@akagilnc/pi-workflow-roles 0.1.4631 → 0.1.4641

package/dist/acp-host/production-host.js

@@ -926,6 +926,15 @@ var init_archivist_record_entry = __esm({
 });
 
 // src/run-ticket-number.ts
+var run_ticket_number_exports = {};
+__export(run_ticket_number_exports, {
+  MIGRATION_TICKET_DERIVATION_PAGE: () => MIGRATION_TICKET_DERIVATION_PAGE,
+  isSafePositiveTicketNumber: () => isSafePositiveTicketNumber,
+  readBoardTicketNumber: () => readBoardTicketNumber,
+  readMigrationDerivedTicketNumber: () => readMigrationDerivedTicketNumber,
+  readRunTicketNumber: () => readRunTicketNumber,
+  requireSafePositiveTicketNumber: () => requireSafePositiveTicketNumber
+});
 import { readFile } from "node:fs/promises";
 import { join as join5 } from "node:path";
 function isEnoent(error) {
@@ -965,9 +974,22 @@ async function readBoardPageTicketNumber(runDirectory, page) {
 async function readBoardTicketNumber(runDirectory) {
   return await readBoardPageTicketNumber(runDirectory, "admitted-request.json") ?? await readBoardPageTicketNumber(runDirectory, "invocation.json");
 }
+async function readMigrationDerivedTicketNumber(runDirectory) {
+  const record4 = await readJsonObject(
+    join5(runDirectory, MIGRATION_TICKET_DERIVATION_PAGE)
+  );
+  if (record4 === void 0) return void 0;
+  if (record4.derivation !== "worktree-path-basename") return void 0;
+  return ticketFromRecord(record4);
+}
+async function readRunTicketNumber(runDirectory) {
+  return await readBoardTicketNumber(runDirectory) ?? await readMigrationDerivedTicketNumber(runDirectory);
+}
+var MIGRATION_TICKET_DERIVATION_PAGE;
 var init_run_ticket_number = __esm({
   "src/run-ticket-number.ts"() {
     "use strict";
+    MIGRATION_TICKET_DERIVATION_PAGE = "migration-ticket-derivation.json";
   }
 });
 
@@ -1350,15 +1372,165 @@ var init_gatekeeper_output = __esm({
   }
 });
 
+// src/run-terminal-artifacts.ts
+var run_terminal_artifacts_exports = {};
+__export(run_terminal_artifacts_exports, {
+  RUN_TERMINAL_ARTIFACT_FILES: () => RUN_TERMINAL_ARTIFACT_FILES,
+  RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS: () => RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS,
+  isUniqueErrorFallbackName: () => isUniqueErrorFallbackName,
+  readRunTerminalArtifact: () => readRunTerminalArtifact,
+  runIdFromRunDirectory: () => runIdFromRunDirectory
+});
+import { readdir as readdir2, readFile as readFile2 } from "node:fs/promises";
+import { basename as basename3, dirname as dirname5, join as join8 } from "node:path";
+function isMissingPathError2(error) {
+  return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
+}
+function errorText2(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readUsableTerminalArtifactBody(body) {
+  if (body === null) {
+    return { ok: false, reason: "terminal artifact JSON value is null" };
+  }
+  if (!isRecord(body)) {
+    return {
+      ok: false,
+      reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
+    };
+  }
+  if (typeof body.role !== "string" || body.role.trim() === "") {
+    return {
+      ok: false,
+      reason: "terminal artifact missing nonblank producer-owned role field"
+    };
+  }
+  return { ok: true, body };
+}
+async function readTerminalArtifactAtPath(path, file) {
+  let raw;
+  try {
+    raw = await readFile2(path, "utf8");
+  } catch (error) {
+    if (isMissingPathError2(error)) return void 0;
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: errorText2(error)
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (error) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: error instanceof Error ? error.message : `terminal artifact JSON parse failed: ${String(error)}`
+    };
+  }
+  const usable = readUsableTerminalArtifactBody(parsed);
+  if (!usable.ok) {
+    return {
+      status: "unreadable",
+      file,
+      path,
+      reason: usable.reason
+    };
+  }
+  return { status: "present", file, path, body: usable.body };
+}
+async function listUniqueErrorFallbackPaths(directories) {
+  const found = [];
+  for (const dir of directories) {
+    let names;
+    try {
+      names = await readdir2(dir);
+    } catch (error) {
+      if (isMissingPathError2(error)) continue;
+      throw error;
+    }
+    for (const name of names.sort((a, b) => a.localeCompare(b))) {
+      if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
+      found.push(join8(dir, name));
+    }
+  }
+  return found;
+}
+function runIdFromRunDirectory(runDirectory) {
+  const name = basename3(runDirectory);
+  const at = name.lastIndexOf("@");
+  if (at <= 0 || at === name.length - 1) return void 0;
+  return name.slice(0, at);
+}
+function presentUniqueFallbackBoundToRun(body, expectedRunId) {
+  if (expectedRunId === void 0) return false;
+  return typeof body.runId === "string" && body.runId === expectedRunId;
+}
+async function readRunTerminalArtifact(runDirectory) {
+  const artifactsDir = roleRunArtifactsDirectory(runDirectory);
+  for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
+    const path = join8(artifactsDir, file);
+    const read = await readTerminalArtifactAtPath(path, file);
+    if (read !== void 0) return read;
+  }
+  for (const relative5 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
+    const path = join8(runDirectory, relative5);
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read !== void 0) return read;
+  }
+  for (const path of await listUniqueErrorFallbackPaths([artifactsDir, runDirectory])) {
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read !== void 0) return read;
+  }
+  const expectedRunId = runIdFromRunDirectory(runDirectory);
+  for (const path of await listUniqueErrorFallbackPaths([dirname5(runDirectory)])) {
+    const read = await readTerminalArtifactAtPath(path, "error.json");
+    if (read === void 0) continue;
+    if (read.status === "present") {
+      if (!presentUniqueFallbackBoundToRun(read.body, expectedRunId)) continue;
+      return read;
+    }
+  }
+  return { status: "absent" };
+}
+function isUniqueErrorFallbackName(name) {
+  return UNIQUE_ERROR_FALLBACK_NAME.test(basename3(name));
+}
+var RUN_TERMINAL_ARTIFACT_FILES, RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS, UNIQUE_ERROR_FALLBACK_NAME;
+var init_run_terminal_artifacts = __esm({
+  "src/run-terminal-artifacts.ts"() {
+    "use strict";
+    init_role_run_placement();
+    RUN_TERMINAL_ARTIFACT_FILES = [
+      "report.json",
+      "error.json",
+      "audit-incomplete.json"
+    ];
+    RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS = [
+      "artifacts/error.settlement.json",
+      "error.settlement.json"
+    ];
+    UNIQUE_ERROR_FALLBACK_NAME = /^error\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.json$/i;
+  }
+});
+
 // src/gatekeeper-role.ts
 function gateSeatLabel(stage) {
   if (stage === "inspector") return "\u53F0\u9662";
   if (stage === "auditor") return "\u5BA1\u5211\u9662";
+  if (stage === "countersign") return "\u7ED9\u4E8B\u4E2D";
   return "\u7B26\u5B9D\u90CE";
 }
 function gateOfficerForSubject(subject) {
   if (subject.kind === "worker_completion") return "inspector";
   if (subject.kind === "judge_compliance") return "auditor";
+  if (subject.kind === "secretariat_verdict") return "countersign";
   return "notary";
 }
 function failureReason(error) {
@@ -1372,9 +1544,26 @@ function readRecord(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
   return value;
 }
+function gateStatusFromCountersign(status) {
+  if (status === "converged") return "pass";
+  if (status === "continue") return "bounce";
+  if (status === "escalate") return "escalate";
+  return void 0;
+}
 function projectOfficerDecision(officer, decision, fallbackStatus) {
   const receipt = retainedReceipt(decision);
   const record4 = readRecord(decision);
+  if (officer === "countersign") {
+    const countersignStatus = record4 !== void 0 && typeof record4.countersignStatus === "string" ? record4.countersignStatus : void 0;
+    const status2 = typeof countersignStatus === "string" ? gateStatusFromCountersign(countersignStatus) : void 0;
+    if (status2 === "pass") {
+      return { status: "pass", officer, receipt };
+    }
+    if (status2 === "bounce" || status2 === "escalate") {
+      return { status: status2, officer, receipt };
+    }
+    return { status: "needs_reask", officer, receipt };
+  }
   const status = (record4 !== void 0 && typeof record4.status === "string" ? record4.status : void 0) ?? fallbackStatus;
   if (status === "pass") {
     return { status: "pass", officer, receipt };
@@ -1405,6 +1594,26 @@ function projectOfficerPayloads(officer, payloads, fallbackStatus) {
   }
   return projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
 }
+function officerRunIdFromSummoned(summoned) {
+  if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
+    const fromDir = runIdFromRunDirectory(summoned.runDirectory);
+    if (fromDir !== void 0) return fromDir;
+  }
+  const terminal = summoned.terminal;
+  if (terminal !== void 0 && typeof terminal.runId === "string" && terminal.runId.trim() !== "") {
+    return terminal.runId;
+  }
+  return void 0;
+}
+function withOfficerRunId(result, summoned) {
+  if (result.status !== "pass" && result.status !== "bounce" && result.status !== "escalate" && result.status !== "needs_reask") {
+    return result;
+  }
+  if (typeof result.runId === "string" && result.runId.trim() !== "") return result;
+  const runId = officerRunIdFromSummoned(summoned);
+  if (runId === void 0) return result;
+  return { ...result, runId };
+}
 function projectOfficerTerminal(officer, summoned) {
   const terminal = summoned.terminal;
   const outcome = terminal?.roleOutcome;
@@ -1437,22 +1646,34 @@ function projectOfficerTerminal(officer, summoned) {
     };
   }
   if (outcome.kind === "audit_escalation") {
-    return {
-      status: "escalate",
-      officer,
-      // This-court receipt only (#879) — historical rows remain on terminal.submissions.
-      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
-    };
+    return withOfficerRunId(
+      {
+        status: "escalate",
+        officer,
+        // This-court receipt only (#879) — historical rows remain on terminal.submissions.
+        receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+      },
+      summoned
+    );
   }
   if (outcome.kind === "accepted") {
-    return projectOfficerPayloads(officer, thisCourt, outcome.status);
+    return withOfficerRunId(
+      projectOfficerPayloads(officer, thisCourt, outcome.status),
+      summoned
+    );
   }
-  return {
-    status: "needs_reask",
-    officer,
-    // This-court receipt only (#879).
-    receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
-  };
+  return withOfficerRunId(
+    {
+      status: "needs_reask",
+      officer,
+      // This-court receipt only (#879).
+      receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome)
+    },
+    summoned
+  );
+}
+function officerConclusionReask(officer) {
+  return officer === "countersign" ? COUNTERSIGN_CONCLUSION_REASK : OFFICER_CONCLUSION_REASK;
 }
 async function projectGatekeeperRun(options) {
   const officer = gateOfficerForSubject(options.subject);
@@ -1488,7 +1709,7 @@ async function projectGatekeeperRun(options) {
     summoned
   };
 }
-var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK;
+var GATEKEEPER_TOOL_SPEC, OFFICER_CONCLUSION_REASK, COUNTERSIGN_CONCLUSION_REASK;
 var init_gatekeeper_role = __esm({
   "src/gatekeeper-role.ts"() {
     "use strict";
@@ -1496,6 +1717,7 @@ var init_gatekeeper_role = __esm({
     init_submission_errors();
     init_inspector_contracts();
     init_gatekeeper_output();
+    init_run_terminal_artifacts();
     init_submission_errors();
     GATEKEEPER_TOOL_SPEC = {
       name: GATEKEEPER_OUTPUT_TOOL_NAME,
@@ -1505,6 +1727,7 @@ var init_gatekeeper_role = __esm({
       parameters: gatekeeperOutputSchema
     };
     OFFICER_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684\u7ED3\u8BBA\u4E0D\u662F pass\u3001bounce\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0C\u7ED3\u8BBA\u5B57\u6BB5\u5199\u660E\u5176\u4E00\uFF1B\u6253\u56DE\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
+    COUNTERSIGN_CONCLUSION_REASK = "\u4E0A\u6B21\u4EA4\u5377\u7684 countersignStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u8F93\u51FA\uFF0CcountersignStatus \u5199\u660E\u5176\u4E00\uFF1B\u5C01\u9A73\u6216\u4E0A\u5448\u7684\u8BDD\u5C31\u662F\u7ED9\u5BF9\u65B9\u770B\u7684\u539F\u6587\u3002";
   }
 });
 
