@akagilnc/pi-workflow-roles 0.1.5368 → 0.1.5382

package/src/reviewer-role.ts

@@ -1,12 +1,9 @@
-import type { RoleHost, HostContext, HostToolResult } from "./host-contracts.ts";
-import { Type } from "typebox";
-import { openToolObject } from "./open-tool-schema.ts";
-import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.ts";
+import type { RoleHost, HostContext } from "./host-contracts.ts";
 
-import { REVIEWER_OUTPUT_TOOL_NAME, type ReviewerIntent } from "./package-contracts/reviewer-output.ts";
+import { registerFiledSubmissionTool } from "./filed-submission.ts";
+import { roleSubmissionDeclaration } from "./role-submission-declarations.ts";
 
-export { REVIEWER_OUTPUT_TOOL_NAME };
-export type { ReviewerIntent };
+export { REVIEWER_OUTPUT_TOOL_NAME, reviewerOutputSchema, type ReviewerIntent } from "./package-contracts/reviewer-output.ts";
 
 /** Frozen admitted inputs the behavior layer may consume — no flag surface. */
 export type ReviewerAdmittedInputs = Readonly<{
@@ -17,31 +14,11 @@ export type ReviewerAdmittedInputs = Readonly<{
   ticketNumber?: number;
 }>;
 
-const REVIEWER_AMENDMENTS_DESCRIPTION =
-  "已运行 lens 的 amendments 承载 candidates、逐条处置与 verdict 的完整报告（非仅 verdict 行）；显式单轴时另一轴可省略（completeness / correctness）。hard-stop／usage error 为 refused 时，已产出报告仍照录对应 lens 字段。" as const;
-// #1134: `status` alone is the trajectory field (#917 §6 two normal lens verdicts →
-// completed; hard-stop / usage error → refused); its words ride the description.
-// amendments/diagnostic are LLM/human-read narrative content returned as
-// submitted — declaration keeps name + semantic description only, no nested
-// object shape, no string type, no required constraint.
-const REVIEWER_STATUS_DESCRIPTION =
-  "completed | refused。两种正常 lens verdict（completeness / correctness）均 completed；hard-stop 与 usage error 为 refused（已产出报告仍照录进所选 lens amendments）。" as const;
-const reviewerOutputObject = Type.Object({
-  status: Type.Unknown({ description: REVIEWER_STATUS_DESCRIPTION }),
-  amendments: Type.Unknown({ description: REVIEWER_AMENDMENTS_DESCRIPTION }),
-  diagnostic: Type.Unknown({
-    description: "拒绝诊断说明；hard-stop／usage error 原因进此字段，已产出报告另照录 amendments",
-  }),
-});
-export const reviewerOutputSchema = withTerminatingOutputDeclarations(
-  openToolObject(reviewerOutputObject),
-);
 export type ReviewerRoleDependencies = {
   loadSoul(): Promise<string>;
 };
 export type ReviewerRoleHostActions = { failInfrastructure(error: unknown, ctx: HostContext, toolCallId?: string): never };
 
-
 export type ReviewerActivation = Readonly<{
   fixedBaseRevision: string;
   soul: string;
@@ -71,15 +48,9 @@ export function createReviewerRoleRuntime(
 
       if (!registered) {
         registered = true;
-        pi.registerTool({ name: REVIEWER_OUTPUT_TOOL_NAME, label: "御史台输出", description: "提交御史台终局回执。", promptSnippet: "提交御史台终局回执", parameters: reviewerOutputSchema,
-          async execute(_id: string, parameters: unknown): Promise<HostToolResult<unknown>> {
-            if (!soul) throw new Error("御史台输入未装载");
-            return {
-              content: [],
-              details: parameters,
-              terminate: true as const,
-            };
-          } });
+        registerFiledSubmissionTool(pi, roleSubmissionDeclaration("reviewer"), {
+          readyError: () => (soul === undefined || soul.length === 0 ? "御史台输入未装载" : undefined),
+        });
       }
       const activatedSoul = soul;
       const activatedBase = fixedBaseRevision;

package/src/role-envelope.ts

@@ -35,6 +35,8 @@ import {
 } from "./navigator-invocation-identity.ts";
 import { serializeThrownValue } from "./serialize-thrown-value.ts";
 
