@akagilnc/pi-workflow-roles 0.1.4021 → 0.1.4062

package/dist/host-contracts.js

@@ -15,3 +15,19 @@ export class ExplicitInternalActivationError extends Error {
         }
     }
 }
+/** Gate review officers (察院 / 符宝郎 / 审刑院). Single authority for seat checks. */
+export function isOfficerReviewSeat(role) {
+    return role === "notary" || role === "inspector" || role === "auditor";
+}
+/** Per-turn run directory; adapters must project any child-process identity. */
+export function runDirectoryFromHostContext(context) {
+    return typeof context.runDirectory === "string" && context.runDirectory.trim() !== ""
+        ? context.runDirectory
+        : undefined;
+}
+/** Per-turn court attempt; absence never inherits ambient process identity. */
+export function courtAttemptIdFromHostContext(context) {
+    return typeof context.courtAttemptId === "string" && context.courtAttemptId.trim() !== ""
+        ? context.courtAttemptId
+        : undefined;
+}

package/dist/inspector-contracts.js

@@ -1,5 +1,12 @@
 const INSPECTOR_OUTPUT_TOOL_NAME = "ak_inspector_output";
 const INSPECTOR_ACCEPTED_TEXT = "\u5BDF\u9662\u56DE\u6267\u5DF2\u63A5\u53D7";
+const INSPECTOR_SOURCE_RUN_FLAG = {
+  name: "ak-inspector-source-run",
+  definition: {
+    description: "\u5BDF\u9662\u521D\u94F8\u7ED1\u5B9A\u7684\u7236 run \u7EDD\u5BF9\u8DEF\u5F84",
+    type: "string"
+  }
+};
 function validateRecordedInspectorOutput(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("Inspector output has no execution discriminator");
@@ -18,5 +25,6 @@ function validateRecordedInspectorOutput(value) {
 export {
   INSPECTOR_ACCEPTED_TEXT,
   INSPECTOR_OUTPUT_TOOL_NAME,
+  INSPECTOR_SOURCE_RUN_FLAG,
   validateRecordedInspectorOutput
 };

package/dist/navigator-attendance.js

@@ -22,6 +22,7 @@ import {
   navigatorProviderFailure,
   navigatorProviderFailureFromDiagnostics,
   navigatorProviderFailureFromError,
+  navigatorProviderFailureFromPublicTerminal,
   navigatorProviderFailureFromStatus,
   navigatorUnavailableError,
   parseNavigatorModelSetting,
@@ -698,6 +699,7 @@ export {
   navigatorProviderFailure,
   navigatorProviderFailureFromDiagnostics,
   navigatorProviderFailureFromError,
+  navigatorProviderFailureFromPublicTerminal,
   navigatorProviderFailureFromStatus,
   navigatorSubjectKey,
   navigatorSubjectKeyForInput,

