@akagilnc/pi-workflow-roles 0.1.3708 → 0.1.3716

package/dist/public-cli/main.js

@@ -15045,18 +15045,11 @@ function validateRecordedDiaristOutput(value) {
   }
   throw new Error("Diarist output has no execution discriminator");
 }
-var DIARIST_OUTPUT_TOOL_NAME, DIARIST_SOURCES_FLAG;
+var DIARIST_OUTPUT_TOOL_NAME;
 var init_diarist_contracts = __esm({
   "src/diarist-contracts.ts"() {
     "use strict";
     DIARIST_OUTPUT_TOOL_NAME = "ak_diarist_output";
-    DIARIST_SOURCES_FLAG = {
-      name: "ak-diarist-sources",
-      definition: {
-        description: "Frozen source catalog the diarist selects from (may be unbound until LLM asserts ticketNumber)",
-        type: "string"
-      }
-    };
   }
 });
 
@@ -15265,14 +15258,13 @@ var init_packaged_role_registry = __esm({
         activationStage: "load-and-install",
         sessionMaterials: AUDITOR_PUBLIC_SESSION_MATERIALS
       },
-      // #708 / ADR 0075 `diarist-is-role`: 起居郎 is a seat like any other. The
-      // frozen source catalog rides the shared input-flag seam; it is absent for a
-      // true-unbound summons (no ticket → no diary).
+      // #708 / ADR 0075 `diarist-is-role` / #779: 起居郎 is a seat like any other.
+      // No input flag — LLM finds materials itself (caller-transparent).
       {
         role: "diarist",
         phases: [null],
         outputTool: DIARIST_OUTPUT_TOOL_NAME,
-        inputFlag: DIARIST_SOURCES_FLAG.name,
+        inputFlag: void 0,
         phaseFlag: void 0,
         activationStage: "load-and-install",
         sessionMaterials: [
@@ -15592,6 +15584,50 @@ function parseAutoResumeLimit(value) {
 function setAutoResumeLimit(config, limit) {
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
+function requireNonEmptyToken(value, label) {
+  const trimmed = value.trim();
+  if (trimmed === "") {
+    throw new Error(`${label} must be a non-empty string`);
+  }
+  return trimmed;
+}
+function setProviderHostAlias(config, provider, host, alias) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const to = requireNonEmptyToken(alias, "alias");
+  const previous = config.providerAliases ?? {};
+  return {
+    ...config,
+    providerAliases: {
+      ...previous,
+      [from]: {
+        ...previous[from] ?? {},
+        [hostName]: to
+      }
+    }
+  };
+}
+function unsetProviderHostAlias(config, provider, host) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const previous = config.providerAliases;
+  if (previous === void 0 || previous[from] === void 0) return config;
+  const { [hostName]: _dropped, ...restHosts } = previous[from];
+  const nextForProvider = Object.keys(restHosts).length === 0 ? void 0 : restHosts;
+  const { [from]: _provider, ...restProviders } = previous;
+  const nextAliases = nextForProvider === void 0 ? restProviders : { ...restProviders, [from]: nextForProvider };
+  if (Object.keys(nextAliases).length === 0) {
+    const { providerAliases: _gone, ...rest } = config;
+    return rest;
+  }
+  return { ...config, providerAliases: nextAliases };
+}
+function applyProviderHostAlias(selection, host, aliases) {
+  if (selection === void 0 || aliases === void 0) return selection;
+  const mapped = aliases[selection.provider]?.[host];
+  if (mapped === void 0) return selection;
+  return { ...selection, provider: mapped };
+}
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
@@ -15651,9 +15687,44 @@ function serializePublicCliConfig(config) {
       ...config.unknownSeats ?? {},
       ...config.seats
     },
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
+    ...config.providerAliases === void 0 || Object.keys(config.providerAliases).length === 0 ? {} : { providerAliases: config.providerAliases }
   };
 }
+function parseProviderHostAliases(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config.providerAliases must be an object");
+  }
+  const out = {};
+  for (const [provider, byHost] of Object.entries(value)) {
+    if (provider.trim() === "") {
+      throw new Error("public CLI config.providerAliases provider key must be non-empty");
+    }
+    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
+      throw new Error(
+        `public CLI config.providerAliases[${provider}] must be an object`
+      );
+    }
+    const hosts = {};
+    for (const [host, alias] of Object.entries(byHost)) {
+      if (host.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}] host key must be non-empty`
+        );
+      }
+      if (typeof alias !== "string" || alias.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`
+        );
+      }
+      hosts[host] = alias;
+    }
+    if (Object.keys(hosts).length > 0) {
+      out[provider] = hosts;
+    }
+  }
+  return out;
+}
 function parsePublicCliConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -15663,6 +15734,13 @@ function parsePublicCliConfig(value) {
   if (record4.autoResumeLimit !== void 0) {
     autoResumeLimit = parseAutoResumeLimit(record4.autoResumeLimit);
   }
+  let providerAliases;
+  if (record4.providerAliases !== void 0) {
+    const parsed = parseProviderHostAliases(record4.providerAliases);
+    if (Object.keys(parsed).length > 0) {
+      providerAliases = parsed;
+    }
+  }
   const unknownSeats = {};
   if (record4.unknownSeats !== void 0) {
     if (record4.unknownSeats === null || typeof record4.unknownSeats !== "object" || Array.isArray(record4.unknownSeats)) {
@@ -15673,6 +15751,7 @@ function parsePublicCliConfig(value) {
   const withOpaque = (seats2) => ({
     seats: seats2,
     ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
+    ...providerAliases === void 0 ? {} : { providerAliases },
     ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
   });
   if (record4.seats === void 0) {
@@ -15849,7 +15928,21 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
       };
     }
   }
-  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+  const withAxes = attachHostAxis(
+    attachEngineAxis(modelSeat, config, invocation),
+    config,
+    invocation
+  );
+  const selection = applyProviderHostAlias(
+    withAxes.selection,
+    withAxes.host,
+    config.providerAliases
+  );
+  if (selection === void 0) {
+    const { selection: _dropped, ...rest } = withAxes;
+    return rest;
+  }
+  return { ...withAxes, selection };
 }
 function effectiveSeatConfigurations(config, credentials, invocation) {
   return PUBLIC_CONFIGURABLE_SEATS.map(
@@ -16378,11 +16471,7 @@ function buildActivationFlagArgs(activation) {
     case "auditor":
       return ["--ak-role", "auditor"];
     case "diarist":
-      return [
-        "--ak-role",
-        "diarist",
-        ...activation.sourcesPath === void 0 ? [] : ["--ak-diarist-sources", activation.sourcesPath]
-      ];
+      return ["--ak-role", "diarist"];
     default: {
       const _exhaustive = activation;
       return _exhaustive;
@@ -19501,14 +19590,17 @@ var init_option_definitions = __esm({
           "ak-role config unset-engine <seat>",
           "ak-role config set-host <seat> <name>",
           "ak-role config unset-host <seat>",
-          "ak-role config set-auto-resume-limit <N>"
+          "ak-role config set-auto-resume-limit <N>",
+          "ak-role config set-provider-alias <provider> <host> <alias>",
+          "ak-role config unset-provider-alias <provider> <host>"
         ],
         examples: [
           "ak-role config set judge openai-codex/gpt-5.6-sol:high",
           "ak-role config unset gatekeeper",
           "ak-role config set-engine judge opus",
           "ak-role config set-host judge grok-build",
-          "ak-role config set-auto-resume-limit 3"
+          "ak-role config set-auto-resume-limit 3",
+          "ak-role config set-provider-alias xai hermes xai-oauth"
         ]
       },
       help: {
@@ -22818,22 +22910,9 @@ var init_known_failure = __esm({
 });
 
 // src/adr-path-refs.ts
-function extractReferencedAdrPaths(text) {
-  const seen = /* @__PURE__ */ new Set();
-  const paths = [];
-  for (const match of text.matchAll(ADR_PATH_IN_BODY)) {
-    const path = match[0];
-    if (seen.has(path)) continue;
-    seen.add(path);
-    paths.push(path);
-  }
-  return Object.freeze(paths);
-}
-var ADR_PATH_IN_BODY;
 var init_adr_path_refs = __esm({
   "src/adr-path-refs.ts"() {
     "use strict";
-    ADR_PATH_IN_BODY = /docs\/adr\/(?:[A-Za-z0-9][A-Za-z0-9._-]*\/)*[A-Za-z0-9][A-Za-z0-9._-]*\.md/g;
   }
 });
 
@@ -22854,35 +22933,6 @@ var init_reviewer_preflight_error = __esm({
 // src/reviewer-pinned-git.ts
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
-function parseGitHubOriginRemote(remoteUrl) {
-  const trimmed = remoteUrl.trim();
-  if (trimmed.length === 0) return void 0;
-  const scp = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i.exec(trimmed);
-  if (scp) return normalizeOrigin(scp[1], scp[2]);
-  const ssh = /^ssh:\/\/git@github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i.exec(trimmed);
-  if (ssh) return normalizeOrigin(ssh[1], ssh[2]);
-  let parsed;
-  try {
-    parsed = new URL(trimmed);
-  } catch {
-    return void 0;
-  }
-  if (!/^github\.com$/i.test(parsed.hostname)) return void 0;
-  if (parsed.search !== "" || parsed.hash !== "") return void 0;
-  const parts = parsed.pathname.split("/").filter((p) => p.length > 0);
-  if (parts.length !== 2) return void 0;
-  return normalizeOrigin(parts[0], parts[1]);
-}
-function normalizeOrigin(ownerRaw, repoRaw) {
-  const owner = ownerRaw.trim();
-  const repo = stripGitSuffix2(repoRaw.trim());
-  if (owner.length === 0 || repo.length === 0) return void 0;
-  if (/[/?#@\\]/.test(owner) || /[/?#@\\]/.test(repo)) return void 0;
-  return Object.freeze({ owner, repo });
-}
-function stripGitSuffix2(name) {
-  return name.toLowerCase().endsWith(".git") ? name.slice(0, -4) : name;
-}
 var execFileAsync3;
 var init_reviewer_pinned_git = __esm({
   "src/reviewer-pinned-git.ts"() {
@@ -23016,457 +23066,9 @@ var init_collector_evidence = __esm({
 });
 
