@akagilnc/pi-workflow-roles 0.1.3733 → 0.1.3741

package/dist/public-cli/main.js

@@ -15610,50 +15610,6 @@ function parseAutoResumeLimit(value) {
 function setAutoResumeLimit(config, limit) {
   return { ...config, autoResumeLimit: parseAutoResumeLimit(limit) };
 }
-function requireNonEmptyToken(value, label) {
-  const trimmed = value.trim();
-  if (trimmed === "") {
-    throw new Error(`${label} must be a non-empty string`);
-  }
-  return trimmed;
-}
-function setProviderHostAlias(config, provider, host, alias) {
-  const from = requireNonEmptyToken(provider, "provider");
-  const hostName = requireNonEmptyToken(host, "host");
-  const to = requireNonEmptyToken(alias, "alias");
-  const previous = config.providerAliases ?? {};
-  return {
-    ...config,
-    providerAliases: {
-      ...previous,
-      [from]: {
-        ...previous[from] ?? {},
-        [hostName]: to
-      }
-    }
-  };
-}
-function unsetProviderHostAlias(config, provider, host) {
-  const from = requireNonEmptyToken(provider, "provider");
-  const hostName = requireNonEmptyToken(host, "host");
-  const previous = config.providerAliases;
-  if (previous === void 0 || previous[from] === void 0) return config;
-  const { [hostName]: _dropped, ...restHosts } = previous[from];
-  const nextForProvider = Object.keys(restHosts).length === 0 ? void 0 : restHosts;
-  const { [from]: _provider, ...restProviders } = previous;
-  const nextAliases = nextForProvider === void 0 ? restProviders : { ...restProviders, [from]: nextForProvider };
-  if (Object.keys(nextAliases).length === 0) {
-    const { providerAliases: _gone, ...rest } = config;
-    return rest;
-  }
-  return { ...config, providerAliases: nextAliases };
-}
-function applyProviderHostAlias(selection, host, aliases) {
-  if (selection === void 0 || aliases === void 0) return selection;
-  const mapped = aliases[selection.provider]?.[host];
-  if (mapped === void 0) return selection;
-  return { ...selection, provider: mapped };
-}
 function validatePublicCliConfigAxes(config, _packageRoot) {
   for (const seat of Object.keys(config.seats)) {
     const row = config.seats[seat];
@@ -15713,44 +15669,9 @@ function serializePublicCliConfig(config) {
       ...config.unknownSeats ?? {},
       ...config.seats
     },
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
-    ...config.providerAliases === void 0 || Object.keys(config.providerAliases).length === 0 ? {} : { providerAliases: config.providerAliases }
+    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit }
   };
 }
-function parseProviderHostAliases(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("public CLI config.providerAliases must be an object");
-  }
-  const out = {};
-  for (const [provider, byHost] of Object.entries(value)) {
-    if (provider.trim() === "") {
-      throw new Error("public CLI config.providerAliases provider key must be non-empty");
-    }
-    if (byHost === null || typeof byHost !== "object" || Array.isArray(byHost)) {
-      throw new Error(
-        `public CLI config.providerAliases[${provider}] must be an object`
-      );
-    }
-    const hosts = {};
-    for (const [host, alias] of Object.entries(byHost)) {
-      if (host.trim() === "") {
-        throw new Error(
-          `public CLI config.providerAliases[${provider}] host key must be non-empty`
-        );
-      }
-      if (typeof alias !== "string" || alias.trim() === "") {
-        throw new Error(
-          `public CLI config.providerAliases[${provider}][${host}] must be a non-empty string`
-        );
-      }
-      hosts[host] = alias;
-    }
-    if (Object.keys(hosts).length > 0) {
-      out[provider] = hosts;
-    }
-  }
-  return out;
-}
 function parsePublicCliConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("public CLI config must be an object");
@@ -15760,13 +15681,6 @@ function parsePublicCliConfig(value) {
   if (record4.autoResumeLimit !== void 0) {
     autoResumeLimit = parseAutoResumeLimit(record4.autoResumeLimit);
   }
-  let providerAliases;
-  if (record4.providerAliases !== void 0) {
-    const parsed = parseProviderHostAliases(record4.providerAliases);
-    if (Object.keys(parsed).length > 0) {
-      providerAliases = parsed;
-    }
-  }
   const unknownSeats = {};
   if (record4.unknownSeats !== void 0) {
     if (record4.unknownSeats === null || typeof record4.unknownSeats !== "object" || Array.isArray(record4.unknownSeats)) {
@@ -15777,7 +15691,6 @@ function parsePublicCliConfig(value) {
   const withOpaque = (seats2) => ({
     seats: seats2,
     ...autoResumeLimit === void 0 ? {} : { autoResumeLimit },
-    ...providerAliases === void 0 ? {} : { providerAliases },
     ...Object.keys(unknownSeats).length === 0 ? {} : { unknownSeats }
   });
   if (record4.seats === void 0) {
@@ -15954,21 +15867,11 @@ function resolveEffectiveSeat(config, seat, credentials, invocation) {
       };
     }
   }
-  const withAxes = attachHostAxis(
+  return attachHostAxis(
     attachEngineAxis(modelSeat, config, invocation),
     config,
     invocation
   );
-  const selection = applyProviderHostAlias(
-    withAxes.selection,
-    withAxes.host,
-    config.providerAliases
-  );
-  if (selection === void 0) {
-    const { selection: _dropped, ...rest } = withAxes;
-    return rest;
-  }
-  return { ...withAxes, selection };
 }
 function effectiveSeatConfigurations(config, credentials, invocation) {
   return PUBLIC_CONFIGURABLE_SEATS.map(
@@ -16012,6 +15915,170 @@ var init_config2 = __esm({
   }
 });
 
+// src/public-cli/host-providers.ts
+import { readFileSync } from "node:fs";
+import { join as join6 } from "node:path";
+function hostProvidersPath(home) {
+  if (typeof home !== "string" || home.trim() === "") {
+    throw new Error("home must be explicitly provided");
+  }
+  return join6(home, ".ak-roles", "host-providers.json");
+}
+function hermesProviderModelsCachePath(home) {
+  return join6(home, ".hermes", "provider_models_cache.json");
+}
+function parseHostProvidersTable(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("host-providers.json must be an object");
+  }
+  const out = {};
+  for (const [host, byProvider] of Object.entries(value)) {
+    if (host.trim() === "") {
+      throw new Error("host-providers.json host key must be non-empty");
+    }
+    if (byProvider === null || typeof byProvider !== "object" || Array.isArray(byProvider)) {
+      throw new Error(`host-providers.json[${host}] must be an object`);
+    }
+    const providers = {};
+    for (const [seatProvider, hostProvider] of Object.entries(
+      byProvider
+    )) {
+      if (seatProvider.trim() === "") {
+        throw new Error(
+          `host-providers.json[${host}] seat-provider key must be non-empty`
+        );
+      }
+      if (typeof hostProvider !== "string" || hostProvider.trim() === "") {
