@akagilnc/pi-workflow-roles 0.1.4528 → 0.1.4586

package/dist/acp-host/production-host.js

@@ -62,7 +62,7 @@ async function spawnEngineDetourOnce(input) {
   }
   const command = input.argv[0];
   const args = input.argv.slice(1);
-  return await new Promise((resolve21, reject) => {
+  return await new Promise((resolve22, reject) => {
     let settled = false;
     const signal = input.signal;
     const child = spawn(command, args, {
@@ -92,7 +92,7 @@ async function spawnEngineDetourOnce(input) {
       if (signal !== void 0) {
         signal.removeEventListener("abort", onAbort);
       }
-      resolve21(result);
+      resolve22(result);
     };
     const onAbort = () => {
       fail4(signal !== void 0 ? abortReasonError(signal) : new Error("aborted"));
@@ -4754,7 +4754,7 @@ function normalizeReviewComment(raw) {
 function createGhApiRunner(options = {}) {
   const spawnImpl = options.spawnImpl ?? spawn3;
   return async (args, runOptions = {}) => {
-    return await new Promise((resolve21, reject) => {
+    return await new Promise((resolve22, reject) => {
       const signal = runOptions.signal;
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
@@ -4827,11 +4827,11 @@ function createGhApiRunner(options = {}) {
               const value = line2.slice(idx + 1).trim();
               headers[name] = value;
             }
-            resolve21({ status, headers, bodyText });
+            resolve22({ status, headers, bodyText });
             return;
           }
           if (code === 0) {
-            resolve21({ status: 200, headers: {}, bodyText: stdout });
+            resolve22({ status: 200, headers: {}, bodyText: stdout });
             return;
           }
           const failure2 = new Error(
@@ -6331,6 +6331,48 @@ async function loadResumableJudgeRun(home, runId, authority) {
   };
   return seatLoadedResult(loaded, admitted);
 }
+async function loadResumableReviewerRun(home, runId, authority) {
+  const loaded = await loadResumableRunRecord(home, runId, authority);
+  if (loaded.run.role !== "reviewer") {
+    throw new CliUsageError(
+      `role run ${runId} belongs to ${loaded.run.role}, not reviewer`
+    );
+  }
+  const rawBase = loaded.admittedFields.baseRevision;
+  if (rawBase === void 0 || rawBase.trim() === "") {
+    throw new CliUsageError(
+      `role run admitted reviewer base revision is missing: ${runId}`
+    );
+  }
+  if (/\s/.test(rawBase) || rawBase.startsWith("-")) {
+    throw new CliUsageError(
+      `role run admitted reviewer base revision is damaged: ${runId}`
+    );
+  }
+  const baseRevision = rawBase;
+  const lens = loaded.admittedFields.lens;
+  if (!isReviewerLens(lens)) {
+    throw new CliUsageError(
+      `role run admitted reviewer lens is missing: ${runId}`
+    );
+  }
+  const authorityRefs = Object.freeze([
+    ...loaded.admittedFields.authorityRefs ?? []
+  ]);
+  if (authorityRefs.length === 0) {
+    throw new CliUsageError(
+      `role run admitted reviewer authority refs are missing: ${runId}`
+    );
+  }
+  const admitted = {
+    role: "reviewer",
+    ...resumedBaseAdmitted(loaded),
+    baseRevision,
+    lens,
+    authorityRefs
+  };
+  return seatLoadedResult(loaded, admitted);
+}
 async function loadResumableCountersignRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
   if (loaded.run.role !== "countersign") {
@@ -7088,12 +7130,12 @@ var init_option_definitions = __esm({
         canonical: "--lens",
         aliases: [],
         valueMetavar: "completeness|correctness",
-        required: true,
+        required: false,
         repeatable: false,
         form: "option",
         description: {
-          en: "Required single review lens: completeness or correctness (no default).",
-          zh: "\u5FC5\u586B\u5355 lens\uFF1Acompleteness \u6216 correctness\uFF08\u65E0\u9ED8\u8BA4\u503C\uFF09\u3002"
+          en: "Optional single-lens override: completeness or correctness; omitted runs both in parallel.",
+          zh: "\u53EF\u9009\u5355 lens \u8986\u76D6\uFF1Acompleteness \u6216 correctness\uFF1B\u7701\u7565\u65F6\u5E76\u884C\u8FD0\u884C\u4E24\u8F74\u3002"
         }
       },
       {
@@ -7450,9 +7492,9 @@ var init_option_definitions = __esm({
       },
       reviewer: {
         command: "reviewer",
-        summary: "Fixed-target single-lens review (completeness or correctness).",
+        summary: "Fixed-target parallel two-lens review, with an optional single-lens override.",
         usage: [
-          "ak-role reviewer --base <revision> --lens completeness|correctness --authority-ref <ref> [options] <instruction>"
+          "ak-role reviewer --base <revision> [--lens completeness|correctness] --authority-ref <ref> [options] <instruction>"
         ],
         examples: [
           'ak-role reviewer --base main --lens completeness --authority-ref docs/adr/0001.md "Review the branch."',
@@ -9585,7 +9627,7 @@ function parseReviewerArgv(args) {
     instruction: positional.join(" "),
     attachmentPaths,
     baseRevision,
-    lens,
+    ...lens === void 0 ? {} : { lens },
     authorityRefs,
     ...project === void 0 ? {} : { project }
   };
@@ -9634,6 +9676,7 @@ async function admitReviewerInvocation(options) {
     baseRevision,
     lens,
     authorityRefs: [...authorityRefs],
+    ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId },
     attachments: attachments.map((a) => ({
       provenancePath: a.provenancePath,
       frozenPath: a.frozenPath,
@@ -9661,7 +9704,8 @@ async function admitReviewerInvocation(options) {
     admittedRequestPath,
     baseRevision,
     lens,
-    authorityRefs
+    authorityRefs,
+    ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
 }
 function buildReviewerSkillArgProjection(admitted) {
@@ -9878,11 +9922,11 @@ function parseAnalystCohortIssueToken(raw, flag) {
       `${flag} requires a comma-separated list of N or book:N`
     );
   }
-  const sep6 = trimmed.lastIndexOf(":");
-  if (sep6 > 0) {
-    const rhs = trimmed.slice(sep6 + 1);
+  const sep7 = trimmed.lastIndexOf(":");
+  if (sep7 > 0) {
+    const rhs = trimmed.slice(sep7 + 1);
     if (ANALYST_TICKET_NUMBER_PATTERN.test(rhs)) {
-      const bookKey = trimmed.slice(0, sep6);
+      const bookKey = trimmed.slice(0, sep7);
       if (bookKey.trim() === "") {
         throw new CliUsageError(
           `${flag} book:N requires a non-empty book key, got ${raw}`
@@ -12268,12 +12312,12 @@ function createSystemCollectorClock() {
   return {
     wallNow: () => /* @__PURE__ */ new Date(),
     monoNow: () => Number(process.hrtime.bigint() - start) / 1e6,
-    sleep: (ms, signal) => new Promise((resolve21, reject) => {
+    sleep: (ms, signal) => new Promise((resolve22, reject) => {
       if (signal?.aborted) {
         reject(signal.reason ?? new Error("aborted"));
         return;
       }
-      const timer = setTimeout(resolve21, ms);
+      const timer = setTimeout(resolve22, ms);
       const onAbort = () => {
         clearTimeout(timer);
         reject(signal?.reason ?? new Error("aborted"));
@@ -14263,6 +14307,15 @@ function formatTerminalResult(result) {
       );
     }
   }
+  if (result.reviewerChildOutcomes !== void 0) {
+    for (const axis of ["completeness", "correctness"]) {
+      const child = result.reviewerChildOutcomes[axis];
+      lines.push(`reviewer-child	${axis}	${child.exitCode}`);
+      if (child.stderr !== void 0 && child.stderr !== "") {
+        lines.push(`reviewer-child-diagnostic	${axis}	${encodeTerminalField(child.stderr)}`);
+      }
+    }
+  }
   if (result.resume !== void 0) {
     lines.push(`resume	${encodeTerminalField(result.resume.command)}`);
   } else if (result.runId !== void 0) {
@@ -16723,10 +16776,10 @@ function presentFailureTerminal(terminal, io) {
 }
 function defaultNavigatorGraceSleep() {
   let timer;
-  const sleep = ((ms) => new Promise((resolve21) => {
+  const sleep = ((ms) => new Promise((resolve22) => {
     timer = setTimeout(() => {
       timer = void 0;
-      resolve21();
+      resolve22();
     }, ms);
   }));
   sleep.cancel = () => {
@@ -16738,7 +16791,7 @@ function defaultNavigatorGraceSleep() {
   return sleep;
 }
 function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep = defaultNavigatorGraceSleep()) {
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve22, reject) => {
     let settled = false;
     const finish = (action) => {
       if (settled) return;
@@ -16747,11 +16800,11 @@ function raceNavigatorGrace(work, graceMs = NAVIGATOR_POST_ROLE_GRACE_MS, sleep
       action();
     };
