@akagilnc/pi-workflow-roles 0.1.5583 → 0.1.5593

package/dist/public-cli/main.js

@@ -17149,19 +17149,7 @@ var init_machine_method_skills = __esm({
   }
 });
 
-// src/sha256.ts
-import { createHash } from "node:crypto";
-function sha256Hex(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-var init_sha256 = __esm({
-  "src/sha256.ts"() {
-    "use strict";
-  }
-});
-
 // src/collector-config.ts
-import { readFile as readFile4 } from "node:fs/promises";
 function fail3(message, cause) {
   throw new Error(message, cause === void 0 ? void 0 : { cause });
 }
@@ -17189,47 +17177,10 @@ function parseCollectorPrNumber(raw) {
   if (value === void 0) fail3(typeof raw === "string" && !isTicketNumberString(raw) ? "Collector pull request number must be a positive safe integer string" : "Collector pull request number must be a positive safe integer");
   return value;
 }
-function canonicalManifest(requests) {
-  return `${JSON.stringify({ requests: requests.map((request) => ({ id: request.id, body: request.requestBody })) })}
-`;
-}
-function emptyCollectorManifest() {
-  const canonicalJson2 = canonicalManifest([]);
-  return { requests: [], canonicalJson: canonicalJson2, digest: sha256Hex(canonicalJson2) };
-}
-async function loadCollectorManifest(path) {
-  let bytes;
-  try {
-    bytes = await readFile4(path);
-  } catch (error) {
-    fail3(`Collector request manifest is unreadable at ${path}`, error);
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
-  } catch (error) {
-    fail3("Collector request manifest must be UTF-8 JSON", error);
-  }
-  if (!isRecord(parsed)) fail3("Collector request manifest must be an object");
-  const rawRequests = parsed.requests ?? [];
-  if (!Array.isArray(rawRequests)) fail3("Collector request manifest requests must be an array");
-  const requests = [];
-  const ids = /* @__PURE__ */ new Set();
-  for (const [index, item] of rawRequests.entries()) {
-    if (!isRecord(item) || typeof item.id !== "string" || item.id.length === 0 || typeof item.body !== "string" || item.body.trim() === "") fail3(`Collector request manifest requests[${index}] is invalid`);
-    if (ids.has(item.id)) fail3(`Collector request manifest has duplicate request id "${item.id}"`);
-    ids.add(item.id);
-    requests.push({ id: item.id, requestBody: item.body });
-  }
-  const canonicalJson2 = canonicalManifest(requests);
-  return { requests, canonicalJson: canonicalJson2, digest: sha256Hex(canonicalJson2), sourcePath: path };
-}
 var COLLECTOR_OWNER_PATTERN, COLLECTOR_REPO_PATTERN;
 var init_collector_config = __esm({
   "src/collector-config.ts"() {
     "use strict";
-    init_sha256();
-    init_unknown_value();
     init_run_ticket_number();
     COLLECTOR_OWNER_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
     COLLECTOR_REPO_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,98}[A-Za-z0-9])?$/;
@@ -18050,13 +18001,13 @@ var init_receipt_delivery_policy = __esm({
 });
 
 // src/ledger-session-read.ts
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 async function readStrictPiSessionJsonl(path) {
-  const text = await readFile5(path, "utf8");
+  const text = await readFile4(path, "utf8");
   return text.trim().split("\n").filter(Boolean).map((line2) => JSON.parse(line2));
 }
 async function readLedgerSessionJsonlLines(path) {
-  const text = await readFile5(path, "utf8");
+  const text = await readFile4(path, "utf8");
   const lines = text.split("\n");
   const out = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -19164,6 +19115,17 @@ var init_dossier_resolution = __esm({
   }
 });
 
+// src/sha256.ts
+import { createHash } from "node:crypto";
+function sha256Hex(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_sha256 = __esm({
+  "src/sha256.ts"() {
+    "use strict";
+  }
+});
+
 // src/package-contracts/terminating-tools.ts
 function isTerminatingToolName(name) {
   return TERMINATING_TOOL_NAMES.includes(name);
@@ -19225,7 +19187,7 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir as readdir2, readFile as readFile6, realpath, stat } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile5, realpath, stat } from "node:fs/promises";
 import { dirname as dirname8, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
 async function discoverCaseFiles(root) {
   const found = [];
@@ -19338,7 +19300,7 @@ async function loadDoctorCase(runsPath, projectRoot) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep2).join("/");
-    const bytes = await readFile6(path);
+    const bytes = await readFile5(path);
     const content = bytes.toString("utf8");
     const kind = id.split("/").length === 2 && id.endsWith("/log.jsonl") ? "log" : "session";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -19416,7 +19378,7 @@ var init_git_object_id = __esm({
 
 // src/merger-git-state.ts
 import { execFile } from "node:child_process";
-import { access, readFile as readFile7 } from "node:fs/promises";
+import { access, readFile as readFile6 } from "node:fs/promises";
 import { constants as fsConstants } from "node:fs";
 import { isAbsolute as isAbsolute3, resolve as resolve6 } from "node:path";
 import { promisify } from "node:util";
@@ -19486,7 +19448,7 @@ function createProductionMergerGitState(repositoryRoot = process.cwd()) {
       const mergeHeadPath = isAbsolute3(mergeHeadReported) ? mergeHeadReported : resolve6(repositoryRoot, mergeHeadReported);
       let sourceObjectId = "";
       if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile7(mergeHeadPath), "Git MERGE_HEAD");
+        const raw = exactUtf8(await readFile6(mergeHeadPath), "Git MERGE_HEAD");
         const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
         if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
         if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
@@ -19521,7 +19483,7 @@ var init_session_dialogue = __esm({
 });
 
