@akagilnc/pi-workflow-roles 0.1.4956 → 0.1.4977

package/src/role-runtime.ts

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { readFileSync, writeSync } from "node:fs";
 import { join } from "node:path";
+import { readableGateItem } from "./readable-gate-item.ts";
 import {
   ExplicitInternalActivationError,
 
@@ -37,8 +38,6 @@ import {
 } from "./engine-detour.ts";
 import { engineSessionMaterialFromOptions } from "./package-resources/engine-material.ts";
 import { registerEngineDetourTool } from "./engine-detour-tool.ts";
-import { readableGateItem } from "./readable-gate-item.ts";
-import { runIdFromRunDirectory } from "./run-terminal-artifacts.ts";
 import { createReceiptDeliveryPolicy, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE, RECEIPT_DELIVERY_PROMPT } from "./receipt-delivery-policy.ts";
 import type { AnyCanonicalSkillBinding } from "./canonical-skill-binding.ts";
 import type { CollectorClock } from "./collector-evidence.ts";
@@ -78,15 +77,9 @@ import {
 } from "./diarist-role.ts";
 import {
   SECRETARIAT_OUTPUT_TOOL_SPEC,
-  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC,
-  projectSecretariatSummonResult,
   type SecretariatRuntimeDependencies,
-  type SecretariatSummonCountersignParameters,
 } from "./secretariat-role.ts";
-import {
-  SECRETARIAT_OUTPUT_TOOL_NAME,
-  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-} from "./secretariat-contracts.ts";
+import { SECRETARIAT_OUTPUT_TOOL_NAME } from "./secretariat-contracts.ts";
 import {
   projectDiaristSessions,
 } from "./diarist-contracts.ts";
@@ -116,7 +109,7 @@ import {
 } from "./navigator-invocation-identity.ts";
 import { recordTypedProviderHttpStatus } from "./typed-provider-http.ts";
 import { NAVIGATOR_POST_ROLE_GRACE_MS, raceNavigatorGrace } from "./public-cli/settlement.ts";
-import { PACKAGED_ROLE_REGISTRY, isOfficerReviewSeat, packagedRoleAcceptedText, packagedRoleActivationFlags, packagedRoleInputFlag, packagedRoleMetadata, packagedRoleOutputTool, packagedRolePhaseFlag, type PackagedRole } from "./packaged-role-registry.ts";
+import { PACKAGED_ROLE_REGISTRY, isOfficerReviewSeat, packagedRoleActivationFlags, packagedRoleInputFlag, packagedRoleMetadata, packagedRoleOutputTool, packagedRolePhaseFlag, type PackagedRole } from "./packaged-role-registry.ts";
 import { isAuditEscalationProjection } from "./audit-escalation.ts";
 import {
   createJudgeRoleRuntime,
@@ -513,7 +506,7 @@ export type RoleRuntimeDependencies = {
   loadNotarySourceRun?(path: string): Promise<import("./notary-contracts.ts").NotarySourceRunLocator>;
   loadDoctorCase?(path: string): Promise<import("./doctor-contracts.ts").DoctorCase>;
   loadMergerInput?(path: string): Promise<unknown>;
-  auditDoctorCompliance?(options: { context: HostContext; signal?: AbortSignal }): Promise<ComplianceDecision>;
+  auditDoctorCompliance?(options: { context: HostContext; signal?: AbortSignal; submission: unknown }): Promise<ComplianceDecision>;
   createCollectorClock?(): CollectorClock;
   createNavigatorAttendance?(options: { context: HostContext; role: string; phase: NavigatorPhase; subjectKey: string; subject: string; authority: string; contextError?: unknown; invocationId: string; onEvent: (event: import("./navigator-attendance.ts").NavigatorEvent, report: import("./navigator-attendance.ts").NavigatorReport) => void | Promise<void> }): NavigatorAttendanceDependency | Promise<NavigatorAttendanceDependency>;
   loadNavigatorWorkContext?(options: { context: HostContext; role: string; phase: NavigatorPhase; getFlag?: (name: string) => unknown }): Promise<NavigatorWorkContext>;
@@ -646,6 +639,7 @@ function createFiledOfficerRuntime(
     tool: { name: string; label: string; description: string; promptSnippet: string; parameters: unknown };
     soulTag: string;
     beforeAccept?: FiledOfficerBeforeAccept;
+    relayGatePass?: true;
   },
   dependencies: { loadSoul(): Promise<string> },
 ) {
@@ -670,11 +664,17 @@ function createFiledOfficerRuntime(
               spec.beforeAccept === undefined
                 ? undefined
                 : await spec.beforeAccept({ toolCallId, parameters, signal, ctx });
+            if (isAuditEscalationProjection(projected)) {
+              return { content: [], details: projected, terminate: true as const };
+            }
+            const pass = spec.relayGatePass === true && projected !== null && typeof projected === "object" && "officer" in projected && "receipt" in projected
+              ? projected
+              : undefined;
             // Accept-as-is + terminate only. Shape is not an admission gate
             // (第 0 条 / ADR 0055); sole-final barrier is ledger-owned (#575).
             return {
-              content: [{ type: "text" as const, text: packagedRoleAcceptedText(spec.role) }],
-              details: projected === undefined ? parameters : projected,
+              content: pass === undefined || pass.receipt === undefined ? [] : [{ type: "text" as const, text: readableGateItem(pass.receipt) }],
+              details: pass === undefined ? (projected === undefined ? parameters : projected) : parameters,
               terminate: true as const,
             };
           },
@@ -947,50 +947,30 @@ const COUNTERSIGN_QUEUE_STATUSES = new Set(["converged", "continue", "escalate"]
 const COUNTERSIGN_STATUS_REASK =
   "countersignStatus 不是 converged、continue、escalate 三态之一。请重新交卷，status 写明其一。" as const;
 
