@akagilnc/pi-workflow-roles 0.1.5478 → 0.1.5504

package/dist/public-cli/main.js

@@ -831,17 +831,47 @@ var init_activation_ledger_topology = __esm({
 var run_ticket_number_exports = {};
 __export(run_ticket_number_exports, {
   MIGRATION_TICKET_DERIVATION_PAGE: () => MIGRATION_TICKET_DERIVATION_PAGE,
+  isPositiveTicketNumber: () => isPositiveTicketNumber,
   isSafePositiveTicketNumber: () => isSafePositiveTicketNumber,
+  isTicketNumberString: () => isTicketNumberString,
+  parseTicketNumber: () => parseTicketNumber,
   readBoardTicketNumber: () => readBoardTicketNumber,
   readDeclaredTicketNumber: () => readDeclaredTicketNumber,
   readMigrationDerivedTicketNumber: () => readMigrationDerivedTicketNumber,
   readRunTicketNumber: () => readRunTicketNumber,
-  requireSafePositiveTicketNumber: () => requireSafePositiveTicketNumber
+  requireSafePositiveTicketNumber: () => requireSafePositiveTicketNumber,
+  sitianSubjectTicketNumber: () => sitianSubjectTicketNumber,
+  ticketNumberFromSitianSubject: () => ticketNumberFromSitianSubject
 });
 import { readFile } from "node:fs/promises";
 import { join as join3 } from "node:path";
+function isPositiveTicketNumber(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 1;
+}
 function isSafePositiveTicketNumber(value) {
-  return typeof value === "number" && Number.isSafeInteger(value) && value >= 1;
+  return isPositiveTicketNumber(value) && Number.isSafeInteger(value);
+}
+function isTicketNumberString(value) {
+  return typeof value === "string" && /^[1-9][0-9]*$/.test(value);
+}
+function parseTicketNumber(value) {
+  if (isSafePositiveTicketNumber(value)) return value;
+  if (!isTicketNumberString(value)) return void 0;
+  const parsed = Number(value);
+  return isSafePositiveTicketNumber(parsed) ? parsed : void 0;
+}
+function sitianSubjectTicketNumber(subject) {
+  if (typeof subject === "string" || typeof subject === "number") {
+    return parseTicketNumber(subject);
+  }
+  if (subject !== null && typeof subject === "object" && !Array.isArray(subject)) {
+    return parseTicketNumber(subject.ticketNumber);
+  }
+  return void 0;
+}
+function ticketNumberFromSitianSubject(subject) {
+  const parsed = sitianSubjectTicketNumber(subject);
+  return parsed === void 0 ? void 0 : String(parsed);
 }
 function readDeclaredTicketNumber(value) {
   if (isSafePositiveTicketNumber(value)) return value;
@@ -849,8 +879,7 @@ function readDeclaredTicketNumber(value) {
   const trimmed = value.trim();
   const match = /^#?([1-9]\d*)(?!\.\d)(?:\b|$)/.exec(trimmed);
   if (match === null) return void 0;
-  const ticketNumber = Number(match[1]);
-  return isSafePositiveTicketNumber(ticketNumber) ? ticketNumber : void 0;
+  return parseTicketNumber(match[1]);
 }
 function requireSafePositiveTicketNumber(ticketNumber, context = "ticketNumber") {
   if (!isSafePositiveTicketNumber(ticketNumber)) {
@@ -905,7 +934,30 @@ var init_run_ticket_number = __esm({
 
 // src/role-run-placement.ts
 import { readdir } from "node:fs/promises";
-import { join as join4 } from "node:path";
+import { basename as basename3, dirname as dirname4, join as join4 } from "node:path";
+function formatRunLeaf(runId, role) {
+  return `${runId}@${role}`;
+}
+function parseRunLeaf(name) {
+  const at = name.lastIndexOf("@");
+  if (at <= 0 || at === name.length - 1) return void 0;
+  return { runId: name.slice(0, at), role: name.slice(at + 1) };
+}
+function sessionDirectoryOf(runDirectory) {
+  return join4(runDirectory, "session");
+}
+function sessionFileIn(sessionDirectory) {
+  return join4(sessionDirectory, ROLE_RUN_SESSION_FILENAME);
+}
+function sessionFileOf(runDirectory) {
+  return sessionFileIn(sessionDirectoryOf(runDirectory));
+}
+function runDirectoryOfSessionFile(sessionFile) {
+  return dirname4(dirname4(sessionFile));
+}
+function runDirectoryFromSessionDirectory(sessionDirectory) {
+  return dirname4(sessionDirectory);
+}
 async function listBookRunDirectories(bookDir) {
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -939,6 +991,20 @@ async function listBookRunDirectories(bookDir) {
   }
   return out.sort();
 }
+async function findRoleRunDirectory(bookDirectories, runId, onlyRole) {
+  const matches = [];
+  for (const bookDirectory of bookDirectories) {
+    for (const runDirectory of await listBookRunDirectories(bookDirectory)) {
+      const parsed = parseRunLeaf(basename3(runDirectory));
+      if (parsed === void 0 || parsed.runId !== runId) continue;
+      if (onlyRole !== void 0 && parsed.role !== onlyRole) continue;
+      matches.push(runDirectory);
+    }
+  }
+  if (matches.length === 0) return void 0;
+  if (matches.length === 1) return matches[0];
+  throw new Error(`ambiguous role run id ${runId}: ${matches.join(", ")}`);
+}
 function roleRunPlacement(ledgerHome, input) {
   const subjectDirectory = "ticketNumber" in input.subject ? String(requireSafePositiveTicketNumber(
     input.subject.ticketNumber,
@@ -948,13 +1014,13 @@ function roleRunPlacement(ledgerHome, input) {
     activationBookDirectory(ledgerHome, input.bookKey),
     subjectDirectory,
     "runs",
-    `${input.runId}@${input.role}`
+    formatRunLeaf(input.runId, input.role)
   );
-  const sessionDirectory = join4(runDirectory, "session");
+  const sessionDirectory = sessionDirectoryOf(runDirectory);
   return {
     runDirectory,
     sessionDirectory,
-    sessionFile: join4(sessionDirectory, "session.jsonl"),
+    sessionFile: sessionFileIn(sessionDirectory),
     artifactsDirectory: roleRunArtifactsDirectory(runDirectory),
     attachmentsDirectory: join4(runDirectory, "attachments")
   };
@@ -976,12 +1042,14 @@ function ensureRoleRunPlacement(ledgerHome, placement) {
     ensureRoleRunDirectory(ledgerHome, directory);
   }
 }
+var ROLE_RUN_SESSION_FILENAME;
 var init_role_run_placement = __esm({
   "src/role-run-placement.ts"() {
     "use strict";
     init_activation_ledger_topology();
     init_run_ticket_number();
     init_unknown_value();
+    ROLE_RUN_SESSION_FILENAME = "session.jsonl";
   }
 });
 
@@ -991,7 +1059,6 @@ __export(durable_principal_exports, {
   issuePiDurablePrincipalCoordinates: () => issuePiDurablePrincipalCoordinates,
   piDurablePrincipalAuthority: () => piDurablePrincipalAuthority
 });
-import { join as join5 } from "node:path";
 function encode(coordinates) {
   return coordinates;
 }
@@ -1041,7 +1108,7 @@ var init_durable_principal = __esm({
         }
         return {
           sessionDirectory: record.sessionDirectory,
-          sessionFile: typeof record.sessionFile === "string" && record.sessionFile.trim() !== "" ? record.sessionFile : join5(record.sessionDirectory, "session.jsonl")
+          sessionFile: typeof record.sessionFile === "string" && record.sessionFile.trim() !== "" ? record.sessionFile : sessionFileIn(record.sessionDirectory)
         };
       }
     };
@@ -1050,7 +1117,7 @@ var init_durable_principal = __esm({
 
 // src/package-resources/engine-material.ts
 import { existsSync as existsSync2, readdirSync } from "node:fs";
-import { join as join6 } from "node:path";
+import { join as join5 } from "node:path";
 function pickEngineAxis(source) {
   return {
     ...source.engine === void 0 ? {} : { engine: source.engine },
@@ -1071,11 +1138,11 @@ function isEngineNameSyntax(name) {
   return true;
 }
 function resolveEngineMaterialDirectory(packageRoot2) {
-  return join6(packageRoot2, ENGINE_MATERIAL_RELATIVE_ROOT);
+  return join5(packageRoot2, ENGINE_MATERIAL_RELATIVE_ROOT);
 }
 function resolveEngineMaterialPath(packageRoot2, name) {
   const legal = assertLegalEngineName(name);
-  return join6(resolveEngineMaterialDirectory(packageRoot2), `${legal}.md`);
+  return join5(resolveEngineMaterialDirectory(packageRoot2), `${legal}.md`);
 }
 function assertLegalEngineName(name) {
   if (!isEngineNameSyntax(name)) {
@@ -14892,6 +14959,7 @@ var TICKET_PROVENANCE_KIND;
 var init_ticket_provenance_contracts = __esm({
   "src/ticket-provenance-contracts.ts"() {
     "use strict";
+    init_run_ticket_number();
     init_unknown_value();
     TICKET_PROVENANCE_KIND = "ticket-provenance";
   }
@@ -15014,7 +15082,6 @@ __export(packaged_role_registry_exports, {
   packagedRoleOutputTool: () => packagedRoleOutputTool,
   packagedRolePhaseFlag: () => packagedRolePhaseFlag,
   packagedRoleSessionMaterials: () => packagedRoleSessionMaterials,
-  packagedSkipsGateOnInfrastructureStage: () => packagedSkipsGateOnInfrastructureStage,
   packagedStoresSourceRunRaw: () => packagedStoresSourceRunRaw,
   packagedSubjectChoices: () => packagedSubjectChoices
 });
@@ -15116,11 +15183,6 @@ function packagedAuditToolName(role) {
   if (record === void 0 || !("auditTool" in record)) return void 0;
   return record.auditTool;
 }
-function packagedSkipsGateOnInfrastructureStage(stage) {
-  return typeof stage === "string" && PUBLIC_ROLE_RECORDS.some(
-    (record) => "skipGateOnInfrastructureStage" in record && record.skipGateOnInfrastructureStage === true && record.role === stage
-  );
-}
 function packagedDurableOfficerEntry(officer) {
   return typeof officer === "string" && PUBLIC_ROLE_RECORDS.some(
     (record) => "durableOfficerEntry" in record && record.durableOfficerEntry === true && record.role === officer
@@ -15473,8 +15535,6 @@ var init_packaged_role_registry = __esm({
         sourceRunStored: "raw",
         argvResult: "source-run",
         sameParent: "source-locator",
-        /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-        skipGateOnInfrastructureStage: true,
         /** 符宝郎 is a review officer and inherits the gatekeeper model. */
         reviewOfficer: true,
         provinceConfig: true,
@@ -15582,8 +15642,6 @@ var init_packaged_role_registry = __esm({
         sameParent: "gate-pointer",
         /** Resume restores an optional source-run path onto the admitted face. */
         resumeSourcePath: true,
-        /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-        skipGateOnInfrastructureStage: true,
         /** 台院 is a review officer and inherits the gatekeeper model. */
         reviewOfficer: true,
         provinceConfig: true,
@@ -15615,8 +15673,6 @@ var init_packaged_role_registry = __esm({
         presentSettled: "always",
         summonResume: true,
         admission: "instruction",
-        /** Infrastructure failure at this stage has no accepted gate cycle to project. */
-        skipGateOnInfrastructureStage: true,
         sameParent: "none",
         /** Province model root. Officers name this seat via modelInheritsFrom. */
         provinceConfig: true,
@@ -15775,9 +15831,9 @@ var init_institutional_resolution = __esm({
 });
 
 // src/host-descriptions.ts
-import { join as join7 } from "node:path";
+import { join as join6 } from "node:path";
 function resolveHostBinary(description, operatorHome) {
-  return join7(operatorHome, ...description.binaryFromHome);
+  return join6(operatorHome, ...description.binaryFromHome);
 }
 function lookupHostDescription(host) {
   return Object.hasOwn(HOST_DESCRIPTIONS, host) ? HOST_DESCRIPTIONS[host] : void 0;
@@ -15913,7 +15969,7 @@ __export(config_exports, {
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
 import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { dirname as dirname4, join as join8 } from "node:path";
+import { dirname as dirname5, join as join7 } from "node:path";
 function isGateOfficerSeat(value) {
   return packagedProvinceConfig(value);
 }
@@ -15921,7 +15977,7 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join8(home, ".ak-roles", "public-cli.json");
+  return join7(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
@@ -15935,7 +15991,7 @@ async function loadPublicCliConfig(home) {
 }
 async function savePublicCliConfig(config, home) {
   const path = publicCliConfigPath(home);
-  await mkdir(dirname4(path), { recursive: true });
+  await mkdir(dirname5(path), { recursive: true });
   const normalized = parsePublicCliConfig(config);
   await writeFile(
     path,
@@ -16381,11 +16437,11 @@ function credentialProvidersFromAuthData(data) {
   };
 }
 function resolvePublicAgentDir(explicit, home) {
-  return explicit ?? process.env.PI_CODING_AGENT_DIR ?? join8(home, ".pi", "agent");
+  return explicit ?? process.env.PI_CODING_AGENT_DIR ?? join7(home, ".pi", "agent");
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile2(join8(agentDir, "auth.json"), "utf8");
+    const raw = await readFile2(join7(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (isEnoent(error)) return { "openai-codex": false, xai: false };
@@ -16410,15 +16466,15 @@ var init_config2 = __esm({
 
 // src/public-cli/host-providers.ts
 import { readFileSync } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 function hostProvidersPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join9(home, ".ak-roles", "host-providers.json");
+  return join8(home, ".ak-roles", "host-providers.json");
 }
 function hermesProviderModelsCachePath(home) {
-  return join9(home, ".hermes", "provider_models_cache.json");
+  return join8(home, ".hermes", "provider_models_cache.json");
 }
 function parseHostProvidersTable(value) {
   if (!isRecord(value)) {
@@ -16592,16 +16648,16 @@ var init_cli_errors = __esm({
 // src/public-cli/machine-method-skills.ts
 import { accessSync, constants, statSync as statSync2 } from "node:fs";
 import { lstat, mkdir as mkdir2, symlink } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join9 } from "node:path";
 import { spawnSync } from "node:child_process";
 function skillRoot(home) {
-  return join10(home, ".agents/skills");
+  return join9(home, ".agents/skills");
 }
 function installedMethodSkillPath(home, name) {
   return installedSkillPath(skillRoot(home), name);
 }
 function installedSkillPath(root, name) {
-  const path = join10(root, name, "SKILL.md");
+  const path = join9(root, name, "SKILL.md");
   try {
     if (!statSync2(path).isFile()) return void 0;
     accessSync(path, constants.R_OK);
@@ -16614,9 +16670,9 @@ function installedSkillPath(root, name) {
 }
 function linkedSkillRoot(home, host) {
   if (host === "claude" || host === "claude-code") {
-    return join10(process.env.CLAUDE_CONFIG_DIR?.trim() || join10(home, ".claude"), "skills");
+    return join9(process.env.CLAUDE_CONFIG_DIR?.trim() || join9(home, ".claude"), "skills");
   }
-  if (host === "hermes") return join10(home, ".hermes/skills");
+  if (host === "hermes") return join9(home, ".hermes/skills");
   return void 0;
 }
 async function occupied(path) {
@@ -16673,7 +16729,7 @@ async function runMachineSkillSetup(home, stdout) {
   const missingBySource = /* @__PURE__ */ new Map();
   let unsourced = false;
   for (const name of packagedMethodSkillNames()) {
-    const path = join10(canonical, name);
+    const path = join9(canonical, name);
     if (await occupied(path)) {
       warnOccupied(path, stdout);
       continue;
@@ -16703,9 +16759,9 @@ async function runMachineSkillSetup(home, stdout) {
       throw error;
     }
     for (const name of packagedMethodSkillNames()) {
-      const target = join10(canonical, name);
+      const target = join9(canonical, name);
       if (installedMethodSkillPath(home, name) === void 0) continue;
-      const link = join10(root, name);
+      const link = join9(root, name);
       if (await occupied(link)) {
         warnOccupied(link, stdout);
         continue;
@@ -16768,10 +16824,9 @@ function parseCollectorRepository(raw) {
   return { display: raw, canonical: `${owner}/${repo}`, owner, repo };
 }
 function parseCollectorPrNumber(raw) {
-  if (typeof raw === "string" && !/^[1-9][0-9]*$/.test(raw)) fail3("Collector pull request number must be a positive safe integer string");
   if (typeof raw !== "string" && typeof raw !== "number") fail3("Collector pull request number is required");
-  const value = Number(raw);
-  if (!Number.isSafeInteger(value) || value < 1) fail3("Collector pull request number must be a positive safe integer");
+  const value = parseTicketNumber(raw);
+  if (value === void 0) fail3(typeof raw === "string" && !isTicketNumberString(raw) ? "Collector pull request number must be a positive safe integer string" : "Collector pull request number must be a positive safe integer");
   return value;
 }
 function canonicalManifest(requests) {
@@ -16815,17 +16870,18 @@ var init_collector_config = __esm({
     "use strict";
     init_sha256();
     init_unknown_value();
+    init_run_ticket_number();
     COLLECTOR_OWNER_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
     COLLECTOR_REPO_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,98}[A-Za-z0-9])?$/;
   }
 });
 
 // src/auditor-dossier-tool.ts
-import { dirname as dirname5, join as join11, resolve as resolve3 } from "node:path";
+import { join as join10, resolve as resolve3 } from "node:path";
 function auditorRunDirectory(context) {
   const sessionFile = context.sessionManager?.getSessionFile?.();
   if (sessionFile === void 0) return void 0;
-  return resolve3(dirname5(dirname5(sessionFile)));
+  return resolve3(runDirectoryOfSessionFile(sessionFile));
 }
 var init_auditor_dossier_tool = __esm({
   "src/auditor-dossier-tool.ts"() {
@@ -17128,17 +17184,6 @@ function formatTerminalResult(result) {
   for (const artifact of result.artifacts) {
     lines.push(`artifact	${artifact.kind}	${encodeTerminalField(artifact.path)}`);
   }
-  if (result.gate !== void 0) {
-    lines.push(
-      `gate	${encodeTerminalField(result.gate.actualSeats.join(","))}	${result.gate.rounds.length}`
-    );
-    for (const round of result.gate.rounds) {
-      const reason = round.dispatch.kind === "historical_dispatch" && round.dispatch.reason !== void 0 ? encodeTerminalField(round.dispatch.reason) : "";
-      lines.push(
-        `gate-round	${round.roundIndex}	${round.dispatch.kind}	${round.dispatch.officer}	${reason}	${round.officer.seat}	${encodeTerminalField(round.officer.status)}	${encodeTerminalField(JSON.stringify(round.officer.findings))}`
-      );
-    }
-  }
   if (result.reviewerChildOutcomes !== void 0) {
     for (const axis of ["completeness", "correctness"]) {
       const child = result.reviewerChildOutcomes[axis];
@@ -17192,7 +17237,7 @@ __export(run_terminal_artifacts_exports, {
 });
 import { randomUUID } from "node:crypto";
 import { readdir as readdir2, readFile as readFile4 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname6, join as join12 } from "node:path";
+import { basename as basename4, dirname as dirname6, join as join11 } from "node:path";
 function uniqueErrorFallbackName() {
   return `${UNIQUE_ERROR_FALLBACK_STEM}.${randomUUID()}.json`;
 }
@@ -17261,16 +17306,13 @@ async function listUniqueErrorFallbackPaths(directories) {
     }
     for (const name of names.sort((a, b) => a.localeCompare(b))) {
       if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join12(dir, name));
+      found.push(join11(dir, name));
     }
   }
   return found;
 }
 function runIdFromRunDirectory(runDirectory) {
-  const name = basename3(runDirectory);
-  const at = name.lastIndexOf("@");
-  if (at <= 0 || at === name.length - 1) return void 0;
-  return name.slice(0, at);
+  return parseRunLeaf(basename4(runDirectory))?.runId;
 }
 function presentUniqueFallbackBoundToRun(body, expectedRunId) {
   if (expectedRunId === void 0) return false;
@@ -17307,11 +17349,11 @@ async function readRunTerminalArtifact(runDirectory) {
     unreadable.push(read);
   };
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    consider(await readTerminalArtifactAtPath(join12(artifactsDir, file), file));
+    consider(await readTerminalArtifactAtPath(join11(artifactsDir, file), file));
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
     consider(
-      await readTerminalArtifactAtPath(join12(runDirectory, relative3), "error.json")
+      await readTerminalArtifactAtPath(join11(runDirectory, relative3), "error.json")
     );
   }
   for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
@@ -17750,6 +17792,204 @@ var init_receipt_delivery_policy = __esm({
   }
 });
 
