@akagilnc/pi-workflow-roles 0.1.3644 → 0.1.3652

package/dist/oauth-keepalive.js

@@ -0,0 +1,158 @@
+/**
+ * Extension-side OAuth credential keepalive (#351).
+ *
+ * Periodically calls the public `ctx.modelRegistry.refresh` facade so expired
+ * OAuth tokens (e.g. kimi-coding 900s TTL) are renewed during long sessions.
+ * Does not read auth.json, touch pi-ai private APIs, or reuse the 183s idle gate.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const DEFAULT_OAUTH_KEEPALIVE_PROVIDERS = ["kimi-coding"];
+export const OAUTH_KEEPALIVE_INTERVAL_MS = 60_000;
+/** Persistent extension setting filename under PI_CODING_AGENT_DIR / ~/.pi/agent. */
+export const OAUTH_KEEPALIVE_SETTING_FILENAME = "oauth-keepalive.json";
+/** Path to the static provider-list extension setting (default ["kimi-coding"]). */
+export function oauthKeepaliveSettingPath() {
+    return join(process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent"), OAUTH_KEEPALIVE_SETTING_FILENAME);
+}
+function isExactRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Read the static keepalive provider list from the extension setting file.
+ * Missing file → default ["kimi-coding"]. Malformed content fails closed.
+ * Production extension root is the sole caller that feeds this into keepalive.
+ */
+export function readOAuthKeepaliveProviders(path = oauthKeepaliveSettingPath()) {
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        if (!isExactRecord(raw) || !Array.isArray(raw.providers)) {
+            throw new Error("OAuth keepalive setting is malformed: expected { providers: string[] }");
+        }
+        const providers = raw.providers.map((id, index) => {
+            if (typeof id !== "string" || id.trim() === "") {
+                throw new Error(`OAuth keepalive setting providers[${index}] must be a non-empty string`);
+            }
+            // Accept via trim-non-empty; return the normalized id so refresh can hit real providers.
+            return id.trim();
+        });
+        return Object.freeze(providers);
+    }
+    catch (error) {
+        // Absent optional setting uses the documented default; all other causes propagate.
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return DEFAULT_OAUTH_KEEPALIVE_PROVIDERS;
+        }
+        throw error;
+    }
+}
+const defaultScheduler = {
+    every(ms, tick) {
+        const timer = setInterval(tick, ms);
+        // Allow the process to exit if a caller forgets stop (same discipline as trajectory).
+        timer.unref?.();
+        return () => clearInterval(timer);
+    },
+};
+function errorClassName(error) {
+    if (error instanceof Error && error.name.trim() !== "")
+        return error.name;
+    if (error !== null && typeof error === "object" && "name" in error) {
+        const name = error.name;
+        if (typeof name === "string" && name.trim() !== "")
+            return name;
+    }
+    return "Error";
+}
+function formatWarning(providerId, error) {
+    const cls = errorClassName(error);
+    const detail = error instanceof Error
+        ? error.message
+        : typeof error === "string"
+            ? error
+            : String(error);
+    return `oauth-keepalive: refresh failed for provider ${providerId} (${cls}): ${detail}`;
+}
+function emitWarning(ctx, providerId, error) {
+    const text = formatWarning(providerId, error);
+    // Exactly one visible surface per failure: prefer ui.notify when present;
+    // console.warn only when notify is unavailable (print/json / headless)
+    // or when notify itself throws (still one surface; carry the notify cause).
+    const notify = ctx.ui?.notify;
+    if (typeof notify === "function") {
+        try {
+            notify(text, "warning");
+        }
+        catch (notifyError) {
+            // Notify threw: fall back once so refresh failure stays visible.
+            console.warn(text, notifyError);
+        }
+        return;
+    }
+    console.warn(text);
+}
+/**
+ * Session-lifecycle owner for periodic OAuth refresh via the public modelRegistry facade.
+ * Single-flight: overlapping ticks are skipped. stop() cancels the interval and aborts in-flight work.
+ */
+export function createOAuthKeepalive(options = {}) {
+    const providers = Object.freeze((options.providers ?? DEFAULT_OAUTH_KEEPALIVE_PROVIDERS).map((id) => id));
+    const intervalMs = options.intervalMs ?? OAUTH_KEEPALIVE_INTERVAL_MS;
+    const scheduler = options.scheduler ?? defaultScheduler;
+    let cancel;
+    let abortController;
+    /** Bare single-flight gate; survives stop/start until the in-flight call settles. */
+    let inFlight = false;
+    const stop = () => {
+        cancel?.();
+        cancel = undefined;
+        abortController?.abort();
+        abortController = undefined;
+        // Do not clear unsettled inFlight — single-flight is continuous across stop/start.
+    };
+    const runTick = async (ctx) => {
+        if (inFlight)
+            return;
+        const ac = abortController;
+        if (ac === undefined || ac.signal.aborted)
+            return;
+        inFlight = true;
+        try {
+            const result = await ctx.modelRegistry.refresh({
+                providers: [...providers],
+                allowNetwork: true,
+                signal: ac.signal,
+            });
+            if (ac.signal.aborted || result.aborted)
+                return;
+            for (const [providerId, error] of result.errors) {
+                emitWarning(ctx, providerId, error);
+            }
+        }
+        catch (error) {
+            if (ac.signal.aborted)
+                return;
+            // Whole-call failure: one warning per configured provider (ticket error surface).
+            for (const providerId of providers) {
+                emitWarning(ctx, providerId, error);
+            }
+        }
+        finally {
+            inFlight = false;
+        }
+    };
+    return {
+        start(ctx) {
+            // Reload / re-start: tear down any prior interval before hanging a new one.
+            stop();
+            abortController = new AbortController();
+            cancel = scheduler.every(intervalMs, () => {
+                void runTick(ctx);
+            });
+        },
+        stop,
+    };
+}

