@akagilnc/pi-workflow-roles 0.1.3771 → 0.1.3783

package/dist/public-cli/main.js

@@ -15453,16 +15453,24 @@ var init_institutional_resolution = __esm({
 function lookupHostDescription(host) {
   return Object.hasOwn(HOST_DESCRIPTIONS, host) ? HOST_DESCRIPTIONS[host] : void 0;
 }
+function lookupHeadlessHostDescription(host) {
+  return Object.hasOwn(HEADLESS_HOST_DESCRIPTIONS, host) ? HEADLESS_HOST_DESCRIPTIONS[host] : void 0;
+}
+function lookupHostFamily(host) {
+  if (lookupHostDescription(host) !== void 0) return "acp";
+  if (lookupHeadlessHostDescription(host) !== void 0) return "headless";
+  return void 0;
+}
 function packagedExternalHostNames() {
-  return Object.keys(HOST_DESCRIPTIONS);
+  return [...Object.keys(HOST_DESCRIPTIONS), ...Object.keys(HEADLESS_HOST_DESCRIPTIONS)];
 }
 function assertRegisteredHostName(host) {
-  if (host === DEFAULT_ROLE_TURN_HOST || lookupHostDescription(host) !== void 0) {
+  if (host === DEFAULT_ROLE_TURN_HOST || lookupHostFamily(host) !== void 0) {
     return host;
   }
   throw new Error(`unregistered host: ${host}`);
 }
-var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS;
+var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
 var init_host_descriptions = __esm({
   "src/host-descriptions.ts"() {
     "use strict";
@@ -15514,6 +15522,33 @@ var init_host_descriptions = __esm({
         })
       })
     });
+    HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
+      "claude": Object.freeze({
+        binaryFromHome: Object.freeze([".local", "bin", "claude"]),
+        sessionBindingFile: "claude-headless-session.json",
+        fixedArgs: Object.freeze([
+          // One result envelope (not stream-json): typed receipt only; no event-stream copy.
+          "--output-format",
+          "json",
+          "--permission-mode",
+          "bypassPermissions",
+          // Empty sources: no user/project/local operator surface (envelope owns materials).
+          "--setting-sources",
+          "",
+          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
+          "--strict-mcp-config"
+        ]),
+        promptFlag: "-p",
+        modelFlag: "--model",
+        effortFlag: "--effort",
+        // File path keeps large role envelopes off ARG_MAX.
+        systemPromptFlag: "--system-prompt-file",
+        jsonSchemaFlag: "--json-schema",
+        mcpConfigFlag: "--mcp-config",
+        sessionIdFlag: "--session-id",
+        resumeFlag: "--resume"
+      })
+    });
   }
 });
 
@@ -16154,6 +16189,50 @@ var init_load_production_acp_host = __esm({
   }
 });
 
