@akagilnc/pi-workflow-roles 0.1.4782 → 0.1.4802

package/src/public-cli/post-admission.ts

@@ -11,7 +11,6 @@ import { isAbsolute, join, resolve } from "node:path";
 
 import {
   buildAutoResumeContinuationPrompt,
-  buildResumeContinuationPrompt,
   RESUME_TRANSPORT_ENVELOPE,
   type PublicResumeRequest,
   type SameTicketSummonsMaterials,
@@ -1103,15 +1102,12 @@ export async function dispatchPostAdmissionTurn<
             // Settlement already sealed accepted — a cleanup failure here must
             // not erase that fact or make the caller replay this court's
             // summons over already-delivered work (#840 已交劳动只整理终局不重做).
-            // A later bare resume self-heals: buildRequestAfterLease finds the
-            // open court already sealed and clears it then (documented
-            // continue-under-failure contract, not a swallow — 失败诚实宪法 真因
-            // 必须落痕) — durably, since every auto-resume attempt's io here is
-            // dummyIo (#840 r9 判词 class 1).
+            // Preserve the cleanup failure as a post-dispatch diagnostic; the
+            // accepted settlement remains authoritative (#840 r9 判词 class 1).
             await recordBestEffortPostDispatchDiagnostic(
               admitted,
               env,
-              `current-court cleanup failed after accepted settlement (best-effort continue, self-heals on next resume): ${describeErrorIdentity(error)}`,
+              `current-court cleanup failed after accepted settlement (best-effort continue): ${describeErrorIdentity(error)}`,
               io,
             );
           }
@@ -1310,8 +1306,7 @@ export async function dispatchPostAdmissionTurn<
 /**
  * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755 / #879):
  * seat-table model/engine/timeout axes, restored correlation, and either
- * - manual resume (no same-ticket summons): package envelope / optional caller
- *   message, with engine-axis handbook via buildResumeContinuationPrompt, or
+ * - manual resume (no same-ticket summons): caller message bytes, or
  * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
  *   attachment paths only — no「请重读」、no code-authored content substitute,
  *   no engine handbook packaging (#750/#755/#879).
@@ -1351,12 +1346,7 @@ export function resumeTurnRequestProjectionOptions(
       // #755: same-ticket summons without prepared materials — caller words only.
       prompt = request.message;
     } else {
-      // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
-      prompt = buildResumeContinuationPrompt({
-        packageRoot: env.packageRoot,
-        ...pickEngineAxis(env),
-        message: request.message,
-      });
+      prompt = request.message;
     }
   } else if (summonsPrepared !== undefined) {
     // #879 station-child officer: instruction bytes === peer body/reask (no wrap).
@@ -1369,11 +1359,7 @@ export function resumeTurnRequestProjectionOptions(
     // only). Pointer is activation/sourceRun material — not dialogue content.
     prompt = "";
   } else {
-    // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
-    prompt = buildResumeContinuationPrompt({
-      packageRoot: env.packageRoot,
-      ...pickEngineAxis(env),
-    });
+    prompt = "";
   }
   return {
     packageRoot: env.packageRoot,
@@ -1395,12 +1381,13 @@ export function resumeTurnRequestProjectionOptions(
 }
 
 /**
- * Hold the writer lease through after-lease build, then hand off to dispatch.
- * Builder (or any throw before dispatch) must release here — dispatch's finally
- * only runs after this handoff (manual resume and station-child auto-resume).
+ * Build the turn request, then hand off to dispatch. When a writer lease is
+ * held, release it if build throws before handoff — dispatch's finally only
+ * runs after this handoff (manual resume and station-child auto-resume).
+ * #987: lease is optional; auto-resume no longer pre-acquires before host CLI.
  */
 async function dispatchAfterWriterLease<T>(input: {
-  lease: RunWriterLease;
+  lease?: RunWriterLease;
   build: () => Promise<RoleTurnRequest>;
   dispatch: (request: RoleTurnRequest) => Promise<T>;
 }): Promise<T> {
@@ -1410,7 +1397,7 @@ async function dispatchAfterWriterLease<T>(input: {
     handedOffToDispatch = true;
     return await input.dispatch(request);
   } finally {
-    if (!handedOffToDispatch) {
+    if (!handedOffToDispatch && input.lease !== undefined) {
       await input.lease.release();
     }
   }
@@ -1430,7 +1417,7 @@ function isAlreadyFrozenSummonsAttachment(
  * Freeze same-ticket summons attachments into the retained run directory (#637).
  * No-op materials (no paths / instruction-only) skip the freeze.
  * Paths already under this run's attachments/ are the accepted freeze identity —
- * reuse them; do not re-freeze from external originals on bare resume.
+ * reuse them for the same internal re-summons flow.
  * Manual resume never calls this — old attachment semantics stay intact.
  */
 export async function prepareSummonsResumeMaterials(
@@ -1464,16 +1451,15 @@ export async function prepareSummonsResumeMaterials(
 }
 