package/dist/package-contracts/auditor-output.js

@@ -51,16 +51,3 @@ export function validateRecordedAuditorOutput(value) {
     }
     return projected;
 }
-export function auditorDecisiveFacts(output) {
-    const facts = { status: output.status };
-    if (output.status === "bounce" && output.violations !== undefined) {
-        facts.violations = output.violations;
-    }
-    if (output.status === "escalate") {
-        if (output.conflicts !== undefined)
-            facts.conflicts = output.conflicts;
-        if (output.decisionGate !== undefined)
-            facts.decisionGate = output.decisionGate;
-    }
-    return facts;
-}

package/dist/package-contracts/gatekeeper-output.js

@@ -43,20 +43,10 @@ function validateRecordedGatekeeperOutput(value) {
   }
   return projected;
 }
-function gatekeeperDecisiveFacts(output) {
-  const facts = { status: output.status };
-  if (output.status === "dispatch") {
-    facts.officer = output.officer;
-  } else if (Array.isArray(output.findings)) {
-    facts.findingsCount = output.findings.length;
-  }
-  return facts;
-}
 export {
   GATEKEEPER_ACCEPTED_TEXT,
   GATEKEEPER_OUTPUT_TOOL_NAME,
   gatekeeperDecisionSchema,
-  gatekeeperDecisiveFacts,
   gatekeeperOutputSchema,
   projectLawfulGatekeeperOutput,
   validateRecordedGatekeeperOutput

