@akagilnc/pi-workflow-roles 0.1.5679 → 0.1.5698

package/dist/public-cli/main.js

@@ -839,6 +839,135 @@ var init_activation_ledger_topology = __esm({
   }
 });
 
+// src/role-run-path-rewrite.ts
+import { sep as sep2 } from "node:path";
+function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
+  if (typeof value !== "string") return value;
+  if (value === oldRunDirectory) return newRunDirectory;
+  const prefix = `${oldRunDirectory}${sep2}`;
+  if (value.startsWith(prefix)) {
+    return `${newRunDirectory}${value.slice(oldRunDirectory.length)}`;
+  }
+  return value;
+}
+function rewriteRunDirectoryPathValueAgainstRewrites(value, rewrites) {
+  if (typeof value !== "string" || rewrites.length === 0) return value;
+  let best;
+  for (const rewrite of rewrites) {
+    if (value === rewrite.oldRunDirectory || value.startsWith(`${rewrite.oldRunDirectory}${sep2}`)) {
+      if (best === void 0 || rewrite.oldRunDirectory.length > best.oldRunDirectory.length) {
+        best = rewrite;
+      }
+    }
+  }
+  if (best === void 0) return value;
+  return rewriteRunDirectoryPathValue(
+    value,
+    best.oldRunDirectory,
+    best.newRunDirectory
+  );
+}
+function rewriteRunDirectoryPathFields(record, fields, oldRunDirectory, newRunDirectory) {
+  rewriteRunDirectoryPathFieldsAgainstRewrites(record, fields, [
+    { oldRunDirectory, newRunDirectory }
+  ]);
+}
+function rewriteRunDirectoryPathFieldsAgainstRewrites(record, fields, rewrites) {
+  for (const field of fields) {
+    if (field in record) {
+      record[field] = rewriteRunDirectoryPathValueAgainstRewrites(
+        record[field],
+        rewrites
+      );
+    }
+  }
+}
+function rewritePrincipalSessionPaths(principal, oldRunDirectory, newRunDirectory) {
+  rewriteRunDirectoryPathFields(
+    principal,
+    PRINCIPAL_SESSION_PATH_FIELDS,
+    oldRunDirectory,
+    newRunDirectory
+  );
+}
+function projectTurnRequestLiveRunDirectory(request, newRunDirectory, authority) {
+  const old = request.runDirectory;
+  if (old === newRunDirectory) return;
+  const coords = { ...authority.decode(request.principal) };
+  rewritePrincipalSessionPaths(
+    coords,
+    old,
+    newRunDirectory
+  );
+  const sealed = authority.seal(coords);
+  request.runDirectory = newRunDirectory;
+  request.principal = sealed;
+}
+function rewriteSourceRunLocator(value, rewrites) {
+  if (!isRecord(value)) return;
+  rewriteRunDirectoryPathFieldsAgainstRewrites(
+    value,
+    SOURCE_RUN_LOCATOR_FIELDS,
+    rewrites
+  );
+}
+function rewriteSummonsMaterials(value, rewrites) {
+  if (!isRecord(value)) return;
+  rewriteRunDirectoryPathFieldsAgainstRewrites(
+    value,
+    SUMMONS_PATH_FIELDS,
+    rewrites
+  );
+  rewriteSourceRunLocator(value.sourceRun, rewrites);
+}
+function rewriteAdmittedRoleRunPage(page, rewrites) {
+  rewriteRunDirectoryPathFieldsAgainstRewrites(page, ADMITTED_PAGE_PATH_FIELDS, rewrites);
+  rewriteSourceRunLocator(page.sourceRun, rewrites);
+  if (isRecord(page.principal)) {
+    rewriteRunDirectoryPathFieldsAgainstRewrites(
+      page.principal,
+      PRINCIPAL_SESSION_PATH_FIELDS,
+      rewrites
+    );
+  }
+}
+function projectRenderedPagePaths(page, actualRunDirectory) {
+  const stored = typeof page.runDirectory === "string" && page.runDirectory.trim() !== "" ? page.runDirectory : void 0;
+  if (stored === void 0 || stored === actualRunDirectory) return page;
+  const projected = structuredClone(page);
+  const rewrites = [
+    { oldRunDirectory: stored, newRunDirectory: actualRunDirectory }
+  ];
+  rewriteAdmittedRoleRunPage(projected, rewrites);
+  if (isRecord(projected.currentCourt)) {
+    rewriteSummonsMaterials(projected.currentCourt.summons, rewrites);
+  }
+  return projected;
+}
+var ADMITTED_PAGE_PATH_FIELDS, PRINCIPAL_SESSION_PATH_FIELDS, SOURCE_RUN_LOCATOR_FIELDS, SUMMONS_PATH_FIELDS;
+var init_role_run_path_rewrite = __esm({
+  "src/role-run-path-rewrite.ts"() {
+    "use strict";
+    init_unknown_value();
+    ADMITTED_PAGE_PATH_FIELDS = [
+      "runDirectory",
+      "admittedRequestPath",
+      // pre-#1161 pages only
+      "sessionDirectory",
+      "sessionFile",
+      // #1165/#1168: caller file-flag paths stay as given.
+      "mergerInputPath",
+      "sourceRunPath"
+    ];
+    PRINCIPAL_SESSION_PATH_FIELDS = [
+      "sessionDirectory",
+      "sessionFile"
+    ];
+    SOURCE_RUN_LOCATOR_FIELDS = ["runDirectory"];
+    SUMMONS_PATH_FIELDS = ["sourceRunPath"];
+  }
+});
+
 // src/run-dossier-files.ts
 var RUN_CURRENT_FILE, RUN_HISTORY_FILE, RUN_LOG_FILE, RUN_STATE_FILE, RUN_HISTORY_KINDS, OFFICER_POINTER_RECORD_KIND, RUN_STATE_KINDS;
 var init_run_dossier_files = __esm({
@@ -1153,7 +1282,12 @@ function render(runDirectory, history, state, log, unreadable) {
   const whole = {};
   for (const section of ["invocation", "admitted", "runState", "terminal"]) {
     const page = lastPayloadOfKind(state, PAGE_ROW_KIND[section]);
-    if (page !== void 0) whole[section] = page;
+    if (page === void 0) continue;
+    if ((section === "invocation" || section === "admitted" || section === "runState") && isRecord(page)) {
+      whole[section] = projectRenderedPagePaths(page, runDirectory);
+    } else {
+      whole[section] = page;
+    }
   }
   let latest;
   for (const row of history) {
@@ -1278,6 +1412,7 @@ var init_run_dossier = __esm({
   "src/run-dossier.ts"() {
     "use strict";
     init_role_run_placement();
+    init_role_run_path_rewrite();
     init_run_dossier_files();
     init_sitian_appender();
     init_sitian_reader();
@@ -12742,1248 +12877,848 @@ var init_submission_correctable_error = __esm({
   }
 });
 
-// src/submission-ledger.ts
-async function submissionRecordFile(cwd, runId, scope) {
-  const ledgerHome = resolveActivationLedgerHome(scope.home);
-  let sessionParent = scope.sessionParent;
-  if (sessionParent === void 0) {
-    const discoveredRun = await findRunDirectoryById(scope.home, runId);
-    if (discoveredRun === void 0) return void 0;
-    sessionParent = sessionFileOf(discoveredRun);
+// src/sha256.ts
+import { createHash } from "node:crypto";
+function sha256Hex(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_sha256 = __esm({
+  "src/sha256.ts"() {
+    "use strict";
   }
-  return resolveSitianRecordPathInLedger({
-    level: "event",
-    kind: "candidate",
-    subject: { runId },
-    cwd,
-    sessionParent
-  }, ledgerHome).recordFile;
+});
+
+// src/package-contracts/terminating-tools.ts
+function isTerminatingToolName(name) {
+  return TERMINATING_TOOL_NAMES.includes(name);
 }
-async function readOwnedSubmissionRecords(cwd, runId, scope = {}) {
-  const file = await submissionRecordFile(cwd, runId, scope);
-  if (file === void 0) {
-    return { file: void 0, owned: [] };
+function validateAcceptedDetails(_toolName, details) {
+  if (isRecord(details)) {
+    return details;
   }
-  const { records } = await readSitianRecords(file);
+  return {};
+}
+function acceptedFacts(toolName, details) {
+  const record = details;
+  const entry = PACKAGED_ROLE_REGISTRY.find((candidate) => candidate.outputTool === toolName);
+  const legacyRole = LEGACY_REVIEW_OUTPUT_ROLES.get(toolName);
+  const statusKey = legacyRole === "judge" || legacyRole === "countersign" ? `${legacyRole}Status` : entry !== void 0 && "receiptStatusKey" in entry ? entry.receiptStatusKey : "status";
+  const status = typeof record[statusKey] === "string" ? record[statusKey] : void 0;
+  const commitKey = entry !== void 0 && "receiptCommitKey" in entry ? entry.receiptCommitKey : void 0;
+  const commitWhen = entry !== void 0 && "receiptCommitWhen" in entry ? entry.receiptCommitWhen : void 0;
+  const commit = commitKey !== void 0 && status === commitWhen && typeof record[commitKey] === "string" ? record[commitKey] : void 0;
   return {
-    file,
-    owned: records.filter(
-      (record) => typeof record.subject === "object" && record.subject !== null && record.subject.runId === runId
-    )
+    ...status === void 0 ? {} : { status },
+    ...commit === void 0 ? {} : { commit }
   };
 }
-function resolveReadScope(homeOrScope) {
-  if (homeOrScope === void 0) return {};
-  if (typeof homeOrScope === "string") return { home: homeOrScope };
-  return homeOrScope;
-}
-function recordAttemptId(record) {
-  if (typeof record.subject === "object" && record.subject !== null) {
-    const fromSubject = record.subject.attemptId;
-    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
+var TERMINATING_TOOL_NAMES, AcceptedDetailsContractError;
+var init_terminating_tools = __esm({
+  "src/package-contracts/terminating-tools.ts"() {
+    "use strict";
+    init_collector_output();
+    init_judge_output();
+    init_reviewer_output();
+    init_packaged_role_registry();
+    init_submission_correctable_error();
+    init_doctor_contracts();
+    init_gatekeeper_output();
+    init_navigator_output();
+    init_auditor_output();
+    init_merger_contracts();
+    init_notary_contracts();
+    init_countersign_contracts();
+    init_gleaner_left_contracts();
+    init_inspector_contracts();
+    init_diarist_contracts();
+    init_secretariat_contracts();
+    init_worker_output();
+    init_unknown_value();
+    TERMINATING_TOOL_NAMES = [.../* @__PURE__ */ new Set([
+      ...PACKAGED_ROLE_REGISTRY.map((entry) => entry.outputTool),
+      ...LEGACY_REVIEW_OUTPUT_ROLES.keys()
+    ])];
+    AcceptedDetailsContractError = class extends CorrectableSubmissionError {
+      code = "accepted_details_contract";
+      constructor(message, options) {
+        super(message, options);
+        this.name = "AcceptedDetailsContractError";
+      }
+    };
   }
-  if (typeof record.payload === "object" && record.payload !== null) {
-    const fromPayload = record.payload.attemptId;
-    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
+});
+
+// src/doctor-evidence.ts
+import { readdir as readdir2, readFile as readFile5, realpath, stat } from "node:fs/promises";
+import { dirname as dirname7, relative as relative2, resolve as resolve4, sep as sep3 } from "node:path";
+async function discoverCaseFiles(root) {
+  const found = [];
+  async function walk(dir, depth) {
+    for (const item of await readdir2(dir, { withFileTypes: true })) {
+      const path = resolve4(dir, item.name);
+      if (item.isDirectory()) {
+        await walk(path, depth + 1);
+      } else if (item.isFile() && (item.name.endsWith(".jsonl") && item.name !== "state.jsonl" && !(item.name === "log.jsonl" && depth === 1) || item.name === "log.jsonl" && depth === 1)) found.push(path);
+    }
   }
-  return void 0;
+  await walk(root, 0);
+  return found.sort();
 }
-function isTerminalRoleName(value) {
-  return typeof value === "string" && value.length > 0;
+function sourceList(count, sources) {
+  return { count, sources: [...new Set(sources)].sort() };
 }
-function recordedRole(payload) {
-  if (isTerminalRoleName(payload.role)) return payload.role;
-  if (isTerminalRoleName(payload.projection?.role)) return payload.projection.role;
-  return void 0;
+function accumulate(metric, value, source) {
+  metric.count += value;
+  if (value) metric.sources.push(source);
 }
-function rowRank(kind) {
-  switch (kind) {
-    case "accepted":
-      return 4;
-    case "audit-escalation":
-      return 3;
-    case "correctable-rejection":
-    case "infrastructure":
-      return 2;
-    case "candidate":
-      return 1;
-  }
+function timestamp(row) {
+  return typeof row.timestamp === "string" && Number.isFinite(Date.parse(row.timestamp)) ? row.timestamp : void 0;
 }
-function submissionCallKey(attemptId, toolCallId) {
-  return `${attemptId ?? ""}\0${toolCallId}`;
+async function stableRunsIdentity(root) {
+  let cursor = root;
+  while (true) {
+    try {
+      const git2 = await stat(resolve4(cursor, ".git"));
+      if (git2.isDirectory() || git2.isFile()) return relative2(cursor, root).split(sep3).join("/");
+    } catch (error) {
+      if (!isMissingPathError(error)) throw error;
+    }
+    const parent = dirname7(cursor);
+    if (parent === cursor) return root;
+    cursor = parent;
+  }
 }
-function rowFromPayload(kind, payload, accepted, roleFallback) {
-  const role = recordedRole(payload) ?? roleFallback;
-  return {
-    ...role === void 0 ? {} : { role },
-    kind,
-    accepted,
-    ...Object.hasOwn(payload, "auditReceipt") ? { auditReceipt: payload.auditReceipt } : {},
-    ...Object.hasOwn(payload, "auditOfficer") ? { auditOfficer: payload.auditOfficer } : {},
-    ...typeof payload.toolCallId === "string" && payload.toolCallId.length > 0 ? { toolCallId: payload.toolCallId } : {}
-  };
-}
-function mapOwnedToSubmissionRows(owned) {
-  const scoped = owned;
-  const out = [];
-  const indexByCall = /* @__PURE__ */ new Map();
-  const roleByCall = /* @__PURE__ */ new Map();
-  for (const record of scoped) {
-    const payload = record.payload;
-    if (typeof payload?.toolCallId !== "string" || payload.toolCallId.length === 0) continue;
-    const role = recordedRole(payload);
-    if (role !== void 0) {
-      roleByCall.set(submissionCallKey(recordAttemptId(record), payload.toolCallId), role);
+function deriveSession(content, id) {
+  const rows = [];
+  const degradationReasons = [];
+  for (const line2 of content.split("\n")) if (line2.trim()) {
+    try {
+      const row = JSON.parse(line2);
+      if (!isRecord(row)) {
+        degradationReasons.push(`non-object session row in ${id}`);
+        break;
+      }
+      rows.push(row);
+    } catch (error) {
+      if (error instanceof SyntaxError) {
+        degradationReasons.push(`malformed JSON tail in ${id}: ${error.message}`);
+        break;
+      }
+      throw error;
     }
   }
-  const take = (row, callKey) => {
-    const toolCallId = row.toolCallId;
-    if (toolCallId !== void 0 && callKey !== void 0) {
-      const existingIndex = indexByCall.get(callKey);
-      if (existingIndex !== void 0) {
-        const existing = out[existingIndex];
-        if (rowRank(row.kind) >= rowRank(existing.kind)) {
-          out[existingIndex] = {
-            ...row,
-            toolCallId,
-            // Keep a previously recovered role when the upgraded row still omits it.