package/dist/navigator-public-session.js

@@ -1,30 +1,12 @@
 import { sitianReport } from "./sitian-facade.js";
 import {
   NavigatorUnavailableError,
-  navigatorProviderFailureFromDiagnostics,
+  navigatorProviderFailureFromPublicTerminal,
   navigatorProviderFailureFromError,
-  navigatorProviderFailureFromStatus,
   navigatorUnavailableError,
   parseNavigatorModelSetting,
   resolveNavigatorSeatSelection
 } from "./navigator-session-contracts.js";
-import { lastRolePayloadRecord } from "./public-cli/terminal.js";
-function providerFailureFromPublicTerminal(outcome) {
-  const facts = outcome.decisiveFacts;
-  const secondary = typeof facts.secondaryEvidence === "object" && facts.secondaryEvidence !== null ? facts.secondaryEvidence : void 0;
-  const httpStatus = typeof secondary?.httpStatus === "number" ? secondary.httpStatus : typeof facts.httpStatus === "number" ? facts.httpStatus : typeof facts.errorCode === "number" ? facts.errorCode : void 0;
-  const fromStatus = navigatorProviderFailureFromStatus(httpStatus);
-  if (fromStatus !== void 0) return fromStatus;
-  const diagnostics = secondary?.diagnostics ?? facts.diagnostics;
-  const fromDiagnostics = navigatorProviderFailureFromDiagnostics(diagnostics);
-  if (fromDiagnostics !== void 0) return fromDiagnostics;
-  const fromCode = navigatorProviderFailureFromError({
-    code: secondary?.code ?? facts.errorCode
-  });
-  if (fromCode !== void 0) return fromCode;
-  if (outcome.cause === "provider") return { source: "transport", cause: "transport" };
-  return { source: "session", cause: "session" };
-}
 function createNativeNavigatorSessionFactory() {
   return async ({ context, subject, tool }) => {
     const resolved = await resolveNavigatorSeatSelection(context);
@@ -80,14 +62,15 @@ function createNativeNavigatorSessionFactory() {
             const outcome = summoned.terminal?.roleOutcome;
             if (outcome === void 0) {
               const detail = summoned.stderr?.trim() || `exit ${summoned.exitCode}`;
-              providerFailure = { source: "transport", cause: "transport" };
+              providerFailure = { source: "transport", cause: "unknown" };
               throw navigatorUnavailableError(
-                "transport",
-                new Error(`Navigator public summon produced no terminal (${detail})`)
+                providerFailure.source,
+                new Error(`Navigator public summon produced no terminal (${detail})`),
+                providerFailure.cause
               );
             }
             if (outcome.kind === "failure") {
-              providerFailure = providerFailureFromPublicTerminal(outcome);
+              providerFailure = navigatorProviderFailureFromPublicTerminal(outcome);
               throw navigatorUnavailableError(
                 providerFailure.source,
                 new Error(outcome.diagnostic),
@@ -101,21 +84,22 @@ function createNativeNavigatorSessionFactory() {
             if (outcome.kind !== "accepted") {
               return;
             }
-            const candidates = lastRolePayloadRecord(outcome.payloads ?? [])?.candidates;
-            if (!Array.isArray(candidates)) {
-              return;
+            for (const payload of outcome.payloads ?? []) {
+              if (typeof payload !== "object" || payload === null || Array.isArray(payload)) continue;
+              const candidates = payload.candidates;
+              if (!Array.isArray(candidates)) continue;
+              await tool.execute(
+                "navigator-public-prepare",
+                { candidates },
+                void 0,
+                void 0,
+                context
+              );
             }
-            await tool.execute(
-              "navigator-public-prepare",
-              { candidates },
-              void 0,
-              void 0,
-              context
-            );
           } catch (error) {
             if (error instanceof NavigatorUnavailableError) throw error;
             const fact = navigatorProviderFailureFromError(error);
-            providerFailure = fact ?? { source: "transport", cause: "transport" };
+            providerFailure = fact ?? { source: "transport", cause: "unknown" };
             throw navigatorUnavailableError(providerFailure.source, error, providerFailure.cause);
           }
         })();

package/dist/navigator-session-contracts.js

@@ -92,6 +92,24 @@ function navigatorProviderFailureFromDiagnostics(diagnostics) {
   }
   return void 0;
 }
+function navigatorProviderFailureFromPublicTerminal(outcome) {
+  const facts = outcome.decisiveFacts;
+  const secondary = typeof facts.secondaryEvidence === "object" && facts.secondaryEvidence !== null ? facts.secondaryEvidence : void 0;
+  const httpStatus = typeof secondary?.httpStatus === "number" ? secondary.httpStatus : typeof facts.httpStatus === "number" ? facts.httpStatus : typeof facts.errorCode === "number" ? facts.errorCode : void 0;
+  const fromStatus = navigatorProviderFailureFromStatus(httpStatus);
+  if (fromStatus !== void 0) return fromStatus;
+  const diagnostics = secondary?.diagnostics ?? facts.diagnostics;
+  const fromDiagnostics = navigatorProviderFailureFromDiagnostics(diagnostics);
+  if (fromDiagnostics !== void 0) return fromDiagnostics;
+  const fromCode = navigatorProviderFailureFromError({
+    code: secondary?.code ?? facts.errorCode
+  });
+  if (fromCode !== void 0) return fromCode;
+  if (outcome.cause === "provider") return { source: "transport", cause: "unknown" };
+  const typed = navigatorUnavailableKey(outcome.cause);
+  if (typed !== void 0) return { source: typed, cause: typed };
+  return { source: "unknown", cause: "unknown" };
+}
 const navigatorProviderFailureSchema = Type.Object({
   source: Type.Union([
     Type.Literal("context"),
@@ -208,6 +226,7 @@ export {
   navigatorProviderFailure,
   navigatorProviderFailureFromDiagnostics,
   navigatorProviderFailureFromError,
+  navigatorProviderFailureFromPublicTerminal,
   navigatorProviderFailureFromStatus,
   navigatorUnavailableError,
   parseNavigatorModelSetting,