package/dist/package-contracts/judge-output.js

@@ -1,7 +1,6 @@
 const JUDGE_OUTPUT_TOOL_NAME = "ak_judge_output";
 const JUDGE_ACCEPTED_TEXT = "\u5927\u7406\u5BFA\u56DE\u6267\u5DF2\u63A5\u53D7";
 const JUDGE_ACCEPTED_AUDIT_NO_RECEIPT_TEXT = "\u5927\u7406\u5BFA\u56DE\u6267\u5DF2\u63A5\u53D7\uFF1B\u5BA1\u8BA1\u65E0\u56DE\u6267";
-const JUDGE_ACCEPTED_AUDIT_UNREADABLE_TEXT = "\u5927\u7406\u5BFA\u56DE\u6267\u5DF2\u63A5\u53D7\uFF1B\u5BA1\u8BA1\u5F62\u72B6\u4E0D\u53EF\u8BFB";
 function validateAcceptedJudgeDetails(verdict) {
   if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) throw new Error("Judge verdict has no execution discriminator");
   let judgeStatus;
@@ -20,7 +19,6 @@ function validateAcceptedJudgeDetails(verdict) {
 }
 export {
   JUDGE_ACCEPTED_AUDIT_NO_RECEIPT_TEXT,
-  JUDGE_ACCEPTED_AUDIT_UNREADABLE_TEXT,
   JUDGE_ACCEPTED_TEXT,
   JUDGE_OUTPUT_TOOL_NAME,
   validateAcceptedJudgeDetails

package/dist/package-contracts/navigator-output.js

@@ -30,13 +30,9 @@ function validateRecordedNavigatorOutput(value) {
   }
   return projected;
 }
-function navigatorDecisiveFacts(output) {
-  return { status: "advice", candidates: output.candidates };
-}
 export {
   NAVIGATOR_ACCEPTED_TEXT,
   NAVIGATOR_OUTPUT_TOOL_NAME,
-  navigatorDecisiveFacts,
   navigatorOutputSchema,
   projectLawfulNavigatorOutput,
   validateRecordedNavigatorOutput

