@akagilnc/pi-workflow-roles 0.1.4929 → 0.1.4949

package/dist/public-cli/main.js

@@ -840,7 +840,7 @@ async function listPullRequestNumbersByCommit(runner, input) {
 function createGhApiRunner(options = {}) {
   const spawnImpl = options.spawnImpl ?? spawn;
   return async (args, runOptions = {}) => {
-    return await new Promise((resolve11, reject) => {
+    return await new Promise((resolve12, reject) => {
       const signal = runOptions.signal;
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
@@ -913,11 +913,11 @@ function createGhApiRunner(options = {}) {
               const value = line2.slice(idx + 1).trim();
               headers[name] = value;
             }
-            resolve11({ status, headers, bodyText });
+            resolve12({ status, headers, bodyText });
             return;
           }
           if (code === 0) {
-            resolve11({ status: 200, headers: {}, bodyText: stdout });
+            resolve12({ status: 200, headers: {}, bodyText: stdout });
             return;
           }
           const failure = new Error(
@@ -17082,6 +17082,36 @@ function sealTornTail(recordFile) {
     appendFileSync(recordFile, "\n", "utf8");
   }
 }
+function appendSitianRecordBlock(input, block) {
+  if (block === "") return;
+  try {
+    const { sessionDir, recordFile, ledgerHome } = resolveSitianRecordPath(input);
+    ensureRealDirectoryTree(ledgerHome, sessionDir);
+    appendFileSync(recordFile, "", "utf8");
+    sealTornTail(recordFile);
+    const identityOf = (line2) => {
+      try {
+        const row = JSON.parse(line2);
+        return isRecord2(row) && typeof row.identity === "string" ? row.identity : void 0;
+      } catch {
+        return void 0;
+      }
+    };
+    const identities = new Set(readFileSync2(recordFile, "utf8").split("\n").map(identityOf).filter((id) => id !== void 0));
+    for (const line2 of block.match(/[^\n]*\n|[^\n]+$/g) ?? []) {
+      const identity = identityOf(line2);
+      if (identity !== void 0 && identities.has(identity)) continue;
+      appendFileSync(recordFile, line2, "utf8");
+      if (identity !== void 0) identities.add(identity);
+    }
+  } catch (error) {
+    if (error instanceof SitianInfrastructureError) throw error;
+    throw new SitianInfrastructureError(
+      `Sitian appender persistence failure: ${errorText(error)}`,
+      { cause: error }
+    );
+  }
+}
 function findIdentityPointer(recordFile, identity, kind, level) {
   if (!existsSync3(recordFile)) return void 0;
   const text = readFileSync2(recordFile, "utf8");
@@ -17205,6 +17235,9 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     );
     sessionDir = paths.sessionDir;
     recordFile = paths.recordFile;
+  } else if (category === "ticket-provenance" && input.runDirectory !== void 0) {
+    sessionDir = input.runDirectory;
+    recordFile = join9(sessionDir, SITIAN_RECORDS_LEAF);
   } else {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
@@ -17212,6 +17245,9 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     sessionDir = join9(dirname5(input.sessionParent), category);
     recordFile = join9(sessionDir, SITIAN_RECORDS_LEAF);
   }
+  if (!physicallyContainedIn(ledgerHome, sessionDir)) {
+    throw new Error("Sitian record ownership requires a directory inside the ledger home");
+  }
   return { sessionDir, recordFile, ledgerHome };
 }
 function projectTicketRecordsPathShape() {
@@ -17223,7 +17259,7 @@ function projectTicketRecordsPathShape() {
   return recordFile.replace(/\\/g, "/");
 }
 function resolveSitianRecordPath(input) {
-  const ledgerHome = input.home !== void 0 && input.home.length > 0 ? resolveActivationLedgerHome(input.home) : resolveActivationLedgerHomeForPath(input.sessionParent);
+  const ledgerHome = input.home !== void 0 && input.home.length > 0 ? resolveActivationLedgerHome(input.home) : resolveActivationLedgerHomeForPath(input.runDirectory ?? input.sessionParent);
   return resolveSitianRecordPathInLedger(input, ledgerHome);
 }
 function appendSitianRecord(input) {
@@ -18590,6 +18626,261 @@ var init_merger_git_state = __esm({
   }
 });
 
+// src/ledger-session-read.ts
+import { readFile as readFile9 } from "node:fs/promises";
+function isRecord5(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function readLedgerSessionJsonlLines(path) {
+  const text = await readFile9(path, "utf8");
+  const lines = text.split("\n");
+  const out = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const raw = lines[index];
+    if (!raw.trim()) continue;
+    const lineNumber = index + 1;
+    let row;
+    try {
+      row = JSON.parse(raw);
+    } catch (error) {
+      if (!(error instanceof SyntaxError)) throw error;
+      const completedByTerminator = index < lines.length - 1;
+      if (!completedByTerminator) break;
+      out.push({
+        line: lineNumber,
+        raw,
+        error: `malformed JSONL record in ${path} at line ${lineNumber}: ${error.message}`
+      });
+      continue;
+    }
+    if (!isRecord5(row)) {
+      const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
+      out.push({
+        line: lineNumber,
+        raw,
+        error: `complete non-object JSONL record in ${path} at line ${lineNumber}: expected object, got ${kind}`
+      });
+      continue;
+    }
+    out.push({ line: lineNumber, raw, row });
+  }
+  return out;
+}
+async function readLedgerSessionJsonl(path) {
+  const rows = [];
+  for (const line2 of await readLedgerSessionJsonlLines(path)) {
+    if (line2.row === void 0) {
+      throw new LedgerSessionJsonlError(line2.error ?? `unreadable JSONL record in ${path} at line ${line2.line}`, {
+        path,
+        line: line2.line,
+        prefixRows: rows
+      });
+    }
+    rows.push(line2.row);
+  }
+  return rows;
+}
+function extractSessionTimestampSpan(rows) {
+  let startedAt;
+  let endedAt;
+  for (const row of rows) {
+    if (typeof row.timestamp !== "string" || !row.timestamp) continue;
+    if (startedAt === void 0) startedAt = row.timestamp;
+    endedAt = row.timestamp;
+  }
+  return {
+    ...startedAt !== void 0 ? { startedAt } : {},
+    ...endedAt !== void 0 ? { endedAt } : {}
+  };
+}
+function extractSessionModelSequence(rows) {
+  const seen = /* @__PURE__ */ new Set();
+  const ordered = [];
+  const push = (raw) => {
+    const model = raw.trim();
+    if (model === "" || seen.has(model)) return;
+    seen.add(model);
+    ordered.push(model);
+  };
+  for (const row of rows) {
+    if (row.type === "model_change" && typeof row.modelId === "string") {
+      push(row.modelId);
+    }
+    const message = isRecord5(row.message) ? row.message : void 0;
+    if (message?.role === "assistant" && typeof message.model === "string") {
+      push(message.model);
+    }
+  }
+  return ordered;
+}
+function bashCommandFirstLine(command) {
+  const match = /^[^\r\n]*/.exec(command);
+  return match?.[0] ?? "";
+}
+function extractSessionToolIntervals(rows) {
+  const order = [];
+  const openById = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
+    const message = isRecord5(row.message) ? row.message : void 0;
+    if (message?.role === "assistant" && Array.isArray(message.content)) {
+      const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
+      for (const part of message.content) {
+        if (!isRecord5(part) || part.type !== "toolCall") continue;
+        if (typeof part.id !== "string" || part.id.length === 0) {
+          throw new Error("toolCall frame missing string id");
+        }
+        if (typeof part.name !== "string" || part.name.length === 0) {
+          throw new Error(`toolCall ${part.id} missing string name`);
+        }
+        if (callTimestamp === void 0 || callTimestamp.length === 0) {
+          throw new Error(`toolCall ${part.id} missing timestamp`);
+        }
+        if (openById.has(part.id)) {
+          throw new Error(`duplicate toolCall id ${part.id}`);
+        }
+        const args = isRecord5(part.arguments) ? part.arguments : void 0;
+        const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
+        const interval = {
+          toolCallId: part.id,
+          toolName: part.name,
+          startedAt: callTimestamp,
+          ...command !== void 0 ? { command } : {}
+        };
+        order.push(interval);
+        openById.set(part.id, interval);
+      }
+    }
+    if (message?.role === "toolResult") {
+      if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) {
+        throw new Error("toolResult frame missing string toolCallId");
+      }
+      const resultTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
+      if (resultTimestamp === void 0 || resultTimestamp.length === 0) {
+        throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
+      }
+      const open4 = openById.get(message.toolCallId);
+      if (open4 === void 0) {
+        const toolName = typeof message.toolName === "string" && message.toolName.length > 0 ? message.toolName : "unknown";
+        order.push({
+          toolCallId: message.toolCallId,
+          toolName,
+          startedAt: resultTimestamp,
+          endedAt: resultTimestamp
+        });
+        continue;
+      }
+      if (open4.endedAt !== void 0) {
+        throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
+      }
+      open4.endedAt = resultTimestamp;
+    }
+  }
+  return order.map((interval) => {
+    const base = {
+      toolCallId: interval.toolCallId,
+      toolName: interval.toolName,
+      startedAt: interval.startedAt,
+      ...interval.command !== void 0 ? { command: interval.command } : {}
+    };
+    return interval.endedAt === void 0 ? base : { ...base, endedAt: interval.endedAt };
+  });
+}
+function intervalRowsAroundAnchor(rows, anchorIndex, isBindingRow) {
+  let start = 0;
+  for (let i = anchorIndex; i >= 0; i -= 1) {
+    if (isBindingRow(rows[i])) {
+      start = i;
+      break;
+    }
+  }
+  let end = rows.length;
+  for (let i = Math.max(anchorIndex, start) + 1; i < rows.length; i += 1) {
+    if (isBindingRow(rows[i])) {
+      end = i;
+      break;
+    }
+  }
+  return { rows: rows.slice(start, end), closed: end < rows.length };
+}
+var LedgerSessionJsonlError;
+var init_ledger_session_read = __esm({
+  "src/ledger-session-read.ts"() {
+    "use strict";
+    LedgerSessionJsonlError = class extends Error {
+      path;
+      line;
+      prefixRows;
+      constructor(message, init) {
+        super(message);
+        this.name = "LedgerSessionJsonlError";
+        this.path = init.path;
+        this.line = init.line;
+        this.prefixRows = init.prefixRows;
+      }
+    };
+  }
+});
+
+// src/session-dialogue.ts
+var init_session_dialogue = __esm({
+  "src/session-dialogue.ts"() {
+    "use strict";
+  }
+});
+
+// src/ticket-provenance.ts
+import { readFile as readFile10, unlink } from "node:fs/promises";
+import { basename as basename5, dirname as dirname9, join as join13, resolve as resolve6 } from "node:path";
+function ticketProvenanceSubject(ticketNumber) {
+  if (!isSafePositiveTicketNumber(ticketNumber)) {
+    throw new Error(
+      `ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`
+    );
+  }
+  return String(ticketNumber);
+}
+function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
+  return {
+    level: "event",
+    kind: TICKET_PROVENANCE_KIND,
+    ...ticketNumber === null ? {} : { subject: ticketProvenanceSubject(ticketNumber) },
+    ...runDirectory === void 0 ? {} : { runDirectory },
+    cwd,
+    ...home === void 0 ? {} : { home }
+  };
+}
+function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
+  const path = resolveSitianRecordPath(
+    ticketProvenanceRecordInput(ticketNumber, cwd, home)
+  );
+  return { recordFile: path.recordFile, volumeDir: path.sessionDir };
+}
+async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
+  const source = join13(runDirectory, "records.jsonl");
+  let content;
+  try {
+    content = await readFile10(source, "utf8");
+  } catch (error) {
+    if (errnoCode(error) === "ENOENT") return;
+    throw error;
+  }
+  appendSitianRecordBlock(ticketProvenanceRecordInput(ticketNumber, cwd, home), content);
+  await unlink(source);
+}
+var init_ticket_provenance = __esm({
+  "src/ticket-provenance.ts"() {
+    "use strict";
+    init_activation_ledger_git();
+    init_activation_ledger_topology();
+    init_ledger_session_read();
+    init_run_ticket_number();
+    init_session_dialogue();
+    init_sitian_facade();
+    init_ticket_provenance_contracts();
+  }
+});
+
 // src/uuidv7.ts
 import { randomBytes } from "node:crypto";
 function isUuidV7(value) {
@@ -18616,14 +18907,14 @@ var init_uuidv7 = __esm({
 });
 
