@akagilnc/pi-workflow-roles 0.1.3712 → 0.1.3718

package/README.md

@@ -59,10 +59,14 @@ ak-role config unset-engine judge
 ak-role config set-host judge grok-build
 ak-role config unset-host judge
 ak-role config set-auto-resume-limit 3
+ak-role config set-provider-alias xai hermes xai-oauth
+ak-role config unset-provider-alias xai hermes
 ```
 
 **Host axis (invocation-insensible after default):** `--host` is a global public option on every callable role and on `resume`. Resolution is invocation `--host` → persistent seat host (`config set-host`) → package default (`pi`). After `config set-host <seat> <name>`, the same command face used with Pi runs that seat on the named host with zero extra flags and zero caller-side changes; bare `resume` follows the same table. All public callable roles and their institutional sub-legs (soul audit, doctor audit, navigator, reviewer evidence children) are host-neutral on the shared in-process institutional session seam.
 
+**Provider host alias (#778):** seat rows keep one provider name; `config set-provider-alias <provider> <host> <alias>` registers an owner map so the same row hands the host the name it recognizes. Unregistered pairs pass the seat provider through unchanged — the package never invents pairs.
+
 For Gate officers (`gatekeeper` / `inspector` / `notary`) resolution is officer pin → province (`gatekeeper`) pin → inherit parent session; an explicit selection that fails is loud and does not fall back. Configuration usage and refusal text are owned by `ak-role config` / `ak-role help config`. The persistent file is machine-wide and shared across CLI builds: seat keys this build does not know are skipped on read (not an error); unknown field-level keys on known seats keep their existing tolerance.
 
 Receipts are typed, so callers compose roles without parsing prose; ordering and stopping stay caller-owned ([ADR 0010](docs/adr/0010-callers-own-role-composition-and-repetition.md)). Programmatic consumers derive contracts from the exported schemas in `src/package-contracts/`, not from this guide.

package/README.zh-CN.md

@@ -59,10 +59,14 @@ ak-role config unset-engine judge
 ak-role config set-host judge grok-build
 ak-role config unset-host judge
 ak-role config set-auto-resume-limit 3
+ak-role config set-provider-alias xai hermes xai-oauth
+ak-role config unset-provider-alias xai hermes
 ```
 
 **宿主轴（配置默认 host 后调用无感）：** `--host` 为全局公开旗，全部可调用角色与 `resume` 受理。解析序为调用 `--host` → 席位持久 host（`config set-host`）→ 包默认（`pi`）。`config set-host <seat> <name>` 之后，与 Pi 完全相同的命令面即可在该席跑命名宿主——零额外旗、零调用侧改动；裸 `resume` 同序取表。全部 public callable 角色及其机构子腿（审刑审计、太医审计、游奕使、御史台证据子腿）在共享进程内机构子会话接缝上均为宿主中立。
 
+**Provider 宿主别名（#778）：** 席位行只写一份 provider 名；`config set-provider-alias <provider> <host> <alias>` 由 owner 在席位表登记映射，使同一行在指定宿主下交出该宿主认得的名。未登记的 (provider, host) 原样透传——包内不内置任何对照。
+
 门下省官席解析顺序：官自钉 → 省钉（`gatekeeper`）→ 继承父 session；显式指定失败响亮、不回退。配置用法与拒绝文案以 `ak-role config`／`ak-role help config` 为准。持久配置是全机共享单文件、多 CLI 版本同读：本构建不认识的席位键读时跳过（不报错）；已知席位上的未知字段沿用现行容忍。
 
 回执是 typed 的，调用者不必解析散文即可组合角色；顺序与停止归调用者（[ADR 0010](docs/adr/0010-callers-own-role-composition-and-repetition.md)）。编程消费者从 `src/package-contracts/` 导出推导契约，不从本文。