package/dist/package-contracts/terminating-tools.js

@@ -11,7 +11,6 @@ import { DOCTOR_ACCEPTED_TEXT, DOCTOR_OUTPUT_TOOL_NAME, validateDoctorSubmission
 import { GATEKEEPER_ACCEPTED_TEXT, GATEKEEPER_OUTPUT_TOOL_NAME, validateRecordedGatekeeperOutput } from "./gatekeeper-output.js";
 import { NAVIGATOR_ACCEPTED_TEXT, NAVIGATOR_OUTPUT_TOOL_NAME, validateRecordedNavigatorOutput } from "./navigator-output.js";
 import { AUDITOR_ACCEPTED_TEXT, AUDITOR_OUTPUT_TOOL_NAME, validateRecordedAuditorOutput } from "./auditor-output.js";
-import { EVIDENCE_CHILD_ACCEPTED_TEXT, EVIDENCE_CHILD_OUTPUT_TOOL_NAME, validateRecordedEvidenceChildOutput } from "./evidence-child-output.js";
 import { MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateMergerOutput } from "../merger-contracts.js";
 import { NOTARY_ACCEPTED_TEXT, NOTARY_OUTPUT_TOOL_NAME, validateRecordedNotaryOutput } from "../notary-contracts.js";
 import { COUNTERSIGN_ACCEPTED_TEXT, COUNTERSIGN_OUTPUT_TOOL_NAME, validateRecordedCountersignOutput } from "../countersign-contracts.js";
@@ -19,7 +18,7 @@ import { GLEANER_LEFT_ACCEPTED_TEXT, GLEANER_LEFT_OUTPUT_TOOL_NAME, validateReco
 import { INSPECTOR_ACCEPTED_TEXT, INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput } from "../inspector-contracts.js";
 import { DIARIST_ACCEPTED_TEXT, DIARIST_OUTPUT_TOOL_NAME, validateRecordedDiaristOutput } from "../diarist-contracts.js";
 import { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, validateAcceptedWorkerDetails, } from "./worker-output.js";
-export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, validateRecordedAuditorOutput, validateRecordedEvidenceChildOutput, validateRecordedDiaristOutput, };
+export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, validateRecordedAuditorOutput, validateRecordedDiaristOutput, };
 export const TERMINATING_TOOL_NAMES = [
     CODER_OUTPUT_TOOL_NAME,
     FIXER_OUTPUT_TOOL_NAME,
@@ -35,7 +34,6 @@ export const TERMINATING_TOOL_NAMES = [
     GATEKEEPER_OUTPUT_TOOL_NAME,
     NAVIGATOR_OUTPUT_TOOL_NAME,
     AUDITOR_OUTPUT_TOOL_NAME,
-    EVIDENCE_CHILD_OUTPUT_TOOL_NAME,
     DIARIST_OUTPUT_TOOL_NAME,
 ];
 export function isTerminatingToolName(name) {
@@ -71,8 +69,6 @@ export function acceptedTextFor(toolName) {
             return NAVIGATOR_ACCEPTED_TEXT;
         case AUDITOR_OUTPUT_TOOL_NAME:
             return AUDITOR_ACCEPTED_TEXT;
-        case EVIDENCE_CHILD_OUTPUT_TOOL_NAME:
-            return EVIDENCE_CHILD_ACCEPTED_TEXT;
         case DIARIST_OUTPUT_TOOL_NAME:
             return DIARIST_ACCEPTED_TEXT;
     }
@@ -127,20 +123,14 @@ export function validateAcceptedDetails(toolName, details) {
         [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
         [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
         [AUDITOR_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-        [EVIDENCE_CHILD_OUTPUT_TOOL_NAME]: [],
         [DIARIST_OUTPUT_TOOL_NAME]: ["completed"],
     };
     const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
-    // Evidence-child: any object is a candidate body — no report-field presence gate (#675 / ADR 0055).
-    const evidenceChildDiscriminator = toolName === EVIDENCE_CHILD_OUTPUT_TOOL_NAME
-        && candidate !== null
-        && typeof candidate === "object"
-        && !Array.isArray(candidate);
     const baseDiscriminator = discriminator;
     const runtimeBindingMissing = (toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
         (toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2);
     if (runtimeBindingMissing ||
-        (!collectorDiscriminator && !evidenceChildDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator)))) {
+        (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator)))) {
         throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
     }
     try {
@@ -173,8 +163,6 @@ export function validateAcceptedDetails(toolName, details) {
                 return validateRecordedNavigatorOutput(details);
             case AUDITOR_OUTPUT_TOOL_NAME:
                 return validateRecordedAuditorOutput(details);
-            case EVIDENCE_CHILD_OUTPUT_TOOL_NAME:
-                return validateRecordedEvidenceChildOutput(details);
             case DIARIST_OUTPUT_TOOL_NAME:
                 return validateRecordedDiaristOutput(details);
         }
@@ -231,8 +219,6 @@ export function acceptedFacts(toolName, details) {
         case NAVIGATOR_OUTPUT_TOOL_NAME:
         case AUDITOR_OUTPUT_TOOL_NAME:
             return { status: details.status };
-        case EVIDENCE_CHILD_OUTPUT_TOOL_NAME:
-            return { status: "report" };
         case DIARIST_OUTPUT_TOOL_NAME: return { status: details.status };
         case JUDGE_OUTPUT_TOOL_NAME: return { status: details.judgeStatus };
         case COUNTERSIGN_OUTPUT_TOOL_NAME: return { status: details.countersignStatus };

package/dist/packaged-role-registry.js

@@ -11,7 +11,6 @@ import { COUNTERSIGN_OUTPUT_TOOL_NAME } from "./countersign-contracts.js";
 import { GLEANER_LEFT_OUTPUT_TOOL_NAME } from "./gleaner-left-contracts.js";
 import { INSPECTOR_OUTPUT_TOOL_NAME } from "./inspector-contracts.js";
 import { AUDITOR_OUTPUT_TOOL_NAME } from "./package-contracts/auditor-output.js";
-import { EVIDENCE_CHILD_OUTPUT_TOOL_NAME } from "./package-contracts/evidence-child-output.js";
 import {
   DIARIST_OUTPUT_TOOL_NAME,
   DIARIST_SOURCES_FLAG
@@ -36,12 +35,6 @@ const AUDITOR_PUBLIC_SESSION_MATERIALS = [
   "souls/audit-law.md",
   "souls/quality-law.md"
 ];
-const EVIDENCE_CHILD_SESSION_MATERIALS = [
-  "CLAUDE.md",
-  "souls/evidence-child.md",
-  "souls/audit-law.md",
-  "souls/quality-law.md"
-];
 const PUBLIC_ROLE_RECORDS = [
   {
     role: "judge",
@@ -195,7 +188,7 @@ const PUBLIC_ROLE_RECORDS = [
     activationStage: "load-and-install",
     sessionMaterials: ["CLAUDE.md", "souls/navigator.md"]
   },
-  // #675: 审刑院 / evidence-child are roles like any other — public ak-role entries.
+  // #675: 审刑院 is a role like any other — public ak-role entry. (#744: evidence-child deleted)
   {
     role: "auditor",
     phases: [null],
@@ -205,15 +198,6 @@ const PUBLIC_ROLE_RECORDS = [
     activationStage: "load-and-install",
     sessionMaterials: AUDITOR_PUBLIC_SESSION_MATERIALS
   },
-  {
-    role: "evidence-child",
-    phases: [null],
-    outputTool: EVIDENCE_CHILD_OUTPUT_TOOL_NAME,
-    inputFlag: void 0,
-    phaseFlag: void 0,
-    activationStage: "load-and-install",
-    sessionMaterials: EVIDENCE_CHILD_SESSION_MATERIALS
-  },
   // #708 / ADR 0075 `diarist-is-role`: 起居郎 is a seat like any other. The
   // frozen source catalog rides the shared input-flag seam; it is absent for a
   // true-unbound summons (no ticket → no diary).
@@ -246,7 +230,6 @@ function packagedRoleOutputTool(role) {
 }
 export {
   AUDITOR_PUBLIC_SESSION_MATERIALS,
-  EVIDENCE_CHILD_SESSION_MATERIALS,
   INSPECTOR_SESSION_MATERIALS,
   NOTARY_SESSION_MATERIALS,
   PACKAGED_ROLE_REGISTRY,

package/dist/pi/adapter.js

@@ -0,0 +1,211 @@
+import { parseSkillBlock, } from "@earendil-works/pi-coding-agent";
+import { requireGatekeeperPass } from "../gatekeeper-pass-envelope.js";
+import { createOAuthKeepalive } from "../oauth-keepalive.js";
+import { createRoleRuntimeExtension } from "../role-runtime.js";
+import { renderAgentStartMaterials } from "../agent-start-materials.js";
+const piContexts = new WeakMap();
+/** Pi-only entrypoint adapter around the host-neutral shared composition. */
+export function createPiRoleRuntimeExtension(dependencies, options = {}) {
+    return (pi) => createRoleRuntimeExtension(dependencies)(createPiRoleHostAdapter(pi, options));
+}
+/** Project Pi's activation context onto the package-owned host contract. */
+function projectPiContext(context, transcriptFromContext) {
+    const sessionManager = context.sessionManager;
+    const host = {
+        cwd: context.cwd,
+        mode: context.mode,
+        model: context.model === undefined ? undefined : { provider: context.model.provider },
+        sessionManager: {
+            getLeafEntry: () => context.sessionManager.getLeafEntry(),
+            getLeafId: () => context.sessionManager.getLeafId(),
+            getEntries: () => context.sessionManager.getEntries(),
+            getSessionDir: () => context.sessionManager.getSessionDir(),
+            getSessionFile: () => context.sessionManager.getSessionFile(),
+            getHeader: () => context.sessionManager.getHeader(),
+            setSessionFile: (path) => sessionManager.setSessionFile(path),
+            appendCustomEntry: (customType, data) => sessionManager.appendCustomEntry(customType, data),
+        },
+        ...(context.signal === undefined ? {} : { signal: context.signal }),
+        ...(context.ui === undefined ? {} : { ui: { notify: (message, type) => context.ui.notify(message, type) } }),
+        ...(transcriptFromContext === undefined ? {} : { transcript: () => transcriptFromContext(context) }),
+        abort: () => context.abort(),
+    };
+    piContexts.set(host, context);
+    return host;
+}
+/** Recover the Pi context only at the Pi composition boundary. */
+export function toPiContext(context) {
+    const piContext = piContexts.get(context);
+    if (piContext === undefined)
+        throw new Error("Host context is not backed by the Pi adapter");
+    return piContext;
+}
+/** Gatekeeper receives HostContext directly (#518 §1③) without recovering raw ExtensionContext via WeakMap. */
+function requirePiGatekeeperPass(options) {
+    return requireGatekeeperPass({
+        context: options.context,
+        subject: options.subject,
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
+        hostActions: {
+            failInfrastructure(error, _context, toolCallId) {
+                options.hostActions.failInfrastructure(error, options.context, toolCallId);
+            },
+            bindSubmissionNonPass: options.hostActions.bindSubmissionNonPass,
+        },
+        toolCallId: options.toolCallId,
+    });
+}
+function toPiResult(result) {
+    return result;
+}
+/** Fold a host before_agent_start return: push readingMaterial into the provider-visible
+ * systemPrompt via the shared renderer and strip the typed field before Pi sees it. */
+function foldBeforeAgentStartReturn(result) {
+    if (result === undefined || result === null || typeof result !== "object")
+        return undefined;
+    const record = result;
+    const { systemPrompt, readingMaterial } = record;
+    const folded = readingMaterial === undefined
+        ? systemPrompt
+        : renderAgentStartMaterials(systemPrompt ?? "", [readingMaterial]);
+    return folded === undefined ? {} : { systemPrompt: folded };
+}
+function toPiToolDefinition(tool, projectContext) {
+    return {
+        name: tool.name,
+        label: tool.label,
+        description: tool.description,
+        ...(tool.promptSnippet === undefined ? {} : { promptSnippet: tool.promptSnippet }),
+        parameters: tool.parameters,
+        execute: async (toolCallId, params, signal, update, context) => toPiResult(await tool.execute(toolCallId, params, signal, update === undefined ? undefined : (result) => update(toPiResult(result)), projectContext(context))),
+    };
+}
+/** Pi composition boundary. Each consumed capability is adapted explicitly. */
+export function createPiRoleHostAdapter(pi, options = {}) {
+    const keepalive = createOAuthKeepalive(options.oauthKeepalive);
+    const host = {
+        deliverSubmissionRejection(rejection) {
+            pi.sendMessage({
+                customType: "ak-role-submission-rejection",
+                content: "The terminal submission was rejected because it was not the sole tool call in its turn. Correct the call pattern and resubmit.",
+                display: true,
+                details: rejection,
+            }, { triggerTurn: true, deliverAs: "followUp" });
+        },
+        capabilities: {
+            skillExpansion(prompt) {
+                const parsed = parseSkillBlock(prompt);
+                if (parsed == null)
+                    return undefined;
+                const userMessage = parsed.userMessage ?? "";
+                return Object.freeze({
+                    name: parsed.name,
+                    location: parsed.location,
+                    content: parsed.content,
+                    userMessage,
+                });
+            },
+        },
+        registerFlag: (name, definition) => pi.registerFlag(name, definition),
+        getFlag: (name) => pi.getFlag(name),
+        registerTool: (tool) => pi.registerTool(toPiToolDefinition(tool, (context) => projectPiContext(context, options.transcriptFromContext))),
+        getAllTools: () => pi.getAllTools().map(({ name, sourceInfo }) => ({
+            name,
+            ...(sourceInfo?.path === undefined ? {} : { sourceInfo: { path: sourceInfo.path } }),
