@akagilnc/pi-workflow-roles 0.1.5583 → 0.1.5593

package/dist/acp-host/production-host.js

@@ -1200,7 +1200,7 @@ async function runEngineDetourOnce(input) {
   }
   const command = input.argv[0];
   const args = input.argv.slice(1);
-  return await new Promise((resolve22, reject) => {
+  return await new Promise((resolve21, reject) => {
     let settled = false;
     const signal = input.signal;
     const child = spawn(command, args, {
@@ -1230,7 +1230,7 @@ async function runEngineDetourOnce(input) {
       if (signal !== void 0) {
         signal.removeEventListener("abort", onAbort);
       }
-      resolve22(result);
+      resolve21(result);
     };
     const onAbort = () => {
       fail4(signal !== void 0 ? abortReasonError(signal) : new Error("aborted"));
@@ -2825,19 +2825,7 @@ var init_cli_errors = __esm({
   }
 });
 
-// src/sha256.ts
-import { createHash } from "node:crypto";
-function sha256Hex(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-var init_sha256 = __esm({
-  "src/sha256.ts"() {
-    "use strict";
-  }
-});
-
 // src/collector-config.ts
-import { readFile as readFile3 } from "node:fs/promises";
 function fail3(message, cause) {
   throw new Error(message, cause === void 0 ? void 0 : { cause });
 }
@@ -2865,47 +2853,10 @@ function parseCollectorPrNumber(raw) {
   if (value === void 0) fail3(typeof raw === "string" && !isTicketNumberString(raw) ? "Collector pull request number must be a positive safe integer string" : "Collector pull request number must be a positive safe integer");
   return value;
 }
-function canonicalManifest(requests) {
-  return `${JSON.stringify({ requests: requests.map((request) => ({ id: request.id, body: request.requestBody })) })}
-`;
-}
-function emptyCollectorManifest() {
-  const canonicalJson2 = canonicalManifest([]);
-  return { requests: [], canonicalJson: canonicalJson2, digest: sha256Hex(canonicalJson2) };
-}
-async function loadCollectorManifest(path) {
-  let bytes;
-  try {
-    bytes = await readFile3(path);
-  } catch (error) {
-    fail3(`Collector request manifest is unreadable at ${path}`, error);
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
-  } catch (error) {
-    fail3("Collector request manifest must be UTF-8 JSON", error);
-  }
-  if (!isRecord(parsed)) fail3("Collector request manifest must be an object");
-  const rawRequests = parsed.requests ?? [];
-  if (!Array.isArray(rawRequests)) fail3("Collector request manifest requests must be an array");
-  const requests = [];
-  const ids = /* @__PURE__ */ new Set();
-  for (const [index, item] of rawRequests.entries()) {
-    if (!isRecord(item) || typeof item.id !== "string" || item.id.length === 0 || typeof item.body !== "string" || item.body.trim() === "") fail3(`Collector request manifest requests[${index}] is invalid`);
-    if (ids.has(item.id)) fail3(`Collector request manifest has duplicate request id "${item.id}"`);
-    ids.add(item.id);
-    requests.push({ id: item.id, requestBody: item.body });
-  }
-  const canonicalJson2 = canonicalManifest(requests);
-  return { requests, canonicalJson: canonicalJson2, digest: sha256Hex(canonicalJson2), sourcePath: path };
-}
 var COLLECTOR_OWNER_PATTERN, COLLECTOR_REPO_PATTERN;
 var init_collector_config = __esm({
   "src/collector-config.ts"() {
     "use strict";
-    init_sha256();
-    init_unknown_value();
     init_run_ticket_number();
     COLLECTOR_OWNER_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
     COLLECTOR_REPO_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,98}[A-Za-z0-9])?$/;
@@ -3578,13 +3529,13 @@ var init_gatekeeper_role = __esm({
 });
 
 // src/ledger-session-read.ts
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile3 } from "node:fs/promises";
 async function readStrictPiSessionJsonl(path) {
-  const text = await readFile4(path, "utf8");
+  const text = await readFile3(path, "utf8");
   return text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
 }
 async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile4(path, "utf8");
+  const text = await readFile3(path, "utf8");
   const lines = text.split("\n");
   const out = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -4997,6 +4948,17 @@ var init_dossier_resolution = __esm({
   }
 });
 
+// src/sha256.ts
+import { createHash } from "node:crypto";
+function sha256Hex(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_sha256 = __esm({
+  "src/sha256.ts"() {
+    "use strict";
+  }
+});
+
 // src/package-contracts/terminating-tools.ts
 function isTerminatingToolName(name) {
   return TERMINATING_TOOL_NAMES.includes(name);
@@ -5058,7 +5020,7 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir2, readFile as readFile5, realpath, stat } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile4, realpath, stat } from "node:fs/promises";
 import { dirname as dirname6, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
 async function discoverCaseFiles(root) {
   const found = [];
@@ -5171,7 +5133,7 @@ async function loadDoctorCase(runsPath, projectRoot) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep2).join("/");
-    const bytes = await readFile5(path);
+    const bytes = await readFile4(path);
     const content = bytes.toString("utf8");
     const kind = id.split("/").length === 2 && id.endsWith("/log.jsonl") ? "log" : "session";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -5249,7 +5211,7 @@ var init_git_object_id = __esm({
 
 // src/merger-git-state.ts
 import { execFile } from "node:child_process";
-import { access, readFile as readFile6 } from "node:fs/promises";
+import { access, readFile as readFile5 } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { isAbsolute as isAbsolute3, resolve as resolve6 } from "node:path";
 import { promisify } from "node:util";
@@ -5319,7 +5281,7 @@ function createProductionMergerGitState(repositoryRoot = process.cwd()) {
       const mergeHeadPath = isAbsolute3(mergeHeadReported) ? mergeHeadReported : resolve6(repositoryRoot, mergeHeadReported);
       let sourceObjectId = "";
       if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile6(mergeHeadPath), "Git MERGE_HEAD");
+        const raw = exactUtf8(await readFile5(mergeHeadPath), "Git MERGE_HEAD");
         const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
         if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
         if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
@@ -5465,7 +5427,7 @@ var init_session_dialogue = __esm({
 });
 
