@akagilnc/pi-workflow-roles 0.1.5762 → 0.1.5797

package/dist/migrate-book-topology.js

@@ -958,6 +958,12 @@ import { basename as basename3, dirname as dirname3, join as join2 } from "node:
 function resolveSitianVolumeCategory(kind) {
   return kind;
 }
+function runDirectoryOwningSessionParent(sessionParentDir) {
+  if (basename3(sessionParentDir) !== "session") return void 0;
+  const runDirectory = dirname3(sessionParentDir);
+  if (parseRunLeaf(basename3(runDirectory)) === void 0) return void 0;
+  return runDirectory;
+}
 function sitianVolumeDirectory(sessionDirectory, category) {
   return join2(sessionDirectory, category);
 }
@@ -989,8 +995,8 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
     const sessionParentDir = dirname3(input.sessionParent);
-    const runDirectory = dirname3(sessionParentDir);
-    if (basename3(sessionParentDir) === "session" && parseRunLeaf(basename3(runDirectory)) !== void 0) {
+    const runDirectory = runDirectoryOwningSessionParent(sessionParentDir);
+    if (runDirectory !== void 0) {
       sessionDir = runDirectory;
       recordFile = join2(runDirectory, RUN_HISTORY_KINDS.has(input.kind) ? RUN_HISTORY_FILE : RUN_STATE_KINDS.has(input.kind) ? RUN_STATE_FILE : RUN_LOG_FILE);
     } else {
@@ -1183,7 +1189,9 @@ function render(runDirectory, history, state, log, unreadable) {
       original = payload.landingPath;
     }
   }
-  if (typeof original === "string") original = join3(runDirectory, "session", basename4(original));
+  if (typeof original === "string") {
+    original = join3(sessionDirectoryOf(runDirectory), basename4(original));
+  }
   whole.host = { sessions, ...original === void 0 ? {} : { original } };
   whole.submission = latest === void 0 ? {} : { latest };
   if (Object.keys(unreadable).length > 0) whole.unreadable = unreadable;
@@ -9455,9 +9463,8 @@ var init_packaged_role_registry = __esm({
         bareCommand: false,
         outputTool: NOTARY_OUTPUT_TOOL_NAME,
         settlement: "accepted",
-        /** Court reask replaces the initial prompt. Otherwise the fixed kickoff. */
+        /** Dialogue via shared resolveReviewSeatDialogueBody (review = fixed dispatch). */
         reaskPrompt: true,
-        transportPrompt: "fixed-kickoff",
         gateStageLabel: "\u7B26\u5B9D\u90CE",
         /** Gate summon binds --source-run and keeps dialogue off the argv. */
         gateSummon: "source-run",
@@ -9480,6 +9487,8 @@ var init_packaged_role_registry = __esm({
         phases: [null],
         outputTool: COUNTERSIGN_OUTPUT_TOOL_NAME,
         settlement: "accepted",
+        /** Same shared dialogue resolver as other review seats (#1208 C1). */
+        reaskPrompt: true,
         gateStageLabel: "\u7ED9\u4E8B\u4E2D",
         /** Gate summon carries the parent payload as the instruction and a parent run id. */
         gateSummon: "parent-instruction",
@@ -10175,7 +10184,7 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
   );
 }
 async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-  const sessionRoot = join6(pagesDirectory, "session");
+  const sessionRoot = sessionDirectoryOf(pagesDirectory);
   async function walk(directory) {
     let entries;
     try {
@@ -10272,13 +10281,30 @@ var init_role_run_relocation = __esm({
   }
 });
 
-// src/sha256.ts
-import { createHash } from "node:crypto";
-function sha256Hex(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-var init_sha256 = __esm({
-  "src/sha256.ts"() {
+// src/sitian-facade.ts
+var init_sitian_facade = __esm({
+  "src/sitian-facade.ts"() {
+    "use strict";
+    init_role_run_placement();
+    init_sitian_appender();
+    init_sitian_contracts();
+    init_sitian_appender();
+    init_sitian_reader();
+  }
+});
+
+// src/host-session-record.ts