 // src/collector-github.ts
-import { spawn as spawn2 } from "node:child_process";
-function isRecord13(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function requireString(value, label) {
-  if (typeof value !== "string") {
-    throw new Error(`GitHub payload missing string ${label}`);
-  }
-  return value;
-}
-function requireNumber(value, label) {
-  if (typeof value !== "number" || !Number.isFinite(value)) {
-    throw new Error(`GitHub payload missing number ${label}`);
-  }
-  return value;
-}
-function optionalString(value) {
-  return typeof value === "string" ? value : null;
-}
-function parseLinkNext(linkHeader) {
-  if (linkHeader === void 0 || linkHeader.length === 0) return void 0;
-  for (const part of linkHeader.split(",")) {
-    const match = part.trim().match(/^<([^>]+)>\s*;\s*rel="next"$/i);
-    if (match?.[1]) return match[1];
-  }
-  return void 0;
-}
-function parseJson(text, label) {
-  try {
-    return JSON.parse(text);
-  } catch (error) {
-    throw new Error(`GitHub ${label} returned malformed JSON`, { cause: error });
-  }
-}
-function commentFailureCause(error) {
-  return {
-    name: error instanceof Error ? error.name : typeof error,
-    message: error instanceof Error ? error.message : String(error),
-    evidenceId: `github-comment-failure-${++commentFailureEvidence}`
-  };
-}
-function requireUserLogin(raw) {
-  if (!isRecord13(raw) || typeof raw["login"] !== "string") {
-    throw new Error("GitHub payload missing user.login");
-  }
-  return raw["login"];
-}
-function optionalUserLogin(raw) {
-  if (raw === null) return null;
-  if (!isRecord13(raw) || typeof raw["login"] !== "string") {
-    throw new Error("GitHub payload missing user.login");
-  }
-  return raw["login"];
-}
-function machineIdentity(raw) {
-  const user = raw["user"];
-  if (!isRecord13(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
-    return null;
-  }
-  const app = raw["performed_via_github_app"];
-  const appId = isRecord13(app) && typeof app["id"] === "number" ? app["id"] : void 0;
-  return {
-    userType: user["type"],
-    userId: user["id"],
-    ...appId === void 0 ? {} : { appId }
-  };
-}
-function normalizePullRequest(raw) {
-  if (!isRecord13(raw)) throw new Error("GitHub pull request payload must be an object");
-  const head = raw["head"];
-  if (!isRecord13(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
-    throw new Error("GitHub pull request payload missing head.sha");
-  }
-  const number = requireNumber(raw["number"], "number");
-  const state = requireString(raw["state"], "state").toUpperCase();
-  const htmlUrl = typeof raw["html_url"] === "string" ? raw["html_url"] : `https://github.com/unknown/unknown/pull/${number}`;
-  return {
-    number,
-    state: state === "OPEN" || state === "open" ? "OPEN" : state,
-    headOid: head["sha"],
-    ...typeof raw["updated_at"] === "string" ? { updatedAt: raw["updated_at"] } : {},
-    url: htmlUrl,
-    raw
-  };
-}
-function normalizePullRequestReaction(raw) {
-  if (!isRecord13(raw)) throw new Error("GitHub reaction payload must be an object");
-  return {
-    id: requireNumber(raw["id"], "reaction.id"),
-    userLogin: optionalUserLogin(raw["user"]),
-    machineIdentity: machineIdentity(raw),
-    content: requireString(raw["content"], "reaction.content"),
-    createdAt: requireString(raw["created_at"], "reaction.created_at"),
-    raw
-  };
-}
-function normalizeReview(raw) {
-  if (!isRecord13(raw)) throw new Error("GitHub review payload must be an object");
-  return {
-    id: requireNumber(raw["id"], "review.id"),
-    ...typeof raw["node_id"] === "string" ? { nodeId: raw["node_id"] } : {},
-    userLogin: optionalUserLogin(raw["user"]),
-    machineIdentity: machineIdentity(raw),
-    state: requireString(raw["state"], "review.state").toUpperCase(),
-    body: typeof raw["body"] === "string" ? raw["body"] : "",
-    commitId: optionalString(raw["commit_id"]),
-    submittedAt: optionalString(raw["submitted_at"]),
-    htmlUrl: typeof raw["html_url"] === "string" ? raw["html_url"] : "",
-    raw
-  };
-}
-function normalizeIssueComment(raw) {
-  if (!isRecord13(raw)) throw new Error("GitHub issue comment payload must be an object");
-  return {
-    id: requireNumber(raw["id"], "comment.id"),
-    userLogin: optionalUserLogin(raw["user"]),
-    machineIdentity: machineIdentity(raw),
-    body: typeof raw["body"] === "string" ? raw["body"] : "",
-    createdAt: requireString(raw["created_at"], "comment.created_at"),
-    updatedAt: requireString(raw["updated_at"], "comment.updated_at"),
-    htmlUrl: typeof raw["html_url"] === "string" ? raw["html_url"] : "",
-    raw
-  };
-}
-function normalizeReviewComment(raw) {
-  if (!isRecord13(raw)) throw new Error("GitHub review comment payload must be an object");
-  return {
-    id: requireNumber(raw["id"], "review_comment.id"),
-    pullRequestReviewId: typeof raw["pull_request_review_id"] === "number" ? raw["pull_request_review_id"] : null,
-    userLogin: optionalUserLogin(raw["user"]),
-    machineIdentity: machineIdentity(raw),
-    body: typeof raw["body"] === "string" ? raw["body"] : "",
-    path: requireString(raw["path"], "review_comment.path"),
-    line: typeof raw["line"] === "number" ? raw["line"] : null,
-    originalLine: typeof raw["original_line"] === "number" ? raw["original_line"] : null,
-    side: optionalString(raw["side"]),
-    position: typeof raw["position"] === "number" ? raw["position"] : null,
-    originalPosition: typeof raw["original_position"] === "number" ? raw["original_position"] : null,
-    commitId: optionalString(raw["commit_id"]),
-    originalCommitId: optionalString(raw["original_commit_id"]),
-    createdAt: requireString(raw["created_at"], "review_comment.created_at"),
-    updatedAt: requireString(raw["updated_at"], "review_comment.updated_at"),
-    htmlUrl: typeof raw["html_url"] === "string" ? raw["html_url"] : "",
-    raw
-  };
-}
-function createGhApiRunner(options = {}) {
-  const spawnImpl = options.spawnImpl ?? spawn2;
-  return async (args, runOptions = {}) => {
-    return await new Promise((resolve12, reject) => {
-      const signal = runOptions.signal;
-      if (signal?.aborted) {
-        reject(signal.reason ?? new Error("aborted"));
-        return;
-      }
-      const child = spawnImpl("gh", args, {
-        env: options.env ?? process.env,
-        stdio: ["pipe", "pipe", "pipe"]
-      });
-      let stdout = "";
-      let stderr = "";
-      let settled = false;
-      const settle = (fn) => {
-        if (settled) return;
-        settled = true;
-        if (signal !== void 0) {
-          signal.removeEventListener("abort", onAbort);
-        }
-        fn();
-      };
-      const onAbort = () => {
-        try {
-          child.kill("SIGTERM");
-        } catch (error) {
-          settle(() => reject(error));
-          return;
-        }
-        settle(() => {
-          reject(signal?.reason ?? new Error("aborted"));
-        });
-      };
-      if (signal !== void 0) {
-        signal.addEventListener("abort", onAbort, { once: true });
-      }
-      child.stdout.setEncoding("utf8").on("data", (chunk) => {
-        stdout += chunk;
-      });
-      child.stderr.setEncoding("utf8").on("data", (chunk) => {
-        stderr += chunk;
-      });
-      child.on("error", (error) => {
-        settle(() => reject(error));
-      });
-      child.stdin.on("error", (error) => {
-        settle(() => {
-          if (signal?.aborted) {
-            reject(signal.reason ?? new Error("aborted"));
-            return;
-          }
-          const err = error instanceof Error ? error : new Error(String(error));
-          reject(Object.assign(err, { ambiguousGhFailure: true }));
-        });
-      });
-      if (runOptions.stdin !== void 0) {
-        child.stdin.write(runOptions.stdin);
-      }
-      child.stdin.end();
-      child.on("close", (code, signal2) => {
-        settle(() => {
-          const match = stdout.match(/^HTTP\/[\d.]+\s+(\d+)[^\n]*\r?\n([\s\S]*?)\r?\n\r?\n([\s\S]*)$/);
-          if (match) {
-            const status = Number(match[1]);
-            const headerText = match[2] ?? "";
-            const bodyText = match[3] ?? "";
-            const headers = {};
-            for (const line2 of headerText.split(/\r?\n/)) {
-              const idx = line2.indexOf(":");
-              if (idx === -1) continue;
-              const name = line2.slice(0, idx).trim().toLowerCase();
-              const value = line2.slice(idx + 1).trim();
-              headers[name] = value;
-            }
-            resolve12({ status, headers, bodyText });
-            return;
-          }
-          if (code === 0) {
-            resolve12({ status: 200, headers: {}, bodyText: stdout });
-            return;
-          }
-          const failure = new Error(
-            `gh api failed without a parseable HTTP response (code=${String(code)}): ${stderr || stdout}`,
-            { cause: { code, signal: signal2, stderr, stdout } }
-          );
-          reject(Object.assign(failure, { ambiguousGhFailure: true, stderr, stdout, code, signal: signal2 }));
-        });
-      });
-    });
-  };
-}
-function isAmbiguousGhFailure(error) {
-  return typeof error === "object" && error !== null && error.ambiguousGhFailure === true;
-}
-function isGhProcessStartFailure(error) {
-  if (typeof error !== "object" || error === null) return false;
-  const code = error.code;
-  if (code === "ENOENT") return true;
-  const syscall = error.syscall;
-  return typeof syscall === "string" && (syscall === "spawn" || syscall.startsWith("spawn "));
-}
-async function projectGhIssueBody(runner, input) {
-  const path = `repos/${input.owner}/${input.repo}/issues/${input.ticketNumber}`;
-  let response;
-  try {
-    response = await runner(
-      ["api", "--hostname", "github.com", "--include", "-X", "GET", path],
-      input.signal === void 0 ? {} : { signal: input.signal }
-    );
-  } catch (error) {
-    if (isAmbiguousGhFailure(error) || isGhProcessStartFailure(error)) {
-      return { status: "unavailable", reason: "transport", cause: error };
-    }
-    throw error;
-  }
-  if (response.status < 200 || response.status >= 300) {
-    return {
-      status: "unavailable",
-      reason: "http-non-2xx",
-      httpStatus: response.status
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(response.bodyText);
-  } catch (error) {
-    return { status: "invalid", reason: "not-json", cause: error };
-  }
-  if (typeof parsed !== "object" || parsed === null) {
-    return { status: "invalid", reason: "not-object" };
-  }
-  if (Object.hasOwn(parsed, "pull_request")) {
-    return { status: "unavailable", reason: "pull-request" };
-  }
-  const bodyRaw = parsed.body;
-  if (bodyRaw !== void 0 && bodyRaw !== null && typeof bodyRaw !== "string") {
-    return { status: "invalid", reason: "body-invalid" };
-  }
-  const body = typeof bodyRaw === "string" ? bodyRaw : "";
-  return { status: "available", body };
-}
-function createGhCollectorGitHubTransport(runner = createGhApiRunner()) {
-  const hostnameArgs = ["api", "--hostname", "github.com", "--include"];
-  async function apiGet(path, signal) {
-    return await runner(
-      [...hostnameArgs, "-X", "GET", path],
-      signal === void 0 ? {} : { signal }
-    );
-  }
-  async function paginate(path, mapItem, options = {}) {
-    const { signal, retainPage } = options;
-    const items = [];
-    const pages = [];
-    let nextPath = path;
-    let page = 1;
-    const seen = /* @__PURE__ */ new Set();
-    while (nextPath !== void 0) {
-      if (signal?.aborted) {
-        throw signal.reason ?? new Error("aborted");
-      }
-      if (seen.has(nextPath)) {
-        throw new Error(`GitHub pagination repeated page: ${nextPath}`);
-      }
-      seen.add(nextPath);
-      const response = await apiGet(nextPath, signal);
-      const diagnostics = {
-        path: nextPath,
-        page,
-        status: response.status,
-        itemCount: 0,
-        ...response.headers["link"] === void 0 ? {} : { linkHeader: response.headers["link"] }
-      };
-      if (response.status === 429) {
-        throw Object.assign(
-          new Error(`GitHub API rate limited on ${nextPath} (HTTP 429)`),
-          { githubStatus: 429, page: diagnostics }
-        );
-      }
-      if (response.status < 200 || response.status >= 300) {
-        throw Object.assign(
-          new Error(`GitHub API ${nextPath} failed with HTTP ${response.status}`),
-          { githubStatus: response.status, page: diagnostics }
-        );
-      }
-      const parsed = parseJson(response.bodyText, nextPath);
-      if (!Array.isArray(parsed)) {
-        throw new Error(`GitHub API ${nextPath} did not return a JSON array`);
-      }
-      diagnostics.itemCount = parsed.length;
-      pages.push(diagnostics);
-      const pageItems = parsed.map((entry) => mapItem(entry));
-      retainPage?.(pageItems);
-      for (const item of pageItems) items.push(item);
-      const nextUrl = parseLinkNext(response.headers["link"]);
-      if (nextUrl === void 0) {
-        nextPath = void 0;
-      } else {
-        if (nextUrl.startsWith("/")) {
-          nextPath = nextUrl;
-        } else {
-          const url = new URL(nextUrl);
-          if (url.hostname !== "api.github.com" && url.hostname !== "github.com") {
-            throw new Error(`unexpected pagination host ${url.hostname}`);
-          }
-          nextPath = `${url.pathname}${url.search}`;
-          if (nextPath.startsWith("/api/v3/")) {
-            nextPath = nextPath.slice("/api/v3".length);
-          }
-        }
-      }
-      page += 1;
-    }
-    return { items, pages };
-  }
-  return {
-    async getAuthenticatedUser(options = {}) {
-      const response = await apiGet("/user", options.signal);
-      if (response.status < 200 || response.status >= 300) {
-        throw new Error(`GitHub /user failed with HTTP ${response.status}`, { cause: { endpoint: "/user", status: response.status, headers: response.headers, body: response.bodyText } });
-      }
-      const raw = parseJson(response.bodyText, "/user");
-      return { login: requireUserLogin(raw).toLowerCase(), raw };
-    },
-    async getPullRequest(input) {
-      const path = `/repos/${input.owner}/${input.repo}/pulls/${input.prNumber}`;
-      const response = await apiGet(path, input.signal);
-      if (response.status < 200 || response.status >= 300) {
-        throw new Error(`GitHub ${path} failed with HTTP ${response.status}`, { cause: { endpoint: path, status: response.status, headers: response.headers, body: response.bodyText } });
-      }
-      return normalizePullRequest(parseJson(response.bodyText, path));
-    },
-    async listPullRequestReviews(input) {
-      const path = `/repos/${input.owner}/${input.repo}/pulls/${input.prNumber}/reviews?per_page=100`;
-      return await paginate(path, normalizeReview, {
-        ...input.signal === void 0 ? {} : { signal: input.signal },
-        ...input.retainPage === void 0 ? {} : { retainPage: input.retainPage }
-      });
-    },
-    async listPullRequestReactions(input) {
-      const path = `/repos/${input.owner}/${input.repo}/issues/${input.prNumber}/reactions?per_page=100`;
-      return await paginate(path, normalizePullRequestReaction, {
-        ...input.signal === void 0 ? {} : { signal: input.signal },
-        ...input.retainPage === void 0 ? {} : { retainPage: input.retainPage }
-      });
-    },
-    async listIssueComments(input) {
-      const path = `/repos/${input.owner}/${input.repo}/issues/${input.prNumber}/comments?per_page=100`;
-      return await paginate(path, normalizeIssueComment, {
-        ...input.signal === void 0 ? {} : { signal: input.signal },
-        ...input.retainPage === void 0 ? {} : { retainPage: input.retainPage }
-      });
-    },
-    async listReviewComments(input) {
-      const path = `/repos/${input.owner}/${input.repo}/pulls/${input.prNumber}/comments?per_page=100`;
-      return await paginate(path, normalizeReviewComment, {
-        ...input.signal === void 0 ? {} : { signal: input.signal },
-        ...input.retainPage === void 0 ? {} : { retainPage: input.retainPage }
-      });
-    },
-    async createIssueComment(input) {
-      const path = `/repos/${input.owner}/${input.repo}/issues/${input.prNumber}/comments`;
-      try {
-        const response = await runner(
-          [...hostnameArgs, "-X", "POST", path, "--input", "-"],
-          input.signal === void 0 ? { stdin: JSON.stringify({ body: input.body }) } : { stdin: JSON.stringify({ body: input.body }), signal: input.signal }
-        );
-        if (response.status >= 200 && response.status < 300) {
-          try {
-            return {
-              kind: "success",
-              comment: normalizeIssueComment(parseJson(response.bodyText, path))
-            };
-          } catch (error) {
-            const cause = commentFailureCause(error);
-            return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
-          }
-        }
-        return {
-          kind: "rejected",
-          status: response.status,
-          diagnostics: `HTTP ${response.status}: ${response.bodyText.slice(0, 500)}`
-        };
-      } catch (error) {
-        if (input.signal?.aborted) {
-          throw error;
-        }
-        if (isRecord13(error) && error["ambiguousGhFailure"] === true) {
-          const cause = commentFailureCause(error);
-          return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
-        }
-        if (isRecord13(error) && error["name"] === "AbortError") {
-          throw error;
-        }
-        throw error;
-      }
-    }
-  };
-}
-var commentFailureEvidence;
 var init_collector_github = __esm({
   "src/collector-github.ts"() {
     "use strict";
-    commentFailureEvidence = 0;
   }
 });
 
