@akagilnc/pi-workflow-roles 0.1.5365 → 0.1.5368

package/dist/public-cli/main.js

@@ -513,6 +513,9 @@ function roleRunPlacement(ledgerHome, input) {
 function roleRunArtifactsDirectory(runDirectory) {
   return join4(runDirectory, "artifacts");
 }
+function isUnboundRunDirectory(runDirectory) {
+  return runDirectory.replaceAll("\\", "/").includes("/unbound/runs/");
+}
 function ensureRoleRunDirectory(ledgerHome, directory) {
   return ensureRealDirectoryTree(ledgerHome, directory);
 }
@@ -15789,6 +15792,7 @@ __export(config_exports, {
   providerConfigured: () => providerConfigured,
   publicCliConfigPath: () => publicCliConfigPath,
   resolveEffectiveSeat: () => resolveEffectiveSeat,
+  resolvePublicAgentDir: () => resolvePublicAgentDir,
   resolvedSeatWithModel: () => resolvedSeatWithModel,
   savePublicCliConfig: () => savePublicCliConfig,
   setAutoResumeLimit: () => setAutoResumeLimit,
@@ -16268,6 +16272,9 @@ function credentialProvidersFromAuthData(data) {
     xai: Object.prototype.hasOwnProperty.call(record4, "xai")
   };
 }
+function resolvePublicAgentDir(explicit, home) {
+  return explicit ?? process.env.PI_CODING_AGENT_DIR ?? join8(home, ".pi", "agent");
+}
 async function loadCredentialProviders(agentDir) {
   try {
     const raw = await readFile2(join8(agentDir, "auth.json"), "utf8");
@@ -16295,18 +16302,6 @@ var init_config2 = __esm({
 });
 
 // src/public-cli/host-providers.ts
-var host_providers_exports = {};
-__export(host_providers_exports, {
-  HostProviderResolutionError: () => HostProviderResolutionError,
-  hermesProviderModelsCachePath: () => hermesProviderModelsCachePath,
-  hostCatalogOffersModel: () => hostCatalogOffersModel,
-  hostProvidersPath: () => hostProvidersPath,
-  listHermesProvidersForModel: () => listHermesProvidersForModel,
-  loadHostProvidersTable: () => loadHostProvidersTable,
-  parseHostProvidersTable: () => parseHostProvidersTable,
-  projectHostFacingProvider: () => projectHostFacingProvider,
-  renderHostProvidersTable: () => renderHostProvidersTable
-});
 import { readFileSync } from "node:fs";
 import { join as join9 } from "node:path";
 function hostProvidersPath(home) {
@@ -19911,74 +19906,64 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
   );
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host, engineModel) {
-  const ledgerPath = join19(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
-  const next = { ...current };
-  if (model !== void 0) {
-    next.provider = model.provider;
-    next.model = model.model;
-    if (model.thinking === void 0) {
-      delete next.thinking;
-    } else {
-      next.thinking = model.thinking;
+  await updateDurableJsonPage(join19(runDirectory, "invocation.json"), (current) => {
+    const next = { ...current };
+    if (model !== void 0) {
+      next.provider = model.provider;
+      next.model = model.model;
+      if (model.thinking === void 0) {
+        delete next.thinking;
+      } else {
+        next.thinking = model.thinking;
+      }
     }
-  }
-  if (engine === null) {
-    delete next.engine;
-  } else if (engine !== void 0) {
-    next.engine = engine;
-  }
-  if (engineModel === null) {
-    delete next.engineModel;
-  } else if (engineModel !== void 0) {
-    next.engineModel = engineModel;
-  }
-  if (host !== void 0) {
-    next.host = host;
-  }
-  await writeFile3(
-    ledgerPath,
-    `${JSON.stringify(next, null, 2)}
-`,
-    "utf8"
-  );
+    if (engine === null) {
+      delete next.engine;
+    } else if (engine !== void 0) {
+      next.engine = engine;
+    }
+    if (engineModel === null) {
+      delete next.engineModel;
+    } else if (engineModel !== void 0) {
+      next.engineModel = engineModel;
+    }
+    if (host !== void 0) {
+      next.host = host;
+    }
+    return next;
+  });
+}
+async function updateDurableJsonPage(path, update) {
+  const current = JSON.parse(await readFile12(path, "utf8"));
+  const next = update(current);
+  if (next === void 0) return;
+  await writeFile3(path, `${JSON.stringify(next, null, 2)}
+`, "utf8");