package/dist/packaged-role-registry.js

@@ -158,7 +158,7 @@ const PUBLIC_ROLE_RECORDS = [
     role: "inspector",
     phases: [null],
     outputTool: INSPECTOR_OUTPUT_TOOL_NAME,
-    inputFlag: void 0,
+    inputFlag: "ak-inspector-source-run",
     phaseFlag: void 0,
     activationStage: "load-and-install",
     sessionMaterials: INSPECTOR_SESSION_MATERIALS

package/dist/pi/known-failure.js

@@ -35,9 +35,8 @@ function sessionStopDetails(input) {
 /**
  * Project a native session assistant stop onto the existing knownFailure chain.
  * Classification follows two-way testimony: typed HTTP status or SDK structure
- * keeps provider; stopReason, configured provider/model, or errorMessage prose
- * alone is the existing unrecognized value. Present upstream payload is preserved
- * in details without rewriting; missing fields are omitted.
+ * keeps provider; stopReason / errorMessage prose alone never invents a class (#881).
+ * Present upstream payload is preserved in details without rewriting; missing fields are omitted.
  */
 export function knownFailureFromProviderStop(input) {
     if (input.stopReason !== "error" && input.stopReason !== "aborted")
@@ -45,7 +44,7 @@ export function knownFailureFromProviderStop(input) {
     const diagnostic = nonEmptyString(input.errorMessage);
     const details = sessionStopDetails(input);
     return {
-        cause: hasUpstreamErrorTestimony(input) ? "provider" : "unrecognized",
+        ...(hasUpstreamErrorTestimony(input) ? { cause: "provider" } : {}),
         ...(diagnostic === undefined ? {} : { diagnostic }),
         ...(Object.keys(details).length === 0 ? {} : { details }),
     };

