@akagilnc/pi-workflow-roles 0.1.4035 → 0.1.4193

package/dist/public-cli/notary-run.js

@@ -52,10 +52,10 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
         throw error;
     }
     // #747: officer resume key is this parent source-run path (not ticket number).
-    // #753/#786: gate re-ask and verbatim submission body share summons.instruction
-    // (reask wins when both present; no parallel stack).
+    // #753/#879: gate re-ask and verbatim submission body share summons.instruction
+    // (reask wins when both present; no parallel stack). Binding stays sourceRunPath.
     {
-        const resumeInstruction = env.reviewReask;
+        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
         const summons = {
             sourceRunPath: source.runDirectory,
             sourceRun: source,
@@ -112,7 +112,10 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
             : { correlationId: env.correlationId }),
         continuation: {
             kind: "initial",
-            prompt: buildNotaryTransportPrompt(admitted, engineMaterial),
+            // #879: gate path first mint carries parent payload as dialogue content;
+            // external zero-prompt kickoff unchanged when no body/reask.
+            prompt: (env.reviewReask ?? env.gateReviewInstruction)
+                ?? buildNotaryTransportPrompt(admitted, engineMaterial),
         },
     });
     return await runPostAdmissionOneShot({

package/dist/public-cli/option-definitions.js

@@ -529,8 +529,8 @@ const DOCTOR_OPTIONS = [
         repeatable: false,
         form: "option",
         description: {
-            en: "Optional project-relative .ak-roles/books/<book>/issues/<n>/runs override matching --issue.",
-            zh: "可选项目相对 .ak-roles/books/<book>/issues/<n>/runs 覆盖，且须匹配 --issue。",
+            en: "Optional project-relative .ak-roles/books/<book>/<n>/runs override matching --issue.",
+            zh: "可选项目相对 .ak-roles/books/<book>/<n>/runs 覆盖，且须匹配 --issue。",
         },
     },
 ];

package/dist/public-cli/post-admission.js

@@ -8,13 +8,14 @@
 import { randomUUID } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { isAbsolute, join, resolve } from "node:path";
-import { buildResumeContinuationPrompt, GATE_DOSSIER_POINTER_PREFIX, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
+import { buildResumeContinuationPrompt, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { buildInstructionTransportPrompt, freezeAttachmentsIntoRun, } from "./invocation.js";
 import { pathContainedIn } from "../activation-ledger-topology.js";
 import { pickEngineAxis } from "../package-resources/engine-material.js";
 import { resolveHostAwareSessionAvailability } from "../session-identity.js";
-import { projectCaseDossierPointerSection } from "./case-dossier-delivery.js";
+import { isOfficerReviewSeat } from "../host-contracts.js";
+import { deliverCaseDossierAsAttachment, projectCaseDossierPointerSection, } from "./case-dossier-delivery.js";
 /** Original error bytes, never relabeled — a secondary fact riding beside a classified cause. */
 function describeCaughtError(error) {
     if (error instanceof Error) {
@@ -30,6 +31,14 @@ function appendContinuationSection(continuation, section) {
         ? { kind: "initial", prompt }
         : { kind: "resume", prompt };
 }
+/**
+ * Nested gate summons (station child) on an officer seat: dialogue content is
+ * peer words only (#879). ADR 0081 case dossier still hangs via the existing
+ * attachments freeze seam — never into the peer body, never RoleTurnRequest.materials.
+ */
+function isStationChildOfficerDialogue(role, env) {
+    return env.stationChild === true && isOfficerReviewSeat(role);
+}
 import { projectHostTransitionPriorNative } from "../host-transition-prior-native.js";
 import { missingCredentialPreDispatchFailure, postRunMissingCredentialFailure, } from "./public-run-credentials.js";
 import { acquireRunWriterLease, clearCurrentCourt, clearTypedProviderHttpObservation, describeErrorIdentity, markRunRunning, readCurrentCourt, recordCurrentCourt, renderResumeCommand, RunWriterLeaseHeldError, } from "./run-lifecycle.js";
@@ -53,10 +62,10 @@ function withOnceSuccessfulBeforeDispatch(adapters) {
     let succeeded = false;
     return {
         ...adapters,
-        beforeDispatch: async (admitted) => {
+        beforeDispatch: async (admitted, lease) => {
             if (succeeded)
                 return;
-            await hook(admitted);
+            await hook(admitted, lease);
             succeeded = true;
         },
     };
@@ -250,6 +259,41 @@ export async function dispatchPostAdmissionTurn(input) {
     const persistRunState = input.persistRunState !== false;
     const deferredPersist = persistRunState ? {} : { needsPersist: true };
     const shouldPresent = adapters.shouldPresentSettled ?? ((terminal) => isLawfulTypedTerminalOutcome(terminal.roleOutcome));
+    /**
+     * Once-only post-host-turn hook (Diarist bind/relocate, etc.) under the still-held
+     * writer lease. Every exit after the host turn has started must pass here before
+     * lease release — success and failure alike. When a primary failure terminal already
+     * exists, keep that cause and leave relocate failure on the shared diagnostic channel.