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join19(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile12(ledgerPath, "utf8"));
-  await writeFile3(
-    ledgerPath,
-    `${JSON.stringify({
-      ...current,
-      ...fields
-    }, null, 2)}
-`,
-    "utf8"
-  );
+  await updateDurableJsonPage(join19(runDirectory, "invocation.json"), (current) => ({
+    ...current,
+    ...fields
+  }));
 }
 async function persistAdmittedSourceRunPath(admitted, sourceRunPath, auditorSubject) {
   if (sourceRunPath.trim() === "") {
     throw new Error("persistAdmittedSourceRunPath requires a non-empty sourceRunPath");
   }
-  const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile12(admittedPath, "utf8"));
-  if (typeof current.sourceRunPath === "string" && current.sourceRunPath !== sourceRunPath) {
-    throw new Error(
-      `persistAdmittedSourceRunPath refuses to replace ${current.sourceRunPath} with ${sourceRunPath}`
-    );
-  }
-  const sameSubject = auditorSubject === void 0 || current.auditorSubject === auditorSubject;
-  if (current.sourceRunPath === sourceRunPath && sameSubject) return;
-  await writeFile3(
-    admittedPath,
-    `${JSON.stringify({
+  await updateDurableJsonPage(admitted.admittedRequestPath, (current) => {
+    if (typeof current.sourceRunPath === "string" && current.sourceRunPath !== sourceRunPath) {
+      throw new Error(
+        `persistAdmittedSourceRunPath refuses to replace ${current.sourceRunPath} with ${sourceRunPath}`
+      );
+    }
+    const sameSubject = auditorSubject === void 0 || current.auditorSubject === auditorSubject;
+    if (current.sourceRunPath === sourceRunPath && sameSubject) return void 0;
+    return {
       ...current,
       sourceRunPath,
       ...auditorSubject === void 0 ? {} : { auditorSubject }
-    }, null, 2)}
-`,
-    "utf8"
-  );
+    };
+  });
 }
 async function bindAdmittedTicketNumber(admitted, ticketNumber) {
   if (admitted.ticketNumber === ticketNumber) return;
@@ -19986,22 +19971,17 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
   admitted.ticketNumber = ticketNumber;
 }
 async function recordAdmittedCorrelation(admitted, correlationId) {
-  const current = JSON.parse(
-    await readFile12(admitted.admittedRequestPath, "utf8")
-  );
-  const prior = [
-    ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
-      (value) => typeof value === "string" && value.trim() !== ""
-    ) : [],
-    ...typeof current.correlationId === "string" && current.correlationId.trim() !== "" ? [current.correlationId] : []
-  ];
-  const correlationIds = [.../* @__PURE__ */ new Set([...prior, correlationId])];
-  await writeFile3(
-    admitted.admittedRequestPath,
-    `${JSON.stringify({ ...current, correlationId, correlationIds }, null, 2)}
-`,
-    "utf8"
-  );
+  let correlationIds = [];
+  await updateDurableJsonPage(admitted.admittedRequestPath, (current) => {
+    const prior = [
+      ...Array.isArray(current.correlationIds) ? current.correlationIds.filter(
+        (value) => typeof value === "string" && value.trim() !== ""
+      ) : [],
+      ...typeof current.correlationId === "string" && current.correlationId.trim() !== "" ? [current.correlationId] : []
+    ];
+    correlationIds = [.../* @__PURE__ */ new Set([...prior, correlationId])];
+    return { ...current, correlationId, correlationIds };
+  });
   await mergeInvocationIdentityPage(admitted.runDirectory, {
     correlationId,
     correlationIds
@@ -20011,7 +19991,7 @@ async function recordAdmittedCorrelation(admitted, correlationId) {
   mutable.correlationIds = correlationIds;
 }
 async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
-  if (admitted.ticketNumber === void 0 || !admitted.runDirectory.includes(`${sep3}unbound${sep3}runs${sep3}`)) return void 0;
+  if (admitted.ticketNumber === void 0 || !isUnboundRunDirectory(admitted.runDirectory)) return void 0;
   const oldRunDirectory = admitted.runDirectory;
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(oldRunDirectory));
   const target = roleRunPlacement(ledgerHome, {
@@ -20073,11 +20053,11 @@ async function relocateAdmittedRunToTicket(admitted, authority, heldLease) {