-            ...row.role === void 0 && existing.role !== void 0 ? { role: existing.role } : {}
-          };
-        } else if (existing.role === void 0 && row.role !== void 0) {
-          out[existingIndex] = { ...existing, role: row.role };
-        }
-        return;
+  const started = rows.find((row) => row.type === "session");
+  const startedAt = started && timestamp(started);
+  if (!startedAt) degradationReasons.push(`Pi session header is missing: ${id}`);
+  let accepted, observedCommit, turns = 0, calls = 0, tokens = 0;
+  const statuses = [], commits = [];
+  for (const row of rows) {
+    if (row.type === "custom" && row.customType === "ak-role-submission-closure" && isRecord(row.data) && row.data.isError === false && typeof row.data.toolName === "string" && isTerminatingToolName(row.data.toolName)) accepted = row;
+    const message = isRecord(row.message) ? row.message : void 0;
+    if (message?.role === "assistant") {
+      for (const part of Array.isArray(message.content) ? message.content : []) if (isRecord(part) && part.type === "toolCall") calls++;
+      if (typeof message.responseId === "string") {
+        turns++;
+        const usage = isRecord(message.usage) ? message.usage : void 0;
+        if (usage && typeof usage.output === "number") tokens += usage.output;
       }
-      indexByCall.set(callKey, out.length);
     }
-    out.push(row);
-  };
-  for (const record of scoped) {
-    const payload = record.payload;
-    let kind;
-    let original;
-    if (record.kind === "candidate" && payload?.type === "candidate") {
-      kind = "candidate";
-      original = payload.params;
-    } else if (record.kind === "sealed" && payload?.type === "sealed") {
-      kind = "accepted";
-      original = payload.accepted;
-    } else if (record.kind === "outcome" && payload?.type === "outcome") {
-      kind = payload.outcome === "audit-escalation" ? "audit-escalation" : payload.outcome === "correctable-rejection" ? "correctable-rejection" : payload.outcome === "infrastructure" ? "infrastructure" : void 0;
-      original = payload.accepted;
+    if (message?.role === "toolResult" && message.isError !== true && typeof message.toolName === "string" && isTerminatingToolName(message.toolName) && isRecord(message.details)) {
+      let details;
+      try {
+        details = validateAcceptedDetails(message.toolName, message.details);
+      } catch (error) {
+        if (error instanceof AcceptedDetailsContractError) continue;
+        throw error;
+      }
+      const facts = acceptedFacts(message.toolName, details);
+      if (facts.commit && facts.commit !== observedCommit) {
+        commits.push({ source: id, commit: facts.commit });
+        observedCommit = facts.commit;
+      }
+      if (facts.status !== void 0) {
+        statuses.push({ source: id, status: facts.status });
+      }
     }
-    if (kind === void 0 || original === void 0 || payload === void 0) continue;
-    const callKey = typeof payload.toolCallId === "string" ? submissionCallKey(recordAttemptId(record), payload.toolCallId) : void 0;
-    const fallback = callKey === void 0 ? void 0 : roleByCall.get(callKey);
-    take(rowFromPayload(kind, payload, original, fallback), callKey);
   }
-  return out;
-}
-async function readRecordedSubmissionRows(cwd, runId, homeOrScope) {
-  const scope = resolveReadScope(homeOrScope);
-  const { owned } = await readOwnedSubmissionRecords(cwd, runId, scope);
-  return mapOwnedToSubmissionRows(owned);
-}
-async function readAttemptScopedSubmissionRows(cwd, runId, attemptId, home) {
-  if (attemptId.length === 0) return [];
-  const { owned } = await readOwnedSubmissionRecords(
-    cwd,
-    runId,
-    home === void 0 ? {} : { home }
-  );
-  return mapOwnedToSubmissionRows(owned.filter((record) => recordAttemptId(record) === attemptId));
+  const acceptedAt = accepted && timestamp(accepted);
+  const final = acceptedAt ? accepted : rows.at(-1);
+  const endedAt = final && timestamp(final);
+  const wall = startedAt && endedAt ? Date.parse(endedAt) - Date.parse(startedAt) : void 0;
+  if (wall !== void 0 && wall < 0) degradationReasons.push(`non-monotonic session timestamps in ${id}`);
+  const degradationReason = degradationReasons.length ? degradationReasons.join("; ") : void 0;
+  const complete = !!acceptedAt && !degradationReason && wall !== void 0 && wall >= 0;
+  const session = complete ? { source: id, startedAt, endedAt, wallMilliseconds: wall, completion: "accepted" } : { source: id, ...startedAt ? { startedAt } : {}, ...endedAt ? { endedAt } : {}, ...wall !== void 0 && wall >= 0 ? { wallMilliseconds: wall } : {}, completion: "incomplete", ...degradationReason ? { degradationReason } : {} };
+  return { session, turns, calls, tokens, statuses, commits };
 }
-async function readRecordedSubmissions(cwd, runId, homeOrScope) {
-  return (await readRecordedSubmissionRows(cwd, runId, homeOrScope)).map((row) => row.accepted);
+async function loadDoctorCase(runsPath, projectRoot) {
+  const root = await realpath(runsPath);
+  if (projectRoot !== void 0 && !physicallyContainedIn(projectRoot, root)) {
+    throw new Error("doctor --runs escapes the project root");
+  }
+  const match = root.split(sep3).join("/").match(/\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/);
+  if (!match) throw new Error("Doctor case must be an .ak-roles/books/<book>/<n>/runs directory");
+  const evidence = [], sessions = [], statuses = [], commits = [];
+  const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
+  for (const path of await discoverCaseFiles(root)) {
+    const id = relative2(root, path).split(sep3).join("/");
+    const bytes = await readFile5(path);
+    const content = bytes.toString("utf8");
+    const kind = id.split("/").length === 2 && id.endsWith("/log.jsonl") ? "log" : "session";
+    evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
+    if (kind === "log") continue;
+    const result = deriveSession(content, id);
+    sessions.push(result.session);
+    statuses.push(...result.statuses);
+    commits.push(...result.commits);
+    accumulate(turns, result.turns, id);
+    accumulate(calls, result.calls, id);
+    accumulate(tokens, result.tokens, id);
+  }
+  const runDirs = (await readdir2(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
+  const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
+  const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
+  const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
+  const cost = { invocations: sourceList(runDirs.length, runDirs), legs: sourceList(legs.length, legs), modelApiTurns: sourceList(turns.count, turns.sources), outputTokens: sourceList(tokens.count, tokens.sources), toolCalls: sourceList(calls.count, calls.sources), retries: { ...sourceList(retryDirs.length, retryDirs), evidence: "literal run-dir naming" }, statuses, commits, sessions, outputBytes: { ...sourceList(rawBytes, legs), payload: "raw JSONL bytes", providerWireBytes: "unavailable" } };
+  return { version: 1, identity: { issueNumber: Number(match[1]), runsPath: await stableRunsIdentity(root) }, evidence, cost };
 }
-var init_submission_ledger = __esm({
-  "src/submission-ledger.ts"() {
+var init_doctor_evidence = __esm({
+  "src/doctor-evidence.ts"() {
     "use strict";
-    init_role_run_placement();
+    init_sha256();
     init_activation_ledger_topology();
-    init_host_contracts();
-    init_run_terminal_artifacts();
-    init_sitian_facade();
-    init_run_lifecycle();
-    init_submission_correctable_error();
-    init_terminating_infrastructure();
-    init_review_submission();
+    init_terminating_tools();
     init_unknown_value();
   }
 });
 
-// src/public-cli/process-cancel.ts
-var process_cancel_exports = {};
-__export(process_cancel_exports, {
-  childSignalDeathDiagnostic: () => childSignalDeathDiagnostic,
-  installProcessCancelHandlers: () => installProcessCancelHandlers,
-  processCancelDiagnostic: () => processCancelDiagnostic,
-  processCancelSignalName: () => processCancelSignalName
-});
-function installProcessCancelHandlers(processRef = process) {
-  const controller = new AbortController();
-  let received;
-  const listeners = /* @__PURE__ */ new Map();
-  for (const sig of CATCHABLE_PROCESS_SIGNALS) {
-    const onSignal = () => {
-      if (received !== void 0) return;
-      received = sig;
-      try {
-        controller.abort(sig);
-      } catch {
-      }
-    };
-    listeners.set(sig, onSignal);
-    processRef.on(sig, onSignal);
+// src/public-cli/github-remote.ts
+function ownerRepoFromGitHubRemoteUrl(remoteUrl) {
+  const trimmed = remoteUrl.trim();
+  const scp = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(trimmed);
+  if (scp) {
+    return `${scp[1]}/${stripGitSuffix(scp[2])}`;
   }
-  return {
-    signal: controller.signal,
-    receivedSignal: () => received,
-    dispose() {
-      for (const [sig, onSignal] of listeners) {
-        processRef.off(sig, onSignal);
-      }
-      listeners.clear();
-    }
-  };
-}
-function processCancelSignalName(signal) {
-  if (signal === void 0 || signal.aborted !== true) return void 0;
-  const reason = signal.reason;
-  if (reason === "SIGTERM" || reason === "SIGINT" || reason === "SIGHUP") {
-    return reason;
+  const ssh = /^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i.exec(
+    trimmed
+  );
+  if (ssh) {
+    return `${ssh[1]}/${stripGitSuffix(ssh[2])}`;
   }
-  return void 0;
+  let parsed;
+  try {
+    parsed = new URL(trimmed);
+  } catch {
+    return void 0;
+  }
+  if (!/^github\.com$/i.test(parsed.hostname)) return void 0;
+  if (parsed.search !== "" || parsed.hash !== "") return void 0;
+  const parts = parsed.pathname.split("/").filter((p) => p.length > 0);
+  if (parts.length !== 2) return void 0;
+  return `${parts[0]}/${stripGitSuffix(parts[1])}`;
 }
-function processCancelDiagnostic(signalName) {
-  return `ak-role terminated by ${signalName}`;
+function stripGitSuffix(name) {
+  return name.toLowerCase().endsWith(".git") ? name.slice(0, -4) : name;
 }
-function childSignalDeathDiagnostic(signal) {
-  return `role run was killed by ${signal}`;
+var init_github_remote = __esm({
+  "src/public-cli/github-remote.ts"() {
+    "use strict";
+  }
+});
+
+// src/git-object-id.ts
+function isFullGitObjectId(value) {
+  return typeof value === "string" && FULL_GIT_OBJECT_ID_RE.test(value);
 }
-var CATCHABLE_PROCESS_SIGNALS;
-var init_process_cancel = __esm({
-  "src/public-cli/process-cancel.ts"() {
+var FULL_GIT_OBJECT_ID_RE;
+var init_git_object_id = __esm({
+  "src/git-object-id.ts"() {
     "use strict";
-    CATCHABLE_PROCESS_SIGNALS = ["SIGTERM", "SIGINT", "SIGHUP"];
+    FULL_GIT_OBJECT_ID_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
   }
 });
 
-// src/engine-detour-usage.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
-function callFactFromSitianPayload(payload, pointer) {
-  if (!isRecord(payload)) return void 0;
-  if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
-  if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
-    return void 0;
-  }
-  if (typeof payload.durationMs !== "number" || !Number.isFinite(payload.durationMs)) {
-    return void 0;
-  }
-  return {
-    toolCallId: payload.toolCallId,
-    durationMs: payload.durationMs,
-    ...typeof payload.code === "number" ? { code: payload.code } : {},
-    ...typeof payload.stdoutByteLength === "number" ? { stdoutByteLength: payload.stdoutByteLength } : {},
-    recordPointer: pointer
-  };
+// src/merger-git-state.ts
+import { execFile } from "node:child_process";
+import { access, readFile as readFile6 } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import { isAbsolute as isAbsolute3, resolve as resolve5 } from "node:path";
+import { promisify } from "node:util";
+async function git(cwd, args) {
+  const { stdout } = await execFileAsync("git", args, { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
+  return new Uint8Array(stdout);
 }
-function invocationScopeIdOfRecord(record) {
-  if (isRecord(record.subject)) {
-    const fromSubject = record.subject.invocationScopeId;
-    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
-  }
-  if (isRecord(record.payload)) {
-    const fromPayload = record.payload.invocationScopeId;
-    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
+function line(bytes, label) {
+  const value = exactUtf8(bytes, label).trim();
+  if (!value) throw new Error(`${label} is empty`);
+  return value;
+}
+async function pathExists(path) {
+  try {
+    await access(path, fsConstants.F_OK);
+    return true;
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
   }
-  return void 0;
 }
-async function readEngineDetourToolUsage(input) {
-  if (!input.engineMounted) return void 0;
-  const { recordFile } = resolveSitianRecordPath({
-    level: "event",
-    kind: ENGINE_DETOUR_CALL_KIND,
-    sessionParent: input.sessionParent,
-    ...input.home === void 0 ? {} : { home: input.home },
-    ...input.cwd === void 0 ? {} : { cwd: input.cwd }
-  });
-  const { records } = await readSitianRecords(recordFile);
-  const callsByToolCallId = /* @__PURE__ */ new Map();
-  for (const record of records) {
-    if (record.kind !== ENGINE_DETOUR_CALL_KIND) continue;
-    const boundScope = invocationScopeIdOfRecord(record);
-    if (input.invocationScopeId !== void 0 && input.invocationScopeId.length > 0) {
-      if (boundScope !== input.invocationScopeId) continue;
-    } else if (boundScope !== void 0) {
-      continue;
-    }
-    const pointer = {
-      identity: record.identity,
-      recordFile: ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE,
-      kind: record.kind,
-      level: record.level
-    };
-    const fact = callFactFromSitianPayload(record.payload, pointer);
-    if (fact === void 0) continue;
-    callsByToolCallId.set(fact.toolCallId, fact);
+async function requireInsideWorkTree(cwd) {
+  const stdout = await git(cwd, ["rev-parse", "--is-inside-work-tree"]);
+  if (exactUtf8(stdout, "Git worktree check").trim() !== "true") throw new Error("Assigned path is not inside a Git work tree");
+}
+async function tryResolveCommit(cwd, rev) {
+  let stdout;
+  try {
+    const res = await execFileAsync("git", ["rev-parse", "--verify", "--quiet", `${rev}^{commit}`], { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
+    stdout = new Uint8Array(res.stdout);
+  } catch (error) {
+    if (error.code === 1) return void 0;
+    throw error;
   }
-  const calls = Array.from(callsByToolCallId.values());
-  return { callCount: calls.length, calls };
+  const oid = line(stdout, `Git ${rev}`);
+  if (!isFullGitObjectId(oid)) throw new Error(`Git ${rev} identity is unavailable or invalid`);
+  return oid;
 }
-function readInvocationRecord(runDirectory) {
-  return readPageSync(runDirectory, "invocation");
+async function unmerged(cwd) {
+  const raw = exactUtf8(await git(cwd, ["ls-files", "-u", "-z"]), "Git unmerged index");
+  const paths = /* @__PURE__ */ new Set();
+  for (const row of raw.split("\0")) {
+    if (!row) continue;
+    const tab = row.indexOf("	");
+    if (tab < 0 || tab === row.length - 1) throw new Error("Git returned a malformed unmerged index row");
+    paths.add(row.slice(tab + 1));
+  }
+  return [...paths].sort((a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)));
 }
-async function readInvocationEngineMounted(runDirectory) {
-  const raw = readInvocationRecord(runDirectory);
-  if (raw === void 0) return false;
-  return typeof raw.engine === "string" && raw.engine.trim() !== "";
+async function resolveHeadMaterial(cwd) {
+  const commit = await tryResolveCommit(cwd, "HEAD");
+  if (commit !== void 0) return commit;
+  try {
+    await execFileAsync("git", ["rev-parse", "--verify", "--quiet", "HEAD"], { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
+  } catch (error) {
+    if (error.code === 1) return "";
+    throw error;
+  }
+  throw new Error("Git HEAD identity is unavailable or invalid");
 }
-function withEngineDetourToolUsageFact(outcome, usage) {
-  if (usage === void 0) return outcome;
-  const prior = isRecord(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
+function createProductionMergerGitState(repositoryRoot = process.cwd()) {
   return {
-    ...outcome,
-    decisiveFacts: {
-      ...prior,
-      [ENGINE_DETOUR_TOOL_USAGE_FACT_KEY]: usage
+    async activeMerge() {
+      await requireInsideWorkTree(repositoryRoot);
+      const targetObjectId = await resolveHeadMaterial(repositoryRoot);
+      const mergeHeadReported = line(await git(repositoryRoot, ["rev-parse", "--git-path", "MERGE_HEAD"]), "Git MERGE_HEAD path");
+      const mergeHeadPath = isAbsolute3(mergeHeadReported) ? mergeHeadReported : resolve5(repositoryRoot, mergeHeadReported);
+      let sourceObjectId = "";
+      if (await pathExists(mergeHeadPath)) {
+        const raw = exactUtf8(await readFile6(mergeHeadPath), "Git MERGE_HEAD");
+        const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
+        if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
+        if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
+        const source = mergeHeads[0];
+        if (!isFullGitObjectId(source)) throw new Error("Git MERGE_HEAD identity is unavailable or invalid");
+        const resolved = await tryResolveCommit(repositoryRoot, source);
+        if (resolved === void 0 || targetObjectId !== "" && resolved.length !== targetObjectId.length) {
+          throw new Error("Git MERGE_HEAD identity is unavailable or invalid");
+        }
+        sourceObjectId = resolved;
+      }
+      return { targetObjectId, sourceObjectId, unmergedPaths: await unmerged(repositoryRoot) };
     }
   };
 }
-function mintEngineDetourInvocationScope(_input) {
-  return randomUUID3();
-}
-function withEngineDetourInvocationScope(request, invocationScopeId) {
-  if (invocationScopeId === void 0 || invocationScopeId.length === 0) {
-    return request;
+var execFileAsync;
+var init_merger_git_state = __esm({
+  "src/merger-git-state.ts"() {
+    "use strict";
+    init_exact_utf8();
+    init_git_object_id();
+    execFileAsync = promisify(execFile);
   }
-  if (typeof request.invocationScopeId === "string" && request.invocationScopeId.length > 0) {
-    return request;
+});
+
+// src/session-dialogue.ts
+var init_session_dialogue = __esm({
+  "src/session-dialogue.ts"() {
+    "use strict";
+    init_unknown_value();
   }
-  return { ...request, invocationScopeId };
+});
+
+// src/ticket-provenance.ts
+import { readFile as readFile7 } from "node:fs/promises";
+import { join as join11, resolve as resolve6 } from "node:path";
+function ticketProvenanceSubject(ticketNumber) {
+  if (!isSafePositiveTicketNumber(ticketNumber)) {
+    throw new Error(
+      `ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`
+    );
+  }
+  return String(ticketNumber);
 }
