@akagilnc/pi-workflow-roles 0.1.5762 → 0.1.5797

package/dist/public-cli/option-definitions.js

@@ -509,8 +509,8 @@ const NOTARY_OPTIONS = [
         repeatable: false,
         form: "option",
         description: {
-            en: "Required source run locator (runId@role under the book home, or path to that run directory). Zero prompt/attachment projection.",
-            zh: "必填源 run 定位符（簿内 runId@role，或该 run 目录路径）。零 prompt/附件投影。",
+            en: "Required source run locator (runId@role under the book home, or path to that run directory). Binds the audited identity; review dialogue is the fixed Notary dispatch (verdict stays in the ledger). Missing-ticket and unreadable-status reasks keep their existing diagnostic text.",
+            zh: "必填源 run 定位符（簿内 runId@role，或该 run 目录路径）。绑定受审身份；审稿对话为符宝郎固定派单文（判词留在卷宗自行读取）。缺票号与读不出 status 的重交仍递既有诊断原文。",
         },
     },
 ];
@@ -1040,7 +1040,7 @@ const ROLE_COMMAND_HELP = {
     },
     notary: {
         command: "notary",
-        summary: "Direct Notary summons; duties: souls/notary.md. Zero prompt/attachment.",
+        summary: "Direct Notary summons; duties: souls/notary.md. Review uses fixed dispatch — binds --source-run identity; does not accept caller review prompt; verdict stays in the ledger. Missing-ticket (#1171) and unreadable-status reasks deliver their existing diagnostic text on the same seat, not the review sentence.",
         usage: ["ak-role notary --source-run <runId@role|path> [options]"],
         examples: [
             "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@judge",
@@ -1101,7 +1101,7 @@ const SUPPORT_COMMAND_HELP = {
     },
     resume: {
         command: "resume",
-        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. Every callable seat, including Notary/符宝郎, accepts the optional caller message and passes it through unchanged as the continuation prompt. Notary explicit new still accepts only its source-run locator, not a caller prompt. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
+        summary: "Resume a role run under the live seat table (model/host/engine); session principal must still exist. Every callable seat accepts the optional caller message and passes it through unchanged as the continuation prompt. Notary new/direct review calls use only --source-run plus the fixed review dispatch (no caller review prompt); public manual resume still passes the caller message. Global --model/--thinking/--host/--engine must be placed before <runId> (either before `resume` or between `resume` and <runId>); the one argv after <runId> is the opaque message, not a flag position (#471).",
         usage: ["ak-role resume <runId> [message]"],
         examples: [
             "ak-role resume 01abc…",

