@akagilnc/pi-workflow-roles 0.1.5153 → 0.1.5194

package/src/audit-escalation.ts

@@ -1,220 +1,7 @@
-import type { Usage } from "@earendil-works/pi-ai";
-
-import type {
-  ComplianceDecision,
-} from "./compliance-transport.ts";
-import { GatekeeperDecisionError } from "./submission-errors.ts";
-import type { SubmissionGateNonPassResult } from "./gatekeeper-role.ts";
-
+/** Historical audit-escalation discriminator retained for reading pre-#1057 run artifacts. */
 export const AUDIT_ESCALATION_KIND = "audit_escalation" as const;
 
-// Live Navigator settlement may consume only the projection produced by this
-// owner. Its private WeakSet cannot be authored by role output; persisted/
-// replayed records are re-authenticated by the retained audit evidence binder.
-const AUDIT_ESCALATION_LIVE_REGISTRY = new WeakSet<object>();
-
-/**
- * Escalation delivery face.
- * `kind` / `conflicts` / `auditDecisionGate` are audit-owned fields.
- * Role-delivered fields ride beside them as open content (ADR 0055) — including
- * a role `decisionGate` when present. The index signature tells that truth so
- * callers never need a cast to retain role output.
- */
-export type AuditEscalationResult = {
-  readonly kind: typeof AUDIT_ESCALATION_KIND;
-  /** Raw audit-owned conflicts field, when the auditor supplied one. */
-  readonly conflicts?: unknown;
-  /** Raw audit-owned gate field, when the auditor supplied one. */
-  readonly auditDecisionGate?: unknown;
-  readonly [key: string]: unknown;
-};
-
-export type AuditEscalationToolResult = {
-  content: [];
-  details: AuditEscalationResult;
-  terminate: true;
-  usage?: Usage;
-};
-
-export type OfficerAuditEscalationDecision = {
-  readonly status: "escalate";
-  readonly officer?: "inspector" | "notary" | "auditor" | "countersign";
-  readonly reason?: unknown;
-  readonly findings?: unknown;
-  readonly conflicts?: unknown;
-  readonly decisionGate?: unknown;
-  readonly usage?: Usage;
-};
-
-export type AuditEscalationDecision =
-  | Extract<ComplianceDecision, { status: "escalate" }>
-  | OfficerAuditEscalationDecision;
-
-/**
- * Build the escalation delivery face.
- * Role-delivered fields ride under the escalation discriminator (ADR 0055).
- * `kind` always wins so the discriminator cannot be laundered.
- * `conflicts` and `auditDecisionGate`, when present, always come from the
- * audit (why we escalated and its gate). Raw ancillary values are not repaired.
- * A role `decisionGate`, when present, stays at its own key via spread and is
- * never overwritten (not folded, not dropped, not swapped into the audit home).
- */
-export function buildAuditEscalationResult(
-  decision: AuditEscalationDecision,
-  deliveredOutput?: unknown,
-): AuditEscalationResult {
-  const auditOwned: Record<string, unknown> = {
-    kind: AUDIT_ESCALATION_KIND,
-  };
-  if (Object.hasOwn(decision, "receipt")) {
-    auditOwned.receipt = (decision as { receipt?: unknown }).receipt;
-  }
-  if (Object.hasOwn(decision, "conflicts")) {
-    auditOwned.conflicts = (decision as { conflicts?: unknown }).conflicts;
-  }
-  if (Object.hasOwn(decision, "decisionGate")) {
-    auditOwned.auditDecisionGate = (decision as { decisionGate?: unknown }).decisionGate;
-  }
-  if (Object.hasOwn(decision, "reason") && (decision as { reason?: unknown }).reason !== undefined) {
-    auditOwned.reason = (decision as { reason?: unknown }).reason;
-  }
-  if (Object.hasOwn(decision, "officer") && (decision as { officer?: unknown }).officer !== undefined) {
-    auditOwned.officer = (decision as { officer?: unknown }).officer;
-  }
-  if (Object.hasOwn(decision, "findings") && (decision as { findings?: unknown }).findings !== undefined) {
-    auditOwned.findings = (decision as { findings?: unknown }).findings;
-  }
-  const result = {
-    kind: AUDIT_ESCALATION_KIND,
-    ...(deliveredOutput !== undefined ? { receipt: deliveredOutput } : {}),
-    audit: auditOwned,
-  } as AuditEscalationResult;
-  AUDIT_ESCALATION_LIVE_REGISTRY.add(result);
-  return result;
-}
-
-/** True only for the audit-owned live projection, never for role-shaped data. */
-export function isAuditEscalationProjection(
-  value: unknown,
-): value is AuditEscalationResult {
-  if (!isAuditEscalationResult(value)) return false;
-  return AUDIT_ESCALATION_LIVE_REGISTRY.has(value);
-}
-
-export function projectAuditEscalation(
-  decision: AuditEscalationDecision,
-  deliveredOutput?: unknown,
-): AuditEscalationToolResult {
