@akagilnc/pi-workflow-roles 0.1.5015 → 0.1.5063

package/dist/public-cli/post-admission.js

@@ -104,8 +104,9 @@ function withOnceSuccessfulBeforeDispatch(adapters) {
         beforeDispatch: async (admitted, lease) => {
             if (succeeded)
                 return;
-            await hook(admitted, lease);
+            const result = await hook(admitted, lease);
             succeeded = true;
+            return result;
         },
     };
 }
@@ -333,9 +334,8 @@ export async function dispatchPostAdmissionTurn(input) {
             };
         }
         try {
-            // #858: an unbound seat may assert its ticket on the existing receipt.
-            // Read the original accepted payload; do not rewrite it, infer from prose,
-            // or reject missing/malformed declarations. An existing binding wins.
+            // #858: the first typed assertion files an unbound run. Later receipts
+            // remain untouched; this seam does not adjudicate a ticket change.
             if (admitted.ticketNumber === undefined) {
                 const rows = await readRecordedSubmissionRows(admitted.projectRoot, admitted.runId, { home: homeFromRunDirectory(admitted.runDirectory), sessionParent: join(admitted.runDirectory, "session", "session.jsonl") });
                 const asserted = rows
@@ -429,7 +429,10 @@ export async function dispatchPostAdmissionTurn(input) {
         // (#840 父子不层叠).
         if (adapters.beforeDispatch !== undefined) {
             try {
-                await adapters.beforeDispatch(admitted, lease);
+                const paused = await adapters.beforeDispatch(admitted, lease);
+                if (paused !== undefined) {
+                    return { exitCode: 0, admitted, terminal: paused, skipAutoResume: true };
+                }
             }
             catch (error) {
                 const settled = (await presentControlledFailure(admitted, withEngineDetourInvocationScope({
@@ -860,6 +863,7 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
     return {
         packageRoot: env.packageRoot,
         home: env.home,
+        ...(env.host === undefined ? {} : { host: env.host }),
         agentDir: env.agentDir,
         ...(env.model === undefined ? {} : { model: env.model }),
         ...pickEngineAxis(env),
@@ -881,6 +885,7 @@ export function roleTurnOptions(env, admitted, continuation) {
     return {
         packageRoot: env.packageRoot,
         home: env.home,
+        ...(env.host === undefined ? {} : { host: env.host }),
         agentDir: env.agentDir,
         ...(env.model === undefined ? {} : { model: env.model }),
         ...pickEngineAxis(env),

package/dist/public-cli/registry.js

@@ -13,7 +13,8 @@ const PUBLIC_CLI_SUPPORT_COMMANDS = [
   "config",
   "help",
   "resume",
-  "new"
+  "new",
+  "setup"
 ];
 function seatModelOnly(seat) {
   if (seat?.provider === void 0 || seat.model === void 0) return void 0;