   return { oldRunDirectory, newRunDirectory: target.runDirectory };
 }
 async function recordChildDiaristRun(parent, childRunId) {
-  const page = JSON.parse(await readFile12(parent.admittedRequestPath, "utf8"));
-  const existing = Array.isArray(page.childDiaristRunIds) ? page.childDiaristRunIds.filter((runId) => typeof runId === "string") : [];
-  const childDiaristRunIds = existing.includes(childRunId) ? existing : [...existing, childRunId];
-  await writeFile3(parent.admittedRequestPath, `${JSON.stringify({ ...page, childDiaristRunIds }, null, 2)}
-`, "utf8");
+  await updateDurableJsonPage(parent.admittedRequestPath, (page) => {
+    const existing = Array.isArray(page.childDiaristRunIds) ? page.childDiaristRunIds.filter((runId) => typeof runId === "string") : [];
+    const childDiaristRunIds = existing.includes(childRunId) ? existing : [...existing, childRunId];
+    return { ...page, childDiaristRunIds };
+  });
 }
 async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
   requireSafePositiveTicketNumber(
@@ -20085,14 +20065,15 @@ async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
     "bindTicketNumberOnRunDirectory"
   );
   const admittedPath = join19(runDirectory, "admitted-request.json");
-  const admitted = JSON.parse(await readFile12(admittedPath, "utf8"));
-  if (admitted.ticketNumber === ticketNumber) return;
-  await writeFile3(
-    admittedPath,
-    `${JSON.stringify({ ...admitted, ticketNumber }, null, 2)}
-`,
-    "utf8"
-  );
+  let unchanged = false;
+  await updateDurableJsonPage(admittedPath, (admitted) => {
+    if (admitted.ticketNumber === ticketNumber) {
+      unchanged = true;
+      return void 0;
+    }
+    return { ...admitted, ticketNumber };
+  });
+  if (unchanged) return;
   await mergeInvocationIdentityPage(runDirectory, { ticketNumber });
 }
 async function recordLaunchedPiIdentity(runDirectory, identity) {
@@ -20314,18 +20295,22 @@ function requireOptionPath(flag, value) {
   }
   return value;
 }
+function skillArgTokenFault(value) {
+  if (value === void 0 || value.trim() === "") return "empty";
+  if (/\s/.test(value)) return "whitespace";
+  if (value.startsWith("-")) return "optionLike";
+  return void 0;
+}
 function requireSkillArgToken(value, messages) {
-  if (value === void 0 || value.trim() === "") {
-    throw new CliUsageError(messages.empty);
-  }
-  if (/\s/.test(value)) {
-    throw new CliUsageError(messages.whitespace);
-  }
-  if (value.startsWith("-")) {
-    throw new CliUsageError(messages.optionLike);
-  }
+  const fault = skillArgTokenFault(value);
+  if (fault !== void 0) throw new CliUsageError(messages[fault]);
   return value;
 }
+function admittedReviewerBaseFault(value) {
+  const fault = skillArgTokenFault(value);
+  if (fault === void 0) return void 0;
+  return fault === "empty" ? "missing" : "damaged";
+}
 function requireReviewerBaseRevision(value) {
   return requireSkillArgToken(value, {
     empty: "--base requires a nonempty revision",
@@ -20553,9 +20538,6 @@ async function admitPublicRole(role, parsed, env, override) {
       });
     }
     case "worker-packet": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
       if (instruction.trim() === "") {
         throw new CliUsageError("fixer requires a nonblank repair instruction");
       }
@@ -20612,18 +20594,7 @@ async function admitPublicRole(role, parsed, env, override) {
       });
     }
     case "collect-target": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
-      let explicitPrNumber;
-      if (parsed.prNumber !== void 0) {
-        try {
-          explicitPrNumber = parseCollectorPrNumber(parsed.prNumber);
-        } catch (error) {
-          const detail = error instanceof Error ? error.message : String(error);
-          throw new CliUsageError(detail, { cause: error });
-        }
-      }
+      const explicitPrNumber = parsed.prNumber;
       const projectRoot = resolve9(parsed.project ?? shared.cwd);
       let repository;
       if (parsed.repo !== void 0) {
@@ -20673,15 +20644,12 @@ async function admitPublicRole(role, parsed, env, override) {