-  const details = buildAuditEscalationResult(decision, deliveredOutput);
-  return {
-    content: [],
-    details,
-    terminate: true,
-    ...(decision.usage === undefined ? {} : { usage: decision.usage }),
-  };
-}
-
-/** Preserve the escalating officer's own gate alongside the raw receipt. */
-export function projectGatekeeperEscalation(
-  result: Extract<SubmissionGateNonPassResult, { status: "escalate" }>,
-  deliveredOutput?: unknown,
-): AuditEscalationToolResult {
-  const receipt = result.receipt;
-  const record = receipt !== null && typeof receipt === "object" && !Array.isArray(receipt)
-    ? receipt as Record<string, unknown>
-    : undefined;
-  return projectAuditEscalation({
-    status: "escalate",
-    officer: result.officer,
-    conflicts: receipt,
-    ...(record !== undefined && Object.hasOwn(record, "decisionGate")
-      ? { decisionGate: record.decisionGate }
-      : {}),
-  }, deliveredOutput);
-}
-
-/**
- * Discriminator-only recognition (ADR 0040). Shape of conflicts/options/gate
- * is not a reject gate — element types and cardinality are delivery content.
- */
-export function isAuditEscalationResult(
-  value: unknown,
-): value is AuditEscalationResult {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return false;
-  }
-  return (value as Record<string, unknown>).kind === AUDIT_ESCALATION_KIND;
-}
-
-export type ComplianceDecisionHandlers<T> = {
-  converged: (usage: Usage | undefined) => T | PromiseLike<T>;
-  /** Project the accepted parent candidate beside the typed audit-leg facts. */
-  noReceipt?: (
-    facts: Extract<ComplianceDecision, { status: "no-receipt" }>,
-    usageProjection: { usage?: Usage },
-  ) => T | PromiseLike<T>;
-  /**
-   * Parent work stands with the auditor's raw reply (#757).
-   * Not a shape-unreadable judgment — the reply is what the auditor said.
-   */
-  received?: (
-    facts: Extract<ComplianceDecision, { status: "received" }>,
-    usageProjection: { usage?: Usage },
-  ) => T | PromiseLike<T>;
-  continue: (violations: readonly unknown[]) => T | PromiseLike<T>;
-  escalate: (result: AuditEscalationToolResult) => T | PromiseLike<T>;
-  /** Host failure beside any recorded auditor payloads — parent is not accepted. */
-  transportFailure?: (
-    facts: Extract<ComplianceDecision, { status: "transport_failure" }>,
-  ) => T | PromiseLike<T>;
-};
-
-/**
- * Dispose a parsed audit decision without repeating status handling in roles.
- * Role output already delivered is preserved on the escalate face (ADR 0055).
- */
-export async function disposeComplianceDecision<T>(
-  decision: ComplianceDecision,
-  handlers: ComplianceDecisionHandlers<T>,
-  deliveredOutput?: unknown,
-): Promise<Awaited<T>> {
-  switch (decision.status) {
-    case "converged":
-      return await handlers.converged(decision.usage);
-    case "no-receipt":
-      // The parent candidate remains accepted, but its parallel audit leg is a
-      // public typed fact and must not be collapsed into an ordinary pass.
-      if (handlers.noReceipt === undefined) {
-        throw new Error("Compliance no-receipt projection handler is unavailable");
-      }
-      return await handlers.noReceipt(
-        decision,
-        decision.usage === undefined ? {} : { usage: decision.usage },
-      );
-    case "received":
-      // Parent candidate stands; raw auditor reply rides beside — not judged unreadable (#757).
-      if (handlers.received === undefined) {
-        throw new Error("Compliance received projection handler is unavailable");
-      }
-      return await handlers.received(
-        decision,
-        decision.usage === undefined ? {} : { usage: decision.usage },
-      );
-    case "continue":
-      return await handlers.continue(decision.violations);
-    case "escalate":
-      return await handlers.escalate(
-        projectAuditEscalation(decision, deliveredOutput),
-      );
-    case "transport_failure":
-      if (handlers.transportFailure !== undefined) {
-        return await handlers.transportFailure(decision);
-      }
-      throw new GatekeeperDecisionError({
-        status: "transport_failure",
-        stage: "auditor",
-        reason: decision.diagnostic,
-        submission: decision.submissions ?? decision.terminal,
-      });
-  }
+export function isAuditEscalationResult(value: unknown): value is { readonly kind: typeof AUDIT_ESCALATION_KIND } {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+    && (value as Record<string, unknown>).kind === AUDIT_ESCALATION_KIND;
 }