package/dist/public-cli/run-lifecycle.js

@@ -816,11 +816,10 @@ async function runHasFormedSessionPrincipal(runDirectory) {
 /**
  * Locate the latest retained run for one seat under a book (#637 / #747).
  * Same walk surface as findRunDirectoryById (listBookRunDirectories). Match by
- * parent run path (officer / gate seats, #747 / #987). A typed ticket number
- * does not select a run. runId is UUIDv7 — lexicographic max is latest among
- * runs that formed a session principal. No parallel index. Public ticket-number
- * selection of a prior run was deleted (#987 Result 7); callers use explicit
- * `ak-role resume <runId>`.
+ * parent run path (officer / gate seats, #747 / #987), narrowed to a supplied
+ * typed ticket for same-ticket gate re-summons. runId is UUIDv7 — lexicographic
+ * max is latest among runs that formed a session principal. No parallel index;
+ * callers can use explicit `ak-role resume <runId>`.
  * Only a truly missing book directory means no history; damage/permission errors propagate.
  */
 export async function findLatestRunIdForSeatTicket(input) {
@@ -831,11 +830,7 @@ export async function findLatestRunIdForSeatTicket(input) {
     const bookDir = activationBookDirectory(ledgerHome, input.bookKey);
     let runDirectories;
     try {
-        // A typed ticket narrows the existing walk surface to that ticket's runs;
-        // same-parent matching below still selects the actual prior leg.
-        runDirectories = await listBookRunDirectories(input.ticketNumber === undefined
-            ? bookDir
-            : join(bookDir, String(input.ticketNumber)));
+        runDirectories = await listBookRunDirectories(input.ticketNumber === undefined ? bookDir : join(bookDir, String(input.ticketNumber)));
     }
     catch (error) {
         if (errorCodeOf(error) === "ENOENT")
@@ -852,7 +847,9 @@ export async function findLatestRunIdForSeatTicket(input) {
         if (runId.length === 0)
             continue;
         const parentPath = await readRunParentPath(runDirectory);
-        if (parentPath !== input.parentRunPath)
+        // The parent's ticket can change after this child was admitted. Within one
+        // book the run leaf is its stable identity; directory placement is not.
+        if (parentPath !== input.parentRunPath && basename(parentPath ?? "") !== basename(input.parentRunPath))
             continue;
         // Durable fact: never resume-select a provisional that never formed principal.
         if (!(await runHasFormedSessionPrincipal(runDirectory)))
@@ -935,7 +932,7 @@ function restoredTicketFields(fields) {
             : { courtTicketNumbers: fields.courtTicketNumbers }),
     };
 }
-async function loadResumableRunRecord(home, runId, authority) {
+async function loadResumableRunRecord(home, runId, authority, allowUnformedAdmitted = false) {
     const runDirectory = await findRunDirectoryById(home, runId);
     if (runDirectory === undefined) {
         throw new CliUsageError(`unknown role run id: ${runId}`);
@@ -952,7 +949,7 @@ async function loadResumableRunRecord(home, runId, authority) {
         throw new CliUsageError(`unknown role run id: ${runId}`);
     }
     const { run, principal } = materialized;
-    if (!(await isDurablePrincipalAvailable(principal, authority))) {
+    if (!(allowUnformedAdmitted && run.state === "admitted") && !(await isDurablePrincipalAvailable(principal, authority))) {
         throw new CliUsageError(`role run Pi session principal is unavailable: ${runId}`);
     }
     // Reconstruct admitted identity from durable run record + admitted-request.json.
@@ -1271,8 +1268,8 @@ export async function peekRoleRunRole(home, runId) {
  * selects the existing restore checks. The stored native host session id is
  * read on the public explicit resume seam, not from this load.
  */
-export async function loadResumablePublicRole(home, runId, authority) {
-    const loaded = await loadResumableRunRecord(home, runId, authority);
+export async function loadResumablePublicRole(home, runId, authority, allowUnformedAdmitted = false) {
+    const loaded = await loadResumableRunRecord(home, runId, authority, allowUnformedAdmitted);
     return seatLoadedResult(loaded, admitResumedRole(loaded));
 }
 /**

package/dist/public-cli/seat-ticket-binding.js

@@ -1,10 +1,9 @@
 /**
  * Shared same-parent resume seam for gate / officer seats (#635 / #637 / #747 / #987).
  *
- * Lookup key is parent run path only (#747 / #987 Result 7). Public seats no
- * longer select a prior run by ticket number — callers use explicit
- * `ak-role resume <runId>`. Officer and gate countersign same-parent re-summons
- * keep this seam. Lookup/resume failures propagate (失败诚实) — never wash into
+ * Lookup uses the parent run path; a typed ticket narrows same-ticket gate
+ * re-summons, never creates an issue identity. Callers can also use explicit
+ * `ak-role resume <runId>`. Lookup/resume failures propagate (失败诚实) — never wash into
  * a fresh mint. Returns undefined when the caller declared an explicit fresh
  * summons (`ak-role new`) or when no prior run exists; both mint new.
  * freshSummons is required so no seat can drift back into its own skip branch.
@@ -13,7 +12,7 @@ import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
 import { findLatestRunIdForSeatTicket, } from "./run-lifecycle.js";
 /**
  * Sole same-seat → resume decision by parent run path (#637 / #724 / #747 / #987).
- * A typed ticket number is a bind key, not a resume key. When a prior run is
+ * A supplied typed ticket only narrows the prior-run search. When a prior run is
  * found, resume carries this summons' materials. Lookup/resume failures
  * propagate (失败诚实) — never wash into a fresh mint. Returns undefined when
  * the caller declared an explicit fresh summons (`ak-role new`), the parent
@@ -30,9 +29,7 @@ export async function tryResumeSameTicketSeatRun(input) {
         bookKey: resolveBookKeyFromGit(input.projectRoot),
         role: input.role,
         parentRunPath: input.parentRunPath,
-        ...(input.ticketNumber === undefined
-            ? {}
-            : { ticketNumber: input.ticketNumber }),
+        ...(input.ticketNumber === undefined ? {} : { ticketNumber: input.ticketNumber }),
     });
     if (previousRunId === undefined)
         return undefined;

