@akagilnc/pi-workflow-roles 0.1.4021 → 0.1.4062

package/src/pi/role-turn-host.ts

@@ -21,9 +21,10 @@ import type {
   RoleTurnRequest,
   RoleTurnResult,
 } from "../host-contracts.ts";
-import { ExplicitInternalActivationError } from "../host-contracts.ts";
-import { applyEngineChildEnv } from "../engine-detour.ts";
+import { ExplicitInternalActivationError, isOfficerReviewSeat } from "../host-contracts.ts";
+import { applyEngineChildEnv, ENGINE_MODEL_FLAG_NAME, normalizeEngineName } from "../engine-detour.ts";
 import { projectActivationFlags } from "../role-activation-flags.ts";
+import { encodeUserDialogueStdin } from "../user-dialogue-stdin.ts";
 
 
 /** Package-relative Internal role entrypoint (ADR 0052; same path as public-cli registry). */
@@ -119,7 +120,7 @@ export function applyPiNativeSkillInvocation(
  * Pi last-hop argv after `--no-extensions -e entry` (#819).
  * Activation flag membership comes from middle-layer projectActivationFlags;
  * this function only renders session coords, controlled constants, and pairs.
- * Single forced method → Pi-native `/skill:` on the argv prompt (#822).
+ * User dialogue is not an argv element (#879): it rides spawn stdin.
  */
 export function buildPiTurnExtraArgs(
   request: RoleTurnRequest,
@@ -127,14 +128,6 @@ export function buildPiTurnExtraArgs(
   extraPiArgs: readonly string[] = [],
 ): string[] {
   const { sessionFile, sessionDirectory } = authority.decode(request.principal);
-  const rawPrompt =
-    request.continuation.kind === "initial" || request.continuation.kind === "resume"
-      ? request.continuation.prompt
-      : (() => {
-          const _exhaustive: never = request.continuation;
-          return _exhaustive;
-        })();
-  const prompt = applyPiNativeSkillInvocation(request.methods, rawPrompt);
   return [
     "--no-skills",
     ...buildMethodArgs(request.methods),
@@ -148,13 +141,31 @@ export function buildPiTurnExtraArgs(
     ...extraPiArgs,
     // Envelope assembly = projectActivationFlags; pi only renders argv pairs.
     ...activationFlagsToPiArgv(projectActivationFlags(request)),
+    ...piEngineModelArgs(request),
     "--mode",
     "json",
     ...buildSeatModelCliArgs(request.model),
-    prompt,
   ];
 }
 