+// src/ledger-session-read.ts
+import { readFile as readFile5 } from "node:fs/promises";
+async function readStrictPiSessionJsonl(path) {
+  const text = await readFile5(path, "utf8");
+  return text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
+}
+async function readLedgerSessionJsonlLines(path) {
+  const text = await readFile5(path, "utf8");
+  const lines = text.split("\n");
+  const out = [];
+  for (let index = 0; index < lines.length; index += 1) {
+    const raw = lines[index];
+    if (!raw.trim()) continue;
+    const lineNumber = index + 1;
+    let row;
+    try {
+      row = JSON.parse(raw);
+    } catch (error) {
+      if (!(error instanceof SyntaxError)) throw error;
+      const completedByTerminator = index < lines.length - 1;
+      if (!completedByTerminator) break;
+      out.push({
+        line: lineNumber,
+        raw,
+        error: `malformed JSONL record in ${path} at line ${lineNumber}: ${error.message}`
+      });
+      continue;
+    }
+    if (!isRecord(row)) {
+      const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
+      out.push({
+        line: lineNumber,
+        raw,
+        error: `complete non-object JSONL record in ${path} at line ${lineNumber}: expected object, got ${kind}`
+      });
+      continue;
+    }
+    out.push({ line: lineNumber, raw, row });
+  }
+  return out;
+}
+async function readLedgerSessionJsonl(path) {
+  const rows = [];
+  for (const line2 of await readLedgerSessionJsonlLines(path)) {
+    if (line2.row === void 0) {
+      throw new LedgerSessionJsonlError(line2.error ?? `unreadable JSONL record in ${path} at line ${line2.line}`, {
+        path,
+        line: line2.line,
+        prefixRows: rows
+      });
+    }
+    rows.push(line2.row);
+  }
+  return rows;
+}
+function extractSessionTimestampSpan(rows) {
+  let startedAt;
+  let endedAt;
+  for (const row of rows) {
+    if (typeof row.timestamp !== "string" || !row.timestamp) continue;
+    if (startedAt === void 0) startedAt = row.timestamp;
+    endedAt = row.timestamp;
+  }
+  return {
+    ...startedAt !== void 0 ? { startedAt } : {},
+    ...endedAt !== void 0 ? { endedAt } : {}
+  };
+}
+function extractSessionModelSequence(rows) {
+  const seen = /* @__PURE__ */ new Set();
+  const ordered = [];
+  const push = (raw) => {
+    const model = raw.trim();
+    if (model === "" || seen.has(model)) return;
+    seen.add(model);
+    ordered.push(model);
+  };
+  for (const row of rows) {
+    if (row.type === "model_change" && typeof row.modelId === "string") {
+      push(row.modelId);
+    }
+    const message = isRecord(row.message) ? row.message : void 0;
+    if (message?.role === "assistant" && typeof message.model === "string") {
+      push(message.model);
+    }
+  }
+  return ordered;
+}
+function bashCommandFirstLine(command) {
+  const match = /^[^\r\n]*/.exec(command);
+  return match?.[0] ?? "";
+}
+function extractSessionToolIntervals(rows) {
+  const order = [];
+  const openById = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
+    const message = isRecord(row.message) ? row.message : void 0;
+    if (message?.role === "assistant" && Array.isArray(message.content)) {
+      const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
+      for (const part of message.content) {
+        if (!isRecord(part) || part.type !== "toolCall") continue;
+        if (typeof part.id !== "string" || part.id.length === 0) {
+          throw new Error("toolCall frame missing string id");
+        }
+        if (typeof part.name !== "string" || part.name.length === 0) {
+          throw new Error(`toolCall ${part.id} missing string name`);
+        }
+        if (callTimestamp === void 0 || callTimestamp.length === 0) {
+          throw new Error(`toolCall ${part.id} missing timestamp`);
+        }
+        if (openById.has(part.id)) {
+          throw new Error(`duplicate toolCall id ${part.id}`);
+        }
+        const args = isRecord(part.arguments) ? part.arguments : void 0;
+        const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
+        const interval = {
+          toolCallId: part.id,
+          toolName: part.name,
+          startedAt: callTimestamp,
+          ...command !== void 0 ? { command } : {}
+        };
+        order.push(interval);
+        openById.set(part.id, interval);
+      }
+    }
+    if (message?.role === "toolResult") {
+      if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) {
+        throw new Error("toolResult frame missing string toolCallId");
+      }
+      const resultTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
+      if (resultTimestamp === void 0 || resultTimestamp.length === 0) {
+        throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
+      }
+      const open4 = openById.get(message.toolCallId);
+      if (open4 === void 0) {
+        const toolName = typeof message.toolName === "string" && message.toolName.length > 0 ? message.toolName : "unknown";
+        order.push({
+          toolCallId: message.toolCallId,
+          toolName,
+          startedAt: resultTimestamp,
+          endedAt: resultTimestamp
+        });
+        continue;
+      }
+      if (open4.endedAt !== void 0) {
+        throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
+      }
+      open4.endedAt = resultTimestamp;
+    }
+  }
+  return order.map((interval) => {
+    const base = {
+      toolCallId: interval.toolCallId,
+      toolName: interval.toolName,
+      startedAt: interval.startedAt,
+      ...interval.command !== void 0 ? { command: interval.command } : {}
+    };
+    return interval.endedAt === void 0 ? base : { ...base, endedAt: interval.endedAt };
+  });
+}
+function intervalRowsAroundAnchor(rows, anchorIndex, isBindingRow) {
+  let start = 0;
+  for (let i = anchorIndex; i >= 0; i -= 1) {
+    if (isBindingRow(rows[i])) {
+      start = i;
+      break;
+    }
+  }
+  let end = rows.length;
+  for (let i = Math.max(anchorIndex, start) + 1; i < rows.length; i += 1) {
+    if (isBindingRow(rows[i])) {
+      end = i;
+      break;
+    }
+  }
+  return { rows: rows.slice(start, end), closed: end < rows.length };
+}
+var LedgerSessionJsonlError;
+var init_ledger_session_read = __esm({
+  "src/ledger-session-read.ts"() {
+    "use strict";
+    init_unknown_value();
+    LedgerSessionJsonlError = class extends Error {
+      path;
+      line;
+      prefixRows;
+      constructor(message, init) {
+        super(message);
+        this.name = "LedgerSessionJsonlError";
+        this.path = init.path;
+        this.line = init.line;
+        this.prefixRows = init.prefixRows;
+      }
+    };
+  }
+});
+
 // src/session-assistant-usage.ts
 var session_assistant_usage_exports = {};
 __export(session_assistant_usage_exports, {
@@ -17757,20 +17997,13 @@ __export(session_assistant_usage_exports, {
   sessionFileFromPublicSummon: () => sessionFileFromPublicSummon,
   usageFromPublicSummon: () => usageFromPublicSummon
 });
-import { join as join13 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile22 } = await import("node:fs/promises");
-  let text;
-  try {
-    text = await readFile22(sessionFile, "utf8");
-  } catch (error) {
-    if (error?.code === "ENOENT") return void 0;
-    throw error;
-  }
   let rows;
   try {
-    rows = text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
+    rows = await readStrictPiSessionJsonl(sessionFile);
   } catch (error) {
+    if (error?.code === "ENOENT") return void 0;
+    if (!(error instanceof SyntaxError)) throw error;
     throw new Error(
       `session usage parse failed (${sessionFile}): ${errorText(error)}`,
       { cause: error }
@@ -17827,16 +18060,16 @@ async function readAssistantUsageFromSessionFile(sessionFile) {
 }
 function sessionFileFromPublicSummon(summoned) {
   if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-    return join13(summoned.runDirectory, "session", "session.jsonl");
+    return sessionFileOf(summoned.runDirectory);
   }
-  const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
+  const fromArtifacts = summoned.terminal?.artifacts?.map((a) => a.path).find((p) => typeof p === "string" && p.endsWith(ROLE_RUN_SESSION_FILENAME));
   if (fromArtifacts !== void 0) return fromArtifacts;
   const outcome = summoned.terminal?.roleOutcome;
   if (outcome === void 0) return void 0;
   const facts = outcome.decisiveFacts;
   const pointer = facts?.runPointer;
   if (typeof pointer === "string" && pointer.trim() !== "") {
-    return join13(pointer, "session", "session.jsonl");
+    return sessionFileOf(pointer);
   }
   return void 0;
 }
@@ -17848,6 +18081,8 @@ async function usageFromPublicSummon(summoned) {
 var init_session_assistant_usage = __esm({
   "src/session-assistant-usage.ts"() {
     "use strict";
+    init_role_run_placement();
+    init_ledger_session_read();
     init_unknown_value();
   }
 });
@@ -18014,7 +18249,7 @@ var init_process_cancel = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { open } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { join as join12 } from "node:path";
 async function persistReturnedRunState(admitted) {
   await markRunTerminal(admitted.runDirectory);
 }
@@ -18058,7 +18293,7 @@ function jsonSafeReplacer() {
   };
 }
 async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
-  const filePath = join14(artifactsDir, `${namePrefix}-${randomUUID2()}.json`);
+  const filePath = join12(artifactsDir, `${namePrefix}-${randomUUID2()}.json`);
   const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}
 `;
   const noFollowFlag = typeof fsConstants.O_NOFOLLOW === "number" ? fsConstants.O_NOFOLLOW : 0;
@@ -18306,489 +18541,6 @@ var init_auto_resume = __esm({
   }
 });
 