package/dist/pi/role-turn-host.js

@@ -10,9 +10,10 @@ import { basename, delimiter, dirname, isAbsolute, join, resolve } from "node:pa
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID } from "node:crypto";
-import { ExplicitInternalActivationError } from "../host-contracts.js";
-import { applyEngineChildEnv } from "../engine-detour.js";
+import { ExplicitInternalActivationError, isOfficerReviewSeat } from "../host-contracts.js";
+import { applyEngineChildEnv, ENGINE_MODEL_FLAG_NAME, normalizeEngineName } from "../engine-detour.js";
 import { projectActivationFlags } from "../role-activation-flags.js";
+import { encodeUserDialogueStdin } from "../user-dialogue-stdin.js";
 /** Package-relative Internal role entrypoint (ADR 0052; same path as public-cli registry). */
 const INTERNAL_ROLE_ENTRYPOINT_RELATIVE = "extensions/role-runtime.ts";
 export function resolveInternalRoleEntrypoint(packageRoot) {
@@ -95,17 +96,10 @@ export function applyPiNativeSkillInvocation(methods, prompt) {
  * Pi last-hop argv after `--no-extensions -e entry` (#819).
  * Activation flag membership comes from middle-layer projectActivationFlags;
  * this function only renders session coords, controlled constants, and pairs.
- * Single forced method → Pi-native `/skill:` on the argv prompt (#822).
+ * User dialogue is not an argv element (#879): it rides spawn stdin.
  */
 export function buildPiTurnExtraArgs(request, authority, extraPiArgs = []) {
     const { sessionFile, sessionDirectory } = authority.decode(request.principal);
-    const rawPrompt = request.continuation.kind === "initial" || request.continuation.kind === "resume"
-        ? request.continuation.prompt
-        : (() => {
-            const _exhaustive = request.continuation;
-            return _exhaustive;
-        })();
-    const prompt = applyPiNativeSkillInvocation(request.methods, rawPrompt);
     return [
         "--no-skills",
         ...buildMethodArgs(request.methods),
@@ -119,12 +113,28 @@ export function buildPiTurnExtraArgs(request, authority, extraPiArgs = []) {
         ...extraPiArgs,
         // Envelope assembly = projectActivationFlags; pi only renders argv pairs.
         ...activationFlagsToPiArgv(projectActivationFlags(request)),
+        ...piEngineModelArgs(request),
         "--mode",
         "json",
         ...buildSeatModelCliArgs(request.model),
-        prompt,
     ];
 }
+/** Engine name stays on child env; model has no env fallback (#883 / #879). */
+function piEngineModelArgs(request) {
+    const model = normalizeEngineName(request.engineModel);
+    if (model === undefined)
+        return [];
+    return [`--${ENGINE_MODEL_FLAG_NAME}`, model];
+}
+function piUserDialogueBody(request) {
+    const rawPrompt = request.continuation.kind === "initial" || request.continuation.kind === "resume"
+        ? request.continuation.prompt
+        : (() => {
+            const _exhaustive = request.continuation;
+            return _exhaustive;
+        })();
+    return applyPiNativeSkillInvocation(request.methods, rawPrompt);
+}
 const execFileAsync = promisify(execFile);
 async function resolveSelectedPi(command, cwd, env) {
     const searchPath = env.PATH ?? (platform === "win32" ? (process.env.PATH ?? "") : "/usr/bin:/bin");
@@ -173,11 +183,22 @@ export function createDefaultPiSpawnRunner(options) {
             const child = spawn(piIdentity.executable, [...args], {
                 cwd: spawnOptions.cwd,
                 env: spawnOptions.env,
-                stdio: ["ignore", "ignore", "pipe"],
+                stdio: ["pipe", "ignore", "pipe"],
             });
+            if (child.stdin === null) {
+                throw new Error("Pi child stdin pipe was not created");
+            }
             if (child.stderr === null) {
                 throw new Error("Pi child stderr pipe was not created");
             }
+            let stdinDeliveryError;
+            child.stdin.on("error", (error) => {
+                stdinDeliveryError ??= error;
+            });
+            if (spawnOptions.stdin !== undefined) {
+                child.stdin.write(spawnOptions.stdin);
+            }
+            child.stdin.end();
             let stderr = "";
             let timedOut = false;
             // No default wall clock. Only an explicit caller budget arms a timer (ADR 0010).
@@ -248,6 +269,10 @@ export function createDefaultPiSpawnRunner(options) {
                         reject(executionError);
                         return;
                     }
+                    if (stdinDeliveryError !== undefined) {
+                        reject(stdinDeliveryError);
+                        return;
+                    }
                     resolveResult({
                         code,
                         stderr,
@@ -275,8 +300,11 @@ export function createPiRoleTurnHost(config) {
         async executeTurn(request) {
             // #617 DK-7: Pi argv gets projected native paths once; never record bytes.
             // Pi already owns its own session file, so only sitian prior volume rides in.
+            // #879: station-child officer dialogue keeps peer words — do not splice
+            // host-transition priorNativePaths into the review prompt body.
             let turnRequest = request;
-            const paths = request.hostTransition?.priorNativeKind === "sitian"
+            const officerStationChild = request.stationChild === true && isOfficerReviewSeat(request.activation.role);
+            const paths = !officerStationChild && request.hostTransition?.priorNativeKind === "sitian"
                 ? request.hostTransition.priorNativePaths
                 : undefined;
             if (request.continuation.kind === "resume"
@@ -293,6 +321,7 @@ export function createPiRoleTurnHost(config) {
             const roleEntry = await realpath(resolveInternalRoleEntrypoint(config.packageRoot));
             const extraArgs = buildPiTurnExtraArgs(turnRequest, config.principalAuthority, config.extraPiArgs ?? []);
             const args = buildExplicitInternalActivationArgs(roleEntry, extraArgs);
+            const stdin = encodeUserDialogueStdin(piUserDialogueBody(turnRequest));
             // Shared envelope isolates this call's court identity: omitting courtAttemptId
             // must not inherit a parent process.env.AK_ROLE_COURT_ATTEMPT (#637).
             const env = {
@@ -330,6 +359,7 @@ export function createPiRoleTurnHost(config) {
             return await spawnRunner(args, {
                 cwd: request.cwd,
                 env,
+                stdin,
                 ...(timeoutMs === undefined ? {} : { timeoutMs }),
                 ...(request.signal === undefined ? {} : { signal: request.signal }),
             });