+import { isRecord, errorText } from "./unknown-value.ts";
+
 export { projectActivationFlags };
 
 type Handler = HostEventRegistration[1];
@@ -158,7 +160,7 @@ export async function prepareRoleEnvelope(options: {
       try {
         await appendFile(sessionFile, line, "utf8");
       } catch (error) {
-        const diagnostic = error instanceof Error ? error.message : String(error);
+        const diagnostic = errorText(error);
         armDurableWriteFailure?.(customType, diagnostic);
       }
     });
@@ -291,7 +293,7 @@ export async function prepareRoleEnvelope(options: {
     content: ContentPart[],
   ): void {
     if (infrastructureRoundFailure !== undefined) return;
-    const record = typeof details === "object" && details !== null && !Array.isArray(details)
+    const record = isRecord(details)
       ? details as Record<string, unknown>
       : undefined;
     const isInfra = record !== undefined && (
@@ -336,7 +338,7 @@ export async function prepareRoleEnvelope(options: {
     content: ContentPart[];
     details: Record<string, unknown>;
   } {
-    const diagnostic = error instanceof Error ? error.message : String(error);
+    const diagnostic = errorText(error);
     const content: ContentPart[] = [{ type: "text", text: diagnostic }];
     const errorCode = typeof (error as unknown as { code?: unknown })?.code === "string"
       ? (error as unknown as { code: string }).code

package/src/role-run-placement.ts

@@ -7,6 +7,8 @@ import {
 } from "./activation-ledger-topology.ts";
 import { requireSafePositiveTicketNumber } from "./run-ticket-number.ts";
 
+import { isEnoent } from "./unknown-value.ts";
+
 export type RoleRunSubject =
   | { readonly ticketNumber: number }
   | { readonly unbound: true };
@@ -19,14 +21,6 @@ export type RoleRunPlacement = {
   readonly attachmentsDirectory: string;
 };
 
-function isMissingPathError(error: unknown): boolean {
-  return (
-    error instanceof Error &&
-    "code" in error &&
-    (error as NodeJS.ErrnoException).code === "ENOENT"
-  );
-}
-
 /**
  * Sole book-level run directory walk: flat legacy `runs/` plus each
  * `subject/runs/` child (ticket / unbound). One authority for read-side
@@ -42,7 +36,7 @@ export async function listBookRunDirectories(bookDir: string): Promise<string[]>
     try {
       entries = await readdir(runsDir, { withFileTypes: true });
     } catch (error) {
-      if (isMissingPathError(error)) return;
+      if (isEnoent(error)) return;
       throw error;
     }
     for (const entry of entries) {
@@ -60,7 +54,7 @@ export async function listBookRunDirectories(bookDir: string): Promise<string[]>
   try {
     subjects = await readdir(bookDir, { withFileTypes: true });
   } catch (error) {
-    if (isMissingPathError(error)) return out.sort();
+    if (isEnoent(error)) return out.sort();
     throw error;
   }
   for (const subject of subjects) {

package/src/role-run-relocation.ts

@@ -12,6 +12,8 @@ import { join, sep } from "node:path";
 
 import { AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE } from "./compliance-transport.ts";
 
+import { isRecord, isEnoent } from "./unknown-value.ts";
+
 const ADMITTED_PAGE_FIELDS = [
   "runDirectory",
   "admittedRequestPath",
@@ -50,14 +52,6 @@ export type RunDirectoryPathRewrite = {
   readonly newRunDirectory: string;
 };
 
-function isEnoent(error: unknown): boolean {
-  return (
-    error instanceof Error &&
-    "code" in error &&
-    (error as NodeJS.ErrnoException).code === "ENOENT"
-  );
-}
-
 /** Rewrite one path value that points at or under oldRunDirectory. */
 export function rewriteRunDirectoryPathValue(
   value: unknown,
@@ -158,16 +152,12 @@ function collectRewrites(input: {
   return out;
 }
 
