@akagilnc/pi-workflow-roles 0.1.5013 → 0.1.5037

package/dist/headless-host/production-host.js

@@ -3902,7 +3902,7 @@ var init_packaged_role_registry = __esm({
         activationStage: "load-and-install",
         receiptStatusKey: "status",
         // #924: 公用《票面法》三席同装
-        sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md"]
+        sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md", "resources/countersign-ticket-issue.md"]
       },
       {
         role: "secretariat",
@@ -3910,7 +3910,7 @@ var init_packaged_role_registry = __esm({
         presentSettled: "always",
         summonResume: false,
         admission: "instruction",
-        sameParent: "court-diarist",
+        sameParent: "none",
         phases: [null],
         outputTool: SECRETARIAT_OUTPUT_TOOL_NAME,
         settlement: "accepted",
@@ -3926,6 +3926,7 @@ var init_packaged_role_registry = __esm({
           "CLAUDE.md",
           "souls/secretariat.md",
           "souls/ticket-law.md",
+          "resources/secretariat-ticket-identity.md",
           "souls/countersign.md",
           "souls/notary.md"
         ]
@@ -8156,7 +8157,7 @@ async function findLatestRunIdForSeatTicket(input) {
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
     const parentPath = await readRunParentPath(runDirectory);
-    if (parentPath !== input.parentRunPath) continue;
+    if (parentPath !== input.parentRunPath && basename6(parentPath ?? "") !== basename6(input.parentRunPath)) continue;
     if (!await runHasFormedSessionPrincipal(runDirectory)) continue;
     if (best === void 0 || runId > best) best = runId;
   }
@@ -8218,7 +8219,7 @@ function restoredTicketFields(fields) {
     ...fields.courtTicketNumbers === void 0 ? {} : { courtTicketNumbers: fields.courtTicketNumbers }
   };
 }
-async function loadResumableRunRecord(home, runId, authority) {
+async function loadResumableRunRecord(home, runId, authority, allowUnformedAdmitted = false) {
   const runDirectory = await findRunDirectoryById(home, runId);
   if (runDirectory === void 0) {
     throw new CliUsageError(`unknown role run id: ${runId}`);
@@ -8232,7 +8233,7 @@ async function loadResumableRunRecord(home, runId, authority) {
     throw new CliUsageError(`unknown role run id: ${runId}`);
   }
   const { run, principal } = materialized;
-  if (!await isDurablePrincipalAvailable(principal, authority)) {
+  if (!(allowUnformedAdmitted && run.state === "admitted") && !await isDurablePrincipalAvailable(principal, authority)) {
     throw new CliUsageError(
       `role run Pi session principal is unavailable: ${runId}`
     );
@@ -8513,8 +8514,8 @@ async function peekRoleRunRole(home, runId) {
   const run = await readRoleRunIdentity(runDirectory);
   return run?.role;
 }
-async function loadResumablePublicRole(home, runId, authority) {
-  const loaded = await loadResumableRunRecord(home, runId, authority);
+async function loadResumablePublicRole(home, runId, authority, allowUnformedAdmitted = false) {
+  const loaded = await loadResumableRunRecord(home, runId, authority, allowUnformedAdmitted);
   return seatLoadedResult(loaded, admitResumedRole(loaded));
 }
 function admitResumedRole(loaded) {
@@ -10192,12 +10193,7 @@ async function persistAdmittedSourceRunPath(admitted, sourceRunPath) {
   );
 }
 async function bindAdmittedTicketNumber(admitted, ticketNumber) {
-  if (admitted.ticketNumber !== void 0) {
-    if (admitted.ticketNumber === ticketNumber) return;
-    throw new Error(
-      `bindAdmittedTicketNumber refuses to replace existing ticket #${admitted.ticketNumber} with #${ticketNumber}`
-    );
-  }
+  if (admitted.ticketNumber === ticketNumber) return;
   await bindTicketNumberOnRunDirectory(admitted.runDirectory, ticketNumber);
   admitted.ticketNumber = ticketNumber;
 }
@@ -10281,6 +10277,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
       if (typeof childRunId !== "string") continue;
       const childDirectory = join17(dirname10(oldRunDirectory), `${childRunId}@diarist`);
+      if (!existsSync4(childDirectory)) continue;
