@akagilnc/pi-workflow-roles 0.1.5368 → 0.1.5382

package/dist/activation-ledger-git.js

@@ -1,5 +1,6 @@
 import { execFileSync } from "node:child_process";
 import { basename, dirname, isAbsolute, resolve } from "node:path";
+import { errnoCode } from "./unknown-value.js";
 const GIT_DISCOVERY_ENV_KEYS = [
   "GIT_DIR",
   "GIT_COMMON_DIR",
@@ -31,8 +32,7 @@ class ActivationGitRepositoryRequiredError extends Error {
   }
 }
 function isGitSpawnInfrastructureError(error) {
-  if (error === null || typeof error !== "object" || !("code" in error)) return false;
-  const code = error.code;
+  const code = errnoCode(error);
   return code === "ENOENT" || code === "EACCES" || code === "EPERM";
 }
 function gitChildExitedNonzero(error) {

package/dist/activation-ledger-topology.js

@@ -6,6 +6,7 @@ import {
 } from "node:fs";
 import { userInfo } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { errnoCode, errorText } from "./unknown-value.js";
 class ActivationLedgerError extends Error {
   code = "AK_ACTIVATION_LEDGER";
   constructor(message, options) {
@@ -83,13 +84,6 @@ function physicalPathIdentity(path) {
 function physicallyContainedIn(root, candidate) {
   return pathContainedIn(physicalPathIdentity(root), physicalPathIdentity(candidate));
 }
-function errnoCode(error) {
-  return error !== null && typeof error === "object" && "code" in error && typeof error.code === "string" ? error.code : void 0;
-}
-function errorText(error) {
-  if (!(error instanceof Error)) return String(error);
-  return error.message;
-}
 function assertPhysicalLedgerRoot(absoluteRoot) {
   let st;
   try {

package/dist/analyst-entry.js

@@ -19,6 +19,7 @@ import { scanAnalystIssueRuns, } from "./analyst-ledger.js";
 import { mergeAnalystLibraryIndexRows, rowFromIssueMetricsPage, } from "./analyst-index.js";
 import { buildAnalystModelGroupsPage, } from "./analyst-model-groups.js";
 import { assertAnalystChangedLinesInput, buildAnalystIssueMetricsPage, analystIssuePagePath, writeAnalystIssueMetricsPage, } from "./analyst-page.js";
+import { isMissingPathError } from "./unknown-value.js";
 /** #338 compute-if-missing failure — issue identity + real cause (CLI → ControlledFailure). */
 export class AnalystIssueComputeError extends Error {
     code = "analyst-issue-compute-failed";
@@ -44,16 +45,11 @@ export class AnalystIssueComputeError extends Error {
         }
     }
 }
-function isMissingPathError(error) {
-    return (error instanceof Error
-        && "code" in error
-        && (error.code === "ENOENT" || error.code === "ENOTDIR"));
-}
 /**
  * Sole sweep-mode input contract (#298/#329/#337).
  * Schema is the single definition; TS types are derived (no parallel hand shape).
  * projectRoot = string (not nonempty); changedLines optional finite non-negative;
- * 0 remains typed 空缺; no extra keys.
+ * 0 remains typed 空缺. Extra keys are not a reject reason.
  */
 export const analystSweepModeInputSchema = Type.Object({
     mode: Type.Literal("sweep"),
@@ -61,8 +57,8 @@ export const analystSweepModeInputSchema = Type.Object({
         projectRoot: Type.String(),
         /** 排除后改动行数 — omit or 0 → typed 空缺; finite ≥ 0 only. */
         changedLines: Type.Optional(Type.Number({ minimum: 0, maximum: Number.MAX_VALUE })),
-    }, { additionalProperties: false })),
-}, { additionalProperties: false });
+    })),
+});
 /**
  * #338 retrieval primitive (sync): use persisted page when present; otherwise
  * await the sole issue compute kernel (runAnalystIssueMode) which writes via the