package/src/auditor-soul.ts

@@ -1,3 +1,6 @@
+import { readFile } from "node:fs/promises";
+import { basename, join } from "node:path";
+
 import {
   joinPackageMaterials,
   readPackageMaterial,
@@ -102,3 +105,33 @@ export async function loadAuditorSoulFromSubjectInput(raw?: string): Promise<str
 export function loadAuditorReferenceMaterialsFromSubjectInput(raw?: string): Promise<string> {
   return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
 }
+
+function subjectFromSourceDirectory(sourceRunDirectory: string): AuditorSoulRole | undefined {
+  const role = basename(sourceRunDirectory).split("@")[1];
+  return isAuditorSoulRole(role) ? role : undefined;
+}
+
+/**
+ * Resume binding already on the admitted page.
+ * Explicit subject wins; otherwise the source-run role is the audited object.
+ */
+export async function readAuditorResumeBinding(runDirectory: string): Promise<
+  | { readonly subject: AuditorSoulRole; readonly sourceRunDirectory: string }
+  | undefined
+> {
+  let raw: unknown;
+  try {
+    raw = JSON.parse(await readFile(join(runDirectory, "admitted-request.json"), "utf8")) as unknown;
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return undefined;
+    throw error;
+  }
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return undefined;
+  const record = raw as { sourceRunPath?: unknown; auditorSubject?: unknown };
+  if (typeof record.sourceRunPath !== "string" || record.sourceRunPath.trim() === "") return undefined;
+  const subject = isAuditorSoulRole(record.auditorSubject)
+    ? record.auditorSubject
+    : subjectFromSourceDirectory(record.sourceRunPath);
+  if (subject === undefined) return undefined;
+  return { subject, sourceRunDirectory: record.sourceRunPath };
+}

package/src/doctor-role.ts

@@ -1,15 +1,13 @@
 import type { RoleHost, HostContext, HostToolResult } from "./host-contracts.ts";
-import { disposeComplianceDecision } from "./audit-escalation.ts";
-import { ComplianceResponseRetentionError, type ComplianceDecision } from "./compliance-transport.ts";
+import { ComplianceResponseRetentionError } from "./compliance-transport.ts";
 import { DOCTOR_CANDIDATE_ENTRY_TYPE } from "./dossier-resolution.ts";
-import { readableGateItem } from "./readable-gate-item.ts";
 import { DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_DESCRIPTION, DOCTOR_OUTPUT_TOOL_NAME, DoctorEvidenceStore, doctorEvidenceReadSchema, doctorSubmissionSchema, validateDoctorOutput, type DoctorCase } from "./doctor-contracts.ts";
 
 import { sitianReport } from "./sitian-facade.ts";
 