package/dist/public-cli/auto-resume.js

@@ -18,7 +18,7 @@ import { join } from "node:path";
 import { AUTO_RESUME_LIMIT, describeErrorIdentity, acquireRunWriterLease, markRunResumable, markRunTerminal, RunWriterLeaseHeldError, } from "./run-lifecycle.js";
 import { parseAutoResumeLimit } from "./config.js";
 import { isLawfulTypedTerminalOutcome, formatTerminalResult } from "./terminal.js";
-import { presentFailureTerminal, presentStructuralRejection, resolveControlledFailureResumeObservation, } from "./settlement.js";
+import { attachRecordedSubmissions, presentFailureTerminal, presentStructuralRejection, resolveControlledFailureResumeObservation, } from "./settlement.js";
 const dummyIo = { stdout: () => { }, stderr: () => { } };
 /**
  * Persist run-state after a host-turn result, outside the retried dispatch try.
@@ -280,6 +280,20 @@ function unwrapTurnDispatchedFailure(error) {
     }
     return current;
 }
+async function attachDispatchExceptionTerminal(admitted, terminal, io) {
+    try {
+        return await attachRecordedSubmissions({
+            projectRoot: admitted.projectRoot,
+            runId: admitted.runId,
+            runDirectory: admitted.runDirectory,
+        }, terminal);
+    }
+    catch (error) {
+        // Existing diagnostic seam: attach true cause on stderr, original Terminal stays.
+        io.stderr(`dispatch exception ledger attach failed (best-effort continue): ${describeErrorIdentity(error)}\n`);
+        return terminal;
+    }
+}
 /**
  * Typed failure terminal for a retry path that ended with only exceptions:
  * loud, non-lawful, carrying the last true cause and the pointers to the
@@ -293,8 +307,8 @@ function dispatchExceptionFailureTerminal(input) {
         ? "dispatch threw an exception on every attempt"
         : "the final dispatch threw an exception";
     const diagnostic = `${history} (${input.endReason}; resumes used ${input.autoResumeAttempts}); last cause: ${describeErrorIdentity(causeError)}`;
+    // #881: no fabricated cause class — original error identity + error-file pointers carry the fact.
     const decisiveFacts = {
-        cause: "unrecognized",
         diagnostic,
         resumesUsed: input.autoResumeAttempts,
         dispatchErrorFiles: [...input.errorFiles],
@@ -316,7 +330,6 @@ function dispatchExceptionFailureTerminal(input) {
         roleOutcome: {
             kind: "failure",
             role: input.role,
-            cause: "unrecognized",
             diagnostic,
             decisiveFacts,
         },
@@ -431,7 +444,7 @@ export async function runWithAutoResumeLoop(options) {
         else {
             // Exception path: continue through the identical budget/session gates.
             if (autoResumeAttempts >= limit) {
-                const terminal = dispatchExceptionFailureTerminal({
+                const terminal = await attachDispatchExceptionTerminal(options.admitted, dispatchExceptionFailureTerminal({
                     role: options.admitted.role,
                     runId: options.admitted.runId,
                     causeError: lastThrownError,
@@ -439,7 +452,7 @@ export async function runWithAutoResumeLoop(options) {
                     autoResumeAttempts,
                     endReason: "auto-resume budget exhausted",
                     everyAttemptThrew,
-                });
+                }), options.io);
                 await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
                 presentTerminal(terminal, options.io);
                 return {
@@ -448,7 +461,7 @@ export async function runWithAutoResumeLoop(options) {
                 };
             }
             if (!(await isPrincipalAvailable(options.admitted.principal))) {
-                const terminal = dispatchExceptionFailureTerminal({
+                const terminal = await attachDispatchExceptionTerminal(options.admitted, dispatchExceptionFailureTerminal({
                     role: options.admitted.role,
                     runId: options.admitted.runId,
                     causeError: lastThrownError,
@@ -456,7 +469,7 @@ export async function runWithAutoResumeLoop(options) {
                     autoResumeAttempts,
                     endReason: "session principal unavailable before further resume",
                     everyAttemptThrew,
-                });
+                }), options.io);
                 await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
                 presentTerminal(terminal, options.io);
                 return {

