@akagilnc/pi-workflow-roles 0.1.4745 → 0.1.4772

package/dist/headless-host/production-host.js

@@ -1907,10 +1907,10 @@ __export(session_assistant_usage_exports, {
 });
 import { join as join6 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile25 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile25(sessionFile, "utf8");
+    text = await readFile24(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -4275,12 +4275,7 @@ var init_host_descriptions = __esm({
 });
 
 // src/role-run-relocation.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { readdir as readdir3, readFile as readFile7, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join12, sep as sep2 } from "node:path";
-function isEnoent2(error) {
-  return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
 function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   if (typeof value !== "string") return value;
   if (value === oldRunDirectory) return newRunDirectory;
@@ -4322,23 +4317,6 @@ function rewriteRunDirectoryPathFieldsAgainstRewrites(record4, fields, rewrites)
     }
   }
 }
-function collectRewrites(input) {
-  const own = {
-    oldRunDirectory: input.oldRunDirectory,
-    newRunDirectory: input.newRunDirectory
-  };
-  if (input.crossRunRewrites === void 0 || input.crossRunRewrites.length === 0) {
-    return [own];
-  }
-  const seen = /* @__PURE__ */ new Set([own.oldRunDirectory]);
-  const out = [own];
-  for (const rewrite of input.crossRunRewrites) {
-    if (seen.has(rewrite.oldRunDirectory)) continue;
-    seen.add(rewrite.oldRunDirectory);
-    out.push(rewrite);
-  }
-  return out;
-}
 function isPlainObject(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -4350,254 +4328,25 @@ function rewriteSourceRunLocator(value, rewrites) {
     rewrites
   );
 }
-function rewriteSummonsMaterials(value, rewrites) {
-  if (!isPlainObject(value)) return;
-  rewriteRunDirectoryPathFieldsAgainstRewrites(
-    value,
-    SUMMONS_PATH_FIELDS,
-    rewrites
-  );
-  rewriteSourceRunLocator(value.sourceRun, rewrites);
-  if (Array.isArray(value.attachmentPaths)) {
-    value.attachmentPaths = value.attachmentPaths.map(
-      (path) => rewriteRunDirectoryPathValueAgainstRewrites(path, rewrites)
-    );
-  }
-}
-async function rewriteJsonObjectFile(path, fields, rewrites) {
-  if (!existsSync4(path)) return;
-  const page = JSON.parse(await readFile7(path, "utf8"));
-  if (!isPlainObject(page)) return;
-  rewriteRunDirectoryPathFieldsAgainstRewrites(page, fields, rewrites);
-  await writeFile2(path, `${JSON.stringify(page, null, 2)}
-`, "utf8");
-}
-async function rewriteOfficerPointerFile(path, rewrites) {
-  if (!existsSync4(path)) return;
-  const page = JSON.parse(await readFile7(path, "utf8"));
-  if (!isPlainObject(page)) return;
-  if (page.kind !== "direct-officer-run-pointer") return;
-  rewriteRunDirectoryPathFieldsAgainstRewrites(
-    page,
-    OFFICER_POINTER_FIELDS,
-    rewrites
-  );
-  await writeFile2(path, `${JSON.stringify(page)}
-`, "utf8");
-}
-async function rewriteSitianRecordsJsonl(path, rewrites) {
-  if (!existsSync4(path)) return;
-  const raw = await readFile7(path, "utf8");
-  if (raw.length === 0) return;
-  const endsWithNewline = raw.endsWith("\n");
-  const lines = raw.split("\n");
-  let changed = false;
-  const out = [];
-  for (let i = 0; i < lines.length; i += 1) {
-    const line2 = lines[i];
-    if (line2 === "" && i === lines.length - 1 && endsWithNewline) {
-      out.push("");
-      continue;
-    }
-    if (line2.trim() === "") {
-      out.push(line2);
-      continue;
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(line2);
-    } catch {
-      out.push(line2);
-      continue;
-    }
-    if (!isPlainObject(parsed)) {
-      out.push(line2);
-      continue;
-    }
-    if (!("sessionParent" in parsed)) {
-      out.push(line2);
-      continue;
-    }
-    const before = parsed.sessionParent;
-    rewriteRunDirectoryPathFieldsAgainstRewrites(
-      parsed,
-      SITIAN_RECORD_FIELDS,
-      rewrites
-    );
-    if (parsed.sessionParent !== before) changed = true;
-    out.push(JSON.stringify(parsed));
-  }
-  if (!changed) return;
-  const body = out.join("\n");
-  await writeFile2(
-    path,
-    endsWithNewline && !body.endsWith("\n") ? `${body}
-` : body,
-    "utf8"
-  );
-}
-async function rewriteSessionTranscriptBindings(path, rewrites) {
-  if (!existsSync4(path)) return;
-  const raw = await readFile7(path, "utf8");
-  if (raw.length === 0) return;
-  const endsWithNewline = raw.endsWith("\n");
-  const lines = raw.split("\n");
-  let changed = false;
-  const out = [];
-  for (let i = 0; i < lines.length; i += 1) {
-    const line2 = lines[i];
-    if (line2 === "" && i === lines.length - 1 && endsWithNewline) {
-      out.push("");
-      continue;
-    }
-    if (line2.trim() === "") {
-      out.push(line2);
-      continue;
-    }
-    let parsed;
-    try {
-      parsed = JSON.parse(line2);
-    } catch {
-      out.push(line2);
-      continue;
-    }
-    if (!isPlainObject(parsed)) {
-      out.push(line2);
-      continue;
-    }
-    let lineChanged = false;
-    if (parsed.type === "session" && "parentSession" in parsed) {
-      const before = parsed.parentSession;
-      rewriteRunDirectoryPathFieldsAgainstRewrites(
-        parsed,
-        SESSION_HEADER_FIELDS,
-        rewrites
-      );
-      if (parsed.parentSession !== before) lineChanged = true;
-    } else if (parsed.type === "custom" && parsed.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE && isPlainObject(parsed.data) && isPlainObject(parsed.data.parent)) {
-      const parent = parsed.data.parent;
-      const before = parent.sessionFile;
-      rewriteRunDirectoryPathFieldsAgainstRewrites(
-        parent,
-        BINDING_PARENT_FIELDS,
-        rewrites
-      );
-      if (parent.sessionFile !== before) lineChanged = true;
-    }
-    if (lineChanged) changed = true;
-    out.push(lineChanged ? JSON.stringify(parsed) : line2);
-  }
-  if (!changed) return;
-  const body = out.join("\n");
-  await writeFile2(
-    path,
-    endsWithNewline && !body.endsWith("\n") ? `${body}
-` : body,
-    "utf8"
-  );
-}
-async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-  const sessionRoot = join12(pagesDirectory, "session");
-  async function walk(directory) {
-    let entries;
-    try {
-      entries = await readdir3(directory, { withFileTypes: true });
-    } catch (error) {
-      if (isEnoent2(error)) return;
-      throw error;
-    }
-    for (const entry of entries) {
-      const path = join12(directory, entry.name);
-      if (entry.isDirectory()) {
-        await walk(path);
-        continue;
-      }
-      if (!entry.isFile()) continue;
-      if (entry.name === "current-session.json") {
-        await rewriteJsonObjectFile(path, CURRENT_SESSION_FIELDS, rewrites);
-      } else if (entry.name.endsWith(".pointer.json")) {
-        await rewriteOfficerPointerFile(path, rewrites);
-      } else if (entry.name === "records.jsonl") {
-        await rewriteSitianRecordsJsonl(path, rewrites);
-      } else if (entry.name.endsWith(".jsonl")) {
-        await rewriteSessionTranscriptBindings(path, rewrites);
+function rewriteAdmittedRoleRunPage(page, rewrites) {
+  rewriteRunDirectoryPathFieldsAgainstRewrites(page, ADMITTED_PAGE_FIELDS, rewrites);
+  rewriteSourceRunLocator(page.sourceRun, rewrites);
+  if (Array.isArray(page.attachments)) {
+    for (const attachment of page.attachments) {
+      if (isPlainObject(attachment)) {
+        rewriteRunDirectoryPathFieldsAgainstRewrites(attachment, ["frozenPath"], rewrites);
       }
     }
   }
-  await walk(sessionRoot);
-}
-async function rewriteRoleRunDurablePages(input) {
-  const { pagesDirectory } = input;
-  const rewrites = collectRewrites(input);
-  const admittedPath = join12(pagesDirectory, "admitted-request.json");
-  if (existsSync4(admittedPath)) {
-    const page = JSON.parse(await readFile7(admittedPath, "utf8"));
+  if (isPlainObject(page.principal)) {
     rewriteRunDirectoryPathFieldsAgainstRewrites(
-      page,
-      ADMITTED_PAGE_FIELDS,
+      page.principal,
+      ["sessionDirectory", "sessionFile"],
       rewrites
     );
-    rewriteSourceRunLocator(page.sourceRun, rewrites);
-    if (Array.isArray(page.attachments)) {
-      for (const attachment of page.attachments) {
-        if (isPlainObject(attachment)) {
-          rewriteRunDirectoryPathFieldsAgainstRewrites(
-            attachment,
-            ["frozenPath"],
-            rewrites
-          );
-        }
-      }
-    }
-    if (isPlainObject(page.principal)) {
-      rewriteRunDirectoryPathFieldsAgainstRewrites(
-        page.principal,
-        ["sessionDirectory", "sessionFile"],
-        rewrites
-      );
-    }
-    await writeFile2(admittedPath, `${JSON.stringify(page, null, 2)}
-`, "utf8");
   }
-  const invocationPath = join12(pagesDirectory, "invocation.json");
-  if (existsSync4(invocationPath)) {
-    const page = JSON.parse(await readFile7(invocationPath, "utf8"));
-    rewriteRunDirectoryPathFieldsAgainstRewrites(
-      page,
-      INVOCATION_PAGE_FIELDS,
-      rewrites
-    );
-    await writeFile2(
-      invocationPath,
-      `${JSON.stringify(page, null, 2)}
-`,
-      "utf8"
-    );
-  }
-  const statePath = join12(pagesDirectory, "run-state.json");
-  if (existsSync4(statePath)) {
-    const page = JSON.parse(await readFile7(statePath, "utf8"));
-    rewriteRunDirectoryPathFieldsAgainstRewrites(
-      page,
-      RUN_STATE_PAGE_FIELDS,
-      rewrites
-    );
-    if (isPlainObject(page.principal)) {
-      rewriteRunDirectoryPathFieldsAgainstRewrites(
-        page.principal,
-        ["sessionDirectory", "sessionFile"],
-        rewrites
-      );
-    }
-    if (isPlainObject(page.currentCourt)) {
-      rewriteSummonsMaterials(page.currentCourt.summons, rewrites);
-    }
-    await writeFile2(statePath, `${JSON.stringify(page, null, 2)}
-`, "utf8");
-  }
-  await rewriteNestedMachinePathPages(pagesDirectory, rewrites);
 }
-var ADMITTED_PAGE_FIELDS, INVOCATION_PAGE_FIELDS, RUN_STATE_PAGE_FIELDS, SOURCE_RUN_LOCATOR_FIELDS, SUMMONS_PATH_FIELDS, CURRENT_SESSION_FIELDS, OFFICER_POINTER_FIELDS, SITIAN_RECORD_FIELDS, SESSION_HEADER_FIELDS, BINDING_PARENT_FIELDS;
+var ADMITTED_PAGE_FIELDS, SOURCE_RUN_LOCATOR_FIELDS;
 var init_role_run_relocation = __esm({
   "src/role-run-relocation.ts"() {
     "use strict";
@@ -4614,24 +4363,7 @@ var init_role_run_relocation = __esm({
       "mergerInputPath",
       "sourceRunPath"
     ];
-    INVOCATION_PAGE_FIELDS = [
-      "runDirectory",
-      "sessionDirectory",
-      "sessionFile"
-    ];
-    RUN_STATE_PAGE_FIELDS = [
-      "runDirectory",
-      "admittedRequestPath",
-      "sessionDirectory",
-      "sessionFile"
-    ];
     SOURCE_RUN_LOCATOR_FIELDS = ["runDirectory"];
-    SUMMONS_PATH_FIELDS = ["sourceRunPath"];
-    CURRENT_SESSION_FIELDS = ["sessionFile"];
-    OFFICER_POINTER_FIELDS = ["sessionFile", "runDirectory"];
-    SITIAN_RECORD_FIELDS = ["sessionParent"];
-    SESSION_HEADER_FIELDS = ["parentSession"];
-    BINDING_PARENT_FIELDS = ["sessionFile"];
   }
 });
 