 // src/ticket-provenance.ts
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 import { join as join13, resolve as resolve7 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!isSafePositiveTicketNumber(ticketNumber)) {
@@ -19545,7 +19507,7 @@ async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, ho
   const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
   let history;
   try {
-    history = await readFile8(join13(runDirectory, RUN_HISTORY_FILE), "utf8");
+    history = await readFile7(join13(runDirectory, RUN_HISTORY_FILE), "utf8");
   } catch (error) {
     if (errnoCode(error) === "ENOENT") return;
     throw error;
@@ -20128,8 +20090,8 @@ var init_option_definitions = __esm({
       repeatable: true,
       form: "option",
       description: {
-        en: "Attach a regular file; frozen at admission (repeatable).",
-        zh: "\u9644\u52A0\u666E\u901A\u6587\u4EF6\uFF1B\u53D7\u7406\u5373\u51BB\u7ED3\uFF08\u53EF\u91CD\u590D\uFF09\u3002"
+        en: "Caller file path passed as-is to the role (repeatable). Package does not read, copy, or validate; use an absolute path when cwd differs from --project.",
+        zh: "\u8C03\u7528\u65B9\u6587\u4EF6\u8DEF\u5F84\u539F\u6837\u9012\u7ED9\u8859\u95E8\uFF08\u53EF\u91CD\u590D\uFF09\u3002\u5305\u4E0D\u8BFB\u3001\u4E0D\u590D\u5236\u3001\u4E0D\u6821\u9A8C\uFF1B\u8C03\u7528\u65B9\u5F53\u524D\u76EE\u5F55\u4E0E --project \u4E0D\u540C\u65F6\u8BF7\u7ED9\u7EDD\u5BF9\u8DEF\u5F84\u3002"
       }
     };
     SHARED_PHASE_SEMANTICS = {
@@ -20304,8 +20266,8 @@ var init_option_definitions = __esm({
         repeatable: false,
         form: "option",
         description: {
-          en: "Optional request manifest JSON path ({requests:[{id,body}]}). Parsed for semantics and passed to the Collector as materials \u2014 not a machine collection directive.",
-          zh: "\u53EF\u9009 request manifest JSON \u8DEF\u5F84\uFF08{requests:[{id,body}]}\uFF09\u3002\u6309\u8BED\u4E49\u89E3\u6790\u540E\u4F5C\u4E3A\u6750\u6599\u9012\u7ED9\u901A\u8FDB\u53F8\uFF0C\u4E0D\u662F\u673A\u5668\u4EE3\u6536 finding \u7684\u6307\u4EE4\u3002"
+          en: "Caller path to a request manifest JSON file, passed as-is. Package does not read, copy, or validate; use an absolute path when cwd differs from --project.",
+          zh: "\u8C03\u7528\u65B9 request manifest JSON \u8DEF\u5F84\uFF0C\u539F\u6837\u4F20\u9012\u3002\u5305\u4E0D\u8BFB\u3001\u4E0D\u590D\u5236\u3001\u4E0D\u6821\u9A8C\uFF1B\u8C03\u7528\u65B9\u5F53\u524D\u76EE\u5F55\u4E0E --project \u4E0D\u540C\u65F6\u8BF7\u7ED9\u7EDD\u5BF9\u8DEF\u5F84\u3002"
         }
       }
     ];
@@ -20764,16 +20726,22 @@ var init_option_definitions = __esm({
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync4 } from "node:fs";
 import {
-  lstat as lstat3,
-  mkdtemp,
-  readFile as readFile9,
+  readFile as readFile8,
   realpath as realpath3,
   rename,
-  rm,
   writeFile as writeFile2
 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { basename as basename8, dirname as dirname10, isAbsolute as isAbsolute5, join as join15, resolve as resolve9 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute5, join as join15, resolve as resolve9 } from "node:path";
+function normalizeAdmittedAttachment(raw) {
+  if (typeof raw !== "object" || raw === null) return void 0;
+  const record = raw;
+  const path = record.path;
+  if (typeof path === "string") return { path };
+  return void 0;
+}
+function admitCallerAttachments(attachmentPaths) {
+  return attachmentPaths.map((path) => ({ path }));
+}
 function issueAdmissionPlacement(authority, request) {
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
@@ -20952,19 +20920,11 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
       "taskPath",
       "packetPath",
       "prerequisitesPath",
-      "requestManifestPath",
       "mergerInputPath"
     ],
     oldRunDirectory,
     target.runDirectory
   );
-  for (const attachment of admitted.attachments) {
-    attachment.frozenPath = rewriteRunDirectoryPathValue(
-      attachment.frozenPath,
-      oldRunDirectory,
-      target.runDirectory
-    );
-  }
   admitted.principal = principal;
   renderCurrentSync(target.runDirectory);
   return { oldRunDirectory, newRunDirectory: target.runDirectory };
@@ -21001,7 +20961,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile9(join15(rolePackageRoot, "package.json"), "utf8")
+    await readFile8(join15(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -21057,7 +21017,7 @@ function assignPublicSeatOption(owner, taken, fields) {
   const value = taken.value;
   switch (taken.def.id) {
     case "attach":
-      fields.attachmentPaths.push(requireOptionPath(taken.def.canonical, value));
+      fields.attachmentPaths.push(requireProvidedOptionValue(taken.def.canonical, value));
       return;
     case "project":
       fields.project = requireOptionPath(taken.def.canonical, value);
@@ -21101,7 +21061,7 @@ function assignPublicSeatOption(owner, taken, fields) {
       fields.repo = parseRepoOption(value);
       return;
     case "request-manifest":
-      fields.requestManifestPath = requireOptionPath(taken.def.canonical, value);
+      fields.requestManifestPath = requireProvidedOptionValue(taken.def.canonical, value);
       return;
     case "issue": {
       if (value === void 0 || value.trim() === "") {
@@ -21216,6 +21176,12 @@ function requireOptionPath(flag, value) {
   }
   return value;
 }
+function requireProvidedOptionValue(flag, value) {
+  if (value === void 0) {
+    throw new CliUsageError(`${flag} requires a path`);
+  }
+  return value;
+}
 function skillArgTokenFault(value) {
   if (value === void 0 || value.trim() === "") return "empty";
   if (/\s/.test(value)) return "whitespace";
@@ -21268,124 +21234,6 @@ function requireAuthorityRef(value) {
     optionLike: "--authority-ref requires a durable reference, not inline Spec prose"
   });
 }
-async function readRegularFileAttachment(sourcePath) {
-  const absolute = isAbsolute5(sourcePath) ? sourcePath : resolve9(sourcePath);
-  let st;
-  try {
-    st = await lstat3(absolute);
-  } catch (error) {
-    throw new CliUsageError(
-      `attachment is not a readable regular file: ${sourcePath}`,
-      { cause: error }
-    );
-  }
-  if (!st.isFile() || st.isSymbolicLink()) {
-    throw new CliUsageError(
-      `attachment must be a regular file (not a directory or symlink): ${sourcePath}`
-    );
-  }
-  try {
-    return { absolute, bytes: await readFile9(absolute) };
-  } catch (error) {
-    throw new CliUsageError(
-      `attachment is not a readable regular file: ${sourcePath}`,
-      { cause: error }
-    );
-  }
-}
-async function removePreparedAttachmentDirectory(stagingDirectory) {
-  await rm(stagingDirectory, { recursive: true, force: true });
-}
-async function withPreparedAttachments(attachmentPaths, use) {
-  if (attachmentPaths.length === 0) return await use([]);
-  const stagingDirectory = await mkdtemp(join15(tmpdir(), "ak-role-attachments-"));
-  const prepared = [];
-  let result;
-  try {
-    for (let index = 0; index < attachmentPaths.length; index += 1) {
-      const { absolute, bytes } = await readRegularFileAttachment(attachmentPaths[index]);
-      const snapshotPath = join15(stagingDirectory, String(index).padStart(6, "0"));
-      await writeFile2(snapshotPath, bytes);
-      prepared.push({ absolute, snapshotPath });
-    }
-    result = await use(prepared);
-  } catch (primary) {
-    try {
-      await removePreparedAttachmentDirectory(stagingDirectory);
-    } catch (cleanup) {
-      throw new AggregateError(
-        [primary, cleanup],
-        "attachment snapshot operation failed and cleanup also failed",
-        { cause: primary }
-      );
-    }
-    throw primary;
-  }
-  await removePreparedAttachmentDirectory(stagingDirectory);
-  return result;
-}
-async function freezeAttachmentBytes(provenancePath, bytes, destinationDir, index) {
-  const frozenPath = join15(
-    destinationDir,
-    `${String(index).padStart(2, "0")}-${basename8(provenancePath)}`
-  );
-  await writeFile2(frozenPath, bytes);
-  return {
-    provenancePath,
-    frozenPath,
-    byteLength: bytes.byteLength,
-    sha256: sha256Hex(bytes),
-    mediaKind: "regular-file"
-  };
-}
-async function freezePreparedAttachment(prepared, destinationDir, index) {
-  return freezeAttachmentBytes(
-    prepared.absolute,
-    await readFile9(prepared.snapshotPath),
-    destinationDir,
-    index
-  );
-}
-async function freezeRegularFileAttachment(sourcePath, destinationDir, index) {
-  const { absolute, bytes } = await readRegularFileAttachment(sourcePath);
-  return {
-    attachment: await freezeAttachmentBytes(absolute, bytes, destinationDir, index),
-    body: bytes
-  };
-}
-async function freezeAttachments(ledgerHome, attachmentPaths, attachmentsDirectory) {
-  const attachments = [];
-  if (attachmentPaths.length > 0) {
-    ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  }
-  for (let i = 0; i < attachmentPaths.length; i += 1) {
-    const frozen = await freezeRegularFileAttachment(
-      attachmentPaths[i],
-      attachmentsDirectory,
-      i
-    );
-    attachments.push(frozen.attachment);
-  }
-  return attachments;
-}
-async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
-  if (attachmentPaths.length === 0) return [];
-  const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join15(runDirectory, "attachments", summonsKey);
-  ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  return freezeAttachments(ledgerHome, attachmentPaths, attachmentsDirectory);
-}
-async function freezePreparedAttachmentsIntoRun(prepared, runDirectory, summonsKey) {
-  if (prepared.length === 0) return [];
-  const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = summonsKey === void 0 ? join15(runDirectory, "attachments") : join15(runDirectory, "attachments", summonsKey);
-  ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
-  const attachments = [];
-  for (let index = 0; index < prepared.length; index += 1) {
-    attachments.push(await freezePreparedAttachment(prepared[index], attachmentsDirectory, index));
-  }
-  return attachments;
-}
 function ticketAdmissionFields(ticketNumber) {
   if (ticketNumber === void 0) return {};
   return {
@@ -21474,7 +21322,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (parsed.prerequisitesPath !== void 0) {