package/dist/analyst-gate-cycles-read.js

@@ -29,6 +29,7 @@ import { readdir } from "node:fs/promises";
 import { join } from "node:path";
 import { AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, } from "./compliance-transport.js";
 import { extractSessionTimestampSpan, intervalRowsAroundAnchor, readLedgerSessionJsonl, } from "./ledger-session-read.js";
+import { isRecord, errorText, isEnoent } from "./unknown-value.js";
 const DISPATCH_TOOLS = new Set(["ak_menxia_output", "ak_gatekeeper_output"]);
 /** Officer terminating tool → current English officer identity. */
 const OFFICER_TOOL_TO_FACE = {
@@ -44,9 +45,6 @@ const OFFICER_ARG_ALIASES = {
     fubaolang: "notary",
     notary: "notary",
 };
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isParentAttemptBindingRow(row) {
     return row.type === "custom" && row.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE;
 }
@@ -54,12 +52,6 @@ function isParentAttemptBindingRow(row) {
 function intervalRowsForGateCall(rows, callRowIndex) {
     return intervalRowsAroundAnchor(rows, callRowIndex, isParentAttemptBindingRow).rows;
 }
-/** Only true absence (ENOENT). ENOTDIR is damaged topology — must stay loud. */
-function isMissingDirectoryError(error) {
-    return (error instanceof Error
-        && "code" in error
-        && error.code === "ENOENT");
-}
 function normalizeOfficerArg(raw) {
     if (typeof raw !== "string")
         return undefined;
@@ -325,7 +317,7 @@ async function resolveOfficerSessionFromPointerFile(pointerPath) {
         raw = JSON.parse(await readFile(pointerPath, "utf8"));
     }
     catch (error) {
-        throw new Error(`direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        throw new Error(`direct officer run pointer unreadable in ${pointerPath}: ${errorText(error)}`, { cause: error });
     }
     if (!isRecord(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
         throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
@@ -367,7 +359,7 @@ export async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirector
                 .sort();
         }
         catch (error) {
-            if (isMissingDirectoryError(error))
+            if (isEnoent(error))
                 continue;
             throw error;
         }

package/dist/analyst-index.js

@@ -20,17 +20,14 @@
  */
 import { open, readFile, unlink } from "node:fs/promises";
 import { dirname, join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
 import { writeFileAtomically } from "./atomic-write.js";
 import { assertLedgerFileInsideHome, ensureRealDirectoryTree, physicalPathIdentity, } from "./activation-ledger-topology.js";
 import { resolveAnalystBookKey } from "./analyst-book-key.js";
+import { isMissingPathError } from "./unknown-value.js";
 const LIBRARY_INDEX_LOCK_NAME = ".library-index.lock";
 const LIBRARY_INDEX_LOCK_TIMEOUT_MS = 30_000;
 const LIBRARY_INDEX_LOCK_RETRY_MS = 15;
-function sleep(ms) {
-    return new Promise((resolve) => {
-        setTimeout(resolve, ms);
-    });
-}
 /**
  * Exclusive create lock for the library-index read→upsert→write critical section.
  * Same-directory sibling of the index file; not a second index and not a daemon.
@@ -198,11 +195,8 @@ export async function readAnalystLibraryIndexPage(ledgerHome) {
         raw = await readFile(path, "utf8");
     }
     catch (error) {
-        if (error instanceof Error
-            && "code" in error
-            && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
+        if (isMissingPathError(error))
             return undefined;
-        }
         throw error;
     }
     const parsed = JSON.parse(raw);

package/dist/analyst-ledger.js

@@ -22,17 +22,7 @@ import { readRunTicketNumber } from "./run-ticket-number.js";
 import { extractSessionModelSequence, extractSessionTimestampSpan, extractSessionToolIntervals, LedgerSessionJsonlError, readLedgerSessionJsonl, } from "./ledger-session-read.js";
 import { readRunTerminalArtifact, } from "./run-terminal-artifacts.js";
 import { readAnalystGateCyclesFromAuditorRoles, } from "./analyst-gate-cycles-read.js";
-function isMissingPathError(error) {
-    return (error instanceof Error
-        && "code" in error
-        && (error.code === "ENOENT" || error.code === "ENOTDIR"));
-}
-function errorText(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord, errorText, isMissingPathError } from "./unknown-value.js";
 /** Existing public-cli run-state live phases — not a new state machine. */
 const LIVE_RUN_STATES = new Set(["admitted", "running", "resumable"]);
 /**