+     */
+    let afterDispatchApplied = false;
+    const finishAfterTurn = async (result) => {
+        if (adapters.afterDispatch === undefined || afterDispatchApplied)
+            return result;
+        afterDispatchApplied = true;
+        try {
+            await adapters.afterDispatch(admitted, lease);
+            return result;
+        }
+        catch (error) {
+            const primaryFailure = result.terminal !== undefined
+                && !isLawfulTypedTerminalOutcome(result.terminal.roleOutcome);
+            if (primaryFailure) {
+                await recordBestEffortPostDispatchDiagnostic(admitted, env, `afterDispatch failed beside primary terminal (best-effort continue): ${describeErrorIdentity(error)}`, io);
+                return result;
+            }
+            return {
+                ...(await presentControlledFailure(admitted, {
+                    timedOut: false,
+                    code: null,
+                    stderr: "",
+                    thrown: error,
+                }, adapters, env.principalAuthority, io, persistRunState)),
+                ...(result.turnDispatched === true ? { turnDispatched: true } : {}),
+                ...(result.skipAutoResume === true ? { skipAutoResume: true } : {}),
+                ...deferredPersist,
+            };
+        }
+    };
     try {
         const missingCredential = missingCredentialPreDispatchFailure(env.model, env.credentials);
         if (missingCredential !== undefined) {
@@ -306,7 +350,7 @@ export async function dispatchPostAdmissionTurn(input) {
         // (#840 父子不层叠).
         if (adapters.beforeDispatch !== undefined) {
             try {
-                await adapters.beforeDispatch(admitted);
+                await adapters.beforeDispatch(admitted, lease);
             }
             catch (error) {
                 const settled = (await presentControlledFailure(admitted, {
@@ -324,9 +368,9 @@ export async function dispatchPostAdmissionTurn(input) {
         // Turn request is assembled after beforeDispatch so this turn sees whatever it
         // settled — the seat's ticket bind re-projection and any court diarist station
         // writes (#742). Case dossier delivery (ADR 0081 / #709) rides here once for
-        // every public entry: first call, same-ticket re-summons and manual resume
-        // alike. System refs append their own neutral section; caller frozen
-        // attachments and the seat's own prompt bytes are never rewritten.
+        // every public entry. #879: station-child officer dialogue keeps peer body
+        // intact — 起居录 hangs via existing attachments freeze (not prompt wrap,
+        // not RoleTurnRequest.materials). Other entries keep the neutral prompt section.
         let turnRequest = env.signal === undefined ? request : { ...request, signal: env.signal };
         if (env.stationChild !== undefined) {
             turnRequest = { ...turnRequest, stationChild: env.stationChild };
@@ -334,16 +378,31 @@ export async function dispatchPostAdmissionTurn(input) {
         if (hostTransition !== undefined) {
             turnRequest = { ...turnRequest, hostTransition };
         }
-        const dossierSection = await projectCaseDossierPointerSection({
-            ticketNumber: admitted.ticketNumber,
-            projectRoot: admitted.projectRoot,
-            home: env.home,
-        });
-        if (dossierSection !== undefined) {
-            turnRequest = {
-                ...turnRequest,
-                continuation: appendContinuationSection(turnRequest.continuation, dossierSection),
-            };
+        if (isStationChildOfficerDialogue(admitted.role, env)) {
+            // 0081 non-body face: freeze pointer section under run/attachments/.