+        throw new Error(
+          `host-providers.json[${host}][${seatProvider}] must be a non-empty string`
+        );
+      }
+      providers[seatProvider] = hostProvider;
+    }
+    if (Object.keys(providers).length > 0) {
+      out[host] = providers;
+    }
+  }
+  return out;
+}
+function loadHostProvidersTable(home) {
+  const path = hostProvidersPath(home);
+  try {
+    const raw = readFileSync(path, "utf8");
+    return parseHostProvidersTable(JSON.parse(raw));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return {};
+    }
+    throw error;
+  }
+}
+function hostCatalogOffersModel(catalogModels, seatModel) {
+  return catalogModels.some(
+    (entry) => entry === seatModel || entry.endsWith(`/${seatModel}`)
+  );
+}
+function listHermesProvidersForModel(home, seatModel) {
+  const path = hermesProviderModelsCachePath(home);
+  let text;
+  try {
+    text = readFileSync(path, "utf8");
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return [];
+    }
+    throw error;
+  }
+  const raw = JSON.parse(text);
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+    throw new Error(
+      `hermes provider_models_cache.json must be an object: ${path}`
+    );
+  }
+  const found = [];
+  for (const [provider, entry] of Object.entries(raw)) {
+    if (entry === null || typeof entry !== "object" || Array.isArray(entry)) {
+      continue;
+    }
+    const models = entry.models;
+    if (!Array.isArray(models)) continue;
+    const names = models.filter((m) => typeof m === "string");
+    if (hostCatalogOffersModel(names, seatModel)) {
+      found.push(provider);
+    }
+  }
+  return found.sort();
+}
+function listDirectoryProvidersForModel(home, host, seatModel) {
+  if (host === "hermes") {
+    return listHermesProvidersForModel(home, seatModel);
+  }
+  return void 0;
+}
+function projectHostFacingProvider(selection, host, table, home) {
+  if (selection === void 0) return void 0;
+  const mapped = table[host]?.[selection.provider];
+  if (mapped !== void 0) {
+    return mapped === selection.provider ? selection : { ...selection, provider: mapped };
+  }
+  const directory = listDirectoryProvidersForModel(home, host, selection.model);
+  if (directory === void 0) {
+    return selection;
+  }
+  if (directory.length === 1) {
+    const only = directory[0];
+    return only === selection.provider ? selection : { ...selection, provider: only };
+  }
+  if (directory.length === 0) {
+    throw new HostProviderResolutionError({
+      message: `host ${host} has no provider offering model ${selection.model}; seat provider was ${selection.provider}`,
+      host,
+      seatProvider: selection.provider,
+      seatModel: selection.model
+    });
+  }
+  throw new HostProviderResolutionError({
+    message: `host ${host} has multiple providers for model ${selection.model}: ${directory.join(", ")}; set host-providers.json[${host}][${selection.provider}] to one of them`,
+    host,
+    seatProvider: selection.provider,
+    seatModel: selection.model,
+    candidates: directory
+  });
+}
+function renderHostProvidersTable(table) {
+  const lines = [];
+  for (const host of Object.keys(table).sort()) {
+    const byProvider = table[host];
+    for (const seatProvider of Object.keys(byProvider).sort()) {
+      lines.push(
+        `hostProvider	${host}	${seatProvider}	${byProvider[seatProvider]}`
+      );
+    }
+  }
+  return lines.length === 0 ? "" : `${lines.join("\n")}
+`;
+}
+var HostProviderResolutionError;
+var init_host_providers = __esm({
+  "src/public-cli/host-providers.ts"() {
+    "use strict";
+    HostProviderResolutionError = class extends Error {
+      host;
+      seatProvider;
+      seatModel;
+      candidates;
+      constructor(options) {
+        super(options.message);
+        this.name = "HostProviderResolutionError";
+        this.host = options.host;
+        this.seatProvider = options.seatProvider;
+        this.seatModel = options.seatModel;
+        this.candidates = options.candidates ?? [];
+      }
+    };
+  }
+});
+
 // src/public-cli/cli-errors.ts
 var CliUsageError;
 var init_cli_errors = __esm({
@@ -16032,15 +16099,15 @@ var init_cli_errors = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync3 } from "node:fs";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot2, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join6(packageRoot2, "dist/acp-host/production-host.js");
-  const source = join6(packageRoot2, "src/acp-host/production-host.ts");
+  const built = join7(packageRoot2, "dist/acp-host/production-host.js");
+  const source = join7(packageRoot2, "src/acp-host/production-host.ts");
   const target = existsSync3(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -16122,11 +16189,11 @@ import { createHash as createHash2, randomUUID } from "node:crypto";
 import {
   appendFileSync,
   existsSync as existsSync4,
-  readFileSync,
+  readFileSync as readFileSync2,
   unlinkSync,
   writeFileSync
 } from "node:fs";
-import { basename as basename3, dirname as dirname5, join as join7, resolve as resolve3 } from "node:path";
+import { basename as basename3, dirname as dirname5, join as join8, resolve as resolve3 } from "node:path";
 function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -16142,14 +16209,14 @@ function createExclusiveFile(path, contents) {
 }
 function sealTornTail(recordFile) {
   if (!existsSync4(recordFile)) return;
-  const buffer = readFileSync(recordFile);
+  const buffer = readFileSync2(recordFile);
   if (buffer.length > 0 && buffer[buffer.length - 1] !== 10) {
     appendFileSync(recordFile, "\n", "utf8");
   }
 }
 function findIdentityPointer(recordFile, identity, kind, level) {
   if (!existsSync4(recordFile)) return void 0;
-  const text = readFileSync(recordFile, "utf8");
+  const text = readFileSync2(recordFile, "utf8");
   for (const line2 of text.split("\n")) {
     const trimmed = line2.trim();
     if (!trimmed) continue;
@@ -16265,7 +16332,7 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
   let sessionDir;
   if (input.sessionParent !== void 0 && input.sessionParent.length > 0 && physicallyContainedIn(ledgerHome, input.sessionParent)) {
-    sessionDir = join7(dirname5(input.sessionParent), category);
+    sessionDir = join8(dirname5(input.sessionParent), category);
   } else {
     const bookKey = safeBookKey(cwd);
     const bookDir = activationBookDirectory(ledgerHome, bookKey);
@@ -16279,12 +16346,12 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
         subjectStr = JSON.stringify(input.subject);
       }
       const digest = createHash2("sha256").update(subjectStr).digest("hex").slice(0, 32);
-      sessionDir = join7(bookDir, category, digest);
+      sessionDir = join8(bookDir, category, digest);
     } else {
-      sessionDir = join7(bookDir, category);
+      sessionDir = join8(bookDir, category);
     }
   }
-  const recordFile = join7(sessionDir, "records.jsonl");
+  const recordFile = join8(sessionDir, "records.jsonl");
   return { sessionDir, recordFile, ledgerHome };
 }
 function resolveSitianRecordPath(input) {
@@ -16405,12 +16472,12 @@ var init_sitian_facade = __esm({
 import { execFile, spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
-import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join8, resolve as resolve4 } from "node:path";
+import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join9, resolve as resolve4 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot2) {
-  return join8(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
+  return join9(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -16755,7 +16822,7 @@ var init_role_turn_host = __esm({
 
 // src/run-ticket-number.ts
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 function isEnoent(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -16768,7 +16835,7 @@ function ticketFromRecord(record4) {
 }
 async function readPageTicketNumber(runDirectory, page) {
   try {
-    const raw = JSON.parse(await readFile4(join9(runDirectory, page), "utf8"));
+    const raw = JSON.parse(await readFile4(join10(runDirectory, page), "utf8"));
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
       return void 0;
     }
@@ -17321,9 +17388,9 @@ var init_uuidv7 = __esm({
 
 // src/typed-provider-http.ts
 import { readFile as readFile7, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join10(runDirectory, TYPED_HTTP_FILE);
+  return join11(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -17368,7 +17435,7 @@ var init_typed_provider_http = __esm({
 
 // src/public-cli/run-lifecycle.ts
 import { chmod, open, readdir as readdir2, readFile as readFile8, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute4, join as join11 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join12 } from "node:path";
 function resumeRereadInstruction(materialPath, handbook) {
   return handbook ? `\u91CD\u65B0\u8BFB ${materialPath}\uFF0C\u518D\u7EC4\u88C5\u5916\u5305 argv` : `\u91CD\u65B0\u8BFB ${materialPath}`;
 }
@@ -17416,7 +17483,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile3(
-    join11(runDirectory, RUN_STATE_FILE),
+    join12(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -17466,7 +17533,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile8(join11(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile8(join12(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch {
     return void 0;
   }
@@ -17533,7 +17600,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile3(
-    join11(runDirectory, RUN_STATE_FILE),
+    join12(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -17777,15 +17844,15 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportCleanupFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join11(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join11(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join11(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join12(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -17835,7 +17902,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join11(ledgerHome, "books");
+  const booksRoot = join12(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir2(booksRoot);
@@ -17843,7 +17910,7 @@ async function findRunDirectoryById(home, runId) {
     return void 0;
   }
   for (const bookKey of bookKeys) {
-    const runsDir = join11(activationBookDirectory(ledgerHome, bookKey), "runs");
+    const runsDir = join12(activationBookDirectory(ledgerHome, bookKey), "runs");
     let entries;
     try {
       entries = await readdir2(runsDir);
@@ -17852,7 +17919,7 @@ async function findRunDirectoryById(home, runId) {
     }
     for (const entry of entries) {
       if (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) {
-        return join11(runsDir, entry);
+        return join12(runsDir, entry);
       }
     }
   }
@@ -17867,7 +17934,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile8(join11(runDirectory, "admitted-request.json"), "utf8")
+      await readFile8(join12(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -17887,7 +17954,7 @@ async function readRunParentPath(runDirectory) {
 }
 async function findLatestRunIdForSeatTicket(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
-  const runsDir = join11(
+  const runsDir = join12(
     activationBookDirectory(ledgerHome, input.bookKey),
     "runs"
   );
@@ -17904,7 +17971,7 @@ async function findLatestRunIdForSeatTicket(input) {
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
-    const runDirectory = join11(runsDir, entry);
+    const runDirectory = join12(runsDir, entry);
     if (input.parentRunPath !== void 0) {
       const parentPath = await readRunParentPath(runDirectory);
       if (parentPath !== input.parentRunPath) continue;
@@ -18089,7 +18156,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile8(join11(run.runDirectory, "invocation.json"), "utf8")
+      await readFile8(join12(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -18497,7 +18564,7 @@ __export(notary_source_run_exports, {
   loadNotarySourceRunLocator: () => loadNotarySourceRunLocator,
   resolveNotarySourceRunLocator: () => resolveNotarySourceRunLocator
 });
-import { dirname as dirname7, isAbsolute as isAbsolute5, join as join12, resolve as resolve6, basename as basename4 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute5, join as join13, resolve as resolve6, basename as basename4 } from "node:path";
 import { lstat as lstat2, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -18543,11 +18610,11 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join12(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookRunsRoot = join13(activationBookDirectory(ledgerHome, bookKey), "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = join12(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = join13(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute5(raw) ? raw : resolve6(options.projectRoot, raw);
   }
@@ -19608,7 +19675,7 @@ var init_option_definitions = __esm({
       },
       config: {
         command: "config",
-        summary: "Persistent seat model, labor-engine, host, and auto-resume defaults.",
+        summary: "Persistent seat model, labor-engine, host, and auto-resume defaults. Host providers live in ~/.ak-roles/host-providers.json (owner-edited).",
         usage: [
           "ak-role config set <seat> <provider/model[:thinking]> [<seat> <spec> ...]",
           "ak-role config unset <gatekeeper|inspector|notary>",
@@ -19616,17 +19683,14 @@ var init_option_definitions = __esm({
           "ak-role config unset-engine <seat>",
           "ak-role config set-host <seat> <name>",
           "ak-role config unset-host <seat>",