       const childTarget = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
         subject: { ticketNumber: admitted.ticketNumber },
@@ -10288,7 +10285,6 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
         role: "diarist"
       });
       authority.seal(childTarget);
-      if (!existsSync4(childDirectory) && existsSync4(childTarget.runDirectory)) continue;
       await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
       await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
       ensureRoleRunDirectory(ledgerHome, dirname10(childTarget.runDirectory));
@@ -10338,25 +10334,8 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     "bindTicketNumberOnRunDirectory"
   );
   const admittedPath = join17(runDirectory, "admitted-request.json");
-  const invocationPath = join17(runDirectory, "invocation.json");
   const admitted = JSON.parse(await readFile12(admittedPath, "utf8"));
-  const existing = admitted.ticketNumber;
-  if (typeof existing === "number") {
-    if (existing === ticketNumber) return;
-    throw new Error(
-      `bindTicketNumberOnRunDirectory refuses to replace existing ticket #${existing} with #${ticketNumber}`
-    );
-  }
-  if (existsSync4(invocationPath)) {
-    const invocation = JSON.parse(
-      await readFile12(invocationPath, "utf8")
-    );
-    if (typeof invocation.ticketNumber === "number" && invocation.ticketNumber !== ticketNumber) {
-      throw new Error(
-        `bindTicketNumberOnRunDirectory refuses to replace invocation ticket #${invocation.ticketNumber} with #${ticketNumber}`
-      );
-    }
-  }
+  if (admitted.ticketNumber === ticketNumber) return;
   await writeFile4(
     admittedPath,
     `${JSON.stringify({ ...admitted, ticketNumber }, null, 2)}
@@ -17213,8 +17192,9 @@ function withOnceSuccessfulBeforeDispatch(adapters) {
     ...adapters,
     beforeDispatch: async (admitted, lease) => {
       if (succeeded) return;
-      await hook(admitted, lease);
+      const result = await hook(admitted, lease);
       succeeded = true;
+      return result;
     }
   };
 }
@@ -17476,7 +17456,10 @@ async function dispatchPostAdmissionTurn(input) {
     await clearTypedProviderHttpObservation(admitted.runDirectory);
     if (adapters.beforeDispatch !== void 0) {
       try {
-        await adapters.beforeDispatch(admitted, lease);
+        const paused = await adapters.beforeDispatch(admitted, lease);
+        if (paused !== void 0) {
+          return { exitCode: 0, admitted, terminal: paused, skipAutoResume: true };
+        }
       } catch (error) {
         const settled2 = await presentControlledFailure2(
           admitted,
@@ -18249,11 +18232,6 @@ var init_turn_request = __esm({
 });
 
 // src/public-cli/countersign-run.ts
-var countersign_run_exports = {};
-__export(countersign_run_exports, {
-  invokeCourtDiarist: () => invokeCourtDiarist,
-  runCountersignCourtDiaristStation: () => runCountersignCourtDiaristStation
-});
 function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -18353,7 +18331,8 @@ async function invokeCourtDiarist(input, env, io) {
         kind: "escalate",
         diagnostic: courtDiaristEscalateDiagnostic(roleOutcome, submissions)
       },
-      ...result.admitted === void 0 ? {} : { admitted: result.admitted }
+      ...result.admitted === void 0 ? {} : { admitted: result.admitted },
+      ...result.terminal === void 0 ? {} : { terminal: result.terminal }
     };
   }
   if (result.exitCode !== 0) {
@@ -18387,7 +18366,7 @@ async function invokeCourtDiarist(input, env, io) {
     ...result.admitted === void 0 ? {} : { admitted: result.admitted }
   };
 }
-async function runCountersignCourtDiaristStation(admitted, env, io) {
+async function runCountersignCourtDiaristStation(admitted, env, io, afterTicketNumber) {
   if (env.runCourtDiaristStation !== void 0) {
     await env.runCourtDiaristStation(admitted);
     return;
@@ -18404,7 +18383,8 @@ async function runCountersignCourtDiaristStation(admitted, env, io) {
   } else {
     refreshTickets = [admitted.ticketNumber];
   }
