@akagilnc/pi-workflow-roles 0.1.2439 → 0.1.2444

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.2439",
+  "version": "0.1.2444",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/engines/grok-4.6.md

@@ -19,7 +19,11 @@ grok --prompt-file /path/to/labor-prompt.md -m grok-4.6 --always-approve --outpu
 
 - `-m grok-4.6` selects the model; `grok models` lists valid ids (currently
   `grok-4.6` default, `grok-4.5`).
-- `--always-approve` keeps the run non-interactive (documented).
+- `--always-approve` (equivalently `--yolo` or `--permission-mode
+  bypassPermissions`) keeps the run non-interactive (documented). Headless
+  permissions otherwise default to interactive approval, where an `ask`
+  decision has no UI to answer; alternatively, use an explicit permission
+  setup that auto-approves the required call.
 - Official docs list `-p/--single` as the canonical headless prompt input;
   `--prompt-file` exists in the installed CLI (`--help`) and is smoke-verified
   on this host — prefer it for long prompts, fall back to `-p` if absent.
@@ -39,3 +43,24 @@ grok --prompt-file /path/to/labor-prompt.md -m grok-4.6 --always-approve --outpu
 - Feeding raw JSON directly through `--prompt-file` is rejected by the CLI as
   non-ACP JSON (`JSON object must have a type field`; live-verified
   2026-08-21).
+
+## MCP host behavior
+
+- Repository MCP entries live under `[mcp_servers.<name>]` in
+  `.grok/config.toml`. They take effect only after the folder is trusted; pass
+  `--trust` on unattended/headless invocations. Without it, the project server
+  may be absent even though the file is present (`live-1787838141494`), and
+  `grok mcp doctor` reports `folder untrusted…re-run with --trust`
+  (`live-1787838491136`).
+- Diagnose server startup with `grok mcp doctor [<server>]`, then inspect
+  `~/.grok/logs/mcp/<server>.stderr.log`; Grok truncates that stderr log on
+  each stdio server launch.
+- MCP tools are exposed to the model as `<server>__<tool>` (for example,
+  `ak_489_coder__ak_coder_output`). Use the fully qualified name in prompts;
+  a bare tool name relies on the host's loose discovery/matching behavior.
+- The headless permission setting described above also covers MCP calls.
+- Grok launches a stdio server from the task cwd. Make `command` and `args`
+  cwd-independent: use absolute entrypoint paths and do not rely on resolving
+  a task-local `node_modules` binary. A cwd-dependent `tsx` launcher failed in
+  `live-1787838491136`; the absolute-path form completed the MCP route in
+  `live-1787838776163`.

package/souls/quality-law.md

@@ -28,6 +28,12 @@
 
 日常施工只跑触及面的聚焦测试；家族或批次收尾，在最终待合并状态跑一次全量到绿；之后再有修复，重跑全量。
 
+## 未完成交卷
+
+unfinished 只认两因：**缺前置**——处置当下仍缺少已声明的前置产物、决定或答复，且该缺失使剩余派工当前无法合法执行；**违宪约束**——继续施工将违反 authority 或既裁法源。两因之外的一切理由（执行窗口、时间、工作量、难度等），不得作为 unfinished 成立依据，审官一律封驳。
+
+据实以两因交卷不构成违规，但不自动 pass；所称阻断须可由卷宗独立核对，声明与引用本身不能证明缺失或因果。
+
 ## 预警参考线
 
 给审官的触发线，由审官自行判断，不是机械闸。超线不必然有罪，但须专项审视、当事方须给出说明：