@akagilnc/pi-workflow-roles 0.1.4035 → 0.1.4062

package/dist/public-cli/notary-run.js

@@ -52,10 +52,10 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
         throw error;
     }
     // #747: officer resume key is this parent source-run path (not ticket number).
-    // #753/#786: gate re-ask and verbatim submission body share summons.instruction
-    // (reask wins when both present; no parallel stack).
+    // #753/#879: gate re-ask and verbatim submission body share summons.instruction
+    // (reask wins when both present; no parallel stack). Binding stays sourceRunPath.
     {
-        const resumeInstruction = env.reviewReask;
+        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
         const summons = {
             sourceRunPath: source.runDirectory,
             sourceRun: source,
@@ -112,7 +112,10 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
             : { correlationId: env.correlationId }),
         continuation: {
             kind: "initial",
-            prompt: buildNotaryTransportPrompt(admitted, engineMaterial),
+            // #879: gate path first mint carries parent payload as dialogue content;
+            // external zero-prompt kickoff unchanged when no body/reask.
+            prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                ?? buildNotaryTransportPrompt(admitted, engineMaterial),
         },
     });
     return await runPostAdmissionOneShot({

package/dist/public-cli/post-admission.js

@@ -8,13 +8,14 @@
 import { randomUUID } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { isAbsolute, join, resolve } from "node:path";
-import { buildResumeContinuationPrompt, GATE_DOSSIER_POINTER_PREFIX, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
+import { buildResumeContinuationPrompt, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { buildInstructionTransportPrompt, freezeAttachmentsIntoRun, } from "./invocation.js";
 import { pathContainedIn } from "../activation-ledger-topology.js";
 import { pickEngineAxis } from "../package-resources/engine-material.js";
 import { resolveHostAwareSessionAvailability } from "../session-identity.js";
-import { projectCaseDossierPointerSection } from "./case-dossier-delivery.js";
+import { isOfficerReviewSeat } from "../host-contracts.js";
+import { deliverCaseDossierAsAttachment, projectCaseDossierPointerSection, } from "./case-dossier-delivery.js";
 /** Original error bytes, never relabeled — a secondary fact riding beside a classified cause. */
 function describeCaughtError(error) {
     if (error instanceof Error) {
@@ -30,6 +31,14 @@ function appendContinuationSection(continuation, section) {
         ? { kind: "initial", prompt }
         : { kind: "resume", prompt };
 }
+/**
+ * Nested gate summons (station child) on an officer seat: dialogue content is
+ * peer words only (#879). ADR 0081 case dossier still hangs via the existing
+ * attachments freeze seam — never into the peer body, never RoleTurnRequest.materials.
+ */
+function isStationChildOfficerDialogue(role, env) {
+    return env.stationChild === true && isOfficerReviewSeat(role);
+}
 import { projectHostTransitionPriorNative } from "../host-transition-prior-native.js";
 import { missingCredentialPreDispatchFailure, postRunMissingCredentialFailure, } from "./public-run-credentials.js";
 import { acquireRunWriterLease, clearCurrentCourt, clearTypedProviderHttpObservation, describeErrorIdentity, markRunRunning, readCurrentCourt, recordCurrentCourt, renderResumeCommand, RunWriterLeaseHeldError, } from "./run-lifecycle.js";
@@ -324,9 +333,9 @@ export async function dispatchPostAdmissionTurn(input) {
         // Turn request is assembled after beforeDispatch so this turn sees whatever it
         // settled — the seat's ticket bind re-projection and any court diarist station
         // writes (#742). Case dossier delivery (ADR 0081 / #709) rides here once for