package/dist/public-cli/post-admission.js

@@ -7,7 +7,7 @@
  */
 import { randomUUID } from "node:crypto";
 import { writeFile } from "node:fs/promises";
-import { buildAutoResumeContinuationPrompt, findRunDirectoryById, resolveLiveRunDirectoryPath, readRoleRunState, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
+import { findRunDirectoryById, resolveLiveRunDirectoryPath, readRoleRunState, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { projectPublicTurnAxes } from "./turn-request.js";
 import { appendCallerFileFlagPaths, bindAdmittedTicketNumber, relocateAdmittedRunToTicket, } from "./invocation.js";
@@ -394,31 +394,26 @@ function settlementScopeForTurn(request) {
     };
 }
 /**
- * #1132: one 没交卷催交 turn, dispatched through the SAME settlement path as the
- * first turn.
+ * #1132 / #1208: one 没交卷催交 turn, dispatched through the SAME settlement path
+ * as the first turn.
  *
- * There is deliberately no second settlement implementation here. A delivery
- * turn is an ordinary host turn on this same run/session: this builds the
- * host-neutral resume request (the adapter's stored native session id, ADR 0082;
- * pi's existing delivery-state content reused verbatim — no new prompt wording,
- * no new host capability). The caller settles it through the same
- * `settleCompletedHostTurn` the first turn uses (ADR 0080): the runner/host
- * failure re-read, the shouldPresent gate, the fresh-seal check, open-court
- * cleanup, cancel re-reads, run-state persist, and the stderr mirror.
+ * A delivery turn is an ordinary host turn on this same run/session: this builds
+ * the host-neutral resume request (the adapter's stored native session id,
+ * ADR 0082). #1208: resend this turn's actual prompt — never substitute
+ * delivery-state / run-stats JSON for dialogue. Counts, rejections, and
+ * no_receipt facts stay on receiptDelivery / lifecycle settlement.
  *
  * The caller owns the live delivery policy; the request projects its next send.
  */
 /** Bare in-call催交 resume: hostSessionId absent; adapter is the sole load authority. */
 function buildReceiptDeliveryRequest(input) {
     const { request, receiptDelivery } = input;
+    // #1199: progress instruction is this turn's prompt (envelope books continuation.prompt).
     return {
         ...request,
         continuation: {
             kind: "resume",
-            prompt: JSON.stringify({
-                ...receiptDelivery.deliveryState(),
-                deliveryTurns: receiptDelivery.issuedDeliveryRequests() + 1,
-            }),
+            prompt: request.continuation.prompt,
         },
         deliveryRequestLimit: receiptDelivery.limit,
     };
@@ -1076,6 +1071,7 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
     const officerDialogue = isStationChildOfficerDialogue(admitted.role, env);
     const fileFlags = summonsPrepared?.attachments ?? [];
     let prompt;
+    // #1199: progress instruction = this prompt (actual seat input, file flags included).
     if (request.message !== undefined) {
         if (summonsPrepared !== undefined) {
             // #755: same-ticket review / open-court — caller words + caller file flags.
@@ -1099,8 +1095,8 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
             : appendCallerFileFlagPaths(body, fileFlags);
     }
     else if (request.summons !== undefined) {
-        // #879: same-ticket summons with no instruction (e.g. notary source-run binding
-        // only). Pointer is activation/sourceRun material — not dialogue content.
+        // Same-ticket summons without prepared dialogue. Notary review fills via
+        // resolveReviewSeatDialogueBody (#1208); other seats carry parent/caller words.
         prompt = "";
     }
     else {
@@ -1339,21 +1335,15 @@ export async function runPostAdmissionSeatResume(input) {
                 buildInitialPayload: () => ({ resumeTurn: false }),
                 buildResumePayload: () => ({ resumeTurn: true }),
                 toRequest: async (payload) => {
-                    // #840 r8 判词 class 2: this call-local retry must keep this
-                    // court's frozen summons / 交卷 body / attachments verbatim
-                    // (same object as firstTurn) and project only the minimal
-                    // host-needed resume trigger — never engine handbook material,
-                    // which would replace a 审核循环 same-ticket continuation with a bare outsourcing
-                    // 「重新读」 envelope (#755 contract, resumeTurnRequestProjectionOptions
-                    // above). RESUME_TRANSPORT_ENVELOPE is the same package-owned,
-                    // non-semantic trigger that projection already uses for a
-                    // same-ticket summons carrying no instruction/attachments.
+                    // #840 r8 / #1208: call-local retry keeps this court's frozen summons /
+                    // 交卷 body / attachments and resends the same turn prompt — never a
+                    // filler phrase or engine handbook substitute.
                     if (payload.resumeTurn && firstTurn !== undefined) {
                         return {
                             ...firstTurn,
                             continuation: {
                                 kind: "resume",
-                                prompt: RESUME_TRANSPORT_ENVELOPE,
+                                prompt: firstTurn.continuation.prompt,
                             },
                         };
                     }
@@ -1460,6 +1450,7 @@ async function writeResumeDiagnostic(runDirectory, runId, failure, role) {
  * entering; manual resume never re-admits.
  */
 export async function runPostAdmissionOneShot(input) {
+    // #1208: auto-resume resends this turn's actual prompt, never a filler phrase.
     return await runPostAdmissionResumable({
         admitted: input.admitted,
         env: input.env,
@@ -1469,7 +1460,7 @@ export async function runPostAdmissionOneShot(input) {
             ...input.request,
             continuation: {
                 kind: "resume",
-                prompt: buildAutoResumeContinuationPrompt(),
+                prompt: input.request.continuation.prompt,
             },
         }),
         adapters: input.adapters,

package/dist/public-cli/run-lifecycle.js

@@ -13,7 +13,7 @@ import { findRoleRunDirectory, listBookRunDirectories, parseRunLeaf, sessionFile
 import { isSafePositiveTicketNumber } from "../run-ticket-number.js";
 import { CliUsageError } from "./cli-errors.js";
 import { parseCollectorRepository } from "../collector-config.js";
-import { retainedRunPathsMatch, rewriteAdmittedRoleRunPage, rewriteRunDirectoryPathValue, } from "../role-run-relocation.js";
+import { retainedRunPathsMatch, rewriteAdmittedRoleRunPage, rewritePrincipalSessionPaths, } from "../role-run-relocation.js";
 import { packagedResumeSourcePath, packagedRoleMetadata, } from "../packaged-role-registry.js";
 import { admittedReviewerBaseFault, admittedSourceRunPath, recordEffectiveInvocationModel, requireAuthorityRef, isReviewerLens, normalizeAdmittedAttachment, } from "./invocation.js";
 import { readPageSync, writeSectionSync } from "../run-dossier.js";
@@ -23,23 +23,6 @@ import { isRecord, errorText, isEnoent } from "../unknown-value.js";
  * source: runWithAutoResumeLoop receives the effective value once per call.
  */
 export const AUTO_RESUME_LIMIT = 2;
-/**
- * Package-owned non-empty Chinese neutral resume transport (#959 / ADR 0073).
- * Used by:
- *   - auto-resume (all seats via buildAutoResumeContinuationPrompt) — required so
- *     hosts that reject empty stdin (codex) still receive a prompt.
- * Public manual resume forwards only the caller's bytes (#987).
- */
-export const RESUME_TRANSPORT_ENVELOPE = "继续。";
-/**
- * Auto-resume continuation only (#959 / ADR 0080).
- * Always non-empty Chinese neutral envelope. Engine / outsourcing material
- * rides startup readingMaterial (#1167), never this continuation.
- * Never call this from manual `ak-role resume`.
- */
-export function buildAutoResumeContinuationPrompt() {
-    return RESUME_TRANSPORT_ENVELOPE;
-}
 const WRITER_LOCK_FILE = "writer.lock";
 export async function writeRoleRunState(runDirectory, record) {
     const payload = { ...record, runDirectory };
@@ -153,10 +136,16 @@ async function readRoleRunStateDisk(runDirectory) {
         : runDirectory;
     const runDir = runDirectory;
     // Principal wire stays uninterpreted — authority owns legacy sessionFile fallback.
+    // #1199: leg-local session/ moves with the run-prefix rewrite.
+    const principalCoords = {
+        sessionDirectory: record.sessionDirectory,
+        ...(typeof record.sessionFile === "string" ? { sessionFile: record.sessionFile } : {}),
+    };
+    rewritePrincipalSessionPaths(principalCoords, storedRunDirectory, runDirectory);
     const principalWire = {
-        sessionDirectory: rewriteRunDirectoryPathValue(record.sessionDirectory, storedRunDirectory, runDirectory),
-        ...(typeof record.sessionFile === "string"
-            ? { sessionFile: rewriteRunDirectoryPathValue(record.sessionFile, storedRunDirectory, runDirectory) }
+        sessionDirectory: principalCoords.sessionDirectory,
+        ...(typeof principalCoords.sessionFile === "string"
+            ? { sessionFile: principalCoords.sessionFile }
             : {}),
     };
     const phase = record.phase === "plan" || record.phase === "apply"

package/dist/public-cli/turn-request.js

@@ -51,6 +51,9 @@ export function projectRoleTurnRequest(admitted, roleDetails, options) {
         ...(options.deliveryRequestLimit === undefined
             ? {}
             : { deliveryRequestLimit: options.deliveryRequestLimit }),
+        ...(options.host === undefined || options.host.trim() === ""
+            ? {}
+            : { host: options.host.trim() }),
     };
 }
 /**

package/dist/public-role-summons.js

@@ -351,13 +351,9 @@ async function summonGateOfficer(options) {
     home = homeFromRunDirectory(options.sourceRunDirectory);
   }
   let gateReviewInstruction;
-  if (options.reask === void 0 && options.submission !== void 0) {
-    const { isTicketCourtCountersignSource } = await import("./run-terminal-artifacts.js");
-    const blindTicketCourt = options.officer === "notary" && isTicketCourtCountersignSource(options.sourceRunDirectory);
-    if (!blindTicketCourt) {
-      const { readableGateItem } = await import("./readable-gate-item.js");
-      gateReviewInstruction = readableGateItem(options.submission);
-    }
+  if (options.reask === void 0 && options.submission !== void 0 && options.officer !== "notary") {
+    const { readableGateItem } = await import("./readable-gate-item.js");
+    gateReviewInstruction = readableGateItem(options.submission);
   }
   const { runIdFromRunDirectory } = await import("./run-terminal-artifacts.js");
   const parentRunId = runIdFromRunDirectory(options.sourceRunDirectory);
@@ -408,7 +404,14 @@ async function summonGateOfficer(options) {
     const parentTicket = await readBoardTicketNumber(options.sourceRunDirectory);
     const submittedTicket = isRecord(options.submission) ? options.submission.ticketNumber : void 0;
     const courtTicket = isSafePositiveTicketNumber(submittedTicket) ? submittedTicket : parentTicket;
-    const instruction = options.reask ?? gateReviewInstruction ?? "";
+    const { resolveReviewSeatDialogueBody } = await import("./public-cli/instruction-seat-run.js");
+    const instruction = await resolveReviewSeatDialogueBody({
+      role: options.officer,
+      ...options.reask === void 0 ? {} : { reviewReask: options.reask },
+      ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction },
+      projectRoot: options.cwd,
+      home
+    }) ?? "";
     return summonPublicRole({
       role: options.officer,
       argv: ["--project", options.cwd, "--", instruction],