 // src/ticket-provenance.ts
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 import { join as join9, resolve as resolve7 } from "node:path";
 function dialogueSessionSourceRoots(home) {
   const machineHome = typeof home === "string" && home.trim() !== "" ? home : packageMachineHome();
@@ -5513,7 +5475,7 @@ async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, ho
   const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
   let history;
   try {
-    history = await readFile7(join9(runDirectory, RUN_HISTORY_FILE), "utf8");
+    history = await readFile6(join9(runDirectory, RUN_HISTORY_FILE), "utf8");
   } catch (error) {
     if (errnoCode(error) === "ENOENT") return;
     throw error;
@@ -6356,8 +6318,8 @@ var init_option_definitions = __esm({
       repeatable: true,
       form: "option",
       description: {
-        en: "Attach a regular file; frozen at admission (repeatable).",
-        zh: "\u9644\u52A0\u666E\u901A\u6587\u4EF6\uFF1B\u53D7\u7406\u5373\u51BB\u7ED3\uFF08\u53EF\u91CD\u590D\uFF09\u3002"
+        en: "Caller file path passed as-is to the role (repeatable). Package does not read, copy, or validate; use an absolute path when cwd differs from --project.",
+        zh: "\u8C03\u7528\u65B9\u6587\u4EF6\u8DEF\u5F84\u539F\u6837\u9012\u7ED9\u8859\u95E8\uFF08\u53EF\u91CD\u590D\uFF09\u3002\u5305\u4E0D\u8BFB\u3001\u4E0D\u590D\u5236\u3001\u4E0D\u6821\u9A8C\uFF1B\u8C03\u7528\u65B9\u5F53\u524D\u76EE\u5F55\u4E0E --project \u4E0D\u540C\u65F6\u8BF7\u7ED9\u7EDD\u5BF9\u8DEF\u5F84\u3002"
       }
     };
     SHARED_PHASE_SEMANTICS = {
@@ -6532,8 +6494,8 @@ var init_option_definitions = __esm({
         repeatable: false,
         form: "option",
         description: {
-          en: "Optional request manifest JSON path ({requests:[{id,body}]}). Parsed for semantics and passed to the Collector as materials \u2014 not a machine collection directive.",
-          zh: "\u53EF\u9009 request manifest JSON \u8DEF\u5F84\uFF08{requests:[{id,body}]}\uFF09\u3002\u6309\u8BED\u4E49\u89E3\u6790\u540E\u4F5C\u4E3A\u6750\u6599\u9012\u7ED9\u901A\u8FDB\u53F8\uFF0C\u4E0D\u662F\u673A\u5668\u4EE3\u6536 finding \u7684\u6307\u4EE4\u3002"
+          en: "Caller path to a request manifest JSON file, passed as-is. Package does not read, copy, or validate; use an absolute path when cwd differs from --project.",
+          zh: "\u8C03\u7528\u65B9 request manifest JSON \u8DEF\u5F84\uFF0C\u539F\u6837\u4F20\u9012\u3002\u5305\u4E0D\u8BFB\u3001\u4E0D\u590D\u5236\u3001\u4E0D\u6821\u9A8C\uFF1B\u8C03\u7528\u65B9\u5F53\u524D\u76EE\u5F55\u4E0E --project \u4E0D\u540C\u65F6\u8BF7\u7ED9\u7EDD\u5BF9\u8DEF\u5F84\u3002"
         }
       }
     ];
@@ -6992,16 +6954,22 @@ var init_option_definitions = __esm({
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync3 } from "node:fs";
 import {
-  lstat as lstat2,
-  mkdtemp,
-  readFile as readFile8,
+  readFile as readFile7,
   realpath as realpath3,
   rename,
-  rm,
   writeFile
 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename as basename8, dirname as dirname8, isAbsolute as isAbsolute5, join as join11, resolve as resolve9 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute5, join as join11, resolve as resolve9 } from "node:path";
+function normalizeAdmittedAttachment(raw) {
+  if (typeof raw !== "object" || raw === null) return void 0;
+  const record = raw;
+  const path = record.path;
+  if (typeof path === "string") return { path };
+  return void 0;
+}
+function admitCallerAttachments(attachmentPaths) {
+  return attachmentPaths.map((path) => ({ path }));
+}
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -7180,19 +7148,11 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
       "taskPath",
       "packetPath",
       "prerequisitesPath",
-      "requestManifestPath",
       "mergerInputPath"
     ],
     oldRunDirectory,
     target.runDirectory
   );
-  for (const attachment of admitted.attachments) {
-    attachment.frozenPath = rewriteRunDirectoryPathValue(
-      attachment.frozenPath,
-      oldRunDirectory,
-      target.runDirectory
-    );
-  }
   admitted.principal = principal;
   renderCurrentSync(target.runDirectory);
   return { oldRunDirectory, newRunDirectory: target.runDirectory };
@@ -7229,7 +7189,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot, selectedRoleEntry) {
   const rolePackageRoot = packageRoot;
   const raw = JSON.parse(
-    await readFile8(join11(rolePackageRoot, "package.json"), "utf8")
+    await readFile7(join11(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -7285,7 +7245,7 @@ function assignPublicSeatOption(owner, taken, fields) {
   const value = taken.value;
   switch (taken.def.id) {
     case "attach":
-      fields.attachmentPaths.push(requireOptionPath(taken.def.canonical, value));
+      fields.attachmentPaths.push(requireProvidedOptionValue(taken.def.canonical, value));
       return;
     case "project":
       fields.project = requireOptionPath(taken.def.canonical, value);
@@ -7329,7 +7289,7 @@ function assignPublicSeatOption(owner, taken, fields) {
       fields.repo = parseRepoOption(value);
       return;
     case "request-manifest":
-      fields.requestManifestPath = requireOptionPath(taken.def.canonical, value);
+      fields.requestManifestPath = requireProvidedOptionValue(taken.def.canonical, value);
       return;
     case "issue": {
       if (value === void 0 || value.trim() === "") {
@@ -7444,6 +7404,12 @@ function requireOptionPath(flag, value) {
   }
   return value;
 }
+function requireProvidedOptionValue(flag, value) {
+  if (value === void 0) {
+    throw new CliUsageError(`${flag} requires a path`);
+  }
+  return value;
+}
 function skillArgTokenFault(value) {
   if (value === void 0 || value.trim() === "") return "empty";
   if (/\s/.test(value)) return "whitespace";
@@ -7496,124 +7462,6 @@ function requireAuthorityRef(value) {
     optionLike: "--authority-ref requires a durable reference, not inline Spec prose"
   });
 }
-async function readRegularFileAttachment(sourcePath) {
-  const absolute = isAbsolute5(sourcePath) ? sourcePath : resolve9(sourcePath);
-  let st;
-  try {
-    st = await lstat2(absolute);
-  } catch (error) {
-    throw new CliUsageError(
-      `attachment is not a readable regular file: ${sourcePath}`,
-      { cause: error }
-    );
-  }
-  if (!st.isFile() || st.isSymbolicLink()) {
-    throw new CliUsageError(
-      `attachment must be a regular file (not a directory or symlink): ${sourcePath}`
-    );
-  }
-  try {
-    return { absolute, bytes: await readFile8(absolute) };
-  } catch (error) {
-    throw new CliUsageError(
-      `attachment is not a readable regular file: ${sourcePath}`,
-      { cause: error }
-    );
-  }
-}
-async function removePreparedAttachmentDirectory(stagingDirectory) {
-  await rm(stagingDirectory, { recursive: true, force: true });
-}
-async function withPreparedAttachments(attachmentPaths, use) {
-  if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp(join11(tmpdir(), "ak-role-attachments-"));
-  const prepared = [];
-  let result;
-  try {
-    for (let index = 0; index < attachmentPaths.length; index += 1) {
-      const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join11(stagingDirectory, String(index).padStart(6, "0"));
-      await writeFile(snapshotPath, bytes);
-      prepared.push({ absolute, snapshotPath });
-    }
-    result = await use(prepared);
-  } catch (primary) {
-    try {
-      await removePreparedAttachmentDirectory(stagingDirectory);
-    } catch (cleanup) {
-      throw new AggregateError(
-        [primary, cleanup],
-        "attachment snapshot operation failed and cleanup also failed",
-        { cause: primary }
-      );
-    }
-    throw primary;
-  }
-  await removePreparedAttachmentDirectory(stagingDirectory);
-  return result;
-}
-async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join11(
-    destinationDir,
-    `${String(index).padStart(2, "0")}-${basename8(provenancePath)}`
-  );
-  await writeFile(frozenPath, bytes);
-  return {
-    provenancePath,
-    frozenPath,
-    byteLength: bytes.byteLength,
-    sha256: sha256Hex(bytes),
-    mediaKind: "regular-file"
-  };
-}
-async function freezePreparedAttachment(prepared, destinationDir, index) {
-  return freezeAttachmentBytes(
-    prepared.absolute,
-    await readFile8(prepared.snapshotPath),
-    destinationDir,
-    index
-  );
-}
-async function freezeRegularFileAttachment(sourcePath, destinationDir, index) {
-  const { absolute, bytes } = await readRegularFileAttachment(sourcePath);
-  return {
-    attachment: await freezeAttachmentBytes(absolute, bytes, destinationDir, index),
-    body: bytes
-  };
-}
-async function freezeAttachments(ledgerHome, attachmentPaths, attachmentsDirectory) {
-  const attachments = [];
-  if (attachmentPaths.length > 0) {
-    ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  }
-  for (let i = 0; i < attachmentPaths.length; i += 1) {
-    const frozen = await freezeRegularFileAttachment(
-      attachmentPaths[i],
-      attachmentsDirectory,
-      i
-    );
-    attachments.push(frozen.attachment);
-  }
-  return attachments;
-}
-async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
-  if (attachmentPaths.length === 0) return [];
-  const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join11(runDirectory, "attachments", summonsKey);
-  ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  return freezeAttachments(ledgerHome, attachmentPaths, attachmentsDirectory);
-}
-async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
-  if (prepared.length === 0) return [];
-  const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join11(runDirectory, "attachments") : join11(runDirectory, "attachments", summonsKey);
-  ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  const attachments = [];
-  for (let index = 0; index < prepared.length; index += 1) {
-    attachments.push(await freezePreparedAttachment(prepared[index], attachmentsDirectory, index));
-  }
-  return attachments;
-}
 function ticketAdmissionFields(ticketNumber) {
   if (ticketNumber === void 0) return {};
   return {
@@ -7702,7 +7550,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (parsed.prerequisitesPath !== void 0) {
         const absolutePrereq = isAbsolute5(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve9(parsed.prerequisitesPath);
         try {
-          prerequisitesSource = await readFile8(absolutePrereq, "utf8");
+          prerequisitesSource = await readFile7(absolutePrereq, "utf8");
         } catch (error) {
           throw new CliUsageError(
             `fixer prerequisites path is unreadable: ${parsed.prerequisitesPath}`,
@@ -7759,37 +7607,17 @@ async function admitPublicRole(role, parsed, env, override) {
       } else {
         repository = resolveGitHubRemoteRepository(projectRoot);
       }
-      let manifest = emptyCollectorManifest();
-      let manifestCanonicalJson;
-      if (parsed.requestManifestPath !== void 0) {
-        try {
-          manifest = await loadCollectorManifest(parsed.requestManifestPath);
-          manifestCanonicalJson = manifest.canonicalJson;
-        } catch (error) {
-          throw new CliUsageError(
-            errorText(error),
-            { cause: error }
-          );
-        }
-      }
-      const manifestDigest = manifest.digest;
       const admittedCollector = await admitStandardMaterialInvocation("collector", {
         ...shared,
         instruction,
         attachmentPaths,
         ...project,
-        placedFields: async (placed) => {
-          let requestManifestPath;
-          if (manifestCanonicalJson !== void 0) {
-            requestManifestPath = join11(placed.runDirectory, "request-manifest.json");
-            await writeFile(requestManifestPath, manifestCanonicalJson, "utf8");
-          }
+        placedFields: async () => {
           return {
             ...explicitPrNumber === void 0 ? {} : { prNumber: explicitPrNumber },
             repository: repository.canonical,
             repositoryDisplay: repository.display,
-            ...requestManifestPath === void 0 ? {} : { requestManifestPath },
-            manifestDigest
+            ...parsed.requestManifestPath === void 0 ? {} : { requestManifestPath: parsed.requestManifestPath }
           };
         }
       });
@@ -7802,12 +7630,10 @@ async function admitPublicRole(role, parsed, env, override) {
         );
       }
       const issueNumber = parsed.issueNumber;
-      let frozenAttachments = [];
-      const admittedDoctor = await admitStandardMaterialInvocation("doctor", {
+      return admitStandardMaterialInvocation("doctor", {
         ...shared,
         instruction,
-        attachmentPaths: [],
-        freezeAttachments: false,
+        attachmentPaths,
         ...project,
         placedFields: async (placed) => {
           let caseRunsPath;
@@ -7848,16 +7674,13 @@ async function admitPublicRole(role, parsed, env, override) {
               { cause: error }
             );
           }
-          frozenAttachments = await freezeAttachments(placed.ledgerHome, attachmentPaths, placed.attachmentsDirectory);
           return {
             issueNumber,
             caseRunsPath,
-            caseIdentity,
-            attachments: persistedAttachmentRefs(frozenAttachments)
+            caseIdentity
           };
         }
       });
-      return { ...admittedDoctor, attachments: frozenAttachments };
     }
     case "source-locator": {
       const projectRoot = resolve9(parsed.project ?? shared.cwd);
@@ -7884,7 +7707,7 @@ async function admitPublicRole(role, parsed, env, override) {
         instruction: "",
         attachmentPaths: [],
         ...project,
-        freezeAttachments: false,
+        recordAttachments: false,
         admittedFields: {
           sourceRunPath: sourceRun.runDirectory,
           sourceRun
@@ -7901,7 +7724,7 @@ async function admitPublicRole(role, parsed, env, override) {
         instruction,
         attachmentPaths: [],
         ...project,
-        freezeAttachments: false,
+        recordAttachments: false,
         admittedFields: { baseRevision }
       });
     }
@@ -8013,7 +7836,7 @@ async function placeRoleAdmission(options) {
     home: options.home,
     ...options.materialize === void 0 ? {} : { materialize: options.materialize }
   });
-  const attachments = options.freezeAttachments === false ? [] : await freezeAttachments(ledgerHome, options.attachmentPaths, attachmentsDirectory);
+  const attachments = options.recordAttachments === false ? [] : admitCallerAttachments(options.attachmentPaths);
   return {
     runId,
     bookKey,
@@ -8029,13 +7852,7 @@ async function placeRoleAdmission(options) {
   };
 }
 function persistedAttachmentRefs(attachments) {
-  return attachments.map((attachment) => ({
-    provenancePath: attachment.provenancePath,
-    frozenPath: attachment.frozenPath,
-    byteLength: attachment.byteLength,
-    sha256: attachment.sha256,
-    mediaKind: attachment.mediaKind
-  }));
+  return attachments.map((attachment) => ({ path: attachment.path }));
 }
 async function persistPlacedAdmission(admitted, placed, model) {
   writeAdmittedRequestPersistence(placed.runDirectory, admitted, {
@@ -8054,14 +7871,14 @@ async function persistPlacedAdmission(admitted, placed, model) {
 }
 async function admitStandardMaterialInvocation(role, options) {
   const defer = options.deferPersistence === true;
-  const skipFreeze = defer || options.freezeAttachments === false;
+  const skipAttachments = defer || options.recordAttachments === false;
   const placed = await placeRoleAdmission({
     role,
     home: options.home,
     principalAuthority: options.principalAuthority,
     cwd: options.cwd,
     attachmentPaths: options.attachmentPaths,
-    ...skipFreeze ? { freezeAttachments: false } : {},
+    ...skipAttachments ? { recordAttachments: false } : {},
     ...defer ? { materialize: false } : {},
     ...options.project === void 0 ? {} : { project: options.project },
     ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
@@ -8069,7 +7886,7 @@ async function admitStandardMaterialInvocation(role, options) {
   });
   const correlationFields = options.correlationId === void 0 ? {} : { correlationId: options.correlationId };
   const instruction = options.instruction;
-  const instructionEmpty = instruction.trim() === "";
+  const instructionEmpty = instruction.length === 0;
   const placedExtra = options.placedFields === void 0 ? void 0 : await options.placedFields(placed);
   const admittedFields = {
     ...options.admittedFields ?? {},
@@ -8124,7 +7941,7 @@ function buildInstructionTransportPrompt(admitted) {
       throw new Error("baseline transport prompt is missing the bound revision");
     }
     const lines2 = [admitted.baseRevision];
-    if (!admitted.instructionEmpty) {
+    if (admitted.instruction.length > 0) {
       lines2.push("", admitted.instruction);
     }
     return lines2.join("\n");
@@ -8138,17 +7955,21 @@ function buildInstructionTransportPrompt(admitted) {
       lens: admitted.lens,
       authorityRefs: admitted.authorityRefs
     })];
-    if (!admitted.instructionEmpty && admitted.instruction.trim() !== "") {
+    if (admitted.instruction.length > 0) {
       lines2.push("", admitted.instruction);
     }
     return lines2.join("\n");
   }
-  const lines = [admitted.instructionEmpty ? "" : admitted.instruction];
-  if (admitted.attachments.length > 0) {
+  const lines = [admitted.instruction];
+  const flaggedPaths = [
+    ...admitted.attachments.map((attachment) => `--attach ${attachment.path}`),
+    ...admitted.requestManifestPath === void 0 ? [] : [`--request-manifest ${admitted.requestManifestPath}`]
+  ];
+  if (flaggedPaths.length > 0) {
     lines.push("");
-    lines.push("\u5DF2\u53D7\u7406\u9644\u4EF6\uFF08\u51BB\u7ED3\u5FEB\u7167\u8DEF\u5F84\uFF09\uFF1A");
-    for (const attachment of admitted.attachments) {
-      lines.push(`- ${attachment.frozenPath}`);
+    lines.push("\u5DF2\u53D7\u7406\u9644\u4EF6\uFF1A");
+    for (const entry of flaggedPaths) {
+      lines.push(`- ${entry}`);
     }
   }
   return lines.join("\n");
@@ -8159,8 +7980,7 @@ async function materializeCountersignInvocation(admitted, options) {
     home: options.home,
     principalAuthority: options.principalAuthority,
     cwd: admitted.projectRoot,
-    attachmentPaths: [],
-    freezeAttachments: false,
+    attachmentPaths: options.attachmentPaths,
     runId: admitted.runId,
     ...options.ticketNumber === void 0 ? {} : { assertedTicketNumber: options.ticketNumber }
   });
@@ -8171,11 +7991,7 @@ async function materializeCountersignInvocation(admitted, options) {
   if (ticketFields.ticketNumber !== void 0) {
     admitted.ticketNumber = ticketFields.ticketNumber;
   }
-  const attachments = await freezePreparedAttachmentsIntoRun(
-    options.preparedAttachments,
-    admitted.runDirectory
-  );
-  admitted.attachments = attachments;
+  admitted.attachments = placement.attachments;
   writeAdmittedRequestPersistence(admitted.runDirectory, admitted, {
     sessionDirectory: placement.sessionDirectory,
     sessionFile: placement.sessionFile
@@ -8194,10 +8010,11 @@ async function loadAdmittedJudgeRequest(runDirectory) {
     if (typeof record.instruction !== "string") return void 0;
     if (typeof record.instructionEmpty !== "boolean") return void 0;
     if (!Array.isArray(record.attachments)) return void 0;
+    const attachments = record.attachments.map((item) => normalizeAdmittedAttachment(item)).filter((item) => item !== void 0);
     return {
       instruction: record.instruction,
       instructionEmpty: record.instructionEmpty,
-      attachments: record.attachments
+      attachments
     };
   } catch {
     return void 0;
@@ -8432,7 +8249,7 @@ function parseAnalystArgv(args) {
       if (taken.def.id === "attach") {
         pushValue(
           "attach",
-          requireOptionPath(taken.def.canonical, taken.value)
+          requireProvidedOptionValue(taken.def.canonical, taken.value)
         );
         return;
       }
@@ -9838,10 +9655,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep2 = ((ms) => new Promise((resolve22) => {
+  const sleep2 = ((ms) => new Promise((resolve21) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve22();
+      resolve21();
     }, ms);
   }));
   sleep2.cancel = () => {
@@ -9853,7 +9670,7 @@ function defaultNavigatorGraceSleep() {
   return sleep2;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2 = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -9862,11 +9679,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2
       action();
     };
     void work.then(
-      (value) => finish(() => resolve22({ status: "done", value })),
+      (value) => finish(() => resolve21({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep2(graceMs).then(() => {
-      finish(() => resolve22({ status: "timeout" }));
+      finish(() => resolve21({ status: "timeout" }));
     });
   });
 }
@@ -10483,7 +10300,7 @@ __export(config_exports, {
   setPersistentSeatHost: () => setPersistentSeatHost,
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
-import { mkdir, readFile as readFile9, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir, readFile as readFile8, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname11, join as join15 } from "node:path";
 function isGateOfficerSeat(value) {
   return packagedProvinceConfig(value);
@@ -10497,7 +10314,7 @@ function publicCliConfigPath(home) {
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
   try {
-    const raw = await readFile9(path, "utf8");
+    const raw = await readFile8(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
     if (isEnoent(error)) return { seats: {} };
@@ -10956,7 +10773,7 @@ function resolvePublicAgentDir(explicit, home) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile9(join15(agentDir, "auth.json"), "utf8");
+    const raw = await readFile8(join15(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (isEnoent(error)) return { "openai-codex": false, xai: false };
@@ -11340,7 +11157,7 @@ var init_role_seat_runtime = __esm({
 });
 
