@akagilnc/pi-workflow-roles 0.1.5289 → 0.1.5301

package/src/public-cli/countersign-run.ts

@@ -1,40 +1,17 @@
 /**
- * Court diarist station for the shared countersign entry (#572 / ADR 0074 /
- * ADR 0075 / #742 / #771). The public seat itself admits and settles through
- * instruction-seat-run. This module only summons 起居郎 and refreshes a bound
- * court diary.
- *
- * Court admission auto-runs 起居郎 so the 起居郎 LLM asserts the court target;
- * mechanical layer only verifies; countersign reuses that typed identity for bind
- * (ADR 0075 / 0081). Code never matches instruction text against book-known
- * numbers. Who may call 起居郎 and in what order is not written into law
- * (ADR 0075 不规定谁调用起居郎、顺序归调用者). #1092: code no longer freezes or
- * delivers 起居录 paths — roles locate records by ticket. Bound refresh hands the
- * typed key to 起居郎 so freeze loads issue face (ADR 0075: 每次过庭都跑是调用者用法 /
- * typed handoff).
+ * Secretariat's pre-ticket diarist summons. Countersign no longer summons
+ * the diarist; callers refresh the diary before court when needed (ADR 0081).
  */
 import type { DurablePrincipalAuthority } from "../host-contracts.ts";
-import { projectCourtTicketNumbers } from "../diarist-contracts.ts";
 import { readableGateItem } from "../readable-gate-item.ts";
-import { isSafePositiveTicketNumber } from "../run-ticket-number.ts";
 import type { AdmittedCountersignInvocation } from "./invocation.ts";
-import {
-  type PostAdmissionEnv,
-  StationChildExhaustedError,
-} from "./post-admission.ts";
+import type { PostAdmissionEnv } from "./post-admission.ts";
 import type { CliIo } from "./cli-io.ts";
 import type { TerminalRoleOutcome } from "./terminal.ts";
 
 export type CountersignRunEnv = PostAdmissionEnv & {
   principalAuthority: DurablePrincipalAuthority;
   createRunId?: () => string;
-  /**
-   * Test seam: replace the court-pipeline 起居郎 station.
-   * Production leaves this unset and runs the public diarist seat.
-   */
-  runCourtDiaristStation?: (
-    admitted: AdmittedCountersignInvocation,
-  ) => Promise<void>;
   /**
    * #969 gate path: plain-language re-ask when prior 给事中 reply was not three-state.
    * Wins over gateReviewInstruction when both present (notary/inspector precedent).
@@ -60,16 +37,6 @@ export type CountersignRunEnv = PostAdmissionEnv & {
 
 /** 起居郎 identity outcome — escalate stays distinct from missing terminal. */
 export type CourtDiaristIdentity =
-  | {
-      readonly kind: "ticket";
-      readonly ticketNumber: number;
-      /**
-       * #871 typed co-review set when the LLM explicitly submitted one.
-       * Absent means "no new set this turn" — resume must keep the stored run fact
-       * (never silently degrade a multi-ticket set to [main]).
-       */
-      readonly courtTicketNumbers?: readonly number[];
-    }
   | { readonly kind: "unbound" }
   | {
       readonly kind: "escalate";
@@ -141,7 +108,7 @@ function courtDiaristEscalateDiagnostic(
   })}`;
 }
 
-/** Env slice shared by court diarist identity summons (countersign / secretariat). */
+/** Env slice for the secretariat's pre-ticket diarist summons. */
 export type CourtDiaristSummonEnv = Pick<
   CountersignRunEnv,
   | "cwd"
@@ -153,53 +120,6 @@ export type CourtDiaristSummonEnv = Pick<
   | "hostAdapters"
 >;
 