 export { DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME };
 export const DOCTOR_CASE_FLAG = { name: "ak-doctor-case", definition: { description: "Retained .ak-roles/books/<book>/<n>/runs directory", type: "string" as const } } as const;
-export type DoctorRoleDependencies = { loadSoul(): Promise<string>; loadCase(path: string): Promise<DoctorCase>; auditCompliance(options: { context: HostContext; signal?: AbortSignal; submission: unknown }): Promise<ComplianceDecision> };
+export type DoctorRoleDependencies = { loadSoul(): Promise<string>; loadCase(path: string): Promise<DoctorCase> };
 function appendCandidate(ctx: HostContext, data: unknown): void {
   try {
     sitianReport({
@@ -36,7 +34,15 @@ export function createDoctorRoleRuntime(pi: RoleHost, dependencies: DoctorRoleDe
   let activation: { soul: string; patient: DoctorCase; store: DoctorEvidenceStore } | undefined; let registered = false; pi.registerFlag(DOCTOR_CASE_FLAG.name, DOCTOR_CASE_FLAG.definition);
   return { async activate() { const path = pi.getFlag(DOCTOR_CASE_FLAG.name); if (typeof path !== "string" || !path.trim()) throw new Error("Doctor requires --ak-doctor-case"); const soul = (await dependencies.loadSoul()).trim(); if (!soul) throw new Error("Doctor soul is empty"); const patient = await dependencies.loadCase(path); activation = { soul, patient, store: new DoctorEvidenceStore(patient) };
     if (!registered) { registered = true; pi.registerTool({ name: DOCTOR_EVIDENCE_TOOL_NAME, label: "太医署证据", description: "分页读取留存的 Pi session 字节。", parameters: doctorEvidenceReadSchema, async execute(_id: string, params: { evidenceId: string; offset?: number; limit?: number }) { if (!activation) throw new Error("太医署未激活"); const details = activation.store.read(params.evidenceId, params.offset, params.limit); return { content: [{ type: "text" as const, text: JSON.stringify(details) }], details }; } });
-      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "太医署输出", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id: string, params: unknown, signal: AbortSignal | undefined, _update: unknown, ctx: HostContext): Promise<HostToolResult<unknown>> { if (!activation) throw new Error("太医署未激活"); const active = activation; const testimony = validateDoctorOutput(params, active.patient, active.store); try { appendCandidate(ctx, { version: 1, testimony, cost: active.patient.cost, readRecord: active.store.readRecord(), patientIdentity: active.patient.identity }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx, submission: testimony } : { context: ctx, signal, submission: testimony }); } catch (error) { host.failInfrastructure(error, ctx, id); } const acceptedDetails = testimony; return disposeComplianceDecision<HostToolResult<unknown>>(audit, { converged: (usage) => ({ content: audit.status === "converged" && audit.receipt !== undefined ? [{ type: "text" as const, text: readableGateItem(audit.receipt) }] : [], details: acceptedDetails, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt, usageProjection) => { try { appendCandidate(ctx, { version: 1, testimony, cost: active.patient.cost, auditNoReceipt, readRecord: active.store.readRecord(), patientIdentity: active.patient.identity }); } catch (error) { host.failInfrastructure(error, ctx, id); } return { content: [], details: acceptedDetails, terminate: true as const, ...usageProjection }; }, received: () => { throw new Error("审刑院非三态应交 runComplianceAudit 重问说话者"); }, continue: (violations) => ({ content: [{ type: "text" as const, text: readableGateItem(audit.status === "continue" ? audit.receipt ?? violations : violations) }], details: acceptedDetails, terminate: false as const }), escalate: (result) => result, transportFailure: (facts) => { host.failInfrastructure(Object.assign(new Error(facts.diagnostic), { name: "ComplianceTransportFailure", ...(facts.submissions === undefined && facts.terminal === undefined ? {} : { submission: facts.submissions ?? facts.terminal }) }), ctx, id); } }, acceptedDetails); } });
+      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "太医署输出", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id: string, params: unknown, _signal: AbortSignal | undefined, _update: unknown, ctx: HostContext): Promise<HostToolResult<unknown>> {
+        if (!activation) throw new Error("太医署未激活");
+        const active = activation;
+        const testimony = validateDoctorOutput(params, active.patient, active.store);
+        try {
+          appendCandidate(ctx, { version: 1, testimony, cost: active.patient.cost, readRecord: active.store.readRecord(), patientIdentity: active.patient.identity });
+        } catch (error) { host.failInfrastructure(error, ctx, id); }
+        return { content: [], details: testimony, terminate: true };
+      } });
       pi.on("before_agent_start", (event) => { if (!activation) throw new Error("太医署未激活"); const catalog = { version: activation.patient.version, identity: activation.patient.identity, admittedMetrics: { cost: activation.patient.cost }, lawfulTargetKeys: ["case", ...activation.patient.cost.invocations.sources], evidence: activation.patient.evidence.map(({ id, kind, sha256, byteLength, contentLength }) => ({ id, kind, sha256, byteLength, contentLength })) }; return { systemPrompt: `${event.systemPrompt}\n\n<doctor_soul>\n${activation.soul}\n</doctor_soul>\n\n<doctor_case>\n${JSON.stringify(catalog)}\n</doctor_case>` }; }); }
     const required = [DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME]; const names = pi.getAllTools().map((tool) => tool.name); for (const name of required) if (names.filter((item) => item === name).length !== 1) throw new Error(`Doctor required tool collision or missing: ${name}`); pi.setActiveTools(required); const active = pi.getActiveTools?.() ?? required; if (active.length !== 2 || !required.every((name) => active.includes(name))) throw new Error("Doctor active tool narrowing failed"); } };
 }

