@akagilnc/pi-workflow-roles 0.1.4742 → 0.1.4759

package/dist/public-cli/main.js

@@ -27781,42 +27781,6 @@ var init_host_transition_prior_native = __esm({
   }
 });
 
-// src/public-cli/public-run-credentials.ts
-function knownFailureForMissingProviderCredential(model, credentials) {
-  if (model === void 0 || credentials === void 0) return void 0;
-  if (model.provider !== "openai-codex" && model.provider !== "xai") return void 0;
-  if (!missingPublicProviderCredential(model.provider, credentials)) {
-    return void 0;
-  }
-  return {
-    cause: "provider",
-    identity: {
-      name: "MissingProviderCredential",
-      code: model.provider
-    }
-  };
-}
-function missingCredentialPreDispatchFailure(model, credentials) {
-  const knownFailure = knownFailureForMissingProviderCredential(model, credentials);
-  if (knownFailure === void 0) return void 0;
-  return {
-    timedOut: false,
-    code: 1,
-    stderr: `Missing credential for provider ${String(knownFailure.identity?.code ?? "unknown")}`,
-    knownFailure
-  };
-}
-function postRunMissingCredentialFailure(result, model, credentials) {
-  if (!(result.timedOut || result.code !== 0)) return void 0;
-  return knownFailureForMissingProviderCredential(model, credentials);
-}
-var init_public_run_credentials = __esm({
-  "src/public-cli/public-run-credentials.ts"() {
-    "use strict";
-    init_config2();
-  }
-});
-
 // src/public-cli/process-cancel.ts
 var process_cancel_exports = {};
 __export(process_cancel_exports, {
@@ -28344,8 +28308,8 @@ function withOnceSuccessfulBeforeDispatch(adapters) {
   };
 }
 async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic, io) {
-  io.stderr(formatCliDiagnostic(diagnostic));
   const payload = { diagnostic, recordedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  let retentionFailure;
   try {
     await env.sessionAppender(
       env.principalAuthority,
@@ -28353,7 +28317,6 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
       POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE,
       payload
     );
-    return;
   } catch (appendError) {
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
@@ -28364,13 +28327,16 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
         { encoding: "utf8", flag: "wx" }
       );
     } catch (artifactError) {
-      io.stderr(
-        formatCliDiagnostic(
-          `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`
-        )
-      );
+      retentionFailure = `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`;
     }
   }
+  try {
+    io.stderr(formatCliDiagnostic(diagnostic));
+    if (retentionFailure !== void 0) {
+      io.stderr(formatCliDiagnostic(retentionFailure));
+    }
+  } catch {
+  }
 }
 async function resolveResumeMethodMaterialAdapters(input) {
   if (input.shouldLoad === false) {
@@ -28533,12 +28499,11 @@ async function dispatchPostAdmissionTurn(input) {
       if (adapters.afterDispatch !== void 0) await adapters.afterDispatch(admitted, lease);
       return result;
     } catch (error) {
-      const primaryFailure = result.terminal !== void 0 && !isLawfulTypedTerminalOutcome(result.terminal.roleOutcome);
-      if (primaryFailure) {
+      if (result.terminal !== void 0) {
         await recordBestEffortPostDispatchDiagnostic(
           admitted,
           env,
-          `afterDispatch failed beside primary terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+          `afterDispatch failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
           io
         );
         return result;
@@ -28564,23 +28529,6 @@ async function dispatchPostAdmissionTurn(input) {
     }
   };
   try {
-    const missingCredential = missingCredentialPreDispatchFailure(
-      env.model,
-      env.credentials
-    );
-    if (missingCredential !== void 0) {
-      return {
-        ...await presentControlledFailure2(
-          admitted,
-          withEngineDetourInvocationScope(missingCredential, request.invocationScopeId),
-          adapters,
-          env.principalAuthority,
-          io,
-          persistRunState
-        ),
-        ...deferredPersist
-      };
-    }