 // src/archivist-record-pointer.ts
-import { basename as basename9, join as join19 } from "node:path";
+import { basename as basename8, join as join19 } from "node:path";
 function bookDirectOfficerRunPointer(options) {
   const submissionToolCallId = options.submissionToolCallId?.trim() ?? "";
   const pointer = {
@@ -11366,7 +11183,7 @@ async function resolveOfficerPointer(raw, parentRunDirectory) {
   let runDirectory = typeof raw.runDirectory === "string" && raw.runDirectory.trim() !== "" ? raw.runDirectory : void 0;
   let sessionFile = raw.sessionFile;
   const recordedRunDirectory = runDirectory ?? runDirectoryOfSessionFile(sessionFile);
-  const leaf = parseRunLeaf(basename9(recordedRunDirectory));
+  const leaf = parseRunLeaf(basename8(recordedRunDirectory));
   const parentIdentity = await readRoleRunIdentity(parentRunDirectory);
   if (leaf !== void 0 && parentIdentity !== void 0) {
     const currentRunDirectory = await findRunDirectoryById(
@@ -11727,7 +11544,7 @@ var init_submission_gate = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { readFile as readFile10 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { dirname as dirname12, join as join20 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
@@ -11743,7 +11560,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile10(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile9(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -11801,7 +11618,7 @@ __export(auditor_soul_exports, {
   readAuditorResumeBinding: () => readAuditorResumeBinding,
   resolveAuditorSubject: () => resolveAuditorSubject
 });
-import { basename as basename10 } from "node:path";
+import { basename as basename9 } from "node:path";
 function auditorSoulRelativePath(role) {
   return `souls/${role}-auditor.md`;
 }
@@ -11837,7 +11654,7 @@ function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
   return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
 }
 function subjectFromSourceDirectory(sourceRunDirectory) {
-  const role = parseRunLeaf(basename10(sourceRunDirectory))?.role;
+  const role = parseRunLeaf(basename9(sourceRunDirectory))?.role;
   return isAuditorSoulRole(role) ? role : void 0;
 }
 async function readAuditorResumeBinding(runDirectory) {
@@ -11877,7 +11694,7 @@ var init_auditor_soul = __esm({
 