package/src/gatekeeper-role.ts

@@ -43,7 +43,7 @@ export type GatekeeperResult =
       readonly receipt: unknown;
       readonly runId?: string;
     }
-  /** continue | escalate: both return the officer receipt to the parent (#753 / #756). */
+  /** continue returns the receipt for a subject resubmission; escalate resumes this officer directly. */
   | {
       readonly status: "continue";
       readonly officer: GateOfficer;
@@ -81,7 +81,7 @@ export type GatekeeperResult =
 /** Non-pass faces returned to the parent session (correctable; #836 never kill leg). */
 export type SubmissionGateNonPassResult = Extract<
   GatekeeperResult,
-  { status: "continue" | "escalate" | "no_receipt" | "transport_failure" }
+  { status: "continue" | "no_receipt" | "transport_failure" }
 >;
 
 function gateSeatLabel(stage: GateOfficer): string {

package/src/host-contracts.ts

@@ -340,14 +340,6 @@ type HostEventResultMap = {
 type HostEventHandler<K extends keyof HostEventMap> = (event: HostEventMap[K], ctx: HostContext) => HostEventResultMap[K] | void | Promise<HostEventResultMap[K] | void>;
 export type HostEventRegistration = { [K in keyof HostEventMap]: [event: K, handler: HostEventHandler<K>] }[keyof HostEventMap];
 
-type HostGatekeeperSubject = {
-  readonly kind:
-    | "worker_completion"
-    | "judge_draft"
-    | "judge_compliance"
-    | "countersign_verdict"
-    | "secretariat_verdict";
-};
 /** Gatekeeper non-pass faces returned to parent (#836 includes transport_failure; never kill leg). */
 type HostGatekeeperNonPass = { readonly status: "continue" | "escalate" | "no_receipt" | "transport_failure" } & Record<string, unknown>;
 export type HostSubmissionNonPass = HostGatekeeperNonPass;
@@ -378,23 +370,6 @@ export interface RoleHost {
   getAllTools(): Array<{ name: string; sourceInfo?: { path?: string } }>;
   setActiveTools(names: string[]): void;
   getActiveTools(): string[];
-  /**
-   * Shared submission gate. On converged/continue returns officer snapshot (receipt + nested
-   * runId) for seat public-terminal projection (#969); callers may ignore it.
-   */
-  requireSubmissionGate?(options: {
-    context: HostContext;
-    subject: HostGatekeeperSubject;
-    signal?: AbortSignal;
-    hostActions: HostGatekeeperActions;
-    toolCallId: string;
-    submission?: unknown;
-  }): Promise<void | {
-    readonly status: "converged" | "continue";
-    readonly officer: string;
-    readonly receipt: unknown;
-    readonly runId?: string;
-  }>;
   on(event: "before_agent_start", handler: HostEventHandler<"before_agent_start">): void;
   on(event: "input", handler: HostEventHandler<"input">): void;
   on(event: "tool_call", handler: HostEventHandler<"tool_call">): void;

package/src/judge-role.ts

@@ -1,19 +1,71 @@
-import type { RoleHost, HostContext, HostToolResult, HostGatekeeperActions } from "./host-contracts.ts";
+import {
+  type RoleHost,
+  type HostContext,
+  type HostToolResult,
+} from "./host-contracts.ts";
 import type { Static } from "typebox";
-import { REVIEW_QUEUE_STATUSES, reviewSubmissionSchema } from "./review-submission.ts";
-import { GatekeeperDecisionError, ParentQueueReaskError, unreadableDiscriminatorNotice } from "./submission-errors.ts";
-import { projectGatekeeperEscalation } from "./audit-escalation.ts";
-
-import { readableGateItem } from "./readable-gate-item.ts";
+import { reviewSubmissionSchema } from "./review-submission.ts";
+import { type GatekeeperSubject } from "./gatekeeper-role.ts";
 import {
   JUDGE_OUTPUT_TOOL_NAME,
   type JudgeVerdict,
 } from "./package-contracts/judge-output.ts";
 
