@akagilnc/pi-workflow-roles 0.1.3414 → 0.1.3445

package/dist/public-cli/config.js

@@ -1,532 +1,450 @@
-/**
- * Persistent and effective per-seat model/thinking configuration for ak-role.
- */
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { assertLegalEngineName } from "../package-resources/engine-material.js";
 import { resolveConfiguredProvinceOfficer } from "../institutional-resolution.js";
-import { PUBLIC_CALLABLE_ROLES, PUBLIC_CONFIGURABLE_SEATS, isPublicCallableRole, isPublicConfigurableSeat, seatModelOnly, publicStartupCandidates, } from "./registry.js";
-/** Province officers that may carry a persistent model override (#453). */
-export const GATE_OFFICER_SEATS = [
-    "gatekeeper",
-    "inspector",
-    "notary",
+import {
+  PUBLIC_CALLABLE_ROLES,
+  PUBLIC_CONFIGURABLE_SEATS,
+  isPublicCallableRole,
+  isPublicConfigurableSeat,
+  seatModelOnly,
+  publicStartupCandidates
+} from "./registry.js";
+const GATE_OFFICER_SEATS = [
+  "gatekeeper",
+  "inspector",
+  "notary"
 ];
-export function isGateOfficerSeat(value) {
-    return GATE_OFFICER_SEATS.includes(value);
+function isGateOfficerSeat(value) {
+  return GATE_OFFICER_SEATS.includes(value);
 }
-export const THINKING_LEVELS = new Set([
-    "off",
-    "minimal",
-    "low",
-    "medium",
-    "high",
-    "xhigh",
-    "max",
-]);
-export function publicCliConfigPath(home) {
-    if (typeof home !== "string" || home.trim() === "") {
-        throw new Error("home must be explicitly provided");
-    }
-    return join(home, ".ak-roles", "public-cli.json");
+function publicCliConfigPath(home) {
+  if (typeof home !== "string" || home.trim() === "") {
+    throw new Error("home must be explicitly provided");
+  }
+  return join(home, ".ak-roles", "public-cli.json");
 }
-export async function loadPublicCliConfig(home) {
-    const path = publicCliConfigPath(home);
-    try {
-        const raw = await readFile(path, "utf8");
-        return parsePublicCliConfig(JSON.parse(raw));
-    }
-    catch (error) {
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT") {
-            return { seats: {} };
-        }
-        throw error;
-    }
+async function loadPublicCliConfig(home) {
+  const path = publicCliConfigPath(home);
+  try {
+    const raw = await readFile(path, "utf8");
+    return parsePublicCliConfig(JSON.parse(raw));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return { seats: {} };
+    }
+    throw error;
+  }
 }
-export async function savePublicCliConfig(config, home) {
-    const path = publicCliConfigPath(home);
-    await mkdir(dirname(path), { recursive: true });
-    const normalized = parsePublicCliConfig(config);
-    // Fold the opaque bucket back under seats for the on-disk shape. Do not
-    // emit unknownSeats as a top-level key — neighboring lines read seats only.
-    await writeFile(path, `${JSON.stringify(serializePublicCliConfig(normalized), null, 2)}\n`, "utf8");
+async function savePublicCliConfig(config, home) {
+  const path = publicCliConfigPath(home);
+  await mkdir(dirname(path), { recursive: true });
+  const normalized = parsePublicCliConfig(config);
+  await writeFile(
+    path,
+    `${JSON.stringify(serializePublicCliConfig(normalized), null, 2)}
+`,
+    "utf8"
+  );
 }
-export function setPersistentSeatConfig(config, seat, selection) {
-    const previous = config.seats[seat];
+function setPersistentSeatConfig(config, seat, selection) {
+  const previous = config.seats[seat];
+  return {
+    // Spread preserves sibling top-level keys such as autoResumeLimit (#422):
+    // a seat write must never silently drop them.
+    ...config,
+    seats: {
+      ...config.seats,
+      [seat]: {
+        ...selection,
+        // Model rewrite preserves a previously configured engine axis.
+        ...previous?.engine === void 0 ? {} : { engine: previous.engine },
+        ...previous?.host === void 0 ? {} : { host: previous.host }
+      }
+    }
+  };
+}
+function clearPersistentSeatConfig(config, seat) {
+  const previous = config.seats[seat];
+  if (previous === void 0) return config;
+  if ((seat === "notary" || seat === "inspector") && (previous.engine !== void 0 || previous.host !== void 0)) {
     return {
-        // Spread preserves sibling top-level keys such as autoResumeLimit (#422):
-        // a seat write must never silently drop them.