@@ -1515,12 +1738,12 @@ __export(session_assistant_usage_exports, {
   sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
   usageFromPublicSummon: () => usageFromPublicSummon
 });
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile23 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile23(sessionFile, "utf8");
+    text = await readFile24(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -1585,7 +1808,7 @@ async function readAssistantUsageFromSessionFile(sessionFile) {
 }
 function sessionFileFromPublicSummon(summoned) {
   if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join8(summoned.runDirectory, "session", "session.jsonl");
+    return join9(summoned.runDirectory, "session", "session.jsonl");
   }
   const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
   if (fromArtifacts !== void 0) return fromArtifacts;
@@ -1594,7 +1817,7 @@ function sessionFileFromPublicSummon(summoned) {
   const facts = outcome.decisiveFacts;
   const pointer = facts?.runPointer;
   if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join8(pointer, "session", "session.jsonl");
+    return join9(pointer, "session", "session.jsonl");
   }
   return void 0;
 }
@@ -1611,7 +1834,7 @@ var init_session_assistant_usage = __esm({
 
 // src/package-resources/engine-material.ts
 import { existsSync as existsSync2, readdirSync as readdirSync2 } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 function pickEngineAxis(source) {
   return {
     ...source.engine === void 0 ? {} : { engine: source.engine },
@@ -1632,11 +1855,11 @@ function isEngineNameSyntax(name) {
   return true;
 }
 function resolveEngineMaterialDirectory(packageRoot) {
-  return join9(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
+  return join10(packageRoot, ENGINE_MATERIAL_RELATIVE_ROOT);
 }
 function resolveEngineMaterialPath(packageRoot, name) {
   const legal = assertLegalEngineName(name);
-  return join9(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
+  return join10(resolveEngineMaterialDirectory(packageRoot), `${legal}.md`);
 }
 function assertLegalEngineName(name) {
   if (!isEngineNameSyntax(name)) {
@@ -1694,7 +1917,7 @@ __export(durable_principal_exports, {
   piDurablePrincipalAuthority: () => piDurablePrincipalAuthority
 });
 import { lstat } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function encode(coordinates) {
   return coordinates;
 }
@@ -1744,7 +1967,7 @@ var init_durable_principal = __esm({
         }
         return {
           sessionDirectory: record4.sessionDirectory,
-          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join10(record4.sessionDirectory, "session.jsonl")
+          sessionFile: typeof record4.sessionFile === "string" && record4.sessionFile.trim() !== "" ? record4.sessionFile : join11(record4.sessionDirectory, "session.jsonl")
         };
       },
       async isAvailable(principal) {
@@ -2350,7 +2573,7 @@ var init_auditor_output = __esm({
 });
 
 // src/ticket-provenance-contracts.ts
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function positiveInteger(value) {
@@ -2373,7 +2596,7 @@ function projectSpeaker(value) {
   return value === "owner" || value === "runner" ? value : void 0;
 }
 function projectBound(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const id = typeof value.id === "string" && value.id !== "" ? value.id : void 0;
   const line2 = positiveInteger(value.line);
   if (id === void 0 && line2 === void 0) return void 0;
@@ -2384,13 +2607,13 @@ function projectTicketProvenanceSessions(value) {
   if (value.length === 0) return [];
   const sessions = [];
   for (const raw of value) {
-    if (!isRecord(raw)) return void 0;
+    if (!isRecord2(raw)) return void 0;
     const path = raw.path;
     if (typeof path !== "string" || path.trim() === "") return void 0;
     if (!Array.isArray(raw.ranges) || raw.ranges.length === 0) return void 0;
     const ranges = [];
     for (const rawRange of raw.ranges) {
-      if (!isRecord(rawRange)) return void 0;
+      if (!isRecord2(rawRange)) return void 0;
       const from = projectBound(rawRange.from);
       const to = projectBound(rawRange.to);
       if (from === void 0 || to === void 0) return void 0;
@@ -2401,7 +2624,7 @@ function projectTicketProvenanceSessions(value) {
   return sessions;
 }
 function projectTicketProvenanceHeader(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const ticket = positiveInteger(value.ticket);
   if (ticket === void 0) return void 0;
   if (typeof value.repo !== "string") return void 0;
@@ -2419,7 +2642,7 @@ function projectTicketProvenanceHeader(value) {
   };
 }
 function projectTicketProvenanceLine(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const speaker = projectSpeaker(value.speaker);
   const s = nonNegativeInteger(value.s);
   if (speaker === void 0 || s === void 0) return void 0;
@@ -2535,13 +2758,23 @@ var init_diarist_contracts = __esm({
 });
 
 // src/secretariat-contracts.ts
-var SECRETARIAT_OUTPUT_TOOL_NAME, SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME, SECRETARIAT_ACCEPTED_TEXT;
+var secretariat_contracts_exports = {};
+__export(secretariat_contracts_exports, {
+  SECRETARIAT_ACCEPTED_TEXT: () => SECRETARIAT_ACCEPTED_TEXT,
+  SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY: () => SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY,
+  SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: () => SECRETARIAT_GATE_OFFICER_ENTRY_TYPE,
+  SECRETARIAT_OUTPUT_TOOL_NAME: () => SECRETARIAT_OUTPUT_TOOL_NAME,
+  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME: () => SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME
+});
+var SECRETARIAT_OUTPUT_TOOL_NAME, SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME, SECRETARIAT_ACCEPTED_TEXT, SECRETARIAT_GATE_OFFICER_ENTRY_TYPE, SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY;
 var init_secretariat_contracts = __esm({
   "src/secretariat-contracts.ts"() {
     "use strict";
     SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
     SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME = "ak_secretariat_summon_countersign";
     SECRETARIAT_ACCEPTED_TEXT = "\u4E2D\u4E66\u7701\u56DE\u6267\u5DF2\u63A5\u53D7";
+    SECRETARIAT_GATE_OFFICER_ENTRY_TYPE = "ak-secretariat-gate-officer";
+    SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY = "countersignTerminal";
   }
 });
 
@@ -2888,8 +3121,8 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname5, join as join11 } from "node:path";
-function isRecord2(value) {
+import { dirname as dirname6, join as join12 } from "node:path";
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorCodeOf(error) {
@@ -2917,7 +3150,7 @@ function findIdentityPointer(recordFile, identity, kind, level) {
     if (!trimmed) continue;
     try {
       const parsed = JSON.parse(trimmed);
-      if (isRecord2(parsed) && parsed.identity === identity) {
+      if (isRecord3(parsed) && parsed.identity === identity) {
         return { identity, recordFile, kind, level };
       }
     } catch {
@@ -3016,8 +3249,8 @@ function resolveSitianVolumeCategory(kind) {
   return kind;
 }
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
-  const sessionDir = join11(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join11(sessionDir, SITIAN_RECORDS_LEAF) };
+  const sessionDir = join12(activationBookDirectory(ledgerHome, bookKey), ticketId);
+  return { sessionDir, recordFile: join12(sessionDir, SITIAN_RECORDS_LEAF) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
@@ -3036,14 +3269,14 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join11(dirname5(input.sessionParent), category);
-    recordFile = join11(sessionDir, SITIAN_RECORDS_LEAF);
+    sessionDir = join12(dirname6(input.sessionParent), category);
+    recordFile = join12(sessionDir, SITIAN_RECORDS_LEAF);
   }
   return { sessionDir, recordFile, ledgerHome };
 }
 function projectTicketRecordsPathShape() {
   const { recordFile } = ticketProvenanceUnderBookPaths(
-    join11("~", ".ak-roles"),
+    join12("~", ".ak-roles"),
     "<\u7C3F>",
     "<\u7968\u53F7>"
   );
@@ -3105,15 +3338,15 @@ var init_sitian_appender = __esm({
 
 // src/sitian-reader.ts
 import { existsSync as existsSync4 } from "node:fs";
-import { readFile as readFile2 } from "node:fs/promises";
-function isRecord3(value) {
+import { readFile as readFile3 } from "node:fs/promises";
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
   if (!existsSync4(recordFile)) {
     return { records: [], diagnostics: [] };
   }
-  const text = await readFile2(recordFile, "utf8");
+  const text = await readFile3(recordFile, "utf8");
   const lines = text.split("\n");
   const records = [];
   const diagnostics = [];
@@ -3122,7 +3355,7 @@ async function readSitianRecords(recordFile) {
     if (!line2.trim()) continue;
     try {
       const parsed = JSON.parse(line2);
-      if (isRecord3(parsed)) {
+      if (isRecord4(parsed)) {
         records.push(parsed);
       } else {
         const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
@@ -3178,13 +3411,13 @@ __export(role_turn_host_exports, {
 });
 import { execFile, spawn as spawn2 } from "node:child_process";
 import { constants } from "node:fs";
-import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
-import { basename as basename3, delimiter, dirname as dirname6, isAbsolute as isAbsolute3, join as join12, resolve as resolve5 } from "node:path";
+import { access, appendFile, readFile as readFile4, realpath } from "node:fs/promises";
+import { basename as basename4, delimiter, dirname as dirname7, isAbsolute as isAbsolute3, join as join13, resolve as resolve5 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot) {
-  return join12(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
+  return join13(packageRoot, INTERNAL_ROLE_ENTRYPOINT_RELATIVE);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -3220,7 +3453,7 @@ function buildMethodArgs(methods) {
 function applyPiNativeSkillInvocation(methods, prompt) {
   const skills = methods.filter((method) => method.kind === "skill");
   if (skills.length !== 1) return prompt;
-  const name = basename3(dirname6(skills[0].path));
+  const name = basename4(dirname7(skills[0].path));
   if (name.length === 0) return prompt;
   const token = `/skill:${name}`;
   const trimmed = prompt.trimStart();
@@ -3458,7 +3691,7 @@ ${paths.join("\n")}`
 }
 async function appendPiSessionCustomEntry(authority, principal, customType, data) {
   const { sessionFile } = authority.decode(principal);
-  const text = await readFile3(sessionFile, "utf8");
+  const text = await readFile4(sessionFile, "utf8");
   let parentId = null;
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     const entry = JSON.parse(line2);
@@ -3749,8 +3982,8 @@ var init_compliance_transport = __esm({
 