-  for (const ticketNumber of refreshTickets) {
+  const completedIndex = afterTicketNumber === void 0 ? -1 : refreshTickets.indexOf(afterTicketNumber);
+  for (const ticketNumber of refreshTickets.slice(completedIndex + 1)) {
     const outcome = await invokeCourtDiarist(
       {
         instruction: `\u6574\u7406 #${ticketNumber} \u7684\u672C\u6848\u4F9D\u636E\u3002`,
@@ -18417,14 +18397,17 @@ async function runCountersignCourtDiaristStation(admitted, env, io) {
       env,
       io
     );
-    if (outcome.identity.kind === "escalate") {
-      throw new StationChildExhaustedError(outcome.identity.diagnostic);
-    }
     if (outcome.failedWithoutEscalate !== void 0) {
       throw new StationChildExhaustedError(
         outcome.failedWithoutEscalate.diagnostic
       );
     }
+    if (outcome.identity.kind === "escalate" && outcome.terminal !== void 0) {
+      return {
+        terminal: outcome.terminal,
+        ...outcome.admitted === void 0 ? {} : { childRunId: outcome.admitted.runId }
+      };
+    }
   }
 }
 var init_countersign_run = __esm({
@@ -18441,6 +18424,7 @@ var init_countersign_run = __esm({
 var instruction_seat_run_exports = {};
 __export(instruction_seat_run_exports, {
   buildInstructionSeatTurnRequest: () => buildInstructionSeatTurnRequest,
+  continueParentAfterChild: () => continueParentAfterChild,
   runPublicInstructionSeat: () => runPublicInstructionSeat,
   runPublicInstructionSeatResume: () => runPublicInstructionSeatResume
 });
@@ -18666,7 +18650,7 @@ async function runCountersignBody(parsed, env, io) {
       projectRoot: resolve13(parsed.project ?? env.cwd),
       role: "countersign",
       parentRunPath: gateParentRunPath,
-      ...env.boundTicketNumber === void 0 ? {} : { ticketNumber: env.boundTicketNumber },
+      ...isSafePositiveTicketNumber(env.boundTicketNumber) ? { ticketNumber: env.boundTicketNumber } : {},
       freshSummons: env.freshSummons,
       summons: {
         sourceRunPath: gateParentRunPath,
@@ -18703,14 +18687,16 @@ async function runCountersignBody(parsed, env, io) {
       let typedTicket;
       let typedCourtTicketNumbers;
       let identityDiaristRan = false;
-      let unboundDiaristRunId;
-      if (env.runCourtDiaristStation === void 0) {
+      let childDiaristRunId;
+      let pausedDiaristTerminal;
+      if (gateParentRunPath === void 0 && env.runCourtDiaristStation === void 0) {
         let outcome;
         try {
           outcome = await invokeCourtDiarist({
             instruction: parsed.instruction ?? "",
             projectRoot: admitted.projectRoot,
             failureLabel: "unbound summons",
+            correlationId: admitted.runId,
             ...env.boundTicketNumber === void 0 ? {} : { boundTicketNumber: env.boundTicketNumber }
           }, env, io);
         } catch (error) {
@@ -18726,15 +18712,16 @@ async function runCountersignBody(parsed, env, io) {
           }, seatAdapters(admitted, env), env.principalAuthority, io);
         }
         identityDiaristRan = true;
+        if (outcome.identity.kind === "escalate") pausedDiaristTerminal = outcome.terminal;
         if (outcome.admitted?.runDirectory.includes(`${sep5}unbound${sep5}runs${sep5}`)) {
-          unboundDiaristRunId = outcome.admitted.runId;
+          childDiaristRunId = outcome.admitted.runId;
         }
-        if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== void 0) {
-          const diagnostic = outcome.identity.kind === "escalate" ? outcome.identity.diagnostic : outcome.failedWithoutEscalate?.diagnostic ?? "";
+        if (outcome.failedWithoutEscalate !== void 0) {
+          const diagnostic = outcome.failedWithoutEscalate.diagnostic;
           await materializeAdmission(
             isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : void 0
           );
-          if (unboundDiaristRunId !== void 0) await recordChildDiaristRun(admitted, unboundDiaristRunId);
+          if (childDiaristRunId !== void 0) await recordChildDiaristRun(admitted, childDiaristRunId);
           await markRunAdmitted(admitted, env.principalAuthority);