+/** Engine name stays on child env; model has no env fallback (#883 / #879). */
+function piEngineModelArgs(request: RoleTurnRequest): string[] {
+  const model = normalizeEngineName(request.engineModel);
+  if (model === undefined) return [];
+  return [`--${ENGINE_MODEL_FLAG_NAME}`, model];
+}
+
+function piUserDialogueBody(request: RoleTurnRequest): string {
+  const rawPrompt =
+    request.continuation.kind === "initial" || request.continuation.kind === "resume"
+      ? request.continuation.prompt
+      : (() => {
+          const _exhaustive: never = request.continuation;
+          return _exhaustive;
+        })();
+  return applyPiNativeSkillInvocation(request.methods, rawPrompt);
+}
+
 export type PiSpawnRunner = (
   args: readonly string[],
   options: {
@@ -163,6 +174,8 @@ export type PiSpawnRunner = (
     timeoutMs?: number;
     /** Parent cancellation; the child gets the same graceful SIGTERM as a budget. */
     signal?: AbortSignal;
+    /** User dialogue body; omitted from argv so execve cannot E2BIG (#879). */
+    stdin?: string;
   },
 ) => Promise<{
   code: number | null;
@@ -271,11 +284,22 @@ export function createDefaultPiSpawnRunner(options: {
       const child = spawn(piIdentity.executable, [...args], {
         cwd: spawnOptions.cwd,
         env: spawnOptions.env,
-        stdio: ["ignore", "ignore", "pipe"],
+        stdio: ["pipe", "ignore", "pipe"],
       });
+      if (child.stdin === null) {
+        throw new Error("Pi child stdin pipe was not created");
+      }
       if (child.stderr === null) {
         throw new Error("Pi child stderr pipe was not created");
       }
+      let stdinDeliveryError: Error | undefined;
+      child.stdin.on("error", (error) => {
+        stdinDeliveryError ??= error;
+      });
+      if (spawnOptions.stdin !== undefined) {
+        child.stdin.write(spawnOptions.stdin);
+      }
+      child.stdin.end();
       let stderr = "";
       let timedOut = false;
       // No default wall clock. Only an explicit caller budget arms a timer (ADR 0010).
@@ -344,6 +368,10 @@ export function createDefaultPiSpawnRunner(options: {
               reject(executionError);
               return;
             }
+            if (stdinDeliveryError !== undefined) {
+              reject(stdinDeliveryError);
+              return;
+            }
             resolveResult({
               code,
               stderr,
@@ -375,9 +403,13 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
     async executeTurn(request: RoleTurnRequest): Promise<RoleTurnResult> {
       // #617 DK-7: Pi argv gets projected native paths once; never record bytes.
       // Pi already owns its own session file, so only sitian prior volume rides in.
+      // #879: station-child officer dialogue keeps peer words — do not splice
+      // host-transition priorNativePaths into the review prompt body.
       let turnRequest = request;
+      const officerStationChild =
+        request.stationChild === true && isOfficerReviewSeat(request.activation.role);
       const paths =
-        request.hostTransition?.priorNativeKind === "sitian"
+        !officerStationChild && request.hostTransition?.priorNativeKind === "sitian"
           ? request.hostTransition.priorNativePaths
           : undefined;
       if (
@@ -400,6 +432,7 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
         config.extraPiArgs ?? [],
       );
       const args = buildExplicitInternalActivationArgs(roleEntry, extraArgs);
+      const stdin = encodeUserDialogueStdin(piUserDialogueBody(turnRequest));
       // Shared envelope isolates this call's court identity: omitting courtAttemptId
       // must not inherit a parent process.env.AK_ROLE_COURT_ATTEMPT (#637).
       const env: NodeJS.ProcessEnv = {
@@ -444,6 +477,7 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
       return await spawnRunner(args, {
         cwd: request.cwd,
         env,
+        stdin,
         ...(timeoutMs === undefined ? {} : { timeoutMs }),
         ...(request.signal === undefined ? {} : { signal: request.signal }),
       });

package/src/public-cli/auto-resume.ts

@@ -33,6 +33,7 @@ import {
 import { parseAutoResumeLimit } from "./config.ts";
 import { isLawfulTypedTerminalOutcome, formatTerminalResult, type TerminalArtifactRef, type TerminalResult, type TerminalRoleName } from "./terminal.ts";
 import {
+  attachRecordedSubmissions,
   presentFailureTerminal,
   presentStructuralRejection,
   resolveControlledFailureResumeObservation,
@@ -362,6 +363,33 @@ function unwrapTurnDispatchedFailure(error: unknown): unknown {
   return current;
 }
 