     let previousHost;
     const liveHost = env.host;
     const principalCoordinates = admitted.principal === void 0 ? void 0 : env.principalAuthority.decode(admitted.principal);
@@ -28713,19 +28661,14 @@ async function dispatchPostAdmissionTurn(input) {
     try {
       const sessionFile = admitted.principal !== void 0 ? env.principalAuthority.decode(admitted.principal).sessionFile : "";
       const runnerKnownFailure = adapters.resolveRunnerKnownFailure !== void 0 && sessionFile !== "" ? await adapters.resolveRunnerKnownFailure({ result, sessionFile }) : result.knownFailure;
-      const credentialFailure = postRunMissingCredentialFailure(
-        result,
-        env.model,
-        env.credentials
-      );
       resolution = await resolveAuditedRunnerFailureResolution({
         runner: runnerKnownFailure,
         sessionFile,
-        credential: credentialFailure,
+        credential: void 0,
         runDirectory: admitted.runDirectory
       });
       const processCancelName = processCancelSignalName(env.signal);
-      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0 || processCancelName !== void 0;
+      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || processCancelName !== void 0;
       hostSignalFailed = directHostFailureSignal || result.code !== null && result.code !== 0 || resolution.knownFailure !== void 0;
       settled = await adapters.trySettle(admitted, env.principalAuthority, courtScope);
       if (settled !== void 0) {
@@ -28791,25 +28734,11 @@ async function dispatchPostAdmissionTurn(input) {
         try {
           await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
         } catch (error) {
-          const failed = await settleAfterTurnStarted(
+          await recordBestEffortPostDispatchDiagnostic(
             admitted,
-            withEngineDetourInvocationScope({
-              timedOut: false,
-              code: null,
-              stderr: "",
-              thrown: error,
-              skipRunStateWrite: true
-            }, request.invocationScopeId),
-            adapters,
-            env.principalAuthority,
-            io,
-            persistRunState
-          );
-          return await finishAfterTurn(
-            withProcessCancelSkipAutoResume(
-              { ...failed, turnDispatched: true, ...deferredPersist },
-              env.signal
-            )
+            env,
+            `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+            io
           );
         }
       }
@@ -28890,25 +28819,11 @@ async function dispatchPostAdmissionTurn(input) {
       try {
         await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
       } catch (error) {
-        const failed = await settleAfterTurnStarted(
+        await recordBestEffortPostDispatchDiagnostic(
           admitted,
-          withEngineDetourInvocationScope({
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: error,
-            skipRunStateWrite: true
-          }, request.invocationScopeId),
-          adapters,
-          env.principalAuthority,
-          io,
-          persistRunState
-        );
-        return await finishAfterTurn(
-          withProcessCancelSkipAutoResume(
-            { ...failed, turnDispatched: true, ...deferredPersist },
-            env.signal
-          )
+          env,
+          `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+          io
         );
       }
     }
@@ -28920,14 +28835,16 @@ async function dispatchPostAdmissionTurn(input) {
       ...deferredPersist
     });
   } finally {
-    try {
-      await lease.release();
-    } catch (error) {
-      io.stderr(
-        formatCliDiagnostic(
-          `writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`
-        )
-      );
+    if (lease !== void 0) {
+      try {
+        await lease.release();
+      } catch (error) {
+        io.stderr(
+          formatCliDiagnostic(
+            `writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`
+          )
+        );
+      }
     }
   }
 }
@@ -29242,53 +29159,29 @@ async function runPostAdmissionManualResume(input) {
   } = input;
   let request = input.request;