-var ENGINE_DETOUR_CALL_KIND, ENGINE_DETOUR_TOOL_USAGE_FACT_KEY, ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE;
-var init_engine_detour_usage = __esm({
-  "src/engine-detour-usage.ts"() {
+function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
+  return {
+    level: "event",
+    kind: TICKET_PROVENANCE_KIND,
+    ...ticketNumber === null ? {} : { subject: ticketProvenanceSubject(ticketNumber) },
+    ...runDirectory === void 0 ? {} : { runDirectory },
+    cwd,
+    ...home === void 0 ? {} : { home }
+  };
+}
+async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
+  const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
+  let history;
+  try {
+    history = await readFile7(join11(runDirectory, RUN_HISTORY_FILE), "utf8");
+  } catch (error) {
+    if (errnoCode(error) === "ENOENT") return;
+    throw error;
+  }
+  const block = history.split("\n").flatMap((line2, index) => {
+    const decoded = decodeSitianRecordLine(line2, index + 1);
+    if (decoded === void 0 || !decoded.ok) return [];
+    if (decoded.record.kind !== TICKET_PROVENANCE_KIND) return [];
+    return [`${line2}
+`];
+  }).join("");
+  if (block !== "") appendSitianRecordBlock(ticketInput, block);
+}
+var init_ticket_provenance = __esm({
+  "src/ticket-provenance.ts"() {
     "use strict";
-    init_run_dossier();
+    init_activation_ledger_topology();
+    init_ledger_session_read();
+    init_run_ticket_number();
     init_role_run_placement();
-    init_engine_detour();
+    init_run_dossier_files();
+    init_session_dialogue();
     init_sitian_facade();
+    init_sitian_reader();
+    init_ticket_provenance_contracts();
     init_unknown_value();
-    ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
-    ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
-    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = RUN_LOG_FILE;
   }
 });
 
-// src/dossier-resolution.ts
-import { existsSync as existsSync2, statSync as statSync5 } from "node:fs";
-import { resolve as resolve4 } from "node:path";
-function isHostContext(value) {
-  return "sessionManager" in value;
+// src/uuidv7.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+function isUuidV7(value) {
+  return typeof value === "string" && UUIDV7.test(value);
 }
-function dossierPointerFrom(source) {
-  if (source !== void 0 && isHostContext(source)) {
-    return runDirectoryFromHostContext(source);
+function uuidv7(now = Date.now()) {
+  const b = randomBytes2(16);
+  let n = BigInt(now);
+  for (let i = 5; i >= 0; i--) {
+    b[i] = Number(n & 255n);
+    n >>= 8n;
   }
-  const env = source ?? process.env;
-  const raw = env[AUDIT_RUN_DIR_ENV];
-  return typeof raw === "string" && raw.trim() !== "" ? raw : void 0;
+  b[6] = b[6] & 15 | 112;
+  b[8] = b[8] & 63 | 128;
+  const h = b.toString("hex");
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
 }
-function resolveAuditDossier(source) {
-  const raw = dossierPointerFrom(source);
-  if (raw === void 0) {
-    return { status: "ok" };
+var UUIDV7;
+var init_uuidv7 = __esm({
+  "src/uuidv7.ts"() {
+    "use strict";
+    UUIDV7 = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
   }
-  const runDirectory = resolve4(raw);
+});
+
+// src/notary-source-run.ts
+import { dirname as dirname8, isAbsolute as isAbsolute4, join as join12, resolve as resolve7, basename as basename7 } from "node:path";
+import { lstat as lstat2, realpath as realpath2 } from "node:fs/promises";
+async function readRetainedIdentity(runDirectory) {
   try {
-    if (!existsSync2(runDirectory) || !statSync5(runDirectory).isDirectory()) {
-      return { status: "incomplete", observation: { kind: "missing-dossier" } };
-    }
-  } catch {
-    return { status: "incomplete", observation: { kind: "missing-dossier" } };
+    return await readRoleRunIdentity(runDirectory);
+  } catch (error) {
+    if (!(error instanceof TypeError || error instanceof SyntaxError)) throw error;
+    throw new NotarySourceRunError("notary --source-run has invalid retained run-state identity", {
+      cause: error
+    });
   }
-  return { status: "ok", runDirectory };
 }
-function readDoctorAuditSubjects(context) {
-  const entries = context.sessionManager.getEntries?.() ?? [];
-  for (const entry of entries) {
-    if (isRecord(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
-      return { status: "ok" };
-    }
+async function requireRunDirectory(candidate, display) {
+  let real;
+  try {
+    real = await realpath2(candidate);
+  } catch (error) {
+    throw new NotarySourceRunError(
+      `notary --source-run is not a readable run directory: ${display}`,
+      { cause: error }
+    );
   }
-  return { status: "incomplete", observation: { kind: "missing-subject", subject: "candidate-testimony" } };
-}
-function requireAuditMaterials(resolution) {
-  if (resolution.status === "incomplete") {
-    throw new AuditMaterialsUnavailableError(resolution.observation);
+  let stat2;
+  try {
+    stat2 = await lstat2(real);
+  } catch (error) {
+    throw new NotarySourceRunError(
+      `notary --source-run is not a readable run directory: ${display}`,
+      { cause: error }
+    );
   }
-}
-var AUDIT_RUN_DIR_ENV, DOCTOR_CANDIDATE_ENTRY_TYPE, AuditMaterialsUnavailableError;
-var init_dossier_resolution = __esm({
-  "src/dossier-resolution.ts"() {
-    "use strict";
-    init_host_contracts();
-    init_unknown_value();
-    AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR";
-    DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate";
-    AuditMaterialsUnavailableError = class extends Error {
-      observation;
-      candidate;
-      constructor(observation) {
-        const detail = observation.kind === "missing-subject" ? `${observation.kind}:${observation.subject}` : observation.kind;
-        super(`Audit materials unavailable: ${detail}`);
-        this.name = "AuditMaterialsUnavailableError";
-        this.observation = observation;
-        this.candidate = void 0;
-      }
-    };
+  if (!stat2.isDirectory()) {
+    throw new NotarySourceRunError(
+      `notary --source-run must be a run directory: ${display}`
+    );
   }
-});
-
-// src/sha256.ts
-import { createHash } from "node:crypto";
-function sha256Hex(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-var init_sha256 = __esm({
-  "src/sha256.ts"() {
-    "use strict";
+  const identity = parseRunLeaf(basename7(real));
+  if (identity === void 0) {
+    throw new NotarySourceRunError(
+      `notary --source-run must be named <runId>@<role>: ${basename7(real)}`
+    );
   }
-});
-
-// src/package-contracts/terminating-tools.ts
-function isTerminatingToolName(name) {
-  return TERMINATING_TOOL_NAMES.includes(name);
+  return real;
 }
-function validateAcceptedDetails(_toolName, details) {
-  if (isRecord(details)) {
-    return details;
+async function resolveNotarySourceRunLocator(options) {
+  const raw = options.sourceRun.trim();
+  if (raw === "") {
+    throw new NotarySourceRunError("notary --source-run requires a run locator");
+  }
+  const ledgerHome = resolveActivationLedgerHome(options.home);
+  const bookKey = resolveBookKeyFromGit(options.projectRoot);
+  const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
+  const bookRunsRoot = join12(bookDirectory, "runs");
+  let candidate;
+  const bare = parseRunLeaf(raw);
+  if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
+    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join12(bookRunsRoot, formatRunLeaf(bare.runId, bare.role));
+  } else {
+    candidate = isAbsolute4(raw) ? raw : resolve7(options.projectRoot, raw);
+    const identity2 = parseRunLeaf(basename7(candidate));
+    const subjectDirectory = dirname8(dirname8(candidate));
+    const isLegacyUnboundLocator = identity2 !== void 0 && basename7(dirname8(candidate)) === "runs" && basename7(subjectDirectory) === "unbound" && resolve7(dirname8(subjectDirectory)) === resolve7(bookDirectory);
+    if (isLegacyUnboundLocator) {
+      candidate = await findRunDirectoryById(
+        options.home,
+        identity2.runId,
+        bookKey,
+        identity2.role
+      ) ?? candidate;
+    }
+  }
+  const real = await requireRunDirectory(candidate, raw);
+  const identity = parseRunLeaf(basename7(real));
+  const bookIdentity = physicalPathIdentity(bookDirectory);
+  const parentIdentity = physicalPathIdentity(dirname8(real));
+  const subjectBookIdentity = physicalPathIdentity(dirname8(dirname8(dirname8(real))));
+  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename7(dirname8(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
+    throw new NotarySourceRunError(
+      "notary --source-run must resolve to a retained run under the project machine-ledger book"
+    );
+  }
+  const runState = await readRetainedIdentity(real);
+  if (runState === void 0) {
+    throw new NotarySourceRunError(
+      "notary --source-run lacks retained run-state identity"
+    );
+  }
+  if (runState.runId !== identity.runId || runState.role !== identity.role) {
+    throw new NotarySourceRunError(
+      "notary --source-run retained identity does not match directory name"
+    );
+  }
+  if (runState.bookKey !== bookKey) {
+    throw new NotarySourceRunError(
+      "notary --source-run retained book binding does not match project case"
+    );
+  }
+  if (physicalPathIdentity(runState.runDirectory) !== physicalPathIdentity(real)) {
+    throw new NotarySourceRunError(
+      "notary --source-run retained runDirectory does not match locator path"
+    );
   }
-  return {};
-}
-function acceptedFacts(toolName, details) {
-  const record = details;
-  const entry = PACKAGED_ROLE_REGISTRY.find((candidate) => candidate.outputTool === toolName);
-  const legacyRole = LEGACY_REVIEW_OUTPUT_ROLES.get(toolName);
-  const statusKey = legacyRole === "judge" || legacyRole === "countersign" ? `${legacyRole}Status` : entry !== void 0 && "receiptStatusKey" in entry ? entry.receiptStatusKey : "status";
-  const status = typeof record[statusKey] === "string" ? record[statusKey] : void 0;
-  const commitKey = entry !== void 0 && "receiptCommitKey" in entry ? entry.receiptCommitKey : void 0;
-  const commitWhen = entry !== void 0 && "receiptCommitWhen" in entry ? entry.receiptCommitWhen : void 0;
-  const commit = commitKey !== void 0 && status === commitWhen && typeof record[commitKey] === "string" ? record[commitKey] : void 0;
   return {
-    ...status === void 0 ? {} : { status },
-    ...commit === void 0 ? {} : { commit }
+    runDirectory: real,
+    runId: identity.runId,
+    role: identity.role
   };
 }
-var TERMINATING_TOOL_NAMES, AcceptedDetailsContractError;
-var init_terminating_tools = __esm({
-  "src/package-contracts/terminating-tools.ts"() {
+var NotarySourceRunError;
+var init_notary_source_run = __esm({
+  "src/notary-source-run.ts"() {
     "use strict";
-    init_collector_output();
-    init_judge_output();
-    init_reviewer_output();
-    init_packaged_role_registry();
-    init_submission_correctable_error();
-    init_doctor_contracts();
-    init_gatekeeper_output();
-    init_navigator_output();
-    init_auditor_output();
-    init_merger_contracts();
-    init_notary_contracts();
-    init_countersign_contracts();
-    init_gleaner_left_contracts();
-    init_inspector_contracts();
-    init_diarist_contracts();
-    init_secretariat_contracts();
-    init_worker_output();
-    init_unknown_value();
-    TERMINATING_TOOL_NAMES = [.../* @__PURE__ */ new Set([
-      ...PACKAGED_ROLE_REGISTRY.map((entry) => entry.outputTool),
-      ...LEGACY_REVIEW_OUTPUT_ROLES.keys()
-    ])];
-    AcceptedDetailsContractError = class extends CorrectableSubmissionError {
-      code = "accepted_details_contract";
+    init_activation_ledger_git();
+    init_activation_ledger_topology();
+    init_run_lifecycle();
+    init_role_run_placement();
+    NotarySourceRunError = class extends Error {
       constructor(message, options) {
         super(message, options);
-        this.name = "AcceptedDetailsContractError";
+        this.name = "NotarySourceRunError";
       }
     };
   }
 });
 
-// src/doctor-evidence.ts
-import { readdir as readdir2, readFile as readFile5, realpath, stat } from "node:fs/promises";
-import { dirname as dirname7, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
-async function discoverCaseFiles(root) {
-  const found = [];
-  async function walk(dir, depth) {
-    for (const item of await readdir2(dir, { withFileTypes: true })) {
-      const path = resolve5(dir, item.name);
-      if (item.isDirectory()) {
-        await walk(path, depth + 1);
-      } else if (item.isFile() && (item.name.endsWith(".jsonl") && item.name !== "state.jsonl" && !(item.name === "log.jsonl" && depth === 1) || item.name === "log.jsonl" && depth === 1)) found.push(path);
-    }
+// src/public-cli/option-definitions.ts
+function resolveAnalystMode(presentOptionIds) {
+  const selected = /* @__PURE__ */ new Set();
+  for (const def of optionsForOwner("analyst")) {
+    if (def.selectsMode === void 0) continue;
+    if (presentOptionIds.has(def.id)) selected.add(def.selectsMode);
   }
-  await walk(root, 0);
-  return found.sort();
-}
-function sourceList(count, sources) {
-  return { count, sources: [...new Set(sources)].sort() };
-}
-function accumulate(metric, value, source) {
-  metric.count += value;
-  if (value) metric.sources.push(source);
-}
-function timestamp(row) {
-  return typeof row.timestamp === "string" && Number.isFinite(Date.parse(row.timestamp)) ? row.timestamp : void 0;
+  if (selected.size === 0) return ANALYST_DEFAULT_MODE;
+  if (selected.has("cohort")) return "cohort";
+  if (selected.has("sweep")) return "sweep";
+  if (selected.has("issue")) return "issue";
+  return ANALYST_DEFAULT_MODE;
 }
-async function stableRunsIdentity(root) {
-  let cursor = root;
-  while (true) {
-    try {
-      const git2 = await stat(resolve5(cursor, ".git"));
-      if (git2.isDirectory() || git2.isFile()) return relative2(cursor, root).split(sep2).join("/");
-    } catch (error) {
-      if (!isMissingPathError(error)) throw error;
+function evaluateAnalystModeOptionContract(mode, counts) {
+  const definitions = optionsForOwner("analyst");
+  const byId = new Map(definitions.map((def) => [def.id, def]));
+  for (const def of definitions) {
+    const count = counts.get(def.id) ?? 0;
+    if (count === 0 || def.exclusiveWith === void 0) continue;
+    for (const otherId of def.exclusiveWith) {
+      if ((counts.get(otherId) ?? 0) === 0) continue;
+      const other = byId.get(otherId);
+      return {
+        ok: false,
+        message: `analyst accepts only one of ${def.canonical} / ${other?.canonical ?? otherId}`
+      };
     }
-    const parent = dirname7(cursor);
-    if (parent === cursor) return root;
-    cursor = parent;
   }
-}
-function deriveSession(content, id) {
-  const rows = [];
-  const degradationReasons = [];
-  for (const line2 of content.split("\n")) if (line2.trim()) {
-    try {
-      const row = JSON.parse(line2);
-      if (!isRecord(row)) {
-        degradationReasons.push(`non-object session row in ${id}`);
-        break;
-      }
-      rows.push(row);
-    } catch (error) {
-      if (error instanceof SyntaxError) {
-        degradationReasons.push(`malformed JSON tail in ${id}: ${error.message}`);
-        break;
+  for (const def of definitions) {
+    const count = counts.get(def.id) ?? 0;
+    if (count === 0) continue;
+    if (def.modes !== void 0 && !def.modes.includes(mode)) {
+      if (mode === "sweep") {
+        return {
+          ok: false,
+          message: `analyst sweep --attach cannot combine with ${def.canonical}`
+        };
       }
-      throw error;
+      return {
+        ok: false,
+        message: `analyst ${mode} does not accept ${def.canonical}`
+      };
+    }
+    const max = def.maxCountByMode?.[mode];
+    if (max !== void 0 && count > max) {
+      return {
+        ok: false,
+        message: max === 1 ? `analyst ${mode} accepts at most one ${def.canonical}` : `analyst ${mode} accepts at most ${max} ${def.canonical}`
+      };
     }
   }
-  const started = rows.find((row) => row.type === "session");
-  const startedAt = started && timestamp(started);
-  if (!startedAt) degradationReasons.push(`Pi session header is missing: ${id}`);
-  let accepted, observedCommit, turns = 0, calls = 0, tokens = 0;
-  const statuses = [], commits = [];
-  for (const row of rows) {
-    if (row.type === "custom" && row.customType === "ak-role-submission-closure" && isRecord(row.data) && row.data.isError === false && typeof row.data.toolName === "string" && isTerminatingToolName(row.data.toolName)) accepted = row;
-    const message = isRecord(row.message) ? row.message : void 0;
-    if (message?.role === "assistant") {
-      for (const part of Array.isArray(message.content) ? message.content : []) if (isRecord(part) && part.type === "toolCall") calls++;
-      if (typeof message.responseId === "string") {
-        turns++;
-        const usage = isRecord(message.usage) ? message.usage : void 0;
-        if (usage && typeof usage.output === "number") tokens += usage.output;
-      }
+  const missingRequired = [];
+  for (const def of definitions) {
+    if (def.requiredInModes === void 0) continue;
+    if (!def.requiredInModes.includes(mode)) continue;
+    if ((counts.get(def.id) ?? 0) === 0) missingRequired.push(def);
+  }
+  if (missingRequired.length > 0) {
+    if (mode === "cohort") {
+      return {
+        ok: false,
+        message: "usage: ak-role analyst --cohort --group-a-label <L> --group-a-issues <N|book:N[,...]> --group-b-label <L> --group-b-issues <N|book:N[,...]>"
+      };
     }
-    if (message?.role === "toolResult" && message.isError !== true && typeof message.toolName === "string" && isTerminatingToolName(message.toolName) && isRecord(message.details)) {
-      let details;
-      try {
-        details = validateAcceptedDetails(message.toolName, message.details);
-      } catch (error) {
-        if (error instanceof AcceptedDetailsContractError) continue;
-        throw error;
-      }
-      const facts = acceptedFacts(message.toolName, details);
-      if (facts.commit && facts.commit !== observedCommit) {
-        commits.push({ source: id, commit: facts.commit });
-        observedCommit = facts.commit;
-      }
-      if (facts.status !== void 0) {
-        statuses.push({ source: id, status: facts.status });
-      }
+    return {
+      ok: false,
+      message: `usage: ak-role analyst ${mode} requires ${missingRequired.map((def) => def.canonical).join(" ")}`
+    };
+  }
+  for (const rule of ANALYST_REQUIRE_ANY_OF) {
+    if (rule.mode !== mode) continue;
+    const hit = rule.optionIds.some((id) => (counts.get(id) ?? 0) > 0);
+    if (hit) continue;
+    if (mode === "issue") {
+      return {
+        ok: false,
+        message: "usage: ak-role analyst ([--ticket <N>] | [sweep] --attach <sweep.json> | --cohort ...)"