+async function attachDispatchExceptionTerminal(
+  admitted: {
+    readonly runDirectory: string;
+    readonly runId: string;
+    readonly projectRoot: string;
+  },
+  terminal: TerminalResult,
+  io: CliIo,
+): Promise<TerminalResult> {
+  try {
+    return await attachRecordedSubmissions(
+      {
+        projectRoot: admitted.projectRoot,
+        runId: admitted.runId,
+        runDirectory: admitted.runDirectory,
+      },
+      terminal,
+    );
+  } catch (error) {
+    // Existing diagnostic seam: attach true cause on stderr, original Terminal stays.
+    io.stderr(
+      `dispatch exception ledger attach failed (best-effort continue): ${describeErrorIdentity(error)}\n`,
+    );
+    return terminal;
+  }
+}
+
 /**
  * Typed failure terminal for a retry path that ended with only exceptions:
  * loud, non-lawful, carrying the last true cause and the pointers to the
@@ -384,8 +412,8 @@ function dispatchExceptionFailureTerminal(input: {
     ? "dispatch threw an exception on every attempt"
     : "the final dispatch threw an exception";
   const diagnostic = `${history} (${input.endReason}; resumes used ${input.autoResumeAttempts}); last cause: ${describeErrorIdentity(causeError)}`;
+  // #881: no fabricated cause class — original error identity + error-file pointers carry the fact.
   const decisiveFacts: Record<string, unknown> = {
-    cause: "unrecognized",
     diagnostic,
     resumesUsed: input.autoResumeAttempts,
     dispatchErrorFiles: [...input.errorFiles],
@@ -406,7 +434,6 @@ function dispatchExceptionFailureTerminal(input: {
     roleOutcome: {
       kind: "failure",
       role: input.role,
-      cause: "unrecognized",
       diagnostic,
       decisiveFacts,
     },
@@ -427,6 +454,8 @@ export async function runWithAutoResumeLoop<
     role: TerminalRoleName;
     runId: string;
     principal: DurablePrincipal;
+    /** Required: exception terminals attach the ledger via this existing admitted fact. */
+    projectRoot: string;
   };
   principalAuthority: DurablePrincipalAuthority;
   /**
@@ -571,15 +600,19 @@ export async function runWithAutoResumeLoop<
     } else {
       // Exception path: continue through the identical budget/session gates.
       if (autoResumeAttempts >= limit) {
-        const terminal = dispatchExceptionFailureTerminal({
-          role: options.admitted.role,
-          runId: options.admitted.runId,
-          causeError: lastThrownError,
-          errorFiles: retainedErrorFiles,
-          autoResumeAttempts,
-          endReason: "auto-resume budget exhausted",
-          everyAttemptThrew,
-        });
+        const terminal = await attachDispatchExceptionTerminal(
+          options.admitted,
+          dispatchExceptionFailureTerminal({
+            role: options.admitted.role,
+            runId: options.admitted.runId,
+            causeError: lastThrownError,
+            errorFiles: retainedErrorFiles,
+            autoResumeAttempts,
+            endReason: "auto-resume budget exhausted",
+            everyAttemptThrew,
+          }),
+          options.io,
+        );
         await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
         presentTerminal(terminal, options.io);
         return {
@@ -588,15 +621,19 @@ export async function runWithAutoResumeLoop<
         } as T;
       }
       if (!(await isPrincipalAvailable(options.admitted.principal))) {
-        const terminal = dispatchExceptionFailureTerminal({
-          role: options.admitted.role,
-          runId: options.admitted.runId,
-          causeError: lastThrownError,
-          errorFiles: retainedErrorFiles,
-          autoResumeAttempts,
-          endReason: "session principal unavailable before further resume",
-          everyAttemptThrew,
-        });
+        const terminal = await attachDispatchExceptionTerminal(
+          options.admitted,
+          dispatchExceptionFailureTerminal({
+            role: options.admitted.role,
+            runId: options.admitted.runId,
+            causeError: lastThrownError,
+            errorFiles: retainedErrorFiles,
+            autoResumeAttempts,
+            endReason: "session principal unavailable before further resume",
+            everyAttemptThrew,
+          }),
+          options.io,
+        );
         await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
         presentTerminal(terminal, options.io);
         return {

package/src/public-cli/case-dossier-delivery.ts

@@ -5,13 +5,31 @@
  * 只读已有案卷：不刷新、不生成、不校验内容、不新增拒收或停工条件。
  * 机器文本仅中立标识材料（ADR 0073），用途说明归角色材料所有。
  *
- * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口追加本段。
+ * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口挂载。
+ * 普通入口把本段追加进 continuation；station-child 审核轮次走 attachments
+ * 冻结 + role-runtime `loadCaseDossierReadingMaterial` → readingMaterial →
+ * systemPrompt.materials fold（#879：对话 instruction 保持父腿 payload 原文；
+ * 起居录作独立附件面，不新造 RoleTurnRequest.materials）。
  */
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
 import { resolveTicketProvenanceVolume } from "../ticket-provenance.ts";
+import {
+  freezeAttachmentsIntoRun,
+  type FrozenAttachment,
+} from "./invocation.ts";
 