 // src/typed-provider-http.ts
-import { readFile as readFile9, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { readFile as readFile11, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
+import { join as join14 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join13(runDirectory, TYPED_HTTP_FILE);
+  return join14(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
-    await unlink(typedProviderHttpPath(runDirectory));
+    await unlink2(typedProviderHttpPath(runDirectory));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return;
@@ -18634,7 +18925,7 @@ async function clearTypedProviderHttpObservation(runDirectory) {
 async function readLatestTypedProviderHttpObservation(runDirectory) {
   let text;
   try {
-    text = await readFile9(typedProviderHttpPath(runDirectory), "utf8");
+    text = await readFile11(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return void 0;
@@ -18663,8 +18954,8 @@ var init_typed_provider_http = __esm({
 });
 
 // src/public-cli/run-lifecycle.ts
-import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile10, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
-import { basename as basename5, join as join14 } from "node:path";
+import { chmod, lstat as lstat2, open, readdir as readdir4, readFile as readFile12, unlink as unlink3, writeFile as writeFile3 } from "node:fs/promises";
+import { basename as basename6, join as join15 } from "node:path";
 function buildAutoResumeContinuationPrompt(options) {
   return appendEngineSessionMaterial(
     [RESUME_TRANSPORT_ENVELOPE],
@@ -18690,7 +18981,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile3(
-    join14(runDirectory, RUN_STATE_FILE),
+    join15(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -18740,7 +19031,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile10(join14(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile12(join15(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
     throw error;
@@ -18818,7 +19109,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile3(
-    join14(runDirectory, RUN_STATE_FILE),
+    join15(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -18987,7 +19278,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile10(lockPath, "utf8");
+    content = await readFile12(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -19018,7 +19309,7 @@ async function reclaimStaleWriterLock(lockPath, runDirectory) {
   const current = await autopsyWriterLock(lockPath);
   if (current.verdict !== "dead") return { reclaimed: false };
   try {
-    await unlink2(lockPath);
+    await unlink3(lockPath);
     return { reclaimed: true };
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { reclaimed: false };
@@ -19034,7 +19325,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
 `, "utf8");
   } catch (error) {
     await handle.close().catch(() => void 0);
-    await unlink2(lockPath).catch(() => void 0);
+    await unlink3(lockPath).catch(() => void 0);
     throw error;
   }
   let released = false;
@@ -19046,19 +19337,19 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join14(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join15(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
       released = true;
       await handle.close().catch(() => void 0);
       try {
-        await unlink2(currentLockPath);
+        await unlink3(currentLockPath);
       } catch (error) {
         if (errorCodeOf2(error) === "EACCES") {
           try {
             await chmod(currentRunDirectory, 493);
-            await unlink2(currentLockPath);
+            await unlink3(currentLockPath);
           } catch (retryError) {
             reportCleanupFailure(retryError, currentLockPath);
           }
@@ -19085,10 +19376,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join14(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join15(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join14(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join15(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -19143,7 +19434,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join14(ledgerHome, "books");
+  const booksRoot = join15(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir4(booksRoot);
@@ -19163,7 +19454,7 @@ async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const entry = basename5(runDirectory);
+      const entry = basename6(runDirectory);
       if (onlyRole === void 0 && (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) || entry === `${runId}@${onlyRole}`) {
         matches.push(runDirectory);
       }
@@ -19184,7 +19475,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile10(join14(runDirectory, "admitted-request.json"), "utf8")
+      await readFile12(join15(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -19205,7 +19496,7 @@ async function readRunParentPath(runDirectory) {
 async function runHasFormedSessionPrincipal(runDirectory) {
   const disk = await readRoleRunStateDisk(runDirectory);
   if (disk === void 0) return false;
-  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join14(disk.principalWire.sessionDirectory, "session.jsonl");
+  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join15(disk.principalWire.sessionDirectory, "session.jsonl");
   try {
     const stat2 = await lstat2(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
@@ -19223,7 +19514,7 @@ async function findLatestRunIdForSeatTicket(input) {
   let runDirectories;
   try {
     runDirectories = await listBookRunDirectories(
-      input.ticketNumber === void 0 ? bookDir : join14(bookDir, String(input.ticketNumber))
+      input.ticketNumber === void 0 ? bookDir : join15(bookDir, String(input.ticketNumber))
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -19232,7 +19523,7 @@ async function findLatestRunIdForSeatTicket(input) {
   const suffix = `@${input.role}`;
   let best;
   for (const runDirectory of runDirectories) {
-    const entry = basename5(runDirectory);
+    const entry = basename6(runDirectory);
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
@@ -19350,7 +19641,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile10(run.admittedRequestPath, "utf8")
+      await readFile12(run.admittedRequestPath, "utf8")
     );
     if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
       const record4 = raw;
@@ -19473,7 +19764,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile10(join14(run.runDirectory, "invocation.json"), "utf8")
+      await readFile12(join15(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -19512,7 +19803,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   } else if (mergedSet.tickets !== void 0) {
     courtTicketNumbers = mergedSet.tickets;
   }
-  const sourceRunLeaf = basename5(sourceRunPath ?? "").split("@");
+  const sourceRunLeaf = basename6(sourceRunPath ?? "").split("@");
   const referencedRunId = sourceRun?.runId ?? sourceRunLeaf[0];
   const referencedRole = sourceRun?.role ?? sourceRunLeaf[1];
   if (referencedRunId !== void 0 && referencedRunId !== "") {
@@ -19857,7 +20148,7 @@ var init_run_lifecycle = __esm({
 });
 
