@akagilnc/pi-workflow-roles 0.1.5204 → 0.1.5212

package/dist/submission-ledger.js

@@ -312,26 +312,14 @@ export async function readLatestSubmissionOutcome(cwd, runId, homeOrScope) {
 }
 async function restoreState(cwd, runId, scope) {
     const located = await readOwnedSubmissionRecords(cwd, runId, scope);
-    // Unknown-run empty set: no prior chain. Owned rows without a file are an internal bug.
     if (located.file === undefined) {
         if (located.owned.length !== 0) {
             throw new Error(`submission ledger invariant: owned rows present without recordFile for run ${runId}`);
         }
         return { sequence: 0 };
     }
-    const { file, owned } = located;
-    const last = owned.at(-1);
+    const { owned } = located;
     return {
-        ...(last === undefined
-            ? {}
-            : {
-                prior: {
-                    identity: last.identity,
-                    recordFile: file,
-                    kind: last.kind,
-                    level: last.level,
-                },
-            }),
         sequence: owned.reduce((maximum, record) => {
             const payload = record.payload;
             return payload?.type === "candidate" && typeof payload.sequence === "number"
@@ -362,7 +350,7 @@ function homeFromHostContext(context, home) {
 }
 /**
  * #959: seal one accepted submission without a model tool call.
- * Same ledger row shape and priorEventId chain as the terminating-tool wrap.
+ * Same ledger row shape as the terminating-tool wrap.
  * Used when a prose-exit seat (navigator) harvests the final assistant text.
  */
 export async function sealAcceptedSubmission(options) {
@@ -370,15 +358,10 @@ export async function sealAcceptedSubmission(options) {
     const attemptId = attemptIdentity(options.context, runId);
     const sessionParent = sessionParentFromHostContext(options.context);
     const home = homeFromHostContext(options.context, options.home);
-    const state = await restoreState(options.context.cwd, runId, {
-        ...(home === undefined ? {} : { home }),
-        ...(sessionParent === undefined ? {} : { sessionParent }),
-    });
-    const pointer = sitianReport({
+    sitianReport({
         level: "event",
         kind: "sealed",
         subject: { runId, attemptId },
-        ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
         payload: {
             type: "sealed",
             attemptId,
@@ -391,7 +374,6 @@ export async function sealAcceptedSubmission(options) {
         ...(home !== undefined ? { home } : {}),
         ...(sessionParent === undefined ? {} : { sessionParent }),
     });
-    state.prior = pointer;
 }
 /**
  * Submission ledger host — record only (#836).
@@ -412,31 +394,28 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
         states.set(runId, pending);
         return pending;
     })();
-    const appendFor = (state, context, runId, attemptId, event) => {
+    const appendFor = (context, runId, attemptId, event) => {
         const home = resolveHomeFromContext(context);
         const sessionParent = sessionParentFromHostContext(context);
-        const pointer = sitianReport({
+        return sitianReport({
             level: "event",
             kind: event.type,
             subject: { runId, attemptId },
-            ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
             payload: event,
             source: "role-runtime",
             cwd: context.cwd,
             ...(home !== undefined ? { home } : {}),
             ...(sessionParent === undefined ? {} : { sessionParent }),
         });
-        state.prior = pointer;
-        return pointer;
     };
     host.on("turn_end", async (event, context) => {
         try {
             const runId = runIdentity(context);
             const attemptId = attemptIdentity(context, runId);
-            const state = await stateFor(context, runId);
             const calls = event.calls.map(({ toolCallId: id, toolName: name }) => ({ id, name }));
             if (calls.length > 0) {
-                appendFor(state, context, runId, attemptId, { type: "roundContext", attemptId, calls });
+                await stateFor(context, runId);
+                appendFor(context, runId, attemptId, { type: "roundContext", attemptId, calls });
             }
         }
         catch (error) {
@@ -465,7 +444,7 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                     const runId = runIdentity(context);
                     const attemptId = attemptIdentity(context, runId);
                     const state = await stateFor(context, runId);
-                    const append = (event) => appendFor(state, context, runId, attemptId, event);
+                    const append = (event) => appendFor(context, runId, attemptId, event);
                     // #541 / #575: shared infra-declaration fail lives on the ledger seam.
                     // #641 chain②: seats may bounce a misdeclared infrastructure failure
                     // as correctable (2.1/2.2/2.3 keep paths).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5204",
+  "version": "0.1.5212",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",
@@ -29,7 +29,6 @@
     "!dist/package-resources/method-skill.js",
     "!dist/package-resources/method-skill-binding.js",
     "extensions",
-    "scripts/generate-tool-execution-observation-schema.ts",
     "scripts/build-package.mjs",
     "src",
     "souls",
@@ -43,7 +42,7 @@
     "CLAUDE.md"
   ],
   "scripts": {
-    "build": "tsx scripts/generate-tool-execution-observation-schema.ts && tsc -p tsconfig.build.json && node scripts/build-package.mjs",
+    "build": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\" && tsc -p tsconfig.build.json && node scripts/build-package.mjs",
     "prepack": "npm run build",
     "test": "node --import tsx --import ./scripts/test-process-env-preload.mjs --test test/unit/**/*.test.ts test/contract/**/*.test.ts",
     "test:fast": "node --import tsx --import ./scripts/test-process-env-preload.mjs --test-timeout=300000 --test test/unit/**/*.test.ts test/contract/**/*.test.ts",