-/**
- * #969 authorized non-pi hosts: Secretariat converged is a candidate ticket —
- * AK-side submission gate summons 给事中. pi keeps mid-turn summon tool only.
- */
-const SECRETARIAT_SUBMISSION_GATE_HOSTS = new Set(["codex", "claude", "grok-build"]);
-
-/** Secretariat status words the non-pi submission gate reads (#969). */
+/** Secretariat status words the submission gate reads. */
 const SECRETARIAT_QUEUE_STATUSES = new Set(["converged", "escalate"]);
 
 /**
- * Plain-language re-ask when non-pi secretariatStatus is not a known queue word.
- * Back to secretariat itself — 给事中 is not summoned (#969 / ADR 0055).
+ * Plain-language re-ask when secretariatStatus is not a known queue word.
+ * Back to secretariat itself — 给事中 is not summoned for escalation.
  */
 const SECRETARIAT_STATUS_REASK =
   "secretariatStatus 不是 converged、escalate 之一。请重新交卷，status 写明其一。" as const;
 
 /**
- * #924 Secretariat on the shared filed-officer envelope + non-terminating
- * summon-countersign tool (auditor dossier extension pattern).
- * Nested countersign lifecycle stays on summonPublicRole (ADR 0018).
- * #924 / 第 0 条 (pi): output tool records the receipt as submitted — no status
- * shape/value reject or reask; legality is content-layer / downstream.
- * #969 (codex/claude/grok-build): converged arms 既有交卷闸 → 给事中; escalate
- * skips the gate; other values reask secretariat (ADR 0055).
+ * Secretariat output is terminal; converged submissions enter the shared
+ * submission gate on every host that mounts gatekeeper actions.
  */
 export function createSecretariatRoleRuntime(
   roleHost: RoleHost,
   dependencies: SecretariatRuntimeDependencies,
   hostActions?: import("./host-contracts.ts").HostGatekeeperActions,
 ) {
-  let parentInstruction = "";
-  // #969: non-pi submission gate only — pi mid-turn summon path stays untouched.
   const beforeAccept: FiledOfficerBeforeAccept | undefined =
     hostActions !== undefined
       ? async ({ toolCallId, parameters, signal, ctx }) => {
-          const host =
-            typeof ctx.host === "string" && ctx.host.trim() !== ""
-              ? ctx.host.trim()
-              : undefined;
-          if (host === undefined || !SECRETARIAT_SUBMISSION_GATE_HOSTS.has(host)) {
-            return undefined;
-          }
           if (roleHost.requireGatekeeperPass === undefined) {
-            const error = new Error(`host ${host} cannot mount the secretariat submission gate`);
+            const error = new Error("host cannot mount the secretariat submission gate");
             error.name = "InfrastructureFailure";
             return hostActions.failInfrastructure(error, ctx, toolCallId);
           }
@@ -1006,7 +986,7 @@ export function createSecretariatRoleRuntime(
             throw new ParentQueueReaskError(SECRETARIAT_STATUS_REASK);
           }
           if (status === "escalate") {
-            // Parent escalate → throw to caller as-is; 给事中 does not attend (#969).
+            // Parent escalate → throw to caller as-is; countersign does not attend.
             return undefined;
           }
           try {
@@ -1019,7 +999,7 @@ export function createSecretariatRoleRuntime(
               // #879: this-turn typed payload — identity-bound at submit site.
               submission: parameters,
             });
-            // #969: book 给事中 署 snapshot for seat settlement projection (receipt + runId).
+            // Book 给事中 署 snapshot for seat settlement projection (receipt + runId).
             // Ledger accepted stays LLM params (#836); public terminal reads this entry.
             if (
               pass !== undefined
@@ -1040,9 +1020,9 @@ export function createSecretariatRoleRuntime(
                 ...(runId === undefined ? {} : { runId }),
               });
             }
-            return undefined;
+            return pass;
           } catch (error) {
-            // #969: 给事中上呈 ends parent with officer receipt (no retry / 不擅改).
+            // 给事中上呈 ends parent with officer receipt (no retry / 不擅改).
             if (
               error instanceof GatekeeperDecisionError
               && error.result.status === "escalate"
@@ -1056,7 +1036,7 @@ export function createSecretariatRoleRuntime(
                 typeof error.result.runId === "string" && error.result.runId.trim() !== ""
                   ? error.result.runId
                   : undefined;
-              // Durable on every host: envelope persists custom entries only
+              // Envelope persists custom entries only
               // (toolResult rows are memory-only on headless/ACP — #617/#959).
               const {
                 SECRETARIAT_GATE_OFFICER_ENTRY_TYPE,
@@ -1087,116 +1067,24 @@ export function createSecretariatRoleRuntime(
     roleHost,
     {
       role: "secretariat",
+      relayGatePass: true,
       tool: SECRETARIAT_OUTPUT_TOOL_SPEC,
       soulTag: "secretariat",
       ...(beforeAccept === undefined ? {} : { beforeAccept }),
     },
     dependencies,
   );
-  let summonRegistered = false;