 /** Section heading of the system-delivered dossier pointer (presentation only). */
 const CASE_DOSSIER_SECTION_HEADING = "## 本票起居录（系统随案提供）" as const;
 
+/** Stable freeze key under run/attachments/ for station-child 0081 delivery. */
+const CASE_DOSSIER_ATTACH_KEY = "case-dossier" as const;
+
+/** Leaf name of the frozen pointer section (content = purpose + paths). */
+const CASE_DOSSIER_ATTACH_FILE = "case-dossier-pointer.md" as const;
+
 /** Pointer only — presence/absence is for the role to observe at the path. */
 function describeDossierFile(path: string): string {
   return path;
@@ -42,3 +60,70 @@ export async function projectCaseDossierPointerSection(input: {
     `记录卷宗：${describeDossierFile(volume.recordFile)}`,
   ].join("\n");
 }
+
+/**
+ * ADR 0081 delivery for station-child officer turns (#879): freeze the same
+ * pointer section through the existing attachments seam. Role-runtime loads
+ * that freeze via loadCaseDossierReadingMaterial onto readingMaterial; the
+ * envelope then folds it into systemPrompt.materials. Peer dialogue instruction
+ * stays the parent payload; never RoleTurnRequest.materials.
+ * Returns frozen attachments, or undefined when unbound (no dossier).
+ */
+export async function deliverCaseDossierAsAttachment(input: {
+  readonly ticketNumber: number | undefined;
+  readonly projectRoot: string;
+  readonly home: string;
+  readonly runDirectory: string;
+}): Promise<readonly FrozenAttachment[] | undefined> {
+  const section = await projectCaseDossierPointerSection({
+    ticketNumber: input.ticketNumber,
+    projectRoot: input.projectRoot,
+    home: input.home,
+  });
+  if (section === undefined) return undefined;
+  // Stage in OS temp only — never leave a run-local .case-dossier-stage copy.
+  const stagingDir = await mkdtemp(join(tmpdir(), "ak-case-dossier-"));
+  try {
+    const stagingPath = join(stagingDir, CASE_DOSSIER_ATTACH_FILE);
+    await writeFile(stagingPath, `${section}\n`, "utf8");
+    return await freezeAttachmentsIntoRun(
+      [stagingPath],
+      input.runDirectory,
+      CASE_DOSSIER_ATTACH_KEY,
+    );
+  } finally {
+    await rm(stagingDir, { recursive: true, force: true });
+  }
+}
+
+/** Typed reading-material face for a frozen station-child 0081 attachment. */
+export type CaseDossierReadingMaterial = {
+  readonly kind: "case-dossier-pointer";
+  readonly frozenPath: string;
+  readonly section: string;
+};
+
+/**
+ * Load a previously frozen case-dossier attachment as reading material
+ * (existing agent-start / systemPrompt.materials fold — not dialogue prompt,
+ * not RoleTurnRequest.materials). Undefined when the run has no such freeze.
+ */
+export async function loadCaseDossierReadingMaterial(
+  runDirectory: string,
+): Promise<CaseDossierReadingMaterial | undefined> {
+  const frozenPath = join(
+    runDirectory,
+    "attachments",
+    CASE_DOSSIER_ATTACH_KEY,
+    `00-${CASE_DOSSIER_ATTACH_FILE}`,
+  );
+  let section: string;
+  try {
+    section = await readFile(frozenPath, "utf8");
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return undefined;
+    throw error;
+  }
+  if (section.trim() === "") return undefined;
+  return { kind: "case-dossier-pointer", frozenPath, section };
+}

package/src/public-cli/cli.ts

@@ -1637,10 +1637,10 @@ export async function runAkRole(
       if (error.cause !== undefined) {
         const detail = formatErrorCauseDetail(error.cause);
         if (detail.trim().length > 0) {
-          label = `${label || error.name || "unrecognized exception"}; cause: ${detail}`;
+          label = `${label || error.name || "exception"}; cause: ${detail}`;
         }
       }
-      io.stderr(formatCliDiagnostic(label || error.name || "unrecognized exception"));
+      io.stderr(formatCliDiagnostic(label || error.name || "exception"));
       return { exitCode: 1 };
     }
     io.stderr(formatCliDiagnostic(String(error)));

package/src/public-cli/collector-run.ts

@@ -142,7 +142,9 @@ function collectorAdapters(): PostAdmissionAdapters<AdmittedCollectorInvocation>
         (infrastructureFailure === undefined
           ? undefined
           : {
-              cause: infrastructureFailure.cause,
+              ...(infrastructureFailure.cause === undefined
+                ? {}
+                : { cause: infrastructureFailure.cause }),
               diagnostic: infrastructureFailure.diagnostic,
               ...(infrastructureFailure.identity === undefined
                 ? {}

package/src/public-cli/countersign-run.ts

@@ -54,7 +54,7 @@ import {
   trySettleCountersignTerminalResult,
 } from "./settlement.ts";
 import type { CliIo } from "./cli-io.ts";
-import { lastRolePayloadRecord, type TerminalResult } from "./terminal.ts";
+import type { TerminalResult, TerminalRoleOutcome } from "./terminal.ts";
 import {
   projectRoleTurnRequest,
   type RoleTurnRequestProjectionOptions,
@@ -96,7 +96,24 @@ export function buildCountersignTurnRequest(
 type CourtDiaristIdentity =
   | { readonly kind: "ticket"; readonly ticketNumber: number }
   | { readonly kind: "unbound" }
-  | { readonly kind: "escalate"; readonly reason: string };
+  | { readonly kind: "escalate" };
+
+type CourtDiaristInvocationResult = {
+  readonly identity: CourtDiaristIdentity;
+  readonly failedWithoutEscalate?: { readonly diagnostic: string };
+};
+
+/** Routing boolean over the child's own typed sequence — does not pick or rewrite a sole row. */
+function courtDiaristEscalated(roleOutcome: TerminalRoleOutcome | undefined): boolean {
+  if (roleOutcome === undefined) return false;
+  if (roleOutcome.kind === "audit_escalation") return true;
+  if (roleOutcome.kind !== "accepted") return false;
+  return (roleOutcome.payloads ?? []).some((payload) => {
+    if (typeof payload !== "object" || payload === null || Array.isArray(payload)) return false;
+    const record = payload as Record<string, unknown>;
+    return record.status === "escalate" || record.countersignStatus === "escalate";
+  });
+}
 
 /**
  * Invoke public 起居郎 under the court-pipeline quiet face.
@@ -112,10 +129,7 @@ async function invokeCourtDiarist(input: {
   readonly failureLabel: string;
   /** Already-verified typed key from countersign (refresh / post-assert handoff). */
   readonly boundTicketNumber?: number;
-}, env: CountersignRunEnv, io: CliIo): Promise<{
-  readonly identity: CourtDiaristIdentity;
-  readonly failedWithoutEscalate?: { readonly diagnostic: string };
-}> {
+}, env: CountersignRunEnv, io: CliIo): Promise<CourtDiaristInvocationResult> {
   // Quiet face: the countersign caller must not see diarist CLI chatter.
   const quietIo: CliIo = {
     stdout() {},
@@ -145,23 +159,12 @@ async function invokeCourtDiarist(input: {
   });
 