   const effectiveModel = env.model;
-  let lease;
-  let staleWriterLeaseReclaimed;
-  try {
-    lease = await acquireRunWriterLease(admitted.runDirectory, (diagnostic, kind) => {
-      if (kind === "stale-reclaimed") staleWriterLeaseReclaimed = true;
-      io.stderr(diagnostic);
-    });
-  } catch (error) {
-    if (error instanceof RunWriterLeaseHeldError) {
-      io.stderr(formatCliDiagnostic(error.message));
-      return {
-        exitCode: 1,
-        ...staleWriterLeaseReclaimed === true ? { staleWriterLeaseReclaimed: true } : {}
-      };
-    }
-    throw error;
-  }
   const invocationScopeId = mintEngineDetourInvocationScope({
     ...effectiveEngine === void 0 ? {} : { effectiveEngine }
   });
-  const result = await dispatchAfterWriterLease({
-    lease,
-    build: async () => {
-      if (request === void 0) {
-        if (buildRequestAfterLease === void 0) {
-          throw new Error(
-            "runPostAdmissionManualResume requires request or buildRequestAfterLease"
-          );
-        }
-        request = await buildRequestAfterLease();
-      }
-      request = withEngineDetourInvocationScope(request, invocationScopeId);
-      return request;
+  if (request === void 0) {
+    if (buildRequestAfterLease === void 0) {
+      throw new Error(
+        "runPostAdmissionManualResume requires request or buildRequestAfterLease"
+      );
+    }
+    request = await buildRequestAfterLease();
+  }
+  request = withEngineDetourInvocationScope(request, invocationScopeId);
+  const result = await dispatchPostAdmissionTurn({
+    admitted,
+    env: {
+      ...env,
+      ...effectiveModel === void 0 ? {} : { model: effectiveModel },
+      ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
     },
-    dispatch: (turnRequest) => dispatchPostAdmissionTurn({
-      admitted,
-      env: {
-        ...env,
-        ...effectiveModel === void 0 ? {} : { model: effectiveModel },
-        ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
-      },
-      io,
-      request: turnRequest,
-      lease,
-      adapters,
-      ...effectiveEngine === void 0 ? {} : { effectiveEngine }
-    })
+    io,
+    request,
+    adapters,
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
   });
   if (result.terminal !== void 0 && isLawfulTypedTerminalOutcome(result.terminal.roleOutcome)) {
     io.stdout(formatTerminalResult(result.terminal));
@@ -29296,10 +29189,7 @@ async function runPostAdmissionManualResume(input) {
   if (result.terminal !== void 0) {
     result.terminal.autoResumeCount = 0;
   }
-  return {
-    ...result,
-    ...staleWriterLeaseReclaimed === true ? { staleWriterLeaseReclaimed: true } : {}
-  };
+  return result;
 }
 var StationChildExhaustedError, POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE;
 var init_post_admission = __esm({
@@ -29316,7 +29206,6 @@ var init_post_admission = __esm({
     init_case_dossier_delivery();
     init_engine_detour_usage();
     init_host_transition_prior_native();
-    init_public_run_credentials();
     init_run_lifecycle();
     init_process_cancel();
     init_activation_ledger_topology();
@@ -35123,8 +35012,7 @@ async function dispatchPublicRoleCommand(env, home, io, parsed, role, parse, run
 function cliResultFromRoleRun(result) {
   return {
     exitCode: result.exitCode,
-    ...result.terminal === void 0 ? {} : { terminal: result.terminal },
-    ...result.staleWriterLeaseReclaimed === true ? { staleWriterLeaseReclaimed: true } : {}
+    ...result.terminal === void 0 ? {} : { terminal: result.terminal }
   };
 }
 function defaultIo() {

package/dist/public-cli/post-admission.js

@@ -35,8 +35,7 @@ function isStationChildOfficerDialogue(role, env) {
 }
 import { mintEngineDetourInvocationScope, readInvocationSelectedHost, withEngineDetourInvocationScope, } from "../engine-detour-usage.js";
 import { projectHostTransitionPriorNative } from "../host-transition-prior-native.js";
-import { missingCredentialPreDispatchFailure, postRunMissingCredentialFailure, } from "./public-run-credentials.js";