 // src/notary-source-run.ts
-import { dirname as dirname9, isAbsolute as isAbsolute6, join as join15, resolve as resolve6, basename as basename6 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute6, join as join16, resolve as resolve7, basename as basename7 } from "node:path";
 import { lstat as lstat3, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -19888,10 +20179,10 @@ async function requireRunDirectory(candidate, display) {
       `notary --source-run must be a run directory: ${display}`
     );
   }
-  const identity = parseRunDirectoryName(basename6(real));
+  const identity = parseRunDirectoryName(basename7(real));
   if (identity === void 0) {
     throw new NotarySourceRunError(
-      `notary --source-run must be named <runId>@<role>: ${basename6(real)}`
+      `notary --source-run must be named <runId>@<role>: ${basename7(real)}`
     );
   }
   return real;
@@ -19904,16 +20195,16 @@ async function resolveNotarySourceRunLocator(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
   const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
-  const bookRunsRoot = join15(bookDirectory, "runs");
+  const bookRunsRoot = join16(bookDirectory, "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join15(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join16(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
-    candidate = isAbsolute6(raw) ? raw : resolve6(options.projectRoot, raw);
-    const identity2 = parseRunDirectoryName(basename6(candidate));
-    const subjectDirectory = dirname9(dirname9(candidate));
-    const isLegacyUnboundLocator = identity2 !== void 0 && basename6(dirname9(candidate)) === "runs" && basename6(subjectDirectory) === "unbound" && resolve6(dirname9(subjectDirectory)) === resolve6(bookDirectory);
+    candidate = isAbsolute6(raw) ? raw : resolve7(options.projectRoot, raw);
+    const identity2 = parseRunDirectoryName(basename7(candidate));
+    const subjectDirectory = dirname10(dirname10(candidate));
+    const isLegacyUnboundLocator = identity2 !== void 0 && basename7(dirname10(candidate)) === "runs" && basename7(subjectDirectory) === "unbound" && resolve7(dirname10(subjectDirectory)) === resolve7(bookDirectory);
     if (isLegacyUnboundLocator) {
       candidate = await findRunDirectoryById(
         options.home,
@@ -19924,11 +20215,11 @@ async function resolveNotarySourceRunLocator(options) {
     }
   }
   const real = await requireRunDirectory(candidate, raw);
-  const identity = parseRunDirectoryName(basename6(real));
+  const identity = parseRunDirectoryName(basename7(real));
   const bookIdentity = physicalPathIdentity(bookDirectory);
-  const parentIdentity = physicalPathIdentity(dirname9(real));
-  const subjectBookIdentity = physicalPathIdentity(dirname9(dirname9(dirname9(real))));
-  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename6(dirname9(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
+  const parentIdentity = physicalPathIdentity(dirname10(real));
+  const subjectBookIdentity = physicalPathIdentity(dirname10(dirname10(dirname10(real))));
+  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename7(dirname10(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
     throw new NotarySourceRunError(
       "notary --source-run must resolve to a retained run under the project machine-ledger book"
     );
@@ -21032,14 +21323,14 @@ import { existsSync as existsSync5 } from "node:fs";
 import {
   lstat as lstat4,
   mkdtemp,
-  readFile as readFile11,
+  readFile as readFile13,
   realpath as realpath4,
   rename,
   rm,
   writeFile as writeFile4
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute7, join as join16, resolve as resolve7, sep as sep4 } from "node:path";
+import { basename as basename8, dirname as dirname11, isAbsolute as isAbsolute7, join as join17, resolve as resolve8, sep as sep4 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -21093,15 +21384,15 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile4(
-    join16(source.runDirectory, "invocation.json"),
+    join17(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  const ledgerPath = join16(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
+  const ledgerPath = join17(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile13(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
     next.provider = model.provider;
@@ -21133,8 +21424,8 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join16(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile11(ledgerPath, "utf8"));
+  const ledgerPath = join17(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile13(ledgerPath, "utf8"));
   await writeFile4(
     ledgerPath,
     `${JSON.stringify({
@@ -21150,7 +21441,7 @@ async function persistAdmittedSourceRunPath(admitted, sourceRunPath) {
     throw new Error("persistAdmittedSourceRunPath requires a non-empty sourceRunPath");
   }
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile13(admittedPath, "utf8"));
   if (typeof current.sourceRunPath === "string") {
     if (current.sourceRunPath === sourceRunPath) return;
     throw new Error(
@@ -21176,7 +21467,7 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
 }
 async function recordAdmittedCorrelation(admitted, correlationId) {
   const current = JSON.parse(
-    await readFile11(admitted.admittedRequestPath, "utf8")
+    await readFile13(admitted.admittedRequestPath, "utf8")
   );
   const prior = [
     ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
@@ -21224,7 +21515,7 @@ async function bindCourtTicketNumbersOnAdmitted(admitted, courtTicketNumbers) {
   }
   const frozen = Object.freeze([...projected]);
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile11(admittedPath, "utf8"));
+  const current = JSON.parse(await readFile13(admittedPath, "utf8"));
   await writeFile4(
     admittedPath,
     `${JSON.stringify({ ...current, courtTicketNumbers: frozen }, null, 2)}
@@ -21246,8 +21537,31 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     runId: admitted.runId,
     role: admitted.role
   });
-  ensureRoleRunDirectory(ledgerHome, dirname10(target.runDirectory));
+  ensureRoleRunDirectory(ledgerHome, dirname11(target.runDirectory));
   const principal = authority.seal(target);
+  if (admitted.role !== "diarist") {
+    const parentPage = JSON.parse(await readFile13(admitted.admittedRequestPath, "utf8"));
+    const childRunIds = parentPage.childDiaristRunIds;
+    for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
+      if (typeof childRunId !== "string") continue;
+      const childDirectory = join17(dirname11(oldRunDirectory), `${childRunId}@diarist`);
+      const childTarget = roleRunPlacement(ledgerHome, {
+        bookKey: admitted.bookKey,
+        subject: { ticketNumber: admitted.ticketNumber },
+        runId: childRunId,
+        role: "diarist"
+      });
+      authority.seal(childTarget);
+      if (!existsSync5(childDirectory) && existsSync5(childTarget.runDirectory)) continue;
+      await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
+      await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
+      ensureRoleRunDirectory(ledgerHome, dirname11(childTarget.runDirectory));
+      await rename(childDirectory, childTarget.runDirectory);
+    }
+  }
+  if (admitted.role === "diarist") {
+    await rehomeUnboundTicketProvenance(oldRunDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
+  }
   await rename(oldRunDirectory, target.runDirectory);
   heldLease?.relocate(target.runDirectory);
   const admittedRecord = admitted;
@@ -21275,14 +21589,21 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
   admitted.principal = principal;
   return { oldRunDirectory, newRunDirectory: target.runDirectory };
 }
+async function recordChildDiaristRun(parent, childRunId) {
+  const page = JSON.parse(await readFile13(parent.admittedRequestPath, "utf8"));
+  const existing = Array.isArray(page.childDiaristRunIds) ? page.childDiaristRunIds.filter((runId) => typeof runId === "string") : [];
+  const childDiaristRunIds = existing.includes(childRunId) ? existing : [...existing, childRunId];
+  await writeFile4(parent.admittedRequestPath, `${JSON.stringify({ ...page, childDiaristRunIds }, null, 2)}
+`, "utf8");
+}
 async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   requireSafePositiveTicketNumber(
     ticketNumber,
     "bindTicketNumberOnRunDirectory"
   );
-  const admittedPath = join16(runDirectory, "admitted-request.json");
-  const invocationPath = join16(runDirectory, "invocation.json");
-  const admitted = JSON.parse(await readFile11(admittedPath, "utf8"));
+  const admittedPath = join17(runDirectory, "admitted-request.json");
+  const invocationPath = join17(runDirectory, "invocation.json");
+  const admitted = JSON.parse(await readFile13(admittedPath, "utf8"));
   const existing = admitted.ticketNumber;
   if (typeof existing === "number") {
     if (existing === ticketNumber) return;
@@ -21292,7 +21613,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   }
   if (existsSync5(invocationPath)) {
     const invocation = JSON.parse(
-      await readFile11(invocationPath, "utf8")
+      await readFile13(invocationPath, "utf8")
     );
     if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
       throw new Error(
@@ -21317,7 +21638,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile11(join16(rolePackageRoot, "package.json"), "utf8")
+    await readFile13(join17(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -21588,7 +21909,7 @@ function requireAuthorityRef(value) {
   });
 }
 async function readRegularFileAttachment(sourcePath) {
-  const absolute = isAbsolute7(sourcePath) ? sourcePath : resolve7(sourcePath);
+  const absolute = isAbsolute7(sourcePath) ? sourcePath : resolve8(sourcePath);
   let st;
   try {
     st = await lstat4(absolute);
@@ -21604,7 +21925,7 @@ async function readRegularFileAttachment(sourcePath) {
     );
   }
   try {
-    return { absolute, bytes: await readFile11(absolute) };
+    return { absolute, bytes: await readFile13(absolute) };
   } catch (error) {
     throw new CliUsageError(
