fix: restore current channel and host admission organs

runtime/public-personal-language-os/public-mother-bridge.mjs

@@ -0,0 +1,27 @@
+import { hash } from './engine.mjs';
+// Only user-consented application metadata crosses this interface; not the entire private context.
+export function publicMotherPacket(applicationResponse) {
+  const { application, digest } = applicationResponse;
+  if (!application || typeof digest !== 'string' || !Array.isArray(application.evidenceRefs)) throw Error('APPLICATION_REQUIRED');
+  if (hash(application) !== digest) throw Error('APPLICATION_DIGEST_MISMATCH');
+  return {
+    schema: 'hololake.public-mother-recognition-request/v1', scope: 'public',
+    motherSystem: 'TCS-MOTHER-LPM-0001', publicPersonaBody: 'SYS-GLW-POS-0001',
+    governanceDomain: 'DOMAIN-ZS', applicationDigest: digest,
+    applicationId: application.id, candidateName: application.seedName,
+    evidenceRefs: [...application.evidenceRefs], privateContextIncluded: false,
+    desiredResponse: 'SIGNED_REVIEW_APPLICATION_FROM_ENROLLED_PUBLIC_MOTHER_KEY',
+    automaticFormalRegistration: false,
+  };
+}
+
+export async function requestPublicMotherReview(application, transport) {
+  if (typeof transport?.reviewPublic !== 'function') throw Error('PUBLIC_MOTHER_TRANSPORT_NOT_CONNECTED');
+  const packet = publicMotherPacket(application);
+  const response = await transport.reviewPublic(packet);
+  if (response?.action !== 'REVIEW_APPLICATION' || response.payload?.digest !== packet.applicationDigest) {
+    throw Error('MOTHER_REVIEW_NOT_BOUND_TO_APPLICATION');
+  }
+  // The engine still verifies enrolled public role, signature, decision and freshness.
+  return response;
+}