 // src/public-cli/machine-method-skills.ts
 import { accessSync, constants as constants2, statSync as statSync5 } from "node:fs";
-import { lstat as lstat3, mkdir as mkdir2, symlink } from "node:fs/promises";
+import { lstat as lstat2, mkdir as mkdir2, symlink } from "node:fs/promises";
 import { join as join22 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 function skillRoot(home) {
@@ -11907,7 +11724,7 @@ function linkedSkillRoot(home, host) {
 }
 async function occupied(path) {
   try {
-    await lstat3(path);
+    await lstat2(path);
     return true;
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
@@ -12404,7 +12221,6 @@ var init_auto_resume = __esm({
 
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { isAbsolute as isAbsolute7, join as join23, resolve as resolve12 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -12426,7 +12242,7 @@ function projectRelocatedTurnIdentity(request, result, admitted, relocation) {
   mutableRequest.principal = admitted.principal;
   const activation = mutableRequest.activation;
   if (isRecord(activation)) {
-    for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath", "requestManifestPath"]) {
+    for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath"]) {
       const record = activation;
       if (field in record) record[field] = rewrite(record[field]);
     }
@@ -13159,7 +12975,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
       prompt = request.message;
     }
   } else if (summonsPrepared !== void 0) {
-    prompt = officerDialogue ? summonsPrepared.instructionEmpty ? "" : summonsPrepared.instruction : buildInstructionTransportPrompt(summonsPrepared);
+    prompt = officerDialogue ? summonsPrepared.instruction : buildInstructionTransportPrompt(summonsPrepared);
   } else if (request.summons !== void 0) {
     prompt = "";
   } else {
@@ -13240,24 +13056,14 @@ async function runSettledAutoResumeLoop(input) {
     })
   });
 }
-function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
-  const absolute = isAbsolute7(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
-  return pathContainedIn(join23(runDirectory, "attachments"), absolute);
-}
-async function prepareSummonsResumeMaterials(runDirectory, summons) {
+async function prepareSummonsResumeMaterials(_runDirectory, summons) {
   if (summons === void 0) return void 0;
   if (summons.instruction === void 0 && (summons.attachmentPaths?.length ?? 0) === 0) {
     return void 0;
   }
   const instruction = summons.instruction ?? "";
-  const instructionEmpty = summons.instructionEmpty ?? instruction.trim() === "";
-  let attachments = [];
-  if (summons.attachmentPaths !== void 0 && summons.attachmentPaths.length > 0) {
-    const alreadyFrozen = summons.attachmentPaths.every(
-      (path) => isAlreadyFrozenSummonsAttachment(runDirectory, path)
-    );
-    attachments = alreadyFrozen ? summons.attachmentPaths.map((frozenPath) => ({ frozenPath })) : await freezeAttachmentsIntoRun(summons.attachmentPaths, runDirectory);
-  }
+  const instructionEmpty = summons.instructionEmpty ?? instruction.length === 0;
+  const attachments = (summons.attachmentPaths ?? []).map((path) => ({ path }));
   return { instruction, instructionEmpty, attachments };
 }
 async function runPostAdmissionSeatResume(input) {
@@ -13306,23 +13112,6 @@ async function runPostAdmissionSeatResume(input) {
         openCourtAttemptId = openCourt.courtAttemptId;
       }
     }
-    if (request.summons !== void 0) {
-      const prepared = await prepareSummonsResumeMaterials(
-        admittedForBuild.runDirectory,
-        request.summons
-      );
-      if (prepared !== void 0 && (request.summons.attachmentPaths?.length ?? 0) > 0) {
-        request = {
-          ...request,
-          summons: {
-            ...request.summons,
-            attachmentPaths: prepared.attachments.map(
-              (attachment) => attachment.frozenPath
-            )
-          }
-        };
-      }
-    }
     let turnRequest = await input.buildTurnRequest(admittedForBuild, request);
     if (turnRequest.continuation.kind === "resume" && turnRequest.continuation.hostSessionId === void 0) {
       const hostSessionId = await readStoredHostSessionId(
@@ -13572,7 +13361,6 @@ var init_post_admission = __esm({
     init_invocation();
     init_submission_ledger();
     init_run_ticket_number();
-    init_activation_ledger_topology();
     init_session_identity();
     init_sitian_facade();
     init_receipt_delivery_policy();
@@ -13712,7 +13500,7 @@ __export(instruction_seat_run_exports, {
   runPublicInstructionSeat: () => runPublicInstructionSeat,
   runPublicInstructionSeatResume: () => runPublicInstructionSeatResume
 });
-import { dirname as dirname13, resolve as resolve13 } from "node:path";
+import { dirname as dirname13, resolve as resolve12 } from "node:path";
 function unreadablePostSubmissionStatus(admitted, terminal) {
   if (terminal?.roleOutcome.kind !== "accepted") return void 0;
   const route = POST_SUBMISSION_ROUTING[admitted.role];
@@ -13940,7 +13728,7 @@ async function runOmittedLensBatch(argv, parsed, env, io) {
   const children = await summonParallelReviewerLenses2({
     argv,
     cwd: env.cwd,
-    projectRoot: resolve13(parsed.project ?? env.cwd),
+    projectRoot: resolve12(parsed.project ?? env.cwd),
     baseRevision: parsed.baseRevision ?? "",
     home: env.home,
     agentDir: env.agentDir,
@@ -14022,14 +13810,14 @@ async function runCountersignBody(parsed, env, io) {
     const resumed = await resumeSameParentInstructionSeat({
       env,
       io,
-      projectRoot: resolve13(parsed.project ?? env.cwd),
+      projectRoot: resolve12(parsed.project ?? env.cwd),
       role: "countersign",
       parentRunPath: gateParentRunPath,
       ...isSafePositiveTicketNumber(env.boundTicketNumber) ? { ticketNumber: env.boundTicketNumber } : {},
       summons: {
         sourceRunPath: gateParentRunPath,
         instruction: resumeInstruction,
-        instructionEmpty: resumeInstruction.trim() === ""
+        instructionEmpty: resumeInstruction.length === 0
       }
     });
     if (resumed != null) return resumed;
@@ -14043,12 +13831,12 @@ async function runCountersignBody(parsed, env, io) {
     throw error;
   }
   try {
-    return await withPreparedAttachments(parsed.attachmentPaths ?? [], async (preparedAttachments) => {
+    {
       const materializeAdmission = async (ticketNumber) => {
         await materializeCountersignInvocation(admitted, {
           home: env.home,
           principalAuthority: env.principalAuthority,
-          preparedAttachments,
+          attachmentPaths: parsed.attachmentPaths ?? [],
           ...env.model === void 0 ? {} : { model: env.model },
           ...ticketNumber === void 0 ? {} : { ticketNumber }
         });
@@ -14083,7 +13871,7 @@ async function runCountersignBody(parsed, env, io) {
       });
       await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
       return result;
-    });
+    }
   } catch (error) {
     const rejected = usageExit(error, io);
     if (rejected !== void 0) return rejected;
@@ -14148,7 +13936,7 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
     const summons = {
       ...sameParentInstruction(env, {
         instruction: parsed.instruction ?? "",
-        instructionEmpty: (parsed.instruction ?? "").trim() === ""
+        instructionEmpty: (parsed.instruction ?? "").length === 0
       }),
       attachmentPaths: parsed.attachmentPaths ?? []
     };
@@ -14173,7 +13961,7 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
         sourceRunPath: parentRunPath,
         ...sameParentInstruction(env, {
           instruction: parsed.instruction ?? "",
-          instructionEmpty: (parsed.instruction ?? "").trim() === ""
+          instructionEmpty: (parsed.instruction ?? "").length === 0
         }),
         attachmentPaths: parsed.attachmentPaths ?? []
       };
@@ -14257,7 +14045,7 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
           instruction: parsed.instruction ?? "",
           projectRoot: admitted.projectRoot,
           failureLabel: "secretariat unbound summons",
-          attachmentPaths: admitted.attachments.map((attachment) => attachment.frozenPath),
+          attachmentPaths: admitted.attachments.map((attachment) => attachment.path),
           correlationId: admitted.runId
         }, env, io);
       } catch (error) {
@@ -14816,7 +14604,7 @@ var init_instruction_seat_run = __esm({
 