+      };
     }
+    const flags = rule.optionIds.map((id) => byId.get(id)?.canonical ?? id).join(" | ");
+    return {
+      ok: false,
+      message: `usage: ak-role analyst ${mode} requires one of ${flags}`
+    };
   }
-  const acceptedAt = accepted && timestamp(accepted);
-  const final = acceptedAt ? accepted : rows.at(-1);
-  const endedAt = final && timestamp(final);
-  const wall = startedAt && endedAt ? Date.parse(endedAt) - Date.parse(startedAt) : void 0;
-  if (wall !== void 0 && wall < 0) degradationReasons.push(`non-monotonic session timestamps in ${id}`);
-  const degradationReason = degradationReasons.length ? degradationReasons.join("; ") : void 0;
-  const complete = !!acceptedAt && !degradationReason && wall !== void 0 && wall >= 0;
-  const session = complete ? { source: id, startedAt, endedAt, wallMilliseconds: wall, completion: "accepted" } : { source: id, ...startedAt ? { startedAt } : {}, ...endedAt ? { endedAt } : {}, ...wall !== void 0 && wall >= 0 ? { wallMilliseconds: wall } : {}, completion: "incomplete", ...degradationReason ? { degradationReason } : {} };
-  return { session, turns, calls, tokens, statuses, commits };
+  return { ok: true };
 }
-async function loadDoctorCase(runsPath, projectRoot) {
-  const root = await realpath(runsPath);
-  if (projectRoot !== void 0 && !physicallyContainedIn(projectRoot, root)) {
-    throw new Error("doctor --runs escapes the project root");
-  }
-  const match = root.split(sep2).join("/").match(/\/\.ak-roles\/books\/[^/]+\/(?:issues\/)?([1-9]\d*)\/runs$/);
-  if (!match) throw new Error("Doctor case must be an .ak-roles/books/<book>/<n>/runs directory");
-  const evidence = [], sessions = [], statuses = [], commits = [];
-  const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
-  for (const path of await discoverCaseFiles(root)) {
-    const id = relative2(root, path).split(sep2).join("/");
-    const bytes = await readFile5(path);
-    const content = bytes.toString("utf8");
-    const kind = id.split("/").length === 2 && id.endsWith("/log.jsonl") ? "log" : "session";
-    evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
-    if (kind === "log") continue;
-    const result = deriveSession(content, id);
-    sessions.push(result.session);
-    statuses.push(...result.statuses);
-    commits.push(...result.commits);
-    accumulate(turns, result.turns, id);
-    accumulate(calls, result.calls, id);
-    accumulate(tokens, result.tokens, id);
-  }
-  const runDirs = (await readdir2(root, { withFileTypes: true })).filter((item) => item.isDirectory()).map((item) => item.name).sort();
-  const legs = evidence.filter((entry) => entry.kind === "session").map((entry) => entry.id);
-  const retryDirs = runDirs.filter((name) => /(?:^|[-_])retry(?:[-_]|$)/i.test(name));
-  const rawBytes = evidence.filter((entry) => entry.kind === "session").reduce((sum, entry) => sum + entry.byteLength, 0);
-  const cost = { invocations: sourceList(runDirs.length, runDirs), legs: sourceList(legs.length, legs), modelApiTurns: sourceList(turns.count, turns.sources), outputTokens: sourceList(tokens.count, tokens.sources), toolCalls: sourceList(calls.count, calls.sources), retries: { ...sourceList(retryDirs.length, retryDirs), evidence: "literal run-dir naming" }, statuses, commits, sessions, outputBytes: { ...sourceList(rawBytes, legs), payload: "raw JSONL bytes", providerWireBytes: "unavailable" } };
-  return { version: 1, identity: { issueNumber: Number(match[1]), runsPath: await stableRunsIdentity(root) }, evidence, cost };
+function bindOwner(owner, semantics) {
+  return { ...semantics, owner };
 }
-var init_doctor_evidence = __esm({
-  "src/doctor-evidence.ts"() {
-    "use strict";
-    init_sha256();
-    init_activation_ledger_topology();
-    init_terminating_tools();
-    init_unknown_value();
-  }
-});
-
-// src/public-cli/github-remote.ts
-function ownerRepoFromGitHubRemoteUrl(remoteUrl) {
-  const trimmed = remoteUrl.trim();
-  const scp = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(trimmed);
-  if (scp) {
-    return `${scp[1]}/${stripGitSuffix(scp[2])}`;
-  }
-  const ssh = /^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i.exec(
-    trimmed
-  );
-  if (ssh) {
-    return `${ssh[1]}/${stripGitSuffix(ssh[2])}`;
-  }
-  let parsed;
-  try {
-    parsed = new URL(trimmed);
-  } catch {
-    return void 0;
-  }
-  if (!/^github\.com$/i.test(parsed.hostname)) return void 0;
-  if (parsed.search !== "" || parsed.hash !== "") return void 0;
-  const parts = parsed.pathname.split("/").filter((p) => p.length > 0);
-  if (parts.length !== 2) return void 0;
-  return `${parts[0]}/${stripGitSuffix(parts[1])}`;
+function projectAndAttach(owner) {
+  return [
+    bindOwner(owner, SHARED_PROJECT_SEMANTICS),
+    bindOwner(owner, SHARED_ATTACH_SEMANTICS)
+  ];
 }
-function stripGitSuffix(name) {
-  return name.toLowerCase().endsWith(".git") ? name.slice(0, -4) : name;
+function seatOptionRows(role) {
+  return SEAT_OPTION_ROWS[role] ?? projectAndAttach(role);
 }
-var init_github_remote = __esm({
-  "src/public-cli/github-remote.ts"() {
-    "use strict";
+function publicOptionTable() {
+  const roles = {};
+  for (const role of PUBLIC_CALLABLE_ROLES) {
+    roles[role] = seatOptionRows(role);
   }
-});
-
-// src/git-object-id.ts
-function isFullGitObjectId(value) {
-  return typeof value === "string" && FULL_GIT_OBJECT_ID_RE.test(value);
+  return { global: GLOBAL_OPTIONS, ...roles, analyst: ANALYST_OPTIONS };
 }
-var FULL_GIT_OBJECT_ID_RE;
-var init_git_object_id = __esm({
-  "src/git-object-id.ts"() {
-    "use strict";
-    FULL_GIT_OBJECT_ID_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
-  }
-});
-
-// src/merger-git-state.ts
-import { execFile } from "node:child_process";
-import { access, readFile as readFile6 } from "node:fs/promises";
-import { constants as fsConstants } from "node:fs";
-import { isAbsolute as isAbsolute3, resolve as resolve6 } from "node:path";
-import { promisify } from "node:util";
-async function git(cwd, args) {
-  const { stdout } = await execFileAsync("git", args, { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
-  return new Uint8Array(stdout);
+function optionsForOwner(owner) {
+  return PUBLIC_OPTION_TABLE[owner];
 }
-function line(bytes, label) {
-  const value = exactUtf8(bytes, label).trim();
-  if (!value) throw new Error(`${label} is empty`);
-  return value;
+function dashedSpellings(def) {
+  if (def.form !== "option") return [];
+  return [def.canonical, ...def.aliases];
 }
-async function pathExists(path) {
-  try {
-    await access(path, fsConstants.F_OK);
-    return true;
-  } catch (error) {
-    if (error.code === "ENOENT") return false;
-    throw error;
+function matchDashedOption(token, definitions) {
+  if (!token.startsWith("-") || token === "-") return void 0;
+  for (const def of definitions) {
+    if (def.form !== "option") continue;
+    for (const spelling of dashedSpellings(def)) {
+      if (token === spelling) {
+        return { def };
+      }
+      if (def.valueMetavar !== null && token.startsWith(`${spelling}=`)) {
+        return { def, inlineValue: token.slice(spelling.length + 1) };
+      }
+    }
   }
+  return void 0;
 }
-async function requireInsideWorkTree(cwd) {
-  const stdout = await git(cwd, ["rev-parse", "--is-inside-work-tree"]);
-  if (exactUtf8(stdout, "Git worktree check").trim() !== "true") throw new Error("Assigned path is not inside a Git work tree");
+function takeDashedOption(tokens, definitions) {
+  const token = tokens[0];
+  if (token === void 0) return void 0;
+  const matched = matchDashedOption(token, definitions);
+  if (matched === void 0) return void 0;
+  tokens.shift();
+  if (matched.def.valueMetavar === null) {
+    return { def: matched.def, value: void 0 };
+  }
+  if (matched.inlineValue !== void 0) {
+    return { def: matched.def, value: matched.inlineValue };
+  }
+  return { def: matched.def, value: tokens.shift() };
 }
-async function tryResolveCommit(cwd, rev) {
-  let stdout;
-  try {
-    const res = await execFileAsync("git", ["rev-parse", "--verify", "--quiet", `${rev}^{commit}`], { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
-    stdout = new Uint8Array(res.stdout);
-  } catch (error) {
-    if (error.code === 1) return void 0;
-    throw error;
-  }
-  const oid = line(stdout, `Git ${rev}`);
-  if (!isFullGitObjectId(oid)) throw new Error(`Git ${rev} identity is unavailable or invalid`);
-  return oid;
-}
-async function unmerged(cwd) {
-  const raw = exactUtf8(await git(cwd, ["ls-files", "-u", "-z"]), "Git unmerged index");
-  const paths = /* @__PURE__ */ new Set();
-  for (const row of raw.split("\0")) {
-    if (!row) continue;
-    const tab = row.indexOf("	");
-    if (tab < 0 || tab === row.length - 1) throw new Error("Git returned a malformed unmerged index row");
-    paths.add(row.slice(tab + 1));
-  }
-  return [...paths].sort((a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)));
-}
-async function resolveHeadMaterial(cwd) {
-  const commit = await tryResolveCommit(cwd, "HEAD");
-  if (commit !== void 0) return commit;
-  try {
-    await execFileAsync("git", ["rev-parse", "--verify", "--quiet", "HEAD"], { cwd, encoding: "buffer", maxBuffer: 16 * 1024 * 1024 });
-  } catch (error) {
-    if (error.code === 1) return "";
-    throw error;
+function matchPositionalOption(token, definitions) {
+  for (const def of definitions) {
+    if (def.form !== "positional") continue;
+    if (def.canonical === token || def.aliases.includes(token)) {
+      return def;
+    }
   }
-  throw new Error("Git HEAD identity is unavailable or invalid");
+  return void 0;
 }
-function createProductionMergerGitState(repositoryRoot = process.cwd()) {
+function createTypedOptionConsumer(definitions) {
+  const counts = /* @__PURE__ */ new Map();
+  const note = (def) => {
+    const next = (counts.get(def.id) ?? 0) + 1;
+    counts.set(def.id, next);
+    if (next > 1 && !def.repeatable) {
+      throw new CliUsageError(`${def.canonical} cannot be repeated`);
+    }
+  };
   return {
-    async activeMerge() {
-      await requireInsideWorkTree(repositoryRoot);
-      const targetObjectId = await resolveHeadMaterial(repositoryRoot);
-      const mergeHeadReported = line(await git(repositoryRoot, ["rev-parse", "--git-path", "MERGE_HEAD"]), "Git MERGE_HEAD path");
-      const mergeHeadPath = isAbsolute3(mergeHeadReported) ? mergeHeadReported : resolve6(repositoryRoot, mergeHeadReported);
-      let sourceObjectId = "";
-      if (await pathExists(mergeHeadPath)) {
-        const raw = exactUtf8(await readFile6(mergeHeadPath), "Git MERGE_HEAD");
-        const mergeHeads = raw.trim().split(/\r?\n/).map((row) => row.trim()).filter(Boolean);
-        if (mergeHeads.length === 0) throw new Error("Git MERGE_HEAD is empty");
-        if (mergeHeads.length !== 1) throw new Error("Assigned repository does not have one ordinary in-progress merge");
-        const source = mergeHeads[0];
-        if (!isFullGitObjectId(source)) throw new Error("Git MERGE_HEAD identity is unavailable or invalid");
-        const resolved = await tryResolveCommit(repositoryRoot, source);
-        if (resolved === void 0 || targetObjectId !== "" && resolved.length !== targetObjectId.length) {
-          throw new Error("Git MERGE_HEAD identity is unavailable or invalid");
-        }
-        sourceObjectId = resolved;
+    takeDashed(tokens) {
+      const taken = takeDashedOption(tokens, definitions);
+      if (taken === void 0) return void 0;
+      note(taken.def);
+      return taken;
+    },
+    takePositional(token) {
+      const def = matchPositionalOption(token, definitions);
+      if (def === void 0) return void 0;
+      note(def);
+      return def;
+    },
+    consumeLeadingPhase(positional) {
+      const phaseDef = definitions.find(
+        (def) => def.id === "phase" && def.form === "positional"
+      );
+      const defaultPhase = phaseDef?.defaultValue === "plan" || phaseDef?.defaultValue === "apply" ? phaseDef.defaultValue : "apply";
+      if (phaseDef === void 0 || positional.length === 0) {
+        return defaultPhase;
+      }
+      const token = positional[0];
+      if (!phaseDef.aliases.includes(token) && phaseDef.canonical !== token) {
+        return defaultPhase;
+      }
+      positional.shift();
+      note(phaseDef);
+      if (token !== "plan" && token !== "apply") {
+        throw new CliUsageError(`invalid phase token: ${token}`);
+      }
+      return token;
+    },
+    count(id) {
+      return counts.get(id) ?? 0;
+    },
+    assertRequired() {
+      for (const def of definitions) {
+        if (!def.required) continue;
+        if ((counts.get(def.id) ?? 0) > 0) continue;
+        const suffix = def.valueMetavar === null ? "" : ` <${def.valueMetavar}>`;
+        throw new CliUsageError(
+          `${def.owner} requires ${def.canonical}${suffix}`
+        );
       }
-      return { targetObjectId, sourceObjectId, unmergedPaths: await unmerged(repositoryRoot) };
     }
   };
 }
-var execFileAsync;
-var init_merger_git_state = __esm({
-  "src/merger-git-state.ts"() {
-    "use strict";
-    init_exact_utf8();
-    init_git_object_id();
-    execFileAsync = promisify(execFile);
-  }
-});
-
-// src/session-dialogue.ts
-var init_session_dialogue = __esm({
-  "src/session-dialogue.ts"() {
-    "use strict";
-    init_unknown_value();
-  }
-});
-
-// src/ticket-provenance.ts
-import { readFile as readFile7 } from "node:fs/promises";
-import { join as join11, resolve as resolve7 } from "node:path";
-function ticketProvenanceSubject(ticketNumber) {
-  if (!isSafePositiveTicketNumber(ticketNumber)) {
-    throw new Error(
-      `ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`
-    );
-  }
-  return String(ticketNumber);
+function projectOwnerOptions(owner) {
+  return optionsForOwner(owner).map((def) => ({
+    id: def.id,
+    owner: def.owner,
+    canonical: def.canonical,
+    aliases: def.aliases,
+    valueMetavar: def.valueMetavar,
+    required: def.required,
+    repeatable: def.repeatable,
+    ...def.defaultValue === void 0 ? {} : { defaultValue: def.defaultValue },
+    form: def.form,
+    ...def.phases === void 0 ? {} : { phases: def.phases },
+    ...def.modes === void 0 ? {} : { modes: def.modes },
+    ...def.requiredInModes === void 0 ? {} : { requiredInModes: def.requiredInModes },
+    ...def.exclusiveWith === void 0 ? {} : { exclusiveWith: def.exclusiveWith },
+    ...def.maxCountByMode === void 0 ? {} : { maxCountByMode: def.maxCountByMode },
+    ...def.selectsMode === void 0 ? {} : { selectsMode: def.selectsMode },
+    description: def.description
+  }));
 }
-function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
+function projectCommandHelp(topic) {
+  if (!(topic in PUBLIC_COMMAND_HELP)) return void 0;
+  const facts = PUBLIC_COMMAND_HELP[topic];
   return {
-    level: "event",
-    kind: TICKET_PROVENANCE_KIND,
-    ...ticketNumber === null ? {} : { subject: ticketProvenanceSubject(ticketNumber) },
-    ...runDirectory === void 0 ? {} : { runDirectory },
-    cwd,
-    ...home === void 0 ? {} : { home }
+    command: facts.command,
+    summary: facts.summary,
+    usage: [...facts.usage],
+    examples: [...facts.examples]
   };
 }
-async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
-  const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
-  let history;
-  try {
-    history = await readFile7(join11(runDirectory, RUN_HISTORY_FILE), "utf8");
-  } catch (error) {
-    if (errnoCode(error) === "ENOENT") return;
-    throw error;
-  }
-  const block = history.split("\n").flatMap((line2, index) => {
-    const decoded = decodeSitianRecordLine(line2, index + 1);
-    if (decoded === void 0 || !decoded.ok) return [];
-    if (decoded.record.kind !== TICKET_PROVENANCE_KIND) return [];
-    return [`${line2}
-`];
-  }).join("");
-  if (block !== "") appendSitianRecordBlock(ticketInput, block);
-}
-var init_ticket_provenance = __esm({
-  "src/ticket-provenance.ts"() {
-    "use strict";
-    init_activation_ledger_topology();
-    init_ledger_session_read();
-    init_run_ticket_number();
-    init_role_run_placement();
-    init_run_dossier_files();
-    init_session_dialogue();
-    init_sitian_facade();
-    init_sitian_reader();
-    init_ticket_provenance_contracts();
-    init_unknown_value();
-  }
-});
-
-// src/uuidv7.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-function isUuidV7(value) {
-  return typeof value === "string" && UUIDV7.test(value);
-}
-function uuidv7(now = Date.now()) {
-  const b = randomBytes2(16);
-  let n = BigInt(now);
-  for (let i = 5; i >= 0; i--) {
-    b[i] = Number(n & 255n);
-    n >>= 8n;
+function renderHumanOwnerOptionLines(owner, locale2 = "en") {
+  const lines = [];
+  for (const opt of projectOwnerOptions(owner)) {
+    let spelling = opt.canonical;
+    if (opt.valueMetavar !== null) {
+      spelling = `${spelling} <${opt.valueMetavar}>`;
+    }
+    if (opt.aliases.length > 0) {
+      const aliasHint = opt.aliases.join(", ");