@@ -4764,7 +4496,7 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir4, readFile as readFile8, realpath as realpath3, stat } from "node:fs/promises";
+import { readdir as readdir3, readFile as readFile7, realpath as realpath3, stat } from "node:fs/promises";
 import { dirname as dirname8, relative as relative2, resolve as resolve6, sep as sep3 } from "node:path";
 function record3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -4772,7 +4504,7 @@ function record3(value) {
 async function discoverCaseFiles(root) {
   const found = [];
   async function walk(dir, depth) {
-    for (const item of await readdir4(dir, { withFileTypes: true })) {
+    for (const item of await readdir3(dir, { withFileTypes: true })) {
       const path = resolve6(dir, item.name);
       if (item.isDirectory()) {
         await walk(path, depth + 1);
@@ -4880,7 +4612,7 @@ async function loadDoctorCase(runsPath) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep3).join("/");
-    const bytes = await readFile8(path);
+    const bytes = await readFile7(path);
     const content = bytes.toString("utf8");
     const kind = id.endsWith(".jsonl") ? "session" : "stderr";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -4893,7 +4625,7 @@ async function loadDoctorCase(runsPath) {
     accumulate(calls, result.calls, id);
     accumulate(tokens, result.tokens, id);
   }
-  const runDirs = (await readdir4(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
+  const runDirs = (await readdir3(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
   const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
   const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
   const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
@@ -5120,7 +4852,7 @@ var init_git_object_id = __esm({
 
 // src/merger-git-state.ts
 import { execFile as execFile2 } from "node:child_process";
-import { access as access2, readFile as readFile9 } from "node:fs/promises";
+import { access as access2, readFile as readFile8 } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -5190,7 +4922,7 @@ function createProductionMergerGitState(repositoryRoot = process.cwd()) {
       const mergeHeadPath = isAbsolute4(mergeHeadReported) ? mergeHeadReported : resolve7(repositoryRoot, mergeHeadReported);
       let sourceObjectId = "";
       if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile9(mergeHeadPath), "Git MERGE_HEAD");
+        const raw = exactUtf8(await readFile8(mergeHeadPath), "Git MERGE_HEAD");
         const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
         if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
         if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
@@ -5242,7 +4974,7 @@ var init_uuidv7 = __esm({
 });
 