           return await presentControlledFailure2(admitted, {
             timedOut: false,
@@ -18744,16 +18731,18 @@ async function runCountersignBody(parsed, env, io) {
           }, seatAdapters(admitted, env), env.principalAuthority, io);
         }
         if (outcome.identity.kind === "ticket") {
-          typedTicket = isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : outcome.identity.ticketNumber;
+          typedTicket = outcome.identity.ticketNumber;
           typedCourtTicketNumbers = outcome.identity.courtTicketNumbers;
-        } else if (isSafePositiveTicketNumber(env.boundTicketNumber)) {
-          typedTicket = env.boundTicketNumber;
         }
       }
       await materializeAdmission(typedTicket);
       await markRunAdmitted(admitted, env.principalAuthority);
-      if (unboundDiaristRunId !== void 0) {
-        await recordChildDiaristRun(admitted, unboundDiaristRunId);
+      if (childDiaristRunId !== void 0) {
+        await recordChildDiaristRun(admitted, childDiaristRunId);
+      }
+      if (pausedDiaristTerminal !== void 0) {
+        io.stdout(formatTerminalResult(pausedDiaristTerminal));
+        return { exitCode: 0, admitted, terminal: pausedDiaristTerminal };
       }
       if (gateParentRunPath !== void 0) {
         await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
@@ -18803,7 +18792,11 @@ async function runCountersignBody(parsed, env, io) {
           beforeDispatch: async (admittedSeat, lease) => {
             if (!packagedAdmitsCountersign(admittedSeat.role)) return;
             if (!identityDiaristRan || typedTicket !== void 0) {
-              await runCountersignCourtDiaristStation(admittedSeat, env, io);
+              const refresh = await runCountersignCourtDiaristStation(admittedSeat, env, io);
+              if (refresh !== void 0) {
+                io.stdout(formatTerminalResult(refresh.terminal));
+                return refresh.terminal;
+              }
             }
             await relocateAdmittedRunToTicket(admittedSeat, env.principalAuthority, lease);
             Object.assign(turnRequest, buildInstructionSeatTurnRequest(admittedSeat, turnProjection));
@@ -18880,7 +18873,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
         projectRoot,
         role,
         parentRunPath: sourceDirectory,
-        ...auditorTicket === void 0 ? {} : { ticketNumber: auditorTicket },
         freshSummons: env.freshSummons,
         summons,
         resume: (runId, materials) => runPublicInstructionSeatResume(
@@ -18906,7 +18898,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
         projectRoot,
         role,
         parentRunPath,
-        ...env.boundTicketNumber === void 0 ? {} : { ticketNumber: env.boundTicketNumber },
         freshSummons: env.freshSummons,
         summons,
         resume: (runId, materials) => runPublicInstructionSeatResume(
@@ -18934,7 +18925,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
       throw error;
     }
     const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
-    const knownTicket = await readBoardTicketNumber(source.runDirectory) ?? env.boundTicketNumber;
     const summons = {
       sourceRunPath: source.runDirectory,
       sourceRun: source,
@@ -18945,7 +18935,6 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
       projectRoot,
       role,
       parentRunPath: source.runDirectory,
-      ...knownTicket === void 0 ? {} : { ticketNumber: knownTicket },
       freshSummons: env.freshSummons,
       summons,
       resume: (runId, materials) => runPublicInstructionSeatResume(
@@ -18982,50 +18971,38 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
   }
   const runAdmitted = async () => {
     await markRunAdmitted(admitted, env.principalAuthority);
-    if (record4.sameParent === "court-diarist") {
-      const { invokeCourtDiarist: invokeCourtDiarist2 } = await Promise.resolve().then(() => (init_countersign_run(), countersign_run_exports));
-      const outcome = await invokeCourtDiarist2({
-        instruction: parsed.instruction ?? "",