-          "ak-role config set-auto-resume-limit <N>",
-          "ak-role config set-provider-alias <provider> <host> <alias>",
-          "ak-role config unset-provider-alias <provider> <host>"
+          "ak-role config set-auto-resume-limit <N>"
         ],
         examples: [
           "ak-role config set judge openai-codex/gpt-5.6-sol:high",
           "ak-role config unset gatekeeper",
           "ak-role config set-engine judge opus",
           "ak-role config set-host judge grok-build",
-          "ak-role config set-auto-resume-limit 3",
-          "ak-role config set-provider-alias xai hermes xai-oauth"
+          "ak-role config set-auto-resume-limit 3"
         ]
       },
       help: {
@@ -19674,11 +19738,11 @@ import {
   realpath as realpath4,
   writeFile as writeFile4
 } from "node:fs/promises";
-import { basename as basename5, isAbsolute as isAbsolute6, join as join13, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename5, isAbsolute as isAbsolute6, join as join14, resolve as resolve7, sep as sep3 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const principal = authority.issue(request);
   const { sessionDirectory, sessionFile } = authority.decode(principal);
-  const runDirectory = join13(sessionDirectory, "..");
+  const runDirectory = join14(sessionDirectory, "..");
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
   return {
@@ -19726,14 +19790,14 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile4(
-    join13(source.runDirectory, "invocation.json"),
+    join14(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host) {
-  const ledgerPath = join13(runDirectory, "invocation.json");
+  const ledgerPath = join14(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
@@ -19761,7 +19825,7 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host)
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join13(runDirectory, "invocation.json");
+  const ledgerPath = join14(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
   await writeFile4(
     ledgerPath,
@@ -19822,7 +19886,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile9(join13(rolePackageRoot, "package.json"), "utf8")
+    await readFile9(join14(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -20069,7 +20133,7 @@ async function freezeRegularFileAttachment(sourcePath, destinationDir, index) {
   }
   const bytes = await readFile9(absolute);
   const name = `${String(index).padStart(2, "0")}-${basename5(absolute)}`;
-  const frozenPath = join13(destinationDir, name);
+  const frozenPath = join14(destinationDir, name);
   await writeFile4(frozenPath, bytes);
   return {
     attachment: {
@@ -20097,7 +20161,7 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join13(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join14(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
@@ -20123,7 +20187,7 @@ async function admitStandardMaterialInvocation(role, options) {
     role,
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20148,7 +20212,7 @@ async function admitStandardMaterialInvocation(role, options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20226,7 +20290,7 @@ async function admitCountersignInvocation(options) {
     role: "countersign",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20250,7 +20314,7 @@ async function admitCountersignInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20274,7 +20338,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
   return buildInstructionTransportPrompt(admitted, engineMaterial);
 }
 async function ensureRunArtifactsDir(runDirectory) {
-  const dir = join13(runDirectory, "artifacts");
+  const dir = join14(runDirectory, "artifacts");
   await mkdir2(dir, { recursive: true });
   return dir;
 }
@@ -20306,11 +20370,11 @@ async function admitCoderInvocation(options) {
     role: "coder",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
-  const taskPath = join13(runDirectory, "task.md");
+  const taskPath = join14(runDirectory, "task.md");
   await writeFile4(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
@@ -20331,7 +20395,7 @@ async function admitCoderInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20412,13 +20476,13 @@ async function admitFixerInvocation(options) {
     role: "fixer",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
-    prerequisitesPath = join13(runDirectory, "prerequisites.json");
+    prerequisitesPath = join14(runDirectory, "prerequisites.json");
     await writeFile4(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
@@ -20426,7 +20490,7 @@ async function admitFixerInvocation(options) {
       "utf8"
     );
   }
-  const packetPath = join13(runDirectory, "fix-packet.md");
+  const packetPath = join14(runDirectory, "fix-packet.md");
   await writeFile4(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
@@ -20452,7 +20516,7 @@ async function admitFixerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20661,13 +20725,13 @@ async function admitCollectorInvocation(options) {
     role: "collector",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
-    requestManifestPath = join13(runDirectory, "request-manifest.json");
+    requestManifestPath = join14(runDirectory, "request-manifest.json");
     await writeFile4(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const instruction = options.instruction ?? "";
@@ -20694,7 +20758,7 @@ async function admitCollectorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20791,7 +20855,7 @@ function parseDoctorArgv(args) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join13(
+  const defaultRuns = join14(
     activationBookDirectory(ledgerHome, options.bookKey),
     "issues",
     String(options.issueNumber),
@@ -20898,7 +20962,7 @@ async function admitDoctorInvocation(options) {
       { cause: error }
     );
   }
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
@@ -20924,7 +20988,7 @@ async function admitDoctorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21056,7 +21120,7 @@ async function admitNotaryInvocation(options) {
     ...ticketFields,
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21158,7 +21222,7 @@ async function admitGleanerLeftInvocation(options) {
     attachments: [],
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21263,7 +21327,7 @@ async function admitReviewerInvocation(options) {
     role: "reviewer",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21288,7 +21352,7 @@ async function admitReviewerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21415,7 +21479,7 @@ async function admitMergerInvocation(options) {
     role: "merger",
     home: options.home
   });
-  const attachmentsDirectory = join13(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21443,7 +21507,7 @@ async function admitMergerInvocation(options) {
     // Authorized checks remain available on the assignment; default none.
     authorizedChecks: []
   });
-  const mergerInputPath = join13(runDirectory, "merger-input.json");
+  const mergerInputPath = join14(runDirectory, "merger-input.json");
   await writeFile4(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
@@ -21475,7 +21539,7 @@ async function admitMergerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join13(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21766,7 +21830,7 @@ var init_invocation = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash4 } from "node:crypto";
 import { readFile as readFile10, realpath as realpath5 } from "node:fs/promises";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -21783,10 +21847,10 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot2, name) {
-  return join14(packageRoot2, packagedMethodSkillRelativeDirectory(name));
+  return join15(packageRoot2, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot2, name) {
-  return join14(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
+  return join15(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
 }
 function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -21880,8 +21944,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot2, name);
-  const skillPathConfigured = join14(rootDirectory, "SKILL.md");
-  const provenancePath = join14(rootDirectory, "provenance.json");
+  const skillPathConfigured = join15(rootDirectory, "SKILL.md");
+  const provenancePath = join15(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile10(provenancePath, "utf8");
@@ -21898,7 +21962,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join14(rootDirectory, rel);
+    const absolute = join15(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile10(absolute);
@@ -22200,7 +22264,7 @@ var init_ledger_session_read = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir3 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -22462,7 +22526,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join15(directory, name);
+      const path = join16(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -22505,7 +22569,7 @@ var init_analyst_gate_cycles_read = __esm({
 
 // src/run-terminal-artifacts.ts
 import { readdir as readdir4, readFile as readFile12 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname8, join as join16 } from "node:path";
+import { basename as basename6, dirname as dirname8, join as join17 } from "node:path";
 function isMissingPathError2(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -22580,7 +22644,7 @@ async function listUniqueErrorFallbackPaths(directories) {
     }
     for (const name of names.sort((a, b) => a.localeCompare(b))) {
       if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join16(dir, name));
+      found.push(join17(dir, name));
     }
   }
   return found;
@@ -22596,14 +22660,14 @@ function presentUniqueFallbackBoundToRun(body, expectedRunId) {
   return typeof body.runId === "string" && body.runId === expectedRunId;
 }
 async function readRunTerminalArtifact(runDirectory) {
-  const artifactsDir = join16(runDirectory, "artifacts");
+  const artifactsDir = join17(runDirectory, "artifacts");
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    const path = join16(artifactsDir, file);
+    const path = join17(artifactsDir, file);
     const read3 = await readTerminalArtifactAtPath(path, file);
     if (read3 !== void 0) return read3;
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    const path = join16(runDirectory, relative3);
+    const path = join17(runDirectory, relative3);
     const read3 = await readTerminalArtifactAtPath(path, "error.json");
     if (read3 !== void 0) return read3;
   }
@@ -22743,12 +22807,12 @@ var init_submission_ledger = __esm({
 // src/session-opening-materials.ts
 import { existsSync as existsSync6 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname9, join as join17 } from "node:path";
+import { dirname as dirname9, join as join18 } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
   let dir = dirname9(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync6(join17(dir, "package.json")) && existsSync6(join17(dir, "souls"))) {
+    if (existsSync6(join18(dir, "package.json")) && existsSync6(join18(dir, "souls"))) {
       return dir;
     }
     const parent = dirname9(dir);
@@ -23028,12 +23092,12 @@ var init_reviewer_dispatch = __esm({
 
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { readFile as readFile14, unlink as unlink3 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join18(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join19(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 async function clearReviewerDispatchRejection(runDirectory) {
   try {
@@ -23449,7 +23513,7 @@ var init_terminal = __esm({
 // src/public-cli/settlement.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname10, join as join19 } from "node:path";
+import { dirname as dirname10, join as join20 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -23850,7 +23914,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join19(dirname10(sessionFile), "evidence-children");
+  const childDirectory = join20(dirname10(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir5(childDirectory);
@@ -23861,7 +23925,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join19(childDirectory, file));
+      entries = await readBoundSessionEntries(join20(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
@@ -23915,7 +23979,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join19(dirname10(sessionFile), "auditor-roles")];
+  const childDirectories = [join20(dirname10(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -23930,7 +23994,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join19(childDirectory, file));
+        entries = await readBoundSessionEntries(join20(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -24462,8 +24526,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join19(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join19(sessionDirectory, "session.jsonl");
+  const directories = [join20(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join20(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -24561,8 +24625,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -24606,8 +24670,8 @@ async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
 async function publishCoderArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -24758,8 +24822,8 @@ function extractFixerMethodInvocations(entries, options) {
 async function publishFixerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -24849,8 +24913,8 @@ async function settleLawfulFixerTerminalResult(admitted, authority, options) {
 async function publishCollectorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -24957,8 +25021,8 @@ async function trySettleCollectorTerminalResult(admitted, authority) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25218,8 +25282,8 @@ function extractReviewerMethodInvocations(entries, options) {
 async function publishReviewerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25333,8 +25397,8 @@ function extractMergerMethodInvocations(entries, options) {
 async function publishMergerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join19(artifactsDir, "report.json");
-  const evidencePath = join19(artifactsDir, "evidence.json");
+  const reportPath = join20(artifactsDir, "report.json");
+  const evidencePath = join20(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25479,7 +25543,7 @@ function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   return dirs;
 }
 async function resolveFailureArtifactsBase(runDirectory) {
-  const artifactsDir = join19(runDirectory, "artifacts");
+  const artifactsDir = join20(runDirectory, "artifacts");
   try {
     await ensureRunArtifactsDir(runDirectory);
     return { baseDir: artifactsDir };
@@ -25495,7 +25559,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join19(dir, `${stem}.${randomUUID3()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join20(dir, `${stem}.${randomUUID3()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -25540,26 +25604,26 @@ async function publishFailureArtifacts(admitted, failure, authority) {
   } catch (error) {
     priorIssues.push(publicationAttemptFromError(sessionFile, error));
   }
-  const underArtifacts = baseDir === join19(admitted.runDirectory, "artifacts");
+  const underArtifacts = baseDir === join20(admitted.runDirectory, "artifacts");
   const uniqueFallbackDirs = uniqueFailureFallbackDirs(
     admitted.runDirectory,
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join19(baseDir, "error.json"),
-    join19(baseDir, "error.settlement.json"),
-    join19(admitted.runDirectory, "error.settlement.json")
+    join20(baseDir, "error.json"),
+    join20(baseDir, "error.settlement.json"),
+    join20(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join19(baseDir, "error.settlement.json"),
-    join19(baseDir, "error.json")
+    join20(baseDir, "error.settlement.json"),
+    join20(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join19(baseDir, "evidence.json"),
-    join19(baseDir, "evidence.settlement.json"),
-    join19(admitted.runDirectory, "evidence.settlement.json")
+    join20(baseDir, "evidence.json"),
+    join20(baseDir, "evidence.settlement.json"),
+    join20(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join19(baseDir, "evidence.settlement.json"),
-    join19(baseDir, "evidence.json")
+    join20(baseDir, "evidence.settlement.json"),
+    join20(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -25842,7 +25906,7 @@ var init_ticket_provenance_contracts = __esm({
 });
 
 // src/ticket-provenance.ts
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
     throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
@@ -25860,7 +25924,7 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   return {
     recordFile: path.recordFile,
     volumeDir: path.sessionDir,
-    humanViewFile: join20(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
+    humanViewFile: join21(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
   };
 }
 var init_ticket_provenance = __esm({
@@ -25910,7 +25974,7 @@ var init_case_dossier_delivery = __esm({
 
 // src/host-transition-prior-native.ts
 import { access as access2, readdir as readdir6 } from "node:fs/promises";
-import { dirname as dirname11, join as join21 } from "node:path";
+import { dirname as dirname11, join as join22 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -25935,7 +25999,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join21(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join22(sessionRoot, entry.name, "records.jsonl");
     try {
       await access2(recordFile);
       recordPaths.push(recordFile);
@@ -26005,7 +26069,7 @@ var init_public_run_credentials = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
     presentFailureTerminal(terminal, io);
@@ -26024,7 +26088,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
   }
 }
 function runArtifactsDirectory(runDirectory) {
-  return join22(runDirectory, "artifacts");
+  return join23(runDirectory, "artifacts");
 }
 async function ensureRealArtifactsDirectory(runDirectory) {
   const runStat = await lstat5(runDirectory);
@@ -26107,7 +26171,7 @@ function jsonSafeReplacer() {
 }
 async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
   const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-  const filePath = join22(
+  const filePath = join23(
     artifactsDir,
     `dispatch-error-attempt-${attempt}-${randomUUID4()}.json`
   );
@@ -26356,7 +26420,7 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { readFile as readFile16, writeFile as writeFile6 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join23, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join24, resolve as resolve8 } from "node:path";
 function appendContinuationSection(continuation, section) {
   const prompt = `${continuation.prompt}
 
@@ -26365,7 +26429,7 @@ ${section}`;
 }
 async function readInvocationHost(runDirectory) {
   try {
-    const raw = JSON.parse(await readFile16(join23(runDirectory, "invocation.json"), "utf8"));
+    const raw = JSON.parse(await readFile16(join24(runDirectory, "invocation.json"), "utf8"));
     return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
@@ -26519,7 +26583,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     try {
       await writeFile6(
-        join23(admitted.runDirectory, "stderr.log"),
+        join24(admitted.runDirectory, "stderr.log"),
         result2.stderr,
         "utf8"
       );
@@ -26628,7 +26692,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute7(attachmentPath) ? attachmentPath : resolve8(attachmentPath);
-  return pathContainedIn(join23(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join24(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -28796,7 +28860,7 @@ var init_judge_run = __esm({
 
 // src/public-cli/merger-run.ts
 import { mkdir as mkdir5, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join24, resolve as resolve9 } from "node:path";
+import { join as join25, resolve as resolve9 } from "node:path";
 function mergerMethods(packageRoot2) {
   return [
     {
@@ -28862,8 +28926,8 @@ async function admitMergerShellForActivationFailure(options) {