 // src/typed-provider-http.ts
-import { readFile as readFile10, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { readFile as readFile9, unlink, writeFile as writeFile2 } from "node:fs/promises";
 import { join as join13 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
   return join13(runDirectory, TYPED_HTTP_FILE);
@@ -5266,7 +4998,7 @@ async function recordTypedProviderHttpStatus(runDirectory, observation) {
     httpStatus: observation.httpStatus,
     provider: observation.provider
   };
-  await writeFile3(
+  await writeFile2(
     typedProviderHttpPath(runDirectory),
     `${JSON.stringify(body)}
 `,
@@ -5276,7 +5008,7 @@ async function recordTypedProviderHttpStatus(runDirectory, observation) {
 async function readLatestTypedProviderHttpObservation(runDirectory) {
   let text;
   try {
-    text = await readFile10(typedProviderHttpPath(runDirectory), "utf8");
+    text = await readFile9(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return void 0;
@@ -5355,7 +5087,7 @@ __export(run_lifecycle_exports, {
   selectResumeContinuationPrompt: () => selectResumeContinuationPrompt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat2, open, readdir as readdir5, readFile as readFile11, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile10, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
 import { basename as basename5, join as join14 } from "node:path";
 function selectResumeContinuationPrompt(message, engineMaterial) {
   const lines = message !== void 0 ? [message] : [];
@@ -5394,7 +5126,7 @@ function renderResumeCommand(runId) {
 }
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
-  await writeFile4(
+  await writeFile3(
     join14(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
@@ -5445,7 +5177,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile11(join14(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile10(join14(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -5467,10 +5199,15 @@ async function readRoleRunStateDisk(runDirectory) {
   if (typeof record4.projectRoot !== "string") return void 0;
   if (typeof record4.sessionDirectory !== "string") return void 0;
   if (typeof record4.admittedRequestPath !== "string") return void 0;
-  const runDir = typeof record4.runDirectory === "string" && record4.runDirectory.trim() !== "" ? record4.runDirectory : runDirectory;
+  const storedRunDirectory = typeof record4.runDirectory === "string" && record4.runDirectory.trim() !== "" ? record4.runDirectory : runDirectory;
+  const runDir = runDirectory;
   const principalWire = {
-    sessionDirectory: record4.sessionDirectory,
-    ...typeof record4.sessionFile === "string" ? { sessionFile: record4.sessionFile } : {}
+    sessionDirectory: rewriteRunDirectoryPathValue(
+      record4.sessionDirectory,
+      storedRunDirectory,
+      runDirectory
+    ),
+    ...typeof record4.sessionFile === "string" ? { sessionFile: rewriteRunDirectoryPathValue(record4.sessionFile, storedRunDirectory, runDirectory) } : {}
   };
   let resumable;
   if (record4.resumable !== void 0 && record4.resumable !== null) {
@@ -5490,7 +5227,11 @@ async function readRoleRunStateDisk(runDirectory) {
     bookKey: record4.bookKey,
     projectRoot: record4.projectRoot,
     runDirectory: runDir,
-    admittedRequestPath: record4.admittedRequestPath,
+    admittedRequestPath: rewriteRunDirectoryPathValue(
+      record4.admittedRequestPath,
+      storedRunDirectory,
+      runDirectory
+    ),
     principalWire,
     ...phase === void 0 ? {} : { phase },
     ...resumable === void 0 ? {} : { resumable },
@@ -5512,7 +5253,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.resumable === void 0 ? {} : { resumable: disk.resumable },
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
-  await writeFile4(
+  await writeFile3(
     join14(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
@@ -5685,7 +5426,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile11(lockPath, "utf8");
+    content = await readFile10(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -5844,7 +5585,7 @@ async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   const booksRoot = join14(ledgerHome, "books");
   let bookKeys;
   try {
-    bookKeys = await readdir5(booksRoot);
+    bookKeys = await readdir4(booksRoot);
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -5882,7 +5623,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile11(join14(runDirectory, "admitted-request.json"), "utf8")
+      await readFile10(join14(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -6051,10 +5792,15 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile11(run.admittedRequestPath, "utf8")
+      await readFile10(run.admittedRequestPath, "utf8")
     );
     if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
       const record4 = raw;
+      const storedRunDirectory = typeof record4.runDirectory === "string" && record4.runDirectory.trim() !== "" ? record4.runDirectory : run.runDirectory;
+      rewriteAdmittedRoleRunPage(record4, [{
+        oldRunDirectory: storedRunDirectory,
+        newRunDirectory: run.runDirectory
+      }]);
       if (typeof record4.instruction === "string") {
         instruction = record4.instruction;
       }
@@ -6169,7 +5915,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile11(join14(run.runDirectory, "invocation.json"), "utf8")
+      await readFile10(join14(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -6208,6 +5954,23 @@ async function loadResumableRunRecord(home, runId, authority) {
   } else if (mergedSet.tickets !== void 0) {
     courtTicketNumbers = mergedSet.tickets;
   }
+  const sourceRunLeaf = basename5(sourceRunPath ?? "").split("@");
+  const referencedRunId = sourceRun?.runId ?? sourceRunLeaf[0];
+  const referencedRole = sourceRun?.role ?? sourceRunLeaf[1];
+  if (referencedRunId !== void 0 && referencedRunId !== "") {
+    const currentSourceRunDirectory = await findRunDirectoryById(
+      home,
+      referencedRunId,
+      run.bookKey,
+      referencedRole
+    );
+    if (currentSourceRunDirectory !== void 0) {
+      sourceRunPath = currentSourceRunDirectory;
+      if (sourceRun !== void 0) {
+        sourceRun = { ...sourceRun, runDirectory: currentSourceRunDirectory };
+      }
+    }
+  }
   return {
     run,
     principal,
@@ -6612,6 +6375,7 @@ var init_run_lifecycle = __esm({
     init_typed_provider_http();
     init_collector_config();
     init_diarist_contracts();
+    init_role_run_relocation();
     init_engine_material();
     init_invocation();
     V1_RESUMABLE_PROVIDERS = ["openai-codex", "xai"];
@@ -6684,17 +6448,29 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join15(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
+  const bookRunsRoot = join15(bookDirectory, "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
     candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join15(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute6(raw) ? raw : resolve8(options.projectRoot, raw);
+    const identity2 = parseRunDirectoryName(basename6(candidate));
+    const subjectDirectory = dirname9(dirname9(candidate));
+    const isLegacyUnboundLocator = identity2 !== void 0 && basename6(dirname9(candidate)) === "runs" && basename6(subjectDirectory) === "unbound" && resolve8(dirname9(subjectDirectory)) === resolve8(bookDirectory);
+    if (isLegacyUnboundLocator) {
+      candidate = await findRunDirectoryById(
+        options.home,
+        identity2.runId,
+        bookKey,
+        identity2.role
+      ) ?? candidate;
+    }
   }
   const real = await requireRunDirectory(candidate, raw);
   const identity = parseRunDirectoryName(basename6(real));
-  const bookIdentity = physicalPathIdentity(activationBookDirectory(ledgerHome, bookKey));
+  const bookIdentity = physicalPathIdentity(bookDirectory);
   const parentIdentity = physicalPathIdentity(dirname9(real));
   const subjectBookIdentity = physicalPathIdentity(dirname9(dirname9(dirname9(real))));
   if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename6(dirname9(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
@@ -7876,15 +7652,15 @@ __export(invocation_exports, {
   withPreparedAttachments: () => withPreparedAttachments
 });
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync4 } from "node:fs";
 import {
   lstat as lstat4,
   mkdtemp as mkdtemp2,
-  readFile as readFile12,
+  readFile as readFile11,
   realpath as realpath5,
   rename,
   rm as rm2,
-  writeFile as writeFile5
+  writeFile as writeFile4
 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute7, join as join16, resolve as resolve9, sep as sep4 } from "node:path";
@@ -7912,7 +7688,7 @@ async function writeAdmittedRequestPersistence(admittedRequestPath, body, coordi
     sessionDirectory: coordinates.sessionDirectory,
     sessionFile: coordinates.sessionFile
   };
-  await writeFile5(
+  await writeFile4(
     admittedRequestPath,
     `${JSON.stringify(projection, null, 2)}
 `,
@@ -7940,7 +7716,7 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...source.ticketNumber === void 0 ? {} : { ticketNumber: source.ticketNumber },
     ...effectiveModelLedgerFields(effectiveModel)
   };
-  await writeFile5(
+  await writeFile4(
     join16(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
@@ -7949,7 +7725,7 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
   const ledgerPath = join16(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
     next.provider = model.provider;
@@ -7973,7 +7749,7 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
   if (host !== void 0) {
     next.host = host;
   }
-  await writeFile5(
+  await writeFile4(
     ledgerPath,
     `${JSON.stringify(next, null, 2)}
 `,
@@ -7982,8 +7758,8 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
   const ledgerPath = join16(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
-  await writeFile5(
+  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
+  await writeFile4(
     ledgerPath,
     `${JSON.stringify({
       ...current,
@@ -7998,14 +7774,14 @@ async function persistAdmittedSourceRunPath(admitted, sourceRunPath) {
     throw new Error("persistAdmittedSourceRunPath requires a non-empty sourceRunPath");
   }
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile12(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
   if (typeof current.sourceRunPath === "string") {
     if (current.sourceRunPath === sourceRunPath) return;
     throw new Error(
       `persistAdmittedSourceRunPath refuses to replace ${current.sourceRunPath} with ${sourceRunPath}`
     );
   }
-  await writeFile5(
+  await writeFile4(
     admittedPath,
     `${JSON.stringify({ ...current, sourceRunPath }, null, 2)}
 `,
@@ -8024,7 +7800,7 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
 }
 async function recordAdmittedCorrelation(admitted, correlationId) {
   const current = JSON.parse(
-    await readFile12(admitted.admittedRequestPath, "utf8")
+    await readFile11(admitted.admittedRequestPath, "utf8")
   );
   const prior = [
     ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
@@ -8033,7 +7809,7 @@ async function recordAdmittedCorrelation(admitted, correlationId) {
     ...typeof current.correlationId === "string" && current.correlationId.trim() !== "" ? [current.correlationId] : []
   ];
   const correlationIds = [.../* @__PURE__ */ new Set([...prior, correlationId])];
-  await writeFile5(
+  await writeFile4(
     admitted.admittedRequestPath,
     `${JSON.stringify({ ...current, correlationId, correlationIds }, null, 2)}
 `,
@@ -8072,8 +7848,8 @@ async function bindCourtTicketNumbersOnAdmitted(admitted, courtTicketNumbers) {
   }
   const frozen = Object.freeze([...projected]);
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile12(admittedPath, "utf8"));
-  await writeFile5(
+  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
+  await writeFile4(
     admittedPath,
     `${JSON.stringify({ ...current, courtTicketNumbers: frozen }, null, 2)}
 `,
@@ -8085,7 +7861,7 @@ async function bindCourtTicketNumbersOnAdmitted(admitted, courtTicketNumbers) {
   admitted.courtTicketNumbers = frozen;
 }
 async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
-  if (admitted.ticketNumber === void 0 || !admitted.runDirectory.includes(`${sep4}unbound${sep4}runs${sep4}`)) return;
+  if (admitted.ticketNumber === void 0 || !admitted.runDirectory.includes(`${sep4}unbound${sep4}runs${sep4}`)) return void 0;
   const oldRunDirectory = admitted.runDirectory;
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(oldRunDirectory));
   const target = roleRunPlacement(ledgerHome, {
@@ -8095,6 +7871,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     role: admitted.role
   });
   ensureRoleRunDirectory(ledgerHome, dirname10(target.runDirectory));
+  const principal = authority.seal(target);
   await rename(oldRunDirectory, target.runDirectory);
   heldLease?.relocate(target.runDirectory);
   const admittedRecord = admitted;
@@ -8119,13 +7896,8 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
       target.runDirectory
     );
   }
-  const principal = authority.seal(target);
   admitted.principal = principal;
-  await rewriteRoleRunDurablePages({
-    pagesDirectory: target.runDirectory,
-    oldRunDirectory,
-    newRunDirectory: target.runDirectory
-  });
+  return { oldRunDirectory, newRunDirectory: target.runDirectory };
 }
 async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   requireSafePositiveTicketNumber(
@@ -8134,7 +7906,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   );
   const admittedPath = join16(runDirectory, "admitted-request.json");
   const invocationPath = join16(runDirectory, "invocation.json");
-  const admitted = JSON.parse(await readFile12(admittedPath, "utf8"));
+  const admitted = JSON.parse(await readFile11(admittedPath, "utf8"));
   const existing = admitted.ticketNumber;
   if (typeof existing === "number") {
     if (existing === ticketNumber) return;
@@ -8142,9 +7914,9 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
       `bindTicketNumberOnRunDirectory refuses to replace existing ticket #${existing} with #${ticketNumber}`
     );
   }
-  if (existsSync5(invocationPath)) {
+  if (existsSync4(invocationPath)) {
     const invocation = JSON.parse(
-      await readFile12(invocationPath, "utf8")
+      await readFile11(invocationPath, "utf8")
     );
     if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
       throw new Error(
@@ -8152,7 +7924,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
       );
     }
   }
-  await writeFile5(
+  await writeFile4(
     admittedPath,
     `${JSON.stringify({ ...admitted, ticketNumber }, null, 2)}
 `,
@@ -8169,7 +7941,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot, selectedRoleEntry) {
   const rolePackageRoot = packageRoot;
   const raw = JSON.parse(
-    await readFile12(join16(rolePackageRoot, "package.json"), "utf8")
+    await readFile11(join16(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -8454,7 +8226,7 @@ async function readRegularFileAttachment(sourcePath) {
     );
   }
   try {
-    return { absolute, bytes: await readFile12(absolute) };
+    return { absolute, bytes: await readFile11(absolute) };
   } catch (error) {
     throw new CliUsageError(
       `attachment is not a readable regular file: ${sourcePath}`,
@@ -8474,7 +8246,7 @@ async function withPreparedAttachments(attachmentPaths, use) {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
       const snapshotPath = join16(stagingDirectory, String(index).padStart(6, "0"));
-      await writeFile5(snapshotPath, bytes);
+      await writeFile4(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
     result = await use(prepared);
@@ -8498,7 +8270,7 @@ async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, inde
     destinationDir,
     `${String(index).padStart(2, "0")}-${basename7(provenancePath)}`
   );
-  await writeFile5(frozenPath, bytes);
+  await writeFile4(frozenPath, bytes);
   return {
     provenancePath,
     frozenPath,
@@ -8510,7 +8282,7 @@ async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, inde
 async function freezePreparedAttachment(prepared, destinationDir, index) {
   return freezeAttachmentBytes(
     prepared.absolute,
-    await readFile12(prepared.snapshotPath),
+    await readFile11(prepared.snapshotPath),
     destinationDir,
     index
   );
@@ -8766,7 +8538,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
 async function loadAdmittedJudgeRequest(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile12(join16(runDirectory, "admitted-request.json"), "utf8")
+      await readFile11(join16(runDirectory, "admitted-request.json"), "utf8")
     );
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return void 0;
     const record4 = raw;
@@ -8822,7 +8594,7 @@ async function admitCoderInvocation(options) {
   });
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   const taskPath = join16(runDirectory, "task.md");
-  await writeFile5(taskPath, instruction, "utf8");
+  await writeFile4(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
     phase: options.phase,
@@ -8892,7 +8664,7 @@ async function admitFixerInvocation(options) {
   if (options.prerequisitesPath !== void 0) {
     const absolutePrereq = isAbsolute7(options.prerequisitesPath) ? options.prerequisitesPath : resolve9(options.prerequisitesPath);
     try {
-      prerequisitesSource = await readFile12(absolutePrereq, "utf8");
+      prerequisitesSource = await readFile11(absolutePrereq, "utf8");
     } catch (error) {
       throw new CliUsageError(
         `fixer prerequisites path is unreadable: ${options.prerequisitesPath}`,
@@ -8929,7 +8701,7 @@ async function admitFixerInvocation(options) {
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
     prerequisitesPath = join16(runDirectory, "prerequisites.json");
-    await writeFile5(
+    await writeFile4(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
 `,
@@ -8937,7 +8709,7 @@ async function admitFixerInvocation(options) {
     );
   }
   const packetPath = join16(runDirectory, "fix-packet.md");
-  await writeFile5(packetPath, instruction, "utf8");
+  await writeFile4(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
     phase: options.phase,
@@ -9183,7 +8955,7 @@ async function admitCollectorInvocation(options) {
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
     requestManifestPath = join16(runDirectory, "request-manifest.json");
-    await writeFile5(requestManifestPath, manifestCanonicalJson, "utf8");
+    await writeFile4(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const admitted = {
     role: "collector",
@@ -9964,7 +9736,7 @@ async function admitMergerInvocation(options) {
     authorizedChecks: []
   });
   const mergerInputPath = join16(runDirectory, "merger-input.json");
-  await writeFile5(
+  await writeFile4(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
 `,
@@ -10277,7 +10049,7 @@ var init_invocation = __esm({
 });
 