package/dist/analyst-metric-families/acceptance-success-rework.js

@@ -12,6 +12,7 @@
 import { compareAnalystLegs, sumAnalystRunWallMs } from "../analyst-ledger.js";
 import { medianNumber } from "../analyst-median.js";
 import { packagedAnalystTerminal } from "../packaged-role-registry.js";
+import { isRecord } from "../unknown-value.js";
 const WORKER_ROLES = new Set(["coder", "fixer"]);
 /** Lawful acceptance vocabulary by role (PRD 受理终态映射). */
 const ACCEPTED_STATUS = {
@@ -32,9 +33,6 @@ const SUCCESS_STATUS = {
     doctor: new Set(["completed"]),
     merger: new Set(["completed"]),
 };
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 /** Locate collector groups array: receipt.groups or top-level groups. */
 function findCollectorGroups(body) {
     if (Array.isArray(body.groups))

package/dist/analyst-metric-families/round-timeline.js

@@ -1,7 +1,5 @@
 import { extractStatus } from "./acceptance-success-rework.js";
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
+import { isRecord } from "../unknown-value.js";
 function readClassCount(body) {
     if (!isRecord(body.outcome))
         return undefined;

package/dist/analyst-page.js

@@ -6,8 +6,8 @@
  * top-level sections via directory discovery — B/C waves add family files
  * without forking the page writer or editing a shared registry list.
  */
-import { createHash } from "node:crypto";
 import { dirname, join } from "node:path";
+import { sha256Hex } from "./sha256.js";
 import { writeFileAtomically } from "./atomic-write.js";
 import { assertLedgerFileInsideHome, ensureRealDirectoryTree, physicalPathIdentity, } from "./activation-ledger-topology.js";
 import { compareAnalystLegs, sumAnalystRunWallMs } from "./analyst-ledger.js";
@@ -21,7 +21,7 @@ export function analystIssuePageKey(address) {
     else if (address.scopeRootIdentity !== undefined) {
         parts.push("root", physicalPathIdentity(address.scopeRootIdentity));
     }
-    return createHash("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
+    return sha256Hex(parts.join("\0")).slice(0, 32);
 }
 export function analystIssuePagePath(ledgerHome, address) {
     return join(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);

package/dist/archivist-record-topology.js

@@ -1,5 +1,5 @@
-import { createHash } from "node:crypto";
 import { join } from "node:path";
+import { sha256Hex } from "./sha256.js";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import {
   activationBookDirectory,
@@ -16,7 +16,7 @@ function resolveNavigatorWorkSubjectPlacement(input) {
     }
   }
   ledgerHome ??= resolveActivationLedgerHome(input.home);
-  const digest = createHash("sha256").update(input.subject).digest("hex").slice(0, 32);
+  const digest = sha256Hex(input.subject).slice(0, 32);
   return {
     ledgerHome,
     sessionDir: join(

package/dist/audit-escalation.js

@@ -1,6 +1,7 @@
+import { isRecord } from "./unknown-value.js";
 /** Historical audit-escalation discriminator retained for reading pre-#1057 run artifacts. */
 export const AUDIT_ESCALATION_KIND = "audit_escalation";
 export function isAuditEscalationResult(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value)
+    return isRecord(value)
         && value.kind === AUDIT_ESCALATION_KIND;
 }

package/dist/auditor-soul.js

@@ -1,5 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { basename, join } from "node:path";
+import { isRecord } from "./unknown-value.js";
 import { joinPackageMaterials, readPackageMaterial, } from "./session-opening-materials.js";
 /**
  * Active auditor seats.
@@ -100,7 +101,7 @@ export async function readAuditorResumeBinding(runDirectory) {
             return undefined;
         throw error;
     }
-    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+    if (!isRecord(raw))
         return undefined;
     const record = raw;
     if (typeof record.sourceRunPath !== "string" || record.sourceRunPath.trim() === "")