-import { acquireRunWriterLease, clearCurrentCourt, clearTypedProviderHttpObservation, describeErrorIdentity, markRunRunning, readCurrentCourt, recordCurrentCourt, renderResumeCommand, RunWriterLeaseHeldError, } from "./run-lifecycle.js";
+import { clearCurrentCourt, clearTypedProviderHttpObservation, describeErrorIdentity, markRunRunning, readCurrentCourt, recordCurrentCourt, renderResumeCommand, } from "./run-lifecycle.js";
 import { processCancelDiagnostic, processCancelSignalName, } from "./process-cancel.js";
 import { homeFromRunDirectory } from "../activation-ledger-topology.js";
 import { attemptProducedFreshSubmission, classifyPostAdmissionFailure, controlledFailureInputFromResolution, exitCodeForTerminalOutcome, explicitInternalKnownFailureClassificationInput, formatCliDiagnostic, formatTerminalResult, inspectJudgeSession, isLawfulTypedTerminalOutcome, presentFailureTerminal, presentStructuralRejection, resolveAuditedRunnerFailureResolution, resolveControlledFailureResumeObservation, settleFailureTerminalResult, settleHostEndedNoReceipt, attachRecordedSubmissions, } from "./settlement.js";
@@ -110,11 +109,10 @@ export const POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE = "ak_post_admission_c
  * redundant second copy (#840 bounce class 1: 同一业务规则只保留一个权威实现).
  */
 async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic, io) {
-    io.stderr(formatCliDiagnostic(diagnostic));
     const payload = { diagnostic, recordedAt: new Date().toISOString() };
+    let retentionFailure;
     try {
         await env.sessionAppender(env.principalAuthority, admitted.principal, POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE, payload);
-        return;
     }
     catch (appendError) {
         try {
@@ -122,9 +120,19 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
             await writeFile(join(artifactsDir, `post-admission-diagnostic-${randomUUID()}.json`), `${JSON.stringify({ version: 1, ...payload }, null, 2)}\n`, { encoding: "utf8", flag: "wx" });
         }
         catch (artifactError) {
-            io.stderr(formatCliDiagnostic(`post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`));
+            retentionFailure =
+                `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`;
         }
     }
+    try {
+        io.stderr(formatCliDiagnostic(diagnostic));
+        if (retentionFailure !== undefined) {
+            io.stderr(formatCliDiagnostic(retentionFailure));
+        }
+    }
+    catch {
+        // Presentation is best-effort beside an already-formed host terminal.
+    }
 }
 /**
  * Factory-seat resume method-material face (#833): one authority for
@@ -330,10 +338,8 @@ export async function dispatchPostAdmissionTurn(input) {
             return result;
         }
         catch (error) {
-            const primaryFailure = result.terminal !== undefined
-                && !isLawfulTypedTerminalOutcome(result.terminal.roleOutcome);
-            if (primaryFailure) {
-                await recordBestEffortPostDispatchDiagnostic(admitted, env, `afterDispatch failed beside primary terminal (best-effort continue): ${describeErrorIdentity(error)}`, io);
+            if (result.terminal !== undefined) {
+                await recordBestEffortPostDispatchDiagnostic(admitted, env, `afterDispatch failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`, io);
                 return result;
             }
             return {
@@ -350,13 +356,8 @@ export async function dispatchPostAdmissionTurn(input) {
         }
     };
     try {
-        const missingCredential = missingCredentialPreDispatchFailure(env.model, env.credentials);
-        if (missingCredential !== undefined) {
-            return {
-                ...(await presentControlledFailure(admitted, withEngineDetourInvocationScope(missingCredential, request.invocationScopeId), adapters, env.principalAuthority, io, persistRunState)),
-                ...deferredPersist,
-            };
-        }
+        // #987: do not pre-block or classify host dispatch from AK credential
+        // catalog facts. Per-invocation runner/host evidence owns provider identity.
         // #617 DK-4: capture previous invocation host before markRunRunning overwrites it.