-function isPlainObject(value: unknown): value is Record<string, unknown> {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-
 /** Typed notary/source-run locator: only runDirectory is a path. */
 function rewriteSourceRunLocator(
   value: unknown,
   rewrites: readonly RunDirectoryPathRewrite[],
 ): void {
-  if (!isPlainObject(value)) return;
+  if (!isRecord(value)) return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(
     value,
     SOURCE_RUN_LOCATOR_FIELDS,
@@ -180,7 +170,7 @@ function rewriteSummonsMaterials(
   value: unknown,
   rewrites: readonly RunDirectoryPathRewrite[],
 ): void {
-  if (!isPlainObject(value)) return;
+  if (!isRecord(value)) return;
   rewriteRunDirectoryPathFieldsAgainstRewrites(
     value,
     SUMMONS_PATH_FIELDS,
@@ -204,12 +194,12 @@ export function rewriteAdmittedRoleRunPage(
   rewriteSourceRunLocator(page.sourceRun, rewrites);
   if (Array.isArray(page.attachments)) {
     for (const attachment of page.attachments) {
-      if (isPlainObject(attachment)) {
+      if (isRecord(attachment)) {
         rewriteRunDirectoryPathFieldsAgainstRewrites(attachment, ["frozenPath"], rewrites);
       }
     }
   }
-  if (isPlainObject(page.principal)) {
+  if (isRecord(page.principal)) {
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page.principal,
       ["sessionDirectory", "sessionFile"],
@@ -224,7 +214,7 @@ async function rewriteOfficerPointerFile(
 ): Promise<void> {
   if (!existsSync(path)) return;
   const page = JSON.parse(await readFile(path, "utf8")) as unknown;
-  if (!isPlainObject(page)) return;
+  if (!isRecord(page)) return;
   // Only the typed direct-officer pointer shape — never arbitrary .pointer.json.
   if (page.kind !== "direct-officer-run-pointer") return;
   const before = JSON.stringify(page);
@@ -267,7 +257,7 @@ async function rewriteSitianRecordsJsonl(
       out.push(line);
       continue;
     }
-    if (!isPlainObject(parsed)) {
+    if (!isRecord(parsed)) {
       out.push(line);
       continue;
     }
@@ -325,7 +315,7 @@ async function rewriteSessionTranscriptBindings(
       out.push(line);
       continue;
     }
-    if (!isPlainObject(parsed)) {
+    if (!isRecord(parsed)) {
       out.push(line);
       continue;
     }
@@ -341,8 +331,8 @@ async function rewriteSessionTranscriptBindings(
     } else if (
       parsed.type === "custom" &&
       parsed.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE &&
-      isPlainObject(parsed.data) &&
-      isPlainObject(parsed.data.parent)
+      isRecord(parsed.data) &&
+      isRecord(parsed.data.parent)
     ) {
       const parent = parsed.data.parent;
       const before = parent.sessionFile;
@@ -454,7 +444,7 @@ export async function rewriteRoleRunDurablePages(input: {
       RUN_STATE_PAGE_FIELDS,
       rewrites,
     );
-    if (isPlainObject(page.principal)) {
+    if (isRecord(page.principal)) {
       rewriteRunDirectoryPathFieldsAgainstRewrites(
         page.principal,
         ["sessionDirectory", "sessionFile"],
@@ -462,7 +452,7 @@ export async function rewriteRoleRunDurablePages(input: {
       );
     }
     // Open court summons: source-run locators + frozen attachment path pointers.
-    if (isPlainObject(page.currentCourt)) {
+    if (isRecord(page.currentCourt)) {
       rewriteSummonsMaterials(page.currentCourt.summons, rewrites);
     }
     if (JSON.stringify(page) !== before) {

package/src/role-runtime.ts

@@ -6,7 +6,6 @@ import {
 
   runDirectoryFromHostContext,
   type HostContext,
-  type HostToolResult,
   type RoleEnvelopeHost,
   type RoleHost,
 } from "./host-contracts.ts";
@@ -14,6 +13,8 @@ import {
 import { Value } from "typebox/value";
 import { sitianReport } from "./sitian-facade.ts";
 import { createSubmissionLedgerHost, sealAcceptedSubmission } from "./submission-ledger.ts";
+import { registerFiledSubmissionTool, type FiledSubmissionBeforeAccept } from "./filed-submission.ts";
+import type { RoleSubmissionDeclaration } from "./role-submission-declarations.ts";
 