+var init_host_session_record = __esm({
+  "src/host-session-record.ts"() {
+    "use strict";
+    init_sitian_facade();
+    init_unknown_value();
+  }
+});
+
+// src/host-contracts.ts
+var init_host_contracts = __esm({
+  "src/host-contracts.ts"() {
     "use strict";
   }
 });
@@ -10327,6 +10353,32 @@ var init_terminating_tools = __esm({
   }
 });
 
+// src/ticket-progress.ts
+var init_ticket_progress = __esm({
+  "src/ticket-progress.ts"() {
+    "use strict";
+    init_host_session_record();
+    init_host_contracts();
+    init_terminating_tools();
+    init_packaged_role_registry();
+    init_role_run_placement();
+    init_run_dossier();
+    init_sitian_reader();
+    init_unknown_value();
+  }
+});
+
+// src/sha256.ts
+import { createHash } from "node:crypto";
+function sha256Hex(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_sha256 = __esm({
+  "src/sha256.ts"() {
+    "use strict";
+  }
+});
+
 // src/doctor-evidence.ts
 var init_doctor_evidence = __esm({
   "src/doctor-evidence.ts"() {
@@ -10381,18 +10433,6 @@ var init_session_dialogue = __esm({
   }
 });
 
-// src/sitian-facade.ts
-var init_sitian_facade = __esm({
-  "src/sitian-facade.ts"() {
-    "use strict";
-    init_role_run_placement();
-    init_sitian_appender();
-    init_sitian_contracts();
-    init_sitian_appender();
-    init_sitian_reader();
-  }
-});
-
 // src/ticket-provenance.ts
 var init_ticket_provenance = __esm({
   "src/ticket-provenance.ts"() {
@@ -10772,8 +10812,8 @@ var init_option_definitions = __esm({
         repeatable: false,
         form: "option",
         description: {
-          en: "Required source run locator (runId@role under the book home, or path to that run directory). Zero prompt/attachment projection.",
-          zh: "\u5FC5\u586B\u6E90 run \u5B9A\u4F4D\u7B26\uFF08\u7C3F\u5185 runId@role\uFF0C\u6216\u8BE5 run \u76EE\u5F55\u8DEF\u5F84\uFF09\u3002\u96F6 prompt/\u9644\u4EF6\u6295\u5F71\u3002"
+          en: "Required source run locator (runId@role under the book home, or path to that run directory). Binds the audited identity; review dialogue is the fixed Notary dispatch (verdict stays in the ledger). Missing-ticket and unreadable-status reasks keep their existing diagnostic text.",
+          zh: "\u5FC5\u586B\u6E90 run \u5B9A\u4F4D\u7B26\uFF08\u7C3F\u5185 runId@role\uFF0C\u6216\u8BE5 run \u76EE\u5F55\u8DEF\u5F84\uFF09\u3002\u7ED1\u5B9A\u53D7\u5BA1\u8EAB\u4EFD\uFF1B\u5BA1\u7A3F\u5BF9\u8BDD\u4E3A\u7B26\u5B9D\u90CE\u56FA\u5B9A\u6D3E\u5355\u6587\uFF08\u5224\u8BCD\u7559\u5728\u5377\u5B97\u81EA\u884C\u8BFB\u53D6\uFF09\u3002\u7F3A\u7968\u53F7\u4E0E\u8BFB\u4E0D\u51FA status \u7684\u91CD\u4EA4\u4ECD\u9012\u65E2\u6709\u8BCA\u65AD\u539F\u6587\u3002"
         }
       }
     ];
@@ -11107,7 +11147,7 @@ var init_option_definitions = __esm({
       },
       notary: {
         command: "notary",
-        summary: "Direct Notary summons; duties: souls/notary.md. Zero prompt/attachment.",
+        summary: "Direct Notary summons; duties: souls/notary.md. Review uses fixed dispatch \u2014 binds --source-run identity; does not accept caller review prompt; verdict stays in the ledger. Missing-ticket (#1171) and unreadable-status reasks deliver their existing diagnostic text on the same seat, not the review sentence.",
         usage: ["ak-role notary --source-run <runId@role|path> [options]"],
         examples: [
           "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@judge",
@@ -11168,7 +11208,7 @@ var init_option_definitions = __esm({
       },
       resume: {
         command: "resume",
-        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. Every callable seat, including Notary/\u7B26\u5B9D\u90CE, accepts the optional caller message and passes it through unchanged as the continuation prompt. Notary explicit new still accepts only its source-run locator, not a caller prompt. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