package/dist/collector-config.js

@@ -1,5 +1,6 @@
-import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
+import { sha256Hex } from "./sha256.js";
+import { isRecord } from "./unknown-value.js";
 export const COLLECTOR_OWNER_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
 export const COLLECTOR_REPO_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,98}[A-Za-z0-9])?$/;
 function fail(message, cause) {
@@ -38,15 +39,12 @@ export function parseCollectorPrNumber(raw) {
         fail("Collector pull request number must be a positive safe integer");
     return value;
 }
-function record(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function canonicalManifest(requests) {
     return `${JSON.stringify({ requests: requests.map((request) => ({ id: request.id, body: request.requestBody })) })}\n`;
 }
 export function emptyCollectorManifest() {
     const canonicalJson = canonicalManifest([]);
-    return { requests: [], canonicalJson, digest: createHash("sha256").update(canonicalJson).digest("hex") };
+    return { requests: [], canonicalJson, digest: sha256Hex(canonicalJson) };
 }
 /** Optional request configuration. It names requests, never expected observers. */
 export async function loadCollectorManifest(path) {
@@ -64,7 +62,7 @@ export async function loadCollectorManifest(path) {
     catch (error) {
         fail("Collector request manifest must be UTF-8 JSON", error);
     }
-    if (!record(parsed))
+    if (!isRecord(parsed))
         fail("Collector request manifest must be an object");
     const rawRequests = parsed.requests ?? [];
     if (!Array.isArray(rawRequests))
@@ -72,7 +70,7 @@ export async function loadCollectorManifest(path) {
     const requests = [];
     const ids = new Set();
     for (const [index, item] of rawRequests.entries()) {
-        if (!record(item) || typeof item.id !== "string" || item.id.length === 0 || typeof item.body !== "string" || item.body.trim() === "")
+        if (!isRecord(item) || typeof item.id !== "string" || item.id.length === 0 || typeof item.body !== "string" || item.body.trim() === "")
             fail(`Collector request manifest requests[${index}] is invalid`);
         if (ids.has(item.id))
             fail(`Collector request manifest has duplicate request id "${item.id}"`);
@@ -80,5 +78,5 @@ export async function loadCollectorManifest(path) {
         requests.push({ id: item.id, requestBody: item.body });
     }
     const canonicalJson = canonicalManifest(requests);
-    return { requests, canonicalJson, digest: createHash("sha256").update(canonicalJson).digest("hex"), sourcePath: path };
+    return { requests, canonicalJson, digest: sha256Hex(canonicalJson), sourcePath: path };
 }

package/dist/collector-tool-schemas.js

@@ -0,0 +1,18 @@
+import { Type } from "typebox";
+import { openToolObject } from "./open-tool-schema.js";
+import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.js";
+/**
+ * #1088: LLM gathers evidence via host CLI and submits the receipt.
+ * Field declarations guide the model — host must not pure-shape-reject (第 0 条 / ADR 0057).
+ * Presence of `groups` remains the Collector terminal discriminator for settlement/analyst.
+ */
+export const collectorOutputBaseSchema = openToolObject(Type.Object({
+    groups: Type.Unsafe({
+        description: "按机器身份归组的出席、材料与逐条 findings（LLM 自行从宿主 CLI 取证整理；代码不代收不归并）。",
+    }),
+    unfinishedReasons: Type.Unknown({
+        description: "未完成原因；取证受限时如实报告。",
+    }),
+}));
+/** Runtime does not enrich findings; the model submits the receipt and signals sole-final. */
+export const collectorOutputArgsSchema = withTerminatingOutputDeclarations(collectorOutputBaseSchema);

package/dist/compliance-transport.js

@@ -3,6 +3,7 @@ import { officerConclusionReask } from "./gatekeeper-role.js";
 import { receivedDiscriminator } from "./submission-errors.js";
 import { coalesceSubmissionRows } from "./public-cli/terminal.js";
 import { readableGateItem } from "./readable-gate-item.js";
+import { isRecord } from "./unknown-value.js";
 const AUDITOR_DOSSIER_PROMPT = "\u5377\u5B97\u6307\u9488\uFF1A";
 const COMPLIANCE_RESPONSE_ENTRY_TYPE = "ak_compliance_response";
 const AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding";
@@ -17,7 +18,7 @@ function readListField(value) {
   return Array.isArray(value) ? value : value === void 0 ? [] : [value];
 }
 function tryReadComplianceCandidate(arguments_, usage) {
-  if (typeof arguments_ !== "object" || arguments_ === null || Array.isArray(arguments_)) {
+  if (!isRecord(arguments_)) {
     return void 0;
   }
   const args = arguments_;

package/dist/countersign-contracts.js

@@ -1,7 +1,8 @@
 import { REVIEW_QUEUE_STATUSES, REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.js";
+import { isRecord } from "./unknown-value.js";
 const COUNTERSIGN_OUTPUT_TOOL_NAME = REVIEW_SUBMISSION_OUTPUT_TOOL_NAME;
 function validateRecordedCountersignOutput(verdict) {
-  if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) {
+  if (!isRecord(verdict)) {
     throw new Error("Countersign verdict has no execution discriminator");
   }
   let status;