package/dist/acp-host/production-host.js

@@ -6074,14 +6074,17 @@ var init_option_definitions = __esm({
           "ak-role config unset-engine <seat>",
           "ak-role config set-host <seat> <name>",
           "ak-role config unset-host <seat>",
-          "ak-role config set-auto-resume-limit <N>"
+          "ak-role config set-auto-resume-limit <N>",
+          "ak-role config set-provider-alias <provider> <host> <alias>",
+          "ak-role config unset-provider-alias <provider> <host>"
         ],
         examples: [
           "ak-role config set judge openai-codex/gpt-5.6-sol:high",
           "ak-role config unset gatekeeper",
           "ak-role config set-engine judge opus",
           "ak-role config set-host judge grok-build",
-          "ak-role config set-auto-resume-limit 3"
+          "ak-role config set-auto-resume-limit 3",
+          "ak-role config set-provider-alias xai hermes xai-oauth"
         ]
       },
       help: {
@@ -8819,6 +8822,7 @@ var init_institutional_resolution = __esm({
 var config_exports = {};
 __export(config_exports, {
   GATE_OFFICER_SEATS: () => GATE_OFFICER_SEATS,
+  applyProviderHostAlias: () => applyProviderHostAlias,
   buildSeatModelCliArgs: () => buildSeatModelCliArgs2,
   clearPersistentSeatConfig: () => clearPersistentSeatConfig,
   credentialProvidersFromAuthData: () => credentialProvidersFromAuthData,
@@ -8839,6 +8843,8 @@ __export(config_exports, {
   setPersistentSeatConfig: () => setPersistentSeatConfig,
   setPersistentSeatEngine: () => setPersistentSeatEngine,
   setPersistentSeatHost: () => setPersistentSeatHost,
+  setProviderHostAlias: () => setProviderHostAlias,
+  unsetProviderHostAlias: () => unsetProviderHostAlias,
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
 import { mkdir as mkdir2, readFile as readFile10, writeFile as writeFile5 } from "node:fs/promises";
@@ -8966,6 +8972,50 @@ function parseAutoResumeLimit(value) {
 function setAutoResumeLimit(config, limit) {
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
+function requireNonEmptyToken(value, label) {
+  const trimmed = value.trim();
+  if (trimmed === "") {
+    throw new Error(`${label} must be a non-empty string`);
+  }
+  return trimmed;
+}
+function setProviderHostAlias(config, provider, host, alias) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const to = requireNonEmptyToken(alias, "alias");
+  const previous = config.providerAliases ?? {};
+  return {
+    ...config,
+    providerAliases: {
+      ...previous,
+      [from]: {
+        ...previous[from] ?? {},
+        [hostName]: to
+      }
+    }
+  };
+}
+function unsetProviderHostAlias(config, provider, host) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const previous = config.providerAliases;
+  if (previous === void 0 || previous[from] === void 0) return config;
+  const { [hostName]: _dropped, ...restHosts } = previous[from];
+  const nextForProvider = Object.keys(restHosts).length === 0 ? void 0 : restHosts;
+  const { [from]: _provider, ...restProviders } = previous;
+  const nextAliases = nextForProvider === void 0 ? restProviders : { ...restProviders, [from]: nextForProvider };
+  if (Object.keys(nextAliases).length === 0) {
+    const { providerAliases: _gone, ...rest } = config;
+    return rest;
+  }
+  return { ...config, providerAliases: nextAliases };
+}
+function applyProviderHostAlias(selection, host, aliases) {
+  if (selection === void 0 || aliases === void 0) return selection;
+  const mapped = aliases[selection.provider]?.[host];
+  if (mapped === void 0) return selection;
+  return { ...selection, provider: mapped };
+}
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
@@ -9035,9 +9085,44 @@ function serializePublicCliConfig(config) {
       ...config.unknownSeats ?? {},
       ...config.seats
     },
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
+    ...config.providerAliases === void 0 || Object.keys(config.providerAliases).length === 0 ? {} : { providerAliases: config.providerAliases }
   };
 }
+function parseProviderHostAliases(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config.providerAliases must be an object");
+  }
+  const out = {};
+  for (const [provider, byHost] of Object.entries(value)) {
+    if (provider.trim() === "") {
+      throw new Error("public CLI config.providerAliases provider key must be non-empty");
+    }
+    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
+      throw new Error(
+        `public CLI config.providerAliases[${provider}] must be an object`
+      );
+    }
+    const hosts = {};
+    for (const [host, alias] of Object.entries(byHost)) {
+      if (host.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}] host key must be non-empty`
+        );
+      }
+      if (typeof alias !== "string" || alias.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`
+        );
+      }
+      hosts[host] = alias;
+    }
+    if (Object.keys(hosts).length > 0) {
+      out[provider] = hosts;
+    }
+  }
+  return out;
+}
 function parsePublicCliConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -9047,6 +9132,13 @@ function parsePublicCliConfig(value) {
   if (record4.autoResumeLimit !== void 0) {
     autoResumeLimit = parseAutoResumeLimit(record4.autoResumeLimit);
   }
+  let providerAliases;
+  if (record4.providerAliases !== void 0) {
+    const parsed = parseProviderHostAliases(record4.providerAliases);
+    if (Object.keys(parsed).length > 0) {
+      providerAliases = parsed;
+    }
+  }
   const unknownSeats = {};
   if (record4.unknownSeats !== void 0) {
     if (record4.unknownSeats === null || typeof record4.unknownSeats !== "object" || Array.isArray(record4.unknownSeats)) {
@@ -9057,6 +9149,7 @@ function parsePublicCliConfig(value) {
   const withOpaque = (seats2) => ({
     seats: seats2,
     ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
+    ...providerAliases === void 0 ? {} : { providerAliases },
     ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
   });
   if (record4.seats === void 0) {
@@ -9233,7 +9326,21 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
       };
     }
   }
-  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+  const withAxes = attachHostAxis(
+    attachEngineAxis(modelSeat, config, invocation),
+    config,
+    invocation
+  );
+  const selection = applyProviderHostAlias(
+    withAxes.selection,
+    withAxes.host,
+    config.providerAliases
+  );
+  if (selection === void 0) {
+    const { selection: _dropped, ...rest } = withAxes;
+    return rest;
+  }
+  return { ...withAxes, selection };
 }
 function effectiveSeatConfigurations(config, credentials, invocation) {
   return PUBLIC_CONFIGURABLE_SEATS.map(

package/dist/public-cli/config.js

@@ -139,6 +139,50 @@ function parseAutoResumeLimit(value) {
 function setAutoResumeLimit(config, limit) {
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
+function requireNonEmptyToken(value, label) {
+  const trimmed = value.trim();
+  if (trimmed === "") {
+    throw new Error(`${label} must be a non-empty string`);
+  }
+  return trimmed;
+}
+function setProviderHostAlias(config, provider, host, alias) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const to = requireNonEmptyToken(alias, "alias");
+  const previous = config.providerAliases ?? {};
+  return {
+    ...config,
+    providerAliases: {
+      ...previous,
+      [from]: {
+        ...previous[from] ?? {},
+        [hostName]: to
+      }
+    }
+  };
+}
+function unsetProviderHostAlias(config, provider, host) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const previous = config.providerAliases;
+  if (previous === void 0 || previous[from] === void 0) return config;
+  const { [hostName]: _dropped, ...restHosts } = previous[from];
+  const nextForProvider = Object.keys(restHosts).length === 0 ? void 0 : restHosts;
+  const { [from]: _provider, ...restProviders } = previous;
+  const nextAliases = nextForProvider === void 0 ? restProviders : { ...restProviders, [from]: nextForProvider };
+  if (Object.keys(nextAliases).length === 0) {
+    const { providerAliases: _gone, ...rest } = config;
+    return rest;
+  }
+  return { ...config, providerAliases: nextAliases };
+}
+function applyProviderHostAlias(selection, host, aliases) {
+  if (selection === void 0 || aliases === void 0) return selection;
+  const mapped = aliases[selection.provider]?.[host];
+  if (mapped === void 0) return selection;
+  return { ...selection, provider: mapped };
+}
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
@@ -208,9 +252,44 @@ function serializePublicCliConfig(config) {
       ...config.unknownSeats ?? {},
       ...config.seats
     },
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
+    ...config.providerAliases === void 0 || Object.keys(config.providerAliases).length === 0 ? {} : { providerAliases: config.providerAliases }
   };
 }
+function parseProviderHostAliases(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config.providerAliases must be an object");
+  }
+  const out = {};
+  for (const [provider, byHost] of Object.entries(value)) {
+    if (provider.trim() === "") {
+      throw new Error("public CLI config.providerAliases provider key must be non-empty");
+    }
+    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
+      throw new Error(
+        `public CLI config.providerAliases[${provider}] must be an object`
+      );
+    }
+    const hosts = {};
+    for (const [host, alias] of Object.entries(byHost)) {
+      if (host.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}] host key must be non-empty`
+        );
+      }
+      if (typeof alias !== "string" || alias.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`
+        );
+      }
+      hosts[host] = alias;
+    }
+    if (Object.keys(hosts).length > 0) {
+      out[provider] = hosts;
+    }
+  }
+  return out;
+}
 function parsePublicCliConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -220,6 +299,13 @@ function parsePublicCliConfig(value) {
   if (record.autoResumeLimit !== void 0) {
     autoResumeLimit = parseAutoResumeLimit(record.autoResumeLimit);
   }
+  let providerAliases;
+  if (record.providerAliases !== void 0) {
+    const parsed = parseProviderHostAliases(record.providerAliases);
+    if (Object.keys(parsed).length > 0) {
+      providerAliases = parsed;
+    }
+  }
   const unknownSeats = {};
   if (record.unknownSeats !== void 0) {
     if (record.unknownSeats === null || typeof record.unknownSeats !== "object" || Array.isArray(record.unknownSeats)) {
@@ -230,6 +316,7 @@ function parsePublicCliConfig(value) {
   const withOpaque = (seats2) => ({
     seats: seats2,
     ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
+    ...providerAliases === void 0 ? {} : { providerAliases },
     ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
   });
   if (record.seats === void 0) {
@@ -406,7 +493,21 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
       };
     }
   }
-  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+  const withAxes = attachHostAxis(
+    attachEngineAxis(modelSeat, config, invocation),
+    config,
+    invocation
+  );
+  const selection = applyProviderHostAlias(
+    withAxes.selection,
+    withAxes.host,
+    config.providerAliases
+  );
+  if (selection === void 0) {
+    const { selection: _dropped, ...rest } = withAxes;
+    return rest;
+  }
+  return { ...withAxes, selection };
 }
 function effectiveSeatConfigurations(config, credentials, invocation) {
   return PUBLIC_CONFIGURABLE_SEATS.map(
@@ -439,6 +540,7 @@ async function loadCredentialProviders(agentDir) {
 }
 export {
   GATE_OFFICER_SEATS,
+  applyProviderHostAlias,
   buildSeatModelCliArgs,
   clearPersistentSeatConfig,
   credentialProvidersFromAuthData,
@@ -459,5 +561,7 @@ export {
   setPersistentSeatConfig,
   setPersistentSeatEngine,
   setPersistentSeatHost,
+  setProviderHostAlias,
+  unsetProviderHostAlias,
   validatePublicCliConfigAxes
 };