 // src/analyst-book-key.ts
 import { statSync as statSync6 } from "node:fs";
-import { isAbsolute as isAbsolute8 } from "node:path";
+import { isAbsolute as isAbsolute7 } from "node:path";
 function resolveAnalystBookKey(projectRoot) {
   const identity = physicalPathIdentity(projectRoot);
   let stats;
@@ -14838,7 +14626,7 @@ function resolveAnalystBookKey(projectRoot) {
   }
 }
 function isSyntheticAnalystBookKey(bookKey) {
-  return bookKey.startsWith("root:") && isAbsolute8(bookKey.slice("root:".length));
+  return bookKey.startsWith("root:") && isAbsolute7(bookKey.slice("root:".length));
 }
 var init_analyst_book_key = __esm({
   "src/analyst-book-key.ts"() {
@@ -14850,16 +14638,16 @@ var init_analyst_book_key = __esm({
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { rename as rename2, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname14, join as join24 } from "node:path";
+import { rename as rename2, rm, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname14, join as join23 } from "node:path";
 async function writeFileAtomically(destination, contents, options) {
   const parent = dirname14(destination);
-  const temporary = join24(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join23(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
     await writeFile3(temporary, contents, options);
     await rename2(temporary, destination);
   } catch (error) {
-    await rm2(temporary, { force: true }).catch(() => void 0);
+    await rm(temporary, { force: true }).catch(() => void 0);
     throw error;
   }
 }
@@ -14870,13 +14658,13 @@ var init_atomic_write = __esm({
 });
 
 // src/analyst-index.ts
-import { open, readFile as readFile11, unlink } from "node:fs/promises";
-import { dirname as dirname15, join as join25 } from "node:path";
+import { open, readFile as readFile10, unlink } from "node:fs/promises";
+import { dirname as dirname15, join as join24 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname15(indexPath));
-  const lockPath = join25(dirname15(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join24(dirname15(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -14903,7 +14691,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join25(ledgerHome, "analyst", "library-index.json");
+  return join24(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -14994,7 +14782,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
   const path = analystLibraryIndexPath(ledgerHome);
   let raw;
   try {
-    raw = await readFile11(path, "utf8");
+    raw = await readFile10(path, "utf8");
   } catch (error) {
     if (isMissingPathError(error)) return void 0;
     throw error;
@@ -15449,7 +15237,7 @@ var init_analyst_gate_cycles_read = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir3 } from "node:fs/promises";
-import { basename as basename11, join as join26 } from "node:path";
+import { basename as basename10, join as join25 } from "node:path";
 async function readExistingRunLifecycleState(runDirectory) {
   return (await readRoleRunIdentity(runDirectory))?.state;
 }
@@ -15469,7 +15257,7 @@ function ghostLeaseCheckFromAutopsy(autopsy) {
   }
 }
 async function classifyGhostCandidate(input) {
-  const autopsy = await autopsyWriterLock(join26(input.runDirectory, "writer.lock"));
+  const autopsy = await autopsyWriterLock(join25(input.runDirectory, "writer.lock"));
   const leaseCheck = ghostLeaseCheckFromAutopsy(autopsy);
   if (leaseCheck === void 0) return { kind: "live" };
   return {
@@ -15759,7 +15547,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join26(ledgerHome, "books");
+  const booksRoot = join25(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -15792,7 +15580,7 @@ async function scanAnalystIssueRuns(input) {
   const ghostLegs = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const bookDir = join26(booksRoot, book);
+    const bookDir = join25(booksRoot, book);
     let runDirectories;
     try {
       runDirectories = await listBookRunDirectories(bookDir);
@@ -15801,7 +15589,7 @@ async function scanAnalystIssueRuns(input) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const runName = basename11(runDirectory);
+      const runName = basename10(runDirectory);
       const parsed = parseRunLeaf(runName);
       if (parsed === void 0) continue;
       let scopeFields;
@@ -16538,7 +16326,7 @@ var init_analyst_metric_family = __esm({
 });
 
 // src/analyst-page.ts
-import { dirname as dirname16, join as join27 } from "node:path";
+import { dirname as dirname16, join as join26 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -16549,7 +16337,7 @@ function analystIssuePageKey(address) {
   return sha256Hex(parts.join("\0")).slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join27(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join26(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -16785,7 +16573,7 @@ var init_analyst_model_groups = __esm({
 });
 
 // src/analyst-entry.ts
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFile as readFile12 } from "node:fs/promises";
 import { Type as Type17 } from "typebox";
 function cachedPageMatchesRequestedScope(page, input) {
   if (page.bookKey !== input.bookKey) return false;
@@ -16813,7 +16601,7 @@ async function readOrComputeAnalystIssuePage(input, options) {
     ...issueNumber === void 0 && input.bookKey === void 0 ? { scopeRootIdentity: projectRoot } : {}
   });
   try {
-    const raw = await readFile13(pagePath, "utf8");
+    const raw = await readFile12(pagePath, "utf8");
     const page = JSON.parse(raw);
     if (cachedPageMatchesRequestedScope(page, { bookKey, ...input })) {
       const ghostScan = await scanAnalystIssueRuns({
@@ -16914,7 +16702,7 @@ async function runAnalystModelGroupsMode(input, home) {
       scopeRootIdentity: projectRoot
     });
     try {
-      const raw = await readFile13(pagePath, "utf8");
+      const raw = await readFile12(pagePath, "utf8");
       JSON.parse(raw);
     } catch (error) {
       if (!isMissingPathError(error)) {
@@ -17011,8 +16799,8 @@ var init_analyst_entry = __esm({
 });
 
 // src/public-cli/analyst-run.ts
-import { readFile as readFile14 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, resolve as resolve14 } from "node:path";
+import { readFile as readFile13 } from "node:fs/promises";
+import { isAbsolute as isAbsolute8, resolve as resolve13 } from "node:path";
 import { Value as Value2 } from "typebox/value";
 function resolveAnalystIssueBookKeyFromCwd(cwd = process.cwd()) {
   try {
@@ -17062,10 +16850,10 @@ async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPaths) {
     );
   }
   const sourcePath = attachmentPaths[0];
-  const absolute = isAbsolute9(sourcePath) ? sourcePath : resolve14(sourcePath);
+  const absolute = isAbsolute8(sourcePath) ? sourcePath : resolve13(sourcePath);
   let bytes;
   try {
-    bytes = await readFile14(absolute);
+    bytes = await readFile13(absolute);
   } catch (error) {
     throw new CliUsageError(
       `analyst sweep attachment is not a readable regular file: ${sourcePath}`,
@@ -18095,7 +17883,7 @@ __export(public_role_summons_exports, {
 import { execFile as execFile3 } from "node:child_process";
 import { existsSync as existsSync8 } from "node:fs";
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join27 } from "node:path";
 import { promisify as promisify3 } from "node:util";
 function createCapturingIo() {
   const chunks = [];
@@ -18119,7 +17907,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync8(join28(dir, "package.json")) && existsSync8(join28(dir, "souls"))) {
+    if (existsSync8(join27(dir, "package.json")) && existsSync8(join27(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -18339,7 +18127,7 @@ async function summonPublicRole(options) {
         runId: resumeRunId,
         summons: {
           instruction,
-          instructionEmpty: instruction.trim() === ""
+          instructionEmpty: instruction.length === 0
         }
       },
       env,
@@ -18728,7 +18516,7 @@ var init_compliance_transport = __esm({
 });
 