     void work.then(
-      (value) => finish(() => resolve21({ status: "done", value })),
+      (value) => finish(() => resolve22({ status: "done", value })),
       (error) => finish(() => reject(error))
     );
     void sleep(graceMs).then(() => {
-      finish(() => resolve21({ status: "timeout" }));
+      finish(() => resolve22({ status: "timeout" }));
     });
   });
 }
@@ -18202,6 +18255,30 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
     }
   }
 }
+async function resolveResumeMethodMaterialAdapters(input) {
+  if (input.shouldLoad === false) {
+    return { kind: "continue", adapters: input.emptyAdapters };
+  }
+  try {
+    const material = await input.loadMaterial();
+    return { kind: "continue", adapters: input.adaptersWith(material) };
+  } catch (error) {
+    const terminal = await presentControlledFailure2(
+      input.admitted,
+      {
+        timedOut: false,
+        code: null,
+        stderr: "",
+        thrown: error,
+        ...input.knownCause === void 0 ? {} : { knownCause: input.knownCause }
+      },
+      input.emptyAdapters,
+      input.authority,
+      input.io
+    );
+    return { kind: "terminal", ...terminal };
+  }
+}
 async function presentControlledFailure2(admitted, failureInput, adapters, authority, io, persistRunState = true) {
   const hasThrown = Object.hasOwn(failureInput, "thrown");
   const resumeObservation = await resolveControlledFailureResumeObservation({
@@ -18752,6 +18829,8 @@ async function runPostAdmissionSeatResume(input) {
     }
     adapters = prepared.adapters;
   }
+  let env = input.env;
+  let preparedCleanup;
   const buildRequestAfterLease = async () => {
     let openCourtAttemptId;
     let admittedForBuild = loaded.admitted;
@@ -18802,7 +18881,12 @@ async function runPostAdmissionSeatResume(input) {
     return turnRequest;
   };
   try {
-    if (input.env.stationChild === true) {
+    if (input.afterAdmittedPrepare !== void 0) {
+      const prepared = await input.afterAdmittedPrepare(loaded.admitted);
+      if (prepared.env !== void 0) env = prepared.env;
+      preparedCleanup = prepared.cleanup;
+    }
+    if (env.stationChild === true) {
       let firstTurn;
       const stationAdapters = withOnceSuccessfulBeforeDispatch(adapters);
       const invocationScopeId = mintEngineDetourInvocationScope({
@@ -18810,14 +18894,14 @@ async function runPostAdmissionSeatResume(input) {
       });
       return await runWithAutoResumeLoop({
         admitted: loaded.admitted,
-        principalAuthority: input.env.principalAuthority,
+        principalAuthority: env.principalAuthority,
         isPrincipalAvailable: resolveHostAwareSessionAvailability(
-          input.env.host,
-          input.env.principalAuthority
+          env.host,
+          env.principalAuthority
         ),
         io: input.io,
-        sessionAppender: input.env.sessionAppender,
-        autoResumeLimit: input.env.autoResumeLimit,
+        sessionAppender: env.sessionAppender,
+        autoResumeLimit: env.autoResumeLimit,
         buildInitialPayload: () => ({ resumeTurn: false }),
         buildResumePayload: () => ({ resumeTurn: true }),
         // Same as public manual resume: prior-court sealed acceptance is not a
@@ -18844,7 +18928,7 @@ async function runPostAdmissionSeatResume(input) {
           dispatch: async (turnRequest) => {
             const result = await dispatchPostAdmissionTurn({
               admitted: loaded.admitted,
-              env: input.env,
+              env,
               io: attemptIo,
               request: turnRequest,
               lease,
@@ -18854,7 +18938,7 @@ async function runPostAdmissionSeatResume(input) {
             });
             return settleDeferredPersist(
               loaded.admitted,
-              input.env.principalAuthority,
+              env.principalAuthority,
               stationAdapters,
               attemptIo,
               result
@@ -18865,7 +18949,7 @@ async function runPostAdmissionSeatResume(input) {
     }
     return await runPostAdmissionManualResume({
       admitted: loaded.admitted,
-      env: input.env,
+      env,
       io: input.io,
       adapters,
       ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine },
@@ -18877,6 +18961,10 @@ async function runPostAdmissionSeatResume(input) {
       return { exitCode: 2 };
     }
     throw error;
+  } finally {
+    if (preparedCleanup !== void 0) {
+      await preparedCleanup();
+    }
   }
 }
 async function runPostAdmissionOneShot(input) {
@@ -19038,7 +19126,7 @@ var init_post_admission = __esm({
 
 // src/public-cli/turn-request.ts
 function projectRoleTurnRequest(admitted, roleDetails, options) {
-  const cwd = admitted.projectRoot ?? admitted.repoRoot ?? admitted.cwd;
+  const cwd = options.cwd ?? admitted.projectRoot ?? admitted.repoRoot ?? admitted.cwd;
   if (cwd === void 0) throw new Error("admitted invocation missing working directory");
   if (admitted.principal === void 0) throw new Error("admitted invocation missing principal");
   return {
@@ -20542,16 +20630,346 @@ var init_countersign_run = __esm({
   }
 });
 
+// src/public-cli/reviewer-run.ts
+var reviewer_run_exports = {};
+__export(reviewer_run_exports, {
+  buildReviewerTurnRequest: () => buildReviewerTurnRequest,
+  runPublicReviewer: () => runPublicReviewer,
+  runPublicReviewerResume: () => runPublicReviewerResume
+});
+import { resolve as resolve14 } from "node:path";
+function reviewerMethods(packageRoot) {
+  return [{ kind: "skill", path: resolvePackagedMethodSkillPath(packageRoot, "ak-cross-m-review") }];
+}
+async function runReviewerTurnInFreshCopy(env, projectRoot, io, body) {
+  if (env.executionCwd !== void 0) {
+    return body(env);
+  }
+  const { withEphemeralReviewerWorktree: withEphemeralReviewerWorktree2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+  return await withEphemeralReviewerWorktree2({
+    projectRoot,
+    onCleanupDiagnostic: (diagnostic) => {
+      io.stderr(`${diagnostic}
+`);
+    },
+    run: (executionCwd) => body({ ...env, executionCwd })
+  });
+}
+function buildReviewerTurnRequest(admitted, options) {
+  return projectRoleTurnRequest(
+    admitted,
+    {
+      activation: {
+        role: "reviewer",
+        baseRevision: admitted.baseRevision,
+        lens: admitted.lens,
+        authorityRefs: admitted.authorityRefs,
+        ...admitted.ticketNumber === void 0 ? {} : { ticketNumber: admitted.ticketNumber }
+      },
+      methods: reviewerMethods(options.packageRoot)
+    },
+    options
+  );
+}
+function reviewerAdapters(packageRoot, methodMaterial) {
+  return {
+    trySettle: (admitted, authority, scope) => methodMaterial === void 0 ? Promise.resolve(void 0) : trySettleReviewerTerminalResult(
+      admitted,
+      authority,
+      {
+        methodProvenance: methodMaterial.provenance,
+        methodSkillPath: methodMaterial.skillPath,
+        methodSkillConfiguredPath: resolvePackagedMethodSkillPath(
+          packageRoot,
+          "ak-cross-m-review"
+        )
+      },
+      scope
+    ),
+    resolveRunnerKnownFailure: async ({ result, sessionFile }) => {
+      const infrastructureFailure = await readEngineDetourInfrastructureFailure(sessionFile);
+      return infrastructureFailure === void 0 ? result.knownFailure : {
+        ...infrastructureFailure.cause === void 0 ? {} : { cause: infrastructureFailure.cause },
+        diagnostic: infrastructureFailure.diagnostic,
+        ...infrastructureFailure.identity === void 0 ? {} : { identity: infrastructureFailure.identity }
+      };
+    }
+  };
+}
+async function loadReviewerMethodMaterial(packageRoot) {
+  return await loadPackagedMethodSkillMaterial(packageRoot, "ak-cross-m-review");
+}
+function reviewerResumePrompt(env, message) {
+  const lines = [RESUME_TRANSPORT_ENVELOPE];
+  if (message !== void 0) lines.push("", message);
+  return appendEngineSessionMaterial(
+    lines,
+    engineSessionMaterialFromOptions({
+      ...pickEngineAxis(env),
+      packageRoot: env.packageRoot
+    })
+  ).join("\n");
+}
+async function runPublicReviewer(argv, env, io, parseReviewerArgv2) {
+  let parsed;
+  try {
+    parsed = parseReviewerArgv2(argv);
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  if (parsed.lens === void 0) {
+    const { summonParallelReviewerLenses: summonParallelReviewerLenses2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+    const children = await summonParallelReviewerLenses2({
+      argv,
+      // Replay argv under the same cwd the single-axis entry would see (10a).
