@akagilnc/pi-workflow-roles 0.1.4035 → 0.1.4062

package/dist/host-contracts.js

@@ -15,3 +15,19 @@ export class ExplicitInternalActivationError extends Error {
         }
     }
 }
+/** Gate review officers (察院 / 符宝郎 / 审刑院). Single authority for seat checks. */
+export function isOfficerReviewSeat(role) {
+    return role === "notary" || role === "inspector" || role === "auditor";
+}
+/** Per-turn run directory; adapters must project any child-process identity. */
+export function runDirectoryFromHostContext(context) {
+    return typeof context.runDirectory === "string" && context.runDirectory.trim() !== ""
+        ? context.runDirectory
+        : undefined;
+}
+/** Per-turn court attempt; absence never inherits ambient process identity. */
+export function courtAttemptIdFromHostContext(context) {
+    return typeof context.courtAttemptId === "string" && context.courtAttemptId.trim() !== ""
+        ? context.courtAttemptId
+        : undefined;
+}

package/dist/inspector-contracts.js

@@ -1,5 +1,12 @@
 const INSPECTOR_OUTPUT_TOOL_NAME = "ak_inspector_output";
 const INSPECTOR_ACCEPTED_TEXT = "\u5BDF\u9662\u56DE\u6267\u5DF2\u63A5\u53D7";
+const INSPECTOR_SOURCE_RUN_FLAG = {
+  name: "ak-inspector-source-run",
+  definition: {
+    description: "\u5BDF\u9662\u521D\u94F8\u7ED1\u5B9A\u7684\u7236 run \u7EDD\u5BF9\u8DEF\u5F84",
+    type: "string"
+  }
+};
 function validateRecordedInspectorOutput(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("Inspector output has no execution discriminator");
@@ -18,5 +25,6 @@ function validateRecordedInspectorOutput(value) {
 export {
   INSPECTOR_ACCEPTED_TEXT,
   INSPECTOR_OUTPUT_TOOL_NAME,
+  INSPECTOR_SOURCE_RUN_FLAG,
   validateRecordedInspectorOutput
 };

package/dist/packaged-role-registry.js

@@ -158,7 +158,7 @@ const PUBLIC_ROLE_RECORDS = [
     role: "inspector",
     phases: [null],
     outputTool: INSPECTOR_OUTPUT_TOOL_NAME,
-    inputFlag: void 0,
+    inputFlag: "ak-inspector-source-run",
     phaseFlag: void 0,
     activationStage: "load-and-install",
     sessionMaterials: INSPECTOR_SESSION_MATERIALS

package/dist/pi/role-turn-host.js

@@ -10,9 +10,10 @@ import { basename, delimiter, dirname, isAbsolute, join, resolve } from "node:pa
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID } from "node:crypto";
-import { ExplicitInternalActivationError } from "../host-contracts.js";
-import { applyEngineChildEnv } from "../engine-detour.js";
+import { ExplicitInternalActivationError, isOfficerReviewSeat } from "../host-contracts.js";
+import { applyEngineChildEnv, ENGINE_MODEL_FLAG_NAME, normalizeEngineName } from "../engine-detour.js";
 import { projectActivationFlags } from "../role-activation-flags.js";
+import { encodeUserDialogueStdin } from "../user-dialogue-stdin.js";
 /** Package-relative Internal role entrypoint (ADR 0052; same path as public-cli registry). */
 const INTERNAL_ROLE_ENTRYPOINT_RELATIVE = "extensions/role-runtime.ts";
 export function resolveInternalRoleEntrypoint(packageRoot) {
@@ -95,17 +96,10 @@ export function applyPiNativeSkillInvocation(methods, prompt) {
  * Pi last-hop argv after `--no-extensions -e entry` (#819).
  * Activation flag membership comes from middle-layer projectActivationFlags;
  * this function only renders session coords, controlled constants, and pairs.
- * Single forced method → Pi-native `/skill:` on the argv prompt (#822).
+ * User dialogue is not an argv element (#879): it rides spawn stdin.
  */
 export function buildPiTurnExtraArgs(request, authority, extraPiArgs = []) {
     const { sessionFile, sessionDirectory } = authority.decode(request.principal);
-    const rawPrompt = request.continuation.kind === "initial" || request.continuation.kind === "resume"
-        ? request.continuation.prompt
-        : (() => {
-            const _exhaustive = request.continuation;
-            return _exhaustive;
-        })();
-    const prompt = applyPiNativeSkillInvocation(request.methods, rawPrompt);
     return [
         "--no-skills",
         ...buildMethodArgs(request.methods),
@@ -119,12 +113,28 @@ export function buildPiTurnExtraArgs(request, authority, extraPiArgs = []) {
         ...extraPiArgs,
         // Envelope assembly = projectActivationFlags; pi only renders argv pairs.
         ...activationFlagsToPiArgv(projectActivationFlags(request)),
+        ...piEngineModelArgs(request),
         "--mode",
         "json",
         ...buildSeatModelCliArgs(request.model),
-        prompt,
     ];
 }
+/** Engine name stays on child env; model has no env fallback (#883 / #879). */
+function piEngineModelArgs(request) {
+    const model = normalizeEngineName(request.engineModel);
+    if (model === undefined)
+        return [];
+    return [`--${ENGINE_MODEL_FLAG_NAME}`, model];
+}
+function piUserDialogueBody(request) {
+    const rawPrompt = request.continuation.kind === "initial" || request.continuation.kind === "resume"
+        ? request.continuation.prompt
+        : (() => {
+            const _exhaustive = request.continuation;
+            return _exhaustive;
+        })();
+    return applyPiNativeSkillInvocation(request.methods, rawPrompt);
+}
 const execFileAsync = promisify(execFile);
 async function resolveSelectedPi(command, cwd, env) {
     const searchPath = env.PATH ?? (platform === "win32" ? (process.env.PATH ?? "") : "/usr/bin:/bin");
@@ -173,11 +183,22 @@ export function createDefaultPiSpawnRunner(options) {
             const child = spawn(piIdentity.executable, [...args], {
                 cwd: spawnOptions.cwd,
                 env: spawnOptions.env,
-                stdio: ["ignore", "ignore", "pipe"],
+                stdio: ["pipe", "ignore", "pipe"],
             });
+            if (child.stdin === null) {
+                throw new Error("Pi child stdin pipe was not created");
+            }
             if (child.stderr === null) {
                 throw new Error("Pi child stderr pipe was not created");
             }
+            let stdinDeliveryError;
+            child.stdin.on("error", (error) => {
+                stdinDeliveryError ??= error;
+            });
+            if (spawnOptions.stdin !== undefined) {
+                child.stdin.write(spawnOptions.stdin);
+            }
+            child.stdin.end();
             let stderr = "";
             let timedOut = false;
             // No default wall clock. Only an explicit caller budget arms a timer (ADR 0010).
@@ -248,6 +269,10 @@ export function createDefaultPiSpawnRunner(options) {
                         reject(executionError);
                         return;
                     }
+                    if (stdinDeliveryError !== undefined) {
+                        reject(stdinDeliveryError);
+                        return;
+                    }
                     resolveResult({
                         code,
                         stderr,
@@ -275,8 +300,11 @@ export function createPiRoleTurnHost(config) {
         async executeTurn(request) {
             // #617 DK-7: Pi argv gets projected native paths once; never record bytes.
             // Pi already owns its own session file, so only sitian prior volume rides in.
+            // #879: station-child officer dialogue keeps peer words — do not splice
+            // host-transition priorNativePaths into the review prompt body.
             let turnRequest = request;
-            const paths = request.hostTransition?.priorNativeKind === "sitian"
+            const officerStationChild = request.stationChild === true && isOfficerReviewSeat(request.activation.role);
+            const paths = !officerStationChild && request.hostTransition?.priorNativeKind === "sitian"
                 ? request.hostTransition.priorNativePaths
                 : undefined;
             if (request.continuation.kind === "resume"
@@ -293,6 +321,7 @@ export function createPiRoleTurnHost(config) {
             const roleEntry = await realpath(resolveInternalRoleEntrypoint(config.packageRoot));
             const extraArgs = buildPiTurnExtraArgs(turnRequest, config.principalAuthority, config.extraPiArgs ?? []);
             const args = buildExplicitInternalActivationArgs(roleEntry, extraArgs);
+            const stdin = encodeUserDialogueStdin(piUserDialogueBody(turnRequest));
             // Shared envelope isolates this call's court identity: omitting courtAttemptId
             // must not inherit a parent process.env.AK_ROLE_COURT_ATTEMPT (#637).
             const env = {
@@ -330,6 +359,7 @@ export function createPiRoleTurnHost(config) {
             return await spawnRunner(args, {
                 cwd: request.cwd,
                 env,
+                stdin,
                 ...(timeoutMs === undefined ? {} : { timeoutMs }),
                 ...(request.signal === undefined ? {} : { signal: request.signal }),
             });

package/dist/public-cli/case-dossier-delivery.js

@@ -5,11 +5,23 @@
  * 只读已有案卷：不刷新、不生成、不校验内容、不新增拒收或停工条件。
  * 机器文本仅中立标识材料（ADR 0073），用途说明归角色材料所有。
  *
- * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口追加本段。
+ * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口挂载。
+ * 普通入口把本段追加进 continuation；station-child 审核轮次走 attachments
+ * 冻结 + role-runtime `loadCaseDossierReadingMaterial` → readingMaterial →
+ * systemPrompt.materials fold（#879：对话 instruction 保持父腿 payload 原文；
+ * 起居录作独立附件面，不新造 RoleTurnRequest.materials）。
  */
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { resolveTicketProvenanceVolume } from "../ticket-provenance.js";
+import { freezeAttachmentsIntoRun, } from "./invocation.js";
 /** Section heading of the system-delivered dossier pointer (presentation only). */
 const CASE_DOSSIER_SECTION_HEADING = "## 本票起居录（系统随案提供）";
+/** Stable freeze key under run/attachments/ for station-child 0081 delivery. */
+const CASE_DOSSIER_ATTACH_KEY = "case-dossier";
+/** Leaf name of the frozen pointer section (content = purpose + paths). */
+const CASE_DOSSIER_ATTACH_FILE = "case-dossier-pointer.md";
 /** Pointer only — presence/absence is for the role to observe at the path. */
 function describeDossierFile(path) {
     return path;
@@ -32,3 +44,50 @@ export async function projectCaseDossierPointerSection(input) {
         `记录卷宗：${describeDossierFile(volume.recordFile)}`,
     ].join("\n");
 }
+/**
+ * ADR 0081 delivery for station-child officer turns (#879): freeze the same
+ * pointer section through the existing attachments seam. Role-runtime loads
+ * that freeze via loadCaseDossierReadingMaterial onto readingMaterial; the
+ * envelope then folds it into systemPrompt.materials. Peer dialogue instruction
+ * stays the parent payload; never RoleTurnRequest.materials.
+ * Returns frozen attachments, or undefined when unbound (no dossier).
+ */
+export async function deliverCaseDossierAsAttachment(input) {
+    const section = await projectCaseDossierPointerSection({
+        ticketNumber: input.ticketNumber,
+        projectRoot: input.projectRoot,
+        home: input.home,
+    });
+    if (section === undefined)
+        return undefined;
+    // Stage in OS temp only — never leave a run-local .case-dossier-stage copy.
+    const stagingDir = await mkdtemp(join(tmpdir(), "ak-case-dossier-"));
+    try {
+        const stagingPath = join(stagingDir, CASE_DOSSIER_ATTACH_FILE);
+        await writeFile(stagingPath, `${section}\n`, "utf8");
+        return await freezeAttachmentsIntoRun([stagingPath], input.runDirectory, CASE_DOSSIER_ATTACH_KEY);
+    }
+    finally {
+        await rm(stagingDir, { recursive: true, force: true });
+    }
+}
+/**
+ * Load a previously frozen case-dossier attachment as reading material
+ * (existing agent-start / systemPrompt.materials fold — not dialogue prompt,
+ * not RoleTurnRequest.materials). Undefined when the run has no such freeze.
+ */
+export async function loadCaseDossierReadingMaterial(runDirectory) {
+    const frozenPath = join(runDirectory, "attachments", CASE_DOSSIER_ATTACH_KEY, `00-${CASE_DOSSIER_ATTACH_FILE}`);
+    let section;
+    try {
+        section = await readFile(frozenPath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (section.trim() === "")
+        return undefined;
+    return { kind: "case-dossier-pointer", frozenPath, section };
+}

package/dist/public-cli/inspector-run.js

@@ -1,16 +1,24 @@
 import { engineSessionMaterialFromOptions, pickEngineAxis } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
-import { admitInspectorInvocation, buildInspectorTransportPrompt, } from "./invocation.js";
+import { admitInspectorInvocation, buildInspectorTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInspectorRun, markRunAdmitted, parentRunPathFromGatePointerInstruction, } from "./run-lifecycle.js";
 import { presentStructuralRejection, trySettleInspectorTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
+function inspectorParentRunPath(admitted) {
+    if (typeof admitted.sourceRunPath === "string" && admitted.sourceRunPath.trim() !== "") {
+        return admitted.sourceRunPath;
+    }
+    return parentRunPathFromGatePointerInstruction(admitted.instruction);
+}
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildInspectorTurnRequest(admitted, options) {
+    const sourceRun = inspectorParentRunPath(admitted);
     return projectRoleTurnRequest(admitted, {
         activation: {
             role: "inspector",
+            ...(sourceRun === undefined ? {} : { sourceRun }),
         },
     }, options);
 }
@@ -34,7 +42,7 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
     // #753/#786: gate re-ask / verbatim submission body ride summons.instruction on resume.
     const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
     if (parentRunPath !== undefined) {
-        const resumeInstruction = env.reviewReask;
+        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
         const summons = {
             sourceRunPath: parentRunPath,
             ...(resumeInstruction === undefined
@@ -79,6 +87,10 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
         throw error;
     }
     await markRunAdmitted(admitted, env.principalAuthority);
+    if (parentRunPath !== undefined) {
+        await persistAdmittedSourceRunPath(admitted, parentRunPath);
+        admitted = { ...admitted, sourceRunPath: parentRunPath };
+    }
     const engineMaterial = engineSessionMaterialFromOptions({
         ...pickEngineAxis(env),
         packageRoot: env.packageRoot,
@@ -95,7 +107,9 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
             : { correlationId: env.correlationId }),
         continuation: {
             kind: "initial",
-            prompt: buildInspectorTransportPrompt(admitted, engineMaterial),
+            // #879: gate first mint uses parent payload as content; binding stays typed activation.
+            prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                ?? buildInspectorTransportPrompt(admitted, engineMaterial),
         },
     });
     return await runPostAdmissionOneShot({

package/dist/public-cli/instruction-seat-run.js

@@ -152,8 +152,9 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
             return { exitCode: 2 };
         }
     }
-    // #756/#786: auditor reask / verbatim submission body ride summons.instruction on resume.
-    const resumeInstruction = env.reviewReask;
+    // #756/#879: auditor reask / verbatim submission body ride summons.instruction.
+    // Binding pointer stays --source-run / argv 卷宗指针; content is body or reask.
+    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
     const summons = {
         ...(resumeInstruction === undefined
             ? {
@@ -225,10 +226,12 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
                     : { correlationId: env.correlationId }),
                 continuation: {
                     kind: "initial",
-                    prompt: buildInstructionTransportPrompt(admitted, engineSessionMaterialFromOptions({
-                        ...pickEngineAxis(env),
-                        packageRoot: env.packageRoot,
-                    })),
+                    // #879: gate first mint uses parent payload as content when present.
+                    prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                        ?? buildInstructionTransportPrompt(admitted, engineSessionMaterialFromOptions({
+                            ...pickEngineAxis(env),
+                            packageRoot: env.packageRoot,
+                        })),
                 },
             });
             return await runPostAdmissionOneShot({