+// src/public-cli/load-production-headless-host.ts
+import { existsSync as existsSync4 } from "node:fs";
+import { join as join8 } from "node:path";
+import { pathToFileURL as pathToFileURL2 } from "node:url";
+async function loadProductionHeadlessHostFactory(packageRoot2, host) {
+  const description = lookupHeadlessHostDescription(host);
+  if (description === void 0) {
+    throw new Error(`unregistered headless host: ${host}`);
+  }
+  const built = join8(packageRoot2, "dist/headless-host/production-host.js");
+  const source = join8(packageRoot2, "src/headless-host/production-host.ts");
+  const target = existsSync4(built) ? built : source;
+  const href = pathToFileURL2(target).href;
+  const mod = await import(href);
+  const create = mod.createProductionHeadlessRoleTurnHost;
+  return (options) => create({ ...options, description });
+}
+var init_load_production_headless_host = __esm({
+  "src/public-cli/load-production-headless-host.ts"() {
+    "use strict";
+    init_host_descriptions();
+  }
+});
+
+// src/public-cli/load-production-external-host.ts
+async function loadProductionExternalHostFactory(packageRoot2, host) {
+  const family = lookupHostFamily(host);
+  if (family === "acp") {
+    return loadProductionAcpHostFactory(packageRoot2, host);
+  }
+  if (family === "headless") {
+    return loadProductionHeadlessHostFactory(packageRoot2, host);
+  }
+  throw new Error(`unregistered host: ${host}`);
+}
+var init_load_production_external_host = __esm({
+  "src/public-cli/load-production-external-host.ts"() {
+    "use strict";
+    init_host_descriptions();
+    init_load_production_acp_host();
+    init_load_production_headless_host();
+  }
+});
+
 // src/host-contracts.ts
 var ExplicitInternalActivationError;
 var init_host_contracts = __esm({
@@ -16221,12 +16300,12 @@ var init_sitian_contracts = __esm({
 import { createHash as createHash2, randomUUID } from "node:crypto";
 import {
   appendFileSync,
-  existsSync as existsSync4,
+  existsSync as existsSync5,
   readFileSync as readFileSync2,
   unlinkSync,
   writeFileSync
 } from "node:fs";
-import { basename as basename3, dirname as dirname5, join as join8, resolve as resolve3 } from "node:path";
+import { basename as basename3, dirname as dirname5, join as join9, resolve as resolve3 } from "node:path";
 function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -16241,14 +16320,14 @@ function createExclusiveFile(path, contents) {
   writeFileSync(path, contents, { encoding: "utf8", flag: "wx" });
 }
 function sealTornTail(recordFile) {
-  if (!existsSync4(recordFile)) return;
+  if (!existsSync5(recordFile)) return;
   const buffer = readFileSync2(recordFile);
   if (buffer.length > 0 && buffer[buffer.length - 1] !== 10) {
     appendFileSync(recordFile, "\n", "utf8");
   }
 }
 function findIdentityPointer(recordFile, identity, kind, level) {
-  if (!existsSync4(recordFile)) return void 0;
+  if (!existsSync5(recordFile)) return void 0;
   const text = readFileSync2(recordFile, "utf8");
   for (const line2 of text.split("\n")) {
     const trimmed = line2.trim();
@@ -16365,7 +16444,7 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
   let sessionDir;
   if (input.sessionParent !== void 0 && input.sessionParent.length > 0 && physicallyContainedIn(ledgerHome, input.sessionParent)) {
-    sessionDir = join8(dirname5(input.sessionParent), category);
+    sessionDir = join9(dirname5(input.sessionParent), category);
   } else {
     const bookKey = safeBookKey(cwd);
     const bookDir = activationBookDirectory(ledgerHome, bookKey);
@@ -16379,12 +16458,12 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
         subjectStr = JSON.stringify(input.subject);
       }
       const digest = createHash2("sha256").update(subjectStr).digest("hex").slice(0, 32);
-      sessionDir = join8(bookDir, category, digest);
+      sessionDir = join9(bookDir, category, digest);
     } else {
-      sessionDir = join8(bookDir, category);
+      sessionDir = join9(bookDir, category);
     }
   }
-  const recordFile = join8(sessionDir, "records.jsonl");
+  const recordFile = join9(sessionDir, "records.jsonl");
   return { sessionDir, recordFile, ledgerHome };
 }
 function resolveSitianRecordPath(input) {
@@ -16441,13 +16520,13 @@ var init_sitian_appender = __esm({
 });
 
 // src/sitian-reader.ts
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { readFile as readFile2 } from "node:fs/promises";
 function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
-  if (!existsSync5(recordFile)) {
+  if (!existsSync6(recordFile)) {
     return { records: [], diagnostics: [] };
   }
   const text = await readFile2(recordFile, "utf8");
@@ -16505,12 +16584,12 @@ var init_sitian_facade = __esm({
 import { execFile, spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
-import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join9, resolve as resolve4 } from "node:path";
+import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join10, resolve as resolve4 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot2) {
-  return join9(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
+  return join10(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -16854,7 +16933,7 @@ var init_role_turn_host = __esm({
 
 // src/run-ticket-number.ts
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function isEnoent(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -16867,7 +16946,7 @@ function ticketFromRecord(record4) {
 }
 async function readPageTicketNumber(runDirectory, page) {
   try {
-    const raw = JSON.parse(await readFile4(join10(runDirectory, page), "utf8"));
+    const raw = JSON.parse(await readFile4(join11(runDirectory, page), "utf8"));
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
       return void 0;
     }
@@ -17763,9 +17842,9 @@ var init_uuidv7 = __esm({
 
 // src/typed-provider-http.ts
 import { readFile as readFile7, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join11(runDirectory, TYPED_HTTP_FILE);
+  return join12(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -17810,7 +17889,7 @@ var init_typed_provider_http = __esm({
 
