@akagilnc/pi-workflow-roles 0.1.5593 → 0.1.5614

package/dist/public-cli/option-definitions.js

@@ -370,8 +370,8 @@ const FIXER_OPTIONS = [
         repeatable: false,
         form: "option",
         description: {
-            en: "JSON array of {id, requirement} prerequisite objects.",
-            zh: "{id, requirement} 前置条件 JSON 数组路径。",
+            en: "Caller prerequisites path passed as-is to the role. Package does not read, copy, or validate; use an absolute path when cwd differs from --project.",
+            zh: "调用方前置条件文件路径原样递给衙门。包不读、不复制、不校验；调用方当前目录与 --project 不同时请给绝对路径。",
         },
     },
 ];
@@ -514,6 +514,24 @@ const NOTARY_OPTIONS = [
         },
     },
 ];
+/** 台院: optional --source-run binds the audited leg; gate summons always pass it (#1166). */
+const INSPECTOR_OPTIONS = [
+    ...projectAndAttach("inspector"),
+    {
+        id: "source-run",
+        owner: "inspector",
+        canonical: "--source-run",
+        aliases: [],
+        valueMetavar: "runId@role|path",
+        required: false,
+        repeatable: false,
+        form: "option",
+        description: {
+            en: "Optional audited source-run locator (runId@role or path). Gate summons always supply it; identity rides startup materials.",
+            zh: "可选被审腿定位符（runId@role 或路径）。闸传召必带；身份在启动材料里。",
+        },
+    },
+];
 const MERGER_OPTIONS = [
     // Merger project face: worktree whose Git materials are handed to the role.
     {
@@ -677,6 +695,7 @@ const SEAT_OPTION_ROWS = {
     merger: MERGER_OPTIONS,
     notary: NOTARY_OPTIONS,
     auditor: AUDITOR_OPTIONS,
+    inspector: INSPECTOR_OPTIONS,
 };
 function seatOptionRows(role) {
     return SEAT_OPTION_ROWS[role] ?? projectAndAttach(role);

package/dist/public-cli/post-admission.js

@@ -10,7 +10,7 @@ import { writeFile } from "node:fs/promises";
 import { buildAutoResumeContinuationPrompt, findRunDirectoryById, readRoleRunState, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { projectPublicTurnAxes } from "./turn-request.js";
-import { bindAdmittedTicketNumber, buildInstructionTransportPrompt, relocateAdmittedRunToTicket, } from "./invocation.js";
+import { appendCallerFileFlagPaths, bindAdmittedTicketNumber, relocateAdmittedRunToTicket, } from "./invocation.js";
 import { readRecordedSubmissionRows } from "../submission-ledger.js";
 import { parseTicketNumber, readDeclaredTicketNumber } from "../run-ticket-number.js";
 import { readStoredHostSessionId } from "../session-identity.js";
@@ -49,12 +49,12 @@ function projectRelocatedTurnIdentity(request, result, admitted, relocation) {
     mutableRequest.principal = admitted.principal;
     const activation = mutableRequest.activation;
     if (isRecord(activation)) {
-        for (const field of ["taskPath", "packetPath", "prerequisitesPath", "inputPath"]) {
+        for (const field of ["inputPath"]) {
             const record = activation;
             if (field in record)
                 record[field] = rewrite(record[field]);
         }
-        // #1165: activation.requestManifestPath is a caller path — do not rewrite.
+        // #1165/#1168: caller file-flag paths are not activation fields to rewrite.
     }
     if (result.terminal !== undefined) {
         for (const artifact of result.terminal.artifacts) {
@@ -906,8 +906,8 @@ export async function dispatchPostAdmissionTurn(input) {
  * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755 / #879):
  * seat-table model/engine/timeout axes, restored correlation, and either
  * - manual resume (no same-ticket summons): caller message bytes, or
- * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
- *   attachment paths only — no「请重读」、no code-authored content substitute,
+ * - same-ticket summons (审核循环续话): caller/peer words + optional caller file-flag
+ *   paths only — no「请重读」、no code-authored content substitute,
  *   no engine handbook packaging (#750/#755/#879).
  * Caller message wins as prompt base when supplied (bytes unchanged, including
  * blank/whitespace); else summons instruction (parent payload or reask).
@@ -916,22 +916,17 @@ export async function dispatchPostAdmissionTurn(input) {
  * first when request.summons carries instruction or attachment paths.
  */
 export function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
-    // #879: officer dialogue content is caller/peer words only — no「请重读」,
-    // no code-authored constant substitute, no attachment-list wrap of peer body.
-    // Binding pointer stays on summons sourceRunPath / activation / attachments.
+    // #879: officer dialogue is caller/peer words; #1166 J11 merges caller file-flag
+    // paths when present. Gate with no file flags stays body-only (ADR 0085).
     const officerDialogue = isStationChildOfficerDialogue(admitted.role, env);
+    const fileFlags = summonsPrepared?.attachments ?? [];
     let prompt;
     if (request.message !== undefined) {
         if (summonsPrepared !== undefined) {
-            // #755: same-ticket review / open-court — caller words.
-            // #879 station-child officer: words only (paths remain on summons materials).
-            prompt = officerDialogue
+            // #755: same-ticket review / open-court — caller words + caller file flags.
+            prompt = officerDialogue && fileFlags.length === 0
                 ? request.message
-                : buildInstructionTransportPrompt({
-                    instruction: request.message,
-                    instructionEmpty: false,
-                    attachments: summonsPrepared.attachments,
-                });
+                : appendCallerFileFlagPaths(request.message, fileFlags);
         }
         else if (request.summons !== undefined) {
             // #755: same-ticket summons without prepared materials — caller words only.
@@ -942,13 +937,11 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         }
     }
     else if (summonsPrepared !== undefined) {
-        // #879 station-child officer: instruction bytes === peer body/reask (no wrap).
-        // Other seats keep #755 instruction + optional attachment path listing.
-        // #1165 J3: officer dialogue is raw instruction bytes; do not gate on
-        // instructionEmpty metadata (resume of older admitted pages).
-        prompt = officerDialogue
-            ? summonsPrepared.instruction
-            : buildInstructionTransportPrompt(summonsPrepared);
+        const body = summonsPrepared.instruction;
+        // No file flags: body alone (gate peer words). With flags: merge delivery.
+        prompt = officerDialogue && fileFlags.length === 0
+            ? body
+            : appendCallerFileFlagPaths(body, fileFlags);
     }
     else if (request.summons !== undefined) {
         // #879: same-ticket summons with no instruction (e.g. notary source-run binding
@@ -971,6 +964,10 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         ...(env.stationChild === undefined ? {} : { stationChild: env.stationChild }),
         // #1132: one configured ceiling, already resolved by the caller (#422).
         deliveryRequestLimit: deliveryLimitFromConfig(env.autoResumeLimit),
+        ...(env.navigatorWorkContextPath === undefined
+            || env.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: env.navigatorWorkContextPath }),
     };
 }
 /** Shared new-turn and in-call auto-resume projection. Seat code supplies prompt and activation. */
@@ -986,6 +983,10 @@ export function roleTurnOptions(env, admitted, continuation) {
         ...(env.stationChild === undefined ? {} : { stationChild: env.stationChild }),
         // #1132: one configured ceiling, already resolved by the caller (#422).
         deliveryRequestLimit: deliveryLimitFromConfig(env.autoResumeLimit),
+        ...(env.navigatorWorkContextPath === undefined
+            || env.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: env.navigatorWorkContextPath }),
     };
 }
 /**
@@ -1070,7 +1071,7 @@ export async function prepareSummonsResumeMaterials(_runDirectory, summons) {
  * validation, turn builder, and adapters stay on the seat.
  *
  * Court handling (#637): public manual resume reads only the open court's
- * settlement identity; internal re-summons may freeze and record its materials.
+ * settlement identity; internal re-summons passes caller file-flag paths as-is.
  */
 export async function runPostAdmissionSeatResume(input) {
     let request = input.request;

package/dist/public-cli/run-lifecycle.js

@@ -631,18 +631,9 @@ export async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
         .filter((bookKey) => onlyBookKey === undefined || bookKey === onlyBookKey)
         .map((bookKey) => activationBookDirectory(ledgerHome, bookKey)), runId, onlyRole);
 }
-/** Code-owned gate inspector summons prefix (public-role-summons / #747). */
-export const GATE_DOSSIER_POINTER_PREFIX = "卷宗指针：";
-/** Parent path from a code-owned inspector 卷宗指针 instruction; else undefined. */
-export function parentRunPathFromGatePointerInstruction(instruction) {
-    if (!instruction.startsWith(GATE_DOSSIER_POINTER_PREFIX))
-        return undefined;
-    const path = instruction.slice(GATE_DOSSIER_POINTER_PREFIX.length).trim();
-    return path === "" ? undefined : path;
-}
 /**
- * Parent-run binding on a retained officer run (#747).
- * Notary/auditor: typed sourceRunPath. Inspector: exact code-owned 卷宗指针 instruction.
+ * Parent-run binding on a retained officer run (#747 / #1166).
+ * Typed sourceRunPath only — instruction bytes are never a path protocol.
  * Missing page → undefined; damage / non-ENOENT IO propagates.
  */
 export async function readRunParentPath(runDirectory) {
@@ -652,9 +643,6 @@ export async function readRunParentPath(runDirectory) {
     if (typeof record.sourceRunPath === "string" && record.sourceRunPath.trim() !== "") {
         return record.sourceRunPath;
     }
-    if (typeof record.instruction === "string") {
-        return parentRunPathFromGatePointerInstruction(record.instruction);
-    }
     return undefined;
 }
 /**
@@ -766,10 +754,7 @@ async function loadResumableRunRecord(home, runId, authority) {
     let instructionEmpty = true;
     let attachments = [];
     let phase;
-    let taskPath;
-    let packetPath;
     let prerequisitesPath;
-    let prerequisites;
     let baseRevision;
     let lens;
     let authorityRefs;
@@ -813,19 +798,10 @@ async function loadResumableRunRecord(home, runId, authority) {
             if (record.phase === "plan" || record.phase === "apply") {
                 phase = record.phase;
             }
-            if (typeof record.taskPath === "string" && record.taskPath.trim() !== "") {
-                taskPath = record.taskPath;
-            }
-            if (typeof record.packetPath === "string" && record.packetPath.trim() !== "") {
-                packetPath = record.packetPath;
-            }
-            if (typeof record.prerequisitesPath === "string" &&
-                record.prerequisitesPath.trim() !== "") {
+            // #1168: opaque caller path on resume — do not trim-filter provided values.
+            if (typeof record.prerequisitesPath === "string") {
                 prerequisitesPath = record.prerequisitesPath;
             }
-            if (Array.isArray(record.prerequisites)) {
-                prerequisites = record.prerequisites;
-            }
             if (typeof record.baseRevision === "string" &&
                 record.baseRevision.trim() !== "") {
                 baseRevision = record.baseRevision;
@@ -974,10 +950,7 @@ async function loadResumableRunRecord(home, runId, authority) {
             instructionEmpty,
             attachments,
             ...(phase === undefined ? {} : { phase }),
-            ...(taskPath === undefined ? {} : { taskPath }),
-            ...(packetPath === undefined ? {} : { packetPath }),
             ...(prerequisitesPath === undefined ? {} : { prerequisitesPath }),
-            ...(prerequisites === undefined ? {} : { prerequisites }),
             ...(baseRevision === undefined ? {} : { baseRevision }),
             ...(lens === undefined ? {} : { lens }),
             ...(authorityRefs === undefined ? {} : { authorityRefs }),
@@ -1079,10 +1052,6 @@ function admitResumedRole(loaded) {
         }
         case "worker-task": {
             const phase = resumedWorkerPhase(fields.phase ?? loaded.run.phase, record.phases, role, runId);
-            const taskPath = fields.taskPath;
-            if (taskPath === undefined) {
-                throw new CliUsageError(`role run admitted coder task path is missing: ${runId}`);
-            }
             if (fields.instruction.trim() === "") {
                 throw new CliUsageError(`role run admitted coder task is blank: ${runId}`);
             }
@@ -1091,30 +1060,22 @@ function admitResumedRole(loaded) {
                 phase,
                 ...base,
                 instructionEmpty: false,
-                taskPath,
             };
             return admitted;
         }
         case "worker-packet": {
             const phase = resumedWorkerPhase(fields.phase ?? loaded.run.phase, record.phases, role, runId);
-            const packetPath = fields.packetPath;
-            if (packetPath === undefined) {
-                throw new CliUsageError(`role run admitted fixer packet path is missing: ${runId}`);
-            }
             if (fields.instruction.trim() === "") {
                 throw new CliUsageError(`role run admitted fixer instruction is blank: ${runId}`);
             }
-            const prerequisites = fields.prerequisites ?? Object.freeze([]);
             const admitted = {
                 role: "fixer",
                 phase,
                 ...base,
                 instructionEmpty: false,
-                packetPath,
                 ...(fields.prerequisitesPath === undefined
                     ? {}
                     : { prerequisitesPath: fields.prerequisitesPath }),
-                prerequisites,
             };
             return admitted;
         }

package/dist/public-cli/turn-request.js

@@ -1,7 +1,6 @@
 import { pickEngineAxis } from "../package-resources/engine-material.js";
 import { packagedRoleActivationFlags, packagedRoleMetadata, } from "../packaged-role-registry.js";
 import { installedMethodSkillPath } from "./machine-method-skills.js";
-import { parentRunPathFromGatePointerInstruction } from "./run-lifecycle.js";
 /**
  * Env axes shared by every public turn projection.
  * Callers add correlation, continuation, host, and station-only fields.
@@ -49,6 +48,10 @@ export function projectRoleTurnRequest(admitted, roleDetails, options) {
         ...(options.deliveryRequestLimit === undefined
             ? {}
             : { deliveryRequestLimit: options.deliveryRequestLimit }),
+        ...(options.navigatorWorkContextPath === undefined
+            || options.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: options.navigatorWorkContextPath }),
     };
 }
 /**
@@ -83,14 +86,6 @@ function activationForAdmitted(admitted) {
     const activation = { role: admitted.role };
     for (const spec of packagedRoleActivationFlags(admitted.role)) {
         let value = readAdmittedPath(admitted, spec.from ?? spec.field);
-        if (spec.fallback === "gate-pointer") {
-            const trimmed = typeof value === "string" ? value.trim() : "";
-            value = trimmed !== ""
-                ? trimmed
-                : parentRunPathFromGatePointerInstruction(admitted.instruction);
-            if (typeof value !== "string" || value === "")
-                continue;
-        }
         if (value === undefined)
             continue;
         if (spec.text === true) {

package/dist/public-role-summons.js

@@ -197,7 +197,8 @@ async function summonPublicRole(options) {
           ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
           ...options.parentRunPath === void 0 || options.parentRunPath.trim() === "" ? {} : { parentRunPath: options.parentRunPath },
           ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
-          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
+          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
+          ...options.navigatorWorkContextPath === void 0 || options.navigatorWorkContextPath.trim() === "" ? {} : { navigatorWorkContextPath: options.navigatorWorkContextPath }
         }
       };
     } catch (error) {
@@ -454,7 +455,8 @@ async function summonGateOfficer(options) {
         "judge",
         "--source-run",
         options.sourceRunDirectory,
-        `\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`
+        "--project",
+        options.cwd
       ],
       ...common
     });
@@ -482,7 +484,7 @@ async function summonGateOfficer(options) {
   }
   return summonPublicRole({
     role: options.officer,
-    argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
+    argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
     ...common
   });
 }

package/dist/role-run-placement.js

@@ -1,5 +1,5 @@
 import { readdir } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import {
   activationBookDirectory,
   ensureRealDirectoryTree
@@ -27,6 +27,11 @@ function sessionFileOf(runDirectory) {
 function runDirectoryOfSessionFile(sessionFile) {
   return dirname(dirname(sessionFile));
 }
+function auditorRunDirectory(context) {
+  const sessionFile = context.sessionManager?.getSessionFile?.();
+  if (sessionFile === void 0) return void 0;
+  return resolve(runDirectoryOfSessionFile(sessionFile));
+}
 function runDirectoryFromSessionDirectory(sessionDirectory) {
   return dirname(sessionDirectory);
 }
@@ -107,6 +112,7 @@ function ensureRoleRunPlacement(ledgerHome, placement) {
 }
 export {
   ROLE_RUN_SESSION_FILENAME,
+  auditorRunDirectory,
   ensureRoleRunDirectory,
   ensureRoleRunPlacement,
   findRoleRunDirectory,

package/dist/role-run-relocation.js

@@ -19,10 +19,9 @@ const ADMITTED_PAGE_FIELDS = [
     "admittedRequestPath", // pre-#1161 pages only
     "sessionDirectory",
     "sessionFile",
-    "taskPath",
-    "packetPath",
-    "prerequisitesPath",
-    // #1165: requestManifestPath is a caller path — never rewrite.
+    // #1165/#1168: caller file-flag paths (requestManifestPath, prerequisitesPath)
+    // stay as given. Obsolete copy fields (taskPath/packetPath) are not rewritten —
+    // stock volumes keep their bytes; live relocate no longer maintains them.
     "mergerInputPath",
     "sourceRunPath",
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5593",
+  "version": "0.1.5614",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/build-package.mjs

@@ -32,9 +32,8 @@ const entries = [
   "archivist-record-topology",
   // Session material loaders used by published non-bundle roots.
   "session-opening-materials",
-  // Value-import closure of published non-bundle roots (build-package-only loadable).
-  "auditor-dossier-tool",
-  // Static import of auditor-dossier-tool / placement path authority (#859).
+  // Value-import closure of published non-bundle roots (build-package-only loadable);
+  // placement path authority (#859).
   "role-run-placement",
   // Static import of role-run-placement (safe-positive ticket invariant).
   "run-ticket-number",
@@ -55,7 +54,6 @@ const entries = [
   "open-tool-schema",
   "package-contracts/collector-output",
   "package-contracts/fixer-output",
-  "package-contracts/fixer-packet",
   "package-contracts/gatekeeper-output",
   "package-contracts/judge-output",
   "package-contracts/navigator-output",

package/src/audited-run-identity.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared audited-run identity for review-officer startup materials (#1166 / ADR 0087).
+ * Value form is `<runId>@<席>` only — no directory path.
+ */
+import { basename } from "node:path";
+
+import { formatRunLeaf, parseRunLeaf } from "./role-run-placement.ts";
+
+export const AUDITED_RUN_IDENTITY_KIND = "audited-run-identity" as const;
+
+export type AuditedRunIdentityMaterial = {
+  readonly kind: typeof AUDITED_RUN_IDENTITY_KIND;
+  readonly identity: string;
+};
+
+/** Identity leaf from a run directory basename; undefined when the leaf is not `runId@role`. */
+export function auditedRunIdentityFromDirectory(runDirectory: string): string | undefined {
+  const parsed = parseRunLeaf(basename(runDirectory));
+  if (parsed === undefined) return undefined;
+  return formatRunLeaf(parsed.runId, parsed.role);
+}
+
+export function auditedRunIdentityMaterial(identity: string): AuditedRunIdentityMaterial {
+  return { kind: AUDITED_RUN_IDENTITY_KIND, identity };
+}
+
+/** Identity from locator fields already in hand (notary source-run). */
+export function auditedRunIdentityFromParts(runId: string, role: string): string {
+  return formatRunLeaf(runId, role);
+}

package/src/compliance-transport.ts

@@ -1,6 +1,6 @@
 import type { Usage } from "@earendil-works/pi-ai";
 import type { AuditorSoulRole } from "./auditor-soul.ts";
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import type { HostContext } from "./host-contracts.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import type { PublicSummonResult } from "./public-role-summons.ts";
@@ -40,8 +40,6 @@ export type ComplianceDecision =
   | ComplianceReceived
   | ComplianceTransportFailure;
 /** Source-run pointer remains the binding locator; parent body rides the separate instruction. */
-export const AUDITOR_DOSSIER_PROMPT = "卷宗指针：" as const;
-
 export const COMPLIANCE_RESPONSE_ENTRY_TYPE = "ak_compliance_response" as const;
 export const AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding" as const;
 export const AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure" as const;
@@ -215,7 +213,6 @@ export async function runComplianceAudit(options: RunComplianceAuditOptions): Pr
           auditSubject,
           "--source-run",
           sourceRunDirectory,
-          `${AUDITOR_DOSSIER_PROMPT}${sourceRunDirectory}`,
         ],
         cwd: options.context.cwd ?? process.cwd(),
         home,

package/src/doctor-auditor.ts

@@ -1,4 +1,4 @@
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import {
   runComplianceAudit,
   type AuditorSummon,

package/src/gatekeeper-role.ts

@@ -1,7 +1,7 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import type { HostContext } from "./host-contracts.ts";
 
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import { packagedGateStageLabel } from "./packaged-role-registry.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import { GatekeeperDecisionError, receivedDiscriminator, unreadableDiscriminatorNotice } from "./submission-errors.ts";

package/src/host-contracts.ts

@@ -87,13 +87,10 @@ export type RoleTurnActivation =
   | {
       readonly role: "coder";
       readonly phase: string;
-      readonly taskPath: string;
     }
   | {
       readonly role: "fixer";
       readonly phase: string;
-      readonly packetPath: string;
-      readonly prerequisitesPath?: string;
     }
   | {
       readonly role: "reviewer";
@@ -203,6 +200,11 @@ export type RoleTurnRequest = {
    * number. Absent = package default. Never re-read from disk downstream.
    */
   readonly deliveryRequestLimit?: number;
+  /**
+   * Navigator nest work-context locator for startup materials (#1166).
+   * Request-scoped — never parent process.env across await.
+   */
+  readonly navigatorWorkContextPath?: string;
 };
 
 /** Turn result — only fields upper layers currently consume. */
@@ -261,7 +263,7 @@ export interface DurablePrincipalAuthority {
 type HostSessionManager = { getLeafEntry(): HostSessionEntry | undefined; getLeafId(): string | null | undefined; getEntries(): Iterable<HostSessionEntry>; getSessionDir(): string; getSessionFile(): string | undefined; getHeader?(): { readonly type: string; readonly id?: string } | null; setSessionFile?(path: string): void; appendCustomEntry?(customType: string, data?: unknown): unknown; };
 
 /** Context supplied by a host for one activation and its interceptable events. */
-export type HostContext = { cwd: string; mode: string; model: { readonly provider: string } | undefined; sessionManager: HostSessionManager; /** Per-turn admitted run directory (#879); never process-global env. */ runDirectory?: string; /** Per-turn court attempt (#879); never process-global env. */ courtAttemptId?: string; /** Public-invocation scope (#537); never process-global env. */ invocationScopeId?: string; /** Selected host axis (#537 / ADR 0082); never process-global env invent. */ host?: string; signal?: AbortSignal | undefined; ui?: { notify?(message: string, type?: "info" | "warning" | "error"): void }; transcript?(): string; abort(): void; };
+export type HostContext = { cwd: string; mode: string; model: { readonly provider: string } | undefined; sessionManager: HostSessionManager; /** Per-turn admitted run directory (#879); never process-global env. */ runDirectory?: string; /** Per-turn court attempt (#879); never process-global env. */ courtAttemptId?: string; /** Public-invocation scope (#537); never process-global env. */ invocationScopeId?: string; /** Selected host axis (#537 / ADR 0082); never process-global env invent. */ host?: string; /** Navigator nest work-context locator (#1166); never process-global env. */ navigatorWorkContextPath?: string; signal?: AbortSignal | undefined; ui?: { notify?(message: string, type?: "info" | "warning" | "error"): void }; transcript?(): string; abort(): void; };
 
 /** Per-turn run directory; adapters must project any child-process identity. */
 export function runDirectoryFromHostContext(context: HostContext): string | undefined {

package/src/merger-contracts.ts

@@ -11,7 +11,8 @@ export const mergerInputSchema = Type.Object({
   attemptId: Type.String({ minLength: 1, description: "对账 attempt 身份（transport）" }),
   targetObjectId: Type.String({ description: "材料：target parent OID；可空" }),
   sourceObjectId: Type.String({ description: "材料：source parent OID；可空" }),
-  materials: Type.Object({ task: materialSchema, authority: materialSchema, targetIntent: materialSchema, sourceIntent: materialSchema }),
+  // #1168: task/authority dispatch copies removed; git-fact intents remain.
+  materials: Type.Object({ targetIntent: materialSchema, sourceIntent: materialSchema }),
   expectedConflictPaths: Type.Array(Type.String(), { description: "材料：当前未合并路径；可空" }),
   resolutionScope: Type.Array(Type.String(), { description: "材料：解析范围提示；可空" }),
   authorizedChecks: Type.Array(checkSchema),
@@ -62,7 +63,10 @@ function readMaterial(value: unknown, label: string): MergerMaterial {
 export function validateMergerInput(value: unknown): MergerInput {
   if (!isRecord(value) || blank(value.attemptId)) fail("Merger input requires a non-empty attemptId for accounting");
   if (!isRecord(value.materials)) fail("Merger materials are missing");
-  const materials = { task: readMaterial(value.materials.task, "task"), authority: readMaterial(value.materials.authority, "authority"), targetIntent: readMaterial(value.materials.targetIntent, "targetIntent"), sourceIntent: readMaterial(value.materials.sourceIntent, "sourceIntent") };
+  const materials = {
+    targetIntent: readMaterial(value.materials.targetIntent, "targetIntent"),
+    sourceIntent: readMaterial(value.materials.sourceIntent, "sourceIntent"),
+  };
   const authorizedChecks = Array.isArray(value.authorizedChecks) ? value.authorizedChecks.filter((check): check is Record<string, unknown> => isRecord(check)).map(c => ({ name: asString(c.name), argv: asStringArray(c.argv).filter(a => a.trim().length > 0) })).filter(c => c.name.trim().length > 0 && c.argv.length > 0) : [];
   return deepFreeze(structuredClone({ attemptId: (value.attemptId as string).trim(), targetObjectId: asString(value.targetObjectId), sourceObjectId: asString(value.sourceObjectId), materials, expectedConflictPaths: asStringArray(value.expectedConflictPaths), resolutionScope: asStringArray(value.resolutionScope), authorizedChecks }) as MergerInput);
 }

package/src/merger-role.ts

@@ -21,6 +21,7 @@ function materialText(input: MergerInput, key: keyof MergerInput["materials"]):
  * Merger (校书郎) role runtime.
  * Submission tool records every call (#836); host end is the final.
  * Git state / completion verification are not attendance or rejection gates (#827).
+ * #1168: dispatch text is the first message; assignment carries git facts only.
  */
 export function createMergerRoleRuntime(pi: RoleHost, dependencies: MergerRoleDependencies) {
   let activation: { soul: string; input: Readonly<MergerInput> } | undefined;
@@ -41,7 +42,16 @@ export function createMergerRoleRuntime(pi: RoleHost, dependencies: MergerRoleDe
         });
         pi.on("before_agent_start", (event) => {
           if (!activation) throw new Error("校书郎未激活");
-          const admitted = { attemptId: activation.input.attemptId, targetObjectId: activation.input.targetObjectId, sourceObjectId: activation.input.sourceObjectId, task: materialText(activation.input, "task"), authority: materialText(activation.input, "authority"), targetIntent: materialText(activation.input, "targetIntent"), sourceIntent: materialText(activation.input, "sourceIntent"), expectedConflictPaths: activation.input.expectedConflictPaths, resolutionScope: activation.input.resolutionScope, authorizedChecks: activation.input.authorizedChecks };
+          const admitted = {
+            attemptId: activation.input.attemptId,
+            targetObjectId: activation.input.targetObjectId,
+            sourceObjectId: activation.input.sourceObjectId,
+            targetIntent: materialText(activation.input, "targetIntent"),
+            sourceIntent: materialText(activation.input, "sourceIntent"),
+            expectedConflictPaths: activation.input.expectedConflictPaths,
+            resolutionScope: activation.input.resolutionScope,
+            authorizedChecks: activation.input.authorizedChecks,
+          };
           return { systemPrompt: `${event.systemPrompt}\n\n<merger_soul>\n${activation.soul}\n</merger_soul>\n\n<merger_assignment>\n${JSON.stringify(admitted)}\n</merger_assignment>` };
         });
       }

package/src/navigator-attendance.ts

@@ -229,14 +229,14 @@ export function navigatorSubjectKey(
 /**
  * Role inputs for one ad-hoc work item live below role-specific run folders.
  * The folder and filename are transport, not identity: the shared work root
- * keeps task.md, fix-packet.json, and other natural inputs on one subject.
+ * keeps natural inputs on one subject.
  */
 export function navigatorSubjectKeyForInput(subjectRoot: string, reference: string, cwd = process.cwd()): string {
   if (issueRoot(subjectRoot) !== undefined || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
   const resolvedReference = resolve(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
-    // The work root, not task.md/fix-packet.json/etc., is the stable subject.
+    // The work root, not a role-input filename, is the stable subject.
     // Different roots remain isolated without inventing a filename convention.
     return subjectRoot;
   }

package/src/navigator-public-session.ts

@@ -26,7 +26,6 @@ import type { PublicSummonResult } from "./public-role-summons.ts";
 import { CliUsageError } from "./public-cli/cli-errors.ts";
 import { isNavigatorSeat } from "./packaged-role-registry.ts";
 import {
-  attachWorkContextPointer,
   navigatorWorkContextFile,
 } from "./navigator-work-base.ts";
 
@@ -157,19 +156,24 @@ export function createNativeNavigatorSessionFactory(deps?: {
           // (ADR 0018 / #959 — legal HostContext may omit signal).
           if (disposed) return;
           const resumeRunId = hostRunId;
+          // Prompt stays caller/summoner bytes (#1166). Nest work-context path is an
+          // internal locator for startup materials only — never folded into argv,
+          // never written onto shared parent process.env across await.
           const workContextPath = navigatorWorkContextFile(sessionManager.getSessionDir());
-          const argvText = existsSync(workContextPath)
-            ? attachWorkContextPointer(text, workContextPath)
-            : text;
+          const workContextLocator =
+            existsSync(workContextPath) ? workContextPath : undefined;
 
           // Call contract only: forward shared-lifecycle signal; do not own AbortController here
           // (ADR 0018 / #959 — cancel ownership stays on the attendance/envelope seam).
           const baseSummon = {
             role: "navigator" as const,
-            argv: [argvText] as const,
+            argv: [text] as const,
             cwd: context.cwd,
             ...(summonHome === undefined ? {} : { home: summonHome }),
             ...(context.signal === undefined ? {} : { signal: context.signal }),
+            ...(workContextLocator === undefined
+              ? {}
+              : { navigatorWorkContextPath: workContextLocator }),
           };
 
           // Prefer host CLI resume so prior advice stays on the host session.