+      if (opt.form === "positional") {
+        spelling = opt.aliases.join("|");
+      } else {
+        spelling = `${spelling} (${aliasHint})`;
+      }
+    }
+    const tags = [];
+    if (opt.required) tags.push("required");
+    if (opt.requiredInModes !== void 0) {
+      tags.push(`required:${opt.requiredInModes.join("|")}`);
+    }
+    if (opt.repeatable) tags.push("repeatable");
+    if (opt.defaultValue !== void 0) tags.push(`default=${opt.defaultValue}`);
+    if (opt.form === "positional") tags.push("positional");
+    const tagText = tags.length === 0 ? "" : ` [${tags.join(", ")}]`;
+    const desc = locale2 === "zh" ? opt.description.zh : opt.description.en;
+    lines.push(`  ${spelling}${tagText}  ${desc}`);
   }
-  b[6] = b[6] & 15 | 112;
-  b[8] = b[8] & 63 | 128;
-  const h = b.toString("hex");
-  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+  return lines;
 }
-var UUIDV7;
-var init_uuidv7 = __esm({
-  "src/uuidv7.ts"() {
-    "use strict";
-    UUIDV7 = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
-  }
-});
-
-// src/notary-source-run.ts
-import { dirname as dirname8, isAbsolute as isAbsolute4, join as join12, resolve as resolve8, basename as basename7 } from "node:path";
-import { lstat as lstat2, realpath as realpath2 } from "node:fs/promises";
-async function readRetainedIdentity(runDirectory) {
-  try {
-    return await readRoleRunIdentity(runDirectory);
-  } catch (error) {
-    if (!(error instanceof TypeError || error instanceof SyntaxError)) throw error;
-    throw new NotarySourceRunError("notary --source-run has invalid retained run-state identity", {
-      cause: error
-    });
-  }
-}
-async function requireRunDirectory(candidate, display) {
-  let real;
-  try {
-    real = await realpath2(candidate);
-  } catch (error) {
-    throw new NotarySourceRunError(
-      `notary --source-run is not a readable run directory: ${display}`,
-      { cause: error }
-    );
-  }
-  let stat2;
-  try {
-    stat2 = await lstat2(real);
-  } catch (error) {
-    throw new NotarySourceRunError(
-      `notary --source-run is not a readable run directory: ${display}`,
-      { cause: error }
-    );
-  }
-  if (!stat2.isDirectory()) {
-    throw new NotarySourceRunError(
-      `notary --source-run must be a run directory: ${display}`
-    );
-  }
-  const identity = parseRunLeaf(basename7(real));
-  if (identity === void 0) {
-    throw new NotarySourceRunError(
-      `notary --source-run must be named <runId>@<role>: ${basename7(real)}`
-    );
-  }
-  return real;
-}
-async function resolveNotarySourceRunLocator(options) {
-  const raw = options.sourceRun.trim();
-  if (raw === "") {
-    throw new NotarySourceRunError("notary --source-run requires a run locator");
-  }
-  const ledgerHome = resolveActivationLedgerHome(options.home);
-  const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookDirectory = activationBookDirectory(ledgerHome, bookKey);
-  const bookRunsRoot = join12(bookDirectory, "runs");
-  let candidate;
-  const bare = parseRunLeaf(raw);
-  if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = await findRunDirectoryById(options.home, bare.runId, bookKey, bare.role) ?? join12(bookRunsRoot, formatRunLeaf(bare.runId, bare.role));
-  } else {
-    candidate = isAbsolute4(raw) ? raw : resolve8(options.projectRoot, raw);
-    const identity2 = parseRunLeaf(basename7(candidate));
-    const subjectDirectory = dirname8(dirname8(candidate));
-    const isLegacyUnboundLocator = identity2 !== void 0 && basename7(dirname8(candidate)) === "runs" && basename7(subjectDirectory) === "unbound" && resolve8(dirname8(subjectDirectory)) === resolve8(bookDirectory);
-    if (isLegacyUnboundLocator) {
-      candidate = await findRunDirectoryById(
-        options.home,
-        identity2.runId,
-        bookKey,
-        identity2.role
-      ) ?? candidate;
-    }
-  }
-  const real = await requireRunDirectory(candidate, raw);
-  const identity = parseRunLeaf(basename7(real));
-  const bookIdentity = physicalPathIdentity(bookDirectory);
-  const parentIdentity = physicalPathIdentity(dirname8(real));
-  const subjectBookIdentity = physicalPathIdentity(dirname8(dirname8(dirname8(real))));
-  if (parentIdentity !== physicalPathIdentity(bookRunsRoot) && !(basename7(dirname8(real)) === "runs" && subjectBookIdentity === bookIdentity)) {
-    throw new NotarySourceRunError(
-      "notary --source-run must resolve to a retained run under the project machine-ledger book"
-    );
-  }
-  const runState = await readRetainedIdentity(real);
-  if (runState === void 0) {
-    throw new NotarySourceRunError(
-      "notary --source-run lacks retained run-state identity"
-    );
-  }
-  if (runState.runId !== identity.runId || runState.role !== identity.role) {
-    throw new NotarySourceRunError(
-      "notary --source-run retained identity does not match directory name"
-    );
-  }
-  if (runState.bookKey !== bookKey) {
-    throw new NotarySourceRunError(
-      "notary --source-run retained book binding does not match project case"
-    );
-  }
-  if (physicalPathIdentity(runState.runDirectory) !== physicalPathIdentity(real)) {
-    throw new NotarySourceRunError(
-      "notary --source-run retained runDirectory does not match locator path"
-    );
-  }
-  return {
-    runDirectory: real,
-    runId: identity.runId,
-    role: identity.role
-  };
-}
-var NotarySourceRunError;
-var init_notary_source_run = __esm({
-  "src/notary-source-run.ts"() {
-    "use strict";
-    init_activation_ledger_git();
-    init_activation_ledger_topology();
-    init_run_lifecycle();
-    init_role_run_placement();
-    NotarySourceRunError = class extends Error {
-      constructor(message, options) {
-        super(message, options);
-        this.name = "NotarySourceRunError";
-      }
-    };
-  }
-});
-
-// src/public-cli/option-definitions.ts
-function resolveAnalystMode(presentOptionIds) {
-  const selected = /* @__PURE__ */ new Set();
-  for (const def of optionsForOwner("analyst")) {
-    if (def.selectsMode === void 0) continue;
-    if (presentOptionIds.has(def.id)) selected.add(def.selectsMode);
-  }
-  if (selected.size === 0) return ANALYST_DEFAULT_MODE;
-  if (selected.has("cohort")) return "cohort";
-  if (selected.has("sweep")) return "sweep";
-  if (selected.has("issue")) return "issue";
-  return ANALYST_DEFAULT_MODE;
-}
-function evaluateAnalystModeOptionContract(mode, counts) {
-  const definitions = optionsForOwner("analyst");
-  const byId = new Map(definitions.map((def) => [def.id, def]));
-  for (const def of definitions) {
-    const count = counts.get(def.id) ?? 0;
-    if (count === 0 || def.exclusiveWith === void 0) continue;
-    for (const otherId of def.exclusiveWith) {
-      if ((counts.get(otherId) ?? 0) === 0) continue;
-      const other = byId.get(otherId);
-      return {
-        ok: false,
-        message: `analyst accepts only one of ${def.canonical} / ${other?.canonical ?? otherId}`
-      };
-    }
-  }
-  for (const def of definitions) {
-    const count = counts.get(def.id) ?? 0;
-    if (count === 0) continue;
-    if (def.modes !== void 0 && !def.modes.includes(mode)) {
-      if (mode === "sweep") {
-        return {
-          ok: false,
-          message: `analyst sweep --attach cannot combine with ${def.canonical}`
-        };
-      }
-      return {
-        ok: false,
-        message: `analyst ${mode} does not accept ${def.canonical}`
-      };
-    }
-    const max = def.maxCountByMode?.[mode];
-    if (max !== void 0 && count > max) {
-      return {
-        ok: false,
-        message: max === 1 ? `analyst ${mode} accepts at most one ${def.canonical}` : `analyst ${mode} accepts at most ${max} ${def.canonical}`
-      };
-    }
-  }
-  const missingRequired = [];
-  for (const def of definitions) {
-    if (def.requiredInModes === void 0) continue;
-    if (!def.requiredInModes.includes(mode)) continue;
-    if ((counts.get(def.id) ?? 0) === 0) missingRequired.push(def);
-  }
-  if (missingRequired.length > 0) {
-    if (mode === "cohort") {
-      return {
-        ok: false,
-        message: "usage: ak-role analyst --cohort --group-a-label <L> --group-a-issues <N|book:N[,...]> --group-b-label <L> --group-b-issues <N|book:N[,...]>"
-      };
-    }
-    return {
-      ok: false,
-      message: `usage: ak-role analyst ${mode} requires ${missingRequired.map((def) => def.canonical).join(" ")}`
-    };
-  }
-  for (const rule of ANALYST_REQUIRE_ANY_OF) {
-    if (rule.mode !== mode) continue;
-    const hit = rule.optionIds.some((id) => (counts.get(id) ?? 0) > 0);
-    if (hit) continue;
-    if (mode === "issue") {
-      return {
-        ok: false,
-        message: "usage: ak-role analyst ([--ticket <N>] | [sweep] --attach <sweep.json> | --cohort ...)"
-      };
-    }
-    const flags = rule.optionIds.map((id) => byId.get(id)?.canonical ?? id).join(" | ");
-    return {
-      ok: false,
-      message: `usage: ak-role analyst ${mode} requires one of ${flags}`
-    };
-  }
-  return { ok: true };
-}
-function bindOwner(owner, semantics) {
-  return { ...semantics, owner };
-}
-function projectAndAttach(owner) {
-  return [
-    bindOwner(owner, SHARED_PROJECT_SEMANTICS),
-    bindOwner(owner, SHARED_ATTACH_SEMANTICS)
-  ];
-}
-function seatOptionRows(role) {
-  return SEAT_OPTION_ROWS[role] ?? projectAndAttach(role);
-}
-function publicOptionTable() {
-  const roles = {};
-  for (const role of PUBLIC_CALLABLE_ROLES) {
-    roles[role] = seatOptionRows(role);
-  }
-  return { global: GLOBAL_OPTIONS, ...roles, analyst: ANALYST_OPTIONS };
-}
-function optionsForOwner(owner) {
-  return PUBLIC_OPTION_TABLE[owner];
-}
-function dashedSpellings(def) {
-  if (def.form !== "option") return [];
-  return [def.canonical, ...def.aliases];
-}
-function matchDashedOption(token, definitions) {
-  if (!token.startsWith("-") || token === "-") return void 0;
-  for (const def of definitions) {
-    if (def.form !== "option") continue;
-    for (const spelling of dashedSpellings(def)) {
-      if (token === spelling) {
-        return { def };
-      }
-      if (def.valueMetavar !== null && token.startsWith(`${spelling}=`)) {
-        return { def, inlineValue: token.slice(spelling.length + 1) };
-      }
-    }
-  }
-  return void 0;
-}
-function takeDashedOption(tokens, definitions) {
-  const token = tokens[0];
-  if (token === void 0) return void 0;
-  const matched = matchDashedOption(token, definitions);
-  if (matched === void 0) return void 0;
-  tokens.shift();
-  if (matched.def.valueMetavar === null) {
-    return { def: matched.def, value: void 0 };
-  }
-  if (matched.inlineValue !== void 0) {
-    return { def: matched.def, value: matched.inlineValue };
-  }
-  return { def: matched.def, value: tokens.shift() };
-}
-function matchPositionalOption(token, definitions) {
-  for (const def of definitions) {
-    if (def.form !== "positional") continue;
-    if (def.canonical === token || def.aliases.includes(token)) {
-      return def;
-    }
-  }
-  return void 0;
-}
-function createTypedOptionConsumer(definitions) {
-  const counts = /* @__PURE__ */ new Map();
-  const note = (def) => {
-    const next = (counts.get(def.id) ?? 0) + 1;
-    counts.set(def.id, next);
-    if (next > 1 && !def.repeatable) {
-      throw new CliUsageError(`${def.canonical} cannot be repeated`);
-    }
-  };
-  return {
-    takeDashed(tokens) {
-      const taken = takeDashedOption(tokens, definitions);
-      if (taken === void 0) return void 0;
-      note(taken.def);
-      return taken;
-    },
-    takePositional(token) {
-      const def = matchPositionalOption(token, definitions);
-      if (def === void 0) return void 0;
-      note(def);
-      return def;
-    },
-    consumeLeadingPhase(positional) {
-      const phaseDef = definitions.find(
-        (def) => def.id === "phase" && def.form === "positional"
-      );
-      const defaultPhase = phaseDef?.defaultValue === "plan" || phaseDef?.defaultValue === "apply" ? phaseDef.defaultValue : "apply";
-      if (phaseDef === void 0 || positional.length === 0) {
-        return defaultPhase;
-      }
-      const token = positional[0];
-      if (!phaseDef.aliases.includes(token) && phaseDef.canonical !== token) {
-        return defaultPhase;
-      }
-      positional.shift();
-      note(phaseDef);
-      if (token !== "plan" && token !== "apply") {
-        throw new CliUsageError(`invalid phase token: ${token}`);
-      }
-      return token;
-    },
-    count(id) {
-      return counts.get(id) ?? 0;
-    },
-    assertRequired() {
-      for (const def of definitions) {
-        if (!def.required) continue;
-        if ((counts.get(def.id) ?? 0) > 0) continue;
-        const suffix = def.valueMetavar === null ? "" : ` <${def.valueMetavar}>`;
-        throw new CliUsageError(
-          `${def.owner} requires ${def.canonical}${suffix}`
-        );
-      }
-    }
-  };
-}
-function projectOwnerOptions(owner) {
-  return optionsForOwner(owner).map((def) => ({
-    id: def.id,
-    owner: def.owner,
-    canonical: def.canonical,
-    aliases: def.aliases,
-    valueMetavar: def.valueMetavar,
-    required: def.required,
-    repeatable: def.repeatable,
-    ...def.defaultValue === void 0 ? {} : { defaultValue: def.defaultValue },
-    form: def.form,
-    ...def.phases === void 0 ? {} : { phases: def.phases },
-    ...def.modes === void 0 ? {} : { modes: def.modes },
-    ...def.requiredInModes === void 0 ? {} : { requiredInModes: def.requiredInModes },
-    ...def.exclusiveWith === void 0 ? {} : { exclusiveWith: def.exclusiveWith },
-    ...def.maxCountByMode === void 0 ? {} : { maxCountByMode: def.maxCountByMode },
-    ...def.selectsMode === void 0 ? {} : { selectsMode: def.selectsMode },
-    description: def.description
-  }));
-}
-function projectCommandHelp(topic) {
-  if (!(topic in PUBLIC_COMMAND_HELP)) return void 0;
-  const facts = PUBLIC_COMMAND_HELP[topic];
-  return {
-    command: facts.command,
-    summary: facts.summary,
-    usage: [...facts.usage],
-    examples: [...facts.examples]
-  };
-}
-function renderHumanOwnerOptionLines(owner, locale2 = "en") {
-  const lines = [];
-  for (const opt of projectOwnerOptions(owner)) {
-    let spelling = opt.canonical;
-    if (opt.valueMetavar !== null) {
-      spelling = `${spelling} <${opt.valueMetavar}>`;
-    }
-    if (opt.aliases.length > 0) {
-      const aliasHint = opt.aliases.join(", ");
-      if (opt.form === "positional") {
-        spelling = opt.aliases.join("|");
-      } else {
-        spelling = `${spelling} (${aliasHint})`;
-      }
-    }
-    const tags = [];
-    if (opt.required) tags.push("required");
-    if (opt.requiredInModes !== void 0) {
-      tags.push(`required:${opt.requiredInModes.join("|")}`);
-    }
-    if (opt.repeatable) tags.push("repeatable");
-    if (opt.defaultValue !== void 0) tags.push(`default=${opt.defaultValue}`);
-    if (opt.form === "positional") tags.push("positional");
-    const tagText = tags.length === 0 ? "" : ` [${tags.join(", ")}]`;
-    const desc = locale2 === "zh" ? opt.description.zh : opt.description.en;
-    lines.push(`  ${spelling}${tagText}  ${desc}`);
-  }
-  return lines;
-}
-var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, SHARED_PHASE_SEMANTICS, GLEANER_LEFT_OPTIONS, AUDITOR_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, INSPECTOR_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, SEAT_OPTION_ROWS, PUBLIC_OPTION_TABLE, PUBLIC_ROLE_OPTION_OWNERS, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
-var init_option_definitions = __esm({
-  "src/public-cli/option-definitions.ts"() {
+var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, SHARED_PHASE_SEMANTICS, GLEANER_LEFT_OPTIONS, AUDITOR_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, INSPECTOR_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, SEAT_OPTION_ROWS, PUBLIC_OPTION_TABLE, PUBLIC_ROLE_OPTION_OWNERS, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
+var init_option_definitions = __esm({
+  "src/public-cli/option-definitions.ts"() {
     "use strict";
     init_cli_errors();
     init_registry();
@@ -14769,14 +14504,14 @@ var init_option_definitions = __esm({
 
 // src/public-cli/invocation.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync3 } from "node:fs";
+import { existsSync as existsSync2 } from "node:fs";
 import {
   readFile as readFile8,
   realpath as realpath3,
   rename,
   writeFile as writeFile2
 } from "node:fs/promises";
-import { dirname as dirname9, isAbsolute as isAbsolute5, join as join13, resolve as resolve9 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute5, join as join13, resolve as resolve8 } from "node:path";
 function normalizeAdmittedAttachment(raw) {
   if (typeof raw !== "object" || raw === null) return void 0;
   const record = raw;
@@ -14930,7 +14665,7 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
     for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
       if (typeof childRunId !== "string") continue;