package/dist/public-cli/case-dossier-delivery.js

@@ -5,11 +5,23 @@
  * 只读已有案卷：不刷新、不生成、不校验内容、不新增拒收或停工条件。
  * 机器文本仅中立标识材料（ADR 0073），用途说明归角色材料所有。
  *
- * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口追加本段。
+ * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口挂载。
+ * 普通入口把本段追加进 continuation；station-child 审核轮次走 attachments
+ * 冻结 + role-runtime `loadCaseDossierReadingMaterial` → readingMaterial →
+ * systemPrompt.materials fold（#879：对话 instruction 保持父腿 payload 原文；
+ * 起居录作独立附件面，不新造 RoleTurnRequest.materials）。
  */
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { resolveTicketProvenanceVolume } from "../ticket-provenance.js";
+import { freezeAttachmentsIntoRun, } from "./invocation.js";
 /** Section heading of the system-delivered dossier pointer (presentation only). */
 const CASE_DOSSIER_SECTION_HEADING = "## 本票起居录（系统随案提供）";
+/** Stable freeze key under run/attachments/ for station-child 0081 delivery. */
+const CASE_DOSSIER_ATTACH_KEY = "case-dossier";
+/** Leaf name of the frozen pointer section (content = purpose + paths). */
+const CASE_DOSSIER_ATTACH_FILE = "case-dossier-pointer.md";
 /** Pointer only — presence/absence is for the role to observe at the path. */
 function describeDossierFile(path) {
     return path;
@@ -32,3 +44,50 @@ export async function projectCaseDossierPointerSection(input) {
         `记录卷宗：${describeDossierFile(volume.recordFile)}`,
     ].join("\n");
 }
+/**
+ * ADR 0081 delivery for station-child officer turns (#879): freeze the same
+ * pointer section through the existing attachments seam. Role-runtime loads
+ * that freeze via loadCaseDossierReadingMaterial onto readingMaterial; the
+ * envelope then folds it into systemPrompt.materials. Peer dialogue instruction
+ * stays the parent payload; never RoleTurnRequest.materials.
+ * Returns frozen attachments, or undefined when unbound (no dossier).
+ */
+export async function deliverCaseDossierAsAttachment(input) {
+    const section = await projectCaseDossierPointerSection({
+        ticketNumber: input.ticketNumber,
+        projectRoot: input.projectRoot,
+        home: input.home,
+    });
+    if (section === undefined)
+        return undefined;
+    // Stage in OS temp only — never leave a run-local .case-dossier-stage copy.
+    const stagingDir = await mkdtemp(join(tmpdir(), "ak-case-dossier-"));
+    try {
+        const stagingPath = join(stagingDir, CASE_DOSSIER_ATTACH_FILE);
+        await writeFile(stagingPath, `${section}\n`, "utf8");
+        return await freezeAttachmentsIntoRun([stagingPath], input.runDirectory, CASE_DOSSIER_ATTACH_KEY);
+    }
+    finally {
+        await rm(stagingDir, { recursive: true, force: true });
+    }
+}
+/**
+ * Load a previously frozen case-dossier attachment as reading material
+ * (existing agent-start / systemPrompt.materials fold — not dialogue prompt,
+ * not RoleTurnRequest.materials). Undefined when the run has no such freeze.
+ */
+export async function loadCaseDossierReadingMaterial(runDirectory) {
+    const frozenPath = join(runDirectory, "attachments", CASE_DOSSIER_ATTACH_KEY, `00-${CASE_DOSSIER_ATTACH_FILE}`);
+    let section;
+    try {
+        section = await readFile(frozenPath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (section.trim() === "")
+        return undefined;
+    return { kind: "case-dossier-pointer", frozenPath, section };
+}