 /**
- * Shared manual-resume orchestration for seats whose continuation is the
- * package resume envelope (#599 / #633): load once → structural rejection →
+ * Shared manual-resume orchestration for seats (#599 / #633):
+ * load once → structural rejection →
  * optional seat afterAdmittedLoad (method material / controlled failure) →
  * seat turn projection → station-child auto-resume or public manual resume.
  * Seat-owned loader
  * validation, turn builder, and adapters stay on the seat.
  *
- * Court open/recovery transaction (#637): under the existing writer lease,
- * read currentCourt, judge seal, clear (bound to the judged court id), freeze,
- * and record. No pre-lease clear or stale court-snapshot consumption.
+ * Court handling (#637): public manual resume reads only the open court's
+ * settlement identity; internal re-summons may freeze and record its materials.
  */
 export async function runPostAdmissionSeatResume<
   A extends AdmittedRoleInvocation,
@@ -1482,7 +1468,7 @@ export async function runPostAdmissionSeatResume<
   request: PublicResumeRequest;
   env: PostAdmissionEnv;
   io: CliIo;
-  /** Load admitted state; receives the effective resume request (may carry rehydrated summons). */
+  /** Load admitted state from the caller's resume request. */
   load: (request: PublicResumeRequest) => Promise<{ admitted: A }>;
   /** Build turn from admitted + effective request (summons ride existing projection). */
   buildTurnRequest: (
@@ -1494,8 +1480,7 @@ export async function runPostAdmissionSeatResume<
    * After the single pre-lease load. Factory seats resolve method-material
    * adapters here via resolveResumeMethodMaterialAdapters (or short-circuit
    * with the same controlled-failure face as initial). Must not re-load the
-   * same admitted; under-lease summons rehydrate remains the only second load,
-   * and only when materials change.
+   * same admitted.
    */
   afterAdmittedLoad?: (
     admitted: A,
@@ -1517,7 +1502,7 @@ export async function runPostAdmissionSeatResume<
   // Load once for runDirectory / structural rejection / afterAdmittedLoad.
   // Court identity for public manual resume is judged in the turn builder
   // (#987: no package writer-lease gate before host CLI resume). Station-child
-  // auto-resume still acquires the shared lease in runWithAutoResumeLoop.
+  // auto-resume shares that rule via runWithAutoResumeLoop (no pre-acquire).
   let loaded;
   try {
     loaded = await input.load(request);
@@ -1548,34 +1533,19 @@ export async function runPostAdmissionSeatResume<
 
   const buildRequestAfterLease = async (): Promise<RoleTurnRequest> => {
         let openCourtAttemptId: string | undefined;
-        // Build uses the admitted for this resume (rehydrated when open court
-        // materials ride). Settlement identity stays on the outer admitted.
-        // Name kept for station-child callers that still build under lease.
-        let admittedForBuild = loaded.admitted;
+        // Settlement identity stays on the outer admitted.
+        const admittedForBuild = loaded.admitted;
 
-        // Bare resume: open-court pointer is the continue signal (not ledger seal).
+        // Bare resume keeps the open court's settlement identity, but public resume
+        // never re-delivers the prior summons or its attachments (#987).
         if (request.summons === undefined) {
           const openCourt = await readCurrentCourt(admittedForBuild.runDirectory);
           if (openCourt !== undefined) {
             openCourtAttemptId = openCourt.courtAttemptId;
-            request = {
-              runId: request.runId,
-              ...(request.message === undefined
-                ? {}
-                : { message: request.message }),
-              ...(openCourt.summons === undefined
-                ? {}
-                : { summons: openCourt.summons }),
-            };
-            if (openCourt.summons !== undefined) {
-              const reloaded = await input.load(request);
-              admittedForBuild = reloaded.admitted;
-            }
           }
         }
 
-        // Freeze external paths once; rewrite summons to the frozen identity so
-        // currentCourt + later bare resume reuse the accepted snapshot.
+        // Internal re-summons freezes external paths once and records that identity.
         if (request.summons !== undefined) {
           const prepared = await prepareSummonsResumeMaterials(
             admittedForBuild.runDirectory,
@@ -1626,10 +1596,10 @@ export async function runPostAdmissionSeatResume<
     return turnRequest;
   };
 
-  // Court recovery / open, then dispatch. Public manual resume does not take a
-  // package writer lease before the host CLI (#987 / ADR 0080 one-shot).
-  // Station-child same-ticket/same-parent resume is call-local auto-resume
-  // (#840 / #416) and still acquires the shared lease in its loop.
+  // Court recovery / open, then dispatch. Public manual resume and station-child
+  // auto-resume both pass through to the host CLI without a package writer-lease
+  // pre-gate (#987 / ADR 0080). Station-child same-ticket/same-parent resume is
+  // still call-local auto-resume (#840 / #416).
   // afterAdmittedPrepare runs inside this try so mint failure and cleanup share one finally.
   try {
     if (input.afterAdmittedPrepare !== undefined) {
@@ -1664,14 +1634,13 @@ export async function runPostAdmissionSeatResume<
         // redispatch brake (#833). New-court station-child turns still auto-resume.
         dispatch: async (payload, lease, _isFirst, attemptIo) =>
           dispatchAfterWriterLease({
-            lease,
+            ...(lease === undefined ? {} : { lease }),
             build: async () => {
               // #840 r8 判词 class 2: this call-local retry must keep this
               // court's frozen summons / 交卷 body / attachments verbatim
               // (same object as firstTurn) and project only the minimal
-              // host-needed resume trigger — never the manual-resume engine
-              // handbook (buildResumeContinuationPrompt), which would replace
-              // a 审核循环 same-ticket continuation with a bare outsourcing
+              // host-needed resume trigger — never engine handbook material,
+              // which would replace a 审核循环 same-ticket continuation with a bare outsourcing
               // 「重新读」 envelope (#755 contract, resumeTurnRequestProjectionOptions
               // above). RESUME_TRANSPORT_ENVELOPE is the same package-owned,
               // non-semantic trigger that projection already uses for a
@@ -1698,7 +1667,7 @@ export async function runPostAdmissionSeatResume<
                 env,
                 io: attemptIo,
                 request: turnRequest,
-                lease,
+                ...(lease === undefined ? {} : { lease }),
                 adapters: stationAdapters,
                 persistRunState: false,
                 ...(input.effectiveEngine === undefined
@@ -1727,8 +1696,7 @@ export async function runPostAdmissionSeatResume<
       buildRequestAfterLease,
     });
   } catch (error) {
-    // Open-court rehydrate load under lease may still surface seat structural
-    // rejection (e.g. notary rejects caller message) — same exit face as pre-lease.
+    // Seat preparation may still surface structural rejection.
     if (error instanceof CliUsageError) {
       presentStructuralRejection(error, input.io);
       return { exitCode: 2 };
@@ -1836,7 +1804,7 @@ export async function runPostAdmissionResumable<
         },
         io: attemptIo,
         request,
-        lease,
+        ...(lease === undefined ? {} : { lease }),
         adapters,
         persistRunState: false,
         // #600: every attempt (initial + auto-resume) writes seat engine when present.
@@ -1851,8 +1819,8 @@ export async function runPostAdmissionResumable<
  * Manual resume: pass-through to the host CLI resume — no package writer-lease
  * pre-gate (#987), no sealed-accepted short-circuit (#833 / #416). Court open
  * (summons / message / open court) is built when using buildRequestAfterLease;
- * sole-final stays per-attempt. Station-child auto-resume keeps shared lease
- * acquire in runWithAutoResumeLoop + dispatchAfterWriterLease.
+ * sole-final stays per-attempt. Station-child auto-resume shares the same
+ * no-pre-gate rule via runWithAutoResumeLoop + dispatchAfterWriterLease.
  */
 export async function runPostAdmissionManualResume<
   A extends AdmittedRoleInvocation,

package/src/public-cli/reviewer-run.ts

@@ -440,7 +440,7 @@ export async function runPublicReviewerResume(
         ...(sandbox.executionCwd === undefined ? {} : { cwd: sandbox.executionCwd }),
         continuation: {
           kind: "resume",
-          prompt: reviewerResumePrompt(activeEnv, effective.message),
+          prompt: effective.message ?? "",
         },
       });
     },

package/src/public-cli/run-lifecycle.ts

@@ -17,10 +17,7 @@ import {
   resolveActivationLedgerHome,
 } from "../activation-ledger-topology.ts";
 import { listBookRunDirectories } from "../role-run-placement.ts";
-import {
-  isSafePositiveTicketNumber,
-  readBoardTicketNumber,
-} from "../run-ticket-number.ts";
+import { isSafePositiveTicketNumber } from "../run-ticket-number.ts";
 import { CliUsageError } from "./cli-errors.ts";
 import {
   readLatestTypedProviderHttpObservation,
@@ -48,7 +45,6 @@ import {
   appendEngineSessionMaterial,
   engineSessionMaterialFromOptions,
   pickEngineAxis,
-  type EngineSessionMaterial,
 } from "../package-resources/engine-material.ts";
 import type { PublicThinkingLevel } from "./registry.ts";
 import {
@@ -135,11 +131,8 @@ export type RoleRunRecord = {
  * Package-owned non-empty Chinese neutral resume transport (#959 / ADR 0073).
  * Used by:
  *   - auto-resume (all seats via buildAutoResumeContinuationPrompt) — required so
- *     hosts that reject empty stdin (codex) still receive a prompt;
- *   - reviewer seat manual resume (reviewerResumePrompt) — same non-empty need on
- *     that seat's own manual entry.
- * Generic bare `ak-role resume` stays empty-capable via selectResumeContinuationPrompt
- * / buildResumeContinuationPrompt — ADR 0080 keeps auto and generic-manual entries separate.
+ *     hosts that reject empty stdin (codex) still receive a prompt.
+ * Public manual resume forwards only the caller's bytes (#987).
  */
 export const RESUME_TRANSPORT_ENVELOPE = "继续。" as const;
 
@@ -151,15 +144,15 @@ export type PublicResumeRequest = {
   /**
    * Same-ticket re-summons materials (#637). Present only when a public seat
    * re-enters via the summons face — never from `ak-role resume`.
-   * Manual resume keeps package envelope / caller message semantics unchanged.
+   * Manual resume forwards only caller-supplied bytes and never re-delivers them.
    */
   readonly summons?: SameTicketSummonsMaterials;
 };
 
 /**
  * Open court turn on a retained run (#637).
- * courtAttemptId + the same summons materials shape already used by re-summons.
- * Bare resume rehydrates request.summons and rides existing load/buildTurnRequest.
+ * courtAttemptId identifies settlement across later public manual resume calls.
+ * Summons materials belong only to the internal re-summons face.
  * Cleared when this courtAttemptId seals.
  */
 export type CurrentCourtState = {
@@ -181,40 +174,6 @@ export type SameTicketSummonsMaterials = {
   readonly sourceRun?: NotarySourceRunLocator;
 };
 
-/**
- * Manual resume continuation selector (#471 / #600 / #736 / ADR 0080).
- * Message present → those bytes; absent → engine pointers only (may be empty).
- * Caller message (including blank) still wins verbatim when supplied.
- * Auto-resume must use buildAutoResumeContinuationPrompt — do not fold the
- * non-empty Chinese envelope into this shared manual selector (#959).
- */
-export function selectResumeContinuationPrompt(
-  message?: string,
-  engineMaterial?: EngineSessionMaterial,
-): string {
-  const lines = message !== undefined ? [message] : [];
-  return appendEngineSessionMaterial(lines, engineMaterial).join("\n");
-}
-
-/**
- * Manual resume continuation with engine material from the seat env (#600).
- * Bare manual resume stays empty-prompt-capable; auto-resume is a separate entry.
- */
-export function buildResumeContinuationPrompt(options: {
-  packageRoot: string;
-  engine?: string;
-  engineModel?: string;
-  message?: string;
-}): string {
-  return selectResumeContinuationPrompt(
-    options.message,
-    engineSessionMaterialFromOptions({
-      packageRoot: options.packageRoot,
-      ...pickEngineAxis(options),
-    }),
-  );
-}
-
 /**
  * Auto-resume continuation only (#959 / ADR 0080).
  * Always non-empty: Chinese neutral envelope plus optional engine pointers.
@@ -225,13 +184,13 @@ export function buildAutoResumeContinuationPrompt(options: {
   engine?: string;
   engineModel?: string;
 }): string {
-  return selectResumeContinuationPrompt(
-    RESUME_TRANSPORT_ENVELOPE,
+  return appendEngineSessionMaterial(
+    [RESUME_TRANSPORT_ENVELOPE],
     engineSessionMaterialFromOptions({
       packageRoot: options.packageRoot,
       ...pickEngineAxis(options),
     }),
-  );
+  ).join("\n");
 }
 
 const RUN_STATE_FILE = "run-state.json";
@@ -672,8 +631,7 @@ export async function markRunTerminal(runDirectory: string): Promise<void> {
   if (current === undefined) {
     throw new Error("cannot mark terminal: run state missing");
   }
-  // Preserve open currentCourt: terminal after a failed/incomplete court must still
-  // let bare resume continue that court (#637).
+  // Preserve the open court's settlement identity after a failed/incomplete turn (#637).
   await writeRoleRunStateDisk(runDirectory, {
     runId: current.runId,
     role: current.role,
@@ -1183,19 +1141,19 @@ async function runHasFormedSessionPrincipal(runDirectory: string): Promise<boole
 /**
  * Locate the latest retained run for one seat under a book (#637 / #747).
  * Same walk surface as findRunDirectoryById (listBookRunDirectories). Match by
- * parent run path (officer seats, #747) or by ticket number (countersign /
- * diarist principal). runId is UUIDv7 — lexicographic max is latest among runs
- * that formed a session principal. No parallel index.
+ * parent run path (officer / gate seats, #747 / #987). runId is UUIDv7 —
+ * lexicographic max is latest among runs that formed a session principal. No
+ * parallel index. Public ticket-number selection of a prior run was deleted
+ * (#987 Result 7); callers use explicit `ak-role resume <runId>`.
  * Only a truly missing book directory means no history; damage/permission errors propagate.
  */
 export async function findLatestRunIdForSeatTicket(input: {
   readonly home: string;
   readonly bookKey: string;
   readonly role: RoleRunRecord["role"];
-  readonly ticketNumber?: number;
-  readonly parentRunPath?: string;
+  readonly parentRunPath: string;
 }): Promise<string | undefined> {
-  if (input.ticketNumber === undefined && input.parentRunPath === undefined) {
+  if (input.parentRunPath.trim() === "") {
     return undefined;
   }
   const ledgerHome = resolveActivationLedgerHome(input.home);
@@ -1214,14 +1172,8 @@ export async function findLatestRunIdForSeatTicket(input: {
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
-    if (input.parentRunPath !== undefined) {
-      const parentPath = await readRunParentPath(runDirectory);
-      if (parentPath !== input.parentRunPath) continue;
-    } else if (input.ticketNumber !== undefined) {
-      // Same-ticket resume is board identity only — never migration-derived.
-      const ticketNumber = await readBoardTicketNumber(runDirectory);
-      if (ticketNumber !== input.ticketNumber) continue;
-    }
+    const parentPath = await readRunParentPath(runDirectory);
+    if (parentPath !== input.parentRunPath) continue;
     // Durable fact: never resume-select a provisional that never formed principal.
     if (!(await runHasFormedSessionPrincipal(runDirectory))) continue;
     if (best === undefined || runId > best) best = runId;

package/src/public-cli/seat-ticket-binding.ts

@@ -1,15 +1,13 @@
 /**
- * Shared ticket identity seam for public court seats (#635 / #637 / #709 / #747 / #771).
+ * Shared same-parent resume seam for gate / officer seats (#635 / #637 / #747 / #987).
  *
- * ADR 0075（起居郎 LLM 自行认票）: the diarist LLM recognizes the
- * court target; recognized ticket → provenance, truly unbound → no provenance,
- * or escalate when it cannot recognize one. Code does not re-judge the ticket
- * (锚定宪法; owner 2026-09-08: 代码不准做判断). Other seats reuse a typed
- * identity already handed over (起居郎 assertion / source-run / already-bound
- * resume) — they do not re-recognize from instruction. No CLI --ticket, no
- * attachment frontmatter. #747: officer same-parent resume also lives here.
- *
- * This module owns same-ticket / same-parent resume only.
+ * Lookup key is parent run path only (#747 / #987 Result 7). Public seats no
+ * longer select a prior run by ticket number — callers use explicit
+ * `ak-role resume <runId>`. Officer and gate countersign same-parent re-summons
+ * keep this seam. Lookup/resume failures propagate (失败诚实) — never wash into
+ * a fresh mint. Returns undefined when the caller declared an explicit fresh
+ * summons (`ak-role new`) or when no prior run exists; both mint new.
+ * freshSummons is required so no seat can drift back into its own skip branch.
  */
 import { resolveBookKeyFromGit } from "../activation-ledger-git.ts";
 import {
@@ -19,20 +17,13 @@ import {
 } from "./run-lifecycle.ts";
 
 /**
- * Sole same-seat → resume decision (#637 / #724 / #747).
- * Officer seats (notary/inspector/auditor) look up by parent run path; countersign
- * / diarist keep ticket-number principal. When found, runs resume with this
- * summons' materials. Lookup/resume failures propagate (失败诚实) — never wash
- * into a fresh mint. Returns undefined when the caller declared an explicit
- * fresh summons (`ak-role new`) or when no prior run exists; both mint new.
- * freshSummons is required so no seat can drift back into its own skip branch.
+ * Sole same-seat → resume decision by parent run path (#637 / #724 / #747 / #987).
  */
 export async function tryResumeSameTicketSeatRun<T>(input: {
   readonly home: string;
   readonly projectRoot: string;
   readonly role: RoleRunRecord["role"];
-  readonly ticketNumber?: number;
-  readonly parentRunPath?: string;
+  readonly parentRunPath: string;
   readonly freshSummons: true | undefined;
   readonly summons?: SameTicketSummonsMaterials;
   readonly resume: (
@@ -41,19 +32,12 @@ export async function tryResumeSameTicketSeatRun<T>(input: {
   ) => Promise<T>;
 }): Promise<T | undefined> {
   if (input.freshSummons === true) return undefined;
-  if (input.parentRunPath === undefined && input.ticketNumber === undefined) {
-    return undefined;
-  }
+  if (input.parentRunPath.trim() === "") return undefined;
   const previousRunId = await findLatestRunIdForSeatTicket({
     home: input.home,
     bookKey: resolveBookKeyFromGit(input.projectRoot),
     role: input.role,
-    ...(input.parentRunPath === undefined
-      ? {}
-      : { parentRunPath: input.parentRunPath }),
-    ...(input.ticketNumber === undefined
-      ? {}
-      : { ticketNumber: input.ticketNumber }),
+    parentRunPath: input.parentRunPath,
   });
   if (previousRunId === undefined) return undefined;
   return await input.resume(previousRunId, input.summons);

package/src/public-role-summons.ts

@@ -99,8 +99,13 @@ export type PublicSummonRequest = {
   readonly hostAdapters?: readonly NamedRoleTurnHostAdapter[];
   /** Offline test inject for deterministic run ids (same face as public CLI). */
   readonly createRunId?: () => string;
-  /** Typed ticket number handoff for diarist child run (#840). */
+  /** Typed ticket number handoff for diarist child run (#840). Bind only — not a resume key (#987). */
   readonly boundTicketNumber?: number;
+  /**
+   * Gate / officer same-parent resume key (#747 / #987). Countersign gate re-ask
+   * looks up prior 给事中 by this parent run directory, never by ticket number.
+   */
+  readonly parentRunPath?: string;
   /** Caller correlation id for nested leg ledger (ADR 0010 / #924). */
   readonly correlationId?: string;
   /**
@@ -436,6 +441,9 @@ export async function summonPublicRole(
           ...(options.boundTicketNumber === undefined
             ? {}
             : { boundTicketNumber: options.boundTicketNumber }),
+          ...(options.parentRunPath === undefined || options.parentRunPath.trim() === ""
+            ? {}
+            : { parentRunPath: options.parentRunPath }),
           ...(options.correlationId === undefined || options.correlationId.trim() === ""
             ? {}
             : { correlationId: options.correlationId }),
@@ -1040,7 +1048,7 @@ export async function summonParallelReviewerLenses(options: {
   return results;
 }
 
-/** Gate officer summons: notary/auditor via --source-run; inspector via pointer; countersign via ticket (#969). */
+/** Gate officer summons: notary/auditor via --source-run; inspector via pointer; countersign via parentRunPath (#969 / #987). */
 export async function summonGateOfficer(options: {
   readonly officer: "inspector" | "notary" | "auditor" | "countersign";
   readonly sourceRunDirectory: string;
@@ -1122,11 +1130,11 @@ export async function summonGateOfficer(options: {
     });
   }
   if (options.officer === "countersign") {
-    // #969: Secretariat submission gate → 给事中.
+    // #969 / #987: Secretariat submission gate → 给事中.
     // Dialogue / identity instruction = parent typed payload 原话 (ADR 0079) or reask;
-    // no code-authored summons prose (#924). Ticket identity = parent run durable
-    // board binding only (readBoardTicketNumber) — receipt ticketNumber is payload
-    // content, never the sole identity source; parent true-unbound stays unbound.
+    // no code-authored summons prose (#924). Gate resume key = parentRunPath
+    // (sourceRunDirectory); board ticket handoff is bind-only, never a resume
+    // lookup (#987 Result 7). Receipt ticketNumber stays payload content.
     // correlationId only on this officer — notary/auditor/inspector stay untouched.
     const { runIdFromRunDirectory } = await import("./run-terminal-artifacts.ts");
     const correlationId = runIdFromRunDirectory(options.sourceRunDirectory);
@@ -1144,6 +1152,7 @@ export async function summonGateOfficer(options: {
       argv: ["--project", options.cwd, "--", instruction],
       ...common,
       correlationId,
+      parentRunPath: options.sourceRunDirectory,
       ...(parentTicket === undefined ? {} : { boundTicketNumber: parentTicket }),
     });
   }

package/src/role-runtime.ts

@@ -1199,13 +1199,22 @@ export function createSecretariatRoleRuntime(
           const summon = dependencies.summonCountersign;
           const summoned = summon === undefined
             ? await (async () => {
+                // #987 Result 7 / #747: mid-turn summon resumes by parentRunPath
+                // (secretariat run dir), same key as summonGateOfficer countersign.
+                // Board ticket is bind-only — never the resume lookup.
                 const coordinates = readRoleRunCoordinates(ctx, "secretariat summons");
                 const { summonPublicRole } = await import("./public-role-summons.ts");
+                const { readBoardTicketNumber } = await import("./run-ticket-number.ts");
+                const parentTicket = await readBoardTicketNumber(coordinates.runDirectory);
                 return summonPublicRole({
                   role: "countersign",
                   argv: ["--project", coordinates.projectRoot, "--", instruction],
                   cwd: coordinates.projectRoot,
                   home: coordinates.home,
+                  parentRunPath: coordinates.runDirectory,
+                  ...(parentTicket === undefined
+                    ? {}
+                    : { boundTicketNumber: parentTicket }),
                   ...(signal === undefined ? {} : { signal }),
                   ...(correlationId === undefined ? {} : { correlationId }),
                   ...(dependencies.packageRoot === undefined