       const childDirectory = join13(dirname9(oldRunDirectory), formatRunLeaf(childRunId, "diarist"));
-      if (!existsSync3(childDirectory)) continue;
+      if (!existsSync2(childDirectory)) continue;
       const childTarget = roleRunPlacement(ledgerHome, {
         bookKey: admitted.bookKey,
         subject: { ticketNumber: admitted.ticketNumber },
@@ -15362,7 +15097,7 @@ async function admitPublicRole(role, parsed, env, override) {
     }
     case "collect-target": {
       const explicitPrNumber = parsed.prNumber;
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let repository;
       if (parsed.repo !== void 0) {
         try {
@@ -15450,7 +15185,7 @@ async function admitPublicRole(role, parsed, env, override) {
       });
     }
     case "source-locator": {
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       let sourceRun = override?.resolvedSourceRun;
       if (sourceRun === void 0) {
         try {
@@ -15526,7 +15261,7 @@ async function admitPublicRole(role, parsed, env, override) {
       if (instruction.trim() === "") {
         throw new CliUsageError("merger requires a nonblank task instruction");
       }
-      const projectRoot = resolve9(parsed.project ?? shared.cwd);
+      const projectRoot = resolve8(parsed.project ?? shared.cwd);
       const derived = await deriveMergerEnvelopeFromActiveMerge(
         projectRoot,
         createProductionMergerGitState(projectRoot)
@@ -15582,7 +15317,7 @@ function admissionSubject(ticketNumber) {
   return { ticketNumber: fields.ticketNumber };
 }
 async function placeRoleAdmission(options) {
-  const projectRoot = resolve9(options.project ?? options.cwd);
+  const projectRoot = resolve8(options.project ?? options.cwd);
   const runId = options.runId ?? (options.createRunId ?? uuidv7)();
   const ticketFields = ticketAdmissionFields(options.assertedTicketNumber);
   const {
@@ -15729,394 +15464,822 @@ function buildInstructionTransportPrompt(admitted) {
     }
     return lines.join("\n");
   }
-  return appendCallerFileFlagPaths(
-    admitted.instruction,
-    admitted.attachments,
-    admitted.requestManifestPath,
-    admitted.prerequisitesPath
-  );
+  return appendCallerFileFlagPaths(
+    admitted.instruction,
+    admitted.attachments,
+    admitted.requestManifestPath,
+    admitted.prerequisitesPath
+  );
+}
+async function materializeCountersignInvocation(admitted, options) {
+  const placed = await placeRoleAdmission({
+    role: "countersign",
+    home: options.home,
+    principalAuthority: options.principalAuthority,
+    cwd: admitted.projectRoot,
+    attachmentPaths: options.attachmentPaths,
+    runId: admitted.runId,
+    ...options.ticketNumber === void 0 ? {} : { assertedTicketNumber: options.ticketNumber }
+  });
+  const placement = placed;
+  admitted.runDirectory = placement.runDirectory;
+  admitted.principal = placement.principal;
+  const ticketFields = ticketAdmissionFields(options.ticketNumber);
+  if (ticketFields.ticketNumber !== void 0) {
+    admitted.ticketNumber = ticketFields.ticketNumber;
+  }
+  admitted.attachments = placement.attachments;
+  writeAdmittedRequestPersistence(admitted.runDirectory, admitted, {
+    sessionDirectory: placement.sessionDirectory,
+    sessionFile: placement.sessionFile
+  });
+  await writeRoleInvocationLedger(
+    { ...admitted, sessionDirectory: placement.sessionDirectory, sessionFile: placement.sessionFile },
+    admitted.role,
+    options.model
+  );
+}
+function parsePositivePrOption(raw) {
+  if (raw === void 0 || raw.trim() === "") throw new CliUsageError("--pr requires a positive pull request number");
+  try {
+    return parseCollectorPrNumber(raw);
+  } catch (error) {
+    throw new CliUsageError(errorText(error), { cause: error });
+  }
+}
+function parseRepoOption(raw) {
+  if (raw === void 0 || raw.trim() === "") throw new CliUsageError("--repo requires owner/repo");
+  return raw;
+}
+function resolveGitHubRemoteRepository(projectRoot) {
+  let remoteUrl;
+  try {
+    remoteUrl = execFileSync2("git", ["remote", "get-url", "origin"], {
+      cwd: projectRoot,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch (error) {
+    if (isGitRemoteMissing(error)) {
+      throw new CliUsageError(
+        "collector requires a github.com origin remote or an explicit --repo owner/repo",
+        { cause: error }
+      );
+    }
+    throw new Error("collector git failed: cannot read origin remote URL", {
+      cause: error instanceof Error ? error : new Error(String(error))
+    });
+  }
+  if (remoteUrl.length === 0) {
+    throw new CliUsageError(
+      "collector requires a github.com origin remote or an explicit --repo owner/repo"
+    );
+  }
+  const ownerRepo = ownerRepoFromGitHubRemoteUrl(remoteUrl);
+  if (ownerRepo === void 0) {
+    throw new CliUsageError(
+      `collector origin remote must be a github.com owner/repo URL, got ${remoteUrl}`
+    );
+  }
+  try {
+    return parseCollectorRepository(ownerRepo);
+  } catch (error) {
+    const detail = errorText(error);
+    throw new CliUsageError(detail, { cause: error });
+  }
+}
+function isGitRemoteMissing(error) {
+  if (typeof error !== "object" || error === null) return false;
+  const status = error.status;
+  return status === 2;
+}
+function parseDoctorIssueNumber(raw) {
+  return rejectUnlessTicketNumber(
+    raw,
+    `doctor --issue must be a positive integer, got ${raw}`
+  );
+}
+async function resolveDoctorCaseRunsPath(options) {
+  const ledgerHome = resolveActivationLedgerHome(options.home);
+  const defaultRuns = join13(
+    activationBookDirectory(ledgerHome, options.bookKey),
+    String(options.issueNumber),
+    "runs"
+  );
+  if (options.runs === void 0) {
+    return defaultRuns;
+  }
+  const raw = options.runs.trim();
+  if (raw === "") {
+    throw new CliUsageError("doctor --runs requires a path");
+  }
+  if (isAbsolute5(raw)) {
+    throw new CliUsageError(
+      "doctor --runs must be a project-relative path"
+    );
+  }
+  const resolved = resolve8(options.projectRoot, raw);
+  if (resolved !== options.projectRoot && !pathContainedIn(options.projectRoot, resolved)) {
+    throw new CliUsageError(
+      "doctor --runs escapes the project root"
+    );
+  }
+  let real;
+  try {
+    real = await realpath3(resolved);
+  } catch (error) {
+    const detail = errorText(error);
+    throw new CliUsageError(
+      `doctor --runs is not a readable retained runs root: ${detail}`,
+      { cause: error }
+    );
+  }
+  return real;
+}
+function buildReviewerSkillArgProjection(admitted) {
+  return [
+    `--base ${admitted.baseRevision}`,
+    `--lens ${admitted.lens}`,
+    ...admitted.authorityRefs.map((ref) => `--authority ${ref}`)
+  ].join(" ");
+}
+function mergerMaterialFromUtf8(text) {
+  const bytes = Buffer.from(text, "utf8");
+  return Object.freeze({
+    bytesBase64: bytes.toString("base64"),
+    sha256: sha256Hex(bytes)
+  });
+}
+async function deriveMergerEnvelopeFromActiveMerge(projectRoot, gitState = createProductionMergerGitState(projectRoot)) {
+  const state = await gitState.activeMerge();
+  const expectedConflictPaths = Object.freeze([...state.unmergedPaths]);
+  const resolutionScope = Object.freeze([...state.unmergedPaths]);
+  return Object.freeze({
+    targetObjectId: state.targetObjectId,
+    sourceObjectId: state.sourceObjectId,
+    expectedConflictPaths,
+    resolutionScope
+  });
+}
+function parseAnalystTicketNumber(raw, flag = "--ticket") {
+  return rejectUnlessTicketNumber(
+    raw,
+    `analyst ${flag} must be a positive integer, got ${raw}`
+  );
+}
+function parseAnalystCohortIssueToken(raw, flag) {
+  const trimmed = raw.trim();
+  if (trimmed === "") {
+    throw new CliUsageError(
+      `${flag} requires a comma-separated list of N or book:N`
+    );
+  }
+  const sep5 = trimmed.lastIndexOf(":");
+  if (sep5 > 0) {
+    const rhs = trimmed.slice(sep5 + 1);
+    if (parseTicketNumber(rhs) !== void 0) {
+      const bookKey = trimmed.slice(0, sep5);
+      if (bookKey.trim() === "") {
+        throw new CliUsageError(
+          `${flag} book:N requires a non-empty book key, got ${raw}`
+        );
+      }
+      return {
+        kind: "book-qualified",
+        bookKey,
+        issueNumber: parseAnalystTicketNumber(rhs, flag)
+      };
+    }
+  }
+  return {
+    kind: "bare",
+    issueNumber: parseAnalystTicketNumber(trimmed, flag)
+  };
+}
+function splitAnalystCohortIssueListParts(raw) {
+  const parts = [];
+  let current = "";
+  let escaped = false;
+  for (const ch of raw) {
+    if (escaped) {
+      current += ch === "," || ch === "\\" ? ch : `\\${ch}`;
+      escaped = false;
+      continue;
+    }
+    if (ch === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (ch === ",") {
+      parts.push(current);
+      current = "";
+      continue;
+    }
+    current += ch;
+  }
+  parts.push(escaped ? `${current}\\` : current);
+  return parts;
 }
-async function materializeCountersignInvocation(admitted, options) {
-  const placed = await placeRoleAdmission({
-    role: "countersign",
-    home: options.home,
-    principalAuthority: options.principalAuthority,
-    cwd: admitted.projectRoot,
-    attachmentPaths: options.attachmentPaths,
-    runId: admitted.runId,
-    ...options.ticketNumber === void 0 ? {} : { assertedTicketNumber: options.ticketNumber }
-  });
-  const placement = placed;
-  admitted.runDirectory = placement.runDirectory;
-  admitted.principal = placement.principal;
-  const ticketFields = ticketAdmissionFields(options.ticketNumber);
-  if (ticketFields.ticketNumber !== void 0) {
-    admitted.ticketNumber = ticketFields.ticketNumber;
+function parseAnalystCohortIssueTokenList(raw, flag) {
+  const trimmed = raw.trim();
+  if (trimmed === "") {
+    throw new CliUsageError(
+      `${flag} requires a comma-separated list of N or book:N`
+    );
   }
-  admitted.attachments = placement.attachments;
-  writeAdmittedRequestPersistence(admitted.runDirectory, admitted, {
-    sessionDirectory: placement.sessionDirectory,
-    sessionFile: placement.sessionFile
-  });
-  await writeRoleInvocationLedger(
-    { ...admitted, sessionDirectory: placement.sessionDirectory, sessionFile: placement.sessionFile },
-    admitted.role,
-    options.model
+  const parts = splitAnalystCohortIssueListParts(trimmed).map(
+    (part) => part.trim()
   );
-}
-function parsePositivePrOption(raw) {
-  if (raw === void 0 || raw.trim() === "") throw new CliUsageError("--pr requires a positive pull request number");
-  try {
-    return parseCollectorPrNumber(raw);
-  } catch (error) {
-    throw new CliUsageError(errorText(error), { cause: error });
+  if (parts.some((part) => part === "")) {
+    throw new CliUsageError(
+      `${flag} requires a comma-separated list of N or book:N`
+    );
   }
+  return parts.map((part) => parseAnalystCohortIssueToken(part, flag));
 }
-function parseRepoOption(raw) {
-  if (raw === void 0 || raw.trim() === "") throw new CliUsageError("--repo requires owner/repo");
-  return raw;
+function requireOptionValue(flag, value, what) {
+  if (value === void 0 || value.trim() === "") {
+    throw new CliUsageError(`${flag} requires ${what}`);
+  }
+  return value;
 }
-function resolveGitHubRemoteRepository(projectRoot) {
-  let remoteUrl;
-  try {
-    remoteUrl = execFileSync2("git", ["remote", "get-url", "origin"], {
-      cwd: projectRoot,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    }).trim();
-  } catch (error) {
-    if (isGitRemoteMissing(error)) {
-      throw new CliUsageError(
-        "collector requires a github.com origin remote or an explicit --repo owner/repo",
-        { cause: error }
-      );
+function parseAnalystArgv(args) {
+  const valueLists = /* @__PURE__ */ new Map();
+  const definitions = roleOptions("analyst");
+  const options = createTypedOptionConsumer(definitions);
+  const pushValue = (id, value) => {
+    const existing = valueLists.get(id);
+    if (existing === void 0) valueLists.set(id, [value]);
+    else existing.push(value);
+  };
+  scanPublicArgv(args, options, {
+    onDashed(taken) {
+      if (taken.def.valueMetavar === null) {
+        pushValue(taken.def.id, "");
+        return;
+      }
+      if (taken.def.id === "ticket") {
+        if (taken.value === void 0 || taken.value.trim() === "") {
+          throw new CliUsageError("analyst --ticket requires a positive integer");
+        }
+        pushValue("ticket", taken.value);
+        return;
+      }
+      if (taken.def.id === "attach") {
+        pushValue(
+          "attach",
+          requireProvidedOptionValue(taken.def.canonical, taken.value)
+        );
+        return;
+      }
+      if (taken.def.id === "group-a-label" || taken.def.id === "group-b-label") {
+        pushValue(
+          taken.def.id,
+          requireOptionValue(taken.def.canonical, taken.value, "a label")
+        );
+        return;
+      }
+      if (taken.def.id === "group-a-issues" || taken.def.id === "group-b-issues") {
+        pushValue(
+          taken.def.id,
+          requireOptionValue(
+            taken.def.canonical,
+            taken.value,
+            "a comma-separated list of N or book:N"
+          )
+        );
+        return;
+      }
+      throw new CliUsageError(`unknown analyst option: ${taken.def.canonical}`);
+    },
+    onBare(token) {
+      if (isRejectedPublicSpelling("analyst", token)) {
+        if (token === "--project-root" || token.startsWith("--project-root=")) {
+          throw new CliUsageError(
+            "analyst no longer accepts --project-root (deleted); use bare call for whole book or --ticket N (cwd git common-dir selects the book)"
+          );
+        }
+        if (token === "--model-groups" || token.startsWith("--model-groups=")) {
+          throw new CliUsageError(
+            "analyst --model-groups public CLI face is disabled; input face is being redesigned for multi-issue comparison (see follow-up ticket)"
+          );
+        }
+        throw new CliUsageError(`unknown analyst option: ${token}`);
+      }
+      if (token.startsWith("-") && token !== "-") {
+        throw new CliUsageError(`unknown analyst option: ${token}`);
+      }
+      const positional = options.takePositional(token);
+      if (positional !== void 0) {
+        pushValue(positional.id, "");
+        return;
+      }
+      throw new CliUsageError(`unexpected analyst argument: ${token}`);
+    },
+    onDoubleDash(rest) {
+      if (rest.length > 0) {
+        throw new CliUsageError(`unexpected analyst argument: ${rest[0]}`);
+      }
     }
-    throw new Error("collector git failed: cannot read origin remote URL", {
-      cause: error instanceof Error ? error : new Error(String(error))
-    });
+  });
+  const counts = /* @__PURE__ */ new Map();
+  for (const [id, values] of valueLists) {
+    counts.set(id, values.length);
   }
-  if (remoteUrl.length === 0) {
-    throw new CliUsageError(
-      "collector requires a github.com origin remote or an explicit --repo owner/repo"
-    );
+  options.assertRequired();
+  const mode = resolveAnalystMode(new Set(counts.keys()));
+  const verdict = evaluateAnalystModeOptionContract(mode, counts);
+  if (!verdict.ok) {
+    throw new CliUsageError(verdict.message);
   }
-  const ownerRepo = ownerRepoFromGitHubRemoteUrl(remoteUrl);
-  if (ownerRepo === void 0) {
-    throw new CliUsageError(
-      `collector origin remote must be a github.com owner/repo URL, got ${remoteUrl}`
+  if (mode === "cohort") {
+    const groupALabel = valueLists.get("group-a-label")[0];
+    const groupAIssuesRaw = valueLists.get("group-a-issues")[0];
+    const groupBLabel = valueLists.get("group-b-label")[0];
+    const groupBIssuesRaw = valueLists.get("group-b-issues")[0];
+    return {
+      query: "cohort",
+      groups: [
+        {
+          groupLabel: groupALabel,
+          issues: parseAnalystCohortIssueTokenList(
+            groupAIssuesRaw,
+            "--group-a-issues"
+          )
+        },
+        {
+          groupLabel: groupBLabel,
+          issues: parseAnalystCohortIssueTokenList(
+            groupBIssuesRaw,
+            "--group-b-issues"
+          )
+        }
+      ]
+    };
+  }
+  if (mode === "sweep") {
+    return {
+      query: "sweep",
+      attachmentPaths: valueLists.get("attach") ?? []
+    };
+  }
+  const ticketRaw = valueLists.get("ticket")?.[0];
+  return {
+    query: "issue",
+    ...ticketRaw === void 0 ? {} : { ticket: parseAnalystTicketNumber(ticketRaw) }
+  };
+}
+var init_invocation = __esm({
+  "src/public-cli/invocation.ts"() {
+    "use strict";
+    init_activation_ledger_topology();
+    init_activation_ledger_git();
+    init_role_run_placement();
+    init_packaged_role_registry();
+    init_run_ticket_number();
+    init_role_run_relocation();
+    init_run_dossier();
+    init_doctor_evidence();
+    init_collector_config();
+    init_github_remote();
+    init_merger_git_state();
+    init_merger_contracts();
+    init_sha256();