         // Single authority projectHostTransitionPriorNative classifies the prior native volume.
         // Same-run resume (#637) keeps host identity on the run's invocation page.
@@ -549,11 +550,10 @@ export async function dispatchPostAdmissionTurn(input) {
             const runnerKnownFailure = adapters.resolveRunnerKnownFailure !== undefined && sessionFile !== ""
                 ? await adapters.resolveRunnerKnownFailure({ result, sessionFile })
                 : result.knownFailure;
-            const credentialFailure = postRunMissingCredentialFailure(result, env.model, env.credentials);
             resolution = await resolveAuditedRunnerFailureResolution({
                 runner: runnerKnownFailure,
                 sessionFile,
-                credential: credentialFailure,
+                credential: undefined,
                 runDirectory: admitted.runDirectory,
             });
             // A direct, current signal from the host/runner itself (timeout / host
@@ -573,7 +573,6 @@ export async function dispatchPostAdmissionTurn(input) {
             const directHostFailureSignal = result.timedOut
                 || result.knownFailure !== undefined
                 || runnerKnownFailure !== undefined
-                || credentialFailure !== undefined
                 || processCancelName !== undefined;
             hostSignalFailed =
                 directHostFailureSignal
@@ -679,24 +678,7 @@ export async function dispatchPostAdmissionTurn(input) {
                     await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
                 }
                 catch (error) {
-                    // #836: `settledOutcome.terminal` already carries recorded
-                    // submissions (attachRecordedSubmissions above). A real run-state
-                    // persistence failure here must surface loudly through the same
-                    // controlled-failure seam every other dispatch-time failure in
-                    // this function uses (ADR 0080: one settlement disposition owner)
-                    // — not escape uncaught to auto-resume's dispatch-retry path,
-                    // whose exhausted-budget terminal carries no recorded submissions
-                    // at all. skipRunStateWrite: the write that just threw is the same
-                    // write presentControlledFailure would otherwise retry — don't
-                    // call a known-failing operation twice.
-                    const failed = await settleAfterTurnStarted(admitted, withEngineDetourInvocationScope({
-                        timedOut: false,
-                        code: null,
-                        stderr: "",
-                        thrown: error,
-                        skipRunStateWrite: true,
-                    }, request.invocationScopeId), adapters, env.principalAuthority, io, persistRunState);
-                    return await finishAfterTurn(withProcessCancelSkipAutoResume({ ...failed, turnDispatched: true, ...deferredPersist }, env.signal));
+                    await recordBestEffortPostDispatchDiagnostic(admitted, env, `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`, io);
                 }
             }
             // Lawful persist + present is the caller's stop seam (auto-resume loop /
@@ -768,19 +750,7 @@ export async function dispatchPostAdmissionTurn(input) {
                 await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
             }
             catch (error) {
-                // #836: same run-state persistence hazard as the settled/accepted
-                // branch above — route through the shared controlled-failure seam so
-                // the real failure surfaces loudly instead of escaping uncaught to
-                // auto-resume's dispatch-retry path with no recorded submissions.
-                // skipRunStateWrite: don't retry the write that just threw.
-                const failed = await settleAfterTurnStarted(admitted, withEngineDetourInvocationScope({
-                    timedOut: false,
-                    code: null,
-                    stderr: "",
-                    thrown: error,
-                    skipRunStateWrite: true,
-                }, request.invocationScopeId), adapters, env.principalAuthority, io, persistRunState);
-                return await finishAfterTurn(withProcessCancelSkipAutoResume({ ...failed, turnDispatched: true, ...deferredPersist }, env.signal));
+                await recordBestEffortPostDispatchDiagnostic(admitted, env, `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`, io);
             }
         }
         // #855 cancel re-read lives in finishAfterTurn (before afterDispatch).