package/dist/public-cli/diarist-run.js

@@ -5,8 +5,8 @@ import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissio
 import { loadResumableDiaristRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { presentStructuralRejection, trySettleDiaristTerminalResult, } from "./settlement.js";
-import { lastRolePayloadRecord } from "./terminal.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
+import { readRunTicketNumber } from "../run-ticket-number.js";
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildDiaristTurnRequest(admitted, options) {
     return projectRoleTurnRequest(admitted, { activation: { role: "diarist" } }, options);
@@ -110,29 +110,15 @@ export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
         adapters: diaristAdapters(),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
     }).then(async (result) => {
-        // Accept may have bound ticket onto durable pages after LLM assertion.
-        // Mirror only lawful non-escalate accepted terminals — escalate must not
-        // leak an unverified ticketNumber into the caller-visible typed key.
+        // Accept hook binds ticket onto durable pages (#771). Mirror that page fact
+        // onto the caller-visible admitted object — never pick a ticketNumber out of
+        // the payload sequence (#881 sole-collapse ban on ticket/escalate).
         if (admitted.ticketNumber === undefined && result.admitted !== undefined) {
-            const roleOutcome = result.terminal?.roleOutcome;
-            const facts = roleOutcome?.kind === "accepted"
-                ? lastRolePayloadRecord(roleOutcome.payloads ?? [])
-                : undefined;
-            if (roleOutcome !== undefined &&
-                roleOutcome.kind === "accepted" &&
-                facts?.status !== "escalate") {
-                const raw = typeof facts?.ticketNumber === "number"
-                    ? facts.ticketNumber
-                    : typeof facts?.sitian === "object"
-                        && facts.sitian !== null
-                        && typeof facts.sitian.ticketNumber === "number"
-                        ? facts.sitian.ticketNumber
-                        : undefined;
-                if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) {
-                    admitted.ticketNumber = raw;
-                    if (result.admitted.ticketNumber === undefined) {
-                        result.admitted.ticketNumber = raw;
-                    }
+            const fromPages = await readRunTicketNumber(admitted.runDirectory);
+            if (fromPages !== undefined) {
+                await bindAdmittedTicketNumber(admitted, fromPages);
+                if (result.admitted.ticketNumber === undefined) {
+                    result.admitted.ticketNumber = fromPages;
                 }
             }
         }