-        projectRoot: admitted.projectRoot,
-        failureLabel: "secretariat unbound summons",
-        attachmentPaths: admitted.attachments.map((attachment) => attachment.frozenPath),
-        correlationId: admitted.runId
-      }, {
-        cwd: env.cwd,
-        home: env.home,
-        agentDir: env.agentDir,
-        packageRoot: env.packageRoot,
-        ...env.credentials === void 0 ? {} : { credentials: env.credentials },
-        ...env.signal === void 0 ? {} : { signal: env.signal },
-        ...env.hostAdapters === void 0 ? {} : { hostAdapters: env.hostAdapters }
-      }, io);
+    if (role === "secretariat") {
+      let outcome;
+      try {
+        outcome = await invokeCourtDiarist({
+          instruction: parsed.instruction ?? "",
+          projectRoot: admitted.projectRoot,
+          failureLabel: "secretariat unbound summons",
+          attachmentPaths: admitted.attachments.map((attachment) => attachment.frozenPath),
+          correlationId: admitted.runId
+        }, env, io);
+      } catch (error) {
+        return await presentControlledFailure2(admitted, {
+          timedOut: false,
+          code: null,
+          stderr: "",
+          thrown: error
+        }, seatAdapters(admitted, env), env.principalAuthority, io);
+      }
       if (outcome.admitted?.runDirectory.includes(`${sep5}unbound${sep5}runs${sep5}`)) {
         await recordChildDiaristRun(admitted, outcome.admitted.runId);
       }
-      if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== void 0) {
-        const diagnostic = outcome.identity.kind === "escalate" ? outcome.identity.diagnostic : outcome.failedWithoutEscalate?.diagnostic ?? "";
+      if (outcome.failedWithoutEscalate !== void 0) {
         return await presentControlledFailure2(admitted, {
           timedOut: false,
           code: null,
           stderr: "",
-          thrown: new Error(diagnostic)
+          thrown: new Error(outcome.failedWithoutEscalate.diagnostic)
         }, seatAdapters(admitted, env), env.principalAuthority, io);
       }
-      if (outcome.identity.kind === "ticket") {
-        try {
-          if (outcome.admitted === void 0) throw new Error("court diarist ticket has no admitted run");
-          await bindAdmittedTicketNumber(outcome.admitted, outcome.identity.ticketNumber);
-          await relocateAdmittedRunToTicket(outcome.admitted, env.principalAuthority);
-          await bindAdmittedTicketNumber(admitted, outcome.identity.ticketNumber);
-          await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
-        } catch (error) {
-          return await presentControlledFailure2(admitted, {
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: error
-          }, seatAdapters(admitted, env), env.principalAuthority, io);
-        }
+      if (outcome.identity.kind === "escalate" && outcome.terminal !== void 0) {
+        io.stdout(formatTerminalResult(outcome.terminal));
+        return { exitCode: 0, admitted, terminal: outcome.terminal };
       }
     }
     return dispatchAdmitted(admitted, env, io);
@@ -19089,6 +19066,21 @@ async function runPublicInstructionSeatResume(request, env, io) {
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
+async function continueParentAfterChild(parentRunId, child, env, io) {
+  const loaded = await loadResumablePublicRole(env.home, parentRunId, env.principalAuthority, true);
+  if (loaded.run.state !== "admitted") {
+    return runPublicInstructionSeatResume({ runId: parentRunId }, env, io);
+  }
+  const admitted = loaded.admitted;
+  if (admitted.role === "countersign" && admitted.ticketNumber !== void 0) {
+    const refresh = await runCountersignCourtDiaristStation(admitted, env, io, child.ticketNumber);
+    if (refresh !== void 0) {
+      io.stdout(formatTerminalResult(refresh.terminal));
+      return { exitCode: 0, admitted, terminal: refresh.terminal };
+    }
+  }
+  return dispatchAdmitted(admitted, env, io);
+}
 var init_instruction_seat_run = __esm({
   "src/public-cli/instruction-seat-run.ts"() {
     "use strict";