-        // every public entry: first call, same-ticket re-summons and manual resume
-        // alike. System refs append their own neutral section; caller frozen
-        // attachments and the seat's own prompt bytes are never rewritten.
+        // every public entry. #879: station-child officer dialogue keeps peer body
+        // intact — 起居录 hangs via existing attachments freeze (not prompt wrap,
+        // not RoleTurnRequest.materials). Other entries keep the neutral prompt section.
         let turnRequest = env.signal === undefined ? request : { ...request, signal: env.signal };
         if (env.stationChild !== undefined) {
             turnRequest = { ...turnRequest, stationChild: env.stationChild };
@@ -334,16 +343,31 @@ export async function dispatchPostAdmissionTurn(input) {
         if (hostTransition !== undefined) {
             turnRequest = { ...turnRequest, hostTransition };
         }
-        const dossierSection = await projectCaseDossierPointerSection({
-            ticketNumber: admitted.ticketNumber,
-            projectRoot: admitted.projectRoot,
-            home: env.home,
-        });
-        if (dossierSection !== undefined) {
-            turnRequest = {
-                ...turnRequest,
-                continuation: appendContinuationSection(turnRequest.continuation, dossierSection),
-            };
+        if (isStationChildOfficerDialogue(admitted.role, env)) {
+            // 0081 non-body face: freeze pointer section under run/attachments/.
+            // Peer dialogue continuation.prompt stays parent payload only — the seat
+            // consumes the freeze via loadCaseDossierReadingMaterial → existing
+            // agent-start readingMaterial / systemPrompt.materials fold (not prompt splice,
+            // not RoleTurnRequest.materials).
+            await deliverCaseDossierAsAttachment({
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                home: env.home,
+                runDirectory: admitted.runDirectory,
+            });
+        }
+        else {
+            const dossierSection = await projectCaseDossierPointerSection({
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                home: env.home,
+            });
+            if (dossierSection !== undefined) {
+                turnRequest = {
+                    ...turnRequest,
+                    continuation: appendContinuationSection(turnRequest.continuation, dossierSection),
+                };
+            }
         }
         // Authoritative host write happens here, at the real dispatch boundary —
         // immediately before the turn actually starts, after every retryable
@@ -643,46 +667,40 @@ export async function dispatchPostAdmissionTurn(input) {
     }
 }
 /**
- * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755):
+ * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755 / #879):
  * seat-table model/engine/timeout axes, restored correlation, and either
  * - manual resume (no same-ticket summons): package envelope / optional caller
  *   message, with engine-axis handbook via buildResumeContinuationPrompt, or
  * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
- *   attachment paths only — no「重新读」、no engine handbook packaging
- *   (#750/#755), whether or not attachments are present.
+ *   attachment paths only — no「请重读」、no code-authored content substitute,
+ *   no engine handbook packaging (#750/#755/#879).
  * Caller message wins as prompt base when supplied (bytes unchanged, including
- * blank/whitespace); else summons instruction. Attachment projection must not
- * re-interpret the caller message as instructionEmpty.
+ * blank/whitespace); else summons instruction (parent payload or reask).
+ * Binding pointer stays on summons.sourceRunPath / activation — not dialogue content.
  * Seats add only their activation projection. Call prepareSummonsResumeMaterials