-/**
- * Read #871 set from preserved diarist payloads.
- * - Field absent / null / non-array → undefined (no new set; resume keeps store).
- * - Explicit [] → single-ticket [main] whole-set replace (signed empty-set contract).
- * - Non-empty array with zero lawful typed members after projection → not a new set
- *   (do not impersonate explicit empty and wipe a stored multi-ticket fact).
- * - Non-empty array with ≥1 lawful member → sole type/dedupe projection + principal guarantee.
- * - Multiple submissions: last qualifying set wins.
- * Live path never shape-rejects the role turn; durable damage is a separate seam.
- */
-export function courtTicketNumbersFromOutcome(
-  roleOutcome: TerminalRoleOutcome | undefined,
-  principalTicket: number,
-  submissions?: readonly unknown[],
-): readonly number[] | undefined {
-  if (roleOutcome === undefined) return undefined;
-  const payloads = courtDiaristPayloadRows(roleOutcome, submissions);
-  let latest: readonly number[] | undefined;
-  for (const payload of payloads) {
-    if (
-      typeof payload !== "object" ||
-      payload === null ||
-      Array.isArray(payload)
-    ) {
-      continue;
-    }
-    const record = payload as Record<string, unknown>;
-    if (!Object.hasOwn(record, "courtTicketNumbers")) continue;
-    const raw = record.courtTicketNumbers;
-    // Only a real array is a candidate set. Non-array is not explicit empty.
-    if (!Array.isArray(raw)) continue;
-    // Members only — do not inject principal yet, or all-invalid non-empty becomes [main].
-    const members = projectCourtTicketNumbers(raw);
-    if (members === null) continue;
-    if (members.length === 0) {
-      // Literal [] is the intentional principal-only replace; non-empty garbage is not.
-      if (raw.length === 0) {
-        latest =
-          projectCourtTicketNumbers([], { principalTicket }) ?? undefined;
-      }
-      continue;
-    }
-    latest = projectCourtTicketNumbers(raw, { principalTicket }) ?? undefined;
-  }
-  return latest;
-}
-
 /** Latest payload only. An earlier escalate must not block a later non-escalate submission. */
 export function latestPayloadEscalated(
   roleOutcome: TerminalRoleOutcome | undefined,
@@ -223,11 +143,8 @@ export function courtDiaristEscalated(
 
 /**
  * Invoke public 起居郎 under the court-pipeline quiet face.
- * Returns typed identity: ticket assertion, true-unbound, or escalate.
- * Non-zero exit without escalate status is not rethrown here — caller decides
- * whether refresh must fail or first-entry settles controlled failure.
- * When `boundTicketNumber` is set (typed handoff from countersign), diarist
- * binds under that key before the turn — never mechanical recognition from prose.
+ * Returns escalate or unbound; the secretariat needs no ticket handoff.
+ * Non-zero exit without escalate status is not rethrown here — caller settles controlled failure.
  */
 export async function invokeCourtDiarist(
   input: {
@@ -237,13 +154,11 @@ export async function invokeCourtDiarist(
     readonly attachmentPaths?: readonly string[];
     /** Direct parent run id for durable child lineage (ADR 0010). */
     readonly correlationId?: string;
-    /** Already-verified typed key from countersign (refresh / post-assert handoff). */
-    readonly boundTicketNumber?: number;
   },
   env: CourtDiaristSummonEnv,
   io: CliIo,
 ): Promise<CourtDiaristInvocationResult> {
-  // Quiet face: the countersign caller must not see diarist CLI chatter.
+  // Quiet face: the secretariat caller must not see diarist CLI chatter.
   const quietIo: CliIo = {
     stdout() {},
     stderr(text: string) {
@@ -272,9 +187,6 @@ export async function invokeCourtDiarist(
     ...(input.correlationId === undefined
       ? {}
       : { correlationId: input.correlationId }),
-    ...(input.boundTicketNumber === undefined
-      ? {}
-      : { boundTicketNumber: input.boundTicketNumber }),
     // Child seat selects from the composition-root table. Do not pass the
     // already-selected parent adapter (#840 / ADR 0082: --host 旗标>席位配置>缺省 pi).
     ...(env.hostAdapters === undefined
@@ -311,97 +223,8 @@ export async function invokeCourtDiarist(
     };
   }
 