 // src/public-cli/load-production-acp-host.ts
-import { existsSync as existsSync6 } from "node:fs";
+import { existsSync as existsSync5 } from "node:fs";
 import { join as join17 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot, host) {
@@ -10287,7 +10059,7 @@ async function loadProductionAcpHostFactory(packageRoot, host) {
   }
   const built = join17(packageRoot, "dist/acp-host/production-host.js");
   const source = join17(packageRoot, "src/acp-host/production-host.ts");
-  const target = existsSync6(built) ? built : source;
+  const target = existsSync5(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
   const create = mod.createProductionAcpRoleTurnHost;
@@ -10301,7 +10073,7 @@ var init_load_production_acp_host = __esm({
 });
 
 // src/public-cli/load-production-headless-host.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { join as join18 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot, host) {
@@ -10311,7 +10083,7 @@ async function loadProductionHeadlessHostFactory(packageRoot, host) {
   }
   const built = join18(packageRoot, "dist/headless-host/production-host.js");
   const source = join18(packageRoot, "src/headless-host/production-host.ts");
-  const target = existsSync7(built) ? built : source;
+  const target = existsSync6(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
   const create = mod.createProductionHeadlessRoleTurnHost;
@@ -10559,7 +10331,7 @@ __export(config_exports, {
   setPersistentSeatHost: () => setPersistentSeatHost,
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
-import { mkdir, readFile as readFile13, writeFile as writeFile6 } from "node:fs/promises";
+import { mkdir, readFile as readFile12, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname11, join as join19 } from "node:path";
 function isGateOfficerSeat(value) {
   return GATE_OFFICER_SEATS.includes(value);
@@ -10573,7 +10345,7 @@ function publicCliConfigPath(home) {
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
   try {
-    const raw = await readFile13(path, "utf8");
+    const raw = await readFile12(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -10586,7 +10358,7 @@ async function savePublicCliConfig(config, home) {
   const path = publicCliConfigPath(home);
   await mkdir(dirname11(path), { recursive: true });
   const normalized = parsePublicCliConfig(config);
-  await writeFile6(
+  await writeFile5(
     path,
     `${JSON.stringify(serializePublicCliConfig(normalized), null, 2)}
 `,
@@ -11031,7 +10803,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile13(join19(agentDir, "auth.json"), "utf8");
+    const raw = await readFile12(join19(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -11233,12 +11005,12 @@ var init_host_providers = __esm({
 });
 
 // src/ledger-session-read.ts
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile13 } from "node:fs/promises";
 function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile14(path, "utf8");
+  const text = await readFile13(path, "utf8");
   const lines = text.split("\n");
   const out = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -11336,7 +11108,7 @@ var init_ledger_session_read = __esm({
 });
 
 // src/analyst-gate-cycles-read.ts
-import { readdir as readdir6 } from "node:fs/promises";
+import { readdir as readdir5 } from "node:fs/promises";
 import { join as join21 } from "node:path";
 function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -11552,10 +11324,10 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile25 } = await import("node:fs/promises");
+  const { readFile: readFile24 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile25(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile24(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
@@ -11578,7 +11350,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
   for (const directory of directories) {
     let names;
     try {
-      const entries = await readdir6(directory, { withFileTypes: true });
+      const entries = await readdir5(directory, { withFileTypes: true });
       names = entries.filter(
         (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
       ).map((e) => e.name).sort();
@@ -12156,14 +11928,14 @@ var init_submission_ledger = __esm({
 });
 
 // src/session-opening-materials.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { readFile as readFile15 } from "node:fs/promises";
+import { existsSync as existsSync7 } from "node:fs";
+import { readFile as readFile14 } from "node:fs/promises";
 import { dirname as dirname12, join as join23 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
   let dir = dirname12(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync8(join23(dir, "package.json")) && existsSync8(join23(dir, "souls"))) {
+    if (existsSync7(join23(dir, "package.json")) && existsSync7(join23(dir, "souls"))) {
       return dir;
     }
     const parent = dirname12(dir);
@@ -12173,7 +11945,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile15(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile14(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -13719,7 +13491,7 @@ var init_engine_detour_usage = __esm({
 });
 
 // src/dossier-resolution.ts
-import { existsSync as existsSync9, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync8, statSync as statSync2 } from "node:fs";
 import { resolve as resolve10 } from "node:path";
 function isHostContext(value) {
   return "sessionManager" in value;
@@ -13739,7 +13511,7 @@ function resolveAuditDossier(source) {
   }
   const runDirectory = resolve10(raw);
   try {
-    if (!existsSync9(runDirectory) || !statSync2(runDirectory).isDirectory()) {
+    if (!existsSync8(runDirectory) || !statSync2(runDirectory).isDirectory()) {
       return { status: "incomplete", observation: { kind: "missing-dossier" } };
     }
   } catch {
@@ -13787,7 +13559,7 @@ var init_dossier_resolution = __esm({
 
 // src/package-resources/method-skill.ts
 import { createHash as createHash6 } from "node:crypto";
-import { readFile as readFile16, realpath as realpath6 } from "node:fs/promises";
+import { readFile as readFile15, realpath as realpath6 } from "node:fs/promises";
 import { join as join25 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
@@ -13906,7 +13678,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const provenancePath = join25(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
-    provenanceRaw = await readFile16(provenancePath, "utf8");
+    provenanceRaw = await readFile15(provenancePath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
   }
@@ -13923,7 +13695,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
     const absolute = join25(rootDirectory, rel);
     let bytes;
     try {
-      bytes = await readFile16(absolute);
+      bytes = await readFile15(absolute);
     } catch (error) {
       throw new PackagedMethodSkillUnavailableError(name, absolute, error);
     }
@@ -13939,7 +13711,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   let raw;
   try {
     skillPath = await realpath6(skillPathConfigured);
-    raw = await readFile16(skillPath, "utf8");
+    raw = await readFile15(skillPath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
   }
@@ -14400,7 +14172,7 @@ __export(settlement_exports, {
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { appendFile as appendFile2, readFile as readFile17, readdir as readdir7, rm as rm3, writeFile as writeFile7 } from "node:fs/promises";
+import { appendFile as appendFile2, readFile as readFile16, readdir as readdir6, rm as rm3, writeFile as writeFile6 } from "node:fs/promises";
 import { dirname as dirname14, join as join26 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
@@ -14551,7 +14323,7 @@ function presentControlledFailure(failure2, io) {
 }
 async function inspectJudgeSession(sessionFile) {
   try {
-    await readFile17(sessionFile, "utf8");
+    await readFile16(sessionFile, "utf8");
     return { state: "present" };
   } catch (error) {
     if (isMissingPathError4(error)) return { state: "missing" };
@@ -14786,7 +14558,7 @@ function sessionReadFailure(error, fallbackMessage) {
   return failed;
 }
 async function readBoundSessionEntries(sessionFile) {
-  const text = await readFile17(sessionFile, "utf8");
+  const text = await readFile16(sessionFile, "utf8");
   const entries = [];
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     try {
@@ -14888,7 +14660,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
   for (const childDirectory of childDirectories) {
     let names;
     try {
-      names = await readdir7(childDirectory);
+      names = await readdir6(childDirectory);
       sawAnyDirectory = true;
     } catch (error) {
       if (isMissingPathError4(error)) continue;
@@ -15563,13 +15335,13 @@ async function publishAcceptedTerminalArtifacts(admitted, roleOutcome, coordinat
   const artifactsDir = await ensureTerminalArtifactFace(admitted.runDirectory);
   const reportPath = join26(artifactsDir, "report.json");
   const evidencePath = join26(artifactsDir, "evidence.json");
-  await writeFile7(
+  await writeFile6(
     reportPath,
     `${JSON.stringify(bodies.report, null, 2)}
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(bodies.evidence, null, 2)}
 `,
@@ -16483,7 +16255,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
     const path = candidates[i];
     const payload = issues.length === 0 ? basePayload : { ...basePayload, publicationIssues: issues };
     try {
-      await writeFile7(
+      await writeFile6(
         path,
         `${JSON.stringify(payload, null, 2)}
 `,
@@ -16848,7 +16620,7 @@ var init_seat_ticket_binding = __esm({
 });
 
 // src/session-identity.ts
-import { mkdir as mkdir2, readFile as readFile18, rename as rename2, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir2, readFile as readFile17, rename as rename2, writeFile as writeFile7 } from "node:fs/promises";
 import { dirname as dirname15, join as join27 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
   const bindingPath = (principal) => join27(authority.decode(principal).sessionDirectory, sessionBindingFile);
@@ -16858,7 +16630,7 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
     },
     async load(principal) {
       try {
-        const value = JSON.parse(await readFile18(bindingPath(principal), "utf8"));
+        const value = JSON.parse(await readFile17(bindingPath(principal), "utf8"));
         if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
           throw new Error("durable session binding is invalid");
         }
@@ -16872,7 +16644,7 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
       const target = bindingPath(principal);
       await mkdir2(dirname15(target), { recursive: true });
       const temporary = `${target}.${process.pid}.tmp`;
-      await writeFile8(temporary, `${JSON.stringify({ sessionId })}
+      await writeFile7(temporary, `${JSON.stringify({ sessionId })}
 `, { encoding: "utf8", mode: 384 });
       await rename2(temporary, target);
     }
@@ -17019,7 +16791,7 @@ var init_session_dialogue = __esm({
 
 // src/ticket-provenance.ts
 import { createHash as createHash7 } from "node:crypto";
-import { readFile as readFile19 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname16, join as join28, resolve as resolve12 } from "node:path";
 function dialogueSessionSourceRoots(home) {
   const machineHome = typeof home === "string" && home.trim() !== "" ? home : packageMachineHome();
@@ -17115,7 +16887,7 @@ async function readTicketProvenance(ticketNumber, cwd, home) {
   const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
   let text;
   try {
-    text = await readFile19(recordFile, "utf8");
+    text = await readFile18(recordFile, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") {
       return {
@@ -17595,7 +17367,7 @@ __export(case_dossier_delivery_exports, {
   loadCaseDossierReadingMaterial: () => loadCaseDossierReadingMaterial,
   projectCaseDossierPointerSection: () => projectCaseDossierPointerSection
 });
-import { mkdtemp as mkdtemp3, readFile as readFile20, rm as rm4, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile19, rm as rm4, writeFile as writeFile8 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join29 } from "node:path";
 async function projectCaseDossierPointerSection(input) {
@@ -17627,7 +17399,7 @@ async function deliverCaseDossierAsAttachment(input) {
   const stagingDir = await mkdtemp3(join29(tmpdir3(), "ak-case-dossier-"));
   try {
     const stagingPath = join29(stagingDir, CASE_DOSSIER_ATTACH_FILE);
-    await writeFile9(stagingPath, `${section}
+    await writeFile8(stagingPath, `${section}
 `, "utf8");
     return await freezeAttachmentsIntoRun(
       [stagingPath],
@@ -17647,7 +17419,7 @@ async function loadCaseDossierReadingMaterial(runDirectory) {
   );
   let section;
   try {
-    section = await readFile20(frozenPath, "utf8");
+    section = await readFile19(frozenPath, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -17670,9 +17442,9 @@ var init_case_dossier_delivery = __esm({
 });
 
 // src/host-transition-prior-native.ts
-import { access as access3, readdir as readdir8 } from "node:fs/promises";
+import { access as access3, readdir as readdir7 } from "node:fs/promises";
 import { dirname as dirname17, join as join30 } from "node:path";
-function isEnoent3(error) {
+function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
 async function listPiNativeRecordPaths(sessionFile) {
@@ -17680,7 +17452,7 @@ async function listPiNativeRecordPaths(sessionFile) {
     await access3(sessionFile);
     return [sessionFile];
   } catch (error) {
-    if (isEnoent3(error)) return [];
+    if (isEnoent2(error)) return [];
     throw error;
   }
 }
@@ -17688,9 +17460,9 @@ async function listSitianRecordPaths(sessionParent) {
   const sessionRoot = dirname17(sessionParent);
   let entries;
   try {
-    entries = await readdir8(sessionRoot, { withFileTypes: true });
+    entries = await readdir7(sessionRoot, { withFileTypes: true });
   } catch (error) {
-    if (isEnoent3(error)) return [];
+    if (isEnoent2(error)) return [];
     throw error;
   }
   const recordPaths = [];
@@ -17701,7 +17473,7 @@ async function listSitianRecordPaths(sessionParent) {
       await access3(recordFile);
       recordPaths.push(recordFile);
     } catch (error) {
-      if (!isEnoent3(error)) throw error;
+      if (!isEnoent2(error)) throw error;
     }
   }
   recordPaths.sort();
@@ -17726,42 +17498,6 @@ var init_host_transition_prior_native = __esm({
   }
 });
 
-// src/public-cli/public-run-credentials.ts
-function knownFailureForMissingProviderCredential(model, credentials) {
-  if (model === void 0 || credentials === void 0) return void 0;
-  if (model.provider !== "openai-codex" && model.provider !== "xai") return void 0;
-  if (!missingPublicProviderCredential(model.provider, credentials)) {
-    return void 0;
-  }
-  return {
-    cause: "provider",
-    identity: {
-      name: "MissingProviderCredential",
-      code: model.provider
-    }
-  };
-}
-function missingCredentialPreDispatchFailure(model, credentials) {
-  const knownFailure = knownFailureForMissingProviderCredential(model, credentials);
-  if (knownFailure === void 0) return void 0;
-  return {
-    timedOut: false,
-    code: 1,
-    stderr: `Missing credential for provider ${String(knownFailure.identity?.code ?? "unknown")}`,
-    knownFailure
-  };
-}
-function postRunMissingCredentialFailure(result, model, credentials) {
-  if (!(result.timedOut || result.code !== 0)) return void 0;
-  return knownFailureForMissingProviderCredential(model, credentials);
-}
-var init_public_run_credentials = __esm({
-  "src/public-cli/public-run-credentials.ts"() {
-    "use strict";
-    init_config();
-  }
-});
-
 // src/public-cli/process-cancel.ts
 function processCancelSignalName(signal) {
   if (signal === void 0 || signal.aborted !== true) return void 0;
@@ -18198,7 +17934,7 @@ var init_auto_resume = __esm({
 
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { writeFile as writeFile10 } from "node:fs/promises";
+import { writeFile as writeFile9 } from "node:fs/promises";
 import { isAbsolute as isAbsolute8, join as join32, resolve as resolve13 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
@@ -18210,6 +17946,28 @@ function describeCaughtError(error) {
 function isStationChildOfficerDialogue(role, env) {
   return env.stationChild === true && isOfficerReviewSeat(role);
 }
+function projectRelocatedTurnIdentity(request, result, admitted, relocation) {
+  const rewrite = (value) => rewriteRunDirectoryPathValue(
+    value,
+    relocation.oldRunDirectory,
+    relocation.newRunDirectory
+  );
+  const mutableRequest = request;
+  mutableRequest.runDirectory = admitted.runDirectory;
+  mutableRequest.principal = admitted.principal;
+  const activation = mutableRequest.activation;
+  if (activation !== null && typeof activation === "object" && !Array.isArray(activation)) {
+    for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath", "requestManifestPath"]) {
+      const record4 = activation;
+      if (field in record4) record4[field] = rewrite(record4[field]);
+    }
+  }
+  if (result.terminal !== void 0) {
+    for (const artifact of result.terminal.artifacts) {
+      artifact.path = rewrite(artifact.path);
+    }
+  }
+}
 function withProcessCancelSkipAutoResume(result, signal) {
   if (processCancelSignalName(signal) === void 0) {
     return result;
@@ -18254,8 +18012,8 @@ function withOnceSuccessfulBeforeDispatch(adapters) {
   };
 }
 async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic, io) {
-  io.stderr(formatCliDiagnostic(diagnostic));
   const payload = { diagnostic, recordedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  let retentionFailure;
   try {
     await env.sessionAppender(
       env.principalAuthority,
@@ -18263,24 +18021,26 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
       POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE,
       payload
     );
-    return;
   } catch (appendError) {
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-      await writeFile10(
+      await writeFile9(
         join32(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
         `${JSON.stringify({ version: 1, ...payload }, null, 2)}
 `,
         { encoding: "utf8", flag: "wx" }
       );
     } catch (artifactError) {
-      io.stderr(
-        formatCliDiagnostic(
-          `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`
-        )
-      );
+      retentionFailure = `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`;
     }
   }
+  try {
+    io.stderr(formatCliDiagnostic(diagnostic));
+    if (retentionFailure !== void 0) {
+      io.stderr(formatCliDiagnostic(retentionFailure));
+    }
+  } catch {
+  }
 }
 async function resolveResumeMethodMaterialAdapters(input) {
   if (input.shouldLoad === false) {
@@ -18440,15 +18200,18 @@ async function dispatchPostAdmissionTurn(input) {
         const ticketNumber = asserted === void 0 ? void 0 : asserted.ticketNumber;
         if (ticketNumber !== void 0) await bindAdmittedTicketNumber(admitted, ticketNumber);
       }
+      const relocation = await relocateAdmittedRunToTicket(admitted, env.principalAuthority, lease);
+      if (relocation !== void 0) {
+        projectRelocatedTurnIdentity(request, result, admitted, relocation);
+      }
       if (adapters.afterDispatch !== void 0) await adapters.afterDispatch(admitted, lease);
       return result;
     } catch (error) {
-      const primaryFailure = result.terminal !== void 0 && !isLawfulTypedTerminalOutcome(result.terminal.roleOutcome);
-      if (primaryFailure) {
+      if (result.terminal !== void 0) {
         await recordBestEffortPostDispatchDiagnostic(
           admitted,
           env,
-          `afterDispatch failed beside primary terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+          `afterDispatch failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
           io
         );
         return result;
@@ -18474,23 +18237,6 @@ async function dispatchPostAdmissionTurn(input) {
     }
   };
   try {
-    const missingCredential = missingCredentialPreDispatchFailure(
-      env.model,
-      env.credentials
-    );
-    if (missingCredential !== void 0) {
-      return {
-        ...await presentControlledFailure2(
-          admitted,
-          withEngineDetourInvocationScope(missingCredential, request.invocationScopeId),
-          adapters,
-          env.principalAuthority,
-          io,
-          persistRunState
-        ),
-        ...deferredPersist
-      };
-    }
     let previousHost;
     const liveHost = env.host;
     const principalCoordinates = admitted.principal === void 0 ? void 0 : env.principalAuthority.decode(admitted.principal);
@@ -18598,7 +18344,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     let stderrLogWriteFailure;
     try {
-      await writeFile10(
+      await writeFile9(
         join32(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
@@ -18623,19 +18369,14 @@ async function dispatchPostAdmissionTurn(input) {
     try {
       const sessionFile = admitted.principal !== void 0 ? env.principalAuthority.decode(admitted.principal).sessionFile : "";
       const runnerKnownFailure = adapters.resolveRunnerKnownFailure !== void 0 && sessionFile !== "" ? await adapters.resolveRunnerKnownFailure({ result, sessionFile }) : result.knownFailure;
-      const credentialFailure = postRunMissingCredentialFailure(
-        result,
-        env.model,
-        env.credentials
-      );
       resolution = await resolveAuditedRunnerFailureResolution({
         runner: runnerKnownFailure,
         sessionFile,
-        credential: credentialFailure,
+        credential: void 0,
         runDirectory: admitted.runDirectory
       });
       const processCancelName = processCancelSignalName(env.signal);
-      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || credentialFailure !== void 0 || processCancelName !== void 0;
+      const directHostFailureSignal = result.timedOut || result.knownFailure !== void 0 || runnerKnownFailure !== void 0 || processCancelName !== void 0;
       hostSignalFailed = directHostFailureSignal || result.code !== null && result.code !== 0 || resolution.knownFailure !== void 0;
       settled = await adapters.trySettle(admitted, env.principalAuthority, courtScope);
       if (settled !== void 0) {
@@ -18701,25 +18442,11 @@ async function dispatchPostAdmissionTurn(input) {
         try {
           await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
         } catch (error) {
-          const failed = await settleAfterTurnStarted(
+          await recordBestEffortPostDispatchDiagnostic(
             admitted,
-            withEngineDetourInvocationScope({
-              timedOut: false,
-              code: null,
-              stderr: "",
-              thrown: error,
-              skipRunStateWrite: true
-            }, request.invocationScopeId),
-            adapters,
-            env.principalAuthority,
-            io,
-            persistRunState
-          );
-          return await finishAfterTurn(
-            withProcessCancelSkipAutoResume(
-              { ...failed, turnDispatched: true, ...deferredPersist },
-              env.signal
-            )
+            env,
+            `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+            io
           );
         }
       }
@@ -18800,25 +18527,11 @@ async function dispatchPostAdmissionTurn(input) {
       try {
         await persistReturnedRunState(admitted, env.principalAuthority, { lawful: true });
       } catch (error) {
-        const failed = await settleAfterTurnStarted(
+        await recordBestEffortPostDispatchDiagnostic(
           admitted,
-          withEngineDetourInvocationScope({
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: error,
-            skipRunStateWrite: true
-          }, request.invocationScopeId),
-          adapters,
-          env.principalAuthority,
-          io,
-          persistRunState
-        );
-        return await finishAfterTurn(
-          withProcessCancelSkipAutoResume(
-            { ...failed, turnDispatched: true, ...deferredPersist },
-            env.signal
-          )
+          env,
+          `run-state persistence failed beside host terminal (best-effort continue): ${describeErrorIdentity(error)}`,
+          io
         );
       }
     }
@@ -18830,14 +18543,16 @@ async function dispatchPostAdmissionTurn(input) {
       ...deferredPersist
     });
   } finally {
-    try {
-      await lease.release();
-    } catch (error) {
-      io.stderr(
-        formatCliDiagnostic(
-          `writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`
-        )
-      );
+    if (lease !== void 0) {
+      try {
+        await lease.release();
+      } catch (error) {
+        io.stderr(
+          formatCliDiagnostic(
+            `writer lease release failed unexpectedly (best-effort continue): ${describeErrorIdentity(error)}`
+          )
+        );
+      }
     }
   }
 }
@@ -19152,53 +18867,29 @@ async function runPostAdmissionManualResume(input) {
   } = input;
   let request = input.request;
   const effectiveModel = env.model;
-  let lease;
-  let staleWriterLeaseReclaimed;
-  try {
-    lease = await acquireRunWriterLease(admitted.runDirectory, (diagnostic, kind) => {
-      if (kind === "stale-reclaimed") staleWriterLeaseReclaimed = true;
-      io.stderr(diagnostic);
-    });
-  } catch (error) {
-    if (error instanceof RunWriterLeaseHeldError) {
-      io.stderr(formatCliDiagnostic(error.message));
-      return {
-        exitCode: 1,
-        ...staleWriterLeaseReclaimed === true ? { staleWriterLeaseReclaimed: true } : {}
-      };
-    }
-    throw error;
-  }
   const invocationScopeId = mintEngineDetourInvocationScope({
     ...effectiveEngine === void 0 ? {} : { effectiveEngine }
   });
-  const result = await dispatchAfterWriterLease({
-    lease,
-    build: async () => {
-      if (request === void 0) {
-        if (buildRequestAfterLease === void 0) {
-          throw new Error(
-            "runPostAdmissionManualResume requires request or buildRequestAfterLease"
-          );
-        }
-        request = await buildRequestAfterLease();
-      }
-      request = withEngineDetourInvocationScope(request, invocationScopeId);
-      return request;
+  if (request === void 0) {
+    if (buildRequestAfterLease === void 0) {
+      throw new Error(
+        "runPostAdmissionManualResume requires request or buildRequestAfterLease"
+      );
+    }
+    request = await buildRequestAfterLease();
+  }
+  request = withEngineDetourInvocationScope(request, invocationScopeId);
+  const result = await dispatchPostAdmissionTurn({
+    admitted,
+    env: {
+      ...env,
+      ...effectiveModel === void 0 ? {} : { model: effectiveModel },
+      ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
     },
-    dispatch: (turnRequest) => dispatchPostAdmissionTurn({
-      admitted,
-      env: {
-        ...env,
-        ...effectiveModel === void 0 ? {} : { model: effectiveModel },
-        ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
-      },
-      io,
-      request: turnRequest,
-      lease,
-      adapters,
-      ...effectiveEngine === void 0 ? {} : { effectiveEngine }
-    })
+    io,
+    request,
+    adapters,
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine }
   });
   if (result.terminal !== void 0 && isLawfulTypedTerminalOutcome(result.terminal.roleOutcome)) {
     io.stdout(formatTerminalResult(result.terminal));
@@ -19206,10 +18897,7 @@ async function runPostAdmissionManualResume(input) {
   if (result.terminal !== void 0) {
     result.terminal.autoResumeCount = 0;
   }
-  return {
-    ...result,
-    ...staleWriterLeaseReclaimed === true ? { staleWriterLeaseReclaimed: true } : {}
-  };
+  return result;
 }
 var StationChildExhaustedError, POST_ADMISSION_CLEANUP_DIAGNOSTIC_ENTRY_TYPE;
 var init_post_admission = __esm({
@@ -19222,11 +18910,11 @@ var init_post_admission = __esm({
     init_activation_ledger_topology();
     init_engine_material();
     init_session_identity();
+    init_role_run_relocation();
     init_host_contracts();
     init_case_dossier_delivery();
     init_engine_detour_usage();
     init_host_transition_prior_native();
-    init_public_run_credentials();
     init_run_lifecycle();
     init_process_cancel();
     init_activation_ledger_topology();
@@ -21116,7 +20804,7 @@ __export(public_role_summons_exports, {
   withEphemeralReviewerWorktree: () => withEphemeralReviewerWorktree
 });
 import { execFile as execFile3 } from "node:child_process";
-import { existsSync as existsSync10 } from "node:fs";
+import { existsSync as existsSync9 } from "node:fs";
 import { mkdir as mkdir4, mkdtemp as mkdtemp4, realpath as realpath7, rm as rm5 } from "node:fs/promises";
 import { tmpdir as tmpdir4 } from "node:os";
 import { join as join33, relative as relative3, sep as sep5 } from "node:path";
@@ -21143,7 +20831,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync10(join33(dir, "package.json")) && existsSync10(join33(dir, "souls"))) {
+    if (existsSync9(join33(dir, "package.json")) && existsSync9(join33(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -22052,7 +21740,7 @@ __export(archivist_record_entry_exports, {
 });
 import {
   closeSync,
-  existsSync as existsSync11,
+  existsSync as existsSync10,
   mkdirSync as mkdirSync2,
   openSync,
   readdirSync as readdirSync2,
@@ -22215,7 +21903,7 @@ function mostRecentNavigatorSessionFile(sessionDir, cwd) {
 }
 function resolveNavigatorNestContinuation(sessionDir, cwd) {
   const ledgerPath = currentSessionLedgerPath(sessionDir);
-  if (existsSync11(ledgerPath)) {
+  if (existsSync10(ledgerPath)) {
     const recentFile = readCurrentSession(sessionDir);
     assertRecentFinalFileUnderSessionDir(sessionDir, recentFile);
     return recentFile;
@@ -22300,7 +21988,7 @@ function createRecordSessionOpen(options) {
     parentSession = parentFile;
     mayResumeSameNest = options.kind === WORKER_SUBMISSION_GATE_KIND;
   }
-  const nestAlreadyExists = existsSync11(sessionDir);
+  const nestAlreadyExists = existsSync10(sessionDir);
   ensureRealDirectoryTree(ledgerHome, sessionDir);
   if (mayResumeSameNest && nestAlreadyExists) {
     if (options.kind === NAVIGATOR_RECORD_KIND) {
@@ -22327,7 +22015,7 @@ function createRecordSessionOpen(options) {
   );
   if (session.isPersisted()) {
     const file = session.getSessionFile();
-    if (file !== void 0 && !existsSync11(file)) {
+    if (file !== void 0 && !existsSync10(file)) {
       const header = session.getHeader();
       if (header !== null && header.type === "session") {
         writeFileSync2(file, `${JSON.stringify(header)}
@@ -22381,7 +22069,7 @@ var init_archivist_record_entry = __esm({
 import { randomUUID as randomUUID11 } from "node:crypto";
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile23 } from "node:fs/promises";
+import { readFile as readFile22 } from "node:fs/promises";
 import { join as join40 } from "node:path";
 
 // src/canonical-skill-binding.ts
@@ -23418,7 +23106,7 @@ ${helpContext}
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile21 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 import { resolve as resolve17 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
@@ -23431,7 +23119,7 @@ function navigatorInputReference(getFlag, role) {
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile21(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile20(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -23488,7 +23176,7 @@ async function loadNavigatorWorkContext(options) {
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile21(path, "utf8");
+      const content = await readFile20(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -23980,18 +23668,18 @@ init_collector_evidence();
 init_collector_github();
 
 // src/collector-handbook.ts
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile21 } from "node:fs/promises";
 import { join as join38, sep as sep6 } from "node:path";
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { rename as rename3, rm as rm6, writeFile as writeFile11 } from "node:fs/promises";
+import { rename as rename3, rm as rm6, writeFile as writeFile10 } from "node:fs/promises";
 import { dirname as dirname21, join as join37 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname21(destination);
   const temporary = join37(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
-    await writeFile11(temporary, contents);
+    await writeFile10(temporary, contents);
     await rename3(temporary, destination);
   } catch (error) {
     await rm6(temporary, { force: true }).catch(() => void 0);
@@ -24143,7 +23831,7 @@ function createCollectorHandbookStore(input) {
     ensureRealDirectoryTree(input.ledgerHome, parentDir2);
     assertLedgerFileInsideHome(path, input.ledgerHome);
     try {
-      const body = await readFile22(path, "utf8");
+      const body = await readFile21(path, "utf8");
       assertHandbookBudget(body, "\u6B63\u6587");
       return body;
     } catch (error) {
@@ -25492,7 +25180,7 @@ init_sitian_facade();
 init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
+import { existsSync as existsSync11, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve19 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
@@ -25523,7 +25211,7 @@ function statusOf(error) {
   return typeof error === "object" && error !== null && "status" in error ? error.status : void 0;
 }
 function tryGetAll(file, key) {
-  if (!existsSync12(file)) return [];
+  if (!existsSync11(file)) return [];
   try {
     const out = gitFile(file, ["--get-all", key]);
     return out.length === 0 ? [] : out.split("\n");
@@ -25533,7 +25221,7 @@ function tryGetAll(file, key) {
   }
 }
 function ownedHook(path) {
-  if (!existsSync12(path)) return false;
+  if (!existsSync11(path)) return false;
   return readFileSync5(path, "utf8").includes(HOOK_MARKER);
 }
 function escapeGitConfigValueRegex(value) {
@@ -25560,11 +25248,11 @@ function rmOwnedDir(dir) {
   const hookPath = resolve19(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
-  if (existsSync12(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
+  if (existsSync11(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
   const root = resolve19(commonDir, "worktrees");
-  if (!existsSync12(root)) return [];
+  if (!existsSync11(root)) return [];
   return readdirSync3(root).map((name) => resolve19(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
@@ -27764,12 +27452,12 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile23(path, "utf8"),
+    loadFixPacket: (path) => readFile22(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile23(path, "utf8"),
+    loadCoderTask: (path) => readFile22(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile23(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile22(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -27784,7 +27472,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadSecretariatSoul: () => loadMainRoleSessionMaterials("secretariat"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile23(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile22(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -27810,7 +27498,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile23(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile22(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },
@@ -27822,7 +27510,7 @@ function createRoleRuntimeDependencies(packageRoot) {
 // src/role-envelope.ts
 init_engine_detour();
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { appendFile as appendFile3, mkdir as mkdir6, writeFile as writeFile12 } from "node:fs/promises";
+import { appendFile as appendFile3, mkdir as mkdir6, writeFile as writeFile11 } from "node:fs/promises";
 import { createServer } from "node:net";
 import { dirname as dirname23, join as join42 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
@@ -27920,7 +27608,7 @@ async function requireGatekeeperPass(options) {
 }
 
 // src/host-native-method.ts
-import { access as access4, lstat as lstat7, mkdir as mkdir5, readdir as readdir9, readFile as readFile24, readlink, realpath as realpath8, symlink } from "node:fs/promises";
+import { access as access4, lstat as lstat7, mkdir as mkdir5, readdir as readdir8, readFile as readFile23, readlink, realpath as realpath8, symlink } from "node:fs/promises";
 import { basename as basename10, dirname as dirname22, join as join41 } from "node:path";
 var HOST_METHOD_PLUGIN_NAME = "ak-methods";
 var packagedMethodsDir = (root) => join41(root, "resources", "methods");
@@ -27952,16 +27640,16 @@ function applyCodexSkillInvocation(methods, prompt) {
     prompt
   );
 }
-var isEnoent4 = (error) => error.code === "ENOENT";
+var isEnoent3 = (error) => error.code === "ENOENT";
 async function packagedMethodSkillNames(packagedMethodsRealpath) {
-  const entries = await readdir9(packagedMethodsRealpath, { withFileTypes: true });
+  const entries = await readdir8(packagedMethodsRealpath, { withFileTypes: true });
   const names = [];
   for (const entry of entries) {
     if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
     try {
       await access4(join41(packagedMethodsRealpath, entry.name, "SKILL.md"));
     } catch (error) {
-      if (isEnoent4(error)) continue;
+      if (isEnoent3(error)) continue;
       throw error;
     }
     names.push(entry.name);
@@ -27972,12 +27660,12 @@ async function packagedSkillFileBytes(skillDir) {
   try {
     await access4(join41(skillDir, "SKILL.md"));
   } catch (error) {
-    if (isEnoent4(error)) return void 0;
+    if (isEnoent3(error)) return void 0;
     throw error;
   }
   const files = /* @__PURE__ */ new Map();
   async function walk(dir, prefix) {
-    const entries = await readdir9(dir, { withFileTypes: true });
+    const entries = await readdir8(dir, { withFileTypes: true });
     for (const entry of entries) {
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       const full = join41(dir, entry.name);
@@ -27986,7 +27674,7 @@ async function packagedSkillFileBytes(skillDir) {
         continue;
       }
       if (entry.isFile()) {
-        files.set(rel, await readFile24(full));
+        files.set(rel, await readFile23(full));
       }
     }
   }
@@ -27997,9 +27685,9 @@ async function catalogPublishesPackagedSkill(catalogSkillDir, required) {
   for (const [rel, bytes] of required) {
     let other;
     try {
-      other = await readFile24(join41(catalogSkillDir, rel));
+      other = await readFile23(join41(catalogSkillDir, rel));
     } catch (error) {
-      if (isEnoent4(error)) return false;
+      if (isEnoent3(error)) return false;
       throw error;
     }
     if (!bytes.equals(other)) return false;
@@ -28013,7 +27701,7 @@ async function isCompatibleMethodCatalog(link, packagedMethodsRealpath) {
   try {
     resolved = await realpath8(link);
   } catch (error) {
-    if (isEnoent4(error)) return false;
+    if (isEnoent3(error)) return false;
     throw error;
   }
   if (resolved === packagedMethodsRealpath) return true;
@@ -28034,7 +27722,7 @@ async function installWorkspaceMethodSkills(cwd, packageRoot) {
     await lstat7(link);
     present = true;
   } catch (error) {
-    if (!isEnoent4(error)) throw error;
+    if (!isEnoent3(error)) throw error;
     present = false;
   }
   if (present) {
@@ -28103,7 +27791,7 @@ async function prepareRoleEnvelope(options) {
   await mkdir6(dirname23(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
-      await writeFile12(
+      await writeFile11(
         sessionFile,
         `${JSON.stringify({
           type: "session",
@@ -28911,8 +28599,8 @@ function headlessMcpConfigDocument(mcpServers) {
 // src/headless-host/role-turn-host.ts
 import { spawn as spawn4, spawnSync } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
-import { existsSync as existsSync13 } from "node:fs";
-import { writeFile as writeFile13 } from "node:fs/promises";
+import { existsSync as existsSync12 } from "node:fs";
+import { writeFile as writeFile12 } from "node:fs/promises";
 import { dirname as dirname24, isAbsolute as isAbsolute10, join as join44, resolve as resolve20 } from "node:path";
 
 // src/external-host-turn-loop.ts
@@ -29133,7 +28821,7 @@ function formatCodexFailurePayload(payload) {
 function cwdIsGitWorkTree(cwd) {
   let dir = cwd;
   for (; ; ) {
-    if (existsSync13(join44(dir, ".git"))) return true;
+    if (existsSync12(join44(dir, ".git"))) return true;
     const parent = dirname24(dir);
     if (parent === dir) return false;
     dir = parent;
@@ -29342,7 +29030,7 @@ function createHeadlessRoleTurnHost(config) {
       }
       const env = { ...process.env, ...config.env ?? {} };
       const systemPromptPath = join44(request.runDirectory, "headless-system-prompt.txt");
-      await writeFile13(systemPromptPath, systemPrompt, "utf8");
+      await writeFile12(systemPromptPath, systemPrompt, "utf8");
       let mcpConfigPath;
       let outputSchemaPath;
       let pluginDir;
@@ -29350,7 +29038,7 @@ function createHeadlessRoleTurnHost(config) {
       if (codex) {
         if (prepared.terminatingToolName !== NAVIGATOR_OUTPUT_TOOL_NAME) {
           outputSchemaPath = join44(request.runDirectory, "headless-output-schema.json");
-          await writeFile13(
+          await writeFile12(
             outputSchemaPath,
             `${JSON.stringify(closeJsonSchemaForCodex(prepared.jsonSchema), null, 2)}
 `,
@@ -29359,7 +29047,7 @@ function createHeadlessRoleTurnHost(config) {
         }
       } else {
         mcpConfigPath = join44(request.runDirectory, "headless-mcp-config.json");
-        await writeFile13(
+        await writeFile12(
           mcpConfigPath,
           `${JSON.stringify(headlessMcpConfigDocument(prepared.mcpServers), null, 2)}
 `,