@akagilnc/pi-workflow-roles 0.1.5598 → 0.1.5614

package/src/public-role-summons.ts

@@ -121,6 +121,11 @@ export type PublicSummonRequest = {
    * (#946 / ADR 0082).
    */
   readonly stationChild?: boolean;
+  /**
+   * Navigator nest work-context locator (#1166). Request-scoped internal path —
+   * never dialogue content; never shared parent process.env across await.
+   */
+  readonly navigatorWorkContextPath?: string;
 };
 
 const execFileAsync = promisify(execFile);
@@ -421,6 +426,10 @@ export async function summonPublicRole(
             ? {}
             : { correlationId: options.correlationId }),
           ...(options.createRunId === undefined ? {} : { createRunId: options.createRunId }),
+          ...(options.navigatorWorkContextPath === undefined
+            || options.navigatorWorkContextPath.trim() === ""
+            ? {}
+            : { navigatorWorkContextPath: options.navigatorWorkContextPath }),
         },
       };
     } catch (error) {
@@ -746,13 +755,13 @@ export async function summonGateOfficer(options: {
   /**
    * Plain-language re-ask when the prior officer reply was not three-state (#753 / #756).
    * Officers: reviewReask → same-ticket resume summons.instruction.
-   * Never concatenated into argv (inspector parentRunPath is the pure 卷宗指针).
+   * Never concatenated into argv (binding stays on --source-run / parentRunPath).
    */
   readonly reask?: string;
   /**
    * In-flight parent 交卷 body (tool-call arguments). Relayed verbatim as officer
    * dialogue content when reask is absent (#879). Binding pointer stays on
-   * --source-run / 卷宗指针 / ticket argv — never a content substitute.
+   * --source-run / parentRunPath — never a content substitute.
    */
   readonly submission?: unknown;
   /** Pi-adapter inject — forwarded to summonPublicRole (not a parent-host override). */
@@ -808,6 +817,7 @@ export async function summonGateOfficer(options: {
   if (gateSummon === "subject-source") {
     // #756: judge compliance path — same queue law as notary/inspector.
     // Binding pointer on argv; dialogue content rides gateReviewInstruction.
+    // #1166: no code-authored 卷宗指针 instruction — identity is startup material.
     return summonPublicRole({
       role: options.officer,
       argv: [
@@ -815,7 +825,8 @@ export async function summonGateOfficer(options: {
         "judge",
         "--source-run",
         options.sourceRunDirectory,
-        `卷宗指针：${options.sourceRunDirectory}`,
+        "--project",
+        options.cwd,
       ],
       ...common,
     });
@@ -850,11 +861,11 @@ export async function summonGateOfficer(options: {
       ...(courtTicket === undefined ? {} : { boundTicketNumber: courtTicket }),
     });
   }
-  // Inspector: argv stays pure 卷宗指针 (#747 parentRunPath lookup key).
-  // Content (body/reask) rides env → summons.instruction / first-mint prompt.
+  // Inspector: bind via --source-run (same face as notary); dialogue rides env.
+  // #1166: no code-authored 卷宗指针 instruction — identity is startup material.
   return summonPublicRole({
     role: options.officer,
-    argv: [`卷宗指针：${options.sourceRunDirectory}`],
+    argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
     ...common,
   });
 }

package/src/role-envelope.ts

@@ -178,6 +178,10 @@ export async function prepareRoleEnvelope(options: {
     ...(request.courtAttemptId === undefined ? {} : { courtAttemptId: request.courtAttemptId }),
     ...(request.invocationScopeId === undefined ? {} : { invocationScopeId: request.invocationScopeId }),
     ...(request.host === undefined || request.host.trim() === "" ? {} : { host: request.host.trim() }),
+    ...(request.navigatorWorkContextPath === undefined
+      || request.navigatorWorkContextPath.trim() === ""
+      ? {}
+      : { navigatorWorkContextPath: request.navigatorWorkContextPath }),
     sessionManager: {
       getLeafEntry: () => sessionEntries.at(-1) as ReturnType<HostContext["sessionManager"]["getLeafEntry"]>,
       getLeafId: () => runId,

package/src/role-run-placement.ts

@@ -1,5 +1,5 @@
 import { readdir } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 
 import {
   activationBookDirectory,
@@ -54,6 +54,15 @@ export function runDirectoryOfSessionFile(sessionFile: string): string {
   return dirname(dirname(sessionFile));
 }
 
+/** Climb session/session.jsonl → run directory when the host exposes a session file. */
+export function auditorRunDirectory(context: {
+  readonly sessionManager?: { getSessionFile?: () => string | undefined };
+}): string | undefined {
+  const sessionFile = context.sessionManager?.getSessionFile?.();
+  if (sessionFile === undefined) return undefined;
+  return resolve(runDirectoryOfSessionFile(sessionFile));
+}
+
 /** `<run>/session` → run directory. */
 export function runDirectoryFromSessionDirectory(sessionDirectory: string): string {
   return dirname(sessionDirectory);

package/src/role-runtime.ts

@@ -106,8 +106,13 @@ import {
   type AuditorRuntimeDependencies,
 } from "./auditor-role.ts";
 
+import {
+  auditedRunIdentityFromDirectory,
+  auditedRunIdentityMaterial,
+} from "./audited-run-identity.ts";
 import { formatNavigatorReport, NAVIGATOR_EVENT_TYPE, NAVIGATOR_ROUTE_PLAYBOOK_FAILURE_ENTRY, navigatorSubjectKey, navigatorUnavailableError, subjectPath, type NavigatorAttendance, type NavigatorAttendanceOptions, type NavigatorEvent, type NavigatorPhase, type NavigatorReport, type NavigatorSettlement, type NavigatorSubjectProvenance, type NavigatorWorkContext } from "./navigator-attendance.ts";
 import { loadNavigatorWorkBaseSuffix } from "./navigator-work-base.ts";
+import { AK_ROLE_AUDITOR_SOURCE_RUN_ENV } from "./auditor-soul.ts";
 import {
   buildNavigatorInfrastructureFailureFact,
   classifyPackagedRoleTerminalResult,
@@ -690,7 +695,7 @@ export function createNavigatorRoleRuntime(
       const loadRoutePlaybook = dependencies.loadRoutePlaybook
         ?? (() => readPackageMaterial("resources/navigator-route-playbook.md"));
       let playbookRead: Promise<string> | undefined;
-      roleHost.on("before_agent_start", async (event) => {
+      roleHost.on("before_agent_start", async (event, ctx) => {
         const basePrompt = typeof event.systemPrompt === "string" ? event.systemPrompt : "";
         const parts: string[] = [];
         try {
@@ -705,8 +710,10 @@ export function createNavigatorRoleRuntime(
             parts.push(message);
           }
         }
-        const prompt = typeof event.prompt === "string" ? event.prompt : "";
-        const work = await loadNavigatorWorkBaseSuffix(prompt);
+        const work = await loadNavigatorWorkBaseSuffix(
+          ctx.sessionManager?.getSessionDir?.(),
+          ctx.navigatorWorkContextPath,
+        );
         if (work !== undefined && work.trim() !== "") parts.push(work);
         if (parts.length === 0) return;
         const text = parts.join("\n\n");
@@ -723,7 +730,7 @@ export function createAuditorRoleRuntime(
   roleHost: RoleHost,
   dependencies: AuditorRuntimeDependencies,
 ) {
-  const base = createFiledOfficerRuntime(
+  return createFiledOfficerRuntime(
     roleHost,
     {
       role: "auditor",
@@ -732,24 +739,39 @@ export function createAuditorRoleRuntime(
     },
     dependencies,
   );
-  return {
-    async activate() {
-      await base.activate();
-      // Same tools whether nested or direct (#675): dossier tool always registered.
-      // Source run: only the shared --source-run input face (never own-run fallback).
-      const { createAuditorDossierTool, AUDITOR_DOSSIER_TOOL_NAME } =
-        await import("./auditor-dossier-tool.ts");
-      const { AK_ROLE_AUDITOR_SOURCE_RUN_ENV } = await import("./auditor-soul.ts");
-      const already = roleHost.getAllTools().some((tool) => tool.name === AUDITOR_DOSSIER_TOOL_NAME);
-      if (already) return;
-      const sourceRun =
-        typeof process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV] === "string"
-        && process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV].trim() !== ""
-          ? process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV].trim()
-          : undefined;
-      roleHost.registerTool(createAuditorDossierTool(sourceRun) as never);
-    },
-  };
+}
+
+function isAuditedIdentitySeat(role: string): boolean {
+  return role === "notary" || role === "inspector" || role === "auditor" || role === "countersign";
+}
+
+/** Resolve audited-run directory for identity material — this-leg flags / admitted page first. */
+function resolveAuditedSourceRunDirectory(
+  roleHost: RoleHost,
+  ctx: HostContext,
+  role: string,
+): string | undefined {
+  const notary = roleHost.getFlag(NOTARY_SOURCE_RUN_FLAG.name);
+  if (typeof notary === "string" && notary.trim() !== "") return notary.trim();
+  const inspector = roleHost.getFlag(INSPECTOR_SOURCE_RUN_FLAG.name);
+  if (typeof inspector === "string" && inspector.trim() !== "") return inspector.trim();
+  // This-leg admitted binding wins over shared auditor env (#1166 J3).
+  const runDirectory = runDirectoryFromHostContext(ctx);
+  if (runDirectory !== undefined) {
+    const admitted = readPageSync(runDirectory, "admitted");
+    if (typeof admitted?.sourceRunPath === "string" && admitted.sourceRunPath.trim() !== "") {
+      return admitted.sourceRunPath.trim();
+    }
+  }
+  // Auditor env is request-scoped soul binding for the auditor seat only.
+  if (role === "auditor") {
+    const auditor =
+      typeof process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV] === "string"
+        ? process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV].trim()
+        : "";
+    if (auditor !== "") return auditor;
+  }
+  return undefined;
 }
 
 /**
@@ -1220,15 +1242,16 @@ export function createRoleRuntimeExtension(
       if (reading === undefined) return;
       return { readingMaterial: reading };
     });
-    roleHost.on("before_agent_start", () => {
-      const path = roleHost.getFlag(INSPECTOR_SOURCE_RUN_FLAG.name);
-      if (typeof path !== "string" || path.trim() === "") return;
-      return {
-        readingMaterial: {
-          kind: "inspector-parent-binding" as const,
-          sourceRunPath: path,
-        },
-      };
+    // #1166 / ADR 0087: four audit seats share one audited-run identity material.
+    // Notary also emits identity from its own before_agent_start; skip double fold.
+    roleHost.on("before_agent_start", (_event, ctx) => {
+      const role = selectedRole ?? roleHost.getFlag(ROLE_FLAG.name);
+      if (typeof role !== "string" || !isAuditedIdentitySeat(role) || role === "notary") return;
+      const sourceDirectory = resolveAuditedSourceRunDirectory(roleHost, ctx, role);
+      if (sourceDirectory === undefined) return;
+      const identity = auditedRunIdentityFromDirectory(sourceDirectory);
+      if (identity === undefined) return;
+      return { readingMaterial: auditedRunIdentityMaterial(identity) };
     });
     roleHost.on("tool_result", async (event, ctx) => {
       const role = selectedRole;

package/dist/auditor-dossier-tool.js

@@ -1,47 +0,0 @@
-import { join, resolve } from "node:path";
-import { RUN_HISTORY_FILE, RUN_LOG_FILE, runCurrentPath } from "./run-dossier.js";
-import {
-  runDirectoryOfSessionFile,
-  sessionFileOf
-} from "./role-run-placement.js";
-import { Type } from "typebox";
-const AUDITOR_DOSSIER_TOOL_NAME = "ak_get_run_dossier";
-function auditorRunDirectory(context) {
-  const sessionFile = context.sessionManager?.getSessionFile?.();
-  if (sessionFile === void 0) return void 0;
-  return resolve(runDirectoryOfSessionFile(sessionFile));
-}
-function createAuditorDossierTool(runDirectory) {
-  return {
-    name: AUDITOR_DOSSIER_TOOL_NAME,
-    description: "\u5B9A\u4F4D\u672C\u5BA1\u8BA1\u5E2D\u7ED1\u5B9A\u7684 run \u5377\u5B97\u53CA\u5176\u8BC1\u636E\u5165\u53E3\u3002",
-    // #836 r16 class 3: execute() ignores `_params` entirely — a closed root
-    // only rejects the role for saying more.
-    parameters: Type.Object({}, { additionalProperties: true }),
-    async execute(_id, _params) {
-      if (runDirectory === void 0) {
-        return {
-          content: [{ type: "text", text: "\u672C\u5BA1\u8BA1\u5E2D\u65E0\u7ED1\u5B9A run \u5377\u5B97\u8BB0\u5F55\u3002" }],
-          details: void 0
-        };
-      }
-      const details = {
-        runDirectory,
-        current: runCurrentPath(runDirectory),
-        parentSessionCandidate: sessionFileOf(runDirectory),
-        attachments: join(runDirectory, "attachments"),
-        log: join(runDirectory, RUN_LOG_FILE),
-        history: join(runDirectory, RUN_HISTORY_FILE)
-      };
-      return {
-        content: [{ type: "text", text: JSON.stringify(details) }],
-        details
-      };
-    }
-  };
-}
-export {
-  AUDITOR_DOSSIER_TOOL_NAME,
-  auditorRunDirectory,
-  createAuditorDossierTool
-};

package/src/auditor-dossier-tool.ts

@@ -1,63 +0,0 @@
-import { join, resolve } from "node:path";
-
-import { RUN_HISTORY_FILE, RUN_LOG_FILE, runCurrentPath } from "./run-dossier.ts";
-import type { AgentToolResult, ExtensionContext } from "@earendil-works/pi-coding-agent";
-import type { HostContext } from "./host-contracts.ts";
-import {
-  runDirectoryOfSessionFile,
-  sessionFileOf,
-} from "./role-run-placement.ts";
-import { Type } from "typebox";
-
-export const AUDITOR_DOSSIER_TOOL_NAME = "ak_get_run_dossier" as const;
-
-export type AuditorDossierLocation = {
-  readonly runDirectory: string;
-  readonly current: string;
-  readonly parentSessionCandidate: string;
-  readonly attachments: string;
-  readonly log: string;
-  readonly history: string;
-};
-
-/** Resolve the exact run binding already carried by the parent record session. */
-export function auditorRunDirectory(context: ExtensionContext | HostContext): string | undefined {
-  const sessionFile = context.sessionManager?.getSessionFile?.();
-  if (sessionFile === undefined) return undefined;
-  // Sole layout: <run>/session/session.jsonl → climb two levels to the run directory.
-  return resolve(runDirectoryOfSessionFile(sessionFile));
-}
-
-/** The one shared, run-bound dossier locator exposed to every auditor seat. */
-export function createAuditorDossierTool(
-  runDirectory: string | undefined,
-) {
-  return {
-    name: AUDITOR_DOSSIER_TOOL_NAME,
-    description: "定位本审计席绑定的 run 卷宗及其证据入口。",
-    // #836 r16 class 3: execute() ignores `_params` entirely — a closed root
-    // only rejects the role for saying more.
-    parameters: Type.Object({}, { additionalProperties: true }),
-    async execute(_id: string, _params: unknown): Promise<AgentToolResult<AuditorDossierLocation | undefined>> {
-      if (runDirectory === undefined) {
-        return {
-          content: [{ type: "text", text: "本审计席无绑定 run 卷宗记录。" }],
-          details: undefined,
-        };
-      }
-      // #836: whole run directory pointer — officer finds materials; no leaf preference (A7.2).
-      const details: AuditorDossierLocation = {
-        runDirectory,
-        current: runCurrentPath(runDirectory),
-        parentSessionCandidate: sessionFileOf(runDirectory),
-        attachments: join(runDirectory, "attachments"),
-        log: join(runDirectory, RUN_LOG_FILE),
-        history: join(runDirectory, RUN_HISTORY_FILE),
-      };
-      return {
-        content: [{ type: "text", text: JSON.stringify(details) }],
-        details,
-      };
-    },
-  };
-}