@akagilnc/pi-workflow-roles 0.1.5307 → 0.1.5312

package/dist/public-cli/main.js

@@ -15711,6 +15711,10 @@ var init_institutional_resolution = __esm({
 });
 
 // src/host-descriptions.ts
+import { join as join7 } from "node:path";
+function resolveHostBinary(description, operatorHome) {
+  return join7(operatorHome, ...description.binaryFromHome);
+}
 function lookupHostDescription(host) {
   return Object.hasOwn(HOST_DESCRIPTIONS, host) ? HOST_DESCRIPTIONS[host] : void 0;
 }
@@ -15839,7 +15843,7 @@ __export(config_exports, {
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
 import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { dirname as dirname4, join as join7 } from "node:path";
+import { dirname as dirname4, join as join8 } from "node:path";
 function isGateOfficerSeat(value) {
   return packagedProvinceConfig(value);
 }
@@ -15847,7 +15851,7 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join7(home, ".ak-roles", "public-cli.json");
+  return join8(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
@@ -16310,7 +16314,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile2(join7(agentDir, "auth.json"), "utf8");
+    const raw = await readFile2(join8(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -16348,15 +16352,15 @@ __export(host_providers_exports, {
   renderHostProvidersTable: () => renderHostProvidersTable
 });
 import { readFileSync } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 function hostProvidersPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join8(home, ".ak-roles", "host-providers.json");
+  return join9(home, ".ak-roles", "host-providers.json");
 }
 function hermesProviderModelsCachePath(home) {
-  return join8(home, ".hermes", "provider_models_cache.json");
+  return join9(home, ".hermes", "provider_models_cache.json");
 }
 function parseHostProvidersTable(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -16535,16 +16539,16 @@ var init_cli_errors = __esm({
 // src/public-cli/machine-method-skills.ts
 import { accessSync, constants, statSync as statSync2 } from "node:fs";
 import { lstat, mkdir as mkdir2, symlink } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 import { spawnSync } from "node:child_process";
 function skillRoot(home) {
-  return join9(home, ".agents/skills");
+  return join10(home, ".agents/skills");
 }
 function installedMethodSkillPath(home, name) {
   return installedSkillPath(skillRoot(home), name);
 }
 function installedSkillPath(root, name) {
-  const path = join9(root, name, "SKILL.md");
+  const path = join10(root, name, "SKILL.md");
   try {
     if (!statSync2(path).isFile()) return void 0;
     accessSync(path, constants.R_OK);
@@ -16557,9 +16561,9 @@ function installedSkillPath(root, name) {
 }
 function linkedSkillRoot(home, host) {
   if (host === "claude" || host === "claude-code") {
-    return join9(process.env.CLAUDE_CONFIG_DIR?.trim() || join9(home, ".claude"), "skills");
+    return join10(process.env.CLAUDE_CONFIG_DIR?.trim() || join10(home, ".claude"), "skills");
   }
-  if (host === "hermes") return join9(home, ".hermes/skills");
+  if (host === "hermes") return join10(home, ".hermes/skills");
   return void 0;
 }
 async function occupied(path) {
@@ -16616,7 +16620,7 @@ async function runMachineSkillSetup(home, stdout) {
   const missingBySource = /* @__PURE__ */ new Map();
   let unsourced = false;
   for (const name of packagedMethodSkillNames()) {
-    const path = join9(canonical, name);
+    const path = join10(canonical, name);
     if (await occupied(path)) {
       warnOccupied(path, stdout);
       continue;
@@ -16638,17 +16642,17 @@ async function runMachineSkillSetup(home, stdout) {
   if (unsourced) return 1;
   for (const host of ["claude-code", "hermes"]) {
     const root = linkedSkillRoot(home, host);
-    const binaryFromHome = host === "claude-code" ? HEADLESS_HOST_DESCRIPTIONS.claude.binaryFromHome : HOST_DESCRIPTIONS.hermes.binaryFromHome;
+    const description = host === "claude-code" ? HEADLESS_HOST_DESCRIPTIONS.claude : HOST_DESCRIPTIONS.hermes;
     try {
-      accessSync(join9(home, ...binaryFromHome), constants.X_OK);
+      accessSync(resolveHostBinary(description, home), constants.X_OK);
     } catch (error) {
       if (["ENOENT", "ENOTDIR", "EACCES"].includes(error.code ?? "")) continue;
       throw error;
     }
     for (const name of packagedMethodSkillNames()) {
-      const target = join9(canonical, name);
+      const target = join10(canonical, name);
       if (installedMethodSkillPath(home, name) === void 0) continue;
-      const link = join9(root, name);
+      const link = join10(root, name);
       if (await occupied(link)) {
         warnOccupied(link, stdout);
         continue;
@@ -16678,9 +16682,9 @@ var init_machine_method_skills = __esm({
 
 // src/typed-provider-http.ts
 import { readFile as readFile3, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join10(runDirectory, TYPED_HTTP_FILE);
+  return join11(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -16818,7 +16822,7 @@ var init_collector_config = __esm({
 });
 
 // src/auditor-dossier-tool.ts
-import { dirname as dirname5, join as join11, resolve as resolve3 } from "node:path";
+import { dirname as dirname5, join as join12, resolve as resolve3 } from "node:path";
 function auditorRunDirectory(context) {
   const sessionFile = context.sessionManager?.getSessionFile?.();
   if (sessionFile === void 0) return void 0;
@@ -16901,7 +16905,7 @@ __export(run_terminal_artifacts_exports, {