-  const asserted = (result.admitted as { ticketNumber?: number } | undefined)
-    ?.ticketNumber;
-  if (isSafePositiveTicketNumber(asserted)) {
-    const courtTicketNumbers = courtTicketNumbersFromOutcome(
-      roleOutcome,
-      asserted,
-      submissions,
-    );
-    return {
-      identity: {
-        kind: "ticket",
-        ticketNumber: asserted,
-        ...(courtTicketNumbers === undefined ? {} : { courtTicketNumbers }),
-      },
-      ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
-    };
-  }
   return {
     identity: { kind: "unbound" },
     ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
   };
 }
-
-/**
- * Court-pipeline prior station: refresh this ticket's 起居录 before the
- * countersign body turn when already bound (ADR 0075 每次过庭都跑)。
- * Caller-invisible — no diarist argv on the countersign command line.
- *
- * Missing ticketNumber (true-unbound / identity deferred) skips the refresh
- * station — no diary is minted for a true-unbound run. First-entry identity
- * lives on the shared countersign entry (typed 起居郎 key for bind). Bound refresh:
- * technical failure propagates; LLM escalation remains a recorded conclusion.
- * Path delivery onto materials is not this station's job — post-admission owns it.
- */
-export async function runCountersignCourtDiaristStation(
-  admitted: AdmittedCountersignInvocation,
-  env: CountersignRunEnv,
-  io: CliIo,
-  afterTicketNumber?: number,
-): Promise<{ readonly terminal: import("./terminal.ts").TerminalResult; readonly childRunId?: string } | undefined> {
-  if (env.runCourtDiaristStation !== undefined) {
-    await env.runCourtDiaristStation(admitted);
-    return;
-  }
-  // Production court refresh (ADR 0075: 每次过庭都跑是调用者用法) only under a known ticket identity.
-  // First-entry unbound identity is owned by the shared countersign entry.
-  if (admitted.ticketNumber === undefined) return;
-
-  // #871: refresh every member of the typed co-review set; single-ticket face
-  // is just the set [main]. Present-but-empty / missing-principal is damage —
-  // never silently fall back to main-only (legacy absent field still may).
-  let refreshTickets: readonly number[];
-  if (admitted.courtTicketNumbers !== undefined) {
-    if (
-      admitted.courtTicketNumbers.length === 0 ||
-      !admitted.courtTicketNumbers.includes(admitted.ticketNumber)
-    ) {
-      throw new StationChildExhaustedError(
-        `court diarist station: courtTicketNumbers is damaged (empty or missing principal #${admitted.ticketNumber})`,
-      );
-    }
-    refreshTickets = admitted.courtTicketNumbers;
-  } else {
-    refreshTickets = [admitted.ticketNumber];
-  }
-
-  const completedIndex = afterTicketNumber === undefined ? -1 : refreshTickets.indexOf(afterTicketNumber);
-  for (const ticketNumber of refreshTickets.slice(completedIndex + 1)) {
-    const outcome = await invokeCourtDiarist(
-      {
-        instruction: admitted.instruction,
-        projectRoot: admitted.projectRoot,
-        failureLabel: `ticket #${ticketNumber}`,
-        correlationId: admitted.runId,
-        // Refresh holds a typed key — hand it off so identity is bound before turn.
-        boundTicketNumber: ticketNumber,
-      },
-      env,
-      io,
-    );
-
-    if (outcome.failedWithoutEscalate !== undefined) {
-      throw new StationChildExhaustedError(
-        outcome.failedWithoutEscalate.diagnostic,
-      );
-    }
-    if (outcome.identity.kind === "escalate" && outcome.terminal !== undefined) {
-      return {
-        terminal: outcome.terminal,
-        ...(outcome.admitted === undefined ? {} : { childRunId: outcome.admitted.runId }),
-      };
-    }
-  }
-}

package/src/public-cli/instruction-seat-run.ts

@@ -1,8 +1,7 @@
 /**
  * One public role run: admit → turn request → post-admission → settle.
  * Seat differences are composition-root fields. An omitted reviewer lens
- * starts two ordinary single-axis runs here. Countersign keeps deferred
- * identity on this entry; the court diarist station stays in countersign-run.
+ * starts two ordinary single-axis runs here.
  */
 import { dirname, resolve, sep } from "node:path";
 import { AUDITOR_DOSSIER_PROMPT } from "../compliance-transport.ts";
@@ -39,7 +38,6 @@ import { CliUsageError } from "./cli-errors.ts";
 import {
   admitPublicRole,
   bindAdmittedTicketNumber,
-  bindCourtTicketNumbersOnAdmitted,
   buildInstructionTransportPrompt,
   materializeCountersignInvocation,
   persistAdmittedSourceRunPath,
@@ -98,12 +96,11 @@ import {
 import {
   invokeCourtDiarist,
   latestPayloadEscalated,
-  runCountersignCourtDiaristStation,
   type CountersignRunEnv,
 } from "./countersign-run.ts";
 export type InstructionSeatRunEnv = PostAdmissionEnv & Pick<
   CountersignRunEnv,
-  "reviewReask" | "gateReviewInstruction" | "parentRunPath" | "runCourtDiaristStation"
+  "reviewReask" | "gateReviewInstruction" | "parentRunPath"
 >;
 