         const absolutePrereq = isAbsolute5(parsed.prerequisitesPath) ? parsed.prerequisitesPath : resolve9(parsed.prerequisitesPath);
         try {
-          prerequisitesSource = await readFile9(absolutePrereq, "utf8");
+          prerequisitesSource = await readFile8(absolutePrereq, "utf8");
         } catch (error) {
           throw new CliUsageError(
             `fixer prerequisites path is unreadable: ${parsed.prerequisitesPath}`,
@@ -21531,37 +21379,17 @@ async function admitPublicRole(role, parsed, env, override) {
       } else {
         repository = resolveGitHubRemoteRepository(projectRoot);
       }
-      let manifest = emptyCollectorManifest();
-      let manifestCanonicalJson;
-      if (parsed.requestManifestPath !== void 0) {
-        try {
-          manifest = await loadCollectorManifest(parsed.requestManifestPath);
-          manifestCanonicalJson = manifest.canonicalJson;
-        } catch (error) {
-          throw new CliUsageError(
-            errorText(error),
-            { cause: error }
-          );
-        }
-      }
-      const manifestDigest = manifest.digest;
       const admittedCollector = await admitStandardMaterialInvocation("collector", {
         ...shared,
         instruction,
         attachmentPaths,
         ...project,
-        placedFields: async (placed) => {
-          let requestManifestPath;
-          if (manifestCanonicalJson !== void 0) {
-            requestManifestPath = join15(placed.runDirectory, "request-manifest.json");
-            await writeFile2(requestManifestPath, manifestCanonicalJson, "utf8");
-          }
+        placedFields: async () => {
           return {
             ...explicitPrNumber === void 0 ? {} : { prNumber: explicitPrNumber },
             repository: repository.canonical,
             repositoryDisplay: repository.display,
-            ...requestManifestPath === void 0 ? {} : { requestManifestPath },
-            manifestDigest
+            ...parsed.requestManifestPath === void 0 ? {} : { requestManifestPath: parsed.requestManifestPath }
           };
         }
       });
@@ -21574,12 +21402,10 @@ async function admitPublicRole(role, parsed, env, override) {
         );
       }
       const issueNumber = parsed.issueNumber;
-      let frozenAttachments = [];
-      const admittedDoctor = await admitStandardMaterialInvocation("doctor", {
+      return admitStandardMaterialInvocation("doctor", {
         ...shared,
         instruction,
-        attachmentPaths: [],
-        freezeAttachments: false,
+        attachmentPaths,
         ...project,
         placedFields: async (placed) => {
           let caseRunsPath;
@@ -21620,16 +21446,13 @@ async function admitPublicRole(role, parsed, env, override) {
               { cause: error }
             );
           }
-          frozenAttachments = await freezeAttachments(placed.ledgerHome, attachmentPaths, placed.attachmentsDirectory);
           return {
             issueNumber,
             caseRunsPath,
-            caseIdentity,
-            attachments: persistedAttachmentRefs(frozenAttachments)
+            caseIdentity
           };
         }
       });
-      return { ...admittedDoctor, attachments: frozenAttachments };
     }
     case "source-locator": {
       const projectRoot = resolve9(parsed.project ?? shared.cwd);
@@ -21656,7 +21479,7 @@ async function admitPublicRole(role, parsed, env, override) {
         instruction: "",
         attachmentPaths: [],
         ...project,
-        freezeAttachments: false,
+        recordAttachments: false,
         admittedFields: {
           sourceRunPath: sourceRun.runDirectory,
           sourceRun
@@ -21673,7 +21496,7 @@ async function admitPublicRole(role, parsed, env, override) {
         instruction,
         attachmentPaths: [],
         ...project,
-        freezeAttachments: false,
+        recordAttachments: false,
         admittedFields: { baseRevision }
       });
     }
@@ -21785,7 +21608,7 @@ async function placeRoleAdmission(options) {
     home: options.home,
     ...options.materialize === void 0 ? {} : { materialize: options.materialize }
   });
-  const attachments = options.freezeAttachments === false ? [] : await freezeAttachments(ledgerHome, options.attachmentPaths, attachmentsDirectory);
+  const attachments = options.recordAttachments === false ? [] : admitCallerAttachments(options.attachmentPaths);
   return {
     runId,
     bookKey,
@@ -21801,13 +21624,7 @@ async function placeRoleAdmission(options) {
   };
 }
 function persistedAttachmentRefs(attachments) {
-  return attachments.map((attachment) => ({
-    provenancePath: attachment.provenancePath,
-    frozenPath: attachment.frozenPath,
-    byteLength: attachment.byteLength,
-    sha256: attachment.sha256,
-    mediaKind: attachment.mediaKind
-  }));
+  return attachments.map((attachment) => ({ path: attachment.path }));
 }
 async function persistPlacedAdmission(admitted, placed, model) {
   writeAdmittedRequestPersistence(placed.runDirectory, admitted, {
@@ -21826,14 +21643,14 @@ async function persistPlacedAdmission(admitted, placed, model) {
 }
 async function admitStandardMaterialInvocation(role, options) {
   const defer = options.deferPersistence === true;
-  const skipFreeze = defer || options.freezeAttachments === false;
+  const skipAttachments = defer || options.recordAttachments === false;
   const placed = await placeRoleAdmission({
     role,
     home: options.home,
     principalAuthority: options.principalAuthority,
     cwd: options.cwd,
     attachmentPaths: options.attachmentPaths,
-    ...skipFreeze ? { freezeAttachments: false } : {},
+    ...skipAttachments ? { recordAttachments: false } : {},
     ...defer ? { materialize: false } : {},
     ...options.project === void 0 ? {} : { project: options.project },
     ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
@@ -21841,7 +21658,7 @@ async function admitStandardMaterialInvocation(role, options) {
   });
   const correlationFields = options.correlationId === void 0 ? {} : { correlationId: options.correlationId };
   const instruction = options.instruction;
-  const instructionEmpty = instruction.trim() === "";
+  const instructionEmpty = instruction.length === 0;
   const placedExtra = options.placedFields === void 0 ? void 0 : await options.placedFields(placed);
   const admittedFields = {
     ...options.admittedFields ?? {},
@@ -21896,7 +21713,7 @@ function buildInstructionTransportPrompt(admitted) {
       throw new Error("baseline transport prompt is missing the bound revision");
     }
     const lines2 = [admitted.baseRevision];
-    if (!admitted.instructionEmpty) {
+    if (admitted.instruction.length > 0) {
       lines2.push("", admitted.instruction);
     }
     return lines2.join("\n");
@@ -21910,17 +21727,21 @@ function buildInstructionTransportPrompt(admitted) {
       lens: admitted.lens,
       authorityRefs: admitted.authorityRefs
     })];
-    if (!admitted.instructionEmpty && admitted.instruction.trim() !== "") {
+    if (admitted.instruction.length > 0) {
       lines2.push("", admitted.instruction);
     }
     return lines2.join("\n");
   }
-  const lines = [admitted.instructionEmpty ? "" : admitted.instruction];
-  if (admitted.attachments.length > 0) {
+  const lines = [admitted.instruction];
+  const flaggedPaths = [
+    ...admitted.attachments.map((attachment) => `--attach ${attachment.path}`),
+    ...admitted.requestManifestPath === void 0 ? [] : [`--request-manifest ${admitted.requestManifestPath}`]
+  ];
+  if (flaggedPaths.length > 0) {
     lines.push("");
-    lines.push("\u5DF2\u53D7\u7406\u9644\u4EF6\uFF08\u51BB\u7ED3\u5FEB\u7167\u8DEF\u5F84\uFF09\uFF1A");
-    for (const attachment of admitted.attachments) {
-      lines.push(`- ${attachment.frozenPath}`);
+    lines.push("\u5DF2\u53D7\u7406\u9644\u4EF6\uFF1A");
+    for (const entry of flaggedPaths) {
+      lines.push(`- ${entry}`);
     }
   }
   return lines.join("\n");
@@ -21931,8 +21752,7 @@ async function materializeCountersignInvocation(admitted, options) {
     home: options.home,
     principalAuthority: options.principalAuthority,
     cwd: admitted.projectRoot,
-    attachmentPaths: [],
-    freezeAttachments: false,
+    attachmentPaths: options.attachmentPaths,
     runId: admitted.runId,
     ...options.ticketNumber === void 0 ? {} : { assertedTicketNumber: options.ticketNumber }
   });
@@ -21943,11 +21763,7 @@ async function materializeCountersignInvocation(admitted, options) {
   if (ticketFields.ticketNumber !== void 0) {
     admitted.ticketNumber = ticketFields.ticketNumber;
   }
-  const attachments = await freezePreparedAttachmentsIntoRun(
-    options.preparedAttachments,
-    admitted.runDirectory
-  );
-  admitted.attachments = attachments;
+  admitted.attachments = placement.attachments;
   writeAdmittedRequestPersistence(admitted.runDirectory, admitted, {
     sessionDirectory: placement.sessionDirectory,
     sessionFile: placement.sessionFile
@@ -22187,7 +22003,7 @@ function parseAnalystArgv(args) {
       if (taken.def.id === "attach") {
         pushValue(
           "attach",
-          requireOptionPath(taken.def.canonical, taken.value)
+          requireProvidedOptionValue(taken.def.canonical, taken.value)
         );
         return;
       }
@@ -23477,10 +23293,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep2 = ((ms) => new Promise((resolve14) => {
+  const sleep2 = ((ms) => new Promise((resolve13) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve14();
+      resolve13();
     }, ms);
   }));
   sleep2.cancel = () => {
@@ -23492,7 +23308,7 @@ function defaultNavigatorGraceSleep() {
   return sleep2;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2 = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve13, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -23501,11 +23317,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep2
       action();
     };
     void work.then(
-      (value) => finish(() => resolve14({ status: "done", value })),
+      (value) => finish(() => resolve13({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep2(graceMs).then(() => {
-      finish(() => resolve14({ status: "timeout" }));
+      finish(() => resolve13({ status: "timeout" }));
     });
   });
 }
@@ -24196,7 +24012,7 @@ var init_role_seat_runtime = __esm({
 });
 