+        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. Every callable seat accepts the optional caller message and passes it through unchanged as the continuation prompt. Notary new/direct review calls use only --source-run plus the fixed review dispatch (no caller review prompt); public manual resume still passes the caller message. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
         usage: ["ak-role resume <runId> [message]"],
         examples: [
           "ak-role resume 01abc\u2026",
@@ -11204,6 +11244,7 @@ var init_invocation = __esm({
     init_activation_ledger_topology();
     init_activation_ledger_git();
     init_role_run_placement();
+    init_ticket_progress();
     init_packaged_role_registry();
     init_run_ticket_number();
     init_role_run_relocation();

package/dist/navigator-attendance.js

@@ -268,7 +268,7 @@ function createNavigatorAttendance(options) {
         await promptAllowingRejectedPrepare(request);
         while (output === void 0 && prepareBatchRejected && delivery.nextAction() === "request-delivery") {
           delivery.recordDeliveryRequest();
-          await promptAllowingRejectedPrepare(JSON.stringify(delivery.deliveryState()));
+          await promptAllowingRejectedPrepare(request);
         }
         if (output === void 0 && delivery.nextAction() === "request-delivery") {
           delivery.closeBudget();

package/dist/packaged-role-registry.js

@@ -267,9 +267,8 @@ const PUBLIC_ROLE_RECORDS = [
     bareCommand: false,
     outputTool: NOTARY_OUTPUT_TOOL_NAME,
     settlement: "accepted",
-    /** Court reask replaces the initial prompt. Otherwise the fixed kickoff. */
+    /** Dialogue via shared resolveReviewSeatDialogueBody (review = fixed dispatch). */
     reaskPrompt: true,
-    transportPrompt: "fixed-kickoff",
     gateStageLabel: "\u7B26\u5B9D\u90CE",
     /** Gate summon binds --source-run and keeps dialogue off the argv. */
     gateSummon: "source-run",
@@ -292,6 +291,8 @@ const PUBLIC_ROLE_RECORDS = [
     phases: [null],
     outputTool: COUNTERSIGN_OUTPUT_TOOL_NAME,
     settlement: "accepted",
+    /** Same shared dialogue resolver as other review seats (#1208 C1). */
+    reaskPrompt: true,
     gateStageLabel: "\u7ED9\u4E8B\u4E2D",
     /** Gate summon carries the parent payload as the instruction and a parent run id. */
     gateSummon: "parent-instruction",

package/dist/pi/role-turn-host.js

@@ -336,7 +336,9 @@ export function createPiRoleTurnHost(config) {
             const roleEntry = await realpath(resolveInternalRoleEntrypoint(config.packageRoot));
             const extraArgs = buildPiTurnExtraArgs(turnRequest, config.principalAuthority, config.extraPiArgs ?? []);
             const args = buildExplicitInternalActivationArgs(roleEntry, extraArgs);
-            const stdin = encodeUserDialogueStdin(piUserDialogueBody(turnRequest));
+            const transportBody = piUserDialogueBody(turnRequest);
+            // #1199: progress instruction is these same body bytes (actual seat input).
+            const stdin = encodeUserDialogueStdin(transportBody);
             // Shared envelope isolates this call's court identity: omitting courtAttemptId
             // must not inherit a parent process.env.AK_ROLE_COURT_ATTEMPT (#637).
             const env = {
@@ -362,6 +364,9 @@ export function createPiRoleTurnHost(config) {
                 delete env.AK_ROLE_HOST;
             else
                 env.AK_ROLE_HOST = request.host.trim();
+            // #1199: 传召词 is unknown-length body — never argv/env (execve ARG_MAX / E2BIG).
+            // Typed stdin envelope carries dialogue + optional progress 传召词.