-
 export { JUDGE_OUTPUT_TOOL_NAME };
 export type { JudgeVerdict };
 
+/** The only judge audit order: 符宝郎, then 审刑院. */
+const JUDGE_GATES: readonly GatekeeperSubject[] = [
+  { kind: "judge_draft" },
+  { kind: "judge_compliance" },
+];
+
+export async function runJudgeGates(input: {
+  readonly gateAlreadyConverged: (subject: GatekeeperSubject) => Promise<boolean>;
+  readonly runGate: (
+    subject: GatekeeperSubject,
+  ) => Promise<{
+    readonly status?: unknown;
+    readonly receipt?: unknown;
+    readonly runId?: string;
+    readonly runDirectory?: string;
+  } | void>;
+}): Promise<{
+  readonly status: "converged" | "continue" | "escalate";
+  readonly passes: readonly {
+    readonly subject: GatekeeperSubject;
+    readonly status: "converged" | "continue" | "escalate";
+    readonly receipt: unknown;
+    readonly runId?: string;
+    readonly runDirectory?: string;
+  }[];
+}> {
+  const passes: {
+    subject: GatekeeperSubject;
+    status: "converged" | "continue" | "escalate";
+    receipt: unknown;
+    runId?: string;
+    runDirectory?: string;
+  }[] = [];
+  for (const subject of JUDGE_GATES) {
+    if (await input.gateAlreadyConverged(subject)) continue;
+    const pass = await input.runGate(subject);
+    const status = pass?.status;
+    if (pass === undefined || (status !== "converged" && status !== "continue" && status !== "escalate")) {
+      throw new Error("judge gate returned no conclusion");
+    }
+    passes.push({
+      subject,
+      status,
+      receipt: pass.receipt,
+      ...(pass.runId === undefined ? {} : { runId: pass.runId }),
+      ...(pass.runDirectory === undefined ? {} : { runDirectory: pass.runDirectory }),
+    });
+    if (status === "continue" || status === "escalate") return { status, passes };
+  }
+  return { status: "converged", passes };
+}
+
 // #836 r16 class 1: fix/classes/note/decisionGate are LLM/human-read narrative
 // content — 符宝郎/审刑院 read the raw receipt, no code branches on their length
 // or nested presence. `status` alone is the machine discriminator the
@@ -25,16 +77,9 @@ export type JudgeRoleDependencies = {
   loadSoul(): Promise<string>;
 };
 