package/dist/public-cli/settlement.js

@@ -28,7 +28,6 @@ import { DOCTOR_CANDIDATE_ENTRY_TYPE } from "../dossier-resolution.js";
 import { REVIEWER_OUTPUT_TOOL_NAME, } from "../package-contracts/reviewer-output.js";
 import { packagedAuditToolName, packagedDurableOfficerEntry, packagedProjectsTargetBindRejection, packagedRoleAcceptedOutputTool, packagedRoleMetadata, packagedSkipsGateOnInfrastructureStage, } from "../packaged-role-registry.js";
 import { SECRETARIAT_COUNTERSIGN_TERMINAL_FACT_KEY, SECRETARIAT_GATE_OFFICER_ENTRY_TYPE, } from "../secretariat-contracts.js";
-import { observePackagedMethodSkillInvocation, resolvePackagedMethodSkillPath, } from "../package-resources/method-skill.js";
 import { classifyPackagedRoleTerminalResult, findLatestDurablePackagedRoleTerminal, hasNavigatorInfrastructureFailureBase, isAcceptedPackagedRoleTerminalResult, isReceiptSettlementBindingClear, NAVIGATOR_INVOCATION_ENTRY, parseInvocationMarkerIdentity, } from "../navigator-invocation-identity.js";
 import { NO_RECEIPT_LIFECYCLE_ENTRY_TYPE, RECEIPT_DELIVERY_TURN_LIMIT, noReceiptLifecycleFacts, parseNoReceiptLifecycleFacts, } from "../receipt-delivery-policy.js";
 import { roleRunArtifactsDirectory } from "../role-run-placement.js";
@@ -1784,8 +1783,8 @@ async function publishAcceptedTerminalArtifacts(admitted, roleOutcome, coordinat
     ];
 }
 /** Publish one accepted seat's report/evidence face from the shared leaf table. */
-export async function publishSeatAcceptedArtifacts(admitted, roleOutcome, coordinates, entries = [], options = {}) {
-    return publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries, options);
+export async function publishSeatAcceptedArtifacts(admitted, roleOutcome, coordinates, entries = []) {
+    return publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries);
 }
 /**
  * Read session entries for lawful settlement. Missing path → undefined (absence).
@@ -1871,9 +1870,9 @@ async function settleSealedAcceptedOrToolResidual(admitted, authority, scope, ro
 /**
  * One settlement for every registered seat. The registry `settlement` leaf
  * picks sealed ledger, sealed-or-residual, or the accepted-tool scan.
- * Seat evidence and the observed-method tail stay on the artifact face.
+ * Seat evidence stays on the artifact face.
  */
-async function settleSeat(admitted, authority, scope, options) {
+async function settleSeat(admitted, authority, scope) {
     const record = packagedRoleMetadata(admitted.role);
     if (record === undefined) {
         throw new Error(`no settlement for ${admitted.role}`);
@@ -1881,7 +1880,7 @@ async function settleSeat(admitted, authority, scope, options) {
     if (record.settlement === "accepted") {
         return trySettleAcceptedSeatTerminalResult(admitted, authority, scope);
     }
-    const publish = (roleOutcome, coordinates, entries) => publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries, options);
+    const publish = (roleOutcome, coordinates, entries) => publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries);
     if (record.settlement === "residual") {
         return settleSealedAcceptedOrToolResidual(admitted, authority, scope, admitted.role, record.residualTool, record.residualScan, publish);
     }
@@ -1894,75 +1893,21 @@ async function settleSeat(admitted, authority, scope, options) {
  * Try to settle any registered seat. Undefined only for genuine absence.
  * Session malformation and publication exceptions keep their typed identity.
  */
-export async function trySettleSeatTerminalResult(admitted, authority, options = {}, scope) {
-    return settleSeat(admitted, authority, scope, options);
+export async function trySettleSeatTerminalResult(admitted, authority, scope) {
+    return settleSeat(admitted, authority, scope);
 }
 /**
  * Settle any registered seat. Throws when no lawful outcome is present.
  * Session-read and publication failures retain their typed identity.
  */
-export async function settleSeatTerminalResult(admitted, authority, options = {}, scope) {
-    const settled = await settleSeat(admitted, authority, scope, options);
+export async function settleSeatTerminalResult(admitted, authority, scope) {
+    const settled = await settleSeat(admitted, authority, scope);
     if (settled === undefined) {
         const label = admitted.role.charAt(0).toUpperCase() + admitted.role.slice(1);
         throw new Error(`${label} Role run completed without a lawful typed terminal result`);
     }
     return settled;
 }
-function sessionMessageText(message) {
-    if (message === undefined)
-        return "";
-    if (typeof message.content === "string")
-        return message.content;
-    if (!Array.isArray(message.content))
-        return "";
-    const parts = [];
-    for (const part of message.content) {
-        if (typeof part === "object" &&
-            part !== null &&
-            !Array.isArray(part) &&
-            part.type === "text" &&
-            typeof part.text === "string") {
-            parts.push(part.text);
-        }
-    }
-    return parts.join("\n");
-}
-/**
- * Locations a loaded packaged method may be observed at.
- * The name is the loaded material; the configured path is the package copy.
- */
-export function observedMethodSkillOptions(packageRoot, material) {
-    return {
-        methodProvenance: material.provenance,
-        methodSkillPath: material.skillPath,
-        methodSkillConfiguredPath: resolvePackagedMethodSkillPath(packageRoot, material.name),
-    };
-}
-/**
- * Observe packaged method Skill expansions from the session.
- * The skill name is the caller's packaged method; home locations never count.
- */
-function extractObservedMethodInvocations(entries, options) {
-    const observed = [];
-    for (const entry of entries) {
-        if (entry?.type !== "message")
-            continue;
-        const message = entry.message;
-        if (message?.role !== "user")
-            continue;
-        const text = sessionMessageText(message);
-        if (text.length === 0)
-            continue;
-        const hit = observePackagedMethodSkillInvocation(text, {
-            name: options.name,
-            allowedLocations: options.allowedLocations,
-        });
-        if (hit !== undefined)
-            observed.push(hit);
-    }
-    return Object.freeze(observed);
-}
 /**
  * #836: cost and the auditor's no-receipt facts ride beside the role's
  * testimony on the current attempt's candidate entry. Absence is omitted,
@@ -2027,30 +1972,7 @@ function doctorReportFacts(face, roleOutcome, entries) {
         ...(facts.auditNoReceipt === undefined ? {} : { auditNoReceipt: facts.auditNoReceipt }),
     };
 }
-function observedMethodTail(face, entries, options) {
-    if (face.method === undefined)
-        return {};
-    if (face.method === "optional") {
-        return options.methodProvenance === undefined
-            ? {}
-            : { methodProvenance: options.methodProvenance };
-    }
-    if (options.methodProvenance === undefined
-        || options.methodSkillPath === undefined
-        || options.methodSkillConfiguredPath === undefined) {
-        throw new Error("observed method publication is missing packaged method coordinates");
-    }
-    const methodInvocations = extractObservedMethodInvocations(entries, {
-        name: options.methodProvenance.name,
-        allowedLocations: [options.methodSkillPath, options.methodSkillConfiguredPath],
-    });
-    return {
-        methodProvenance: options.methodProvenance,
-        methodInvocationObserved: methodInvocations.length > 0,
-        methodInvocations,
-    };
-}
-async function publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries, options = {}) {
+async function publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates, entries) {
     const face = seatArtifactFace(admitted.role);
     const phase = face.reportPhase === true
         ? { phase: readAdmittedPath(admitted, "phase") }
@@ -2071,7 +1993,6 @@ async function publishDeclaredSeatArtifacts(admitted, roleOutcome, coordinates,
             sessionFile: coordinates.sessionFile,
             admittedRequestPath: admitted.admittedRequestPath,
             attachments: acceptedArtifactAttachmentRefs(admitted.attachments),
-            ...observedMethodTail(face, entries, options),
         },
     });
 }
@@ -2163,16 +2084,8 @@ export async function trySettleAcceptedSeatTerminalResult(admitted, authority, s
     return applySecretariatCountersignTerminal(admitted, authority, settled);
 }
 /** One settlement dispatch. The registry `settlement` leaf selects the path. */
-export async function trySettlePublicSeat(admitted, authority, scope, material, packageRoot) {
-    const face = seatArtifactFace(admitted.role);
-    if (face.method === "observed" && material === undefined)
-        return undefined;
-    const options = face.method === "observed" && material !== undefined
-        ? observedMethodSkillOptions(packageRoot, material)
-        : face.method === "optional" && material !== undefined
-            ? { methodProvenance: material.provenance }
-            : {};
-    return settleSeat(admitted, authority, scope, options);
+export async function trySettlePublicSeat(admitted, authority, scope) {
+    return settleSeat(admitted, authority, scope);
 }
 /**
  * #969 seat projection sole authority: 给事中 terminal (署|上呈) booked as a