 // src/role-run-relocation.ts
-import { dirname as dirname17, join as join29, sep as sep4 } from "node:path";
+import { dirname as dirname17, join as join28, sep as sep4 } from "node:path";
 function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   if (typeof value !== "string") return value;
   if (value === oldRunDirectory) return newRunDirectory;
@@ -18808,13 +18596,6 @@ function rewriteSourceRunLocator(value, rewrites) {
 function rewriteAdmittedRoleRunPage(page, rewrites) {
   rewriteRunDirectoryPathFieldsAgainstRewrites(page, ADMITTED_PAGE_FIELDS, rewrites);
   rewriteSourceRunLocator(page.sourceRun, rewrites);
-  if (Array.isArray(page.attachments)) {
-    for (const attachment of page.attachments) {
-      if (isRecord(attachment)) {
-        rewriteRunDirectoryPathFieldsAgainstRewrites(attachment, ["frozenPath"], rewrites);
-      }
-    }
-  }
   if (isRecord(page.principal)) {
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page.principal,
@@ -18842,7 +18623,7 @@ var init_role_run_relocation = __esm({
       "taskPath",
       "packetPath",
       "prerequisitesPath",
-      "requestManifestPath",
+      // #1165: requestManifestPath is a caller path — never rewrite.
       "mergerInputPath",
       "sourceRunPath"
     ];
@@ -18877,8 +18658,8 @@ __export(run_lifecycle_exports, {
   recordCurrentCourt: () => recordCurrentCourt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat4, open as open2, readdir as readdir4, readFile as readFile15, unlink as unlink2 } from "node:fs/promises";
-import { basename as basename12, join as join30 } from "node:path";
+import { chmod, lstat as lstat3, open as open2, readdir as readdir4, readFile as readFile14, unlink as unlink2 } from "node:fs/promises";
+import { basename as basename11, join as join29 } from "node:path";
 function buildAutoResumeContinuationPrompt() {
   return RESUME_TRANSPORT_ENVELOPE;
 }
@@ -18891,7 +18672,7 @@ function parseSameTicketSummonsMaterials(raw) {
   const record = raw;
   const instruction = typeof record.instruction === "string" ? record.instruction : void 0;
   const instructionEmpty = typeof record.instructionEmpty === "boolean" ? record.instructionEmpty : void 0;
-  const attachmentPaths = Array.isArray(record.attachmentPaths) ? record.attachmentPaths.filter((p) => typeof p === "string" && p.length > 0) : void 0;
+  const attachmentPaths = Array.isArray(record.attachmentPaths) ? record.attachmentPaths.filter((p) => typeof p === "string") : void 0;
   const sourceRunPath = typeof record.sourceRunPath === "string" && record.sourceRunPath.trim() !== "" ? record.sourceRunPath : void 0;
   let sourceRun;
   if (isRecord(record.sourceRun)) {
@@ -19116,7 +18897,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile15(lockPath, "utf8");
+    content = await readFile14(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -19175,7 +18956,7 @@ async function createWriterLease(lockPath, runDirectory, reportCleanupFailure) {
     },
     relocate(nextRunDirectory) {
       currentRunDirectory = nextRunDirectory;
-      currentLockPath = join30(nextRunDirectory, WRITER_LOCK_FILE);
+      currentLockPath = join29(nextRunDirectory, WRITER_LOCK_FILE);
     },
     async release() {
       if (released) return;
@@ -19214,10 +18995,10 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join30(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join29(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join30(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join29(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -19274,7 +19055,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join30(ledgerHome, "books");
+  const booksRoot = join29(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir4(booksRoot);
@@ -19309,7 +19090,7 @@ async function runHasFormedSessionPrincipal(runDirectory) {
   if (disk === void 0) return false;
   const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : sessionFileIn(disk.principalWire.sessionDirectory);
   try {
-    const stat2 = await lstat4(sessionFile);
+    const stat2 = await lstat3(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return false;
@@ -19325,7 +19106,7 @@ async function findLatestRunIdForSeatTicket(input) {
   let runDirectories;
   try {
     runDirectories = await listBookRunDirectories(
-      input.ticketNumber === void 0 ? bookDir : join30(bookDir, String(input.ticketNumber))
+      input.ticketNumber === void 0 ? bookDir : join29(bookDir, String(input.ticketNumber))
     );
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return void 0;
@@ -19333,7 +19114,7 @@ async function findLatestRunIdForSeatTicket(input) {
   }
   let best;
   for (const runDirectory of runDirectories) {
-    const parsed = parseRunLeaf(basename12(runDirectory));
+    const parsed = parseRunLeaf(basename11(runDirectory));
     if (parsed === void 0 || parsed.role !== input.role) continue;
     const runId = parsed.runId;
     const parentPath = await readRunParentPath(runDirectory);
@@ -19390,7 +19171,6 @@ async function loadResumableRunRecord(home, runId, authority) {
   let repository;
   let repositoryDisplay;
   let requestManifestPath;
-  let manifestDigest;
   let waitWindowMs;
   let issueNumber;
   let caseRunsPath;
@@ -19413,7 +19193,7 @@ async function loadResumableRunRecord(home, runId, authority) {
         instructionEmpty = record.instructionEmpty;
       }
       if (Array.isArray(record.attachments)) {
-        attachments = record.attachments;
+        attachments = record.attachments.map((item) => normalizeAdmittedAttachment(item)).filter((item) => item !== void 0);
       }
       if (record.phase === "plan" || record.phase === "apply") {
         phase = record.phase;
@@ -19445,12 +19225,9 @@ async function loadResumableRunRecord(home, runId, authority) {
       if (typeof record.repositoryDisplay === "string" && record.repositoryDisplay.trim() !== "") {
         repositoryDisplay = record.repositoryDisplay;
       }
-      if (typeof record.requestManifestPath === "string" && record.requestManifestPath.trim() !== "") {
+      if (typeof record.requestManifestPath === "string") {
         requestManifestPath = record.requestManifestPath;
       }
-      if (typeof record.manifestDigest === "string" && record.manifestDigest.trim() !== "") {
-        manifestDigest = record.manifestDigest;
-      }
       if (typeof record.waitWindowMs === "number" && Number.isSafeInteger(record.waitWindowMs) && record.waitWindowMs >= 1) {
         waitWindowMs = record.waitWindowMs;
       }
@@ -19544,7 +19321,7 @@ async function loadResumableRunRecord(home, runId, authority) {
       );
     }
   }
-  const sourceRunLeaf = parseRunLeaf(basename12(sourceRunPath ?? ""));
+  const sourceRunLeaf = parseRunLeaf(basename11(sourceRunPath ?? ""));
   const referencedRunId = sourceRun?.runId ?? sourceRunLeaf?.runId;
   const referencedRole = sourceRun?.role ?? sourceRunLeaf?.role;
   if (referencedRunId !== void 0 && referencedRunId !== "") {
@@ -19584,7 +19361,6 @@ async function loadResumableRunRecord(home, runId, authority) {
       ...repository === void 0 ? {} : { repository },
       ...repositoryDisplay === void 0 ? {} : { repositoryDisplay },
       ...requestManifestPath === void 0 ? {} : { requestManifestPath },
-      ...manifestDigest === void 0 ? {} : { manifestDigest },
       ...waitWindowMs === void 0 ? {} : { waitWindowMs },
       ...issueNumber === void 0 ? {} : { issueNumber },
       ...caseRunsPath === void 0 ? {} : { caseRunsPath },
@@ -19774,8 +19550,8 @@ function admitResumedRole(loaded) {
       return admitted;
     }
     case "collect-target": {
-      const { prNumber, repository, repositoryDisplay, manifestDigest } = fields;
-      if (repository === void 0 || repositoryDisplay === void 0 || manifestDigest === void 0) {
+      const { prNumber, repository, repositoryDisplay } = fields;
+      if (repository === void 0 || repositoryDisplay === void 0) {
         throw new CliUsageError(
           `role run admitted collector repository identity is missing: ${runId}`
         );
@@ -19798,8 +19574,7 @@ function admitResumedRole(loaded) {
         ...prNumber === void 0 ? {} : { prNumber },
         repository: parsedRepository,
         ...fields.requestManifestPath === void 0 ? {} : { requestManifestPath: fields.requestManifestPath },
-        ...fields.waitWindowMs === void 0 ? {} : { waitWindowMs: fields.waitWindowMs },
-        manifestDigest
+        ...fields.waitWindowMs === void 0 ? {} : { waitWindowMs: fields.waitWindowMs }
       };
       return admitted;
     }
@@ -20105,7 +19880,7 @@ var init_receipt_delivery_policy = __esm({
 });
 
