@akagilnc/pi-workflow-roles 0.1.4782 → 0.1.4802

package/dist/headless-host/production-host.js

@@ -417,7 +417,7 @@ function normalizeReviewComment(raw) {
 function createGhApiRunner(options = {}) {
   const spawnImpl = options.spawnImpl ?? spawn;
   return async (args, runOptions = {}) => {
-    return await new Promise((resolve21, reject) => {
+    return await new Promise((resolve22, reject) => {
       const signal = runOptions.signal;
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
@@ -490,11 +490,11 @@ function createGhApiRunner(options = {}) {
               const value = line2.slice(idx + 1).trim();
               headers[name] = value;
             }
-            resolve21({ status, headers, bodyText });
+            resolve22({ status, headers, bodyText });
             return;
           }
           if (code === 0) {
-            resolve21({ status: 200, headers: {}, bodyText: stdout });
+            resolve22({ status: 200, headers: {}, bodyText: stdout });
             return;
           }
           const failure2 = new Error(
@@ -2312,7 +2312,7 @@ async function spawnEngineDetourOnce(input) {
   }
   const command = input.argv[0];
   const args = input.argv.slice(1);
-  return await new Promise((resolve21, reject) => {
+  return await new Promise((resolve22, reject) => {
     let settled = false;
     const signal = input.signal;
     const child = spawn2(command, args, {
@@ -2342,7 +2342,7 @@ async function spawnEngineDetourOnce(input) {
       if (signal !== void 0) {
         signal.removeEventListener("abort", onAbort);
       }
-      resolve21(result);
+      resolve22(result);
     };
     const onAbort = () => {
       fail4(signal !== void 0 ? abortReasonError(signal) : new Error("aborted"));
@@ -3926,7 +3926,7 @@ function piUserDialogueBody(request) {
     const _exhaustive = request.continuation;
     return _exhaustive;
   })();
-  return request.continuation.kind === "resume" && request.activation.role === "reviewer" ? rawPrompt : applyPiNativeSkillInvocation(request.methods, rawPrompt);
+  return request.continuation.kind === "resume" ? rawPrompt : applyPiNativeSkillInvocation(request.methods, rawPrompt);
 }
 async function resolveSelectedPi(command, cwd, env) {
   const searchPath = env.PATH ?? (platform === "win32" ? process.env.PATH ?? "" : "/usr/bin:/bin");
@@ -5047,7 +5047,6 @@ __export(run_lifecycle_exports, {
   acquireRunWriterLease: () => acquireRunWriterLease,
   autopsyWriterLock: () => autopsyWriterLock,
   buildAutoResumeContinuationPrompt: () => buildAutoResumeContinuationPrompt,
-  buildResumeContinuationPrompt: () => buildResumeContinuationPrompt,
   clearCurrentCourt: () => clearCurrentCourt,
   clearTypedProviderHttpObservation: () => clearTypedProviderHttpObservation,
   describeErrorIdentity: () => describeErrorIdentity,
@@ -5084,32 +5083,18 @@ __export(run_lifecycle_exports, {
   recordCurrentCourt: () => recordCurrentCourt,
   recordTypedProviderHttpStatus: () => recordTypedProviderHttpStatus,
   renderResumeCommand: () => renderResumeCommand,
-  selectResumeContinuationPrompt: () => selectResumeContinuationPrompt,
   writeRoleRunState: () => writeRoleRunState
 });
 import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile10, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
 import { basename as basename5, join as join14 } from "node:path";
-function selectResumeContinuationPrompt(message, engineMaterial) {
-  const lines = message !== void 0 ? [message] : [];
-  return appendEngineSessionMaterial(lines, engineMaterial).join("\n");
-}
-function buildResumeContinuationPrompt(options) {
-  return selectResumeContinuationPrompt(
-    options.message,
-    engineSessionMaterialFromOptions({
-      packageRoot: options.packageRoot,
-      ...pickEngineAxis(options)
-    })
-  );
-}
 function buildAutoResumeContinuationPrompt(options) {
-  return selectResumeContinuationPrompt(
-    RESUME_TRANSPORT_ENVELOPE,
+  return appendEngineSessionMaterial(
+    [RESUME_TRANSPORT_ENVELOPE],
     engineSessionMaterialFromOptions({
       packageRoot: options.packageRoot,
       ...pickEngineAxis(options)
     })
-  );
+  ).join("\n");
 }
 function isV1ResumableProvider(provider) {
   return V1_RESUMABLE_PROVIDERS.includes(provider);
@@ -5654,7 +5639,7 @@ async function runHasFormedSessionPrincipal(runDirectory) {
   }
 }
 async function findLatestRunIdForSeatTicket(input) {
-  if (input.ticketNumber === void 0 && input.parentRunPath === void 0) {
+  if (input.parentRunPath.trim() === "") {
