@akagilnc/pi-workflow-roles 0.1.3771 → 0.1.3783

package/dist/acp-host/production-host.js

@@ -8756,24 +8756,35 @@ var init_invocation = __esm({
 var host_descriptions_exports = {};
 __export(host_descriptions_exports, {
   DEFAULT_ROLE_TURN_HOST: () => DEFAULT_ROLE_TURN_HOST,
+  HEADLESS_HOST_DESCRIPTIONS: () => HEADLESS_HOST_DESCRIPTIONS,
   HOST_DESCRIPTIONS: () => HOST_DESCRIPTIONS,
   assertRegisteredHostName: () => assertRegisteredHostName,
+  lookupHeadlessHostDescription: () => lookupHeadlessHostDescription,
   lookupHostDescription: () => lookupHostDescription,
+  lookupHostFamily: () => lookupHostFamily,
   packagedExternalHostNames: () => packagedExternalHostNames
 });
 function lookupHostDescription(host) {
   return Object.hasOwn(HOST_DESCRIPTIONS, host) ? HOST_DESCRIPTIONS[host] : void 0;
 }
+function lookupHeadlessHostDescription(host) {
+  return Object.hasOwn(HEADLESS_HOST_DESCRIPTIONS, host) ? HEADLESS_HOST_DESCRIPTIONS[host] : void 0;
+}
+function lookupHostFamily(host) {
+  if (lookupHostDescription(host) !== void 0) return "acp";
+  if (lookupHeadlessHostDescription(host) !== void 0) return "headless";
+  return void 0;
+}
 function packagedExternalHostNames() {
-  return Object.keys(HOST_DESCRIPTIONS);
+  return [...Object.keys(HOST_DESCRIPTIONS), ...Object.keys(HEADLESS_HOST_DESCRIPTIONS)];
 }
 function assertRegisteredHostName(host) {
-  if (host === DEFAULT_ROLE_TURN_HOST || lookupHostDescription(host) !== void 0) {
+  if (host === DEFAULT_ROLE_TURN_HOST || lookupHostFamily(host) !== void 0) {
     return host;
   }
   throw new Error(`unregistered host: ${host}`);
 }
-var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS;
+var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
 var init_host_descriptions = __esm({
   "src/host-descriptions.ts"() {
     "use strict";
@@ -8825,14 +8836,37 @@ var init_host_descriptions = __esm({
         })
       })
     });
+    HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
+      "claude": Object.freeze({
+        binaryFromHome: Object.freeze([".local", "bin", "claude"]),
+        sessionBindingFile: "claude-headless-session.json",
+        fixedArgs: Object.freeze([
+          // One result envelope (not stream-json): typed receipt only; no event-stream copy.
+          "--output-format",
+          "json",
+          "--permission-mode",
+          "bypassPermissions",
+          // Empty sources: no user/project/local operator surface (envelope owns materials).
+          "--setting-sources",
+          "",
+          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
+          "--strict-mcp-config"
+        ]),
+        promptFlag: "-p",
+        modelFlag: "--model",
+        effortFlag: "--effort",
+        // File path keeps large role envelopes off ARG_MAX.
+        systemPromptFlag: "--system-prompt-file",
+        jsonSchemaFlag: "--json-schema",
+        mcpConfigFlag: "--mcp-config",
+        sessionIdFlag: "--session-id",
+        resumeFlag: "--resume"
+      })
+    });
   }
 });
 
 // src/public-cli/load-production-acp-host.ts
-var load_production_acp_host_exports = {};
-__export(load_production_acp_host_exports, {
-  loadProductionAcpHostFactory: () => loadProductionAcpHostFactory
-});
 import { existsSync as existsSync5 } from "node:fs";
 import { join as join14 } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -8856,6 +8890,54 @@ var init_load_production_acp_host = __esm({
   }
 });
 
+// src/public-cli/load-production-headless-host.ts
+import { existsSync as existsSync6 } from "node:fs";
+import { join as join15 } from "node:path";
+import { pathToFileURL as pathToFileURL2 } from "node:url";
+async function loadProductionHeadlessHostFactory(packageRoot, host) {
+  const description = lookupHeadlessHostDescription(host);
+  if (description === void 0) {
+    throw new Error(`unregistered headless host: ${host}`);
+  }
+  const built = join15(packageRoot, "dist/headless-host/production-host.js");
+  const source = join15(packageRoot, "src/headless-host/production-host.ts");
+  const target = existsSync6(built) ? built : source;
+  const href = pathToFileURL2(target).href;
+  const mod = await import(href);
+  const create = mod.createProductionHeadlessRoleTurnHost;
+  return (options) => create({ ...options, description });
+}
+var init_load_production_headless_host = __esm({
+  "src/public-cli/load-production-headless-host.ts"() {
+    "use strict";
+    init_host_descriptions();
+  }
+});
+
+// src/public-cli/load-production-external-host.ts
+var load_production_external_host_exports = {};
+__export(load_production_external_host_exports, {
+  loadProductionExternalHostFactory: () => loadProductionExternalHostFactory
+});
+async function loadProductionExternalHostFactory(packageRoot, host) {
+  const family = lookupHostFamily(host);
+  if (family === "acp") {
+    return loadProductionAcpHostFactory(packageRoot, host);
+  }
+  if (family === "headless") {
+    return loadProductionHeadlessHostFactory(packageRoot, host);
+  }
+  throw new Error(`unregistered host: ${host}`);
+}
+var init_load_production_external_host = __esm({
+  "src/public-cli/load-production-external-host.ts"() {
+    "use strict";
+    init_host_descriptions();
+    init_load_production_acp_host();
+    init_load_production_headless_host();
+  }
+});
+
 // src/public-cli/host-providers.ts
 var host_providers_exports = {};
 __export(host_providers_exports, {
@@ -8870,15 +8952,15 @@ __export(host_providers_exports, {
   renderHostProvidersTable: () => renderHostProvidersTable
 });
 import { readFileSync as readFileSync2 } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function hostProvidersPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join15(home, ".ak-roles", "host-providers.json");
+  return join16(home, ".ak-roles", "host-providers.json");
 }
 function hermesProviderModelsCachePath(home) {
-  return join15(home, ".hermes", "provider_models_cache.json");
+  return join16(home, ".hermes", "provider_models_cache.json");
 }
 function parseHostProvidersTable(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -9445,7 +9527,7 @@ __export(config_exports, {
   validatePublicCliConfigAxes: () => validatePublicCliConfigAxes
 });
 import { mkdir as mkdir2, readFile as readFile10, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname8, join as join16 } from "node:path";
+import { dirname as dirname8, join as join17 } from "node:path";
 function isGateOfficerSeat(value) {
   return GATE_OFFICER_SEATS.includes(value);
 }
@@ -9453,7 +9535,7 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join16(home, ".ak-roles", "public-cli.json");
+  return join17(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
@@ -9862,7 +9944,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile10(join16(agentDir, "auth.json"), "utf8");
+    const raw = await readFile10(join17(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -10004,7 +10086,7 @@ var init_ticket_provenance_contracts = __esm({
 // src/ticket-provenance.ts
 import { createHash as createHash5 } from "node:crypto";
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
     throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
@@ -10062,7 +10144,7 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   return {
     recordFile: path.recordFile,
     volumeDir: path.sessionDir,
-    humanViewFile: join17(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
+    humanViewFile: join18(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
   };
 }
 async function readTicketProvenance(ticketNumber, cwd, home) {
@@ -10206,7 +10288,7 @@ var init_case_dossier_delivery = __esm({
 
 // src/host-transition-prior-native.ts
 import { access as access2, readdir as readdir3 } from "node:fs/promises";
-import { dirname as dirname9, join as join18 } from "node:path";
+import { dirname as dirname9, join as join19 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -10231,7 +10313,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join18(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join19(sessionRoot, entry.name, "records.jsonl");
     try {
       await access2(recordFile);
       recordPaths.push(recordFile);
@@ -10298,7 +10380,7 @@ var init_public_run_credentials = __esm({
 });
 
 // src/run-terminal-artifacts.ts
-import { basename as basename6, dirname as dirname10, join as join19 } from "node:path";
+import { basename as basename6, dirname as dirname10, join as join20 } from "node:path";
 function runIdFromRunDirectory(runDirectory) {
   const name = basename6(runDirectory);
   const at = name.lastIndexOf("@");
@@ -10702,7 +10784,7 @@ var init_ledger_session_read = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir4 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -10964,7 +11046,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join20(directory, name);
+      const path = join21(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -11006,14 +11088,14 @@ var init_analyst_gate_cycles_read = __esm({
 });
 
 // src/session-opening-materials.ts
-import { existsSync as existsSync6 } from "node:fs";
+import { existsSync as existsSync7 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { dirname as dirname11, join as join21 } from "node:path";
-import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
+import { dirname as dirname11, join as join22 } from "node:path";
+import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
   let dir = dirname11(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync6(join21(dir, "package.json")) && existsSync6(join21(dir, "souls"))) {
+    if (existsSync7(join22(dir, "package.json")) && existsSync7(join22(dir, "souls"))) {
       return dir;
     }
     const parent = dirname11(dir);
@@ -11043,7 +11125,7 @@ var init_session_opening_materials = __esm({
   "src/session-opening-materials.ts"() {
     "use strict";
     init_packaged_role_registry();
-    packageRootUrl = pathToFileURL2(resolvePackageRootDir() + "/").href;
+    packageRootUrl = pathToFileURL3(resolvePackageRootDir() + "/").href;
     MAIN_ROLE_SESSION_MATERIALS = {
       ...Object.fromEntries(
         PUBLIC_ROLE_RECORDS.map((record4) => [record4.role, record4.sessionMaterials])
@@ -11885,12 +11967,12 @@ var init_reviewer_dispatch = __esm({
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { writeFileSync as writeFileSync4 } from "node:fs";
 import { readFile as readFile13, unlink as unlink3 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join22(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join23(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 function recordReviewerDispatchRejectionSync(runDirectory, rejection) {
   writeFileSync4(
@@ -13312,7 +13394,7 @@ var init_collector_ledger = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash7 } from "node:crypto";
 import { readFile as readFile14, realpath as realpath7 } from "node:fs/promises";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -13329,10 +13411,10 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot, name) {
-  return join23(packageRoot, packagedMethodSkillRelativeDirectory(name));
+  return join24(packageRoot, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot, name) {
-  return join23(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
+  return join24(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
 }
 function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -13426,8 +13508,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot, name);
-  const skillPathConfigured = join23(rootDirectory, "SKILL.md");
-  const provenancePath = join23(rootDirectory, "provenance.json");
+  const skillPathConfigured = join24(rootDirectory, "SKILL.md");
+  const provenancePath = join24(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile14(provenancePath, "utf8");
@@ -13444,7 +13526,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join23(rootDirectory, rel);
+    const absolute = join24(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile14(absolute);