 // src/public-cli/run-lifecycle.ts
 import { chmod, open, readdir as readdir2, readFile as readFile8, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
-import { isAbsolute as isAbsolute4, join as join12 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join13 } from "node:path";
 function resumeRereadInstruction(materialPath, handbook) {
   return handbook ? `\u91CD\u65B0\u8BFB ${materialPath}\uFF0C\u518D\u7EC4\u88C5\u5916\u5305 argv` : `\u91CD\u65B0\u8BFB ${materialPath}`;
 }
@@ -17858,7 +17937,7 @@ function renderResumeCommand(runId) {
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
   await writeFile3(
-    join12(runDirectory, RUN_STATE_FILE),
+    join13(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -17908,7 +17987,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile8(join12(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile8(join13(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch {
     return void 0;
   }
@@ -17975,7 +18054,7 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
   await writeFile3(
-    join12(runDirectory, RUN_STATE_FILE),
+    join13(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -18219,15 +18298,15 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportCleanupFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join13(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join13(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join12(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join13(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -18277,7 +18356,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join12(ledgerHome, "books");
+  const booksRoot = join13(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir2(booksRoot);
@@ -18285,7 +18364,7 @@ async function findRunDirectoryById(home, runId) {
     return void 0;
   }
   for (const bookKey of bookKeys) {
-    const runsDir = join12(activationBookDirectory(ledgerHome, bookKey), "runs");
+    const runsDir = join13(activationBookDirectory(ledgerHome, bookKey), "runs");
     let entries;
     try {
       entries = await readdir2(runsDir);
@@ -18294,7 +18373,7 @@ async function findRunDirectoryById(home, runId) {
     }
     for (const entry of entries) {
       if (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) {
-        return join12(runsDir, entry);
+        return join13(runsDir, entry);
       }
     }
   }
@@ -18309,7 +18388,7 @@ async function readRunParentPath(runDirectory) {
   let raw;
   try {
     raw = JSON.parse(
-      await readFile8(join12(runDirectory, "admitted-request.json"), "utf8")
+      await readFile8(join13(runDirectory, "admitted-request.json"), "utf8")
     );
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return void 0;
@@ -18329,7 +18408,7 @@ async function readRunParentPath(runDirectory) {
 }
 async function findLatestRunIdForSeatTicket(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
-  const runsDir = join12(
+  const runsDir = join13(
     activationBookDirectory(ledgerHome, input.bookKey),
     "runs"
   );
@@ -18346,7 +18425,7 @@ async function findLatestRunIdForSeatTicket(input) {
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
-    const runDirectory = join12(runsDir, entry);
+    const runDirectory = join13(runsDir, entry);
     if (input.parentRunPath !== void 0) {
       const parentPath = await readRunParentPath(runDirectory);
       if (parentPath !== input.parentRunPath) continue;
@@ -18531,7 +18610,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile8(join12(run.runDirectory, "invocation.json"), "utf8")
+      await readFile8(join13(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -18939,7 +19018,7 @@ __export(notary_source_run_exports, {
   loadNotarySourceRunLocator: () => loadNotarySourceRunLocator,
   resolveNotarySourceRunLocator: () => resolveNotarySourceRunLocator
 });
-import { dirname as dirname7, isAbsolute as isAbsolute5, join as join13, resolve as resolve6, basename as basename4 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute5, join as join14, resolve as resolve6, basename as basename4 } from "node:path";
 import { lstat as lstat2, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -18985,11 +19064,11 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join13(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookRunsRoot = join14(activationBookDirectory(ledgerHome, bookKey), "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = join13(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = join14(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute5(raw) ? raw : resolve6(options.projectRoot, raw);
   }
@@ -20115,11 +20194,11 @@ import {
   realpath as realpath4,
   writeFile as writeFile4
 } from "node:fs/promises";
-import { basename as basename5, isAbsolute as isAbsolute6, join as join14, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename5, isAbsolute as isAbsolute6, join as join15, resolve as resolve7, sep as sep3 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const principal = authority.issue(request);
   const { sessionDirectory, sessionFile } = authority.decode(principal);
-  const runDirectory = join14(sessionDirectory, "..");
+  const runDirectory = join15(sessionDirectory, "..");
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
   return {
@@ -20167,14 +20246,14 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...effectiveModelLedgerFields(effectiveModel)
   };
   await writeFile4(
-    join14(source.runDirectory, "invocation.json"),
+    join15(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host) {
-  const ledgerPath = join14(runDirectory, "invocation.json");
+  const ledgerPath = join15(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
@@ -20202,7 +20281,7 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host)
   );
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join14(runDirectory, "invocation.json");
+  const ledgerPath = join15(runDirectory, "invocation.json");
   const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
   await writeFile4(
     ledgerPath,
@@ -20263,7 +20342,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile9(join14(rolePackageRoot, "package.json"), "utf8")
+    await readFile9(join15(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -20510,7 +20589,7 @@ async function freezeRegularFileAttachment(sourcePath, destinationDir, index) {
   }
   const bytes = await readFile9(absolute);
   const name = `${String(index).padStart(2, "0")}-${basename5(absolute)}`;
-  const frozenPath = join14(destinationDir, name);
+  const frozenPath = join15(destinationDir, name);
   await writeFile4(frozenPath, bytes);
   return {
     attachment: {
@@ -20538,7 +20617,7 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join14(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join15(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
@@ -20564,7 +20643,7 @@ async function admitStandardMaterialInvocation(role, options) {
     role,
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20589,7 +20668,7 @@ async function admitStandardMaterialInvocation(role, options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20667,7 +20746,7 @@ async function admitCountersignInvocation(options) {
     role: "countersign",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20691,7 +20770,7 @@ async function admitCountersignInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20715,7 +20794,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
   return buildInstructionTransportPrompt(admitted, engineMaterial);
 }
 async function ensureRunArtifactsDir(runDirectory) {
-  const dir = join14(runDirectory, "artifacts");
+  const dir = join15(runDirectory, "artifacts");
   await mkdir2(dir, { recursive: true });
   return dir;
 }
@@ -20747,11 +20826,11 @@ async function admitCoderInvocation(options) {
     role: "coder",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
-  const taskPath = join14(runDirectory, "task.md");
+  const taskPath = join15(runDirectory, "task.md");
   await writeFile4(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
@@ -20772,7 +20851,7 @@ async function admitCoderInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20853,13 +20932,13 @@ async function admitFixerInvocation(options) {
     role: "fixer",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
-    prerequisitesPath = join14(runDirectory, "prerequisites.json");
+    prerequisitesPath = join15(runDirectory, "prerequisites.json");
     await writeFile4(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
@@ -20867,7 +20946,7 @@ async function admitFixerInvocation(options) {
       "utf8"
     );
   }
-  const packetPath = join14(runDirectory, "fix-packet.md");
+  const packetPath = join15(runDirectory, "fix-packet.md");
   await writeFile4(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
@@ -20893,7 +20972,7 @@ async function admitFixerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21087,7 +21166,7 @@ async function admitCollectorInvocation(options) {
     role: "collector",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
@@ -21101,7 +21180,7 @@ async function admitCollectorInvocation(options) {
   const prNumber = target.kind === "bound" ? target.prNumber : void 0;
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
-    requestManifestPath = join14(runDirectory, "request-manifest.json");
+    requestManifestPath = join15(runDirectory, "request-manifest.json");
     await writeFile4(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const admitted = {
@@ -21126,7 +21205,7 @@ async function admitCollectorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21223,7 +21302,7 @@ function parseDoctorArgv(args) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join14(
+  const defaultRuns = join15(
     activationBookDirectory(ledgerHome, options.bookKey),
     "issues",
     String(options.issueNumber),
@@ -21330,7 +21409,7 @@ async function admitDoctorInvocation(options) {
       { cause: error }
     );
   }
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
@@ -21356,7 +21435,7 @@ async function admitDoctorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21488,7 +21567,7 @@ async function admitNotaryInvocation(options) {
     ...ticketFields,
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21590,7 +21669,7 @@ async function admitGleanerLeftInvocation(options) {
     attachments: [],
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21695,7 +21774,7 @@ async function admitReviewerInvocation(options) {
     role: "reviewer",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21720,7 +21799,7 @@ async function admitReviewerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21847,7 +21926,7 @@ async function admitMergerInvocation(options) {
     role: "merger",
     home: options.home
   });
-  const attachmentsDirectory = join14(runDirectory, "attachments");
+  const attachmentsDirectory = join15(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21875,7 +21954,7 @@ async function admitMergerInvocation(options) {
     // Authorized checks remain available on the assignment; default none.
     authorizedChecks: []
   });
-  const mergerInputPath = join14(runDirectory, "merger-input.json");
+  const mergerInputPath = join15(runDirectory, "merger-input.json");
   await writeFile4(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
@@ -21907,7 +21986,7 @@ async function admitMergerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -22200,7 +22279,7 @@ var init_invocation = __esm({
 // src/package-resources/method-skill.ts
 import { createHash as createHash4 } from "node:crypto";
 import { readFile as readFile10, realpath as realpath5 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -22217,10 +22296,10 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot2, name) {
-  return join15(packageRoot2, packagedMethodSkillRelativeDirectory(name));
+  return join16(packageRoot2, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot2, name) {
-  return join15(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
+  return join16(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
 }
 function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -22314,8 +22393,8 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot2, name);
-  const skillPathConfigured = join15(rootDirectory, "SKILL.md");
-  const provenancePath = join15(rootDirectory, "provenance.json");
+  const skillPathConfigured = join16(rootDirectory, "SKILL.md");
+  const provenancePath = join16(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
     provenanceRaw = await readFile10(provenancePath, "utf8");
@@ -22332,7 +22411,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join15(rootDirectory, rel);
+    const absolute = join16(rootDirectory, rel);
     let bytes;
     try {
       bytes = await readFile10(absolute);
@@ -22634,7 +22713,7 @@ var init_ledger_session_read = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir3 } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -22896,7 +22975,7 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
       throw error;
     }
     for (const name of names) {
-      const path = join16(directory, name);
+      const path = join17(directory, name);
       const fromPointer = name.endsWith(".pointer.json");
       const sessionPath = fromPointer ? await resolveOfficerSessionFromPointerFile(path) : path;
       if (sessionPath === void 0) continue;
@@ -22939,7 +23018,7 @@ var init_analyst_gate_cycles_read = __esm({
 