package/dist/diarist-contracts.js

@@ -6,11 +6,15 @@
  *
  * #901: LLM submits bounds; the mechanical layer projects source bytes.
  */
+import { Type } from "typebox";
+import { openToolObject } from "./open-tool-schema.js";
+import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.js";
 import { projectTicketProvenanceSessions, } from "./ticket-provenance-contracts.js";
 import { isSafePositiveTicketNumber } from "./run-ticket-number.js";
+import { isRecord } from "./unknown-value.js";
 export const DIARIST_OUTPUT_TOOL_NAME = "ak_diarist_output";
 export function validateRecordedDiaristOutput(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    if (!isRecord(value)) {
         throw new Error("Diarist output has no execution discriminator");
     }
     let status;
@@ -42,7 +46,7 @@ export function projectDiaristTicketSessions(value) {
         return undefined;
     const perTicket = new Map();
     for (const entry of raw) {
-        if (entry === null || typeof entry !== "object" || Array.isArray(entry))
+        if (!isRecord(entry))
             return undefined;
         const { ticketNumber, sessions: rawSessions } = entry;
         if (!isSafePositiveTicketNumber(ticketNumber))
@@ -54,3 +58,26 @@ export function projectDiaristTicketSessions(value) {
     }
     return Array.from(perTicket, ([ticketNumber, sessions]) => ({ ticketNumber, sessions }));
 }
+/**
+ * 起居郎交卷形状。
+ * #901：交边界（sessions）；正文与不可解析原字节由机械投影。
+ * status 的合法词（completed | escalate）写在 description，结算认这些词。
+ * sessions / ticketSessions 是投影所读的边界：卷路径或端点读不出时走既有 reask，不中止本轮。
+ * 声明只留字段名和语义说明，不留类型、嵌套、长度、必填。
+ */
+const DIARIST_SESSIONS_DESCRIPTION = "对话边界。每卷含 path（会话卷绝对或可读路径）与 ranges（本卷本轮各区间）。每段区间含 from / to；起点与终点各写 id（原生 id）或 line（本轮行号），二选一。空列表＝本轮无对话可划。端点无法指名时走 reask，不中止。";
+export const diaristOutputSchema = withTerminatingOutputDeclarations(openToolObject(Type.Object({
+    status: Type.Unknown({
+        description: "completed | escalate",
+    }),
+    ticketNumber: Type.Optional(Type.Unknown({
+        description: "本庭对象票号（正整数）或 null/省略＝真无票；下游走 typed 键；认不出用 status=escalate，不洗成无录。机械层不重判。",
+    })),
+    reason: Type.Unknown({
+        description: "status 为 escalate 时：认不出本庭对象的原因",
+    }),
+    sessions: Type.Optional(Type.Unknown({ description: DIARIST_SESSIONS_DESCRIPTION })),
+    ticketSessions: Type.Unknown({
+        description: `多票庭逐票对话边界；每票含 ticketNumber（本条边界所归票号，正整数）与 sessions（${DIARIST_SESSIONS_DESCRIPTION}）。一次交卷各票各自分录。与单票 sessions 二选一。`,
+    }),
+})));

package/dist/doctor-contracts.js

@@ -2,6 +2,7 @@ import { Type } from "typebox";
 import { canonicalJson } from "./canonical-json.js";
 import { openToolObject } from "./open-tool-schema.js";
 import { withTerminatingOutputDeclarations } from "./package-contracts/terminating-infrastructure.js";
+import { isRecord } from "./unknown-value.js";
 const DOCTOR_EVIDENCE_TOOL_NAME = "ak_doctor_evidence";
 const DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
 const DOCTOR_AUDIT_TOOL_NAME = "ak_doctor_audit_decision";
@@ -35,9 +36,6 @@ const doctorEvidenceReadSchema = Type.Object({ evidenceId: Type.String({ minLeng
 class DoctorSubmissionContractError extends Error {
   name = "DoctorSubmissionContractError";
 }
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function read(value, key) {
   if (!isRecord(value)) return void 0;
   try {