package/dist/public-cli/turn-request.js

@@ -1,6 +1,6 @@
 import { pickEngineAxis } from "../package-resources/engine-material.js";
-import { resolvePackagedMethodSkillPath, } from "../package-resources/method-skill.js";
 import { packagedRoleActivationFlags, packagedRoleMetadata, } from "../packaged-role-registry.js";
+import { installedMethodSkillPath } from "./machine-method-skills.js";
 import { parentRunPathFromGatePointerInstruction } from "./run-lifecycle.js";
 export function projectRoleTurnRequest(admitted, roleDetails, options) {
     const cwd = admitted.projectRoot ?? admitted.repoRoot ?? admitted.cwd;
@@ -86,7 +86,7 @@ function activationForAdmitted(admitted) {
     return activation;
 }
 /** Skill bindings declared on the composition-root record for this admitted run. */
-function methodBindings(admitted, packageRoot) {
+export function requiredMethodSkills(admitted) {
     const record = packagedRoleMetadata(admitted.role);
     const names = [];
     if (record !== undefined && "methodSkills" in record && record.methodSkills !== undefined) {
@@ -95,15 +95,23 @@ function methodBindings(admitted, packageRoot) {
     const apply = packagedSettleSkill(admitted);
     if (apply !== undefined && !names.includes(apply))
         names.push(apply);
-    return names.map((name) => ({
-        kind: "skill",
-        path: resolvePackagedMethodSkillPath(packageRoot, name),
-    }));
+    return names;
+}
+function methodBindings(admitted, home, host) {
+    if (host !== undefined && host !== "pi")
+        return [];
+    return requiredMethodSkills(admitted).flatMap((name) => {
+        const path = installedMethodSkillPath(home, name);
+        return path === undefined ? [] : [{
+                kind: "skill",
+                path,
+            }];
+    });
 }
 /** Registry activation and method bindings for one admitted public seat. */
-export function admittedSeatTurnDetails(admitted, packageRoot) {
+export function admittedSeatTurnDetails(admitted, home, host) {
     return {
         activation: activationForAdmitted(admitted),
-        methods: methodBindings(admitted, packageRoot),
+        methods: methodBindings(admitted, home, host),
     };
 }

package/dist/public-role-summons.js

@@ -274,7 +274,10 @@ async function summonPublicRole(options) {
     result = stepped.ok;
   }
   const stderr = captured?.stderrText();
-  const runDirectory = result.admitted?.runDirectory;
+  const runDirectory = result.terminal !== void 0 && result.terminal.roleOutcome.role !== options.role && typeof result.terminal.runId === "string" ? await (await import("./public-cli/run-lifecycle.js")).findRunDirectoryById(
+    home,
+    result.terminal.runId
+  ) : result.admitted?.runDirectory;
   return {
     exitCode: result.exitCode,
     ...result.terminal === void 0 ? {} : { terminal: result.terminal },
@@ -478,8 +481,10 @@ async function summonGateOfficer(options) {
         `countersign gate summon requires parent runId from sourceRunDirectory: ${options.sourceRunDirectory}`
       );
     }
-    const { readBoardTicketNumber } = await import("./run-ticket-number.js");
+    const { isSafePositiveTicketNumber, readBoardTicketNumber } = await import("./run-ticket-number.js");
     const parentTicket = await readBoardTicketNumber(options.sourceRunDirectory);
+    const submittedTicket = options.submission !== null && typeof options.submission === "object" && !Array.isArray(options.submission) ? options.submission.ticketNumber : void 0;
+    const courtTicket = isSafePositiveTicketNumber(submittedTicket) ? submittedTicket : parentTicket;
     const instruction = options.reask ?? gateReviewInstruction ?? "";
     return summonPublicRole({
       role: options.officer,
@@ -487,7 +492,7 @@ async function summonGateOfficer(options) {
       ...common,
       correlationId,
       parentRunPath: options.sourceRunDirectory,
-      ...parentTicket === void 0 ? {} : { boundTicketNumber: parentTicket }
+      ...courtTicket === void 0 ? {} : { boundTicketNumber: courtTicket }
     });
   }
   return summonPublicRole({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5015",
+  "version": "0.1.5063",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",
@@ -26,6 +26,8 @@
   },
   "files": [
     "dist",
+    "!dist/package-resources/method-skill.js",
+    "!dist/package-resources/method-skill-binding.js",
     "extensions",
     "scripts/generate-tool-execution-observation-schema.ts",
     "scripts/build-package.mjs",
@@ -34,6 +36,8 @@
     "schemas",
     "packets",
     "resources",
+    "!resources/methods",
+    "!resources/methods/**",
     "README.md",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",

