIR));
+  const legacy = resolve17(commonDir, "hooks", HOOK_FILE);
   if (ownedHook(legacy)) rmSync(legacy, { force: true });
   for (const gitDir of linkedGitDirs(commonDir)) {
-    clear(resolve18(gitDir, "config.worktree"));
-    rmOwnedDir(resolve18(gitDir, HOOKS_DIR));
+    clear(resolve17(gitDir, "config.worktree"));
+    rmOwnedDir(resolve17(gitDir, HOOKS_DIR));
   }
 }
-function isRecord13(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unfinishedReasonPresent(details) {
@@ -25197,7 +25551,7 @@ function readGateState(session) {
     if (entry.type !== "custom") continue;
     if (entry.customType === WORKER_COMMIT_BASELINE_ENTRY_TYPE) {
       const data = entry.data;
-      if (isRecord13(data) && (data.head === null || typeof data.head === "string")) {
+      if (isRecord14(data) && (data.head === null || typeof data.head === "string")) {
         baseline = data.head;
       }
     } else if (entry.customType === WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE) {
@@ -25748,7 +26102,6 @@ ${JSON.stringify(admitted)}
 // src/role-runtime.ts
 init_navigator_invocation_identity();
 init_gatekeeper_role();
-init_gatekeeper_role();
 init_submission_errors();
 init_doctor_contracts();
 init_doctor_evidence();
@@ -25931,7 +26284,7 @@ async function executeActivationStage(role, stage, infrastructure) {
     throw activationError;
   }
 }
-function writeActivationTraceRecord(record4, write = writeSync4) {
+function writeActivationTraceRecord(record4, write = writeSync3) {
   writeStderrJsonlRecord(record4, write);
 }
 var ActivationBarrierError = class extends Error {
@@ -26231,15 +26584,80 @@ ${error.message}`
 }
 var COUNTERSIGN_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "continue", "escalate"]);
 var COUNTERSIGN_STATUS_REASK = "countersignStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
-function createSecretariatRoleRuntime(roleHost, dependencies) {
+var SECRETARIAT_SUBMISSION_GATE_HOSTS = /* @__PURE__ */ new Set(["codex", "claude", "grok-build"]);
+var SECRETARIAT_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "escalate"]);
+var SECRETARIAT_STATUS_REASK = "secretariatStatus \u4E0D\u662F converged\u3001escalate \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
+function createSecretariatRoleRuntime(roleHost, dependencies, hostActions) {
   let parentInstruction = "";
+  const beforeAccept = hostActions !== void 0 && roleHost.requireGatekeeperPass !== void 0 ? async ({ toolCallId, parameters, signal, ctx }) => {
+    const host = typeof ctx.host === "string" && ctx.host.trim() !== "" ? ctx.host.trim() : void 0;
+    if (host === void 0 || !SECRETARIAT_SUBMISSION_GATE_HOSTS.has(host)) {
+      return void 0;
+    }
+    const record4 = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
+    const status = record4 !== void 0 && typeof record4.secretariatStatus === "string" ? record4.secretariatStatus : void 0;
+    if (status === void 0 || !SECRETARIAT_QUEUE_STATUSES.has(status)) {
+      throw new ParentQueueReaskError(SECRETARIAT_STATUS_REASK);
+    }
+    if (status === "escalate") {
+      return void 0;
+    }
+    try {
+      const pass = await roleHost.requireGatekeeperPass({
+        context: ctx,
+        subject: { kind: "secretariat_verdict" },
+        ...signal === void 0 ? {} : { signal },
+        hostActions,
+        toolCallId,
+        // #879: this-turn typed payload — identity-bound at submit site.
+        submission: parameters
+      });
+      if (pass !== void 0 && pass !== null && typeof pass === "object" && "receipt" in pass) {
+        const {
+          SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2
+        } = await Promise.resolve().then(() => (init_secretariat_contracts(), secretariat_contracts_exports));
+        const runId = typeof pass.runId === "string" && pass.runId.trim() !== "" ? pass.runId : void 0;
+        ctx.sessionManager.appendCustomEntry?.(SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2, {
+          officer: "countersign",
+          receipt: pass.receipt,
+          ...runId === void 0 ? {} : { runId }
+        });
+      }
+      return void 0;
+    } catch (error) {
+      if (error instanceof GatekeeperDecisionError && error.result.status === "escalate") {
+        const receipt = error.result.receipt;
+        const receiptRecord = receipt !== null && typeof receipt === "object" && !Array.isArray(receipt) ? receipt : void 0;
+        const runId = typeof error.result.runId === "string" && error.result.runId.trim() !== "" ? error.result.runId : void 0;
+        const {
+          SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2
+        } = await Promise.resolve().then(() => (init_secretariat_contracts(), secretariat_contracts_exports));
+        ctx.sessionManager.appendCustomEntry?.(SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2, {
+          officer: "countersign",
+          receipt,
+          ...runId === void 0 ? {} : { runId }
+        });
+        const { buildAuditEscalationResult: buildAuditEscalationResult2 } = await Promise.resolve().then(() => (init_audit_escalation(), audit_escalation_exports));
+        return buildAuditEscalationResult2(
+          {
+            status: "escalate",
+            officer: "countersign",
+            ...receiptRecord !== void 0 && Object.prototype.hasOwnProperty.call(receiptRecord, "decisionGate") ? { decisionGate: receiptRecord.decisionGate } : {}
+          },
+          receipt
+        );
+      }
+      throw error;
+    }
+  } : void 0;
   const base = createFiledOfficerRuntime(
     roleHost,
     {
       role: "secretariat",
       tool: SECRETARIAT_OUTPUT_TOOL_SPEC,
       acceptedText: SECRETARIAT_ACCEPTED_TEXT,
-      soulTag: "secretariat"
+      soulTag: "secretariat",
+      ...beforeAccept === void 0 ? {} : { beforeAccept }
     },
     dependencies
   );
@@ -26921,8 +27339,9 @@ function createRoleRuntimeExtension(dependencies) {
         if (!dependencies.loadSecretariatSoul) throw new Error("Secretariat runtime dependencies are not configured");
         return dependencies.loadSecretariatSoul();
       },
-      ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot }
-    });
+      ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot },
+      ...dependencies.hostAdapters === void 0 ? {} : { hostAdapters: dependencies.hostAdapters }
+    }, hostActions);
     const merger = createMergerRoleRuntime(roleHost, {
       async loadSoul() {
         if (!dependencies.loadMergerSoul) throw new Error("Merger runtime dependencies are not configured");
@@ -27163,11 +27582,8 @@ function createRoleRuntimeExtension(dependencies) {
         }
       };
       try {
-        const bookKey = resolveBookKeyFromGit(ctx.cwd);
-        const correlation = correlationIdentityFromEnv();
-        const sessionFile = ctx.sessionManager.getSessionFile?.() || ctx.sessionManager.getSessionDir?.();
-        const ledgerHome = resolveActivationLedgerHomeForPath(sessionFile);
-        const session = durableSessionPointer(ctx.sessionManager);
+        resolveBookKeyFromGit(ctx.cwd);
+        durableSessionPointer(ctx.sessionManager);
         const isStationChild = roleHost.getFlag(STATION_CHILD_FLAG.name) === true;
         if (dependencies.createNavigatorAttendance !== void 0 && entry.role !== "navigator" && !isStationChild) {
           navigatorSessionParent = ctx.sessionManager.getSessionFile();
@@ -27254,16 +27670,6 @@ function createRoleRuntimeExtension(dependencies) {
           if (entry.role === "coder") coder.armSubmissionGate(ctx.cwd, ctx.sessionManager);
           else fixer.armSubmissionGate(ctx.cwd, ctx.sessionManager);
         }
-        appendAcceptedActivationToBook({
-          ledgerHome,
-          fact: buildAcceptedActivationFact({
-            role: entry.role,
-            observedAt: clock(),
-            bookKey,
-            session,
-            correlation
-          })
-        });
         admitted = true;
       } catch (error) {
         failInfrastructure(error, ctx);
@@ -27277,11 +27683,11 @@ init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
 async function listen(server, path) {
-  await new Promise((resolve22, reject) => {
+  await new Promise((resolve21, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve22();
+      resolve21();
     });
   });
 }
@@ -27317,7 +27723,7 @@ async function prepareRoleEnvelope(options) {
   const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID9();
   await mkdir7(request.runDirectory, { recursive: true });
   let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
-  await mkdir7(dirname22(sessionFile), { recursive: true });
+  await mkdir7(dirname21(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -27367,7 +27773,7 @@ async function prepareRoleEnvelope(options) {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname22(sessionFile),
+      getSessionDir: () => dirname21(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -27431,17 +27837,26 @@ async function prepareRoleEnvelope(options) {
     getActiveTools() {
       return [...preferredTools];
     },
-    async requireGatekeeperPass(options2) {
-      await requireGatekeeperPass({
-        context: options2.context,
-        subject: options2.subject,
-        ...options2.signal === void 0 ? {} : { signal: options2.signal },
+    async requireGatekeeperPass(gateOptions) {
+      const packageRoot = typeof options.dependencies.packageRoot === "string" ? options.dependencies.packageRoot : void 0;
+      return requireGatekeeperPass({
+        context: gateOptions.context,
+        subject: gateOptions.subject,
+        ...gateOptions.signal === void 0 ? {} : { signal: gateOptions.signal },
         hostActions: {
-          failInfrastructure: (error, _context, toolCallId) => options2.hostActions.failInfrastructure(error, options2.context, toolCallId),
-          bindSubmissionNonPass: options2.hostActions.bindSubmissionNonPass
+          failInfrastructure: (error, _context, toolCallId) => gateOptions.hostActions.failInfrastructure(error, gateOptions.context, toolCallId),
+          bindSubmissionNonPass: gateOptions.hostActions.bindSubmissionNonPass
         },
-        toolCallId: options2.toolCallId,
-        ...options2.submission === void 0 ? {} : { submission: options2.submission }
+        toolCallId: gateOptions.toolCallId,
+        ...gateOptions.submission === void 0 ? {} : { submission: gateOptions.submission },
+        // #969: package root + home reach nested 给事中/符宝郎 summons.
+        // hostAdapters (when set on deps) forward nested seat selection — production unset.
+        summonOfficer: createDefaultGateOfficerSummon({
+          cwd: gateOptions.context.cwd ?? request.cwd,
+          home: request.home,
+          ...packageRoot === void 0 ? {} : { packageRoot },
+          ...options.dependencies.hostAdapters === void 0 ? {} : { hostAdapters: options.dependencies.hostAdapters }
+        })
       });
     },
     on(...registration) {
@@ -27714,8 +28129,8 @@ async function prepareRoleEnvelope(options) {
     try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
-      await new Promise((resolve22, reject) => {
-        server.close((error) => error ? reject(error) : resolve22());
+      await new Promise((resolve21, reject) => {
+        server.close((error) => error ? reject(error) : resolve21());
       });
     } catch (error) {
       cleanupFailures.push(error);
@@ -27851,18 +28266,18 @@ async function prepareRoleEnvelope(options) {
 }
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import { join as join42 } from "node:path";
 
 // src/canonical-skill-binding.ts
-import { readFile as readFile20, realpath as realpath8 } from "node:fs/promises";
+import { readFile as readFile21, realpath as realpath8 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname as dirname23, resolve as resolve19 } from "node:path";
+import { dirname as dirname22, resolve as resolve18 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
 function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
   const matchedPath = evidence?.location === configuredPath ? configuredPath : evidence?.location === snapshot.path ? snapshot.path : void 0;
   const expectedContent = matchedPath === void 0 ? void 0 : snapshot.body;
-  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname23(matchedPath)}.
+  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname22(matchedPath)}.
 
 ${snapshot.body}`;
   if (evidence?.name !== name || matchedPath === void 0 || evidence.content !== expectedContent && evidence.content !== prefixedContent || evidence.userMessage !== originalRequest) {
@@ -27880,7 +28295,7 @@ var CanonicalSkillUnavailableError = class extends Error {
   code = "canonical-skill-unavailable";
 };
 async function loadCanonicalSkillBinding(name) {
-  const configuredPath = resolve19(
+  const configuredPath = resolve18(
     homedir(),
     `.agents/skills/${name}/SKILL.md`
   );
@@ -27888,7 +28303,7 @@ async function loadCanonicalSkillBinding(name) {
   let raw;
   try {
     path = await realpath8(configuredPath);
-    raw = await readFile20(path, "utf8");
+    raw = await readFile21(path, "utf8");
   } catch (error) {
     throw new CanonicalSkillUnavailableError(name, configuredPath, error);
   }
@@ -27899,7 +28314,7 @@ async function loadCanonicalSkillBinding(name) {
   const snapshot = Object.freeze({
     raw,
     path,
-    baseDir: dirname23(path),
+    baseDir: dirname22(path),
     body,
     snapshotIdentity: Object.freeze({ text: raw })
   });
@@ -27927,8 +28342,8 @@ init_doctor_evidence();
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile21 } from "node:fs/promises";
-import { resolve as resolve20 } from "node:path";
+import { readFile as readFile22 } from "node:fs/promises";
+import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
 init_invocation();
@@ -27936,11 +28351,11 @@ function navigatorInputReference(getFlag, role) {
   if (getFlag === void 0) return void 0;
   const name = packagedRoleInputFlag(role);
   const value = name === void 0 ? void 0 : getFlag(name);
-  return typeof value === "string" && value !== "" ? resolve20(value) : void 0;
+  return typeof value === "string" && value !== "" ? resolve19(value) : void 0;
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile21(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile22(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -27957,7 +28372,7 @@ async function loadNavigatorWorkContext(options) {
   }
   const publicRunDir = runDirectoryFromHostContext(options.context);
   const currentSessionDir = options.context.sessionManager.getSessionDir();
-  const isBoundPublicRun = publicRunDir !== void 0 && resolve20(currentSessionDir) === resolve20(publicRunDir, "session");
+  const isBoundPublicRun = publicRunDir !== void 0 && resolve19(currentSessionDir) === resolve19(publicRunDir, "session");
   if (options.role === "judge" && isBoundPublicRun) {
     let admitted;
     try {
@@ -27990,14 +28405,14 @@ async function loadNavigatorWorkContext(options) {
   }
   const workRoot = subjectRoot.includes("/.ak/work/") ? subjectRoot : void 0;
   const authorityFiles = workRoot === void 0 ? [] : [
-    resolve20(workRoot, "authority.md"),
-    resolve20(workRoot, "authority.txt"),
-    resolve20(workRoot, "design-v2/owner-direction.md")
+    resolve19(workRoot, "authority.md"),
+    resolve19(workRoot, "authority.txt"),
+    resolve19(workRoot, "design-v2/owner-direction.md")
   ];
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile21(path, "utf8");
+      const content = await readFile22(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -28022,7 +28437,7 @@ async function loadNavigatorWorkContext(options) {
 init_notary_source_run();
 
 // src/package-resources/method-skill-binding.ts
-import { dirname as dirname24 } from "node:path";
+import { dirname as dirname23 } from "node:path";
 init_method_skill();
 async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const material = await loadPackagedMethodSkillMaterial(packageRoot, name);
@@ -28030,7 +28445,7 @@ async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const snapshot = Object.freeze({
     raw: material.raw,
     path: material.skillPath,
-    baseDir: dirname24(material.skillPath),
+    baseDir: dirname23(material.skillPath),
     body: material.body,
     snapshotIdentity: Object.freeze({ text: material.raw })
   });
@@ -28066,12 +28481,12 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile22(path, "utf8"),
+    loadFixPacket: (path) => readFile23(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile22(path, "utf8"),
+    loadCoderTask: (path) => readFile23(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile22(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile23(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -28086,7 +28501,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadSecretariatSoul: () => loadMainRoleSessionMaterials("secretariat"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile22(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile23(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -28112,7 +28527,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile22(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile23(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },
@@ -28176,7 +28591,7 @@ function hostAbortedError(message = "host aborted") {
 function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
   if (abortSignal?.aborted) return Promise.reject(hostAbortedError(message));
   if (abortSignal === void 0) return work;
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const onAbort = () => {
       if (settled) return;
@@ -28191,7 +28606,7 @@ function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
         if (settled) return;
         settled = true;
         abortSignal.removeEventListener("abort", onAbort);
-        resolve22(value);
+        resolve21(value);
       },
       (error) => {
         if (settled) return;
@@ -28431,8 +28846,8 @@ function connectAcpStdio(options) {
     request(method, params) {
       if (closed) return Promise.reject(terminalError ?? acpError("acp-connection-closed", "ACP connection is closed"));
       const id = ++nextId;
-      return new Promise((resolve22, reject) => {
-        pending.set(id, { resolve: resolve22, reject });
+      return new Promise((resolve21, reject) => {
+        pending.set(id, { resolve: resolve21, reject });
         child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `, (error) => {
           if (error === null || error === void 0) return;
@@ -28459,7 +28874,7 @@ function connectAcpStdio(options) {
       settleClosed(acpError("acp-connection-closed", "ACP connection is closed"));
       child.stdin.end();
       child.kill("SIGTERM");
-      await new Promise((resolve22) => child.once("close", () => resolve22()));
+      await new Promise((resolve21) => child.once("close", () => resolve21()));
     }
   });
 }
@@ -28657,9 +29072,9 @@ function createAcpRoleTurnHost(config) {
 }
 
 // src/acp-host/seat-profile-soul.ts
-import { constants as constants3 } from "node:fs";
+import { constants as constants2 } from "node:fs";
 import { access as access4, copyFile, lstat as lstat8, mkdir as mkdir8, readlink as readlink2, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname25, join as join44, relative as relative4, resolve as resolve21 } from "node:path";
+import { dirname as dirname24, join as join44, relative as relative4, resolve as resolve20 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
@@ -28668,7 +29083,7 @@ function packageRoleSoulPath(packageRoot, role) {
 }
 async function pathExists2(path) {
   try {
-    await access4(path, constants3.F_OK);
+    await access4(path, constants2.F_OK);
     return true;
   } catch {
     return false;
@@ -28677,13 +29092,13 @@ async function pathExists2(path) {
 async function ensureSeatProfileSoul(options) {
   const { spec, operatorHome, packageRoot, role } = options;
   const profileName = seatProfileName(spec, role);
-  const soulTarget = resolve21(packageRoleSoulPath(packageRoot, role));
+  const soulTarget = resolve20(packageRoleSoulPath(packageRoot, role));
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
   const profilesRoot = join44(operatorHome, ...spec.profilesRootFromHome);
   const profileDir = join44(profilesRoot, profileName);
-  const hostRoot = dirname25(profilesRoot);
+  const hostRoot = dirname24(profilesRoot);
   const soulPath = join44(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
     await mkdir8(profileDir, { recursive: true });