     return void 0;
   }
   const ledgerHome = resolveActivationLedgerHome(input.home);
@@ -5673,13 +5658,8 @@ async function findLatestRunIdForSeatTicket(input) {
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
-    if (input.parentRunPath !== void 0) {
-      const parentPath = await readRunParentPath(runDirectory);
-      if (parentPath !== input.parentRunPath) continue;
-    } else if (input.ticketNumber !== void 0) {
-      const ticketNumber = await readBoardTicketNumber(runDirectory);
-      if (ticketNumber !== input.ticketNumber) continue;
-    }
+    const parentPath = await readRunParentPath(runDirectory);
+    if (parentPath !== input.parentRunPath) continue;
     if (!await runHasFormedSessionPrincipal(runDirectory)) continue;
     if (best === void 0 || runId > best) best = runId;
   }
@@ -7542,7 +7522,7 @@ var init_option_definitions = __esm({
       },
       resume: {
         command: "resume",
-        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. [message] applies only to seats that accept caller instruction; Notary/\u7B26\u5B9D\u90CE must omit message and derives evidence from the existing source-run/dossier binding. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
+        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. Every callable seat, including Notary/\u7B26\u5B9D\u90CE, accepts the optional caller message and passes it through unchanged as the continuation prompt. Notary explicit new still accepts only its source-run locator, not a caller prompt. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
         usage: ["ak-role resume <runId> [message]"],
         examples: [
           "ak-role resume 01abc\u2026",
@@ -12139,12 +12119,12 @@ function createSystemCollectorClock() {
   return {
     wallNow: () => /* @__PURE__ */ new Date(),
     monoNow: () => Number(process.hrtime.bigint() - start) / 1e6,
-    sleep: (ms, signal) => new Promise((resolve21, reject) => {
+    sleep: (ms, signal) => new Promise((resolve22, reject) => {
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
         return;
       }
-      const timer = setTimeout(resolve21, ms);
+      const timer = setTimeout(resolve22, ms);
       const onAbort = () => {
         clearTimeout(timer);
         reject(signal?.reason ?? new Error("aborted"));
@@ -16499,10 +16479,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep = ((ms) => new Promise((resolve21) => {
+  const sleep = ((ms) => new Promise((resolve22) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve21();
+      resolve22();
     }, ms);
   }));
   sleep.cancel = () => {
@@ -16514,7 +16494,7 @@ function defaultNavigatorGraceSleep() {
   return sleep;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve22, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -16523,11 +16503,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep
       action();
     };
     void work.then(
-      (value) => finish(() => resolve21({ status: "done", value })),
+      (value) => finish(() => resolve22({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep(graceMs).then(() => {
-      finish(() => resolve21({ status: "timeout" }));
+      finish(() => resolve22({ status: "timeout" }));
     });
   });
 }
@@ -16598,15 +16578,12 @@ var init_settlement = __esm({
 // src/public-cli/seat-ticket-binding.ts
 async function tryResumeSameTicketSeatRun(input) {
   if (input.freshSummons === true) return void 0;
-  if (input.parentRunPath === void 0 && input.ticketNumber === void 0) {
-    return void 0;
-  }
+  if (input.parentRunPath.trim() === "") return void 0;
   const previousRunId = await findLatestRunIdForSeatTicket({
     home: input.home,
     bookKey: resolveBookKeyFromGit(input.projectRoot),
     role: input.role,
-    ...input.parentRunPath === void 0 ? {} : { parentRunPath: input.parentRunPath },
-    ...input.ticketNumber === void 0 ? {} : { ticketNumber: input.ticketNumber }
+    parentRunPath: input.parentRunPath
   });
   if (previousRunId === void 0) return void 0;
   return await input.resume(previousRunId, input.summons);
@@ -17753,22 +17730,10 @@ async function runWithAutoResumeLoop(options) {
   let everyAttemptThrew = true;
   const retainedErrorFiles = [];
   while (true) {
-    let lease;
-    try {
-      lease = await acquireRunWriterLease(
-        options.admitted.runDirectory,
-        (diagnostic) => options.io.stderr(diagnostic)
-      );
-    } catch (error) {
-      if (error instanceof RunWriterLeaseHeldError) {
-        presentStructuralRejection(error, options.io);