package/resources/countersign-ticket-issue.md

@@ -0,0 +1,5 @@
+# 给事中票面审读方法
+
+中书省交卷时，以交卷原文所指的实际 GitHub issue 为审读对象；传召附带的绑定票号只用于绑卷，不替中书省决定票号。先在当前项目的 GitHub 仓库用宿主已有 CLI 读取该 issue 的现行正文（例如 `gh issue view <票号> --json body`）；不得只看中书省交卷文字或本地草稿，就声称已审 GitHub 票面。对照原交卷和实际 issue 正文，按《票面法》审读。
+
+中书省以 `converged` 交卷却没有可审的实际 GitHub issue 身份时，封驳退回中书省补齐；不得以无号草稿署票。此类封驳走现有重交通道，不由代码按回执形状拒收。issue 不存在或正文读取失败时，如实说明现场失败，不把未读到的票面判作已审。交卷与绑卷票号冲突也须说明，不猜测替代票号。

package/resources/diarist-collect.md

@@ -33,6 +33,7 @@
 
 - 认得出本庭对象：`status: completed` 且 `ticketNumber: N`，并交边界。
 - 真无票对象（方案/派单/处置案等）：`status: completed` 且 `ticketNumber: null`（或省略）。真无票是合法结果，不入录。
+- 本庭明确要新建票、但 issue 尚未建号：不是认票失败。以 `status: completed`、`ticketNumber: null` 交出已辨明的本案对话边界；起居录先随无号 run 暂存，建号后由既有归卷流程补归该号。不要借用旁票号。
 - 认不出本庭对象是哪一张：`status: escalate` 并写明 `reason`。识别不了就上抛，不得省略票号假装无录，也不得猜一个号。
 - 不得从旁及的他票或任何猜测里挑一个号顶替认不出的身份。
 - 传召文自然会提轮次、决定编号、commit sha、邻票号；你认的是本庭对象，不是文中出现的每一个数字。

package/resources/secretariat-ticket-identity.md

@@ -0,0 +1,15 @@
+# 中书省票身份与落票方法
+
+本方法适用于公开中书省调用。票面范围、审读职责和交卷形状仍以各自法源为准。
+
+## 先辨票，再改票
+
+调用者可以给票号，也可以不给。给了票号，先读取并核对该 issue，再在原 issue 上更新票面；不要另建一票。没有给票号，不等于新票：先结合本次对话、本票起居录和当前 GitHub 仓库中的 issue 判断是否已有对应票。找到已有票就更新那张；只有确认没有对应票，才在当前仓库创建 issue。不得仅凭内容相似就认定已有票，也不得因没找到就忽略搜索范围或不确定性。
+
+票面改定后，应将实际要执行的正文落到对应 GitHub issue。不能确认已有票还是新票、无法读取或更新目标 issue，或创建 issue 失败时，不得把草稿当成已落票结果送庭；可上呈或重交，并说明现场观察到的真实失败原因。若信息不足以区分多个候选 issue，可上呈请裁定，不猜票号、不另建重复票。
+
+## 落地后送庭
+
+只有确认目标 issue 存在且正文已更新为本票最终票面后，才以 `converged` 交卷，并携带该 issue 的实际票号。沿用既有交卷闸，将交卷原文交给给事中审这张有票号 issue；不以无号草稿替代 issue 审读。不另造传召或记账机制。
+
+执行 GitHub 操作时使用当前宿主实际提供的 CLI / 能力；不在包内另造 GitHub 适配层。记录足以核对身份和落地结果的证据，不把模型自报冒充为现场观察。

package/scripts/build-package.mjs

@@ -1,4 +1,4 @@
-import { chmod, copyFile, cp, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { chmod, copyFile, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { build } from "esbuild";
@@ -203,11 +203,6 @@ export async function buildPackageArtifacts() {
   await buildAcpProductionHost();
   await buildHeadlessProductionHost();
   await buildMigrateBookTopology();
-  const pluginDir = join("dist", "method-host-plugin");
-  await rm(pluginDir, { recursive: true, force: true });
-  await mkdir(pluginDir, { recursive: true });
-  await cp("resources/method-host-plugin/.claude-plugin", join(pluginDir, ".claude-plugin"), { recursive: true });
-  await cp("resources/methods", join(pluginDir, "skills"), { recursive: true });
   // Packaged handbook/playbook paths resolve via injected packageRoot (#962) —
   // do not mirror resources/ into dist/resources (one authority, no parallel copy).
 }

package/src/headless-host/description.ts

@@ -94,8 +94,6 @@ export function headlessTurnArgs(options: {
   readonly effort?: string;
   /** Fresh session: pass as session id. Resume: pass as resume id. */
   readonly session: { readonly kind: "new"; readonly id: string } | { readonly kind: "resume"; readonly id: string };
-  /** Packaged method plugin dir (`--plugin-dir`). */
-  readonly pluginDir?: string;
 }): string[] {
   const { description } = options;
   const args: string[] = [
@@ -107,7 +105,6 @@ export function headlessTurnArgs(options: {
   if (options.jsonSchema !== undefined) {
     args.push(description.jsonSchemaFlag, JSON.stringify(options.jsonSchema));
   }
-  if (options.pluginDir) args.push("--plugin-dir", options.pluginDir);
   if (options.mcpConfigPath !== undefined && options.mcpConfigPath !== "") {
     args.push(description.mcpConfigFlag, options.mcpConfigPath);
   }

package/src/headless-host/role-turn-host.ts

@@ -23,12 +23,6 @@ import {
 } from "../prepared-role-turn.ts";
 
 import { reportHostSessionEvent } from "../host-session-record.ts";
-import {
-  applyClaudeSkillInvocation,
-  applyCodexSkillInvocation,
-  hostMethodSkills,
-  packagedMethodPluginDir,
-} from "../host-native-method.ts";
 import {
   closeJsonSchemaForCodex,
   codexTurnArgs,
@@ -418,7 +412,6 @@ function buildTurnArgs(options: {
   readonly sessionKind: "new" | "resume";
   readonly cwd: string;
   readonly writableRoots?: readonly string[];
-  readonly pluginDir?: string;
 }): readonly string[] {
   if (isCodexExecDescription(options.description)) {
     if (options.sessionKind === "resume" && !options.sessionId) {
@@ -451,7 +444,6 @@ function buildTurnArgs(options: {
     ...(options.model === undefined ? {} : { model: options.model }),
     ...(options.effort === undefined ? {} : { effort: options.effort }),
     session: { kind: options.sessionKind, id: options.sessionId },
-    ...(options.pluginDir === undefined ? {} : { pluginDir: options.pluginDir }),
   });
 }
 
@@ -460,7 +452,7 @@ export function createHeadlessRoleTurnHost(config: HeadlessRoleTurnHostConfig):
   return createSerializedRoleTurnHost(async (request): Promise<RoleTurnResult> => {
     const prepared = await config.prepare(request);
     const systemPrompt = renderSystemPromptOverride(prepared.systemPrompt);
-    const codex = isCodexExecDescription(config.description);
+      const codex = isCodexExecDescription(config.description);
     let outcome: RoleTurnResult = failure("session", "HeadlessNoOutcome", "no-outcome");
     try {
       // Claude mints a package UUID for --session-id; codex waits for thread.started.
@@ -486,10 +478,6 @@ export function createHeadlessRoleTurnHost(config: HeadlessRoleTurnHostConfig):
       await writeFile(systemPromptPath, systemPrompt, "utf8");
       let mcpConfigPath: string | undefined;
       let outputSchemaPath: string | undefined;
-      let pluginDir: string | undefined;
-      let applyMethodPrompt: (prompt: string) => string = codex
-        ? (prompt) => applyCodexSkillInvocation(request.methods, prompt)
-        : (prompt) => prompt;
       if (codex) {
         // #959: navigator is a prose-exit seat — no closed output-schema.
         if (prepared.terminatingToolName !== NAVIGATOR_OUTPUT_TOOL_NAME) {
@@ -507,14 +495,6 @@ export function createHeadlessRoleTurnHost(config: HeadlessRoleTurnHostConfig):
           `${JSON.stringify(headlessMcpConfigDocument(prepared.mcpServers), null, 2)}\n`,
           "utf8",
         );
-        if (hostMethodSkills(request.methods).length > 0) {
-          const packageRoot = env.AK_PACKAGE_ROOT ?? process.env.AK_PACKAGE_ROOT;
-          if (typeof packageRoot !== "string" || packageRoot === "") {
-            throw new Error("claude method plugin-dir requires AK_PACKAGE_ROOT");
-          }
-          pluginDir = packagedMethodPluginDir(packageRoot);
-          applyMethodPrompt = (prompt) => applyClaudeSkillInvocation(request.methods, prompt);
-        }
       }
 