       `attachment is not a readable regular file: ${sourcePath}`,
@@ -21617,13 +21938,13 @@ async function removePreparedAttachmentDirectory(stagingDirectory) {
 }
 async function withPreparedAttachments(attachmentPaths, use) {
   if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp(join16(tmpdir(), "ak-role-attachments-"));
+  const stagingDirectory = await mkdtemp(join17(tmpdir(), "ak-role-attachments-"));
   const prepared = [];
   let result;
   try {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join16(stagingDirectory, String(index).padStart(6, "0"));
+      const snapshotPath = join17(stagingDirectory, String(index).padStart(6, "0"));
       await writeFile4(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
@@ -21644,9 +21965,9 @@ async function withPreparedAttachments(attachmentPaths, use) {
   return result;
 }
 async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join16(
+  const frozenPath = join17(
     destinationDir,
-    `${String(index).padStart(2, "0")}-${basename7(provenancePath)}`
+    `${String(index).padStart(2, "0")}-${basename8(provenancePath)}`
   );
   await writeFile4(frozenPath, bytes);
   return {
@@ -21660,7 +21981,7 @@ async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, inde
 async function freezePreparedAttachment(prepared, destinationDir, index) {
   return freezeAttachmentBytes(
     prepared.absolute,
-    await readFile11(prepared.snapshotPath),
+    await readFile13(prepared.snapshotPath),
     destinationDir,
     index
   );
@@ -21687,14 +22008,14 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join16(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join17(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
 async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
   if (prepared.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join16(runDirectory, "attachments") : join16(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = summonsKey === void 0 ? join17(runDirectory, "attachments") : join17(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = [];
   for (let index = 0; index < prepared.length; index += 1) {
@@ -21771,7 +22092,7 @@ async function admitPublicRole(role, parsed, env, override) {
         attachmentPaths,
         ...project,
         placedFields: async (placed) => {
-          const taskPath = join16(placed.runDirectory, "task.md");
+          const taskPath = join17(placed.runDirectory, "task.md");
           await writeFile4(taskPath, instruction, "utf8");
           return { phase, taskPath };
         }
@@ -21791,9 +22112,9 @@ async function admitPublicRole(role, parsed, env, override) {
       let prerequisites = Object.freeze([]);
       let prerequisitesSource;
       if (parsed.prerequisitesPath !== void 0) {
-        const absolutePrereq = isAbsolute7(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve7(parsed.prerequisitesPath);
+        const absolutePrereq = isAbsolute7(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve8(parsed.prerequisitesPath);
         try {
-          prerequisitesSource = await readFile11(absolutePrereq, "utf8");
+          prerequisitesSource = await readFile13(absolutePrereq, "utf8");
         } catch (error) {
           throw new CliUsageError(
             `fixer prerequisites path is unreadable: ${parsed.prerequisitesPath}`,
@@ -21817,7 +22138,7 @@ async function admitPublicRole(role, parsed, env, override) {
         placedFields: async (placed) => {
           let prerequisitesPath;
           if (prerequisitesSource !== void 0) {
-            prerequisitesPath = join16(placed.runDirectory, "prerequisites.json");
+            prerequisitesPath = join17(placed.runDirectory, "prerequisites.json");
             await writeFile4(
               prerequisitesPath,
               `${JSON.stringify(prerequisites, null, 2)}
@@ -21825,7 +22146,7 @@ async function admitPublicRole(role, parsed, env, override) {
               "utf8"
             );
           }
-          const packetPath = join16(placed.runDirectory, "fix-packet.md");
+          const packetPath = join17(placed.runDirectory, "fix-packet.md");
           await writeFile4(packetPath, instruction, "utf8");
           return {
             phase,
@@ -21849,7 +22170,7 @@ async function admitPublicRole(role, parsed, env, override) {
           throw new CliUsageError(detail, { cause: error });
         }
       }
-      const projectRoot = resolve7(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let repository;
       if (parsed.repo !== void 0) {
         try {
@@ -21889,7 +22210,7 @@ async function admitPublicRole(role, parsed, env, override) {
           const prNumber = target.kind === "bound" ? target.prNumber : void 0;
           let requestManifestPath;
           if (manifestCanonicalJson !== void 0) {
-            requestManifestPath = join16(placed.runDirectory, "request-manifest.json");
+            requestManifestPath = join17(placed.runDirectory, "request-manifest.json");
             await writeFile4(requestManifestPath, manifestCanonicalJson, "utf8");
           }
           return {
@@ -21972,7 +22293,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (parsed.project !== void 0) {
         requireOptionPath("--project", parsed.project);
       }
-      const projectRoot = resolve7(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let sourceRun;
       try {
         sourceRun = await resolveNotarySourceRunLocator({
@@ -22049,7 +22370,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (instruction.trim() === "") {
         throw new CliUsageError("merger requires a nonblank task instruction");
       }
-      const projectRoot = resolve7(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       const derived = await deriveMergerEnvelopeFromActiveMerge(
         projectRoot,
         createProductionMergerGitState(projectRoot)
@@ -22080,7 +22401,7 @@ async function admitPublicRole(role, parsed, env, override) {
             resolutionScope: [...derived.resolutionScope],
             authorizedChecks: []
           });
-          const mergerInputPath = join16(placed.runDirectory, "merger-input.json");
+          const mergerInputPath = join17(placed.runDirectory, "merger-input.json");
           await writeFile4(
             mergerInputPath,
             `${JSON.stringify(mergerInput, null, 2)}
@@ -22110,7 +22431,7 @@ async function placeRoleAdmission(options) {
   if (options.project !== void 0) {
     requireOptionPath("--project", options.project);
   }
-  const projectRoot = resolve7(options.project ?? options.cwd);
+  const projectRoot = resolve8(options.project ?? options.cwd);
   const runId = options.runId ?? (options.createRunId ?? uuidv7)();
   const ticketFields = ticketAdmissionFields(options.assertedTicketNumber);
   const {
@@ -22154,7 +22475,7 @@ function persistedAttachmentRefs(attachments) {
   }));
 }
 async function persistPlacedAdmission(admitted, placed, model) {
-  const admittedRequestPath = join16(placed.runDirectory, "admitted-request.json");
+  const admittedRequestPath = join17(placed.runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory: placed.sessionDirectory,
     sessionFile: placed.sessionFile
@@ -22207,7 +22528,7 @@ async function admitStandardMaterialInvocation(role, options) {
     attachments: persistedAttachmentRefs(placed.attachments),
     ...placed.ticketFields
   };
-  const admittedRequestPath = defer ? join16(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
+  const admittedRequestPath = defer ? join17(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
   return {
     role,
     runId: placed.runId,
@@ -22282,7 +22603,7 @@ async function materializeCountersignInvocation(admitted, options) {
   });
   const placement = placed;
   admitted.runDirectory = placement.runDirectory;
-  admitted.admittedRequestPath = join16(
+  admitted.admittedRequestPath = join17(
     placement.runDirectory,
     "admitted-request.json"
   );
@@ -22378,7 +22699,7 @@ function parseDoctorIssueNumber(raw) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join16(
+  const defaultRuns = join17(
     activationBookDirectory(ledgerHome, options.bookKey),
     String(options.issueNumber),
     "runs"
@@ -22395,7 +22716,7 @@ async function resolveDoctorCaseRunsPath(options) {
       "doctor --runs must be a project-relative path"
     );
   }
-  const resolved = resolve7(options.projectRoot, raw);
+  const resolved = resolve8(options.projectRoot, raw);
   if (resolved !== options.projectRoot && !pathContainedIn(options.projectRoot, resolved)) {
     throw new CliUsageError(
       "doctor --runs escapes the project root"
@@ -22472,11 +22793,11 @@ function parseAnalystCohortIssueToken(raw, flag) {
       `${flag} requires a comma-separated list of N or book:N`
     );
   }
-  const sep5 = trimmed.lastIndexOf(":");
-  if (sep5 > 0) {
-    const rhs = trimmed.slice(sep5 + 1);
+  const sep6 = trimmed.lastIndexOf(":");
+  if (sep6 > 0) {
+    const rhs = trimmed.slice(sep6 + 1);
     if (ANALYST_TICKET_NUMBER_PATTERN.test(rhs)) {
-      const bookKey = trimmed.slice(0, sep5);
+      const bookKey = trimmed.slice(0, sep6);
       if (bookKey.trim() === "") {
         throw new CliUsageError(
           `${flag} book:N requires a non-empty book key, got ${raw}`
@@ -22686,6 +23007,7 @@ var init_invocation = __esm({
     init_merger_git_state();
     init_merger_contracts();
     init_sha256();
+    init_ticket_provenance();
     init_uuidv7();
     init_notary_contracts();
     init_notary_source_run();
@@ -22700,15 +23022,15 @@ var init_invocation = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot2, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join17(packageRoot2, "dist/acp-host/production-host.js");
-  const source = join17(packageRoot2, "src/acp-host/production-host.ts");
+  const built = join18(packageRoot2, "dist/acp-host/production-host.js");
+  const source = join18(packageRoot2, "src/acp-host/production-host.ts");
   const target = existsSync6(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -22724,15 +23046,15 @@ var init_load_production_acp_host = __esm({
 