+            delete env.AK_ROLE_SUMMONS_INSTRUCTION;
             // #1132: the one effective delivery-request ceiling travels to the child
             // on its own env so the in-child role runtime and the worker submission
             // gate count with the same configured number the AK seam resolved. Omit

package/dist/public-cli/instruction-seat-run.js

@@ -29,7 +29,7 @@ import { CliUsageError } from "./cli-errors.js";
 import { admitPublicRole, admittedSourceRunPath, bindAdmittedTicketNumber, appendCallerFileFlagPaths, buildInstructionTransportPrompt, materializeCountersignInvocation, persistAdmittedAuditedSubmissionToolCallId, persistAdmittedSourceRunPath, readAdmittedAuditedSubmissionToolCallId, recordAdmittedCorrelation, recordChildDiaristRun, relocateAdmittedRunToTicket, } from "./invocation.js";
 import { bindDiaristAssertedTicketNumber, presentControlledFailure, packageFaultNoteFor, prepareSummonsResumeMaterials, roleTurnOptions, runPostAdmissionOneShot, runPostAdmissionResumable, runPostAdmissionSeatResume, showResumeErrorPointer, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { presentTerminal } from "./auto-resume.js";
-import { buildAutoResumeContinuationPrompt, loadResumablePublicRole, markRunAdmitted, readCurrentCourt, } from "./run-lifecycle.js";
+import { loadResumablePublicRole, markRunAdmitted, readCurrentCourt, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { presentStructuralRejection, readBoundSessionEntries, trySettlePublicSeat, } from "./settlement.js";
 import { warnMissingMethodSkills } from "./machine-method-skills.js";
@@ -49,6 +49,20 @@ const POST_SUBMISSION_ROUTING = {
     judge: {
         statuses: REVIEW_QUEUE_STATUSES,
     },
+    // #1208 C1 / ADR 0055: every review-queue seat uses the shared
+    // unreadable-status seam (officerConclusionReask). Independent public
+    // entry for notary/auditor/inspector was the same miss — route here, do
+    // not invent a parallel loop. Gate summons still own the outer budget
+    // via nestedIncomplete when this seat exhausts unsettled.
+    notary: {
+        statuses: REVIEW_QUEUE_STATUSES,
+    },
+    auditor: {
+        statuses: REVIEW_QUEUE_STATUSES,
+    },
+    inspector: {
+        statuses: REVIEW_QUEUE_STATUSES,
+    },
     coder: {
         statuses: WORKER_ROUTING_STATUSES,
         reask: WORKER_STATUS_REASK,
@@ -160,10 +174,13 @@ async function reaskUnreadablePostSubmissionStatus(admitted, terminal, env, io,
     const next = withUnreadableReask(env);
     if (next === undefined)
         return UNREADABLE_REASK_EXHAUSTED;
+    // Named status-reask: summons opens a new court; message carries the diagnostic
+    // (not arbitrary summons.instruction passthrough through the review resolver).
     return runPublicInstructionSeatResume({
         runId: admitted.runId,
         runDirectory: admitted.runDirectory,
-        summons: { instruction: message },
+        message,
+        summons: { instructionEmpty: true },
     }, next, io);
 }
 /**
@@ -201,10 +218,13 @@ async function reaskMissingTicketOnce(admitted, terminal, env, io) {
         softTicketReaskTurn: true,
         softTicketReaskOwnership,
     };
+    // Named #1171 missing-ticket: summons opens a new court; message carries the
+    // package reask copy (not arbitrary summons.instruction passthrough).
     const result = await runPublicInstructionSeatResume({
         runId: admitted.runId,
         runDirectory: admitted.runDirectory,
-        summons: { instruction },
+        message: instruction,
+        summons: { instructionEmpty: true },
     }, softReaskEnv, io);
     if (softTicketReaskOwnership.sealedSubstitute
         || terminalCarriesSealedSubmission(result.terminal)) {
@@ -323,8 +343,8 @@ export function buildInstructionSeatTurnRequest(admitted, options) {
 }
 /**
  * Direct review-seat call: reconnect ledger peer-body delivery (ADR 0085 / #1166).
- * Gate summons already ride gateReviewInstruction; direct --source-run must not
- * leave a blank fixed-kickoff.
+ * Gate summons already ride gateReviewInstruction; direct --source-run falls
+ * through the shared dialogue resolver (notary: fixed dispatch).