+        })),
+        setActiveTools: (names) => pi.setActiveTools(names),
+        getActiveTools: () => pi.getActiveTools(),
+        requireGatekeeperPass: requirePiGatekeeperPass,
+        on(...registration) {
+            const context = (value) => projectPiContext(value, options.transcriptFromContext);
+            if (registration[0] === "before_agent_start") {
+                const [, handler] = registration;
+                pi.on("before_agent_start", (value, ctx) => {
+                    const result = handler({ prompt: value.prompt, systemPrompt: value.systemPrompt, systemPromptOptions: value.systemPromptOptions }, context(ctx));
+                    if (result instanceof Promise)
+                        return result.then(foldBeforeAgentStartReturn);
+                    return foldBeforeAgentStartReturn(result);
+                });
+            }
+            else if (registration[0] === "input") {
+                const [, handler] = registration;
+                pi.on("input", (value, ctx) => handler({ text: value.text, ...(value.images === undefined ? {} : { images: value.images }), source: value.source }, context(ctx)));
+            }
+            else if (registration[0] === "tool_call") {
+                const [, handler] = registration;
+                pi.on("tool_call", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, input: value.input }, context(ctx)));
+            }
+            else if (registration[0] === "tool_result") {
+                const [, handler] = registration;
+                pi.on("tool_result", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, isError: value.isError, content: (value.content ?? []).map((part) => part.type === "text" ? { type: "text", text: part.text } : { type: "image", data: part.data, mimeType: part.mimeType }), details: value.details }, context(ctx)));
+            }
+            else if (registration[0] === "session_start") {
+                const [, handler] = registration;
+                pi.on("session_start", (value, ctx) => handler({ reason: value.reason }, context(ctx)));
+            }
+            else if (registration[0] === "session_shutdown") {
+                const [, handler] = registration;
+                pi.on("session_shutdown", (_value, ctx) => handler({}, context(ctx)));
+            }
+            else if (registration[0] === "after_provider_response") {
+                const [, handler] = registration;
+                pi.on("after_provider_response", (value, ctx) => handler({ status: value.status }, context(ctx)));
+            }
+            else if (registration[0] === "agent_end") {
+                const [, handler] = registration;
+                pi.on("agent_end", (value, ctx) => handler({
+                    messages: value.messages.map((message) => ({
+                        role: message.role,
+                        content: "content" in message && Array.isArray(message.content) ? message.content.map((part) => part.type === "text"
+                            ? { type: "text", text: part.text }
+                            : part.type === "toolCall"
+                                ? { type: "toolCall", id: part.id, name: part.name, arguments: part.arguments }
+                                : { type: part.type }) : [],
+                        ...("toolName" in message && typeof message.toolName === "string" ? { toolName: message.toolName } : {}),
+                        ...("isError" in message && typeof message.isError === "boolean" ? { isError: message.isError } : {}),
+                        ...("stopReason" in message && typeof message.stopReason === "string" ? { stopReason: message.stopReason } : {}),
+                    })),
+                }, context(ctx)));
+            }
+            else if (registration[0] === "turn_end") {
+                const [, handler] = registration;
+                pi.on("turn_end", (value, ctx) => handler({
+                    turnIndex: value.turnIndex,
+                    calls: value.toolResults.map((result) => ({
+                        toolCallId: result.toolCallId,
+                        toolName: result.toolName,
+                    })),
+                }, context(ctx)));
+            }
+            else if (registration[0] === "agent_settled") {
+                const [, handler] = registration;
+                pi.on("agent_settled", (_value, ctx) => handler({}, context(ctx)));
+            }
+            else if (registration[0] === "tool_execution_start") {
+                const [, handler] = registration;
+                pi.on("tool_execution_start", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId }, context(ctx)));
+            }
+            else if (registration[0] === "tool_execution_update") {
+                const [, handler] = registration;
+                pi.on("tool_execution_update", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, partialResult: value.partialResult }, context(ctx)));
+            }
+            else {
+                const [, handler] = registration;
+                pi.on("tool_execution_end", (value, ctx) => handler({ toolName: value.toolName, toolCallId: value.toolCallId, isError: value.isError }, context(ctx)));
+            }
+        },
+        ...(typeof pi.getCommands === "function" ? { getCommands: () => pi.getCommands().map(({ name }) => ({ name })) } : {}),
+    };
+    return {
+        host,
+        appendEntry: (customType, data) => pi.appendEntry(customType, data),
+        sendMessage: (message, sendOptions) => pi.sendMessage({
+            customType: message.customType,
+            content: message.content,
+            display: message.display ?? false,
+            details: message.details,
+        }, sendOptions),
+        startKeepalive: (context) => keepalive.start(toPiContext(context)),
+        stopKeepalive: () => keepalive.stop(),
+    };
+}