package/dist/report-ticket-tool.js

@@ -102,6 +102,7 @@ export async function reportTicketFromHostContext(context, rawTicketNumber, auth
         if (process.env.AK_ROLE_RUN_DIR === runDirectory) {
             process.env.AK_ROLE_RUN_DIR = nextDirectory;
         }
+        // Leg-local session/: rewrite the open handle under the renamed run prefix.
         const projectedSessionFile = typeof priorSessionFile === "string" && priorSessionFile.trim() !== ""
             ? rewriteRunDirectoryPathValue(priorSessionFile, runDirectory, nextDirectory)
             : sessionFileOf(nextDirectory);
@@ -109,9 +110,8 @@ export async function reportTicketFromHostContext(context, rawTicketNumber, auth
             context.sessionManager.setSessionFile?.(projectedSessionFile);
         }
     };
-    const relocation = alreadyPlaced
-        ? undefined
-        : await relocateAdmittedRunToTicket(admitted, authority, { relocate: applyLiveHandles });
+    // Always enter relocate: unbound→rename+publish; already-on-ticket→publish leftover staging.
+    const relocation = await relocateAdmittedRunToTicket(admitted, authority, alreadyPlaced ? undefined : { relocate: applyLiveHandles });
     const nextDirectory = relocation?.newRunDirectory ?? admitted.runDirectory;
     if (relocation === undefined)
         applyLiveHandles(nextDirectory);

package/dist/role-run-placement.js

@@ -14,10 +14,20 @@ function parseRunLeaf(name) {
   if (at <= 0 || at === name.length - 1) return void 0;
   return { runId: name.slice(0, at), role: name.slice(at + 1) };
 }
+const ROLE_RUN_SESSION_FILENAME = "session.jsonl";
+function subjectDirectoryOfRun(runDirectory) {
+  const runsParent = dirname(runDirectory);
+  if (basename(runsParent) !== "runs") return void 0;
+  const subjectDirectory = dirname(runsParent);
+  const subjectName = basename(subjectDirectory);
+  if (subjectName === "unbound" || /^[1-9]\d*$/.test(subjectName)) {
+    return subjectDirectory;
+  }
+  return void 0;
+}
 function sessionDirectoryOf(runDirectory) {
   return join(runDirectory, "session");
 }
-const ROLE_RUN_SESSION_FILENAME = "session.jsonl";
 function sessionFileIn(sessionDirectory) {
   return join(sessionDirectory, ROLE_RUN_SESSION_FILENAME);
 }
@@ -107,6 +117,7 @@ function ensureRoleRunDirectory(ledgerHome, directory) {
   return ensureRealDirectoryTree(ledgerHome, directory);
 }
 function ensureRoleRunPlacement(ledgerHome, placement) {
+  ensureRoleRunDirectory(ledgerHome, placement.runDirectory);
   ensureRoleRunDirectory(ledgerHome, placement.sessionDirectory);
 }
 export {
@@ -124,5 +135,6 @@ export {
   runDirectoryOfSessionFile,
   sessionDirectoryOf,
   sessionFileIn,
-  sessionFileOf
+  sessionFileOf,
+  subjectDirectoryOfRun
 };

package/dist/role-run-relocation.js

@@ -12,7 +12,7 @@ import { dirname, join } from "node:path";
 import { activationBookDirectory, physicalPathIdentity } from "./activation-ledger-topology.js";
 import { AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE } from "./compliance-transport.js";
 import { readRoleRunIdentity } from "./public-cli/run-lifecycle.js";
-import { roleRunPlacement } from "./role-run-placement.js";
+import { roleRunPlacement, sessionDirectoryOf } from "./role-run-placement.js";
 import { INVOCATION_PAGE_PATH_FIELDS, PRINCIPAL_SESSION_PATH_FIELDS, RUN_STATE_PAGE_PATH_FIELDS, projectTurnRequestLiveRunDirectory, rewriteAdmittedRoleRunPage, rewritePrincipalSessionPaths, rewriteRunDirectoryPathFields, rewriteRunDirectoryPathFieldsAgainstRewrites, rewriteRunDirectoryPathValue, rewriteRunDirectoryPathValueAgainstRewrites, rewriteSummonsMaterials, } from "./role-run-path-rewrite.js";
 import { readPageSync, updateSectionSync } from "./run-dossier.js";
 import { isEnoent, isRecord } from "./unknown-value.js";
@@ -215,7 +215,7 @@ async function rewriteSessionTranscriptBindings(path, rewrites) {
  * session transcript typed parent bindings. Never walks caller file paths.
  */
 async function rewriteNestedMachinePathPages(pagesDirectory, rewrites) {
-    const sessionRoot = join(pagesDirectory, "session");
+    const sessionRoot = sessionDirectoryOf(pagesDirectory);
     async function walk(directory) {
         let entries;
         try {

package/dist/run-dossier.js

@@ -19,7 +19,7 @@
 import { randomUUID } from "node:crypto";
 import { readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, join } from "node:path";
-import { sessionFileOf } from "./role-run-placement.js";
+import { sessionDirectoryOf, sessionFileOf } from "./role-run-placement.js";
 import { projectRenderedPagePaths } from "./role-run-path-rewrite.js";
 import { RUN_CURRENT_FILE, RUN_HISTORY_FILE, RUN_LOG_FILE, RUN_STATE_FILE, OFFICER_POINTER_RECORD_KIND } from "./run-dossier-files.js";
 import { appendSitianRecord } from "./sitian-appender.js";
@@ -181,9 +181,10 @@ function render(runDirectory, history, state, log, unreadable) {
         }
     }
     // The copy row keeps the absolute path it was written to; a run that was filed under its ticket
-    // since lives elsewhere. The original is projected from where this run directory is now.
-    if (typeof original === "string")
-        original = join(runDirectory, "session", basename(original));
+    // since lives elsewhere. The original is projected from where this run's session lands now.
+    if (typeof original === "string") {
+        original = join(sessionDirectoryOf(runDirectory), basename(original));
+    }
     whole.host = { sessions, ...(original === undefined ? {} : { original }) };
     whole.submission = latest === undefined ? {} : { latest };
     if (Object.keys(unreadable).length > 0)

package/dist/run-terminal-artifacts.js

@@ -99,10 +99,3 @@ export function runIdFromRunDirectory(runDirectory) {
 export function roleFromRunDirectory(runDirectory) {
     return parseRunLeaf(basename(runDirectory))?.role;
 }
-/**
- * #1195 ticket-court blind review: notary source is a countersign run.
- * Identity still binds; countersign body is not preloaded into dialogue.
- */
-export function isTicketCourtCountersignSource(runDirectory) {
-    return roleFromRunDirectory(runDirectory) === "countersign";
-}

package/dist/session-identity.js

@@ -1,5 +1,6 @@
-import { dirname, join } from "node:path";
+import { join } from "node:path";
 import { DEFAULT_ROLE_TURN_HOST, lookupHeadlessHostDescription, lookupHostDescription, } from "./host-descriptions.js";
+import { runDirectoryFromSessionDirectory } from "./role-run-placement.js";
 import { renderCurrentSync, RUN_STATE_FILE } from "./run-dossier.js";
 import { readSitianRecords, reportRunRecord } from "./sitian-facade.js";
 import { errorText, isRecord } from "./unknown-value.js";
@@ -14,7 +15,7 @@ export const HOST_SESSION_ID_RECORD_KIND = "host-session-id";
  * host/session failure (facts stay in state.jsonl; settlement still renders).
  */
 export function createSessionIdentityAuthority(authority, hostName) {
-    const runDirectoryOf = (principal) => dirname(authority.decode(principal).sessionDirectory);
+    const runDirectoryOf = (principal) => runDirectoryFromSessionDirectory(authority.decode(principal).sessionDirectory);
     return {
         principalAuthority: authority,
         resolveSessionFile(principal) {