 // src/role-run-relocation.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join13, sep as sep2 } from "node:path";
+import { readdir as readdir3, readFile as readFile5, writeFile as writeFile2 } from "node:fs/promises";
+import { join as join14, sep as sep2 } from "node:path";
 function isEnoent2(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -3839,7 +4072,7 @@ function rewriteSummonsMaterials(value, rewrites) {
 }
 async function rewriteJsonObjectFile(path, fields, rewrites) {
   if (!existsSync5(path)) return;
-  const page = JSON.parse(await readFile4(path, "utf8"));
+  const page = JSON.parse(await readFile5(path, "utf8"));
   if (!isPlainObject(page)) return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(page, fields, rewrites);
   await writeFile2(path, `${JSON.stringify(page, null, 2)}
@@ -3847,7 +4080,7 @@ async function rewriteJsonObjectFile(path, fields, rewrites) {
 }
 async function rewriteOfficerPointerFile(path, rewrites) {
   if (!existsSync5(path)) return;
-  const page = JSON.parse(await readFile4(path, "utf8"));
+  const page = JSON.parse(await readFile5(path, "utf8"));
   if (!isPlainObject(page)) return;
   if (page.kind !== "direct-officer-run-pointer") return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(
@@ -3860,7 +4093,7 @@ async function rewriteOfficerPointerFile(path, rewrites) {
 }
 async function rewriteSitianRecordsJsonl(path, rewrites) {
   if (!existsSync5(path)) return;
-  const raw = await readFile4(path, "utf8");
+  const raw = await readFile5(path, "utf8");
   if (raw.length === 0) return;
   const endsWithNewline = raw.endsWith("\n");
   const lines = raw.split("\n");
@@ -3911,7 +4144,7 @@ async function rewriteSitianRecordsJsonl(path, rewrites) {
 }
 async function rewriteSessionTranscriptBindings(path, rewrites) {
   if (!existsSync5(path)) return;
-  const raw = await readFile4(path, "utf8");
+  const raw = await readFile5(path, "utf8");
   if (raw.length === 0) return;
   const endsWithNewline = raw.endsWith("\n");
   const lines = raw.split("\n");
@@ -3970,17 +4203,17 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
   );
 }
 async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-  const sessionRoot = join13(pagesDirectory, "session");
+  const sessionRoot = join14(pagesDirectory, "session");
   async function walk(directory) {
     let entries;
     try {
-      entries = await readdir2(directory, { withFileTypes: true });
+      entries = await readdir3(directory, { withFileTypes: true });
     } catch (error) {
       if (isEnoent2(error)) return;
       throw error;
     }
     for (const entry of entries) {
-      const path = join13(directory, entry.name);
+      const path = join14(directory, entry.name);
       if (entry.isDirectory()) {
         await walk(path);
         continue;
@@ -4002,9 +4235,9 @@ async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
 async function rewriteRoleRunDurablePages(input) {
   const { pagesDirectory } = input;
   const rewrites = collectRewrites(input);
-  const admittedPath = join13(pagesDirectory, "admitted-request.json");
+  const admittedPath = join14(pagesDirectory, "admitted-request.json");
   if (existsSync5(admittedPath)) {
-    const page = JSON.parse(await readFile4(admittedPath, "utf8"));
+    const page = JSON.parse(await readFile5(admittedPath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       ADMITTED_PAGE_FIELDS,
@@ -4032,9 +4265,9 @@ async function rewriteRoleRunDurablePages(input) {
     await writeFile2(admittedPath, `${JSON.stringify(page, null, 2)}
 `, "utf8");
   }
-  const invocationPath = join13(pagesDirectory, "invocation.json");
+  const invocationPath = join14(pagesDirectory, "invocation.json");
   if (existsSync5(invocationPath)) {
-    const page = JSON.parse(await readFile4(invocationPath, "utf8"));
+    const page = JSON.parse(await readFile5(invocationPath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       INVOCATION_PAGE_FIELDS,
@@ -4047,9 +4280,9 @@ async function rewriteRoleRunDurablePages(input) {
       "utf8"
     );
   }
-  const statePath = join13(pagesDirectory, "run-state.json");
+  const statePath = join14(pagesDirectory, "run-state.json");
   if (existsSync5(statePath)) {
-    const page = JSON.parse(await readFile4(statePath, "utf8"));
+    const page = JSON.parse(await readFile5(statePath, "utf8"));
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page,
       RUN_STATE_PAGE_FIELDS,
@@ -4237,15 +4470,15 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir3, readFile as readFile5, realpath as realpath2, stat } from "node:fs/promises";
-import { dirname as dirname7, relative as relative2, resolve as resolve6, sep as sep3 } from "node:path";
+import { readdir as readdir4, readFile as readFile6, realpath as realpath2, stat } from "node:fs/promises";
+import { dirname as dirname8, relative as relative2, resolve as resolve6, sep as sep3 } from "node:path";
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function discoverCaseFiles(root) {
   const found = [];
   async function walk(dir, depth) {
-    for (const item of await readdir3(dir, { withFileTypes: true })) {
+    for (const item of await readdir4(dir, { withFileTypes: true })) {
       const path = resolve6(dir, item.name);
       if (item.isDirectory()) {
         await walk(path, depth + 1);
@@ -4265,7 +4498,7 @@ function accumulate(metric, value, source) {
 function timestamp(row) {
   return typeof row.timestamp === "string" && Number.isFinite(Date.parse(row.timestamp)) ? row.timestamp : void 0;
 }
-function isMissingPathError2(error) {
+function isMissingPathError3(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 async function stableRunsIdentity(root) {
@@ -4275,9 +4508,9 @@ async function stableRunsIdentity(root) {
       const git3 = await stat(resolve6(cursor, ".git"));
       if (git3.isDirectory() || git3.isFile()) return relative2(cursor, root).split(sep3).join("/");
     } catch (error) {
-      if (!isMissingPathError2(error)) throw error;
+      if (!isMissingPathError3(error)) throw error;
     }
-    const parent = dirname7(cursor);
+    const parent = dirname8(cursor);
     if (parent === cursor) return root;
     cursor = parent;
   }
@@ -4353,7 +4586,7 @@ async function loadDoctorCase(runsPath) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep3).join("/");
-    const bytes = await readFile5(path);
+    const bytes = await readFile6(path);
     const content = bytes.toString("utf8");
     const kind = id.endsWith(".jsonl") ? "session" : "stderr";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -4366,7 +4599,7 @@ async function loadDoctorCase(runsPath) {
     accumulate(calls, result.calls, id);
     accumulate(tokens, result.tokens, id);
   }
-  const runDirs = (await readdir3(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
+  const runDirs = (await readdir4(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
   const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
   const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
   const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
@@ -4383,7 +4616,7 @@ var init_doctor_evidence = __esm({
 
 // src/collector-config.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile6 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 function fail3(message, cause) {
   throw new Error(message, cause === void 0 ? void 0 : { cause });
 }
@@ -4426,7 +4659,7 @@ function emptyCollectorManifest() {
 async function loadCollectorManifest(path) {
   let bytes;
   try {
-    bytes = await readFile6(path);
+    bytes = await readFile7(path);
   } catch (error) {
     fail3(`Collector request manifest is unreadable at ${path}`, error);
   }
@@ -4462,7 +4695,7 @@ var init_collector_config = __esm({
 // src/collector-github.ts
 import { spawn as spawn3 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireString(value, label) {
@@ -4501,7 +4734,7 @@ function parsePullRequestNumberList(raw, label) {
   }
   const numbers = [];
   for (const item of raw) {
-    if (!isRecord4(item)) {
+    if (!isRecord5(item)) {
       throw new Error(`GitHub ${label} payload contains a non-object pull request entry`);
     }
     try {
@@ -4569,7 +4802,7 @@ async function listPullRequestNumbersByTicket(runner, input) {
     });
   }
   const issueRaw = parseJson(issueResponse.bodyText, issuePath);
-  if (!isRecord4(issueRaw)) {
+  if (!isRecord5(issueRaw)) {
     throw new Error(`GitHub ${issuePath} payload is not an object`);
   }
   if (Object.hasOwn(issueRaw, "pull_request")) {
@@ -4628,7 +4861,7 @@ async function listPullRequestNumbersByTicket(runner, input) {
   } catch (error) {
     throw new Error("GitHub GraphQL issue\u2192PR returned malformed JSON", { cause: error });
   }
-  if (!isRecord4(payload)) {
+  if (!isRecord5(payload)) {
     throw new Error("GitHub GraphQL issue\u2192PR payload is not an object");
   }
   if (payload.errors !== void 0) {
@@ -4637,30 +4870,30 @@ async function listPullRequestNumbersByTicket(runner, input) {
     });
   }
   const data = payload.data;
-  if (!isRecord4(data)) return [];
+  if (!isRecord5(data)) return [];
   const repository = data["repository"];
-  if (!isRecord4(repository)) return [];
+  if (!isRecord5(repository)) return [];
   const issue = repository["issue"];
-  if (!isRecord4(issue)) return [];
+  if (!isRecord5(issue)) return [];
   const numbers = [];
   const closedBy = issue["closedByPullRequestsReferences"];
-  if (isRecord4(closedBy) && Array.isArray(closedBy["nodes"])) {
+  if (isRecord5(closedBy) && Array.isArray(closedBy["nodes"])) {
     for (const node of closedBy["nodes"]) {
-      if (isRecord4(node) && typeof node["number"] === "number") {
+      if (isRecord5(node) && typeof node["number"] === "number") {
         numbers.push(parseCollectorPrNumber(node["number"]));
       }
     }
   }
   const timeline = issue["timelineItems"];
-  if (isRecord4(timeline) && Array.isArray(timeline["nodes"])) {
+  if (isRecord5(timeline) && Array.isArray(timeline["nodes"])) {
     for (const node of timeline["nodes"]) {
-      if (!isRecord4(node)) continue;
+      if (!isRecord5(node)) continue;
       const source = node["source"];
-      if (isRecord4(source) && typeof source["number"] === "number") {
+      if (isRecord5(source) && typeof source["number"] === "number") {
         numbers.push(parseCollectorPrNumber(source["number"]));
       }
       const subject = node["subject"];
-      if (isRecord4(subject) && typeof subject["number"] === "number") {
+      if (isRecord5(subject) && typeof subject["number"] === "number") {
         numbers.push(parseCollectorPrNumber(subject["number"]));
       }
     }
@@ -4675,25 +4908,25 @@ function commentFailureCause(error) {
   };
 }
 function requireUserLogin(raw) {
-  if (!isRecord4(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord5(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function optionalUserLogin(raw) {
   if (raw === null) return null;
-  if (!isRecord4(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord5(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function machineIdentity(raw) {
   const user = raw["user"];
-  if (!isRecord4(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
+  if (!isRecord5(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
     return null;
   }
   const app = raw["performed_via_github_app"];
-  const appId = isRecord4(app) && typeof app["id"] === "number" ? app["id"] : void 0;
+  const appId = isRecord5(app) && typeof app["id"] === "number" ? app["id"] : void 0;
   return {
     userType: user["type"],
     userId: user["id"],
@@ -4701,9 +4934,9 @@ function machineIdentity(raw) {
   };
 }
 function normalizePullRequest(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub pull request payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub pull request payload must be an object");
   const head = raw["head"];
-  if (!isRecord4(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
+  if (!isRecord5(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
     throw new Error("GitHub pull request payload missing head.sha");
   }
   const number = requireNumber(raw["number"], "number");
@@ -4722,7 +4955,7 @@ function normalizePullRequest(raw) {
   };
 }
 function normalizePullRequestReaction(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub reaction payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub reaction payload must be an object");
   return {
     id: requireNumber(raw["id"], "reaction.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -4733,7 +4966,7 @@ function normalizePullRequestReaction(raw) {
   };
 }
 function normalizeReview(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub review payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub review payload must be an object");
   return {
     id: requireNumber(raw["id"], "review.id"),
     ...typeof raw["node_id"] === "string" ? { nodeId: raw["node_id"] } : {},
@@ -4748,7 +4981,7 @@ function normalizeReview(raw) {
   };
 }
 function normalizeIssueComment(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub issue comment payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub issue comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "comment.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -4761,7 +4994,7 @@ function normalizeIssueComment(raw) {
   };
 }
 function normalizeReviewComment(raw) {
-  if (!isRecord4(raw)) throw new Error("GitHub review comment payload must be an object");
+  if (!isRecord5(raw)) throw new Error("GitHub review comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "review_comment.id"),
     pullRequestReviewId: typeof raw["pull_request_review_id"] === "number" ? raw["pull_request_review_id"] : null,
@@ -5020,11 +5253,11 @@ function createGhCollectorGitHubTransport(runner = createGhApiRunner()) {
         if (input.signal?.aborted) {
           throw error;
         }
-        if (isRecord4(error) && error["ambiguousGhFailure"] === true) {
+        if (isRecord5(error) && error["ambiguousGhFailure"] === true) {
           const cause = commentFailureCause(error);
           return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
         }
-        if (isRecord4(error) && error["name"] === "AbortError") {
+        if (isRecord5(error) && error["name"] === "AbortError") {
           throw error;
         }
         throw error;
@@ -5266,7 +5499,7 @@ var init_git_object_id = __esm({
 
 // src/merger-git-state.ts
 import { execFile as execFile2 } from "node:child_process";
-import { access as access2, readFile as readFile7 } from "node:fs/promises";
+import { access as access2, readFile as readFile8 } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -5336,7 +5569,7 @@ function createProductionMergerGitState(repositoryRoot = process.cwd()) {
       const mergeHeadPath = isAbsolute4(mergeHeadReported) ? mergeHeadReported : resolve7(repositoryRoot, mergeHeadReported);
       let sourceObjectId = "";
       if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile7(mergeHeadPath), "Git MERGE_HEAD");
+        const raw = exactUtf8(await readFile8(mergeHeadPath), "Git MERGE_HEAD");
         const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
         if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
         if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
@@ -5388,10 +5621,10 @@ var init_uuidv7 = __esm({
 });
 
 // src/typed-provider-http.ts
-import { readFile as readFile8, unlink, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { readFile as readFile9, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join15 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join14(runDirectory, TYPED_HTTP_FILE);
+  return join15(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -5422,7 +5655,7 @@ async function recordTypedProviderHttpStatus(runDirectory, observation) {
 async function readLatestTypedProviderHttpObservation(runDirectory) {
   let text;
   try {
-    text = await readFile8(typedProviderHttpPath(runDirectory), "utf8");
+    text = await readFile9(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return void 0;
@@ -5501,8 +5734,8 @@ __export(run_lifecycle_exports, {
   selectResumeContinuationPrompt: () => selectResumeContinuationPrompt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile9, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
-import { basename as basename4, join as join15 } from "node:path";
+import { chmod, lstat as lstat2, open, readdir as readdir5, readFile as readFile10, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { basename as basename5, join as join16 } from "node:path";
 function selectResumeContinuationPrompt(message, engineMaterial) {
   const lines = message !== void 0 ? [message] : [];
   return appendEngineSessionMaterial(lines, engineMaterial).join("\n");
@@ -5541,7 +5774,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile4(
-    join15(runDirectory, RUN_STATE_FILE),
+    join16(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -5591,7 +5824,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile9(join15(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile10(join16(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -5659,7 +5892,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile4(
-    join15(runDirectory, RUN_STATE_FILE),
+    join16(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -5831,7 +6064,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile9(lockPath, "utf8");
+    content = await readFile10(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -5890,7 +6123,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join15(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join16(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
@@ -5929,10 +6162,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join15(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join16(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join15(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join16(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -5987,10 +6220,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join15(ledgerHome, "books");
+  const booksRoot = join16(ledgerHome, "books");
   let bookKeys;
   try {
-    bookKeys = await readdir4(booksRoot);
+    bookKeys = await readdir5(booksRoot);
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -6007,7 +6240,7 @@ async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const entry = basename4(runDirectory);
+      const entry = basename5(runDirectory);
       if (onlyRole === void 0 && (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) || entry === `${runId}@${onlyRole}`) {
         matches.push(runDirectory);
       }
@@ -6028,7 +6261,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile9(join15(runDirectory, "admitted-request.json"), "utf8")
+      await readFile10(join16(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -6049,7 +6282,7 @@ async function readRunParentPath(runDirectory) {
 async function runHasFormedSessionPrincipal(runDirectory) {
   const disk = await readRoleRunStateDisk(runDirectory);
   if (disk === void 0) return false;
-  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join15(disk.principalWire.sessionDirectory, "session.jsonl");
+  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join16(disk.principalWire.sessionDirectory, "session.jsonl");
   try {
     const stat2 = await lstat2(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
@@ -6074,7 +6307,7 @@ async function findLatestRunIdForSeatTicket(input) {
   const suffix = `@${input.role}`;
   let best;
   for (const runDirectory of runDirectories) {
-    const entry = basename4(runDirectory);
+    const entry = basename5(runDirectory);
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
@@ -6197,7 +6430,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile9(run.admittedRequestPath, "utf8")
+      await readFile10(run.admittedRequestPath, "utf8")
     );
     if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
       const record4 = raw;
@@ -6315,7 +6548,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile9(join15(run.runDirectory, "invocation.json"), "utf8")
+      await readFile10(join16(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -6784,7 +7017,7 @@ __export(notary_source_run_exports, {
   loadNotarySourceRunLocator: () => loadNotarySourceRunLocator,
   resolveNotarySourceRunLocator: () => resolveNotarySourceRunLocator
 });
-import { dirname as dirname8, isAbsolute as isAbsolute6, join as join16, resolve as resolve8, basename as basename5 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute6, join as join17, resolve as resolve8, basename as basename6 } from "node:path";
 import { lstat as lstat3, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -6815,10 +7048,10 @@ async function requireRunDirectory(candidate, display) {
       `notary --source-run must be a run directory: ${display}`
     );
   }
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   if (identity === void 0) {
     throw new NotarySourceRunError(
-      `notary --source-run must be named <runId>@<role>: ${basename5(real)}`
+      `notary --source-run must be named <runId>@<role>: ${basename6(real)}`
     );
   }
   return real;
@@ -6830,20 +7063,20 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join16(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookRunsRoot = join17(activationBookDirectory(ledgerHome, bookKey), "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join16(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join17(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute6(raw) ? raw : resolve8(options.projectRoot, raw);
   }
   const real = await requireRunDirectory(candidate, raw);
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   const bookIdentity = physicalPathIdentity(activationBookDirectory(ledgerHome, bookKey));
-  const parentIdentity = physicalPathIdentity(dirname8(real));
-  const subjectBookIdentity = physicalPathIdentity(dirname8(dirname8(dirname8(real))));
-  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename5(dirname8(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
+  const parentIdentity = physicalPathIdentity(dirname9(real));
+  const subjectBookIdentity = physicalPathIdentity(dirname9(dirname9(dirname9(real))));
+  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename6(dirname9(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
     throw new NotarySourceRunError(
       "notary --source-run must resolve to a retained run under the project machine-ledger book"
     );
@@ -6877,7 +7110,7 @@ async function resolveNotarySourceRunLocator(options) {
 }
 async function loadNotarySourceRunLocator(path) {
   const real = await requireRunDirectory(path, path);
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunDirectoryName(basename6(real));
   const runState = await readRoleRunIdentity(real);
   if (runState === void 0) {
     throw new NotarySourceRunError(
@@ -8026,14 +8259,14 @@ import { existsSync as existsSync6 } from "node:fs";
 import {
   lstat as lstat4,
   mkdtemp as mkdtemp2,
-  readFile as readFile10,
+  readFile as readFile11,
   realpath as realpath4,
   rename,
   rm as rm2,
   writeFile as writeFile5
 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute7, join as join17, resolve as resolve9, sep as sep4 } from "node:path";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute7, join as join18, resolve as resolve9, sep as sep4 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -8087,15 +8320,15 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile5(
-    join17(source.runDirectory, "invocation.json"),
+    join18(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  const ledgerPath = join17(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
+  const ledgerPath = join18(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
     next.provider = model.provider;
@@ -8127,8 +8360,8 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join17(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
+  const ledgerPath = join18(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
   await writeFile5(
     ledgerPath,
     `${JSON.stringify({
@@ -8144,7 +8377,7 @@ async function persistAdmittedSourceRunPath(admitted, sourceRunPath) {
     throw new Error("persistAdmittedSourceRunPath requires a non-empty sourceRunPath");
   }
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
   if (typeof current.sourceRunPath === "string") {
     if (current.sourceRunPath === sourceRunPath) return;
     throw new Error(
@@ -8170,7 +8403,7 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
 }
 async function recordAdmittedCorrelation(admitted, correlationId) {
   const current = JSON.parse(
-    await readFile10(admitted.admittedRequestPath, "utf8")
+    await readFile11(admitted.admittedRequestPath, "utf8")
   );
   const prior = [
     ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
@@ -8218,7 +8451,7 @@ async function bindCourtTicketNumbersOnAdmitted(admitted, courtTicketNumbers) {
   }
   const frozen = Object.freeze([...projected]);
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
   await writeFile5(
     admittedPath,
     `${JSON.stringify({ ...current, courtTicketNumbers: frozen }, null, 2)}
@@ -8240,7 +8473,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     runId: admitted.runId,
     role: admitted.role
   });
-  ensureRoleRunDirectory(ledgerHome, dirname9(target.runDirectory));
+  ensureRoleRunDirectory(ledgerHome, dirname10(target.runDirectory));
   await rename(oldRunDirectory, target.runDirectory);
   heldLease?.relocate(target.runDirectory);
   const admittedRecord = admitted;
@@ -8278,9 +8511,9 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     ticketNumber,
     "bindTicketNumberOnRunDirectory"
   );
-  const admittedPath = join17(runDirectory, "admitted-request.json");
-  const invocationPath = join17(runDirectory, "invocation.json");
-  const admitted = JSON.parse(await readFile10(admittedPath, "utf8"));
+  const admittedPath = join18(runDirectory, "admitted-request.json");
+  const invocationPath = join18(runDirectory, "invocation.json");
+  const admitted = JSON.parse(await readFile11(admittedPath, "utf8"));
   const existing = admitted.ticketNumber;
   if (typeof existing === "number") {
     if (existing === ticketNumber) return;
@@ -8290,7 +8523,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   }
   if (existsSync6(invocationPath)) {
     const invocation = JSON.parse(
-      await readFile10(invocationPath, "utf8")
+      await readFile11(invocationPath, "utf8")
     );
     if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
       throw new Error(
@@ -8315,7 +8548,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot, selectedRoleEntry) {
   const rolePackageRoot = packageRoot;
   const raw = JSON.parse(
-    await readFile10(join17(rolePackageRoot, "package.json"), "utf8")
+    await readFile11(join18(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -8600,7 +8833,7 @@ async function readRegularFileAttachment(sourcePath) {
     );
   }
   try {
-    return { absolute, bytes: await readFile10(absolute) };
+    return { absolute, bytes: await readFile11(absolute) };
   } catch (error) {
     throw new CliUsageError(
       `attachment is not a readable regular file: ${sourcePath}`,
@@ -8613,13 +8846,13 @@ async function removePreparedAttachmentDirectory(stagingDirectory) {
 }
 async function withPreparedAttachments(attachmentPaths, use) {
   if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp2(join17(tmpdir2(), "ak-role-attachments-"));
+  const stagingDirectory = await mkdtemp2(join18(tmpdir2(), "ak-role-attachments-"));
   const prepared = [];
   let result;
   try {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join17(stagingDirectory, String(index).padStart(6, "0"));
+      const snapshotPath = join18(stagingDirectory, String(index).padStart(6, "0"));
       await writeFile5(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
@@ -8640,9 +8873,9 @@ async function withPreparedAttachments(attachmentPaths, use) {
   return result;
 }
 async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join17(
+  const frozenPath = join18(
     destinationDir,
-    `${String(index).padStart(2, "0")}-${basename6(provenancePath)}`
+    `${String(index).padStart(2, "0")}-${basename7(provenancePath)}`
   );
   await writeFile5(frozenPath, bytes);
   return {
@@ -8656,7 +8889,7 @@ async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, inde
 async function freezePreparedAttachment(prepared, destinationDir, index) {
   return freezeAttachmentBytes(
     prepared.absolute,
-    await readFile10(prepared.snapshotPath),
+    await readFile11(prepared.snapshotPath),
     destinationDir,
     index
   );
@@ -8683,14 +8916,14 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join17(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join18(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
 async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
   if (prepared.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join17(runDirectory, "attachments") : join17(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = summonsKey === void 0 ? join18(runDirectory, "attachments") : join18(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = [];
   for (let index = 0; index < prepared.length; index += 1) {
@@ -8752,7 +8985,7 @@ async function admitStandardMaterialInvocation(role, options) {
     })),
     ...ticketFields
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -8861,7 +9094,7 @@ async function admitCountersignInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   if (options.deferPersistence !== true) {
     await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
       sessionDirectory,
@@ -8912,7 +9145,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
 async function loadAdmittedJudgeRequest(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile10(join17(runDirectory, "admitted-request.json"), "utf8")
+      await readFile11(join18(runDirectory, "admitted-request.json"), "utf8")
     );
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
     const record4 = raw;
@@ -8967,7 +9200,7 @@ async function admitCoderInvocation(options) {
     home: options.home
   });
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
-  const taskPath = join17(runDirectory, "task.md");
+  const taskPath = join18(runDirectory, "task.md");
   await writeFile5(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
@@ -8988,7 +9221,7 @@ async function admitCoderInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9038,7 +9271,7 @@ async function admitFixerInvocation(options) {
   if (options.prerequisitesPath !== void 0) {
     const absolutePrereq = isAbsolute7(options.prerequisitesPath) ? options.prerequisitesPath : resolve9(options.prerequisitesPath);
     try {
-      prerequisitesSource = await readFile10(absolutePrereq, "utf8");
+      prerequisitesSource = await readFile11(absolutePrereq, "utf8");
     } catch (error) {
       throw new CliUsageError(
         `fixer prerequisites path is unreadable: ${options.prerequisitesPath}`,
@@ -9074,7 +9307,7 @@ async function admitFixerInvocation(options) {
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
-    prerequisitesPath = join17(runDirectory, "prerequisites.json");
+    prerequisitesPath = join18(runDirectory, "prerequisites.json");
     await writeFile5(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
@@ -9082,7 +9315,7 @@ async function admitFixerInvocation(options) {
       "utf8"
     );
   }
-  const packetPath = join17(runDirectory, "fix-packet.md");
+  const packetPath = join18(runDirectory, "fix-packet.md");
   await writeFile5(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
@@ -9108,7 +9341,7 @@ async function admitFixerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9328,7 +9561,7 @@ async function admitCollectorInvocation(options) {
   const prNumber = target.kind === "bound" ? target.prNumber : void 0;
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
-    requestManifestPath = join17(runDirectory, "request-manifest.json");
+    requestManifestPath = join18(runDirectory, "request-manifest.json");
     await writeFile5(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const admitted = {
@@ -9354,7 +9587,7 @@ async function admitCollectorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9452,7 +9685,7 @@ function parseDoctorArgv(args) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join17(
+  const defaultRuns = join18(
     activationBookDirectory(ledgerHome, options.bookKey),
     String(options.issueNumber),
     "runs"
@@ -9583,7 +9816,7 @@ async function admitDoctorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9715,7 +9948,7 @@ async function admitNotaryInvocation(options) {
     ...ticketFields,
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9818,7 +10051,7 @@ async function admitGleanerLeftInvocation(options) {
     attachments: [],
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -9957,7 +10190,7 @@ async function admitReviewerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -10109,7 +10342,7 @@ async function admitMergerInvocation(options) {
     resolutionScope: [...derived.resolutionScope],
     authorizedChecks: []
   });
-  const mergerInputPath = join17(runDirectory, "merger-input.json");
+  const mergerInputPath = join18(runDirectory, "merger-input.json");
   await writeFile5(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
@@ -10140,7 +10373,7 @@ async function admitMergerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join17(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join18(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -10424,15 +10657,15 @@ var init_invocation = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join18(packageRoot, "dist/acp-host/production-host.js");
-  const source = join18(packageRoot, "src/acp-host/production-host.ts");
+  const built = join19(packageRoot, "dist/acp-host/production-host.js");
+  const source = join19(packageRoot, "src/acp-host/production-host.ts");
   const target = existsSync7(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -10448,15 +10681,15 @@ var init_load_production_acp_host = __esm({
 
 // src/public-cli/load-production-headless-host.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot, host) {
   const description = lookupHeadlessHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered headless host: ${host}`);
   }
-  const built = join19(packageRoot, "dist/headless-host/production-host.js");
-  const source = join19(packageRoot, "src/headless-host/production-host.ts");
+  const built = join20(packageRoot, "dist/headless-host/production-host.js");
+  const source = join20(packageRoot, "src/headless-host/production-host.ts");
   const target = existsSync8(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
@@ -10705,8 +10938,8 @@ __export(config_exports, {
   setPersistentSeatHost: () => setPersistentSeatHost,
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
-import { mkdir, readFile as readFile11, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname10, join as join20 } from "node:path";
+import { mkdir, readFile as readFile12, writeFile as writeFile6 } from "node:fs/promises";
+import { dirname as dirname11, join as join21 } from "node:path";
 function isGateOfficerSeat(value) {
   return GATE_OFFICER_SEATS.includes(value);
 }
@@ -10714,12 +10947,12 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join20(home, ".ak-roles", "public-cli.json");
+  return join21(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
   try {
-    const raw = await readFile11(path, "utf8");
+    const raw = await readFile12(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -10730,7 +10963,7 @@ async function loadPublicCliConfig(home) {
 }
 async function savePublicCliConfig(config, home) {
   const path = publicCliConfigPath(home);
-  await mkdir(dirname10(path), { recursive: true });
+  await mkdir(dirname11(path), { recursive: true });
   const normalized = parsePublicCliConfig(config);
   await writeFile6(
     path,
@@ -11177,7 +11410,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile11(join20(agentDir, "auth.json"), "utf8");
+    const raw = await readFile12(join21(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -11216,15 +11449,15 @@ __export(host_providers_exports, {
   renderHostProvidersTable: () => renderHostProvidersTable
 });
 import { readFileSync as readFileSync3 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function hostProvidersPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join21(home, ".ak-roles", "host-providers.json");
+  return join22(home, ".ak-roles", "host-providers.json");
 }
 function hermesProviderModelsCachePath(home) {
-  return join21(home, ".hermes", "provider_models_cache.json");
+  return join22(home, ".hermes", "provider_models_cache.json");
 }
 function parseHostProvidersTable(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -11379,12 +11612,12 @@ var init_host_providers = __esm({
 });
 
 // src/ledger-session-read.ts
-import { readFile as readFile12 } from "node:fs/promises";
-function isRecord5(value) {
+import { readFile as readFile13 } from "node:fs/promises";
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile12(path, "utf8");
+  const text = await readFile13(path, "utf8");
   const lines = text.split("\n");
   const out = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -11405,7 +11638,7 @@ async function readLedgerSessionJsonlLines(path) {
       });
       continue;
     }
-    if (!isRecord5(row)) {
+    if (!isRecord6(row)) {
       const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
       out.push({
         line: lineNumber,
@@ -11482,9 +11715,9 @@ var init_ledger_session_read = __esm({
 });
 
 // src/analyst-gate-cycles-read.ts
-import { readdir as readdir5 } from "node:fs/promises";
-import { join as join22 } from "node:path";
-function isRecord6(value) {
+import { readdir as readdir6 } from "node:fs/promises";
+import { join as join23 } from "node:path";
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isParentAttemptBindingRow(row) {
@@ -11514,7 +11747,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord6(row.message) ? row.message : void 0;
+    const message = isRecord7(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -11549,7 +11782,7 @@ function nearestAttemptBindingBefore(rows, beforeIndex) {
   for (let i = beforeIndex - 1; i >= 0; i -= 1) {
     const row = rows[i];
     if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord6(row.data) || !isRecord6(row.data.parent)) continue;
+    if (!isRecord7(row.data) || !isRecord7(row.data.parent)) continue;
     const id = row.data.parent.attemptEntryId;
     const sessionFile = row.data.parent.sessionFile;
     return {
@@ -11564,10 +11797,10 @@ function extractAllAcceptedGateToolCalls(rows) {
   const out = [];
   for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
     const row = rows[rowIndex];
-    const message = isRecord6(row.message) ? row.message : void 0;
+    const message = isRecord7(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord6(part) || part.type !== "toolCall") continue;
+      if (!isRecord7(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
@@ -11575,7 +11808,7 @@ function extractAllAcceptedGateToolCalls(rows) {
       const binding = nearestAttemptBindingBefore(rows, rowIndex);
       out.push({
         toolName: part.name,
-        args: isRecord6(part.arguments) ? part.arguments : void 0,
+        args: isRecord7(part.arguments) ? part.arguments : void 0,
         accepted: true,
         rowIndex,
         ...binding
@@ -11698,17 +11931,17 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile23 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile23(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile24(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
       { cause: error }
     );
   }
-  if (!isRecord6(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
+  if (!isRecord7(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
     throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
   }
   const sessionFile = raw.sessionFile;
@@ -11724,7 +11957,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
   for (const directory of directories) {
     let names;
     try {
-      const entries = await readdir5(directory, { withFileTypes: true });
+      const entries = await readdir6(directory, { withFileTypes: true });
       names = entries.filter(
         (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
       ).map((e) => e.name).sort();
@@ -11733,7 +11966,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join22(directory, name);
+      const path = join23(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -11775,6 +12008,15 @@ var init_analyst_gate_cycles_read = __esm({
 });
 
 // src/audit-escalation.ts
+var audit_escalation_exports = {};
+__export(audit_escalation_exports, {
+  AUDIT_ESCALATION_KIND: () => AUDIT_ESCALATION_KIND,
+  buildAuditEscalationResult: () => buildAuditEscalationResult,
+  disposeComplianceDecision: () => disposeComplianceDecision,
+  isAuditEscalationProjection: () => isAuditEscalationProjection,
+  isAuditEscalationResult: () => isAuditEscalationResult,
+  projectAuditEscalation: () => projectAuditEscalation
+});
 function buildAuditEscalationResult(decision, deliveredOutput) {
   const auditOwned = {
     kind: AUDIT_ESCALATION_KIND
@@ -11871,21 +12113,6 @@ var init_audit_escalation = __esm({
   }
 });
 
-// src/run-terminal-artifacts.ts
-import { basename as basename7, dirname as dirname11, join as join23 } from "node:path";
-function runIdFromRunDirectory(runDirectory) {
-  const name = basename7(runDirectory);
-  const at = name.lastIndexOf("@");
-  if (at <= 0 || at === name.length - 1) return void 0;
-  return name.slice(0, at);
-}
-var init_run_terminal_artifacts = __esm({
-  "src/run-terminal-artifacts.ts"() {
-    "use strict";
-    init_role_run_placement();
-  }
-});
-
 // src/submission-ledger.ts
 import { join as join24 } from "node:path";
 function runIdentity(context) {
@@ -12309,7 +12536,7 @@ var init_submission_ledger = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFile as readFile14 } from "node:fs/promises";
 import { dirname as dirname12, join as join25 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
@@ -12325,7 +12552,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile13(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile14(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -12471,13 +12698,13 @@ function resolveAuditDossier(source) {
   }
   return { status: "ok", runDirectory };
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readDoctorAuditSubjects(context) {
   const entries = context.sessionManager.getEntries?.() ?? [];
   for (const entry of entries) {
-    if (isRecord7(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+    if (isRecord8(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       return { status: "ok" };
     }
   }
@@ -13818,11 +14045,11 @@ function reportEngineDetourCall(input) {
     recordPointer: pointer
   };
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function callFactFromSitianPayload(payload, pointer) {
-  if (!isRecord8(payload)) return void 0;
+  if (!isRecord9(payload)) return void 0;
   if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
   if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
     return void 0;
@@ -13839,11 +14066,11 @@ function callFactFromSitianPayload(payload, pointer) {
   };
 }
 function invocationScopeIdOfRecord(record4) {
-  if (isRecord8(record4.subject)) {
+  if (isRecord9(record4.subject)) {
     const fromSubject = record4.subject.invocationScopeId;
     if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
   }
-  if (isRecord8(record4.payload)) {
+  if (isRecord9(record4.payload)) {
     const fromPayload = record4.payload.invocationScopeId;
     if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
   }
@@ -13903,7 +14130,7 @@ function readInvocationRecord(runDirectory) {
     const raw = JSON.parse(
       readFileSync4(join26(runDirectory, "invocation.json"), "utf8")
     );
-    return isRecord8(raw) ? raw : void 0;
+    return isRecord9(raw) ? raw : void 0;
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -13921,7 +14148,7 @@ function readInvocationSelectedHost(runDirectory) {
 }
 function withEngineDetourToolUsageFact(outcome, usage) {
   if (usage === void 0) return outcome;
-  const prior = isRecord8(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
+  const prior = isRecord9(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
   return {
     ...outcome,
     decisiveFacts: {
@@ -13964,7 +14191,7 @@ var init_engine_detour_usage = __esm({
 
 // src/package-resources/method-skill.ts
 import { createHash as createHash7 } from "node:crypto";
-import { readFile as readFile14, realpath as realpath5 } from "node:fs/promises";
+import { readFile as readFile15, realpath as realpath5 } from "node:fs/promises";
 import { join as join27 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
@@ -13987,11 +14214,11 @@ function resolvePackagedMethodSkillRoot(packageRoot, name) {
 function resolvePackagedMethodSkillPath(packageRoot, name) {
   return join27(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord9(raw)) {
+  if (!isRecord10(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -14005,7 +14232,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord9(raw.upstream)) {
+  if (!isRecord10(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -14032,12 +14259,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord9(raw.files)) {
+  if (!isRecord10(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord9(entry)) {
+    if (!isRecord10(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -14083,7 +14310,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const provenancePath = join27(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
-    provenanceRaw = await readFile14(provenancePath, "utf8");
+    provenanceRaw = await readFile15(provenancePath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
   }
@@ -14100,7 +14327,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
     const absolute = join27(rootDirectory, rel);
     let bytes;
     try {
-      bytes = await readFile14(absolute);
+      bytes = await readFile15(absolute);
     } catch (error) {
       throw new PackagedMethodSkillUnavailableError(name, absolute, error);
     }
@@ -14116,7 +14343,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   let raw;
   try {
     skillPath = await realpath5(skillPathConfigured);
-    raw = await readFile14(skillPath, "utf8");
+    raw = await readFile15(skillPath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
   }
@@ -14408,11 +14635,11 @@ var init_navigator_invocation_identity = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord10(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord10(item) && typeof item.reason === "string")) {
+  if (!isRecord11(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord11(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -14671,7 +14898,7 @@ __export(settlement_exports, {
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { appendFile as appendFile2, readFile as readFile15, readdir as readdir6, writeFile as writeFile7 } from "node:fs/promises";
+import { appendFile as appendFile2, readFile as readFile16, readdir as readdir7, writeFile as writeFile7 } from "node:fs/promises";
 import { dirname as dirname14, join as join28 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
@@ -14815,10 +15042,10 @@ function presentControlledFailure(failure2, io) {
 }
 async function inspectJudgeSession(sessionFile) {
   try {
-    await readFile15(sessionFile, "utf8");
+    await readFile16(sessionFile, "utf8");
     return { state: "present" };
   } catch (error) {
-    if (isMissingPathError3(error)) return { state: "missing" };
+    if (isMissingPathError4(error)) return { state: "missing" };
     return {
       state: "unreadable",
       diagnostic: error instanceof Error ? error.message || error.name : String(error)
@@ -15018,7 +15245,7 @@ function explicitInternalKnownFailureClassificationInput(failure2) {
     ...failure2.details === void 0 ? {} : { knownDetails: failure2.details }
   };
 }
-function isMissingPathError3(error) {
+function isMissingPathError4(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 function sessionReadFailure(error, fallbackMessage) {
@@ -15047,7 +15274,7 @@ function sessionReadFailure(error, fallbackMessage) {
   return failed;
 }
 async function readBoundSessionEntries(sessionFile) {
-  const text = await readFile15(sessionFile, "utf8");
+  const text = await readFile16(sessionFile, "utf8");
   const entries = [];
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     try {
@@ -15113,7 +15340,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
     const { records } = await readSitianRecords(recordFile);
     for (let i = records.length - 1; i >= 0; i -= 1) {
       const payload = records[i]?.payload;
-      if (!isRecord11(payload) || !isRecord11(payload.response)) continue;
+      if (!isRecord12(payload) || !isRecord12(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -15138,7 +15365,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
   try {
     parentEntries = await readBoundSessionEntries(sessionFile);
   } catch (error) {
-    if (isMissingPathError3(error)) return void 0;
+    if (isMissingPathError4(error)) return void 0;
     throw sessionReadFailure(error, "failed to read parent session for auditor binding");
   }
   const parentId = parentEntries.find((entry) => entry.type === "session")?.id;
@@ -15149,10 +15376,10 @@ async function loadBoundAuditorVolumes(sessionFile) {
   for (const childDirectory of childDirectories) {
     let names;
     try {
-      names = await readdir6(childDirectory);
+      names = await readdir7(childDirectory);
       sawAnyDirectory = true;
     } catch (error) {
-      if (isMissingPathError3(error)) continue;
+      if (isMissingPathError4(error)) continue;
       throw sessionReadFailure(error, "failed to read bound auditor session directory");
     }
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
@@ -15163,7 +15390,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord11(header)) continue;
+      if (!isRecord12(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -15177,7 +15404,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord11(bindingEntry.data) && isRecord11(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord12(bindingEntry.data) && isRecord12(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
         if (boundSessionFile !== sessionFile) continue;
@@ -15201,12 +15428,12 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord11(entry.data)) continue;
-      const parent = isRecord11(entry.data.parent) ? entry.data.parent : void 0;
-      const failure2 = isRecord11(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord12(entry.data)) continue;
+      const parent = isRecord12(entry.data.parent) ? entry.data.parent : void 0;
+      const failure2 = isRecord12(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId) continue;
       if (failure2 === void 0) continue;
-      const identity = isRecord11(failure2.identity) ? failure2.identity : void 0;
+      const identity = isRecord12(failure2.identity) ? failure2.identity : void 0;
       const typedCause = failure2.cause === "provider" || failure2.cause === "activation" || failure2.cause === "session" || failure2.cause === "output" || failure2.cause === "timeout" ? failure2.cause : void 0;
       return {
         ...typedCause === void 0 ? {} : { cause: typedCause },
@@ -15215,7 +15442,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure2.diagnostic === "string" ? { diagnostic: failure2.diagnostic } : {},
-        ...isRecord11(failure2.details) ? { details: failure2.details } : {}
+        ...isRecord12(failure2.details) ? { details: failure2.details } : {}
       };
     }
   }
@@ -15262,9 +15489,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord11(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord11(textPart) ? textPart.text : void 0;
-    const details = isRecord11(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord12(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord12(textPart) ? textPart.text : void 0;
+    const details = isRecord12(message.details) ? message.details : classification.fact;
     return {
       cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -15300,7 +15527,7 @@ async function resolveAuditedRunnerFailureResolution(input) {
     );
     if (terminatingFailure !== void 0) return resolutionOf(terminatingFailure);
   } catch (error) {
-    if (!isMissingPathError3(error)) {
+    if (!isMissingPathError4(error)) {
       const failure2 = sessionReadFailure(error, "failed to recover typed terminating-tool failure");
       return resolutionOf({
         cause: "session",
@@ -15401,7 +15628,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function toolResultText(message) {
@@ -15426,7 +15653,7 @@ function extractCollectorTargetBindRejection(entries) {
     const diagnostic = toolResultText(message);
     if (diagnostic.length === 0) return void 0;
     const details = message.details;
-    const code = isRecord11(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
+    const code = isRecord12(details) && typeof details.code === "string" && details.code.trim() !== "" ? details.code : void 0;
     return code === void 0 ? { diagnostic } : { diagnostic, code };
   }
   return void 0;
@@ -15508,7 +15735,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord11(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord12(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -15579,7 +15806,7 @@ function parseNavigatorAttendanceDetails(details) {
     if (typeof details.prose === "string" && details.prose.trim() !== "") {
       prose = details.prose;
     } else {
-      const next = isRecord11(details.next) && typeof details.next.role === "string" ? details.next.role : void 0;
+      const next = isRecord12(details.next) && typeof details.next.role === "string" ? details.next.role : void 0;
       const reason = typeof details.reason === "string" && details.reason.trim() !== "" ? details.reason : void 0;
       const command = typeof details.command === "string" && details.command.trim() !== "" ? details.command : void 0;
       if (reason !== void 0 && next !== void 0) {
@@ -15688,7 +15915,7 @@ function detourGateContext(admitted, scope) {
 }
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  const skipGate = isRecord11(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
+  const skipGate = isRecord12(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary");
   let next = base;
   if (!skipGate) {
     const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
@@ -15732,7 +15959,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord11(details)) {
+      if (!isRecord12(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -15765,7 +15992,7 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
     const entries = await readBoundSessionEntries(sessionFile);
     return extractNavigatorFact(entries);
   } catch (error) {
-    if (isMissingPathError3(error)) {
+    if (isMissingPathError4(error)) {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -15878,7 +16105,7 @@ async function readLawfulSettlementEntries(sessionFile) {
   try {
     return await readBoundSessionEntries(sessionFile);
   } catch (error) {
-    if (isMissingPathError3(error)) return void 0;
+    if (isMissingPathError4(error)) return void 0;
     throw error instanceof Error && error.knownCause === "session" ? error : sessionReadFailure(error, "session unreadable");
   }
 }
@@ -16142,7 +16369,7 @@ async function settleLawfulCollectorTerminalResult(admitted, authority, scope) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const details = isRecord11(candidate) ? candidate : { candidate };
+      const details = isRecord12(candidate) ? candidate : { candidate };
       const failed = await settleFailureTerminalResult(
         admitted,
         {
@@ -16197,7 +16424,7 @@ function extractDoctorCandidateCostFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.cost : void 0;
+      return isRecord12(data) ? data.cost : void 0;
     }
   }
   return void 0;
@@ -16208,7 +16435,7 @@ function extractDoctorCandidateAuditNoReceiptFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
       const data = entry.data;
-      return isRecord11(data) ? data.auditNoReceipt : void 0;
+      return isRecord12(data) ? data.auditNoReceipt : void 0;
     }
   }
   return void 0;
@@ -16373,7 +16600,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
     );
   }
   if (residual !== void 0) {
-    const details = isRecord11(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+    const details = isRecord12(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
     const failed = await settleFailureTerminalResult(
       admitted,
       {
@@ -16451,11 +16678,75 @@ async function settleLawfulDiaristTerminalResult(admitted, authority, scope) {
 async function trySettleDiaristTerminalResult(admitted, authority, scope) {
   return settleLawfulDiaristTerminalResult(admitted, authority, scope);
 }
+function countersignTerminalFromEntries(entries) {
+  for (let index = entries.length - 1; index >= 0; index -= 1) {
+    const entry = entries[index];
+    if (entry?.type !== "custom") continue;
+    if (entry.customType !== SECRETARIAT_GATE_OFFICER_ENTRY_TYPE) continue;
+    const data = entry.data !== null && typeof entry.data === "object" && !Array.isArray(entry.data) ? entry.data : void 0;
+    if (data?.officer !== "countersign") continue;
+    if (data.receipt === void 0) continue;
+    const runId = typeof data.runId === "string" && data.runId.trim() !== "" ? data.runId : void 0;
+    return {
+      receipt: data.receipt,
+      ...runId === void 0 ? {} : { runId }
+    };
+  }
+  return void 0;
+}
+function withCountersignTerminalFact(roleOutcome, officer) {
+  const prior = roleOutcome.decisiveFacts !== void 0 && isRecord12(roleOutcome.decisiveFacts) ? roleOutcome.decisiveFacts : {};
+  return {
+    ...roleOutcome,
+    decisiveFacts: {
+      ...prior,
+      [SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY]: officer
+    }
+  };
+}
+function acceptedSecretariatDefinesOfficerProjection(roleOutcome) {
+  const payloads = roleOutcome.payloads ?? [];
+  for (let index = payloads.length - 1; index >= 0; index -= 1) {
+    const payload = payloads[index];
+    if (!isRecord12(payload)) continue;
+    const status = payload.secretariatStatus;
+    if (typeof status !== "string") continue;
+    return status === "converged";
+  }
+  return false;
+}
 async function settleLawfulSecretariatTerminalResult(admitted, authority, scope) {
-  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
+  const settled = await settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
     role: "secretariat",
     toolName: SECRETARIAT_OUTPUT_TOOL_NAME
   }, scope);
+  if (settled === void 0) return void 0;
+  const coordinates = coordinatesFromAdmitted(authority, admitted);
+  const entries = await readLawfulSettlementEntries(coordinates.sessionFile) ?? [];
+  const officer = countersignTerminalFromEntries(entries);
+  if (officer === void 0) return settled;
+  if (settled.roleOutcome.kind === "audit_escalation") {
+    return {
+      ...settled,
+      roleOutcome: withCountersignTerminalFact(
+        {
+          ...settled.roleOutcome,
+          payloads: [officer.receipt]
+        },
+        officer
+      )
+    };
+  }
+  if (settled.roleOutcome.kind === "accepted") {
+    if (!acceptedSecretariatDefinesOfficerProjection(settled.roleOutcome)) {
+      return settled;
+    }
+    return {
+      ...settled,
+      roleOutcome: withCountersignTerminalFact(settled.roleOutcome, officer)
+    };
+  }
+  return settled;
 }
 async function trySettleSecretariatTerminalResult(admitted, authority, scope) {
   return settleLawfulSecretariatTerminalResult(admitted, authority, scope);
@@ -16697,7 +16988,7 @@ async function settleLawfulMergerTerminalResult(admitted, authority, options, sc
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const details = isRecord11(candidate) ? candidate : { candidate };
+      const details = isRecord12(candidate) ? candidate : { candidate };
       const failed = await settleFailureTerminalResult(
         admitted,
         {
@@ -17146,7 +17437,7 @@ var init_seat_ticket_binding = __esm({
 });
 
 // src/session-identity.ts
-import { mkdir as mkdir3, readFile as readFile16, rename as rename2, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile as readFile17, rename as rename2, writeFile as writeFile8 } from "node:fs/promises";
 import { dirname as dirname15, join as join29 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
   const bindingPath = (principal) => join29(authority.decode(principal).sessionDirectory, sessionBindingFile);
@@ -17156,7 +17447,7 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
     },
     async load(principal) {
       try {
-        const value = JSON.parse(await readFile16(bindingPath(principal), "utf8"));
+        const value = JSON.parse(await readFile17(bindingPath(principal), "utf8"));
         if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
           throw new Error("durable session binding is invalid");
         }
@@ -17195,7 +17486,7 @@ var init_session_identity = __esm({
 });
 
 // src/session-dialogue.ts
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function nativeEventId(row) {
@@ -17205,7 +17496,7 @@ function nativeEventId(row) {
   }
   for (const nestKey of ["message", "payload"]) {
     const nested = row[nestKey];
-    if (!isRecord12(nested)) continue;
+    if (!isRecord13(nested)) continue;
     for (const key of ["uuid", "id"]) {
       const value = nested[key];
       if (typeof value === "string" && value !== "") return value;
@@ -17218,19 +17509,19 @@ function textParts(content) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const part of content) {
-    if (!isRecord12(part) || !SPEAKER_TEXT_PART_TYPES.has(String(part.type))) continue;
+    if (!isRecord13(part) || !SPEAKER_TEXT_PART_TYPES.has(String(part.type))) continue;
     const text = part.text;
     if (typeof text === "string" && text !== "") out.push(text);
   }
   return out;
 }
 function responseItemMessage(row) {
-  if (row.type !== "response_item" || !isRecord12(row.payload)) return void 0;
+  if (row.type !== "response_item" || !isRecord13(row.payload)) return void 0;
   if (row.payload.type !== "message") return void 0;
   return row.payload;
 }
 function messageBody(row) {
-  if (isRecord12(row.message)) return row.message;
+  if (isRecord13(row.message)) return row.message;
   return responseItemMessage(row);
 }
 function speakerOf(message) {
@@ -17240,7 +17531,7 @@ function speakerOf(message) {
 }
 function codexContentItemKinds(message) {
   const pass = message.internal_chat_message_metadata_passthrough;
-  if (!isRecord12(pass) || !Array.isArray(pass.content_item_kinds)) return void 0;
+  if (!isRecord13(pass) || !Array.isArray(pass.content_item_kinds)) return void 0;
   const kinds = [];
   for (const kind of pass.content_item_kinds) {
     if (typeof kind === "string" && kind !== "") kinds.push(kind);
@@ -17269,7 +17560,7 @@ function isFixedNonOwnerEnqueueShape(content) {
   return hasFixedOpenTagPrefix(content, TASK_NOTIFICATION_OPEN_TAG);
 }
 function materializationOriginKind(row) {
-  if (!isRecord12(row.origin)) return void 0;
+  if (!isRecord13(row.origin)) return void 0;
   const kind = row.origin.kind;
   return typeof kind === "string" && kind !== "" ? kind : void 0;
 }
@@ -17317,7 +17608,7 @@ var init_session_dialogue = __esm({
 
 // src/ticket-provenance.ts
 import { createHash as createHash8 } from "node:crypto";
-import { readFile as readFile17 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname16, join as join30, resolve as resolve12 } from "node:path";
 function dialogueSessionSourceRoots(home) {
   const machineHome = typeof home === "string" && home.trim() !== "" ? home : packageMachineHome();
@@ -17413,7 +17704,7 @@ async function readTicketProvenance(ticketNumber, cwd, home) {
   const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
   let text;
   try {
-    text = await readFile17(recordFile, "utf8");
+    text = await readFile18(recordFile, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") {
       return {
@@ -17893,7 +18184,7 @@ __export(case_dossier_delivery_exports, {
   loadCaseDossierReadingMaterial: () => loadCaseDossierReadingMaterial,
   projectCaseDossierPointerSection: () => projectCaseDossierPointerSection
 });
-import { mkdtemp as mkdtemp3, readFile as readFile18, rm as rm3, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile19, rm as rm3, writeFile as writeFile9 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join31 } from "node:path";
 async function projectCaseDossierPointerSection(input) {
@@ -17945,7 +18236,7 @@ async function loadCaseDossierReadingMaterial(runDirectory) {
   );
   let section;
   try {
-    section = await readFile18(frozenPath, "utf8");
+    section = await readFile19(frozenPath, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -17968,7 +18259,7 @@ var init_case_dossier_delivery = __esm({
 });
 
 // src/host-transition-prior-native.ts
-import { access as access3, readdir as readdir7 } from "node:fs/promises";
+import { access as access3, readdir as readdir8 } from "node:fs/promises";
 import { dirname as dirname17, join as join32 } from "node:path";
 function isEnoent3(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
@@ -17986,7 +18277,7 @@ async function listSitianRecordPaths(sessionParent) {
   const sessionRoot = dirname17(sessionParent);
   let entries;
   try {
-    entries = await readdir7(sessionRoot, { withFileTypes: true });
+    entries = await readdir8(sessionRoot, { withFileTypes: true });
   } catch (error) {
     if (isEnoent3(error)) return [];
     throw error;
@@ -18129,7 +18420,7 @@ async function ensureRealArtifactsDirectory(runDirectory) {
       throw new Error("run artifact retention: artifacts path is not a real directory");
     }
   } catch (error) {
-    if (!isMissingPathError4(error)) throw error;
+    if (!isMissingPathError5(error)) throw error;
     await mkdir4(artifactsDir, { recursive: true });
     const created = await lstat6(artifactsDir);
     if (created.isSymbolicLink() || !created.isDirectory()) {
@@ -18161,7 +18452,7 @@ function serializeThrownValue(value, depth = 0, seen = /* @__PURE__ */ new WeakS
   }
   return value;
 }
-function isMissingPathError4(error) {
+function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 function transferNestedValue(value, depth, seen) {
@@ -20783,7 +21074,9 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
               {
                 instruction: parsed.instruction,
                 projectRoot: admitted.projectRoot,
-                failureLabel: "unbound summons"
+                failureLabel: "unbound summons",
+                // #969: parent durable ticket is the resume/bind key (ADR 0079).
+                ...env.boundTicketNumber === void 0 ? {} : { boundTicketNumber: env.boundTicketNumber }
               },
               env,
               io
@@ -20835,12 +21128,16 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
             );
           }
           if (outcome.identity.kind === "ticket") {
-            const assertedTicket = outcome.identity.ticketNumber;
-            typedTicket = assertedTicket;
+            typedTicket = isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : outcome.identity.ticketNumber;
             typedCourtTicketNumbers = outcome.identity.courtTicketNumbers;
+          } else if (isSafePositiveTicketNumber(env.boundTicketNumber)) {
+            typedTicket = env.boundTicketNumber;
+          }
+          if (typedTicket !== void 0) {
+            const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction;
             const summons = {
-              instruction: parsed.instruction,
-              instructionEmpty: parsed.instruction.trim() === ""
+              instruction: resumeInstruction,
+              instructionEmpty: resumeInstruction.trim() === ""
             };
             const resumed = await tryResumeSameTicketSeatRun({
               home: env.home,
@@ -20922,7 +21219,9 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
           ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
           continuation: {
             kind: "initial",
-            prompt: buildCountersignTransportPrompt(
+            // #969/#879: gate path first mint carries parent payload as dialogue content;
+            // ordinary public entry keeps package transport prompt.
+            prompt: env.reviewReask ?? env.gateReviewInstruction ?? buildCountersignTransportPrompt(
               admitted,
               engineSessionMaterialFromOptions({
                 ...pickEngineAxis(env),
@@ -22064,6 +22363,25 @@ async function summonGateOfficer(options) {
       ...common
     });
   }
+  if (options.officer === "countersign") {
+    const { runIdFromRunDirectory: runIdFromRunDirectory2 } = await Promise.resolve().then(() => (init_run_terminal_artifacts(), run_terminal_artifacts_exports));
+    const correlationId = runIdFromRunDirectory2(options.sourceRunDirectory);
+    if (correlationId === void 0 || correlationId.trim() === "") {
+      throw new Error(
+        `countersign gate summon requires parent runId from sourceRunDirectory: ${options.sourceRunDirectory}`
+      );
+    }
+    const { readBoardTicketNumber: readBoardTicketNumber2 } = await Promise.resolve().then(() => (init_run_ticket_number(), run_ticket_number_exports));
+    const parentTicket = await readBoardTicketNumber2(options.sourceRunDirectory);
+    const instruction = options.reask ?? gateReviewInstruction ?? "";
+    return summonPublicRole({
+      role: "countersign",
+      argv: ["--project", options.cwd, "--", instruction],
+      ...common,
+      correlationId,
+      ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket }
+    });
+  }
   return summonPublicRole({
     role: "inspector",
     argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
@@ -22108,6 +22426,7 @@ function createDefaultGateOfficerSummon(options) {
       ...options.home === void 0 ? {} : { home: options.home },
       ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
       ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+      ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
       ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
     });
   };
@@ -22156,9 +22475,15 @@ async function requireGatekeeperPass(options) {
         options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
       }
     }
-    if (gatekeeper.status === "pass") return;
+    if (gatekeeper.status === "pass") {
+      return {
+        officer: projected.officer,
+        receipt: gatekeeper.receipt,
+        ...typeof gatekeeper.runId === "string" && gatekeeper.runId.trim() !== "" ? { runId: gatekeeper.runId } : {}
+      };
+    }
     if (gatekeeper.status === "needs_reask") {
-      reask = OFFICER_CONCLUSION_REASK;
+      reask = officerConclusionReask(projected.officer);
       continue;
     }
     if (gatekeeper.status === "transport_failure") {
@@ -22168,6 +22493,9 @@ async function requireGatekeeperPass(options) {
       });
       options.hostActions.failInfrastructure(failure2, options.context, options.toolCallId);
     }
+    if (gatekeeper.status === "escalate" && options.subject.kind === "secretariat_verdict") {
+      throw new GatekeeperDecisionError(gatekeeper);
+    }
     options.hostActions.bindSubmissionNonPass(options.toolCallId, gatekeeper);
     throw new GatekeeperDecisionError(gatekeeper);
   }
@@ -22649,7 +22977,7 @@ init_collector_evidence();
 init_collector_github();
 