+      // Do not substitute the resolved project path — relative --project must
+      // not be re-resolved against a shifted cwd.
+      cwd: env.cwd,
+      projectRoot: resolve14(parsed.project ?? env.cwd),
+      // Typed base from the public parse — precheck only; child argv stays verbatim.
+      baseRevision: parsed.baseRevision,
+      home: env.home,
+      agentDir: env.agentDir,
+      ...env.credentials === void 0 ? {} : { credentials: env.credentials },
+      ...env.model === void 0 ? {} : { model: env.model },
+      ...env.host === void 0 ? {} : { host: env.host },
+      ...env.engine === void 0 ? {} : { engine: env.engine },
+      ...env.engineModel === void 0 ? {} : { engineModel: env.engineModel },
+      packageRoot: env.packageRoot,
+      ...env.signal === void 0 ? {} : { signal: env.signal },
+      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
+      roleTurnHost: env.roleTurnHost,
+      ...env.hostAdapters === void 0 ? {} : { hostAdapters: env.hostAdapters },
+      principalAuthority: env.principalAuthority,
+      ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs }
+    });
+    const childResults = [children.completeness, children.correctness];
+    const terminals = childResults.map((child) => child.terminal).filter((terminal2) => terminal2 !== void 0);
+    const failedChildren = childResults.filter((child) => child.terminal === void 0 || !isLawfulTypedTerminalOutcome(child.terminal.roleOutcome)).length;
+    const overlayExit = childResults.some((child) => child.exitCode !== 0);
+    const failed = failedChildren > 0 || overlayExit;
+    const overlayDiagnostics = [...new Set(
+      childResults.map((child) => child.stderr).filter((text) => typeof text === "string" && text !== "")
+    )];
+    const terminal = {
+      batch: "reviewer",
+      roleOutcome: failed ? {
+        kind: "failure",
+        role: "reviewer",
+        diagnostic: failedChildren > 0 ? "Reviewer batch child failure" : overlayDiagnostics[0] ?? "Reviewer batch infrastructure failure",
+        decisiveFacts: { failedChildren },
+        payloads: terminals
+      } : { kind: "accepted", role: "reviewer", payloads: terminals },
+      reviewerChildren: {
+        ...children.completeness.terminal === void 0 ? {} : { completeness: children.completeness.terminal },
+        ...children.correctness.terminal === void 0 ? {} : { correctness: children.correctness.terminal }
+      },
+      reviewerChildOutcomes: {
+        completeness: { exitCode: children.completeness.exitCode, ...children.completeness.stderr === void 0 ? {} : { stderr: children.completeness.stderr } },
+        correctness: { exitCode: children.correctness.exitCode, ...children.correctness.stderr === void 0 ? {} : { stderr: children.correctness.stderr } }
+      },
+      // Batch has no parent run and no own attendance; no-advice is affirmative
+      // only (navigator-attendance.ts). Children carry their own navigator facts.
+      navigator: {
+        disposition: "unavailable",
+        source: "unknown",
+        reason: "Reviewer batch has no parent-run Navigator attendance"
+      },
+      artifacts: terminals.flatMap((item) => item.artifacts)
+    };
+    io.stdout(formatTerminalResult(terminal));
+    return { exitCode: failed ? 1 : 0, terminal };
+  }
+  let admitted;
+  try {
+    admitted = await admitReviewerInvocation({
+      home: env.home,
+      principalAuthority: env.principalAuthority,
+      cwd: env.cwd,
+      instruction: parsed.instruction,
+      attachmentPaths: parsed.attachmentPaths,
+      baseRevision: parsed.baseRevision,
+      lens: parsed.lens,
+      authorityRefs: parsed.authorityRefs,
+      ...parsed.project === void 0 ? {} : { project: parsed.project },
+      ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
+      ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
+      ...env.model === void 0 ? {} : { model: env.model }
+    });
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  await markRunAdmitted(admitted, env.principalAuthority);
+  let methodMaterial;
+  try {
+    methodMaterial = await loadReviewerMethodMaterial(env.packageRoot);
+  } catch (error) {
+    return await presentControlledFailure2(
+      admitted,
+      {
+        timedOut: false,
+        code: null,
+        stderr: "",
+        thrown: error
+      },
+      reviewerAdapters(env.packageRoot),
+      env.principalAuthority,
+      io
+    );
+  }
+  try {
+    return await runReviewerTurnInFreshCopy(env, admitted.projectRoot, io, async (sandboxedEnv) => await runPostAdmissionResumable({
+      admitted,
+      env: sandboxedEnv,
+      io,
+      buildInitialRequest: () => buildReviewerTurnRequest(admitted, {
+        packageRoot: sandboxedEnv.packageRoot,
+        home: sandboxedEnv.home,
+        agentDir: sandboxedEnv.agentDir,
+        ...sandboxedEnv.model === void 0 ? {} : { model: sandboxedEnv.model },
+        ...pickEngineAxis(sandboxedEnv),
+        ...sandboxedEnv.timeoutMs === void 0 ? {} : { timeoutMs: sandboxedEnv.timeoutMs },
+        ...admitted.correlationId === void 0 && sandboxedEnv.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? sandboxedEnv.correlationId },
+        // Ephemeral worktree cwd; durable projectRoot stays on admitted caller project.
+        ...sandboxedEnv.executionCwd === void 0 ? {} : { cwd: sandboxedEnv.executionCwd },
+        continuation: {
+          kind: "initial",
+          prompt: buildReviewerTransportPrompt(
+            admitted,
+            engineSessionMaterialFromOptions({
+              ...pickEngineAxis(sandboxedEnv),
+              packageRoot: sandboxedEnv.packageRoot
+            })
+          )
+        }
+      }),
+      buildResumeRequest: () => buildReviewerTurnRequest(admitted, {
+        packageRoot: sandboxedEnv.packageRoot,
+        home: sandboxedEnv.home,
+        agentDir: sandboxedEnv.agentDir,
+        ...sandboxedEnv.model === void 0 ? {} : { model: sandboxedEnv.model },
+        ...pickEngineAxis(sandboxedEnv),
+        ...sandboxedEnv.timeoutMs === void 0 ? {} : { timeoutMs: sandboxedEnv.timeoutMs },
+        ...admitted.correlationId === void 0 && sandboxedEnv.correlationId === void 0 ? {} : { correlationId: admitted.correlationId ?? sandboxedEnv.correlationId },
+        // In-batch auto-resume keeps the same call's sandbox (dual-lens or single).
+        ...sandboxedEnv.executionCwd === void 0 ? {} : { cwd: sandboxedEnv.executionCwd },
+        continuation: {
+          kind: "resume",
+          prompt: reviewerResumePrompt(sandboxedEnv)
+        }
+      }),
+      adapters: reviewerAdapters(sandboxedEnv.packageRoot, methodMaterial),
+      ...sandboxedEnv.engine === void 0 ? {} : { effectiveEngine: sandboxedEnv.engine }
+    }));
+  } catch (error) {
+    return await presentControlledFailure2(
+      admitted,
+      {
+        timedOut: false,
+        code: null,
+        stderr: "",
+        thrown: error
+      },
+      reviewerAdapters(env.packageRoot, methodMaterial),
+      env.principalAuthority,
+      io
+    );
+  }
+}
+async function runPublicReviewerResume(request, env, io) {
+  const sandbox = {
+    ...env.executionCwd === void 0 ? {} : { executionCwd: env.executionCwd }
+  };
+  return await runPostAdmissionSeatResume({
+    request,
+    env,
+    io,
+    load: (effective) => loadResumableReviewerRun(env.home, effective.runId, env.principalAuthority),
+    buildTurnRequest: (admitted, effective) => {
+      const activeEnv = sandbox.executionCwd === void 0 ? env : { ...env, executionCwd: sandbox.executionCwd };
+      const base = resumeTurnRequestProjectionOptions(admitted, effective, activeEnv);
+      return buildReviewerTurnRequest(admitted, {
+        ...base,
+        // Fresh copy at resume time; durable projectRoot unchanged.