 type SeatRunResult = {
@@ -460,8 +457,7 @@ async function runOmittedLensBatch(
 
 /**
  * Countersign on the shared entry: gate parent resume, deferred materialization,
- * 起居郎 identity, then the same one-shot settlement as every other seat.
- * Court refresh stays on runCountersignCourtDiaristStation.
+ * then the same one-shot settlement as every other seat.
  */
 async function runCountersignBody(
   parsed: PublicSeatParse,
@@ -516,88 +512,14 @@ async function runCountersignBody(
         });
       };
 
-      let typedTicket: number | undefined;
-      let typedCourtTicketNumbers: readonly number[] | undefined;
-      let identityDiaristRan = false;
-      let childDiaristRunId: string | undefined;
-      let pausedDiaristTerminal: TerminalResult | undefined;
-
-      if (gateParentRunPath === undefined && env.runCourtDiaristStation === undefined) {
-        let outcome: Awaited<ReturnType<typeof invokeCourtDiarist>>;
-        try {
-          outcome = await invokeCourtDiarist({
-            instruction: parsed.instruction ?? "",
-            projectRoot: admitted.projectRoot,
-            failureLabel: "unbound summons",
-            correlationId: admitted.runId,
-            ...(env.boundTicketNumber === undefined ? {} : { boundTicketNumber: env.boundTicketNumber }),
-          }, env, io);
-        } catch (error) {
-          await materializeAdmission(
-            isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : undefined,
-          );
-          await markRunAdmitted(admitted, env.principalAuthority);
-          return await presentControlledFailure(admitted, {
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: error,
-          }, seatAdapters(admitted, env), env.principalAuthority, io) as SeatRunResult;
-        }
-        identityDiaristRan = true;
-        if (outcome.identity.kind === "escalate") pausedDiaristTerminal = outcome.terminal;
-        if (outcome.admitted?.runDirectory.includes(`${sep}unbound${sep}runs${sep}`)) {
-          childDiaristRunId = outcome.admitted.runId;
-        }
-        if (outcome.failedWithoutEscalate !== undefined) {
-          const diagnostic = outcome.failedWithoutEscalate.diagnostic;
-          await materializeAdmission(
-            isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : undefined,
-          );
-          if (childDiaristRunId !== undefined) await recordChildDiaristRun(admitted, childDiaristRunId);
-          await markRunAdmitted(admitted, env.principalAuthority);
-          return await presentControlledFailure(admitted, {
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: new Error(diagnostic),
-          }, seatAdapters(admitted, env), env.principalAuthority, io) as SeatRunResult;
-        }
-        if (outcome.identity.kind === "ticket") {
-          typedTicket = outcome.identity.ticketNumber;
-          typedCourtTicketNumbers = outcome.identity.courtTicketNumbers;
-        }
-      }
-
-      await materializeAdmission(typedTicket);
+      await materializeAdmission(
+        isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : undefined,
+      );
       await markRunAdmitted(admitted, env.principalAuthority);
-      if (childDiaristRunId !== undefined) {
-        await recordChildDiaristRun(admitted, childDiaristRunId);
-      }
-      if (pausedDiaristTerminal !== undefined) {
-        // The child already submitted its own pause; no parent turn exists yet.
-        io.stdout(formatTerminalResult(pausedDiaristTerminal));
-        return { exitCode: 0, admitted, terminal: pausedDiaristTerminal };
-      }
       if (gateParentRunPath !== undefined) {
         await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
         admitted = { ...admitted, sourceRunPath: gateParentRunPath };
       }
-      if (identityDiaristRan && typedTicket !== undefined) {
-        try {
-          await bindAdmittedTicketNumber(admitted, typedTicket);
-          await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
-          await bindCourtTicketNumbersOnAdmitted(admitted, typedCourtTicketNumbers ?? [typedTicket]);
-        } catch (error) {
-          return await presentControlledFailure(admitted, {
-            timedOut: false,
-            code: null,
-            stderr: "",
-            thrown: error,
-          }, seatAdapters(admitted, env), env.principalAuthority, io) as SeatRunResult;
-        }
-      }
-
       const turnProjection: RoleTurnRequestProjectionOptions = {
         packageRoot: env.packageRoot,
         home: env.home,
@@ -630,13 +552,6 @@ async function runCountersignBody(
           ...seatAdapters(admitted, env),
           beforeDispatch: async (admittedSeat, lease) => {
             if (!packagedAdmitsCountersign(admittedSeat.role)) return;
-            if (!identityDiaristRan || typedTicket !== undefined) {
-              const refresh = await runCountersignCourtDiaristStation(admittedSeat, env, io);
-              if (refresh !== undefined) {
-                io.stdout(formatTerminalResult(refresh.terminal));
-                return refresh.terminal;
-              }
-            }
             await relocateAdmittedRunToTicket(admittedSeat, env.principalAuthority, lease);
             Object.assign(turnRequest, buildInstructionSeatTurnRequest(admittedSeat, turnProjection));
           },
@@ -1019,16 +934,6 @@ export async function continueParentAfterChild(
     return runPublicInstructionSeatResume({ runId: parentRunId }, env, io);
   }
   const admitted = loaded.admitted;
-  // Court diarist refresh advances only after a diarist child; gate officers
-  // (notary/auditor/…) resume straight into queueConclusionFromChild (#1057).
-  if (admitted.role === "countersign" && admitted.ticketNumber !== undefined
-    && child.role === "diarist") {
-    const refresh = await runCountersignCourtDiaristStation(admitted, env, io, child.ticketNumber);
-    if (refresh !== undefined) {
-      io.stdout(formatTerminalResult(refresh.terminal));
-      return { exitCode: 0, admitted, terminal: refresh.terminal };
-    }
-  }
   const resolved = await queueConclusionFromChild(child, env, io);
   if (resolved !== undefined && "stop" in resolved) return resolved.stop;
   if (resolved !== undefined && resolved.status === "escalate") {