   return {
     async activate() {
       await base.activate();
-      if (!summonRegistered) {
-        summonRegistered = true;
-        // Capture parent prompt for default summon instruction (envelope already
-      // owns soul inject; this handler only records the assignment text).
-      roleHost.on("before_agent_start", (event) => {
-        if (typeof event.prompt === "string" && event.prompt.trim() !== "") {
-          parentInstruction = event.prompt;
-        }
-      });
-      roleHost.registerTool({
-        name: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-        label: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.label,
-        description: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.description,
-        promptSnippet: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.promptSnippet,
-        parameters: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC.parameters as never,
-        async execute(
-          _toolCallId,
-          parameters: SecretariatSummonCountersignParameters,
-          signal,
-          _onUpdate,
-          ctx,
-        ): Promise<HostToolResult<unknown>> {
-          const fromArgs =
-            typeof parameters?.instruction === "string"
-              ? parameters.instruction.trim()
-              : "";
-          // #924: instruction comes from tool args or parent prompt only — no
-          // unauthored default summons prose (票号写在传召里; no fabricated fallback).
-          const instruction =
-            fromArgs !== "" ? fromArgs : parentInstruction.trim();
-          const correlationId = (() => {
-            const runDirectory = runDirectoryFromHostContext(ctx);
-            if (runDirectory === undefined) return undefined;
-            return runIdFromRunDirectory(runDirectory);
-          })();
-          const summon = dependencies.summonCountersign;
-          const summoned = summon === undefined
-            ? await (async () => {
-                // #987 Result 7 / #747: mid-turn summon resumes by parentRunPath
-                // (secretariat run dir), same key as summonGateOfficer countersign.
-                // Board ticket is bind-only — never the resume lookup.
-                const coordinates = readRoleRunCoordinates(ctx, "secretariat summons");
-                const { summonPublicRole } = await import("./public-role-summons.ts");
-                const { readBoardTicketNumber } = await import("./run-ticket-number.ts");
-                const parentTicket = await readBoardTicketNumber(coordinates.runDirectory);
-                return summonPublicRole({
-                  role: "countersign",
-                  argv: ["--project", coordinates.projectRoot, "--", instruction],
-                  cwd: coordinates.projectRoot,
-                  home: coordinates.home,
-                  parentRunPath: coordinates.runDirectory,
-                  ...(parentTicket === undefined
-                    ? {}
-                    : { boundTicketNumber: parentTicket }),
-                  ...(signal === undefined ? {} : { signal }),
-                  ...(correlationId === undefined ? {} : { correlationId }),
-                  ...(dependencies.packageRoot === undefined
-                    ? {}
-                    : { packageRoot: dependencies.packageRoot }),
-                  ...(dependencies.hostAdapters === undefined
-                    ? {}
-                    : { hostAdapters: dependencies.hostAdapters }),
-                });
-              })()
-            : await summon({
-                instruction,
-                cwd: ctx.cwd,
-                ...(signal === undefined ? {} : { signal }),
-                ...(correlationId === undefined ? {} : { correlationId }),
-                ...(dependencies.home === undefined ? {} : { home: dependencies.home }),
-                ...(dependencies.packageRoot === undefined
-                  ? {}
-                  : { packageRoot: dependencies.packageRoot }),
-              });
-          const details = projectSecretariatSummonResult(summoned);
-          // #953 / #775: parent-visible text from typed details via readableGateItem
-          // sole source — payloads + receipt (latest) already carry 传话 facts.
-          return {
-            content: [
-              {
-                type: "text" as const,
-                text: readableGateItem(details),
-              },
-            ],
-            details,
-          };
-        },
-        });
-      }
-      const packageRequired = [
-        SECRETARIAT_OUTPUT_TOOL_NAME,
-        SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-      ] as const;
+      const packageRequired = [SECRETARIAT_OUTPUT_TOOL_NAME] as const;
       const all = roleHost.getAllTools().map((tool) => tool.name);
       for (const name of packageRequired) {
         if (all.filter((item) => item === name).length !== 1) {
           throw new Error(`secretariat required tool collision or missing: ${name}`);
         }
       }
