@akagilnc/pi-workflow-roles 0.1.4259 → 0.1.4276

package/dist/public-cli/registry.js

@@ -19,62 +19,6 @@ function seatModelOnly(seat) {
   if (seat?.provider === void 0 || seat.model === void 0) return void 0;
   return seat.thinking === void 0 ? { provider: seat.provider, model: seat.model } : { provider: seat.provider, model: seat.model, thinking: seat.thinking };
 }
-const STARTUP_CANDIDATES = {
-  judge: [
-    { provider: "openai-codex", model: "gpt-5.6-sol", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  countersign: [
-    { provider: "openai-codex", model: "gpt-5.6-sol", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  "gleaner-left": [
-    { provider: "openai-codex", model: "gpt-5.6-sol", thinking: "medium" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  reviewer: [
-    { provider: "openai-codex", model: "gpt-5.6-sol", thinking: "medium" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  coder: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  fixer: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  collector: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  doctor: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  merger: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "high" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  // #620: subordinate officers inherit gatekeeper; no package startup model.
-  notary: [],
-  // #453/#620/#639: gatekeeper callable but no package startup model — caller
-  // configures it or inherits on the province path.
-  gatekeeper: [],
-  inspector: [],
-  navigator: [
-    { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "medium" },
-    { provider: "xai", model: "grok-4.5", thinking: "high" }
-  ],
-  // #675: auditor public seat — no package startup; caller configures.
-  auditor: [],
-  // #708 `diarist-seat-default`: owner-set initial value; changed in the seat
-  // table like any other seat. No engine axis, package-default host.
-  diarist: [{ provider: "xai", model: "grok-4.5", thinking: "medium" }]
-};
-function publicStartupCandidates(seat) {
-  return STARTUP_CANDIDATES[seat];
-}
 const PUBLIC_DETERMINISTIC_COMMANDS = ["analyst"];
 function listHelpCapabilities() {
   const support = PUBLIC_CLI_SUPPORT_COMMANDS.map((name) => ({
@@ -118,6 +62,5 @@ export {
   isPublicCliSupportCommand,
   isPublicConfigurableSeat,
   listHelpCapabilities,
-  publicStartupCandidates,
   seatModelOnly
 };