   runIdFromRunDirectory: () => runIdFromRunDirectory
 });
 import { readdir as readdir2, readFile as readFile5 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname6, join as join12 } from "node:path";
+import { basename as basename3, dirname as dirname6, join as join13 } from "node:path";
 function isMissingPathError2(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -16976,7 +16980,7 @@ async function listUniqueErrorFallbackPaths(directories) {
     }
     for (const name of names.sort((a, b) => a.localeCompare(b))) {
       if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join12(dir, name));
+      found.push(join13(dir, name));
     }
   }
   return found;
@@ -17022,11 +17026,11 @@ async function readRunTerminalArtifact(runDirectory) {
     unreadable.push(read);
   };
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    consider(await readTerminalArtifactAtPath(join12(artifactsDir, file), file));
+    consider(await readTerminalArtifactAtPath(join13(artifactsDir, file), file));
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
     consider(
-      await readTerminalArtifactAtPath(join12(runDirectory, relative3), "error.json")
+      await readTerminalArtifactAtPath(join13(runDirectory, relative3), "error.json")
     );
   }
   for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
@@ -17368,7 +17372,7 @@ __export(session_assistant_usage_exports, {
   sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
   usageFromPublicSummon: () => usageFromPublicSummon
 });
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
   const { readFile: readFile22 } = await import("node:fs/promises");
   let text;
@@ -17438,7 +17442,7 @@ async function readAssistantUsageFromSessionFile(sessionFile) {
 }
 function sessionFileFromPublicSummon(summoned) {
   if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join13(summoned.runDirectory, "session", "session.jsonl");
+    return join14(summoned.runDirectory, "session", "session.jsonl");
   }
   const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
   if (fromArtifacts !== void 0) return fromArtifacts;
@@ -17447,7 +17451,7 @@ function sessionFileFromPublicSummon(summoned) {
   const facts = outcome.decisiveFacts;
   const pointer = facts?.runPointer;
   if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join13(pointer, "session", "session.jsonl");
+    return join14(pointer, "session", "session.jsonl");
   }
   return void 0;
 }
@@ -17579,7 +17583,7 @@ var init_sitian_contracts = __esm({
 // src/sitian-appender.ts
 import { randomUUID } from "node:crypto";
 import { appendFileSync } from "node:fs";
-import { dirname as dirname7, join as join14 } from "node:path";
+import { dirname as dirname7, join as join15 } from "node:path";
 function appendSitianRecordBlock(input, block) {
   if (block === "") return;
   try {
@@ -17601,8 +17605,8 @@ function resolveSitianVolumeCategory(kind) {
   return kind;
 }
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
-  const sessionDir = join14(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join14(sessionDir, SITIAN_RECORDS_LEAF) };
+  const sessionDir = join15(activationBookDirectory(ledgerHome, bookKey), ticketId);
+  return { sessionDir, recordFile: join15(sessionDir, SITIAN_RECORDS_LEAF) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
@@ -17619,13 +17623,13 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     recordFile = paths.recordFile;
   } else if (category === "ticket-provenance" && input.runDirectory !== void 0) {
     sessionDir = input.runDirectory;
-    recordFile = join14(sessionDir, SITIAN_RECORDS_LEAF);
+    recordFile = join15(sessionDir, SITIAN_RECORDS_LEAF);
   } else {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join14(dirname7(input.sessionParent), category);
-    recordFile = join14(sessionDir, SITIAN_RECORDS_LEAF);
+    sessionDir = join15(dirname7(input.sessionParent), category);
+    recordFile = join15(sessionDir, SITIAN_RECORDS_LEAF);
   }
   if (!physicallyContainedIn(ledgerHome, sessionDir)) {
     throw new Error("Sitian record ownership requires a directory inside the ledger home");
@@ -17766,12 +17770,12 @@ __export(role_turn_host_exports, {
 import { execFile, spawn } from "node:child_process";
 import { constants as constants2 } from "node:fs";
 import { access, appendFile, readFile as readFile7, realpath } from "node:fs/promises";
-import { delimiter as delimiter2, dirname as dirname8, isAbsolute as isAbsolute3, join as join15, resolve as resolve4 } from "node:path";
+import { delimiter as delimiter2, dirname as dirname8, isAbsolute as isAbsolute3, join as join16, resolve as resolve4 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot2) {
-  return join15(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
+  return join16(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -18644,7 +18648,7 @@ var init_session_dialogue = __esm({
 
 // src/ticket-provenance.ts
 import { readFile as readFile11, unlink as unlink2 } from "node:fs/promises";
-import { basename as basename4, dirname as dirname10, join as join16, resolve as resolve7 } from "node:path";
+import { basename as basename4, dirname as dirname10, join as join17, resolve as resolve7 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!isSafePositiveTicketNumber(ticketNumber)) {
     throw new Error(
@@ -18664,7 +18668,7 @@ function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
   };
 }
 async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
-  const source = join16(runDirectory, "records.jsonl");