  * first when request.summons carries instruction or attachment paths.
  */
 export function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
-    const officerSourcePath = request.summons?.sourceRunPath;
-    const withReread = (body) => {
-        if (officerSourcePath === undefined
-            || (admitted.role !== "notary"
-                && admitted.role !== "inspector"
-                && admitted.role !== "auditor")) {
-            return body;
-        }
-        if (body.startsWith("请重读"))
-            return body;
-        return `请重读\n${body}`;
-    };
+    // #879: officer dialogue content is caller/peer words only — no「请重读」,
+    // no code-authored constant substitute, no attachment-list wrap of peer body.
+    // Binding pointer stays on summons sourceRunPath / activation / attachments.
+    const officerDialogue = isStationChildOfficerDialogue(admitted.role, env);
     let prompt;
     if (request.message !== undefined) {
         if (summonsPrepared !== undefined) {
-            // #755: same-ticket review / open-court — caller words + optional paths.
-            // Attachments are not a gate: message-only summons must stay plain too.
-            prompt = withReread(buildInstructionTransportPrompt({
-                instruction: request.message,
-                instructionEmpty: false,
-                attachments: summonsPrepared.attachments,
-            }));
+            // #755: same-ticket review / open-court — caller words.
+            // #879 station-child officer: words only (attachments are independent freeze).
+            prompt = officerDialogue
+                ? request.message
+                : buildInstructionTransportPrompt({
+                    instruction: request.message,
+                    instructionEmpty: false,
+                    attachments: summonsPrepared.attachments,
+                });
         }
         else if (request.summons !== undefined) {
             // #755: same-ticket summons without prepared materials — caller words only.
-            prompt = withReread(request.message);
+            prompt = request.message;
         }
         else {
             // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
@@ -694,27 +712,16 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         }
     }
     else if (summonsPrepared !== undefined) {
-        // #755: same-ticket review summons — instruction/attachments only.
-        prompt = withReread(buildInstructionTransportPrompt(summonsPrepared));
+        // #879 station-child officer: instruction bytes === peer body/reask (no wrap).
+        // Other seats keep #755 instruction + optional attachment path listing.
+        prompt = officerDialogue
+            ? (summonsPrepared.instructionEmpty ? "" : summonsPrepared.instruction)
+            : buildInstructionTransportPrompt(summonsPrepared);
     }
     else if (request.summons !== undefined) {
-        // #755: same-ticket summons with no instruction/attachments (e.g. notary
-        // source-run pointer). #836: officer resume opening adds「请重读」+ path pointer.
-        const path = request.summons.sourceRunPath;
-        if (path !== undefined &&
-            (admitted.role === "notary" ||
-                admitted.role === "inspector" ||
-                admitted.role === "auditor")) {
-            prompt = `请重读\n${GATE_DOSSIER_POINTER_PREFIX}${path}`;
-        }
-        else if (admitted.role === "notary" ||
-            admitted.role === "inspector" ||
-            admitted.role === "auditor") {
-            prompt = "请重读";
-        }
-        else {
-            prompt = "";
-        }
+        // #879: same-ticket summons with no instruction (e.g. notary source-run binding
+        // only). Pointer is activation/sourceRun material — not dialogue content.
+        prompt = "";
     }
     else {
         // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).

