@akagilnc/pi-workflow-roles 0.1.6017 → 0.1.6021

package/dist/public-cli/post-admission.js

@@ -684,31 +684,13 @@ export async function dispatchPostAdmissionTurn(input) {
             pendingTerminal !== undefined &&
             result.terminal === pendingTerminal) {
             try {
-                // #1171 F2-R2 / F2-R3 (#419) / F2-R5: only the soft-reask turn itself
-                // preserves the sealed terminal face. ticketReasksSpent is budget across
-                // rounds — after audit continue, ordinary no-volume turns publish
-                // no_receipt honestly. previewOnly skips the terminal pointer;
-                // recordAttemptHistory still appends.
-                const softTicketReaskNoSeal = pendingSettlement !== "sealed" && env.softTicketReaskTurn === true;
-                const noSealScope = softTicketReaskNoSeal
-                    ? {
-                        ...courtScope,
-                        previewOnly: true,
-                        recordAttemptHistory: true,
-                    }
-                    : { ...courtScope, recordAttemptHistory: true };
+                const noSealScope = { ...courtScope, recordAttemptHistory: true };
                 const terminal = pendingSettlement === "sealed"
                     ? await adapters.trySettle(admitted, env.principalAuthority, { ...courtScope, recordAttemptHistory: true })
                     : await attachRecordedSubmissions(admitted, await settleHostEndedNoReceipt(admitted, env.principalAuthority, noSealScope, receiptDelivery.issuedDeliveryRequests()), noSealScope);
                 if (terminal === undefined)
                     throw new Error("settled host attempt vanished before publication");
                 result = { ...result, terminal, exitCode: exitCodeForTerminalOutcome(terminal.roleOutcome) };
-                // #1171 F2-R7: ownership evidence at this soft-reask turn's seal —
-                // mutate the live ownership cell carried on env (survives spreads).
-                if (pendingSettlement === "sealed" && env.softTicketReaskTurn === true
-                    && env.softTicketReaskOwnership !== undefined) {
-                    env.softTicketReaskOwnership.sealedSubstitute = true;
-                }
                 if (pendingSettlement === "sealed" && terminal.roleOutcome.kind === "accepted"
                     && request.courtAttemptId !== undefined && request.courtAttemptId.length > 0) {
                     try {

package/dist/report-ticket-tool.js

@@ -20,8 +20,7 @@ const reportTicketArgsSchema = Type.Object({
     }),
 }, { additionalProperties: true });
 export const REPORT_TICKET_TOOL_DESCRIPTION = "向包申报本票号。已知票号时开工第一件事调用；包当场把本腿归到票号目录。"
-    + "尚无票号（例如中书省建票前）不要调用，取得后再报。"
-    + "交卷时若仍未报过且交卷亦未带票号，包会经既有重交通道再问一次。";
+    + "尚无票号（例如中书省建票前）不要调用，取得后再报。";
 function pageString(page, key) {
     const value = page?.[key];
     return typeof value === "string" && value.trim() !== "" ? value : undefined;
@@ -153,5 +152,3 @@ export function registerReportTicketTool(roleHost, hostActions) {
         },
     });
 }
-/** Soft re-ask when a sealed submission still leaves the leg unbound (#1171 / ADR 0073). */
-export const MISSING_TICKET_REASK_MATERIAL = "resources/missing-ticket-reask.md";