+        ...sandbox.executionCwd === void 0 ? {} : { cwd: sandbox.executionCwd },
+        continuation: {
+          kind: "resume",
+          prompt: reviewerResumePrompt(activeEnv, effective.message)
+        }
+      });
+    },
+    adapters: reviewerAdapters(env.packageRoot),
+    afterAdmittedLoad: async (admitted) => {
+      return resolveResumeMethodMaterialAdapters({
+        admitted,
+        authority: env.principalAuthority,
+        io,
+        loadMaterial: () => loadReviewerMethodMaterial(env.packageRoot),
+        adaptersWith: (material) => reviewerAdapters(env.packageRoot, material),
+        emptyAdapters: reviewerAdapters(env.packageRoot)
+      });
+    },
+    afterAdmittedPrepare: async (admitted) => {
+      if (sandbox.executionCwd !== void 0) {
+        return { env: { ...env, executionCwd: sandbox.executionCwd } };
+      }
+      const { openEphemeralReviewerWorktree: openEphemeralReviewerWorktree2 } = await Promise.resolve().then(() => (init_public_role_summons(), public_role_summons_exports));
+      const opened = await openEphemeralReviewerWorktree2({
+        projectRoot: admitted.projectRoot,
+        onCleanupDiagnostic: (diagnostic) => {
+          io.stderr(`${diagnostic}
+`);
+        }
+      });
+      sandbox.executionCwd = opened.executionCwd;
+      return {
+        env: { ...env, executionCwd: opened.executionCwd },
+        cleanup: opened.close
+      };
+    },
+    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+  });
+}
+var init_reviewer_run = __esm({
+  "src/public-cli/reviewer-run.ts"() {
+    "use strict";
+    init_engine_material();
+    init_method_skill();
+    init_cli_errors();
+    init_invocation();
+    init_run_lifecycle();
+    init_settlement();
+    init_terminal();
+    init_turn_request();
+    init_post_admission();
+  }
+});
+
 // src/public-role-summons.ts
 var public_role_summons_exports = {};
 __export(public_role_summons_exports, {
   AK_ROLE_PACKAGE_ROOT_ENV: () => AK_ROLE_PACKAGE_ROOT_ENV,
+  openEphemeralReviewerWorktree: () => openEphemeralReviewerWorktree,
   resolveSummonsPackageRoot: () => resolveSummonsPackageRoot,
   summonGateOfficer: () => summonGateOfficer,
-  summonPublicRole: () => summonPublicRole
+  summonParallelReviewerLenses: () => summonParallelReviewerLenses,
+  summonPublicRole: () => summonPublicRole,
+  withEphemeralReviewerWorktree: () => withEphemeralReviewerWorktree
 });
+import { execFile as execFile3 } from "node:child_process";
 import { existsSync as existsSync11 } from "node:fs";
-import { join as join35 } from "node:path";
+import { mkdir as mkdir5, mkdtemp as mkdtemp4, realpath as realpath6, rm as rm4 } from "node:fs/promises";
+import { tmpdir as tmpdir4 } from "node:os";
+import { join as join35, relative as relative3, sep as sep5 } from "node:path";
+import { promisify as promisify3 } from "node:util";
 function createCapturingIo() {
   const chunks = [];
   return {
@@ -20639,13 +21057,14 @@ async function createSummonEnv(options, afterHost) {
     Promise.resolve().then(() => (init_role_turn_host_resolution(), role_turn_host_resolution_exports)),
     Promise.resolve().then(() => (init_config(), config_exports))
   ]);
-  const principalAuthority = piDurablePrincipalAuthority2;
+  const principalAuthority = options.principalAuthority ?? piDurablePrincipalAuthority2;
   const roleTurnHost = resolveRoleTurnHost2(
     {
       packageRoot: options.packageRoot,
       ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
       ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
-      ...options.extraPiArgs === void 0 || options.extraPiArgs.length === 0 ? {} : { extraPiArgs: options.extraPiArgs }
+      ...options.extraPiArgs === void 0 || options.extraPiArgs.length === 0 ? {} : { extraPiArgs: options.extraPiArgs },
+      ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     },
     { role: options.role, seat: options.seat, principalAuthority }
   );
@@ -20658,13 +21077,16 @@ async function createSummonEnv(options, afterHost) {
     };
   }
   const hostName = seatWithModel.host ?? "pi";
-  const { loadHostProvidersTable: loadHostProvidersTable2, projectHostFacingProvider: projectHostFacingProvider2 } = await Promise.resolve().then(() => (init_host_providers(), host_providers_exports));
-  const hostFacingSelection = projectHostFacingProvider2(
-    seatWithModel.selection,
-    hostName,
-    loadHostProvidersTable2(options.home),
-    options.home
-  );
+  let hostFacingSelection = options.hostFacingModel;
+  if (hostFacingSelection === void 0) {
+    const { loadHostProvidersTable: loadHostProvidersTable2, projectHostFacingProvider: projectHostFacingProvider2 } = await Promise.resolve().then(() => (init_host_providers(), host_providers_exports));
+    hostFacingSelection = projectHostFacingProvider2(
+      seatWithModel.selection,
+      hostName,
+      loadHostProvidersTable2(options.home),
+      options.home
+    );
+  }
   return {
     ok: true,
     env: {
@@ -20678,7 +21100,8 @@ async function createSummonEnv(options, afterHost) {
       credentials: options.credentials,
       ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
       ...projectSeatEngine(seatWithModel),
-      ...projectSeatHost(seatWithModel)
+      ...projectSeatHost(seatWithModel),
+      ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     }
   };
 }
@@ -20693,7 +21116,19 @@ async function summonPublicRole(options) {
   } = await Promise.resolve().then(() => (init_config(), config_exports));
   const credentials = options.credentials ?? await loadCredentialProviders2(agentDir);
   const config = await loadPublicCliConfig2(home);
-  const seat = resolveEffectiveSeat2(config, options.role, credentials);
+  const resolvedSeat = resolveEffectiveSeat2(config, options.role, credentials);
+  const inheritedSelection = options.model === void 0 ? void 0 : {
+    provider: options.model.provider,
+    model: options.model.model,
+    ...options.model.thinking === void 0 ? {} : { thinking: options.model.thinking }
+  };
+  const seat = {
+    ...resolvedSeat,
+    ...inheritedSelection === void 0 ? {} : { selection: inheritedSelection, source: "invocation" },
+    ...options.host === void 0 ? {} : { host: options.host, hostSource: "invocation" },
+    ...options.engine === void 0 ? {} : { engine: options.engine, engineSource: "invocation" },
+    ...options.engineModel === void 0 ? {} : { engineModel: options.engineModel }
+  };
   const captured = options.io === void 0 ? createCapturingIo() : void 0;
   const io = options.io ?? captured.io;
   const summonEnvInput = {
@@ -20706,7 +21141,11 @@ async function summonPublicRole(options) {
     seat,
     ...options.extraPiArgs === void 0 ? {} : { extraPiArgs: options.extraPiArgs },
     ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
-    ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters }
+    ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
+    ...options.principalAuthority === void 0 ? {} : { principalAuthority: options.principalAuthority },
+    ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
+    // Parent model is already host-facing; child must not project again.
+    ...options.model === void 0 ? {} : { hostFacingModel: options.model }
   };
   async function prepareSummonEnv(afterHost) {
     try {
@@ -20718,7 +21157,9 @@ async function summonPublicRole(options) {
         ok: true,
         env: {
           ...built.env,
-          stationChild: true,
+          // Nested court stations keep station-child semantics; dual-lens
+          // ordinary Reviewer axes opt out (#946 / ADR 0082).
+          ...options.stationChild === false ? {} : { stationChild: true },
           // Forward composition-root adapters so nested court stations (e.g.
           // countersign → diarist) select the same faux/production table (#924).
           ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
@@ -20728,7 +21169,8 @@ async function summonPublicRole(options) {
           ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction },
           ...options.boundTicketNumber === void 0 ? {} : { boundTicketNumber: options.boundTicketNumber },
           ...options.correlationId === void 0 || options.correlationId.trim() === "" ? {} : { correlationId: options.correlationId },
-          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId }
+          ...options.createRunId === void 0 ? {} : { createRunId: options.createRunId },
+          ...options.executionCwd === void 0 ? {} : { executionCwd: options.executionCwd }
         }
       };
     } catch (error) {
@@ -20840,6 +21282,16 @@ async function summonPublicRole(options) {
       result = stepped.ok;
       break;
     }
+    case "reviewer": {
+      const [{ runPublicReviewer: runPublicReviewer2 }, { parseReviewerArgv: parseReviewerArgv2 }] = await Promise.all([
+        Promise.resolve().then(() => (init_reviewer_run(), reviewer_run_exports)),
+        Promise.resolve().then(() => (init_invocation(), invocation_exports))
+      ]);
+      const stepped = await runPrepared(parseReviewerArgv2, (env, once) => runPublicReviewer2(options.argv, env, io, once));
+      if ("fail" in stepped) return stepped.fail;
+      result = stepped.ok;
+      break;
+    }
   }
   const stderr = captured?.stderrText();
   const runDirectory = result.admitted?.runDirectory;
@@ -20851,6 +21303,296 @@ async function summonPublicRole(options) {
     ...stderr === void 0 || stderr === "" ? {} : { stderr }
   };
 }
+function withReviewerLens(argv, lens) {
+  const separator = argv.indexOf("--");
+  if (separator === -1) return [...argv, "--lens", lens];
+  return [...argv.slice(0, separator), "--lens", lens, ...argv.slice(separator)];
+}
+async function resolveReviewerWorktreeRoots(projectRoot) {
+  const callerProjectRoot = await realpath6(projectRoot);
+  const sourceProjectRoot = await realpath6((await execFileAsync3(
+    "git",
+    ["rev-parse", "--show-toplevel"],
+    { cwd: callerProjectRoot }
+  )).stdout.trim());
+  const callerRelative = relative3(sourceProjectRoot, callerProjectRoot);
+  const projectRelative = callerRelative === "" || callerRelative === "." || callerRelative.startsWith(`..${sep5}`) || callerRelative === ".." ? "" : callerRelative;
+  return { callerProjectRoot, sourceProjectRoot, projectRelative };
+}
+function reviewerSandboxPath(worktreeAxis, projectRelative) {
+  return projectRelative === "" ? worktreeAxis : join35(worktreeAxis, projectRelative);
+}
+async function openEphemeralReviewerWorktree(options) {
+  const { sourceProjectRoot, projectRelative } = await resolveReviewerWorktreeRoots(
+    options.projectRoot
+  );
+  const { stdout: headStdout } = await execFileAsync3(
+    "git",
+    ["rev-parse", "--verify", "HEAD^{commit}"],
+    { cwd: sourceProjectRoot }
+  );
+  const targetCommit = headStdout.trim();
+  const root = await mkdtemp4(join35(tmpdir4(), "ak-reviewer-sandbox-"));
+  const worktreeRoot = join35(root, "work");
+  let registered = false;
+  const rollback = async (cause) => {
+    const cleanupErrors = [];
+    if (registered) {
+      try {
+        await execFileAsync3("git", ["worktree", "remove", "--force", worktreeRoot], {
+          cwd: sourceProjectRoot
+        });
+      } catch (error) {
+        cleanupErrors.push(error);
+      }
+    }
+    try {
+      await rm4(root, { recursive: true, force: true });
+    } catch (error) {
+      cleanupErrors.push(error);
+    }
+    if (cleanupErrors.length > 0) {
+      options.onCleanupDiagnostic?.([
+        "reviewer worktree cleanup failed",
+        ...cleanupErrors.map((error) => error instanceof Error ? error.message : String(error))
+      ].join("\n"));
+    }
+    throw cause;
+  };
+  try {
+    await execFileAsync3("git", ["worktree", "add", "--detach", worktreeRoot, targetCommit], {
+      cwd: sourceProjectRoot
+    });
+    registered = true;
+    if (projectRelative !== "") {
+      await mkdir5(reviewerSandboxPath(worktreeRoot, projectRelative), { recursive: true });
+    }
+  } catch (error) {
+    await rollback(error);
+  }
+  let closed = false;
+  return {
+    executionCwd: reviewerSandboxPath(worktreeRoot, projectRelative),
+    close: async () => {
+      if (closed) return;
+      closed = true;
+      const cleanupErrors = [];
+      try {
+        await execFileAsync3("git", ["worktree", "remove", worktreeRoot], {
+          cwd: sourceProjectRoot
+        });
+      } catch (error) {
+        cleanupErrors.push(error);
+      }
+      try {
+        await rm4(root, { recursive: true, force: true });
+      } catch (error) {
+        cleanupErrors.push(error);
+      }
+      if (cleanupErrors.length > 0) {
+        options.onCleanupDiagnostic?.([
+          "reviewer worktree cleanup failed",
+          ...cleanupErrors.map((error) => error instanceof Error ? error.message : String(error))
+        ].join("\n"));
+      }
+    }
+  };
+}
+async function withEphemeralReviewerWorktree(options) {
+  const sandbox = await openEphemeralReviewerWorktree({
+    projectRoot: options.projectRoot,
+    ...options.onCleanupDiagnostic === void 0 ? {} : { onCleanupDiagnostic: options.onCleanupDiagnostic }
+  });
+  try {
+    return await options.run(sandbox.executionCwd);
+  } finally {
+    await sandbox.close();
+  }
+}
+async function summonParallelReviewerLenses(options) {
+  const describeFailure = (error) => {
+    if (error instanceof AggregateError) {
+      return [error.message, ...error.errors.map(describeFailure)].join("\n");
+    }
+    return error instanceof Error ? error.message : String(error);
+  };
+  const failedResult = (error) => ({
+    exitCode: 1,
+    stderr: describeFailure(error)
+  });
+  const dualFailure = (error) => {
+    const failure2 = failedResult(error);
+    return { completeness: failure2, correctness: failure2 };
+  };
+  let sourceProjectRoot;
+  let projectRelative;
+  let targetCommit;
+  const statusArgs = [
+    "status",
+    "--porcelain=v1",
+    "--untracked-files=all",
+    "--",
+    ":/",
+    ":(top,exclude).claude/worktrees/**"
+  ];
+  try {
+    const roots = await resolveReviewerWorktreeRoots(options.projectRoot);
+    sourceProjectRoot = roots.sourceProjectRoot;
+    projectRelative = roots.projectRelative;
+    const { stdout: statusStdout } = await execFileAsync3("git", statusArgs, {
+      cwd: sourceProjectRoot
+    });
+    if (statusStdout !== "") {
+      const diagnostic = [
+        "Reviewer target status gate failed:",
+        "git status --porcelain=v1 --untracked-files=all -- :/ ':(top,exclude).claude/worktrees/**'",
+        statusStdout
+      ].join("\n");
+      return dualFailure(new Error(diagnostic));
+    }
+    const { stdout: targetStdout } = await execFileAsync3(
+      "git",
+      ["rev-parse", "--verify", "HEAD^{commit}"],
+      { cwd: sourceProjectRoot }
+    );
+    targetCommit = targetStdout.trim();
+    await execFileAsync3(
+      "git",
+      ["rev-parse", "--verify", `${options.baseRevision}^{commit}`],
+      { cwd: sourceProjectRoot }
+    );
+  } catch (error) {
+    return dualFailure(error);
+  }
+  const root = await mkdtemp4(join35(tmpdir4(), "ak-reviewer-lenses-"));
+  const completenessRoot = join35(root, "completeness");
+  const correctnessRoot = join35(root, "correctness");
+  const worktrees = [completenessRoot, correctnessRoot];
+  const created = /* @__PURE__ */ new Set();
+  let results;
+  const creation = await Promise.allSettled(
+    worktrees.map(async (path) => {
+      await execFileAsync3("git", ["worktree", "add", "--detach", path, targetCommit], {
+        cwd: sourceProjectRoot
+      });
+      created.add(path);
+      if (projectRelative !== "") {
+        await mkdir5(reviewerSandboxPath(path, projectRelative), { recursive: true });
+      }
+    })
+  );
+  const creationFailures = creation.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+  if (creationFailures.length > 0) {
+    const failure2 = failedResult(new AggregateError(
+      creationFailures,
+      "parallel reviewer worktree creation failed"
+    ));
+    results = { completeness: failure2, correctness: failure2 };
+  } else {
+    const summon = (lens, worktreeAxis) => {
+      const sandbox = reviewerSandboxPath(worktreeAxis, projectRelative);
+      return summonPublicRole({
+        role: "reviewer",
+        argv: withReviewerLens(options.argv, lens),
+        cwd: options.cwd,
+        executionCwd: sandbox,
+        // Ordinary single-axis public semantics — not a nested court station.