package/dist/sitian-appender.js

@@ -1,7 +1,10 @@
 import { randomUUID } from "node:crypto";
 import { appendFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { parseRunLeaf, sessionDirectoryOf } from "./role-run-placement.js";
+import {
+  parseRunLeaf,
+  sessionDirectoryOf
+} from "./role-run-placement.js";
 import { RUN_HISTORY_FILE, RUN_HISTORY_KINDS, RUN_LOG_FILE, RUN_STATE_FILE, RUN_STATE_KINDS } from "./run-dossier-files.js";
 import { ticketNumberFromSitianSubject } from "./run-ticket-number.js";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
@@ -33,6 +36,12 @@ function appendSitianRecordBlock(input, block) {
 function resolveSitianVolumeCategory(kind) {
   return kind;
 }
+function runDirectoryOwningSessionParent(sessionParentDir) {
+  if (basename(sessionParentDir) !== "session") return void 0;
+  const runDirectory = dirname(sessionParentDir);
+  if (parseRunLeaf(basename(runDirectory)) === void 0) return void 0;
+  return runDirectory;
+}
 const SITIAN_RECORDS_LEAF = "records.jsonl";
 function sitianVolumeDirectory(sessionDirectory, category) {
   return join(sessionDirectory, category);
@@ -68,8 +77,8 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
     const sessionParentDir = dirname(input.sessionParent);
-    const runDirectory = dirname(sessionParentDir);
-    if (basename(sessionParentDir) === "session" && parseRunLeaf(basename(runDirectory)) !== void 0) {
+    const runDirectory = runDirectoryOwningSessionParent(sessionParentDir);
+    if (runDirectory !== void 0) {
       sessionDir = runDirectory;
       recordFile = join(runDirectory, RUN_HISTORY_KINDS.has(input.kind) ? RUN_HISTORY_FILE : RUN_STATE_KINDS.has(input.kind) ? RUN_STATE_FILE : RUN_LOG_FILE);
     } else {

package/dist/submission-ledger.js

@@ -9,6 +9,7 @@ import { failOnInfrastructureFailureDeclaration, infrastructureFailureDiagnostic
 import { reportTicketFromHostContext } from "./report-ticket-tool.js";
 import { REVIEW_SUBMISSION_OUTPUT_TOOL_NAME } from "./review-submission.js";
 import { readDeclaredTicketNumber } from "./run-ticket-number.js";
+import { captureWorktreeHead, landTicketProgressForSealedSubmission, } from "./ticket-progress.js";
 import { isRecord, errorText } from "./unknown-value.js";
 /**
  * Admitted run identity for the ledger subject.
@@ -294,6 +295,8 @@ export async function sealAcceptedSubmission(options) {
     const attemptId = attemptIdentity(options.context, runId);
     const sessionParent = sessionParentFromHostContext(options.context);
     const home = homeFromHostContext(options.context, options.home);
+    // #1199: same seal-time HEAD + progress landing as the terminating-tool wrap.
+    const sealHead = captureWorktreeHead(options.context.cwd);
     sitianReport({
         level: "event",
         kind: "sealed",
@@ -310,6 +313,12 @@ export async function sealAcceptedSubmission(options) {
         ...(home !== undefined ? { home } : {}),
         ...(sessionParent === undefined ? {} : { sessionParent }),
     });
+    landTicketProgressForSealedSubmission({
+        context: options.context,
+        role: options.role,
+        accepted: options.accepted,
+        sealHead,
+    });
 }
 /**
  * Submission ledger host — record only (#836).
@@ -457,6 +466,9 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                         kind: "accepted",
                         accepted: params,
                     };
+                    // #1199: seal-time HEAD + ticket progress before projectClosure.
+                    // One seal → one row; post-turn history guessing is not used.
+                    const sealHead = captureWorktreeHead(context.cwd);
                     append({
                         type: "sealed",
                         attemptId,
@@ -464,6 +476,18 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                         role,
                         accepted: params,
                     });
+                    const rawLens = typeof host.getFlag === "function"
+                        ? host.getFlag("ak-review-lens")
+                        : undefined;
+                    landTicketProgressForSealedSubmission({
+                        context,
+                        role,
+                        accepted: params,
+                        sealHead,
+                        ...(rawLens === "completeness" || rawLens === "correctness"
+                            ? { lens: rawLens }
+                            : {}),
+                    });
                     await projectClosure(closed, context);
                     return result;
                 },