 // src/collector-handbook.ts
-import { readFile as readFile19 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 import { join as join38, sep as sep6 } from "node:path";
 
 // src/atomic-write.ts
@@ -22812,7 +23140,7 @@ function createCollectorHandbookStore(input) {
     ensureRealDirectoryTree(input.ledgerHome, parentDir2);
     assertLedgerFileInsideHome(path, input.ledgerHome);
     try {
-      const body = await readFile19(path, "utf8");
+      const body = await readFile20(path, "utf8");
       assertHandbookBudget(body, "\u6B63\u6587");
       return body;
     } catch (error) {
@@ -25207,7 +25535,7 @@ function uninstallPackageWorkerHooks(cwd) {
     rmOwnedDir(resolve17(gitDir, HOOKS_DIR));
   }
 }
-function isRecord13(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function unfinishedReasonPresent(details) {
@@ -25223,7 +25551,7 @@ function readGateState(session) {
     if (entry.type !== "custom") continue;
     if (entry.customType === WORKER_COMMIT_BASELINE_ENTRY_TYPE) {
       const data = entry.data;
-      if (isRecord13(data) && (data.head === null || typeof data.head === "string")) {
+      if (isRecord14(data) && (data.head === null || typeof data.head === "string")) {
         baseline = data.head;
       }
     } else if (entry.customType === WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE) {
@@ -25774,7 +26102,6 @@ ${JSON.stringify(admitted)}
 // src/role-runtime.ts
 init_navigator_invocation_identity();
 init_gatekeeper_role();
-init_gatekeeper_role();
 init_submission_errors();
 init_doctor_contracts();
 init_doctor_evidence();
@@ -26257,15 +26584,80 @@ ${error.message}`
 }
 var COUNTERSIGN_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "continue", "escalate"]);
 var COUNTERSIGN_STATUS_REASK = "countersignStatus \u4E0D\u662F converged\u3001continue\u3001escalate \u4E09\u6001\u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
-function createSecretariatRoleRuntime(roleHost, dependencies) {
+var SECRETARIAT_SUBMISSION_GATE_HOSTS = /* @__PURE__ */ new Set(["codex", "claude", "grok-build"]);
+var SECRETARIAT_QUEUE_STATUSES = /* @__PURE__ */ new Set(["converged", "escalate"]);
+var SECRETARIAT_STATUS_REASK = "secretariatStatus \u4E0D\u662F converged\u3001escalate \u4E4B\u4E00\u3002\u8BF7\u91CD\u65B0\u4EA4\u5377\uFF0Cstatus \u5199\u660E\u5176\u4E00\u3002";
+function createSecretariatRoleRuntime(roleHost, dependencies, hostActions) {
   let parentInstruction = "";
+  const beforeAccept = hostActions !== void 0 && roleHost.requireGatekeeperPass !== void 0 ? async ({ toolCallId, parameters, signal, ctx }) => {
+    const host = typeof ctx.host === "string" && ctx.host.trim() !== "" ? ctx.host.trim() : void 0;
+    if (host === void 0 || !SECRETARIAT_SUBMISSION_GATE_HOSTS.has(host)) {
+      return void 0;
+    }
+    const record4 = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters) ? parameters : void 0;
+    const status = record4 !== void 0 && typeof record4.secretariatStatus === "string" ? record4.secretariatStatus : void 0;
+    if (status === void 0 || !SECRETARIAT_QUEUE_STATUSES.has(status)) {
+      throw new ParentQueueReaskError(SECRETARIAT_STATUS_REASK);
+    }
+    if (status === "escalate") {
+      return void 0;
+    }
+    try {
+      const pass = await roleHost.requireGatekeeperPass({
+        context: ctx,
+        subject: { kind: "secretariat_verdict" },
+        ...signal === void 0 ? {} : { signal },
+        hostActions,
+        toolCallId,
+        // #879: this-turn typed payload — identity-bound at submit site.
+        submission: parameters
+      });
+      if (pass !== void 0 && pass !== null && typeof pass === "object" && "receipt" in pass) {
+        const {
+          SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2
+        } = await Promise.resolve().then(() => (init_secretariat_contracts(), secretariat_contracts_exports));
+        const runId = typeof pass.runId === "string" && pass.runId.trim() !== "" ? pass.runId : void 0;
+        ctx.sessionManager.appendCustomEntry?.(SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2, {
+          officer: "countersign",
+          receipt: pass.receipt,
+          ...runId === void 0 ? {} : { runId }
+        });
+      }
+      return void 0;
+    } catch (error) {
+      if (error instanceof GatekeeperDecisionError && error.result.status === "escalate") {
+        const receipt = error.result.receipt;
+        const receiptRecord = receipt !== null && typeof receipt === "object" && !Array.isArray(receipt) ? receipt : void 0;
+        const runId = typeof error.result.runId === "string" && error.result.runId.trim() !== "" ? error.result.runId : void 0;
+        const {
+          SECRETARIAT_GATE_OFFICER_ENTRY_TYPE: SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2
+        } = await Promise.resolve().then(() => (init_secretariat_contracts(), secretariat_contracts_exports));
+        ctx.sessionManager.appendCustomEntry?.(SECRETARIAT_GATE_OFFICER_ENTRY_TYPE2, {
+          officer: "countersign",
+          receipt,
+          ...runId === void 0 ? {} : { runId }
+        });
+        const { buildAuditEscalationResult: buildAuditEscalationResult2 } = await Promise.resolve().then(() => (init_audit_escalation(), audit_escalation_exports));
+        return buildAuditEscalationResult2(
+          {
+            status: "escalate",
+            officer: "countersign",
+            ...receiptRecord !== void 0 && Object.prototype.hasOwnProperty.call(receiptRecord, "decisionGate") ? { decisionGate: receiptRecord.decisionGate } : {}
+          },
+          receipt
+        );
+      }
+      throw error;
+    }
+  } : void 0;
   const base = createFiledOfficerRuntime(
     roleHost,
     {
       role: "secretariat",
       tool: SECRETARIAT_OUTPUT_TOOL_SPEC,
       acceptedText: SECRETARIAT_ACCEPTED_TEXT,
-      soulTag: "secretariat"
+      soulTag: "secretariat",
+      ...beforeAccept === void 0 ? {} : { beforeAccept }
     },
     dependencies
   );
@@ -26947,8 +27339,9 @@ function createRoleRuntimeExtension(dependencies) {
         if (!dependencies.loadSecretariatSoul) throw new Error("Secretariat runtime dependencies are not configured");
         return dependencies.loadSecretariatSoul();
       },
-      ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot }
-    });
+      ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot },
+      ...dependencies.hostAdapters === void 0 ? {} : { hostAdapters: dependencies.hostAdapters }
+    }, hostActions);
     const merger = createMergerRoleRuntime(roleHost, {
       async loadSoul() {
         if (!dependencies.loadMergerSoul) throw new Error("Merger runtime dependencies are not configured");
@@ -27444,17 +27837,26 @@ async function prepareRoleEnvelope(options) {
     getActiveTools() {
       return [...preferredTools];
     },
-    async requireGatekeeperPass(options2) {
-      await requireGatekeeperPass({
-        context: options2.context,
-        subject: options2.subject,
-        ...options2.signal === void 0 ? {} : { signal: options2.signal },
+    async requireGatekeeperPass(gateOptions) {
+      const packageRoot = typeof options.dependencies.packageRoot === "string" ? options.dependencies.packageRoot : void 0;
+      return requireGatekeeperPass({
+        context: gateOptions.context,
+        subject: gateOptions.subject,
+        ...gateOptions.signal === void 0 ? {} : { signal: gateOptions.signal },
         hostActions: {
-          failInfrastructure: (error, _context, toolCallId) => options2.hostActions.failInfrastructure(error, options2.context, toolCallId),
-          bindSubmissionNonPass: options2.hostActions.bindSubmissionNonPass
+          failInfrastructure: (error, _context, toolCallId) => gateOptions.hostActions.failInfrastructure(error, gateOptions.context, toolCallId),
+          bindSubmissionNonPass: gateOptions.hostActions.bindSubmissionNonPass
         },
-        toolCallId: options2.toolCallId,
-        ...options2.submission === void 0 ? {} : { submission: options2.submission }
+        toolCallId: gateOptions.toolCallId,
+        ...gateOptions.submission === void 0 ? {} : { submission: gateOptions.submission },
+        // #969: package root + home reach nested 给事中/符宝郎 summons.
+        // hostAdapters (when set on deps) forward nested seat selection — production unset.
+        summonOfficer: createDefaultGateOfficerSummon({
+          cwd: gateOptions.context.cwd ?? request.cwd,
+          home: request.home,
+          ...packageRoot === void 0 ? {} : { packageRoot },
+          ...options.dependencies.hostAdapters === void 0 ? {} : { hostAdapters: options.dependencies.hostAdapters }
+        })
       });
     },
     on(...registration) {
@@ -27864,11 +28266,11 @@ async function prepareRoleEnvelope(options) {
 }
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import { join as join42 } from "node:path";
 
 // src/canonical-skill-binding.ts
-import { readFile as readFile20, realpath as realpath8 } from "node:fs/promises";
+import { readFile as readFile21, realpath as realpath8 } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname as dirname22, resolve as resolve18 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
@@ -27901,7 +28303,7 @@ async function loadCanonicalSkillBinding(name) {
   let raw;
   try {
     path = await realpath8(configuredPath);
-    raw = await readFile20(path, "utf8");
+    raw = await readFile21(path, "utf8");
   } catch (error) {
     throw new CanonicalSkillUnavailableError(name, configuredPath, error);
   }
@@ -27940,7 +28342,7 @@ init_doctor_evidence();
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile21 } from "node:fs/promises";
+import { readFile as readFile22 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
@@ -27953,7 +28355,7 @@ function navigatorInputReference(getFlag, role) {
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile21(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile22(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -28010,7 +28412,7 @@ async function loadNavigatorWorkContext(options) {
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile21(path, "utf8");
+      const content = await readFile22(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -28079,12 +28481,12 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile22(path, "utf8"),
+    loadFixPacket: (path) => readFile23(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile22(path, "utf8"),
+    loadCoderTask: (path) => readFile23(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile22(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile23(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -28099,7 +28501,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadSecretariatSoul: () => loadMainRoleSessionMaterials("secretariat"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile22(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile23(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -28125,7 +28527,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile22(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile23(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },