@akagilnc/pi-workflow-roles 0.1.5598 → 0.1.5614

package/dist/public-cli/option-definitions.js

@@ -514,6 +514,24 @@ const NOTARY_OPTIONS = [
         },
     },
 ];
+/** 台院: optional --source-run binds the audited leg; gate summons always pass it (#1166). */
+const INSPECTOR_OPTIONS = [
+    ...projectAndAttach("inspector"),
+    {
+        id: "source-run",
+        owner: "inspector",
+        canonical: "--source-run",
+        aliases: [],
+        valueMetavar: "runId@role|path",
+        required: false,
+        repeatable: false,
+        form: "option",
+        description: {
+            en: "Optional audited source-run locator (runId@role or path). Gate summons always supply it; identity rides startup materials.",
+            zh: "可选被审腿定位符（runId@role 或路径）。闸传召必带；身份在启动材料里。",
+        },
+    },
+];
 const MERGER_OPTIONS = [
     // Merger project face: worktree whose Git materials are handed to the role.
     {
@@ -677,6 +695,7 @@ const SEAT_OPTION_ROWS = {
     merger: MERGER_OPTIONS,
     notary: NOTARY_OPTIONS,
     auditor: AUDITOR_OPTIONS,
+    inspector: INSPECTOR_OPTIONS,
 };
 function seatOptionRows(role) {
     return SEAT_OPTION_ROWS[role] ?? projectAndAttach(role);

package/dist/public-cli/post-admission.js

@@ -10,7 +10,7 @@ import { writeFile } from "node:fs/promises";
 import { buildAutoResumeContinuationPrompt, findRunDirectoryById, readRoleRunState, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { projectPublicTurnAxes } from "./turn-request.js";
-import { bindAdmittedTicketNumber, buildInstructionTransportPrompt, relocateAdmittedRunToTicket, } from "./invocation.js";
+import { appendCallerFileFlagPaths, bindAdmittedTicketNumber, relocateAdmittedRunToTicket, } from "./invocation.js";
 import { readRecordedSubmissionRows } from "../submission-ledger.js";
 import { parseTicketNumber, readDeclaredTicketNumber } from "../run-ticket-number.js";
 import { readStoredHostSessionId } from "../session-identity.js";
@@ -906,8 +906,8 @@ export async function dispatchPostAdmissionTurn(input) {
  * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755 / #879):
  * seat-table model/engine/timeout axes, restored correlation, and either
  * - manual resume (no same-ticket summons): caller message bytes, or
- * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
- *   attachment paths only — no「请重读」、no code-authored content substitute,
+ * - same-ticket summons (审核循环续话): caller/peer words + optional caller file-flag
+ *   paths only — no「请重读」、no code-authored content substitute,
  *   no engine handbook packaging (#750/#755/#879).
  * Caller message wins as prompt base when supplied (bytes unchanged, including
  * blank/whitespace); else summons instruction (parent payload or reask).
@@ -916,22 +916,17 @@ export async function dispatchPostAdmissionTurn(input) {
  * first when request.summons carries instruction or attachment paths.
  */
 export function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
-    // #879: officer dialogue content is caller/peer words only — no「请重读」,
-    // no code-authored constant substitute, no attachment-list wrap of peer body.
-    // Binding pointer stays on summons sourceRunPath / activation / attachments.
+    // #879: officer dialogue is caller/peer words; #1166 J11 merges caller file-flag
+    // paths when present. Gate with no file flags stays body-only (ADR 0085).
     const officerDialogue = isStationChildOfficerDialogue(admitted.role, env);
+    const fileFlags = summonsPrepared?.attachments ?? [];
     let prompt;
     if (request.message !== undefined) {
         if (summonsPrepared !== undefined) {
-            // #755: same-ticket review / open-court — caller words.
-            // #879 station-child officer: words only (paths remain on summons materials).
-            prompt = officerDialogue
+            // #755: same-ticket review / open-court — caller words + caller file flags.
+            prompt = officerDialogue && fileFlags.length === 0
                 ? request.message
-                : buildInstructionTransportPrompt({
-                    instruction: request.message,
-                    instructionEmpty: false,
-                    attachments: summonsPrepared.attachments,
-                });
+                : appendCallerFileFlagPaths(request.message, fileFlags);
         }
         else if (request.summons !== undefined) {
             // #755: same-ticket summons without prepared materials — caller words only.
@@ -942,13 +937,11 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         }
     }
     else if (summonsPrepared !== undefined) {
-        // #879 station-child officer: instruction bytes === peer body/reask (no wrap).
-        // Other seats keep #755 instruction + optional attachment path listing.
-        // #1165 J3: officer dialogue is raw instruction bytes; do not gate on
-        // instructionEmpty metadata (resume of older admitted pages).
-        prompt = officerDialogue
-            ? summonsPrepared.instruction
-            : buildInstructionTransportPrompt(summonsPrepared);
+        const body = summonsPrepared.instruction;
+        // No file flags: body alone (gate peer words). With flags: merge delivery.
+        prompt = officerDialogue && fileFlags.length === 0
+            ? body
+            : appendCallerFileFlagPaths(body, fileFlags);
     }
     else if (request.summons !== undefined) {
         // #879: same-ticket summons with no instruction (e.g. notary source-run binding
@@ -971,6 +964,10 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         ...(env.stationChild === undefined ? {} : { stationChild: env.stationChild }),
         // #1132: one configured ceiling, already resolved by the caller (#422).
         deliveryRequestLimit: deliveryLimitFromConfig(env.autoResumeLimit),
+        ...(env.navigatorWorkContextPath === undefined
+            || env.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: env.navigatorWorkContextPath }),
     };
 }
 /** Shared new-turn and in-call auto-resume projection. Seat code supplies prompt and activation. */
@@ -986,6 +983,10 @@ export function roleTurnOptions(env, admitted, continuation) {
         ...(env.stationChild === undefined ? {} : { stationChild: env.stationChild }),
         // #1132: one configured ceiling, already resolved by the caller (#422).
         deliveryRequestLimit: deliveryLimitFromConfig(env.autoResumeLimit),
+        ...(env.navigatorWorkContextPath === undefined
+            || env.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: env.navigatorWorkContextPath }),
     };
 }
 /**
@@ -1070,7 +1071,7 @@ export async function prepareSummonsResumeMaterials(_runDirectory, summons) {
  * validation, turn builder, and adapters stay on the seat.
  *
  * Court handling (#637): public manual resume reads only the open court's
- * settlement identity; internal re-summons may freeze and record its materials.
+ * settlement identity; internal re-summons passes caller file-flag paths as-is.
  */
 export async function runPostAdmissionSeatResume(input) {
     let request = input.request;

package/dist/public-cli/run-lifecycle.js

@@ -631,18 +631,9 @@ export async function findRunDirectoryById(home, runId, onlyBookKey, onlyRole) {
         .filter((bookKey) => onlyBookKey === undefined || bookKey === onlyBookKey)
         .map((bookKey) => activationBookDirectory(ledgerHome, bookKey)), runId, onlyRole);
 }
-/** Code-owned gate inspector summons prefix (public-role-summons / #747). */
-export const GATE_DOSSIER_POINTER_PREFIX = "卷宗指针：";
-/** Parent path from a code-owned inspector 卷宗指针 instruction; else undefined. */
-export function parentRunPathFromGatePointerInstruction(instruction) {
-    if (!instruction.startsWith(GATE_DOSSIER_POINTER_PREFIX))
-        return undefined;
-    const path = instruction.slice(GATE_DOSSIER_POINTER_PREFIX.length).trim();
-    return path === "" ? undefined : path;
-}
 /**
- * Parent-run binding on a retained officer run (#747).
- * Notary/auditor: typed sourceRunPath. Inspector: exact code-owned 卷宗指针 instruction.
+ * Parent-run binding on a retained officer run (#747 / #1166).
+ * Typed sourceRunPath only — instruction bytes are never a path protocol.
  * Missing page → undefined; damage / non-ENOENT IO propagates.
  */
 export async function readRunParentPath(runDirectory) {
@@ -652,9 +643,6 @@ export async function readRunParentPath(runDirectory) {
     if (typeof record.sourceRunPath === "string" && record.sourceRunPath.trim() !== "") {
         return record.sourceRunPath;
     }
-    if (typeof record.instruction === "string") {
-        return parentRunPathFromGatePointerInstruction(record.instruction);
-    }
     return undefined;
 }
 /**

package/dist/public-cli/turn-request.js

@@ -1,7 +1,6 @@
 import { pickEngineAxis } from "../package-resources/engine-material.js";
 import { packagedRoleActivationFlags, packagedRoleMetadata, } from "../packaged-role-registry.js";
 import { installedMethodSkillPath } from "./machine-method-skills.js";
-import { parentRunPathFromGatePointerInstruction } from "./run-lifecycle.js";
 /**
  * Env axes shared by every public turn projection.
  * Callers add correlation, continuation, host, and station-only fields.
@@ -49,6 +48,10 @@ export function projectRoleTurnRequest(admitted, roleDetails, options) {
         ...(options.deliveryRequestLimit === undefined
             ? {}
             : { deliveryRequestLimit: options.deliveryRequestLimit }),
+        ...(options.navigatorWorkContextPath === undefined
+            || options.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: options.navigatorWorkContextPath }),
     };
 }
 /**
@@ -83,14 +86,6 @@ function activationForAdmitted(admitted) {
     const activation = { role: admitted.role };
     for (const spec of packagedRoleActivationFlags(admitted.role)) {
         let value = readAdmittedPath(admitted, spec.from ?? spec.field);
-        if (spec.fallback === "gate-pointer") {
-            const trimmed = typeof value === "string" ? value.trim() : "";
-            value = trimmed !== ""
-                ? trimmed
-                : parentRunPathFromGatePointerInstruction(admitted.instruction);
-            if (typeof value !== "string" || value === "")
-                continue;
-        }
         if (value === undefined)
             continue;
         if (spec.text === true) {

package/dist/public-role-summons.js

@@ -197,7 +197,8 @@ async function summonPublicRole(options) {
           ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
           ...options.parentRunPath === void 0 || options.parentRunPath.trim() === "" ? {} : { parentRunPath: options.parentRunPath },
           ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
-          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
+          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
+          ...options.navigatorWorkContextPath === void 0 || options.navigatorWorkContextPath.trim() === "" ? {} : { navigatorWorkContextPath: options.navigatorWorkContextPath }
         }
       };
     } catch (error) {
@@ -454,7 +455,8 @@ async function summonGateOfficer(options) {
         "judge",
         "--source-run",
         options.sourceRunDirectory,
-        `\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`
+        "--project",
+        options.cwd
       ],
       ...common
     });
@@ -482,7 +484,7 @@ async function summonGateOfficer(options) {
   }
   return summonPublicRole({
     role: options.officer,
-    argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
+    argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
     ...common
   });
 }

package/dist/role-run-placement.js

@@ -1,5 +1,5 @@
 import { readdir } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import {
   activationBookDirectory,
   ensureRealDirectoryTree
@@ -27,6 +27,11 @@ function sessionFileOf(runDirectory) {
 function runDirectoryOfSessionFile(sessionFile) {
   return dirname(dirname(sessionFile));
 }
+function auditorRunDirectory(context) {
+  const sessionFile = context.sessionManager?.getSessionFile?.();
+  if (sessionFile === void 0) return void 0;
+  return resolve(runDirectoryOfSessionFile(sessionFile));
+}
 function runDirectoryFromSessionDirectory(sessionDirectory) {
   return dirname(sessionDirectory);
 }
@@ -107,6 +112,7 @@ function ensureRoleRunPlacement(ledgerHome, placement) {
 }
 export {
   ROLE_RUN_SESSION_FILENAME,
+  auditorRunDirectory,
   ensureRoleRunDirectory,
   ensureRoleRunPlacement,
   findRoleRunDirectory,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5598",
+  "version": "0.1.5614",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/build-package.mjs

@@ -32,9 +32,8 @@ const entries = [
   "archivist-record-topology",
   // Session material loaders used by published non-bundle roots.
   "session-opening-materials",
-  // Value-import closure of published non-bundle roots (build-package-only loadable).
-  "auditor-dossier-tool",
-  // Static import of auditor-dossier-tool / placement path authority (#859).
+  // Value-import closure of published non-bundle roots (build-package-only loadable);
+  // placement path authority (#859).
   "role-run-placement",
   // Static import of role-run-placement (safe-positive ticket invariant).
   "run-ticket-number",

package/src/audited-run-identity.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared audited-run identity for review-officer startup materials (#1166 / ADR 0087).
+ * Value form is `<runId>@<席>` only — no directory path.
+ */
+import { basename } from "node:path";
+
+import { formatRunLeaf, parseRunLeaf } from "./role-run-placement.ts";
+
+export const AUDITED_RUN_IDENTITY_KIND = "audited-run-identity" as const;
+
+export type AuditedRunIdentityMaterial = {
+  readonly kind: typeof AUDITED_RUN_IDENTITY_KIND;
+  readonly identity: string;
+};
+
+/** Identity leaf from a run directory basename; undefined when the leaf is not `runId@role`. */
+export function auditedRunIdentityFromDirectory(runDirectory: string): string | undefined {
+  const parsed = parseRunLeaf(basename(runDirectory));
+  if (parsed === undefined) return undefined;
+  return formatRunLeaf(parsed.runId, parsed.role);
+}
+
+export function auditedRunIdentityMaterial(identity: string): AuditedRunIdentityMaterial {
+  return { kind: AUDITED_RUN_IDENTITY_KIND, identity };
+}
+
+/** Identity from locator fields already in hand (notary source-run). */
+export function auditedRunIdentityFromParts(runId: string, role: string): string {
+  return formatRunLeaf(runId, role);
+}

package/src/compliance-transport.ts

@@ -1,6 +1,6 @@
 import type { Usage } from "@earendil-works/pi-ai";
 import type { AuditorSoulRole } from "./auditor-soul.ts";
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import type { HostContext } from "./host-contracts.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import type { PublicSummonResult } from "./public-role-summons.ts";
@@ -40,8 +40,6 @@ export type ComplianceDecision =
   | ComplianceReceived
   | ComplianceTransportFailure;
 /** Source-run pointer remains the binding locator; parent body rides the separate instruction. */
-export const AUDITOR_DOSSIER_PROMPT = "卷宗指针：" as const;
-
 export const COMPLIANCE_RESPONSE_ENTRY_TYPE = "ak_compliance_response" as const;
 export const AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding" as const;
 export const AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure" as const;
@@ -215,7 +213,6 @@ export async function runComplianceAudit(options: RunComplianceAuditOptions): Pr
           auditSubject,
           "--source-run",
           sourceRunDirectory,
-          `${AUDITOR_DOSSIER_PROMPT}${sourceRunDirectory}`,
         ],
         cwd: options.context.cwd ?? process.cwd(),
         home,

package/src/doctor-auditor.ts

@@ -1,4 +1,4 @@
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import {
   runComplianceAudit,
   type AuditorSummon,

package/src/gatekeeper-role.ts

@@ -1,7 +1,7 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import type { HostContext } from "./host-contracts.ts";
 
-import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
+import { auditorRunDirectory } from "./role-run-placement.ts";
 import { packagedGateStageLabel } from "./packaged-role-registry.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import { GatekeeperDecisionError, receivedDiscriminator, unreadableDiscriminatorNotice } from "./submission-errors.ts";

package/src/host-contracts.ts

@@ -200,6 +200,11 @@ export type RoleTurnRequest = {
    * number. Absent = package default. Never re-read from disk downstream.
    */
   readonly deliveryRequestLimit?: number;
+  /**
+   * Navigator nest work-context locator for startup materials (#1166).
+   * Request-scoped — never parent process.env across await.
+   */
+  readonly navigatorWorkContextPath?: string;
 };
 
 /** Turn result — only fields upper layers currently consume. */
@@ -258,7 +263,7 @@ export interface DurablePrincipalAuthority {
 type HostSessionManager = { getLeafEntry(): HostSessionEntry | undefined; getLeafId(): string | null | undefined; getEntries(): Iterable<HostSessionEntry>; getSessionDir(): string; getSessionFile(): string | undefined; getHeader?(): { readonly type: string; readonly id?: string } | null; setSessionFile?(path: string): void; appendCustomEntry?(customType: string, data?: unknown): unknown; };
 
 /** Context supplied by a host for one activation and its interceptable events. */
-export type HostContext = { cwd: string; mode: string; model: { readonly provider: string } | undefined; sessionManager: HostSessionManager; /** Per-turn admitted run directory (#879); never process-global env. */ runDirectory?: string; /** Per-turn court attempt (#879); never process-global env. */ courtAttemptId?: string; /** Public-invocation scope (#537); never process-global env. */ invocationScopeId?: string; /** Selected host axis (#537 / ADR 0082); never process-global env invent. */ host?: string; signal?: AbortSignal | undefined; ui?: { notify?(message: string, type?: "info" | "warning" | "error"): void }; transcript?(): string; abort(): void; };
+export type HostContext = { cwd: string; mode: string; model: { readonly provider: string } | undefined; sessionManager: HostSessionManager; /** Per-turn admitted run directory (#879); never process-global env. */ runDirectory?: string; /** Per-turn court attempt (#879); never process-global env. */ courtAttemptId?: string; /** Public-invocation scope (#537); never process-global env. */ invocationScopeId?: string; /** Selected host axis (#537 / ADR 0082); never process-global env invent. */ host?: string; /** Navigator nest work-context locator (#1166); never process-global env. */ navigatorWorkContextPath?: string; signal?: AbortSignal | undefined; ui?: { notify?(message: string, type?: "info" | "warning" | "error"): void }; transcript?(): string; abort(): void; };
 
 /** Per-turn run directory; adapters must project any child-process identity. */
 export function runDirectoryFromHostContext(context: HostContext): string | undefined {

package/src/navigator-public-session.ts

@@ -26,7 +26,6 @@ import type { PublicSummonResult } from "./public-role-summons.ts";
 import { CliUsageError } from "./public-cli/cli-errors.ts";
 import { isNavigatorSeat } from "./packaged-role-registry.ts";
 import {
-  attachWorkContextPointer,
   navigatorWorkContextFile,
 } from "./navigator-work-base.ts";
 
@@ -157,19 +156,24 @@ export function createNativeNavigatorSessionFactory(deps?: {
           // (ADR 0018 / #959 — legal HostContext may omit signal).
           if (disposed) return;
           const resumeRunId = hostRunId;
+          // Prompt stays caller/summoner bytes (#1166). Nest work-context path is an
+          // internal locator for startup materials only — never folded into argv,
+          // never written onto shared parent process.env across await.
           const workContextPath = navigatorWorkContextFile(sessionManager.getSessionDir());
-          const argvText = existsSync(workContextPath)
-            ? attachWorkContextPointer(text, workContextPath)
-            : text;
+          const workContextLocator =
+            existsSync(workContextPath) ? workContextPath : undefined;
 
           // Call contract only: forward shared-lifecycle signal; do not own AbortController here
           // (ADR 0018 / #959 — cancel ownership stays on the attendance/envelope seam).
           const baseSummon = {
             role: "navigator" as const,
-            argv: [argvText] as const,
+            argv: [text] as const,
             cwd: context.cwd,
             ...(summonHome === undefined ? {} : { home: summonHome }),
             ...(context.signal === undefined ? {} : { signal: context.signal }),
+            ...(workContextLocator === undefined
+              ? {}
+              : { navigatorWorkContextPath: workContextLocator }),
           };
 
           // Prefer host CLI resume so prior advice stays on the host session.

package/src/navigator-work-base.ts

@@ -1,7 +1,7 @@
 /**
  * Durable work subject and controlling authority for one navigator nest.
- * Settlement user turns keep a path pointer; the navigator system prompt
- * loads the bytes once per agent start from this file (base material).
+ * Startup materials load these bytes from the nest session directory; the
+ * caller/summon prompt must not receive a package-injected path (#1166).
  */
 import { existsSync, realpathSync } from "node:fs";
 import { readFile } from "node:fs/promises";
@@ -12,6 +12,9 @@ import { isEnoent, isRecord } from "./unknown-value.ts";
 
 export const NAVIGATOR_WORK_CONTEXT_BASENAME = "work-context.json";
 
+/** Child-process / in-process locator for nest work-context bytes — not prompt material (#1166). */
+export const AK_ROLE_NAVIGATOR_WORK_CONTEXT_ENV = "AK_ROLE_NAVIGATOR_WORK_CONTEXT" as const;
+
 export type NavigatorWorkBase = {
   readonly subject: string;
   readonly authority: string;
@@ -81,38 +84,20 @@ export async function readNavigatorWorkBase(path: string): Promise<NavigatorWork
   return { subject: record.subject, authority: record.authority };
 }
 
-function jsonObjectFromPrompt(prompt: string): Record<string, unknown> | undefined {
-  const head = prompt.trimStart().split("\n\n", 1)[0] ?? "";
-  if (!head.startsWith("{")) return undefined;
-  try {
-    const parsed: unknown = JSON.parse(head);
-    if (!isRecord(parsed)) return undefined;
-    return parsed as Record<string, unknown>;
-  } catch {
-    return undefined;
-  }
-}
-
-export function workContextPathFromPrompt(prompt: string): string | undefined {
-  const record = jsonObjectFromPrompt(prompt);
-  const path = record?.workContextPath;
-  if (typeof path !== "string" || path.trim() === "") return undefined;
-  return isNavigatorWorkContextFile(path) ? path : undefined;
-}
-
-/** Settlement JSON gains the nest pointer. Non-JSON prompts stay unchanged. */
-export function attachWorkContextPointer(text: string, workContextPath: string): string {
-  const record = jsonObjectFromPrompt(text);
-  if (record === undefined) return text;
-  if (typeof record.workContextPath === "string" && record.workContextPath.trim() !== "") return text;
-  const head = text.trimStart().split("\n\n", 1)[0] ?? "";
-  const rest = text.trimStart().slice(head.length);
-  return `${JSON.stringify({ ...record, workContextPath })}${rest}`;
-}
-
-/** System-prompt base for one agent start. Absent or unreadable file yields undefined. */
-export async function loadNavigatorWorkBaseSuffix(prompt: string): Promise<string | undefined> {
-  const path = workContextPathFromPrompt(prompt);
+/** System-prompt base for one agent start. Prefer request locator, else nest session dir. */
+export async function loadNavigatorWorkBaseSuffix(
+  sessionDir: string | undefined,
+  locatorPath?: string,
+): Promise<string | undefined> {
+  const path =
+    typeof locatorPath === "string" && locatorPath.trim() !== ""
+      ? locatorPath.trim()
+      : typeof process.env[AK_ROLE_NAVIGATOR_WORK_CONTEXT_ENV] === "string"
+        && process.env[AK_ROLE_NAVIGATOR_WORK_CONTEXT_ENV].trim() !== ""
+        ? process.env[AK_ROLE_NAVIGATOR_WORK_CONTEXT_ENV].trim()
+        : sessionDir !== undefined && sessionDir.trim() !== ""
+          ? navigatorWorkContextFile(sessionDir)
+          : undefined;
   if (path === undefined) return undefined;
   const body = await readNavigatorWorkBase(path);
   if (body === undefined) return undefined;

package/src/notary-role.ts

@@ -9,6 +9,10 @@ import { isSafePositiveTicketNumber } from "./run-ticket-number.ts";
  * This module keeps evidence assembly + projection only.
  */
 
+import {
+  auditedRunIdentityFromParts,
+  auditedRunIdentityMaterial,
+} from "./audited-run-identity.ts";
 import {
   NOTARY_OUTPUT_TOOL_NAME,
   NOTARY_SOURCE_RUN_FLAG,
@@ -53,25 +57,15 @@ export function readNotaryTicketFlag(flag: unknown): number | undefined {
   return n;
 }
 
-/**
- * Typed session bound (locator + optional ticket).
- * Sole production projection for agent-start material + session custom entry.
- */
-export function projectNotarySessionBound(input: {
-  readonly sourceRun: NotarySourceRunLocator;
-  readonly ticketNumber?: number;
-}): {
+/** Agent-start reading material: identity `<runId>@<席>` only — no directory path. */
+export function projectNotaryAuditedRunIdentity(input: {
   readonly sourceRun: NotarySourceRunLocator;
-  readonly ticketNumber?: number;
-} {
-  return {
-    sourceRun: input.sourceRun,
-    ...(input.ticketNumber === undefined ? {} : { ticketNumber: input.ticketNumber }),
-  };
+}) {
+  return auditedRunIdentityMaterial(
+    auditedRunIdentityFromParts(input.sourceRun.runId, input.sourceRun.role),
+  );
 }
 
-export type NotarySessionBound = ReturnType<typeof projectNotarySessionBound>;
-
 /**
  * Session custom-entry type for typed notary bound (written by shared envelope).
  * Role module only projects; lifecycle write is envelope-owned (ADR 0018).
@@ -102,7 +96,7 @@ export function projectNotaryBoundFromFlags(
 }
 
 /** Assemble systemPrompt body from base + soul only (NO embedded bound JSON).
- * The typed session bound travels separately as `readingMaterial`; adapters fold
+ * Audited-run identity travels separately as `readingMaterial`; adapters fold
  * it into the provider-visible prompt at the send boundary. */
 export function assembleNotaryAgentStartPrompt(input: {
   readonly baseSystemPrompt: string;
@@ -172,11 +166,8 @@ export function createNotaryRoleRuntime(
               baseSystemPrompt: event.systemPrompt,
               soul: activation.soul,
             }),
-            readingMaterial: projectNotarySessionBound({
+            readingMaterial: projectNotaryAuditedRunIdentity({
               sourceRun: activation.sourceRun,
-              ...(activation.ticketNumber === undefined
-                ? {}
-                : { ticketNumber: activation.ticketNumber }),
             }),
           };
         });

package/src/packaged-role-registry.ts

@@ -390,7 +390,8 @@ export const PUBLIC_ROLE_RECORDS = [
     presentSettled: "always",
     summonResume: false,
     admission: "instruction",
-    sameParent: "gate-pointer",
+    /** Structured --source-run only; instruction stays opaque caller/peer bytes (#1166). */
+    sameParent: "source-run",
     /** Resume restores an optional source-run path onto the admitted face. */
     resumeSourcePath: true,
     /** 台院 is a review officer and inherits the gatekeeper model. */
@@ -403,11 +404,12 @@ export const PUBLIC_ROLE_RECORDS = [
     /** Court reask replaces the initial prompt. */
     reaskPrompt: true,
     gateStageLabel: "台院",
+    /** Gate summon binds --source-run; identity is startup material (#1166). */
+    gateSummon: "source-run",
     activationFlags: [
       {
         field: "sourceRun",
         from: "sourceRunPath",
-        fallback: "gate-pointer",
         flag: "ak-inspector-source-run",
         binds: "input",
       },
@@ -554,7 +556,6 @@ export function packagedModelParent(role: string): PackagedRole | undefined {
  * One seat's admitted → activation copy.
  * `field` is the activation key. `from` is the admitted path when it differs.
  * `text` writes a number as decimal text on the activation object.
- * `fallback: "gate-pointer"` is the inspector instruction pointer when sourceRunPath is blank.
  * `flag` omitted: the value stays on the activation object and is not a host flag
  * (secretariat and countersign ticketNumber).
  */
@@ -562,7 +563,6 @@ export type PackagedActivationFlag = {
   readonly field: string;
   readonly from?: string;
   readonly text?: true;
-  readonly fallback?: "gate-pointer";
   readonly flag?: string;
   readonly binds?: "input" | "phase";
 };

package/src/pi/role-turn-host.ts

@@ -429,7 +429,7 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
       if (request.deliveryRequestLimit === undefined) delete env[RECEIPT_DELIVERY_LIMIT_ENV];
       else env[RECEIPT_DELIVERY_LIMIT_ENV] = String(request.deliveryRequestLimit);
       applyEngineChildEnv(env, request.engine);
-      // Nested auditor dossier tool binds the parent run pointer when published.
+      // Nested auditor binds the audited source-run for identity / soul selection.
       if (
         typeof process.env.AK_ROLE_AUDITOR_SOURCE_RUN === "string"
         && process.env.AK_ROLE_AUDITOR_SOURCE_RUN.trim() !== ""
@@ -443,6 +443,16 @@ export function createPiRoleTurnHost(config: PiRoleTurnHostConfig): RoleTurnHost
       ) {
         env.AK_ROLE_AUDITOR_SUBJECT = process.env.AK_ROLE_AUDITOR_SUBJECT;
       }
+      // Navigator nest work-context locator for startup materials (#1166) —
+      // child-process scoped only from this turn request; never parent process.env.
+      if (
+        typeof request.navigatorWorkContextPath === "string"
+        && request.navigatorWorkContextPath.trim() !== ""
+      ) {
+        env.AK_ROLE_NAVIGATOR_WORK_CONTEXT = request.navigatorWorkContextPath.trim();
+      } else {
+        delete env.AK_ROLE_NAVIGATOR_WORK_CONTEXT;
+      }
       if (
         config.recordLaunchedRolePackageIdentity !== undefined &&
         config.observeLaunchedRolePackageIdentity !== undefined