 // src/archivist-record-pointer.ts
-import { basename as basename9, join as join20 } from "node:path";
+import { basename as basename8, join as join20 } from "node:path";
 function bookDirectOfficerRunPointer(options) {
   const submissionToolCallId = options.submissionToolCallId?.trim() ?? "";
   const pointer = {
@@ -24222,7 +24038,7 @@ async function resolveOfficerPointer(raw, parentRunDirectory) {
   let runDirectory = typeof raw.runDirectory === "string" && raw.runDirectory.trim() !== "" ? raw.runDirectory : void 0;
   let sessionFile = raw.sessionFile;
   const recordedRunDirectory = runDirectory ?? runDirectoryOfSessionFile(sessionFile);
-  const leaf = parseRunLeaf(basename9(recordedRunDirectory));
+  const leaf = parseRunLeaf(basename8(recordedRunDirectory));
   const parentIdentity = await readRoleRunIdentity(parentRunDirectory);
   if (leaf !== void 0 && parentIdentity !== void 0) {
     const currentRunDirectory = await findRunDirectoryById(
@@ -24538,7 +24354,7 @@ var init_submission_gate = __esm({
 
 // src/session-opening-materials.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { readFile as readFile10 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { dirname as dirname13, join as join21 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
@@ -24554,7 +24370,7 @@ function resolvePackageRootDir(moduleUrl = import.meta.url) {
   return fileURLToPath(new URL("..", moduleUrl));
 }
 async function readPackageMaterial(relativePath) {
-  return readFile10(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
+  return readFile9(fileURLToPath(new URL(relativePath, packageRootUrl)), "utf8");
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
@@ -24596,7 +24412,7 @@ __export(auditor_soul_exports, {
   readAuditorResumeBinding: () => readAuditorResumeBinding,
   resolveAuditorSubject: () => resolveAuditorSubject
 });
-import { basename as basename10 } from "node:path";
+import { basename as basename9 } from "node:path";
 function auditorSoulRelativePath(role) {
   return `souls/${role}-auditor.md`;
 }
@@ -24632,7 +24448,7 @@ function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
   return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
 }
 function subjectFromSourceDirectory(sourceRunDirectory) {
-  const role = parseRunLeaf(basename10(sourceRunDirectory))?.role;
+  const role = parseRunLeaf(basename9(sourceRunDirectory))?.role;
   return isAuditorSoulRole(role) ? role : void 0;
 }
 async function readAuditorResumeBinding(runDirectory) {
@@ -25492,7 +25308,7 @@ async function runCountersignBody(parsed, env, io) {
       summons: {
         sourceRunPath: gateParentRunPath,
         instruction: resumeInstruction,
-        instructionEmpty: resumeInstruction.trim() === ""
+        instructionEmpty: resumeInstruction.length === 0
       }
     });
     if (resumed != null) return resumed;
@@ -25506,12 +25322,12 @@ async function runCountersignBody(parsed, env, io) {
     throw error;
   }
   try {
-    return await withPreparedAttachments(parsed.attachmentPaths ?? [], async (preparedAttachments) => {
+    {
       const materializeAdmission = async (ticketNumber) => {
         await materializeCountersignInvocation(admitted, {
           home: env.home,
           principalAuthority: env.principalAuthority,
-          preparedAttachments,
+          attachmentPaths: parsed.attachmentPaths ?? [],
           ...env.model === void 0 ? {} : { model: env.model },
           ...ticketNumber === void 0 ? {} : { ticketNumber }
         });
@@ -25546,7 +25362,7 @@ async function runCountersignBody(parsed, env, io) {
       });
       await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
       return result;
-    });
+    }
   } catch (error) {
     const rejected = usageExit(error, io);
     if (rejected !== void 0) return rejected;
@@ -25611,7 +25427,7 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
     const summons = {
       ...sameParentInstruction(env, {
         instruction: parsed.instruction ?? "",
-        instructionEmpty: (parsed.instruction ?? "").trim() === ""
+        instructionEmpty: (parsed.instruction ?? "").length === 0
       }),
       attachmentPaths: parsed.attachmentPaths ?? []
     };
@@ -25636,7 +25452,7 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
         sourceRunPath: parentRunPath,
         ...sameParentInstruction(env, {
           instruction: parsed.instruction ?? "",
-          instructionEmpty: (parsed.instruction ?? "").trim() === ""
+          instructionEmpty: (parsed.instruction ?? "").length === 0
         }),
         attachmentPaths: parsed.attachmentPaths ?? []
       };
@@ -25720,7 +25536,7 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
           instruction: parsed.instruction ?? "",
           projectRoot: admitted.projectRoot,
           failureLabel: "secretariat unbound summons",
-          attachmentPaths: admitted.attachments.map((attachment) => attachment.frozenPath),
+          attachmentPaths: admitted.attachments.map((attachment) => attachment.path),
           correlationId: admitted.runId
         }, env, io);
       } catch (error) {
@@ -26533,7 +26349,7 @@ async function summonPublicRole(options) {
         runId: resumeRunId,
         summons: {
           instruction,
-          instructionEmpty: instruction.trim() === ""
+          instructionEmpty: instruction.length === 0
         }
       },
       env,
@@ -26996,13 +26812,6 @@ function rewriteSourceRunLocator(value, rewrites) {
 function rewriteAdmittedRoleRunPage(page, rewrites) {
   rewriteRunDirectoryPathFieldsAgainstRewrites(page, ADMITTED_PAGE_FIELDS, rewrites);
   rewriteSourceRunLocator(page.sourceRun, rewrites);
-  if (Array.isArray(page.attachments)) {
-    for (const attachment of page.attachments) {
-      if (isRecord(attachment)) {
-        rewriteRunDirectoryPathFieldsAgainstRewrites(attachment, ["frozenPath"], rewrites);
-      }
-    }
-  }
   if (isRecord(page.principal)) {
     rewriteRunDirectoryPathFieldsAgainstRewrites(
       page.principal,
@@ -27030,7 +26839,7 @@ var init_role_run_relocation = __esm({
       "taskPath",
       "packetPath",
       "prerequisitesPath",
-      "requestManifestPath",
+      // #1165: requestManifestPath is a caller path — never rewrite.
       "mergerInputPath",
       "sourceRunPath"
     ];
@@ -27065,8 +26874,8 @@ __export(run_lifecycle_exports, {
   recordCurrentCourt: () => recordCurrentCourt,
   writeRoleRunState: () => writeRoleRunState
 });
-import { chmod, lstat as lstat4, open, readdir as readdir3, readFile as readFile11, unlink } from "node:fs/promises";
-import { basename as basename11, join as join25 } from "node:path";
+import { chmod, lstat as lstat3, open, readdir as readdir3, readFile as readFile10, unlink } from "node:fs/promises";
+import { basename as basename10, join as join25 } from "node:path";
 function buildAutoResumeContinuationPrompt() {
   return RESUME_TRANSPORT_ENVELOPE;
 }
@@ -27079,7 +26888,7 @@ function parseSameTicketSummonsMaterials(raw) {
   const record = raw;
   const instruction = typeof record.instruction === "string" ? record.instruction : void 0;
   const instructionEmpty = typeof record.instructionEmpty === "boolean" ? record.instructionEmpty : void 0;
-  const attachmentPaths = Array.isArray(record.attachmentPaths) ? record.attachmentPaths.filter((p) => typeof p === "string" && p.length > 0) : void 0;
+  const attachmentPaths = Array.isArray(record.attachmentPaths) ? record.attachmentPaths.filter((p) => typeof p === "string") : void 0;
   const sourceRunPath = typeof record.sourceRunPath === "string" && record.sourceRunPath.trim() !== "" ? record.sourceRunPath : void 0;
   let sourceRun;
   if (isRecord(record.sourceRun)) {
@@ -27304,7 +27113,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile11(lockPath, "utf8");
+    content = await readFile10(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "unknown", reason: "unreadable", readFailure: error };
@@ -27497,7 +27306,7 @@ async function runHasFormedSessionPrincipal(runDirectory) {
   if (disk === void 0) return false;
   const sessionFile = typeof disk.principalWire.sessionFile === "string" && disk.principalWire.sessionFile.trim() !== "" ? disk.principalWire.sessionFile : sessionFileIn(disk.principalWire.sessionDirectory);
   try {
-    const stat2 = await lstat4(sessionFile);
+    const stat2 = await lstat3(sessionFile);
     return stat2.isFile() && !stat2.isSymbolicLink();
   } catch (error) {
     if (errorCodeOf(error) === "ENOENT") return false;
@@ -27521,7 +27330,7 @@ async function findLatestRunIdForSeatTicket(input) {
   }
   let best;
   for (const runDirectory of runDirectories) {
-    const parsed = parseRunLeaf(basename11(runDirectory));
+    const parsed = parseRunLeaf(basename10(runDirectory));
     if (parsed === void 0 || parsed.role !== input.role) continue;
     const runId = parsed.runId;
     const parentPath = await readRunParentPath(runDirectory);
@@ -27578,7 +27387,6 @@ async function loadResumableRunRecord(home, runId, authority) {
   let repository;
   let repositoryDisplay;
   let requestManifestPath;
-  let manifestDigest;
   let waitWindowMs;
   let issueNumber;
   let caseRunsPath;
@@ -27601,7 +27409,7 @@ async function loadResumableRunRecord(home, runId, authority) {
         instructionEmpty = record.instructionEmpty;
       }
       if (Array.isArray(record.attachments)) {
-        attachments = record.attachments;
+        attachments = record.attachments.map((item) => normalizeAdmittedAttachment(item)).filter((item) => item !== void 0);
       }
       if (record.phase === "plan" || record.phase === "apply") {
         phase = record.phase;
@@ -27633,12 +27441,9 @@ async function loadResumableRunRecord(home, runId, authority) {
       if (typeof record.repositoryDisplay === "string" && record.repositoryDisplay.trim() !== "") {
         repositoryDisplay = record.repositoryDisplay;
       }
-      if (typeof record.requestManifestPath === "string" && record.requestManifestPath.trim() !== "") {
+      if (typeof record.requestManifestPath === "string") {
         requestManifestPath = record.requestManifestPath;
       }
-      if (typeof record.manifestDigest === "string" && record.manifestDigest.trim() !== "") {
-        manifestDigest = record.manifestDigest;
-      }
       if (typeof record.waitWindowMs === "number" && Number.isSafeInteger(record.waitWindowMs) && record.waitWindowMs >= 1) {
         waitWindowMs = record.waitWindowMs;
       }
@@ -27732,7 +27537,7 @@ async function loadResumableRunRecord(home, runId, authority) {
       );
     }
   }
-  const sourceRunLeaf = parseRunLeaf(basename11(sourceRunPath ?? ""));
+  const sourceRunLeaf = parseRunLeaf(basename10(sourceRunPath ?? ""));
   const referencedRunId = sourceRun?.runId ?? sourceRunLeaf?.runId;
   const referencedRole = sourceRun?.role ?? sourceRunLeaf?.role;
   if (referencedRunId !== void 0 && referencedRunId !== "") {
@@ -27772,7 +27577,6 @@ async function loadResumableRunRecord(home, runId, authority) {
       ...repository === void 0 ? {} : { repository },
       ...repositoryDisplay === void 0 ? {} : { repositoryDisplay },
       ...requestManifestPath === void 0 ? {} : { requestManifestPath },
-      ...manifestDigest === void 0 ? {} : { manifestDigest },
       ...waitWindowMs === void 0 ? {} : { waitWindowMs },
       ...issueNumber === void 0 ? {} : { issueNumber },
       ...caseRunsPath === void 0 ? {} : { caseRunsPath },
@@ -27962,8 +27766,8 @@ function admitResumedRole(loaded) {
       return admitted;
     }
     case "collect-target": {
-      const { prNumber, repository, repositoryDisplay, manifestDigest } = fields;
-      if (repository === void 0 || repositoryDisplay === void 0 || manifestDigest === void 0) {
+      const { prNumber, repository, repositoryDisplay } = fields;
+      if (repository === void 0 || repositoryDisplay === void 0) {
         throw new CliUsageError(
           `role run admitted collector repository identity is missing: ${runId}`
         );
@@ -27986,8 +27790,7 @@ function admitResumedRole(loaded) {
         ...prNumber === void 0 ? {} : { prNumber },
         repository: parsedRepository,
         ...fields.requestManifestPath === void 0 ? {} : { requestManifestPath: fields.requestManifestPath },
-        ...fields.waitWindowMs === void 0 ? {} : { waitWindowMs: fields.waitWindowMs },
-        manifestDigest
+        ...fields.waitWindowMs === void 0 ? {} : { waitWindowMs: fields.waitWindowMs }
       };
       return admitted;
     }
@@ -28071,7 +27874,6 @@ var init_run_lifecycle = __esm({
 