-      // Host-neutral minimum package surface (#924 G6): declare package tools via
+      // Host-neutral minimum package surface: declare package tools via
       // setActiveTools without hardcoding host builtin names. Preserve any host
       // surface already visible on getAllTools/getActiveTools so body rewrite
       // (public gh path) stays reachable on hosts that expose it.
@@ -1251,21 +1139,30 @@ export function createCountersignRoleRuntime(
             error.name = "InfrastructureFailure";
             return hostActions.failInfrastructure(error, ctx, toolCallId);
           }
-          await roleHost.requireGatekeeperPass({
-            context: ctx,
-            subject: { kind: "countersign_verdict" },
-            ...(signal === undefined ? {} : { signal }),
-            hostActions,
-            toolCallId,
-            // #879: this-turn typed payload — identity-bound at submit site.
-            submission: parameters,
-          });
+          try {
+            return await roleHost.requireGatekeeperPass({
+              context: ctx,
+              subject: { kind: "countersign_verdict" },
+              ...(signal === undefined ? {} : { signal }),
+              hostActions,
+              toolCallId,
+              // #879: this-turn typed payload — identity-bound at submit site.
+              submission: parameters,
+            });
+          } catch (error) {
+            if (error instanceof GatekeeperDecisionError && error.result.status === "escalate") {
+              const { buildAuditEscalationResult } = await import("./audit-escalation.ts");
+              return buildAuditEscalationResult({ status: "escalate", officer: "notary", conflicts: error.result.receipt }, parameters);
+            }
+            throw error;
+          }
         }
       : undefined;
   return createFiledOfficerRuntime(
     roleHost,
     {
       role: "countersign",
+      relayGatePass: true,
       tool: COUNTERSIGN_TOOL_SPEC,
       soulTag: "countersign",
       ...(beforeAccept === undefined ? {} : { beforeAccept }),
@@ -1357,6 +1254,7 @@ export function createRoleRuntimeExtension(
     const pendingInfrastructureFailures = new Map<string, PendingInfrastructureFailure>();
     // Envelope-owned execute→tool_result bridge for submission non-pass (ADR 0018 / #525).
     const pendingSubmissionNonPassByToolCallId = new Map<string, SubmissionNonPassResult>();
+    const pendingPriorGatePassByToolCallId = new Map<string, unknown>();
     let engineDetourRegistered = false;
     // #288 primary-session thin adapter. The policy is the sole budget owner;
     // terminating-tool rejections and mechanical delivery requests share two turns.
@@ -1600,6 +1498,11 @@ export function createRoleRuntimeExtension(
       return { readingMaterial: caseDossier };
     });
     roleHost.on("tool_result", async (event) => {
+      const priorGatePass = pendingPriorGatePassByToolCallId.get(event.toolCallId);
+      pendingPriorGatePassByToolCallId.delete(event.toolCallId);
+      const priorPassContent = priorGatePass !== undefined && event.isError
+        ? [{ type: "text" as const, text: readableGateItem(priorGatePass) }, ...(event.content ?? [])]
+        : undefined;
       const role = selectedRole;
       if (role === undefined) return;
       // #676 E / J1: collector operational bookkeeping on the shared tool_result seam.
@@ -1634,15 +1537,16 @@ export function createRoleRuntimeExtension(
       // Persist typed infrastructure-failure fact onto the role session toolResult so
       // exact-session restart shares the same durable completion classification.
       if (infrastructureDetails !== undefined) {
-        return { isError: true };
+        return { isError: true, ...(priorPassContent === undefined ? {} : { content: priorPassContent }) };
       }
       // Submission non-pass: throw kept message text for the model; project the
       // envelope-bound structured result onto session details at this tool_result seam.
       const submissionNonPass = pendingSubmissionNonPassByToolCallId.get(event.toolCallId);
       if (submissionNonPass !== undefined) {
         pendingSubmissionNonPassByToolCallId.delete(event.toolCallId);
-        return { details: submissionNonPass, isError: true };
+        return { details: submissionNonPass, isError: true, ...(priorPassContent === undefined ? {} : { content: priorPassContent }) };
       }
+      if (priorPassContent !== undefined) return { content: priorPassContent, isError: true };
     });
     // Queue receipt delivery before `agent_settled`: that event means Pi has
     // already decided no queued continuation will run, so a triggerTurn there is
@@ -1805,6 +1709,7 @@ export function createRoleRuntimeExtension(
       disposeNavigatorAttendanceNonBlocking(attendanceToDispose);
       pendingInfrastructureFailures.clear();
       pendingSubmissionNonPassByToolCallId.clear();
+      pendingPriorGatePassByToolCallId.clear();
       observationFace.reset();
     });
 