+  const source = join17(runDirectory, "records.jsonl");
   let content;
   try {
     content = await readFile11(source, "utf8");
@@ -18713,7 +18717,7 @@ var init_uuidv7 = __esm({
 });
 
 // src/notary-source-run.ts
-import { dirname as dirname11, isAbsolute as isAbsolute5, join as join17, resolve as resolve8, basename as basename5 } from "node:path";
+import { dirname as dirname11, isAbsolute as isAbsolute5, join as join18, resolve as resolve8, basename as basename5 } from "node:path";
 import { lstat as lstat2, realpath as realpath3 } from "node:fs/promises";
 async function readRetainedIdentity(runDirectory) {
   try {
@@ -18770,11 +18774,11 @@ async function resolveNotarySourceRunLocator(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
   const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
-  const bookRunsRoot = join17(bookDirectory, "runs");
+  const bookRunsRoot = join18(bookDirectory, "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join17(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join18(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute5(raw) ? raw : resolve8(options.projectRoot, raw);
     const identity2 = parseRunDirectoryName(basename5(candidate));
@@ -19890,7 +19894,7 @@ import {
   writeFile as writeFile3
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute6, join as join18, resolve as resolve9, sep as sep3 } from "node:path";
+import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute6, join as join19, resolve as resolve9, sep as sep3 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -19944,14 +19948,14 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile3(
-    join18(source.runDirectory, "invocation.json"),
+    join19(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  const ledgerPath = join18(runDirectory, "invocation.json");
+  const ledgerPath = join19(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
@@ -19984,7 +19988,7 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host,
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join18(runDirectory, "invocation.json");
+  const ledgerPath = join19(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
   await writeFile3(
     ledgerPath,
@@ -20067,7 +20071,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     const childRunIds = parentPage.childDiaristRunIds;
     for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
       if (typeof childRunId !== "string") continue;
-      const childDirectory = join18(dirname12(oldRunDirectory), `${childRunId}@diarist`);
+      const childDirectory = join19(dirname12(oldRunDirectory), `${childRunId}@diarist`);
       if (!existsSync4(childDirectory)) continue;
       const childTarget = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
@@ -20124,7 +20128,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     ticketNumber,
     "bindTicketNumberOnRunDirectory"
   );
-  const admittedPath = join18(runDirectory, "admitted-request.json");
+  const admittedPath = join19(runDirectory, "admitted-request.json");
   const admitted = JSON.parse(await readFile12(admittedPath, "utf8"));
   if (admitted.ticketNumber === ticketNumber) return;
   await writeFile3(
@@ -20144,7 +20148,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile12(join18(rolePackageRoot, "package.json"), "utf8")
+    await readFile12(join19(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -20432,13 +20436,13 @@ async function removePreparedAttachmentDirectory(stagingDirectory) {
 }
 async function withPreparedAttachments(attachmentPaths, use) {
   if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp(join18(tmpdir(), "ak-role-attachments-"));
+  const stagingDirectory = await mkdtemp(join19(tmpdir(), "ak-role-attachments-"));
   const prepared = [];
   let result;
   try {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join18(stagingDirectory, String(index).padStart(6, "0"));
+      const snapshotPath = join19(stagingDirectory, String(index).padStart(6, "0"));
       await writeFile3(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
@@ -20459,7 +20463,7 @@ async function withPreparedAttachments(attachmentPaths, use) {
   return result;
 }
 async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join18(
+  const frozenPath = join19(
     destinationDir,
     `${String(index).padStart(2, "0")}-${basename6(provenancePath)}`
   );
@@ -20502,14 +20506,14 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join18(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join19(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
 async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
   if (prepared.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join18(runDirectory, "attachments") : join18(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = summonsKey === void 0 ? join19(runDirectory, "attachments") : join19(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = [];
   for (let index = 0; index < prepared.length; index += 1) {
@@ -20586,7 +20590,7 @@ async function admitPublicRole(role, parsed, env, override) {
         attachmentPaths,
         ...project,
         placedFields: async (placed) => {
-          const taskPath = join18(placed.runDirectory, "task.md");
+          const taskPath = join19(placed.runDirectory, "task.md");
           await writeFile3(taskPath, instruction, "utf8");
           return { phase, taskPath };
         }
@@ -20632,7 +20636,7 @@ async function admitPublicRole(role, parsed, env, override) {
         placedFields: async (placed) => {