+        stationChild: false,
+        home: options.home,
+        ...options.agentDir === void 0 ? {} : { agentDir: options.agentDir },
+        ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+        ...options.model === void 0 ? {} : { model: options.model },
+        ...options.host === void 0 ? {} : { host: options.host },
+        ...options.engine === void 0 ? {} : { engine: options.engine },
+        ...options.engineModel === void 0 ? {} : { engineModel: options.engineModel },
+        ...options.signal === void 0 ? {} : { signal: options.signal },
+        ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId },
+        ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
+        ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
+        ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
+        ...options.principalAuthority === void 0 ? {} : { principalAuthority: options.principalAuthority },
+        ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+      });
+    };
+    const settled = await Promise.allSettled([
+      summon("completeness", completenessRoot),
+      summon("correctness", correctnessRoot)
+    ]);
+    results = {
+      completeness: settled[0].status === "fulfilled" ? settled[0].value : failedResult(settled[0].reason),
+      correctness: settled[1].status === "fulfilled" ? settled[1].value : failedResult(settled[1].reason)
+    };
+  }
+  let sealDiagnostic;
+  try {
+    const { stdout: headBeforeStdout } = await execFileAsync3(
+      "git",
+      ["rev-parse", "--verify", "HEAD^{commit}"],
+      { cwd: sourceProjectRoot }
+    );
+    const { stdout: sealedStatusStdout } = await execFileAsync3("git", statusArgs, {
+      cwd: sourceProjectRoot
+    });
+    const { stdout: headAfterStdout } = await execFileAsync3(
+      "git",
+      ["rev-parse", "--verify", "HEAD^{commit}"],
+      { cwd: sourceProjectRoot }
+    );
+    const headBefore = headBeforeStdout.trim();
+    const headAfter = headAfterStdout.trim();
+    if (headBefore !== targetCommit || headAfter !== targetCommit || sealedStatusStdout !== "") {
+      sealDiagnostic = [
+        "Reviewer target final seal failed:",
+        `HEAD before status => ${headBefore}`,
+        `HEAD after status => ${headAfter}`,
+        `expected PRE_HEAD ${targetCommit}`,
+        "git status --porcelain=v1 --untracked-files=all -- :/ ':(top,exclude).claude/worktrees/**'",
+        sealedStatusStdout
+      ].join("\n");
+    }
+  } catch (error) {
+    sealDiagnostic = `Reviewer target final seal failed:
+${describeFailure(error)}`;
+  }
+  if (sealDiagnostic !== void 0) {
+    const withSealFailure = (result) => ({
+      ...result,
+      exitCode: 1,
+      stderr: [result.stderr, sealDiagnostic].filter(
+        (text) => typeof text === "string" && text !== ""
+      ).join("\n")
+    });
+    results = {
+      completeness: withSealFailure(results.completeness),
+      correctness: withSealFailure(results.correctness)
+    };
+  }
+  const cleanup = await Promise.allSettled(
+    [...created].map((path) => execFileAsync3("git", ["worktree", "remove", path], { cwd: sourceProjectRoot }))
+  );
+  const cleanupFailures = cleanup.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+  if (cleanupFailures.length === 0) {
+    const rootCleanup = await Promise.allSettled([rm4(root, { recursive: true, force: true })]);
+    cleanupFailures.push(...rootCleanup.flatMap((result) => result.status === "rejected" ? [result.reason] : []));
+  }
+  if (cleanupFailures.length > 0) {
+    const diagnostic = [
+      "parallel reviewer worktree cleanup failed",
+      ...cleanupFailures.map((failure2) => failure2 instanceof Error ? failure2.message : String(failure2))
+    ].join("\n");
+    const withCleanupDiagnostic = (result) => ({
+      ...result,
+      stderr: [result.stderr, diagnostic].filter(
+        (text) => typeof text === "string" && text !== ""
+      ).join("\n")
+    });
+    results = {
+      completeness: withCleanupDiagnostic(results.completeness),
+      correctness: withCleanupDiagnostic(results.correctness)
+    };
+  }
+  return results;
+}
 async function summonGateOfficer(options) {
   let home = options.home;
   if (home === void 0) {
@@ -20900,12 +21642,13 @@ async function summonGateOfficer(options) {
     ...common
   });
 }
-var AK_ROLE_PACKAGE_ROOT_ENV;
+var AK_ROLE_PACKAGE_ROOT_ENV, execFileAsync3;
 var init_public_role_summons = __esm({
   "src/public-role-summons.ts"() {
     "use strict";
     init_engine_material();
     AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
+    execFileAsync3 = promisify3(execFile3);
   }
 });
 
@@ -20915,7 +21658,7 @@ import { randomUUID as randomUUID9 } from "node:crypto";
 // src/role-envelope.ts
 init_engine_detour();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { mkdir as mkdir6, writeFile as writeFile12 } from "node:fs/promises";
+import { mkdir as mkdir7, writeFile as writeFile12 } from "node:fs/promises";
 import { createServer } from "node:net";
 import { dirname as dirname22, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
@@ -21003,7 +21746,7 @@ async function requireGatekeeperPass(options) {
 }
 
 // src/host-native-method.ts
-import { lstat as lstat7, mkdir as mkdir5, readlink, realpath as realpath6, symlink } from "node:fs/promises";
+import { lstat as lstat7, mkdir as mkdir6, readlink, realpath as realpath7, symlink } from "node:fs/promises";
 import { basename as basename9, dirname as dirname18, join as join36 } from "node:path";
 var packagedMethodsDir = (root) => join36(root, "resources", "methods");
 function hostMethodSkills(methods) {
@@ -21014,11 +21757,11 @@ function hostMethodSkills(methods) {
   }));
 }
 async function installWorkspaceMethodSkills(cwd, packageRoot) {
-  const target = await realpath6(packagedMethodsDir(packageRoot));
+  const target = await realpath7(packagedMethodsDir(packageRoot));
   const link = join36(cwd, ".agents", "skills");
   try {
     const stat2 = await lstat7(link);
-    if (!stat2.isSymbolicLink() || await realpath6(link) !== target) {
+    if (!stat2.isSymbolicLink() || await realpath7(link) !== target) {
       const detail = stat2.isSymbolicLink() ? `symlink to ${await readlink(link)}` : "non-symlink entry";
       throw new Error(`workspace method catalog conflict at ${link}: ${detail}`);
     }
@@ -21026,12 +21769,12 @@ async function installWorkspaceMethodSkills(cwd, packageRoot) {
   } catch (error) {
     if (error.code !== "ENOENT") throw error;
   }
-  await mkdir5(dirname18(link), { recursive: true });
+  await mkdir6(dirname18(link), { recursive: true });
   try {
     await symlink(target, link);
   } catch (error) {
     if (error.code !== "EEXIST") throw error;
-    if (await realpath6(link).catch(() => "") !== target) {
+    if (await realpath7(link).catch(() => "") !== target) {
       throw new Error(`workspace method catalog conflict at ${link}`);
     }
   }
@@ -21096,7 +21839,7 @@ import {
   openSync as openSync2,
   writeSync
 } from "node:fs";
-import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve15 } from "node:path";
+import { dirname as dirname19, isAbsolute as isAbsolute10, resolve as resolve16 } from "node:path";
 
 // src/activation-ledger-session.ts
 init_activation_ledger_topology();
@@ -21106,7 +21849,7 @@ import {
   statSync as statSync4,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { isAbsolute as isAbsolute9, resolve as resolve14 } from "node:path";
+import { isAbsolute as isAbsolute9, resolve as resolve15 } from "node:path";
 var ActivationSessionFileMissingError = class extends Error {
   code = "AK_ACTIVATION_SESSION_FILE_MISSING";
   path;
@@ -21151,7 +21894,7 @@ function durableSessionPointer(sessionManager) {
       `Workflow role activation requires an absolute durable session file path; got relative path: ${file}`
     );
   }
-  const resolvedFile = resolve14(file);
+  const resolvedFile = resolve15(file);
   try {
     lstatSync2(resolvedFile);
   } catch (error) {
@@ -21243,8 +21986,8 @@ function appendActivationLedgerLine(ledgerPath, line2, options) {
       `activation ledger home must be absolute: ${options.ledgerHome}`
     );
   }
-  const resolvedLedger = resolve15(ledgerPath);