-        return { exitCode: 2 };
-      }
-      throw error;
-    }
     let result;
     let turnStartedBeforeThrow = false;
     try {
+      const lease = isFirst ? await acquireRunWriterLease(options.admitted.runDirectory) : void 0;
       result = await options.dispatch(currentPayload, lease, isFirst, dummyIo);
     } catch (error) {
       lastThrownError = error;
@@ -17902,8 +17867,8 @@ async function runWithAutoResumeLoop(options) {
     autoResumeAttempts++;
     if (result?.turnDispatched === true || turnStartedBeforeThrow) {
       currentPayload = options.buildResumePayload();
+      isFirst = false;
     }
-    isFirst = false;
   }
 }
 var dummyIo, TurnDispatchedFailure, DISPATCH_ERROR_RETENTION_ENTRY_TYPE;
@@ -18393,7 +18358,7 @@ async function dispatchPostAdmissionTurn(input) {
             await recordBestEffortPostDispatchDiagnostic(
               admitted,
               env,
-              `current-court cleanup failed after accepted settlement (best-effort continue, self-heals on next resume): ${describeErrorIdentity(error)}`,
+              `current-court cleanup failed after accepted settlement (best-effort continue): ${describeErrorIdentity(error)}`,
               io
             );
           }
@@ -18569,21 +18534,14 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
     } else if (request.summons !== void 0) {
       prompt = request.message;
     } else {
-      prompt = buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...pickEngineAxis(env),
-        message: request.message
-      });
+      prompt = request.message;
     }
   } else if (summonsPrepared !== void 0) {
     prompt = officerDialogue ? summonsPrepared.instructionEmpty ? "" : summonsPrepared.instruction : buildInstructionTransportPrompt(summonsPrepared);
   } else if (request.summons !== void 0) {
     prompt = "";
   } else {
-    prompt = buildResumeContinuationPrompt({
-      packageRoot: env.packageRoot,
-      ...pickEngineAxis(env)
-    });
+    prompt = "";
   }
   return {
     packageRoot: env.packageRoot,
@@ -18608,7 +18566,7 @@ async function dispatchAfterWriterLease(input) {
     handedOffToDispatch = true;
     return await input.dispatch(request);
   } finally {
-    if (!handedOffToDispatch) {
+    if (!handedOffToDispatch && input.lease !== void 0) {
       await input.lease.release();
     }
   }
@@ -18661,20 +18619,11 @@ async function runPostAdmissionSeatResume(input) {
   let preparedCleanup;
   const buildRequestAfterLease = async () => {
     let openCourtAttemptId;
-    let admittedForBuild = loaded.admitted;
+    const admittedForBuild = loaded.admitted;
     if (request.summons === void 0) {
       const openCourt = await readCurrentCourt(admittedForBuild.runDirectory);
       if (openCourt !== void 0) {
         openCourtAttemptId = openCourt.courtAttemptId;
-        request = {
-          runId: request.runId,
-          ...request.message === void 0 ? {} : { message: request.message },
-          ...openCourt.summons === void 0 ? {} : { summons: openCourt.summons }
-        };
-        if (openCourt.summons !== void 0) {
-          const reloaded = await input.load(request);
-          admittedForBuild = reloaded.admitted;
-        }
       }
     }
     if (request.summons !== void 0) {
@@ -18736,7 +18685,7 @@ async function runPostAdmissionSeatResume(input) {
         // Same as public manual resume: prior-court sealed acceptance is not a
         // redispatch brake (#833). New-court station-child turns still auto-resume.
         dispatch: async (payload, lease, _isFirst, attemptIo) => dispatchAfterWriterLease({
-          lease,
+          ...lease === void 0 ? {} : { lease },
           build: async () => {
             if (payload.resumeTurn && firstTurn !== void 0) {
               return {
@@ -18760,7 +18709,7 @@ async function runPostAdmissionSeatResume(input) {
               env,
               io: attemptIo,
               request: turnRequest,
-              lease,
+              ...lease === void 0 ? {} : { lease },
               adapters: stationAdapters,
               persistRunState: false,
               ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
@@ -18846,7 +18795,7 @@ async function runPostAdmissionResumable(input) {
         },
         io: attemptIo,
         request,
-        lease,
+        ...lease === void 0 ? {} : { lease },
         adapters,
         persistRunState: false,
         // #600: every attempt (initial + auto-resume) writes seat engine when present.