           let prerequisitesPath;
           if (prerequisitesSource !== void 0) {
-            prerequisitesPath = join18(placed.runDirectory, "prerequisites.json");
+            prerequisitesPath = join19(placed.runDirectory, "prerequisites.json");
             await writeFile3(
               prerequisitesPath,
               `${JSON.stringify(prerequisites, null, 2)}
@@ -20640,7 +20644,7 @@ async function admitPublicRole(role, parsed, env, override) {
               "utf8"
             );
           }
-          const packetPath = join18(placed.runDirectory, "fix-packet.md");
+          const packetPath = join19(placed.runDirectory, "fix-packet.md");
           await writeFile3(packetPath, instruction, "utf8");
           return {
             phase,
@@ -20698,7 +20702,7 @@ async function admitPublicRole(role, parsed, env, override) {
         placedFields: async (placed) => {
           let requestManifestPath;
           if (manifestCanonicalJson !== void 0) {
-            requestManifestPath = join18(placed.runDirectory, "request-manifest.json");
+            requestManifestPath = join19(placed.runDirectory, "request-manifest.json");
             await writeFile3(requestManifestPath, manifestCanonicalJson, "utf8");
           }
           return {
@@ -20888,7 +20892,7 @@ async function admitPublicRole(role, parsed, env, override) {
             resolutionScope: [...derived.resolutionScope],
             authorizedChecks: []
           });
-          const mergerInputPath = join18(placed.runDirectory, "merger-input.json");
+          const mergerInputPath = join19(placed.runDirectory, "merger-input.json");
           await writeFile3(
             mergerInputPath,
             `${JSON.stringify(mergerInput, null, 2)}
@@ -20962,7 +20966,7 @@ function persistedAttachmentRefs(attachments) {
   }));
 }
 async function persistPlacedAdmission(admitted, placed, model) {
-  const admittedRequestPath = join18(placed.runDirectory, "admitted-request.json");
+  const admittedRequestPath = join19(placed.runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory: placed.sessionDirectory,
     sessionFile: placed.sessionFile
@@ -21015,7 +21019,7 @@ async function admitStandardMaterialInvocation(role, options) {
     attachments: persistedAttachmentRefs(placed.attachments),
     ...placed.ticketFields
   };
-  const admittedRequestPath = defer ? join18(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
+  const admittedRequestPath = defer ? join19(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
   return {
     role,
     runId: placed.runId,
@@ -21093,7 +21097,7 @@ async function materializeCountersignInvocation(admitted, options) {
   });
   const placement = placed;
   admitted.runDirectory = placement.runDirectory;
-  admitted.admittedRequestPath = join18(
+  admitted.admittedRequestPath = join19(
     placement.runDirectory,
     "admitted-request.json"
   );
@@ -21189,7 +21193,7 @@ function parseDoctorIssueNumber(raw) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join18(
+  const defaultRuns = join19(
     activationBookDirectory(ledgerHome, options.bookKey),
     String(options.issueNumber),
     "runs"
@@ -21510,15 +21514,15 @@ var init_invocation = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot2, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join19(packageRoot2, "dist/acp-host/production-host.js");
-  const source = join19(packageRoot2, "src/acp-host/production-host.ts");
+  const built = join20(packageRoot2, "dist/acp-host/production-host.js");
+  const source = join20(packageRoot2, "src/acp-host/production-host.ts");
   const target = existsSync5(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -21534,15 +21538,15 @@ var init_load_production_acp_host = __esm({
 
 // src/public-cli/load-production-headless-host.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot2, host) {
   const description = lookupHeadlessHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered headless host: ${host}`);
   }
-  const built = join20(packageRoot2, "dist/headless-host/production-host.js");
-  const source = join20(packageRoot2, "src/headless-host/production-host.ts");
+  const built = join21(packageRoot2, "dist/headless-host/production-host.js");
+  const source = join21(packageRoot2, "src/headless-host/production-host.ts");
   const target = existsSync6(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
@@ -21669,7 +21673,7 @@ var init_role_turn_host_resolution = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir4 } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -21920,7 +21924,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join21(directory, name);
+      const path = join22(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const pointer = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : void 0;
       const sessionPath = pointer?.sessionFile ?? path;
@@ -21962,14 +21966,14 @@ var init_analyst_gate_cycles_read = __esm({
 });
 
 // src/submission-ledger.ts
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 async function submissionRecordFile(cwd, runId, scope) {
   const ledgerHome = resolveActivationLedgerHome(scope.home);
   let sessionParent = scope.sessionParent;
   if (sessionParent === void 0) {
     const discoveredRun = await findRunDirectoryById(scope.home, runId);
     if (discoveredRun === void 0) return void 0;
-    sessionParent = join22(discoveredRun, "session", "session.jsonl");
+    sessionParent = join23(discoveredRun, "session", "session.jsonl");