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { isAbsolute as isAbsolute8, join as join26, resolve as resolve12 } from "node:path";
 function describeCaughtError(error) {
   if (error instanceof Error) {
     const code = error.code;
@@ -28093,7 +27895,7 @@ function projectRelocatedTurnIdentity(request, result, admitted, relocation) {
   mutableRequest.principal = admitted.principal;
   const activation = mutableRequest.activation;
   if (isRecord(activation)) {
-    for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath", "requestManifestPath"]) {
+    for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath"]) {
       const record = activation;
       if (field in record) record[field] = rewrite(record[field]);
     }
@@ -28826,7 +28628,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
       prompt = request.message;
     }
   } else if (summonsPrepared !== void 0) {
-    prompt = officerDialogue ? summonsPrepared.instructionEmpty ? "" : summonsPrepared.instruction : buildInstructionTransportPrompt(summonsPrepared);
+    prompt = officerDialogue ? summonsPrepared.instruction : buildInstructionTransportPrompt(summonsPrepared);
   } else if (request.summons !== void 0) {
     prompt = "";
   } else {
@@ -28907,24 +28709,14 @@ async function runSettledAutoResumeLoop(input) {
     })
   });
 }
-function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
-  const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
-  return pathContainedIn(join26(runDirectory, "attachments"), absolute);
-}
-async function prepareSummonsResumeMaterials(runDirectory, summons) {
+async function prepareSummonsResumeMaterials(_runDirectory, summons) {
   if (summons === void 0) return void 0;
   if (summons.instruction === void 0 && (summons.attachmentPaths?.length ?? 0) === 0) {
     return void 0;
   }
   const instruction = summons.instruction ?? "";
-  const instructionEmpty = summons.instructionEmpty ?? instruction.trim() === "";
-  let attachments = [];
-  if (summons.attachmentPaths !== void 0 && summons.attachmentPaths.length > 0) {
-    const alreadyFrozen = summons.attachmentPaths.every(
-      (path) => isAlreadyFrozenSummonsAttachment(runDirectory, path)
-    );
-    attachments = alreadyFrozen ? summons.attachmentPaths.map((frozenPath) => ({ frozenPath })) : await freezeAttachmentsIntoRun(summons.attachmentPaths, runDirectory);
-  }
+  const instructionEmpty = summons.instructionEmpty ?? instruction.length === 0;
+  const attachments = (summons.attachmentPaths ?? []).map((path) => ({ path }));
   return { instruction, instructionEmpty, attachments };
 }
 async function runPostAdmissionSeatResume(input) {
@@ -28973,23 +28765,6 @@ async function runPostAdmissionSeatResume(input) {
         openCourtAttemptId = openCourt.courtAttemptId;
       }
     }
-    if (request.summons !== void 0) {
-      const prepared = await prepareSummonsResumeMaterials(
-        admittedForBuild.runDirectory,
-        request.summons
-      );
-      if (prepared !== void 0 && (request.summons.attachmentPaths?.length ?? 0) > 0) {
-        request = {
-          ...request,
-          summons: {
-            ...request.summons,
-            attachmentPaths: prepared.attachments.map(
-              (attachment) => attachment.frozenPath
-            )
-          }
-        };
-      }
-    }
     let turnRequest = await input.buildTurnRequest(admittedForBuild, request);
     if (turnRequest.continuation.kind === "resume" && turnRequest.continuation.hostSessionId === void 0) {
       const hostSessionId = await readStoredHostSessionId(
@@ -29239,7 +29014,6 @@ var init_post_admission = __esm({
     init_invocation();
     init_submission_ledger();
     init_run_ticket_number();
-    init_activation_ledger_topology();
     init_session_identity();
     init_sitian_facade();
     init_receipt_delivery_policy();
@@ -29259,7 +29033,7 @@ var init_post_admission = __esm({
 
