@akagilnc/pi-workflow-roles 0.1.4444 → 0.1.4489

package/README.md

@@ -56,6 +56,8 @@ ak-role config set-auto-resume-limit 3
 
 **Host providers (#788):** seat rows keep one provider name. Owner edits `~/.ak-roles/host-providers.json` (`{ "hermes": { "xai": "xai-oauth" } }`); code only reads it. Missing table entries ask the host directory (hermes this ticket): unique match wins, zero or many fail loud. Priority is table > unique > fail — no package discretion. `config show` prints the table as written.
 
+**Forced method skills (#922):** Pi uses `--skill`. Claude uses `--plugin-dir` and its native slash command when a role binds exactly one Skill; its current print harness cannot issue multiple slash commands for one turn, so multi-Skill roles such as Fixer have no forced-method call on Claude. Codex discovers the packaged methods through its documented project `.agents/skills` catalog, which is created only when absent and then left in place; existing entries are never replaced, and Codex receives every official `$skill-name` invocation. Hermes ACP and Grok ACP cannot force a Skill call through their current harness interfaces. These gaps are documentation only: the package does not invent an adapter, capability probe, typed failure, catalog, or operator prerequisite for them. The package never changes host trust or configuration.
+
 For Gate officers (`gatekeeper` / `inspector` / `notary`) resolution is officer pin → province (`gatekeeper`) pin → inherit parent session; an explicit selection that fails is loud and does not fall back. Configuration usage and refusal text are owned by `ak-role config` / `ak-role help config`. The persistent file is machine-wide and shared across CLI builds: seat keys this build does not know are skipped on read (not an error); unknown field-level keys on known seats keep their existing tolerance.
 
 Receipts are typed, so callers compose roles without parsing prose; ordering and stopping stay caller-owned ([ADR 0010](docs/adr/0010-callers-own-role-composition-and-repetition.md)). Programmatic consumers derive contracts from the exported schemas in `src/package-contracts/`, not from this guide.

package/README.zh-CN.md

@@ -56,6 +56,8 @@ ak-role config set-auto-resume-limit 3
 
 **宿主 provider 表（#788）：** 席位行只写一份 provider 名。owner 手改 `~/.ak-roles/host-providers.json`（形如 `{ "hermes": { "xai": "xai-oauth" } }`）；代码只读。表里没有的问宿主目录（本票 hermes）：唯一即用，零个或多个响亮失败。优先级：表 > 唯一 > 失败，代码无裁量。`config show` 原样打印该表。
 
+**强制方法 Skill（#922）：** Pi 使用 `--skill`。角色只绑定一个 Skill 时，Claude 使用 `--plugin-dir` 与原生 slash command；当前 print harness 无法在一轮发出多个 slash command，所以 Fixer 等多 Skill 角色在 Claude 上没有强制方法调用。Codex 通过官方项目 `.agents/skills` 目录发现随包方法：目录缺失时创建常设软链，既有项不覆盖；调用时显式传入每个官方 `$skill-name`。Hermes ACP 与 Grok ACP 当前 harness 无法强制 Skill 调用。这些缺口只在文档说明：本包不为其另造适配、能力探测、typed failure、catalog 或操作员前置，也不改宿主 trust／配置。
+
 门下省官席解析顺序：官自钉 → 省钉（`gatekeeper`）→ 继承父 session；显式指定失败响亮、不回退。配置用法与拒绝文案以 `ak-role config`／`ak-role help config` 为准。持久配置是全机共享单文件、多 CLI 版本同读：本构建不认识的席位键读时跳过（不报错）；已知席位上的未知字段沿用现行容忍。
 
 回执是 typed 的，调用者不必解析散文即可组合角色；顺序与停止归调用者（[ADR 0010](docs/adr/0010-callers-own-role-composition-and-repetition.md)）。编程消费者从 `src/package-contracts/` 导出推导契约，不从本文。

package/dist/acp-host/description.js

@@ -1,6 +1,6 @@
 /**
  * One ACP host description. Every host-specific value the generic ACP adapter
- * needs — binary location, argv shape, resume verb, binding filename, child env,
+ * needs — binary location, argv shape, resume verb, binding filename,
  * optional seat-profile soul — is data here; the lifecycle in role-turn-host.ts
  * stays one copy (#732).
  */
@@ -9,8 +9,7 @@ import { join } from "node:path";
 export function resolveAcpBinary(description, operatorHome) {
     return join(operatorHome, ...description.binaryFromHome);
 }
-/** Stdio argv: optional profile flag, thinking flag (before the subcommand),
- * prefix, optional model flag pair, suffix. */
+/** Stdio argv: optional profile flag, thinking flag, prefix, model, suffix. */
 export function acpStdioArgs(description, model, seat) {
     const { prefix, suffix, modelFlag, thinkingFlag } = description.argv;
     const pair = (flag, value) => flag === undefined || value === undefined ? [] : [flag, value];