@@ -13960,7 +14042,7 @@ var init_terminal = __esm({
 // src/public-cli/settlement.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname12, join as join24 } from "node:path";
+import { dirname as dirname12, join as join25 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -14375,7 +14457,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join24(dirname12(sessionFile), "evidence-children");
+  const childDirectory = join25(dirname12(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir5(childDirectory);
@@ -14386,7 +14468,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join24(childDirectory, file));
+      entries = await readBoundSessionEntries(join25(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
@@ -14440,7 +14522,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join24(dirname12(sessionFile), "auditor-roles")];
+  const childDirectories = [join25(dirname12(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -14455,7 +14537,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join24(childDirectory, file));
+        entries = await readBoundSessionEntries(join25(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -14971,8 +15053,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join24(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join24(sessionDirectory, "session.jsonl");
+  const directories = [join25(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join25(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -15070,8 +15152,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
+  const reportPath = join25(artifactsDir, "report.json");
+  const evidencePath = join25(artifactsDir, "evidence.json");
   await writeFile6(
     reportPath,
     `${JSON.stringify(
@@ -15161,8 +15243,8 @@ async function trySettleJudgeTerminalResult(admitted, authority) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
+  const reportPath = join25(artifactsDir, "report.json");
+  const evidencePath = join25(artifactsDir, "evidence.json");
   await writeFile6(
     reportPath,
     `${JSON.stringify(
@@ -15395,7 +15477,7 @@ function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   return dirs;
 }
 async function resolveFailureArtifactsBase(runDirectory) {
-  const artifactsDir = join24(runDirectory, "artifacts");
+  const artifactsDir = join25(runDirectory, "artifacts");
   try {
     await ensureRunArtifactsDir(runDirectory);
     return { baseDir: artifactsDir };
@@ -15411,7 +15493,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join24(dir, `${stem}.${randomUUID3()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join25(dir, `${stem}.${randomUUID3()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -15456,26 +15538,26 @@ async function publishFailureArtifacts(admitted, failure2, authority) {
   } catch (error) {
     priorIssues.push(publicationAttemptFromError(sessionFile, error));
   }
-  const underArtifacts = baseDir === join24(admitted.runDirectory, "artifacts");
+  const underArtifacts = baseDir === join25(admitted.runDirectory, "artifacts");
   const uniqueFallbackDirs = uniqueFailureFallbackDirs(
     admitted.runDirectory,
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join24(baseDir, "error.json"),
-    join24(baseDir, "error.settlement.json"),
-    join24(admitted.runDirectory, "error.settlement.json")
+    join25(baseDir, "error.json"),
+    join25(baseDir, "error.settlement.json"),
+    join25(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join24(baseDir, "error.settlement.json"),
-    join24(baseDir, "error.json")
+    join25(baseDir, "error.settlement.json"),
+    join25(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join24(baseDir, "evidence.json"),
-    join24(baseDir, "evidence.settlement.json"),
-    join24(admitted.runDirectory, "evidence.settlement.json")
+    join25(baseDir, "evidence.json"),
+    join25(baseDir, "evidence.settlement.json"),
+    join25(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join24(baseDir, "evidence.settlement.json"),
-    join24(baseDir, "evidence.json")
+    join25(baseDir, "evidence.settlement.json"),
+    join25(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -15765,7 +15847,7 @@ var init_settlement = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
     presentFailureTerminal(terminal, io);
@@ -15784,7 +15866,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
   }
 }
 function runArtifactsDirectory(runDirectory) {
-  return join25(runDirectory, "artifacts");
+  return join26(runDirectory, "artifacts");
 }
 async function ensureRealArtifactsDirectory(runDirectory) {
   const runStat = await lstat5(runDirectory);
@@ -15867,7 +15949,7 @@ function jsonSafeReplacer() {
 }
 async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
   const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-  const filePath = join25(
+  const filePath = join26(
     artifactsDir,
     `dispatch-error-attempt-${attempt}-${randomUUID4()}.json`
   );
@@ -16116,7 +16198,7 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { readFile as readFile16, writeFile as writeFile7 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join26, resolve as resolve11 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join27, resolve as resolve11 } from "node:path";
 function appendContinuationSection(continuation, section) {
   const prompt = `${continuation.prompt}
 
@@ -16125,7 +16207,7 @@ ${section}`;
 }
 async function readInvocationHost(runDirectory) {
   try {
-    const raw = JSON.parse(await readFile16(join26(runDirectory, "invocation.json"), "utf8"));
+    const raw = JSON.parse(await readFile16(join27(runDirectory, "invocation.json"), "utf8"));
     return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
@@ -16279,7 +16361,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     try {
       await writeFile7(
-        join26(admitted.runDirectory, "stderr.log"),
+        join27(admitted.runDirectory, "stderr.log"),
         result.stderr,
         "utf8"
       );
@@ -16388,7 +16470,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute7(attachmentPath) ? attachmentPath : resolve11(attachmentPath);
-  return pathContainedIn(join26(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join27(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -17573,8 +17655,8 @@ __export(public_role_summons_exports, {
   summonGateOfficer: () => summonGateOfficer,
   summonPublicRole: () => summonPublicRole
 });
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join27 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join28 } from "node:path";
 function createCapturingIo() {
   const chunks = [];
   return {
@@ -17597,7 +17679,7 @@ function parentDir(path) {
 function walkPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 12; i += 1) {
-    if (existsSync7(join27(dir, "package.json")) && existsSync7(join27(dir, "souls"))) {
+    if (existsSync8(join28(dir, "package.json")) && existsSync8(join28(dir, "souls"))) {
       return dir;
     }
     const parent = parentDir(dir);
@@ -17673,9 +17755,9 @@ async function createSummonEnv(options) {
   const hostName = options.seat.host ?? "pi";
   let roleTurnHost = piHost;
   if (hostName !== "pi") {
-    const { lookupHostDescription: lookupHostDescription2 } = await Promise.resolve().then(() => (init_host_descriptions(), host_descriptions_exports));
-    const { loadProductionAcpHostFactory: loadProductionAcpHostFactory2 } = await Promise.resolve().then(() => (init_load_production_acp_host(), load_production_acp_host_exports));
-    if (lookupHostDescription2(hostName) === void 0) {
+    const { lookupHostFamily: lookupHostFamily2 } = await Promise.resolve().then(() => (init_host_descriptions(), host_descriptions_exports));
+    const { loadProductionExternalHostFactory: loadProductionExternalHostFactory2 } = await Promise.resolve().then(() => (init_load_production_external_host(), load_production_external_host_exports));
+    if (lookupHostFamily2(hostName) === void 0) {
       throw new Error(
         `public role summons host unregistered: host=${hostName} seat=${options.role}`
       );
@@ -17683,7 +17765,7 @@ async function createSummonEnv(options) {
     let hostPromise;
     roleTurnHost = {
       executeTurn: async (request) => {
-        hostPromise ??= loadProductionAcpHostFactory2(options.packageRoot, hostName).then(
+        hostPromise ??= loadProductionExternalHostFactory2(options.packageRoot, hostName).then(
           (create) => create({
             packageRoot: options.packageRoot,
             principalAuthority
@@ -17717,7 +17799,7 @@ async function createSummonEnv(options) {
 async function summonPublicRole(options) {
   const packageRoot = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join27(home, ".pi", "agent");
+  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join28(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
@@ -17725,7 +17807,8 @@ async function summonPublicRole(options) {
   } = await Promise.resolve().then(() => (init_config(), config_exports));
   const credentials = options.credentials ?? await loadCredentialProviders2(agentDir);
   const config = await loadPublicCliConfig2(home);
-  const seat = resolveEffectiveSeat2(config, options.role, credentials);
+  const invocation = options.host === void 0 ? void 0 : { host: options.host };
+  const seat = resolveEffectiveSeat2(config, options.role, credentials, invocation);
   const env = {
     ...await createSummonEnv({
       role: options.role,
@@ -17837,6 +17920,38 @@ async function summonPublicRole(options) {
     ...stderr === void 0 || stderr === "" ? {} : { stderr }
   };
 }
+async function parentInvocationHost(sourceRunDirectory) {
+  const { readFile: readFile21 } = await import("node:fs/promises");
+  const path = join28(sourceRunDirectory, "invocation.json");
+  let text;
+  try {
+    text = await readFile21(path, "utf8");
+  } catch (error) {
+    const code = error instanceof Error && "code" in error ? error.code : void 0;
+    throw new Error(
+      `parent invocation.json required for gate source run at ${path}: ${code ?? (error instanceof Error ? error.message : String(error))}`,
+      { cause: error }
+    );
+  }
+  let raw;
+  try {
+    raw = JSON.parse(text);
+  } catch (error) {
+    throw new Error(
+      `parent invocation.json unreadable at ${path}: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error }
+    );
+  }
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new Error(`parent invocation.json has non-object shape at ${path}`);
+  }
+  const host = raw.host;
+  if (host === void 0) return void 0;
+  if (typeof host !== "string" || host.trim() === "") {
+    throw new Error(`parent invocation.json host must be a non-empty string at ${path}`);
+  }
+  return host;
+}
 async function summonGateOfficer(options) {
   let home = options.home;
   if (home === void 0) {
@@ -17850,6 +17965,7 @@ async function summonGateOfficer(options) {
       submission: options.submission
     });
   }
+  const parentHost = await parentInvocationHost(options.sourceRunDirectory);
   const common = {
     cwd: options.cwd,
     ...home === void 0 ? {} : { home },
@@ -17858,6 +17974,7 @@ async function summonGateOfficer(options) {
     ...options.signal === void 0 ? {} : { signal: options.signal },
     ...options.reask === void 0 ? {} : { reviewReask: options.reask },
     ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction },
+    ...parentHost === void 0 ? {} : { host: parentHost },
     ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
     ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
   };
@@ -18023,7 +18140,7 @@ var init_compliance_transport = __esm({
 });
 
 // src/dossier-resolution.ts
-import { existsSync as existsSync8, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync9, statSync as statSync2 } from "node:fs";
 import { resolve as resolve12 } from "node:path";
 function resolveAuditDossier(env = process.env) {
   const raw = env[AUDIT_RUN_DIR_ENV];
@@ -18032,7 +18149,7 @@ function resolveAuditDossier(env = process.env) {
   }
   const runDirectory = resolve12(raw);
   try {
-    if (!existsSync8(runDirectory) || !statSync2(runDirectory).isDirectory()) {
+    if (!existsSync9(runDirectory) || !statSync2(runDirectory).isDirectory()) {
       return { status: "incomplete", observation: { kind: "missing-dossier" } };
     }
   } catch {
@@ -18282,11 +18399,11 @@ var init_navigator_session_contracts = __esm({
 
 // src/archivist-record-topology.ts
 import { createHash as createHash8 } from "node:crypto";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 function subjectKeyedRecordDirectory(input) {
   const ledgerHome = input.parentSessionFile !== void 0 && input.parentSessionFile.length > 0 ? resolveActivationLedgerHomeForPath(input.parentSessionFile) : resolveActivationLedgerHome(input.home);
   const digest = createHash8("sha256").update(input.subject).digest("hex").slice(0, 32);
-  return join28(
+  return join29(
     activationBookDirectory(ledgerHome, resolveBookKeyFromGit(input.cwd)),
     input.kind,
     digest
@@ -18310,11 +18427,11 @@ __export(archivist_record_entry_exports, {
   createRecordSessionOpen: () => createRecordSessionOpen,
   subjectKeyedRecordDirectory: () => subjectKeyedRecordDirectory
 });
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync3, realpathSync as realpathSync2, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname13, resolve as resolve13, join as join29 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync3, realpathSync as realpathSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname13, resolve as resolve13, join as join30 } from "node:path";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 function readCurrentSession(sessionDir) {
-  const ledger = join29(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join30(sessionDir, CURRENT_SESSION_LEDGER);
   try {
     const value = JSON.parse(readFileSync3(ledger, "utf8"));
     if (typeof value !== "object" || value === null || typeof value.sessionFile !== "string" || value.sessionFile.length === 0) {
@@ -18329,7 +18446,7 @@ function readCurrentSession(sessionDir) {
   }
 }
 function writeCurrentSession(sessionDir, sessionFile) {
-  const ledger = join29(sessionDir, CURRENT_SESSION_LEDGER);
+  const ledger = join30(sessionDir, CURRENT_SESSION_LEDGER);
   try {
     writeFileSync5(ledger, `${JSON.stringify({ sessionFile })}
 `, { flag: "wx" });
@@ -18390,10 +18507,10 @@ function createRecordSessionOpen(options) {
     return { session: SessionManager.inMemory(cwd), resumed: false };
   } else {
     const parentResolved = resolve13(parentFile);
-    sessionDir = physicallyContainedIn(ledgerHome, parentResolved) ? join29(dirname13(parentResolved), options.kind) : join29(activationBookDirectory(ledgerHome, resolveBookKeyFromGit(cwd)), options.kind);
+    sessionDir = physicallyContainedIn(ledgerHome, parentResolved) ? join30(dirname13(parentResolved), options.kind) : join30(activationBookDirectory(ledgerHome, resolveBookKeyFromGit(cwd)), options.kind);
     parentSession = parentFile;
   }
-  const nestAlreadyExists = existsSync9(sessionDir);
+  const nestAlreadyExists = existsSync10(sessionDir);
   ensureRealDirectoryTree(ledgerHome, sessionDir);
   const mayResumeSameNest = options.subject !== void 0 || options.kind === WORKER_SUBMISSION_GATE_KIND;
   if (mayResumeSameNest && nestAlreadyExists) {
@@ -18411,7 +18528,7 @@ function createRecordSessionOpen(options) {
   );
   if (session.isPersisted()) {
     const file = session.getSessionFile();
-    if (file !== void 0 && !existsSync9(file)) {
+    if (file !== void 0 && !existsSync10(file)) {
       const header = session.getHeader();
       if (header !== null && header.type === "session") {
         writeFileSync5(file, `${JSON.stringify(header)}
@@ -18429,7 +18546,7 @@ function createRecordSession(options) {
   return createRecordSessionOpen(options).session;
 }
 function bookDirectOfficerRunPointer(options) {
-  const nest = join29(dirname13(options.parentSessionFile), "auditor-roles");
+  const nest = join30(dirname13(options.parentSessionFile), "auditor-roles");
   mkdirSync4(nest, { recursive: true });
   const pointer = {
     version: 1,
@@ -18439,7 +18556,7 @@ function bookDirectOfficerRunPointer(options) {
     ...options.runDirectory !== void 0 && options.runDirectory.trim() !== "" ? { runDirectory: options.runDirectory } : {}
   };
   writeFileSync5(
-    join29(nest, `${options.officer}.pointer.json`),
+    join30(nest, `${options.officer}.pointer.json`),
     `${JSON.stringify(pointer)}
 `,
     "utf8"
@@ -21600,7 +21717,7 @@ var init_reviewer_role = __esm({
 
 // src/worker-submission-gates.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync10, lstatSync as lstatSync3, readdirSync as readdirSync2, readFileSync as readFileSync4, rmdirSync, rmSync } from "node:fs";
+import { existsSync as existsSync11, lstatSync as lstatSync3, readdirSync as readdirSync2, readFileSync as readFileSync4, rmdirSync, rmSync } from "node:fs";
 import { resolve as resolve18 } from "node:path";
 function git2(cwd, args) {
   return execFileSync4("git", args, {
@@ -21621,7 +21738,7 @@ function statusOf(error) {
   return typeof error === "object" && error !== null && "status" in error ? error.status : void 0;
 }
 function tryGetAll(file, key) {
-  if (!existsSync10(file)) return [];
+  if (!existsSync11(file)) return [];
   try {
     const out = gitFile(file, ["--get-all", key]);
     return out.length === 0 ? [] : out.split("\n");
@@ -21631,7 +21748,7 @@ function tryGetAll(file, key) {
   }
 }
 function ownedHook(path) {
-  if (!existsSync10(path)) return false;
+  if (!existsSync11(path)) return false;
   return readFileSync4(path, "utf8").includes(HOOK_MARKER);
 }
 function escapeGitConfigValueRegex(value) {
@@ -21658,11 +21775,11 @@ function rmOwnedDir(dir) {
   const hookPath = resolve18(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
-  if (existsSync10(dir) && readdirSync2(dir).length === 0) rmdirSync(dir);
+  if (existsSync11(dir) && readdirSync2(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