 // src/analyst-book-key.ts
 import { statSync as statSync6 } from "node:fs";
-import { isAbsolute as isAbsolute9 } from "node:path";
+import { isAbsolute as isAbsolute8 } from "node:path";
 function resolveAnalystBookKey(projectRoot) {
   const identity = physicalPathIdentity(projectRoot);
   let stats;
@@ -29281,7 +29055,7 @@ function resolveAnalystBookKey(projectRoot) {
   }
 }
 function isSyntheticAnalystBookKey(bookKey) {
-  return bookKey.startsWith("root:") && isAbsolute9(bookKey.slice("root:".length));
+  return bookKey.startsWith("root:") && isAbsolute8(bookKey.slice("root:".length));
 }
 var init_analyst_book_key = __esm({
   "src/analyst-book-key.ts"() {
@@ -29293,16 +29067,16 @@ var init_analyst_book_key = __esm({
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { rename as rename2, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname16, join as join27 } from "node:path";
+import { rename as rename2, rm, writeFile as writeFile4 } from "node:fs/promises";
+import { dirname as dirname16, join as join26 } from "node:path";
 async function writeFileAtomically(destination, contents, options) {
   const parent = dirname16(destination);
-  const temporary = join27(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join26(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
     await writeFile4(temporary, contents, options);
     await rename2(temporary, destination);
   } catch (error) {
-    await rm2(temporary, { force: true }).catch(() => void 0);
+    await rm(temporary, { force: true }).catch(() => void 0);
     throw error;
   }
 }
@@ -29313,13 +29087,13 @@ var init_atomic_write = __esm({
 });
 