package/src/public-cli/invocation.ts

@@ -60,7 +60,6 @@ import {
 import {
   loadDoctorCase,
 } from "../doctor-evidence.ts";
-import { projectCourtTicketNumbers } from "../diarist-contracts.ts";
 import type { DoctorCaseIdentity } from "../doctor-contracts.ts";
 import {
   emptyCollectorManifest,
@@ -156,17 +155,6 @@ export type AdmittedJudgeInvocation = AdmittedRoleInvocationBase & {
 
 export type AdmittedCountersignInvocation = AdmittedRoleInvocationBase & {
   readonly role: "countersign";
-  /**
-   * #871 typed co-review set for this countersign run (durable run fact).
-   * Main ticket remains `ticketNumber`; this set drives per-ticket court diarist refresh.
-   * Whole-set replace on new typed submission — never union with history.
-   */
-  courtTicketNumbers?: readonly number[];
-  /**
-   * Load-time durable set damage diagnostic (#871 B7). Resume must settle as
-   * countersign controlled failure with this text — never structural exit 2 or main-only.
-   */
-  courtTicketNumbersDamage?: string;
   /**
    * Parent run directory (#747 / #987 gate same-parent resume). Persisted on first
    * mint when gate supplies parentRunPath; independent of ticket-number lookup.
@@ -338,7 +326,7 @@ export function issueAdmissionPlacement(
     readonly cwd: string;
     readonly runId: string;
     readonly role: AdmittedRoleInvocation["role"];
-    /** Identity already asserted by 起居郎; never derive this from CLI parameters. */
+    /** Typed identity, when supplied; never derive it from CLI prose. */
     readonly subject: RoleRunSubject;
     readonly home?: string;
     /** Placement may be computed before a same-ticket lookup without touching disk. */
@@ -594,56 +582,6 @@ export async function recordAdmittedCorrelation(
   mutable.correlationIds = correlationIds;
 }
 