package/dist/public-cli/main.js

@@ -15584,6 +15584,50 @@ function parseAutoResumeLimit(value) {
 function setAutoResumeLimit(config, limit) {
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
+function requireNonEmptyToken(value, label) {
+  const trimmed = value.trim();
+  if (trimmed === "") {
+    throw new Error(`${label} must be a non-empty string`);
+  }
+  return trimmed;
+}
+function setProviderHostAlias(config, provider, host, alias) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const to = requireNonEmptyToken(alias, "alias");
+  const previous = config.providerAliases ?? {};
+  return {
+    ...config,
+    providerAliases: {
+      ...previous,
+      [from]: {
+        ...previous[from] ?? {},
+        [hostName]: to
+      }
+    }
+  };
+}
+function unsetProviderHostAlias(config, provider, host) {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const previous = config.providerAliases;
+  if (previous === void 0 || previous[from] === void 0) return config;
+  const { [hostName]: _dropped, ...restHosts } = previous[from];
+  const nextForProvider = Object.keys(restHosts).length === 0 ? void 0 : restHosts;
+  const { [from]: _provider, ...restProviders } = previous;
+  const nextAliases = nextForProvider === void 0 ? restProviders : { ...restProviders, [from]: nextForProvider };
+  if (Object.keys(nextAliases).length === 0) {
+    const { providerAliases: _gone, ...rest } = config;
+    return rest;
+  }
+  return { ...config, providerAliases: nextAliases };
+}
+function applyProviderHostAlias(selection, host, aliases) {
+  if (selection === void 0 || aliases === void 0) return selection;
+  const mapped = aliases[selection.provider]?.[host];
+  if (mapped === void 0) return selection;
+  return { ...selection, provider: mapped };
+}
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
@@ -15643,9 +15687,44 @@ function serializePublicCliConfig(config) {
       ...config.unknownSeats ?? {},
       ...config.seats
     },
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
+    ...config.providerAliases === void 0 || Object.keys(config.providerAliases).length === 0 ? {} : { providerAliases: config.providerAliases }
   };
 }
+function parseProviderHostAliases(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config.providerAliases must be an object");
+  }
+  const out = {};
+  for (const [provider, byHost] of Object.entries(value)) {
+    if (provider.trim() === "") {
+      throw new Error("public CLI config.providerAliases provider key must be non-empty");
+    }
+    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
+      throw new Error(
+        `public CLI config.providerAliases[${provider}] must be an object`
+      );
+    }
+    const hosts = {};
+    for (const [host, alias] of Object.entries(byHost)) {
+      if (host.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}] host key must be non-empty`
+        );
+      }
+      if (typeof alias !== "string" || alias.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`
+        );
+      }
+      hosts[host] = alias;
+    }
+    if (Object.keys(hosts).length > 0) {
+      out[provider] = hosts;
+    }
+  }
+  return out;
+}
 function parsePublicCliConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -15655,6 +15734,13 @@ function parsePublicCliConfig(value) {
   if (record4.autoResumeLimit !== void 0) {
     autoResumeLimit = parseAutoResumeLimit(record4.autoResumeLimit);
   }
+  let providerAliases;
+  if (record4.providerAliases !== void 0) {
+    const parsed = parseProviderHostAliases(record4.providerAliases);
+    if (Object.keys(parsed).length > 0) {
+      providerAliases = parsed;
+    }
+  }
   const unknownSeats = {};
   if (record4.unknownSeats !== void 0) {
     if (record4.unknownSeats === null || typeof record4.unknownSeats !== "object" || Array.isArray(record4.unknownSeats)) {
@@ -15665,6 +15751,7 @@ function parsePublicCliConfig(value) {
   const withOpaque = (seats2) => ({
     seats: seats2,
     ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
+    ...providerAliases === void 0 ? {} : { providerAliases },
     ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
   });
   if (record4.seats === void 0) {
@@ -15841,7 +15928,21 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
       };
     }
   }
-  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+  const withAxes = attachHostAxis(
+    attachEngineAxis(modelSeat, config, invocation),
+    config,
+    invocation
+  );
+  const selection = applyProviderHostAlias(
+    withAxes.selection,
+    withAxes.host,
+    config.providerAliases
+  );
+  if (selection === void 0) {
+    const { selection: _dropped, ...rest } = withAxes;
+    return rest;
+  }
+  return { ...withAxes, selection };
 }
 function effectiveSeatConfigurations(config, credentials, invocation) {
   return PUBLIC_CONFIGURABLE_SEATS.map(
@@ -19489,14 +19590,17 @@ var init_option_definitions = __esm({
           "ak-role config unset-engine <seat>",
           "ak-role config set-host <seat> <name>",
           "ak-role config unset-host <seat>",
-          "ak-role config set-auto-resume-limit <N>"
+          "ak-role config set-auto-resume-limit <N>",
+          "ak-role config set-provider-alias <provider> <host> <alias>",
+          "ak-role config unset-provider-alias <provider> <host>"
         ],
         examples: [
           "ak-role config set judge openai-codex/gpt-5.6-sol:high",
           "ak-role config unset gatekeeper",
           "ak-role config set-engine judge opus",
           "ak-role config set-host judge grok-build",
-          "ak-role config set-auto-resume-limit 3"
+          "ak-role config set-auto-resume-limit 3",
+          "ak-role config set-provider-alias xai hermes xai-oauth"
         ]
       },
       help: {
@@ -31595,6 +31699,7 @@ function renderHelp() {
     "Persistent config: ak-role config set <seat> <provider/model[:thinking]> | unset <gatekeeper|inspector|notary>",
     "Persistent engine (callable roles): ak-role config set-engine <seat> <name> | unset-engine <seat>",
     "Persistent host (callable roles): ak-role config set-host <seat> <name> | unset-host <seat>",
+    "Provider host alias: ak-role config set-provider-alias <provider> <host> <alias> | unset-provider-alias <provider> <host>",
     "Host resolution: --host \u2192 persistent seat host \u2192 pi (resume uses the same order; #617)",
     "Effective seats: ak-role roles"
   );
@@ -31694,6 +31799,15 @@ function renderConfig(config) {
     }
   }
   lines.push(`autoResumeLimit	${config.autoResumeLimit ?? AUTO_RESUME_LIMIT}`);
+  const aliases = config.providerAliases;
+  if (aliases !== void 0) {
+    for (const provider of Object.keys(aliases).sort()) {
+      const byHost = aliases[provider];
+      for (const host of Object.keys(byHost).sort()) {
+        lines.push(`providerAlias	${provider}	${host}	${byHost[host]}`);
+      }
+    }
+  }
   return `${lines.join("\n")}
 `;
 }
@@ -31843,6 +31957,44 @@ async function runConfigCommand(args, home, packageRoot2, io) {
     io.stdout(renderConfig(config));
     return 0;
   }
+  if (args[0] === "set-provider-alias") {
+    if (args.length !== 4) {
+      throw new CliUsageError(
+        "usage: ak-role config set-provider-alias <provider> <host> <alias>"
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot2);
+    try {
+      config = setProviderHostAlias(config, args[1], args[2], args[3]);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error }
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
+  if (args[0] === "unset-provider-alias") {
+    if (args.length !== 3) {
+      throw new CliUsageError(
+        "usage: ak-role config unset-provider-alias <provider> <host>"
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot2);
+    try {
+      config = unsetProviderHostAlias(config, args[1], args[2]);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error }
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
   throw new CliUsageError(`unknown config subcommand: ${args[0]}`);
 }
 async function runAkRole(argv, env) {