 // src/analyst-index.ts
-import { open as open2, readFile as readFile12, unlink as unlink2 } from "node:fs/promises";
-import { dirname as dirname17, join as join28 } from "node:path";
+import { open as open2, readFile as readFile11, unlink as unlink2 } from "node:fs/promises";
+import { dirname as dirname17, join as join27 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname17(indexPath));
-  const lockPath = join28(dirname17(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join27(dirname17(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29346,7 +29120,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join28(ledgerHome, "analyst", "library-index.json");
+  return join27(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -29437,7 +29211,7 @@ async function readAnalystLibraryIndexPage(ledgerHome) {
   const path = analystLibraryIndexPath(ledgerHome);
   let raw;
   try {
-    raw = await readFile12(path, "utf8");
+    raw = await readFile11(path, "utf8");
   } catch (error) {
     if (isMissingPathError(error)) return void 0;
     throw error;
@@ -29892,7 +29666,7 @@ var init_analyst_gate_cycles_read = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir4 } from "node:fs/promises";
-import { basename as basename12, join as join29 } from "node:path";
+import { basename as basename11, join as join28 } from "node:path";
 async function readExistingRunLifecycleState(runDirectory) {
   return (await readRoleRunIdentity(runDirectory))?.state;
 }
@@ -29912,7 +29686,7 @@ function ghostLeaseCheckFromAutopsy(autopsy) {
   }
 }
 async function classifyGhostCandidate(input) {
-  const autopsy = await autopsyWriterLock(join29(input.runDirectory, "writer.lock"));
+  const autopsy = await autopsyWriterLock(join28(input.runDirectory, "writer.lock"));
   const leaseCheck = ghostLeaseCheckFromAutopsy(autopsy);
   if (leaseCheck === void 0) return { kind: "live" };
   return {
@@ -30202,7 +29976,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join29(ledgerHome, "books");
+  const booksRoot = join28(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -30235,7 +30009,7 @@ async function scanAnalystIssueRuns(input) {
   const ghostLegs = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const bookDir = join29(booksRoot, book);
+    const bookDir = join28(booksRoot, book);
     let runDirectories;
     try {
       runDirectories = await listBookRunDirectories(bookDir);
@@ -30244,7 +30018,7 @@ async function scanAnalystIssueRuns(input) {
       throw error;
     }
     for (const runDirectory of runDirectories) {
-      const runName = basename12(runDirectory);
+      const runName = basename11(runDirectory);
       const parsed = parseRunLeaf(runName);
       if (parsed === void 0) continue;
       let scopeFields;
@@ -30981,7 +30755,7 @@ var init_analyst_metric_family = __esm({
 });
 