package/dist/public-cli/inspector-run.js

@@ -1,16 +1,24 @@
 import { engineSessionMaterialFromOptions, pickEngineAxis } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
-import { admitInspectorInvocation, buildInspectorTransportPrompt, } from "./invocation.js";
+import { admitInspectorInvocation, buildInspectorTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInspectorRun, markRunAdmitted, parentRunPathFromGatePointerInstruction, } from "./run-lifecycle.js";
 import { presentStructuralRejection, trySettleInspectorTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
+function inspectorParentRunPath(admitted) {
+    if (typeof admitted.sourceRunPath === "string" && admitted.sourceRunPath.trim() !== "") {
+        return admitted.sourceRunPath;
+    }
+    return parentRunPathFromGatePointerInstruction(admitted.instruction);
+}
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildInspectorTurnRequest(admitted, options) {
+    const sourceRun = inspectorParentRunPath(admitted);
     return projectRoleTurnRequest(admitted, {
         activation: {
             role: "inspector",
+            ...(sourceRun === undefined ? {} : { sourceRun }),
         },
     }, options);
 }
@@ -34,7 +42,7 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
     // #753/#786: gate re-ask / verbatim submission body ride summons.instruction on resume.
     const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
     if (parentRunPath !== undefined) {
-        const resumeInstruction = env.reviewReask;
+        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
         const summons = {
             sourceRunPath: parentRunPath,
             ...(resumeInstruction === undefined
@@ -79,6 +87,10 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
         throw error;
     }
     await markRunAdmitted(admitted, env.principalAuthority);
+    if (parentRunPath !== undefined) {
+        await persistAdmittedSourceRunPath(admitted, parentRunPath);
+        admitted = { ...admitted, sourceRunPath: parentRunPath };
+    }
     const engineMaterial = engineSessionMaterialFromOptions({
         ...pickEngineAxis(env),
         packageRoot: env.packageRoot,
@@ -95,7 +107,9 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
             : { correlationId: env.correlationId }),
         continuation: {
             kind: "initial",
-            prompt: buildInspectorTransportPrompt(admitted, engineMaterial),
+            // #879: gate first mint uses parent payload as content; binding stays typed activation.
+            prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                ?? buildInspectorTransportPrompt(admitted, engineMaterial),
         },
     });
     return await runPostAdmissionOneShot({

package/dist/public-cli/instruction-seat-run.js

@@ -36,7 +36,9 @@ function instructionSeatAdapters(options) {
             return infrastructureFailure === undefined
                 ? result.knownFailure
                 : {
-                    cause: infrastructureFailure.cause,
+                    ...(infrastructureFailure.cause === undefined
+                        ? {}
+                        : { cause: infrastructureFailure.cause }),
                     diagnostic: infrastructureFailure.diagnostic,
                     ...(infrastructureFailure.identity === undefined
                         ? {}
@@ -150,8 +152,9 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
             return { exitCode: 2 };
         }
     }
-    // #756/#786: auditor reask / verbatim submission body ride summons.instruction on resume.
-    const resumeInstruction = env.reviewReask;
+    // #756/#879: auditor reask / verbatim submission body ride summons.instruction.
+    // Binding pointer stays --source-run / argv 卷宗指针; content is body or reask.
+    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
     const summons = {
         ...(resumeInstruction === undefined
             ? {
@@ -223,10 +226,12 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
                     : { correlationId: env.correlationId }),
                 continuation: {
                     kind: "initial",
-                    prompt: buildInstructionTransportPrompt(admitted, engineSessionMaterialFromOptions({
-                        ...pickEngineAxis(env),
-                        packageRoot: env.packageRoot,
-                    })),
+                    // #879: gate first mint uses parent payload as content when present.
+                    prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                        ?? buildInstructionTransportPrompt(admitted, engineSessionMaterialFromOptions({
+                            ...pickEngineAxis(env),
+                            packageRoot: env.packageRoot,
+                        })),
                 },
             });
             return await runPostAdmissionOneShot({

package/dist/public-cli/judge-run.js

@@ -18,7 +18,9 @@ function judgeAdapters() {
                 (infrastructureFailure === undefined
                     ? undefined
                     : {
-                        cause: infrastructureFailure.cause,
+                        ...(infrastructureFailure.cause === undefined
+                            ? {}
+                            : { cause: infrastructureFailure.cause }),
                         diagnostic: infrastructureFailure.diagnostic,
                         ...(infrastructureFailure.identity === undefined
                             ? {}