@@ -22048,7 +22040,24 @@ async function runAkRole(argv, env) {
         }),
         io
       );
-      return cliResultFromRoleRun(result);
+      let current = result;
+      while (current.exitCode === 0 && current.admitted?.correlationId !== void 0 && current.terminal?.roleOutcome.kind === "accepted" && !courtDiaristEscalated(current.terminal.roleOutcome)) {
+        const parentRunId = current.admitted.correlationId;
+        const parentRole = await peekRoleRunRole(home, parentRunId);
+        if (parentRole === void 0) break;
+        const parentSeat = resolveEffectiveSeat(config, parentRole, credentials, invocationFromParsed(parsed));
+        const parentEnv = createRoleEnvironment(env, {
+          role: parentRole,
+          home,
+          agentDir,
+          cwd,
+          credentials,
+          seat: parentSeat,
+          config
+        });
+        current = await continueParentAfterChild(parentRunId, current.admitted, parentEnv, io);
+      }
+      return cliResultFromRoleRun(current);
     }
     if (parsed.command !== void 0 && isPublicCliSupportCommand(parsed.command)) {
       throw new CliUsageError(`unhandled support command: ${parsed.command}`);
@@ -22117,6 +22126,7 @@ var init_cli = __esm({
     init_invocation();
     init_option_definitions();
     init_instruction_seat_run();
+    init_countersign_run();
     init_analyst_run();
     init_run_lifecycle();
     init_registry();
@@ -22416,7 +22426,10 @@ async function summonPublicRole(options) {
     result = stepped.ok;
   }
   const stderr = captured?.stderrText();
-  const runDirectory = result.admitted?.runDirectory;
+  const runDirectory = result.terminal !== void 0 && result.terminal.roleOutcome.role !== options.role && typeof result.terminal.runId === "string" ? await (await Promise.resolve().then(() => (init_run_lifecycle(), run_lifecycle_exports))).findRunDirectoryById(
+    home,
+    result.terminal.runId
+  ) : result.admitted?.runDirectory;
   return {
     exitCode: result.exitCode,
     ...result.terminal === void 0 ? {} : { terminal: result.terminal },
@@ -22620,8 +22633,10 @@ async function summonGateOfficer(options) {
         `countersign gate summon requires parent runId from sourceRunDirectory: ${options.sourceRunDirectory}`
       );
     }
-    const { readBoardTicketNumber: readBoardTicketNumber2 } = await Promise.resolve().then(() => (init_run_ticket_number(), run_ticket_number_exports));
+    const { isSafePositiveTicketNumber: isSafePositiveTicketNumber2, readBoardTicketNumber: readBoardTicketNumber2 } = await Promise.resolve().then(() => (init_run_ticket_number(), run_ticket_number_exports));
     const parentTicket = await readBoardTicketNumber2(options.sourceRunDirectory);
+    const submittedTicket = options.submission !== null && typeof options.submission === "object" && !Array.isArray(options.submission) ? options.submission.ticketNumber : void 0;
+    const courtTicket = isSafePositiveTicketNumber2(submittedTicket) ? submittedTicket : parentTicket;
     const instruction = options.reask ?? gateReviewInstruction ?? "";
     return summonPublicRole({
       role: options.officer,
@@ -22629,7 +22644,7 @@ async function summonGateOfficer(options) {
       ...common,
       correlationId,
       parentRunPath: options.sourceRunDirectory,
-      ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket }
+      ...courtTicket === void 0 ? {} : { boundTicketNumber: courtTicket }
     });
   }
   return summonPublicRole({

package/dist/migrate-book-topology.js

@@ -14311,7 +14311,7 @@ var init_packaged_role_registry = __esm({
         activationStage: "load-and-install",
         receiptStatusKey: "status",
         // #924: 公用《票面法》三席同装
-        sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md"]
+        sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md", "resources/countersign-ticket-issue.md"]
       },
       {
         role: "secretariat",
@@ -14319,7 +14319,7 @@ var init_packaged_role_registry = __esm({
         presentSettled: "always",
         summonResume: false,