package/dist/doctor-evidence.js

@@ -2,7 +2,7 @@ import { readdir, readFile, realpath, stat } from "node:fs/promises";
 import { dirname, relative, resolve, sep } from "node:path";
 import { sha256Hex } from "./sha256.js";
 import { AcceptedDetailsContractError, acceptedFacts, isTerminatingToolName, validateAcceptedDetails } from "./package-contracts/terminating-tools.js";
-function record(value) { return typeof value === "object" && value !== null && !Array.isArray(value); }
+import { isRecord, isMissingPathError } from "./unknown-value.js";
 async function discoverCaseFiles(root) { const found = []; async function walk(dir, depth) { for (const item of await readdir(dir, { withFileTypes: true })) {
     const path = resolve(dir, item.name);
     if (item.isDirectory()) {
@@ -15,7 +15,6 @@ function sourceList(count, sources) { return { count, sources: [...new Set(sourc
 function accumulate(metric, value, source) { metric.count += value; if (value)
     metric.sources.push(source); }
 function timestamp(row) { return typeof row.timestamp === "string" && Number.isFinite(Date.parse(row.timestamp)) ? row.timestamp : undefined; }
-function isMissingPathError(error) { return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR"); }
 async function stableRunsIdentity(root) { let cursor = root; while (true) {
     try {
         const git = await stat(resolve(cursor, ".git"));
@@ -38,7 +37,7 @@ function deriveSession(content, id) {
         if (line.trim()) {
             try {
                 const row = JSON.parse(line);
-                if (!record(row)) {
+                if (!isRecord(row)) {
                     degradationReasons.push(`non-object session row in ${id}`);
                     break;
                 }
@@ -59,21 +58,21 @@ function deriveSession(content, id) {
     let accepted, observedCommit, turns = 0, calls = 0, tokens = 0;
     const statuses = [], commits = [];
     for (const row of rows) {
-        if (row.type === "custom" && row.customType === "ak-role-submission-closure" && record(row.data) && row.data.isError === false && typeof row.data.toolName === "string" && isTerminatingToolName(row.data.toolName))
+        if (row.type === "custom" && row.customType === "ak-role-submission-closure" && isRecord(row.data) && row.data.isError === false && typeof row.data.toolName === "string" && isTerminatingToolName(row.data.toolName))
             accepted = row;
-        const message = record(row.message) ? row.message : undefined;
+        const message = isRecord(row.message) ? row.message : undefined;
         if (message?.role === "assistant") {
             for (const part of Array.isArray(message.content) ? message.content : [])
-                if (record(part) && part.type === "toolCall")
+                if (isRecord(part) && part.type === "toolCall")
                     calls++;
             if (typeof message.responseId === "string") {
                 turns++;
-                const usage = record(message.usage) ? message.usage : undefined;
+                const usage = isRecord(message.usage) ? message.usage : undefined;
                 if (usage && typeof usage.output === "number")
                     tokens += usage.output;
             }
         }
-        if (message?.role === "toolResult" && message.isError !== true && typeof message.toolName === "string" && isTerminatingToolName(message.toolName) && record(message.details)) {
+        if (message?.role === "toolResult" && message.isError !== true && typeof message.toolName === "string" && isTerminatingToolName(message.toolName) && isRecord(message.details)) {
             let details;
             try {
                 details = validateAcceptedDetails(message.toolName, message.details);

package/dist/dossier-resolution.js

@@ -7,6 +7,7 @@
 import { existsSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 import { runDirectoryFromHostContext } from "./host-contracts.js";
+import { isRecord } from "./unknown-value.js";
 export const AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR";
 export const DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate";
 function isHostContext(value) {
@@ -45,9 +46,6 @@ export function resolveAuditDossier(source) {
     }
     return { status: "ok", runDirectory };
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 /**
  * Doctor candidate testimony must be recorded before audit.
  */

package/dist/engine-detour-usage.js

@@ -20,6 +20,7 @@ import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { ENGINE_DETOUR_TOOL_NAME } from "./engine-detour.js";
 import { readSitianRecords, resolveSitianRecordPath, sitianReport, } from "./sitian-facade.js";
+import { isRecord } from "./unknown-value.js";
 /** Sitian event kind for one detour-tool call (volume under session/). */
 export const ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
 /** decisiveFacts key — name states detour-tool scope, not full engine usage. */
@@ -99,9 +100,6 @@ export function reportEngineDetourCall(input) {
         recordPointer: pointer,
     };
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function callFactFromSitianPayload(payload, pointer) {
     if (!isRecord(payload))
         return undefined;