 // src/public-cli/load-production-headless-host.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot2, host) {
   const description = lookupHeadlessHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered headless host: ${host}`);
   }
-  const built = join18(packageRoot2, "dist/headless-host/production-host.js");
-  const source = join18(packageRoot2, "src/headless-host/production-host.ts");
+  const built = join19(packageRoot2, "dist/headless-host/production-host.js");
+  const source = join19(packageRoot2, "src/headless-host/production-host.ts");
   const target = existsSync7(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
@@ -22859,8 +23181,8 @@ var init_role_turn_host_resolution = __esm({
 
 // src/package-resources/method-skill.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile12, realpath as realpath5 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { readFile as readFile14, realpath as realpath5 } from "node:fs/promises";
+import { join as join20 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -22877,16 +23199,16 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot2, name) {
-  return join19(packageRoot2, packagedMethodSkillRelativeDirectory(name));
+  return join20(packageRoot2, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot2, name) {
-  return join19(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
+  return join20(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord5(raw)) {
+  if (!isRecord6(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -22900,7 +23222,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord5(raw.upstream)) {
+  if (!isRecord6(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -22927,12 +23249,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord5(raw.files)) {
+  if (!isRecord6(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord5(entry)) {
+    if (!isRecord6(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -22974,11 +23296,11 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot2, name);
-  const skillPathConfigured = join19(rootDirectory, "SKILL.md");
-  const provenancePath = join19(rootDirectory, "provenance.json");
+  const skillPathConfigured = join20(rootDirectory, "SKILL.md");
+  const provenancePath = join20(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
-    provenanceRaw = await readFile12(provenancePath, "utf8");
+    provenanceRaw = await readFile14(provenancePath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
   }
@@ -22992,10 +23314,10 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join19(rootDirectory, rel);
+    const absolute = join20(rootDirectory, rel);
     let bytes;
     try {
-      bytes = await readFile12(absolute);
+      bytes = await readFile14(absolute);
     } catch (error) {
       throw new PackagedMethodSkillUnavailableError(name, absolute, error);
     }
@@ -23011,7 +23333,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   let raw;
   try {
     skillPath = await realpath5(skillPathConfigured);
-    raw = await readFile12(skillPath, "utf8");
+    raw = await readFile14(skillPath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
   }
@@ -23096,23 +23418,23 @@ var init_method_skill = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname11, join as join20 } from "node:path";
+import { readFile as readFile15 } from "node:fs/promises";
+import { dirname as dirname12, join as join21 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname11(fileURLToPath(moduleUrl));
+  let dir = dirname12(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync8(join20(dir, "package.json")) && existsSync8(join20(dir, "souls"))) {
+    if (existsSync8(join21(dir, "package.json")) && existsSync8(join21(dir, "souls"))) {
       return dir;
     }
-    const parent = dirname11(dir);
+    const parent = dirname12(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile13(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile15(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -23220,14 +23542,14 @@ var init_audit_escalation = __esm({
 });
 
 // src/submission-ledger.ts
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 async function submissionRecordFile(cwd, runId, scope) {
   const ledgerHome = resolveActivationLedgerHome(scope.home);
   let sessionParent = scope.sessionParent;
   if (sessionParent === void 0) {
     const discoveredRun = await findRunDirectoryById(scope.home, runId);
     if (discoveredRun === void 0) return void 0;
-    sessionParent = join21(discoveredRun, "session", "session.jsonl");
+    sessionParent = join22(discoveredRun, "session", "session.jsonl");
   }
   return resolveSitianRecordPathInLedger({
     level: "event",
@@ -23413,17 +23735,17 @@ var init_submission_ledger = __esm({
 });
 
 // src/session-identity.ts
-import { mkdir as mkdir2, readFile as readFile14, rename as rename2, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname12, join as join22 } from "node:path";
+import { mkdir as mkdir2, readFile as readFile16, rename as rename2, writeFile as writeFile5 } from "node:fs/promises";
+import { dirname as dirname13, join as join23 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
-  const bindingPath = (principal) => join22(authority.decode(principal).sessionDirectory, sessionBindingFile);
+  const bindingPath = (principal) => join23(authority.decode(principal).sessionDirectory, sessionBindingFile);
   return {
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;
     },
     async load(principal) {
       try {
-        const value = JSON.parse(await readFile14(bindingPath(principal), "utf8"));
+        const value = JSON.parse(await readFile16(bindingPath(principal), "utf8"));
         if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
           throw new Error("durable session binding is invalid");
         }
@@ -23435,7 +23757,7 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
     },
     async bind(principal, sessionId) {
       const target = bindingPath(principal);
-      await mkdir2(dirname12(target), { recursive: true });
+      await mkdir2(dirname13(target), { recursive: true });
       const temporary = `${target}.${process.pid}.tmp`;
       await writeFile5(temporary, `${JSON.stringify({ sessionId })}
 `, { encoding: "utf8", mode: 384 });
@@ -23467,250 +23789,10 @@ var init_session_identity = __esm({
   }
 });
 
-// src/ledger-session-read.ts
-import { readFile as readFile15 } from "node:fs/promises";
-function isRecord6(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile15(path, "utf8");
-  const lines = text.split("\n");
-  const out = [];
-  for (let index = 0; index < lines.length; index += 1) {
-    const raw = lines[index];
-    if (!raw.trim()) continue;
-    const lineNumber = index + 1;
-    let row;
-    try {
-      row = JSON.parse(raw);
-    } catch (error) {
-      if (!(error instanceof SyntaxError)) throw error;
-      const completedByTerminator = index < lines.length - 1;
-      if (!completedByTerminator) break;
-      out.push({
-        line: lineNumber,
-        raw,
-        error: `malformed JSONL record in ${path} at line ${lineNumber}: ${error.message}`
-      });
-      continue;
-    }
-    if (!isRecord6(row)) {
-      const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
-      out.push({
-        line: lineNumber,
-        raw,
-        error: `complete non-object JSONL record in ${path} at line ${lineNumber}: expected object, got ${kind}`
-      });
-      continue;
-    }
-    out.push({ line: lineNumber, raw, row });
-  }
-  return out;
-}
-async function readLedgerSessionJsonl(path) {
-  const rows = [];
-  for (const line2 of await readLedgerSessionJsonlLines(path)) {
-    if (line2.row === void 0) {
-      throw new LedgerSessionJsonlError(line2.error ?? `unreadable JSONL record in ${path} at line ${line2.line}`, {
-        path,
-        line: line2.line,
-        prefixRows: rows
-      });
-    }
-    rows.push(line2.row);
-  }
-  return rows;
-}
-function extractSessionTimestampSpan(rows) {
-  let startedAt;
-  let endedAt;
-  for (const row of rows) {
-    if (typeof row.timestamp !== "string" || !row.timestamp) continue;
-    if (startedAt === void 0) startedAt = row.timestamp;
-    endedAt = row.timestamp;
-  }
-  return {
-    ...startedAt !== void 0 ? { startedAt } : {},
-    ...endedAt !== void 0 ? { endedAt } : {}
-  };
-}
-function extractSessionModelSequence(rows) {
-  const seen = /* @__PURE__ */ new Set();
-  const ordered = [];
-  const push = (raw) => {
-    const model = raw.trim();
-    if (model === "" || seen.has(model)) return;
-    seen.add(model);
-    ordered.push(model);
-  };
-  for (const row of rows) {
-    if (row.type === "model_change" && typeof row.modelId === "string") {
-      push(row.modelId);
-    }
-    const message = isRecord6(row.message) ? row.message : void 0;
-    if (message?.role === "assistant" && typeof message.model === "string") {
-      push(message.model);
-    }
-  }
-  return ordered;
-}
-function bashCommandFirstLine(command) {
-  const match = /^[^\r\n]*/.exec(command);
-  return match?.[0] ?? "";
-}
-function extractSessionToolIntervals(rows) {
-  const order = [];
-  const openById = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
-    const message = isRecord6(row.message) ? row.message : void 0;
-    if (message?.role === "assistant" && Array.isArray(message.content)) {
-      const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
-      for (const part of message.content) {
-        if (!isRecord6(part) || part.type !== "toolCall") continue;
-        if (typeof part.id !== "string" || part.id.length === 0) {
-          throw new Error("toolCall frame missing string id");
-        }
-        if (typeof part.name !== "string" || part.name.length === 0) {
-          throw new Error(`toolCall ${part.id} missing string name`);
-        }
-        if (callTimestamp === void 0 || callTimestamp.length === 0) {
-          throw new Error(`toolCall ${part.id} missing timestamp`);
-        }
-        if (openById.has(part.id)) {
-          throw new Error(`duplicate toolCall id ${part.id}`);
-        }
-        const args = isRecord6(part.arguments) ? part.arguments : void 0;
-        const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
-        const interval = {
-          toolCallId: part.id,
-          toolName: part.name,
-          startedAt: callTimestamp,
-          ...command !== void 0 ? { command } : {}
-        };
-        order.push(interval);
-        openById.set(part.id, interval);
-      }
-    }
-    if (message?.role === "toolResult") {
-      if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) {
-        throw new Error("toolResult frame missing string toolCallId");
-      }
-      const resultTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
-      if (resultTimestamp === void 0 || resultTimestamp.length === 0) {
-        throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
-      }
-      const open4 = openById.get(message.toolCallId);
-      if (open4 === void 0) {
-        const toolName = typeof message.toolName === "string" && message.toolName.length > 0 ? message.toolName : "unknown";
-        order.push({
-          toolCallId: message.toolCallId,
-          toolName,
-          startedAt: resultTimestamp,
-          endedAt: resultTimestamp
-        });
-        continue;
-      }
-      if (open4.endedAt !== void 0) {
-        throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
-      }
-      open4.endedAt = resultTimestamp;
-    }
-  }
-  return order.map((interval) => {
-    const base = {
-      toolCallId: interval.toolCallId,
-      toolName: interval.toolName,
-      startedAt: interval.startedAt,
-      ...interval.command !== void 0 ? { command: interval.command } : {}
-    };
-    return interval.endedAt === void 0 ? base : { ...base, endedAt: interval.endedAt };
-  });
-}
-function intervalRowsAroundAnchor(rows, anchorIndex, isBindingRow) {
-  let start = 0;
-  for (let i = anchorIndex; i >= 0; i -= 1) {
-    if (isBindingRow(rows[i])) {
-      start = i;
-      break;
-    }
-  }
-  let end = rows.length;
-  for (let i = Math.max(anchorIndex, start) + 1; i < rows.length; i += 1) {
-    if (isBindingRow(rows[i])) {
-      end = i;
-      break;
-    }
-  }
-  return { rows: rows.slice(start, end), closed: end < rows.length };
-}
-var LedgerSessionJsonlError;
-var init_ledger_session_read = __esm({
-  "src/ledger-session-read.ts"() {
-    "use strict";
-    LedgerSessionJsonlError = class extends Error {
-      path;
-      line;
-      prefixRows;
-      constructor(message, init) {
-        super(message);
-        this.name = "LedgerSessionJsonlError";
-        this.path = init.path;
-        this.line = init.line;
-        this.prefixRows = init.prefixRows;
-      }
-    };
-  }
-});
-
-// src/session-dialogue.ts
-var init_session_dialogue = __esm({
-  "src/session-dialogue.ts"() {
-    "use strict";
-  }
-});
-
-// src/ticket-provenance.ts
-function ticketProvenanceSubject(ticketNumber) {
-  if (!isSafePositiveTicketNumber(ticketNumber)) {
-    throw new Error(
-      `ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`
-    );
-  }
-  return String(ticketNumber);
-}
-function ticketProvenanceRecordInput(ticketNumber, cwd, home) {
-  return {
-    level: "event",
-    kind: TICKET_PROVENANCE_KIND,
-    subject: ticketProvenanceSubject(ticketNumber),
-    cwd,
-    ...home === void 0 ? {} : { home }
-  };
-}
-function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
-  const path = resolveSitianRecordPath(
-    ticketProvenanceRecordInput(ticketNumber, cwd, home)
-  );
-  return { recordFile: path.recordFile, volumeDir: path.sessionDir };
-}
-var init_ticket_provenance = __esm({
-  "src/ticket-provenance.ts"() {
-    "use strict";
-    init_activation_ledger_git();
-    init_activation_ledger_topology();
-    init_ledger_session_read();
-    init_run_ticket_number();
-    init_session_dialogue();
-    init_sitian_facade();
-    init_ticket_provenance_contracts();
-  }
-});
-
 // src/public-cli/case-dossier-delivery.ts
-import { mkdtemp as mkdtemp2, readFile as readFile16, rm as rm2, writeFile as writeFile6 } from "node:fs/promises";
+import { mkdtemp as mkdtemp2, readFile as readFile17, rm as rm2, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 async function projectCaseDossierPointerSection(input) {
   if (input.ticketNumber === void 0) {
     return [
@@ -23737,9 +23819,9 @@ async function deliverCaseDossierAsAttachment(input) {
     projectRoot: input.projectRoot,
     home: input.home
   });
-  const stagingDir = await mkdtemp2(join23(tmpdir2(), "ak-case-dossier-"));
+  const stagingDir = await mkdtemp2(join24(tmpdir2(), "ak-case-dossier-"));
   try {
-    const stagingPath = join23(stagingDir, CASE_DOSSIER_ATTACH_FILE);
+    const stagingPath = join24(stagingDir, CASE_DOSSIER_ATTACH_FILE);
     await writeFile6(stagingPath, `${section}
 `, "utf8");
     return await freezeAttachmentsIntoRun(
@@ -23768,7 +23850,7 @@ var init_case_dossier_delivery = __esm({
 // src/engine-detour-usage.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname13, join as join24 } from "node:path";
+import { dirname as dirname14, join as join25 } from "node:path";
 function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -23852,7 +23934,7 @@ function projectEngineDetourToolUsageForPublicTerminal(usage, options) {
 function readInvocationRecord(runDirectory) {
   try {
     const raw = JSON.parse(
-      readFileSync3(join24(runDirectory, "invocation.json"), "utf8")
+      readFileSync3(join25(runDirectory, "invocation.json"), "utf8")
     );
     return isRecord7(raw) ? raw : void 0;
   } catch (error) {
@@ -23882,10 +23964,10 @@ function withEngineDetourToolUsageFact(outcome, usage) {
   };
 }
 function runDirectoryFromSessionDirectory(sessionDirectory) {
-  return dirname13(sessionDirectory);
+  return dirname14(sessionDirectory);
 }
 function sessionFileFromSessionDirectory(sessionDirectory) {
-  return join24(sessionDirectory, "session.jsonl");
+  return join25(sessionDirectory, "session.jsonl");
 }
 function mintEngineDetourInvocationScope(input) {
   const engine = input.effectiveEngine?.trim();
@@ -23915,7 +23997,7 @@ var init_engine_detour_usage = __esm({
 