@@ -19088,11 +19037,6 @@ async function runPublicNotaryResume(request, env, io) {
     env,
     io,
     load: async (effective) => {
-      if (effective.message !== void 0) {
-        throw new CliUsageError(
-          "notary rejects caller prompt/instruction; only zero caller-prompt continuation admitted"
-        );
-      }
       const loaded = await loadResumableNotaryRun(
         env.home,
         effective.runId,
@@ -19846,29 +19790,7 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
     }
     throw error;
   }
-  const projectRoot = parsed.project ?? env.cwd;
   const handoffTicket = env.boundTicketNumber;
-  if (typeof handoffTicket === "number" && Number.isSafeInteger(handoffTicket) && handoffTicket >= 1) {
-    const summons = {
-      instruction: parsed.instruction,
-      instructionEmpty: parsed.instruction.trim() === "",
-      attachmentPaths: parsed.attachmentPaths
-    };
-    const resumed = await tryResumeSameTicketSeatRun({
-      home: env.home,
-      projectRoot,
-      role: "diarist",
-      ticketNumber: handoffTicket,
-      freshSummons: env.freshSummons,
-      summons,
-      resume: (runId, materials) => runPublicDiaristResume(
-        { runId, ...materials === void 0 ? {} : { summons: materials } },
-        env,
-        io
-      )
-    });
-    if (resumed !== void 0) return resumed;
-  }
   let admitted;
   try {
     admitted = await admitDiaristInvocation({
@@ -19953,7 +19875,6 @@ var init_diarist_run = __esm({
     init_invocation();
     init_post_admission();
     init_run_lifecycle();
-    init_seat_ticket_binding();
     init_settlement();
     init_turn_request();
     init_run_ticket_number();
@@ -19969,6 +19890,7 @@ __export(countersign_run_exports, {
   runPublicCountersign: () => runPublicCountersign,
   runPublicCountersignResume: () => runPublicCountersignResume
 });
+import { resolve as resolve14 } from "node:path";
 function buildCountersignTurnRequest(admitted, options) {
   return projectRoleTurnRequest(
     admitted,
@@ -20163,6 +20085,28 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
     throw error;
   }
   let admitted;
+  const gateParentRunPath = typeof env.parentRunPath === "string" && env.parentRunPath.trim() !== "" ? env.parentRunPath : void 0;
+  if (gateParentRunPath !== void 0) {
+    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction;
+    const resumed = await tryResumeSameTicketSeatRun({
+      home: env.home,
+      projectRoot: resolve14(parsed.project ?? env.cwd),
+      role: "countersign",
+      parentRunPath: gateParentRunPath,
+      freshSummons: env.freshSummons,
+      summons: {
+        sourceRunPath: gateParentRunPath,
+        instruction: resumeInstruction,
+        instructionEmpty: resumeInstruction.trim() === ""
+      },
+      resume: (runId, materials) => runPublicCountersignResume(
+        { runId, ...materials === void 0 ? {} : { summons: materials } },
+        env,
+        io
+      )
+    });
+    if (resumed !== void 0) return resumed;
+  }
   try {
     admitted = await admitCountersignInvocation({
       home: env.home,
@@ -20206,7 +20150,7 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
                 instruction: parsed.instruction,
                 projectRoot: admitted.projectRoot,
                 failureLabel: "unbound summons",
-                // #969: parent durable ticket is the resume/bind key (ADR 0079).
+                // #969: parent durable ticket is the bind key (not a resume lookup).
                 ...env.boundTicketNumber === void 0 ? {} : { boundTicketNumber: env.boundTicketNumber }
               },
               env,
@@ -20262,59 +20206,13 @@ async function runPublicCountersign(argv, env, io, parseCountersignArgv2) {
           } else if (isSafePositiveTicketNumber(env.boundTicketNumber)) {
             typedTicket = env.boundTicketNumber;
           }
-          if (typedTicket !== void 0) {
-            const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction;
-            const summons = {
-              instruction: resumeInstruction,
-              instructionEmpty: resumeInstruction.trim() === ""
-            };
-            const resumed = await tryResumeSameTicketSeatRun({
-              home: env.home,
-              projectRoot: admitted.projectRoot,
-              role: "countersign",
-              ticketNumber: typedTicket,
-              freshSummons: env.freshSummons,
-              summons,
-              resume: async (runId, materials) => {
-                const retained = await loadResumableCountersignRun(
-                  env.home,
-                  runId,
-                  env.principalAuthority
-                );
-                if (retained.admitted === void 0) {
-                  throw new Error(
-                    `retained countersign run disappeared before resume: ${runId}`
-                  );
-                }
-                const frozenPaths = (await freezePreparedAttachmentsIntoRun(
-                  preparedAttachments,
-                  retained.admitted.runDirectory,
-                  `s-${Date.now().toString(36)}`