+    init_ticket_provenance();
+    init_uuidv7();
+    init_notary_contracts();
+    init_notary_source_run();
+    init_cli_errors();
+    init_option_definitions();
+    init_unknown_value();
+  }
+});
+
+// src/report-ticket-tool.ts
+var reportTicketArgsSchema, MISSING_TICKET_REASK_MATERIAL;
+var init_report_ticket_tool = __esm({
+  "src/report-ticket-tool.ts"() {
+    "use strict";
+    init_build();
+    init_host_contracts();
+    init_durable_principal();
+    init_invocation();
+    init_role_run_placement();
+    init_role_run_path_rewrite();
+    init_run_dossier();
+    init_run_ticket_number();
+    init_unknown_value();
+    reportTicketArgsSchema = typebox_exports.Object(
+      {
+        ticketNumber: typebox_exports.Unknown({
+          description: "\u672C\u7968\u53F7\uFF08\u6B63\u6574\u6570\u3001\u6570\u5B57\u4E32\u6216\u524D\u5BFC #N\uFF09\u3002\u5DF2\u77E5\u7968\u53F7\u65F6\u5F00\u5DE5\u5373\u62A5\uFF1B\u5C1A\u65E0\u7968\u53F7\u65F6\u4E0D\u8981\u8C03\u7528\u3002"
+        })
+      },
+      { additionalProperties: true }
     );
+    MISSING_TICKET_REASK_MATERIAL = "resources/missing-ticket-reask.md";
   }
-  try {
-    return parseCollectorRepository(ownerRepo);
-  } catch (error) {
-    const detail = errorText(error);
-    throw new CliUsageError(detail, { cause: error });
+});
+
+// src/submission-ledger.ts
+async function submissionRecordFile(cwd, runId, scope) {
+  const ledgerHome = resolveActivationLedgerHome(scope.home);
+  let sessionParent = scope.sessionParent;
+  if (sessionParent === void 0) {
+    const discoveredRun = await findRunDirectoryById(scope.home, runId);
+    if (discoveredRun === void 0) return void 0;
+    sessionParent = sessionFileOf(discoveredRun);
   }
+  return resolveSitianRecordPathInLedger({
+    level: "event",
+    kind: "candidate",
+    subject: { runId },
+    cwd,
+    sessionParent
+  }, ledgerHome).recordFile;
 }
-function isGitRemoteMissing(error) {
-  if (typeof error !== "object" || error === null) return false;
-  const status = error.status;
-  return status === 2;
+async function readOwnedSubmissionRecords(cwd, runId, scope = {}) {
+  const file = await submissionRecordFile(cwd, runId, scope);
+  if (file === void 0) {
+    return { file: void 0, owned: [] };
+  }
+  const { records } = await readSitianRecords(file);
+  return {
+    file,
+    owned: records.filter(
+      (record) => typeof record.subject === "object" && record.subject !== null && record.subject.runId === runId
+    )
+  };
 }
-function parseDoctorIssueNumber(raw) {
-  return rejectUnlessTicketNumber(
-    raw,
-    `doctor --issue must be a positive integer, got ${raw}`
-  );
+function resolveReadScope(homeOrScope) {
+  if (homeOrScope === void 0) return {};
+  if (typeof homeOrScope === "string") return { home: homeOrScope };
+  return homeOrScope;
 }
-async function resolveDoctorCaseRunsPath(options) {
-  const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join13(
-    activationBookDirectory(ledgerHome, options.bookKey),
-    String(options.issueNumber),
-    "runs"
-  );
-  if (options.runs === void 0) {
-    return defaultRuns;
-  }
-  const raw = options.runs.trim();
-  if (raw === "") {
-    throw new CliUsageError("doctor --runs requires a path");
-  }
-  if (isAbsolute5(raw)) {
-    throw new CliUsageError(
-      "doctor --runs must be a project-relative path"
-    );
+function recordAttemptId(record) {
+  if (typeof record.subject === "object" && record.subject !== null) {
+    const fromSubject = record.subject.attemptId;
+    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
   }
-  const resolved = resolve9(options.projectRoot, raw);
-  if (resolved !== options.projectRoot && !pathContainedIn(options.projectRoot, resolved)) {
-    throw new CliUsageError(
-      "doctor --runs escapes the project root"
-    );
+  if (typeof record.payload === "object" && record.payload !== null) {
+    const fromPayload = record.payload.attemptId;
+    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
   }
-  let real;
-  try {
-    real = await realpath3(resolved);
-  } catch (error) {
-    const detail = errorText(error);
-    throw new CliUsageError(
-      `doctor --runs is not a readable retained runs root: ${detail}`,
-      { cause: error }
-    );
+  return void 0;
+}
+function isTerminalRoleName(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function recordedRole(payload) {
+  if (isTerminalRoleName(payload.role)) return payload.role;
+  if (isTerminalRoleName(payload.projection?.role)) return payload.projection.role;
+  return void 0;
+}
+function rowRank(kind) {
+  switch (kind) {
+    case "accepted":
+      return 4;
+    case "audit-escalation":
+      return 3;
+    case "correctable-rejection":
+    case "infrastructure":
+      return 2;
+    case "candidate":
+      return 1;
   }
-  return real;
 }
-function buildReviewerSkillArgProjection(admitted) {
-  return [
-    `--base ${admitted.baseRevision}`,
-    `--lens ${admitted.lens}`,
-    ...admitted.authorityRefs.map((ref) => `--authority ${ref}`)
-  ].join(" ");
+function submissionCallKey(attemptId, toolCallId) {
+  return `${attemptId ?? ""}\0${toolCallId}`;
 }
-function mergerMaterialFromUtf8(text) {
-  const bytes = Buffer.from(text, "utf8");
-  return Object.freeze({
-    bytesBase64: bytes.toString("base64"),
-    sha256: sha256Hex(bytes)
-  });
+function rowFromPayload(kind, payload, accepted, roleFallback) {
+  const role = recordedRole(payload) ?? roleFallback;
+  return {
+    ...role === void 0 ? {} : { role },
+    kind,
+    accepted,
+    ...Object.hasOwn(payload, "auditReceipt") ? { auditReceipt: payload.auditReceipt } : {},
+    ...Object.hasOwn(payload, "auditOfficer") ? { auditOfficer: payload.auditOfficer } : {},
+    ...typeof payload.toolCallId === "string" && payload.toolCallId.length > 0 ? { toolCallId: payload.toolCallId } : {}
+  };
 }
-async function deriveMergerEnvelopeFromActiveMerge(projectRoot, gitState = createProductionMergerGitState(projectRoot)) {
-  const state = await gitState.activeMerge();
-  const expectedConflictPaths = Object.freeze([...state.unmergedPaths]);
-  const resolutionScope = Object.freeze([...state.unmergedPaths]);
-  return Object.freeze({
-    targetObjectId: state.targetObjectId,
-    sourceObjectId: state.sourceObjectId,
-    expectedConflictPaths,
-    resolutionScope
-  });
+function mapOwnedToSubmissionRows(owned) {
+  const scoped = owned;
+  const out = [];
+  const indexByCall = /* @__PURE__ */ new Map();
+  const roleByCall = /* @__PURE__ */ new Map();
+  for (const record of scoped) {
+    const payload = record.payload;
+    if (typeof payload?.toolCallId !== "string" || payload.toolCallId.length === 0) continue;
+    const role = recordedRole(payload);
+    if (role !== void 0) {
+      roleByCall.set(submissionCallKey(recordAttemptId(record), payload.toolCallId), role);
+    }
+  }
+  const take = (row, callKey) => {
+    const toolCallId = row.toolCallId;
+    if (toolCallId !== void 0 && callKey !== void 0) {
+      const existingIndex = indexByCall.get(callKey);
+      if (existingIndex !== void 0) {
+        const existing = out[existingIndex];
+        if (rowRank(row.kind) >= rowRank(existing.kind)) {
+          out[existingIndex] = {
+            ...row,
+            toolCallId,
+            // Keep a previously recovered role when the upgraded row still omits it.
+            ...row.role === void 0 && existing.role !== void 0 ? { role: existing.role } : {}
+          };
+        } else if (existing.role === void 0 && row.role !== void 0) {
+          out[existingIndex] = { ...existing, role: row.role };
+        }
+        return;
+      }
+      indexByCall.set(callKey, out.length);
+    }
+    out.push(row);
+  };
+  for (const record of scoped) {
+    const payload = record.payload;
+    let kind;
+    let original;
+    if (record.kind === "candidate" && payload?.type === "candidate") {
+      kind = "candidate";
+      original = payload.params;
+    } else if (record.kind === "sealed" && payload?.type === "sealed") {
+      kind = "accepted";
+      original = payload.accepted;
+    } else if (record.kind === "outcome" && payload?.type === "outcome") {
+      kind = payload.outcome === "audit-escalation" ? "audit-escalation" : payload.outcome === "correctable-rejection" ? "correctable-rejection" : payload.outcome === "infrastructure" ? "infrastructure" : void 0;
+      original = payload.accepted;
+    }
+    if (kind === void 0 || original === void 0 || payload === void 0) continue;
+    const callKey = typeof payload.toolCallId === "string" ? submissionCallKey(recordAttemptId(record), payload.toolCallId) : void 0;
+    const fallback = callKey === void 0 ? void 0 : roleByCall.get(callKey);
+    take(rowFromPayload(kind, payload, original, fallback), callKey);
+  }
+  return out;
 }
-function parseAnalystTicketNumber(raw, flag = "--ticket") {
-  return rejectUnlessTicketNumber(
-    raw,
-    `analyst ${flag} must be a positive integer, got ${raw}`
+async function readRecordedSubmissionRows(cwd, runId, homeOrScope) {
+  const scope = resolveReadScope(homeOrScope);
+  const { owned } = await readOwnedSubmissionRecords(cwd, runId, scope);
+  return mapOwnedToSubmissionRows(owned);
+}
+async function readAttemptScopedSubmissionRows(cwd, runId, attemptId, home) {
+  if (attemptId.length === 0) return [];
+  const { owned } = await readOwnedSubmissionRecords(
+    cwd,
+    runId,
+    home === void 0 ? {} : { home }
   );
+  return mapOwnedToSubmissionRows(owned.filter((record) => recordAttemptId(record) === attemptId));
 }
-function parseAnalystCohortIssueToken(raw, flag) {
-  const trimmed = raw.trim();
-  if (trimmed === "") {
-    throw new CliUsageError(
-      `${flag} requires a comma-separated list of N or book:N`
-    );
+async function readRecordedSubmissions(cwd, runId, homeOrScope) {
+  return (await readRecordedSubmissionRows(cwd, runId, homeOrScope)).map((row) => row.accepted);
+}
+var init_submission_ledger = __esm({
+  "src/submission-ledger.ts"() {
+    "use strict";
+    init_role_run_placement();
+    init_activation_ledger_topology();
+    init_host_contracts();
+    init_run_terminal_artifacts();
+    init_sitian_facade();
+    init_run_lifecycle();
+    init_submission_correctable_error();
+    init_terminating_infrastructure();
+    init_report_ticket_tool();
+    init_review_submission();
+    init_run_ticket_number();
+    init_unknown_value();
   }
-  const sep5 = trimmed.lastIndexOf(":");
-  if (sep5 > 0) {
-    const rhs = trimmed.slice(sep5 + 1);
-    if (parseTicketNumber(rhs) !== void 0) {
-      const bookKey = trimmed.slice(0, sep5);
-      if (bookKey.trim() === "") {
-        throw new CliUsageError(
-          `${flag} book:N requires a non-empty book key, got ${raw}`
-        );
+});
+
+// src/public-cli/process-cancel.ts
+var process_cancel_exports = {};
+__export(process_cancel_exports, {
+  childSignalDeathDiagnostic: () => childSignalDeathDiagnostic,
+  installProcessCancelHandlers: () => installProcessCancelHandlers,
+  processCancelDiagnostic: () => processCancelDiagnostic,
+  processCancelSignalName: () => processCancelSignalName
+});
+function installProcessCancelHandlers(processRef = process) {
+  const controller = new AbortController();
+  let received;
+  const listeners = /* @__PURE__ */ new Map();
+  for (const sig of CATCHABLE_PROCESS_SIGNALS) {
+    const onSignal = () => {
+      if (received !== void 0) return;
+      received = sig;
+      try {
+        controller.abort(sig);
+      } catch {
       }
-      return {
-        kind: "book-qualified",
-        bookKey,
-        issueNumber: parseAnalystTicketNumber(rhs, flag)
-      };
-    }
+    };
+    listeners.set(sig, onSignal);
+    processRef.on(sig, onSignal);
   }
   return {
-    kind: "bare",
-    issueNumber: parseAnalystTicketNumber(trimmed, flag)
+    signal: controller.signal,
+    receivedSignal: () => received,
+    dispose() {
+      for (const [sig, onSignal] of listeners) {
+        processRef.off(sig, onSignal);
+      }
+      listeners.clear();
+    }
   };
 }
-function splitAnalystCohortIssueListParts(raw) {
-  const parts = [];
-  let current = "";
-  let escaped = false;
-  for (const ch of raw) {
-    if (escaped) {
-      current += ch === "," || ch === "\\" ? ch : `\\${ch}`;
-      escaped = false;
-      continue;
-    }
-    if (ch === "\\") {
-      escaped = true;
-      continue;
-    }
-    if (ch === ",") {
-      parts.push(current);
-      current = "";
-      continue;
-    }
-    current += ch;
+function processCancelSignalName(signal) {
+  if (signal === void 0 || signal.aborted !== true) return void 0;
+  const reason = signal.reason;
+  if (reason === "SIGTERM" || reason === "SIGINT" || reason === "SIGHUP") {
+    return reason;
   }
-  parts.push(escaped ? `${current}\\` : current);
-  return parts;
+  return void 0;
 }
-function parseAnalystCohortIssueTokenList(raw, flag) {
-  const trimmed = raw.trim();
-  if (trimmed === "") {
-    throw new CliUsageError(
-      `${flag} requires a comma-separated list of N or book:N`
-    );
+function processCancelDiagnostic(signalName) {
+  return `ak-role terminated by ${signalName}`;
+}
+function childSignalDeathDiagnostic(signal) {
+  return `role run was killed by ${signal}`;
+}
+var CATCHABLE_PROCESS_SIGNALS;
+var init_process_cancel = __esm({
+  "src/public-cli/process-cancel.ts"() {
+    "use strict";
+    CATCHABLE_PROCESS_SIGNALS = ["SIGTERM", "SIGINT", "SIGHUP"];
   }
-  const parts = splitAnalystCohortIssueListParts(trimmed).map(
-    (part) => part.trim()
-  );
-  if (parts.some((part) => part === "")) {
-    throw new CliUsageError(
-      `${flag} requires a comma-separated list of N or book:N`
-    );
+});
+
+// src/engine-detour-usage.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+function callFactFromSitianPayload(payload, pointer) {
+  if (!isRecord(payload)) return void 0;
+  if (payload.tool !== ENGINE_DETOUR_TOOL_NAME) return void 0;
+  if (typeof payload.toolCallId !== "string" || payload.toolCallId.length === 0) {
+    return void 0;
   }
-  return parts.map((part) => parseAnalystCohortIssueToken(part, flag));
-}
-function requireOptionValue(flag, value, what) {
-  if (value === void 0 || value.trim() === "") {
-    throw new CliUsageError(`${flag} requires ${what}`);
+  if (typeof payload.durationMs !== "number" || !Number.isFinite(payload.durationMs)) {
+    return void 0;
   }
-  return value;
-}
-function parseAnalystArgv(args) {
-  const valueLists = /* @__PURE__ */ new Map();
-  const definitions = roleOptions("analyst");
-  const options = createTypedOptionConsumer(definitions);
-  const pushValue = (id, value) => {
-    const existing = valueLists.get(id);
-    if (existing === void 0) valueLists.set(id, [value]);
-    else existing.push(value);
+  return {
+    toolCallId: payload.toolCallId,
+    durationMs: payload.durationMs,
+    ...typeof payload.code === "number" ? { code: payload.code } : {},
+    ...typeof payload.stdoutByteLength === "number" ? { stdoutByteLength: payload.stdoutByteLength } : {},
+    recordPointer: pointer
   };
-  scanPublicArgv(args, options, {
-    onDashed(taken) {
-      if (taken.def.valueMetavar === null) {
-        pushValue(taken.def.id, "");
-        return;
-      }
-      if (taken.def.id === "ticket") {
-        if (taken.value === void 0 || taken.value.trim() === "") {
-          throw new CliUsageError("analyst --ticket requires a positive integer");
-        }
-        pushValue("ticket", taken.value);
-        return;
-      }
-      if (taken.def.id === "attach") {
-        pushValue(
-          "attach",
-          requireProvidedOptionValue(taken.def.canonical, taken.value)
-        );
-        return;
-      }
-      if (taken.def.id === "group-a-label" || taken.def.id === "group-b-label") {
-        pushValue(
-          taken.def.id,
-          requireOptionValue(taken.def.canonical, taken.value, "a label")
-        );
-        return;
-      }
-      if (taken.def.id === "group-a-issues" || taken.def.id === "group-b-issues") {
-        pushValue(
-          taken.def.id,
-          requireOptionValue(
-            taken.def.canonical,
-            taken.value,
-            "a comma-separated list of N or book:N"
-          )
-        );
-        return;
-      }
-      throw new CliUsageError(`unknown analyst option: ${taken.def.canonical}`);
-    },
-    onBare(token) {
-      if (isRejectedPublicSpelling("analyst", token)) {
-        if (token === "--project-root" || token.startsWith("--project-root=")) {
-          throw new CliUsageError(
-            "analyst no longer accepts --project-root (deleted); use bare call for whole book or --ticket N (cwd git common-dir selects the book)"
-          );
-        }
-        if (token === "--model-groups" || token.startsWith("--model-groups=")) {
-          throw new CliUsageError(
-            "analyst --model-groups public CLI face is disabled; input face is being redesigned for multi-issue comparison (see follow-up ticket)"
-          );
-        }
-        throw new CliUsageError(`unknown analyst option: ${token}`);
-      }
-      if (token.startsWith("-") && token !== "-") {
-        throw new CliUsageError(`unknown analyst option: ${token}`);
-      }
-      const positional = options.takePositional(token);
-      if (positional !== void 0) {
-        pushValue(positional.id, "");
-        return;
-      }
-      throw new CliUsageError(`unexpected analyst argument: ${token}`);
-    },
-    onDoubleDash(rest) {
-      if (rest.length > 0) {
-        throw new CliUsageError(`unexpected analyst argument: ${rest[0]}`);
-      }
-    }
-  });
-  const counts = /* @__PURE__ */ new Map();
-  for (const [id, values] of valueLists) {
-    counts.set(id, values.length);
-  }
-  options.assertRequired();
-  const mode = resolveAnalystMode(new Set(counts.keys()));
-  const verdict = evaluateAnalystModeOptionContract(mode, counts);
-  if (!verdict.ok) {
-    throw new CliUsageError(verdict.message);
+}
+function invocationScopeIdOfRecord(record) {
+  if (isRecord(record.subject)) {
+    const fromSubject = record.subject.invocationScopeId;
+    if (typeof fromSubject === "string" && fromSubject.length > 0) return fromSubject;
   }
-  if (mode === "cohort") {
-    const groupALabel = valueLists.get("group-a-label")[0];
-    const groupAIssuesRaw = valueLists.get("group-a-issues")[0];
-    const groupBLabel = valueLists.get("group-b-label")[0];
-    const groupBIssuesRaw = valueLists.get("group-b-issues")[0];
-    return {
-      query: "cohort",
-      groups: [
-        {
-          groupLabel: groupALabel,
-          issues: parseAnalystCohortIssueTokenList(
-            groupAIssuesRaw,
-            "--group-a-issues"
-          )
-        },
-        {
-          groupLabel: groupBLabel,
-          issues: parseAnalystCohortIssueTokenList(
-            groupBIssuesRaw,
-            "--group-b-issues"
-          )
-        }
-      ]
-    };
+  if (isRecord(record.payload)) {
+    const fromPayload = record.payload.invocationScopeId;
+    if (typeof fromPayload === "string" && fromPayload.length > 0) return fromPayload;
   }
-  if (mode === "sweep") {
-    return {
-      query: "sweep",
-      attachmentPaths: valueLists.get("attach") ?? []
+  return void 0;
+}
+async function readEngineDetourToolUsage(input) {
+  if (!input.engineMounted) return void 0;
+  const { recordFile } = resolveSitianRecordPath({
+    level: "event",
+    kind: ENGINE_DETOUR_CALL_KIND,
+    sessionParent: input.sessionParent,
+    ...input.home === void 0 ? {} : { home: input.home },
+    ...input.cwd === void 0 ? {} : { cwd: input.cwd }
+  });
+  const { records } = await readSitianRecords(recordFile);
+  const callsByToolCallId = /* @__PURE__ */ new Map();
+  for (const record of records) {
+    if (record.kind !== ENGINE_DETOUR_CALL_KIND) continue;
+    const boundScope = invocationScopeIdOfRecord(record);
+    if (input.invocationScopeId !== void 0 && input.invocationScopeId.length > 0) {
+      if (boundScope !== input.invocationScopeId) continue;
+    } else if (boundScope !== void 0) {
+      continue;
+    }
+    const pointer = {
+      identity: record.identity,
+      recordFile: ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE,
+      kind: record.kind,
+      level: record.level
     };
+    const fact = callFactFromSitianPayload(record.payload, pointer);
+    if (fact === void 0) continue;
+    callsByToolCallId.set(fact.toolCallId, fact);
   }
-  const ticketRaw = valueLists.get("ticket")?.[0];
+  const calls = Array.from(callsByToolCallId.values());
+  return { callCount: calls.length, calls };
+}
+function readInvocationRecord(runDirectory) {
+  return readPageSync(runDirectory, "invocation");
+}
+async function readInvocationEngineMounted(runDirectory) {
+  const raw = readInvocationRecord(runDirectory);
+  if (raw === void 0) return false;
+  return typeof raw.engine === "string" && raw.engine.trim() !== "";
+}
+function withEngineDetourToolUsageFact(outcome, usage) {
+  if (usage === void 0) return outcome;
+  const prior = isRecord(outcome.decisiveFacts) ? outcome.decisiveFacts : {};
   return {
-    query: "issue",
-    ...ticketRaw === void 0 ? {} : { ticket: parseAnalystTicketNumber(ticketRaw) }
+    ...outcome,
+    decisiveFacts: {
+      ...prior,
+      [ENGINE_DETOUR_TOOL_USAGE_FACT_KEY]: usage
+    }
   };
 }
-var init_invocation = __esm({
-  "src/public-cli/invocation.ts"() {
+function mintEngineDetourInvocationScope(_input) {
+  return randomUUID3();
+}
+function withEngineDetourInvocationScope(request, invocationScopeId) {
+  if (invocationScopeId === void 0 || invocationScopeId.length === 0) {
+    return request;
+  }
+  if (typeof request.invocationScopeId === "string" && request.invocationScopeId.length > 0) {
+    return request;
+  }
+  return { ...request, invocationScopeId };
+}
+var ENGINE_DETOUR_CALL_KIND, ENGINE_DETOUR_TOOL_USAGE_FACT_KEY, ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE;
+var init_engine_detour_usage = __esm({
+  "src/engine-detour-usage.ts"() {
     "use strict";
-    init_activation_ledger_topology();
-    init_activation_ledger_git();
-    init_role_run_placement();
-    init_packaged_role_registry();
-    init_run_ticket_number();
-    init_role_run_relocation();
     init_run_dossier();
-    init_doctor_evidence();
-    init_collector_config();
-    init_github_remote();
-    init_merger_git_state();
-    init_merger_contracts();
-    init_sha256();
-    init_ticket_provenance();
-    init_uuidv7();
-    init_notary_contracts();
-    init_notary_source_run();
-    init_cli_errors();
-    init_option_definitions();
+    init_role_run_placement();
+    init_engine_detour();
+    init_sitian_facade();
+    init_unknown_value();
+    ENGINE_DETOUR_CALL_KIND = "engine-detour-call";
+    ENGINE_DETOUR_TOOL_USAGE_FACT_KEY = "engineDetourToolUsage";
+    ENGINE_DETOUR_CALL_RECORD_FILE_RELATIVE = RUN_LOG_FILE;
+  }
+});
+
+// src/dossier-resolution.ts
+import { existsSync as existsSync3, statSync as statSync5 } from "node:fs";
+import { resolve as resolve9 } from "node:path";
+function isHostContext(value) {
+  return "sessionManager" in value;
+}
+function dossierPointerFrom(source) {
+  if (source !== void 0 && isHostContext(source)) {
+    return runDirectoryFromHostContext(source);
+  }
+  const env = source ?? process.env;
+  const raw = env[AUDIT_RUN_DIR_ENV];
+  return typeof raw === "string" && raw.trim() !== "" ? raw : void 0;
+}
+function resolveAuditDossier(source) {
+  const raw = dossierPointerFrom(source);
+  if (raw === void 0) {
+    return { status: "ok" };
+  }
+  const runDirectory = resolve9(raw);
+  try {
+    if (!existsSync3(runDirectory) || !statSync5(runDirectory).isDirectory()) {
+      return { status: "incomplete", observation: { kind: "missing-dossier" } };
+    }
+  } catch {
+    return { status: "incomplete", observation: { kind: "missing-dossier" } };
+  }
+  return { status: "ok", runDirectory };
+}
+function readDoctorAuditSubjects(context) {
+  const entries = context.sessionManager.getEntries?.() ?? [];
+  for (const entry of entries) {
+    if (isRecord(entry) && entry.type === "custom" && entry.customType === DOCTOR_CANDIDATE_ENTRY_TYPE) {
+      return { status: "ok" };
+    }
+  }
+  return { status: "incomplete", observation: { kind: "missing-subject", subject: "candidate-testimony" } };
+}
+function requireAuditMaterials(resolution) {
+  if (resolution.status === "incomplete") {
+    throw new AuditMaterialsUnavailableError(resolution.observation);
+  }
+}
+var AUDIT_RUN_DIR_ENV, DOCTOR_CANDIDATE_ENTRY_TYPE, AuditMaterialsUnavailableError;
+var init_dossier_resolution = __esm({
+  "src/dossier-resolution.ts"() {
+    "use strict";
+    init_host_contracts();
     init_unknown_value();
+    AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR";
+    DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate";
+    AuditMaterialsUnavailableError = class extends Error {
+      observation;
+      candidate;
+      constructor(observation) {
+        const detail = observation.kind === "missing-subject" ? `${observation.kind}:${observation.subject}` : observation.kind;
+        super(`Audit materials unavailable: ${detail}`);
+        this.name = "AuditMaterialsUnavailableError";
+        this.observation = observation;
+        this.candidate = void 0;
+      }
+    };
   }
 });
 
@@ -17381,7 +17544,7 @@ async function resolveLiveRunDirectoryPath(recordedPath, home) {
     parsed.role
   );
 }
-async function syncTurnRequestLivePlacement(request) {
+async function syncTurnRequestLivePlacement(request, authority) {
   const live = await resolveLiveRunDirectoryPath(request.runDirectory, request.home);
   if (live === void 0) {
     const parsed = parseRunLeaf(basename8(request.runDirectory));
@@ -17390,35 +17553,41 @@ async function syncTurnRequestLivePlacement(request) {
     );
   }
   if (live !== request.runDirectory) {
-    projectTurnRequestLiveRunDirectory(
-      request,
-      live
-    );
+    projectTurnRequestLiveRunDirectory(request, live, authority);
   }
   return live;
 }
-async function trySyncTurnRequestLivePlacement(request) {
-  try {
-    return { runDirectory: await syncTurnRequestLivePlacement(request) };
-  } catch (resolveError) {
-    return { resolveError };
-  }
-}
 async function retainPackageFaultBesideLivePlacement(request, input) {
-  const live = await trySyncTurnRequestLivePlacement(request);
-  if ("resolveError" in live) {
-    const resolveDiagnostic = `live run path resolve failed beside fault: ${describeErrorIdentity(live.resolveError)}`;
+  let runDirectory = request.runDirectory;
+  if (!existsSync4(runDirectory)) {
     try {
-      process.stderr.write(`${input.diagnostic}
+      const found = await resolveLiveRunDirectoryPath(request.runDirectory, request.home);
+      if (found === void 0) {
+        const resolveDiagnostic = `live run path resolve failed beside fault: admitted run missing under ${request.home}`;
+        try {
+          process.stderr.write(`${input.diagnostic}
 `);
-      process.stderr.write(`${resolveDiagnostic}
+          process.stderr.write(`${resolveDiagnostic}
 `);
-    } catch {
+        } catch {
+        }
+        return;
+      }
+      runDirectory = found;
+    } catch (resolveError) {
+      const resolveDiagnostic = `live run path resolve failed beside fault: ${describeErrorIdentity(resolveError)}`;
+      try {
+        process.stderr.write(`${input.diagnostic}
+`);
+        process.stderr.write(`${resolveDiagnostic}
+`);
+      } catch {
+      }
+      return;
     }
-    return;
   }
   await retainPackageFault({
-    runDirectory: live.runDirectory,
+    runDirectory,
     diagnostic: input.diagnostic,
     ...Object.hasOwn(input, "error") ? { error: input.error } : {}
   });
@@ -17442,6 +17611,7 @@ import { dirname as dirname10, join as join14 } from "node:path";
 function createSessionIdentityAuthority(authority, hostName) {
   const runDirectoryOf = (principal) => dirname10(authority.decode(principal).sessionDirectory);
   return {
+    principalAuthority: authority,
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;
     },
@@ -17806,7 +17976,7 @@ function createPiRoleTurnHost(config) {
         ...request.signal === void 0 ? {} : { signal: request.signal }
       });
       try {
-        await syncTurnRequestLivePlacement(request);
+        await syncTurnRequestLivePlacement(request, config.principalAuthority);
         const { sessionFile, sessionDirectory } = config.principalAuthority.decode(request.principal);
         const sessionId = await readPiSessionHeaderId(sessionFile);
         if (sessionId !== void 0) {
@@ -18114,31 +18284,6 @@ var init_role_seat_runtime = __esm({
   }
 });
 
-// src/report-ticket-tool.ts
-var reportTicketArgsSchema, MISSING_TICKET_REASK_MATERIAL;
-var init_report_ticket_tool = __esm({
-  "src/report-ticket-tool.ts"() {
-    "use strict";
-    init_build();
-    init_host_contracts();
-    init_durable_principal();
-    init_invocation();
-    init_role_run_placement();
-    init_run_dossier();
-    init_run_ticket_number();
-    init_unknown_value();
-    reportTicketArgsSchema = typebox_exports.Object(
-      {
-        ticketNumber: typebox_exports.Unknown({
-          description: "\u672C\u7968\u53F7\uFF08\u6B63\u6574\u6570\u3001\u6570\u5B57\u4E32\u6216\u524D\u5BFC #N\uFF09\u3002\u5DF2\u77E5\u7968\u53F7\u65F6\u5F00\u5DE5\u5373\u62A5\uFF1B\u5C1A\u65E0\u7968\u53F7\u65F6\u4E0D\u8981\u8C03\u7528\u3002"
-        })
-      },
-      { additionalProperties: true }
-    );
-    MISSING_TICKET_REASK_MATERIAL = "resources/missing-ticket-reask.md";
-  }
-});
-
 // src/session-opening-materials.ts
 import { existsSync as existsSync8 } from "node:fs";
 import { readFile as readFile9 } from "node:fs/promises";
@@ -21025,16 +21170,7 @@ var init_compliance_transport = __esm({
 });
 
 // src/role-run-relocation.ts
-import { dirname as dirname14, join as join22, sep as sep4 } from "node:path";
-function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
-  if (typeof value !== "string") return value;
-  if (value === oldRunDirectory) return newRunDirectory;
-  const prefix = `${oldRunDirectory}${sep4}`;
-  if (value.startsWith(prefix)) {
-    return `${newRunDirectory}${value.slice(oldRunDirectory.length)}`;
-  }
-  return value;
-}
+import { dirname as dirname14, join as join22 } from "node:path";
 async function retainedRunPathsMatch(recordedPath, currentPath, currentRunDirectory) {
   if (recordedPath === currentPath) return true;
   if (typeof recordedPath !== "string") return false;
@@ -21062,102 +21198,17 @@ async function retainedRunPathsMatch(recordedPath, currentPath, currentRunDirect
   }
   return false;
 }
-function rewriteRunDirectoryPathValueAgainstRewrites(value, rewrites) {
-  if (typeof value !== "string" || rewrites.length === 0) return value;
-  let best;
-  for (const rewrite of rewrites) {
-    if (value === rewrite.oldRunDirectory || value.startsWith(`${rewrite.oldRunDirectory}${sep4}`)) {
-      if (best === void 0 || rewrite.oldRunDirectory.length > best.oldRunDirectory.length) {
-        best = rewrite;
-      }
-    }
-  }
-  if (best === void 0) return value;
-  return rewriteRunDirectoryPathValue(
-    value,
-    best.oldRunDirectory,
-    best.newRunDirectory
-  );
-}
-function rewriteRunDirectoryPathFields(record, fields, oldRunDirectory, newRunDirectory) {
-  rewriteRunDirectoryPathFieldsAgainstRewrites(record, fields, [
-    { oldRunDirectory, newRunDirectory }
-  ]);
-}
-function rewritePrincipalSessionPaths(principal, oldRunDirectory, newRunDirectory) {
-  rewriteRunDirectoryPathFields(
-    principal,
-    PRINCIPAL_SESSION_PATH_FIELDS,
-    oldRunDirectory,
-    newRunDirectory
-  );
-}
-function projectTurnRequestLiveRunDirectory(request, newRunDirectory) {
-  const old = request.runDirectory;
-  if (old === newRunDirectory) return;
-  request.runDirectory = newRunDirectory;
-  rewritePrincipalSessionPaths(
-    request.principal,
-    old,
-    newRunDirectory
-  );
-}
-function rewriteRunDirectoryPathFieldsAgainstRewrites(record, fields, rewrites) {
-  for (const field of fields) {
-    if (field in record) {
-      record[field] = rewriteRunDirectoryPathValueAgainstRewrites(
-        record[field],
-        rewrites
-      );
-    }
-  }
-}
-function rewriteSourceRunLocator(value, rewrites) {
-  if (!isRecord(value)) return;
-  rewriteRunDirectoryPathFieldsAgainstRewrites(
-    value,
-    SOURCE_RUN_LOCATOR_FIELDS,
-    rewrites
-  );
-}
-function rewriteAdmittedRoleRunPage(page, rewrites) {
-  rewriteRunDirectoryPathFieldsAgainstRewrites(page, ADMITTED_PAGE_FIELDS, rewrites);
-  rewriteSourceRunLocator(page.sourceRun, rewrites);
-  if (isRecord(page.principal)) {
-    rewriteRunDirectoryPathFieldsAgainstRewrites(
-      page.principal,
-      PRINCIPAL_SESSION_PATH_FIELDS,
-      rewrites
-    );
-  }
-}
-var ADMITTED_PAGE_FIELDS, PRINCIPAL_SESSION_PATH_FIELDS, SOURCE_RUN_LOCATOR_FIELDS;
 var init_role_run_relocation = __esm({
   "src/role-run-relocation.ts"() {
     "use strict";
     init_activation_ledger_topology();
+    init_compliance_transport();
     init_run_lifecycle();
     init_role_run_placement();
-    init_compliance_transport();
+    init_role_run_path_rewrite();
     init_run_dossier();
     init_unknown_value();
-    ADMITTED_PAGE_FIELDS = [
-      "runDirectory",
-      "admittedRequestPath",
-      // pre-#1161 pages only
-      "sessionDirectory",
-      "sessionFile",
-      // #1165/#1168: caller file-flag paths (requestManifestPath, prerequisitesPath)
-      // stay as given. Obsolete copy fields (taskPath/packetPath) are not rewritten —
-      // stock volumes keep their bytes; live relocate no longer maintains them.
-      "mergerInputPath",
-      "sourceRunPath"
-    ];
-    PRINCIPAL_SESSION_PATH_FIELDS = [
-      "sessionDirectory",
-      "sessionFile"
-    ];
-    SOURCE_RUN_LOCATOR_FIELDS = ["runDirectory"];
+    init_role_run_path_rewrite();
   }
 });