   const roleOutcome = result.terminal?.roleOutcome;
-  if (roleOutcome !== undefined && (roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation")) {
-    const facts = lastRolePayloadRecord(roleOutcome.payloads ?? []);
-    const status =
-      typeof facts?.status === "string"
-        ? facts.status
-        : typeof facts?.countersignStatus === "string"
-          ? facts.countersignStatus
-          : roleOutcome.kind === "audit_escalation"
-            ? "escalate"
-            : undefined;
-    if (status === "escalate") {
-      const reason =
-        typeof facts?.reason === "string"
-          ? facts.reason
-          : "diarist escalated without reason";
-      return { identity: { kind: "escalate", reason } };
-    }
+  // Escalate routing is a boolean over the preserved sequence (#881). Reasons and
+  // payload bodies stay on roleOutcome — never rewritten into a sole identity reason.
+  if (courtDiaristEscalated(roleOutcome)) {
+    return {
+      identity: { kind: "escalate" },
+    };
   }
 
   if (result.exitCode !== 0) {
@@ -183,9 +186,13 @@ async function invokeCourtDiarist(input: {
     Number.isSafeInteger(asserted) &&
     asserted >= 1
   ) {
-    return { identity: { kind: "ticket", ticketNumber: asserted } };
+    return {
+      identity: { kind: "ticket", ticketNumber: asserted },
+    };
   }
-  return { identity: { kind: "unbound" } };
+  return {
+    identity: { kind: "unbound" },
+  };
 }
 
 /**
@@ -226,7 +233,7 @@ export async function runCountersignCourtDiaristStation(
 
   if (outcome.identity.kind === "escalate") {
     throw new StationChildExhaustedError(
-      `court diarist station escalated (cannot identify court target): ${outcome.identity.reason}`,
+      "court diarist station escalated (cannot identify court target)",
     );
   }
   if (outcome.failedWithoutEscalate !== undefined) {
@@ -309,7 +316,7 @@ export async function runPublicCountersign(
           code: null,
           stderr: "",
           thrown: new Error(
-            `court diarist station escalated (cannot identify court target): ${outcome.identity.reason}`,
+            "court diarist station escalated (cannot identify court target)",
           ),
         },
         countersignAdapters(),

package/src/public-cli/diarist-run.ts

@@ -35,11 +35,12 @@ import {
   trySettleDiaristTerminalResult,
 } from "./settlement.ts";
 import type { CliIo } from "./cli-io.ts";
-import { lastRolePayloadRecord, type TerminalResult } from "./terminal.ts";
+import type { TerminalResult } from "./terminal.ts";
 import {
   projectRoleTurnRequest,
   type RoleTurnRequestProjectionOptions,
 } from "./turn-request.ts";
+import { readRunTicketNumber } from "../run-ticket-number.ts";
 
 export type DiaristRunEnv = PostAdmissionEnv & {
   principalAuthority: DurablePrincipalAuthority;
@@ -191,33 +192,15 @@ export async function runPublicDiarist(
     adapters: diaristAdapters(),
     ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
   }).then(async (result) => {
-    // Accept may have bound ticket onto durable pages after LLM assertion.
-    // Mirror only lawful non-escalate accepted terminals — escalate must not
-    // leak an unverified ticketNumber into the caller-visible typed key.
+    // Accept hook binds ticket onto durable pages (#771). Mirror that page fact
+    // onto the caller-visible admitted object — never pick a ticketNumber out of
+    // the payload sequence (#881 sole-collapse ban on ticket/escalate).
     if (admitted.ticketNumber === undefined && result.admitted !== undefined) {
-      const roleOutcome = result.terminal?.roleOutcome;
-      const facts =
-        roleOutcome?.kind === "accepted"
-          ? lastRolePayloadRecord(roleOutcome.payloads ?? [])
-          : undefined;
-      if (
-        roleOutcome !== undefined &&
-        roleOutcome.kind === "accepted" &&
-        facts?.status !== "escalate"
-      ) {
-        const raw =
-          typeof facts?.ticketNumber === "number"
-            ? facts.ticketNumber
-            : typeof facts?.sitian === "object"
-              && facts.sitian !== null
-              && typeof (facts.sitian as { ticketNumber?: unknown }).ticketNumber === "number"
-              ? (facts.sitian as { ticketNumber: number }).ticketNumber
-              : undefined;
-        if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) {
-          (admitted as { ticketNumber?: number }).ticketNumber = raw;
-          if (result.admitted.ticketNumber === undefined) {
-            (result.admitted as { ticketNumber?: number }).ticketNumber = raw;
-          }
+      const fromPages = await readRunTicketNumber(admitted.runDirectory);
+      if (fromPages !== undefined) {
+        await bindAdmittedTicketNumber(admitted, fromPages);
+        if (result.admitted.ticketNumber === undefined) {
+          (result.admitted as { ticketNumber?: number }).ticketNumber = fromPages;
         }
       }
     }

package/src/public-cli/inspector-run.ts

@@ -12,6 +12,7 @@ import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.ts";
 import {
   admitInspectorInvocation,
   buildInspectorTransportPrompt,
+  persistAdmittedSourceRunPath,
   type AdmittedInspectorInvocation,
   type ParseInspectorArgvResult,
 } from "./invocation.ts";
@@ -50,18 +51,35 @@ export type InspectorRunEnv = PostAdmissionEnv & {
    * Never a public CLI argv — must not pollute the 卷宗指针 parentRunPath key (#747).
    */
   reviewReask?: string;
+  /**
+   * #879 gate summons: verbatim parent-submission body for officer dialogue content.
+   * Rides summons.instruction / first-mint prompt when reviewReask is absent.
+   * Argv 卷宗指针 stays the binding/lookup key only.
+   */
+  gateReviewInstruction?: string;
 };
 
+function inspectorParentRunPath(
+  admitted: AdmittedInspectorInvocation,
+): string | undefined {
+  if (typeof admitted.sourceRunPath === "string" && admitted.sourceRunPath.trim() !== "") {
+    return admitted.sourceRunPath;
+  }
+  return parentRunPathFromGatePointerInstruction(admitted.instruction);
+}
+
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildInspectorTurnRequest(
   admitted: AdmittedInspectorInvocation,
   options: RoleTurnRequestProjectionOptions,
 ): RoleTurnRequest {
+  const sourceRun = inspectorParentRunPath(admitted);
   return projectRoleTurnRequest(
     admitted,
     {
       activation: {
         role: "inspector" as const,
+        ...(sourceRun === undefined ? {} : { sourceRun }),
       },
     },
     options,
@@ -97,7 +115,7 @@ export async function runPublicInspector(
   // #753/#786: gate re-ask / verbatim submission body ride summons.instruction on resume.
   const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
   if (parentRunPath !== undefined) {
-    const resumeInstruction = env.reviewReask;
+    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
     const summons: SameTicketSummonsMaterials = {
       sourceRunPath: parentRunPath,
       ...(resumeInstruction === undefined
@@ -147,6 +165,10 @@ export async function runPublicInspector(
   }
 
   await markRunAdmitted(admitted, env.principalAuthority);
+  if (parentRunPath !== undefined) {
+    await persistAdmittedSourceRunPath(admitted, parentRunPath);
+    admitted = { ...admitted, sourceRunPath: parentRunPath };
+  }
 
   const engineMaterial = engineSessionMaterialFromOptions({
     ...pickEngineAxis(env),
@@ -164,7 +186,9 @@ export async function runPublicInspector(
       : { correlationId: env.correlationId }),
     continuation: {
       kind: "initial",
-      prompt: buildInspectorTransportPrompt(admitted, engineMaterial),
+      // #879: gate first mint uses parent payload as content; binding stays typed activation.
+      prompt: (env.reviewReask ?? env.gateReviewInstruction)
+        ?? buildInspectorTransportPrompt(admitted, engineMaterial),
     },
   });