   }
   return resolveSitianRecordPathInLedger({
     level: "event",
@@ -22166,12 +22170,12 @@ var init_audit_escalation = __esm({
 // src/session-opening-materials.ts
 import { existsSync as existsSync7 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname13, join as join23 } from "node:path";
+import { dirname as dirname13, join as join24 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
   let dir = dirname13(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync7(join23(dir, "package.json")) && existsSync7(join23(dir, "souls"))) {
+    if (existsSync7(join24(dir, "package.json")) && existsSync7(join24(dir, "souls"))) {
       return dir;
     }
     const parent = dirname13(dir);
@@ -22224,7 +22228,7 @@ __export(auditor_soul_exports, {
   resolveAuditorSubject: () => resolveAuditorSubject
 });
 import { readFile as readFile14 } from "node:fs/promises";
-import { basename as basename7, join as join24 } from "node:path";
+import { basename as basename7, join as join25 } from "node:path";
 function auditorSoulRelativePath(role) {
   return `souls/${role}-auditor.md`;
 }
@@ -22266,7 +22270,7 @@ function subjectFromSourceDirectory(sourceRunDirectory) {
 async function readAuditorResumeBinding(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile14(join24(runDirectory, "admitted-request.json"), "utf8"));
+    raw = JSON.parse(await readFile14(join25(runDirectory, "admitted-request.json"), "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -22379,7 +22383,7 @@ var init_serialize_thrown_value = __esm({
 // src/engine-detour-usage.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { readFileSync as readFileSync2 } from "node:fs";
-import { dirname as dirname14, join as join25 } from "node:path";
+import { dirname as dirname14, join as join26 } from "node:path";
 function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -22464,7 +22468,7 @@ function projectEngineDetourToolUsageForPublicTerminal(usage, options) {
 function readInvocationRecord(runDirectory) {
   try {
     const raw = JSON.parse(
-      readFileSync2(join25(runDirectory, "invocation.json"), "utf8")
+      readFileSync2(join26(runDirectory, "invocation.json"), "utf8")
     );
     return isRecord5(raw) ? raw : void 0;
   } catch (error) {
@@ -22492,7 +22496,7 @@ function runDirectoryFromSessionDirectory(sessionDirectory) {
   return dirname14(sessionDirectory);
 }
 function sessionFileFromSessionDirectory(sessionDirectory) {
-  return join25(sessionDirectory, "session.jsonl");
+  return join26(sessionDirectory, "session.jsonl");
 }
 function mintEngineDetourInvocationScope(input) {
   const engine = input.effectiveEngine?.trim();
@@ -22799,14 +22803,14 @@ __export(settlement_exports, {
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname15, join as join26 } from "node:path";
+import { dirname as dirname15, join as join27 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
 function ledgerReadScope(admitted, scope) {
   return {
     home: sealedLedgerHome(admitted),
-    sessionParent: join26(admitted.runDirectory, "session", "session.jsonl"),
+    sessionParent: join27(admitted.runDirectory, "session", "session.jsonl"),
     ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { attemptId: scope.courtAttemptId }
   };
 }
@@ -23307,7 +23311,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
   }
   const parentId = parentEntries.find((entry) => entry.type === "session")?.id;
   if (parentId === void 0) return void 0;
-  const childDirectories = [join26(dirname15(sessionFile), "auditor-roles")];
+  const childDirectories = [join27(dirname15(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -23322,7 +23326,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join26(childDirectory, file));
+        entries = await readBoundSessionEntries(join27(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -23798,8 +23802,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join26(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join26(sessionDirectory, "session.jsonl");
+  const directories = [join27(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join27(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -23911,10 +23915,10 @@ async function removeFaceIfPresent(path) {
 async function clearOppositeTerminalArtifactFace(runDirectory) {
   const artifactsDir = roleRunArtifactsDirectory(runDirectory);
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    await removeFaceIfPresent(join26(artifactsDir, file));
+    await removeFaceIfPresent(join27(artifactsDir, file));
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    await removeFaceIfPresent(join26(runDirectory, relative3));
+    await removeFaceIfPresent(join27(runDirectory, relative3));
   }
   for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
     await removeFaceIfPresent(path);
@@ -23943,8 +23947,8 @@ async function publishAcceptedTerminalArtifacts(admitted, roleOutcome, coordinat
     roleOutcome
   );
   const artifactsDir = await ensureTerminalArtifactFace(admitted.runDirectory);
-  const reportPath = join26(artifactsDir, "report.json");
-  const evidencePath = join26(artifactsDir, "evidence.json");
+  const reportPath = join27(artifactsDir, "report.json");
+  const evidencePath = join27(artifactsDir, "evidence.json");
   await writeFile4(
     reportPath,
     `${JSON.stringify(bodies.report, null, 2)}