-// src/ledger-session-read.ts
-import { readFile as readFile5 } from "node:fs/promises";
-async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile5(path, "utf8");
-  const lines = text.split("\n");
-  const out = [];
-  for (let index = 0; index < lines.length; index += 1) {
-    const raw = lines[index];
-    if (!raw.trim()) continue;
-    const lineNumber = index + 1;
-    let row;
-    try {
-      row = JSON.parse(raw);
-    } catch (error) {
-      if (!(error instanceof SyntaxError)) throw error;
-      const completedByTerminator = index < lines.length - 1;
-      if (!completedByTerminator) break;
-      out.push({
-        line: lineNumber,
-        raw,
-        error: `malformed JSONL record in ${path} at line ${lineNumber}: ${error.message}`
-      });
-      continue;
-    }
-    if (!isRecord(row)) {
-      const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
-      out.push({
-        line: lineNumber,
-        raw,
-        error: `complete non-object JSONL record in ${path} at line ${lineNumber}: expected object, got ${kind}`
-      });
-      continue;
-    }
-    out.push({ line: lineNumber, raw, row });
-  }
-  return out;
-}
-async function readLedgerSessionJsonl(path) {
-  const rows = [];
-  for (const line2 of await readLedgerSessionJsonlLines(path)) {
-    if (line2.row === void 0) {
-      throw new LedgerSessionJsonlError(line2.error ?? `unreadable JSONL record in ${path} at line ${line2.line}`, {
-        path,
-        line: line2.line,
-        prefixRows: rows
-      });
-    }
-    rows.push(line2.row);
-  }
-  return rows;
-}
-function extractSessionTimestampSpan(rows) {
-  let startedAt;
-  let endedAt;
-  for (const row of rows) {
-    if (typeof row.timestamp !== "string" || !row.timestamp) continue;
-    if (startedAt === void 0) startedAt = row.timestamp;
-    endedAt = row.timestamp;
-  }
-  return {
-    ...startedAt !== void 0 ? { startedAt } : {},
-    ...endedAt !== void 0 ? { endedAt } : {}
-  };
-}
-function extractSessionModelSequence(rows) {
-  const seen = /* @__PURE__ */ new Set();
-  const ordered = [];
-  const push = (raw) => {
-    const model = raw.trim();
-    if (model === "" || seen.has(model)) return;
-    seen.add(model);
-    ordered.push(model);
-  };
-  for (const row of rows) {
-    if (row.type === "model_change" && typeof row.modelId === "string") {
-      push(row.modelId);
-    }
-    const message = isRecord(row.message) ? row.message : void 0;
-    if (message?.role === "assistant" && typeof message.model === "string") {
-      push(message.model);
-    }
-  }
-  return ordered;
-}
-function bashCommandFirstLine(command) {
-  const match = /^[^\r\n]*/.exec(command);
-  return match?.[0] ?? "";
-}
-function extractSessionToolIntervals(rows) {
-  const order = [];
-  const openById = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
-    const message = isRecord(row.message) ? row.message : void 0;
-    if (message?.role === "assistant" && Array.isArray(message.content)) {
-      const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
-      for (const part of message.content) {
-        if (!isRecord(part) || part.type !== "toolCall") continue;
-        if (typeof part.id !== "string" || part.id.length === 0) {
-          throw new Error("toolCall frame missing string id");
-        }
-        if (typeof part.name !== "string" || part.name.length === 0) {
-          throw new Error(`toolCall ${part.id} missing string name`);
-        }
-        if (callTimestamp === void 0 || callTimestamp.length === 0) {
-          throw new Error(`toolCall ${part.id} missing timestamp`);
-        }
-        if (openById.has(part.id)) {
-          throw new Error(`duplicate toolCall id ${part.id}`);
-        }
-        const args = isRecord(part.arguments) ? part.arguments : void 0;
-        const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
-        const interval = {
-          toolCallId: part.id,
-          toolName: part.name,
-          startedAt: callTimestamp,
-          ...command !== void 0 ? { command } : {}
-        };
-        order.push(interval);
-        openById.set(part.id, interval);
-      }
-    }
-    if (message?.role === "toolResult") {
-      if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) {
-        throw new Error("toolResult frame missing string toolCallId");
-      }
-      const resultTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
-      if (resultTimestamp === void 0 || resultTimestamp.length === 0) {
-        throw new Error(`toolResult ${message.toolCallId} missing timestamp`);
-      }
-      const open4 = openById.get(message.toolCallId);
-      if (open4 === void 0) {
-        const toolName = typeof message.toolName === "string" && message.toolName.length > 0 ? message.toolName : "unknown";
-        order.push({
-          toolCallId: message.toolCallId,
-          toolName,
-          startedAt: resultTimestamp,
-          endedAt: resultTimestamp
-        });
-        continue;
-      }
-      if (open4.endedAt !== void 0) {
-        throw new Error(`duplicate toolResult for toolCallId ${message.toolCallId}`);
-      }
-      open4.endedAt = resultTimestamp;
-    }
-  }
-  return order.map((interval) => {
-    const base = {
-      toolCallId: interval.toolCallId,
-      toolName: interval.toolName,
-      startedAt: interval.startedAt,
-      ...interval.command !== void 0 ? { command: interval.command } : {}
-    };
-    return interval.endedAt === void 0 ? base : { ...base, endedAt: interval.endedAt };
-  });
-}
-function intervalRowsAroundAnchor(rows, anchorIndex, isBindingRow) {
-  let start = 0;
-  for (let i = anchorIndex; i >= 0; i -= 1) {
-    if (isBindingRow(rows[i])) {
-      start = i;
-      break;
-    }
-  }
-  let end = rows.length;
-  for (let i = Math.max(anchorIndex, start) + 1; i < rows.length; i += 1) {
-    if (isBindingRow(rows[i])) {
-      end = i;
-      break;
-    }
-  }
-  return { rows: rows.slice(start, end), closed: end < rows.length };
-}
-var LedgerSessionJsonlError;
-var init_ledger_session_read = __esm({
-  "src/ledger-session-read.ts"() {
-    "use strict";
-    init_unknown_value();
-    LedgerSessionJsonlError = class extends Error {
-      path;
-      line;
-      prefixRows;
-      constructor(message, init) {
-        super(message);
-        this.name = "LedgerSessionJsonlError";
-        this.path = init.path;
-        this.line = init.line;
-        this.prefixRows = init.prefixRows;
-      }
-    };
-  }
-});
-
-// src/analyst-gate-cycles-read.ts
-import { readdir as readdir3 } from "node:fs/promises";
-import { join as join15 } from "node:path";
-function isParentAttemptBindingRow(row) {
-  return row.type === "custom" && row.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE;
-}
-function intervalRowsForGateCall(rows, callRowIndex) {
-  return intervalRowsAroundAnchor(rows, callRowIndex, isParentAttemptBindingRow).rows;
-}
-function normalizeOfficerArg(raw) {
-  if (typeof raw !== "string") return void 0;
-  return OFFICER_ARG_ALIASES[raw.trim()];
-}
-function asFindings(value) {
-  return Array.isArray(value) ? value : [];
-}
-function optionalDispatchReason(raw) {
-  if (typeof raw !== "string") return void 0;
-  if (raw.trim() === "") return void 0;
-  return raw;
-}
-function isGateTerminatingToolName(toolName) {
-  return toolName === "ak_submission_output" || DISPATCH_TOOLS.has(toolName) || OFFICER_TOOL_TO_FACE[toolName] !== void 0;
-}
-function acceptedGateReceiptIds(rows) {
-  const accepted = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    const message = isRecord(row.message) ? row.message : void 0;
-    if (message?.role !== "toolResult") continue;
-    if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
-    if (message.isError === false) accepted.add(message.toolCallId);
-  }
-  return accepted;
-}
-function readAcceptedGateStatus(args) {
-  if (args === void 0) return "";
-  return typeof args.status === "string" ? args.status : args.status === void 0 ? "" : String(args.status);
-}
-function requireAcceptedGateSpan(rows, filePath) {
-  const span = extractSessionTimestampSpan(rows);
-  if (span.startedAt === void 0 || span.endedAt === void 0) {
-    throw new Error(
-      `accepted gate volume missing session timestamp span in ${filePath}`
-    );
-  }
-  const startedMs = Date.parse(span.startedAt);
-  const endedMs = Date.parse(span.endedAt);
-  if (!Number.isFinite(startedMs) || !Number.isFinite(endedMs) || endedMs < startedMs) {
-    throw new Error(
-      `accepted gate volume has unusable timestamp span in ${filePath}`
-    );
-  }
-  return {
-    startedAt: span.startedAt,
-    endedAt: span.endedAt,
-    wallMs: endedMs - startedMs
-  };
-}
-function nearestAttemptBindingBefore(rows, beforeIndex) {
-  for (let i = beforeIndex - 1; i >= 0; i -= 1) {
-    const row = rows[i];
-    if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord(row.data) || !isRecord(row.data.parent)) continue;
-    const id = row.data.parent.attemptEntryId;
-    const sessionFile = row.data.parent.sessionFile;
-    return {
-      ...typeof id === "string" && id.length > 0 ? { attemptEntryId: id } : {},
-      ...typeof sessionFile === "string" && sessionFile.length > 0 ? { parentSessionFile: sessionFile } : {}
-    };
-  }
-  return {};
-}
-function extractAllAcceptedGateToolCalls(rows) {
-  const acceptedIds = acceptedGateReceiptIds(rows);
-  const out = [];
-  for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
-    const row = rows[rowIndex];
-    const message = isRecord(row.message) ? row.message : void 0;
-    if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
-    for (const part of message.content) {
-      if (!isRecord(part) || part.type !== "toolCall") continue;
-      if (typeof part.id !== "string" || part.id.length === 0) continue;
-      if (typeof part.name !== "string" || part.name.length === 0) continue;
-      if (!isGateTerminatingToolName(part.name)) continue;
-      if (!acceptedIds.has(part.id)) continue;
-      const binding = nearestAttemptBindingBefore(rows, rowIndex);
-      out.push({
-        toolName: part.name,
-        args: isRecord(part.arguments) ? part.arguments : void 0,
-        accepted: true,
-        rowIndex,
-        ...binding
-      });
-    }
-  }
-  return out;
-}
-function projectAcceptedGateCall(filePath, rows, call, pointerOfficer) {
-  const span = requireAcceptedGateSpan(intervalRowsForGateCall(rows, call.rowIndex), filePath);
-  const status = readAcceptedGateStatus(call.args);
-  const findings = asFindings(call.args?.findings);
-  const findingsCount = findings.length;
-  const bindingFields = {
-    ...call.attemptEntryId === void 0 ? {} : { attemptEntryId: call.attemptEntryId },
-    ...call.parentSessionFile === void 0 ? {} : { parentSessionFile: call.parentSessionFile }
-  };
-  if (DISPATCH_TOOLS.has(call.toolName)) {
-    if (status !== "dispatch") {
-      return void 0;
-    }
-    const officer2 = normalizeOfficerArg(call.args?.officer);
-    if (officer2 === void 0) {
-      return void 0;
-    }
-    const reason = optionalDispatchReason(call.args?.reason);
-    return {
-      kind: "dispatch",
-      startedAt: span.startedAt,
-      officer: officer2,
-      status,
-      ...reason === void 0 ? {} : { reason },
-      ...bindingFields
-    };
-  }
-  const officer = call.toolName === "ak_submission_output" ? pointerOfficer : OFFICER_TOOL_TO_FACE[call.toolName];
-  if (officer === void 0) {
-    throw new Error(
-      `accepted gate receipt has unknown officer tool ${call.toolName} in ${filePath}`
-    );
-  }
-  return {
-    kind: "officer",
-    startedAt: span.startedAt,
-    endedAt: span.endedAt,
-    officer,
-    status,
-    findings,
-    findingsCount,
-    officerWallMs: span.wallMs,
-    ...bindingFields
-  };
-}
-async function classifyAuditorVolume(filePath, pointerOfficer) {
-  const rows = await readLedgerSessionJsonl(filePath);
-  const accepted = extractAllAcceptedGateToolCalls(rows);
-  if (accepted.length === 0) return [];
-  const volumes = [];
-  for (const call of accepted) {
-    const projected = call.toolName === "ak_submission_output" && pointerOfficer === void 0 ? void 0 : projectAcceptedGateCall(filePath, rows, call, pointerOfficer);
-    if (projected !== void 0) volumes.push(projected);
-  }
-  return volumes;
-}
-function pairGateRounds(volumes) {
-  const ordered = [...volumes].sort((a, b) => {
-    if (a.startedAt !== b.startedAt) return a.startedAt.localeCompare(b.startedAt);
-    if (a.kind !== b.kind) return a.kind === "dispatch" ? -1 : 1;
-    return 0;
-  });
-  const usedOfficerIdx = /* @__PURE__ */ new Set();
-  const rounds = [];
-  for (let i = 0; i < ordered.length; i += 1) {
-    const vol = ordered[i];
-    if (vol.kind !== "dispatch") continue;
-    let match;
-    for (let j = i + 1; j < ordered.length; j += 1) {
-      if (usedOfficerIdx.has(j)) continue;
-      const candidate = ordered[j];
-      if (candidate.kind !== "officer") continue;
-      if (candidate.officer !== vol.officer) continue;
-      if (vol.attemptEntryId === void 0 || candidate.attemptEntryId === void 0 || candidate.attemptEntryId !== vol.attemptEntryId) {
-        continue;
-      }
-      match = { index: j, officer: candidate };
-      break;
-    }
-    if (match === void 0) continue;
-    usedOfficerIdx.add(match.index);
-    rounds.push({
-      roundIndex: rounds.length + 1,
-      officer: match.officer.officer,
-      status: match.officer.status,
-      officerWallMs: match.officer.officerWallMs,
-      officerStartedAt: match.officer.startedAt,
-      officerEndedAt: match.officer.endedAt,
-      findings: match.officer.findings,
-      findingsCount: match.officer.findingsCount,
-      origin: {
-        kind: "historical_dispatch",
-        ...vol.reason === void 0 ? {} : { reason: vol.reason }
-      }
-    });
-  }
-  for (let i = 0; i < ordered.length; i += 1) {
-    const vol = ordered[i];
-    if (vol.kind !== "officer" || usedOfficerIdx.has(i)) continue;
-    rounds.push({
-      roundIndex: 0,
-      officer: vol.officer,
-      status: vol.status,
-      officerWallMs: vol.officerWallMs,
-      officerStartedAt: vol.startedAt,
-      officerEndedAt: vol.endedAt,
-      findings: vol.findings,
-      findingsCount: vol.findingsCount,
-      origin: { kind: "direct" }
-    });
-  }
-  return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
-}
-async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile22 } = await import("node:fs/promises");
-  let raw;
-  try {
-    raw = JSON.parse(await readFile22(pointerPath, "utf8"));
-  } catch (error) {
-    throw new Error(
-      `direct officer run pointer unreadable in ${pointerPath}: ${errorText(error)}`,
-      { cause: error }
-    );
-  }
-  if (!isRecord(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
-    throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
-  }
-  const sessionFile = raw.sessionFile;
-  if (typeof sessionFile !== "string" || sessionFile.trim() === "") {
-    throw new Error(`direct officer run pointer missing sessionFile in ${pointerPath}`);
-  }
-  const officer = raw.officer === "inspector" || raw.officer === "notary" ? raw.officer : void 0;
-  return { sessionFile, ...officer === void 0 ? {} : { officer } };
-}
-async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, options = {}) {
-  const directories = typeof auditorRolesDirectory === "string" ? [auditorRolesDirectory] : auditorRolesDirectory;
-  const volumes = [];
-  const classifiedOfficerSessions = /* @__PURE__ */ new Set();
-  for (const directory of directories) {
-    let names;
-    try {
-      const entries = await readdir3(directory, { withFileTypes: true });
-      names = entries.filter(
-        (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
-      ).map((e) => e.name).sort();
-    } catch (error) {
-      if (isEnoent(error)) continue;
-      throw error;
-    }
-    for (const name of names) {
-      const path = join15(directory, name);
-      const fromPointer = name.endsWith(".pointer.json");
-      const pointer = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : void 0;
-      const sessionPath = pointer?.sessionFile ?? path;
-      if (fromPointer) {
-        if (classifiedOfficerSessions.has(sessionPath)) continue;
-        classifiedOfficerSessions.add(sessionPath);
-      }
-      const classified = await classifyAuditorVolume(sessionPath, pointer?.officer);
-      for (const volume of classified) {
-        if (options.parentSessionFile !== void 0 && volume.parentSessionFile !== void 0 && volume.parentSessionFile !== options.parentSessionFile) {
-          continue;
-        }
-        volumes.push(volume);
-      }
-    }
-  }
-  return pairGateRounds(volumes);
-}
-var DISPATCH_TOOLS, OFFICER_TOOL_TO_FACE, OFFICER_ARG_ALIASES;
-var init_analyst_gate_cycles_read = __esm({
-  "src/analyst-gate-cycles-read.ts"() {
-    "use strict";
-    init_compliance_transport();
-    init_ledger_session_read();
-    init_unknown_value();
-    DISPATCH_TOOLS = /* @__PURE__ */ new Set(["ak_menxia_output", "ak_gatekeeper_output"]);
-    OFFICER_TOOL_TO_FACE = {
-      ak_jishizhong_output: "inspector",
-      ak_inspector_output: "inspector",
-      ak_fubaolang_output: "notary",
-      ak_notary_output: "notary"
-    };
-    OFFICER_ARG_ALIASES = {
-      jishizhong: "inspector",
-      inspector: "inspector",
-      fubaolang: "notary",
-      notary: "notary"
-    };
-  }
-});
-
 // src/sitian-contracts.ts
 function attachDirectErrnoCode(error, cause) {
   if (cause === null || typeof cause !== "object" || !("code" in cause)) return;
@@ -18813,7 +18565,7 @@ var init_sitian_contracts = __esm({
 // src/sitian-appender.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { appendFileSync } from "node:fs";
-import { dirname as dirname7, join as join16 } from "node:path";
+import { dirname as dirname7, join as join13 } from "node:path";
 function appendSitianRecordBlock(input, block) {
   if (block === "") return;
   try {
@@ -18834,13 +18586,22 @@ function resolveSitianVolumeCategory(kind) {
   }
   return kind;
 }
+function sitianVolumeDirectory(sessionDirectory, category) {
+  return join13(sessionDirectory, category);
+}
+function sitianRunVolumeDirectory(runDirectory, category) {
+  return sitianVolumeDirectory(sessionDirectoryOf(runDirectory), category);
+}
+function sitianVolumeRecordsFile(volumeDirectory) {
+  return join13(volumeDirectory, SITIAN_RECORDS_LEAF);
+}
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
-  const sessionDir = join16(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join16(sessionDir, SITIAN_RECORDS_LEAF) };
+  const sessionDir = join13(activationBookDirectory(ledgerHome, bookKey), ticketId);
+  return { sessionDir, recordFile: sitianVolumeRecordsFile(sessionDir) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
-  const ticketNumber = category === "ticket-provenance" ? typeof input.subject === "string" && /^[1-9][0-9]*$/.test(input.subject) ? input.subject : typeof input.subject === "object" && typeof input.subject.ticketNumber === "number" && Number.isSafeInteger(input.subject.ticketNumber) && input.subject.ticketNumber > 0 ? String(input.subject.ticketNumber) : void 0 : void 0;
+  const ticketNumber = category === "ticket-provenance" ? ticketNumberFromSitianSubject(input.subject) : void 0;
   let sessionDir;
   let recordFile;
   if (ticketNumber !== void 0) {
@@ -18853,13 +18614,13 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     recordFile = paths.recordFile;
   } else if (category === "ticket-provenance" && input.runDirectory !== void 0) {
     sessionDir = input.runDirectory;
-    recordFile = join16(sessionDir, SITIAN_RECORDS_LEAF);
+    recordFile = sitianVolumeRecordsFile(sessionDir);
   } else {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join16(dirname7(input.sessionParent), category);
-    recordFile = join16(sessionDir, SITIAN_RECORDS_LEAF);
+    sessionDir = sitianVolumeDirectory(dirname7(input.sessionParent), category);
+    recordFile = sitianVolumeRecordsFile(sessionDir);
   }
   if (!physicallyContainedIn(ledgerHome, sessionDir)) {
     throw new Error("Sitian record ownership requires a directory inside the ledger home");
@@ -18911,6 +18672,8 @@ var S4_SUBMISSION_LEDGER_KINDS, SITIAN_RECORDS_LEAF;
 var init_sitian_appender = __esm({
   "src/sitian-appender.ts"() {
     "use strict";
+    init_role_run_placement();
+    init_run_ticket_number();
     init_activation_ledger_git();
     init_activation_ledger_topology();
     init_sitian_contracts();
@@ -18999,14 +18762,13 @@ var init_submission_correctable_error = __esm({
 });
 
 // src/submission-ledger.ts
-import { join as join17 } from "node:path";
 async function submissionRecordFile(cwd, runId, scope) {
   const ledgerHome = resolveActivationLedgerHome(scope.home);
   let sessionParent = scope.sessionParent;
   if (sessionParent === void 0) {
     const discoveredRun = await findRunDirectoryById(scope.home, runId);
     if (discoveredRun === void 0) return void 0;
-    sessionParent = join17(discoveredRun, "session", "session.jsonl");
+    sessionParent = sessionFileOf(discoveredRun);
   }
   return resolveSitianRecordPathInLedger({
     level: "event",
@@ -19156,6 +18918,7 @@ async function readRecordedSubmissions(cwd, runId, homeOrScope) {
 var init_submission_ledger = __esm({
   "src/submission-ledger.ts"() {
     "use strict";
+    init_role_run_placement();
     init_activation_ledger_topology();
     init_host_contracts();
     init_run_terminal_artifacts();
@@ -19171,7 +18934,7 @@ var init_submission_ledger = __esm({
 // src/engine-detour-usage.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { readFileSync as readFileSync2 } from "node:fs";
-import { dirname as dirname8, join as join18 } from "node:path";
+import { join as join14 } from "node:path";
 function callFactFromSitianPayload(payload, pointer) {
   if (!isRecord(payload)) return void 0;
   if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
@@ -19235,7 +18998,7 @@ async function readEngineDetourToolUsage(input) {
 function readInvocationRecord(runDirectory) {
   try {
     const raw = JSON.parse(
-      readFileSync2(join18(runDirectory, "invocation.json"), "utf8")
+      readFileSync2(join14(runDirectory, "invocation.json"), "utf8")
     );
     return isRecord(raw) ? raw : void 0;
   } catch (error) {
@@ -19259,12 +19022,6 @@ function withEngineDetourToolUsageFact(outcome, usage) {
     }
   };
 }
-function runDirectoryFromSessionDirectory(sessionDirectory) {
-  return dirname8(sessionDirectory);
-}
-function sessionFileFromSessionDirectory(sessionDirectory) {
-  return join18(sessionDirectory, "session.jsonl");
-}
 function mintEngineDetourInvocationScope(_input) {
   return randomUUID4();
 }
@@ -19281,12 +19038,16 @@ var ENGINE_DETOUR_CALL_KIND, ENGINE_DETOUR_TOOL_USAGE_FACT_KEY, ENGINE_DETOUR_CA
 var init_engine_detour_usage = __esm({
   "src/engine-detour-usage.ts"() {
     "use strict";
+    init_role_run_placement();
     init_engine_detour();
+    init_sitian_appender();
     init_sitian_facade();
     init_unknown_value();
     ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
     ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
-    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = `session/${ENGINE_DETOUR_CALL_KIND}/records.jsonl`;
+    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = sitianVolumeRecordsFile(
+      sitianRunVolumeDirectory("", ENGINE_DETOUR_CALL_KIND)
+    );
   }
 });
 
@@ -19416,12 +19177,12 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir4, readFile as readFile7, realpath, stat } from "node:fs/promises";
-import { dirname as dirname9, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
+import { readdir as readdir3, readFile as readFile7, realpath, stat } from "node:fs/promises";
+import { dirname as dirname8, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
 async function discoverCaseFiles(root) {
   const found = [];
   async function walk(dir, depth) {
-    for (const item of await readdir4(dir, { withFileTypes: true })) {
+    for (const item of await readdir3(dir, { withFileTypes: true })) {
       const path = resolve5(dir, item.name);
       if (item.isDirectory()) {
         await walk(path, depth + 1);
@@ -19450,7 +19211,7 @@ async function stableRunsIdentity(root) {
     } catch (error) {
       if (!isMissingPathError(error)) throw error;
     }
-    const parent = dirname9(cursor);
+    const parent = dirname8(cursor);
     if (parent === cursor) return root;
     cursor = parent;
   }
@@ -19518,8 +19279,11 @@ function deriveSession(content, id) {
   const session = complete ? { source: id, startedAt, endedAt, wallMilliseconds: wall, completion: "accepted" } : { source: id, ...startedAt ? { startedAt } : {}, ...endedAt ? { endedAt } : {}, ...wall !== void 0 && wall >= 0 ? { wallMilliseconds: wall } : {}, completion: "incomplete", ...degradationReason ? { degradationReason } : {} };
   return { session, turns, calls, tokens, statuses, commits };
 }
-async function loadDoctorCase(runsPath) {
+async function loadDoctorCase(runsPath, projectRoot) {
   const root = await realpath(runsPath);
+  if (projectRoot !== void 0 && !physicallyContainedIn(projectRoot, root)) {
+    throw new Error("doctor --runs escapes the project root");
+  }
   const match = root.split(sep2).join("/").match(/\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/);
   if (!match) throw new Error("Doctor case must be an .ak-roles/books/<book>/<n>/runs directory");
   const evidence = [], sessions = [], statuses = [], commits = [];
@@ -19539,7 +19303,7 @@ async function loadDoctorCase(runsPath) {
     accumulate(calls, result.calls, id);
     accumulate(tokens, result.tokens, id);
   }
-  const runDirs = (await readdir4(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
+  const runDirs = (await readdir3(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
   const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
   const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
   const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
@@ -19550,6 +19314,7 @@ var init_doctor_evidence = __esm({
   "src/doctor-evidence.ts"() {
     "use strict";
     init_sha256();
+    init_activation_ledger_topology();
     init_terminating_tools();
     init_unknown_value();
   }
@@ -19709,7 +19474,6 @@ var init_session_dialogue = __esm({
 
 // src/ticket-provenance.ts
 import { readFile as readFile9, unlink } from "node:fs/promises";
-import { basename as basename4, dirname as dirname10, join as join19, resolve as resolve7 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!isSafePositiveTicketNumber(ticketNumber)) {
     throw new Error(
@@ -19729,7 +19493,7 @@ function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
   };
 }
 async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
-  const source = join19(runDirectory, "records.jsonl");
+  const source = sitianVolumeRecordsFile(runDirectory);
   let content;
   try {
     content = await readFile9(source, "utf8");
@@ -19746,6 +19510,8 @@ var init_ticket_provenance = __esm({
     init_activation_ledger_topology();
     init_ledger_session_read();
     init_run_ticket_number();
+    init_role_run_placement();
+    init_sitian_appender();
     init_session_dialogue();
     init_sitian_facade();
     init_ticket_provenance_contracts();
@@ -19779,7 +19545,7 @@ var init_uuidv7 = __esm({
 });
 