package/dist/submission-ledger.js

@@ -1,4 +1,5 @@
-import { sessionFileIn, sessionFileOf } from "./role-run-placement.js";
+import { isUnboundRunDirectory, sessionFileIn, sessionFileOf } from "./role-run-placement.js";
+import { readPackageMaterial } from "./session-opening-materials.js";
 import { resolveActivationLedgerHome, tryHomeFromAkRolesPath, } from "./activation-ledger-topology.js";
 import { courtAttemptIdFromHostContext, runDirectoryFromHostContext, } from "./host-contracts.js";
 import { runIdFromRunDirectory } from "./run-terminal-artifacts.js";
@@ -491,6 +492,20 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                                 ? { lens: rawLens }
                                 : {}),
                         });
+                        // Native structured-output hosts have no tool-result reply to the model.
+                        // Keep the conversation open only after the receipt is durably sealed.
+                        const runDirectory = runDirectoryFromHostContext(context);
+                        if (context.host !== "claude" && context.host !== "codex"
+                            && runDirectory !== undefined && isUnboundRunDirectory(runDirectory)) {
+                            result = {
+                                ...result,
+                                terminate: false,
+                                content: [...result.content, {
+                                        type: "text",
+                                        text: (await readPackageMaterial("resources/ticket-at-receipt.md")).trim(),
+                                    }],
+                            };
+                        }
                     }
                     catch (error) {
                         if (toolThrew)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.6017",
+  "version": "0.1.6021",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/ticket-at-receipt.md

@@ -0,0 +1 @@
+卷已收下，不用重交。本腿还没有票号：知道就调 ak_report_ticket 报上；不知道就直接结束。

package/src/public-cli/instruction-seat-run.ts

@@ -4,10 +4,7 @@
  * starts two ordinary single-axis runs here.
  */
 import { dirname, resolve } from "node:path";
-import { MISSING_TICKET_REASK_MATERIAL } from "../report-ticket-tool.ts";
 import { isUnboundRunDirectory, sessionFileOf } from "../role-run-placement.ts";
-import { rewriteRunDirectoryPathValue } from "../role-run-relocation.ts";
-import { readPackageMaterial } from "../session-opening-materials.ts";
 import { createPiDoctorAuditor } from "../doctor-auditor.ts";
 
 import type { DurablePrincipalAuthority, HostContext, RoleTurnRequest } from "../host-contracts.ts";
@@ -193,21 +190,10 @@ function unreadablePostSubmissionStatus(
  * status: the caller presents the volumes already in hand and does not advance
  * review. ADR 0007 audit continues are not this shape.
  */
-/**
- * Drop turn-scoped soft-reask identity; keep cross-turn budgets and ownership cell.
- * #1171 F2-R5 / F2-R9: ordinary status reask and court continue must not inherit
- * softTicketReaskTurn (that flag only governs the soft-reask turn's own settle).
- */
-function withoutSoftTicketReaskTurn(env: InstructionSeatRunEnv): InstructionSeatRunEnv {
-  const { softTicketReaskTurn: _softTicketReaskTurn, ...rest } = env;
-  return rest;
-}
-
 function withUnreadableReask(env: InstructionSeatRunEnv): InstructionSeatRunEnv | undefined {
   const spent = env.unreadableReasksSpent ?? 0;
   if (spent >= deliveryLimitFromConfig(env.autoResumeLimit)) return undefined;
-  // Ordinary status reask: strip soft-reask turn identity; keep spent budget (#1171 F2-R9).
-  return { ...withoutSoftTicketReaskTurn(env), unreadableReasksSpent: spent + 1 };
+  return { ...env, unreadableReasksSpent: spent + 1 };
 }
 
 /** Budget spent on an unreadable status. Distinct from "status is readable". */
@@ -406,144 +392,12 @@ async function reaskUnreadablePostSubmissionStatus(
   );
 }
 