-/**
- * #871: persist the typed co-review set as a countersign run fact (admitted-request +
- * invocation.json). Whole-set replace — never union with a prior set. Main ticket
- * binding stays on `ticketNumber` alone. Projection reuses the sole contract helper;
- * principal membership is mandatory.
- */
-export async function bindCourtTicketNumbersOnAdmitted(
-  admitted: AdmittedCountersignInvocation,
-  courtTicketNumbers: readonly number[],
-): Promise<void> {
-  if (admitted.ticketNumber === undefined) {
-    throw new Error(
-      "bindCourtTicketNumbersOnAdmitted requires a bound principal ticketNumber",
-    );
-  }
-  const principal = requireSafePositiveTicketNumber(
-    admitted.ticketNumber,
-    "bindCourtTicketNumbersOnAdmitted principal ticketNumber",
-  );
-  // Strict write path: every member must already be a lawful number (no soft filter).
-  for (const item of courtTicketNumbers) {
-    if (!isSafePositiveTicketNumber(item)) {
-      throw new Error(
-        `bindCourtTicketNumbersOnAdmitted requires safe positive integers, got ${String(item)}`,
-      );
-    }
-  }
-  const projected = projectCourtTicketNumbers(courtTicketNumbers, {
-    principalTicket: principal,
-  });
-  if (projected === null || projected.length === 0) {
-    throw new Error("bindCourtTicketNumbersOnAdmitted requires a non-empty ticket set");
-  }
-  const frozen = Object.freeze([...projected]);
-  const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile(admittedPath, "utf8")) as Record<
-    string,
-    unknown
-  >;
-  await writeFile(
-    admittedPath,
-    `${JSON.stringify({ ...current, courtTicketNumbers: frozen }, null, 2)}\n`,
-    "utf8",
-  );
-  await mergeInvocationIdentityPage(admitted.runDirectory, {
-    courtTicketNumbers: frozen,
-  });
-  admitted.courtTicketNumbers = frozen;
-}
-
 /** File a role run under its latest typed ticket identity. */
 export async function relocateAdmittedRunToTicket(
   admitted: AdmittedRoleInvocation,
@@ -1904,7 +1842,7 @@ export type AdmitJudgeInvocationOptions = {
 
 export type AdmitInspectorInvocationOptions = AdmitJudgeInvocationOptions & {
   correlationId?: string;
-  /** Typed identity handed off by 起居郎 or inherited from an already-bound run. */
+  /** Typed identity from the caller or an already-bound run. */
   assertedTicketNumber?: number;
 };
 

package/src/public-cli/post-admission.ts

@@ -211,15 +211,6 @@ async function settleProcessCancelAfterTurn<A extends AdmittedRoleInvocation, T
   };
 }
 
-/**
- * Nested station-child role already finished its own call-local loop.
- * Parent records that failure once and must not auto-resume into a re-summon
- * (#840 父子不层叠). Other beforeDispatch failures keep the shared #416 budget.
- */
-export class StationChildExhaustedError extends Error {
-  override readonly name = "StationChildExhaustedError";
-}
-
 function withOnceSuccessfulBeforeDispatch<
   A extends AdmittedRoleInvocation,
   T extends TerminalResult = TerminalResult,
@@ -825,16 +816,12 @@ export async function dispatchPostAdmissionTurn<
           io,
           persistRunState,
         )) as { exitCode: number; admitted: A; terminal: T };
-        if (error instanceof StationChildExhaustedError) {
-          return { ...settled, skipAutoResume: true as const, ...deferredPersist };
-        }
         return { ...settled, ...deferredPersist };
       }
     }
 
-    // Turn request is assembled after beforeDispatch so this turn sees whatever it
-    // settled — the seat's ticket bind re-projection and any court diarist station
-    // writes (#742). Dialogue continuation stays caller/peer opaque. #1092: no
+    // Turn request is assembled after beforeDispatch so this turn sees any
+    // seat-specific admission changes. Dialogue continuation stays caller/peer opaque. #1092: no
     // code-side 起居录 path freeze or readingMaterial inject — roles read by ticket.
     // No package-resume parallel face or typed resume identity.
     // #990: one-shot / auto-resume may freeze principal+runDirectory before