package/dist/acp-host/production-host.js

@@ -1521,10 +1521,10 @@ __export(session_assistant_usage_exports, {
 });
 import { join as join8 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile24 } = await import("node:fs/promises");
+  const { readFile: readFile23 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile24(sessionFile, "utf8");
+    text = await readFile23(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -3498,13 +3498,10 @@ function assertRegisteredHostName(host) {
   }
   throw new Error(`unregistered host: ${host}`);
 }
-var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
+var DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
 var init_host_descriptions = __esm({
   "src/host-descriptions.ts"() {
     "use strict";
-    PRIVATE_COMPAT_ENV = Object.fromEntries(
-      ["CLAUDE", "CURSOR", "CODEX"].flatMap((vendor) => ["SKILLS", "RULES", "AGENTS", "MCPS", "HOOKS", "SESSIONS"].map((kind) => [`GROK_${vendor}_${kind}_ENABLED`, "false"]))
-    );
     DEFAULT_ROLE_TURN_HOST = "pi";
     HOST_DESCRIPTIONS = Object.freeze({
       /** Operator home `~/.grok`, native session/load resume, `agent [--model X] stdio`. */
@@ -3517,12 +3514,7 @@ var init_host_descriptions = __esm({
         }),
         modelPassing: "argv",
         boundResume: "session/load",
-        sessionBindingFile: "grok-acp-session.json",
-        childEnv: Object.freeze({
-          ...PRIVATE_COMPAT_ENV,
-          GROK_MEMORY: "0",
-          GROK_SUBAGENTS: "0"
-        })
+        sessionBindingFile: "grok-acp-session.json"
       }),
       /**
        * Operator home `~/.hermes`, native session/load resume, `acp` subcommand.
@@ -3541,7 +3533,6 @@ var init_host_descriptions = __esm({
         modelPassing: "set_model",
         boundResume: "session/load",
         sessionBindingFile: "hermes-acp-session.json",
-        childEnv: Object.freeze({}),
         seatProfileSoul: Object.freeze({
           flag: "-p",
           namePrefix: "ak-",
@@ -3562,12 +3553,7 @@ var init_host_descriptions = __esm({
           // Intermediate assistant/tool/system events require verbose with stream-json.
           "--verbose",
           "--permission-mode",
-          "bypassPermissions",
-          // Empty sources: no user/project/local operator surface (envelope owns materials).
-          "--setting-sources",
-          "",
-          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
-          "--strict-mcp-config"
+          "bypassPermissions"
         ]),
         promptFlag: "-p",
         modelFlag: "--model",
@@ -11273,10 +11259,10 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile24 } = await import("node:fs/promises");
+  const { readFile: readFile23 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile24(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile23(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
@@ -11877,16 +11863,27 @@ async function readPackageMaterial(relativePath) {
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
-  for (const relativePath of relativePaths) {
-    chunks.push(await readPackageMaterial(relativePath));
-  }
+  for (const relativePath of relativePaths) chunks.push(await readPackageMaterial(relativePath));
   return chunks.join("\n\n");
 }
+function roleSoulPath(role, materials) {
+  const suffix = `/souls/${role}.md`;
+  const path = materials.find((candidate) => `/${candidate}`.endsWith(suffix));
+  if (path === void 0) throw new Error(`session materials omit the ${role} Soul`);
+  return path;
+}
+async function loadSeparatedSessionPart(role, materials, part) {
+  const soul = roleSoulPath(role, materials);
+  return part === "soul" ? readPackageMaterial(soul) : joinPackageMaterials(materials.filter((path) => path !== soul));
+}
 function loadMainRoleSessionMaterials(role) {
-  return joinPackageMaterials(MAIN_ROLE_SESSION_MATERIALS[role]);
+  return loadSeparatedSessionPart(role, MAIN_ROLE_SESSION_MATERIALS[role], "soul");
+}
+function loadMainRoleReferenceMaterials(role) {
+  return loadSeparatedSessionPart(role, MAIN_ROLE_SESSION_MATERIALS[role], "references");
 }
 function loadGatekeeperSessionMaterials(role) {
-  return joinPackageMaterials(GATEKEEPER_SESSION_MATERIALS[role]);
+  return loadSeparatedSessionPart(role, GATEKEEPER_SESSION_MATERIALS[role], "soul");
 }
 var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS, GATEKEEPER_SESSION_MATERIALS;
 var init_session_opening_materials = __esm({
@@ -11916,6 +11913,8 @@ __export(auditor_soul_exports, {
   AUDITOR_SESSION_MATERIALS: () => AUDITOR_SESSION_MATERIALS,
   AUDITOR_SOUL_ROLES: () => AUDITOR_SOUL_ROLES,
   isAuditorSoulRole: () => isAuditorSoulRole,
+  loadAuditorReferenceMaterials: () => loadAuditorReferenceMaterials,
+  loadAuditorReferenceMaterialsFromSubjectInput: () => loadAuditorReferenceMaterialsFromSubjectInput,
   loadAuditorSoul: () => loadAuditorSoul,
   loadAuditorSoulFromSubjectInput: () => loadAuditorSoulFromSubjectInput,
   resolveAuditorSubject: () => resolveAuditorSubject
@@ -11942,11 +11941,18 @@ async function loadAuditorSoul(role) {
   if (soul.trim().length === 0) {
     throw new Error(`The ${role} auditor Soul is blank`);
   }
-  return joinPackageMaterials(materials);
+  return soul;
+}
+function loadAuditorReferenceMaterials(role) {
+  const soulPath = auditorSoulRelativePath(role);
+  return joinPackageMaterials(AUDITOR_SESSION_MATERIALS[role].filter((path) => path !== soulPath));
 }
 async function loadAuditorSoulFromSubjectInput(raw) {
   return loadAuditorSoul(resolveAuditorSubject(raw));
 }
+function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
+  return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
+}
 var AUDITOR_SOUL_ROLES, AK_ROLE_AUDITOR_SUBJECT_ENV, AK_ROLE_AUDITOR_SOURCE_RUN_ENV, AUDITOR_SESSION_MATERIALS;
 var init_auditor_soul = __esm({
   "src/auditor-soul.ts"() {
@@ -20717,9 +20723,9 @@ import { randomUUID as randomUUID9 } from "node:crypto";
 // src/role-envelope.ts
 init_engine_detour();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { mkdir as mkdir5, readFile as readFile20, writeFile as writeFile12 } from "node:fs/promises";
+import { mkdir as mkdir6, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename9, dirname as dirname21, join as join40 } from "node:path";
+import { dirname as dirname22, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -20804,9 +20810,43 @@ async function requireGatekeeperPass(options) {
   }
 }
 
+// src/host-native-method.ts
+import { lstat as lstat7, mkdir as mkdir5, readlink, realpath as realpath6, symlink } from "node:fs/promises";
+import { basename as basename9, dirname as dirname18, join as join36 } from "node:path";
+var packagedMethodsDir = (root) => join36(root, "resources", "methods");
+function hostMethodSkills(methods) {
+  return Object.freeze(methods.flatMap((method) => {
+    if (method.kind !== "skill") return [];
+    const name = basename9(dirname18(method.path));
+    return name ? [Object.freeze({ name })] : [];
+  }));
+}
+async function installWorkspaceMethodSkills(cwd, packageRoot) {
+  const target = await realpath6(packagedMethodsDir(packageRoot));
+  const link = join36(cwd, ".agents", "skills");
+  try {
+    const stat2 = await lstat7(link);
+    if (!stat2.isSymbolicLink() || await realpath6(link) !== target) {
+      const detail = stat2.isSymbolicLink() ? `symlink to ${await readlink(link)}` : "non-symlink entry";
+      throw new Error(`workspace method catalog conflict at ${link}: ${detail}`);
+    }
+    return;
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  await mkdir5(dirname18(link), { recursive: true });
+  try {
+    await symlink(target, link);
+  } catch (error) {
+    if (error.code !== "EEXIST") throw error;
+    if (await realpath6(link).catch(() => "") !== target) {
+      throw new Error(`workspace method catalog conflict at ${link}`);
+    }
+  }
+}
+
 // src/role-envelope.ts
 init_packaged_role_registry();
-init_method_skill();
 
 // src/role-runtime.ts
 init_host_contracts();
@@ -20814,7 +20854,7 @@ init_sitian_facade();
 init_submission_ledger();
 init_collector_ledger();
 import { readFileSync as readFileSync6, writeSync as writeSync4 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 import { Value as Value4 } from "typebox/value";
 
 // src/activation-trace.ts
@@ -20864,7 +20904,7 @@ import {
   openSync as openSync2,
   writeSync
 } from "node:fs";
-import { dirname as dirname18, isAbsolute as isAbsolute10, resolve as resolve15 } from "node:path";
+import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve15 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -21013,7 +21053,7 @@ function appendActivationLedgerLine(ledgerPath, line2, options) {
   }
   const resolvedLedger = resolve15(ledgerPath);
   const resolvedHome = resolve15(options.ledgerHome);
-  const parent = dirname18(resolvedLedger);
+  const parent = dirname19(resolvedLedger);
   ensureRealDirectoryTree(resolvedHome, parent);
   assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
   if (typeof constants2.O_NOFOLLOW !== "number") {
@@ -21373,15 +21413,15 @@ init_collector_github();
 