-        ...config,
-        seats: {
-            ...config.seats,
-            [seat]: {
-                ...selection,
-                // Model rewrite preserves a previously configured engine axis.
-                ...(previous?.engine === undefined ? {} : { engine: previous.engine }),
-                ...(previous?.host === undefined ? {} : { host: previous.host }),
-            },
-        },
+      ...config,
+      seats: {
+        ...config.seats,
+        [seat]: {
+          ...previous.engine === void 0 ? {} : { engine: previous.engine },
+          ...previous.host === void 0 ? {} : { host: previous.host }
+        }
+      }
     };
+  }
+  const { [seat]: _dropped, ...seats } = config.seats;
+  return { ...config, seats };
 }
-/**
- * Clear a gate officer's persistent model override (#453).
- * Scope is GateOfficerSeat only — non-province seats have no destructive clear seam.
- * Notary and direct Inspector may retain host/engine residual axes while model
- * resolution returns to gatekeeper inheritance (#522 two independent
- * axes; #568 public Inspector; #620). Gatekeeper drops the whole row.
- * Already-absent seats are a no-op.
- */
-export function clearPersistentSeatConfig(config, seat) {
-    const previous = config.seats[seat];
-    if (previous === undefined)
-        return config;
-    // Callable province seats keep independent host/engine residuals after model clear.
-    if ((seat === "notary" || seat === "inspector") &&
-        (previous.engine !== undefined || previous.host !== undefined)) {
-        return {
-            ...config,
-            seats: {
-                ...config.seats,
-                [seat]: {
-                    ...(previous.engine === undefined ? {} : { engine: previous.engine }),
-                    ...(previous.host === undefined ? {} : { host: previous.host }),
-                },
-            },
-        };
-    }
-    const { [seat]: _dropped, ...seats } = config.seats;
-    return { ...config, seats };
+function setPersistentSeatHost(config, seat, host) {
+  const previous = config.seats[seat];
+  if (previous === void 0) {
+    throw new Error(`config seat ${seat} has no persistent model; set provider/model[:thinking] before host`);
+  }
+  if (host === void 0) {
+    const { host: _dropped, ...rest } = previous;
+    if (seatModelOnly(rest) === void 0 && rest.engine === void 0) {
+      const { [seat]: _row, ...seats } = config.seats;
+      return { ...config, seats };
+    }
+    return { ...config, seats: { ...config.seats, [seat]: rest } };
+  }
+  return { ...config, seats: { ...config.seats, [seat]: { ...previous, host } } };
 }
-/** Set or clear the persistent main-session host on a callable role seat. */
-export function setPersistentSeatHost(config, seat, host) {
-    const previous = config.seats[seat];
-    if (previous === undefined) {
-        throw new Error(`config seat ${seat} has no persistent model; set provider/model[:thinking] before host`);
-    }
-    if (host === undefined) {
-        const { host: _dropped, ...rest } = previous;
-        if (seatModelOnly(rest) === undefined && rest.engine === undefined) {
-            const { [seat]: _row, ...seats } = config.seats;
-            return { ...config, seats };
-        }
-        return { ...config, seats: { ...config.seats, [seat]: rest } };
+function setPersistentSeatEngine(config, seat, engine) {
+  const previous = config.seats[seat];
+  if (previous === void 0) {
+    throw new Error(
+      `config seat ${seat} has no persistent model; set provider/model[:thinking] before engine`
+    );
+  }
+  if (engine === void 0) {
+    const { engine: _dropped, ...modelOnly } = previous;
+    if (seatModelOnly(modelOnly) === void 0 && modelOnly.host === void 0) {
+      const { [seat]: _row, ...seats } = config.seats;
+      return { ...config, seats };
     }
-    return { ...config, seats: { ...config.seats, [seat]: { ...previous, host } } };
-}
-/**
- * Set or clear persistent engine on a callable role seat (#356 / #378 / #391 / #453).
- * First engine still requires an existing seat row (model, or residual axes).
- * Clearing engine from an axis-only residual drops the empty row; clearing
- * engine from a model+engine row leaves model-only. Seat type is PublicCallableRole
- * (same as PublicConfigurableSeat; navigator included since #639).
- */
-export function setPersistentSeatEngine(config, seat, engine) {
-    const previous = config.seats[seat];
-    if (previous === undefined) {
-        throw new Error(`config seat ${seat} has no persistent model; set provider/model[:thinking] before engine`);
-    }
-    if (engine === undefined) {
-        const { engine: _dropped, ...modelOnly } = previous;
-        // Drop the row only after the final independent axis is cleared.
-        if (seatModelOnly(modelOnly) === undefined && modelOnly.host === undefined) {
-            const { [seat]: _row, ...seats } = config.seats;
-            return { ...config, seats };
-        }
-        return {
-            ...config,
-            seats: {
-                ...config.seats,
-                [seat]: modelOnly,
-            },
-        };
-    }
-    // Engine-name path-safety syntax is owned solely by assertLegalEngineName
-    // (call-request + config-parse seams). Setter is pure seat mutation.
     return {
-        ...config,
-        seats: {
-            ...config.seats,
-            [seat]: { ...previous, engine },
-        },
+      ...config,
+      seats: {
+        ...config.seats,
+        [seat]: modelOnly
+      }
     };
+  }
+  return {
+    ...config,
+    seats: {
+      ...config.seats,
+      [seat]: { ...previous, engine }
+    }
+  };
 }
-/**
- * #422 value domain authority for the auto-resume ceiling: non-negative integer,
- * no package-local upper bound (ADR 0035). `0` is legal and means auto-resume is
- * disabled (a single dispatch, no in-place retry). Negative numbers, fractions,
- * NaN, Infinity and non-number types are rejected loudly — never silently coerced.
- */
-export function parseAutoResumeLimit(value) {
-    if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
-        throw new Error(`auto-resume limit must be a non-negative integer, got ${JSON.stringify(value)}`);
-    }
-    return value;
+function parseAutoResumeLimit(value) {
+  if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
+    throw new Error(
+      `auto-resume limit must be a non-negative integer, got ${JSON.stringify(value)}`
+    );
+  }
+  return value;
 }
-/**
- * #422: set the persistent autoResumeLimit top-level key. Pure mutation that
- * preserves all sibling keys (seats included).
- */
-export function setAutoResumeLimit(config, limit) {
-    return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
+function setAutoResumeLimit(config, limit) {
+  return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
-/**
- * Config-parse seam: persistent call axes belong to PUBLIC_CALLABLE_ROLES;
- * engine names need only path-safety syntax (no closed material catalog;
- * #376 / #378 / #391 / ADR 0069). Syntax authority = assertLegalEngineName
- * (no injected duplicate).
- */
-export function validatePublicCliConfigAxes(config, _packageRoot) {
-    for (const seat of Object.keys(config.seats)) {
-        const row = config.seats[seat];
-        if (row?.engine === undefined)
-            continue;
-        try {
-            assertLegalEngineName(row.engine);
-        }
-        catch (error) {
-            throw new Error(`config seat ${seat} engine is illegal: ${row.engine}`, { cause: error });
-        }
-    }
+function validatePublicCliConfigAxes(config, _packageRoot) {
+  for (const seat of Object.keys(config.seats)) {
+    const row = config.seats[seat];
+    if (row?.engine === void 0) continue;
+    try {
+      assertLegalEngineName(row.engine);
+    } catch (error) {
+      throw new Error(
+        `config seat ${seat} engine is illegal: ${row.engine}`,
+        { cause: error }
+      );
+    }
+  }
 }
-export function parseModelSpec(spec, fallbackThinking) {
-    const trimmed = spec.trim();
-    if (!trimmed) {
-        throw new Error("model specification must be non-empty");
-    }
-    const thinkingSplit = trimmed.lastIndexOf(":");
-    let modelPart = trimmed;
-    let thinking = fallbackThinking;
-    // #346: no colon → bare provider/model is legal. Colon present (any index,
-    // including 0) → suffix must be a typed PublicThinkingLevel (empty/unknown
-    // stay format rejects; never swallow ":…" into the model name).
-    if (thinkingSplit !== -1) {
-        const maybeThinking = trimmed.slice(thinkingSplit + 1);
-        if (!THINKING_LEVELS.has(maybeThinking)) {
-            throw new Error(`model specification must be provider/model[:thinking], got ${spec}`);
-        }
-        thinking = maybeThinking;
-        modelPart = trimmed.slice(0, thinkingSplit);
-    }
-    const slash = modelPart.indexOf("/");
-    if (slash <= 0 || slash === modelPart.length - 1) {
-        throw new Error(`model specification must be provider/model[:thinking], got ${spec}`);
-    }
-    const provider = modelPart.slice(0, slash);
-    const model = modelPart.slice(slash + 1);
-    // #346/#384: bare provider/model is legal — do not invent thinking.
-    return thinking === undefined
-        ? { provider, model }
-        : { provider, model, thinking };
+function parseModelSpec(spec, fallbackThinking) {
+  const trimmed = spec.trim();
+  if (!trimmed) {
+    throw new Error("model specification must be non-empty");
+  }
+  const thinkingSplit = trimmed.lastIndexOf(":");
+  let modelPart = trimmed;
+  let thinking = fallbackThinking;
+  if (thinkingSplit !== -1) {
+    thinking = trimmed.slice(thinkingSplit + 1);
+    modelPart = trimmed.slice(0, thinkingSplit);
+  }
+  const slash = modelPart.indexOf("/");
+  if (slash <= 0 || slash === modelPart.length - 1) {
+    throw new Error(
+      `model specification must be provider/model[:thinking], got ${spec}`
+    );
+  }
+  const provider = modelPart.slice(0, slash);
+  const model = modelPart.slice(slash + 1);
+  return thinking === void 0 ? { provider, model } : { provider, model, thinking };
 }
-export function formatModelSpec(selection) {
-    const base = `${selection.provider}/${selection.model}`;
-    return selection.thinking === undefined ? base : `${base}:${selection.thinking}`;
+function formatModelSpec(selection) {
+  const base = `${selection.provider}/${selection.model}`;
+  return selection.thinking === void 0 ? base : `${base}:${selection.thinking}`;
 }
-/**
- * Single source: seat model selection → Pi argv at the public CLI execution seam.
- * Bare provider/model omits --thinking so pi/model defaults apply; suffix passes through.
- */
-export function buildSeatModelCliArgs(model) {
-    if (model === undefined)
-        return [];
-    return [
-        "--provider",
-        model.provider,
-        "--model",
-        model.model,
-        ...(model.thinking === undefined ? [] : ["--thinking", model.thinking]),
-    ];
+function buildSeatModelCliArgs(model) {
+  if (model === void 0) return [];
+  return [
+    "--provider",
+    model.provider,
+    "--model",
+    model.model,
+    ...model.thinking === void 0 ? [] : ["--thinking", model.thinking]
+  ];
 }
-/**
- * Disk document shape for public-cli.json. Unknown seat rows live under
- * `seats` (not a parallel top-level key) so every build — old or new — sees
- * one seats map.
- */
 function serializePublicCliConfig(config) {
-    return {
-        // Known seats win on any key clash; by construction the two maps are
-        // disjoint after parse, but prefer owned rows if a caller stuffed both.
-        seats: {
-            ...(config.unknownSeats ?? {}),
-            ...config.seats,
-        },
-        ...(config.autoResumeLimit === undefined
-            ? {}
-            : { autoResumeLimit: config.autoResumeLimit }),
-    };
+  return {
+    // Known seats win on any key clash; by construction the two maps are
+    // disjoint after parse, but prefer owned rows if a caller stuffed both.
+    seats: {
+      ...config.unknownSeats ?? {},
+      ...config.seats
+    },
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
+  };
 }
 function parsePublicCliConfig(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error("public CLI config must be an object");
-    }
-    const record = value;
-    // #422 round-trip preservation: the sibling top-level key must survive every
-    // parse→save cycle; an unknown-key drop would silently erase it on any write.
-    let autoResumeLimit;
-    if (record.autoResumeLimit !== undefined) {
-        autoResumeLimit = parseAutoResumeLimit(record.autoResumeLimit);
-    }
-    // #592: opaque bucket may already be present on an in-memory round-trip
-    // (load→set→save calls parse again). Carry it before seats iteration so a
-    // disk-shaped seats map and a memory-shaped bucket both survive.
-    const unknownSeats = {};
-    if (record.unknownSeats !== undefined) {
-        if (record.unknownSeats === null ||
-            typeof record.unknownSeats !== "object" ||
-            Array.isArray(record.unknownSeats)) {
-            throw new Error("public CLI config.unknownSeats must be an object");
-        }
-        Object.assign(unknownSeats, record.unknownSeats);
-    }
-    const withOpaque = (seats) => ({
-        seats,
-        ...(autoResumeLimit === undefined ? {} : { autoResumeLimit }),
-        ...(Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }),
-    });
-    if (record.seats === undefined) {
-        return withOpaque({});
-    }
-    if (record.seats === null ||
-        typeof record.seats !== "object" ||
-        Array.isArray(record.seats)) {
-        throw new Error("public CLI config.seats must be an object");
-    }
-    const seats = {};
-    for (const [key, raw] of Object.entries(record.seats)) {
-        // #592: shared machine-wide public-cli.json may hold seat rows a newer CLI
-        // wrote. Do not consume them (resolve/enum stay owned-seat only), but keep
-        // the raw value in the opaque bucket so save can put them back under seats.
-        // Unknown field-level keys on known seats keep their existing tolerance.
-        if (!isPublicConfigurableSeat(key)) {
-            unknownSeats[key] = raw;
-            continue;
-        }
-        seats[key] = parseSeatModelConfig(raw, key);
-    }
-    return withOpaque(seats);
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config must be an object");
+  }
+  const record = value;
+  let autoResumeLimit;
+  if (record.autoResumeLimit !== void 0) {
+    autoResumeLimit = parseAutoResumeLimit(record.autoResumeLimit);
+  }
+  const unknownSeats = {};
+  if (record.unknownSeats !== void 0) {
+    if (record.unknownSeats === null || typeof record.unknownSeats !== "object" || Array.isArray(record.unknownSeats)) {
+      throw new Error("public CLI config.unknownSeats must be an object");
+    }
+    Object.assign(unknownSeats, record.unknownSeats);
+  }
+  const withOpaque = (seats2) => ({
+    seats: seats2,
+    ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
+    ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
+  });
+  if (record.seats === void 0) {
+    return withOpaque({});
+  }
+  if (record.seats === null || typeof record.seats !== "object" || Array.isArray(record.seats)) {
+    throw new Error("public CLI config.seats must be an object");
+  }
+  const seats = {};
+  for (const [key, raw] of Object.entries(
+    record.seats
+  )) {
+    if (!isPublicConfigurableSeat(key)) {
+      unknownSeats[key] = raw;
+      continue;
+    }
+    seats[key] = parseSeatModelConfig(raw, key);
+  }
+  return withOpaque(seats);
 }
 function parseSeatModelConfig(value, seat) {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error(`config seat ${seat} must be an object`);
-    }
-    const raw = value;
-    const hasProvider = raw.provider !== undefined;
-    const hasModel = raw.model !== undefined;
-    if (hasProvider !== hasModel) {
-        throw new Error(`config seat ${seat} requires both provider and model`);
-    }
-    if (raw.host !== undefined && (typeof raw.host !== "string" || raw.host.trim() === "")) {
-        throw new Error(`config seat ${seat} host must be a non-empty string`);
-    }
-    if (raw.engine !== undefined && typeof raw.engine !== "string") {
-        // Shape only: engine must be a string field. Path-safety syntax is deferred to
-        // validatePublicCliConfigAxes → assertLegalEngineName (single authority).
-        throw new Error(`config seat ${seat} engine must be a string`);
-    }
-    // #453/#522/#568: notary/inspector host/engine residuals remain legal after
-    // model clear. All other seats keep provider/model.
-    if (!hasProvider) {
-        if ((seat === "notary" || seat === "inspector") &&
-            (typeof raw.engine === "string" || typeof raw.host === "string")) {
-            if (raw.thinking !== undefined) {
-                throw new Error(`config seat ${seat} thinking requires provider/model`);
-            }
-            return {
-                ...(raw.engine === undefined ? {} : { engine: raw.engine }),
-                ...(raw.host === undefined ? {} : { host: raw.host }),
-            };
-        }
-        throw new Error(`config seat ${seat} requires provider`);
-    }
-    if (typeof raw.provider !== "string" || raw.provider.trim() === "") {
-        throw new Error(`config seat ${seat} requires provider`);
-    }
-    if (typeof raw.model !== "string" || raw.model.trim() === "") {
-        throw new Error(`config seat ${seat} requires model`);
-    }
-    // #384: thinking is optional on persistent seats; when present it must be typed.
-    if (raw.thinking !== undefined) {
-        if (typeof raw.thinking !== "string" ||
-            !THINKING_LEVELS.has(raw.thinking)) {
-            throw new Error(`config seat ${seat} requires a valid thinking level`);
-        }
-    }
-    const parsed = {
-        provider: raw.provider,
-        model: raw.model,
-        ...(raw.thinking === undefined
-            ? {}
-            : { thinking: raw.thinking }),
-        ...(raw.engine === undefined ? {} : { engine: raw.engine }),
-        ...(raw.host === undefined ? {} : { host: raw.host }),
-    };
-    return parsed;
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error(`config seat ${seat} must be an object`);
+  }
+  const raw = value;
+  const hasProvider = raw.provider !== void 0;
+  const hasModel = raw.model !== void 0;
+  if (hasProvider !== hasModel) {
+    throw new Error(`config seat ${seat} requires both provider and model`);
+  }
+  if (raw.host !== void 0 && (typeof raw.host !== "string" || raw.host.trim() === "")) {
+    throw new Error(`config seat ${seat} host must be a non-empty string`);
+  }
+  if (raw.engine !== void 0 && typeof raw.engine !== "string") {
+    throw new Error(`config seat ${seat} engine must be a string`);
+  }
+  if (!hasProvider) {
+    if ((seat === "notary" || seat === "inspector") && (typeof raw.engine === "string" || typeof raw.host === "string")) {
+      if (raw.thinking !== void 0) {
+        throw new Error(`config seat ${seat} thinking requires provider/model`);
+      }
+      return {
+        ...raw.engine === void 0 ? {} : { engine: raw.engine },
+        ...raw.host === void 0 ? {} : { host: raw.host }
+      };
+    }
+    throw new Error(`config seat ${seat} requires provider`);
+  }
+  if (typeof raw.provider !== "string" || raw.provider.trim() === "") {
+    throw new Error(`config seat ${seat} requires provider`);
+  }
+  if (typeof raw.model !== "string" || raw.model.trim() === "") {
+    throw new Error(`config seat ${seat} requires model`);
+  }
+  if (raw.thinking !== void 0 && typeof raw.thinking !== "string") {
+    throw new Error(`config seat ${seat} thinking must be a string`);
+  }
+  const parsed = {
+    provider: raw.provider,
+    model: raw.model,
+    ...raw.thinking === void 0 ? {} : { thinking: raw.thinking },
+    ...raw.engine === void 0 ? {} : { engine: raw.engine },
+    ...raw.host === void 0 ? {} : { host: raw.host }
+  };
+  return parsed;
 }
-export function providerConfigured(credentials, provider) {
-    if (provider === "openai-codex")
-        return credentials["openai-codex"] === true;
-    if (provider === "xai")
-        return credentials.xai === true;
-    return false;
+function providerConfigured(credentials, provider) {
+  if (provider === "openai-codex") return credentials["openai-codex"] === true;
+  if (provider === "xai") return credentials.xai === true;
+  return false;
 }
-/**
- * Typed provider-credential absence for the public seat providers ak-role owns.
- * Presence is read from auth.json shape (CredentialProviders), never from stderr prose.
- * Returns undefined for unknown/custom providers (not this package's credential map).
- */
-export function missingPublicProviderCredential(provider, credentials) {
-    if (provider !== "openai-codex" && provider !== "xai")
-        return false;
-    return !providerConfigured(credentials, provider);
+function missingPublicProviderCredential(provider, credentials) {
+  if (provider !== "openai-codex" && provider !== "xai") return false;
+  return !providerConfigured(credentials, provider);
 }
 function pickStartupCandidate(seat, credentials) {
-    for (const candidate of publicStartupCandidates(seat)) {
-        if (providerConfigured(credentials, candidate.provider)) {
-            return { ...candidate };
-        }
+  for (const candidate of publicStartupCandidates(seat)) {
+    if (providerConfigured(credentials, candidate.provider)) {
+      return { ...candidate };
     }
-    return undefined;
+  }
+  return void 0;
 }
 function attachHostAxis(seat, config, invocation) {
-    if (invocation?.host !== undefined)
-        return { ...seat, host: invocation.host, hostSource: "invocation" };
-    const persistent = config.seats[seat.seat]?.host;
-    if (persistent !== undefined)
-        return { ...seat, host: persistent, hostSource: "persistent" };
-    return { ...seat, host: "pi", hostSource: "default" };
+  if (invocation?.host !== void 0) return { ...seat, host: invocation.host, hostSource: "invocation" };
+  const persistent = config.seats[seat.seat]?.host;
+  if (persistent !== void 0) return { ...seat, host: persistent, hostSource: "persistent" };
+  return { ...seat, host: "pi", hostSource: "default" };
 }
 function attachEngineAxis(seat, config, invocation) {
-    // #391: engine axis is PUBLIC_CALLABLE_ROLES only (single callable-seat predicate).
-    if (!isPublicCallableRole(seat.seat)) {
-        return {
-            ...seat,
-            engineSource: "unconfigured",
-        };
-    }
-    const persistentEngine = config.seats[seat.seat]?.engine;
-    if (invocation?.engine !== undefined) {
-        return {
-            ...seat,
-            engine: invocation.engine,
-            engineSource: "invocation",
-        };
-    }
-    if (persistentEngine !== undefined) {
-        return {
-            ...seat,
-            engine: persistentEngine,
-            engineSource: "persistent",
-        };
-    }
+  if (!isPublicCallableRole(seat.seat)) {
+    return {
+      ...seat,
+      engineSource: "unconfigured"
+    };
+  }
+  const persistentEngine = config.seats[seat.seat]?.engine;
+  if (invocation?.engine !== void 0) {
+    return {
+      ...seat,
+      engine: invocation.engine,
+      engineSource: "invocation"
+    };
+  }
+  if (persistentEngine !== void 0) {
     return {
-        ...seat,
-        engineSource: "unconfigured",
+      ...seat,
+      engine: persistentEngine,
+      engineSource: "persistent"
     };
+  }
+  return {
+    ...seat,
+    engineSource: "unconfigured"
+  };
 }
 function resolveBaseSeat(config, seat, credentials) {
-    // #620: subordinate officers consume institutional-resolution authority result.
-    if (seat === "notary" || seat === "inspector") {
-        const resolved = resolveConfiguredProvinceOfficer(config, seat);
-        return {
-            seat,
-            source: resolved.source,
-            ...(resolved.selection === undefined ? {} : { selection: resolved.selection }),
-            engineSource: "unconfigured",
-        };
-    }
-    // Engine-only residual is not a persistent model source (#453).
-    const persistentModel = seatModelOnly(config.seats[seat]);
-    if (persistentModel !== undefined) {
-        return {
-            seat,
-            source: "persistent",
-            selection: persistentModel,
-            engineSource: "unconfigured",
-        };
-    }
-    const startup = pickStartupCandidate(seat, credentials);
-    if (startup !== undefined) {
-        return {
-            seat,
-            source: "startup",
-            selection: startup,
-            engineSource: "unconfigured",
-        };
-    }
-    return { seat, source: "unconfigured", engineSource: "unconfigured" };
+  if (seat === "notary" || seat === "inspector") {
+    const resolved = resolveConfiguredProvinceOfficer(config, seat);
+    return {
+      seat,
+      source: resolved.source,
+      ...resolved.selection === void 0 ? {} : { selection: resolved.selection },
+      engineSource: "unconfigured"
+    };
+  }
+  const persistentModel = seatModelOnly(config.seats[seat]);
+  if (persistentModel !== void 0) {
+    return {
+      seat,
+      source: "persistent",
+      selection: persistentModel,
+      engineSource: "unconfigured"
+    };
+  }
+  const startup = pickStartupCandidate(seat, credentials);
+  if (startup !== void 0) {
+    return {
+      seat,
+      source: "startup",
+      selection: startup,
+      engineSource: "unconfigured"
+    };
+  }
+  return { seat, source: "unconfigured", engineSource: "unconfigured" };
 }
-export function resolveEffectiveSeat(config, seat, credentials, invocation) {
-    const hasModelInvocation = invocation !== undefined &&
-        (invocation.model !== undefined || invocation.thinking !== undefined);
-    let modelSeat;
-    if (!hasModelInvocation || invocation === undefined) {
-        modelSeat = resolveBaseSeat(config, seat, credentials);
-    }
-    else if (invocation.model !== undefined) {
-        const spec = invocation.model.includes(":") || invocation.thinking === undefined
-            ? invocation.model
-            : `${invocation.model}:${invocation.thinking}`;
-        modelSeat = {
-            seat,
-            source: "invocation",
-            selection: parseModelSpec(spec),
-            engineSource: "unconfigured",
-        };
-    }
-    else {
-        const base = resolveBaseSeat(config, seat, credentials);
-        if (base.selection === undefined || invocation.thinking === undefined) {
-            modelSeat = {
-                seat,
-                source: "unconfigured",
-                engineSource: "unconfigured",
-            };
-        }
-        else {
-            modelSeat = {
-                seat,