 // src/archivist-record-topology.ts
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 function resolveNavigatorWorkSubjectPlacement(input) {
   let ledgerHome;
   if (input.parentSessionFile !== void 0 && input.parentSessionFile.length > 0) {
@@ -20118,7 +19893,7 @@ function resolveNavigatorWorkSubjectPlacement(input) {
   const digest = sha256Hex(input.subject).slice(0, 32);
   return {
     ledgerHome,
-    sessionDir: join32(
+    sessionDir: join31(
       activationBookDirectory(ledgerHome, resolveBookKeyFromGit(input.cwd)),
       NAVIGATOR_RECORD_KIND,
       digest
@@ -20191,7 +19966,7 @@ import {
   statSync as statSync8,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { dirname as dirname19, resolve as resolve17, join as join33 } from "node:path";
+import { dirname as dirname19, resolve as resolve16, join as join32 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 function readCurrentSession(sessionDir) {
   const ledger = currentSessionLedgerPath(sessionDir);
@@ -20225,7 +20000,7 @@ function isCurrentSessionClaimRace(error) {
   return errnoCode(error.cause) === "EEXIST";
 }
 function currentSessionLedgerPath(sessionDir) {
-  return join33(sessionDir, CURRENT_SESSION_LEDGER);
+  return join32(sessionDir, CURRENT_SESSION_LEDGER);
 }
 function readBoundedSessionHeader(filePath) {
   const fd = openSync(filePath, "r");
@@ -20298,8 +20073,8 @@ function parseSessionHeaderLine(line2) {
   };
 }
 function mostRecentNavigatorSessionFile(sessionDir, cwd) {
-  const absoluteSessionDir = resolve17(sessionDir);
-  const absoluteCwd = resolve17(cwd);
+  const absoluteSessionDir = resolve16(sessionDir);
+  const absoluteCwd = resolve16(cwd);
   let names;
   try {
     names = readdirSync3(absoluteSessionDir);
@@ -20312,7 +20087,7 @@ function mostRecentNavigatorSessionFile(sessionDir, cwd) {
   const matched = [];
   for (const name of names) {
     if (!name.endsWith(".jsonl")) continue;
-    const filePath = join33(absoluteSessionDir, name);
+    const filePath = join32(absoluteSessionDir, name);
     let st;
     try {
       st = statSync8(filePath);
@@ -20334,7 +20109,7 @@ function mostRecentNavigatorSessionFile(sessionDir, cwd) {
     }
     if (header === void 0) continue;
     if (typeof header.cwd !== "string" || header.cwd.length === 0) continue;
-    if (resolve17(header.cwd) !== absoluteCwd) continue;
+    if (resolve16(header.cwd) !== absoluteCwd) continue;
     matched.push({ path: filePath, mtimeMs: st.mtimeMs });
   }
   if (matched.length === 0) return void 0;
@@ -20364,8 +20139,8 @@ function resolveNavigatorNestContinuation(sessionDir, cwd) {
   }
 }
 function assertRecentFinalFileUnderSessionDir(sessionDir, recentFile) {
-  const absoluteSessionDir = resolve17(sessionDir);
-  const absoluteFile = resolve17(recentFile);
+  const absoluteSessionDir = resolve16(sessionDir);
+  const absoluteFile = resolve16(recentFile);
   if (absoluteFile !== absoluteSessionDir && !pathContainedIn(absoluteSessionDir, absoluteFile)) {
     throw new ActivationLedgerError(
       `archivist record session must be under the authorized nest (${sessionDir}): ${recentFile}`
@@ -20420,7 +20195,7 @@ function createRecordSessionOpen(options, host = piRecordSessionHost) {
     throw new Error("Durable record ownership requires a parent session inside the ledger home");
   } else {
     ledgerHome = resolveActivationLedgerHomeForPath(parentFile);
-    const parentResolved = resolve17(parentFile);
+    const parentResolved = resolve16(parentFile);
     if (!physicallyContainedIn(ledgerHome, parentResolved)) {
       throw new Error("Durable record ownership requires a parent session inside the ledger home");
     }
@@ -20511,7 +20286,7 @@ init_submission_ledger();
 init_filed_submission();
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { writeSync as writeSync2 } from "node:fs";
-import { join as join35 } from "node:path";
+import { join as join34 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
 // src/activation-trace.ts
@@ -20563,7 +20338,7 @@ import {
   statSync as statSync7,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { isAbsolute as isAbsolute11, resolve as resolve15 } from "node:path";
+import { isAbsolute as isAbsolute10, resolve as resolve14 } from "node:path";
 var ActivationSessionFileMissingError = class extends Error {
   code = "AK_ACTIVATION_SESSION_FILE_MISSING";
   path;
@@ -20603,12 +20378,12 @@ function durableSessionPointer(sessionManager) {
       "Workflow role activation requires a durable Pi session file principal (getSessionFile); directory-only or --no-session invocations are rejected"
     );
   }
-  if (!isAbsolute11(file)) {
+  if (!isAbsolute10(file)) {
     throw new Error(
       `Workflow role activation requires an absolute durable session file path; got relative path: ${file}`
     );
   }
-  const resolvedFile = resolve15(file);
+  const resolvedFile = resolve14(file);
   try {
     lstatSync2(resolvedFile);
   } catch (error) {
@@ -20852,7 +20627,7 @@ var COLLECTOR_TRANSPORT_FLAGS = Object.freeze([
   Object.freeze({
     name: "ak-collector-request-manifest",
     definition: Object.freeze({
-      description: "Path to the Collector v1 request manifest JSON file (caller guidance; not a machine collection directive).",
+      description: "Caller path to a request manifest JSON file (passed as-is; package does not read or validate).",
       type: "string"
     })
   })
@@ -20863,19 +20638,9 @@ function buildMethodContext(activation) {
     `host: github.com`,
     `repository: ${activation.repository.canonical}`,
     `prNumber: ${activation.prNumber === void 0 ? "\u672A\u7ED1\u5B9A" : String(activation.prNumber)}`,
-    `requests: ${JSON.stringify(activation.manifest.requests.map((request) => ({ id: request.id })))}`,
-    `manifestDigest: ${activation.manifest.digest}`,
+    ...activation.requestManifestPath === void 0 ? [] : [`requestManifestPath: ${activation.requestManifestPath}`],
     "</collector_method>"
   ];
-  if (activation.manifest.requests.length > 0) {
-    const payload = JSON.stringify({
-      requests: activation.manifest.requests.map((request) => ({
-        id: request.id,
-        body: request.requestBody
-      }))
-    }).replaceAll("<", "\\u003c");
-    lines.push("", "<collector_request_manifest>", payload, "</collector_request_manifest>");
-  }
   return lines.join("\n");
 }
 function createCollectorRoleRuntime(pi, dependencies) {
@@ -20897,12 +20662,12 @@ function createCollectorRoleRuntime(pi, dependencies) {
       } else if (typeof prFlag === "number") {
         prNumber = parseCollectorPrNumber(prFlag);
       }
-      const manifest = typeof requestManifestFlag === "string" && requestManifestFlag.trim().length > 0 ? await loadCollectorManifest(requestManifestFlag) : emptyCollectorManifest();
+      const requestManifestPath = typeof requestManifestFlag === "string" ? requestManifestFlag : void 0;
       return {
         soul,
         repository,
         prNumber,
-        manifest
+        ...requestManifestPath === void 0 ? {} : { requestManifestPath }
       };
     },
     assembleMaterials(activation, baseSystemPrompt) {
@@ -21189,14 +20954,14 @@ var AUDITOR_TOOL_SPEC = roleSubmissionDeclaration("auditor");
 init_navigator_invocation_identity();
 init_packaged_role_registry();
 init_activation_ledger_topology();
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 import "@earendil-works/pi-coding-agent";
 import { Type as Type21 } from "typebox";
 
 // src/navigator-public-session.ts
 init_host_session_record();
 import { existsSync as existsSync12 } from "node:fs";
-import { basename as basename14 } from "node:path";
+import { basename as basename13 } from "node:path";
 
 // src/navigator-session-contracts.ts
 init_unknown_value();
@@ -21390,18 +21155,18 @@ init_packaged_role_registry();
 init_atomic_write();
 init_unknown_value();
 import { existsSync as existsSync9, realpathSync as realpathSync3 } from "node:fs";
-import { readFile as readFile16 } from "node:fs/promises";
-import { basename as basename13, dirname as dirname18, join as join31, resolve as resolve16 } from "node:path";
+import { readFile as readFile15 } from "node:fs/promises";
+import { basename as basename12, dirname as dirname18, join as join30, resolve as resolve15 } from "node:path";
 var NAVIGATOR_WORK_CONTEXT_BASENAME = "work-context.json";
 function navigatorWorkContextFile(sessionDir) {
-  return join31(sessionDir, NAVIGATOR_WORK_CONTEXT_BASENAME);
+  return join30(sessionDir, NAVIGATOR_WORK_CONTEXT_BASENAME);
 }
 function isNavigatorWorkContextFile(path) {
-  const resolved = resolve16(path);
-  if (basename13(resolved) !== NAVIGATOR_WORK_CONTEXT_BASENAME) return false;
+  const resolved = resolve15(path);
+  if (basename12(resolved) !== NAVIGATOR_WORK_CONTEXT_BASENAME) return false;
   const nest = dirname18(resolved);
-  if (!/^[0-9a-f]{32}$/.test(basename13(nest))) return false;
-  return basename13(dirname18(nest)) === "navigator";
+  if (!/^[0-9a-f]{32}$/.test(basename12(nest))) return false;
+  return basename12(dirname18(nest)) === "navigator";
 }
 function canonicalNavigatorWorkContextFile(path) {
   if (!isNavigatorWorkContextFile(path)) return void 0;
@@ -21419,7 +21184,7 @@ async function persistNavigatorWorkBase(sessionDir, body) {
   const next = `${JSON.stringify({ subject: body.subject, authority: body.authority })}
 `;
   try {
-    const current = await readFile16(path, "utf8");
+    const current = await readFile15(path, "utf8");
     if (current === next) return path;
   } catch (error) {
     if (!isEnoent(error)) throw error;
@@ -21432,7 +21197,7 @@ async function readNavigatorWorkBase(path) {
   if (canonical === void 0) return void 0;
   let text;
   try {
-    text = await readFile16(canonical, "utf8");
+    text = await readFile15(canonical, "utf8");
   } catch (error) {
     if (isEnoent(error)) return void 0;
     throw error;
@@ -21506,7 +21271,7 @@ async function resolveNavigatorLedgerHome(context) {
 }
 var NAVIGATOR_HOST_RUN_POINTER_ENTRY = "ak-navigator-host-run";
 function runIdFromNavigatorDirectory(runDirectory) {
-  const parsed = parseRunLeaf(basename14(runDirectory));
+  const parsed = parseRunLeaf(basename13(runDirectory));
   if (parsed === void 0 || parsed.role !== "navigator") return void 0;
   return parsed.runId;
 }
@@ -21743,7 +21508,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
-  const resolvedReference = resolve18(cwd, reference);
+  const resolvedReference = resolve17(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
     return subjectRoot;
@@ -22188,7 +21953,7 @@ init_submission_errors();
 init_worker_submission_contracts();
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync13, lstatSync as lstatSync3, readdirSync as readdirSync4, readFileSync as readFileSync5, rmdirSync, rmSync as rmSync3 } from "node:fs";
-import { resolve as resolve19 } from "node:path";
+import { resolve as resolve18 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
 var WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE = "commit-reminder-bounce";
@@ -22236,7 +22001,7 @@ function escapeGitConfigValueRegex(value) {
 function unsetOwnedHooksPath(file) {
   const owned = [];
   for (const value of tryGetAll(file, "core.hooksPath")) {
-    if (!ownedHook(resolve19(value, HOOK_FILE))) continue;
+    if (!ownedHook(resolve18(value, HOOK_FILE))) continue;
     try {
       gitFile(file, [
         "--unset-all",
@@ -22251,15 +22016,15 @@ function unsetOwnedHooksPath(file) {
   return owned;
 }
 function rmOwnedDir(dir) {
-  const hookPath = resolve19(dir, HOOK_FILE);
+  const hookPath = resolve18(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync3(hookPath, { force: true });
   if (existsSync13(dir) && readdirSync4(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
-  const root = resolve19(commonDir, "worktrees");
+  const root = resolve18(commonDir, "worktrees");
   if (!existsSync13(root)) return [];
-  return readdirSync4(root).map((name) => resolve19(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
+  return readdirSync4(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
   let inside;
@@ -22273,14 +22038,14 @@ function uninstallPackageWorkerHooks(cwd) {
   const clear = (configFile) => {
     for (const hooks of unsetOwnedHooksPath(configFile)) rmOwnedDir(hooks);
   };
-  clear(resolve19(commonDir, "config"));
-  clear(resolve19(commonDir, "config.worktree"));
-  rmOwnedDir(resolve19(commonDir, HOOKS_DIR));
-  const legacy = resolve19(commonDir, "hooks", HOOK_FILE);
+  clear(resolve18(commonDir, "config"));
+  clear(resolve18(commonDir, "config.worktree"));
+  rmOwnedDir(resolve18(commonDir, HOOKS_DIR));
+  const legacy = resolve18(commonDir, "hooks", HOOK_FILE);
   if (ownedHook(legacy)) rmSync3(legacy, { force: true });
   for (const gitDir of linkedGitDirs(commonDir)) {
-    clear(resolve19(gitDir, "config.worktree"));
-    rmOwnedDir(resolve19(gitDir, HOOKS_DIR));
+    clear(resolve18(gitDir, "config.worktree"));
+    rmOwnedDir(resolve18(gitDir, HOOKS_DIR));
   }
 }
 function containsWrittenReason(value) {
@@ -23152,7 +22917,7 @@ function readRoleRunCoordinates(ctx, label) {
   if (runDirectory === void 0) throw new Error(`${label} requires AK_ROLE_RUN_DIR`);
   const admitted = readPageSync(runDirectory, "admitted");
   if (typeof admitted?.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
-    throw new Error(`${label} state.jsonl admitted-request row missing projectRoot (${join35(runDirectory, RUN_STATE_FILE)})`);
+    throw new Error(`${label} state.jsonl admitted-request row missing projectRoot (${join34(runDirectory, RUN_STATE_FILE)})`);
   }
   return {
     runDirectory,
@@ -23991,11 +23756,11 @@ init_settlement();
 init_run_lifecycle();
 init_unknown_value();
 async function listen(server, path) {
-  await new Promise((resolve22, reject) => {
+  await new Promise((resolve21, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve22();
+      resolve21();
     });
   });
 }
@@ -24420,8 +24185,8 @@ async function prepareRoleEnvelope(options) {
     try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
-      await new Promise((resolve22, reject) => {
-        server.close((error) => error ? reject(error) : resolve22());
+      await new Promise((resolve21, reject) => {
+        server.close((error) => error ? reject(error) : resolve21());
       });
     } catch (error) {
       await retainPackageFault({
@@ -24554,7 +24319,7 @@ async function prepareRoleEnvelope(options) {
 }
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile18 } from "node:fs/promises";
+import { readFile as readFile17 } from "node:fs/promises";
 init_doctor_evidence();
 