 // src/notary-source-run.ts
-import { dirname as dirname11, isAbsolute as isAbsolute4, join as join20, resolve as resolve8, basename as basename5 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute4, join as join15, resolve as resolve7, basename as basename5 } from "node:path";
 import { lstat as lstat2, realpath as realpath2 } from "node:fs/promises";
 async function readRetainedIdentity(runDirectory) {
   try {
@@ -19791,11 +19557,6 @@ async function readRetainedIdentity(runDirectory) {
     });
   }
 }
-function parseRunDirectoryName(name) {
-  const match = RUN_DIR_NAME.exec(name);
-  if (match === null) return void 0;
-  return { runId: match[1], role: match[2] };
-}
 async function requireRunDirectory(candidate, display) {
   let real;
   try {
@@ -19820,7 +19581,7 @@ async function requireRunDirectory(candidate, display) {
       `notary --source-run must be a run directory: ${display}`
     );
   }
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunLeaf(basename5(real));
   if (identity === void 0) {
     throw new NotarySourceRunError(
       `notary --source-run must be named <runId>@<role>: ${basename5(real)}`
@@ -19836,16 +19597,16 @@ async function resolveNotarySourceRunLocator(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
   const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
-  const bookRunsRoot = join20(bookDirectory, "runs");
+  const bookRunsRoot = join15(bookDirectory, "runs");
   let candidate;
-  const bare = parseRunDirectoryName(raw);
+  const bare = parseRunLeaf(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join20(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join15(bookRunsRoot, formatRunLeaf(bare.runId, bare.role));
   } else {
-    candidate = isAbsolute4(raw) ? raw : resolve8(options.projectRoot, raw);
-    const identity2 = parseRunDirectoryName(basename5(candidate));
-    const subjectDirectory = dirname11(dirname11(candidate));
-    const isLegacyUnboundLocator = identity2 !== void 0 && basename5(dirname11(candidate)) === "runs" && basename5(subjectDirectory) === "unbound" && resolve8(dirname11(subjectDirectory)) === resolve8(bookDirectory);
+    candidate = isAbsolute4(raw) ? raw : resolve7(options.projectRoot, raw);
+    const identity2 = parseRunLeaf(basename5(candidate));
+    const subjectDirectory = dirname9(dirname9(candidate));
+    const isLegacyUnboundLocator = identity2 !== void 0 && basename5(dirname9(candidate)) === "runs" && basename5(subjectDirectory) === "unbound" && resolve7(dirname9(subjectDirectory)) === resolve7(bookDirectory);
     if (isLegacyUnboundLocator) {
       candidate = await findRunDirectoryById(
         options.home,
@@ -19856,11 +19617,11 @@ async function resolveNotarySourceRunLocator(options) {
     }
   }
   const real = await requireRunDirectory(candidate, raw);
-  const identity = parseRunDirectoryName(basename5(real));
+  const identity = parseRunLeaf(basename5(real));
   const bookIdentity = physicalPathIdentity(bookDirectory);
-  const parentIdentity = physicalPathIdentity(dirname11(real));
-  const subjectBookIdentity = physicalPathIdentity(dirname11(dirname11(dirname11(real))));
-  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename5(dirname11(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
+  const parentIdentity = physicalPathIdentity(dirname9(real));
+  const subjectBookIdentity = physicalPathIdentity(dirname9(dirname9(dirname9(real))));
+  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename5(dirname9(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
     throw new NotarySourceRunError(
       "notary --source-run must resolve to a retained run under the project machine-ledger book"
     );
@@ -19892,14 +19653,14 @@ async function resolveNotarySourceRunLocator(options) {
     role: identity.role
   };
 }
-var RUN_DIR_NAME, NotarySourceRunError;
+var NotarySourceRunError;
 var init_notary_source_run = __esm({
   "src/notary-source-run.ts"() {
     "use strict";
     init_activation_ledger_git();
     init_activation_ledger_topology();
     init_run_lifecycle();
-    RUN_DIR_NAME = /^([A-Za-z0-9][A-Za-z0-9._-]*)@([A-Za-z][A-Za-z0-9_-]*)$/;
+    init_role_run_placement();
     NotarySourceRunError = class extends Error {
       constructor(message, options) {
         super(message, options);
@@ -20956,7 +20717,7 @@ import {
   writeFile as writeFile2
 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute5, join as join21, resolve as resolve9, sep as sep3 } from "node:path";
+import { basename as basename6, dirname as dirname10, isAbsolute as isAbsolute5, join as join16, resolve as resolve8 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -21010,14 +20771,14 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile2(
-    join21(source.runDirectory, "invocation.json"),
+    join16(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  await updateDurableJsonPage(join21(runDirectory, "invocation.json"), (current) => {
+  await updateDurableJsonPage(join16(runDirectory, "invocation.json"), (current) => {
     const next = { ...current };
     if (model !== void 0) {
       next.provider = model.provider;
@@ -21052,7 +20813,7 @@ async function updateDurableJsonPage(path, update) {
 `, "utf8");
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  await updateDurableJsonPage(join21(runDirectory, "invocation.json"), (current) => ({
+  await updateDurableJsonPage(join16(runDirectory, "invocation.json"), (current) => ({
     ...current,
     ...fields
   }));
@@ -21111,14 +20872,14 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     runId: admitted.runId,
     role: admitted.role
   });
-  ensureRoleRunDirectory(ledgerHome, dirname12(target.runDirectory));
+  ensureRoleRunDirectory(ledgerHome, dirname10(target.runDirectory));
   const principal = authority.seal(target);
   if (admitted.role !== "diarist") {
     const parentPage = JSON.parse(await readFile10(admitted.admittedRequestPath, "utf8"));
     const childRunIds = parentPage.childDiaristRunIds;
     for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
       if (typeof childRunId !== "string") continue;
-      const childDirectory = join21(dirname12(oldRunDirectory), `${childRunId}@diarist`);
+      const childDirectory = join16(dirname10(oldRunDirectory), formatRunLeaf(childRunId, "diarist"));
       if (!existsSync5(childDirectory)) continue;
       const childTarget = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
@@ -21129,7 +20890,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
       authority.seal(childTarget);
       await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
       await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
-      ensureRoleRunDirectory(ledgerHome, dirname12(childTarget.runDirectory));
+      ensureRoleRunDirectory(ledgerHome, dirname10(childTarget.runDirectory));
       await rename(childDirectory, childTarget.runDirectory);
     }
   }
@@ -21175,7 +20936,7 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     ticketNumber,
     "bindTicketNumberOnRunDirectory"
   );
-  const admittedPath = join21(runDirectory, "admitted-request.json");
+  const admittedPath = join16(runDirectory, "admitted-request.json");
   let unchanged = false;
   await updateDurableJsonPage(admittedPath, (admitted) => {
     if (admitted.ticketNumber === ticketNumber) {
@@ -21196,7 +20957,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile10(join21(rolePackageRoot, "package.json"), "utf8")
+    await readFile10(join16(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -21218,6 +20979,11 @@ async function recordLaunchedRolePackageIdentity(runDirectory, identity) {
     entryMode: identity.entryMode
   });
 }
+function rejectUnlessTicketNumber(raw, message) {
+  const parsed = parseTicketNumber(raw.trim());
+  if (parsed === void 0) throw new CliUsageError(message);
+  return parsed;
+}
 function scanPublicArgv(args, options, handlers) {
   const tokens = [...args];
   while (tokens.length > 0) {
@@ -21459,7 +21225,7 @@ function requireAuthorityRef(value) {
   });
 }
 async function readRegularFileAttachment(sourcePath) {
-  const absolute = isAbsolute5(sourcePath) ? sourcePath : resolve9(sourcePath);
+  const absolute = isAbsolute5(sourcePath) ? sourcePath : resolve8(sourcePath);
   let st;
   try {
     st = await lstat3(absolute);
@@ -21488,13 +21254,13 @@ async function removePreparedAttachmentDirectory(stagingDirectory) {
 }
 async function withPreparedAttachments(attachmentPaths, use) {
   if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp(join21(tmpdir(), "ak-role-attachments-"));
+  const stagingDirectory = await mkdtemp(join16(tmpdir(), "ak-role-attachments-"));
   const prepared = [];
   let result;
   try {
     for (let index = 0; index < attachmentPaths.length; index += 1) {
       const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join21(stagingDirectory, String(index).padStart(6, "0"));
+      const snapshotPath = join16(stagingDirectory, String(index).padStart(6, "0"));
       await writeFile2(snapshotPath, bytes);
       prepared.push({ absolute, snapshotPath });
     }
@@ -21515,7 +21281,7 @@ async function withPreparedAttachments(attachmentPaths, use) {
   return result;
 }
 async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join21(
+  const frozenPath = join16(
     destinationDir,
     `${String(index).padStart(2, "0")}-${basename6(provenancePath)}`
   );
@@ -21558,14 +21324,14 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join21(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join16(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
 async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
   if (prepared.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join21(runDirectory, "attachments") : join21(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = summonsKey === void 0 ? join16(runDirectory, "attachments") : join16(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = [];
   for (let index = 0; index < prepared.length; index += 1) {
@@ -21642,7 +21408,7 @@ async function admitPublicRole(role, parsed, env, override) {
         attachmentPaths,
         ...project,
         placedFields: async (placed) => {
-          const taskPath = join21(placed.runDirectory, "task.md");
+          const taskPath = join16(placed.runDirectory, "task.md");
           await writeFile2(taskPath, instruction, "utf8");
           return { phase, taskPath };
         }
@@ -21659,7 +21425,7 @@ async function admitPublicRole(role, parsed, env, override) {
       let prerequisites = Object.freeze([]);
       let prerequisitesSource;
       if (parsed.prerequisitesPath !== void 0) {
-        const absolutePrereq = isAbsolute5(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve9(parsed.prerequisitesPath);
+        const absolutePrereq = isAbsolute5(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve8(parsed.prerequisitesPath);
         try {
           prerequisitesSource = await readFile10(absolutePrereq, "utf8");
         } catch (error) {
@@ -21685,7 +21451,7 @@ async function admitPublicRole(role, parsed, env, override) {
         placedFields: async (placed) => {
           let prerequisitesPath;
           if (prerequisitesSource !== void 0) {
-            prerequisitesPath = join21(placed.runDirectory, "prerequisites.json");
+            prerequisitesPath = join16(placed.runDirectory, "prerequisites.json");
             await writeFile2(
               prerequisitesPath,
               `${JSON.stringify(prerequisites, null, 2)}
@@ -21693,7 +21459,7 @@ async function admitPublicRole(role, parsed, env, override) {
               "utf8"
             );
           }
-          const packetPath = join21(placed.runDirectory, "fix-packet.md");
+          const packetPath = join16(placed.runDirectory, "fix-packet.md");
           await writeFile2(packetPath, instruction, "utf8");
           return {
             phase,
@@ -21706,7 +21472,7 @@ async function admitPublicRole(role, parsed, env, override) {
     }
     case "collect-target": {
       const explicitPrNumber = parsed.prNumber;
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let repository;
       if (parsed.repo !== void 0) {
         try {
@@ -21740,7 +21506,7 @@ async function admitPublicRole(role, parsed, env, override) {
         placedFields: async (placed) => {
           let requestManifestPath;
           if (manifestCanonicalJson !== void 0) {
-            requestManifestPath = join21(placed.runDirectory, "request-manifest.json");
+            requestManifestPath = join16(placed.runDirectory, "request-manifest.json");
             await writeFile2(requestManifestPath, manifestCanonicalJson, "utf8");
           }
           return {
@@ -21788,7 +21554,10 @@ async function admitPublicRole(role, parsed, env, override) {
           }
           let caseIdentity;
           try {
-            const patient = await loadDoctorCase(caseRunsPath);
+            const patient = await loadDoctorCase(
+              caseRunsPath,
+              parsed.runs === void 0 ? void 0 : placed.projectRoot
+            );
             if (patient.identity.issueNumber !== issueNumber) {
               throw new CliUsageError(
                 `doctor case issue ${patient.identity.issueNumber} does not match --issue ${issueNumber}`
@@ -21816,7 +21585,7 @@ async function admitPublicRole(role, parsed, env, override) {
       return { ...admittedDoctor, attachments: frozenAttachments };
     }
     case "source-locator": {
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let sourceRun = override?.resolvedSourceRun;
       if (sourceRun === void 0) {
         try {
@@ -21892,7 +21661,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (instruction.trim() === "") {
         throw new CliUsageError("merger requires a nonblank task instruction");
       }
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       const derived = await deriveMergerEnvelopeFromActiveMerge(
         projectRoot,
         createProductionMergerGitState(projectRoot)
@@ -21923,7 +21692,7 @@ async function admitPublicRole(role, parsed, env, override) {
             resolutionScope: [...derived.resolutionScope],
             authorizedChecks: []
           });
-          const mergerInputPath = join21(placed.runDirectory, "merger-input.json");
+          const mergerInputPath = join16(placed.runDirectory, "merger-input.json");
           await writeFile2(
             mergerInputPath,
             `${JSON.stringify(mergerInput, null, 2)}
@@ -21950,7 +21719,7 @@ function admissionSubject(ticketNumber) {
   return { ticketNumber: fields.ticketNumber };
 }
 async function placeRoleAdmission(options) {
-  const projectRoot = resolve9(options.project ?? options.cwd);
+  const projectRoot = resolve8(options.project ?? options.cwd);
   const runId = options.runId ?? (options.createRunId ?? uuidv7)();
   const ticketFields = ticketAdmissionFields(options.assertedTicketNumber);
   const {
@@ -21994,7 +21763,7 @@ function persistedAttachmentRefs(attachments) {
   }));
 }
 async function persistPlacedAdmission(admitted, placed, model) {
-  const admittedRequestPath = join21(placed.runDirectory, "admitted-request.json");
+  const admittedRequestPath = join16(placed.runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory: placed.sessionDirectory,
     sessionFile: placed.sessionFile
@@ -22047,7 +21816,7 @@ async function admitStandardMaterialInvocation(role, options) {
     attachments: persistedAttachmentRefs(placed.attachments),
     ...placed.ticketFields
   };
-  const admittedRequestPath = defer ? join21(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
+  const admittedRequestPath = defer ? join16(placed.runDirectory, "admitted-request.json") : await persistPlacedAdmission(admitted, placed, options.model);
   return {
     role,
     runId: placed.runId,
@@ -22125,7 +21894,7 @@ async function materializeCountersignInvocation(admitted, options) {
   });
   const placement = placed;
   admitted.runDirectory = placement.runDirectory;
-  admitted.admittedRequestPath = join21(
+  admitted.admittedRequestPath = join16(
     placement.runDirectory,
     "admitted-request.json"
   );
@@ -22211,17 +21980,14 @@ function isGitRemoteMissing(error) {
   return status === 2;
 }
 function parseDoctorIssueNumber(raw) {
-  const trimmed = raw.trim();
-  if (!DOCTOR_ISSUE_NUMBER_PATTERN.test(trimmed)) {
-    throw new CliUsageError(
-      `doctor --issue must be a positive integer, got ${raw}`
-    );
-  }
-  return Number(trimmed);
+  return rejectUnlessTicketNumber(
+    raw,
+    `doctor --issue must be a positive integer, got ${raw}`
+  );
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join21(
+  const defaultRuns = join16(
     activationBookDirectory(ledgerHome, options.bookKey),
     String(options.issueNumber),
     "runs"
@@ -22238,7 +22004,7 @@ async function resolveDoctorCaseRunsPath(options) {
       "doctor --runs must be a project-relative path"
     );
   }
-  const resolved = resolve9(options.projectRoot, raw);
+  const resolved = resolve8(options.projectRoot, raw);
   if (resolved !== options.projectRoot && !pathContainedIn(options.projectRoot, resolved)) {
     throw new CliUsageError(
       "doctor --runs escapes the project root"
@@ -22254,18 +22020,6 @@ async function resolveDoctorCaseRunsPath(options) {
       { cause: error }
     );
   }
-  const normalized = real.split(sep3).join("/");
-  const match = normalized.match(DOCTOR_CASE_RUNS_PATH_PATTERN);
-  if (!match) {
-    throw new CliUsageError(
-      "doctor --runs must be an .ak-roles/books/<book>/<n>/runs directory"
-    );
-  }
-  if (Number(match[1]) !== options.issueNumber) {
-    throw new CliUsageError(
-      `doctor --runs issue ${match[1]} does not match --issue ${options.issueNumber}`
-    );
-  }
   return real;
 }
 function buildReviewerSkillArgProjection(admitted) {
@@ -22294,19 +22048,10 @@ async function deriveMergerEnvelopeFromActiveMerge(projectRoot, gitState = creat
   });
 }
 function parseAnalystTicketNumber(raw, flag = "--ticket") {
-  const trimmed = raw.trim();
-  if (!ANALYST_TICKET_NUMBER_PATTERN.test(trimmed)) {
-    throw new CliUsageError(
-      `analyst ${flag} must be a positive integer, got ${raw}`
-    );
-  }
-  const value = Number(trimmed);
-  if (!Number.isSafeInteger(value) || value < 1) {
-    throw new CliUsageError(
-      `analyst ${flag} must be a positive integer, got ${raw}`
-    );
-  }
-  return value;
+  return rejectUnlessTicketNumber(
+    raw,
+    `analyst ${flag} must be a positive integer, got ${raw}`
+  );
 }
 function parseAnalystCohortIssueToken(raw, flag) {
   const trimmed = raw.trim();
@@ -22318,7 +22063,7 @@ function parseAnalystCohortIssueToken(raw, flag) {
   const sep5 = trimmed.lastIndexOf(":");
   if (sep5 > 0) {
     const rhs = trimmed.slice(sep5 + 1);
-    if (ANALYST_TICKET_NUMBER_PATTERN.test(rhs)) {
+    if (parseTicketNumber(rhs) !== void 0) {
       const bookKey = trimmed.slice(0, sep5);
       if (bookKey.trim() === "") {
         throw new CliUsageError(
@@ -22510,7 +22255,6 @@ function parseAnalystArgv(args) {
     ...ticketRaw === void 0 ? {} : { ticket: parseAnalystTicketNumber(ticketRaw) }
   };
 }
-var DOCTOR_ISSUE_NUMBER_PATTERN, DOCTOR_CASE_RUNS_PATH_PATTERN, ANALYST_TICKET_NUMBER_PATTERN;
 var init_invocation = __esm({
   "src/public-cli/invocation.ts"() {
     "use strict";
@@ -22535,9 +22279,6 @@ var init_invocation = __esm({
     init_cli_errors();
     init_option_definitions();
     init_unknown_value();
-    DOCTOR_ISSUE_NUMBER_PATTERN = /^[1-9]\d*$/;
-    DOCTOR_CASE_RUNS_PATH_PATTERN = /\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/;
-    ANALYST_TICKET_NUMBER_PATTERN = /^[1-9]\d*$/;
   }
 });
 
@@ -22661,14 +22402,13 @@ __export(settlement_exports, {
   LifecycleReadFailure: () => LifecycleReadFailure,
   NAVIGATOR_POST_ROLE_GRACE_MS: () => NAVIGATOR_POST_ROLE_GRACE_MS,
   appendRunAttemptHistory: () => appendRunAttemptHistory,
-  attachPostAuditProjection: () => attachPostAuditProjection,
+  attachPostAuditCountersignFact: () => attachPostAuditCountersignFact,
   attachRecordedSubmissions: () => attachRecordedSubmissions,
   classifyPostAdmissionFailure: () => classifyPostAdmissionFailure,
   conciseChildDiagnostic: () => conciseChildDiagnostic,
   ensureRealArtifactsDirectory: () => ensureRealArtifactsDirectory,
   exitCodeForTerminalOutcome: () => exitCodeForTerminalOutcome,
   explicitInternalKnownFailureClassificationInput: () => explicitInternalKnownFailureClassificationInput,
-  extractGateFactFromSessionDirectory: () => extractGateFactFromSessionDirectory,
   extractNavigatorFact: () => extractNavigatorFact,
   formatCliDiagnostic: () => formatCliDiagnostic,
   formatErrorCauseDetail: () => formatErrorCauseDetail,
@@ -22680,7 +22420,6 @@ __export(settlement_exports, {
   presentControlledFailure: () => presentControlledFailure,
   presentFailureTerminal: () => presentFailureTerminal,
   presentStructuralRejection: () => presentStructuralRejection,
-  projectTerminalGateFact: () => projectTerminalGateFact,
   projectThrownFailureLeaf: () => projectThrownFailureLeaf,
   publishFailureArtifacts: () => publishFailureArtifacts,
   raceNavigatorGrace: () => raceNavigatorGrace,
@@ -22693,8 +22432,8 @@ __export(settlement_exports, {
   withSubmissions: () => withSubmissions
 });
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { dirname as dirname13, join as join22 } from "node:path";
-import { lstat as lstat4, mkdir as mkdir3, readFile as readFile11, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname11, join as join17 } from "node:path";
+import { lstat as lstat4, mkdir as mkdir3, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -22771,7 +22510,7 @@ async function noteSettlementFault(runDirectory, scope, diagnostic) {
 function ledgerReadScope(admitted, scope) {
   return {
     home: sealedLedgerHome(admitted),
-    sessionParent: join22(admitted.runDirectory, "session", "session.jsonl"),
+    sessionParent: sessionFileOf(admitted.runDirectory),
     ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { attemptId: scope.courtAttemptId }
   };
 }
@@ -22925,7 +22664,7 @@ async function settleNoReceiptTerminal(admitted, authority, scope, facts) {
     );
   }
   if (scope?.previewOnly !== true) await clearOppositeTerminalArtifactFace(admitted.runDirectory);
-  return withOptionalGateProjection({
+  return attachEngineDetourToolUsage({
     roleOutcome,
     navigator: await extractNavigatorFactFromAdmittedSession(
       coordinates.sessionFile,
@@ -22934,7 +22673,7 @@ async function settleNoReceiptTerminal(admitted, authority, scope, facts) {
     ),
     artifacts: [],
     runId: admitted.runId
-  }, coordinates.sessionDirectory, detourGateContext(admitted, scope));
+  }, coordinates.sessionDirectory, detourUsageContext(admitted, scope));
 }
 function coordinatesFromAdmitted(authority, admitted) {
   return authority.decode(admitted.principal);
@@ -23165,12 +22904,7 @@ function explicitInternalKnownFailureClassificationInput(failure) {
   };
 }
 async function readBoundSessionEntries(sessionFile) {
-  const text = await readFile11(sessionFile, "utf8");
-  const entries = [];
-  for (const line2 of text.trim().split("\n").filter(Boolean)) {
-    entries.push(JSON.parse(line2));
-  }
-  return entries;
+  return await readStrictPiSessionJsonl(sessionFile);
 }
 async function appendRunAttemptHistory(source, outcome) {
   sitianReport({
@@ -23234,57 +22968,22 @@ function parseNavigatorAttendanceDetails(details) {
     reason: "Navigator attendance disposition is unparseable"
   };
 }
-function projectTerminalGateFact(rounds) {
-  if (rounds.length === 0) return void 0;
-  const seen = /* @__PURE__ */ new Set();
-  for (const round of rounds) {
-    if (round.origin.kind === "historical_dispatch") seen.add("gatekeeper");
-    seen.add(round.officer);
-  }
-  const actualSeats = ["gatekeeper", "inspector", "notary"].filter(
-    (seat) => seen.has(seat)
-  );
-  return {
-    actualSeats,
-    rounds: rounds.map((round) => ({
-      roundIndex: round.roundIndex,
-      dispatch: round.origin.kind === "direct" ? { kind: "direct", officer: round.officer } : {
-        kind: "historical_dispatch",
-        officer: round.officer,
-        ...round.origin.reason === void 0 ? {} : { reason: round.origin.reason }
-      },
-      officer: {
-        seat: round.officer,
-        status: round.status,
-        findings: round.findings
-      }
-    }))
-  };
-}
-async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join22(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join22(sessionDirectory, "session.jsonl");
-  const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
-    parentSessionFile
-  });
-  return projectTerminalGateFact(rounds);
-}
-async function attachEngineDetourToolUsage(base, sessionDirectory, gateContext = {}) {
-  const runDirectory = typeof gateContext.runDirectory === "string" && gateContext.runDirectory.length > 0 ? gateContext.runDirectory : runDirectoryFromSessionDirectory(sessionDirectory);
+async function attachEngineDetourToolUsage(base, sessionDirectory, detourContext = {}) {
+  const runDirectory = typeof detourContext.runDirectory === "string" && detourContext.runDirectory.length > 0 ? detourContext.runDirectory : runDirectoryFromSessionDirectory(sessionDirectory);
   let engineMounted = false;
   try {
     engineMounted = await readInvocationEngineMounted(runDirectory);
   } catch (error) {
     await noteSettlementFault(
       runDirectory,
-      gateContext.notePackageFault === void 0 ? void 0 : { notePackageFault: gateContext.notePackageFault },
+      detourContext.notePackageFault === void 0 ? void 0 : { notePackageFault: detourContext.notePackageFault },
       `engine mount read failed beside host terminal: ${describeErrorIdentity(error)}`
     );
     return base;
   }
   if (!engineMounted) return base;
-  const invocationScopeId = typeof gateContext.invocationScopeId === "string" && gateContext.invocationScopeId.length > 0 ? gateContext.invocationScopeId : void 0;
-  const sessionFile = sessionFileFromSessionDirectory(sessionDirectory);
+  const invocationScopeId = typeof detourContext.invocationScopeId === "string" && detourContext.invocationScopeId.length > 0 ? detourContext.invocationScopeId : void 0;
+  const sessionFile = sessionFileIn(sessionDirectory);
   let usage;
   try {
     usage = await readEngineDetourToolUsage({
@@ -23296,7 +22995,7 @@ async function attachEngineDetourToolUsage(base, sessionDirectory, gateContext =
   } catch (error) {
     await noteSettlementFault(
       runDirectory,
-      gateContext.notePackageFault === void 0 ? void 0 : { notePackageFault: gateContext.notePackageFault },
+      detourContext.notePackageFault === void 0 ? void 0 : { notePackageFault: detourContext.notePackageFault },
       `engine detour read failed beside host terminal: ${describeErrorIdentity(error)}`
     );
     return base;
@@ -23306,33 +23005,13 @@ async function attachEngineDetourToolUsage(base, sessionDirectory, gateContext =
     roleOutcome: withEngineDetourToolUsageFact(base.roleOutcome, usage)
   };
 }
-function detourGateContext(admitted, scope) {
+function detourUsageContext(admitted, scope) {
   return {
     runDirectory: admitted.runDirectory,
-    ...scope?.courtAttemptId === void 0 || scope.courtAttemptId.length === 0 ? {} : { courtAttemptId: scope.courtAttemptId },
     ...scope?.invocationScopeId === void 0 || scope.invocationScopeId.length === 0 ? {} : { invocationScopeId: scope.invocationScopeId },
     ...scope?.notePackageFault === void 0 ? {} : { notePackageFault: scope.notePackageFault }
   };
 }
-async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
-  const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  const skipGate = isRecord(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && packagedSkipsGateOnInfrastructureStage(secondaryEvidence.stage);
-  let next = base;
-  if (!skipGate) {
-    try {
-      const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
-      if (gate !== void 0) next = { ...base, gate };
-    } catch (error) {
-      const runDirectory = gateContext.runDirectory ?? runDirectoryFromSessionDirectory(sessionDirectory);
-      await noteSettlementFault(
-        runDirectory,
-        gateContext.notePackageFault === void 0 ? void 0 : { notePackageFault: gateContext.notePackageFault },
-        `gate read failed beside host terminal: ${describeErrorIdentity(error)}`
-      );
-    }
-  }
-  return attachEngineDetourToolUsage(next, sessionDirectory, gateContext);
-}
 function routePlaybookFailureMessage(entries) {
   for (let i = entries.length - 1; i >= 0; i -= 1) {
     const entry = entries[i];
@@ -23406,10 +23085,10 @@ async function removeFaceIfPresent(path) {
 async function clearOppositeTerminalArtifactFace(runDirectory) {
   const artifactsDir = roleRunArtifactsDirectory(runDirectory);
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    await removeFaceIfPresent(join22(artifactsDir, file));
+    await removeFaceIfPresent(join17(artifactsDir, file));
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    await removeFaceIfPresent(join22(runDirectory, relative3));
+    await removeFaceIfPresent(join17(runDirectory, relative3));
   }
   for (const path of await listSeamOwnedUniqueErrorFacePaths(runDirectory)) {
     await removeFaceIfPresent(path);
@@ -23436,8 +23115,8 @@ async function publishAcceptedTerminalArtifacts(admitted, roleOutcome, coordinat
     );
   }
   const artifactsDir = await ensureTerminalArtifactFace(admitted.runDirectory);
-  const reportPath = join22(artifactsDir, RUN_TERMINAL_REPORT_FILE);
-  const evidencePath = join22(artifactsDir, RUN_TERMINAL_EVIDENCE_FILE);
+  const reportPath = join17(artifactsDir, RUN_TERMINAL_REPORT_FILE);
+  const evidencePath = join17(artifactsDir, RUN_TERMINAL_EVIDENCE_FILE);
   await writeFile3(
     reportPath,
     `${JSON.stringify(bodies.report, null, 2)}
@@ -23484,12 +23163,12 @@ async function settleSealedSeat(admitted, authority, scope, options) {
 }
 async function finishLawfulSeat(admitted, coordinates, entries, roleOutcome, scope) {
   const artifacts = scope?.previewOnly === true ? [] : await publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries, scope?.recordAttemptHistory === true);
-  const terminal = await withOptionalGateProjection({
+  const terminal = await attachEngineDetourToolUsage({
     roleOutcome,
     navigator: extractNavigatorFact(entries),
     artifacts,
     runId: admitted.runId
-  }, coordinates.sessionDirectory, detourGateContext(admitted, scope));
+  }, coordinates.sessionDirectory, detourUsageContext(admitted, scope));
   return attachRecordedSubmissions(admitted, terminal, scope);
 }
 async function settleSeat(admitted, authority, scope) {
@@ -23679,24 +23358,9 @@ async function applySecretariatCountersignTerminal(admitted, authority, settled,
   }
   return settled;
 }
-async function attachPostAuditProjection(admitted, authority, terminal, scope) {
-  const { sessionDirectory, sessionFile } = coordinatesFromAdmitted(authority, admitted);
-  let gate;
-  try {
-    gate = await extractGateFactFromSessionDirectory(sessionDirectory, {
-      runDirectory: admitted.runDirectory,
-      parentSessionFile: sessionFile
-    });
-  } catch (error) {
-    await noteSettlementFault(
-      admitted.runDirectory,
-      scope,
-      `gate read failed beside host terminal: ${describeErrorIdentity(error)}`
-    );
-  }
-  const withGate = gate === void 0 ? terminal : { ...terminal, gate };
-  if (admitted.role !== "secretariat") return withGate;
-  return applySecretariatCountersignTerminal(admitted, authority, withGate, scope);
+async function attachPostAuditCountersignFact(admitted, authority, terminal, scope) {
+  if (admitted.role !== "secretariat") return terminal;
+  return applySecretariatCountersignTerminal(admitted, authority, terminal, scope);
 }
 function publicationAttemptFromError(path, error) {
   if (error instanceof Error) {
@@ -23710,7 +23374,7 @@ function publicationAttemptFromError(path, error) {
 }
 function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   const dirs = [];
-  for (const dir of [baseDir, runDirectory, dirname13(runDirectory)]) {
+  for (const dir of [baseDir, runDirectory, dirname11(runDirectory)]) {
     if (!dirs.includes(dir)) dirs.push(dir);
   }
   return dirs;
@@ -23732,7 +23396,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join22(dir, stem === UNIQUE_ERROR_FALLBACK_STEM ? uniqueErrorFallbackName() : `${stem}.${randomUUID5()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join17(dir, stem === UNIQUE_ERROR_FALLBACK_STEM ? uniqueErrorFallbackName() : `${stem}.${randomUUID5()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -23793,20 +23457,20 @@ async function publishFailureArtifacts(admitted, failure, authority, onErrorPubl
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join22(baseDir, RUN_TERMINAL_ERROR_FILE),
-    join22(baseDir, RUN_TERMINAL_ERROR_SETTLEMENT_FILE),
-    join22(admitted.runDirectory, RUN_TERMINAL_ERROR_SETTLEMENT_FILE)
+    join17(baseDir, RUN_TERMINAL_ERROR_FILE),
+    join17(baseDir, RUN_TERMINAL_ERROR_SETTLEMENT_FILE),
+    join17(admitted.runDirectory, RUN_TERMINAL_ERROR_SETTLEMENT_FILE)
   ] : [
-    join22(baseDir, RUN_TERMINAL_ERROR_SETTLEMENT_FILE),
-    join22(baseDir, RUN_TERMINAL_ERROR_FILE)
+    join17(baseDir, RUN_TERMINAL_ERROR_SETTLEMENT_FILE),
+    join17(baseDir, RUN_TERMINAL_ERROR_FILE)
   ];
   const evidenceCandidates = underArtifacts ? [
-    join22(baseDir, RUN_TERMINAL_EVIDENCE_FILE),
-    join22(baseDir, "evidence.settlement.json"),
-    join22(admitted.runDirectory, "evidence.settlement.json")
+    join17(baseDir, RUN_TERMINAL_EVIDENCE_FILE),
+    join17(baseDir, "evidence.settlement.json"),
+    join17(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join22(baseDir, "evidence.settlement.json"),
-    join22(baseDir, RUN_TERMINAL_EVIDENCE_FILE)
+    join17(baseDir, "evidence.settlement.json"),
+    join17(baseDir, RUN_TERMINAL_EVIDENCE_FILE)
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -23901,10 +23565,10 @@ async function settleFailureTerminalResult(admitted, failure, authority, options
     diagnostic: failure.diagnostic,
     decisiveFacts
   };
-  return withOptionalGateProjection(
+  return attachEngineDetourToolUsage(
     { roleOutcome, navigator, artifacts, runId: admitted.runId },
     sessionDirectory,
-    detourGateContext(admitted, options)
+    detourUsageContext(admitted, options)
   );
 }
 function presentFailureTerminal(terminal, io) {
@@ -23932,10 +23596,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep2 = ((ms) => new Promise((resolve14) => {
+  const sleep2 = ((ms) => new Promise((resolve13) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve14();
+      resolve13();
     }, ms);
   }));
   sleep2.cancel = () => {
@@ -23947,7 +23611,7 @@ function defaultNavigatorGraceSleep() {
   return sleep2;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2 = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -23956,11 +23620,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2
       action();
     };
     void work.then(
-      (value) => finish(() => resolve14({ status: "done", value })),
+      (value) => finish(() => resolve13({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep2(graceMs).then(() => {
-      finish(() => resolve14({ status: "timeout" }));
+      finish(() => resolve13({ status: "timeout" }));
     });
   });
 }
@@ -23968,12 +23632,13 @@ var LifecycleReadFailure, NAVIGATOR_POST_ROLE_GRACE_MS, ATTEMPT_HISTORY_ENTRY_TY
 var init_settlement = __esm({
   "src/public-cli/settlement.ts"() {
     "use strict";
+    init_role_run_placement();
     init_auto_resume();
-    init_analyst_gate_cycles_read();
     init_sitian_facade();
     init_submission_ledger();
     init_host_contracts();
     init_process_cancel();
+    init_ledger_session_read();
     init_serialize_thrown_value();
     init_run_lifecycle();
     init_engine_detour_usage();
@@ -24011,17 +23676,19 @@ __export(role_turn_host_exports, {
   buildPiTurnExtraArgs: () => buildPiTurnExtraArgs,
   createDefaultPiSpawnRunner: () => createDefaultPiSpawnRunner,
   createPiRoleTurnHost: () => createPiRoleTurnHost,
+  formatPiSessionCustomEntry: () => formatPiSessionCustomEntry,
+  piSessionCustomParentId: () => piSessionCustomParentId,
   resolveInternalRoleEntrypoint: () => resolveInternalRoleEntrypoint
 });
 import { execFile as execFile2, spawn } from "node:child_process";
 import { constants as constants2 } from "node:fs";
-import { access as access2, appendFile, readFile as readFile12, realpath as realpath4 } from "node:fs/promises";
-import { delimiter as delimiter2, dirname as dirname14, isAbsolute as isAbsolute6, join as join23, resolve as resolve10 } from "node:path";
+import { access as access2, appendFile, realpath as realpath4 } from "node:fs/promises";
+import { delimiter as delimiter2, dirname as dirname12, isAbsolute as isAbsolute6, join as join18, resolve as resolve9 } from "node:path";
 import { platform } from "node:process";
 import { promisify as promisify2 } from "node:util";
 import { randomUUID as randomUUID6 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot2) {
-  return join23(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
+  return join18(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -24049,7 +23716,7 @@ function buildMethodArgs(methods) {
   const skillArgs = [];
   for (const method of methods) {
     if (method.kind === "skill") {
-      skillArgs.push("--skill", dirname14(method.path));
+      skillArgs.push("--skill", dirname12(method.path));
     }
   }
   return skillArgs;
@@ -24089,7 +23756,7 @@ function piUserDialogueBody(request) {
 }
 async function resolveSelectedPi(command, cwd, env) {
   const searchPath = env.PATH ?? (platform === "win32" ? process.env.PATH ?? "" : "/usr/bin:/bin");
-  const candidates = isAbsolute6(command) || command.includes("/") ? [resolve10(cwd, command)] : searchPath.split(delimiter2).map((dir) => resolve10(cwd, dir, command));
+  const candidates = isAbsolute6(command) || command.includes("/") ? [resolve9(cwd, command)] : searchPath.split(delimiter2).map((dir) => resolve9(cwd, dir, command));
   for (const candidate of candidates) {
     try {
       await access2(candidate, constants2.X_OK);
@@ -24279,24 +23946,34 @@ function createPiRoleTurnHost(config) {
     }
   };
 }
-async function appendPiSessionCustomEntry(authority, principal, customType, data) {
-  const { sessionFile } = authority.decode(principal);
-  const text = await readFile12(sessionFile, "utf8");
+function piSessionCustomParentId(entries) {
   let parentId = null;
-  for (const line2 of text.trim().split("\n").filter(Boolean)) {
-    const entry = JSON.parse(line2);
+  for (const entry of entries) {
     if (typeof entry.id === "string" && entry.type !== "session") parentId = entry.id;
   }
-  const timestamp2 = (/* @__PURE__ */ new Date()).toISOString();
-  const pointerLine = `${JSON.stringify({
+  return parentId;
+}
+function formatPiSessionCustomEntry(input) {
+  return `${JSON.stringify({
     type: "custom",
-    customType,
-    data,
+    customType: input.customType,
+    data: input.data,
     id: randomUUID6(),
-    parentId,
-    timestamp: timestamp2
+    parentId: input.parentId,
+    timestamp: input.timestamp
   })}
 `;
+}
+async function appendPiSessionCustomEntry(authority, principal, customType, data) {
+  const { sessionFile } = authority.decode(principal);
+  const entries = await readStrictPiSessionJsonl(sessionFile);
+  const timestamp2 = (/* @__PURE__ */ new Date()).toISOString();
+  const pointerLine = formatPiSessionCustomEntry({
+    customType,
+    data,
+    parentId: piSessionCustomParentId(entries),
+    timestamp: timestamp2
+  });
   await appendFile(sessionFile, pointerLine, "utf8");
   sitianReport({
     level: "event",
@@ -24314,6 +23991,7 @@ var init_role_turn_host = __esm({
     init_engine_detour();
     init_role_activation_flags();
     init_user_dialogue_stdin();
+    init_ledger_session_read();
     init_settlement();
     init_run_lifecycle();
     init_receipt_delivery_policy();
@@ -24333,15 +24011,15 @@ var init_role_turn_host = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join19 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot2, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join24(packageRoot2, "dist/acp-host/production-host.js");
-  const source = join24(packageRoot2, "src/acp-host/production-host.ts");
+  const built = join19(packageRoot2, "dist/acp-host/production-host.js");
+  const source = join19(packageRoot2, "src/acp-host/production-host.ts");
   const target = existsSync6(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -24357,15 +24035,15 @@ var init_load_production_acp_host = __esm({
 
