@akagilnc/pi-workflow-roles 0.1.4021 → 0.1.4062

package/dist/doctor-auditor.js

@@ -8,7 +8,7 @@ export const DOCTOR_AUDIT_TOOL_NAME = "ak_doctor_audit_decision";
  */
 export function createPiDoctorAuditor() {
     return async (options) => {
-        const dossier = resolveAuditDossier();
+        const dossier = resolveAuditDossier(options.context);
         requireAuditMaterials(dossier);
         const subjects = readDoctorAuditSubjects(options.context);
         requireAuditMaterials(subjects);

package/dist/dossier-resolution.js

@@ -1,23 +1,36 @@
 /**
  * Unique dossier-resolution seam for 审刑院 (#233).
- * Machine pointers only: cwd + AK_ROLE_RUN_DIR. No latest-run / mtime / global scan.
+ * Machine pointers only: cwd + per-turn HostContext (Pi child env fallback).
+ * No latest-run / mtime / global scan.
  */
 import { existsSync, statSync } from "node:fs";
 import { resolve } from "node:path";
+import { runDirectoryFromHostContext } from "./host-contracts.js";
 export const AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR";
 export const DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate";
+function isHostContext(value) {
+    return "sessionManager" in value;
+}
+function dossierPointerFrom(source) {
+    if (source !== undefined && isHostContext(source)) {
+        return runDirectoryFromHostContext(source);
+    }
+    const env = source ?? process.env;
+    const raw = env[AUDIT_RUN_DIR_ENV];
+    return typeof raw === "string" && raw.trim() !== "" ? raw : undefined;
+}
 /**
- * Resolve the per-run dossier pointer injected by the public CLI.
+ * Resolve the per-run dossier pointer.
  *
+ * ACP/headless: typed HostContext.runDirectory.
+ * Pi child: HostContext projected from env, or env fallback when no context.
  * Absent pointer = bare Pi internal seam (ADR 0052): audit proceeds; the model
- * self-locates the dossier from its own fall-volume position per soul. Public CLI
- * always injects the pointer — only then does the machine validate the path.
- * Concurrent runs stay isolated because a present pointer is per-process.
+ * self-locates the dossier from its own fall-volume position per soul.
  */
-export function resolveAuditDossier(env = process.env) {
-    const raw = env[AUDIT_RUN_DIR_ENV];
+export function resolveAuditDossier(source) {
+    const raw = dossierPointerFrom(source);
     // Bare Pi activation seam: no machine gate when the pointer was never injected.
-    if (typeof raw !== "string" || raw.trim() === "") {
+    if (raw === undefined) {
         return { status: "ok" };
     }
     const runDirectory = resolve(raw);

package/dist/gatekeeper-role.js

@@ -84,15 +84,26 @@ function projectOfficerDecision(officer, decision, fallbackStatus) {
     return { status: "needs_reask", officer, receipt };
 }
 /**
- * Project a public-role terminal onto the gate queue surface.
- * Host failure stays failure; recorded officer payloads ride beside it (#836 A.3).
- * Multiple recorded payloads are all kept — code does not pick last-wins.
+ * This-court officer payloads for the parent return path (#879).
+ * Only settlement-scoped roleOutcome.payloads (courtAttempt seal) carry this-court
+ * identity. Never guess from undivided submissions — sole row included — history
+ * stays on terminal.submissions (#836 presentation).
  */
-function officerPayloads(terminal) {
+function thisCourtOfficerPayloads(terminal) {
     const outcome = terminal?.roleOutcome;
     if (outcome !== undefined && (outcome.kind === "accepted" || outcome.kind === "audit_escalation")) {
-        return outcome.payloads ?? terminal?.submissions ?? [];
+        if (outcome.payloads !== undefined && outcome.payloads.length > 0)
+            return outcome.payloads;
+    }
+    if (outcome?.kind === "failure" && outcome.payloads !== undefined && outcome.payloads.length > 0) {
+        return outcome.payloads;
     }
+    // No sole-row identity guess: undivided submissions are not this-court (#879).
+    return [];
+}
+/** Failure/transport channel may still surface every recorded payload beside the failure (#836 A.3). */
+function officerFailurePayloads(terminal) {
+    const outcome = terminal?.roleOutcome;
     if (outcome?.kind === "failure")
         return outcome.payloads ?? terminal?.submissions ?? [];
     return terminal?.submissions ?? [];
@@ -101,32 +112,24 @@ function projectOfficerPayloads(officer, payloads, fallbackStatus) {
     if (payloads.length === 0) {
         return projectOfficerDecision(officer, undefined, fallbackStatus);
     }
-    // Present every recorded payload; queue only the latest conclusion so a reask
-    // can converge (#836 呈现 ≠ 排队).
-    const queued = projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
-    if (payloads.length === 1)
-        return queued;
-    if (queued.status === "pass"
-        || queued.status === "bounce"
-        || queued.status === "escalate"
-        || queued.status === "needs_reask") {
-        return { ...queued, receipt: payloads };
-    }
-    return queued;
+    // This-court multi-submit: queue the latest seal of THIS court only (#836 呈现≠排队).
+    // Single this-court seal is the common path. Never fold history into an array receipt.
+    return projectOfficerDecision(officer, payloads[payloads.length - 1], fallbackStatus);
 }
 function projectOfficerTerminal(officer, summoned) {
     const terminal = summoned.terminal;
     const outcome = terminal?.roleOutcome;
-    const recorded = officerPayloads(terminal);
+    const thisCourt = thisCourtOfficerPayloads(terminal);
     if (outcome === undefined) {
         const detail = summoned.stderr ?? "";
+        const failurePayloads = officerFailurePayloads(terminal);
         return {
             status: "transport_failure",
             stage: officer,
             reason: detail.length > 0
                 ? `${gateSeatLabel(officer)} public summon exit ${summoned.exitCode}: ${detail}`
                 : `${gateSeatLabel(officer)} public summon produced no terminal (exit ${summoned.exitCode})`,
-            submission: recorded.length > 0 ? recorded : summoned,
+            submission: failurePayloads.length > 0 ? failurePayloads : summoned,
         };
     }
     if (outcome.kind === "no_receipt") {
@@ -140,30 +143,33 @@ function projectOfficerTerminal(officer, summoned) {
         };
     }
     if (outcome.kind === "failure") {
+        const failurePayloads = officerFailurePayloads(terminal);
         return {
             status: "transport_failure",
             stage: officer,
             reason: outcome.diagnostic,
-            submission: recorded.length > 0 ? recorded : outcome.decisiveFacts,
+            submission: failurePayloads.length > 0 ? failurePayloads : outcome.decisiveFacts,
         };
     }
     if (outcome.kind === "audit_escalation") {
         return {
             status: "escalate",
             officer,
-            receipt: recorded.length === 1 ? recorded[0] : recorded,
+            // This-court receipt only (#879) — historical rows remain on terminal.submissions.
+            receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome),
         };
     }
     if (outcome.kind === "accepted") {
         // outcome.status is the fixture/compat leaf: production settlement leaves
         // it undefined once payloads are recorded, so this only matters when a
         // caller still supplies status without any recorded payload (#836 hang).
-        return projectOfficerPayloads(officer, recorded, outcome.status);
+        return projectOfficerPayloads(officer, thisCourt, outcome.status);
     }
     return {
         status: "needs_reask",
         officer,
-        receipt: recorded.length > 0 ? recorded : retainedReceipt(outcome),
+        // This-court receipt only (#879).
+        receipt: thisCourt.length > 0 ? thisCourt[thisCourt.length - 1] : retainedReceipt(outcome),
     };
 }
 /**
@@ -188,12 +194,12 @@ export async function projectGatekeeperRun(options) {
             },
         };
     }
-    // #836: officers receive the whole parent run directory pointer and find the
-    // submission themselves — code no longer picks latest toolCall leaf (A7.1–A7.3).
+    // #879: binding pointer = parent run directory; dialogue content = this-turn
+    // typed payload passed explicitly (never latest-toolCall recovery, A7.1–A7.3).
     let summoned;
     try {
         const summon = options.summonOfficer
-            ?? (async (nextOfficer, sourceRunDirectory, officerSignal, reask) => {
+            ?? (async (nextOfficer, sourceRunDirectory, officerSignal, reask, nextSubmission) => {
                 const { summonGateOfficer } = await import("./public-role-summons.js");
                 return summonGateOfficer({
                     officer: nextOfficer,
@@ -201,13 +207,14 @@ export async function projectGatekeeperRun(options) {
                     cwd: options.context.cwd ?? process.cwd(),
                     ...(officerSignal === undefined ? {} : { signal: officerSignal }),
                     ...(reask === undefined ? {} : { reask }),
+                    ...(nextSubmission === undefined ? {} : { submission: nextSubmission }),
                     ...(options.home === undefined ? {} : { home: options.home }),
                     ...(options.packageRoot === undefined ? {} : { packageRoot: options.packageRoot }),
                     ...(options.roleTurnHost === undefined ? {} : { roleTurnHost: options.roleTurnHost }),
                     ...(options.createRunId === undefined ? {} : { createRunId: options.createRunId }),
                 });
             });
-        summoned = await summon(officer, runDirectory, options.signal, options.reask);
+        summoned = await summon(officer, runDirectory, options.signal, options.reask, options.submission);
     }
     catch (error) {
         return {

package/dist/headless-host/description.js

@@ -17,13 +17,13 @@ export function resolveHeadlessBinary(description, operatorHome) {
 }
 /**
  * Build one Claude print-mode argv for a single process turn.
- * Shape: `<promptFlag> <prompt> <fixedArgs…> <system/schema/mcp/model/effort/session…>`.
+ * Shape: `<promptFlag> <fixedArgs…> <system/schema/mcp/model/effort/session…>`.
+ * User dialogue rides stdin, not an argv element (#879 / ARG_MAX).
  */
 export function headlessTurnArgs(options) {
     const { description } = options;
     const args = [
         description.promptFlag,
-        options.prompt,
         ...description.fixedArgs,
         description.systemPromptFlag,
         options.systemPromptPath,
@@ -308,8 +308,8 @@ function codexMcpConfigArgs(mcpServers) {
 }
 /**
  * Build one `codex exec` / `codex exec resume` argv (#646).
- * New: `exec --approve-for-me … prompt`.
- * Resume: `exec --approve-for-me resume <thread_id> … prompt`.
+ * New: `exec --approve-for-me … -- -` (prompt on stdin).
+ * Resume: `exec --approve-for-me resume <thread_id> … -- -`.
  * Approval stays on the parent command so new and resumed turns use Codex's
  * automatic review with its workspace-write sandbox.
  */
@@ -346,10 +346,9 @@ export function codexTurnArgs(options) {
     if (options.skipGitRepoCheck === true) {
         args.push("--skip-git-repo-check");
     }
-    // Prompt last as positional. `--` stops option parsing so a leading `-`
-    // (markdown lists, pasted flags, rulings) is not eaten by clap (codex tip:
-    // "use '-- -s'"). Same for new and resume — both end here.
-    args.push("--", options.prompt);
+    // `-` after `--` is Codex's stdin prompt sentinel. `--` still stops option
+    // parsing; the user body itself is not an argv element (#879 / ARG_MAX).
+    args.push("--", "-");
     return args;
 }
 /**