@@ -793,17 +763,20 @@ export async function dispatchPostAdmissionTurn(input) {
         });
     }
     finally {
-        try {
-            await lease.release();
-        }
-        catch (error) {
-            // lease.release() is documented best-effort and never rejects in the
-            // production acquireRunWriterLease implementation (createWriterLease
-            // reports cleanup failures via callback, never throws) — this guard is
-            // structural only: an uncaught throw from a finally block silently
-            // replaces whatever the try already returned, including a properly
-            // tagged turnDispatched:true result (#840 r9 判词 class 1 boundary).
-            io.stderr(formatCliDiagnostic(`writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`));
+        // Public manual resume (#987) holds no package writer lease.
+        if (lease !== undefined) {
+            try {
+                await lease.release();
+            }
+            catch (error) {
+                // lease.release() is documented best-effort and never rejects in the
+                // production acquireRunWriterLease implementation (createWriterLease
+                // reports cleanup failures via callback, never throws) — this guard is
+                // structural only: an uncaught throw from a finally block silently
+                // replaces whatever the try already returned, including a properly
+                // tagged turnDispatched:true result (#840 r9 判词 class 1 boundary).
+                io.stderr(formatCliDiagnostic(`writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`));
+            }
         }
     }
 }
@@ -951,8 +924,10 @@ export async function prepareSummonsResumeMaterials(runDirectory, summons) {
  */
 export async function runPostAdmissionSeatResume(input) {
     let request = input.request;
-    // Load once for runDirectory / structural rejection / afterAdmittedLoad;
-    // court identity is judged only after the writer lease is held (below).
+    // Load once for runDirectory / structural rejection / afterAdmittedLoad.
+    // Court identity for public manual resume is judged in the turn builder
+    // (#987: no package writer-lease gate before host CLI resume). Station-child
+    // auto-resume still acquires the shared lease in runWithAutoResumeLoop.
     let loaded;
     try {
         loaded = await input.load(request);
@@ -981,8 +956,9 @@ export async function runPostAdmissionSeatResume(input) {
     let preparedCleanup;
     const buildRequestAfterLease = async () => {
         let openCourtAttemptId;
-        // Build uses the admitted judged under this lease (rehydrated when open
-        // court materials ride). Settlement identity stays on the outer admitted.
+        // Build uses the admitted for this resume (rehydrated when open court
+        // materials ride). Settlement identity stays on the outer admitted.
+        // Name kept for station-child callers that still build under lease.
         let admittedForBuild = loaded.admitted;
         // Bare resume: open-court pointer is the continue signal (not ledger seal).
         if (request.summons === undefined) {
@@ -1043,9 +1019,10 @@ export async function runPostAdmissionSeatResume(input) {
         }
         return turnRequest;
     };
-    // Court recovery / open under lease, then dispatch.
+    // Court recovery / open, then dispatch. Public manual resume does not take a
+    // package writer lease before the host CLI (#987 / ADR 0080 one-shot).
     // Station-child same-ticket/same-parent resume is call-local auto-resume
-    // (#840 / #416). Public `ak-role resume` stays one-shot (ADR 0080).
+    // (#840 / #416) and still acquires the shared lease in its loop.
     // afterAdmittedPrepare runs inside this try so mint failure and cleanup share one finally.
     try {
         if (input.afterAdmittedPrepare !== undefined) {
@@ -1217,74 +1194,41 @@ export async function runPostAdmissionResumable(input) {
     });
 }
 /**
- * Manual resume: lease + dispatch. Pass-through to the host — no sealed-accepted
- * short-circuit (#833 / #416). Court open (summons / message / open court) is
- * built under lease when using buildRequestAfterLease; sole-final stays per-attempt.
- * After-lease build shares dispatchAfterWriterLease with station-child auto-resume.
+ * Manual resume: pass-through to the host CLI resume — no package writer-lease
+ * pre-gate (#987), no sealed-accepted short-circuit (#833 / #416). Court open
+ * (summons / message / open court) is built when using buildRequestAfterLease;
+ * sole-final stays per-attempt. Station-child auto-resume keeps shared lease
+ * acquire in runWithAutoResumeLoop + dispatchAfterWriterLease.