-                )).map((attachment) => attachment.frozenPath);
-                const preparedMaterials = {
-                  ...materials ?? {},
-                  ...frozenPaths.length === 0 ? {} : { attachmentPaths: frozenPaths }
-                };
-                return await runPublicCountersignResume(
-                  {
-                    runId,
-                    summons: preparedMaterials
-                  },
-                  {
-                    ...env,
-                    ...typedCourtTicketNumbers === void 0 ? {} : { pendingCourtTicketNumbers: typedCourtTicketNumbers }
-                  },
-                  io
-                );
-              }
-            });
-            if (resumed !== void 0) {
-              return resumed;
-            }
-          }
         }
         await materializeAdmission();
         await markRunAdmitted(admitted, env.principalAuthority);
+        if (gateParentRunPath !== void 0) {
+          await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
+          admitted = { ...admitted, sourceRunPath: gateParentRunPath };
+        }
         if (identityDiaristRan && typedTicket !== void 0) {
           try {
             await bindAdmittedTicketNumber(admitted, typedTicket);
@@ -20433,22 +20331,7 @@ async function runPublicCountersignResume(request, env, io) {
         )
       );
     },
-    adapters: countersignAdapters({
-      beforeDispatch: async (admitted) => {
-        if (admitted.courtTicketNumbersDamage !== void 0) {
-          throw new StationChildExhaustedError(
-            admitted.courtTicketNumbersDamage
-          );
-        }
-        if (env.pendingCourtTicketNumbers !== void 0) {
-          await bindCourtTicketNumbersOnAdmitted(
-            admitted,
-            env.pendingCourtTicketNumbers
-          );
-        }
-        await runCountersignCourtDiaristStation(admitted, env, io);
-      }
-    }),
+    adapters: countersignAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
@@ -20476,7 +20359,7 @@ __export(reviewer_run_exports, {
   runPublicReviewer: () => runPublicReviewer,
   runPublicReviewerResume: () => runPublicReviewerResume
 });
-import { resolve as resolve14 } from "node:path";
+import { resolve as resolve15 } from "node:path";
 function reviewerMethods(packageRoot) {
   return [{ kind: "skill", path: resolvePackagedMethodSkillPath(packageRoot, "ak-cross-m-review") }];
 }
@@ -20568,7 +20451,7 @@ async function runPublicReviewer(argv, env, io, parseReviewerArgv2) {
       // Do not substitute the resolved project path — relative --project must
       // not be re-resolved against a shifted cwd.
       cwd: env.cwd,
-      projectRoot: resolve14(parsed.project ?? env.cwd),
+      projectRoot: resolve15(parsed.project ?? env.cwd),
       // Typed base from the public parse — precheck only; child argv stays verbatim.
       baseRevision: parsed.baseRevision,
       home: env.home,
@@ -20741,7 +20624,7 @@ async function runPublicReviewerResume(request, env, io) {
         ...sandbox.executionCwd === void 0 ? {} : { cwd: sandbox.executionCwd },
         continuation: {
           kind: "resume",
-          prompt: reviewerResumePrompt(activeEnv, effective.message)
+          prompt: effective.message ?? ""
         }
       });
     },
@@ -21007,6 +20890,7 @@ async function summonPublicRole(options) {
           ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
           ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
           ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
+          ...options.parentRunPath === void 0 || options.parentRunPath.trim() === "" ? {} : { parentRunPath: options.parentRunPath },
           ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
           ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
           ...options.executionCwd === void 0 ? {} : { executionCwd: options.executionCwd }
@@ -21509,6 +21393,7 @@ async function summonGateOfficer(options) {
       argv: ["--project", options.cwd, "--", instruction],
       ...common,
       correlationId,
+      parentRunPath: options.sourceRunDirectory,
       ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket }
     });
   }
@@ -21750,7 +21635,7 @@ import {
   statSync as statSync3,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname18, resolve as resolve15, join as join35 } from "node:path";
+import { dirname as dirname18, resolve as resolve16, join as join35 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
@@ -21858,8 +21743,8 @@ function parseSessionHeaderLine(line2) {
   };
 }
 function mostRecentNavigatorSessionFile(sessionDir, cwd) {
-  const absoluteSessionDir = resolve15(sessionDir);
-  const absoluteCwd = resolve15(cwd);
+  const absoluteSessionDir = resolve16(sessionDir);
+  const absoluteCwd = resolve16(cwd);
   let names;
   try {
     names = readdirSync2(absoluteSessionDir);
@@ -21894,7 +21779,7 @@ function mostRecentNavigatorSessionFile(sessionDir, cwd) {
     }
     if (header === void 0) continue;
     if (typeof header.cwd !== "string" || header.cwd.length === 0) continue;