 // src/collector-handbook.ts
 import { readFile as readFile19 } from "node:fs/promises";
-import { join as join37, sep as sep5 } from "node:path";
+import { join as join38, sep as sep5 } from "node:path";
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { rename as rename3, rm as rm3, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname19, join as join36 } from "node:path";
+import { dirname as dirname20, join as join37 } from "node:path";
 async function writeFileAtomically(destination, contents) {
-  const parent = dirname19(destination);
-  const temporary = join36(parent, `.atomic-write-${randomUUID7()}.tmp`);
+  const parent = dirname20(destination);
+  const temporary = join37(parent, `.atomic-write-${randomUUID7()}.tmp`);
   try {
     await writeFile11(temporary, contents);
     await rename3(temporary, destination);
@@ -21507,7 +21547,7 @@ function resolveCollectorHandbookRoot(sessionPath) {
     throw new Error(`\u901A\u8FDB\u53F8\u624B\u518C\u62D2\u7EDD\u4E0D\u5B89\u5168 bookKey ${JSON.stringify(bookKey)}`);
   }
   const ledgerHome = resolveActivationLedgerHomeForPath(sessionPath);
-  const root = join37(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
+  const root = join38(activationBookDirectory(ledgerHome, bookKey), "collector-handbook");
   return { ledgerHome, bookKey, root };
 }
 function collectorHandbookRepoFileName(repositoryCanonical) {
@@ -21519,9 +21559,9 @@ function collectorHandbookRepoFileName(repositoryCanonical) {
   return `${repositoryCanonical.replaceAll("/", "__")}.md`;
 }
 function createCollectorHandbookStore(input) {
-  const generalPath = join37(input.handbookRoot, "general.md");
-  const repoDir = join37(input.handbookRoot, "repos");
-  const repoPath = join37(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
+  const generalPath = join38(input.handbookRoot, "general.md");
+  const repoDir = join38(input.handbookRoot, "repos");
+  const repoPath = join38(repoDir, collectorHandbookRepoFileName(input.repositoryCanonical));
   const assertHandbookBudget = (body, label) => {
     const byteLength = Buffer.byteLength(body, "utf8");
     if (byteLength > COLLECTOR_HANDBOOK_MAX_BYTES) {
@@ -24929,7 +24969,7 @@ function readDiaristTicketAssertion(submitted) {
 function readRoleRunCoordinates(ctx, label) {
   const runDirectory = runDirectoryFromHostContext(ctx);
   if (runDirectory === void 0) throw new Error(`${label} requires AK_ROLE_RUN_DIR`);
-  const admittedPath = join39(runDirectory, "admitted-request.json");
+  const admittedPath = join40(runDirectory, "admitted-request.json");
   const admitted = JSON.parse(readFileSync6(admittedPath, "utf8"));
   if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
     throw new Error(`${label} admitted-request missing projectRoot (${admittedPath})`);
@@ -25162,6 +25202,7 @@ function createRoleRuntimeExtension(dependencies) {
     });
     let admitted = false;
     let selectedRole;
+    let roleReferenceMaterials = "";
     let activeReviewerParent;
     let reviewerOriginalRequest;
     let reviewerExpansionCaptured = false;
@@ -25255,10 +25296,10 @@ function createRoleRuntimeExtension(dependencies) {
           activeReviewerParent.skillBinding.name,
           text
         ) ?? text;
-        return text === event.text ? { action: "continue" } : { action: "transform", text };
       }
-      return text === event.text ? { action: "continue" } : { action: "transform", text };
+      return { action: "continue" };
     });
+    roleHost.on("before_agent_start", () => roleReferenceMaterials === "" ? void 0 : { readingMaterial: { kind: "role-reference-materials", content: roleReferenceMaterials } });
     roleHost.on("before_agent_start", async (event, ctx) => {
       const role = roleHost.getFlag(ROLE_FLAG.name);
       const prompt = event.prompt;
@@ -25824,6 +25865,7 @@ function createRoleRuntimeExtension(dependencies) {
       }
       admitted = false;
       selectedRole = void 0;
+      roleReferenceMaterials = "";
       activeReviewerParent = void 0;
       reviewerOriginalRequest = void 0;
       reviewerExpansionCaptured = false;
@@ -25958,6 +26000,7 @@ function createRoleRuntimeExtension(dependencies) {
           }
         }
         await executeActivationStage(entry.role, activationStage(entry.role, runtime), { clock, writeTrace });
+        roleReferenceMaterials = await dependencies.loadRoleReferenceMaterials?.(entry.role) ?? "";
         if (!engineDetourRegistered) {
           engineDetourRegistered = registerEngineDetourTool(roleHost, hostActions);
         }
@@ -25992,19 +26035,6 @@ function createRoleRuntimeExtension(dependencies) {
 init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
-function buildSkillExpansion(methodSkills, prompt) {
-  if (methodSkills.size !== 1) return void 0;
-  const entry = methodSkills.entries().next().value;
-  if (entry === void 0) return void 0;
-  const [name, method] = entry;
-  return Object.freeze({
-    name,
-    location: method.path,
-    content: method.body,
-    // Non-pi typed chain keeps original task bytes (ticket #822 r3); no consumer trim.
-    userMessage: prompt
-  });
-}
 async function listen(server, path) {
   await new Promise((resolve21, reject) => {
     server.once("error", reject);
@@ -26039,21 +26069,14 @@ async function prepareRoleEnvelope(options) {
   const calls = [];
   const customEntries = [];
   const sessionEntries = [];
-  const methodSkills = /* @__PURE__ */ new Map();
   let preferredTools = [];
   let rejection;
   let infrastructureRoundFailure;
   const hostAbort = new AbortController();
   const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID8();
-  await mkdir5(request.runDirectory, { recursive: true });
-  for (const method of request.methods) {
-    if (method.kind !== "skill") continue;
-    const name = basename9(dirname21(method.path));
-    const raw = await readFile20(method.path, "utf8");
-    methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
-  }
-  let sessionFile = options.sessionFile ?? join40(request.runDirectory, "session", "session.jsonl");
-  await mkdir5(dirname21(sessionFile), { recursive: true });
+  await mkdir6(request.runDirectory, { recursive: true });
+  let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
+  await mkdir6(dirname22(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -26084,7 +26107,7 @@ async function prepareRoleEnvelope(options) {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname21(sessionFile),
+      getSessionDir: () => dirname22(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -26119,8 +26142,9 @@ async function prepareRoleEnvelope(options) {
     deliverSubmissionRejection(_value) {
     },
     capabilities: {
-      skillExpansion(prompt) {
-        return buildSkillExpansion(methodSkills, prompt);
+      // #922: native loaders own expansion; package does not pre-read bodies (ADR 0032).
+      skillExpansion() {
+        return void 0;
       }
     },
     registerFlag(name, definition) {
@@ -26459,10 +26483,9 @@ async function prepareRoleEnvelope(options) {
         message: { role: "user", content: prompt }
       });
     }
-    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile20(path, "utf8")))).join("\n\n");
     const promptResults = await emit("before_agent_start", {
       prompt,
-      systemPrompt: methodPrompt,
+      systemPrompt: "",
       systemPromptOptions: {}
     });
     const systemPromptParts = promptResults.flatMap((value) => {
@@ -26470,7 +26493,7 @@ async function prepareRoleEnvelope(options) {
       if (!("systemPrompt" in value) || typeof value.systemPrompt !== "string") return [];
       return [value.systemPrompt];
     });
-    const systemPromptBody = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : methodPrompt;
+    const systemPromptBody = systemPromptParts.join("\n\n");
     const readingMaterials = [];
     for (const value of promptResults) {
       if (typeof value !== "object" || value === null) continue;
@@ -26483,6 +26506,13 @@ async function prepareRoleEnvelope(options) {
       throw new Error(`terminating tool not registered after activation: ${terminatingToolName}`);
     }
     const jsonSchema = terminatingToolJsonSchema(terminating.parameters);
+    if (request.host === "codex" && hostMethodSkills(request.methods).length > 0) {
+      const packageRoot = options.dependencies.packageRoot;
+      if (typeof packageRoot !== "string" || packageRoot === "") {
+        throw new Error("codex project Skill catalog requires packageRoot");
+      }
+      await installWorkspaceMethodSkills(request.cwd, packageRoot);
+    }
     return {
       mcpServers: [{
         name: `ak-${request.activation.role}`,
@@ -26517,18 +26547,18 @@ async function prepareRoleEnvelope(options) {
 }
 
 // src/role-runtime-dependencies.ts
-import { readFile as readFile23 } from "node:fs/promises";
+import { readFile as readFile22 } from "node:fs/promises";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/canonical-skill-binding.ts
-import { readFile as readFile21, realpath as realpath6 } from "node:fs/promises";
+import { readFile as readFile20, realpath as realpath7 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname as dirname22, resolve as resolve18 } from "node:path";
+import { dirname as dirname23, resolve as resolve18 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
 function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
   const matchedPath = evidence?.location === configuredPath ? configuredPath : evidence?.location === snapshot.path ? snapshot.path : void 0;
   const expectedContent = matchedPath === void 0 ? void 0 : snapshot.body;
-  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname22(matchedPath)}.
+  const prefixedContent = matchedPath === void 0 ? void 0 : `References are relative to ${dirname23(matchedPath)}.
 
 ${snapshot.body}`;
   if (evidence?.name !== name || matchedPath === void 0 || evidence.content !== expectedContent && evidence.content !== prefixedContent || evidence.userMessage !== originalRequest) {
@@ -26553,8 +26583,8 @@ async function loadCanonicalSkillBinding(name) {
   let path;
   let raw;
   try {
-    path = await realpath6(configuredPath);
-    raw = await readFile21(path, "utf8");
+    path = await realpath7(configuredPath);
+    raw = await readFile20(path, "utf8");
   } catch (error) {
     throw new CanonicalSkillUnavailableError(name, configuredPath, error);
   }
@@ -26565,7 +26595,7 @@ async function loadCanonicalSkillBinding(name) {
   const snapshot = Object.freeze({
     raw,
     path,
-    baseDir: dirname22(path),
+    baseDir: dirname23(path),
     body,
     snapshotIdentity: Object.freeze({ text: raw })
   });
@@ -26593,7 +26623,7 @@ init_doctor_evidence();
 // src/navigator-work-context.ts
 init_doctor_evidence();
 init_host_contracts();
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile21 } from "node:fs/promises";
 import { resolve as resolve19 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
@@ -26606,7 +26636,7 @@ function navigatorInputReference(getFlag, role) {
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
-  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile22(reference, "utf8");
+  const input = reference === void 0 || options.role === "doctor" || options.role === "notary" ? void 0 : await readFile21(reference, "utf8");
   const subjectRoot = subjectPath(reference ?? options.context.sessionManager.getSessionDir(), options.context.cwd);
   let subjectKey = reference === void 0 ? subjectRoot : navigatorSubjectKeyForInput(subjectRoot, reference, options.context.cwd);
   let subject = input ?? `work subject: ${subjectKey}`;
@@ -26663,7 +26693,7 @@ async function loadNavigatorWorkContext(options) {
   let authorityMaterial;
   for (const path of authorityFiles) {
     try {
-      const content = await readFile22(path, "utf8");
+      const content = await readFile21(path, "utf8");
       if (content.trim() !== "") {
         authorityMaterial = content;
         break;
@@ -26688,7 +26718,7 @@ async function loadNavigatorWorkContext(options) {
 init_notary_source_run();
 
 // src/package-resources/method-skill-binding.ts
-import { dirname as dirname23 } from "node:path";
+import { dirname as dirname24 } from "node:path";
 init_method_skill();
 async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const material = await loadPackagedMethodSkillMaterial(packageRoot, name);
@@ -26696,7 +26726,7 @@ async function loadPackagedCanonicalSkillBinding(packageRoot, name) {
   const snapshot = Object.freeze({
     raw: material.raw,
     path: material.skillPath,
-    baseDir: dirname23(material.skillPath),
+    baseDir: dirname24(material.skillPath),
     body: material.body,
     snapshotIdentity: Object.freeze({ text: material.raw })
   });
@@ -26725,19 +26755,23 @@ var navigatorRoutePlaybookPath = fileURLToPath3(
 var collectorHandbookSeedPath = fileURLToPath3(
   new URL("../resources/collector-bot-handbook.md", import.meta.url)
 );
+function loadPackagedRoleReferenceMaterials(role) {
+  return role === "auditor" ? loadAuditorReferenceMaterialsFromSubjectInput() : loadMainRoleReferenceMaterials(role);
+}
 function createRoleRuntimeDependencies(packageRoot) {
   const doctorAuditor = createPiDoctorAuditor();
   const navigatorSessionFactory = createNativeNavigatorSessionFactory();
   return {
     packageRoot,
+    loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
-    loadFixPacket: (path) => readFile23(path, "utf8"),
+    loadFixPacket: (path) => readFile22(path, "utf8"),
     loadCoderSoul: () => loadMainRoleSessionMaterials("coder"),
-    loadCoderTask: (path) => readFile23(path, "utf8"),
+    loadCoderTask: (path) => readFile22(path, "utf8"),
     loadReviewerSoul: () => loadMainRoleSessionMaterials("reviewer"),
     loadCollectorSoul: () => loadMainRoleSessionMaterials("collector"),
-    loadCollectorHandbookSeed: () => readFile23(collectorHandbookSeedPath, "utf8"),
+    loadCollectorHandbookSeed: () => readFile22(collectorHandbookSeedPath, "utf8"),
     createCollectorTransport: () => createGhCollectorGitHubTransport(),
     loadDoctorSoul: () => loadMainRoleSessionMaterials("doctor"),
     loadDoctorCase,
@@ -26752,7 +26786,7 @@ function createRoleRuntimeDependencies(packageRoot) {
     loadSecretariatSoul: () => loadMainRoleSessionMaterials("secretariat"),
     loadNotarySourceRun: loadNotarySourceRunLocator,
     loadMergerSoul: () => loadMainRoleSessionMaterials("merger"),
-    loadMergerInput: async (path) => JSON.parse(await readFile23(path, "utf8")),
+    loadMergerInput: async (path) => JSON.parse(await readFile22(path, "utf8")),
     async loadCanonicalSkillBinding(name) {
       if (name === "tdd") {
         return loadPackagedCanonicalSkillBinding(packageRoot, "tdd");
@@ -26778,7 +26812,7 @@ function createRoleRuntimeDependencies(packageRoot) {
       authority: options.authority,
       invocationId: options.invocationId,
       loadSoul: () => loadMainRoleSessionMaterials("navigator"),
-      loadRoutePlaybook: () => readFile23(navigatorRoutePlaybookPath, "utf8"),
+      loadRoutePlaybook: () => readFile22(navigatorRoutePlaybookPath, "utf8"),
       loadRoleHelp: async (role) => formatNavigatorRoleHelp(role),
       createSession: navigatorSessionFactory,
       ...options.contextError === void 0 ? {} : { contextError: options.contextError },
@@ -26791,9 +26825,9 @@ function createRoleRuntimeDependencies(packageRoot) {
 init_session_identity();
 
 // src/acp-host/description.ts
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function resolveAcpBinary(description, operatorHome) {
-  return join41(operatorHome, ...description.binaryFromHome);
+  return join42(operatorHome, ...description.binaryFromHome);
 }
 function acpStdioArgs(description, model, seat) {
   const { prefix, suffix, modelFlag, thinkingFlag } = description.argv;
@@ -27239,13 +27273,13 @@ function createAcpRoleTurnHost(config) {
 
 // src/acp-host/seat-profile-soul.ts
 import { constants as constants3 } from "node:fs";
-import { access as access4, copyFile, lstat as lstat7, mkdir as mkdir6, readlink, symlink, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname24, join as join42, relative as relative3, resolve as resolve20 } from "node:path";
+import { access as access4, copyFile, lstat as lstat8, mkdir as mkdir7, readlink as readlink2, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
+import { dirname as dirname25, join as join43, relative as relative3, resolve as resolve20 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
 function packageRoleSoulPath(packageRoot, role) {
-  return join42(packageRoot, "souls", `${role}.md`);
+  return join43(packageRoot, "souls", `${role}.md`);
 }
 async function pathExists2(path) {
   try {
@@ -27262,26 +27296,26 @@ async function ensureSeatProfileSoul(options) {
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
-  const profilesRoot = join42(operatorHome, ...spec.profilesRootFromHome);
-  const profileDir = join42(profilesRoot, profileName);
-  const hostRoot = dirname24(profilesRoot);
-  const soulPath = join42(profileDir, spec.soulFileName);
+  const profilesRoot = join43(operatorHome, ...spec.profilesRootFromHome);
+  const profileDir = join43(profilesRoot, profileName);
+  const hostRoot = dirname25(profilesRoot);
+  const soulPath = join43(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
-    await mkdir6(profileDir, { recursive: true });
+    await mkdir7(profileDir, { recursive: true });
     for (const name of ["auth.json", ".env", "config.yaml"]) {
-      const source = join42(hostRoot, name);
+      const source = join43(hostRoot, name);
       if (!await pathExists2(source)) continue;
-      await copyFile(source, join42(profileDir, name));
+      await copyFile(source, join43(profileDir, name));
     }
   } else {
-    await mkdir6(profileDir, { recursive: true });
+    await mkdir7(profileDir, { recursive: true });
   }
   const desiredLink = relative3(profileDir, soulTarget);
   let current;
   try {
-    const st = await lstat7(soulPath);
+    const st = await lstat8(soulPath);
     if (st.isSymbolicLink()) {
-      current = await readlink(soulPath);
+      current = await readlink2(soulPath);
     }
   } catch {
     current = void 0;
@@ -27292,7 +27326,7 @@ async function ensureSeatProfileSoul(options) {
   if (await pathExists2(soulPath) || current !== void 0) {
     await unlink3(soulPath);
   }
-  await symlink(desiredLink, soulPath);
+  await symlink2(desiredLink, soulPath);
   return profileName;
 }
 
@@ -27312,7 +27346,6 @@ function createProductionAcpRoleTurnHost(options) {
   const { packageRoot, principalAuthority, description, hostName } = options;
   const env = {
     ...process.env,
-    ...description.childEnv,
     AK_PACKAGE_ROOT: packageRoot
   };
   return createComposedAcpRoleTurnHost({