  */
 async function loadLedgerPeerBody(sourceRunDirectory, projectRoot, home) {
     const runId = runIdFromRunDirectory(sourceRunDirectory);
@@ -344,40 +364,50 @@ async function loadLedgerPeerBody(sourceRunDirectory, projectRoot, home) {
         return undefined;
     return readableGateItem(latest.accepted);
 }
-/** Owner-approved fixed Notary dispatch (2026-10-09); never the parent verdict. */
+/** Owner-approved fixed Notary review dispatch (2026-10-09 #1208); never the parent verdict. */
 export const NOTARY_FIXED_DISPATCH = "请审本轮受审对象，按符宝郎职掌交卷。";
 /**
  * One delivery rule for review-seat dialogue on new turns and same-parent resume
- * (#1166 / ADR 0085 / ADR 0087): explicit reask → non-empty caller dispatch →
- * source-only ledger peer body. Identity stays in startup materials.
- * #1195: ticket-court notary skips peer-body preload (countersign source only) and
- * receives the fixed dispatch instead (codex rejects an empty prompt).
+ * (#1166 / ADR 0085 / ADR 0087 / #1208): notary review uses fixed dispatch;
+ * named operational reasks ride reviewReask (first-mint / gate) or the resume
+ * request message seam — never arbitrary non-empty caller/summons passthrough.
+ * Other seats prefer format reask, then gate body, then caller dispatch, then
+ * ledger peer. Identity stays in startup materials. Notary never takes
+ * gate/parent verdict as dialogue (gateReviewInstruction stays unread for notary).
  */
-async function resolveReviewSeatDialogueBody(input) {
-    const reask = input.reask;
-    if (reask !== undefined && reask.length > 0)
-        return reask;
+export async function resolveReviewSeatDialogueBody(input) {
+    // #1208: fixed sentence is the review function only (owner 37bfe80d /
+    // 393daf98). reviewReask is the named operational override; caller/summons
+    // body is not a free passthrough (countersign rejected that prescription).
+    if (input.role === "notary") {
+        if (input.reviewReask !== undefined)
+            return input.reviewReask;
+        return NOTARY_FIXED_DISPATCH;
+    }
+    const preferred = input.reviewReask ?? input.gateReviewInstruction;
+    if (preferred !== undefined && preferred.length > 0)
+        return preferred;
     const caller = input.callerInstruction ?? "";
     if (caller.length > 0)
         return caller;
     const sourceRunPath = admittedSourceRunPath(input)?.trim();
     if (sourceRunPath === undefined)
         return undefined;
-    if (input.role === "notary") {
-        const { isTicketCourtCountersignSource } = await import("../run-terminal-artifacts.js");
-        if (isTicketCourtCountersignSource(sourceRunPath))
-            return NOTARY_FIXED_DISPATCH;
-    }
     return await loadLedgerPeerBody(sourceRunPath, input.projectRoot, input.home);
 }
-async function resolveInitialPrompt(admitted, env) {
+/**
+ * Initial host prompt for this turn (#1199: progress instruction = these bytes).
+ */
+async function resolveInitialTurnPrompt(admitted, env) {
     const record = roleRecord(admitted.role);
     if ("reaskPrompt" in record && record.reaskPrompt === true) {
         const sourceRunPath = admittedSourceRunPath(admitted);
-        const reask = env.reviewReask ?? env.gateReviewInstruction;
         const body = await resolveReviewSeatDialogueBody({
             role: admitted.role,
-            ...(reask === undefined ? {} : { reask }),
+            ...(env.reviewReask === undefined ? {} : { reviewReask: env.reviewReask }),
+            ...(env.gateReviewInstruction === undefined
+                ? {}
+                : { gateReviewInstruction: env.gateReviewInstruction }),
             callerInstruction: admitted.instruction,
             ...(sourceRunPath === undefined ? {} : { sourceRunPath }),
             projectRoot: admitted.projectRoot,
@@ -486,20 +516,21 @@ async function dispatchAdmitted(admitted, env, io) {
         if (activeEnv.correlationId !== undefined && activeEnv.correlationId.trim() !== "") {
             await recordAdmittedCorrelation(admitted, activeEnv.correlationId);
         }
-        const initialPromptText = await resolveInitialPrompt(admitted, activeEnv);
+        const initialPrompt = await resolveInitialTurnPrompt(admitted, activeEnv);
         const auto = "inCallAutoResume" in record && record.inCallAutoResume === true;
         if (auto) {
+            // #1208: auto-resume resends this turn's actual content, never a filler phrase.