@@ -1818,6 +1723,9 @@ export function createRoleRuntimeExtension(
       bindSubmissionNonPass(toolCallId: string, result: SubmissionNonPassResult): void {
         pendingSubmissionNonPassByToolCallId.set(toolCallId, result);
       },
+      bindPriorGatePass(toolCallId: string, receipt: unknown): void {
+        pendingPriorGatePassByToolCallId.set(toolCallId, receipt);
+      },
     };
     const requireRoleSoul = (role: PackagedRole): Promise<string> => dependencies.loadRoleSoul(role);
     const judge = createJudgeRoleRuntime(
@@ -1916,12 +1824,6 @@ export function createRoleRuntimeExtension(
     );
     const secretariat = createSecretariatRoleRuntime(roleHost, {
       loadSoul: () => requireRoleSoul("secretariat"),
-      ...(dependencies.packageRoot === undefined
-        ? {}
-        : { packageRoot: dependencies.packageRoot }),
-      ...(dependencies.hostAdapters === undefined
-        ? {}
-        : { hostAdapters: dependencies.hostAdapters }),
     }, hostActions);
     const merger = createMergerRoleRuntime(roleHost, {
       loadSoul: () => requireRoleSoul("merger"),
@@ -2171,6 +2073,7 @@ export function createRoleRuntimeExtension(
       pendingNavigatorSettlement = undefined;
       pendingInfrastructureFailures.clear();
       pendingSubmissionNonPassByToolCallId.clear();
+      pendingPriorGatePassByToolCallId.clear();
       navigatorWorkContext = undefined;
       // #351: OAuth keepalive is orthogonal to --ak-role; start before role early-return
       // so role-less sessions (and reload after shutdown stop) still keep tokens alive.