package/dist/public-cli/run-lifecycle.js

@@ -1389,6 +1389,9 @@ export async function loadResumableInspectorRun(home, runId, authority) {
     const admitted = {
         role: "inspector",
         ...resumedBaseAdmitted(loaded),
+        ...(loaded.admittedFields.sourceRunPath === undefined
+            ? {}
+            : { sourceRunPath: loaded.admittedFields.sourceRunPath }),
     };
     return seatLoadedResult(loaded, admitted);
 }

package/dist/public-cli/settlement.js

@@ -8,7 +8,7 @@ import { appendFile, lstat, mkdir, readFile, readdir, writeFile } from "node:fs/
 import { dirname, join } from "node:path";
 import { readAnalystGateCyclesFromAuditorRoles, } from "../analyst-gate-cycles-read.js";
 import { readSitianRecords, resolveSitianRecordPath, sitianReport } from "../sitian-facade.js";
-import { hasFreshAttemptSubmission, readRecordedSubmissionRows, readRecordedSubmissions, } from "../submission-ledger.js";
+import { hasFreshAttemptSubmission, readAttemptScopedSubmissionRows, readRecordedSubmissionRows, readRecordedSubmissions, } from "../submission-ledger.js";
 import { isAuditEscalationResult } from "../audit-escalation.js";
 import { AUDITOR_SOUL_ROLES } from "../auditor-soul.js";
 import { DOCTOR_AUDIT_TOOL_NAME } from "../doctor-auditor.js";
@@ -67,6 +67,17 @@ function roleOutcomeFromRows(role, rows) {
     return { kind: "accepted", role, payloads };
 }
 async function sealedLedgerOutcome(admitted, role, scope) {
+    const home = sealedLedgerHome(admitted);
+    // #879: when court scope is present, roleOutcome is this-court original only —
+    // never last-wins over an undivided historical array, and never falls back to
+    // full-run history when this court sealed zero rows. #836 presentation of full
+    // history stays on attachRecordedSubmissions / terminal.submissions (run-scoped).
+    if (scope?.courtAttemptId !== undefined && scope.courtAttemptId.length > 0) {
+        const thisCourt = await readAttemptScopedSubmissionRows(admitted.projectRoot, admitted.runId, scope.courtAttemptId, home);
+        // Scope present + zero this-court rows → no this-court outcome (not run history).
+        return roleOutcomeFromRows(role, thisCourt);
+    }
+    // No court scope: keep run-scoped ledger face (#836).
     const rows = await readRecordedSubmissionRows(admitted.projectRoot, admitted.runId, ledgerReadScope(admitted, scope));
     return roleOutcomeFromRows(role, rows);
 }
@@ -93,16 +104,22 @@ export function withSubmissions(terminal, submissions) {
     if (submissions.length === 0)
         return terminal;
     const roleOutcome = terminal.roleOutcome;
-    // Full ledger sequence always wins the role-result block (#881): do not keep a
-    // narrower pre-filtered payloads array when attach brings the complete set.
-    const withPayloads = roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation" || roleOutcome.kind === "failure"
-        ? { ...roleOutcome, payloads: submissions }
-        : roleOutcome;
+    // #879 keeps an already scoped this-court result; #881 full run history is
+    // presented independently on terminal.submissions. Only fill a missing result payload.
+    const withPayloads = roleOutcome.kind === "accepted" || roleOutcome.kind === "audit_escalation"
+        ? { ...roleOutcome, payloads: (roleOutcome.payloads ?? []).length > 0 ? roleOutcome.payloads : submissions }
+        : roleOutcome.kind === "failure"
+            ? { ...roleOutcome, payloads: roleOutcome.payloads ?? submissions }
+            : roleOutcome;
     return { ...terminal, roleOutcome: withPayloads, submissions };
 }
 /** Attach full ledger submissions onto any settled terminal (#836). */
 export async function attachRecordedSubmissions(admitted, terminal, scope) {
-    return withSubmissions(terminal, await recordedSubmissionPayloads(admitted, scope));
+    // #836 / #879: submissions presentation is always run-scoped history. Do not
+    // pass courtAttemptId here — roleOutcome already carries this-court payloads
+    // from sealedLedgerOutcome when scoped; withSubmissions keeps them.
+    void scope;
+    return withSubmissions(terminal, await recordedSubmissionPayloads(admitted, undefined));
 }
 /**
  * Host ended with no recorded submission — lawful no_receipt (exit 0).

package/dist/public-role-summons.js

@@ -159,6 +159,8 @@ async function summonPublicRole(options) {
     ...options.signal === void 0 ? {} : { signal: options.signal },
     // #753: reask rides the existing notary same-ticket resume summons.instruction.
     ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
+    // #879: verbatim submission body on officer dialogue content channel.
+    ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
     ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
     // createRunId is the only remaining env overlay — host is seat-selected above.
     ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
@@ -266,6 +268,11 @@ async function summonGateOfficer(options) {
     const { homeFromRunDirectory } = await import("./activation-ledger-topology.js");
     home = homeFromRunDirectory(options.sourceRunDirectory);
   }
+  let gateReviewInstruction;
+  if (options.reask === void 0 && options.submission !== void 0) {
+    const { readableGateItem } = await import("./readable-gate-item.js");
+    gateReviewInstruction = readableGateItem(options.submission);
+  }
   const common = {
     cwd: options.cwd,
     ...home === void 0 ? {} : { home },
@@ -273,6 +280,7 @@ async function summonGateOfficer(options) {
     ...options.io === void 0 ? {} : { io: options.io },
     ...options.signal === void 0 ? {} : { signal: options.signal },
     ...options.reask === void 0 ? {} : { reviewReask: options.reask },
+    ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction },
     ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
     ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
     ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }

package/dist/submission-ledger.js

@@ -1,4 +1,5 @@
 import { resolveActivationLedgerHome, tryHomeFromAkRolesPath, } from "./activation-ledger-topology.js";
+import { courtAttemptIdFromHostContext, runDirectoryFromHostContext, } from "./host-contracts.js";
 import { isAuditEscalationProjection } from "./audit-escalation.js";
 import { runIdFromRunDirectory } from "./run-terminal-artifacts.js";
 import { readSitianRecords, resolveSitianRecordPathInLedger, sitianReport } from "./sitian-facade.js";
@@ -10,8 +11,8 @@ import { failOnInfrastructureFailureDeclaration } from "./package-contracts/term
  * otherwise session header id. Never a shared "unbound" bucket.
  */
 function runIdentity(context) {
-    const directory = process.env.AK_ROLE_RUN_DIR;
-    if (typeof directory === "string" && directory.length > 0) {
+    const directory = runDirectoryFromHostContext(context);
+    if (directory !== undefined) {
         const fromDir = runIdFromRunDirectory(directory);
         if (fromDir !== undefined)
             return fromDir;
@@ -27,8 +28,8 @@ function runIdentity(context) {
  */
 export const COURT_ATTEMPT_ENV = "AK_ROLE_COURT_ATTEMPT";
 function attemptIdentity(context, runId) {
-    const courtAttempt = process.env[COURT_ATTEMPT_ENV];
-    if (typeof courtAttempt === "string" && courtAttempt.length > 0)
+    const courtAttempt = courtAttemptIdFromHostContext(context);
+    if (courtAttempt !== undefined)
         return courtAttempt;
     return context.sessionManager.getHeader?.()?.id ?? context.sessionManager.getLeafId?.() ?? `${runId}:initial`;
 }
@@ -151,10 +152,8 @@ function rowFromPayload(kind, payload, accepted, roleFallback) {
  * recorded attemptId + toolCallId so distinct court attempts stay distinct (#881).
  * `accepted` is the original payload; never rebuilt from a status/facts envelope.
  */
-export async function readRecordedSubmissionRows(cwd, runId, homeOrScope) {
-    const scope = resolveReadScope(homeOrScope);
-    const { owned } = await readOwnedSubmissionRecords(cwd, runId, scope.home);
-    const scoped = recordsForAttempt(owned, scope.attemptId);
+function mapOwnedToSubmissionRows(owned) {
+    const scoped = owned;
     const out = [];
     const indexByCall = new Map();
     // Recover seat identity for historical non-sealed rows that omitted role (#881).
@@ -238,6 +237,29 @@ export async function readRecordedSubmissionRows(cwd, runId, homeOrScope) {
     }
     return out;
 }
+/**
+ * All recorded role submissions in ledger order (#836 multi-submit).
+ * `accepted` is the original payload; never rebuilt from a status/facts envelope.
+ * Presentation stays run-scoped: attemptId on the read scope is a recording tag,
+ * not a visibility gate (#836).
+ */
+export async function readRecordedSubmissionRows(cwd, runId, homeOrScope) {
+    const scope = resolveReadScope(homeOrScope);
+    const { owned } = await readOwnedSubmissionRecords(cwd, runId, scope.home);
+    const scoped = recordsForAttempt(owned, scope.attemptId);
+    return mapOwnedToSubmissionRows(scoped);
+}
+/**
+ * Settlement-only this-court rows (#879 return path).
+ * Filters by attemptId for court-scoped roleOutcome; does not replace the
+ * run-scoped presentation API above (#836 visibility gate stays pass-through).
+ */
+export async function readAttemptScopedSubmissionRows(cwd, runId, attemptId, home) {
+    if (attemptId.length === 0)
+        return [];
+    const { owned } = await readOwnedSubmissionRecords(cwd, runId, home);
+    return mapOwnedToSubmissionRows(owned.filter((record) => recordAttemptId(record) === attemptId));
+}
 /**
  * All raw role payloads in ledger order (#836 multi-submit).
  * Returns `accepted` bytes as stored — unknown, never re-wrapped.