-    if (resolve15(header.cwd) !== absoluteCwd) continue;
+    if (resolve16(header.cwd) !== absoluteCwd) continue;
     matched.push({ path: filePath, mtimeMs: st.mtimeMs });
   }
   if (matched.length === 0) return void 0;
@@ -21924,8 +21809,8 @@ function resolveNavigatorNestContinuation(sessionDir, cwd) {
   }
 }
 function assertRecentFinalFileUnderSessionDir(sessionDir, recentFile) {
-  const absoluteSessionDir = resolve15(sessionDir);
-  const absoluteFile = resolve15(recentFile);
+  const absoluteSessionDir = resolve16(sessionDir);
+  const absoluteFile = resolve16(recentFile);
   if (absoluteFile !== absoluteSessionDir && !pathContainedIn(absoluteSessionDir, absoluteFile)) {
     throw new ActivationLedgerError(
       `archivist record session must be under the authorized nest (${sessionDir}): ${recentFile}`
@@ -21980,7 +21865,7 @@ function createRecordSessionOpen(options) {
     throw new Error("Durable record ownership requires a parent session inside the ledger home");
   } else {
     ledgerHome = resolveActivationLedgerHomeForPath(parentFile);
-    const parentResolved = resolve15(parentFile);
+    const parentResolved = resolve16(parentFile);
     if (!physicallyContainedIn(ledgerHome, parentResolved)) {
       throw new Error("Durable record ownership requires a parent session inside the ledger home");
     }
@@ -22147,7 +22032,7 @@ import { createHash as createHash9 } from "node:crypto";
 init_navigator_invocation_identity();
 init_packaged_role_registry();
 init_activation_ledger_topology();
-import { resolve as resolve16 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 import "@earendil-works/pi-coding-agent";
 import { Type as Type13 } from "typebox";
 
@@ -22594,7 +22479,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
-  const resolvedReference = resolve16(cwd, reference);
+  const resolvedReference = resolve17(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
     return subjectRoot;
@@ -23107,7 +22992,7 @@ ${helpContext}
 init_doctor_evidence();
 init_host_contracts();
 import { readFile as readFile20 } from "node:fs/promises";
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve18 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
 init_invocation();
@@ -23115,7 +23000,7 @@ function navigatorInputReference(getFlag, role) {
   if (getFlag === void 0) return void 0;
   const name = packagedRoleInputFlag(role);
   const value = name === void 0 ? void 0 : getFlag(name);
-  return typeof value === "string" && value !== "" ? resolve17(value) : void 0;
+  return typeof value === "string" && value !== "" ? resolve18(value) : void 0;
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
@@ -23136,7 +23021,7 @@ async function loadNavigatorWorkContext(options) {
   }
   const publicRunDir = runDirectoryFromHostContext(options.context);
   const currentSessionDir = options.context.sessionManager.getSessionDir();
-  const isBoundPublicRun = publicRunDir !== void 0 && resolve17(currentSessionDir) === resolve17(publicRunDir, "session");
+  const isBoundPublicRun = publicRunDir !== void 0 && resolve18(currentSessionDir) === resolve18(publicRunDir, "session");
   if (options.role === "judge" && isBoundPublicRun) {
     let admitted;
     try {
@@ -23169,9 +23054,9 @@ async function loadNavigatorWorkContext(options) {
   }
   const workRoot = subjectRoot.includes("/.ak/work/") ? subjectRoot : void 0;
   const authorityFiles = workRoot === void 0 ? [] : [
-    resolve17(workRoot, "authority.md"),
-    resolve17(workRoot, "authority.txt"),
-    resolve17(workRoot, "design-v2/owner-direction.md")
+    resolve18(workRoot, "authority.md"),
+    resolve18(workRoot, "authority.txt"),
+    resolve18(workRoot, "design-v2/owner-direction.md")
   ];
   let authorityMaterial;
   for (const path of authorityFiles) {
@@ -23287,7 +23172,7 @@ import {
   statSync as statSync4,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { isAbsolute as isAbsolute9, resolve as resolve18 } from "node:path";
+import { isAbsolute as isAbsolute9, resolve as resolve19 } from "node:path";
 var ActivationSessionFileMissingError = class extends Error {
   code = "AK_ACTIVATION_SESSION_FILE_MISSING";
   path;
@@ -23332,7 +23217,7 @@ function durableSessionPointer(sessionManager) {
       `Workflow role activation requires an absolute durable session file path; got relative path: ${file}`
     );
   }
-  const resolvedFile = resolve18(file);
+  const resolvedFile = resolve19(file);
   try {
     lstatSync2(resolvedFile);
   } catch (error) {
@@ -25181,7 +25066,7 @@ init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync11, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
-import { resolve as resolve19 } from "node:path";
+import { resolve as resolve20 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
 var WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE = "commit-reminder-bounce";
@@ -25230,7 +25115,7 @@ function escapeGitConfigValueRegex(value) {
 function unsetOwnedHooksPath(file) {
   const owned = [];
   for (const value of tryGetAll(file, "core.hooksPath")) {
-    if (!ownedHook(resolve19(value, HOOK_FILE))) continue;