-export type JudgeRoleHostActions = HostGatekeeperActions & {
-  /** Preserve the first officer's pass as a separate model-visible result item if the second gate fails. */
-  bindPriorGatePass(toolCallId: string, receipt: unknown): void;
-};
-
-
 export function createJudgeRoleRuntime(
   pi: RoleHost,
   dependencies: JudgeRoleDependencies,
-  hostActions: JudgeRoleHostActions,
 ): { activate(): Promise<void> } {
   let soul: string | undefined;
   let lifecycleRegistered = false;
@@ -48,86 +93,14 @@ export function createJudgeRoleRuntime(
         pi.registerTool({
           name: JUDGE_OUTPUT_TOOL_NAME,
           label: "大理寺输出",
-          description: "提交大理寺终局判词。",
+          description: "提交大理寺终局判词；交卷调用结束后，由公开调用接缝按判词状态执行适用审核。",
           promptSnippet: "提交大理寺终局判词",
           parameters: judgeVerdictSchema,
           async execute(toolCallId: string, parameters: Static<typeof judgeVerdictSchema>, signal: AbortSignal | undefined, _onUpdate: unknown, ctx: HostContext): Promise<HostToolResult<unknown>> {
             if (soul === undefined) throw new Error("大理寺职分未装载");
-            // #756 queue: read shared status only — escalate skips gates;
-            // unreadable status returns to judge; else 符宝郎内闸 then 审刑院合规.
-            const rawStatus =
-              parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
-              && typeof (parameters as Record<string, unknown>).status === "string"
-                ? (parameters as Record<string, unknown>).status as string
-                : undefined;
-            if (rawStatus === undefined || !REVIEW_QUEUE_STATUSES.has(rawStatus)) {
-              const received = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
-                ? (parameters as Record<string, unknown>).status
-                : undefined;
-              throw new ParentQueueReaskError(unreadableDiscriminatorNotice("status", received));
-            }
-            if (rawStatus === "escalate") {
-              // Parent escalate → throw to caller as-is; officers do not attend (#753 / #756).
-              return {
-                content: [],
-                details: parameters,
-                terminate: true as const,
-              };
-            }
-            // Queue membership above is the only three-state check. The receipt is not re-judged.
-            // Candidate verdict is already on the parent session books as this
-            // tool-call leaf (first-record-then-audit; run 019fea05 L61/L62).
-            // #753: 符宝郎内闸 — continue returns the raw receipt as a nonterminal tool result.
-            let draftPass: { status: "converged" | "continue"; receipt: unknown } | undefined;
-            try {
-              const obtainedDraftPass = await pi.requireSubmissionGate!({
-                context: ctx,
-                subject: { kind: "judge_draft" },
-                ...(signal === undefined ? {} : { signal }),
-                hostActions,
-                toolCallId,
-                // #879: this-turn typed payload — identity-bound at submit site.
-                submission: parameters,
-              });
-              draftPass = obtainedDraftPass || undefined;
-              if (draftPass?.status === "continue") {
-                return {
-                  content: [{ type: "text" as const, text: readableGateItem(draftPass.receipt) }],
-                  details: parameters,
-                  terminate: false,
-                };
-              }
-              if (draftPass !== undefined) hostActions.bindPriorGatePass(toolCallId, draftPass.receipt);
-              // #756: 审刑院合规路径 — same review-queue law as 符宝郎/台院.
-              // converged → accept; continue → raw auditor receipt; escalate → pause;
-              // not three-state → resume auditor; no round cap; no disposeCompliance mapping.
-              const compliancePass = await pi.requireSubmissionGate!({
-                context: ctx,
-                subject: { kind: "judge_compliance" },
-                ...(signal === undefined ? {} : { signal }),
-                hostActions,
-                toolCallId,
-                // #879: same parent payload for 审刑院; not recovered from session latest.
-                submission: parameters,
-              });
-              if (compliancePass?.status === "continue") {
-                return {
-                  content: [draftPass, compliancePass].filter((pass) => pass !== undefined).map((pass) => ({ type: "text" as const, text: readableGateItem(pass.receipt) })),
-                  details: parameters,
-                  terminate: false,
-                };
-              }
-              return {
-                content: [draftPass, compliancePass].filter((pass) => pass !== undefined).map((pass) => ({ type: "text" as const, text: readableGateItem(pass.receipt) })),
-                details: parameters,
-                terminate: true as const,
-              };
-            } catch (error) {
-              if (error instanceof GatekeeperDecisionError && error.result.status === "escalate") {
-                return projectGatekeeperEscalation(error.result, parameters);
-              }
-              throw error;
-            }
+            // ADR 0003: record the original receipt and end the tool call first.
+            // The public seam reads status and chooses the next route.
+            return { content: [], details: parameters, terminate: true };
           },
         });
         pi.on("before_agent_start", (event) => {

package/src/package-contracts/judge-output.ts

@@ -27,20 +27,3 @@ export type JudgeVerdict =
     note?: string;
     evidence?: unknown;
   };
-
-export function validateAcceptedJudgeDetails(verdict: unknown): JudgeVerdict {
-  if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) throw new Error("Judge verdict has no execution discriminator");
-  let status: unknown;
-  try {
-    status = (verdict as Record<string, unknown>).status;
-  } catch {
-    throw new Error("Judge verdict has no execution discriminator");
-  }
-  if (typeof status !== "string") {
-    throw new Error("Judge verdict has no execution discriminator");
-  }
-  if (REVIEW_QUEUE_STATUSES.has(status)) {
-    return verdict as JudgeVerdict;
-  }
-  throw new Error("Judge verdict has no execution discriminator");
-}