package/dist/filed-submission.js

@@ -0,0 +1,28 @@
+/**
+ * One host-neutral submission execute for every public seat.
+ * Records nothing itself — the ledger seam already appends the original payload.
+ * Ends this tool call. Does not summon an auditor and does not end the role run.
+ * Shape is not an admission gate (ADR 0055). Seat reminders stay on beforeAccept.
+ */
+export function registerFiledSubmissionTool(roleHost, tool, options) {
+    roleHost.registerTool({
+        name: tool.name,
+        label: tool.label,
+        description: tool.description,
+        ...(tool.promptSnippet === undefined ? {} : { promptSnippet: tool.promptSnippet }),
+        parameters: tool.parameters,
+        async execute(toolCallId, parameters, signal, _onUpdate, ctx) {
+            const blocked = options.readyError();
+            if (blocked !== undefined)
+                throw new Error(blocked);
+            const projected = options.beforeAccept === undefined
+                ? undefined
+                : await options.beforeAccept({ toolCallId, parameters, signal, ctx });
+            return {
+                content: [],
+                details: projected === undefined ? parameters : projected,
+                terminate: true,
+            };
+        },
+    });
+}

package/dist/gatekeeper-role.js

@@ -3,8 +3,10 @@ import { packagedGateStageLabel } from "./packaged-role-registry.js";
 import { GatekeeperDecisionError, receivedDiscriminator, unreadableDiscriminatorNotice } from "./submission-errors.js";
 import { INSPECTOR_OUTPUT_TOOL_NAME } from "./inspector-contracts.js";
 import { REVIEW_QUEUE_STATUSES, REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.js";
-import { GATEKEEPER_OUTPUT_TOOL_NAME, gatekeeperOutputSchema, } from "./package-contracts/gatekeeper-output.js";
+import { GATEKEEPER_OUTPUT_TOOL_NAME } from "./package-contracts/gatekeeper-output.js";
+import { roleSubmissionDeclaration } from "./role-submission-declarations.js";
 import { runIdFromRunDirectory } from "./run-terminal-artifacts.js";
+import { isRecord } from "./unknown-value.js";
 export const INSPECTOR_OUTPUT_TOOL = INSPECTOR_OUTPUT_TOOL_NAME;
 export const NOTARY_OUTPUT_TOOL = REVIEW_SUBMISSION_OUTPUT_TOOL_NAME;
 function gateSeatLabel(stage) {
@@ -28,30 +30,16 @@ export { GatekeeperDecisionError } from "./submission-errors.js";
  * registration envelope — src/role-runtime.ts (ADR 0018). Schema authority is
  * the shared contract module (with infrastructure-failure declaration).
  */
-export const GATEKEEPER_TOOL_SPEC = {
-    name: GATEKEEPER_OUTPUT_TOOL_NAME,
-    label: "门下省决议",
-    description: "门下省终局决议。status 为 dispatch 或 pass。",
-    promptSnippet: "门下省决议",
-    parameters: gatekeeperOutputSchema,
-};
+export const GATEKEEPER_TOOL_SPEC = roleSubmissionDeclaration("gatekeeper");
 function failureReason(error) {
     if (error instanceof AggregateError)
         return error.errors.map(failureReason).join("; ");
     return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 /** Original decision bytes — no sentinel replacement (#836). */
 function retainedReceipt(decision) {
     return decision;
 }
-function readRecord(value) {
-    if (typeof value !== "object" || value === null || Array.isArray(value))
-        return undefined;
-    return value;
-}
 /**
  * Read only the conclusion field for queueing (#753).
  * converged | continue | escalate → queue signal + raw receipt.
@@ -65,9 +53,10 @@ function reviewQueueStatus(status) {
 }
 function projectOfficerDecision(officer, decision, fallbackStatus) {
     const receipt = retainedReceipt(decision);
-    const record = readRecord(decision);
-    const status = (record !== undefined && typeof record.status === "string" ? record.status : undefined)
-        ?? fallbackStatus;
+    const record = isRecord(decision) ? decision : undefined;
+    const status = record !== undefined && Object.hasOwn(record, "status")
+        ? receivedDiscriminator(record, "status")
+        : fallbackStatus;
     const queueStatus = typeof status === "string" ? reviewQueueStatus(status) : undefined;
     if (queueStatus === "converged") {
         return { status: "converged", officer, receipt };