@@ -23630,11 +23232,11 @@ var init_navigator_invocation_identity = __esm({
 });
 
 // src/receipt-delivery-policy.ts
-function isRecord14(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord14(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord14(item) && typeof item.reason === "string")) {
+  if (!isRecord13(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord13(item) && typeof item.reason === "string")) {
     throw new TypeError("malformed no-receipt lifecycle facts");
   }
   return {
@@ -24200,7 +23802,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
     const { records: records2 } = await readSitianRecords(recordFile);
     for (let i = records2.length - 1; i >= 0; i -= 1) {
       const payload = records2[i]?.payload;
-      if (!isRecord15(payload) || !isRecord15(payload.response)) continue;
+      if (!isRecord14(payload) || !isRecord14(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -24237,7 +23839,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord15(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord14(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -24269,12 +23871,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     return firstLine === RESUME_ENVELOPE;
   };
   const isResumeEnvelope = (msg) => {
-    if (!isRecord15(msg) || msg.role !== "user") return false;
+    if (!isRecord14(msg) || msg.role !== "user") return false;
     const text = typeof msg.text === "string" ? msg.text : typeof msg.content === "string" ? msg.content : void 0;
     if (isResumeEnvelopeBytes(text)) return true;
     const content = msg.content;
     if (Array.isArray(content)) {
-      return content.some((p) => isRecord15(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
+      return content.some((p) => isRecord14(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
     }
     return false;
   };
@@ -24306,7 +23908,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord15(header)) continue;
+      if (!isRecord14(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -24320,7 +23922,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord15(bindingEntry.data) && isRecord15(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord14(bindingEntry.data) && isRecord14(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
@@ -24347,11 +23949,11 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord15(entry.data)) continue;
-      const parent = isRecord15(entry.data.parent) ? entry.data.parent : void 0;
-      const failure = isRecord15(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord14(entry.data)) continue;
+      const parent = isRecord14(entry.data.parent) ? entry.data.parent : void 0;
+      const failure = isRecord14(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId || failure?.cause !== "provider" && failure?.cause !== "unrecognized") continue;
-      const identity = isRecord15(failure.identity) ? failure.identity : void 0;
+      const identity = isRecord14(failure.identity) ? failure.identity : void 0;
       return {
         cause: failure.cause === "provider" ? "provider" : "unrecognized",
         ...identity === void 0 ? {} : { identity: {
@@ -24359,7 +23961,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure.diagnostic === "string" ? { diagnostic: failure.diagnostic } : {},
-        ...isRecord15(failure.details) ? { details: failure.details } : {}
+        ...isRecord14(failure.details) ? { details: failure.details } : {}
       };
     }
   }
@@ -24406,9 +24008,9 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord15(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord15(textPart) ? textPart.text : void 0;
-    const details = isRecord15(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord14(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord14(textPart) ? textPart.text : void 0;
+    const details = isRecord14(message.details) ? message.details : classification.fact;
     return {
       cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
@@ -24566,7 +24168,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord15(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function safelyRead(object, key) {
@@ -24690,7 +24292,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord15(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord14(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -24762,7 +24364,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord15(next) || typeof next.role !== "string") {
+    if (!isRecord14(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -24770,7 +24372,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord15).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord14).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -24842,7 +24444,7 @@ async function extractGateFactFromSessionDirectory(sessionDirectory, options = {
 }
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  if (isRecord15(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
+  if (isRecord14(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
   const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
   return gate === void 0 ? base : { ...base, gate };
 }
@@ -24882,7 +24484,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord15(details)) {
+      if (!isRecord14(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -25280,7 +24882,7 @@ async function settleLawfulCollectorTerminalResult(admitted, authority) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const duration = isRecord15(candidate) ? candidate.durationMs : void 0;
+      const duration = isRecord14(candidate) ? candidate.durationMs : void 0;
       if (Number.isSafeInteger(duration) && duration >= 1 && duration <= 9e5) {
         continue;
       }
@@ -25470,7 +25072,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
         spec.toolName
       );
       if (residual !== void 0) {
-        const details = isRecord15(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
+        const details = isRecord14(residual.candidate) ? residual.candidate : { candidate: residual.candidate };
         return settleFailureTerminalResult(admitted, {
           cause: "output",
           diagnostic: residual.diagnostic,
@@ -25772,7 +25374,7 @@ async function settleLawfulMergerTerminalResult(admitted, authority, options) {
       if (message?.role !== "toolResult") continue;
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
-      const attemptId = isRecord15(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
+      const attemptId = isRecord14(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
       if (!attemptId.readable || attemptId.value !== admitted.runId) continue;
       return {
         roleOutcome: buildResidualIncompleteTerminalOutcome({
@@ -26203,99 +25805,16 @@ var init_turn_request = __esm({
 });
 
 // src/ticket-provenance-contracts.ts
-function isRecord16(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function projectTicketProvenanceDiagnostic(value) {
-  if (!isRecord16(value)) return void 0;
-  if (value.recordClass !== TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
-    return void 0;
-  }
-  if (typeof value.diagnosticKind !== "string" || !DIAGNOSTIC_KINDS.has(value.diagnosticKind)) {
-    return void 0;
-  }
-  if (typeof value.cause !== "string" || value.cause.length === 0) {
-    return void 0;
-  }
-  if (typeof value.recordedAt !== "string" || value.recordedAt.length === 0) {
-    return void 0;
-  }
-  return {
-    recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
-    diagnosticKind: value.diagnosticKind,
-    cause: value.cause,
-    recordedAt: value.recordedAt,
-    ...typeof value.reason === "string" ? { reason: value.reason } : {}
-  };
-}
-function projectTicketProvenanceEntry(value) {
-  if (!isRecord16(value)) return void 0;
-  if (value.recordClass === TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
-    return void 0;
-  }
-  if (!isRecord16(value.basis)) return void 0;
-  if (typeof value.basis.method !== "string" || !BASIS_METHODS.has(value.basis.method)) {
-    return void 0;
-  }
-  if (typeof value.sourceKind !== "string" || !SOURCE_KINDS.has(value.sourceKind)) {
-    return void 0;
-  }
-  if (!isRecord16(value.sourceRef)) return void 0;
-  if (typeof value.transcript !== "string" || value.transcript.length === 0) {
-    return void 0;
-  }
-  if (typeof value.timestamp !== "string" || value.timestamp.length === 0) {
-    return void 0;
-  }
-  const basis = {
-    method: value.basis.method,
-    ...Array.isArray(value.basis.anchors) ? {
-      anchors: value.basis.anchors.filter(
-        (item) => typeof item === "string"
-      )
-    } : {},
-    ...typeof value.basis.note === "string" ? { note: value.basis.note } : {}
-  };
-  const sourceRef = {
-    ...typeof value.sourceRef.sessionFile === "string" ? { sessionFile: value.sourceRef.sessionFile } : {},
-    ...typeof value.sourceRef.entryId === "string" || typeof value.sourceRef.entryId === "number" ? { entryId: value.sourceRef.entryId } : {},
-    ...typeof value.sourceRef.path === "string" ? { path: value.sourceRef.path } : {},
-    ...typeof value.sourceRef.url === "string" ? { url: value.sourceRef.url } : {}
-  };
-  return {
-    basis,
-    sourceKind: value.sourceKind,
-    sourceRef,
-    transcript: value.transcript,
-    timestamp: value.timestamp
-  };
-}
-var TICKET_PROVENANCE_KIND, TICKET_PROVENANCE_HUMAN_VIEW, TICKET_PROVENANCE_OFFERED_WATERMARK, TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC, SOURCE_KINDS, BASIS_METHODS, DIAGNOSTIC_KINDS;
+var TICKET_PROVENANCE_KIND, TICKET_PROVENANCE_HUMAN_VIEW;
 var init_ticket_provenance_contracts = __esm({
   "src/ticket-provenance-contracts.ts"() {
     "use strict";
     TICKET_PROVENANCE_KIND = "ticket-provenance";
     TICKET_PROVENANCE_HUMAN_VIEW = "\u8D77\u5C45\u5F55.md";
-    TICKET_PROVENANCE_OFFERED_WATERMARK = "offered-identities.jsonl";
-    TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC = "diagnostic";
-    SOURCE_KINDS = /* @__PURE__ */ new Set([
-      "cc-session",
-      "issue-body-comment",
-      "adr-decision-key",
-      "ticket-decree-block"
-    ]);
-    BASIS_METHODS = /* @__PURE__ */ new Set(["llm-semantic"]);
-    DIAGNOSTIC_KINDS = /* @__PURE__ */ new Set([
-      "collector-failed",
-      "issue-source-failed",
-      "quote-verify-failed"
-    ]);
   }
 });
 
 // src/ticket-provenance.ts
-import { createHash as createHash5 } from "node:crypto";
-import { appendFileSync as appendFileSync2, existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join20 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
@@ -26303,22 +25822,6 @@ function ticketProvenanceSubject(ticketNumber) {
   }
   return String(ticketNumber);
 }
-function ticketProvenanceEntryIdentity(input) {
-  const ref = input.sourceRef;
-  const refKey = [
-    ref.sessionFile ?? "",
-    ref.entryId === void 0 ? "" : String(ref.entryId),
-    ref.path ?? "",
-    ref.url ?? ""
-  ].join("
");
-  const material = [
-    String(input.ticketNumber),
-    input.sourceKind,
-    refKey,
-    input.transcript
-  ].join("\0");
-  return createHash5("sha256").update(material, "utf8").digest("hex");
-}
 function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   const path = resolveSitianRecordPath({
     level: "event",
@@ -26330,212 +25833,24 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   return {
     recordFile: path.recordFile,
     volumeDir: path.sessionDir,
-    humanViewFile: join20(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
-    offeredWatermarkFile: join20(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK)
+    humanViewFile: join20(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
   };
 }
-function readOfferedIdentities(ticketNumber, cwd, home) {
-  const { offeredWatermarkFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  if (!existsSync7(offeredWatermarkFile)) return /* @__PURE__ */ new Set();
-  let text;
+var init_ticket_provenance = __esm({
+  "src/ticket-provenance.ts"() {
+    "use strict";
+    init_sitian_facade();
+    init_ticket_provenance_contracts();
+  }
+});
+
+// src/public-cli/case-dossier-delivery.ts
+import { stat as stat2 } from "node:fs/promises";
+async function describeDossierFile(path) {
   try {
-    text = readFileSync2(offeredWatermarkFile, "utf8");
-  } catch (error) {
-    throw new TicketProvenanceWatermarkError(
-      "unreadable",
-      `ticket-provenance offered watermark unreadable (${offeredWatermarkFile})`,
-      { cause: error }
-    );
-  }
-  const seen = /* @__PURE__ */ new Set();
-  const lines = text.split("\n");
-  for (let index = 0; index < lines.length; index += 1) {
-    const trimmed = lines[index].trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch (error) {
-      throw new TicketProvenanceWatermarkError(
-        "malformed-json",
-        `ticket-provenance offered watermark malformed JSON at line ${index + 1} (${offeredWatermarkFile})`,
-        { cause: error }
-      );
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) || typeof parsed.identity !== "string" || parsed.identity.length === 0) {
-      throw new TicketProvenanceWatermarkError(
-        "bad-shape",
-        `ticket-provenance offered watermark bad shape at line ${index + 1} (${offeredWatermarkFile})`
-      );
-    }
-    seen.add(parsed.identity);
-  }
-  return seen;
-}
-async function readTicketProvenance(ticketNumber, cwd, home) {
-  const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  const { records: records2 } = await readSitianRecords(recordFile);
-  const entries = [];
-  const diagnostics = [];
-  let skipped = 0;
-  for (const record4 of records2) {
-    if (record4.kind !== TICKET_PROVENANCE_KIND) {
-      skipped += 1;
-      continue;
-    }
-    const diagnostic = projectTicketProvenanceDiagnostic(record4.payload);
-    if (diagnostic !== void 0) {
-      diagnostics.push(diagnostic);
-      continue;
-    }
-    const entry = projectTicketProvenanceEntry(record4.payload);
-    if (entry === void 0) {
-      skipped += 1;
-      continue;
-    }
-    entries.push(entry);
-  }
-  return { entries, diagnostics, records: records2, recordFile, skipped };
-}
-function markdownFenceFor(text) {
-  let longest = 0;
-  const runs = text.match(/`+/g);
-  if (runs !== null) {
-    for (const run of runs) {
-      if (run.length > longest) longest = run.length;
-    }
-  }
-  return "`".repeat(Math.max(3, longest + 1));
-}
-function renderTicketProvenanceMarkdown(input) {
-  const lines = [
-    `# \u8D77\u5C45\u5F55 \xB7 #${input.ticketNumber}`,
-    "",
-    `\u6761\u76EE\u6570\uFF1A${input.entries.length}`,
-    ""
-  ];
-  let index = 0;
-  for (const entry of input.entries) {
-    index += 1;
-    lines.push(`## ${index}. ${entry.sourceKind} \xB7 ${entry.timestamp}`);
-    lines.push("");
-    lines.push(`- basis.method: \`${entry.basis.method}\``);
-    if (entry.basis.anchors !== void 0 && entry.basis.anchors.length > 0) {
-      lines.push(`- anchors: ${entry.basis.anchors.map((a) => `\`${a}\``).join(", ")}`);
-    }
-    if (entry.basis.note !== void 0) {
-      lines.push(`- note: ${entry.basis.note}`);
-    }
-    const refParts = [];
-    if (entry.sourceRef.sessionFile !== void 0) {
-      refParts.push(`sessionFile=${entry.sourceRef.sessionFile}`);
-    }
-    if (entry.sourceRef.entryId !== void 0) {
-      refParts.push(`entryId=${String(entry.sourceRef.entryId)}`);
-    }
-    if (entry.sourceRef.path !== void 0) {
-      refParts.push(`path=${entry.sourceRef.path}`);
-    }
-    if (entry.sourceRef.url !== void 0) {
-      refParts.push(`url=${entry.sourceRef.url}`);
-    }
-    if (refParts.length > 0) {
-      lines.push(`- sourceRef: ${refParts.join(" \xB7 ")}`);
-    }
-    lines.push("");
-    const fence = markdownFenceFor(entry.transcript);
-    lines.push(fence);
-    lines.push(entry.transcript);
-    lines.push(fence);
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-function ensureTicketProvenanceVolume(ticketNumber, cwd, home) {
-  const volume = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  mkdirSync3(volume.volumeDir, { recursive: true });
-  appendFileSync2(volume.recordFile, "", "utf8");
-  return volume;
-}
-function appendTicketProvenanceDiagnostic(input) {
-  const subject = ticketProvenanceSubject(input.ticketNumber);
-  const identityParts = input.diagnostic.diagnosticKind === "quote-verify-failed" ? [
-    subject,
-    input.diagnostic.recordClass,
-    input.diagnostic.diagnosticKind,
-    input.diagnostic.cause,
-    input.diagnostic.reason ?? ""
-  ] : [
-    subject,
-    input.diagnostic.recordClass,
-    input.diagnostic.diagnosticKind,
-    input.diagnostic.recordedAt,
-    input.diagnostic.cause,
-    input.diagnostic.reason ?? ""
-  ];
-  const identity = createHash5("sha256").update(identityParts.join("\0"), "utf8").digest("hex");
-  return sitianReport({
-    level: "event",
-    kind: TICKET_PROVENANCE_KIND,
-    identity,
-    subject,
-    cwd: input.cwd,
-    ...input.home === void 0 ? {} : { home: input.home },
-    host: input.host ?? "diarist",
-    source: input.source ?? "diarist-diagnostic",
-    payload: input.diagnostic
-  });
-}
-function appendIssueSourceFailureDiagnostic(input) {
-  const recordedAt = input.recordedAt ?? (/* @__PURE__ */ new Date()).toISOString();
-  return appendTicketProvenanceDiagnostic({
-    ticketNumber: input.ticketNumber,
-    cwd: input.cwd,
-    ...input.home === void 0 ? {} : { home: input.home },
-    source: "diarist-issue-source",
-    diagnostic: {
-      recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
-      diagnosticKind: "issue-source-failed",
-      cause: input.cause,
-      recordedAt,
-      reason: input.reason
-    }
-  });
-}
-function writeTicketProvenanceHumanView(input) {
-  const volume = ensureTicketProvenanceVolume(input.ticketNumber, input.cwd, input.home);
-  const md = renderTicketProvenanceMarkdown({
-    ticketNumber: input.ticketNumber,
-    entries: input.entries
-  });
-  writeFileSync2(volume.humanViewFile, md, "utf8");
-  return volume.humanViewFile;
-}
-var TicketProvenanceWatermarkError;
-var init_ticket_provenance = __esm({
-  "src/ticket-provenance.ts"() {
-    "use strict";
-    init_sitian_facade();
-    init_ticket_provenance_contracts();
-    TicketProvenanceWatermarkError = class extends Error {
-      code = "ticket-provenance-watermark";
-      reason;
-      constructor(reason, message, options) {
-        super(message, options);
-        this.name = "TicketProvenanceWatermarkError";
-        this.reason = reason;
-      }
-    };
-  }
-});
-
-// src/public-cli/case-dossier-delivery.ts
-import { stat as stat2 } from "node:fs/promises";
-async function describeDossierFile(path) {
-  try {
-    const stats = await stat2(path);
-    if (!stats.isFile()) return `\u4E0D\u53EF\u8BFB\uFF08\u975E\u666E\u901A\u6587\u4EF6\uFF09\uFF1A${path}`;
-    return path;
+    const stats = await stat2(path);
+    if (!stats.isFile()) return `\u4E0D\u53EF\u8BFB\uFF08\u975E\u666E\u901A\u6587\u4EF6\uFF09\uFF1A${path}`;
+    return path;
   } catch (error) {
     const code = error.code;
     if (code === "ENOENT") return `\u5C1A\u672A\u751F\u6210\uFF1A${path}`;
@@ -28171,537 +27486,6 @@ var init_collector_run = __esm({
   }
 });
 