 import { activationTraceRecordSchema, namedActivationCause, type ActivationTraceRecord, type ActivationTraceWriter } from "./activation-trace.ts";
 import { homeFromRunDirectory } from "./activation-ledger-topology.ts";
@@ -188,7 +189,7 @@ function decodeReviewerAdmittedInputs(getFlag: (name: string) => unknown): Revie
       parsed = JSON.parse(rawAuthorityRefs);
     } catch (error) {
       throw new Error(
-        `Reviewer authority refs transport error: JSON decode failed: ${error instanceof Error ? error.message : String(error)}`,
+        `Reviewer authority refs transport error: JSON decode failed: ${errorText(error)}`,
       );
     }
     if (!Array.isArray(parsed) || parsed.some((ref) => typeof ref !== "string")) {
@@ -297,6 +298,8 @@ export type { GatekeeperResult, GatekeeperSubject, SubmissionGateNonPassResult,
 import { ParentQueueReaskError, unreadableDiscriminatorNotice } from "./submission-errors.ts";
 import { REVIEW_QUEUE_STATUSES } from "./review-submission.ts";
 
+import { isRecord, errorText, isEnoent } from "./unknown-value.ts";
+
 export {
   DOCTOR_EVIDENCE_TOOL_NAME,
   DOCTOR_OUTPUT_TOOL_NAME,
@@ -507,7 +510,7 @@ export function publicNavigatorSettlement(role: string, phase: NavigatorPhase, e
     return { kind: "role_infrastructure_failure", role, phase };
   }
   // accepted/human — project role/phase status; classifier already rejected infra/contradiction.
-  const details = typeof event.details === "object" && event.details !== null && !Array.isArray(event.details)
+  const details = isRecord(event.details)
     ? event.details as Record<string, unknown>
     : {};
   const status = typeof details.status === "string"
@@ -545,18 +548,6 @@ export async function projectClosedSubmissionLifecycle(
   }
 }
 