       const sessionParent = config.sessionIdentity.resolveSessionFile(request.principal);
@@ -542,7 +522,6 @@ export function createHeadlessRoleTurnHost(config: HeadlessRoleTurnHostConfig):
               sessionKind,
               cwd: request.cwd,
               ...(gitCommonDir === undefined ? {} : { writableRoots: [gitCommonDir] }),
-              ...(pluginDir === undefined ? {} : { pluginDir }),
             });
           } catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -560,7 +539,7 @@ export function createHeadlessRoleTurnHost(config: HeadlessRoleTurnHostConfig):
               args,
               cwd: request.cwd,
               env,
-              stdin: request.continuation.kind === "resume" ? prompt : applyMethodPrompt(prompt),
+              stdin: prompt,
               ...(abortSignal === undefined ? {} : { signal: abortSignal }),
               ...(request.timeoutMs === undefined ? {} : { timeoutMs: request.timeoutMs }),
               onStdoutLine(line) {

package/src/host-contracts.ts

@@ -74,7 +74,7 @@ export class ExplicitInternalActivationError extends Error {
   }
 }
 
-/** Packaged method skill binding (zero/one/many). */
+/** Required machine-installed method Skill (zero/one/many). */
 export type MethodBinding = {
   readonly kind: "skill";
   readonly path: string;
@@ -350,33 +350,13 @@ type HostGatekeeperSubject = {
 };
 /** Gatekeeper non-pass faces returned to parent (#836 includes transport_failure; never kill leg). */
 type HostGatekeeperNonPass = { readonly status: "continue" | "escalate" | "no_receipt" | "transport_failure" } & Record<string, unknown>;
-export type HostSubmissionNonPass =
-  | HostGatekeeperNonPass
-  | { readonly code: "coder_skill_expansion_evidence_missing" };
+export type HostSubmissionNonPass = HostGatekeeperNonPass;
 export type HostGatekeeperActions = {
   failInfrastructure(error: unknown, context: HostContext, toolCallId?: string): never;
   /** Envelope-owned execute→tool_result bridge for any structured submission non-pass. */
   bindSubmissionNonPass(toolCallId: string, result: HostSubmissionNonPass): void;
 };
 
-export type HostSkillExpansionEvidence = Readonly<{
-  name: string;
-  location: string;
-  content: string;
-  userMessage: string;
-}>;
-
-/** Host capability declaration (contract verb ④). */
-export type HostCapabilityDeclaration = Readonly<{
-  skillExpansion(prompt: string): HostSkillExpansionEvidence | undefined;
-  /**
-   * Pi-only: recover the plain original request from a native skill turn text
-   * (argv may already carry `/skill:<name>` from the Pi adapter). Absent on
-   * non-pi hosts so role body never parses Pi slash syntax (ADR 0082).
-   */
-  skillOriginalRequest?(name: string, text: string): string;
-}>;
-
 /** Host-owned effects used by the shared activation envelope. */
 export interface RoleEnvelopeHost {
   readonly host: RoleHost;
@@ -388,7 +368,6 @@ export interface RoleEnvelopeHost {
 
 /** The activation surface consumed by package role factories. */
 export interface RoleHost {
-  readonly capabilities?: HostCapabilityDeclaration;
   /** Deliver a typed correctable rejection into the current durable session's model context. */
   deliverSubmissionRejection?(rejection: { readonly kind: "correctable-rejection"; readonly code: string; readonly toolCallIds: readonly string[] }): void | Promise<void>;
   registerFlag(name: string, definition: