@akagilnc/pi-workflow-roles 0.1.4444 → 0.1.4489

package/dist/auditor-soul.js

@@ -66,9 +66,16 @@ export async function loadAuditorSoul(role) {
     if (soul.trim().length === 0) {
         throw new Error(`The ${role} auditor Soul is blank`);
     }
-    return joinPackageMaterials(materials);
+    return soul;
+}
+export function loadAuditorReferenceMaterials(role) {
+    const soulPath = auditorSoulRelativePath(role);
+    return joinPackageMaterials(AUDITOR_SESSION_MATERIALS[role].filter((path) => path !== soulPath));
 }
 /** Runtime loader: subject input decides which soul file to assemble. */
 export async function loadAuditorSoulFromSubjectInput(raw) {
     return loadAuditorSoul(resolveAuditorSubject(raw));
 }
+export function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
+    return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
+}

package/dist/headless-host/description.js

@@ -30,6 +30,8 @@ export function headlessTurnArgs(options) {
         description.jsonSchemaFlag,
         JSON.stringify(options.jsonSchema),
     ];
+    if (options.pluginDir)
+        args.push("--plugin-dir", options.pluginDir);
     if (options.mcpConfigPath !== undefined && options.mcpConfigPath !== "") {
         args.push(description.mcpConfigFlag, options.mcpConfigPath);
     }
@@ -321,9 +323,7 @@ export function codexTurnArgs(options) {
     }
     // JSONL event stream: thread_id + final agent_message + turn.completed/failed.
     args.push("--json");
-    // Operator config/MCP off; auth still uses CODEX_HOME (official).
-    // Project/system config and AGENTS.md have no official suppression switch.
-    args.push("--ignore-user-config", "--ignore-rules");
+    // Operator config/skills stay open (#922 host-native-loader). Auth uses CODEX_HOME.
     const roots = (options.writableRoots ?? []).filter((root) => root !== "");
     if (roots.length > 0) {
         // Resume has no --add-dir; the config key keeps extra roots available on both paths.

package/dist/headless-host/production-host.js

@@ -1559,10 +1559,10 @@ __export(session_assistant_usage_exports, {
 });
 import { join as join5 } from "node:path";
 async function readAssistantUsageFromSessionFile(sessionFile) {
-  const { readFile: readFile24 } = await import("node:fs/promises");
+  const { readFile: readFile23 } = await import("node:fs/promises");
   let text;
   try {
-    text = await readFile24(sessionFile, "utf8");
+    text = await readFile23(sessionFile, "utf8");
   } catch (error) {
     if (error?.code === "ENOENT") return void 0;
     throw error;
@@ -3801,13 +3801,10 @@ function assertRegisteredHostName(host) {
   }
   throw new Error(`unregistered host: ${host}`);
 }
-var PRIVATE_COMPAT_ENV, DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
+var DEFAULT_ROLE_TURN_HOST, HOST_DESCRIPTIONS, HEADLESS_HOST_DESCRIPTIONS;
 var init_host_descriptions = __esm({
   "src/host-descriptions.ts"() {
     "use strict";
-    PRIVATE_COMPAT_ENV = Object.fromEntries(
-      ["CLAUDE", "CURSOR", "CODEX"].flatMap((vendor) => ["SKILLS", "RULES", "AGENTS", "MCPS", "HOOKS", "SESSIONS"].map((kind) => [`GROK_${vendor}_${kind}_ENABLED`, "false"]))
-    );
     DEFAULT_ROLE_TURN_HOST = "pi";
     HOST_DESCRIPTIONS = Object.freeze({
       /** Operator home `~/.grok`, native session/load resume, `agent [--model X] stdio`. */
@@ -3820,12 +3817,7 @@ var init_host_descriptions = __esm({
         }),
         modelPassing: "argv",
         boundResume: "session/load",
-        sessionBindingFile: "grok-acp-session.json",
-        childEnv: Object.freeze({
-          ...PRIVATE_COMPAT_ENV,
-          GROK_MEMORY: "0",
-          GROK_SUBAGENTS: "0"
-        })
+        sessionBindingFile: "grok-acp-session.json"
       }),
       /**
        * Operator home `~/.hermes`, native session/load resume, `acp` subcommand.
@@ -3844,7 +3836,6 @@ var init_host_descriptions = __esm({
         modelPassing: "set_model",
         boundResume: "session/load",
         sessionBindingFile: "hermes-acp-session.json",
-        childEnv: Object.freeze({}),
         seatProfileSoul: Object.freeze({
           flag: "-p",
           namePrefix: "ak-",
@@ -3865,12 +3856,7 @@ var init_host_descriptions = __esm({
           // Intermediate assistant/tool/system events require verbose with stream-json.
           "--verbose",
           "--permission-mode",
-          "bypassPermissions",
-          // Empty sources: no user/project/local operator surface (envelope owns materials).
-          "--setting-sources",
-          "",
-          // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
-          "--strict-mcp-config"
+          "bypassPermissions"
         ]),
         promptFlag: "-p",
         modelFlag: "--model",
@@ -10765,10 +10751,10 @@ function pairGateRounds(volumes) {
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
 async function resolveOfficerSessionFromPointerFile(pointerPath) {
-  const { readFile: readFile24 } = await import("node:fs/promises");
+  const { readFile: readFile23 } = await import("node:fs/promises");
   let raw;
   try {
-    raw = JSON.parse(await readFile24(pointerPath, "utf8"));
+    raw = JSON.parse(await readFile23(pointerPath, "utf8"));
   } catch (error) {
     throw new Error(
       `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
@@ -11369,16 +11355,27 @@ async function readPackageMaterial(relativePath) {
 }
 async function joinPackageMaterials(relativePaths) {
   const chunks = [];
-  for (const relativePath of relativePaths) {
-    chunks.push(await readPackageMaterial(relativePath));
-  }
+  for (const relativePath of relativePaths) chunks.push(await readPackageMaterial(relativePath));
   return chunks.join("\n\n");
 }
+function roleSoulPath(role, materials) {
+  const suffix = `/souls/${role}.md`;
+  const path = materials.find((candidate) => `/${candidate}`.endsWith(suffix));
+  if (path === void 0) throw new Error(`session materials omit the ${role} Soul`);
+  return path;
+}
+async function loadSeparatedSessionPart(role, materials, part) {
+  const soul = roleSoulPath(role, materials);
+  return part === "soul" ? readPackageMaterial(soul) : joinPackageMaterials(materials.filter((path) => path !== soul));
+}
 function loadMainRoleSessionMaterials(role) {
-  return joinPackageMaterials(MAIN_ROLE_SESSION_MATERIALS[role]);
+  return loadSeparatedSessionPart(role, MAIN_ROLE_SESSION_MATERIALS[role], "soul");
+}
+function loadMainRoleReferenceMaterials(role) {
+  return loadSeparatedSessionPart(role, MAIN_ROLE_SESSION_MATERIALS[role], "references");
 }
 function loadGatekeeperSessionMaterials(role) {
-  return joinPackageMaterials(GATEKEEPER_SESSION_MATERIALS[role]);
+  return loadSeparatedSessionPart(role, GATEKEEPER_SESSION_MATERIALS[role], "soul");
 }
 var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS, GATEKEEPER_SESSION_MATERIALS;
 var init_session_opening_materials = __esm({
@@ -11408,6 +11405,8 @@ __export(auditor_soul_exports, {
   AUDITOR_SESSION_MATERIALS: () => AUDITOR_SESSION_MATERIALS,
   AUDITOR_SOUL_ROLES: () => AUDITOR_SOUL_ROLES,
   isAuditorSoulRole: () => isAuditorSoulRole,
+  loadAuditorReferenceMaterials: () => loadAuditorReferenceMaterials,
+  loadAuditorReferenceMaterialsFromSubjectInput: () => loadAuditorReferenceMaterialsFromSubjectInput,
   loadAuditorSoul: () => loadAuditorSoul,
   loadAuditorSoulFromSubjectInput: () => loadAuditorSoulFromSubjectInput,
   resolveAuditorSubject: () => resolveAuditorSubject
@@ -11434,11 +11433,18 @@ async function loadAuditorSoul(role) {
   if (soul.trim().length === 0) {
     throw new Error(`The ${role} auditor Soul is blank`);
   }
-  return joinPackageMaterials(materials);
+  return soul;
+}
+function loadAuditorReferenceMaterials(role) {
+  const soulPath = auditorSoulRelativePath(role);
+  return joinPackageMaterials(AUDITOR_SESSION_MATERIALS[role].filter((path) => path !== soulPath));
 }
 async function loadAuditorSoulFromSubjectInput(raw) {
   return loadAuditorSoul(resolveAuditorSubject(raw));
 }
+function loadAuditorReferenceMaterialsFromSubjectInput(raw) {
+  return loadAuditorReferenceMaterials(resolveAuditorSubject(raw));
+}
 var AUDITOR_SOUL_ROLES, AK_ROLE_AUDITOR_SUBJECT_ENV, AK_ROLE_AUDITOR_SOURCE_RUN_ENV, AUDITOR_SESSION_MATERIALS;
 var init_auditor_soul = __esm({
   "src/auditor-soul.ts"() {
@@ -25266,6 +25272,7 @@ function createRoleRuntimeExtension(dependencies) {
     });
     let admitted = false;
     let selectedRole;
+    let roleReferenceMaterials = "";
     let activeReviewerParent;
     let reviewerOriginalRequest;
     let reviewerExpansionCaptured = false;
@@ -25359,10 +25366,10 @@ function createRoleRuntimeExtension(dependencies) {
           activeReviewerParent.skillBinding.name,
           text
         ) ?? text;
-        return text === event.text ? { action: "continue" } : { action: "transform", text };
       }
-      return text === event.text ? { action: "continue" } : { action: "transform", text };
+      return { action: "continue" };
     });
+    roleHost.on("before_agent_start", () => roleReferenceMaterials === "" ? void 0 : { readingMaterial: { kind: "role-reference-materials", content: roleReferenceMaterials } });
     roleHost.on("before_agent_start", async (event, ctx) => {
       const role = roleHost.getFlag(ROLE_FLAG.name);
       const prompt = event.prompt;
@@ -25928,6 +25935,7 @@ function createRoleRuntimeExtension(dependencies) {
       }
       admitted = false;
       selectedRole = void 0;
+      roleReferenceMaterials = "";
       activeReviewerParent = void 0;
       reviewerOriginalRequest = void 0;
       reviewerExpansionCaptured = false;
@@ -26062,6 +26070,7 @@ function createRoleRuntimeExtension(dependencies) {
           }
         }
         await executeActivationStage(entry.role, activationStage(entry.role, runtime), { clock, writeTrace });
+        roleReferenceMaterials = await dependencies.loadRoleReferenceMaterials?.(entry.role) ?? "";
         if (!engineDetourRegistered) {
           engineDetourRegistered = registerEngineDetourTool(roleHost, hostActions);
         }
@@ -26101,11 +26110,15 @@ var navigatorRoutePlaybookPath = fileURLToPath2(
 var collectorHandbookSeedPath = fileURLToPath2(
   new URL("../resources/collector-bot-handbook.md", import.meta.url)
 );
+function loadPackagedRoleReferenceMaterials(role) {
+  return role === "auditor" ? loadAuditorReferenceMaterialsFromSubjectInput() : loadMainRoleReferenceMaterials(role);
+}
 function createRoleRuntimeDependencies(packageRoot) {
   const doctorAuditor = createPiDoctorAuditor();
   const navigatorSessionFactory = createNativeNavigatorSessionFactory();
   return {
     packageRoot,
+    loadRoleReferenceMaterials: loadPackagedRoleReferenceMaterials,
     loadJudgeSoul: () => loadMainRoleSessionMaterials("judge"),
     loadFixerSoul: () => loadMainRoleSessionMaterials("fixer"),
     loadFixPacket: (path) => readFile22(path, "utf8"),
@@ -26166,9 +26179,9 @@ function createRoleRuntimeDependencies(packageRoot) {
 // src/role-envelope.ts
 init_engine_detour();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { mkdir as mkdir5, readFile as readFile23, writeFile as writeFile12 } from "node:fs/promises";
+import { mkdir as mkdir6, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { basename as basename9, dirname as dirname23, join as join40 } from "node:path";
+import { dirname as dirname24, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/gatekeeper-pass-envelope.ts
@@ -26253,25 +26266,68 @@ async function requireGatekeeperPass(options) {
   }
 }
 
+// src/host-native-method.ts
+import { lstat as lstat7, mkdir as mkdir5, readlink, realpath as realpath7, symlink } from "node:fs/promises";
+import { basename as basename9, dirname as dirname23, join as join40 } from "node:path";
+var HOST_METHOD_PLUGIN_NAME = "ak-methods";
+var packagedMethodsDir = (root) => join40(root, "resources", "methods");
+var packagedMethodPluginDir = (root) => join40(root, "dist", "method-host-plugin");
+function hostMethodSkills(methods) {
+  return Object.freeze(methods.flatMap((method) => {
+    if (method.kind !== "skill") return [];
+    const name = basename9(dirname23(method.path));
+    return name ? [Object.freeze({ name })] : [];
+  }));
+}
+var alreadyPrefixed = (prompt, token) => {
+  const text = prompt.trimStart();
+  return text === token || text.startsWith(`${token} `) || text.startsWith(`${token}
+`);
+};
+function prefixMethodInvocation(token, prompt) {
+  if (alreadyPrefixed(prompt, token)) return prompt;
+  return prompt ? `${token} ${prompt}` : token;
+}
+function applyClaudeSkillInvocation(methods, prompt) {
+  const skills = hostMethodSkills(methods);
+  if (skills.length !== 1) return prompt;
+  return prefixMethodInvocation(`/${HOST_METHOD_PLUGIN_NAME}:${skills[0].name}`, prompt);
+}
+function applyCodexSkillInvocation(methods, prompt) {
+  return hostMethodSkills(methods).reduceRight(
+    (invocation, skill) => prefixMethodInvocation(`$${skill.name}`, invocation),
+    prompt
+  );
+}
+async function installWorkspaceMethodSkills(cwd, packageRoot) {
+  const target = await realpath7(packagedMethodsDir(packageRoot));
+  const link = join40(cwd, ".agents", "skills");
+  try {
+    const stat2 = await lstat7(link);
+    if (!stat2.isSymbolicLink() || await realpath7(link) !== target) {
+      const detail = stat2.isSymbolicLink() ? `symlink to ${await readlink(link)}` : "non-symlink entry";
+      throw new Error(`workspace method catalog conflict at ${link}: ${detail}`);
+    }
+    return;
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  await mkdir5(dirname23(link), { recursive: true });
+  try {
+    await symlink(target, link);
+  } catch (error) {
+    if (error.code !== "EEXIST") throw error;
+    if (await realpath7(link).catch(() => "") !== target) {
+      throw new Error(`workspace method catalog conflict at ${link}`);
+    }
+  }
+}
+
 // src/role-envelope.ts
 init_packaged_role_registry();
-init_method_skill();
 init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
-function buildSkillExpansion(methodSkills, prompt) {
-  if (methodSkills.size !== 1) return void 0;
-  const entry = methodSkills.entries().next().value;
-  if (entry === void 0) return void 0;
-  const [name, method] = entry;
-  return Object.freeze({
-    name,
-    location: method.path,
-    content: method.body,
-    // Non-pi typed chain keeps original task bytes (ticket #822 r3); no consumer trim.
-    userMessage: prompt
-  });
-}
 async function listen(server, path) {
   await new Promise((resolve21, reject) => {
     server.once("error", reject);
@@ -26306,21 +26362,14 @@ async function prepareRoleEnvelope(options) {
   const calls = [];
   const customEntries = [];
   const sessionEntries = [];
-  const methodSkills = /* @__PURE__ */ new Map();
   let preferredTools = [];
   let rejection;
   let infrastructureRoundFailure;
   const hostAbort = new AbortController();
   const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID8();
-  await mkdir5(request.runDirectory, { recursive: true });
-  for (const method of request.methods) {
-    if (method.kind !== "skill") continue;
-    const name = basename9(dirname23(method.path));
-    const raw = await readFile23(method.path, "utf8");
-    methodSkills.set(name, { path: method.path, body: stripSkillFrontmatter(raw).trim() });
-  }
-  let sessionFile = options.sessionFile ?? join40(request.runDirectory, "session", "session.jsonl");
-  await mkdir5(dirname23(sessionFile), { recursive: true });
+  await mkdir6(request.runDirectory, { recursive: true });
+  let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
+  await mkdir6(dirname24(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -26351,7 +26400,7 @@ async function prepareRoleEnvelope(options) {
       getLeafEntry: () => sessionEntries.at(-1),
       getLeafId: () => runId,
       getEntries: () => sessionEntries,
-      getSessionDir: () => dirname23(sessionFile),
+      getSessionDir: () => dirname24(sessionFile),
       getSessionFile: () => sessionFile,
       getHeader: () => ({ type: "session", id: runId }),
       setSessionFile(path) {
@@ -26386,8 +26435,9 @@ async function prepareRoleEnvelope(options) {
     deliverSubmissionRejection(_value) {
     },
     capabilities: {
-      skillExpansion(prompt) {
-        return buildSkillExpansion(methodSkills, prompt);
+      // #922: native loaders own expansion; package does not pre-read bodies (ADR 0032).
+      skillExpansion() {
+        return void 0;
       }
     },
     registerFlag(name, definition) {
@@ -26726,10 +26776,9 @@ async function prepareRoleEnvelope(options) {
         message: { role: "user", content: prompt }
       });
     }
-    const methodPrompt = (await Promise.all(request.methods.map(({ path }) => readFile23(path, "utf8")))).join("\n\n");
     const promptResults = await emit("before_agent_start", {
       prompt,
-      systemPrompt: methodPrompt,
+      systemPrompt: "",
       systemPromptOptions: {}
     });
     const systemPromptParts = promptResults.flatMap((value) => {
@@ -26737,7 +26786,7 @@ async function prepareRoleEnvelope(options) {
       if (!("systemPrompt" in value) || typeof value.systemPrompt !== "string") return [];
       return [value.systemPrompt];
     });
-    const systemPromptBody = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : methodPrompt;
+    const systemPromptBody = systemPromptParts.join("\n\n");
     const readingMaterials = [];
     for (const value of promptResults) {
       if (typeof value !== "object" || value === null) continue;
@@ -26750,6 +26799,13 @@ async function prepareRoleEnvelope(options) {
       throw new Error(`terminating tool not registered after activation: ${terminatingToolName}`);
     }
     const jsonSchema = terminatingToolJsonSchema(terminating.parameters);
+    if (request.host === "codex" && hostMethodSkills(request.methods).length > 0) {
+      const packageRoot = options.dependencies.packageRoot;
+      if (typeof packageRoot !== "string" || packageRoot === "") {
+        throw new Error("codex project Skill catalog requires packageRoot");
+      }
+      await installWorkspaceMethodSkills(request.cwd, packageRoot);
+    }
     return {
       mcpServers: [{
         name: `ak-${request.activation.role}`,
@@ -26787,7 +26843,7 @@ async function prepareRoleEnvelope(options) {
 init_session_identity();
 
 // src/headless-host/description.ts
-import { join as join41 } from "node:path";
+import { join as join42 } from "node:path";
 function isClaudePrintDescription(description) {
   return description.protocol === "claude-print";
 }
@@ -26795,7 +26851,7 @@ function isCodexExecDescription(description) {
   return description.protocol === "codex-exec";
 }
 function resolveHeadlessBinary(description, operatorHome) {
-  return join41(operatorHome, ...description.binaryFromHome);
+  return join42(operatorHome, ...description.binaryFromHome);
 }
 function headlessTurnArgs(options) {
   const { description } = options;
@@ -26807,6 +26863,7 @@ function headlessTurnArgs(options) {
     description.jsonSchemaFlag,
     JSON.stringify(options.jsonSchema)
   ];
+  if (options.pluginDir) args.push("--plugin-dir", options.pluginDir);
   if (options.mcpConfigPath !== void 0 && options.mcpConfigPath !== "") {
     args.push(description.mcpConfigFlag, options.mcpConfigPath);
   }
@@ -27003,7 +27060,6 @@ function codexTurnArgs(options) {
     args.push("resume", options.session.id);
   }
   args.push("--json");
-  args.push("--ignore-user-config", "--ignore-rules");
   const roots = (options.writableRoots ?? []).filter((root) => root !== "");
   if (roots.length > 0) {
     args.push(
@@ -27051,7 +27107,7 @@ import { spawn as spawn4, spawnSync } from "node:child_process";
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { existsSync as existsSync13 } from "node:fs";
 import { writeFile as writeFile13 } from "node:fs/promises";
-import { dirname as dirname24, isAbsolute as isAbsolute11, join as join42, resolve as resolve20 } from "node:path";
+import { dirname as dirname25, isAbsolute as isAbsolute11, join as join43, resolve as resolve20 } from "node:path";
 
 // src/external-host-turn-loop.ts
 init_host_contracts();
@@ -27270,8 +27326,8 @@ function formatCodexFailurePayload(payload) {
 function cwdIsGitWorkTree(cwd) {
   let dir = cwd;
   for (; ; ) {
-    if (existsSync13(join42(dir, ".git"))) return true;
-    const parent = dirname24(dir);
+    if (existsSync13(join43(dir, ".git"))) return true;
+    const parent = dirname25(dir);
     if (parent === dir) return false;
     dir = parent;
   }
@@ -27460,7 +27516,8 @@ function buildTurnArgs(options) {
     mcpConfigPath: options.mcpConfigPath,
     ...options.model === void 0 ? {} : { model: options.model },
     ...options.effort === void 0 ? {} : { effort: options.effort },
-    session: { kind: options.sessionKind, id: options.sessionId }
+    session: { kind: options.sessionKind, id: options.sessionId },
+    ...options.pluginDir === void 0 ? {} : { pluginDir: options.pluginDir }
   });
 }
 function createHeadlessRoleTurnHost(config) {
@@ -27477,23 +27534,36 @@ function createHeadlessRoleTurnHost(config) {
         await config.sessionIdentity.bind(request.principal, sessionId);
       }
       const env = { ...process.env, ...config.env ?? {} };
-      const systemPromptPath = join42(request.runDirectory, "headless-system-prompt.txt");
+      const systemPromptPath = join43(request.runDirectory, "headless-system-prompt.txt");
       await writeFile13(systemPromptPath, systemPrompt, "utf8");
       let mcpConfigPath;
       let outputSchemaPath;
+      let pluginDir;
+      let applyMethodPrompt = codex ? (prompt) => applyCodexSkillInvocation(request.methods, prompt) : (prompt) => prompt;
       if (codex) {
-        outputSchemaPath = join42(request.runDirectory, "headless-output-schema.json");
-        const closed = closeJsonSchemaForCodex(prepared.jsonSchema);
-        await writeFile13(outputSchemaPath, `${JSON.stringify(closed, null, 2)}
-`, "utf8");
+        outputSchemaPath = join43(request.runDirectory, "headless-output-schema.json");
+        await writeFile13(
+          outputSchemaPath,
+          `${JSON.stringify(closeJsonSchemaForCodex(prepared.jsonSchema), null, 2)}
+`,
+          "utf8"
+        );
       } else {
-        mcpConfigPath = join42(request.runDirectory, "headless-mcp-config.json");
+        mcpConfigPath = join43(request.runDirectory, "headless-mcp-config.json");
         await writeFile13(
           mcpConfigPath,
           `${JSON.stringify(headlessMcpConfigDocument(prepared.mcpServers), null, 2)}
 `,
           "utf8"
         );
+        if (hostMethodSkills(request.methods).length > 0) {
+          const packageRoot = env.AK_PACKAGE_ROOT ?? process.env.AK_PACKAGE_ROOT;
+          if (typeof packageRoot !== "string" || packageRoot === "") {
+            throw new Error("claude method plugin-dir requires AK_PACKAGE_ROOT");
+          }
+          pluginDir = packagedMethodPluginDir(packageRoot);
+          applyMethodPrompt = (prompt) => applyClaudeSkillInvocation(request.methods, prompt);
+        }
       }
       const sessionParent = config.sessionIdentity.resolveSessionFile(request.principal);
       outcome = await driveExternalRoleTurnRounds(prepared, request, {
@@ -27518,7 +27588,8 @@ function createHeadlessRoleTurnHost(config) {
               sessionId,
               sessionKind,
               cwd: request.cwd,
-              ...gitCommonDir === void 0 ? {} : { writableRoots: [gitCommonDir] }
+              ...gitCommonDir === void 0 ? {} : { writableRoots: [gitCommonDir] },
+              ...pluginDir === void 0 ? {} : { pluginDir }
             });
           } catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -27535,7 +27606,7 @@ function createHeadlessRoleTurnHost(config) {
               args,
               cwd: request.cwd,
               env,
-              stdin: prompt,
+              stdin: applyMethodPrompt(prompt),
               ...abortSignal === void 0 ? {} : { signal: abortSignal },
               ...request.timeoutMs === void 0 ? {} : { timeoutMs: request.timeoutMs },
               onStdoutLine(line2) {

package/dist/host-descriptions.js

@@ -1,5 +1,3 @@
-/** Grok CLI reads vendor-private compat surfaces unless each is disabled by name. */
-const PRIVATE_COMPAT_ENV = Object.fromEntries(["CLAUDE", "CURSOR", "CODEX"].flatMap((vendor) => ["SKILLS", "RULES", "AGENTS", "MCPS", "HOOKS", "SESSIONS"].map((kind) => [`GROK_${vendor}_${kind}_ENABLED`, "false"])));
 export const DEFAULT_ROLE_TURN_HOST = "pi";
 export const HOST_DESCRIPTIONS = Object.freeze({
     /** Operator home `~/.grok`, native session/load resume, `agent [--model X] stdio`. */
@@ -13,11 +11,6 @@ export const HOST_DESCRIPTIONS = Object.freeze({
         modelPassing: "argv",
         boundResume: "session/load",
         sessionBindingFile: "grok-acp-session.json",
-        childEnv: Object.freeze({
-            ...PRIVATE_COMPAT_ENV,
-            GROK_MEMORY: "0",
-            GROK_SUBAGENTS: "0",
-        }),
     }),
     /**
      * Operator home `~/.hermes`, native session/load resume, `acp` subcommand.
@@ -36,7 +29,6 @@ export const HOST_DESCRIPTIONS = Object.freeze({
         modelPassing: "set_model",
         boundResume: "session/load",
         sessionBindingFile: "hermes-acp-session.json",
-        childEnv: Object.freeze({}),
         seatProfileSoul: Object.freeze({
             flag: "-p",
             namePrefix: "ak-",
@@ -49,12 +41,9 @@ export const HOST_DESCRIPTIONS = Object.freeze({
  * Headless CLI family (#645 / #646). Claude print-mode is the first row;
  * codex exec (#646) adds another. Protocol-specific argv/parse live in
  * headless-host helpers (#752 per-host impl).
- * Claude fixedArgs: print mode, isolation without `--bare` (OAuth stays), full
- * permissions. stream-json + verbose: live host events for sitian records
- * (#811); result is last line. `--setting-sources` empty = load no
- * user/project/local CLAUDE.md/hooks/skills (role envelope is delivered via
- * `--system-prompt` wholesale replace). `--strict-mcp-config` with no
- * `--mcp-config` drops operator MCP + claude.ai connectors.
+ * Claude fixedArgs: print mode, full permissions. stream-json + verbose: live
+ * host events for sitian records (#811); result is last line. Forced methods
+ * ride `--plugin-dir` (#922); operator skill/setting surfaces stay open.
  */
 export const HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
     "claude": Object.freeze({
@@ -67,10 +56,6 @@ export const HEADLESS_HOST_DESCRIPTIONS = Object.freeze({
             // Intermediate assistant/tool/system events require verbose with stream-json.
             "--verbose",
             "--permission-mode", "bypassPermissions",
-            // Empty sources: no user/project/local operator surface (envelope owns materials).
-            "--setting-sources", "",
-            // With adapter-supplied --mcp-config only (AK relay); drops operator + claude.ai MCP.
-            "--strict-mcp-config",
         ]),
         promptFlag: "-p",
         modelFlag: "--model",

package/dist/method-host-plugin/.claude-plugin/plugin.json

@@ -0,0 +1,5 @@
+{
+  "name": "ak-methods",
+  "version": "0.0.0",
+  "description": "ak-roles packaged role method skills"
+}

package/dist/method-host-plugin/skills/ak-cross-m-review/CONTEXT.md

@@ -0,0 +1,48 @@
+# ak-cross-m-review
+
+Local, pre-PR review gate: two independent lenses against a pinned diff, one verdict each; a single lens runs in the invoking session, `all` runs both as parallel sub-agent legs. `SKILL.md` plus the selected lens prompt is the complete active authority; this file is vocabulary only.
+
+## Language
+
+**Fixed target**:
+The pinned base-to-HEAD snapshot under review, resolved to two literal SHAs
+before anything is dispatched.
+_Avoid_: range, worktree diff, working changes
+
+**Authority set**:
+The ordered sources that govern the review — user decisions first, then
+ratified ADRs / specs, then repository contracts.
+_Avoid_: spec (alone), reference docs
+
+**Lens**:
+One review question with its own prompt file — `completeness` (was the
+authority delivered?) or `correctness` (is what exists right?).
+_Avoid_: axis, gate, mode, pass
+
+**Leg**:
+One independent sub-agent running exactly one lens inside an independent copy of the target at `PRE_HEAD`, dispatched only by `all`; the copy is provided by the harness when it can, otherwise created by the caller. A single-lens invocation has no leg: the invoking session applies the lens itself.
+_Avoid_: panel, member, reviewer squad, vendor leg
+
+**Candidate**:
+An evidence-backed claim a leg submits for judgment; never a verdict.
+_Avoid_: finding (before judgment), vote
+
+**Judge**:
+The invoking session, which verifies each candidate against the fixed target
+and authority set and disposes it as live or refuted.
+_Avoid_: orchestrator, runner, merger
+
+**Verdict**:
+The single terminal line a lens ends with, labelled by lens
+(`CMR-VERDICT: completeness=…` / `CMR-VERDICT: correctness=…`).
+_Avoid_: gate result, concur, convergence
+
+**Preset**:
+A named wrapper skill that invokes the engine with one lens and returns its
+report unchanged.
+_Avoid_: gate skill, entry point
+
+**Review only**:
+The outcome boundary — the invocation reports and stops; the caller owns every
+repair, commit, retry, and later review.
+_Avoid_: read-only (that is a filesystem property, not this boundary)

package/dist/method-host-plugin/skills/ak-cross-m-review/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Akagi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.