             return await runPostAdmissionResumable({
                 admitted,
                 env: activeEnv,
                 io: turnIo,
                 buildInitialRequest: () => buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                     kind: "initial",
-                    prompt: initialPromptText,
+                    prompt: initialPrompt,
                 })),
                 buildResumeRequest: () => buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                     kind: "resume",
-                    prompt: buildAutoResumeContinuationPrompt(),
+                    prompt: initialPrompt,
                 })),
                 adapters,
                 ...(activeEnv.engine === undefined ? {} : { effectiveEngine: activeEnv.engine }),
@@ -511,7 +542,7 @@ async function dispatchAdmitted(admitted, env, io) {
             io: turnIo,
             request: buildInstructionSeatTurnRequest(admitted, roleTurnOptions(activeEnv, admitted, {
                 kind: "initial",
-                prompt: initialPromptText,
+                prompt: initialPrompt,
             })),
             adapters,
             ...(activeEnv.engine === undefined ? {} : { effectiveEngine: activeEnv.engine }),
@@ -607,22 +638,31 @@ function resumeSameParentInstructionSeat(input) {
         ...(input.ticketNumber === undefined ? {} : { ticketNumber: input.ticketNumber }),
         freshSummons: input.env.freshSummons,
         summons: input.summons,
-        resume: (runId, materials, runDirectory) => runPublicInstructionSeatResume({
-            runId,
-            runDirectory,
-            ...(materials === undefined ? {} : { summons: materials }),
-        }, input.env, input.io),
+        resume: (runId, materials, runDirectory) => {
+            // Named operational reask on this summon: explicit message seam.
+            // Review dialogue stays on summons → shared resolver (notary: fixed).
+            // Do not stuff reask into summons.instruction for later passthrough.
+            const reask = input.env.reviewReask;
+            return runPublicInstructionSeatResume({
+                runId,
+                runDirectory,
+                ...(reask === undefined ? {} : { message: reask }),
+                ...(materials === undefined ? {} : { summons: materials }),
+            }, input.env, input.io);
+        },
     });
 }
 /**
- * Same delivery rule as resolveInitialPrompt for same-parent resume summons.
- * Reask / explicit caller text / source-only ledger peer — one authority.
+ * Same delivery rule as resolveInitialTurnPrompt for same-parent resume summons.
+ * Shared resolver owns the input choice — callers only pass env fields.
  */
 async function sameParentDialogue(env, fallback, sourceRunPath, projectRoot, role) {
-    const reask = env.reviewReask ?? env.gateReviewInstruction;
     const body = await resolveReviewSeatDialogueBody({
         role,
-        ...(reask === undefined ? {} : { reask }),
+        ...(env.reviewReask === undefined ? {} : { reviewReask: env.reviewReask }),
+        ...(env.gateReviewInstruction === undefined
+            ? {}
+            : { gateReviewInstruction: env.gateReviewInstruction }),
         callerInstruction: fallback.instruction,
         sourceRunPath,
         projectRoot,
@@ -638,15 +678,20 @@ async function sameParentDialogue(env, fallback, sourceRunPath, projectRoot, rol
  * then the same one-shot settlement as every other seat.
  */
 async function runCountersignBody(parsed, env, io) {
+    const projectRoot = resolve(parsed.project ?? env.cwd);
     const gateParentRunPath = typeof env.parentRunPath === "string" && env.parentRunPath.trim() !== ""
         ? env.parentRunPath
         : undefined;
     if (gateParentRunPath !== undefined) {
-        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction ?? "";
+        // #1208 C1: same shared dialogue resolver as every other same-parent seat.
+        const dialogue = await sameParentDialogue(env, {
+            instruction: parsed.instruction ?? "",
+            instructionEmpty: (parsed.instruction ?? "").length === 0,
+        }, gateParentRunPath, projectRoot, "countersign");
         const resumed = await resumeSameParentInstructionSeat({
             env,
             io,
-            projectRoot: resolve(parsed.project ?? env.cwd),
+            projectRoot,
             role: "countersign",
             parentRunPath: gateParentRunPath,
             ...(isSafePositiveTicketNumber(env.boundTicketNumber)
@@ -654,8 +699,8 @@ async function runCountersignBody(parsed, env, io) {
                 : {}),
             summons: {
                 sourceRunPath: gateParentRunPath,
-                instruction: resumeInstruction,
-                instructionEmpty: resumeInstruction.length === 0,
+                instruction: dialogue.instruction,
+                instructionEmpty: dialogue.instructionEmpty,
                 // #1166 J11: same-parent resume delivers this call's file-flag paths
                 // through the shared summons → appendCallerFileFlagPaths rule.
                 attachmentPaths: parsed.attachmentPaths ?? [],
@@ -691,14 +736,10 @@ async function runCountersignBody(parsed, env, io) {
                 await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
                 admitted = { ...admitted, sourceRunPath: gateParentRunPath };
             }
-            // #1166 J11: review-body branch must merge the same file-flag delivery as
-            // resolveInitialPrompt / resumeTurnRequestProjectionOptions — never body alone.
-            const reviewBody = env.reviewReask ?? env.gateReviewInstruction;
+            // #1208 C1 / #1166 J11: one shared initial-prompt seam (incl. file flags).
             const turnProjection = roleTurnOptions(env, admitted, {
                 kind: "initial",
-                prompt: reviewBody !== undefined
-                    ? appendCallerFileFlagPaths(reviewBody, admitted.attachments)
-                    : buildInstructionTransportPrompt(admitted),
+                prompt: await resolveInitialTurnPrompt(admitted, env),
             });
             const turnRequest = buildInstructionSeatTurnRequest(admitted, turnProjection);
             const result = await runPostAdmissionOneShot({
@@ -902,6 +943,10 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
         await persistAdmittedSourceRunPath(admitted, auditorSource, auditorSubject);
         admitted = { ...admitted, sourceRunPath: auditorSource };
     }
+    // #1208 C2: same helper as resume — known board ticket on the audited
+    // source binds and relocates before the missing-ticket soft reask can
+    // fire. True no-ticket sources stay unbound (#1171 asks once).
+    admitted = await inheritKnownTicketFromSource(admitted, env.principalAuthority);
     const runAdmitted = async () => {
         await markRunAdmitted(admitted, env.principalAuthority);
         if (role === "secretariat") {
@@ -946,6 +991,24 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
     }
     return runAdmitted();
 }
+/**
+ * #1208 C2: same as new source-locator admission — when this leg is still
+ * unbound, inherit the board ticket already on the audited source and relocate.
+ * True no-ticket sources stay unbound so #1171 still asks once.
+ */
+async function inheritKnownTicketFromSource(admitted, authority) {
+    if (admitted.ticketNumber !== undefined)
+        return admitted;
+    const sourcePath = admittedSourceRunPath(admitted);
+    if (sourcePath === undefined)
+        return admitted;
+    const sourceTicket = await readBoardTicketNumber(sourcePath);
+    if (sourceTicket === undefined)
+        return admitted;
+    await bindAdmittedTicketNumber(admitted, sourceTicket);
+    await relocateAdmittedRunToTicket(admitted, authority);
+    return admitted;
+}
 export async function runPublicInstructionSeatResume(request, env, io) {
     let selectedRequest = request;
     const resume = async () => {
@@ -960,24 +1023,48 @@ export async function runPublicInstructionSeatResume(request, env, io) {
             io: turnIo,
             load: async (effective) => {
                 const loaded = await loadResumablePublicRole(env.home, effective.runId, env.principalAuthority, effective.runDirectory === undefined ? undefined : { runDirectory: effective.runDirectory });
-                if (packagedRebindSourceOnResume(loaded.admitted.role)
+                let admitted = loaded.admitted;
+                if (packagedRebindSourceOnResume(admitted.role)
                     && effective.summons?.sourceRunPath !== undefined
                     && effective.summons.sourceRun !== undefined) {
-                    return {
-                        ...loaded,
-                        admitted: {
-                            ...loaded.admitted,
-                            sourceRunPath: effective.summons.sourceRunPath,
-                            sourceRun: effective.summons.sourceRun,
-                        },
+                    // source-locator seats only (notary); sourceRun is on that admission face.