 // src/public-cli/load-production-headless-host.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { join as join25 } from "node:path";
+import { join as join20 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 async function loadProductionHeadlessHostFactory(packageRoot2, host) {
   const description = lookupHeadlessHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered headless host: ${host}`);
   }
-  const built = join25(packageRoot2, "dist/headless-host/production-host.js");
-  const source = join25(packageRoot2, "src/headless-host/production-host.ts");
+  const built = join20(packageRoot2, "dist/headless-host/production-host.js");
+  const source = join20(packageRoot2, "src/headless-host/production-host.ts");
   const target = existsSync7(built) ? built : source;
   const href = pathToFileURL2(target).href;
   const mod = await import(href);
@@ -24534,11 +24212,14 @@ var init_role_seat_runtime = __esm({
 
 // src/archivist-record-pointer.ts
 import { mkdirSync as mkdirSync3, writeFileSync } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname15, join as join26 } from "node:path";
+import { readFile as readFile12 } from "node:fs/promises";
+import { basename as basename7, dirname as dirname13, join as join21 } from "node:path";
+function directOfficerRunPointerFile(parentSessionFile, officer) {
+  return join21(sitianVolumeDirectory(dirname13(parentSessionFile), "auditor-roles"), `${officer}.pointer.json`);
+}
 function bookDirectOfficerRunPointer(options) {
-  const nest = join26(dirname15(options.parentSessionFile), "auditor-roles");
-  mkdirSync3(nest, { recursive: true });
+  const pointerFile = directOfficerRunPointerFile(options.parentSessionFile, options.officer);
+  mkdirSync3(dirname13(pointerFile), { recursive: true });
   const submissionToolCallId = options.submissionToolCallId?.trim() ?? "";
   const pointer = {
     version: 1,
@@ -24549,34 +24230,58 @@ function bookDirectOfficerRunPointer(options) {
     ...submissionToolCallId === "" ? {} : { submissionToolCallId }
   };
   writeFileSync(
-    join26(nest, `${options.officer}.pointer.json`),
+    pointerFile,
     `${JSON.stringify(pointer)}
 `,
     "utf8"
   );
   return pointer;
 }
-async function readDirectOfficerRunPointer(parentSessionFile, officer) {
+async function resolveOfficerSessionFromPointerFile(pointerPath) {
+  let raw;
   try {
-    const raw = JSON.parse(await readFile13(
-      join26(dirname15(parentSessionFile), "auditor-roles", `${officer}.pointer.json`),
-      "utf8"
-    ));
-    if (!isRecord(raw) || raw.kind !== DIRECT_OFFICER_RUN_POINTER_KIND || raw.version !== 1) {
-      return void 0;
+    raw = JSON.parse(await readFile12(pointerPath, "utf8"));
+  } catch (error) {
+    throw new Error(`direct officer run pointer unreadable in ${pointerPath}: ${errorText(error)}`, { cause: error });
+  }
+  if (!isRecord(raw) || raw.kind !== DIRECT_OFFICER_RUN_POINTER_KIND || raw.version !== 1) {
+    throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
+  }
+  if (typeof raw.sessionFile !== "string" || raw.sessionFile.trim() === "") {
+    throw new Error(`direct officer run pointer missing sessionFile in ${pointerPath}`);
+  }
+  const officer = raw.officer === "inspector" || raw.officer === "notary" || raw.officer === "auditor" || raw.officer === "countersign" ? raw.officer : void 0;
+  let runDirectory = typeof raw.runDirectory === "string" && raw.runDirectory.trim() !== "" ? raw.runDirectory : void 0;
+  let sessionFile = raw.sessionFile;
+  const recordedRunDirectory = runDirectory ?? runDirectoryOfSessionFile(sessionFile);
+  const leaf = parseRunLeaf(basename7(recordedRunDirectory));
+  const parentRunDirectory = runDirectoryFromSessionDirectory(dirname13(dirname13(pointerPath)));
+  const parentIdentity = await readRoleRunIdentity(parentRunDirectory);
+  if (leaf !== void 0 && parentIdentity !== void 0) {
+    const currentRunDirectory = await findRunDirectoryById(
+      homeFromRunDirectory(parentRunDirectory),
+      leaf.runId,
+      parentIdentity.bookKey,
+      leaf.role
+    );
+    if (currentRunDirectory !== void 0) {
+      sessionFile = rewriteRunDirectoryPathValue(sessionFile, recordedRunDirectory, currentRunDirectory);
+      if (runDirectory !== void 0) runDirectory = currentRunDirectory;
     }
-    if (raw.officer !== officer) return void 0;
-    if (typeof raw.sessionFile !== "string" || raw.sessionFile.trim() === "") return void 0;
-    const runDirectory = typeof raw.runDirectory === "string" && raw.runDirectory.trim() !== "" ? raw.runDirectory : void 0;
-    const submissionToolCallId = typeof raw.submissionToolCallId === "string" && raw.submissionToolCallId.trim() !== "" ? raw.submissionToolCallId : void 0;
-    return {
-      version: 1,
-      kind: DIRECT_OFFICER_RUN_POINTER_KIND,
-      officer,
-      sessionFile: raw.sessionFile,
-      ...runDirectory === void 0 ? {} : { runDirectory },
-      ...submissionToolCallId === void 0 ? {} : { submissionToolCallId }
-    };
+  }
+  const submissionToolCallId = typeof raw.submissionToolCallId === "string" && raw.submissionToolCallId.trim() !== "" ? raw.submissionToolCallId : void 0;
+  return {
+    sessionFile,
+    ...officer === void 0 ? {} : { officer },
+    ...runDirectory === void 0 ? {} : { runDirectory },
+    ...submissionToolCallId === void 0 ? {} : { submissionToolCallId }
+  };
+}
+async function readDirectOfficerRunPointer(parentSessionFile, officer) {
+  try {
+    const pointer = await resolveOfficerSessionFromPointerFile(directOfficerRunPointerFile(parentSessionFile, officer));
+    if (pointer.officer !== officer) return void 0;
+    return { ...pointer, officer, version: 1, kind: DIRECT_OFFICER_RUN_POINTER_KIND };
   } catch {
     return void 0;
   }
@@ -24586,6 +24291,11 @@ var init_archivist_record_pointer = __esm({
   "src/archivist-record-pointer.ts"() {
     "use strict";
     init_unknown_value();
+    init_activation_ledger_topology();
+    init_run_lifecycle();
+    init_role_run_relocation();
+    init_role_run_placement();
+    init_sitian_appender();
     DIRECT_OFFICER_RUN_POINTER_KIND = "direct-officer-run-pointer";
   }
 });
@@ -24840,23 +24550,23 @@ var init_submission_gate = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync8 } from "node:fs";
-import { readFile as readFile14 } from "node:fs/promises";
-import { dirname as dirname16, join as join27 } from "node:path";
+import { readFile as readFile13 } from "node:fs/promises";
+import { dirname as dirname14, join as join22 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname16(fileURLToPath(moduleUrl));
+  let dir = dirname14(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync8(join27(dir, "package.json")) && existsSync8(join27(dir, "souls"))) {
+    if (existsSync8(join22(dir, "package.json")) && existsSync8(join22(dir, "souls"))) {
       return dir;
     }
-    const parent = dirname16(dir);
+    const parent = dirname14(dir);
     if (parent === dir) break;
     dir = parent;
   }
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile14(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile13(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -24898,8 +24608,8 @@ __export(auditor_soul_exports, {
   readAuditorResumeBinding: () => readAuditorResumeBinding,
   resolveAuditorSubject: () => resolveAuditorSubject
 });
-import { readFile as readFile15 } from "node:fs/promises";
-import { basename as basename7, join as join28 } from "node:path";
+import { readFile as readFile14 } from "node:fs/promises";
+import { basename as basename8, join as join23 } from "node:path";
 function auditorSoulRelativePath(role) {
   return `souls/${role}-auditor.md`;
 }
@@ -24935,13 +24645,13 @@ function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
   return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
 }
 function subjectFromSourceDirectory(sourceRunDirectory) {
-  const role = basename7(sourceRunDirectory).split("@")[1];
+  const role = parseRunLeaf(basename8(sourceRunDirectory))?.role;
   return isAuditorSoulRole(role) ? role : void 0;
 }
 async function readAuditorResumeBinding(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile15(join28(runDirectory, "admitted-request.json"), "utf8"));
+    raw = JSON.parse(await readFile14(join23(runDirectory, "admitted-request.json"), "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
     throw error;
@@ -24957,6 +24667,7 @@ var AUDITOR_SOUL_ROLES, AK_ROLE_AUDITOR_SUBJECT_ENV, AK_ROLE_AUDITOR_SOURCE_RUN_
 var init_auditor_soul = __esm({
   "src/auditor-soul.ts"() {
     "use strict";
+    init_role_run_placement();
     init_unknown_value();
     init_session_opening_materials();
     AUDITOR_SOUL_ROLES = [
@@ -25208,7 +24919,7 @@ __export(instruction_seat_run_exports, {
   runPublicInstructionSeat: () => runPublicInstructionSeat,
   runPublicInstructionSeatResume: () => runPublicInstructionSeatResume
 });
-import { dirname as dirname17, resolve as resolve11 } from "node:path";
+import { dirname as dirname15, resolve as resolve10 } from "node:path";
 function unreadablePostSubmissionStatus(admitted, terminal) {
   if (terminal?.roleOutcome.kind !== "accepted") return void 0;
   const route = POST_SUBMISSION_ROUTING[admitted.role];
@@ -25444,7 +25155,7 @@ async function runOmittedLensBatch(argv2, parsed, env, io) {
   const children = await summonParallelReviewerLenses2({
     argv: argv2,
     cwd: env.cwd,
-    projectRoot: resolve11(parsed.project ?? env.cwd),
+    projectRoot: resolve10(parsed.project ?? env.cwd),
     baseRevision: parsed.baseRevision ?? "",
     home: env.home,
     agentDir: env.agentDir,
@@ -25526,7 +25237,7 @@ async function runCountersignBody(parsed, env, io) {
     const resumed = await resumeSameParentInstructionSeat({
       env,
       io,
-      projectRoot: resolve11(parsed.project ?? env.cwd),
+      projectRoot: resolve10(parsed.project ?? env.cwd),
       role: "countersign",
       parentRunPath: gateParentRunPath,
       ...isSafePositiveTicketNumber(env.boundTicketNumber) ? { ticketNumber: env.boundTicketNumber } : {},
@@ -26055,7 +25766,7 @@ async function auditSubmittedRole(turn, env, io, resumedOfficer, passedReceipt)
     runDirectory: admitted.runDirectory,
     sessionManager: {
       getSessionFile: () => sessionFile,
-      getSessionDir: () => dirname17(sessionFile),
+      getSessionDir: () => dirname15(sessionFile),
       getEntries: () => entries,
       getLeafEntry: () => void 0,
       getLeafId: () => admitted.runId,
@@ -26232,7 +25943,7 @@ async function auditSubmittedRole(turn, env, io, resumedOfficer, passedReceipt)
     }
   }
   if (turn.terminal === void 0) throw new Error(`audited ${admitted.role} submission did not settle`);
-  const terminal = await attachPostAuditProjection(
+  const terminal = await attachPostAuditCountersignFact(
     admitted,
     env.principalAuthority,
     turn.terminal,
@@ -26333,7 +26044,7 @@ __export(public_role_summons_exports, {
 import { execFile as execFile3 } from "node:child_process";
 import { existsSync as existsSync9 } from "node:fs";
 import { realpath as realpath5 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { join as join24 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function createCapturingIo() {
   const chunks = [];
@@ -26357,7 +26068,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync9(join29(dir, "package.json")) && existsSync9(join29(dir, "souls"))) {
+    if (existsSync9(join24(dir, "package.json")) && existsSync9(join24(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -26960,7 +26671,7 @@ var init_compliance_transport = __esm({
 });
 
 // src/role-run-relocation.ts
-import { join as join30, sep as sep4 } from "node:path";
+import { dirname as dirname16, join as join25, sep as sep4 } from "node:path";
 function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   if (typeof value !== "string") return value;
   if (value === oldRunDirectory) return newRunDirectory;
@@ -26970,6 +26681,33 @@ function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   }
   return value;
 }
+async function retainedRunPathsMatch(recordedPath, currentPath, currentRunDirectory) {
+  if (recordedPath === currentPath) return true;
+  if (typeof recordedPath !== "string") return false;
+  const recordedPathIdentity = physicalPathIdentity(recordedPath);
+  const currentPathIdentity = physicalPathIdentity(currentPath);
+  if (recordedPathIdentity === currentPathIdentity) return true;
+  if (currentRunDirectory === void 0) return false;
+  const runDirectory = physicalPathIdentity(currentRunDirectory);
+  const identity = await readRoleRunIdentity(runDirectory);
+  if (identity === void 0) return false;
+  for (let directory = runDirectory; dirname16(directory) !== directory; directory = dirname16(directory)) {
+    const ledgerHome = dirname16(dirname16(directory));
+    if (directory !== activationBookDirectory(ledgerHome, identity.bookKey)) continue;
+    const unbound = roleRunPlacement(ledgerHome, {
+      bookKey: identity.bookKey,
+      subject: { unbound: true },
+      runId: identity.runId,
+      role: identity.role
+    });
+    if (rewriteRunDirectoryPathValue(recordedPathIdentity, unbound.runDirectory, runDirectory) !== currentPathIdentity) {
+      return false;
+    }
+    const placed = await findRoleRunDirectory([directory], identity.runId, identity.role);
+    return placed !== void 0 && physicalPathIdentity(placed) === runDirectory;
+  }
+  return false;
+}
 function rewriteRunDirectoryPathValueAgainstRewrites(value, rewrites) {
   if (typeof value !== "string" || rewrites.length === 0) return value;
   let best;
@@ -27032,6 +26770,9 @@ var ADMITTED_PAGE_FIELDS, SOURCE_RUN_LOCATOR_FIELDS;
 var init_role_run_relocation = __esm({
   "src/role-run-relocation.ts"() {
     "use strict";
+    init_activation_ledger_topology();
+    init_run_lifecycle();
+    init_role_run_placement();
     init_compliance_transport();
     init_unknown_value();
     ADMITTED_PAGE_FIELDS = [
@@ -27077,8 +26818,8 @@ __export(run_lifecycle_exports, {
   recordCurrentCourt: () => recordCurrentCourt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat5, open as open2, readdir as readdir5, readFile as readFile16, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
-import { basename as basename8, join as join31 } from "node:path";
+import { chmod, lstat as lstat5, open as open2, readdir as readdir4, readFile as readFile15, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { basename as basename9, join as join26 } from "node:path";
 function buildAutoResumeContinuationPrompt(options) {
   return appendEngineSessionMaterial(
     [RESUME_TRANSPORT_ENVELOPE],
@@ -27091,7 +26832,7 @@ function buildAutoResumeContinuationPrompt(options) {
 async function writeRoleRunState(runDirectory, record) {
   const payload = { ...record, runDirectory };
   await writeFile4(
-    join31(runDirectory, RUN_STATE_FILE),
+    join26(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -27141,7 +26882,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateRaw(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile16(join31(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile15(join26(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
     throw error;
@@ -27224,7 +26965,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile4(
-    join31(runDirectory, RUN_STATE_FILE),
+    join26(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -27348,7 +27089,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile16(lockPath, "utf8");
+    content = await readFile15(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -27407,7 +27148,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join31(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join26(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
@@ -27446,10 +27187,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join31(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join26(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join31(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join26(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -27506,36 +27247,18 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join31(ledgerHome, "books");
+  const booksRoot = join26(ledgerHome, "books");
   let bookKeys;
   try {
-    bookKeys = await readdir5(booksRoot);
+    bookKeys = await readdir4(booksRoot);
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
     throw error;
   }
-  const matches = [];
-  for (const bookKey of bookKeys) {
-    if (onlyBookKey !== void 0 && bookKey !== onlyBookKey) continue;
-    const bookDir = activationBookDirectory(ledgerHome, bookKey);
-    let runDirectories;
-    try {
-      runDirectories = await listBookRunDirectories(bookDir);
-    } catch (error) {
-      if (errorCodeOf(error) === "ENOENT") continue;
-      throw error;
-    }
-    for (const runDirectory of runDirectories) {
-      const entry = basename8(runDirectory);
-      if (onlyRole === void 0 && (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) || entry === `${runId}@${onlyRole}`) {
-        matches.push(runDirectory);
-      }
-    }
-  }
-  if (matches.length === 0) return void 0;
-  if (matches.length === 1) return matches[0];
-  throw new Error(
-    `ambiguous role run id ${runId}: ${matches.join(", ")}`
+  return findRoleRunDirectory(
+    bookKeys.filter((bookKey) => onlyBookKey === void 0 || bookKey === onlyBookKey).map((bookKey) => activationBookDirectory(ledgerHome, bookKey)),
+    runId,
+    onlyRole
   );
 }
 function parentRunPathFromGatePointerInstruction(instruction) {
@@ -27547,7 +27270,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile16(join31(runDirectory, "admitted-request.json"), "utf8")
+      await readFile15(join26(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
@@ -27568,7 +27291,7 @@ async function readRunParentPath(runDirectory) {
 async function runHasFormedSessionPrincipal(runDirectory) {
   const disk = await readRoleRunStateDisk(runDirectory);
   if (disk === void 0) return false;
-  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : join31(disk.principalWire.sessionDirectory, "session.jsonl");
+  const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : sessionFileIn(disk.principalWire.sessionDirectory);
   try {
     const stat2 = await lstat5(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
@@ -27586,21 +27309,19 @@ async function findLatestRunIdForSeatTicket(input) {
   let runDirectories;
   try {
     runDirectories = await listBookRunDirectories(
-      input.ticketNumber === void 0 ? bookDir : join31(bookDir, String(input.ticketNumber))
+      input.ticketNumber === void 0 ? bookDir : join26(bookDir, String(input.ticketNumber))
     );
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
     throw error;
   }
-  const suffix = `@${input.role}`;
   let best;
   for (const runDirectory of runDirectories) {
-    const entry = basename8(runDirectory);
-    if (!entry.endsWith(suffix)) continue;
-    const runId = entry.slice(0, entry.length - suffix.length);
-    if (runId.length === 0) continue;
+    const parsed = parseRunLeaf(basename9(runDirectory));
+    if (parsed === void 0 || parsed.role !== input.role) continue;
+    const runId = parsed.runId;
     const parentPath = await readRunParentPath(runDirectory);
-    if (parentPath !== input.parentRunPath && basename8(parentPath ?? "") !== basename8(input.parentRunPath)) continue;
+    if (!await retainedRunPathsMatch(parentPath, input.parentRunPath, input.parentRunPath)) continue;
     if (!await runHasFormedSessionPrincipal(runDirectory)) continue;
     if (best === void 0 || runId > best) best = runId;
   }
@@ -27662,7 +27383,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile16(run.admittedRequestPath, "utf8")
+      await readFile15(run.admittedRequestPath, "utf8")
     );
     if (isRecord(raw)) {
       const record = raw;
@@ -27701,7 +27422,7 @@ async function loadResumableRunRecord(home, runId, authority) {
       if (isReviewerLens(record.lens)) {
         lens = record.lens;
       }
-      if (typeof record.prNumber === "number" && Number.isSafeInteger(record.prNumber) && record.prNumber >= 1) {
+      if (isSafePositiveTicketNumber(record.prNumber)) {
         prNumber = record.prNumber;
       }
       if (typeof record.repository === "string" && record.repository.trim() !== "") {
@@ -27719,7 +27440,7 @@ async function loadResumableRunRecord(home, runId, authority) {
       if (typeof record.waitWindowMs === "number" && Number.isSafeInteger(record.waitWindowMs) && record.waitWindowMs >= 1) {
         waitWindowMs = record.waitWindowMs;
       }
-      if (typeof record.issueNumber === "number" && Number.isSafeInteger(record.issueNumber) && record.issueNumber >= 1) {
+      if (isSafePositiveTicketNumber(record.issueNumber)) {
         issueNumber = record.issueNumber;
       }
       if (typeof record.caseRunsPath === "string" && record.caseRunsPath.trim() !== "") {
@@ -27727,7 +27448,7 @@ async function loadResumableRunRecord(home, runId, authority) {
       }
       if (isRecord(record.caseIdentity)) {
         const ci = record.caseIdentity;
-        if (typeof ci.issueNumber === "number" && Number.isSafeInteger(ci.issueNumber) && ci.issueNumber >= 1 && typeof ci.runsPath === "string" && ci.runsPath.trim() !== "") {
+        if (isSafePositiveTicketNumber(ci.issueNumber) && typeof ci.runsPath === "string" && ci.runsPath.trim() !== "") {
           caseIdentity = { issueNumber: ci.issueNumber, runsPath: ci.runsPath };
         }
       }
@@ -27784,7 +27505,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile16(join31(run.runDirectory, "invocation.json"), "utf8")
+      await readFile15(join26(run.runDirectory, "invocation.json"), "utf8")
     );
     if (isRecord(invocationRaw)) {
       const rec = invocationRaw;
@@ -27812,9 +27533,9 @@ async function loadResumableRunRecord(home, runId, authority) {
       );
     }
   }
-  const sourceRunLeaf = basename8(sourceRunPath ?? "").split("@");
-  const referencedRunId = sourceRun?.runId ?? sourceRunLeaf[0];
-  const referencedRole = sourceRun?.role ?? sourceRunLeaf[1];
+  const sourceRunLeaf = parseRunLeaf(basename9(sourceRunPath ?? ""));
+  const referencedRunId = sourceRun?.runId ?? sourceRunLeaf?.runId;
+  const referencedRole = sourceRun?.role ?? sourceRunLeaf?.role;
   if (referencedRunId !== void 0 && referencedRunId !== "") {
     const currentSourceRunDirectory = await findRunDirectoryById(
       home,
@@ -28151,18 +27872,39 @@ var init_run_lifecycle = __esm({
   }
 });
 
+// src/atomic-write.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { rename as rename2, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
+import { dirname as dirname17, join as join27 } from "node:path";
+async function writeFileAtomically(destination, contents, options) {
+  const parent = dirname17(destination);
+  const temporary = join27(parent, `.atomic-write-${randomUUID7()}.tmp`);
+  try {
+    await writeFile5(temporary, contents, options);
+    await rename2(temporary, destination);
+  } catch (error) {
+    await rm3(temporary, { force: true }).catch(() => void 0);
+    throw error;
+  }
+}
+var init_atomic_write = __esm({
+  "src/atomic-write.ts"() {
+    "use strict";
+  }
+});
+
 // src/session-identity.ts
-import { mkdir as mkdir4, readFile as readFile17, rename as rename2, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname18, join as join32 } from "node:path";
+import { mkdir as mkdir4, readFile as readFile16 } from "node:fs/promises";
+import { dirname as dirname18, join as join28 } from "node:path";
 function createSessionIdentityAuthority(authority, sessionBindingFile) {
-  const bindingPath = (principal) => join32(authority.decode(principal).sessionDirectory, sessionBindingFile);
+  const bindingPath = (principal) => join28(authority.decode(principal).sessionDirectory, sessionBindingFile);
   return {
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;
     },
     async load(principal) {
       try {
-        const value = JSON.parse(await readFile17(bindingPath(principal), "utf8"));
+        const value = JSON.parse(await readFile16(bindingPath(principal), "utf8"));
         if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
           throw new Error("durable session binding is invalid");
         }
@@ -28175,10 +27917,8 @@ function createSessionIdentityAuthority(authority, sessionBindingFile) {
     async bind(principal, sessionId) {
       const target = bindingPath(principal);
       await mkdir4(dirname18(target), { recursive: true });
-      const temporary = `${target}.${process.pid}.tmp`;
-      await writeFile5(temporary, `${JSON.stringify({ sessionId })}
-`, { encoding: "utf8", mode: 384 });
-      await rename2(temporary, target);
+      await writeFileAtomically(target, `${JSON.stringify({ sessionId })}
+`, { mode: 384 });
     }
   };
 }
@@ -28196,6 +27936,7 @@ async function readStoredHostSessionId(host, authority, principal) {
 var init_session_identity = __esm({
   "src/session-identity.ts"() {
     "use strict";
+    init_atomic_write();
     init_host_descriptions();
   }
 });
@@ -28213,7 +27954,7 @@ import {
   rmSync as rmSync2,
   statSync as statSync4
 } from "node:fs";
-import { dirname as dirname19, join as join33 } from "node:path";
+import { dirname as dirname19, join as join29 } from "node:path";
 function declareHostSessionFailure(error) {
   const message = error instanceof Error ? error.stack || error.message : String(error);
   process.stderr.write(`[host-session] Dossier record failure: ${message}
@@ -28221,7 +27962,7 @@ function declareHostSessionFailure(error) {
 }
 function recordRunStart(runDirectory) {
   try {
-    appendFileSync2(join33(runDirectory, ".run-starts"), "\n");
+    appendFileSync2(join29(runDirectory, ".run-starts"), "\n");
   } catch (error) {
     declareHostSessionFailure(error);
   }
@@ -28235,9 +27976,9 @@ var init_host_session_record = __esm({
 });
 
 // src/public-cli/post-admission.ts
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID8 } from "node:crypto";
 import { writeFile as writeFile6 } from "node:fs/promises";
-import { isAbsolute as isAbsolute8, join as join34, resolve as resolve12 } from "node:path";
+import { isAbsolute as isAbsolute8, join as join30, resolve as resolve11 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -28463,7 +28204,7 @@ async function settleCompletedHostTurn(input) {
   let stderrLogWriteFailure;
   try {
     await writeFile6(
-      join34(admitted.runDirectory, "stderr.log"),
+      join30(admitted.runDirectory, "stderr.log"),
       result.stderr,
       "utf8"
     );
@@ -29058,8 +28799,8 @@ async function runSettledAutoResumeLoop(input) {
   });
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
-  const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
-  return pathContainedIn(join34(runDirectory, "attachments"), absolute);
+  const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve11(attachmentPath);
+  return pathContainedIn(join30(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -29155,7 +28896,7 @@ async function runPostAdmissionSeatResume(input) {
       }
     }
     if (openCourtAttemptId !== void 0 || request.summons !== void 0) {
-      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID7());
+      const courtAttemptId = openCourtAttemptId ?? (turnRequest.courtAttemptId !== void 0 && turnRequest.courtAttemptId.length > 0 ? turnRequest.courtAttemptId : randomUUID8());
       turnRequest = { ...turnRequest, courtAttemptId };
       if (openCourtAttemptId === void 0) {
         const court = {
@@ -29288,7 +29029,7 @@ async function presentResumeFailurePointer(io, thrown, publish) {
 }
 async function writeResumeDiagnosticFile(runDirectory, runId, failure, role) {
   const dir = await ensureRealArtifactsDirectory(runDirectory);
-  const path = join34(dir, `resume-diagnostic-${randomUUID7()}.json`);
+  const path = join30(dir, `resume-diagnostic-${randomUUID8()}.json`);
   await writeFile6(
     path,
     `${JSON.stringify({
@@ -29456,35 +29197,14 @@ var init_analyst_book_key = __esm({
   }
 });
 