+            // Peer dialogue continuation.prompt stays parent payload only — the seat
+            // consumes the freeze via loadCaseDossierReadingMaterial → existing
+            // agent-start readingMaterial / systemPrompt.materials fold (not prompt splice,
+            // not RoleTurnRequest.materials).
+            await deliverCaseDossierAsAttachment({
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                home: env.home,
+                runDirectory: admitted.runDirectory,
+            });
+        }
+        else {
+            const dossierSection = await projectCaseDossierPointerSection({
+                ticketNumber: admitted.ticketNumber,
+                projectRoot: admitted.projectRoot,
+                home: env.home,
+            });
+            if (dossierSection !== undefined) {
+                turnRequest = {
+                    ...turnRequest,
+                    continuation: appendContinuationSection(turnRequest.continuation, dossierSection),
+                };
+            }
         }
         // Authoritative host write happens here, at the real dispatch boundary —
         // immediately before the turn actually starts, after every retryable
@@ -360,7 +419,7 @@ export async function dispatchPostAdmissionTurn(input) {
                 stderr: "",
                 thrown: error,
             }, adapters, env.principalAuthority, io, persistRunState);
-            return { ...settled, turnDispatched: true, ...deferredPersist };
+            return await finishAfterTurn({ ...settled, turnDispatched: true, ...deferredPersist });
         }
         // `result.stderr` stays live in memory for the real classification below
         // regardless of whether this durable mirror write succeeds. A write
@@ -527,7 +586,7 @@ export async function dispatchPostAdmissionTurn(input) {
                 stderr: result.stderr,
                 thrown: error,
             }, adapters, env.principalAuthority, io, persistRunState);
-            return { ...settledFailure, turnDispatched: true, ...deferredPersist };
+            return await finishAfterTurn({ ...settledFailure, turnDispatched: true, ...deferredPersist });
         }
         if (settledOutcome !== undefined) {
             if (persistRunState) {
@@ -552,12 +611,12 @@ export async function dispatchPostAdmissionTurn(input) {
                         thrown: error,
                         skipRunStateWrite: true,
                     }, adapters, env.principalAuthority, io, persistRunState);
-                    return { ...failed, turnDispatched: true, ...deferredPersist };
+                    return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
                 }
             }
             // Lawful persist + present is the caller's stop seam (auto-resume loop /
             // manual resume), not this retried host-turn function.
-            return { ...settledOutcome, ...deferredPersist };
+            return await finishAfterTurn({ ...settledOutcome, ...deferredPersist });
         }
         // Host/runner true failure coexists with already-recorded payloads — never wash as accepted.
         if (hostSignalFailed) {
@@ -584,7 +643,7 @@ export async function dispatchPostAdmissionTurn(input) {
                         }
                         : { knownDetails: stderrLogWriteDetails }),
             }, adapters, env.principalAuthority, io, persistRunState);
-            return { ...failed, turnDispatched: true, ...deferredPersist };
+            return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
         }
         // Nothing else was wrong, but the durable stderr mirror itself failed to
         // write — that is the real (infrastructure) problem in this case, not a
@@ -596,7 +655,7 @@ export async function dispatchPostAdmissionTurn(input) {
                 stderr: result.stderr,
                 thrown: stderrLogWriteFailure,
             }, adapters, env.principalAuthority, io, persistRunState);
-            return { ...failed, turnDispatched: true, ...deferredPersist };
+            return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
         }
         const noReceipt = await attachRecordedSubmissions(admitted, await settleHostEndedNoReceipt(admitted, env.principalAuthority), courtScope);
         if (persistRunState) {
@@ -616,16 +675,16 @@ export async function dispatchPostAdmissionTurn(input) {
                     thrown: error,
                     skipRunStateWrite: true,
                 }, adapters, env.principalAuthority, io, persistRunState);
-                return { ...failed, turnDispatched: true, ...deferredPersist };
+                return await finishAfterTurn({ ...failed, turnDispatched: true, ...deferredPersist });
             }
         }
-        return {
+        return await finishAfterTurn({
             exitCode: exitCodeForTerminalOutcome(noReceipt.roleOutcome),
             admitted,
             terminal: noReceipt,
             turnDispatched: true,
             ...deferredPersist,
-        };
+        });
     }
     finally {
         try {
@@ -643,46 +702,40 @@ export async function dispatchPostAdmissionTurn(input) {
     }
 }
 /**
- * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755):
+ * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755 / #879):
  * seat-table model/engine/timeout axes, restored correlation, and either
  * - manual resume (no same-ticket summons): package envelope / optional caller
  *   message, with engine-axis handbook via buildResumeContinuationPrompt, or
  * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
- *   attachment paths only — no「重新读」、no engine handbook packaging
- *   (#750/#755), whether or not attachments are present.