 // src/host-transition-prior-native.ts
 import { access as access3, readdir as readdir5 } from "node:fs/promises";
-import { dirname as dirname14, join as join25 } from "node:path";
+import { dirname as dirname15, join as join26 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -23929,7 +24011,7 @@ async function listPiNativeRecordPaths(sessionFile) {
   }
 }
 async function listSitianRecordPaths(sessionParent) {
-  const sessionRoot = dirname14(sessionParent);
+  const sessionRoot = dirname15(sessionParent);
   let entries;
   try {
     entries = await readdir5(sessionRoot, { withFileTypes: true });
@@ -23940,7 +24022,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join25(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join26(sessionRoot, entry.name, "records.jsonl");
     try {
       await access3(recordFile);
       recordPaths.push(recordFile);
@@ -24025,7 +24107,7 @@ var init_process_cancel = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir6 } from "node:fs/promises";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -24240,10 +24322,10 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile22 } = await import("node:fs/promises");
+  const { readFile: readFile23 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile22(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile23(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
@@ -24275,7 +24357,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join26(directory, name);
+      const path = join27(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -24604,15 +24686,15 @@ __export(settlement_exports, {
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { appendFile as appendFile2, readFile as readFile17, readdir as readdir7, rm as rm3, writeFile as writeFile7 } from "node:fs/promises";
-import { dirname as dirname15, join as join27 } from "node:path";
+import { appendFile as appendFile2, readFile as readFile18, readdir as readdir7, rm as rm3, writeFile as writeFile7 } from "node:fs/promises";
+import { dirname as dirname16, join as join28 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
 function ledgerReadScope(admitted, scope) {
   return {
     home: sealedLedgerHome(admitted),
-    sessionParent: join27(admitted.runDirectory, "session", "session.jsonl"),
+    sessionParent: join28(admitted.runDirectory, "session", "session.jsonl"),
     ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { attemptId: scope.courtAttemptId }
   };
 }
@@ -24752,7 +24834,7 @@ function presentControlledFailure(failure, io) {
 }
 async function inspectJudgeSession(sessionFile) {
   try {
-    await readFile17(sessionFile, "utf8");
+    await readFile18(sessionFile, "utf8");
     return { state: "present" };
   } catch (error) {
     if (isMissingPathError4(error)) return { state: "missing" };
@@ -24992,7 +25074,7 @@ function sessionReadFailure(error, fallbackMessage) {
   return failed;
 }
 async function readBoundSessionEntries(sessionFile) {
-  const text = await readFile17(sessionFile, "utf8");
+  const text = await readFile18(sessionFile, "utf8");
   const entries = [];
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     try {
@@ -25053,7 +25135,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
       kind: "auditor",
       sessionParent: sessionFile,
       // Path is driven by sessionParent when under ledger home; cwd is a fallback only.
-      cwd: dirname15(sessionFile)
+      cwd: dirname16(sessionFile)
     });
     const { records } = await readSitianRecords(recordFile);
     for (let i = records.length - 1; i >= 0; i -= 1) {
@@ -25088,7 +25170,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
   }
   const parentId = parentEntries.find((entry) => entry.type === "session")?.id;
   if (parentId === void 0) return void 0;
-  const childDirectories = [join27(dirname15(sessionFile), "auditor-roles")];
+  const childDirectories = [join28(dirname16(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -25103,7 +25185,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join27(childDirectory, file));
+        entries = await readBoundSessionEntries(join28(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -25615,8 +25697,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join27(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join27(sessionDirectory, "session.jsonl");
+  const directories = [join28(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join28(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -25754,10 +25836,10 @@ async function removeFaceIfPresent(path) {
 async function clearOppositeTerminalArtifactFace(runDirectory) {
   const artifactsDir = roleRunArtifactsDirectory(runDirectory);
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    await removeFaceIfPresent(join27(artifactsDir, file));
+    await removeFaceIfPresent(join28(artifactsDir, file));
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    await removeFaceIfPresent(join27(runDirectory, relative3));
+    await removeFaceIfPresent(join28(runDirectory, relative3));
   }
   for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
     await removeFaceIfPresent(path);
@@ -25786,8 +25868,8 @@ async function publishAcceptedTerminalArtifacts(admitted, roleOutcome, coordinat
     roleOutcome
   );
   const artifactsDir = await ensureTerminalArtifactFace(admitted.runDirectory);
-  const reportPath = join27(artifactsDir, "report.json");
-  const evidencePath = join27(artifactsDir, "evidence.json");
+  const reportPath = join28(artifactsDir, "report.json");
+  const evidencePath = join28(artifactsDir, "evidence.json");
   await writeFile7(
     reportPath,
     `${JSON.stringify(bodies.report, null, 2)}
@@ -26222,7 +26304,7 @@ function publicationAttemptFromError(path, error) {
 }
 function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   const dirs = [];
-  for (const dir of [baseDir, runDirectory, dirname15(runDirectory)]) {
+  for (const dir of [baseDir, runDirectory, dirname16(runDirectory)]) {
     if (!dirs.includes(dir)) dirs.push(dir);
   }
   return dirs;
@@ -26244,7 +26326,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join27(dir, `${stem}.${randomUUID4()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join28(dir, `${stem}.${randomUUID4()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -26305,20 +26387,20 @@ async function publishFailureArtifacts(admitted, failure, authority) {
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join27(baseDir, "error.json"),
-    join27(baseDir, "error.settlement.json"),
-    join27(admitted.runDirectory, "error.settlement.json")
+    join28(baseDir, "error.json"),
+    join28(baseDir, "error.settlement.json"),
+    join28(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join27(baseDir, "error.settlement.json"),
-    join27(baseDir, "error.json")
+    join28(baseDir, "error.settlement.json"),
+    join28(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join27(baseDir, "evidence.json"),
-    join27(baseDir, "evidence.settlement.json"),
-    join27(admitted.runDirectory, "evidence.settlement.json")
+    join28(baseDir, "evidence.json"),
+    join28(baseDir, "evidence.settlement.json"),
+    join28(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join27(baseDir, "evidence.settlement.json"),
-    join27(baseDir, "evidence.json")
+    join28(baseDir, "evidence.settlement.json"),
+    join28(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -26494,10 +26576,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep2 = ((ms) => new Promise((resolve11) => {
+  const sleep2 = ((ms) => new Promise((resolve12) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve11();
+      resolve12();
     }, ms);
   }));
   sleep2.cancel = () => {
@@ -26509,7 +26591,7 @@ function defaultNavigatorGraceSleep() {
   return sleep2;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2 = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -26518,11 +26600,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2
       action();
     };
     void work.then(
-      (value) => finish(() => resolve11({ status: "done", value })),
+      (value) => finish(() => resolve12({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep2(graceMs).then(() => {
-      finish(() => resolve11({ status: "timeout" }));
+      finish(() => resolve12({ status: "timeout" }));
     });
   });
 }
@@ -26600,7 +26682,7 @@ var init_settlement = __esm({
 import { constants as fsConstants2 } from "node:fs";
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { lstat as lstat6, mkdir as mkdir3, open as open2 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 async function persistReturnedRunState(admitted, authority, options) {
   if (options?.lawful === true) {
     await markRunTerminal(admitted.runDirectory);
@@ -26671,7 +26753,7 @@ function jsonSafeReplacer() {
   };
 }
 async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
-  const filePath = join28(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
+  const filePath = join29(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
   const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}
 `;
   const noFollowFlag = typeof fsConstants2.O_NOFOLLOW === "number" ? fsConstants2.O_NOFOLLOW : 0;
@@ -26960,7 +27042,7 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { writeFile as writeFile8 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join29, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join30, resolve as resolve9 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -27050,7 +27132,7 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
       await writeFile8(
-        join29(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
+        join30(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
         `${JSON.stringify({ version: 1, ...payload }, null, 2)}
 `,
         { encoding: "utf8", flag: "wx" }
@@ -27215,7 +27297,7 @@ async function dispatchPostAdmissionTurn(input) {
         const rows = await readRecordedSubmissionRows(
           admitted.projectRoot,
           admitted.runId,
-          { home: homeFromRunDirectory(admitted.runDirectory), sessionParent: join29(admitted.runDirectory, "session", "session.jsonl") }
+          { home: homeFromRunDirectory(admitted.runDirectory), sessionParent: join30(admitted.runDirectory, "session", "session.jsonl") }
         );
         const asserted = rows.filter((row) => row.kind === "accepted" && row.role === admitted.role).map((row) => row.accepted).find((payload) => {
           if (payload === null || typeof payload !== "object" || Array.isArray(payload)) return false;
@@ -27370,7 +27452,7 @@ async function dispatchPostAdmissionTurn(input) {
     let stderrLogWriteFailure;
     try {
       await writeFile8(
-        join29(admitted.runDirectory, "stderr.log"),
+        join30(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -27646,8 +27728,8 @@ async function dispatchAfterWriterLease(input) {
   }
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
-  const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve8(attachmentPath);
-  return pathContainedIn(join29(runDirectory, "attachments"), absolute);
+  const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve9(attachmentPath);
+  return pathContainedIn(join30(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -28078,7 +28160,7 @@ __export(public_role_summons_exports, {
 import { execFile as execFile3 } from "node:child_process";
 import { existsSync as existsSync9 } from "node:fs";
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function createCapturingIo() {
   const chunks = [];
@@ -28102,7 +28184,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync9(join30(dir, "package.json")) && existsSync9(join30(dir, "souls"))) {
+    if (existsSync9(join31(dir, "package.json")) && existsSync9(join31(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -28218,7 +28300,7 @@ async function createSummonEnv(options, afterHost) {
 async function summonPublicRole(options) {
   const packageRoot2 = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join30(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join31(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -28682,13 +28764,15 @@ async function invokeCourtDiarist(input, env, io) {
       identity: {
         kind: "escalate",
         diagnostic: courtDiaristEscalateDiagnostic(roleOutcome, submissions)
-      }
+      },
+      ...result.admitted === void 0 ? {} : { admitted: result.admitted }
     };
   }
   if (result.exitCode !== 0) {
     const diagnostic = roleOutcome?.kind === "failure" ? roleOutcome.diagnostic : result.stderr?.trim() || `exit ${result.exitCode}`;
     return {
       identity: { kind: "unbound" },
+      ...result.admitted === void 0 ? {} : { admitted: result.admitted },
       failedWithoutEscalate: {
         diagnostic: `court diarist station failed for ${input.failureLabel}: ${diagnostic}`
       }
@@ -28706,11 +28790,13 @@ async function invokeCourtDiarist(input, env, io) {
         kind: "ticket",
         ticketNumber: asserted,
         ...courtTicketNumbers === void 0 ? {} : { courtTicketNumbers }
-      }
+      },
+      ...result.admitted === void 0 ? {} : { admitted: result.admitted }
     };
   }
   return {
-    identity: { kind: "unbound" }
+    identity: { kind: "unbound" },
+    ...result.admitted === void 0 ? {} : { admitted: result.admitted }
   };
 }
 async function runCountersignCourtDiaristStation(admitted, env, io) {
@@ -28770,7 +28856,7 @@ __export(instruction_seat_run_exports, {
   runPublicInstructionSeat: () => runPublicInstructionSeat,
   runPublicInstructionSeatResume: () => runPublicInstructionSeatResume
 });
-import { resolve as resolve9 } from "node:path";
+import { resolve as resolve10, sep as sep5 } from "node:path";
 function roleRecord(role) {
   const record4 = packagedRoleMetadata(role);
   if (record4 === void 0) {
@@ -28931,7 +29017,7 @@ async function runOmittedLensBatch(argv2, parsed, env, io) {
   const children = await summonParallelReviewerLenses2({
     argv: argv2,
     cwd: env.cwd,
-    projectRoot: resolve9(parsed.project ?? env.cwd),
+    projectRoot: resolve10(parsed.project ?? env.cwd),
     baseRevision: parsed.baseRevision ?? "",
     home: env.home,
     agentDir: env.agentDir,
@@ -28989,7 +29075,7 @@ async function runCountersignBody(parsed, env, io) {
     const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction ?? "";
     const resumed = await tryResumeSameTicketSeatRun({
       home: env.home,
-      projectRoot: resolve9(parsed.project ?? env.cwd),
+      projectRoot: resolve10(parsed.project ?? env.cwd),
       role: "countersign",
       parentRunPath: gateParentRunPath,
       ...env.boundTicketNumber === void 0 ? {} : { ticketNumber: env.boundTicketNumber },
@@ -29029,6 +29115,7 @@ async function runCountersignBody(parsed, env, io) {
       let typedTicket;
       let typedCourtTicketNumbers;
       let identityDiaristRan = false;
+      let unboundDiaristRunId;
       if (env.runCourtDiaristStation === void 0) {
         let outcome;
         try {
@@ -29051,11 +29138,15 @@ async function runCountersignBody(parsed, env, io) {
           }, seatAdapters(admitted, env), env.principalAuthority, io);
         }
         identityDiaristRan = true;
+        if (outcome.admitted?.runDirectory.includes(`${sep5}unbound${sep5}runs${sep5}`)) {
+          unboundDiaristRunId = outcome.admitted.runId;
+        }
         if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== void 0) {
           const diagnostic = outcome.identity.kind === "escalate" ? outcome.identity.diagnostic : outcome.failedWithoutEscalate?.diagnostic ?? "";
           await materializeAdmission(
             isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : void 0
           );
+          if (unboundDiaristRunId !== void 0) await recordChildDiaristRun(admitted, unboundDiaristRunId);
           await markRunAdmitted(admitted, env.principalAuthority);
           return await presentControlledFailure2(admitted, {
             timedOut: false,
@@ -29073,6 +29164,9 @@ async function runCountersignBody(parsed, env, io) {
       }
       await materializeAdmission(typedTicket);
       await markRunAdmitted(admitted, env.principalAuthority);
+      if (unboundDiaristRunId !== void 0) {
+        await recordChildDiaristRun(admitted, unboundDiaristRunId);
+      }
       if (gateParentRunPath !== void 0) {
         await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
         admitted = { ...admitted, sourceRunPath: gateParentRunPath };
@@ -29317,6 +29411,9 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
         ...env.signal === void 0 ? {} : { signal: env.signal },
         ...env.hostAdapters === void 0 ? {} : { hostAdapters: env.hostAdapters }
       }, io);
+      if (outcome.admitted?.runDirectory.includes(`${sep5}unbound${sep5}runs${sep5}`)) {
+        await recordChildDiaristRun(admitted, outcome.admitted.runId);
+      }
       if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== void 0) {
         const diagnostic = outcome.identity.kind === "escalate" ? outcome.identity.diagnostic : outcome.failedWithoutEscalate?.diagnostic ?? "";
         return await presentControlledFailure2(admitted, {
@@ -29328,6 +29425,9 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
       }
       if (outcome.identity.kind === "ticket") {
         try {
+          if (outcome.admitted === void 0) throw new Error("court diarist ticket has no admitted run");
+          await bindAdmittedTicketNumber(outcome.admitted, outcome.identity.ticketNumber);
+          await relocateAdmittedRunToTicket(outcome.admitted, env.principalAuthority);
           await bindAdmittedTicketNumber(admitted, outcome.identity.ticketNumber);
           await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
         } catch (error) {
@@ -29459,10 +29559,10 @@ var init_analyst_book_key = __esm({
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { rename as rename3, rm as rm4, writeFile as writeFile9 } from "node:fs/promises";
-import { dirname as dirname16, join as join31 } from "node:path";
+import { dirname as dirname17, join as join32 } from "node:path";
 async function writeFileAtomically(destination, contents) {
-  const parent = dirname16(destination);
-  const temporary = join31(parent, `.atomic-write-${randomUUID7()}.tmp`);
+  const parent = dirname17(destination);
+  const temporary = join32(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
     await writeFile9(temporary, contents);
     await rename3(temporary, destination);
@@ -29478,17 +29578,17 @@ var init_atomic_write = __esm({
 });
 
 // src/analyst-index.ts
-import { open as open3, readFile as readFile18, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname17, join as join32 } from "node:path";
+import { open as open3, readFile as readFile19, unlink as unlink5 } from "node:fs/promises";
+import { dirname as dirname18, join as join33 } from "node:path";
 function sleep(ms) {
-  return new Promise((resolve11) => {
-    setTimeout(resolve11, ms);
+  return new Promise((resolve12) => {
+    setTimeout(resolve12, ms);
   });
 }
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
-  ensureRealDirectoryTree(ledgerHome, dirname17(indexPath));
-  const lockPath = join32(dirname17(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  ensureRealDirectoryTree(ledgerHome, dirname18(indexPath));
+  const lockPath = join33(dirname18(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29500,7 +29600,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
         return await fn();
       } finally {
         await handle.close().catch(() => void 0);
-        await unlink4(lockPath).catch(() => void 0);
+        await unlink5(lockPath).catch(() => void 0);
       }
     } catch (error) {
       const code = error instanceof Error && "code" in error ? error.code : void 0;
@@ -29515,7 +29615,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join32(ledgerHome, "analyst", "library-index.json");
+  return join33(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -29606,7 +29706,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
   const path = analystLibraryIndexPath(ledgerHome);
   let raw;
   try {
-    raw = await readFile18(path, "utf8");
+    raw = await readFile19(path, "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
       return void 0;
@@ -29624,7 +29724,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
 }
 async function writeAnalystLibraryIndexPage(ledgerHome, page) {
   const path = analystLibraryIndexPath(ledgerHome);
-  ensureRealDirectoryTree(ledgerHome, dirname17(path));
+  ensureRealDirectoryTree(ledgerHome, dirname18(path));
   assertLedgerFileInsideHome(path, ledgerHome);
   await writeFileAtomically(path, `${JSON.stringify(page, null, 2)}
 `);
@@ -29810,8 +29910,8 @@ var init_analyst_cohort = __esm({
 });
 