-/**
- * Soft-reask call outcome at the missing-ticket seam (#1171 F2-R6 / F2-R7).
- * Ownership is decided here once from this nested chain's settlement evidence
- * (soft-reask turn sealed → ownership cell; or returned terminal still carries volume);
- * callers must not re-judge the same criterion.
- */
-type SoftTicketReaskOutcome =
-  | { readonly kind: "none" }
-  | { readonly kind: "nested_owns"; readonly result: SeatRunResult }
-  | { readonly kind: "no_substitute"; readonly result: SeatRunResult };
-
-/**
- * #1171: sealed submission still leaves the leg unbound → soft reask once.
- * Does not reject the sealed receipt; exhaustion leaves unbound as filed.
- * Reask copy lives in package resources (ADR 0073).
- * #1171 F2-R7: ownership comes from this nested resume's settlement seam
- * (softTicketReaskOwnership.sealedSubstitute set when the soft-reask turn itself seals),
- * not full-leg sealed count / time-window deltas that can absorb another court's seal.
- */
-async function reaskMissingTicketOnce(
-  admitted: AdmittedRoleInvocation,
-  terminal: TerminalResult | undefined,
-  env: InstructionSeatRunEnv,
-  io: CliIo,
-): Promise<SoftTicketReaskOutcome> {
-  if ((env.ticketReasksSpent ?? 0) >= 1) return { kind: "none" };
-  // #1192: a table lookup has no one to ask, and a second turn would re-seal.
-  if (isNavigatorSeat(admitted.role)) return { kind: "none" };
-  if (admitted.ticketNumber !== undefined) return { kind: "none" };
-  if (!isUnboundRunDirectory(admitted.runDirectory)) return { kind: "none" };
-  if (terminal?.roleOutcome.kind !== "accepted" && terminal?.roleOutcome.kind !== "audit_escalation") {
-    return { kind: "none" };
-  }
-  const payloads = terminal.roleOutcome.payloads ?? [];
-  if (payloads.length === 0) return { kind: "none" };
-  // Sealed-with-ticket skips via admitted.ticketNumber after bindSealedTicketNumber
-  // (post-admission). Do not re-parse payload.ticketNumber here — that would
-  // duplicate the existing ticket seam (#1171 notary: no rule copy).
-  const instruction = (await readPackageMaterial(MISSING_TICKET_REASK_MATERIAL)).trim();
-  // Spend budget and mark this turn as the soft reask (settlement identity).
-  // Ownership cell is set at that turn's settlement; env spreads keep the same
-  // ref through audit continue — see envForCourtContinue (#1171 F2-R5 / F2-R7).
-  const softTicketReaskOwnership = { sealedSubstitute: false };
-  const softReaskEnv: InstructionSeatRunEnv = {
-    ...env,
-    ticketReasksSpent: 1,
-    softTicketReaskTurn: true,
-    softTicketReaskOwnership,
-  };
-  // Named #1171 missing-ticket: summons opens a new court; message carries the
-  // package reask copy (not arbitrary summons.instruction passthrough).
-  const result = await runPublicInstructionSeatResume(
-    {
-      runId: admitted.runId,
-      runDirectory: admitted.runDirectory,
-      message: instruction,
-      summons: { instructionEmpty: true },
-    },
-    softReaskEnv,
-    io,
-  );
-  if (
-    softTicketReaskOwnership.sealedSubstitute
-    || terminalCarriesSealedSubmission(result.terminal)
-  ) {
-    return { kind: "nested_owns", result };
-  }
-  return { kind: "no_substitute", result };
-}
-
-/** Court continue: keep cross-turn budgets + ownership cell; drop turn-scoped soft-reask identity. */
+/** Court continue resets the unreadable-status budget. */
 function envForCourtContinue(env: InstructionSeatRunEnv): InstructionSeatRunEnv {
-  return { ...withoutSoftTicketReaskTurn(env), unreadableReasksSpent: 0 };
-}
-
-/** True when a terminal still carries a sealed accepted / audit_escalation volume. */
-function terminalCarriesSealedSubmission(terminal: TerminalResult | undefined): boolean {
-  const kind = terminal?.roleOutcome.kind;
-  if (kind !== "accepted" && kind !== "audit_escalation") return false;
-  return (terminal?.roleOutcome.payloads ?? []).length > 0;
-}
-
-/**
- * #1171 F2-R2: kept original terminal may still name pre-relocate artifact
- * paths after a report-only reask moved the leg. Project onto live admitted
- * via the same rewrite seam post-admission uses after relocate.
- */
-function projectKeptOriginalArtifactsOntoLiveAdmitted(
-  original: SeatRunResult,
-  kept: SeatRunResult,
-): void {
-  const oldRunDirectory = original.admitted?.runDirectory;
-  const newRunDirectory = kept.admitted?.runDirectory;
-  if (
-    oldRunDirectory === undefined
-    || newRunDirectory === undefined
-    || oldRunDirectory === newRunDirectory
-    || kept.terminal === undefined
-  ) {
-    return;
-  }
-  for (const artifact of kept.terminal.artifacts) {
-    artifact.path = rewriteRunDirectoryPathValue(
-      artifact.path,
-      oldRunDirectory,
-      newRunDirectory,
-    ) as string;
-  }
+  return { ...env, unreadableReasksSpent: 0 };
 }
 
-/**
- * #1171 F2: missing-ticket reask did not seal a substitute — keep original
- * terminal; take live placement from the reask when it relocated.
- * #1171 F2-R1: silence / report-only stays on the original chain; a real host
- * failure (nonzero exit) must be delivered honestly — do not wash it into the
- * original accepted result. Sealed original volume remains on disk either way.
- * #1171 F2-R2: after keep, project report artifact paths onto the live
- * admitted directory so public result, durable face, and artifact refs agree.
- * Substitute ownership is decided once at the soft-reask call seam (F2-R6);
- * this helper only finishes the keep path.
- */
-function mergeMissingTicketReaskKeepOriginal(
-  original: SeatRunResult,
-  ticketReask: SeatRunResult,
-): SeatRunResult {
-  if (ticketReask.exitCode !== 0) return ticketReask;
-  const admitted = ticketReask.admitted ?? original.admitted;
-  if (admitted === undefined) return { ...original };
-  const kept = { ...original, admitted };
-  projectKeptOriginalArtifactsOntoLiveAdmitted(original, kept);
-  return kept;
-}
-
-/**
- * Post-submission status reask, then missing-ticket soft reask, then audit.
- * #1171 F3: status exhaustion must not skip the one missing-ticket reask.
- * #1171 F2: ticket reask without a substitute seal continues the original chain.
- */
+/** Post-submission status reask, then audit. */
 async function continueAfterPostSubmissionGuards(
   result: SeatRunResult,
   admittedRole: PackagedRole,
@@ -562,44 +416,22 @@ async function continueAfterPostSubmissionGuards(
     env,
     io,
   );
-  let afterStatus = result;
+  let continued = result;
   if (isUnreadableReaskExhausted(unreadableReask)) {
     const terminal = result.terminal === undefined
       ? undefined
       : withUnsettledDirection(result.terminal);
-    afterStatus = terminal === undefined
+    continued = terminal === undefined
       ? { ...result, admitted: live }
       : { ...result, admitted: live, terminal };
-    // Fall through: missing-ticket reask still owed on the original sealed volume.
   } else if (unreadableReask !== undefined) {
     return unreadableReask;
   }
-  const forTicket = afterStatus.admitted ?? live;
-  // Ownership is decided once inside reaskMissingTicketOnce (#1171 F2-R6).
-  const softReask = await reaskMissingTicketOnce(
-    forTicket,
-    afterStatus.terminal ?? result.terminal,
-    env,
-    io,
-  );
-  if (softReask.kind === "nested_owns") {
-    // Nested resume already finished guards + audit/present for the substitute.
-    // Do not run a second outer settlement of the same public call (#1171 F2-R4b).
-    return softReask.result;
-  }
-  const continued = softReask.kind === "none"
-    ? afterStatus
-    : mergeMissingTicketReaskKeepOriginal(afterStatus, softReask.result);
   const continuedAdmitted = continued.admitted ?? live;
-  // Spent budget rides the outer audit/continue chain (#1171 F2-R4a). Soft-reask
-  // settlement identity does not — ordinary continue turns publish no_receipt (#1171 F2-R5).
-  const continuedEnv = softReask.kind !== "none"
-    ? { ...env, ticketReasksSpent: 1 }
-    : env;
   if (AUDITED_ROLES.has(admittedRole) && continued.terminal?.roleOutcome.kind === "accepted") {
     return auditSubmittedRole(
       { ...continued, admitted: continuedAdmitted },
-      continuedEnv,
+      env,
       io,
     );
   }
@@ -1168,8 +1000,7 @@ export async function runPublicInstructionSeat(
     const result = await runCountersignBody(parsed, env, {
       stdout: (value) => held.push(value), stderr: io.stderr,
     });
-    // Same post-submission guards as every other seat (#1171 F8): missing-ticket
-    // soft reask once, then audit — no early return that skips the reask.
+    // Apply the same post-submission guards and audit as every other seat.
     return continueAfterPostSubmissionGuards(result, "countersign", env, io, held);
   }
 
@@ -1345,9 +1176,7 @@ export async function runPublicInstructionSeat(
     await persistAdmittedSourceRunPath(admitted, auditorSource, auditorSubject);
     admitted = { ...admitted, sourceRunPath: auditorSource } as AdmittedRoleInvocation;
   }
-  // #1208 C2: same helper as resume — known board ticket on the audited
-  // source binds and relocates before the missing-ticket soft reask can
-  // fire. True no-ticket sources stay unbound (#1171 asks once).
+  // #1208 C2: same helper as resume — inherit the audited source's known ticket.
   admitted = await inheritKnownTicketFromSource(admitted, env.principalAuthority);
 
   const runAdmitted = async (): Promise<SeatRunResult> => {
@@ -1736,8 +1565,6 @@ async function auditSubmittedRole(
   resumedOfficer?: AdmittedRoleInvocation,
   passedReceipt?: unknown,
 ): Promise<SeatRunResult> {
-  // Ordinary audit chain: drop soft-reask turn identity; keep budgets/ownership (#1171 F2-R9).
-  env = withoutSoftTicketReaskTurn(env);
   const admitted = turn.admitted;
   if (admitted === undefined || !AUDITED_ROLES.has(admitted.role)
     || turn.terminal?.roleOutcome.kind !== "accepted") return turn;

package/src/public-cli/post-admission.ts

@@ -449,23 +449,6 @@ export type PostAdmissionEnv = {
    * keeps this env's autoResumeLimit; the counter is the only thing that moves.
    */
   unreadableReasksSpent?: number;
-  /**
-   * #1171: missing-ticket soft reasks already issued on this chain. Hard ceiling
-   * is one — still no ticket after that stays unbound with the sealed receipt.
-   * Budget only across rounds; not the current turn's settlement identity.
-   */
-  ticketReasksSpent?: number;
-  /**
-   * #1171 F2-R5: this turn is the one soft reask. Keep the sealed terminal face
-   * when it ends without a substitute seal. Not carried into audit continue.
-   */
-  softTicketReaskTurn?: true;
-  /**
-   * #1171 F2-R7: live ownership cell for this soft-reask nested chain.
-   * Created at soft-reask dispatch; settlement of that turn sets sealedSubstitute.
-   * Shared ref survives env spreads — not a second ledger.
-   */
-  softTicketReaskOwnership?: { sealedSubstitute: boolean };
   createRunId?: () => string;
   /**
    * Parent cancellation for a nested public summon (#675). Every dispatched turn
@@ -1220,20 +1203,7 @@ export async function dispatchPostAdmissionTurn<
       result.terminal === pendingTerminal
     ) {
       try {
-        // #1171 F2-R2 / F2-R3 (#419) / F2-R5: only the soft-reask turn itself
-        // preserves the sealed terminal face. ticketReasksSpent is budget across
-        // rounds — after audit continue, ordinary no-volume turns publish
-        // no_receipt honestly. previewOnly skips the terminal pointer;
-        // recordAttemptHistory still appends.
-        const softTicketReaskNoSeal =
-          pendingSettlement !== "sealed" && env.softTicketReaskTurn === true;
-        const noSealScope = softTicketReaskNoSeal
-          ? {
-              ...courtScope,
-              previewOnly: true as const,
-              recordAttemptHistory: true as const,
-            }
-          : { ...courtScope, recordAttemptHistory: true as const };
+        const noSealScope = { ...courtScope, recordAttemptHistory: true as const };
         const terminal = pendingSettlement === "sealed"
           ? await adapters.trySettle(admitted, env.principalAuthority,
               { ...courtScope, recordAttemptHistory: true })
@@ -1243,12 +1213,6 @@ export async function dispatchPostAdmissionTurn<
               noSealScope);
         if (terminal === undefined) throw new Error("settled host attempt vanished before publication");
         result = { ...result, terminal, exitCode: exitCodeForTerminalOutcome(terminal.roleOutcome) };
-        // #1171 F2-R7: ownership evidence at this soft-reask turn's seal —
-        // mutate the live ownership cell carried on env (survives spreads).
-        if (pendingSettlement === "sealed" && env.softTicketReaskTurn === true
-          && env.softTicketReaskOwnership !== undefined) {
-          env.softTicketReaskOwnership.sealedSubstitute = true;
-        }
         if (pendingSettlement === "sealed" && terminal.roleOutcome.kind === "accepted"
           && request.courtAttemptId !== undefined && request.courtAttemptId.length > 0) {
           try {

package/src/report-ticket-tool.ts

@@ -40,8 +40,7 @@ const reportTicketArgsSchema = Type.Object(
 
 export const REPORT_TICKET_TOOL_DESCRIPTION =
   "向包申报本票号。已知票号时开工第一件事调用；包当场把本腿归到票号目录。"
-  + "尚无票号（例如中书省建票前）不要调用，取得后再报。"
-  + "交卷时若仍未报过且交卷亦未带票号，包会经既有重交通道再问一次。";
+  + "尚无票号（例如中书省建票前）不要调用，取得后再报。";
 
 function pageString(page: Record<string, unknown> | undefined, key: string): string | undefined {
   const value = page?.[key];
@@ -199,6 +198,3 @@ export function registerReportTicketTool(
     },
   });
 }
-
-/** Soft re-ask when a sealed submission still leaves the leg unbound (#1171 / ADR 0073). */
-export const MISSING_TICKET_REASK_MATERIAL = "resources/missing-ticket-reask.md" as const;

package/src/submission-ledger.ts

@@ -1,4 +1,5 @@
-import { sessionFileIn, sessionFileOf } from "./role-run-placement.ts";
+import { isUnboundRunDirectory, sessionFileIn, sessionFileOf } from "./role-run-placement.ts";
+import { readPackageMaterial } from "./session-opening-materials.ts";
 
 import {
   resolveActivationLedgerHome,
@@ -676,6 +677,20 @@ export function createSubmissionLedgerHost(
                 ? { lens: rawLens }
                 : {}),
             });
+            // Native structured-output hosts have no tool-result reply to the model.
+            // Keep the conversation open only after the receipt is durably sealed.
+            const runDirectory = runDirectoryFromHostContext(context);
+            if (context.host !== "claude" && context.host !== "codex"
+              && runDirectory !== undefined && isUnboundRunDirectory(runDirectory)) {
+              result = {
+                ...result,
+                terminate: false,
+                content: [...result.content, {
+                  type: "text",
+                  text: (await readPackageMaterial("resources/ticket-at-receipt.md")).trim(),
+                }],
+              };
+            }
           } catch (error) {
             if (toolThrew) throw error;
             return failInfrastructure(error, context, toolCallId);

package/resources/missing-ticket-reask.md

@@ -1 +0,0 @@
-本腿仍无票号。请调用 ak_report_ticket 申报，或在交卷里带上 ticketNumber。只问这一次。