+ *   attachment paths only — no「请重读」、no code-authored content substitute,
+ *   no engine handbook packaging (#750/#755/#879).
  * Caller message wins as prompt base when supplied (bytes unchanged, including
- * blank/whitespace); else summons instruction. Attachment projection must not
- * re-interpret the caller message as instructionEmpty.
+ * blank/whitespace); else summons instruction (parent payload or reask).
+ * Binding pointer stays on summons.sourceRunPath / activation — not dialogue content.
  * Seats add only their activation projection. Call prepareSummonsResumeMaterials
  * first when request.summons carries instruction or attachment paths.
  */
 export function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
-    const officerSourcePath = request.summons?.sourceRunPath;
-    const withReread = (body) => {
-        if (officerSourcePath === undefined
-            || (admitted.role !== "notary"
-                && admitted.role !== "inspector"
-                && admitted.role !== "auditor")) {
-            return body;
-        }
-        if (body.startsWith("请重读"))
-            return body;
-        return `请重读\n${body}`;
-    };
+    // #879: officer dialogue content is caller/peer words only — no「请重读」,
+    // no code-authored constant substitute, no attachment-list wrap of peer body.
+    // Binding pointer stays on summons sourceRunPath / activation / attachments.
+    const officerDialogue = isStationChildOfficerDialogue(admitted.role, env);
     let prompt;
     if (request.message !== undefined) {
         if (summonsPrepared !== undefined) {
-            // #755: same-ticket review / open-court — caller words + optional paths.
-            // Attachments are not a gate: message-only summons must stay plain too.
-            prompt = withReread(buildInstructionTransportPrompt({
-                instruction: request.message,
-                instructionEmpty: false,
-                attachments: summonsPrepared.attachments,
-            }));
+            // #755: same-ticket review / open-court — caller words.
+            // #879 station-child officer: words only (attachments are independent freeze).
+            prompt = officerDialogue
+                ? request.message
+                : buildInstructionTransportPrompt({
+                    instruction: request.message,
+                    instructionEmpty: false,
+                    attachments: summonsPrepared.attachments,
+                });
         }
         else if (request.summons !== undefined) {
             // #755: same-ticket summons without prepared materials — caller words only.
-            prompt = withReread(request.message);
+            prompt = request.message;
         }
         else {
             // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
@@ -694,27 +747,16 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         }
     }
     else if (summonsPrepared !== undefined) {
-        // #755: same-ticket review summons — instruction/attachments only.
-        prompt = withReread(buildInstructionTransportPrompt(summonsPrepared));
+        // #879 station-child officer: instruction bytes === peer body/reask (no wrap).
+        // Other seats keep #755 instruction + optional attachment path listing.
+        prompt = officerDialogue
+            ? (summonsPrepared.instructionEmpty ? "" : summonsPrepared.instruction)
+            : buildInstructionTransportPrompt(summonsPrepared);
     }
     else if (request.summons !== undefined) {
-        // #755: same-ticket summons with no instruction/attachments (e.g. notary
-        // source-run pointer). #836: officer resume opening adds「请重读」+ path pointer.
-        const path = request.summons.sourceRunPath;
-        if (path !== undefined &&
-            (admitted.role === "notary" ||
-                admitted.role === "inspector" ||
-                admitted.role === "auditor")) {
-            prompt = `请重读\n${GATE_DOSSIER_POINTER_PREFIX}${path}`;
-        }
-        else if (admitted.role === "notary" ||
-            admitted.role === "inspector" ||
-            admitted.role === "auditor") {
-            prompt = "请重读";
-        }
-        else {
-            prompt = "";
-        }
+        // #879: same-ticket summons with no instruction (e.g. notary source-run binding
+        // only). Pointer is activation/sourceRun material — not dialogue content.
+        prompt = "";
     }
     else {
         // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).