package/src/secretariat-contracts.ts

@@ -8,8 +8,6 @@
  */
 
 export const SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
-export const SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME =
-  "ak_secretariat_summon_countersign";
 /**
  * #969 durable custom entry: 给事中 terminal (署|上呈) for seat settlement projection.
  * Carries original receipt bytes + nested runId. Envelope persists custom entries

package/src/secretariat-role.ts

@@ -1,5 +1,5 @@
 /**
- * Secretariat (中书省) label, soul shape, decision-tool specs, result projection.
+ * Secretariat (中书省) label and terminating decision-tool spec.
  * Lifecycle assembly (activate, register, prompt inject, inventory) lives on the
  * shared envelope — src/role-runtime.ts (ADR 0018 / #924).
  */
@@ -7,19 +7,9 @@ import type { Static } from "typebox";
 import { Type } from "typebox";
 
 import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.ts";
-import type { NamedRoleTurnHostAdapter } from "./public-cli/role-turn-host-resolution.ts";
-import type { PublicSummonResult } from "./public-role-summons.ts";
-import {
-  SECRETARIAT_OUTPUT_TOOL_NAME,
-  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-  type SecretariatVerdict,
-} from "./secretariat-contracts.ts";
-import { runIdFromRunDirectory } from "./run-terminal-artifacts.ts";
+import { SECRETARIAT_OUTPUT_TOOL_NAME, type SecretariatVerdict } from "./secretariat-contracts.ts";
 
-export {
-  SECRETARIAT_OUTPUT_TOOL_NAME,
-  SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-} from "./secretariat-contracts.ts";
+export { SECRETARIAT_OUTPUT_TOOL_NAME } from "./secretariat-contracts.ts";
 export type { SecretariatVerdict };
 
 /** 中书省终局回执形状；形状指引，非 schema 闸。 */
@@ -51,23 +41,6 @@ export const secretariatVerdictSchema = withTerminatingOutputDeclarations(
 
 export type SecretariatVerdictParameters = Static<typeof secretariatVerdictSchema>;
 
-/** 传召给事中参数；形状指引，非 schema 闸。 */
-export const secretariatSummonCountersignSchema = Type.Object(
-  {
-    instruction: Type.Optional(
-      Type.String({
-        description: "传召散文；票号写在其中。空则沿用本局指令。",
-      }),
-    ),
-  },
-  { additionalProperties: true },
-);
-(secretariatSummonCountersignSchema as unknown as { required: string[] }).required = [];
-
-export type SecretariatSummonCountersignParameters = Static<
-  typeof secretariatSummonCountersignSchema
->;
-
 export const SECRETARIAT_OUTPUT_TOOL_SPEC = {
   name: SECRETARIAT_OUTPUT_TOOL_NAME,
   label: "中书省输出",
@@ -76,138 +49,6 @@ export const SECRETARIAT_OUTPUT_TOOL_SPEC = {
   parameters: secretariatVerdictSchema,
 } as const;
 