package/dist/user-dialogue-stdin.js

@@ -0,0 +1,33 @@
+/**
+ * Typed user-dialogue stdin transport (#879 / #471).
+ * Pi's piped-stdin reader trims the wrapper; the body field keeps original bytes.
+ * No size cap and no path/pointer substitute — the whole dialogue rides the envelope.
+ */
+export const USER_DIALOGUE_STDIN_KIND = "ak-user-dialogue";
+export function encodeUserDialogueStdin(body) {
+    return JSON.stringify({ kind: USER_DIALOGUE_STDIN_KIND, body });
+}
+function isUserDialogueEnvelope(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const record = value;
+    return record.kind === USER_DIALOGUE_STDIN_KIND && typeof record.body === "string";
+}
+/**
+ * Host read: recover original dialogue after a trim-capable pipe.
+ * Non-envelope text (interactive Pi, officer JSON, headless raw body) is unchanged.
+ */
+export function readUserDialogueStdin(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed.startsWith("{"))
+        return raw;
+    try {
+        const parsed = JSON.parse(trimmed);
+        if (isUserDialogueEnvelope(parsed))
+            return parsed.body;
+    }
+    catch {
+        // Not our envelope — leave caller bytes intact.
+    }
+    return raw;
+}

package/extensions/role-runtime.ts

@@ -111,6 +111,7 @@ export default function roleRuntime(pi: ExtensionAPI): void {
   registerNavigatorModelCommand(pi);
   const navigatorSessionFactory = createNativeNavigatorSessionFactory();
   createPiRoleRuntimeExtension({
+    packageRoot,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
     loadFixPacket: (path) => readFile(path, "utf8"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4035",
+  "version": "0.1.4062",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/836-deleted-machine-instruction-inventory.md

@@ -1,6 +1,6 @@
 # #836 删 5：从代码迁出的机器指令句清单
 
-供陛下过目。不改 soul。确需对角色说的话归入本包资源（ADR 0073）。指针句（附件路径、卷宗指针、「请重读」）保留为中立机器文本，不在本表。
+供陛下过目。不改 soul。确需对角色说的话归入本包资源（ADR 0073）。指针句（附件路径、卷宗指针）保留为中立机器文本／绑定材料，不在本表。「请重读」开场已由 #879 废止，不再保留。
 
 | 原位点 | 原句（代码自写） | 处置 |
 |---|---|---|

package/src/doctor-auditor.ts

@@ -26,7 +26,7 @@ export type DoctorAuditOptions = {
  */
 export function createPiDoctorAuditor(): (options: DoctorAuditOptions) => Promise<ComplianceDecision> {
   return async (options) => {
-    const dossier = resolveAuditDossier();
+    const dossier = resolveAuditDossier(options.context);
     requireAuditMaterials(dossier);
     const subjects = readDoctorAuditSubjects(options.context);
     requireAuditMaterials(subjects);

package/src/dossier-resolution.ts

@@ -1,10 +1,13 @@
 /**
  * Unique dossier-resolution seam for 审刑院 (#233).
- * Machine pointers only: cwd + AK_ROLE_RUN_DIR. No latest-run / mtime / global scan.
+ * Machine pointers only: cwd + per-turn HostContext (Pi child env fallback).
+ * No latest-run / mtime / global scan.
  */
 import { existsSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 
+import { runDirectoryFromHostContext, type HostContext } from "./host-contracts.ts";
+
 export const AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR" as const;
 export const DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate" as const;
 
@@ -33,18 +36,33 @@ export type SubjectIncomplete = {
 };
 export type SubjectResolution = SubjectOk | SubjectIncomplete;
 