  */
 export async function runPostAdmissionManualResume(input) {
     const { admitted, env, io, adapters, effectiveEngine, buildRequestAfterLease, } = input;
     let request = input.request;
     // #617 DK-3: manual resume writes the live seat/env model (same as new legs).
     const effectiveModel = env.model;
-    let lease;
-    let staleWriterLeaseReclaimed;
-    try {
-        lease = await acquireRunWriterLease(admitted.runDirectory, (diagnostic, kind) => {
-            // Record the typed fact before the fallible sink: if io.stderr throws
-            // (acquire deliberately swallows diagnostic-sink failures), the reclaim
-            // still happened and must stay observable.
-            if (kind === "stale-reclaimed")
-                staleWriterLeaseReclaimed = true;
-            io.stderr(diagnostic);
-        });
-    }
-    catch (error) {
-        if (error instanceof RunWriterLeaseHeldError) {
-            io.stderr(formatCliDiagnostic(error.message));
-            // A held rejection after our own reclaim must still carry the fact that
-            // this caller reclaimed the stale lock — e.g. another resumer re-locked
-            // before our retry create (#629).
-            return {
-                exitCode: 1,
-                ...(staleWriterLeaseReclaimed === true
-                    ? { staleWriterLeaseReclaimed: true }
-                    : {}),
-            };
-        }
-        throw error;
-    }
     // Explicit public resume is a new counting unit — mint once for this call.
     const invocationScopeId = mintEngineDetourInvocationScope({
         ...(effectiveEngine === undefined ? {} : { effectiveEngine }),
     });
-    const result = await dispatchAfterWriterLease({
-        lease,
-        build: async () => {
-            if (request === undefined) {
-                if (buildRequestAfterLease === undefined) {
-                    throw new Error("runPostAdmissionManualResume requires request or buildRequestAfterLease");
-                }
-                request = await buildRequestAfterLease();
-            }
-            request = withEngineDetourInvocationScope(request, invocationScopeId);
-            return request;
+    if (request === undefined) {
+        if (buildRequestAfterLease === undefined) {
+            throw new Error("runPostAdmissionManualResume requires request or buildRequestAfterLease");
+        }
+        request = await buildRequestAfterLease();
+    }
+    request = withEngineDetourInvocationScope(request, invocationScopeId);
+    const result = await dispatchPostAdmissionTurn({
+        admitted,
+        env: {
+            ...env,
+            ...(effectiveModel === undefined ? {} : { model: effectiveModel }),
+            ...(admitted.correlationId === undefined
+                ? {}
+                : { correlationId: admitted.correlationId }),
         },
-        dispatch: (turnRequest) => dispatchPostAdmissionTurn({
-            admitted,
-            env: {
-                ...env,
-                ...(effectiveModel === undefined ? {} : { model: effectiveModel }),
-                ...(admitted.correlationId === undefined
-                    ? {}
-                    : { correlationId: admitted.correlationId }),
-            },
-            io,
-            request: turnRequest,
-            lease,
-            adapters,
-            ...(effectiveEngine === undefined ? {} : { effectiveEngine }),
-        }),
+        io,
+        request,
+        adapters,
+        ...(effectiveEngine === undefined ? {} : { effectiveEngine }),
     });
     if (result.terminal !== undefined &&
         isLawfulTypedTerminalOutcome(result.terminal.roleOutcome)) {
@@ -1298,10 +1242,5 @@ export async function runPostAdmissionManualResume(input) {
     if (result.terminal !== undefined) {
         result.terminal.autoResumeCount = 0;
     }
-    return {
-        ...result,
-        ...(staleWriterLeaseReclaimed === true
-            ? { staleWriterLeaseReclaimed: true }
-            : {}),
-    };
+    return result;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4742",
+  "version": "0.1.4759",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",