package/src/package-contracts/terminating-tools.ts

@@ -10,7 +10,6 @@ import {
 } from "./collector-output.ts";
 import {
   JUDGE_OUTPUT_TOOL_NAME,
-  validateAcceptedJudgeDetails,
   type JudgeVerdict,
 } from "./judge-output.ts";
 import {
@@ -46,7 +45,6 @@ export {
   REVIEWER_OUTPUT_TOOL_NAME,
   MERGER_OUTPUT_TOOL_NAME,
   validateAcceptedCollectorReceipt,
-  validateAcceptedJudgeDetails,
   validateReviewerIntent,
   validateAcceptedWorkerDetails,
   validateDoctorSubmissionShape,

package/src/pi/adapter.ts

@@ -6,12 +6,10 @@ import {
   type ToolDefinition,
 } from "@earendil-works/pi-coding-agent";
 import type { Static, TSchema } from "typebox";
-import type { SubmissionGateNonPassResult, GatekeeperSubject } from "../gatekeeper-role.ts";
-import { requireSubmissionGate } from "../submission-gate.ts";
+import type { SubmissionGateNonPassResult } from "../gatekeeper-role.ts";
 import type {
   HostContext,
   HostEventRegistration,
-  HostGatekeeperActions,
   HostToolDefinition,
   HostToolResult,
   RoleEnvelopeHost,
@@ -83,35 +81,6 @@ export function toPiContext(context: HostContext): ExtensionContext {
   return piContext;
 }
 
-/** Gatekeeper receives HostContext directly (#518 §1③) without recovering raw ExtensionContext via WeakMap. */
-function requirePiSubmissionGate(options: {
-  context: HostContext;
-  subject: GatekeeperSubject;
-  signal?: AbortSignal;
-  hostActions: HostGatekeeperActions;
-  toolCallId: string;
-  submission?: unknown;
-}): Promise<void | {
-  readonly status: "converged" | "continue";
-  readonly officer: string;
-  readonly receipt: unknown;
-  readonly runId?: string;
-}> {
-  return requireSubmissionGate({
-    context: options.context,
-    subject: options.subject,
-    ...(options.signal === undefined ? {} : { signal: options.signal }),
-    hostActions: {
-      failInfrastructure(error, _context, toolCallId) {
-        options.hostActions.failInfrastructure(error, options.context, toolCallId);
-      },
-      bindSubmissionNonPass: options.hostActions.bindSubmissionNonPass,
-    },
-    toolCallId: options.toolCallId,
-    ...(options.submission === undefined ? {} : { submission: options.submission }),
-  });
-}
-
 function toPiResult<D>(result: HostToolResult<D>): HostToolResult<D> {
   return result;
 }
@@ -177,7 +146,6 @@ export function createPiRoleHostAdapter(
     })),
     setActiveTools: (names) => pi.setActiveTools(names),
     getActiveTools: () => pi.getActiveTools(),
-    requireSubmissionGate: requirePiSubmissionGate,
     on(...registration: HostEventRegistration) {
       const context = (value: ExtensionContext) => projectPiContext(value, options.transcriptFromContext);
       if (registration[0] === "before_agent_start") {

package/src/public-cli/cli.ts

@@ -82,7 +82,7 @@ import {
 } from "./option-definitions.ts";
 import { TurnDispatchedFailure } from "./auto-resume.ts";
 import { continueParentAfterChild, runPublicInstructionSeat, runPublicInstructionSeatResume } from "./instruction-seat-run.ts";
-import { courtDiaristEscalated } from "./countersign-run.ts";
+import { latestPayloadEscalated } from "./countersign-run.ts";
 import { runPublicAnalyst } from "./analyst-run.ts";
 import {
   AUTO_RESUME_LIMIT,
@@ -1251,7 +1251,7 @@ export async function runAkRole(
       while (
         current.exitCode === 0 && current.admitted?.correlationId !== undefined
         && current.terminal?.roleOutcome.kind === "accepted"
-        && !courtDiaristEscalated(current.terminal.roleOutcome)
+        && !latestPayloadEscalated(current.terminal.roleOutcome)
       ) {
         const parentRunId = current.admitted.correlationId;
         resumeFailureContext = {