-/**
- * Optional pre-accept hook on the shared filed-officer envelope (ADR 0075).
- * May return a details projection (envelope-owned machine facts recorded next to
- * the submitted parameters); undefined keeps the parameters as submitted.
- */
-type FiledOfficerBeforeAccept = (input: {
-  readonly toolCallId: string;
-  readonly parameters: unknown;
-  readonly signal: AbortSignal | undefined;
-  readonly ctx: HostContext;
-}) => Promise<unknown>;
-
 /**
  * Shared registration envelope for filed officers (ADR 0018 / #572):
  * activate, tool register, before_agent_start prompt, inventory check.
@@ -567,9 +558,9 @@ function createFiledOfficerRuntime(
   roleHost: RoleHost,
   spec: {
     role: PackagedRole;
-    tool: { name: string; label: string; description: string; promptSnippet: string; parameters: unknown };
+    tool: RoleSubmissionDeclaration;
     soulTag: string;
-    beforeAccept?: FiledOfficerBeforeAccept;
+    beforeAccept?: FiledSubmissionBeforeAccept;
   },
   dependencies: { loadSoul(): Promise<string> },
 ) {
@@ -582,26 +573,9 @@ function createFiledOfficerRuntime(
       soul = loaded;
       if (!registered) {
         registered = true;
-        roleHost.registerTool({
-          name: spec.tool.name,
-          label: spec.tool.label,
-          description: spec.tool.description,
-          promptSnippet: spec.tool.promptSnippet,
-          parameters: spec.tool.parameters as never,
-          async execute(toolCallId, parameters, signal, _onUpdate, ctx): Promise<HostToolResult<unknown>> {
-            if (soul === undefined) throw new Error(`${spec.role} 职分未装载`);
-            const projected =
-              spec.beforeAccept === undefined
-                ? undefined
-                : await spec.beforeAccept({ toolCallId, parameters, signal, ctx });
-            // Accept-as-is + terminate only. Shape is not an admission gate
-            // (第 0 条 / ADR 0055); sole-final barrier is ledger-owned (#575).
-            return {
-              content: [],
-              details: projected === undefined ? parameters : projected,
-              terminate: true as const,
-            };
-          },
+        registerFiledSubmissionTool(roleHost, spec.tool, {
+          readyError: () => (soul === undefined ? `${spec.role} 职分未装载` : undefined),
+          ...(spec.beforeAccept === undefined ? {} : { beforeAccept: spec.beforeAccept }),
         });
         roleHost.on("before_agent_start", (event) => {
           if (soul === undefined) throw new Error(`${spec.role} 职分未装载`);
@@ -710,7 +684,7 @@ export function createNavigatorRoleRuntime(
           dependencies.recordRoutePlaybookReadFailure?.(undefined);
           if (content.trim() !== "") parts.push(content);
         } catch (error) {
-          const message = error instanceof Error ? error.message : String(error);
+          const message = errorText(error);
           if (message.trim() !== "") {
             dependencies.recordRoutePlaybookReadFailure?.(message);
             parts.push(message);
@@ -854,7 +828,7 @@ export function createDiaristRoleRuntime(
       soulTag: "diarist",
       beforeAccept: async ({ parameters, ctx }) => {
         const submitted =
-          parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
+          isRecord(parameters)
             ? (parameters as Record<string, unknown>)
             : undefined;
         // Routing belongs to the public seam after this tool call has returned.
@@ -1073,7 +1047,7 @@ export function createRoleRuntimeExtension(
     ): void => {
       if (attendance === undefined) return;
       const recordDisposeFailure = (error: unknown): void => {
-        const diagnostic = error instanceof Error ? error.message : String(error);
+        const diagnostic = errorText(error);
         try {
           sitianReport({
             level: "event",
@@ -1087,7 +1061,7 @@ export function createRoleRuntimeExtension(
           try {
             envelopeHost.appendEntry?.("ak-navigator-dispose-failure", {
               diagnostic,
-              recordFailure: recordError instanceof Error ? recordError.message : String(recordError),
+              recordFailure: errorText(recordError),
             });
           } catch {
             // Failure already diagnosed; recording must not create unhandled rejection (#959).
@@ -1655,15 +1629,7 @@ export function createRoleRuntimeExtension(
       try {
         await recordTypedProviderHttpStatus(runDir, { httpStatus: status, provider });
       } catch (error) {
-        if (
-          status >= 200 &&
-          status < 300 &&
-          error instanceof Error &&
-          "code" in error &&
-          (error as { code?: unknown }).code === "ENOENT"
-        ) {
-          return;
-        }
+        if (status >= 200 && status < 300 && isEnoent(error)) return;
         failInfrastructure(error, ctx);
       }
     };