-// src/diarist-mechanical.ts
-import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync8, readdirSync as readdirSync2, readFileSync as readFileSync3, realpathSync as realpathSync3, statSync as statSync2 } from "node:fs";
-import { basename as basename7, join as join24, resolve as resolve9 } from "node:path";
-import { homedir } from "node:os";
-function extractCornerQuotes(text, minLength = DEFAULT_QUOTE_MIN) {
-  const out = [];
-  const re = /「([^」]+)」/g;
-  let match;
-  while ((match = re.exec(text)) !== null) {
-    const q = match[1].trim();
-    if (q.length >= minLength) out.push(q);
-  }
-  return out;
-}
-function filterNotifications(blocks) {
-  return blocks.filter((b) => !b.isNotification);
-}
-function blockKey(block) {
-  const r = block.sourceRef;
-  return [
-    block.sourceKind,
-    r.sessionFile ?? "",
-    r.entryId === void 0 ? "" : String(r.entryId),
-    r.path ?? "",
-    r.url ?? "",
-    createHash6("sha256").update(block.transcript, "utf8").digest("hex").slice(0, 16)
-  ].join("|");
-}
-function dedupeSourceBlocks(blocks) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const block of blocks) {
-    const key = blockKey(block);
-    if (seen.has(key)) continue;
-    seen.add(key);
-    out.push(block);
-  }
-  return out;
-}
-function mechanicalSafeguardPipeline(blocks) {
-  return dedupeSourceBlocks(filterNotifications(blocks));
-}
-function encodeClaudeProjectDir(cwd) {
-  const abs = cwd.startsWith("/") ? cwd : `/${cwd}`;
-  return abs.replace(/\//g, "-");
-}
-function isRecord17(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function messageText(message) {
-  if (typeof message === "string") return message;
-  if (!isRecord17(message)) return "";
-  const content = message.content;
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  const parts = [];
-  for (const part of content) {
-    if (typeof part === "string") {
-      parts.push(part);
-      continue;
-    }
-    if (!isRecord17(part)) continue;
-    if (typeof part.text === "string") parts.push(part.text);
-    else if (typeof part.content === "string") parts.push(part.content);
-  }
-  return parts.join("\n");
-}
-function isNotificationRow(type, text) {
-  if (type === "queue-operation" || type === "system" || type === "progress") {
-    return true;
-  }
-  if (type === "user") {
-    if (text.startsWith("<command-name>") || text.startsWith("<local-command-")) {
-      return true;
-    }
-    if (text.startsWith("<command-message>") || text.startsWith("<command-args>")) {
-      return true;
-    }
-  }
-  return false;
-}
-function readCcSessionBlocks(options) {
-  const root = options.projectsRoot ?? join24(homedir(), ".claude", "projects");
-  if (!existsSync8(root)) return [];
-  const blocks = [];
-  const dirs = /* @__PURE__ */ new Set();
-  for (const cwd of options.cwds) {
-    dirs.add(join24(root, encodeClaudeProjectDir(cwd)));
-  }
-  for (const cwd of options.cwds) {
-    if (cwd.includes("projects")) continue;
-    const direct = join24(root, cwd);
-    if (existsSync8(direct)) dirs.add(direct);
-  }
-  for (const dir of dirs) {
-    if (!existsSync8(dir)) continue;
-    let dirStat;
-    try {
-      dirStat = statSync2(dir);
-    } catch (error) {
-      throw new DiaristSourceReadError(
-        "readdir-failed",
-        dir,
-        `diarist cc session dir unstatable (${dir})`,
-        { cause: error }
-      );
-    }
-    if (!dirStat.isDirectory()) continue;
-    let files;
-    try {
-      files = readdirSync2(dir).filter((name) => name.endsWith(".jsonl"));
-    } catch (error) {
-      throw new DiaristSourceReadError(
-        "readdir-failed",
-        dir,
-        `diarist cc session dir unreadable (${dir})`,
-        { cause: error }
-      );
-    }
-    for (const name of files) {
-      const sessionFile = join24(dir, name);
-      let text;
-      try {
-        text = readFileSync3(sessionFile, "utf8");
-      } catch (error) {
-        throw new DiaristSourceReadError(
-          "file-unreadable",
-          sessionFile,
-          `diarist cc session file unreadable (${sessionFile})`,
-          { cause: error }
-        );
-      }
-      const lines = text.split("\n");
-      for (let lineNo = 0; lineNo < lines.length; lineNo += 1) {
-        const line2 = lines[lineNo];
-        if (!line2.trim()) continue;
-        let parsed;
-        try {
-          parsed = JSON.parse(line2);
-        } catch (error) {
-          throw new DiaristSourceReadError(
-            "jsonl-line-unparseable",
-            sessionFile,
-            `diarist cc session JSONL line ${lineNo + 1} unparseable (${sessionFile})`,
-            { cause: error }
-          );
-        }
-        if (!isRecord17(parsed)) continue;
-        const type = typeof parsed.type === "string" ? parsed.type : "";
-        const queuedCommand = type === "attachment" && isRecord17(parsed.attachment) && parsed.attachment.type === "queued_command" && isRecord17(parsed.attachment.origin) && parsed.attachment.origin.kind === "human" && typeof parsed.attachment.prompt === "string" ? parsed.attachment.prompt : void 0;
-        if (type !== "user" && type !== "assistant" && queuedCommand === void 0) {
-          continue;
-        }
-        const transcript = queuedCommand ?? messageText(parsed.message ?? parsed);
-        if (transcript.trim() === "") continue;
-        const entryId = typeof parsed.uuid === "string" ? parsed.uuid : typeof parsed.id === "string" ? parsed.id : `${basename7(sessionFile)}:${lineNo + 1}`;
-        const timestamp2 = typeof parsed.timestamp === "string" ? parsed.timestamp : (/* @__PURE__ */ new Date(0)).toISOString();
-        const notification = isNotificationRow(type, transcript);
-        blocks.push({
-          sourceKind: "cc-session",
-          sourceRef: { sessionFile, entryId },
-          transcript,
-          timestamp: timestamp2,
-          isUserTurn: type === "user" || queuedCommand !== void 0,
-          isNotification: notification
-        });
-      }
-    }
-  }
-  return blocks;
-}
-function readIssueFaceBlocks(input) {
-  const fallbackTs = input.timestamp ?? (/* @__PURE__ */ new Date(0)).toISOString();
-  const blocks = [];
-  const body = input.face.body;
-  if (body.trim() !== "") {
-    blocks.push({
-      sourceKind: "issue-body-comment",
-      sourceRef: { url: input.face.bodyUrl, entryId: "body" },
-      transcript: body,
-      timestamp: fallbackTs,
-      isUserTurn: true,
-      isNotification: false
-    });
-    const quotes = extractCornerQuotes(body);
-    for (let i = 0; i < quotes.length; i += 1) {
-      const q = quotes[i];
-      blocks.push({
-        sourceKind: "ticket-decree-block",
-        sourceRef: { url: input.face.bodyUrl, entryId: `decree-${i + 1}` },
-        transcript: q,
-        timestamp: fallbackTs,
-        isUserTurn: true,
-        isNotification: false
-      });
-    }
-  }
-  for (const comment of input.face.comments) {
-    if (comment.body.trim() === "") continue;
-    blocks.push({
-      sourceKind: "issue-body-comment",
-      sourceRef: {
-        url: comment.htmlUrl,
-        entryId: comment.id
-      },
-      transcript: comment.body,
-      timestamp: comment.createdAt || fallbackTs,
-      isUserTurn: true,
-      isNotification: false
-    });
-  }
-  return blocks;
-}
-function readAdrDecisionKeyBlocks(input) {
-  const timestamp2 = input.timestamp ?? (/* @__PURE__ */ new Date(0)).toISOString();
-  const blocks = [];
-  const cwdAbs = resolve9(input.cwd);
-  const adrRootAbs = resolve9(cwdAbs, DIARIST_ADR_ROOT_REL);
-  let adrRootReal;
-  try {
-    adrRootReal = existsSync8(adrRootAbs) ? realpathSync3(adrRootAbs) : resolve9(realpathSync3(cwdAbs), DIARIST_ADR_ROOT_REL);
-  } catch (error) {
-    throw new DiaristSourceReadError(
-      "adr-unreadable",
-      cwdAbs,
-      `diarist ADR root is not resolvable (${adrRootAbs})`,
-      { cause: error }
-    );
-  }
-  for (const rel of input.adrPaths) {
-    const segments = rel.split(/[/\\]/);
-    if (segments[0] !== "docs" || segments[1] !== "adr" || segments.length < 3 || segments.some((part) => part === "" || part === "." || part === "..")) {
-      throw new DiaristSourceReadError(
-        "adr-escape",
-        resolve9(cwdAbs, rel),
-        `diarist referenced ADR escapes docs/adr (${rel})`
-      );
-    }
-    const abs = resolve9(cwdAbs, rel);
-    if (abs !== adrRootAbs && !pathContainedIn(adrRootAbs, abs)) {
-      throw new DiaristSourceReadError(
-        "adr-escape",
-        abs,
-        `diarist referenced ADR escapes docs/adr (${rel})`
-      );
-    }
-    if (!existsSync8(abs)) {
-      throw new DiaristSourceReadError(
-        "adr-missing",
-        abs,
-        `diarist referenced ADR missing (${rel})`
-      );
-    }
-    let realAbs;
-    try {
-      realAbs = realpathSync3(abs);
-    } catch (error) {
-      throw new DiaristSourceReadError(
-        "adr-unreadable",
-        abs,
-        `diarist ADR path is not resolvable (${abs})`,
-        { cause: error }
-      );
-    }
-    if (realAbs !== adrRootReal && !physicallyContainedIn(adrRootReal, realAbs)) {
-      throw new DiaristSourceReadError(
-        "adr-escape",
-        abs,
-        `diarist referenced ADR escapes docs/adr physically (${rel})`
-      );
-    }
-    let text;
-    try {
-      text = readFileSync3(realAbs, "utf8");
-    } catch (error) {
-      throw new DiaristSourceReadError(
-        "adr-unreadable",
-        realAbs,
-        `diarist ADR file unreadable (${realAbs})`,
-        { cause: error }
-      );
-    }
-    if (text.trim() === "") continue;
-    blocks.push({
-      sourceKind: "adr-decision-key",
-      sourceRef: { path: rel },
-      transcript: text,
-      timestamp: timestamp2,
-      isUserTurn: true,
-      isNotification: false
-    });
-  }
-  return blocks;
-}
-var DEFAULT_QUOTE_MIN, DiaristSourceReadError, DIARIST_ADR_ROOT_REL;
-var init_diarist_mechanical = __esm({
-  "src/diarist-mechanical.ts"() {
-    "use strict";
-    init_activation_ledger_topology();
-    DEFAULT_QUOTE_MIN = 6;
-    DiaristSourceReadError = class extends Error {
-      code = "diarist-source-read";
-      reason;
-      sourcePath;
-      constructor(reason, sourcePath, message, options) {
-        super(message, options);
-        this.name = "DiaristSourceReadError";
-        this.reason = reason;
-        this.sourcePath = sourcePath;
-      }
-    };
-    DIARIST_ADR_ROOT_REL = "docs/adr";
-  }
-});
-
-// src/diarist.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
-function createDiaristIssueFaceFetcher(options) {
-  const runner = options?.runner ?? createGhApiRunner();
-  const transport = options?.transport ?? createGhCollectorGitHubTransport();
-  return async (input) => {
-    const projected = await projectGhIssueBody(runner, input);
-    let body;
-    if (projected.status === "available") {
-      body = projected.body;
-    } else if (projected.status === "unavailable") {
-      if (projected.reason === "pull-request") {
-        throw new DiaristIssueSourceError(
-          "issue-is-pull-request",
-          `ticket #${input.ticketNumber} resolves to a pull request, not an issue face`,
-          projected.cause === void 0 ? void 0 : { cause: projected.cause }
-        );
-      }
-      throw new DiaristIssueSourceError(
-        "issue-unavailable",
-        `issue face unavailable for ${input.owner}/${input.repo}#${input.ticketNumber}`,
-        projected.cause === void 0 ? void 0 : { cause: projected.cause }
-      );
-    } else if (projected.reason === "not-json") {
-      throw new DiaristIssueSourceError(
-        "issue-not-json",
-        `issue face payload is not JSON for ${input.owner}/${input.repo}#${input.ticketNumber}`,
-        projected.cause === void 0 ? void 0 : { cause: projected.cause }
-      );
-    } else if (projected.reason === "not-object") {
-      throw new DiaristIssueSourceError(
-        "issue-not-object",
-        `issue face payload must be a JSON object for ${input.owner}/${input.repo}#${input.ticketNumber}`
-      );
-    } else {
-      throw new DiaristIssueSourceError(
-        "issue-body-invalid",
-        `issue face body must be string or null for ${input.owner}/${input.repo}#${input.ticketNumber}`
-      );
-    }
-    let listed;
-    try {
-      listed = await transport.listIssueComments({
-        owner: input.owner,
-        repo: input.repo,
-        prNumber: input.ticketNumber,
-        ...input.signal === void 0 ? {} : { signal: input.signal }
-      });
-    } catch (error) {
-      throw new DiaristIssueSourceError(
-        "comments-failed",
-        `issue comments fetch failed for ${input.owner}/${input.repo}#${input.ticketNumber}`,
-        { cause: error }
-      );
-    }
-    const bodyUrl = `https://github.com/${input.owner}/${input.repo}/issues/${input.ticketNumber}`;
-    return {
-      body,
-      bodyUrl,
-      comments: listed.items.map((c) => ({
-        id: c.id,
-        body: c.body,
-        createdAt: c.createdAt,
-        htmlUrl: c.htmlUrl
-      }))
-    };
-  };
-}
-function resolveDiaristGithubOrigin(projectRoot) {
-  let remoteUrl;
-  try {
-    remoteUrl = execFileSync3("git", ["remote", "get-url", "origin"], {
-      cwd: projectRoot,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    }).trim();
-  } catch {
-    return void 0;
-  }
-  if (remoteUrl.length === 0) return void 0;
-  return parseGitHubOriginRemote(remoteUrl);
-}
-async function loadDiaristIssueFace(input) {
-  const persistAndThrow = (error) => {
-    appendIssueSourceFailureDiagnostic({
-      ticketNumber: input.ticketNumber,
-      cwd: input.projectRoot,
-      ...input.home === void 0 ? {} : { home: input.home },
-      cause: error.message,
-      reason: error.reason
-    });
-    return error;
-  };
-  const origin = resolveDiaristGithubOrigin(input.projectRoot);
-  if (origin === void 0) {
-    throw persistAndThrow(
-      new DiaristIssueSourceError(
-        "origin-unresolved",
-        `bound ticket #${input.ticketNumber} issue face requires a resolvable github.com origin remote`
-      )
-    );
-  }
-  const fetcher = input.fetcher ?? createDiaristIssueFaceFetcher();
-  try {
-    return await fetcher({
-      owner: origin.owner,
-      repo: origin.repo,
-      ticketNumber: input.ticketNumber
-    });
-  } catch (error) {
-    throw persistAndThrow(
-      error instanceof DiaristIssueSourceError ? error : new DiaristIssueSourceError(
-        "issue-unavailable",
-        `issue face fetch failed for ${origin.owner}/${origin.repo}#${input.ticketNumber}`,
-        { cause: error }
-      )
-    );
-  }
-}
-async function loadSeenEntryIdentities(ticketNumber, cwd, home) {
-  const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-  const { records: records2 } = await readSitianRecords(recordFile);
-  const seen = /* @__PURE__ */ new Set();
-  for (const record4 of records2) {
-    if (typeof record4.identity === "string" && record4.identity.length > 0) {
-      seen.add(record4.identity);
-    }
-  }
-  for (const identity of readOfferedIdentities(ticketNumber, cwd, home)) {
-    seen.add(identity);
-  }
-  return seen;
-}
-function blockEntryIdentity(ticketNumber, block) {
-  return ticketProvenanceEntryIdentity({
-    ticketNumber,
-    sourceKind: block.sourceKind,
-    sourceRef: block.sourceRef,
-    transcript: block.transcript
-  });
-}
-function loadSourceBlocks(input) {
-  const cwds = input.sessionCwds ?? [input.cwd];
-  const blocks = [...readCcSessionBlocks({ cwds })];
-  if (input.issueFace !== void 0) {
-    blocks.push(...readIssueFaceBlocks({ face: input.issueFace }));
-    const faceText = [
-      input.issueFace.body,
-      ...input.issueFace.comments.map((c) => c.body)
-    ].join("\n");
-    const adrPaths = extractReferencedAdrPaths(faceText);
-    if (adrPaths.length > 0) {
-      blocks.push(
-        ...readAdrDecisionKeyBlocks({
-          cwd: input.cwd,
-          adrPaths
-        })
-      );
-    }
-  }
-  return blocks;
-}
-async function prepareDiaristSourceCatalog(input) {
-  const known = input.ticketNumber;
-  if (known !== void 0) {
-    ensureTicketProvenanceVolume(known, input.cwd, input.home);
-    const volume = await readTicketProvenance(known, input.cwd, input.home);
-    writeTicketProvenanceHumanView({
-      ticketNumber: known,
-      cwd: input.cwd,
-      ...input.home === void 0 ? {} : { home: input.home },
-      entries: volume.entries
-    });
-  }
-  const rawBlocks = loadSourceBlocks(input);
-  const safeguarded = mechanicalSafeguardPipeline(rawBlocks);
-  const seen = known === void 0 ? /* @__PURE__ */ new Set() : await loadSeenEntryIdentities(known, input.cwd, input.home);
-  const fresh = safeguarded.filter(
-    (block) => known === void 0 || !seen.has(blockEntryIdentity(known, block))
-  );
-  return {
-    ...known === void 0 ? {} : { ticketNumber: known },
-    instruction: input.instruction,
-    runDirectory: input.runDirectory,
-    projectRoot: input.projectRoot,
-    cwd: input.cwd,
-    ...input.home === void 0 ? {} : { home: input.home },
-    candidates: fresh.map((block, candidateIndex) => ({ ...block, candidateIndex }))
-  };
-}
-function serializeDiaristSourceCatalog(catalog) {
-  return JSON.stringify(catalog);
-}
-var DiaristIssueSourceError;
-var init_diarist = __esm({
-  "src/diarist.ts"() {
-    "use strict";
-    init_adr_path_refs();
-    init_collector_github();
-    init_diarist_mechanical();
-    init_reviewer_pinned_git();
-    init_ticket_provenance();
-    init_sitian_facade();
-    DiaristIssueSourceError = class extends Error {
-      code = "diarist-issue-source";
-      reason;
-      constructor(reason, message, options) {
-        super(message, options);
-        this.name = "DiaristIssueSourceError";
-        this.reason = reason;
-      }
-    };
-  }
-});
-
 // src/public-cli/diarist-run.ts
 var diarist_run_exports = {};
 __export(diarist_run_exports, {
@@ -28709,61 +27493,17 @@ __export(diarist_run_exports, {
   runPublicDiarist: () => runPublicDiarist,
   runPublicDiaristResume: () => runPublicDiaristResume
 });
-import { existsSync as existsSync9 } from "node:fs";
-import { writeFile as writeFile7 } from "node:fs/promises";
-import { join as join25 } from "node:path";
-function withDiaristCatalogPath(prompt, sourcesPath) {
-  if (sourcesPath === void 0 || sourcesPath.trim() === "") return prompt;
-  return `${prompt}
-
-\u5DF2\u51BB\u7ED3\u6765\u6E90\u6587\u4EF6\uFF08\u8DEF\u5F84\uFF09\uFF1A
-- ${sourcesPath}`;
-}
-function buildDiaristTurnRequest(admitted, options, sourcesPath) {
-  const continuation = sourcesPath === void 0 ? options.continuation : {
-    ...options.continuation,
-    prompt: withDiaristCatalogPath(options.continuation.prompt, sourcesPath)
-  };
+function buildDiaristTurnRequest(admitted, options) {
   return projectRoleTurnRequest(
     admitted,
-    {
-      activation: {
-        role: "diarist",
-        ...sourcesPath === void 0 ? {} : { sourcesPath }
-      }
-    },
-    { ...options, continuation }
+    { activation: { role: "diarist" } },
+    options
   );
 }
-async function freezeDiaristSourceCatalog(admitted, env) {
-  const path = join25(admitted.runDirectory, DIARIST_SOURCE_CATALOG_FILE);
-  if (existsSync9(path)) {
-    const identity = await readRoleRunIdentity(admitted.runDirectory);
-    if (identity !== void 0 && identity.state !== "terminal") return path;
-  }
-  const issueFace = admitted.ticketNumber === void 0 ? void 0 : await loadDiaristIssueFace({
-    ticketNumber: admitted.ticketNumber,
-    projectRoot: admitted.projectRoot,
-    home: env.home
-  });
-  const catalog = await prepareDiaristSourceCatalog({
-    ...admitted.ticketNumber === void 0 ? {} : { ticketNumber: admitted.ticketNumber },
-    instruction: admitted.instruction,
-    runDirectory: admitted.runDirectory,
-    projectRoot: admitted.projectRoot,
-    cwd: admitted.projectRoot,
-    home: env.home,
-    ...issueFace === void 0 ? {} : { issueFace },
-    sessionCwds: [admitted.projectRoot, env.cwd]
-  });
-  await writeFile7(path, serializeDiaristSourceCatalog(catalog), "utf8");
-  return path;
-}
-function diaristAdapters(options) {
+function diaristAdapters() {
   return {
     trySettle: (admitted, authority, scope) => trySettleDiaristTerminalResult(admitted, authority, scope),
-    shouldPresentSettled: () => true,
-    ...options?.beforeDispatch === void 0 ? {} : { beforeDispatch: options.beforeDispatch }
+    shouldPresentSettled: () => true
   };
 }
 async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
@@ -28849,15 +27589,7 @@ async function runPublicDiarist(argv, env, io, parseDiaristArgv2) {
     env,
     io,
     request: turnRequest,
-    adapters: diaristAdapters({
-      beforeDispatch: async (admittedSeat) => {
-        const sourcesPath = await freezeDiaristSourceCatalog(admittedSeat, env);
-        Object.assign(
-          turnRequest,
-          buildDiaristTurnRequest(admittedSeat, turnProjection, sourcesPath)
-        );
-      }
-    }),
+    adapters: diaristAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   }).then(async (result2) => {
     if (admitted.ticketNumber === void 0 && result2.admitted !== void 0) {
@@ -28887,7 +27619,6 @@ async function runPublicDiaristResume(request, env, io) {
         admitted.runDirectory,
         effective.summons
       );
-      const sourcesPath = await freezeDiaristSourceCatalog(admitted, env);
       return buildDiaristTurnRequest(
         admitted,
         resumeTurnRequestProjectionOptions(
@@ -28895,19 +27626,16 @@ async function runPublicDiaristResume(request, env, io) {
           effective,
           env,
           summonsPrepared
-        ),
-        sourcesPath
+        )
       );
     },
     adapters: diaristAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
-var DIARIST_SOURCE_CATALOG_FILE;
 var init_diarist_run = __esm({
   "src/public-cli/diarist-run.ts"() {
     "use strict";
-    init_diarist();
     init_engine_material();
     init_cli_errors();
     init_invocation();
@@ -28916,7 +27644,6 @@ var init_diarist_run = __esm({
     init_seat_ticket_binding();
     init_settlement();
     init_turn_request();
-    DIARIST_SOURCE_CATALOG_FILE = "diarist-sources.json";
   }
 });
 