 // src/analyst-ledger.ts
-import { readdir as readdir8, readFile as readFile19 } from "node:fs/promises";
-import { basename as basename8, join as join33 } from "node:path";
+import { readdir as readdir8, readFile as readFile20 } from "node:fs/promises";
+import { basename as basename9, join as join34 } from "node:path";
 function isMissingPathError6(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -29824,7 +29924,7 @@ function isRecord12(value) {
 async function readExistingRunLifecycleState(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile19(join33(runDirectory, "run-state.json"), "utf8")
+      await readFile20(join34(runDirectory, "run-state.json"), "utf8")
     );
     if (!isRecord12(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
@@ -29848,7 +29948,7 @@ function ghostLeaseCheckFromAutopsy(autopsy) {
   }
 }
 async function classifyGhostCandidate(input) {
-  const autopsy = await autopsyWriterLock(join33(input.runDirectory, "writer.lock"));
+  const autopsy = await autopsyWriterLock(join34(input.runDirectory, "writer.lock"));
   const leaseCheck = ghostLeaseCheckFromAutopsy(autopsy);
   if (leaseCheck === void 0) return { kind: "live" };
   return {
@@ -29884,7 +29984,7 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile19(join33(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile20(join34(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError6(error)) return void 0;
     throw error;
@@ -29917,7 +30017,7 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile19(join33(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile20(join34(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (isRecord12(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
@@ -29925,7 +30025,7 @@ async function resolveSessionFile(runDirectory) {
   } catch (error) {
     if (!isMissingPathError6(error)) throw error;
   }
-  return join33(runDirectory, "session", "session.jsonl");
+  return join34(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -30111,9 +30211,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join33(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join34(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join33(input.runDirectory, "session", "auditor-roles"),
+      join34(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -30148,7 +30248,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join33(ledgerHome, "books");
+  const booksRoot = join34(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -30181,7 +30281,7 @@ async function scanAnalystIssueRuns(input) {
   const ghostLegs = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const bookDir = join33(booksRoot, book);
+    const bookDir = join34(booksRoot, book);
     let runDirectories;
     try {
       runDirectories = await listBookRunDirectories(bookDir);
@@ -30190,7 +30290,7 @@ async function scanAnalystIssueRuns(input) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const runName = basename8(runDirectory);
+      const runName = basename9(runDirectory);
       const parsed = parseRunDirectoryName2(runName);
       if (parsed === void 0) continue;
       let scopeFields;
@@ -31058,7 +31158,7 @@ var init_analyst_metric_family = __esm({
 
 // src/analyst-page.ts
 import { createHash as createHash5 } from "node:crypto";
-import { dirname as dirname18, join as join34 } from "node:path";
+import { dirname as dirname19, join as join35 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -31069,7 +31169,7 @@ function analystIssuePageKey(address) {
   return createHash5("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join34(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join35(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31188,7 +31288,7 @@ async function buildAnalystIssueMetricsPage(input) {
 }
 async function writeAnalystIssueMetricsPage(ledgerHome, page) {
   const path = analystIssuePagePath(ledgerHome, analystIssuePageAddressFromPage(page));
-  ensureRealDirectoryTree(ledgerHome, dirname18(path));
+  ensureRealDirectoryTree(ledgerHome, dirname19(path));
   assertLedgerFileInsideHome(path, ledgerHome);
   await writeFileAtomically(path, `${JSON.stringify(page, null, 2)}
 `);
@@ -31205,7 +31305,7 @@ var init_analyst_page = __esm({
 });
 
 // src/analyst-entry.ts
-import { readFile as readFile20 } from "node:fs/promises";
+import { readFile as readFile21 } from "node:fs/promises";
 function isMissingPathError7(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -31235,7 +31335,7 @@ async function readOrComputeAnalystIssuePage(input, options) {
     ...issueNumber === void 0 && input.bookKey === void 0 ? { scopeRootIdentity: projectRoot } : {}
   });
   try {
-    const raw = await readFile20(pagePath, "utf8");
+    const raw = await readFile21(pagePath, "utf8");
     const page = JSON.parse(raw);
     if (cachedPageMatchesRequestedScope(page, { bookKey, ...input })) {
       const ghostScan = await scanAnalystIssueRuns({
@@ -31336,7 +31436,7 @@ async function runAnalystModelGroupsMode(input, home) {
       scopeRootIdentity: projectRoot
     });
     try {
-      const raw = await readFile20(pagePath, "utf8");
+      const raw = await readFile21(pagePath, "utf8");
       JSON.parse(raw);
     } catch (error) {
       if (!isMissingPathError7(error)) {
@@ -31435,8 +31535,8 @@ var init_analyst_entry = __esm({
 });
 
 // src/public-cli/analyst-run.ts
-import { readFile as readFile21 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, resolve as resolve10 } from "node:path";
+import { readFile as readFile22 } from "node:fs/promises";
+import { isAbsolute as isAbsolute10, resolve as resolve11 } from "node:path";
 function resolveAnalystIssueBookKeyFromCwd(cwd = process.cwd()) {
   try {
     return resolveBookKeyFromGit(cwd);
@@ -31485,10 +31585,10 @@ async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPaths) {
     );
   }
   const sourcePath = attachmentPaths[0];
-  const absolute = isAbsolute10(sourcePath) ? sourcePath : resolve10(sourcePath);
+  const absolute = isAbsolute10(sourcePath) ? sourcePath : resolve11(sourcePath);
   let bytes;
   try {
-    bytes = await readFile21(absolute);
+    bytes = await readFile22(absolute);
   } catch (error) {
     throw new CliUsageError(
       `analyst sweep attachment is not a readable regular file: ${sourcePath}`,
@@ -31609,7 +31709,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath7 } from "node:fs/promises";
-import { join as join35 } from "node:path";
+import { join as join36 } from "node:path";
 function publicSeatArgv(owner) {
   return {
     parse: (args) => parsePublicSeatArgv(owner, args),
@@ -31748,7 +31848,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join35(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join36(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -32462,7 +32562,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync10 } from "node:fs";
-import { dirname as dirname19, join as join36 } from "node:path";
+import { dirname as dirname20, join as join37 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32549,10 +32649,10 @@ function linkPackage(packageRoot2, name, targetDir) {
 }
 
 // src/public-cli/main.ts
-var here = dirname19(fileURLToPath2(import.meta.url));
+var here = dirname20(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join36(binDir, "..", "..");
-  if (existsSync10(join36(canonical, "package.json"))) {
+  const canonical = join37(binDir, "..", "..");
+  if (existsSync10(join37(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;