+    if (!ownedHook(resolve20(value, HOOK_FILE))) continue;
     try {
       gitFile(file, [
         "--unset-all",
@@ -25245,15 +25130,15 @@ function unsetOwnedHooksPath(file) {
   return owned;
 }
 function rmOwnedDir(dir) {
-  const hookPath = resolve19(dir, HOOK_FILE);
+  const hookPath = resolve20(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
   if (existsSync11(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
-  const root = resolve19(commonDir, "worktrees");
+  const root = resolve20(commonDir, "worktrees");
   if (!existsSync11(root)) return [];
-  return readdirSync3(root).map((name) => resolve19(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
+  return readdirSync3(root).map((name) => resolve20(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
   let inside;
@@ -25267,14 +25152,14 @@ function uninstallPackageWorkerHooks(cwd) {
   const clear = (configFile) => {
     for (const hooks of unsetOwnedHooksPath(configFile)) rmOwnedDir(hooks);
   };
-  clear(resolve19(commonDir, "config"));
-  clear(resolve19(commonDir, "config.worktree"));
-  rmOwnedDir(resolve19(commonDir, HOOKS_DIR));
-  const legacy = resolve19(commonDir, "hooks", HOOK_FILE);
+  clear(resolve20(commonDir, "config"));
+  clear(resolve20(commonDir, "config.worktree"));
+  rmOwnedDir(resolve20(commonDir, HOOKS_DIR));
+  const legacy = resolve20(commonDir, "hooks", HOOK_FILE);
   if (ownedHook(legacy)) rmSync(legacy, { force: true });
   for (const gitDir of linkedGitDirs(commonDir)) {
-    clear(resolve19(gitDir, "config.worktree"));
-    rmOwnedDir(resolve19(gitDir, HOOKS_DIR));
+    clear(resolve20(gitDir, "config.worktree"));
+    rmOwnedDir(resolve20(gitDir, HOOKS_DIR));
   }
 }
 function isRecord15(value) {
@@ -26432,11 +26317,15 @@ function createSecretariatRoleRuntime(roleHost, dependencies, hostActions) {
             const summoned = summon === void 0 ? await (async () => {
               const coordinates = readRoleRunCoordinates(ctx, "secretariat summons");
               const { summonPublicRole: summonPublicRole2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+              const { readBoardTicketNumber: readBoardTicketNumber2 } = await Promise.resolve().then(() => (init_run_ticket_number(), run_ticket_number_exports));
+              const parentTicket = await readBoardTicketNumber2(coordinates.runDirectory);
               return summonPublicRole2({
                 role: "countersign",
                 argv: ["--project", coordinates.projectRoot, "--", instruction],
                 cwd: coordinates.projectRoot,
                 home: coordinates.home,
+                parentRunPath: coordinates.runDirectory,
+                ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket },
                 ...signal === void 0 ? {} : { signal },
                 ...correlationId === void 0 ? {} : { correlationId },
                 ...dependencies.packageRoot === void 0 ? {} : { packageRoot: dependencies.packageRoot },
@@ -27748,11 +27637,11 @@ init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
 async function listen(server, path) {
-  await new Promise((resolve21, reject) => {
+  await new Promise((resolve22, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve21();
+      resolve22();
     });
   });
 }
@@ -28194,8 +28083,8 @@ async function prepareRoleEnvelope(options) {
     try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
-      await new Promise((resolve21, reject) => {
-        server.close((error) => error ? reject(error) : resolve21());
+      await new Promise((resolve22, reject) => {
+        server.close((error) => error ? reject(error) : resolve22());
       });
     } catch (error) {
       cleanupFailures.push(error);
@@ -28601,7 +28490,7 @@ import { spawn as spawn4, spawnSync } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync12 } from "node:fs";
 import { writeFile as writeFile12 } from "node:fs/promises";
-import { dirname as dirname24, isAbsolute as isAbsolute10, join as join44, resolve as resolve20 } from "node:path";
+import { dirname as dirname24, isAbsolute as isAbsolute10, join as join44, resolve as resolve21 } from "node:path";
 
 // src/external-host-turn-loop.ts
 init_host_contracts();
@@ -28850,10 +28739,10 @@ function resolveGitCommonDir(cwd) {
   if (raw === "") {
     throw new Error("git rev-parse --git-common-dir returned empty stdout");
   }
-  return isAbsolute10(raw) ? raw : resolve20(cwd, raw);
+  return isAbsolute10(raw) ? raw : resolve21(cwd, raw);
 }
 function spawnHeadlessTurn(options) {
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve22, reject) => {
     if (options.signal?.aborted) {
       reject(hostAbortedError("headless host aborted"));
       return;
@@ -28928,7 +28817,7 @@ function spawnHeadlessTurn(options) {
         reject(stdinDeliveryError);
         return;
       }
-      resolve21({ code, stdout: resultStdout, stderr, timedOut });
+      resolve22({ code, stdout: resultStdout, stderr, timedOut });
     };
     const onAbort = () => {
       child.kill("SIGTERM");
@@ -29104,7 +28993,7 @@ function createHeadlessRoleTurnHost(config) {
               args,