     expectedConflictPaths: [],
     resolutionScope: []
   };
-  const admittedRequestPath = join24(runDirectory, "admitted-request.json");
-  const mergerInputPath = join24(runDirectory, "merger-input.json");
+  const admittedRequestPath = join25(runDirectory, "admitted-request.json");
+  const mergerInputPath = join25(runDirectory, "merger-input.json");
   await writeFile7(
     admittedRequestPath,
     `${JSON.stringify(
@@ -29303,10 +29367,10 @@ var init_analyst_book_key = __esm({
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { rename, rm, writeFile as writeFile8 } from "node:fs/promises";
-import { dirname as dirname12, join as join25 } from "node:path";
+import { dirname as dirname12, join as join26 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname12(destination);
-  const temporary = join25(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join26(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
     await writeFile8(temporary, contents);
     await rename(temporary, destination);
@@ -29323,7 +29387,7 @@ var init_atomic_write = __esm({
 
 // src/analyst-index.ts
 import { open as open3, readFile as readFile17, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname13, join as join26 } from "node:path";
+import { dirname as dirname13, join as join27 } from "node:path";
 function sleep(ms) {
   return new Promise((resolve11) => {
     setTimeout(resolve11, ms);
@@ -29332,7 +29396,7 @@ function sleep(ms) {
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname13(indexPath));
-  const lockPath = join26(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join27(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29359,7 +29423,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join26(ledgerHome, "analyst", "library-index.json");
+  return join27(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -29655,7 +29719,7 @@ var init_analyst_cohort = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir7, readFile as readFile18 } from "node:fs/promises";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -29668,7 +29732,7 @@ function isRecord15(value) {
 async function readExistingRunLifecycleState(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile18(join27(runDirectory, "run-state.json"), "utf8")
+      await readFile18(join28(runDirectory, "run-state.json"), "utf8")
     );
     if (!isRecord15(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
@@ -29700,7 +29764,7 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile18(join27(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile18(join28(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError5(error)) return void 0;
     throw error;
@@ -29732,7 +29796,7 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile18(join27(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile18(join28(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (isRecord15(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
@@ -29740,7 +29804,7 @@ async function resolveSessionFile(runDirectory) {
   } catch (error) {
     if (!isMissingPathError5(error)) throw error;
   }
-  return join27(runDirectory, "session", "session.jsonl");
+  return join28(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -29912,9 +29976,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join27(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join28(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join27(input.runDirectory, "session", "auditor-roles"),
+      join28(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -29947,7 +30011,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join27(ledgerHome, "books");
+  const booksRoot = join28(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -29979,7 +30043,7 @@ async function scanAnalystIssueRuns(input) {
   const unreadable = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const runsDir = join27(booksRoot, book, "runs");
+    const runsDir = join28(booksRoot, book, "runs");
     let runNames;
     try {
       const entries = await readdir7(runsDir, { withFileTypes: true });
@@ -29991,7 +30055,7 @@ async function scanAnalystIssueRuns(input) {
     for (const runName of runNames) {
       const parsed = parseRunDirectoryName2(runName);
       if (parsed === void 0) continue;
-      const runDirectory = join27(runsDir, runName);
+      const runDirectory = join28(runsDir, runName);
       let scopeFields;
       try {
         scopeFields = await readInvocationScopeFields(runDirectory);
@@ -30845,7 +30909,7 @@ var init_analyst_metric_family = __esm({
 
 // src/analyst-page.ts
 import { createHash as createHash5 } from "node:crypto";
-import { dirname as dirname14, join as join28 } from "node:path";
+import { dirname as dirname14, join as join29 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -30856,7 +30920,7 @@ function analystIssuePageKey(address) {
   return createHash5("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join28(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join29(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31389,7 +31453,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function takePublicGlobalFlag(argv, index, options) {
   const tokens = argv.slice(index);
   const taken = options.takeDashed(tokens);
@@ -31475,23 +31539,30 @@ function createRoleEnvironment(env, options) {
   const role = options.role;
   const extraPiArgs = role === "coder" ? env.coderExtraPiArgs : role === "fixer" ? env.fixerExtraPiArgs : role === "reviewer" ? env.reviewerExtraPiArgs : role === "merger" ? env.mergerExtraPiArgs : role === "judge" ? env.judgeExtraPiArgs : role === "collector" ? env.collectorExtraPiArgs : role === "doctor" ? env.doctorExtraPiArgs : role === "notary" ? env.notaryExtraPiArgs : void 0;
   const timeoutMs = role === "coder" ? env.coderTimeoutMs : role === "fixer" ? env.fixerTimeoutMs : role === "reviewer" ? env.reviewerTimeoutMs : role === "merger" ? env.mergerTimeoutMs : role === "judge" ? env.judgeTimeoutMs : role === "collector" ? env.collectorTimeoutMs : role === "doctor" ? env.doctorTimeoutMs : role === "notary" ? env.notaryTimeoutMs : void 0;
+  const roleTurnHost = resolveRoleTurnHost(env, {
+    role,
+    seat: options.seat,
+    principalAuthority: env.principalAuthority,
+    ...extraPiArgs === void 0 ? {} : { extraPiArgs },
+    ...timeoutMs === void 0 ? {} : { timeoutMs }
+  });
+  const hostFacingSelection = options.seat.selection === void 0 ? void 0 : projectHostFacingProvider(
+    options.seat.selection,
+    options.seat.host,
+    loadHostProvidersTable(options.home),
+    options.home
+  );
   return {
     home: options.home,
     principalAuthority: env.principalAuthority,
     agentDir: options.agentDir,
     sessionAppender: appendPiSessionCustomEntry,
     packageRoot: env.packageRoot,
-    roleTurnHost: resolveRoleTurnHost(env, {
-      role,
-      seat: options.seat,
-      principalAuthority: env.principalAuthority,
-      ...extraPiArgs === void 0 ? {} : { extraPiArgs },
-      ...timeoutMs === void 0 ? {} : { timeoutMs }
-    }),
+    roleTurnHost,
     cwd: options.cwd,
     ...options.credentials === void 0 ? {} : { credentials: options.credentials },
     ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
-    ...options.seat.selection === void 0 ? {} : { model: options.seat.selection },
+    ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
     ...projectSeatEngine(options.seat),
     ...projectSeatHost(options.seat),
     ...timeoutMs === void 0 ? {} : { timeoutMs },
@@ -31521,7 +31592,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join29(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join30(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -31726,7 +31797,7 @@ function renderHelp() {
     "Persistent config: ak-role config set <seat> <provider/model[:thinking]> | unset <gatekeeper|inspector|notary>",
     "Persistent engine (callable roles): ak-role config set-engine <seat> <name> | unset-engine <seat>",
     "Persistent host (callable roles): ak-role config set-host <seat> <name> | unset-host <seat>",
-    "Provider host alias: ak-role config set-provider-alias <provider> <host> <alias> | unset-provider-alias <provider> <host>",
+    "Host providers: ~/.ak-roles/host-providers.json (owner-edited; table > unique host directory > fail)",
     "Host resolution: --host \u2192 persistent seat host \u2192 pi (resume uses the same order; #617)",
     "Effective seats: ak-role roles"
   );
@@ -31815,7 +31886,7 @@ function renderConfigDisplaySeat(row) {
   const host = row.host === void 0 ? "-" : row.host;
   return `${row.seat}	${row.source}	${model}	${engine}	${host}`;
 }
-function renderConfig(config) {
+function renderConfig(config, home) {
   const lines = ["seat	source	model	engine	host"];
   const rows = projectConfigDisplaySeats(config);
   if (rows.length === 0) {
@@ -31826,17 +31897,9 @@ function renderConfig(config) {
     }
   }
   lines.push(`autoResumeLimit	${config.autoResumeLimit ?? AUTO_RESUME_LIMIT}`);
-  const aliases = config.providerAliases;
-  if (aliases !== void 0) {
-    for (const provider of Object.keys(aliases).sort()) {
-      const byHost = aliases[provider];
-      for (const host of Object.keys(byHost).sort()) {
-        lines.push(`providerAlias	${provider}	${host}	${byHost[host]}`);
-      }
-    }
-  }
+  const hostProvidersBlock = renderHostProvidersTable(loadHostProvidersTable(home));
   return `${lines.join("\n")}
-`;
+${hostProvidersBlock}`;
 }
 async function runConfigCommand(args, home, packageRoot2, io) {
   if (args.length === 0 || args[0] === "get" || args[0] === "list" || args[0] === "show") {
@@ -31851,7 +31914,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       );
       return 0;
     }
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "set") {
@@ -31876,7 +31939,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       config = setPersistentSeatConfig(config, seat, parseModelSpec(spec));
     }
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "unset") {
@@ -31896,7 +31959,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       seat
     );
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "set-host" || args[0] === "unset-host") {
@@ -31913,7 +31976,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       throw new CliUsageError(error instanceof Error ? error.message : String(error), { cause: error });
     }
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "set-engine") {
@@ -31936,7 +31999,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       );
     }
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "unset-engine") {
@@ -31957,7 +32020,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
       );
     }
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   if (args[0] === "set-auto-resume-limit") {
@@ -31981,45 +32044,7 @@ async function runConfigCommand(args, home, packageRoot2, io) {
     let config = await loadAndValidateConfig(home, packageRoot2);
     config = setAutoResumeLimit(config, converted);
     await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
-    return 0;
-  }
-  if (args[0] === "set-provider-alias") {
-    if (args.length !== 4) {
-      throw new CliUsageError(
-        "usage: ak-role config set-provider-alias <provider> <host> <alias>"
-      );
-    }
-    let config = await loadAndValidateConfig(home, packageRoot2);
-    try {
-      config = setProviderHostAlias(config, args[1], args[2], args[3]);
-    } catch (error) {
-      throw new CliUsageError(
-        error instanceof Error ? error.message : String(error),
-        { cause: error }
-      );
-    }
-    await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
-    return 0;
-  }
-  if (args[0] === "unset-provider-alias") {
-    if (args.length !== 3) {
-      throw new CliUsageError(
-        "usage: ak-role config unset-provider-alias <provider> <host>"
-      );
-    }
-    let config = await loadAndValidateConfig(home, packageRoot2);
-    try {
-      config = unsetProviderHostAlias(config, args[1], args[2]);
-    } catch (error) {
-      throw new CliUsageError(
-        error instanceof Error ? error.message : String(error),
-        { cause: error }
-      );
-    }
-    await savePublicCliConfig(config, home);
-    io.stdout(renderConfig(config));
+    io.stdout(renderConfig(config, home));
     return 0;
   }
   throw new CliUsageError(`unknown config subcommand: ${args[0]}`);
@@ -32450,6 +32475,7 @@ var init_cli = __esm({
     init_engine_material();
     init_institutional_resolution();
     init_config2();
+    init_host_providers();
     init_registry2();
     init_cli_errors();
     init_host_descriptions();
@@ -32525,7 +32551,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { dirname as dirname15, join as join30 } from "node:path";
+import { dirname as dirname15, join as join31 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32614,8 +32640,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname15(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join30(binDir, "..", "..");
-  if (existsSync7(join30(canonical, "package.json"))) {
+  const canonical = join31(binDir, "..", "..");
+  if (existsSync7(join31(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;