 // src/run-terminal-artifacts.ts
 import { readdir as readdir4, readFile as readFile12 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname8, join as join17 } from "node:path";
+import { basename as basename6, dirname as dirname8, join as join18 } from "node:path";
 function isMissingPathError2(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -23014,7 +23093,7 @@ async function listUniqueErrorFallbackPaths(directories) {
     }
     for (const name of names.sort((a, b) => a.localeCompare(b))) {
       if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join17(dir, name));
+      found.push(join18(dir, name));
     }
   }
   return found;
@@ -23030,14 +23109,14 @@ function presentUniqueFallbackBoundToRun(body, expectedRunId) {
   return typeof body.runId === "string" && body.runId === expectedRunId;
 }
 async function readRunTerminalArtifact(runDirectory) {
-  const artifactsDir = join17(runDirectory, "artifacts");
+  const artifactsDir = join18(runDirectory, "artifacts");
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    const path = join17(artifactsDir, file);
+    const path = join18(artifactsDir, file);
     const read3 = await readTerminalArtifactAtPath(path, file);
     if (read3 !== void 0) return read3;
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    const path = join17(runDirectory, relative3);
+    const path = join18(runDirectory, relative3);
     const read3 = await readTerminalArtifactAtPath(path, "error.json");
     if (read3 !== void 0) return read3;
   }
@@ -23175,14 +23254,14 @@ var init_submission_ledger = __esm({
 });
 
 // src/session-opening-materials.ts
-import { existsSync as existsSync6 } from "node:fs";
+import { existsSync as existsSync7 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname9, join as join18 } from "node:path";
-import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
+import { dirname as dirname9, join as join19 } from "node:path";
+import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "node:url";
 function resolvePackageRootDir(moduleUrl = import.meta.url) {
   let dir = dirname9(fileURLToPath(moduleUrl));
   for (let i = 0; i < 8; i += 1) {
-    if (existsSync6(join18(dir, "package.json")) && existsSync6(join18(dir, "souls"))) {
+    if (existsSync7(join19(dir, "package.json")) && existsSync7(join19(dir, "souls"))) {
       return dir;
     }
     const parent = dirname9(dir);
@@ -23206,7 +23285,7 @@ var init_session_opening_materials = __esm({
   "src/session-opening-materials.ts"() {
     "use strict";
     init_packaged_role_registry();
-    packageRootUrl = pathToFileURL2(resolvePackageRootDir() + "/").href;
+    packageRootUrl = pathToFileURL3(resolvePackageRootDir() + "/").href;
     MAIN_ROLE_SESSION_MATERIALS = {
       ...Object.fromEntries(
         PUBLIC_ROLE_RECORDS.map((record4) => [record4.role, record4.sessionMaterials])
@@ -23462,12 +23541,12 @@ var init_reviewer_dispatch = __esm({
 
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { readFile as readFile14, unlink as unlink3 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join19(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join20(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 async function clearReviewerDispatchRejection(runDirectory) {
   try {
@@ -23919,7 +23998,7 @@ var init_terminal = __esm({
 // src/public-cli/settlement.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname10, join as join20 } from "node:path";
+import { dirname as dirname10, join as join21 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -24339,7 +24418,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join20(dirname10(sessionFile), "evidence-children");
+  const childDirectory = join21(dirname10(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir5(childDirectory);
@@ -24350,7 +24429,7 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join20(childDirectory, file));
+      entries = await readBoundSessionEntries(join21(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
@@ -24404,7 +24483,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join20(dirname10(sessionFile), "auditor-roles")];
+  const childDirectories = [join21(dirname10(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -24419,7 +24498,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join20(childDirectory, file));
+        entries = await readBoundSessionEntries(join21(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
@@ -24967,8 +25046,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join20(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join20(sessionDirectory, "session.jsonl");
+  const directories = [join21(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join21(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -25066,8 +25145,8 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25111,8 +25190,8 @@ async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
 async function publishCoderArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25263,8 +25342,8 @@ function extractFixerMethodInvocations(entries, options) {
 async function publishFixerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25354,8 +25433,8 @@ async function settleLawfulFixerTerminalResult(admitted, authority, options) {
 async function publishCollectorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25462,8 +25541,8 @@ async function trySettleCollectorTerminalResult(admitted, authority) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25723,8 +25802,8 @@ function extractReviewerMethodInvocations(entries, options) {
 async function publishReviewerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25838,8 +25917,8 @@ function extractMergerMethodInvocations(entries, options) {
 async function publishMergerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join20(artifactsDir, "report.json");
-  const evidencePath = join20(artifactsDir, "evidence.json");
+  const reportPath = join21(artifactsDir, "report.json");
+  const evidencePath = join21(artifactsDir, "evidence.json");
   await writeFile5(
     reportPath,
     `${JSON.stringify(
@@ -25984,7 +26063,7 @@ function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   return dirs;
 }
 async function resolveFailureArtifactsBase(runDirectory) {
-  const artifactsDir = join20(runDirectory, "artifacts");
+  const artifactsDir = join21(runDirectory, "artifacts");
   try {
     await ensureRunArtifactsDir(runDirectory);
     return { baseDir: artifactsDir };
@@ -26000,7 +26079,7 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join20(dir, `${stem}.${randomUUID3()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join21(dir, `${stem}.${randomUUID3()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
@@ -26045,26 +26124,26 @@ async function publishFailureArtifacts(admitted, failure, authority) {
   } catch (error) {
     priorIssues.push(publicationAttemptFromError(sessionFile, error));
   }
-  const underArtifacts = baseDir === join20(admitted.runDirectory, "artifacts");
+  const underArtifacts = baseDir === join21(admitted.runDirectory, "artifacts");
   const uniqueFallbackDirs = uniqueFailureFallbackDirs(
     admitted.runDirectory,
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join20(baseDir, "error.json"),
-    join20(baseDir, "error.settlement.json"),
-    join20(admitted.runDirectory, "error.settlement.json")
+    join21(baseDir, "error.json"),
+    join21(baseDir, "error.settlement.json"),
+    join21(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join20(baseDir, "error.settlement.json"),
-    join20(baseDir, "error.json")
+    join21(baseDir, "error.settlement.json"),
+    join21(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join20(baseDir, "evidence.json"),
-    join20(baseDir, "evidence.settlement.json"),
-    join20(admitted.runDirectory, "evidence.settlement.json")
+    join21(baseDir, "evidence.json"),
+    join21(baseDir, "evidence.settlement.json"),
+    join21(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join20(baseDir, "evidence.settlement.json"),
-    join20(baseDir, "evidence.json")
+    join21(baseDir, "evidence.settlement.json"),
+    join21(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -26366,7 +26445,7 @@ var init_ticket_provenance_contracts = __esm({
 });
 
 // src/ticket-provenance.ts
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
     throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
@@ -26384,7 +26463,7 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   return {
     recordFile: path.recordFile,
     volumeDir: path.sessionDir,
-    humanViewFile: join21(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
+    humanViewFile: join22(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW)
   };
 }
 var init_ticket_provenance = __esm({
@@ -26434,7 +26513,7 @@ var init_case_dossier_delivery = __esm({
 
 // src/host-transition-prior-native.ts
 import { access as access2, readdir as readdir6 } from "node:fs/promises";
-import { dirname as dirname11, join as join22 } from "node:path";
+import { dirname as dirname11, join as join23 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -26459,7 +26538,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join22(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join23(sessionRoot, entry.name, "records.jsonl");
     try {
       await access2(recordFile);
       recordPaths.push(recordFile);
@@ -26529,7 +26608,7 @@ var init_public_run_credentials = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
     presentFailureTerminal(terminal, io);
@@ -26548,7 +26627,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
   }
 }
 function runArtifactsDirectory(runDirectory) {
-  return join23(runDirectory, "artifacts");
+  return join24(runDirectory, "artifacts");
 }
 async function ensureRealArtifactsDirectory(runDirectory) {
   const runStat = await lstat5(runDirectory);
@@ -26631,7 +26710,7 @@ function jsonSafeReplacer() {
 }
 async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
   const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-  const filePath = join23(
+  const filePath = join24(
     artifactsDir,
     `dispatch-error-attempt-${attempt}-${randomUUID4()}.json`
   );
@@ -26880,7 +26959,7 @@ var init_auto_resume = __esm({
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { readFile as readFile16, writeFile as writeFile6 } from "node:fs/promises";
-import { isAbsolute as isAbsolute7, join as join24, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join25, resolve as resolve8 } from "node:path";
 function appendContinuationSection(continuation, section) {
   const prompt = `${continuation.prompt}
 
@@ -26889,7 +26968,7 @@ ${section}`;
 }
 async function readInvocationHost(runDirectory) {
   try {
-    const raw = JSON.parse(await readFile16(join24(runDirectory, "invocation.json"), "utf8"));
+    const raw = JSON.parse(await readFile16(join25(runDirectory, "invocation.json"), "utf8"));
     return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
@@ -27043,7 +27122,7 @@ async function dispatchPostAdmissionTurn(input) {
     }
     try {
       await writeFile6(
-        join24(admitted.runDirectory, "stderr.log"),
+        join25(admitted.runDirectory, "stderr.log"),
         result2.stderr,
         "utf8"
       );
@@ -27152,7 +27231,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute7(attachmentPath) ? attachmentPath : resolve8(attachmentPath);
-  return pathContainedIn(join24(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join25(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -29321,7 +29400,7 @@ var init_judge_run = __esm({
 
 // src/public-cli/merger-run.ts
 import { mkdir as mkdir5, writeFile as writeFile7 } from "node:fs/promises";
-import { join as join25, resolve as resolve9 } from "node:path";
+import { join as join26, resolve as resolve9 } from "node:path";
 function mergerMethods(packageRoot2) {
   return [
     {
@@ -29387,8 +29466,8 @@ async function admitMergerShellForActivationFailure(options) {
     expectedConflictPaths: [],
     resolutionScope: []
   };
-  const admittedRequestPath = join25(runDirectory, "admitted-request.json");
-  const mergerInputPath = join25(runDirectory, "merger-input.json");
+  const admittedRequestPath = join26(runDirectory, "admitted-request.json");
+  const mergerInputPath = join26(runDirectory, "merger-input.json");
   await writeFile7(
     admittedRequestPath,
     `${JSON.stringify(
@@ -29828,10 +29907,10 @@ var init_analyst_book_key = __esm({
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { rename, rm, writeFile as writeFile8 } from "node:fs/promises";
-import { dirname as dirname12, join as join26 } from "node:path";
+import { dirname as dirname12, join as join27 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname12(destination);
-  const temporary = join26(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join27(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
     await writeFile8(temporary, contents);
     await rename(temporary, destination);
@@ -29848,7 +29927,7 @@ var init_atomic_write = __esm({
 
 // src/analyst-index.ts
 import { open as open3, readFile as readFile17, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname13, join as join27 } from "node:path";
+import { dirname as dirname13, join as join28 } from "node:path";
 function sleep(ms) {
   return new Promise((resolve11) => {
     setTimeout(resolve11, ms);
@@ -29857,7 +29936,7 @@ function sleep(ms) {
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname13(indexPath));
-  const lockPath = join27(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join28(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -29884,7 +29963,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join27(ledgerHome, "analyst", "library-index.json");
+  return join28(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -30180,7 +30259,7 @@ var init_analyst_cohort = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir7, readFile as readFile18 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -30193,7 +30272,7 @@ function isRecord16(value) {
 async function readExistingRunLifecycleState(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile18(join28(runDirectory, "run-state.json"), "utf8")
+      await readFile18(join29(runDirectory, "run-state.json"), "utf8")
     );
     if (!isRecord16(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
@@ -30225,7 +30304,7 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile18(join28(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile18(join29(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError5(error)) return void 0;
     throw error;
@@ -30257,7 +30336,7 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile18(join28(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile18(join29(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
     if (isRecord16(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
@@ -30265,7 +30344,7 @@ async function resolveSessionFile(runDirectory) {
   } catch (error) {
     if (!isMissingPathError5(error)) throw error;
   }
-  return join28(runDirectory, "session", "session.jsonl");
+  return join29(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -30437,9 +30516,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join28(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join29(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join28(input.runDirectory, "session", "auditor-roles"),
+      join29(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -30472,7 +30551,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join28(ledgerHome, "books");
+  const booksRoot = join29(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -30504,7 +30583,7 @@ async function scanAnalystIssueRuns(input) {
   const unreadable = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const runsDir = join28(booksRoot, book, "runs");
+    const runsDir = join29(booksRoot, book, "runs");
     let runNames;
     try {
       const entries = await readdir7(runsDir, { withFileTypes: true });
@@ -30516,7 +30595,7 @@ async function scanAnalystIssueRuns(input) {
     for (const runName of runNames) {
       const parsed = parseRunDirectoryName2(runName);
       if (parsed === void 0) continue;
-      const runDirectory = join28(runsDir, runName);
+      const runDirectory = join29(runsDir, runName);
       let scopeFields;
       try {
         scopeFields = await readInvocationScopeFields(runDirectory);
@@ -31370,7 +31449,7 @@ var init_analyst_metric_family = __esm({
 
 // src/analyst-page.ts
 import { createHash as createHash5 } from "node:crypto";
-import { dirname as dirname14, join as join29 } from "node:path";
+import { dirname as dirname14, join as join30 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -31381,7 +31460,7 @@ function analystIssuePageKey(address) {
   return createHash5("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join29(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join30(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -31914,7 +31993,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 function takePublicGlobalFlag(argv, index, options) {
   const tokens = argv.slice(index);
   const taken = options.takeDashed(tokens);
@@ -31966,7 +32045,7 @@ function resolveRoleTurnHost(env, options) {
           ok: true,
           host: {
             executeTurn: async (request) => {
-              hostPromise ??= loadProductionAcpHostFactory(env.packageRoot, name).then(
+              hostPromise ??= loadProductionExternalHostFactory(env.packageRoot, name).then(
                 (create) => create({
                   packageRoot: env.packageRoot,
                   principalAuthority: options.principalAuthority
@@ -32053,7 +32132,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join30(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join31(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -32946,7 +33025,7 @@ var init_cli = __esm({
     init_registry2();
     init_cli_errors();
     init_host_descriptions();
-    init_load_production_acp_host();
+    init_load_production_external_host();
     init_role_turn_host();
     init_invocation();
     init_option_definitions();
@@ -33017,8 +33096,8 @@ var init_cli = __esm({
 });
 
 // src/public-cli/main.ts
-import { existsSync as existsSync7 } from "node:fs";
-import { dirname as dirname15, join as join31 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { dirname as dirname15, join as join32 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -33107,13 +33186,14 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname15(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join31(binDir, "..", "..");
-  if (existsSync7(join31(canonical, "package.json"))) {
+  const canonical = join32(binDir, "..", "..");
+  if (existsSync8(join32(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;
 }
 var packageRoot = resolvePackageRoot(here);
+process.env.AK_ROLE_PACKAGE_ROOT = packageRoot;
 ensureHostPiRuntimeResolvable(packageRoot);
 var { runAkRole: runAkRole2 } = await Promise.resolve().then(() => (init_cli(), cli_exports));
 var result = await runAkRole2(process.argv.slice(2), { packageRoot });