@@ -24353,7 +24357,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join26(dir, `${stem}.${randomUUID4()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join27(dir, `${stem}.${randomUUID4()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -24414,20 +24418,20 @@ async function publishFailureArtifacts(admitted, failure, authority, onErrorPubl
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join26(baseDir, "error.json"),
-    join26(baseDir, "error.settlement.json"),
-    join26(admitted.runDirectory, "error.settlement.json")
+    join27(baseDir, "error.json"),
+    join27(baseDir, "error.settlement.json"),
+    join27(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join26(baseDir, "error.settlement.json"),
-    join26(baseDir, "error.json")
+    join27(baseDir, "error.settlement.json"),
+    join27(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join26(baseDir, "evidence.json"),
-    join26(baseDir, "evidence.settlement.json"),
-    join26(admitted.runDirectory, "evidence.settlement.json")
+    join27(baseDir, "evidence.json"),
+    join27(baseDir, "evidence.settlement.json"),
+    join27(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join26(baseDir, "evidence.settlement.json"),
-    join26(baseDir, "evidence.json")
+    join27(baseDir, "evidence.settlement.json"),
+    join27(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -24682,9 +24686,9 @@ var init_settlement = __esm({
 
 // src/archivist-record-pointer.ts
 import { mkdirSync as mkdirSync3, writeFileSync } from "node:fs";
-import { dirname as dirname16, join as join27 } from "node:path";
+import { dirname as dirname16, join as join28 } from "node:path";
 function bookDirectOfficerRunPointer(options) {
-  const nest = join27(dirname16(options.parentSessionFile), "auditor-roles");
+  const nest = join28(dirname16(options.parentSessionFile), "auditor-roles");
   mkdirSync3(nest, { recursive: true });
   const pointer = {
     version: 1,
@@ -24694,7 +24698,7 @@ function bookDirectOfficerRunPointer(options) {
     ...options.runDirectory !== void 0 && options.runDirectory.trim() !== "" ? { runDirectory: options.runDirectory } : {}
   };
   writeFileSync(
-    join27(nest, `${options.officer}.pointer.json`),
+    join28(nest, `${options.officer}.pointer.json`),
     `${JSON.stringify(pointer)}
 `,
     "utf8"
@@ -26094,7 +26098,7 @@ __export(public_role_summons_exports, {
 import { execFile as execFile3 } from "node:child_process";
 import { existsSync as existsSync9 } from "node:fs";
 import { realpath as realpath5 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function createCapturingIo() {
   const chunks = [];
@@ -26118,7 +26122,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync9(join28(dir, "package.json")) && existsSync9(join28(dir, "souls"))) {
+    if (existsSync9(join29(dir, "package.json")) && existsSync9(join29(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -26234,7 +26238,7 @@ async function createSummonEnv(options, afterHost) {
 async function summonPublicRole(options) {
   const packageRoot2 = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join28(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join29(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -26736,7 +26740,7 @@ var init_compliance_transport = __esm({
 });
 
 // src/role-run-relocation.ts
-import { join as join29, sep as sep5 } from "node:path";
+import { join as join30, sep as sep5 } from "node:path";
 function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   if (typeof value !== "string") return value;
   if (value === oldRunDirectory) return newRunDirectory;
@@ -26864,7 +26868,7 @@ __export(run_lifecycle_exports, {
   writeRoleRunState: () => writeRoleRunState
 });
 import { chmod, lstat as lstat5, open, readdir as readdir6, readFile as readFile16, unlink as unlink4, writeFile as writeFile5 } from "node:fs/promises";
-import { basename as basename8, join as join30 } from "node:path";
+import { basename as basename8, join as join31 } from "node:path";
 function buildAutoResumeContinuationPrompt(options) {
   return appendEngineSessionMaterial(
     [RESUME_TRANSPORT_ENVELOPE],
@@ -26890,7 +26894,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile5(
-    join30(runDirectory, RUN_STATE_FILE),
+    join31(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -26940,7 +26944,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateRaw(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile16(join30(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile16(join31(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
     throw error;
@@ -27034,7 +27038,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile5(
-    join30(runDirectory, RUN_STATE_FILE),
+    join31(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -27257,7 +27261,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join30(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join31(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
@@ -27296,10 +27300,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join30(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join31(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join30(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join31(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -27354,7 +27358,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join30(ledgerHome, "books");
+  const booksRoot = join31(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir6(booksRoot);
@@ -27395,7 +27399,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile16(join30(runDirectory, "admitted-request.json"), "utf8")