 // src/navigator-work-context.ts
@@ -24562,8 +24327,8 @@ init_role_run_placement();
 init_doctor_evidence();
 init_unknown_value();
 init_host_contracts();
-import { readFile as readFile17 } from "node:fs/promises";
-import { resolve as resolve20 } from "node:path";
+import { readFile as readFile16 } from "node:fs/promises";
+import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
 init_invocation();
@@ -24571,12 +24336,12 @@ function navigatorInputReference(getFlag, role) {
   if (getFlag === void 0) return void 0;
   const name = packagedRoleInputFlag(role);
   const value = name === void 0 ? void 0 : getFlag(name);
-  return typeof value === "string" && value !== "" ? resolve20(value) : void 0;
+  return typeof value === "string" && value !== "" ? resolve19(value) : void 0;
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
   const subjectMode = packagedNavigatorSubject(options.role);
-  const input = reference === void 0 || subjectMode === "case" || subjectMode === "source-run" ? void 0 : await readFile17(reference, "utf8");
+  const input = reference === void 0 || subjectMode === "case" || subjectMode === "source-run" ? void 0 : await readFile16(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -24593,7 +24358,7 @@ async function loadNavigatorWorkContext(options) {
   }
   const publicRunDir = runDirectoryFromHostContext(options.context);
   const currentSessionDir = options.context.sessionManager.getSessionDir();
-  const isBoundPublicRun = publicRunDir !== void 0 && resolve20(currentSessionDir) === resolve20(sessionDirectoryOf(publicRunDir));
+  const isBoundPublicRun = publicRunDir !== void 0 && resolve19(currentSessionDir) === resolve19(sessionDirectoryOf(publicRunDir));
   if (subjectMode === "public-instruction" && isBoundPublicRun) {
     let admitted;
     try {
@@ -24626,14 +24391,14 @@ async function loadNavigatorWorkContext(options) {
   }
   const workRoot = subjectRoot.includes("/.ak/work/") ? subjectRoot : void 0;
   const authorityFiles = workRoot === void 0 ? [] : [
-    resolve20(workRoot, "authority.md"),
-    resolve20(workRoot, "authority.txt"),
-    resolve20(workRoot, "design-v2/owner-direction.md")
+    resolve19(workRoot, "authority.md"),
+    resolve19(workRoot, "authority.txt"),
+    resolve19(workRoot, "design-v2/owner-direction.md")
   ];
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile17(path, "utf8");
+      const content = await readFile16(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -24675,11 +24440,11 @@ function createRoleRuntimeDependencies(packageRoot) {
     packageRoot,
     loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadRoleSoul: loadRegisteredRoleSoul,
-    loadFixPacket: (path) => readFile18(path, "utf8"),
-    loadCoderTask: (path) => readFile18(path, "utf8"),
+    loadFixPacket: (path) => readFile17(path, "utf8"),
+    loadCoderTask: (path) => readFile17(path, "utf8"),
     loadDoctorCase,
     loadNotarySourceRun: loadNotarySourceRunLocator,
-    loadMergerInput: async (path) => JSON.parse(await readFile18(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile17(path, "utf8")),
     loadNavigatorWorkContext: (options) => loadNavigatorWorkContext({
       context: options.context,
       role: options.role,
@@ -24762,7 +24527,7 @@ function hostAbortedError(message = "host aborted") {
 function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
   if (abortSignal?.aborted) return Promise.reject(hostAbortedError(message));
   if (abortSignal === void 0) return work;
-  return new Promise((resolve22, reject) => {
+  return new Promise((resolve21, reject) => {
     let settled = false;
     const onAbort = () => {
       if (settled) return;
@@ -24777,7 +24542,7 @@ function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
         if (settled) return;
         settled = true;
         abortSignal.removeEventListener("abort", onAbort);
-        resolve22(value);
+        resolve21(value);
       },
       (error) => {
         if (settled) return;
@@ -25039,19 +24804,19 @@ function connectAcpStdio(options) {
       terminate(error);
     }
   });
-  const processClosed = new Promise((resolve22) => {
+  const processClosed = new Promise((resolve21) => {
     child.once("close", (code, signal) => {
       if (spawned) nativeExit = { code, timedOut: false, ...signal === null ? {} : { signal } };
       settleClosed(acpError("acp-closed", "ACP process closed"));
-      resolve22();
+      resolve21();
     });
   });
   return Promise.resolve({
     request(method, params) {
       if (closed) return Promise.reject(terminalError);
       const id = ++nextId;
-      return new Promise((resolve22, reject) => {
-        pending.set(id, { resolve: resolve22, reject });
+      return new Promise((resolve21, reject) => {
+        pending.set(id, { resolve: resolve21, reject });
         child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `, (error) => {
           if (error === null || error === void 0) return;
@@ -25332,13 +25097,13 @@ function createAcpRoleTurnHost(config) {
 
 // src/acp-host/seat-profile-soul.ts
 import { constants as constants3 } from "node:fs";
-import { access as access3, copyFile, lstat as lstat5, mkdir as mkdir4, readlink, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname22, join as join36, relative as relative3, resolve as resolve21 } from "node:path";
+import { access as access3, copyFile, lstat as lstat4, mkdir as mkdir4, readlink, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
+import { dirname as dirname22, join as join35, relative as relative3, resolve as resolve20 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
 function packageRoleSoulPath(packageRoot, role) {
-  return join36(packageRoot, "souls", `${role}.md`);
+  return join35(packageRoot, "souls", `${role}.md`);
 }
 async function pathExists2(path) {
   try {
@@ -25351,20 +25116,20 @@ async function pathExists2(path) {
 async function ensureSeatProfileSoul(options) {
   const { spec, operatorHome, packageRoot, role } = options;
   const profileName = seatProfileName(spec, role);
-  const soulTarget = resolve21(packageRoleSoulPath(packageRoot, role));
+  const soulTarget = resolve20(packageRoleSoulPath(packageRoot, role));
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
-  const profilesRoot = join36(operatorHome, ...spec.profilesRootFromHome);
-  const profileDir = join36(profilesRoot, profileName);
+  const profilesRoot = join35(operatorHome, ...spec.profilesRootFromHome);
+  const profileDir = join35(profilesRoot, profileName);
   const hostRoot = dirname22(profilesRoot);
-  const soulPath = join36(profileDir, spec.soulFileName);
+  const soulPath = join35(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
     await mkdir4(profileDir, { recursive: true });
     for (const name of ["auth.json", ".env", "config.yaml"]) {
-      const source = join36(hostRoot, name);
+      const source = join35(hostRoot, name);
       if (!await pathExists2(source)) continue;
-      await copyFile(source, join36(profileDir, name));
+      await copyFile(source, join35(profileDir, name));
     }
   } else {
     await mkdir4(profileDir, { recursive: true });
@@ -25372,7 +25137,7 @@ async function ensureSeatProfileSoul(options) {
   const desiredLink = relative3(profileDir, soulTarget);
   let current;
   try {
-    const st = await lstat5(soulPath);
+    const st = await lstat4(soulPath);
     if (st.isSymbolicLink()) {
       current = await readlink(soulPath);
     }