   const root = resolve18(commonDir, "worktrees");
-  if (!existsSync10(root)) return [];
+  if (!existsSync11(root)) return [];
   return readdirSync2(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
@@ -22351,7 +22468,7 @@ var init_activation_reconciliation = __esm({
 
 // src/role-runtime.ts
 import { readFileSync as readFileSync5, writeSync as writeSync4 } from "node:fs";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 import { Value as Value5 } from "typebox/value";
 function decodeReviewerAdmittedInputs(getFlag) {
   let reviewScopeKeys;
@@ -22723,7 +22840,7 @@ function readDiaristRunCoordinates() {
   if (typeof runDirectory !== "string" || runDirectory.trim() === "") {
     throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
   }
-  const admittedPath = join31(runDirectory, "admitted-request.json");
+  const admittedPath = join32(runDirectory, "admitted-request.json");
   const admitted = JSON.parse(readFileSync5(admittedPath, "utf8"));
   if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
     throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
@@ -24084,7 +24201,7 @@ __export(in_process_session_exports, {
 });
 import { mkdtemp as mkdtemp2, rm as rm2 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 import {
   createAgentSession,
   DefaultResourceLoader,
@@ -24207,7 +24324,7 @@ async function openPiInProcessSession(options) {
   let scratchDir;
   let resolvedAgentDir = options.agentDir;
   if (resolvedAgentDir === void 0) {
-    scratchDir = await mkdtemp2(join32(options.credentialScratchParent ?? tmpdir2(), "ak-institutional-"));
+    scratchDir = await mkdtemp2(join33(options.credentialScratchParent ?? tmpdir2(), "ak-institutional-"));
     resolvedAgentDir = scratchDir;
   }
   try {
@@ -24903,7 +25020,7 @@ var init_reviewer_child_executor = __esm({
 import { spawn as spawn4 } from "node:child_process";
 import { mkdtemp as mkdtemp3, rm as rm3 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 async function runCommand(command, args, options = {}) {
   return await new Promise((resolve20, reject) => {
     const child = spawn4(command, args, { ...options.cwd === void 0 ? {} : { cwd: options.cwd }, stdio: ["ignore", "pipe", "pipe"], signal: options.signal });
@@ -24952,8 +25069,8 @@ async function prepareSnapshot(accepted, signal, dependencies) {
     if (!sameReviewerPinnedTarget({ repositoryRoot: accepted.repositoryRoot, objectFormat, targetHead }, accepted)) throw new Error("Accepted Reviewer target identity no longer matches the repository");
     await git3(accepted.repositoryRoot, ["cat-file", "-e", `${targetHead}^{commit}`], signal);
     dependencies.fault?.("mirror.before-create");
-    mirrorRoot = await mkdtemp3(join33(tmpdir3(), "ak-reviewer-snapshot-"));
-    const mirrorPath = join33(mirrorRoot, "repository.git");
+    mirrorRoot = await mkdtemp3(join34(tmpdir3(), "ak-reviewer-snapshot-"));
+    const mirrorPath = join34(mirrorRoot, "repository.git");
     dependencies.fault?.("mirror.create");
     await runCommand("git", ["init", "--bare", `--object-format=${accepted.objectFormat}`, mirrorPath], signal === void 0 ? {} : { signal });
     await git3(mirrorPath, ["fetch", "--no-tags", accepted.repositoryRoot, targetHead], signal);
@@ -24970,7 +25087,7 @@ async function prepareClone(snapshot, signal, dependencies) {
   const target = { repositoryRoot: snapshot.repositoryRoot, objectFormat: snapshot.objectFormat, targetHead: snapshot.targetHead, refs: { ...snapshot.refs } };
   try {
     dependencies.fault?.("workspace.before-create");
-    workspace = await mkdtemp3(join33(tmpdir3(), "ak-reviewer-leg-"));
+    workspace = await mkdtemp3(join34(tmpdir3(), "ak-reviewer-leg-"));
     dependencies.fault?.("workspace.init");
     await git3(workspace, ["init", `--object-format=${snapshot.objectFormat}`, "--initial-branch=ak-reviewer-unborn"], signal);
     dependencies.fault?.("workspace.fetch");
@@ -25385,9 +25502,9 @@ init_auditor_soul();
 init_session_opening_materials();
 
 // src/acp-host/description.ts
-import { join as join34 } from "node:path";
+import { join as join35 } from "node:path";
 function resolveAcpBinary(description, operatorHome) {
-  return join34(operatorHome, ...description.binaryFromHome);
+  return join35(operatorHome, ...description.binaryFromHome);
 }
 function acpStdioArgs(description, model, seat) {
   const { prefix, suffix, modelFlag, thinkingFlag } = description.argv;
@@ -25413,7 +25530,7 @@ init_role_runtime();
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile18, writeFile as writeFile8 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename7, dirname as dirname17, join as join35 } from "node:path";
+import { basename as basename7, dirname as dirname17, join as join36 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/acp-host/role-turn-host.ts
@@ -25768,8 +25885,23 @@ function createComposedAcpRoleTurnHost(config) {
     })
   });
 }
+function terminatingToolJsonSchema(parameters) {
+  const cloned = JSON.parse(JSON.stringify(parameters));
+  return Object.freeze({
+    ...cloned,
+    $schema: "http://json-schema.org/draft-07/schema#"
+  });
+}
 async function prepareAcpRoleEnvelope(options) {
   const { request } = options;
+  if (options.socketPath === "") {
+    throw new Error("prepareAcpRoleEnvelope requires socketPath");
+  }
+  const listTerminatingToolOnMcp = options.listTerminatingToolOnMcp !== false;
+  const earlyTerminatingTool = packagedRoleOutputTool(request.activation.role);
+  if (earlyTerminatingTool === void 0) {
+    throw new Error(`role has no terminating tool: ${request.activation.role}`);
+  }
   const flags = projectAcpActivationFlags(request);
   const tools = /* @__PURE__ */ new Map();
   const handlers = /* @__PURE__ */ new Map();
@@ -25789,7 +25921,7 @@ async function prepareAcpRoleEnvelope(options) {
     const raw = await readFile18(method.path, "utf8");
     methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
   }
-  let sessionFile = options.sessionFile ?? join35(request.runDirectory, "session", "session.jsonl");
+  let sessionFile = options.sessionFile ?? join36(request.runDirectory, "session", "session.jsonl");
   await mkdir5(dirname17(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
@@ -25992,6 +26124,68 @@ async function prepareAcpRoleEnvelope(options) {
     await emit("tool_execution_end", { toolCallId, toolName, isError: projected.isError });
     return projected;
   }
+  async function invokeAkTool(name, args) {
+    const tool = tools.get(name);
+    if (tool === void 0) throw new Error(`Unknown AK tool: ${name}`);
+    const toolCallId = randomUUID6();
+    calls.push({ toolCallId, toolName: name });
+    sessionEntries.push({
+      type: "message",
+      message: {
+        role: "assistant",
+        content: [{
+          type: "toolCall",
+          id: toolCallId,
+          name,
+          arguments: args ?? {}
+        }]
+      }
+    });
+    try {
+      await emit("tool_execution_start", { toolCallId, toolName: name });
+      const blocked = (await emit("tool_call", { toolCallId, toolName: name, input: args ?? {} })).some((value) => typeof value === "object" && value !== null && "block" in value && value.block === true);
+      if (blocked) {
+        return { content: [{ type: "text", text: `AK tool blocked: ${name}` }], isError: true, blocked: true };
+      }
+    } catch (error) {
+      const declared = declareRoundInfrastructureFailure(error);
+      try {
+        const projected = await projectToolResult(toolCallId, name, {
+          content: declared.content,
+          details: declared.details,
+          isError: true
+        });
+        return { content: projected.content, isError: true };
+      } catch {
+        return { content: declared.content, isError: true };
+      }
+    }
+    try {
+      const result = await tool.execute(toolCallId, args ?? {}, void 0, void 0, context);
+      const projected = await projectToolResult(toolCallId, name, {
+        content: result.content,
+        details: result.details,
+        isError: false
+      });
+      return { content: projected.content, isError: projected.isError };
+    } catch (error) {
+      let content;
+      let details;
+      if (isCorrectableExecuteError(error)) {
+        const projected2 = projectCorrectableExecuteRejection(error);
+        content = [{ type: "text", text: projected2.diagnostic }];
+        details = projected2.details;
+      } else {
+        ({ content, details } = declareRoundInfrastructureFailure(error));
+      }
+      const projected = await projectToolResult(toolCallId, name, {
+        content,
+        details,
+        isError: true
+      });
+      return { content: projected.content, isError: projected.isError };
+    }
+  }
   function reply(socket, id, result, error) {
     const rpcError = error instanceof Error ? { code: "ak-relay-failure", name: error.name, message: error.message } : { code: "ak-relay-failure", name: "RelayFailure", message: String(error) };
     socket.write(`${JSON.stringify({ id, ...error === void 0 ? { result } : { error: rpcError } })}
@@ -26020,8 +26214,9 @@ async function prepareAcpRoleEnvelope(options) {
           }
           try {
             if (rpc.method === "tools/list") {
-              reply(socket, rpc.id, { tools: [...tools.values()].map((tool2) => {
-                return { name: tool2.name, description: tool2.description, inputSchema: tool2.parameters };
+              const listed = [...tools.values()].filter((tool) => listTerminatingToolOnMcp || tool.name !== earlyTerminatingTool);
+              reply(socket, rpc.id, { tools: listed.map((tool) => {
+                return { name: tool.name, description: tool.description, inputSchema: tool.parameters };
               }) });
               return;
             }
@@ -26029,74 +26224,15 @@ async function prepareAcpRoleEnvelope(options) {
             const params = rpc.params;
             const name = params?.name;
             if (typeof name !== "string") throw new Error("MCP tool name is missing");
-            const tool = tools.get(name);
-            if (tool === void 0) throw new Error(`Unknown AK tool: ${name}`);
-            const toolCallId = randomUUID6();
-            calls.push({ toolCallId, toolName: name });
-            {
-              const message = {
-                role: "assistant",
-                content: [{
-                  type: "toolCall",
-                  id: toolCallId,
-                  name,
-                  arguments: params?.arguments ?? {}
-                }]
-              };
-              sessionEntries.push({ type: "message", message });
+            if (!listTerminatingToolOnMcp && name === earlyTerminatingTool) {
+              throw new Error(`terminating tool ${name} is schema-channel only on this host`);
             }
-            try {
-              await emit("tool_execution_start", { toolCallId, toolName: name });
-              const blocked = (await emit("tool_call", { toolCallId, toolName: name, input: params?.arguments ?? {} })).some((value) => typeof value === "object" && value !== null && "block" in value && value.block === true);
-              if (blocked) {
-                reply(socket, rpc.id, void 0, new Error(`AK tool blocked: ${name}`));
-                return;
-              }
-            } catch (error) {
-              const declared = declareRoundInfrastructureFailure(error);
-              try {
-                const projected = await projectToolResult(toolCallId, name, {
-                  content: declared.content,
-                  details: declared.details,
-                  isError: true
-                });
-                reply(socket, rpc.id, {
-                  content: projected.content,
-                  isError: true
-                });
-              } catch {
-                reply(socket, rpc.id, {
-                  content: declared.content,
-                  isError: true
-                });
-              }
+            const outcome = await invokeAkTool(name, params?.arguments ?? {});
+            if (outcome.blocked === true) {
+              reply(socket, rpc.id, void 0, new Error(outcome.content.map((p) => p.type === "text" ? p.text : "").join("")));
               return;
             }
-            try {
-              const result = await tool.execute(toolCallId, params?.arguments ?? {}, void 0, void 0, context);
-              const projected = await projectToolResult(toolCallId, name, {
-                content: result.content,
-                details: result.details,
-                isError: false
-              });
-              reply(socket, rpc.id, { content: projected.content, ...projected.isError ? { isError: true } : {} });
-            } catch (error) {
-              let content;
-              let details;
-              if (isCorrectableExecuteError(error)) {
-                const projected2 = projectCorrectableExecuteRejection(error);
-                content = [{ type: "text", text: projected2.diagnostic }];
-                details = projected2.details;
-              } else {
-                ({ content, details } = declareRoundInfrastructureFailure(error));
-              }
-              const projected = await projectToolResult(toolCallId, name, {
-                content,
-                details,
-                isError: true
-              });
-              reply(socket, rpc.id, { content: projected.content, ...projected.isError ? { isError: true } : {} });
-            }
+            reply(socket, rpc.id, { content: outcome.content, ...outcome.isError ? { isError: true } : {} });
           } catch (error) {
             reply(socket, rpc.id, void 0, error);
           }
@@ -26104,8 +26240,8 @@ async function prepareAcpRoleEnvelope(options) {
       }
     });
   }
-  await listen(server, options.socketPath);
   const relay = fileURLToPath2(new URL("./mcp-relay.mjs", import.meta.url));
+  await listen(server, options.socketPath);
   let disposed = false;
   let priorAkRoleRunDir;
   let priorAkRoleCourtAttempt;
@@ -26148,6 +26284,11 @@ async function prepareAcpRoleEnvelope(options) {
       });
     }
   };
+  const terminatingToolName = earlyTerminatingTool;
+  async function ingestStructuredOutput(params) {
+    if (calls.some((call) => call.toolName === terminatingToolName)) return;
+    await invokeAkTool(terminatingToolName, params ?? {});
+  }
   const closeRound = async () => {
     if (calls.length > 0) {
       const roundCalls = [...calls];
@@ -26214,6 +26355,11 @@ async function prepareAcpRoleEnvelope(options) {
     if (request.courtAttemptId === void 0) delete process.env.AK_ROLE_COURT_ATTEMPT;
     else process.env.AK_ROLE_COURT_ATTEMPT = request.courtAttemptId;
     runDirInjected = true;
+    const terminating = tools.get(terminatingToolName);
+    if (terminating === void 0) {
+      throw new Error(`terminating tool not registered after activation: ${terminatingToolName}`);
+    }
+    const jsonSchema = terminatingToolJsonSchema(terminating.parameters);
     return {
       mcpServers: [{
         name: `ak-${request.activation.role}`,
@@ -26228,7 +26374,10 @@ async function prepareAcpRoleEnvelope(options) {
       prompt,
       abortSignal: hostAbort.signal,
       closeRound,
-      dispose
+      dispose,
+      jsonSchema,
+      terminatingToolName,
+      ingestStructuredOutput
     };
   } catch (error) {
     try {
@@ -26247,12 +26396,12 @@ async function prepareAcpRoleEnvelope(options) {
 // src/acp-host/seat-profile-soul.ts
 import { constants as constants3 } from "node:fs";
 import { access as access4, copyFile, lstat as lstat6, mkdir as mkdir6, readlink, symlink, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname18, join as join36, relative as relative3, resolve as resolve19 } from "node:path";
+import { dirname as dirname18, join as join37, relative as relative3, resolve as resolve19 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
 function packageRoleSoulPath(packageRoot, role) {
-  return join36(packageRoot, "souls", `${role}.md`);
+  return join37(packageRoot, "souls", `${role}.md`);
 }
 async function pathExists(path) {
   try {
@@ -26269,16 +26418,16 @@ async function ensureSeatProfileSoul(options) {
   if (!await pathExists(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
-  const profilesRoot = join36(operatorHome, ...spec.profilesRootFromHome);
-  const profileDir = join36(profilesRoot, profileName);
+  const profilesRoot = join37(operatorHome, ...spec.profilesRootFromHome);
+  const profileDir = join37(profilesRoot, profileName);
   const hostRoot = dirname18(profilesRoot);
-  const soulPath = join36(profileDir, spec.soulFileName);
+  const soulPath = join37(profileDir, spec.soulFileName);
   if (!await pathExists(profileDir)) {
     await mkdir6(profileDir, { recursive: true });
     for (const name of ["auth.json", ".env", "config.yaml"]) {
-      const source = join36(hostRoot, name);
+      const source = join37(hostRoot, name);
       if (!await pathExists(source)) continue;
-      await copyFile(source, join36(profileDir, name));
+      await copyFile(source, join37(profileDir, name));
     }
   } else {
     await mkdir6(profileDir, { recursive: true });
@@ -26305,9 +26454,9 @@ async function ensureSeatProfileSoul(options) {
 
 // src/acp-host/session-identity.ts
 import { mkdir as mkdir7, readFile as readFile19, rename, writeFile as writeFile9 } from "node:fs/promises";
-import { dirname as dirname19, join as join37 } from "node:path";
+import { dirname as dirname19, join as join38 } from "node:path";
 function createAcpSessionIdentityAuthority(authority, sessionBindingFile) {
-  const bindingPath = (principal) => join37(authority.decode(principal).sessionDirectory, sessionBindingFile);
+  const bindingPath = (principal) => join38(authority.decode(principal).sessionDirectory, sessionBindingFile);
   return {
     resolveSessionFile(principal) {
       return authority.decode(principal).sessionFile;