+                    admitted = {
+                        ...admitted,
+                        sourceRunPath: effective.summons.sourceRunPath,
+                        sourceRun: effective.summons.sourceRun,
                     };
                 }
-                return loaded;
+                admitted = await inheritKnownTicketFromSource(admitted, env.principalAuthority);
+                return { ...loaded, admitted };
             },
             buildTurnRequest: async (admitted, effective) => {
                 const summonsPrepared = await prepareSummonsResumeMaterials(admitted.runDirectory, effective.summons);
+                const projection = resumeTurnRequestProjectionOptions(admitted, effective, env, summonsPrepared);
+                // #1208: internal summons only — shared resolver owns review dialogue.
+                // Public bare resume / explicit message keep projection (operational
+                // reasks use the message seam). Do not reselect stale env dialogue over
+                // this-round summons (#1208 R1).
+                if (effective.summons === undefined || effective.message !== undefined) {
+                    return buildInstructionSeatTurnRequest(admitted, { ...projection });
+                }
+                const sourceRunPath = admittedSourceRunPath(admitted);
+                const body = await resolveReviewSeatDialogueBody({
+                    role: admitted.role,
+                    callerInstruction: summonsPrepared?.instruction ?? "",
+                    ...(sourceRunPath === undefined ? {} : { sourceRunPath }),
+                    projectRoot: admitted.projectRoot,
+                    home: env.home,
+                });
+                if (body === undefined) {
+                    return buildInstructionSeatTurnRequest(admitted, { ...projection });
+                }
+                const fileFlags = summonsPrepared?.attachments ?? [];
+                const prompt = fileFlags.length === 0
+                    ? body
+                    : appendCallerFileFlagPaths(body, fileFlags);
                 return buildInstructionSeatTurnRequest(admitted, {
-                    ...resumeTurnRequestProjectionOptions(admitted, effective, env, summonsPrepared),
+                    ...projection,
+                    continuation: { kind: "resume", prompt },
                 });
             },
             adapters: {
@@ -1037,9 +1124,12 @@ async function queueConclusionFromChild(child, env, io) {
         return { stop: { exitCode: 0, ...(terminal === undefined ? {} : { terminal }) } };
     }
     let current = child;
-    // Notary, auditor, and inspector have no seat-local status reask. This loop
-    // is their one budget. The child resume keeps the caller's env so delivery,
-    // failure recovery, and other reask loops stay separate.
+    // #1208: review-queue gate children also have seat-local
+    // POST_SUBMISSION_ROUTING. This parent-side loop remains the
+    // gate/correlation budget; nestedIncomplete from an exhausted seat-local
+    // chain surfaces without a second spend. The child resume keeps the
+    // caller's env so delivery, failure recovery, and other reask loops
+    // stay separate.
     let budgetEnv = envForCourtContinue(env);
     for (;;) {
         const terminal = await trySettlePublicSeat(current, env.principalAuthority, { ...await readCurrentCourt(current.runDirectory), ...packageFaultScope(current, env, io) });
@@ -1177,7 +1267,8 @@ async function auditSubmittedRole(turn, env, io, resumedOfficer, passedReceipt)
         return runPublicInstructionSeatResume({
             runId: admitted.runId,
             runDirectory: admitted.runDirectory,
-            summons: { instruction: SECRETARIAT_STATUS_REASK },
+            message: SECRETARIAT_STATUS_REASK,
+            summons: { instructionEmpty: true },
         }, next, io);
     }
     if (admitted.role === "countersign" && (typeof status !== "string" || !REVIEW_QUEUE_STATUSES.has(status))) {
@@ -1192,7 +1283,8 @@ async function auditSubmittedRole(turn, env, io, resumedOfficer, passedReceipt)
         return runPublicInstructionSeatResume({
             runId: admitted.runId,
             runDirectory: admitted.runDirectory,
-            summons: { instruction: officerConclusionReask(status) },
+            message: officerConclusionReask(status),
+            summons: { instructionEmpty: true },
         }, next, io);
     }
     // Self-escalation is a valid open routing state for these seats only.