@@ -28999,7 +27726,7 @@ async function runCountersignCourtDiaristStation(admitted, env, io) {
       instruction: `\u6574\u7406 #${admitted.ticketNumber} \u7684\u672C\u6848\u4F9D\u636E\u3002`,
       projectRoot: admitted.projectRoot,
       failureLabel: `ticket #${admitted.ticketNumber}`,
-      // Refresh holds a typed key — hand it off so freeze loads issue face.
+      // Refresh holds a typed key — hand it off so identity is bound before turn.
       boundTicketNumber: admitted.ticketNumber
     },
     env,
@@ -30041,8 +28768,8 @@ var init_judge_run = __esm({
 });
 
 // src/public-cli/merger-run.ts
-import { mkdir as mkdir5, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join26, resolve as resolve10 } from "node:path";
+import { mkdir as mkdir5, writeFile as writeFile7 } from "node:fs/promises";
+import { join as join24, resolve as resolve9 } from "node:path";
 function mergerMethods(packageRoot2) {
   return [
     {
@@ -30084,7 +28811,7 @@ async function loadMergerMethodMaterial(packageRoot2) {
   );
 }
 async function admitMergerShellForActivationFailure(options) {
-  const projectRoot = resolve10(options.project ?? options.cwd);
+  const projectRoot = resolve9(options.project ?? options.cwd);
   const runId = (options.createRunId ?? uuidv7)();
   const {
     principal,
@@ -30108,9 +28835,9 @@ async function admitMergerShellForActivationFailure(options) {
     expectedConflictPaths: [],
     resolutionScope: []
   };
-  const admittedRequestPath = join26(runDirectory, "admitted-request.json");
-  const mergerInputPath = join26(runDirectory, "merger-input.json");
-  await writeFile8(
+  const admittedRequestPath = join24(runDirectory, "admitted-request.json");
+  const mergerInputPath = join24(runDirectory, "merger-input.json");
+  await writeFile7(
     admittedRequestPath,
     `${JSON.stringify(
       {
@@ -30513,13 +29240,13 @@ var init_reviewer_run = __esm({
 });
 