+      await readFile16(join31(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
@@ -27416,7 +27420,7 @@ async function readRunParentPath(runDirectory) {
 async function runHasFormedSessionPrincipal(runDirectory) {
   const disk = await readRoleRunStateDisk(runDirectory);
   if (disk === void 0) return false;
-  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join30(disk.principalWire.sessionDirectory, "session.jsonl");
+  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join31(disk.principalWire.sessionDirectory, "session.jsonl");
   try {
     const stat2 = await lstat5(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
@@ -27434,7 +27438,7 @@ async function findLatestRunIdForSeatTicket(input) {
   let runDirectories;
   try {
     runDirectories = await listBookRunDirectories(
-      input.ticketNumber === void 0 ? bookDir : join30(bookDir, String(input.ticketNumber))
+      input.ticketNumber === void 0 ? bookDir : join31(bookDir, String(input.ticketNumber))
     );
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
@@ -27632,7 +27636,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile16(join30(run.runDirectory, "invocation.json"), "utf8")
+      await readFile16(join31(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -28001,9 +28005,9 @@ var init_run_lifecycle = __esm({
 
 // src/session-identity.ts
 import { mkdir as mkdir3, readFile as readFile17, rename as rename2, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname18, join as join31 } from "node:path";
+import { dirname as dirname18, join as join32 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
-  const bindingPath = (principal) => join31(authority.decode(principal).sessionDirectory, sessionBindingFile);
+  const bindingPath = (principal) => join32(authority.decode(principal).sessionDirectory, sessionBindingFile);
   return {
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;
@@ -28114,7 +28118,7 @@ import {
   rmSync as rmSync2,
   statSync as statSync4
 } from "node:fs";
-import { dirname as dirname19, join as join32 } from "node:path";
+import { dirname as dirname19, join as join33 } from "node:path";
 function declareHostSessionFailure(error) {
   const message = error instanceof Error ? error.stack || error.message : String(error);
   process.stderr.write(`[host-session] Dossier record failure: ${message}
@@ -28122,7 +28126,7 @@ function declareHostSessionFailure(error) {
 }
 function recordRunStart(runDirectory) {
   try {
-    appendFileSync2(join32(runDirectory, ".run-starts"), "\n");
+    appendFileSync2(join33(runDirectory, ".run-starts"), "\n");
   } catch (error) {
     declareHostSessionFailure(error);
   }
@@ -28138,7 +28142,7 @@ var init_host_session_record = __esm({
 import { constants as fsConstants2 } from "node:fs";
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { lstat as lstat6, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 async function persistReturnedRunState(admitted, options) {
   if (options?.lawful === true) {
     await markRunTerminal(admitted.runDirectory);
@@ -28207,7 +28211,7 @@ function jsonSafeReplacer() {
   };
 }
 async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
-  const filePath = join33(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
+  const filePath = join34(artifactsDir, `${namePrefix}-${randomUUID5()}.json`);
   const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}
 `;
   const noFollowFlag = typeof fsConstants2.O_NOFOLLOW === "number" ? fsConstants2.O_NOFOLLOW : 0;
@@ -28462,7 +28466,7 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { writeFile as writeFile7 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join34, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join35, resolve as resolve12 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -28558,7 +28562,7 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
       await writeFile7(
-        join34(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
+        join35(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
         `${JSON.stringify({ version: 1, ...payload }, null, 2)}
 `,
         { encoding: "utf8", flag: "wx" }
@@ -28699,7 +28703,7 @@ async function dispatchPostAdmissionTurn(input) {
         const rows = await readRecordedSubmissionRows(
           admitted.projectRoot,
           admitted.runId,
-          { home: homeFromRunDirectory(admitted.runDirectory), sessionParent: join34(admitted.runDirectory, "session", "session.jsonl") }
+          { home: homeFromRunDirectory(admitted.runDirectory), sessionParent: join35(admitted.runDirectory, "session", "session.jsonl") }
         );
         let ticketNumber;
         for (const row of rows) {
@@ -28826,7 +28830,7 @@ async function dispatchPostAdmissionTurn(input) {
     let stderrLogWriteFailure;
     try {
       await writeFile7(
-        join34(admitted.runDirectory, "stderr.log"),
+        join35(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -29105,7 +29109,7 @@ async function dispatchAfterWriterLease(input) {
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
-  return pathContainedIn(join34(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join35(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -29360,7 +29364,7 @@ async function presentResumeFailurePointer(io, thrown, publish) {
 }
 async function writeResumeDiagnosticFile(runDirectory, runId, failure, role) {
   const dir = await ensureRealArtifactsDirectory(runDirectory);
-  const path = join34(dir, `resume-diagnostic-${randomUUID6()}.json`);