         admission: "instruction",
-        sameParent: "court-diarist",
+        sameParent: "none",
         phases: [null],
         outputTool: SECRETARIAT_OUTPUT_TOOL_NAME,
         settlement: "accepted",
@@ -14335,6 +14335,7 @@ var init_packaged_role_registry = __esm({
           "CLAUDE.md",
           "souls/secretariat.md",
           "souls/ticket-law.md",
+          "resources/secretariat-ticket-identity.md",
           "souls/countersign.md",
           "souls/notary.md"
         ]

package/dist/packaged-role-registry.js

@@ -353,7 +353,7 @@ const PUBLIC_ROLE_RECORDS = [
     activationStage: "load-and-install",
     receiptStatusKey: "status",
     // #924: 公用《票面法》三席同装
-    sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md"]
+    sessionMaterials: ["CLAUDE.md", "souls/countersign.md", "souls/ticket-law.md", "resources/countersign-ticket-issue.md"]
   },
   {
     role: "secretariat",
@@ -361,7 +361,7 @@ const PUBLIC_ROLE_RECORDS = [
     presentSettled: "always",
     summonResume: false,
     admission: "instruction",
-    sameParent: "court-diarist",
+    sameParent: "none",
     phases: [null],
     outputTool: SECRETARIAT_OUTPUT_TOOL_NAME,
     settlement: "accepted",
@@ -377,6 +377,7 @@ const PUBLIC_ROLE_RECORDS = [
       "CLAUDE.md",
       "souls/secretariat.md",
       "souls/ticket-law.md",
+      "resources/secretariat-ticket-identity.md",
       "souls/countersign.md",
       "souls/notary.md"
     ]

package/dist/public-cli/cli.js

@@ -16,7 +16,8 @@ import { appendPiSessionCustomEntry } from "../pi/role-turn-host.js";
 import { composeRoleTurnHostAdapters, formatHostSelectionFailure, HostSelectionError, selectRoleTurnHost, } from "./role-turn-host-resolution.js";
 import { parseAnalystArgv, parsePublicSeatArgv, } from "./invocation.js";
 import { createTypedOptionConsumer, optionsForOwner, projectCommandHelp, projectOwnerOptions, PUBLIC_NAVIGATOR_HELP_NOTE, PUBLIC_ROLE_OPTION_OWNERS, renderHumanOwnerOptionLines, } from "./option-definitions.js";
-import { runPublicInstructionSeat, runPublicInstructionSeatResume } from "./instruction-seat-run.js";
+import { continueParentAfterChild, runPublicInstructionSeat, runPublicInstructionSeatResume } from "./instruction-seat-run.js";
+import { courtDiaristEscalated } from "./countersign-run.js";
 import { runPublicAnalyst } from "./analyst-run.js";
 import { AUTO_RESUME_LIMIT, peekRoleRunRole, } from "./run-lifecycle.js";
 import { INTERNAL_ROLE_ENTRYPOINT_RELATIVE, PUBLIC_CALLABLE_ROLES, isPublicCallableRole, isPublicCliSupportCommand, isPublicConfigurableSeat, listHelpCapabilities, } from "./registry.js";
@@ -832,7 +833,21 @@ export async function runAkRole(argv, env) {
                 seat,
                 config,
             }), io);
-            return cliResultFromRoleRun(result);
+            let current = result;
+            while (current.exitCode === 0 && current.admitted?.correlationId !== undefined
+                && current.terminal?.roleOutcome.kind === "accepted"
+                && !courtDiaristEscalated(current.terminal.roleOutcome)) {
+                const parentRunId = current.admitted.correlationId;
+                const parentRole = await peekRoleRunRole(home, parentRunId);
+                if (parentRole === undefined)
+                    break;
+                const parentSeat = resolveEffectiveSeat(config, parentRole, credentials, invocationFromParsed(parsed));
+                const parentEnv = createRoleEnvironment(env, {
+                    role: parentRole, home, agentDir, cwd, credentials, seat: parentSeat, config,
+                });
+                current = await continueParentAfterChild(parentRunId, current.admitted, parentEnv, io);
+            }
+            return cliResultFromRoleRun(current);
         }
         if (parsed.command !== undefined &&
             isPublicCliSupportCommand(parsed.command)) {

package/dist/public-cli/countersign-run.js

@@ -62,7 +62,7 @@ function courtDiaristEscalateDiagnostic(roleOutcome, submissions) {
  * - Multiple submissions: last qualifying set wins.