               cwd: request.cwd,
               env,
-              stdin: applyMethodPrompt(prompt),
+              stdin: request.continuation.kind === "resume" ? prompt : applyMethodPrompt(prompt),
               ...abortSignal === void 0 ? {} : { signal: abortSignal },
               ...request.timeoutMs === void 0 ? {} : { timeoutMs: request.timeoutMs },
               onStdoutLine(line2) {
@@ -29116,6 +29005,7 @@ function createHeadlessRoleTurnHost(config) {
                 } catch {
                   return;
                 }
+                codexObserver?.observe(event);
                 reportHostSessionEvent({
                   host: config.hostName,
                   cwd: request.cwd,
@@ -29123,12 +29013,22 @@ function createHeadlessRoleTurnHost(config) {
                   source: "headless-host",
                   event
                 });
-                codexObserver?.observe(event);
               }
             });
           } catch (error) {
             if (isHostAbortedError(error)) throw error;
             const message = error instanceof Error ? error.message : String(error);
+            const observedHostFailure = codexObserver?.result().failureDiagnostic;
+            if (observedHostFailure !== void 0) {
+              return {
+                status: "terminal",
+                result: failure("output", "HeadlessCliError", "codex-turn-failed", {
+                  diagnostic: observedHostFailure,
+                  sessionRecordDiagnostic: message,
+                  sessionId
+                }, observedHostFailure)
+              };
+            }
             const isRecordFailure = typeof error === "object" && error !== null && (error.knownCause === "session" || error.name === "SitianInfrastructureError");
             if (isRecordFailure) {
               return {
@@ -29159,22 +29059,28 @@ function createHeadlessRoleTurnHost(config) {
           }
           if (codex) {
             const observation = codexObserver.result();
-            if (observation.threadId === void 0 || observation.threadId === "") {
-              return terminalFromSpawned(spawned, {
-                cause: "session",
-                identity: { name: "HeadlessMissingThreadId", code: "missing-thread-id" },
-                diagnostic: "codex exec emitted no thread.started thread_id",
-                details: { sessionId, exitCode: spawned.code }
-              });
+            if (observation.threadId !== void 0 && observation.threadId !== "") {
+              sessionId = observation.threadId;
+            }
+            let sessionBindingDiagnostic;
+            const hostFailed = observation.failureDiagnostic !== void 0 || spawned.code !== 0 && spawned.code !== null;
+            if (hostFailed && observation.threadId !== void 0 && observation.threadId !== "") {
+              try {
+                await config.sessionIdentity.bind(request.principal, observation.threadId);
+              } catch (error) {
+                sessionBindingDiagnostic = error instanceof Error ? error.message : String(error);
+              }
             }
-            sessionId = observation.threadId;
-            await config.sessionIdentity.bind(request.principal, sessionId);
             if (observation.failureDiagnostic !== void 0) {
               return terminalFromSpawned(spawned, {
                 cause: "output",
                 identity: { name: "HeadlessCliError", code: "codex-turn-failed" },
                 diagnostic: observation.failureDiagnostic,
-                details: { sessionId, exitCode: spawned.code }
+                details: {
+                  sessionId,
+                  exitCode: spawned.code,
+                  ...sessionBindingDiagnostic === void 0 ? {} : { sessionBindingDiagnostic }
+                }
               });
             }
             if (spawned.code !== 0 && spawned.code !== null) {
@@ -29182,9 +29088,23 @@ function createHeadlessRoleTurnHost(config) {
                 cause: "output",
                 identity: { name: "HeadlessCliError", code: "codex-nonzero-exit" },
                 diagnostic: spawned.stderr.trim() || `codex exec exited ${String(spawned.code)}`,
+                details: {
+                  sessionId,
+                  exitCode: spawned.code,
+                  ...sessionBindingDiagnostic === void 0 ? {} : { sessionBindingDiagnostic }
+                }
+              });
+            }
+            if (observation.threadId === void 0 || observation.threadId === "") {
+              return terminalFromSpawned(spawned, {
+                cause: "session",
+                identity: { name: "HeadlessMissingThreadId", code: "missing-thread-id" },
+                diagnostic: "codex exec emitted no thread.started thread_id",
                 details: { sessionId, exitCode: spawned.code }
               });
             }
+            sessionId = observation.threadId;
+            await config.sessionIdentity.bind(request.principal, sessionId);
             if (!observation.turnCompleted) {
               return terminalFromSpawned(spawned, {
                 cause: "output",