+  const path = join35(dir, `resume-diagnostic-${randomUUID6()}.json`);
   await writeFile7(
     path,
     `${JSON.stringify({
@@ -29541,10 +29545,10 @@ var init_analyst_book_key = __esm({
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { rename as rename3, rm as rm3, writeFile as writeFile8 } from "node:fs/promises";
-import { dirname as dirname20, join as join35 } from "node:path";
+import { dirname as dirname20, join as join36 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname20(destination);
-  const temporary = join35(parent, `.atomic-write-${randomUUID7()}.tmp`);
+  const temporary = join36(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
     await writeFile8(temporary, contents);
     await rename3(temporary, destination);
@@ -29561,7 +29565,7 @@ var init_atomic_write = __esm({
 
 // src/analyst-index.ts
 import { open as open3, readFile as readFile18, unlink as unlink5 } from "node:fs/promises";
-import { dirname as dirname21, join as join36 } from "node:path";
+import { dirname as dirname21, join as join37 } from "node:path";
 function sleep(ms) {
   return new Promise((resolve14) => {
     setTimeout(resolve14, ms);
@@ -29570,7 +29574,7 @@ function sleep(ms) {
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname21(indexPath));
-  const lockPath = join36(dirname21(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join37(dirname21(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29597,7 +29601,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join36(ledgerHome, "analyst", "library-index.json");
+  return join37(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -29893,7 +29897,7 @@ var init_analyst_cohort = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir7, readFile as readFile19 } from "node:fs/promises";
-import { basename as basename9, join as join37 } from "node:path";
+import { basename as basename9, join as join38 } from "node:path";
 function isMissingPathError6(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -29922,7 +29926,7 @@ function ghostLeaseCheckFromAutopsy(autopsy) {
   }
 }
 async function classifyGhostCandidate(input) {
-  const autopsy = await autopsyWriterLock(join37(input.runDirectory, "writer.lock"));
+  const autopsy = await autopsyWriterLock(join38(input.runDirectory, "writer.lock"));
   const leaseCheck = ghostLeaseCheckFromAutopsy(autopsy);
   if (leaseCheck === void 0) return { kind: "live" };
   return {
@@ -29951,7 +29955,7 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile19(join37(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile19(join38(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError6(error)) return void 0;
     throw error;
@@ -29984,7 +29988,7 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile19(join37(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile19(join38(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (isRecord10(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
@@ -29992,7 +29996,7 @@ async function resolveSessionFile(runDirectory) {
   } catch (error) {
     if (!isMissingPathError6(error)) throw error;
   }
-  return join37(runDirectory, "session", "session.jsonl");
+  return join38(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -30194,9 +30198,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join37(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join38(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join37(input.runDirectory, "session", "auditor-roles"),
+      join38(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -30231,7 +30235,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join37(ledgerHome, "books");
+  const booksRoot = join38(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -30264,7 +30268,7 @@ async function scanAnalystIssueRuns(input) {
   const ghostLegs = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const bookDir = join37(booksRoot, book);
+    const bookDir = join38(booksRoot, book);
     let runDirectories;
     try {
       runDirectories = await listBookRunDirectories(bookDir);
@@ -31001,7 +31005,7 @@ var init_analyst_metric_family = __esm({
 
 // src/analyst-page.ts
 import { createHash as createHash3 } from "node:crypto";
-import { dirname as dirname22, join as join38 } from "node:path";
+import { dirname as dirname22, join as join39 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -31012,7 +31016,7 @@ function analystIssuePageKey(address) {
   return createHash3("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join38(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join39(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31651,7 +31655,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 function publicSeatArgv(owner) {
   return {
     parse: (args) => parsePublicSeatArgv(owner, args),
@@ -31790,7 +31794,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join39(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join40(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -32552,7 +32556,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { dirname as dirname23, join as join40 } from "node:path";
+import { dirname as dirname23, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32641,8 +32645,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname23(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join40(binDir, "..", "..");
-  if (existsSync11(join40(canonical, "package.json"))) {
+  const canonical = join41(binDir, "..", "..");
+  if (existsSync11(join41(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;