package/dist/public-role-summons.js

@@ -77,11 +77,17 @@ function hostSelectionFailureFromUnknown(error) {
   const failure = error.failure;
   return failure;
 }
-async function createSummonEnv(options) {
-  const [{ piDurablePrincipalAuthority }, { appendPiSessionCustomEntry }, { resolveRoleTurnHost }] = await Promise.all([
+async function createSummonEnv(options, afterHost) {
+  const [
+    { piDurablePrincipalAuthority },
+    { appendPiSessionCustomEntry },
+    { resolveRoleTurnHost },
+    { missingResolvedSeatModelMessage, resolvedSeatWithModel }
+  ] = await Promise.all([
     import("./pi/durable-principal.js"),
     import("./pi/role-turn-host.js"),
-    import("./public-cli/role-turn-host-resolution.js")
+    import("./public-cli/role-turn-host-resolution.js"),
+    import("./public-cli/config.js")
   ]);
   const principalAuthority = piDurablePrincipalAuthority;
   const roleTurnHost = resolveRoleTurnHost(
@@ -93,26 +99,37 @@ async function createSummonEnv(options) {
     },
     { role: options.role, seat: options.seat, principalAuthority }
   );
-  const hostName = options.seat.host ?? "pi";
+  afterHost?.();
+  const seatWithModel = resolvedSeatWithModel(options.seat);
+  if (seatWithModel === void 0) {
+    return {
+      ok: false,
+      missingModelMessage: missingResolvedSeatModelMessage(options.role)
+    };
+  }
+  const hostName = seatWithModel.host ?? "pi";
   const { loadHostProvidersTable, projectHostFacingProvider } = await import("./public-cli/host-providers.js");
-  const hostFacingSelection = options.seat.selection === void 0 ? void 0 : projectHostFacingProvider(
-    options.seat.selection,
+  const hostFacingSelection = projectHostFacingProvider(
+    seatWithModel.selection,
     hostName,
     loadHostProvidersTable(options.home),
     options.home
   );
   return {
-    home: options.home,
-    principalAuthority,
-    agentDir: options.agentDir,
-    sessionAppender: appendPiSessionCustomEntry,
-    packageRoot: options.packageRoot,
-    roleTurnHost,
-    cwd: options.cwd,
-    credentials: options.credentials,
-    ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
-    ...projectSeatEngine(options.seat),
-    ...projectSeatHost(options.seat)
+    ok: true,
+    env: {
+      home: options.home,
+      principalAuthority,
+      agentDir: options.agentDir,
+      sessionAppender: appendPiSessionCustomEntry,
+      packageRoot: options.packageRoot,
+      roleTurnHost,
+      cwd: options.cwd,
+      credentials: options.credentials,
+      ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
+      ...projectSeatEngine(seatWithModel),
+      ...projectSeatHost(seatWithModel)
+    }
   };
 }
 async function summonPublicRole(options) {
@@ -127,46 +144,72 @@ async function summonPublicRole(options) {
   const credentials = options.credentials ?? await loadCredentialProviders(agentDir);
   const config = await loadPublicCliConfig(home);
   const seat = resolveEffectiveSeat(config, options.role, credentials);
-  let summonEnv;
-  try {
-    summonEnv = await createSummonEnv({
-      role: options.role,
-      home,
-      agentDir,
-      cwd: options.cwd,
-      packageRoot,
-      credentials,
-      seat,
-      ...options.extraPiArgs === void 0 ? {} : { extraPiArgs: options.extraPiArgs },
-      ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
-      ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters }
-    });
-  } catch (error) {
-    const failure = hostSelectionFailureFromUnknown(error);
-    if (failure !== void 0) {
-      const { formatHostSelectionFailure } = await import("./public-cli/role-turn-host-resolution.js");
-      return { exitCode: 1, stderr: formatHostSelectionFailure(failure) };
-    }
-    throw error;
-  }
-  const env = {
-    ...summonEnv,
-    // Station child role run (#840): omit automatic navigator attendance.
-    stationChild: true,
-    // Host config passthrough only — same face as public CLI (#422 / #675).
-    ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
-    // Parent cancellation reaches the nested activation's own turn dispatch.
-    ...options.signal === void 0 ? {} : { signal: options.signal },
-    // #753: reask rides the existing notary same-ticket resume summons.instruction.
-    ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
-    // #879: verbatim submission body on officer dialogue content channel.
-    ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
-    ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
-    // createRunId is the only remaining env overlay — host is seat-selected above.
-    ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
-  };
   const captured = options.io === void 0 ? createCapturingIo() : void 0;
   const io = options.io ?? captured.io;
+  const summonEnvInput = {
+    role: options.role,
+    home,
+    agentDir,
+    cwd: options.cwd,
+    packageRoot,
+    credentials,
+    seat,
+    ...options.extraPiArgs === void 0 ? {} : { extraPiArgs: options.extraPiArgs },
+    ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+    ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters }
+  };
+  async function prepareSummonEnv(afterHost) {
+    try {
+      const built = await createSummonEnv(summonEnvInput, afterHost);
+      if (!built.ok) {
+        return { ok: false, exitCode: 1, stderr: built.missingModelMessage };
+      }
+      return {
+        ok: true,
+        env: {
+          ...built.env,
+          stationChild: true,
+          ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
+          ...options.signal === void 0 ? {} : { signal: options.signal },
+          ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
+          ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
+          ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
+          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
+        }
+      };
+    } catch (error) {
+      const failure = hostSelectionFailureFromUnknown(error);
+      if (failure !== void 0) {
+        const { formatHostSelectionFailure } = await import("./public-cli/role-turn-host-resolution.js");
+        return { ok: false, exitCode: 1, stderr: formatHostSelectionFailure(failure) };
+      }
+      const { CliUsageError } = await import("./public-cli/cli-errors.js");
+      if (error instanceof CliUsageError) {
+        const { presentStructuralRejection } = await import("./public-cli/settlement.js");
+        presentStructuralRejection(error, io);
+        return { ok: false, exitCode: 2 };
+      }
+      throw error;
+    }
+  }
+  function projectPrepareFailure(prepared) {
+    const parts = [prepared.stderr, captured?.stderrText()].filter(
+      (s) => typeof s === "string" && s !== ""
+    );
+    const stderr2 = parts.length === 0 ? void 0 : parts.join("");
+    return {
+      exitCode: prepared.exitCode,
+      ...stderr2 === void 0 ? {} : { stderr: stderr2 }
+    };
+  }
+  async function runPrepared(parse, run) {
+    let parsedArgv;
+    const prepared = await prepareSummonEnv(() => {
+      parsedArgv = parse(options.argv);
+    });
+    if (!prepared.ok) return { fail: projectPrepareFailure(prepared) };
+    return { ok: await run(prepared.env, () => parsedArgv) };
+  }
   let result;
   switch (options.role) {
     case "notary": {
@@ -174,7 +217,9 @@ async function summonPublicRole(options) {
         import("./public-cli/notary-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicNotary(options.argv, env, io, parseNotaryArgv);
+      const stepped = await runPrepared(parseNotaryArgv, (env, once) => runPublicNotary(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
     case "inspector": {
@@ -182,49 +227,23 @@ async function summonPublicRole(options) {
         import("./public-cli/inspector-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicInspector(options.argv, env, io, parseInspectorArgv);
-      break;
-    }
-    case "auditor": {
-      const [{ runPublicInstructionSeat }, { parseAuditorArgv }] = await Promise.all([
-        import("./public-cli/instruction-seat-run.js"),
-        import("./public-cli/invocation.js")
-      ]);
-      result = await runPublicInstructionSeat(
-        options.argv,
-        env,
-        io,
-        "auditor",
-        parseAuditorArgv
-      );
-      break;
-    }
-    case "navigator": {
-      const [{ runPublicInstructionSeat }, { parseNavigatorArgv }] = await Promise.all([
-        import("./public-cli/instruction-seat-run.js"),
-        import("./public-cli/invocation.js")
-      ]);
-      result = await runPublicInstructionSeat(
-        options.argv,
-        env,
-        io,
-        "navigator",
-        parseNavigatorArgv
-      );
+      const stepped = await runPrepared(parseInspectorArgv, (env, once) => runPublicInspector(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
+    case "auditor":
+    case "navigator":
     case "gatekeeper": {
-      const [{ runPublicInstructionSeat }, { parseGatekeeperArgv }] = await Promise.all([
+      const seat2 = options.role;
+      const [{ runPublicInstructionSeat }, invocation] = await Promise.all([
         import("./public-cli/instruction-seat-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicInstructionSeat(
-        options.argv,
-        env,
-        io,
-        "gatekeeper",
-        parseGatekeeperArgv
-      );
+      const parse = seat2 === "auditor" ? invocation.parseAuditorArgv : seat2 === "navigator" ? invocation.parseNavigatorArgv : invocation.parseGatekeeperArgv;
+      const stepped = await runPrepared(parse, (env, once) => runPublicInstructionSeat(options.argv, env, io, seat2, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
     case "judge": {
@@ -232,7 +251,9 @@ async function summonPublicRole(options) {
         import("./public-cli/judge-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicJudge(options.argv, env, io, parseJudgeArgv);
+      const stepped = await runPrepared(parseJudgeArgv, (env, once) => runPublicJudge(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
     case "doctor": {
@@ -240,7 +261,9 @@ async function summonPublicRole(options) {
         import("./public-cli/doctor-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicDoctor(options.argv, env, io, parseDoctorArgv);
+      const stepped = await runPrepared(parseDoctorArgv, (env, once) => runPublicDoctor(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
     case "diarist": {
@@ -248,7 +271,9 @@ async function summonPublicRole(options) {
         import("./public-cli/diarist-run.js"),
         import("./public-cli/invocation.js")
       ]);
-      result = await runPublicDiarist(options.argv, env, io, parseDiaristArgv);
+      const stepped = await runPrepared(parseDiaristArgv, (env, once) => runPublicDiarist(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
       break;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4259",
+  "version": "0.1.4276",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/notary.md

@@ -20,6 +20,7 @@
     报「参与人物不存在」的那个人其实存在——他叫练国事，LLM 按奏疏称他「陕西巡抚」，引擎只认本名、连自己名册里存着的别名都不认；而符宝郎三轮放行，是因为闸只核「有没有编陛下的话」，票面确实一个字没编，于是一张根因就错的票完全合法地过了庭。
     意图曲解：大理寺 r2 要求「最终 head 上先真跑一次审核往返才收敛」，起居录当时已有陛下「645等我在的时候试。你不跑。做完以后告诉我就行了。我会拿真的东西跑」（#645 大理寺 r2，2026-09-09 02:52，符宝郎 run 01a0821b）。符宝郎两轮放行，判词写「仍与票面『交付后实际跑』一致」——对了六个字，没对陛下明说的意思。
 	只查行为不查内容：大理寺查「每轮新增回执为空」，就断定起居录里没有记录，判票庭伪引；实际权威账本里那 24 条一直都在，引证属实。而符宝郎自己也没找到起居录，就信了大理寺引用的起居录。符宝郎要的是「权威起居录」，判官给的是「每轮新增回执」，把后者当成了前者的充分证明，然后第三轮 pass 时还把这个推断写进了署词。。认得出票、本该有录却找不到，应上呈，不是通过；真无票对象（true-unbound）本就无录，按 ADR 0075 改以 source-run 核旨，不得因缺录打回给事中。
+	驳回被读成授权：一条腿怎么知道自己在哪张票上，陛下两次驳回——「？ 起居录是吃干饭的吗？还要问这个？」「票号不是 读起居录吗？又是什么道？」——意思是 LLM 自己去读那份记录；票面却把「读」读成「机械层读」，据此写出「缺来源的九席在 turn 之前读起居录取得本票号」与验收「经新增前置读取接缝」，授权栏挂的正是那两句驳回（#858 seal 5，2026-09-14 23:35，符宝郎 run 01a0a0aa）。符宝郎九轮全 pass，因为闸只核「有没有编陛下的话」，那两句确实一个字没编——于是一段没人批准的机制完全合法地过了庭，施工席照它跑了一整局、零 commit 收工，直到陛下第四次开口才拦下。原话为真只答了一半，另一半是：这条机制是从这句话的哪个意思推出来的？推不出即加戏。驳回句是关闭分叉，不是开工授权。
     等等。。。
 任一病成立，点名该条驳回；拿不准陛下本意的，上呈。
 

package/src/navigator-attendance.ts

@@ -18,7 +18,6 @@ import {
 import type { HostContext } from "./host-contracts.ts";
 import { createNativeNavigatorSessionFactory } from "./navigator-public-session.ts";
 import {
-  NAVIGATOR_DEFAULT_MODEL,
   NAVIGATOR_PREPARE_TOOL_NAME,
   NavigatorUnavailableError,
   navigatorModelSettingPath,
@@ -40,7 +39,6 @@ import {
 import { sitianReport } from "./sitian-facade.ts";
 
 export {
-  NAVIGATOR_DEFAULT_MODEL,
   NAVIGATOR_PREPARE_TOOL_NAME,
   NavigatorUnavailableError,
   navigatorModelSettingPath,

package/src/navigator-public-session.ts

@@ -12,7 +12,6 @@ import {
   navigatorProviderFailureFromError,
   navigatorUnavailableError,
   parseNavigatorModelSetting,
-  resolveNavigatorSeatSelection,
   type NavigatorProviderFailureFact,
   type NavigatorSessionFactory,
 } from "./navigator-session-contracts.ts";
@@ -43,8 +42,9 @@ async function resolveNavigatorLedgerHome(context: HostContext): Promise<string
 
 export function createNativeNavigatorSessionFactory(): NavigatorSessionFactory {
   return async ({ context, subject, tool }) => {
-    const resolved = await resolveNavigatorSeatSelection(context);
-    let thinkingLevel = resolved.thinkingLevel;
+    // Model is enforced at prepare (attendance seat resolve) and at prompt (summon).
+    // Factory open only books the archivist nest — no package default, no eager seat read.
+    let thinkingLevel: string | undefined;
 
     // Archivist nest for attendance route memory only (ADR 0018 / 0065) — not a session open.
     // #852: navigator/<work-subject> is the sole book-top exception; always pass subject so

package/src/navigator-session-contracts.ts

@@ -15,7 +15,6 @@ import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 
 
 export const NAVIGATOR_PREPARE_TOOL_NAME = "ak_navigator_prepare" as const;
-export const NAVIGATOR_DEFAULT_MODEL = "openai-codex/gpt-5.6-luna:max" as const;
 
 export type NavigatorUnavailableKey =
   | "context" | "session" | "model" | "thinking" | "auth" | "quota" | "transport" | "unknown";
@@ -229,8 +228,9 @@ export async function readNavigatorModelSetting(path = navigatorModelSettingPath
     }
     return raw.model;
   } catch (error) {
+    // #178: missing file is absence (no package default).
     if (error instanceof Error && "code" in error && (error as NodeJS.ErrnoException).code === "ENOENT") {
-      return NAVIGATOR_DEFAULT_MODEL;
+      throw new Error("Navigator model setting is missing");
     }
     throw error;
   }
@@ -294,19 +294,13 @@ export async function resolveNavigatorSeatSelection(
           : packageMachineHome();
     const config = await loadPublicCliConfig(home);
     const modelOnly = seatModelOnly(config.seats.navigator);
-    // Seat table is the only model authority — no legacy navigator-model.json.
-    // Bare missing seat uses the package default constant (not a file path).
+    // Seat table only — missing navigator seat → typed model-unavailable (#178).
     if (modelOnly === undefined) {
-      const parsed = parseNavigatorModelSetting(NAVIGATOR_DEFAULT_MODEL);
-      return {
-        selection: {
-          provider: parsed.provider,
-          model: parsed.model,
-          ...(parsed.thinkingLevel === undefined ? {} : { thinking: parsed.thinkingLevel }),
-        },
-        configuredLabel: NAVIGATOR_DEFAULT_MODEL,
-        ...(parsed.thinkingLevel === undefined ? {} : { thinkingLevel: parsed.thinkingLevel }),
-      };
+      const { missingResolvedSeatModelMessage } = await import("./public-cli/config.ts");
+      throw navigatorUnavailableError(
+        "model",
+        new Error(missingResolvedSeatModelMessage("navigator")),
+      );
     }
     // Host params passthrough only — no map/validate/default (#675 ⑥).
     const thinkingRaw = modelOnly.thinking;