 // src/analyst-page.ts
-import { dirname as dirname18, join as join30 } from "node:path";
+import { dirname as dirname18, join as join29 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -30992,7 +30766,7 @@ function analystIssuePageKey(address) {
   return sha256Hex(parts.join("\0")).slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join30(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join29(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31228,7 +31002,7 @@ var init_analyst_model_groups = __esm({
 });
 
 // src/analyst-entry.ts
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile13 } from "node:fs/promises";
 function cachedPageMatchesRequestedScope(page, input) {
   if (page.bookKey !== input.bookKey) return false;
   const requestedTicket = input.ticketNumber ?? input.issueNumber;
@@ -31255,7 +31029,7 @@ async function readOrComputeAnalystIssuePage(input, options) {
     ...issueNumber === void 0 && input.bookKey === void 0 ? { scopeRootIdentity: projectRoot } : {}
   });
   try {
-    const raw = await readFile14(pagePath, "utf8");
+    const raw = await readFile13(pagePath, "utf8");
     const page = JSON.parse(raw);
     if (cachedPageMatchesRequestedScope(page, { bookKey, ...input })) {
       const ghostScan = await scanAnalystIssueRuns({
@@ -31356,7 +31130,7 @@ async function runAnalystModelGroupsMode(input, home) {
       scopeRootIdentity: projectRoot
     });
     try {
-      const raw = await readFile14(pagePath, "utf8");
+      const raw = await readFile13(pagePath, "utf8");
       JSON.parse(raw);
     } catch (error) {
       if (!isMissingPathError(error)) {
@@ -31454,8 +31228,8 @@ var init_analyst_entry = __esm({
 });
 
 // src/public-cli/analyst-run.ts
-import { readFile as readFile15 } from "node:fs/promises";
-import { isAbsolute as isAbsolute10, resolve as resolve13 } from "node:path";
+import { readFile as readFile14 } from "node:fs/promises";
+import { isAbsolute as isAbsolute9, resolve as resolve12 } from "node:path";
 function resolveAnalystIssueBookKeyFromCwd(cwd = process.cwd()) {
   try {
     return resolveBookKeyFromGit(cwd);
@@ -31504,10 +31278,10 @@ async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPaths) {
     );
   }
   const sourcePath = attachmentPaths[0];
-  const absolute = isAbsolute10(sourcePath) ? sourcePath : resolve13(sourcePath);
+  const absolute = isAbsolute9(sourcePath) ? sourcePath : resolve12(sourcePath);
   let bytes;
   try {
-    bytes = await readFile15(absolute);
+    bytes = await readFile14(absolute);
   } catch (error) {
     throw new CliUsageError(
       `analyst sweep attachment is not a readable regular file: ${sourcePath}`,
@@ -32528,7 +32302,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname19, join as join31 } from "node:path";
+import { dirname as dirname19, join as join30 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32617,8 +32391,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname19(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join31(binDir, "..", "..");
-  if (existsSync9(join31(canonical, "package.json"))) {
+  const canonical = join30(binDir, "..", "..");
+  if (existsSync9(join30(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;