+function isHostContext(value: object): value is HostContext {
+  return "sessionManager" in value;
+}
+
+function dossierPointerFrom(source?: HostContext | NodeJS.ProcessEnv): string | undefined {
+  if (source !== undefined && isHostContext(source)) {
+    return runDirectoryFromHostContext(source);
+  }
+  const env = source ?? process.env;
+  const raw = env[AUDIT_RUN_DIR_ENV];
+  return typeof raw === "string" && raw.trim() !== "" ? raw : undefined;
+}
+
 /**
- * Resolve the per-run dossier pointer injected by the public CLI.
+ * Resolve the per-run dossier pointer.
  *
+ * ACP/headless: typed HostContext.runDirectory.
+ * Pi child: HostContext projected from env, or env fallback when no context.
  * Absent pointer = bare Pi internal seam (ADR 0052): audit proceeds; the model
- * self-locates the dossier from its own fall-volume position per soul. Public CLI
- * always injects the pointer — only then does the machine validate the path.
- * Concurrent runs stay isolated because a present pointer is per-process.
+ * self-locates the dossier from its own fall-volume position per soul.
  */
-export function resolveAuditDossier(env: NodeJS.ProcessEnv = process.env): DossierResolution {
-  const raw = env[AUDIT_RUN_DIR_ENV];
+export function resolveAuditDossier(
+  source?: HostContext | NodeJS.ProcessEnv,
+): DossierResolution {
+  const raw = dossierPointerFrom(source);
   // Bare Pi activation seam: no machine gate when the pointer was never injected.
-  if (typeof raw !== "string" || raw.trim() === "") {
+  if (raw === undefined) {
     return { status: "ok" };
   }
   const runDirectory = resolve(raw);

package/src/external-host-turn-loop.ts

@@ -9,6 +9,7 @@ import type {
   RoleTurnRequest,
   RoleTurnResult,
 } from "./host-contracts.ts";
+import { isOfficerReviewSeat } from "./host-contracts.ts";
 
 export const EXTERNAL_ROLE_TURN_ROUND_LIMIT = 8 as const;
 
@@ -54,8 +55,16 @@ export function mergeRoleTurnAbortSignals(
   return AbortSignal.any([prepared, request]);
 }
 
+/**
+ * Host-transition prior-native paths are machine handoff material (#617 DK-4).
+ * #879: station-child officer dialogue must not receive those paths spliced into
+ * the review prompt — officers already hold --source-run / binding pointers.
+ */
 export function promptWithPriorNativePaths(basePrompt: string, request: RoleTurnRequest): string {
   if (request.continuation.kind !== "resume") return basePrompt;
+  if (request.stationChild === true && isOfficerReviewSeat(request.activation.role)) {
+    return basePrompt;
+  }
   const paths = request.hostTransition?.priorNativePaths;
   if (paths === undefined || paths.length === 0) return basePrompt;
   return `${basePrompt}\n${paths.join("\n")}`;

package/src/gatekeeper-pass-envelope.ts

@@ -74,6 +74,11 @@ export async function requireGatekeeperPass(options: {
   readonly signal?: AbortSignal;
   readonly hostActions: GatekeeperPassHostActions;
   readonly toolCallId: string;
+  /**
+   * In-flight parent typed payload for this gate turn (#879). Relayed verbatim
+   * as officer dialogue content; binding pointer stays the parent run directory.
+   */
+  readonly submission?: unknown;
   /** Lowest seam: same as runGatekeeper options.summonOfficer — offline tracers only. */
   readonly summonOfficer?: GateOfficerSummon;
 }): Promise<void> {
@@ -85,6 +90,7 @@ export async function requireGatekeeperPass(options: {
       subject: options.subject,
       ...(options.signal === undefined ? {} : { signal: options.signal }),
       ...(options.summonOfficer === undefined ? {} : { summonOfficer: options.summonOfficer }),
+      ...(options.submission === undefined ? {} : { submission: options.submission }),
       ...(reask === undefined ? {} : { reask }),
     });
     const gatekeeper = projected.result;