-                source: "invocation",
-                selection: { ...base.selection, thinking: invocation.thinking },
-                engineSource: "unconfigured",
-            };
-        }
-    }
-    return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+function resolveEffectiveSeat(config, seat, credentials, invocation) {
+  const hasModelInvocation = invocation !== void 0 && (invocation.model !== void 0 || invocation.thinking !== void 0);
+  let modelSeat;
+  if (!hasModelInvocation || invocation === void 0) {
+    modelSeat = resolveBaseSeat(config, seat, credentials);
+  } else if (invocation.model !== void 0) {
+    const spec = invocation.model.includes(":") || invocation.thinking === void 0 ? invocation.model : `${invocation.model}:${invocation.thinking}`;
+    modelSeat = {
+      seat,
+      source: "invocation",
+      selection: parseModelSpec(spec),
+      engineSource: "unconfigured"
+    };
+  } else {
+    const base = resolveBaseSeat(config, seat, credentials);
+    if (base.selection === void 0 || invocation.thinking === void 0) {
+      modelSeat = {
+        seat,
+        source: "unconfigured",
+        engineSource: "unconfigured"
+      };
+    } else {
+      modelSeat = {
+        seat,
+        source: "invocation",
+        selection: { ...base.selection, thinking: invocation.thinking },
+        engineSource: "unconfigured"
+      };
+    }
+  }
+  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
 }
-export function effectiveSeatConfigurations(config, credentials, invocation) {
-    return PUBLIC_CONFIGURABLE_SEATS.map((seat) => resolveEffectiveSeat(config, seat, credentials, invocation));
+function effectiveSeatConfigurations(config, credentials, invocation) {
+  return PUBLIC_CONFIGURABLE_SEATS.map(
+    (seat) => resolveEffectiveSeat(config, seat, credentials, invocation)
+  );
 }
-/** Callable roles in package order. */
-export function listRolesForDisplay(config, credentials, invocation) {
-    return effectiveSeatConfigurations(config, credentials, invocation);
+function listRolesForDisplay(config, credentials, invocation) {
+  return effectiveSeatConfigurations(config, credentials, invocation);
 }
-/**
- * Read configured credential presence from a Pi auth.json document.
- * Only presence of a provider key matters for startup selection (#11).
- */
-export function credentialProvidersFromAuthData(data) {
-    if (data === null || typeof data !== "object" || Array.isArray(data)) {
-        return { "openai-codex": false, xai: false };
-    }
-    const record = data;
-    return {
-        "openai-codex": Object.prototype.hasOwnProperty.call(record, "openai-codex"),
-        xai: Object.prototype.hasOwnProperty.call(record, "xai"),
-    };
+function credentialProvidersFromAuthData(data) {
+  if (data === null || typeof data !== "object" || Array.isArray(data)) {
+    return { "openai-codex": false, xai: false };
+  }
+  const record = data;
+  return {
+    "openai-codex": Object.prototype.hasOwnProperty.call(record, "openai-codex"),
+    xai: Object.prototype.hasOwnProperty.call(record, "xai")
+  };
 }
-export async function loadCredentialProviders(agentDir) {
-    try {
-        const raw = await readFile(join(agentDir, "auth.json"), "utf8");
-        return credentialProvidersFromAuthData(JSON.parse(raw));
-    }
-    catch (error) {
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT") {
-            return { "openai-codex": false, xai: false };
-        }
-        throw error;
-    }
+async function loadCredentialProviders(agentDir) {
+  try {
+    const raw = await readFile(join(agentDir, "auth.json"), "utf8");
+    return credentialProvidersFromAuthData(JSON.parse(raw));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return { "openai-codex": false, xai: false };
+    }
+    throw error;
+  }
 }
+export {
+  GATE_OFFICER_SEATS,
+  buildSeatModelCliArgs,
+  clearPersistentSeatConfig,
+  credentialProvidersFromAuthData,
+  effectiveSeatConfigurations,
+  formatModelSpec,
+  isGateOfficerSeat,
+  listRolesForDisplay,
+  loadCredentialProviders,
+  loadPublicCliConfig,
+  missingPublicProviderCredential,
+  parseAutoResumeLimit,
+  parseModelSpec,
+  providerConfigured,
+  publicCliConfigPath,
+  resolveEffectiveSeat,
+  savePublicCliConfig,
+  setAutoResumeLimit,
+  setPersistentSeatConfig,
+  setPersistentSeatEngine,
+  setPersistentSeatHost,
+  validatePublicCliConfigAxes
+};