package/src/role-submission-declarations.ts

@@ -0,0 +1,143 @@
+/**
+ * Field guidance for each public seat's submission tool (#1031).
+ * The tool name is the role registry's outputTool. This module does not restate it.
+ * Review seats keep the #1028 schema. Other seats keep their own field guidance.
+ * Execute lives in filed-submission.ts.
+ */
+import { packagedRoleOutputTool, type PackagedRole } from "./packaged-role-registry.ts";
+import { reviewSubmissionSchema } from "./review-submission.ts";
+import { collectorOutputArgsSchema } from "./collector-tool-schemas.ts";
+import { diaristOutputSchema } from "./diarist-contracts.ts";
+import { doctorSubmissionSchema, DOCTOR_OUTPUT_TOOL_DESCRIPTION } from "./doctor-contracts.ts";
+import { fixerOutputSchema } from "./package-contracts/fixer-output.ts";
+import { gatekeeperOutputSchema } from "./package-contracts/gatekeeper-output.ts";
+import { gleanerLeftOutputSchema } from "./gleaner-left-contracts.ts";
+import { mergerOutputSchema } from "./merger-contracts.ts";
+import { navigatorOutputSchema } from "./package-contracts/navigator-output.ts";
+import { reviewerOutputSchema } from "./package-contracts/reviewer-output.ts";
+import { secretariatVerdictSchema } from "./secretariat-contracts.ts";
+import { coderOutputSchema } from "./package-contracts/worker-output.ts";
+
+export type RoleSubmissionDeclaration = {
+  readonly role: PackagedRole;
+  readonly name: string;
+  readonly label: string;
+  readonly description: string;
+  readonly promptSnippet?: string;
+  readonly parameters: unknown;
+};
+
+type SubmissionFace = Omit<RoleSubmissionDeclaration, "role" | "name">;
+
+const SUBMISSION_FACE = {
+  judge: {
+    label: "大理寺输出",
+    description: "提交大理寺终局判词；交卷调用结束后，由公开调用接缝按判词状态执行适用审核。",
+    promptSnippet: "提交大理寺终局判词",
+    parameters: reviewSubmissionSchema,
+  },
+  fixer: {
+    label: "修内司输出",
+    description: "提交修内司终局回执。",
+    promptSnippet: "提交修内司终局回执",
+    parameters: fixerOutputSchema,
+  },
+  coder: {
+    label: "将作监输出",
+    description: "提交将作监终局回执。",
+    promptSnippet: "提交将作监终局回执",
+    parameters: coderOutputSchema,
+  },
+  reviewer: {
+    label: "御史台输出",
+    description: "提交御史台终局回执。",
+    promptSnippet: "提交御史台终局回执",
+    parameters: reviewerOutputSchema,
+  },
+  collector: {
+    label: "通进司输出",
+    description: "提交通进司回执。",
+    promptSnippet: "提交通进司回执",
+    parameters: collectorOutputArgsSchema,
+  },
+  doctor: {
+    label: "太医署输出",
+    description: DOCTOR_OUTPUT_TOOL_DESCRIPTION,
+    parameters: doctorSubmissionSchema,
+  },
+  merger: {
+    label: "合并输出",
+    description: "提交合并结果；输出分支为 completed 与 escalate。",
+    promptSnippet: "提交合并结果",
+    parameters: mergerOutputSchema,
+  },
+  notary: {
+    label: "符宝郎输出",
+    description: "提交引文保真与票面对齐的 converged/continue/escalate 决议。",
+    promptSnippet: "提交符宝郎决议",
+    parameters: reviewSubmissionSchema,
+  },
+  countersign: {
+    label: "给事中输出",
+    description: "给事中决议。",
+    promptSnippet: "给事中决议",
+    parameters: reviewSubmissionSchema,
+  },
+  secretariat: {
+    label: "中书省输出",
+    description: "中书省终局回执。",
+    promptSnippet: "中书省终局回执",
+    parameters: secretariatVerdictSchema,
+  },
+  "gleaner-left": {
+    label: "左拾遗输出",
+    description: "左拾遗弹章。",
+    promptSnippet: "左拾遗弹章",
+    parameters: gleanerLeftOutputSchema,
+  },
+  inspector: {
+    label: "台院输出",
+    description: "台院终局回执，状态为 converged、continue 或 escalate。",
+    promptSnippet: "台院终局回执",
+    parameters: reviewSubmissionSchema,
+  },
+  gatekeeper: {
+    label: "门下省决议",
+    description: "门下省终局决议。status 为 dispatch 或 pass。",
+    promptSnippet: "门下省决议",
+    parameters: gatekeeperOutputSchema,
+  },
+  navigator: {
+    label: "游奕使建议",
+    description: "游奕使终局回执：散文建议，原样呈现。",
+    promptSnippet: "游奕使建议",
+    parameters: navigatorOutputSchema,
+  },
+  auditor: {
+    label: "审刑院输出",
+    description: "审刑院终局回执，status 为 converged、continue 或 escalate。",
+    promptSnippet: "审刑院终局回执",
+    parameters: reviewSubmissionSchema,
+  },
+  diarist: {
+    label: "起居郎输出",
+    description: "起居郎交单票 sessions 或多票逐票 ticketSessions 边界；认不出本庭对象则 escalate。",
+    promptSnippet: "起居郎交边界",
+    parameters: diaristOutputSchema,
+  },
+} as const satisfies Record<PackagedRole, SubmissionFace>;
+
+/** Tool name comes from the registry record. Label and schema stay on this face. */
+export function roleSubmissionDeclaration(role: PackagedRole): RoleSubmissionDeclaration {
+  const name = packagedRoleOutputTool(role);
+  if (name === undefined) throw new Error(`${role} output tool is not declared`);
+  const face = SUBMISSION_FACE[role];
+  return {
+    role,
+    name,
+    label: face.label,
+    description: face.description,
+    ...("promptSnippet" in face ? { promptSnippet: face.promptSnippet } : {}),
+    parameters: face.parameters,
+  };
+}

package/src/run-terminal-artifacts.ts

@@ -11,6 +11,8 @@ import { basename, dirname, join } from "node:path";
 
 import { roleRunArtifactsDirectory } from "./role-run-placement.ts";
 
+import { isRecord, errorText, isMissingPathError } from "./unknown-value.ts";
+
 export const RUN_TERMINAL_ARTIFACT_FILES = [
   "report.json",
   "error.json",
@@ -49,22 +51,6 @@ export type RunTerminalArtifactRead =
       readonly reason: string;
     };
 
-function isMissingPathError(error: unknown): boolean {
-  return (
-    error instanceof Error
-    && "code" in error
-    && (error.code === "ENOENT" || error.code === "ENOTDIR")
-  );
-}
-
-function errorText(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
 /**
  * Minimum producer-owned face shared by settlement terminal artifacts
  * (report / error / audit-incomplete). Consumer-driven: enough to identify a

package/src/run-ticket-number.ts

@@ -8,18 +8,12 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 
+import { isEnoent, isRecord } from "./unknown-value.ts";
+
 /** Sole on-disk page for worktree-basename ticket derivation (#865). */
 export const MIGRATION_TICKET_DERIVATION_PAGE =
   "migration-ticket-derivation.json" as const;
 
-function isEnoent(error: unknown): boolean {
-  return (
-    error instanceof Error &&
-    "code" in error &&
-    (error as NodeJS.ErrnoException).code === "ENOENT"
-  );
-}
-
 /** Sole safe-positive ticket invariant (bind / admission / placement / readers). */
 export function isSafePositiveTicketNumber(value: unknown): value is number {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 1;
@@ -69,10 +63,10 @@ async function readJsonObject(
 ): Promise<Record<string, unknown> | undefined> {
   try {
     const raw: unknown = JSON.parse(await readFile(path, "utf8"));
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+    if (!isRecord(raw)) {
       return undefined;
     }
-    return raw as Record<string, unknown>;
+    return raw;
   } catch (error) {
     if (isEnoent(error)) return undefined;
     throw error;

package/src/secretariat-contracts.ts

@@ -7,7 +7,42 @@
  * is defaulted, rewritten, or dropped (ADR 0055).
  */
 
+import { Type } from "typebox";
+
+import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.ts";
+
 export const SECRETARIAT_OUTPUT_TOOL_NAME = "ak_secretariat_output";
+
+/**
+ * 中书省终局回执形状。
+ * #1134: `secretariatStatus` alone is the trajectory field
+ * (src/packaged-role-registry.ts receiptStatusKey; the public settlement reads
+ * converged | escalate to route); its words ride the description. note/evidence/
+ * decisionGate are declared name + semantic description only — the string type, the
+ * number type, the nested question/options object shape and the required constraint
+ * are deleted, because the package declaration IS the host's pre-dispatch validator.
+ * (ticketNumber keeps its own declaration: it is the declared seat identity the
+ * activation flag and settlement read, not narrative content.)
+ */
+export const secretariatVerdictSchema = withTerminatingOutputDeclarations(
+  Type.Object(
+    {
+      secretariatStatus: Type.Unknown({
+        description: "converged | escalate",
+      }),
+      ticketNumber: Type.Optional(
+        Type.Unknown({ description: "本票号；署时指向最终正文所在票" }),
+      ),
+      note: Type.Unknown({ description: "附注" }),
+      evidence: Type.Optional(Type.Unknown({ description: "留存证据" })),
+      decisionGate: Type.Unknown({
+        description: "需陛下处置的问题与选项；可写 question 与 options，原样留存。",
+      }),
+    },
+    { additionalProperties: true },
+  ),
+);
+(secretariatVerdictSchema as unknown as { required: string[] }).required = [];
 /**
  * #969 durable custom entry: 给事中 terminal (署|上呈) for seat settlement projection.
  * Carries original receipt bytes + nested runId. Envelope persists custom entries