package/dist/public-cli/option-definitions.js

@@ -1077,6 +1077,8 @@ const SUPPORT_COMMAND_HELP = {
             "ak-role config set-host <seat> <name>",
             "ak-role config unset-host <seat>",
             "ak-role config set-auto-resume-limit <N>",
+            "ak-role config set-provider-alias <provider> <host> <alias>",
+            "ak-role config unset-provider-alias <provider> <host>",
         ],
         examples: [
             "ak-role config set judge openai-codex/gpt-5.6-sol:high",
@@ -1084,6 +1086,7 @@ const SUPPORT_COMMAND_HELP = {
             "ak-role config set-engine judge opus",
             "ak-role config set-host judge grok-build",
             "ak-role config set-auto-resume-limit 3",
+            "ak-role config set-provider-alias xai hermes xai-oauth",
         ],
     },
     help: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.3712",
+  "version": "0.1.3718",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/countersign.md

@@ -5,16 +5,15 @@
 
 ## 审读步骤
 
-**一、立法。** 先为本票立「适用法」，写进判词；后面每一步只对着它问，未立法不得往下走。适用法三部分：
-1 票面本文，含置顶冻结原话；起居录里决策过程
-2 第一法源立法（最高法）：该票起居录与陛下原话，全局宪法；
-3 第二发源立法：
-适用 ADR——由你自行检索，按票面触及的席位、接缝、术语在 docs/adr 与 CONTEXT.md 查全，票面引没引都算——并逐键列出其决策键；仓级 CLAUDE.md、质量法、审刑院法典；
-既有契约：CONTEXT.md 词表、被改动接缝的现行行为、相关票与在飞分支。
+**一、立法。** 先为本票立「适用法」；后面每一步对着它问，未立法不得往下走。适用法三部分：
+1 第一法源立法（最高法）：该票起居录，全局宪法，仓内治理文件；
 
-4 第二法源合法性检查：第一法源，判断第二法源 以及 输入的 prombt 是否有超出或不足，曲解。如有，除非有陛下原话批准，否则直接封驳要求改正或陛下批准。
+2 第二发源立法：
+适用 ADR——由你自行检索，按票面触及的席位、接缝、术语在 docs/adr 与 CONTEXT.md 查全，票面引没引都算——并逐键列出其决策键；质量法、审刑院法典；
 
-**二、相抵。** 票面与法源有无抵触，有无与在飞票冲突。
+3 第二法源合法性检查：判断第二法源 以及 输入的 prombt等 对比第一法源是否有超出或不足，曲解。如有，除非有陛下原话批准，否则直接封驳 要求改正或陛下批准。
+
+**二、相抵。** 票面，相关票与在飞分支与法源有无抵触。
 
 **三、缺失。** 法源要求的，票面有没有漏：适用 ADR 未被引用即缺失，引用须写 `docs/adr/...md` 路径；ADR 每个决策键须有落点或明写「由 #x 承接」；验收面须覆盖票面每条主张；前置产物、决定、答复须在；承重主张的源头不存在、不支持、已过时，同为缺失。
 
@@ -39,9 +38,7 @@
 
 - 署（converged）——四步无碍、五问皆有据可答，具备开工资格；
 - 封驳（continue）——存在必须退回重议的问题；写明退给谁、缺什么、属哪一步；
-- 上呈（escalate）——授权存疑、法源冲突或须陛下取舍。**上呈原样抛给调用者。**
+- 上呈（escalate）——无法正常暑/封驳时。上呈求助
 
 
 主张必须附证据或法的具体条目。finding 提类别，同类一次说全（审刑院法典·审官纪律）。
-
-交卷后由符宝郎内闸核旨。无法解决的上抛陛下。

package/src/public-cli/cli.ts

@@ -28,6 +28,8 @@ import {
   setPersistentSeatConfig,
   setPersistentSeatEngine,
   setPersistentSeatHost,
+  setProviderHostAlias,
+  unsetProviderHostAlias,
   validatePublicCliConfigAxes,
   type CredentialProviders,
   type EffectiveSeat,
@@ -769,6 +771,7 @@ function renderHelp(): string {
     "Persistent config: ak-role config set <seat> <provider/model[:thinking]> | unset <gatekeeper|inspector|notary>",
     "Persistent engine (callable roles): ak-role config set-engine <seat> <name> | unset-engine <seat>",
     "Persistent host (callable roles): ak-role config set-host <seat> <name> | unset-host <seat>",
+    "Provider host alias: ak-role config set-provider-alias <provider> <host> <alias> | unset-provider-alias <provider> <host>",
     "Host resolution: --host → persistent seat host → pi (resume uses the same order; #617)",
     "Effective seats: ak-role roles",
   );
@@ -909,6 +912,16 @@ function renderConfig(config: PublicCliConfig): string {
   }
   // #422: show the effective auto-resume ceiling (configured value or default).
   lines.push(`autoResumeLimit\t${config.autoResumeLimit ?? AUTO_RESUME_LIMIT}`);
+  // #778: owner-registered provider→host aliases (disk face; seats stay as written).
+  const aliases = config.providerAliases;
+  if (aliases !== undefined) {
+    for (const provider of Object.keys(aliases).sort()) {
+      const byHost = aliases[provider]!;
+      for (const host of Object.keys(byHost).sort()) {
+        lines.push(`providerAlias\t${provider}\t${host}\t${byHost[host]}`);
+      }
+    }
+  }
   return `${lines.join("\n")}\n`;
 }
 
@@ -1081,6 +1094,47 @@ async function runConfigCommand(
     return 0;
   }
 
+  // #778: owner-registered provider→host alias (opaque strings; no host catalog).
+  if (args[0] === "set-provider-alias") {
+    if (args.length !== 4) {
+      throw new CliUsageError(
+        "usage: ak-role config set-provider-alias <provider> <host> <alias>",
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot);
+    try {
+      config = setProviderHostAlias(config, args[1]!, args[2]!, args[3]!);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error },
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
+
+  if (args[0] === "unset-provider-alias") {
+    if (args.length !== 3) {
+      throw new CliUsageError(
+        "usage: ak-role config unset-provider-alias <provider> <host>",
+      );
+    }
+    let config = await loadAndValidateConfig(home, packageRoot);
+    try {
+      config = unsetProviderHostAlias(config, args[1]!, args[2]!);
+    } catch (error) {
+      throw new CliUsageError(
+        error instanceof Error ? error.message : String(error),
+        { cause: error },
+      );
+    }
+    await savePublicCliConfig(config, home);
+    io.stdout(renderConfig(config));
+    return 0;
+  }
+
   throw new CliUsageError(`unknown config subcommand: ${args[0]}`);
 }
 

package/src/public-cli/config.ts

@@ -54,6 +54,15 @@ export type PersistentSeatConfig = {
   host?: string;
 };
 
+/**
+ * #778: owner-registered provider name by host. Keyed seat-table provider →
+ * host → host-facing provider. Package code carries the map only — no built-in
+ * pairs. Unregistered (provider, host) pairs pass the seat provider through.
+ */
+export type ProviderHostAliases = Readonly<
+  Record<string, Readonly<Record<string, string>>>
+>;
+
 export type PublicCliConfig = {
   seats: Partial<Record<PublicConfigurableSeat, PersistentSeatConfig>>;
   /**
@@ -63,6 +72,11 @@ export type PublicCliConfig = {
    * bound (ADR 0035).
    */
   autoResumeLimit?: number;
+  /**
+   * #778: owner-registered provider→host aliases. Sibling of `seats`; never
+   * invents pairs. Absent or empty means pure pass-through.
+   */
+  providerAliases?: ProviderHostAliases;
   /**
    * #592: opaque seat rows this build does not own. Carried through every
    * parse→save cycle so a write never silently erases neighboring-line rows
@@ -293,6 +307,81 @@ export function setAutoResumeLimit(
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
 
+function requireNonEmptyToken(value: string, label: string): string {
+  const trimmed = value.trim();
+  if (trimmed === "") {
+    throw new Error(`${label} must be a non-empty string`);
+  }
+  return trimmed;
+}
+
+/**
+ * #778: register one owner provider→host alias. Opaque strings only — no host
+ * catalog check and no built-in provider pairs. Sibling keys (seats included)
+ * are preserved.
+ */
+export function setProviderHostAlias(
+  config: PublicCliConfig,
+  provider: string,
+  host: string,
+  alias: string,
+): PublicCliConfig {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const to = requireNonEmptyToken(alias, "alias");
+  const previous = config.providerAliases ?? {};
+  return {
+    ...config,
+    providerAliases: {
+      ...previous,
+      [from]: {
+        ...(previous[from] ?? {}),
+        [hostName]: to,
+      },
+    },
+  };
+}
+
+/** #778: drop one owner provider→host alias. Empty map collapses to absent. */
+export function unsetProviderHostAlias(
+  config: PublicCliConfig,
+  provider: string,
+  host: string,
+): PublicCliConfig {
+  const from = requireNonEmptyToken(provider, "provider");
+  const hostName = requireNonEmptyToken(host, "host");
+  const previous = config.providerAliases;
+  if (previous === undefined || previous[from] === undefined) return config;
+  const { [hostName]: _dropped, ...restHosts } = previous[from]!;
+  const nextForProvider =
+    Object.keys(restHosts).length === 0 ? undefined : restHosts;
+  const { [from]: _provider, ...restProviders } = previous;
+  const nextAliases =
+    nextForProvider === undefined
+      ? restProviders
+      : { ...restProviders, [from]: nextForProvider };
+  if (Object.keys(nextAliases).length === 0) {
+    const { providerAliases: _gone, ...rest } = config;
+    return rest;
+  }
+  return { ...config, providerAliases: nextAliases };
+}
+
+/**
+ * #778: project seat-table provider through owner aliases for one host.
+ * Unregistered pairs return the seat selection unchanged (pass-through).
+ */
+export function applyProviderHostAlias(
+  selection: SeatModelConfig | undefined,
+  host: string,
+  aliases: ProviderHostAliases | undefined,
+): SeatModelConfig | undefined {
+  if (selection === undefined || aliases === undefined) return selection;
+  const mapped = aliases[selection.provider]?.[host];
+  if (mapped === undefined) return selection;
+  return { ...selection, provider: mapped };
+}
+
 /**
  * Config-parse seam: persistent call axes belong to PUBLIC_CALLABLE_ROLES;
  * engine names need only path-safety syntax (no closed material catalog;
@@ -387,6 +476,7 @@ export function buildSeatModelCliArgs(model: SeatModelConfig | undefined): strin
 function serializePublicCliConfig(config: PublicCliConfig): {
   seats: Record<string, unknown>;
   autoResumeLimit?: number;
+  providerAliases?: ProviderHostAliases;
 } {
   return {
     // Known seats win on any key clash; by construction the two maps are
@@ -398,9 +488,48 @@ function serializePublicCliConfig(config: PublicCliConfig): {
     ...(config.autoResumeLimit === undefined
       ? {}
       : { autoResumeLimit: config.autoResumeLimit }),
+    ...(config.providerAliases === undefined ||
+    Object.keys(config.providerAliases).length === 0
+      ? {}
+      : { providerAliases: config.providerAliases }),
   };
 }
 
+function parseProviderHostAliases(value: unknown): ProviderHostAliases {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("public CLI config.providerAliases must be an object");
+  }
+  const out: Record<string, Record<string, string>> = {};
+  for (const [provider, byHost] of Object.entries(value as Record<string, unknown>)) {
+    if (provider.trim() === "") {
+      throw new Error("public CLI config.providerAliases provider key must be non-empty");
+    }
+    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
+      throw new Error(
+        `public CLI config.providerAliases[${provider}] must be an object`,
+      );
+    }
+    const hosts: Record<string, string> = {};
+    for (const [host, alias] of Object.entries(byHost as Record<string, unknown>)) {
+      if (host.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}] host key must be non-empty`,
+        );
+      }
+      if (typeof alias !== "string" || alias.trim() === "") {
+        throw new Error(
+          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`,
+        );
+      }
+      hosts[host] = alias;
+    }
+    if (Object.keys(hosts).length > 0) {
+      out[provider] = hosts;
+    }
+  }
+  return out;
+}
+
 function parsePublicCliConfig(value: unknown): PublicCliConfig {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -408,6 +537,7 @@ function parsePublicCliConfig(value: unknown): PublicCliConfig {
   const record = value as {
     seats?: unknown;
     autoResumeLimit?: unknown;
+    providerAliases?: unknown;
     unknownSeats?: unknown;
   };
   // #422 round-trip preservation: the sibling top-level key must survive every
@@ -416,6 +546,15 @@ function parsePublicCliConfig(value: unknown): PublicCliConfig {
   if (record.autoResumeLimit !== undefined) {
     autoResumeLimit = parseAutoResumeLimit(record.autoResumeLimit);
   }
+  // #778: same survival duty as autoResumeLimit — owner aliases must not vanish
+  // on an unrelated seat write.
+  let providerAliases: ProviderHostAliases | undefined;
+  if (record.providerAliases !== undefined) {
+    const parsed = parseProviderHostAliases(record.providerAliases);
+    if (Object.keys(parsed).length > 0) {
+      providerAliases = parsed;
+    }
+  }
   // #592: opaque bucket may already be present on an in-memory round-trip
   // (load→set→save calls parse again). Carry it before seats iteration so a
   // disk-shaped seats map and a memory-shaped bucket both survive.
@@ -433,6 +572,7 @@ function parsePublicCliConfig(value: unknown): PublicCliConfig {
   const withOpaque = (seats: PublicCliConfig["seats"]): PublicCliConfig => ({
     seats,
     ...(autoResumeLimit === undefined ? {} : { autoResumeLimit }),
+    ...(providerAliases === undefined ? {} : { providerAliases }),
     ...(Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }),
   });
   if (record.seats === undefined) {
@@ -678,7 +818,23 @@ export function resolveEffectiveSeat(
     }
   }
 
-  return attachHostAxis(attachEngineAxis(modelSeat, config, invocation), config, invocation);
+  const withAxes = attachHostAxis(
+    attachEngineAxis(modelSeat, config, invocation),
+    config,
+    invocation,
+  );
+  // #778: host-facing provider is the seat-table value after owner aliases.
+  // Disk seats stay as written; only the effective selection is projected.
+  const selection = applyProviderHostAlias(
+    withAxes.selection,
+    withAxes.host,
+    config.providerAliases,
+  );
+  if (selection === undefined) {
+    const { selection: _dropped, ...rest } = withAxes;
+    return rest;
+  }
+  return { ...withAxes, selection };
 }
 
 export function effectiveSeatConfigurations(

package/src/public-cli/option-definitions.ts

@@ -1307,6 +1307,8 @@ const SUPPORT_COMMAND_HELP = {
       "ak-role config set-host <seat> <name>",
       "ak-role config unset-host <seat>",
       "ak-role config set-auto-resume-limit <N>",
+      "ak-role config set-provider-alias <provider> <host> <alias>",
+      "ak-role config unset-provider-alias <provider> <host>",
     ],
     examples: [
       "ak-role config set judge openai-codex/gpt-5.6-sol:high",
@@ -1314,6 +1316,7 @@ const SUPPORT_COMMAND_HELP = {
       "ak-role config set-engine judge opus",
       "ak-role config set-host judge grok-build",
       "ak-role config set-auto-resume-limit 3",
+      "ak-role config set-provider-alias xai hermes xai-oauth",
     ],
   },
   help: {