-export const SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_SPEC = {
-  name: SECRETARIAT_SUMMON_COUNTERSIGN_TOOL_NAME,
-  label: "传召给事中",
-  description: "经共享执行接缝传召给事中审票；封驳后续同一 run 再送。",
-  promptSnippet: "传召给事中",
-  parameters: secretariatSummonCountersignSchema,
-} as const;
-
-export type SecretariatSummonCountersign = (input: {
-  readonly instruction: string;
-  readonly cwd: string;
-  readonly signal?: AbortSignal;
-  readonly correlationId?: string;
-  readonly home?: string;
-  readonly packageRoot?: string;
-}) => Promise<PublicSummonResult>;
-
 export type SecretariatRuntimeDependencies = {
   loadSoul(): Promise<string>;
-  /** Package root for nested public summons. */
-  packageRoot?: string;
-  /**
-   * Nested countersign summon. Production uses shared summonPublicRole;
-   * tests may inject a tracer. Prefer hostAdapters on the default path.
-   */
-  summonCountersign?: SecretariatSummonCountersign;
-  /** Optional home override for nested summons (tests). */
-  home?: string;
-  /**
-   * Composition-root adapter table forwarded by the default summonPublicRole
-   * path (tests). Production leaves unset.
-   */
-  hostAdapters?: readonly NamedRoleTurnHostAdapter[];
 };
-
-function latestObjectPayload(
-  payloads: readonly unknown[] | undefined,
-): Record<string, unknown> | undefined {
-  if (payloads === undefined || payloads.length === 0) return undefined;
-  const latest = payloads[payloads.length - 1];
-  if (latest === null || typeof latest !== "object" || Array.isArray(latest)) {
-    return undefined;
-  }
-  return latest as Record<string, unknown>;
-}
-
-/**
- * Project nested countersign PublicSummonResult onto tool details.
- * Authority: keep typed terminal kind + payloads/diagnostic intact (gatekeeper
- * projectOfficerTerminal precedent / ADR 0052 / 失败诚实). No content gate.
- * Parent-visible text uses this details object via readableGateItem directly
- * (#953 — no second isomorphic projection).
- */
-export function projectSecretariatSummonResult(
-  summoned: PublicSummonResult,
-): Record<string, unknown> {
-  const terminal = summoned.terminal;
-  const roleOutcome = terminal?.roleOutcome;
-  const runDirectory = summoned.runDirectory;
-  const runId =
-    typeof runDirectory === "string" && runDirectory.trim() !== ""
-      ? runIdFromRunDirectory(runDirectory)
-      : undefined;
-  const base: Record<string, unknown> = {
-    exitCode: summoned.exitCode,
-    ...(runId === undefined ? {} : { runId }),
-    ...(runDirectory === undefined ? {} : { runDirectory }),
-    ...(summoned.stderr === undefined || summoned.stderr === ""
-      ? {}
-      : { stderr: summoned.stderr }),
-  };
-
-  if (roleOutcome === undefined) {
-    return { ...base, outcomeKind: "no_terminal" };
-  }
-
-  if (roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation") {
-    const payloads = Array.isArray(roleOutcome.payloads) ? roleOutcome.payloads : undefined;
-    const latest = latestObjectPayload(payloads);
-    const countersignStatus =
-      latest !== undefined && typeof latest.countersignStatus === "string"
-        ? latest.countersignStatus
-        : undefined;
-    return {
-      ...base,
-      outcomeKind: roleOutcome.kind,
-      // audit_escalation carries typed status; accepted may carry fixture/compat status.
-      ...("status" in roleOutcome &&
-      typeof roleOutcome.status === "string" &&
-      roleOutcome.status.length > 0
-        ? { status: roleOutcome.status }
-        : {}),
-      ...(countersignStatus === undefined ? {} : { countersignStatus }),
-      ...(latest === undefined ? {} : { receipt: latest }),
-      ...(payloads === undefined ? {} : { payloads }),
-      ...(roleOutcome.decisiveFacts === undefined
-        ? {}
-        : { decisiveFacts: roleOutcome.decisiveFacts }),
-    };
-  }
-
-  if (roleOutcome.kind === "failure") {
-    // #953: current failure face is diagnostic/cause/decisiveFacts only.
-    // Historical receipts ride terminal.submissions — never as receipt/payloads.
-    const submissions = Array.isArray(terminal?.submissions)
-      ? terminal.submissions
-      : undefined;
-    return {
-      ...base,
-      outcomeKind: "failure",
-      diagnostic: roleOutcome.diagnostic,
-      ...(roleOutcome.cause === undefined ? {} : { cause: roleOutcome.cause }),
-      ...(roleOutcome.decisiveFacts === undefined
-        ? {}
-        : { decisiveFacts: roleOutcome.decisiveFacts }),
-      ...(submissions === undefined || submissions.length === 0
-        ? {}
-        : { submissions }),
-    };
-  }
-
-  // no_receipt (and any future kind still carries decisiveFacts when present)
-  return {
-    ...base,
-    outcomeKind: roleOutcome.kind,
-    ...("status" in roleOutcome &&
-    typeof roleOutcome.status === "string" &&
-    roleOutcome.status.length > 0
-      ? { status: roleOutcome.status }
-      : {}),
-    ...("decisiveFacts" in roleOutcome && roleOutcome.decisiveFacts !== undefined
-      ? { decisiveFacts: roleOutcome.decisiveFacts }
-      : {}),
-  };
-}

package/src/submission-ledger.ts

@@ -50,6 +50,8 @@ export type SubmissionLedgerEvent =
       readonly role?: TerminalRoleName;
       /** Raw LLM params — bounce/infra/audit still keep the original words (#836). */
       readonly accepted?: unknown;
+      /** Audit-owned escalation verdict, separate from the original role submission. */
+      readonly auditReceipt?: unknown;
     }
   | {
       readonly type: "sealed";
@@ -102,6 +104,7 @@ export type RecordedSubmissionRow = {
    */
   readonly kind: "accepted" | "audit-escalation" | "correctable-rejection" | "infrastructure" | "candidate";
   readonly accepted: unknown;
+  readonly auditReceipt?: unknown;
   /** Present when the ledger row names the tool call — used to dedupe candidate+outcome. */
   readonly toolCallId?: string;
 };
@@ -281,6 +284,7 @@ function rowFromPayload(
     accepted?: unknown;
     params?: unknown;
     toolCallId?: unknown;
+    auditReceipt?: unknown;
   },
   accepted: unknown,
   roleFallback?: TerminalRoleName,
@@ -290,6 +294,7 @@ function rowFromPayload(
     ...(role === undefined ? {} : { role }),
     kind,
     accepted,
+    ...(Object.hasOwn(payload, "auditReceipt") ? { auditReceipt: payload.auditReceipt } : {}),
     ...(typeof payload.toolCallId === "string" && payload.toolCallId.length > 0
       ? { toolCallId: payload.toolCallId }
       : {}),
@@ -701,6 +706,11 @@ export function createSubmissionLedgerHost(
           // #836: ledger authority is the LLM tool-call params as-is (角色原话), never result.details.
           // Machine facts on result.details stay on the tool-result face returned to the model.
           if (isAuditEscalationProjection(result.details) || isAuditEscalationProjection(params)) {
+            const audit = isAuditEscalationProjection(result.details)
+              && typeof result.details.audit === "object"
+              && result.details.audit !== null
+              ? result.details.audit as Record<string, unknown>
+              : undefined;
             const closed: ClosedSubmission = {
               role,
               kind: "audit_escalation",
@@ -713,6 +723,9 @@ export function createSubmissionLedgerHost(
               outcome: "audit-escalation",
               role,
               accepted: params,
+              ...(audit !== undefined && (Object.hasOwn(audit, "receipt") || Object.hasOwn(audit, "conflicts"))
+                ? { auditReceipt: Object.hasOwn(audit, "receipt") ? audit.receipt : audit.conflicts }
+                : {}),
             });
             await projectClosure(closed, context);
             return result;