 // src/analyst-book-key.ts
-import { statSync as statSync3 } from "node:fs";
+import { statSync as statSync2 } from "node:fs";
 import { isAbsolute as isAbsolute8 } from "node:path";
 function resolveAnalystBookKey(projectRoot) {
   const identity = physicalPathIdentity(projectRoot);
   let stats;
   try {
-    stats = statSync3(identity);
+    stats = statSync2(identity);
   } catch (error) {
     const code = errnoCode(error);
     if (code === "ENOENT" || code === "ENOTDIR") return `root:${identity}`;
@@ -30548,13 +29275,13 @@ var init_analyst_book_key = __esm({
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { rename, rm, writeFile as writeFile9 } from "node:fs/promises";
-import { dirname as dirname12, join as join27 } from "node:path";
+import { rename, rm, writeFile as writeFile8 } from "node:fs/promises";
+import { dirname as dirname12, join as join25 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname12(destination);
-  const temporary = join27(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join25(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
-    await writeFile9(temporary, contents);
+    await writeFile8(temporary, contents);
     await rename(temporary, destination);
   } catch (error) {
     await rm(temporary, { force: true }).catch(() => void 0);
@@ -30569,16 +29296,16 @@ var init_atomic_write = __esm({
 
 // src/analyst-index.ts
 import { open as open3, readFile as readFile17, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname13, join as join28 } from "node:path";
+import { dirname as dirname13, join as join26 } from "node:path";
 function sleep(ms) {
-  return new Promise((resolve12) => {
-    setTimeout(resolve12, ms);
+  return new Promise((resolve11) => {
+    setTimeout(resolve11, ms);
   });
 }
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname13(indexPath));
-  const lockPath = join28(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join26(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -30605,7 +29332,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join28(ledgerHome, "analyst", "library-index.json");
+  return join26(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -30901,22 +29628,22 @@ var init_analyst_cohort = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir7, readFile as readFile18 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { join as join27 } from "node:path";
 function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 function errorText3(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isRecord18(value) {
+function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readExistingRunLifecycleState(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile18(join29(runDirectory, "run-state.json"), "utf8")
+      await readFile18(join27(runDirectory, "run-state.json"), "utf8")
     );
-    if (!isRecord18(raw) || typeof raw.state !== "string") return void 0;
+    if (!isRecord15(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
   } catch {
     return void 0;
@@ -30946,13 +29673,13 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile18(join29(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile18(join27(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError5(error)) return void 0;
     throw error;
   }
   const parsed = JSON.parse(raw);
-  if (!isRecord18(parsed)) return void 0;
+  if (!isRecord15(parsed)) return void 0;
   if (typeof parsed.projectRoot !== "string" || parsed.projectRoot.trim() === "") {
     return void 0;
   }
@@ -30978,15 +29705,15 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile18(join29(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile18(join27(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
-    if (isRecord18(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
+    if (isRecord15(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
     }
   } catch (error) {
     if (!isMissingPathError5(error)) throw error;
   }
-  return join29(runDirectory, "session", "session.jsonl");
+  return join27(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -31158,9 +29885,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join29(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join27(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join29(input.runDirectory, "session", "auditor-roles"),
+      join27(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -31193,7 +29920,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join29(ledgerHome, "books");
+  const booksRoot = join27(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -31225,7 +29952,7 @@ async function scanAnalystIssueRuns(input) {
   const unreadable = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const runsDir = join29(booksRoot, book, "runs");
+    const runsDir = join27(booksRoot, book, "runs");
     let runNames;
     try {
       const entries = await readdir7(runsDir, { withFileTypes: true });
@@ -31237,7 +29964,7 @@ async function scanAnalystIssueRuns(input) {
     for (const runName of runNames) {
       const parsed = parseRunDirectoryName2(runName);
       if (parsed === void 0) continue;
-      const runDirectory = join29(runsDir, runName);
+      const runDirectory = join27(runsDir, runName);
       let scopeFields;
       try {
         scopeFields = await readInvocationScopeFields(runDirectory);
@@ -31285,7 +30012,7 @@ var init_analyst_ledger = __esm({
 });
 
 // src/analyst-metric-families/acceptance-success-rework.ts
-function isRecord19(value) {
+function isRecord16(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan(span) {
@@ -31294,21 +30021,21 @@ function wallMsFromSpan(span) {
 function findCollectorGroups(body) {
   if (Array.isArray(body.groups)) return body.groups;
   const receipt = body.receipt;
-  if (isRecord19(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
+  if (isRecord16(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
   const outcome = body.outcome;
-  if (isRecord19(outcome)) {
+  if (isRecord16(outcome)) {
     const facts = outcome.decisiveFacts;
-    if (isRecord19(facts) && Array.isArray(facts.groups)) return facts.groups;
+    if (isRecord16(facts) && Array.isArray(facts.groups)) return facts.groups;
   }
   return void 0;
 }
 function extractStatus(body) {
   const outcome = body.outcome;
-  if (isRecord19(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
+  if (isRecord16(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
     return outcome.status;
   }
   const receipt = body.receipt;
-  if (isRecord19(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
+  if (isRecord16(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
     return receipt.status;
   }
   if (typeof body.status === "string" && body.status.trim() !== "") {
@@ -31933,21 +30660,21 @@ var init_leg_wall_clock = __esm({
 });
 
 // src/analyst-metric-families/round-timeline.ts
-function isRecord20(value) {
+function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan2(startedAt, endedAt) {
   return Date.parse(endedAt) - Date.parse(startedAt);
 }
 function readOutcomeStatus(body) {
-  if (!isRecord20(body.outcome)) return void 0;
+  if (!isRecord17(body.outcome)) return void 0;
   const status = body.outcome.status;
   if (typeof status !== "string" || status.trim() === "") return void 0;
   return status;
 }
 function readClassCount(body) {
-  if (!isRecord20(body.outcome)) return void 0;
-  if (!isRecord20(body.outcome.decisiveFacts)) return void 0;
+  if (!isRecord17(body.outcome)) return void 0;
+  if (!isRecord17(body.outcome.decisiveFacts)) return void 0;
   const classCount = body.outcome.decisiveFacts.classCount;
   if (typeof classCount !== "number" || !Number.isFinite(classCount)) {
     return void 0;
@@ -32090,8 +30817,8 @@ var init_analyst_metric_family = __esm({
 });
 
 // src/analyst-page.ts
-import { createHash as createHash7 } from "node:crypto";
-import { dirname as dirname14, join as join30 } from "node:path";
+import { createHash as createHash5 } from "node:crypto";
+import { dirname as dirname14, join as join28 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -32099,10 +30826,10 @@ function analystIssuePageKey(address) {
   } else if (address.scopeRootIdentity !== void 0) {
     parts.push("root", physicalPathIdentity(address.scopeRootIdentity));
   }
-  return createHash7("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
+  return createHash5("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join30(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join28(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -32463,7 +31190,7 @@ var init_analyst_entry = __esm({
 
 // src/public-cli/analyst-run.ts
 import { readFile as readFile20 } from "node:fs/promises";
-import { isAbsolute as isAbsolute9, resolve as resolve11 } from "node:path";
+import { isAbsolute as isAbsolute9, resolve as resolve10 } from "node:path";
 function resolveAnalystIssueBookKeyFromCwd(cwd = process.cwd()) {
   try {
     return resolveBookKeyFromGit(cwd);
@@ -32512,7 +31239,7 @@ async function buildAnalystSweepModeInputFromAttachmentPaths(attachmentPaths) {
     );
   }
   const sourcePath = attachmentPaths[0];
-  const absolute = isAbsolute9(sourcePath) ? sourcePath : resolve11(sourcePath);
+  const absolute = isAbsolute9(sourcePath) ? sourcePath : resolve10(sourcePath);
   let bytes;
   try {
     bytes = await readFile20(absolute);
@@ -32635,7 +31362,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join31 } from "node:path";
+import { join as join29 } from "node:path";
 function takePublicGlobalFlag(argv, index, options) {
   const tokens = argv.slice(index);
   const taken = options.takeDashed(tokens);
@@ -32767,7 +31494,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join31(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join29(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -32972,6 +31699,7 @@ function renderHelp() {
     "Persistent config: ak-role config set <seat> <provider/model[:thinking]> | unset <gatekeeper|inspector|notary>",
     "Persistent engine (callable roles): ak-role config set-engine <seat> <name> | unset-engine <seat>",
     "Persistent host (callable roles): ak-role config set-host <seat> <name> | unset-host <seat>",
+    "Provider host alias: ak-role config set-provider-alias <provider> <host> <alias> | unset-provider-alias <provider> <host>",
     "Host resolution: --host \u2192 persistent seat host \u2192 pi (resume uses the same order; #617)",
     "Effective seats: ak-role roles"
   );
@@ -33071,6 +31799,15 @@ function renderConfig(config) {
     }
   }
   lines.push(`autoResumeLimit	${config.autoResumeLimit ?? AUTO_RESUME_LIMIT}`);
+  const aliases = config.providerAliases;
+  if (aliases !== void 0) {
+    for (const provider of Object.keys(aliases).sort()) {
+      const byHost = aliases[provider];
+      for (const host of Object.keys(byHost).sort()) {
+        lines.push(`providerAlias	${provider}	${host}	${byHost[host]}`);
+      }
+    }
+  }
   return `${lines.join("\n")}
 `;
 }
@@ -33220,6 +31957,44 @@ async function runConfigCommand(args, home, packageRoot2, io) {
     io.stdout(renderConfig(config));
     return 0;
   }
+  if (args[0] === "set-provider-alias") {
+    if (args.length !== 4) {
+      throw new CliUsageError(
+        "usage: ak-role config set-provider-alias <provider> <host> <alias>"
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot2);
+    try {
+      config = setProviderHostAlias(config, args[1], args[2], args[3]);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error }
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
+  if (args[0] === "unset-provider-alias") {
+    if (args.length !== 3) {
+      throw new CliUsageError(
+        "usage: ak-role config unset-provider-alias <provider> <host>"
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot2);
+    try {
+      config = unsetProviderHostAlias(config, args[1], args[2]);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error }
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
   throw new CliUsageError(`unknown config subcommand: ${args[0]}`);
 }
 async function runAkRole(argv, env) {
@@ -33722,8 +32497,8 @@ var init_cli = __esm({
 });
 
 // src/public-cli/main.ts
-import { existsSync as existsSync10 } from "node:fs";
-import { dirname as dirname15, join as join32 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { dirname as dirname15, join as join30 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -33812,8 +32587,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname15(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join32(binDir, "..", "..");
-  if (existsSync10(join32(canonical, "package.json"))) {
+  const canonical = join30(binDir, "..", "..");
+  if (existsSync7(join30(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;