package/dist/pi/role-turn-host.js

@@ -127,8 +127,6 @@ function buildActivationFlagArgs(activation) {
             return ["--ak-role", "navigator"];
         case "auditor":
             return ["--ak-role", "auditor"];
-        case "evidence-child":
-            return ["--ak-role", "evidence-child"];
         case "diarist":
             return [
                 "--ak-role",

package/dist/public-cli/instruction-seat-run.js

@@ -1,11 +1,11 @@
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.js";
 import { readRunTicketNumber } from "../run-ticket-number.js";
 import { CliUsageError } from "./cli-errors.js";
-import { admitAuditorInvocation, admitEvidenceChildInvocation, admitGatekeeperInvocation, admitNavigatorInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
+import { admitAuditorInvocation, admitGatekeeperInvocation, admitNavigatorInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInstructionSeatRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { applyInstructionTicketProbe, probeInstructionTicket, ticketNumberFromProbe, tryResumeSameTicketSeatRun, } from "./seat-ticket-binding.js";
-import { presentStructuralRejection, readEngineDetourInfrastructureFailure, trySettleAuditorTerminalResult, trySettleEvidenceChildTerminalResult, trySettleGatekeeperTerminalResult, trySettleNavigatorTerminalResult, } from "./settlement.js";
+import { presentStructuralRejection, readEngineDetourInfrastructureFailure, trySettleAuditorTerminalResult, trySettleGatekeeperTerminalResult, trySettleNavigatorTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
 /** Project an admitted instruction-seat invocation onto the host-neutral turn request. */
 export function buildInstructionSeatTurnRequest(admitted, options) {
@@ -25,8 +25,6 @@ function instructionSeatAdapters(options) {
                     return trySettleNavigatorTerminalResult(admitted, authority, scope);
                 case "auditor":
                     return trySettleAuditorTerminalResult(admitted, authority, scope);
-                case "evidence-child":
-                    return trySettleEvidenceChildTerminalResult(admitted, authority, scope);
             }
         },
         // Accepted receipts and failure terminals both present via shared path.
@@ -58,8 +56,6 @@ async function admitInstructionSeat(role, options) {
             return admitNavigatorInvocation(options);
         case "auditor":
             return admitAuditorInvocation(options);
-        case "evidence-child":
-            return admitEvidenceChildInvocation(options);
     }
 }
 export async function runPublicInstructionSeatResume(request, env, io) {

package/dist/public-cli/invocation.js

@@ -369,9 +369,6 @@ export function parseNavigatorArgv(args) {
 export function parseAuditorArgv(args) {
     return parseInstructionArgv(args, "auditor");
 }
-export function parseEvidenceChildArgv(args) {
-    return parseInstructionArgv(args, "evidence-child");
-}
 export function parseDiaristArgv(args) {
     return parseInstructionArgv(args, "diarist");
 }
@@ -621,10 +618,6 @@ export async function admitNavigatorInvocation(options) {
 export async function admitAuditorInvocation(options) {
     return admitStandardMaterialInvocation("auditor", options);
 }
-/** Admit a public evidence-child run (#675). */
-export async function admitEvidenceChildInvocation(options) {
-    return admitStandardMaterialInvocation("evidence-child", options);
-}
 /**
  * Admit a direct Diarist (起居郎) run (#708): freeze attachments, persist the
  * request, reserve session placement — same instruction-seat face.