  * Live path never shape-rejects the role turn; durable damage is a separate seam.
  */
-function courtTicketNumbersFromOutcome(roleOutcome, principalTicket, submissions) {
+export function courtTicketNumbersFromOutcome(roleOutcome, principalTicket, submissions) {
     if (roleOutcome === undefined)
         return undefined;
     const payloads = courtDiaristPayloadRows(roleOutcome, submissions);
@@ -97,7 +97,7 @@ function courtTicketNumbersFromOutcome(roleOutcome, principalTicket, submissions
     return latest;
 }
 /** Routing boolean over the child's own typed sequence — does not pick or rewrite a sole row. */
-function courtDiaristEscalated(roleOutcome) {
+export function courtDiaristEscalated(roleOutcome) {
     if (roleOutcome === undefined)
         return false;
     if (roleOutcome.kind === "audit_escalation")
@@ -164,6 +164,7 @@ export async function invokeCourtDiarist(input, env, io) {
                 diagnostic: courtDiaristEscalateDiagnostic(roleOutcome, submissions),
             },
             ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
+            ...(result.terminal === undefined ? {} : { terminal: result.terminal }),
         };
     }
     if (result.exitCode !== 0) {
@@ -204,10 +205,10 @@ export async function invokeCourtDiarist(input, env, io) {
  * Missing ticketNumber (true-unbound / identity deferred) skips the refresh
  * station — no diary is minted for a true-unbound run. First-entry identity
  * lives on the shared countersign entry (typed 起居郎 key for bind). Bound refresh:
- * 起居郎 failure propagates (失败诚实).
+ * technical failure propagates; LLM escalation remains a recorded conclusion.
  * Path delivery onto materials is not this station's job — post-admission owns it.
  */
-export async function runCountersignCourtDiaristStation(admitted, env, io) {
+export async function runCountersignCourtDiaristStation(admitted, env, io, afterTicketNumber) {
     if (env.runCourtDiaristStation !== undefined) {
         await env.runCourtDiaristStation(admitted);
         return;
@@ -230,7 +231,8 @@ export async function runCountersignCourtDiaristStation(admitted, env, io) {
     else {
         refreshTickets = [admitted.ticketNumber];
     }
-    for (const ticketNumber of refreshTickets) {
+    const completedIndex = afterTicketNumber === undefined ? -1 : refreshTickets.indexOf(afterTicketNumber);
+    for (const ticketNumber of refreshTickets.slice(completedIndex + 1)) {
         const outcome = await invokeCourtDiarist({
             instruction: `整理 #${ticketNumber} 的本案依据。`,
             projectRoot: admitted.projectRoot,
@@ -239,11 +241,14 @@ export async function runCountersignCourtDiaristStation(admitted, env, io) {
             // Refresh holds a typed key — hand it off so identity is bound before turn.
             boundTicketNumber: ticketNumber,
         }, env, io);
-        if (outcome.identity.kind === "escalate") {
-            throw new StationChildExhaustedError(outcome.identity.diagnostic);
-        }
         if (outcome.failedWithoutEscalate !== undefined) {
             throw new StationChildExhaustedError(outcome.failedWithoutEscalate.diagnostic);
         }
+        if (outcome.identity.kind === "escalate" && outcome.terminal !== undefined) {
+            return {
+                terminal: outcome.terminal,
+                ...(outcome.admitted === undefined ? {} : { childRunId: outcome.admitted.runId }),
+            };
+        }
     }
 }