-// src/atomic-write.ts
-import { randomUUID as randomUUID8 } from "node:crypto";
-import { rename as rename3, rm as rm3, writeFile as writeFile7 } from "node:fs/promises";
-import { dirname as dirname20, join as join35 } from "node:path";
-async function writeFileAtomically(destination, contents) {
-  const parent = dirname20(destination);
-  const temporary = join35(parent, `.atomic-write-${randomUUID8()}.tmp`);
-  try {
-    await writeFile7(temporary, contents);
-    await rename3(temporary, destination);
-  } catch (error) {
-    await rm3(temporary, { force: true }).catch(() => void 0);
-    throw error;
-  }
-}
-var init_atomic_write = __esm({
-  "src/atomic-write.ts"() {
-    "use strict";
-  }
-});
-
 // src/analyst-index.ts
-import { open as open3, readFile as readFile18, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname21, join as join36 } from "node:path";
+import { open as open3, readFile as readFile17, unlink as unlink3 } from "node:fs/promises";
+import { dirname as dirname20, join as join31 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
-  ensureRealDirectoryTree(ledgerHome, dirname21(indexPath));
-  const lockPath = join36(dirname21(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  ensureRealDirectoryTree(ledgerHome, dirname20(indexPath));
+  const lockPath = join31(dirname20(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29511,7 +29231,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join36(ledgerHome, "analyst", "library-index.json");
+  return join31(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -29602,7 +29322,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
   const path = analystLibraryIndexPath(ledgerHome);
   let raw;
   try {
-    raw = await readFile18(path, "utf8");
+    raw = await readFile17(path, "utf8");
   } catch (error) {
     if (isMissingPathError(error)) return void 0;
     throw error;
@@ -29618,7 +29338,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
 }
 async function writeAnalystLibraryIndexPage(ledgerHome, page) {
   const path = analystLibraryIndexPath(ledgerHome);
-  ensureRealDirectoryTree(ledgerHome, dirname21(path));
+  ensureRealDirectoryTree(ledgerHome, dirname20(path));
   assertLedgerFileInsideHome(path, ledgerHome);
   await writeFileAtomically(path, `${JSON.stringify(page, null, 2)}
 `);
@@ -29690,123 +29410,395 @@ function absorbRole(accum, stats) {
   accum.successCount += stats.successCount;
   accum.successEligibleCount += stats.successEligibleCount;
 }
-function finishRole(role, accum) {
-  return {
-    role,
-    convergenceRounds: accum.convergenceRounds,
-    convergenceRoundsMedian: optionalMedian(accum.convergenceRounds),
-    firstPassRate: rateMetric(accum.firstPassLaneCount, accum.appearanceLaneCount),
-    successRate: rateMetric(accum.successCount, accum.successEligibleCount)
+function finishRole(role, accum) {
+  return {
+    role,
+    convergenceRounds: accum.convergenceRounds,
+    convergenceRoundsMedian: optionalMedian(accum.convergenceRounds),
+    firstPassRate: rateMetric(accum.firstPassLaneCount, accum.appearanceLaneCount),
+    successRate: rateMetric(accum.successCount, accum.successEligibleCount)
+  };
+}
+function emptyGateOfficerNumeratorAccum() {
+  return { rounds: 0, bounceCount: 0, passCount: 0, wallSum: 0 };
+}
+function absorbGateOfficerSummary(accum, summary) {
+  accum.rounds += summary.rounds;
+  accum.bounceCount += summary.bounceCount;
+  accum.passCount += summary.passCount;
+  if (summary.meanOfficerWallMs !== void 0) {
+    accum.wallSum += summary.meanOfficerWallMs * summary.rounds;
+  }
+}
+function finishGateOfficerNumerators(officer, accum) {
+  return {
+    officer,
+    rounds: accum.rounds,
+    bounceCount: accum.bounceCount,
+    passCount: accum.passCount,
+    bounceRate: rateMetric(accum.bounceCount, accum.rounds),
+    meanOfficerWallMs: accum.rounds === 0 ? ABSENT : presentMetric(accum.wallSum / accum.rounds)
+  };
+}
+async function aggregateGroup(index, input, ensureIssuePage) {
+  const issueEntries = [];
+  const roleAccums = /* @__PURE__ */ new Map();
+  const gateOfficerAccums = /* @__PURE__ */ new Map();
+  let reworkWallMs = 0;
+  let totalWallMs = 0;
+  let hasReworkSample = false;
+  const legWalls = [];
+  for (const ref of input.issues) {
+    const { issueNumber, bookKey } = ref;
+    const row = findAnalystLibraryIndexRow(index, issueNumber, bookKey);
+    if (row === void 0) {
+      issueEntries.push({ issueNumber, status: "absent", bookKey });
+      continue;
+    }
+    const page = await ensureIssuePage({
+      projectRoot: row.projectRoot,
+      issueNumber,
+      bookKey: row.bookKey
+    });
+    issueEntries.push({
+      issueNumber,
+      status: "present",
+      bookKey: row.bookKey,
+      projectRoot: row.projectRoot
+    });
+    const acceptance = page.acceptanceSuccessRework;
+    if (acceptance !== void 0) {
+      for (const roleStats of acceptance.byRole) {
+        const accum = roleAccums.get(roleStats.role) ?? emptyRoleAccum();
+        absorbRole(accum, roleStats);
+        roleAccums.set(roleStats.role, accum);
+      }
+      reworkWallMs += acceptance.rework.reworkWallMs;
+      totalWallMs += acceptance.rework.totalWallMs;
+      hasReworkSample = true;
+    }
+    const legWallClock = page.legWallClock;
+    if (legWallClock !== void 0) {
+      for (const leg of legWallClock.ranking) {
+        legWalls.push(leg.wallMs);
+      }
+    }
+    const gateCycles = page.gateCycles;
+    if (gateCycles !== void 0) {
+      for (const summary of gateCycles.byOfficer) {
+        const accum = gateOfficerAccums.get(summary.officer) ?? emptyGateOfficerNumeratorAccum();
+        absorbGateOfficerSummary(accum, summary);
+        gateOfficerAccums.set(summary.officer, accum);
+      }
+    }
+  }
+  const byRole = [...roleAccums.keys()].sort((a, b) => a.localeCompare(b)).map((role) => finishRole(role, roleAccums.get(role)));
+  const gateCyclesByOfficer = ["inspector", "notary"].filter((officer) => gateOfficerAccums.has(officer)).map(
+    (officer) => finishGateOfficerNumerators(officer, gateOfficerAccums.get(officer))
+  );
+  return {
+    groupLabel: input.groupLabel,
+    issues: issueEntries,
+    byRole,
+    reworkRatio: hasReworkSample ? rateMetric(reworkWallMs, totalWallMs) : ABSENT,
+    medianWallMs: optionalMedian(legWalls),
+    gateCyclesByOfficer
+  };
+}
+async function runAnalystCohortMode(ledgerHome, input, ensureIssuePage) {
+  const index = await readAnalystLibraryIndexPage(ledgerHome);
+  const group0 = await aggregateGroup(index, input.groups[0], ensureIssuePage);
+  const group1 = await aggregateGroup(index, input.groups[1], ensureIssuePage);
+  return {
+    mode: "cohort",
+    groups: [group0, group1]
+  };
+}
+var ABSENT;
+var init_analyst_cohort = __esm({
+  "src/analyst-cohort.ts"() {
+    "use strict";
+    init_analyst_index();
+    init_analyst_median();
+    ABSENT = { status: "absent" };
+  }
+});
+
+// src/analyst-gate-cycles-read.ts
+import { readdir as readdir5 } from "node:fs/promises";
+import { join as join32 } from "node:path";
+function isParentAttemptBindingRow(row) {
+  return row.type === "custom" && row.customType === AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE;
+}
+function intervalRowsForGateCall(rows, callRowIndex) {
+  return intervalRowsAroundAnchor(rows, callRowIndex, isParentAttemptBindingRow).rows;
+}
+function normalizeOfficerArg(raw) {
+  if (typeof raw !== "string") return void 0;
+  return OFFICER_ARG_ALIASES[raw.trim()];
+}
+function asFindings(value) {
+  return Array.isArray(value) ? value : [];
+}
+function optionalDispatchReason(raw) {
+  if (typeof raw !== "string") return void 0;
+  if (raw.trim() === "") return void 0;
+  return raw;
+}
+function isGateTerminatingToolName(toolName) {
+  return toolName === "ak_submission_output" || DISPATCH_TOOLS.has(toolName) || OFFICER_TOOL_TO_FACE[toolName] !== void 0;
+}
+function acceptedGateReceiptIds(rows) {
+  const accepted = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    const message = isRecord(row.message) ? row.message : void 0;
+    if (message?.role !== "toolResult") continue;
+    if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
+    if (message.isError === false) accepted.add(message.toolCallId);
+  }
+  return accepted;
+}
+function readAcceptedGateStatus(args) {
+  if (args === void 0) return "";
+  return typeof args.status === "string" ? args.status : args.status === void 0 ? "" : String(args.status);
+}
+function requireAcceptedGateSpan(rows, filePath) {
+  const span = extractSessionTimestampSpan(rows);
+  if (span.startedAt === void 0 || span.endedAt === void 0) {
+    throw new Error(
+      `accepted gate volume missing session timestamp span in ${filePath}`
+    );
+  }
+  const startedMs = Date.parse(span.startedAt);
+  const endedMs = Date.parse(span.endedAt);
+  if (!Number.isFinite(startedMs) || !Number.isFinite(endedMs) || endedMs < startedMs) {
+    throw new Error(
+      `accepted gate volume has unusable timestamp span in ${filePath}`
+    );
+  }
+  return {
+    startedAt: span.startedAt,
+    endedAt: span.endedAt,
+    wallMs: endedMs - startedMs
+  };
+}
+function nearestAttemptBindingBefore(rows, beforeIndex) {
+  for (let i = beforeIndex - 1; i >= 0; i -= 1) {
+    const row = rows[i];
+    if (!isParentAttemptBindingRow(row)) continue;
+    if (!isRecord(row.data) || !isRecord(row.data.parent)) continue;
+    const id = row.data.parent.attemptEntryId;
+    const sessionFile = row.data.parent.sessionFile;
+    return {
+      ...typeof id === "string" && id.length > 0 ? { attemptEntryId: id } : {},
+      ...typeof sessionFile === "string" && sessionFile.length > 0 ? { parentSessionFile: sessionFile } : {}
+    };
+  }
+  return {};
+}
+function extractAllAcceptedGateToolCalls(rows) {
+  const acceptedIds = acceptedGateReceiptIds(rows);
+  const out = [];
+  for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
+    const row = rows[rowIndex];
+    const message = isRecord(row.message) ? row.message : void 0;
+    if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
+    for (const part of message.content) {
+      if (!isRecord(part) || part.type !== "toolCall") continue;
+      if (typeof part.id !== "string" || part.id.length === 0) continue;
+      if (typeof part.name !== "string" || part.name.length === 0) continue;
+      if (!isGateTerminatingToolName(part.name)) continue;
+      if (!acceptedIds.has(part.id)) continue;
+      const binding = nearestAttemptBindingBefore(rows, rowIndex);
+      out.push({
+        toolName: part.name,
+        args: isRecord(part.arguments) ? part.arguments : void 0,
+        accepted: true,
+        rowIndex,
+        ...binding
+      });
+    }
+  }
+  return out;
+}
+function projectAcceptedGateCall(filePath, rows, call, pointerOfficer) {
+  const span = requireAcceptedGateSpan(intervalRowsForGateCall(rows, call.rowIndex), filePath);
+  const status = readAcceptedGateStatus(call.args);
+  const findings = asFindings(call.args?.findings);
+  const findingsCount = findings.length;
+  const bindingFields = {
+    ...call.attemptEntryId === void 0 ? {} : { attemptEntryId: call.attemptEntryId },
+    ...call.parentSessionFile === void 0 ? {} : { parentSessionFile: call.parentSessionFile }
   };
-}
-function emptyGateOfficerNumeratorAccum() {
-  return { rounds: 0, bounceCount: 0, passCount: 0, wallSum: 0 };
-}
-function absorbGateOfficerSummary(accum, summary) {
-  accum.rounds += summary.rounds;
-  accum.bounceCount += summary.bounceCount;
-  accum.passCount += summary.passCount;
-  if (summary.meanOfficerWallMs !== void 0) {
-    accum.wallSum += summary.meanOfficerWallMs * summary.rounds;
+  if (DISPATCH_TOOLS.has(call.toolName)) {
+    if (status !== "dispatch") {
+      return void 0;
+    }
+    const officer2 = normalizeOfficerArg(call.args?.officer);
+    if (officer2 === void 0) {
+      return void 0;
+    }
+    const reason = optionalDispatchReason(call.args?.reason);
+    return {
+      kind: "dispatch",
+      startedAt: span.startedAt,
+      officer: officer2,
+      status,
+      ...reason === void 0 ? {} : { reason },
+      ...bindingFields
+    };
+  }
+  const officer = call.toolName === "ak_submission_output" ? pointerOfficer : OFFICER_TOOL_TO_FACE[call.toolName];
+  if (officer === void 0) {
+    throw new Error(
+      `accepted gate receipt has unknown officer tool ${call.toolName} in ${filePath}`
+    );
   }
-}
-function finishGateOfficerNumerators(officer, accum) {
   return {
+    kind: "officer",
+    startedAt: span.startedAt,
+    endedAt: span.endedAt,
     officer,
-    rounds: accum.rounds,
-    bounceCount: accum.bounceCount,
-    passCount: accum.passCount,
-    bounceRate: rateMetric(accum.bounceCount, accum.rounds),
-    meanOfficerWallMs: accum.rounds === 0 ? ABSENT : presentMetric(accum.wallSum / accum.rounds)
+    status,
+    findings,
+    findingsCount,
+    officerWallMs: span.wallMs,
+    ...bindingFields
   };
 }
-async function aggregateGroup(index, input, ensureIssuePage) {
-  const issueEntries = [];
-  const roleAccums = /* @__PURE__ */ new Map();
-  const gateOfficerAccums = /* @__PURE__ */ new Map();
-  let reworkWallMs = 0;
-  let totalWallMs = 0;
-  let hasReworkSample = false;
-  const legWalls = [];
-  for (const ref of input.issues) {
-    const { issueNumber, bookKey } = ref;
-    const row = findAnalystLibraryIndexRow(index, issueNumber, bookKey);
-    if (row === void 0) {
-      issueEntries.push({ issueNumber, status: "absent", bookKey });
-      continue;
+async function classifyAuditorVolume(filePath, pointerOfficer) {
+  const rows = await readLedgerSessionJsonl(filePath);
+  const accepted = extractAllAcceptedGateToolCalls(rows);
+  if (accepted.length === 0) return [];
+  const volumes = [];
+  for (const call of accepted) {
+    const projected = call.toolName === "ak_submission_output" && pointerOfficer === void 0 ? void 0 : projectAcceptedGateCall(filePath, rows, call, pointerOfficer);
+    if (projected !== void 0) volumes.push(projected);
+  }
+  return volumes;
+}
+function pairGateRounds(volumes) {
+  const ordered = [...volumes].sort((a, b) => {
+    if (a.startedAt !== b.startedAt) return a.startedAt.localeCompare(b.startedAt);
+    if (a.kind !== b.kind) return a.kind === "dispatch" ? -1 : 1;
+    return 0;
+  });
+  const usedOfficerIdx = /* @__PURE__ */ new Set();
+  const rounds = [];
+  for (let i = 0; i < ordered.length; i += 1) {
+    const vol = ordered[i];
+    if (vol.kind !== "dispatch") continue;
+    let match;
+    for (let j = i + 1; j < ordered.length; j += 1) {
+      if (usedOfficerIdx.has(j)) continue;
+      const candidate = ordered[j];
+      if (candidate.kind !== "officer") continue;
+      if (candidate.officer !== vol.officer) continue;
+      if (vol.attemptEntryId === void 0 || candidate.attemptEntryId === void 0 || candidate.attemptEntryId !== vol.attemptEntryId) {
+        continue;
+      }
+      match = { index: j, officer: candidate };
+      break;
     }
-    const page = await ensureIssuePage({
-      projectRoot: row.projectRoot,
-      issueNumber,
-      bookKey: row.bookKey
+    if (match === void 0) continue;
+    usedOfficerIdx.add(match.index);
+    rounds.push({
+      roundIndex: rounds.length + 1,
+      officer: match.officer.officer,
+      status: match.officer.status,
+      officerWallMs: match.officer.officerWallMs,
+      officerStartedAt: match.officer.startedAt,
+      officerEndedAt: match.officer.endedAt,
+      findings: match.officer.findings,
+      findingsCount: match.officer.findingsCount,
+      origin: {
+        kind: "historical_dispatch",
+        ...vol.reason === void 0 ? {} : { reason: vol.reason }
+      }
     });
-    issueEntries.push({
-      issueNumber,
-      status: "present",
-      bookKey: row.bookKey,
-      projectRoot: row.projectRoot
+  }
+  for (let i = 0; i < ordered.length; i += 1) {
+    const vol = ordered[i];
+    if (vol.kind !== "officer" || usedOfficerIdx.has(i)) continue;
+    rounds.push({
+      roundIndex: 0,
+      officer: vol.officer,
+      status: vol.status,
+      officerWallMs: vol.officerWallMs,
+      officerStartedAt: vol.startedAt,
+      officerEndedAt: vol.endedAt,
+      findings: vol.findings,
+      findingsCount: vol.findingsCount,
+      origin: { kind: "direct" }
     });
-    const acceptance = page.acceptanceSuccessRework;
-    if (acceptance !== void 0) {
-      for (const roleStats of acceptance.byRole) {
-        const accum = roleAccums.get(roleStats.role) ?? emptyRoleAccum();
-        absorbRole(accum, roleStats);
-        roleAccums.set(roleStats.role, accum);
-      }
-      reworkWallMs += acceptance.rework.reworkWallMs;
-      totalWallMs += acceptance.rework.totalWallMs;
-      hasReworkSample = true;
+  }
+  return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
+}
+async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, options = {}) {
+  const directories = typeof auditorRolesDirectory === "string" ? [auditorRolesDirectory] : auditorRolesDirectory;
+  const volumes = [];
+  const classifiedOfficerSessions = /* @__PURE__ */ new Set();
+  for (const directory of directories) {
+    let names;
+    try {
+      const entries = await readdir5(directory, { withFileTypes: true });
+      names = entries.filter(
+        (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
+      ).map((e) => e.name).sort();
+    } catch (error) {
+      if (isEnoent(error)) continue;
+      throw error;
     }
-    const legWallClock = page.legWallClock;
-    if (legWallClock !== void 0) {
-      for (const leg of legWallClock.ranking) {
-        legWalls.push(leg.wallMs);
+    for (const name of names) {
+      const path = join32(directory, name);
+      const fromPointer = name.endsWith(".pointer.json");
+      const pointer = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : void 0;
+      const sessionPath = pointer?.sessionFile ?? path;
+      if (fromPointer) {
+        if (classifiedOfficerSessions.has(sessionPath)) continue;
+        classifiedOfficerSessions.add(sessionPath);
       }
-    }
-    const gateCycles = page.gateCycles;
-    if (gateCycles !== void 0) {
-      for (const summary of gateCycles.byOfficer) {
-        const accum = gateOfficerAccums.get(summary.officer) ?? emptyGateOfficerNumeratorAccum();
-        absorbGateOfficerSummary(accum, summary);
-        gateOfficerAccums.set(summary.officer, accum);
+      const officer = pointer?.officer === "inspector" || pointer?.officer === "notary" ? pointer.officer : void 0;
+      const classified = await classifyAuditorVolume(sessionPath, officer);
+      for (const volume of classified) {
+        if (options.parentSessionFile !== void 0 && volume.parentSessionFile !== void 0 && !await retainedRunPathsMatch(volume.parentSessionFile, options.parentSessionFile, runDirectoryOfSessionFile(options.parentSessionFile))) {
+          continue;
+        }
+        volumes.push(volume);
       }
     }
   }
-  const byRole = [...roleAccums.keys()].sort((a, b) => a.localeCompare(b)).map((role) => finishRole(role, roleAccums.get(role)));
-  const gateCyclesByOfficer = ["inspector", "notary"].filter((officer) => gateOfficerAccums.has(officer)).map(
-    (officer) => finishGateOfficerNumerators(officer, gateOfficerAccums.get(officer))
-  );
-  return {
-    groupLabel: input.groupLabel,
-    issues: issueEntries,
-    byRole,
-    reworkRatio: hasReworkSample ? rateMetric(reworkWallMs, totalWallMs) : ABSENT,
-    medianWallMs: optionalMedian(legWalls),
-    gateCyclesByOfficer
-  };
-}
-async function runAnalystCohortMode(ledgerHome, input, ensureIssuePage) {
-  const index = await readAnalystLibraryIndexPage(ledgerHome);
-  const group0 = await aggregateGroup(index, input.groups[0], ensureIssuePage);
-  const group1 = await aggregateGroup(index, input.groups[1], ensureIssuePage);
-  return {
-    mode: "cohort",
-    groups: [group0, group1]
-  };
+  return pairGateRounds(volumes);
 }
-var ABSENT;
-var init_analyst_cohort = __esm({
-  "src/analyst-cohort.ts"() {
+var DISPATCH_TOOLS, OFFICER_TOOL_TO_FACE, OFFICER_ARG_ALIASES;
+var init_analyst_gate_cycles_read = __esm({
+  "src/analyst-gate-cycles-read.ts"() {
     "use strict";
-    init_analyst_index();
-    init_analyst_median();
-    ABSENT = { status: "absent" };
+    init_compliance_transport();
+    init_ledger_session_read();
+    init_unknown_value();
+    init_role_run_relocation();
+    init_role_run_placement();
+    init_archivist_record_pointer();
+    DISPATCH_TOOLS = /* @__PURE__ */ new Set(["ak_menxia_output", "ak_gatekeeper_output"]);
+    OFFICER_TOOL_TO_FACE = {
+      ak_jishizhong_output: "inspector",
+      ak_inspector_output: "inspector",
+      ak_fubaolang_output: "notary",
+      ak_notary_output: "notary"
+    };
+    OFFICER_ARG_ALIASES = {
+      jishizhong: "inspector",
+      inspector: "inspector",
+      fubaolang: "notary",
+      notary: "notary"
+    };
   }
 });
 
 // src/analyst-ledger.ts
-import { readdir as readdir6, readFile as readFile19 } from "node:fs/promises";
-import { basename as basename9, join as join37 } from "node:path";
+import { readdir as readdir6, readFile as readFile18 } from "node:fs/promises";
+import { basename as basename10, join as join33 } from "node:path";
 async function readExistingRunLifecycleState(runDirectory) {
   return (await readRoleRunIdentity(runDirectory))?.state;
 }
@@ -29826,7 +29818,7 @@ function ghostLeaseCheckFromAutopsy(autopsy) {
   }
 }
 async function classifyGhostCandidate(input) {
-  const autopsy = await autopsyWriterLock(join37(input.runDirectory, "writer.lock"));
+  const autopsy = await autopsyWriterLock(join33(input.runDirectory, "writer.lock"));
   const leaseCheck = ghostLeaseCheckFromAutopsy(autopsy);
   if (leaseCheck === void 0) return { kind: "live" };
   return {
@@ -29838,11 +29830,6 @@ async function classifyGhostCandidate(input) {
     }
   };
 }
-function parseRunDirectoryName2(name) {
-  const at = name.lastIndexOf("@");
-  if (at <= 0 || at === name.length - 1) return void 0;
-  return { runId: name.slice(0, at), role: name.slice(at + 1) };
-}
 async function listLedgerBookNames(booksRoot) {
   try {
     const entries = await readdir6(booksRoot, { withFileTypes: true });
@@ -29855,7 +29842,7 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile19(join37(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile18(join33(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError(error)) return void 0;
     throw error;
@@ -29888,15 +29875,15 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile19(join37(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile18(join33(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (isRecord(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
-      return parsed.sessionFile;
+      return typeof parsed.runDirectory === "string" ? rewriteRunDirectoryPathValue(parsed.sessionFile, parsed.runDirectory, runDirectory) : parsed.sessionFile;
     }
   } catch (error) {
     if (!isMissingPathError(error)) throw error;
   }
-  return join37(runDirectory, "session", "session.jsonl");
+  return sessionFileOf(runDirectory);
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -30098,9 +30085,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join37(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = sessionFileOf(input.runDirectory);
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join37(input.runDirectory, "session", "auditor-roles"),
+      sitianRunVolumeDirectory(input.runDirectory, "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -30135,7 +30122,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join37(ledgerHome, "books");
+  const booksRoot = join33(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -30168,7 +30155,7 @@ async function scanAnalystIssueRuns(input) {
   const ghostLegs = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const bookDir = join37(booksRoot, book);
+    const bookDir = join33(booksRoot, book);
     let runDirectories;
     try {
       runDirectories = await listBookRunDirectories(bookDir);
@@ -30177,8 +30164,8 @@ async function scanAnalystIssueRuns(input) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const runName = basename9(runDirectory);
-      const parsed = parseRunDirectoryName2(runName);
+      const runName = basename10(runDirectory);
+      const parsed = parseRunLeaf(runName);
       if (parsed === void 0) continue;
       let scopeFields;
       try {
@@ -30228,8 +30215,10 @@ var init_analyst_ledger = __esm({
     init_analyst_book_key();
     init_activation_ledger_topology();
     init_role_run_placement();
+    init_sitian_appender();
     init_run_lifecycle();
     init_run_ticket_number();
+    init_role_run_relocation();
     init_ledger_session_read();
     init_run_terminal_artifacts();
     init_analyst_gate_cycles_read();
@@ -30901,7 +30890,7 @@ var init_analyst_metric_family = __esm({
 });
 
 // src/analyst-page.ts
-import { dirname as dirname22, join as join38 } from "node:path";
+import { dirname as dirname21, join as join34 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -30912,7 +30901,7 @@ function analystIssuePageKey(address) {
   return sha256Hex(parts.join("\0")).slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join38(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join34(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31023,7 +31012,7 @@ async function buildAnalystIssueMetricsPage(input) {
 }
 async function writeAnalystIssueMetricsPage(ledgerHome, page) {
   const path = analystIssuePagePath(ledgerHome, analystIssuePageAddressFromPage(page));
-  ensureRealDirectoryTree(ledgerHome, dirname22(path));
+  ensureRealDirectoryTree(ledgerHome, dirname21(path));
   assertLedgerFileInsideHome(path, ledgerHome);
   await writeFileAtomically(path, `${JSON.stringify(page, null, 2)}
 `);
@@ -31148,7 +31137,7 @@ var init_analyst_model_groups = __esm({
 });
 
 // src/analyst-entry.ts
-import { readFile as readFile20 } from "node:fs/promises";
+import { readFile as readFile19 } from "node:fs/promises";
 function cachedPageMatchesRequestedScope(page, input) {
   if (page.bookKey !== input.bookKey) return false;
   const requestedTicket = input.ticketNumber ?? input.issueNumber;
@@ -31175,7 +31164,7 @@ async function readOrComputeAnalystIssuePage(input, options) {
     ...issueNumber === void 0 && input.bookKey === void 0 ? { scopeRootIdentity: projectRoot } : {}
   });
   try {
-    const raw = await readFile20(pagePath, "utf8");
+    const raw = await readFile19(pagePath, "utf8");
     const page = JSON.parse(raw);
     if (cachedPageMatchesRequestedScope(page, { bookKey, ...input })) {
       const ghostScan = await scanAnalystIssueRuns({
@@ -31276,7 +31265,7 @@ async function runAnalystModelGroupsMode(input, home) {
       scopeRootIdentity: projectRoot
     });
     try {
-      const raw = await readFile20(pagePath, "utf8");
+      const raw = await readFile19(pagePath, "utf8");
       JSON.parse(raw);
     } catch (error) {
       if (!isMissingPathError(error)) {
@@ -31374,8 +31363,8 @@ var init_analyst_entry = __esm({
 });
 
 // src/public-cli/analyst-run.ts
-import { readFile as readFile21 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, resolve as resolve13 } from "node:path";
+import { readFile as readFile20 } from "node:fs/promises";
+import { isAbsolute as isAbsolute10, resolve as resolve12 } from "node:path";
 function resolveAnalystIssueBookKeyFromCwd(cwd = process.cwd()) {
   try {
     return resolveBookKeyFromGit(cwd);
@@ -31424,10 +31413,10 @@ async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPaths) {
     );
   }
   const sourcePath = attachmentPaths[0];
-  const absolute = isAbsolute10(sourcePath) ? sourcePath : resolve13(sourcePath);
+  const absolute = isAbsolute10(sourcePath) ? sourcePath : resolve12(sourcePath);
   let bytes;
   try {
-    bytes = await readFile21(absolute);
+    bytes = await readFile20(absolute);
   } catch (error) {
     throw new CliUsageError(
       `analyst sweep attachment is not a readable regular file: ${sourcePath}`,
@@ -32448,7 +32437,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { dirname as dirname23, join as join39 } from "node:path";
+import { dirname as dirname22, join as join35 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32535,10 +32524,10 @@ function linkPackage(packageRoot2, name, targetDir) {
 }
 
 // src/public-cli/main.ts
-var here = dirname23(fileURLToPath2(import.meta.url));
+var here = dirname22(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join39(binDir, "..", "..");
-  if (existsSync11(join39(canonical, "package.json"))) {
+  const canonical = join35(binDir, "..", "..");
+  if (existsSync11(join35(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;