package/scripts/build-package.mjs

@@ -1,4 +1,4 @@
-import { chmod, copyFile, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { chmod, copyFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { build } from "esbuild";
@@ -20,7 +20,6 @@ const entries = [
   // Static import of navigator-work-base.
   "atomic-write",
   "public-role-summons",
-  "pi/in-process-session",
   "activation-ledger-git",
   "activation-ledger-topology",
   "archivist-record-entry",
@@ -70,7 +69,6 @@ const entries = [
   "sitian-contracts",
   "sitian-facade",
   "sitian-reader",
-  "stream-idle-guard",
   "typed-provider-http",
   "upstream-error-testimony",
 ];

package/souls/audit-law.md

@@ -17,7 +17,7 @@ finding 提**类别**；实例只作证据。一次找齐全，不逐轮抽样
 
 御批门槛：重大决策、设计、改变实际行为的机制与约束须合法。实现细节（字段名、内部形状、修法选择等）依现行法源成立即可，不因无逐字原话驳回。
 
-判断不收敛（同类问题反复、修理只增不减）可上呈；你的打回与上一轮相同、对方重交只换措辞，须上呈，不得再打回。修理 diff 自身按同尺复核。
+判断不收敛（同类问题反复、修理只增不减）可上呈；你的打回一轮轮完全一样、对方的重交也一轮轮只换措辞不换实质、转圈不止，须上呈；对方维持一次判词不算转圈。修理 diff 自身按同尺复核。
 
 衙门不是需求来源。弹章、施工方的注释与测试、你造的探针，都只是线索。判一条 finding 成立、开一条约束，判词须写明要它的那一句法，先看那句讲的是不是这一条；指不出的，按过度防御或加戏驳回。判词缺这一样，审刑院打回，符宝郎驳。对方按你处方加的东西，下轮同审。
 

package/souls/judge-auditor.md

@@ -6,6 +6,6 @@
 二、错封——封驳或所加约束指不出法源，或超出票面与陛下的话。
 三、事实错——判词所引代码事实、法源引文与源头不符。
 
-三者皆无即 converged，一轮了结。判词少写一句而事实立得住，不是错；施工没做完，是大理寺封驳的理由，不是你打回判词的理由。打回与上一轮相同、对方只换措辞重交，上呈。
+三者皆无即 converged，一轮了结。判词少写一句而事实立得住，不是错；施工没做完，是大理寺封驳的理由，不是你打回判词的理由。
 
 调卷宗与取证、纪律依《审刑院法典》。合规则 `converged`；有错则 `continue`，逐条指出是哪一种错和你查到的原因；无法判断时 `escalate`。

package/src/host-contracts.ts

@@ -386,109 +386,9 @@ export interface RoleHost {
   getCommands?(): Array<{ name: string }>;
 }
 
-/** Institutional sub-session seats (#518 §1). */
-export type InstitutionalSeat =
-  | "gatekeeper"
-  | "inspector"
-  | "notary"
-  | "auditor"
-  | (string & {});
-
 /** Non-secret host-neutral seat model selection. Single truth source is RoleTurnModelConfig. */
 export type HostInstitutionalModelSelection = RoleTurnModelConfig;
 
-/** Usage statistics for institutional sub-session events and turns. */
-export type HostSessionUsage = {
-  readonly input: number;
-  readonly output: number;
-  readonly cacheRead: number;
-  readonly cacheWrite: number;
-  readonly totalTokens: number;
-  readonly cost: {
-    readonly input: number;
-    readonly output: number;
-    readonly cacheRead: number;
-    readonly cacheWrite: number;
-    readonly total: number;
-  };
-};
-
-/** Closed stream event union consumed by institutional callers (#518 §1③). */
-export type HostInstitutionalSessionEvent =
-  | {
-      readonly type: "message_end";
-      readonly role: "assistant" | "user" | string;
-      readonly message?: unknown;
-      readonly usage?: HostSessionUsage;
-    }
-  | {
-      readonly type: "turn_end";
-      readonly stopReason?: string;
-    }
-  | {
-      readonly type: "tool_call";
-      readonly toolCallId: string;
-      readonly toolName: string;
-      readonly args?: unknown;
-    }
-  | {
-      readonly type: "tool_result";
-      readonly toolCallId: string;
-      readonly toolName: string;
-      readonly isError?: boolean;
-      readonly details?: unknown;
-    };
-
-/** Terminal result of an institutional assistant turn (#518 §1③). */
-export type HostAssistantTurnResult = {
-  readonly text: string;
-  readonly stopReason?: string;
-  readonly errorMessage?: string;
-  readonly usage?: HostSessionUsage;
-  readonly messages?: readonly unknown[];
-};
-
-/**
- * Handle to an active institutional sub-session (#518 §1②).
- * Does not leak AgentSession, ModelRuntime, or Provider objects out of the adapter.
- */
-export interface HostInstitutionalSessionHandle {
-  readonly sessionFile?: string;
-  readonly sessionId?: string;
-  prompt(text: string): Promise<HostAssistantTurnResult>;
-  subscribe(listener: (event: HostInstitutionalSessionEvent) => void): () => void;
-  abort(): void;
-  close(): Promise<void>;
-}
-
-/** Open options for an institutional sub-session (#518 §1①). */
-export type HostInstitutionalSessionOptions = {
-  readonly cwd: string;
-  readonly selection: HostInstitutionalModelSelection;
-  readonly systemPrompt: string;
-  readonly tools?: readonly HostToolDefinition[];
-  readonly customTools?: readonly unknown[];
-  readonly noTools?: "all" | "builtin";
-  readonly toolsAllowlist?: readonly string[];
-  readonly agentDir?: string;
-  readonly credentialScratchParent?: string;
-  readonly signal?: AbortSignal;
-  readonly idleRetry?: boolean;
-  readonly sessionIdentity?: {
-    readonly kind: string;
-    readonly subject?: string;
-    readonly parent?: { getSessionFile(): string | undefined };
-  };
-  readonly sessionManager?: unknown;
-};
-
-/** Host-neutral institutional sub-session open seam. */
-export interface InstitutionalSessionHost {
-  openInstitutionalSession(
-    options: HostInstitutionalSessionOptions,
-  ): Promise<HostInstitutionalSessionHandle>;
-}
-
 /** Host-owned durable record session used by AK ledger placement. */
 export interface HostRecordSession {
   getSessionFile(): string | undefined;

package/src/role-runtime.ts

@@ -24,12 +24,6 @@ import {
 } from "./activation-ledger.ts";
 import { readPackageMaterial } from "./session-opening-materials.ts";
 import { writeStderrJsonlRecord } from "./stderr-jsonl.ts";
-import {
-  createToolExecutionObservationFace,
-  systemToolExecutionObservationMonoNow,
-  writeToolExecutionObservationRecord,
-  type ToolExecutionObservationWriter,
-} from "./tool-execution-observation.ts";
 import {
   ENGINE_DETOUR_TOOL_NAME,
   ENGINE_MODEL_FLAG_NAME,
@@ -286,17 +280,6 @@ export type {
   ActivationSessionManager,
   ActivationSessionPointer,
 } from "./activation-ledger.ts";
-export {
-  TOOL_EXECUTION_UPDATE_HEARTBEAT,
-  TOOL_EXECUTION_UPDATE_THROTTLE_MS,
-  createToolExecutionObservationFace,
-  isProducingToolUpdate,
-  systemToolExecutionObservationMonoNow,
-  toolExecutionObservationRecordSchema,
-  validateToolExecutionObservationRecord,
-  writeToolExecutionObservationRecord,
-} from "./tool-execution-observation.ts";
-export type { ToolExecutionObservationRecord, ToolExecutionObservationWriter } from "./tool-execution-observation.ts";
 import {
   NOTARY_OUTPUT_TOOL,
   INSPECTOR_OUTPUT_TOOL,
@@ -477,11 +460,6 @@ export type RoleRuntimeDependencies = {
   loadNavigatorWorkContext?(options: { context: HostContext; role: string; phase: NavigatorPhase; getFlag?: (name: string) => unknown }): Promise<NavigatorWorkContext>;
   activationClock?(): string;
   activationTraceWriter?: (record: ActivationTraceRecord) => void | Promise<void>;
-  /** Wall-clock ISO timestamps for tool-execution observation records; defaults to activationClock/Date. */
-  toolExecutionObservationClock?(): string;
-  /** Monotonic ms clock for update throttling; defaults to performance.now (not Date.now). */
-  toolExecutionObservationMonoNow?(): number;
-  toolExecutionObservationWriter?: ToolExecutionObservationWriter;
 };
 
 function abortContext(ctx: { abort(): void }): void {
@@ -1081,7 +1059,7 @@ export function createRoleRuntimeExtension(
     // terminating-tool rejections and mechanical delivery requests share two turns.
     let receiptDelivery = createReceiptDeliveryPolicy();
     let noReceiptRecorded = false;
-    // Public-run fetch observation (in-process-session statusAwareFetch face).
+    // Public-run fetch observation.
     let priorFetch: typeof globalThis.fetch | undefined;
     let fetchWrapped = false;
     /** Envelope-owned: abort/teardown attendance without re-blocking the parent court (#959). */
@@ -1498,7 +1476,6 @@ export function createRoleRuntimeExtension(
       disposeNavigatorAttendanceNonBlocking(attendanceToDispose);
       pendingInfrastructureFailures.clear();
       pendingSubmissionNonPassByToolCallId.clear();
-      observationFace.reset();
     });
 
     const hostActions = {
@@ -1736,38 +1713,9 @@ export function createRoleRuntimeExtension(
 
     const clock = dependencies.activationClock ?? (() => new Date().toISOString());
     const writeTrace = dependencies.activationTraceWriter ?? writeActivationTraceRecord;
-    const observationFace = createToolExecutionObservationFace({
-      role: () => selectedRole,
-      admitted: () => admitted,
-      clock: dependencies.toolExecutionObservationClock ?? clock,
-      monoNow: dependencies.toolExecutionObservationMonoNow ?? systemToolExecutionObservationMonoNow,
-      write: dependencies.toolExecutionObservationWriter ?? writeToolExecutionObservationRecord,
-    });
-    // ExtensionRunner.emit catches ordinary handler throws, emits extension error, and continues.
-    // Observation plane failures must still hit the shared infrastructure termination path
-    // (abort + nonzero print/json exit) with the original cause before that swallow.
-    const observe = async (
-      run: () => void | Promise<void>,
-      ctx: HostContext,
-    ): Promise<void> => {
-      try {
-        await run();
-      } catch (error) {
-        failInfrastructure(error, ctx);
-      }
-    };
-    roleHost.on("tool_execution_start", async (event, ctx) => {
-      await observe(() => observationFace.onStart(event), ctx);
-    });
-    roleHost.on("tool_execution_update", async (event, ctx) => {
-      await observe(() => observationFace.onUpdate(event), ctx);
-    });
-    roleHost.on("tool_execution_end", async (event, ctx) => {
-      await observe(() => observationFace.onEnd(event), ctx);
-    });
 
     // Public Role run: record typed non-success HTTP for error evidence + v1 resume.
-    // Same observation owner as in-process-session statusAwareFetch → typed-provider-http
+    // Same observation owner → typed-provider-http
     // sidecar (settlement already merges observation.httpStatus into knownFailure).
     // after_provider_response covers the success-path onResponse face; fetch wrap covers
     // non-2xx Responses where openai-completions throws before onResponse (#675).
@@ -1805,7 +1753,7 @@ export function createRoleRuntimeExtension(
     });
 
     roleHost.on("session_start", async (event, ctx) => {
-      // Scope fetch observation to this public run (in-process-session statusAwareFetch face).
+      // Scope fetch observation to this public run.
       if (!fetchWrapped && typeof globalThis.fetch === "function") {
         priorFetch = globalThis.fetch.bind(globalThis);
         const underlying = priorFetch;
@@ -1827,7 +1775,7 @@ export function createRoleRuntimeExtension(
                 provider,
               });
             } catch {
-              // Observation must not break the provider stream (same as in-process-session).
+              // Observation must not break the provider stream.
             }
           }
           return response;
@@ -1842,7 +1790,6 @@ export function createRoleRuntimeExtension(
       collectorFirstDispatchDone = false;
       receiptDelivery = createReceiptDeliveryPolicy();
       noReceiptRecorded = false;
-      observationFace.reset();
       pendingNavigatorPresentation = undefined;
       pendingNavigatorSettlement = undefined;
       pendingInfrastructureFailures.clear();

package/src/sitian-appender.ts

@@ -353,7 +353,6 @@ export function appendSitianRecord(input: SitianRecordInput): RecordPointer {
       identity,
       ...(input.subject === undefined ? {} : { subject: input.subject }),
       ...(input.sessionParent === undefined ? {} : { sessionParent: input.sessionParent }),
-      ...(input.priorEventId === undefined ? {} : { priorEventId: input.priorEventId }),
       timestamp,
       host,
       ...(input.source === undefined ? {} : { source: input.source }),

package/src/sitian-contracts.ts

@@ -37,8 +37,6 @@ export type SitianRecord = {
   readonly subject?: SitianSubject | undefined;
   /** Parent session principal link / nesting origin. */
   readonly sessionParent?: string | undefined;
-  /** Prior event identity in a submission ledger chain (S4; distinct from sessionParent). */
-  readonly priorEventId?: string | undefined;
   readonly timestamp: string;
   readonly host: string;
   readonly source?: string | undefined;
@@ -65,7 +63,6 @@ export type SitianRecordInput = {
   readonly sessionParent?: string | undefined;
   /** Run owner for ticket provenance before a ticket is known. */
   readonly runDirectory?: string | undefined;
-  readonly priorEventId?: string | undefined;
   readonly timestamp?: string | undefined;
   readonly host?: string | undefined;
   readonly source?: string | undefined;

package/src/submission-ledger.ts

@@ -146,7 +146,7 @@ async function submissionRecordFile(cwd: string, runId: string, scope: Submissio
 /**
  * Discriminated owned-row view:
  * - unknown run → file absent + empty owned (read APIs only)
- * - located ledger → file is string; prior/write consumers may build RecordPointer
+ * - located ledger → file is string; write consumers may build RecordPointer
  */
 type OwnedSubmissionRecords =
   | { readonly file: undefined; readonly owned: readonly [] }
@@ -491,11 +491,10 @@ export async function readLatestSubmissionOutcome(
   return undefined;
 }
 
-type LedgerState = { prior?: RecordPointer; sequence: number };
+type LedgerState = { sequence: number };
 
 async function restoreState(cwd: string, runId: string, scope: SubmissionLedgerReadScope): Promise<LedgerState> {
   const located = await readOwnedSubmissionRecords(cwd, runId, scope);
-  // Unknown-run empty set: no prior chain. Owned rows without a file are an internal bug.
   if (located.file === undefined) {
     if (located.owned.length !== 0) {
       throw new Error(
@@ -504,19 +503,8 @@ async function restoreState(cwd: string, runId: string, scope: SubmissionLedgerR
     }
     return { sequence: 0 };
   }
-  const { file, owned } = located;
-  const last = owned.at(-1);
+  const { owned } = located;
   return {
-    ...(last === undefined
-      ? {}
-      : {
-          prior: {
-            identity: last.identity,
-            recordFile: file,
-            kind: last.kind,
-            level: last.level,
-          },
-        }),
     sequence: owned.reduce((maximum, record) => {
       const payload = record.payload as Partial<SubmissionLedgerEvent> | undefined;
       return payload?.type === "candidate" && typeof payload.sequence === "number"
@@ -547,7 +535,7 @@ function homeFromHostContext(context: HostContext, home?: string): string | unde
 
 /**
  * #959: seal one accepted submission without a model tool call.
- * Same ledger row shape and priorEventId chain as the terminating-tool wrap.
+ * Same ledger row shape as the terminating-tool wrap.
  * Used when a prose-exit seat (navigator) harvests the final assistant text.
  */
 export async function sealAcceptedSubmission(options: {
@@ -561,15 +549,10 @@ export async function sealAcceptedSubmission(options: {
   const attemptId = attemptIdentity(options.context, runId);
   const sessionParent = sessionParentFromHostContext(options.context);
   const home = homeFromHostContext(options.context, options.home);
-  const state = await restoreState(options.context.cwd, runId, {
-    ...(home === undefined ? {} : { home }),
-    ...(sessionParent === undefined ? {} : { sessionParent }),
-  });
-  const pointer = sitianReport({
+  sitianReport({
     level: "event",
     kind: "sealed",
     subject: { runId, attemptId },
-    ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
     payload: {
       type: "sealed",
       attemptId,
@@ -582,7 +565,6 @@ export async function sealAcceptedSubmission(options: {
     ...(home !== undefined ? { home } : {}),
     ...(sessionParent === undefined ? {} : { sessionParent }),
   });
-  state.prior = pointer;
 }
 
 /**
@@ -611,32 +593,29 @@ export function createSubmissionLedgerHost(
     states.set(runId, pending);
     return pending;
   })();
-  const appendFor = (state: LedgerState, context: HostContext, runId: string, attemptId: string, event: SubmissionLedgerEvent): RecordPointer => {
+  const appendFor = (context: HostContext, runId: string, attemptId: string, event: SubmissionLedgerEvent): RecordPointer => {
     const home = resolveHomeFromContext(context);
     const sessionParent = sessionParentFromHostContext(context);
-    const pointer = sitianReport({
+    return sitianReport({
       level: "event",
       kind: event.type,
       subject: { runId, attemptId },
-      ...(state.prior === undefined ? {} : { priorEventId: state.prior.identity }),
       payload: event,
       source: "role-runtime",
       cwd: context.cwd,
       ...(home !== undefined ? { home } : {}),
       ...(sessionParent === undefined ? {} : { sessionParent }),
     });
-    state.prior = pointer;
-    return pointer;
   };
 
   host.on("turn_end", async (event, context) => {
     try {
       const runId = runIdentity(context);
       const attemptId = attemptIdentity(context, runId);
-      const state = await stateFor(context, runId);
       const calls = event.calls.map(({ toolCallId: id, toolName: name }) => ({ id, name }));
       if (calls.length > 0) {
-        appendFor(state, context, runId, attemptId, { type: "roundContext", attemptId, calls });
+        await stateFor(context, runId);
+        appendFor(context, runId, attemptId, { type: "roundContext", attemptId, calls });
       }
     } catch (error) {
       failInfrastructure(error, context);
@@ -663,7 +642,7 @@ export function createSubmissionLedgerHost(
           const runId = runIdentity(context);
           const attemptId = attemptIdentity(context, runId);
           const state = await stateFor(context, runId);
-          const append = (event: SubmissionLedgerEvent) => appendFor(state, context, runId, attemptId, event);
+          const append = (event: SubmissionLedgerEvent) => appendFor(context, runId, attemptId, event);
           // #541 / #575: shared infra-declaration fail lives on the ledger seam.
           // #641 chain②: seats may bounce a misdeclared infrastructure failure
           // as correctable (2.1/2.2/2.3 keep paths).