-  const resolvedHome = resolve15(options.ledgerHome);
+  const resolvedLedger = resolve16(ledgerPath);
+  const resolvedHome = resolve16(options.ledgerHome);
   const parent = dirname19(resolvedLedger);
   ensureRealDirectoryTree(resolvedHome, parent);
   assertLedgerFileInsideHome(resolvedLedger, resolvedHome);
@@ -21605,11 +22348,11 @@ init_collector_github();
 
 // src/collector-handbook.ts
 import { readFile as readFile19 } from "node:fs/promises";
-import { join as join38, sep as sep5 } from "node:path";
+import { join as join38, sep as sep6 } from "node:path";
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
-import { rename as rename3, rm as rm4, writeFile as writeFile11 } from "node:fs/promises";
+import { rename as rename3, rm as rm5, writeFile as writeFile11 } from "node:fs/promises";
 import { dirname as dirname20, join as join37 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname20(destination);
@@ -21618,7 +22361,7 @@ async function writeFileAtomically(destination, contents) {
     await writeFile11(temporary, contents);
     await rename3(temporary, destination);
   } catch (error) {
-    await rm4(temporary, { force: true }).catch(() => void 0);
+    await rm5(temporary, { force: true }).catch(() => void 0);
     throw error;
   }
 }
@@ -21719,7 +22462,7 @@ function resolveCollectorHandbookRoot(sessionPath) {
   if (typeof sessionPath !== "string" || sessionPath.trim().length === 0) {
     throw new Error("\u901A\u8FDB\u53F8\u624B\u518C\u8981\u6C42\u975E\u7A7A session \u8DEF\u5F84\uFF0C\u4E14\u4F4D\u4E8E books/<bookKey>/");
   }
-  const segments = sessionPath.split(sep5);
+  const segments = sessionPath.split(sep6);
   let bookKey;
   for (let i = 0; i + 3 < segments.length; i += 1) {
     if (segments[i] === ".ak-roles" && segments[i + 1] === "books") {
@@ -22916,7 +23659,7 @@ import { createHash as createHash9 } from "node:crypto";
 init_navigator_invocation_identity();
 init_packaged_role_registry();
 init_activation_ledger_topology();
-import { resolve as resolve16 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 import "@earendil-works/pi-coding-agent";
 import { Type as Type22 } from "typebox";
 
@@ -23369,7 +24112,7 @@ function navigatorSubjectKey(subjectRoot, subject, provenance = "role_input") {
 }
 function navigatorSubjectKeyForInput(subjectRoot, reference, cwd = process.cwd()) {
   if (issueRoot(subjectRoot) !== void 0 || !subjectRoot.includes("/.ak/work/")) return subjectRoot;
-  const resolvedReference = resolve16(cwd, reference);
+  const resolvedReference = resolve17(cwd, reference);
   const marker = "/runs/";
   if (resolvedReference.includes(marker)) {
     return subjectRoot;
@@ -24010,7 +24753,7 @@ var reviewerAmendmentsSchema = Type24.Object({
   }))
 }, {
   additionalProperties: true,
-  description: "\u6240\u9009 lens \u7684 amendments \u627F\u8F7D candidates\u3001\u9010\u6761\u5904\u7F6E\u4E0E verdict \u7684\u5B8C\u6574\u62A5\u544A\uFF08\u975E\u4EC5 verdict \u884C\uFF09\uFF1B\u672A\u9009 lens \u53EF\u7701\u7565\u3002hard-stop\uFF0Fusage error \u4E3A refused \u65F6\uFF0C\u5DF2\u4EA7\u51FA\u62A5\u544A\u4ECD\u7167\u5F55\u8FDB\u6240\u9009 lens \u5B57\u6BB5\u3002\u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\u3002"
+  description: "\u5DF2\u8FD0\u884C lens \u7684 amendments \u627F\u8F7D candidates\u3001\u9010\u6761\u5904\u7F6E\u4E0E verdict \u7684\u5B8C\u6574\u62A5\u544A\uFF08\u975E\u4EC5 verdict \u884C\uFF09\uFF1B\u663E\u5F0F\u5355\u8F74\u65F6\u53E6\u4E00\u8F74\u53EF\u7701\u7565\u3002hard-stop\uFF0Fusage error \u4E3A refused \u65F6\uFF0C\u5DF2\u4EA7\u51FA\u62A5\u544A\u4ECD\u7167\u5F55\u5BF9\u5E94 lens \u5B57\u6BB5\u3002\u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\u3002"
 });
 var REVIEWER_STATUS_DESCRIPTION = "completed | refused \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8\u3002\u4E24\u79CD\u6B63\u5E38 lens verdict\uFF08completeness / correctness\uFF09\u5747 completed\uFF1Bhard-stop \u4E0E usage error \u4E3A refused\uFF08\u5DF2\u4EA7\u51FA\u62A5\u544A\u4ECD\u7167\u5F55\u8FDB\u6240\u9009 lens amendments\uFF09\u3002";
 var reviewerOutputVariants = Type24.Union([
@@ -24086,7 +24829,7 @@ init_submission_errors();
 init_submission_errors();
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { existsSync as existsSync12, lstatSync as lstatSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, rmSync } from "node:fs";
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve18 } from "node:path";
 var WORKER_SUBMISSION_GATE_RECORD_KIND = WORKER_SUBMISSION_GATE_KIND;
 var WORKER_COMMIT_BASELINE_ENTRY_TYPE = "commit-baseline";
 var WORKER_COMMIT_REMINDER_BOUNCE_ENTRY_TYPE = "commit-reminder-bounce";
@@ -24135,7 +24878,7 @@ function escapeGitConfigValueRegex(value) {
 function unsetOwnedHooksPath(file) {
   const owned = [];
   for (const value of tryGetAll(file, "core.hooksPath")) {
-    if (!ownedHook(resolve17(value, HOOK_FILE))) continue;
+    if (!ownedHook(resolve18(value, HOOK_FILE))) continue;
     try {
       gitFile(file, [
         "--unset-all",
@@ -24150,15 +24893,15 @@ function unsetOwnedHooksPath(file) {
   return owned;
 }
 function rmOwnedDir(dir) {
-  const hookPath = resolve17(dir, HOOK_FILE);
+  const hookPath = resolve18(dir, HOOK_FILE);
   if (!ownedHook(hookPath)) return;
   rmSync(hookPath, { force: true });
   if (existsSync12(dir) && readdirSync3(dir).length === 0) rmdirSync(dir);
 }
 function linkedGitDirs(commonDir) {
-  const root = resolve17(commonDir, "worktrees");
+  const root = resolve18(commonDir, "worktrees");
   if (!existsSync12(root)) return [];
-  return readdirSync3(root).map((name) => resolve17(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
+  return readdirSync3(root).map((name) => resolve18(root, name)).filter((dir) => lstatSync3(dir).isDirectory());
 }
 function uninstallPackageWorkerHooks(cwd) {
   let inside;
@@ -24172,14 +24915,14 @@ function uninstallPackageWorkerHooks(cwd) {
   const clear = (configFile) => {
     for (const hooks of unsetOwnedHooksPath(configFile)) rmOwnedDir(hooks);
   };
-  clear(resolve17(commonDir, "config"));
-  clear(resolve17(commonDir, "config.worktree"));
-  rmOwnedDir(resolve17(commonDir, HOOKS_DIR));
-  const legacy = resolve17(commonDir, "hooks", HOOK_FILE);
+  clear(resolve18(commonDir, "config"));
+  clear(resolve18(commonDir, "config.worktree"));
+  rmOwnedDir(resolve18(commonDir, HOOKS_DIR));
+  const legacy = resolve18(commonDir, "hooks", HOOK_FILE);
   if (ownedHook(legacy)) rmSync(legacy, { force: true });
   for (const gitDir of linkedGitDirs(commonDir)) {
-    clear(resolve17(gitDir, "config.worktree"));
-    rmOwnedDir(resolve17(gitDir, HOOKS_DIR));
+    clear(resolve18(gitDir, "config.worktree"));
+    rmOwnedDir(resolve18(gitDir, HOOKS_DIR));
   }
 }
 function isRecord13(value) {
@@ -24224,11 +24967,11 @@ function reliableWindow(cwd, baseline, head) {
   const raw = git2(cwd, ["log", "--format=%P%x1e%s", range]);
   if (raw.length === 0) return [];
   return raw.split("\n").flatMap((line2) => {
-    const sep6 = line2.indexOf("");
-    if (sep6 < 0) return [];
+    const sep7 = line2.indexOf("");
+    if (sep7 < 0) return [];
     return [{
-      subject: line2.slice(sep6 + 1),
-      merge: line2.slice(0, sep6).trim().includes(" ")
+      subject: line2.slice(sep7 + 1),
+      merge: line2.slice(0, sep7).trim().includes(" ")
     }];
   });
 }
@@ -24773,7 +25516,7 @@ var REVIEWER_TRANSPORT_FLAGS = Object.freeze([
   Object.freeze({
     name: "ak-review-lens",
     definition: Object.freeze({
-      description: "Caller-selected single review lens: completeness or correctness",
+      description: "Single review lens: completeness or correctness",
       type: "string"
     })
   }),
@@ -26228,11 +26971,11 @@ init_role_activation_flags();
 init_submission_correctable_error();
 init_navigator_invocation_identity();
 async function listen(server, path) {
-  await new Promise((resolve21, reject) => {
+  await new Promise((resolve22, reject) => {
     server.once("error", reject);
     server.listen(path, () => {
       server.off("error", reject);
-      resolve21();
+      resolve22();
     });
   });
 }
@@ -26266,9 +27009,9 @@ async function prepareRoleEnvelope(options) {
   let infrastructureRoundFailure;
   const hostAbort = new AbortController();
   const runId = request.runDirectory.split("/").filter(Boolean).at(-1) ?? randomUUID8();
-  await mkdir6(request.runDirectory, { recursive: true });
+  await mkdir7(request.runDirectory, { recursive: true });
   let sessionFile = options.sessionFile ?? join41(request.runDirectory, "session", "session.jsonl");
-  await mkdir6(dirname22(sessionFile), { recursive: true });
+  await mkdir7(dirname22(sessionFile), { recursive: true });
   if (request.continuation.kind !== "resume") {
     try {
       await writeFile12(
@@ -26610,8 +27353,8 @@ async function prepareRoleEnvelope(options) {
     try {
       const closeAll = server.closeAllConnections;
       if (typeof closeAll === "function") closeAll.call(server);
-      await new Promise((resolve21, reject) => {
-        server.close((error) => error ? reject(error) : resolve21());
+      await new Promise((resolve22, reject) => {
+        server.close((error) => error ? reject(error) : resolve22());
       });
     } catch (error) {
       cleanupFailures.push(error);
@@ -26743,9 +27486,9 @@ import { readFile as readFile22 } from "node:fs/promises";
 import { join as join42 } from "node:path";
 
 // src/canonical-skill-binding.ts
-import { readFile as readFile20, realpath as realpath7 } from "node:fs/promises";
+import { readFile as readFile20, realpath as realpath8 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname as dirname23, resolve as resolve18 } from "node:path";
+import { dirname as dirname23, resolve as resolve19 } from "node:path";
 import { stripFrontmatter } from "@earendil-works/pi-coding-agent";
 function captureCanonicalSkillExpansion(name, snapshot, configuredPath, evidence, originalRequest) {
   const matchedPath = evidence?.location === configuredPath ? configuredPath : evidence?.location === snapshot.path ? snapshot.path : void 0;
@@ -26768,14 +27511,14 @@ var CanonicalSkillUnavailableError = class extends Error {
   code = "canonical-skill-unavailable";
 };
 async function loadCanonicalSkillBinding(name) {
-  const configuredPath = resolve18(
+  const configuredPath = resolve19(
     homedir(),
     `.agents/skills/${name}/SKILL.md`
   );
   let path;
   let raw;
   try {
-    path = await realpath7(configuredPath);
+    path = await realpath8(configuredPath);
     raw = await readFile20(path, "utf8");
   } catch (error) {
     throw new CanonicalSkillUnavailableError(name, configuredPath, error);
@@ -26816,7 +27559,7 @@ init_doctor_evidence();
 init_doctor_evidence();
 init_host_contracts();
 import { readFile as readFile21 } from "node:fs/promises";
-import { resolve as resolve19 } from "node:path";
+import { resolve as resolve20 } from "node:path";
 init_notary_source_run();
 init_packaged_role_registry();
 init_invocation();
@@ -26824,7 +27567,7 @@ function navigatorInputReference(getFlag, role) {
   if (getFlag === void 0) return void 0;
   const name = packagedRoleInputFlag(role);
   const value = name === void 0 ? void 0 : getFlag(name);
-  return typeof value === "string" && value !== "" ? resolve19(value) : void 0;
+  return typeof value === "string" && value !== "" ? resolve20(value) : void 0;
 }
 async function loadNavigatorWorkContext(options) {
   const reference = navigatorInputReference(options.getFlag, options.role);
@@ -26845,7 +27588,7 @@ async function loadNavigatorWorkContext(options) {
   }
   const publicRunDir = runDirectoryFromHostContext(options.context);
   const currentSessionDir = options.context.sessionManager.getSessionDir();
-  const isBoundPublicRun = publicRunDir !== void 0 && resolve19(currentSessionDir) === resolve19(publicRunDir, "session");
+  const isBoundPublicRun = publicRunDir !== void 0 && resolve20(currentSessionDir) === resolve20(publicRunDir, "session");
   if (options.role === "judge" && isBoundPublicRun) {
     let admitted;
     try {
@@ -26878,9 +27621,9 @@ async function loadNavigatorWorkContext(options) {
   }
   const workRoot = subjectRoot.includes("/.ak/work/") ? subjectRoot : void 0;
   const authorityFiles = workRoot === void 0 ? [] : [
-    resolve19(workRoot, "authority.md"),
-    resolve19(workRoot, "authority.txt"),
-    resolve19(workRoot, "design-v2/owner-direction.md")
+    resolve20(workRoot, "authority.md"),
+    resolve20(workRoot, "authority.txt"),
+    resolve20(workRoot, "design-v2/owner-direction.md")
   ];
   let authorityMaterial;
   for (const path of authorityFiles) {
@@ -27064,7 +27807,7 @@ function hostAbortedError(message = "host aborted") {
 function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
   if (abortSignal?.aborted) return Promise.reject(hostAbortedError(message));
   if (abortSignal === void 0) return work;
-  return new Promise((resolve21, reject) => {
+  return new Promise((resolve22, reject) => {
     let settled = false;
     const onAbort = () => {
       if (settled) return;
@@ -27079,7 +27822,7 @@ function raceAgainstHostAbort(work, abortSignal, message = "host aborted") {
         if (settled) return;
         settled = true;
         abortSignal.removeEventListener("abort", onAbort);
-        resolve21(value);
+        resolve22(value);
       },
       (error) => {
         if (settled) return;
@@ -27267,8 +28010,8 @@ function connectAcpStdio(options) {
     request(method, params) {
       if (closed) return Promise.reject(terminalError ?? acpError("acp-connection-closed", "ACP connection is closed"));
       const id = ++nextId;
-      return new Promise((resolve21, reject) => {
-        pending.set(id, { resolve: resolve21, reject });
+      return new Promise((resolve22, reject) => {
+        pending.set(id, { resolve: resolve22, reject });
         child.stdin.write(`${JSON.stringify({ jsonrpc: "2.0", id, method, params })}
 `, (error) => {
           if (error === null || error === void 0) return;
@@ -27295,7 +28038,7 @@ function connectAcpStdio(options) {
       settleClosed(acpError("acp-connection-closed", "ACP connection is closed"));
       child.stdin.end();
       child.kill("SIGTERM");
-      await new Promise((resolve21) => child.once("close", () => resolve21()));
+      await new Promise((resolve22) => child.once("close", () => resolve22()));
     }
   });
 }
@@ -27461,8 +28204,8 @@ function createAcpRoleTurnHost(config) {
 
 // src/acp-host/seat-profile-soul.ts
 import { constants as constants3 } from "node:fs";
-import { access as access4, copyFile, lstat as lstat8, mkdir as mkdir7, readlink as readlink2, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
-import { dirname as dirname25, join as join44, relative as relative3, resolve as resolve20 } from "node:path";
+import { access as access4, copyFile, lstat as lstat8, mkdir as mkdir8, readlink as readlink2, symlink as symlink2, unlink as unlink3 } from "node:fs/promises";
+import { dirname as dirname25, join as join44, relative as relative4, resolve as resolve21 } from "node:path";
 function seatProfileName(spec, role) {
   return `${spec.namePrefix}${role}`;
 }
@@ -27480,7 +28223,7 @@ async function pathExists2(path) {
 async function ensureSeatProfileSoul(options) {
   const { spec, operatorHome, packageRoot, role } = options;
   const profileName = seatProfileName(spec, role);
-  const soulTarget = resolve20(packageRoleSoulPath(packageRoot, role));
+  const soulTarget = resolve21(packageRoleSoulPath(packageRoot, role));
   if (!await pathExists2(soulTarget)) {
     throw new Error(`packaged role soul missing: ${soulTarget}`);
   }
@@ -27489,16 +28232,16 @@ async function ensureSeatProfileSoul(options) {
   const hostRoot = dirname25(profilesRoot);
   const soulPath = join44(profileDir, spec.soulFileName);
   if (!await pathExists2(profileDir)) {
-    await mkdir7(profileDir, { recursive: true });
+    await mkdir8(profileDir, { recursive: true });
     for (const name of ["auth.json", ".env", "config.yaml"]) {
       const source = join44(hostRoot, name);
       if (!await pathExists2(source)) continue;
       await copyFile(source, join44(profileDir, name));
     }
   } else {
-    await mkdir7(profileDir, { recursive: true });
+    await mkdir8(profileDir, { recursive: true });
   }
-  const desiredLink = relative3(profileDir, soulTarget);
+  const desiredLink = relative4(profileDir, soulTarget);
   let current;
   try {
     const st = await lstat8(soulPath);