       return { ...admittedCollector, repository };
     }
     case "case-identity": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
-      const issueNumber = parsed.issueNumber ?? Number.NaN;
-      if (!Number.isInteger(issueNumber) || issueNumber < 1 || !DOCTOR_ISSUE_NUMBER_PATTERN.test(String(issueNumber))) {
+      if (parsed.issueNumber === void 0) {
         throw new CliUsageError(
-          `doctor --issue must be a positive integer, got ${issueNumber}`
+          `doctor --issue must be a positive integer, got ${Number.NaN}`
         );
       }
+      const issueNumber = parsed.issueNumber;
       let frozenAttachments = [];
       const admittedDoctor = await admitStandardMaterialInvocation("doctor", {
         ...shared,
@@ -20737,22 +20705,21 @@ async function admitPublicRole(role, parsed, env, override) {
       return { ...admittedDoctor, attachments: frozenAttachments };
     }
     case "source-locator": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
       const projectRoot = resolve9(parsed.project ?? shared.cwd);
-      let sourceRun;
-      try {
-        sourceRun = await resolveNotarySourceRunLocator({
-          projectRoot,
-          sourceRun: parsed.sourceRun ?? "",
-          home: shared.home
-        });
-      } catch (error) {
-        if (error instanceof NotarySourceRunError) {
-          throw new CliUsageError(error.message, { cause: error });
+      let sourceRun = override?.resolvedSourceRun;
+      if (sourceRun === void 0) {
+        try {
+          sourceRun = await resolveNotarySourceRunLocator({
+            projectRoot,
+            sourceRun: parsed.sourceRun ?? "",
+            home: shared.home
+          });
+        } catch (error) {
+          if (error instanceof NotarySourceRunError) {
+            throw new CliUsageError(error.message, { cause: error });
+          }
+          throw error;
         }
-        throw error;
       }
       const inheritedTicketNumber = await readBoardTicketNumber(sourceRun.runDirectory);
       const knownTicketNumber = inheritedTicketNumber ?? shared.assertedTicketNumber;
@@ -20770,9 +20737,6 @@ async function admitPublicRole(role, parsed, env, override) {
       });
     }
     case "gleaner": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
       const baseRevision = parsed.baseRevision ?? "";
       if (baseRevision.trim() === "") {
         throw new CliUsageError("--base requires a nonempty revision");
@@ -20787,16 +20751,19 @@ async function admitPublicRole(role, parsed, env, override) {
       });
     }
     case "review-basis": {
-      const lens = requireReviewerLens(parsed.lens);
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
+      if (parsed.lens === void 0) {
+        throw new CliUsageError("--lens requires completeness or correctness");
+      }
+      if (parsed.baseRevision === void 0) {
+        throw new CliUsageError("--base requires a nonempty revision");
       }
-      const baseRevision = requireReviewerBaseRevision(parsed.baseRevision);
       const rawRefs = parsed.authorityRefs ?? [];
       if (rawRefs.length === 0) {
         throw new CliUsageError("reviewer requires --authority-ref <ref>");
       }
-      const authorityRefs = Object.freeze(rawRefs.map((ref) => requireAuthorityRef(ref)));
+      const lens = parsed.lens;
+      const baseRevision = parsed.baseRevision;
+      const authorityRefs = Object.freeze([...rawRefs]);
       const admittedReviewer = await admitStandardMaterialInvocation("reviewer", {
         ...shared,
         instruction,
@@ -20811,9 +20778,6 @@ async function admitPublicRole(role, parsed, env, override) {
       return { ...admittedReviewer, authorityRefs };
     }
     case "merge-envelope": {
-      if (parsed.project !== void 0) {
-        requireOptionPath("--project", parsed.project);
-      }
       if (instruction.trim() === "") {
         throw new CliUsageError("merger requires a nonblank task instruction");
       }
@@ -20875,9 +20839,6 @@ function admissionSubject(ticketNumber) {
   return { ticketNumber: fields.ticketNumber };
 }
 async function placeRoleAdmission(options) {
-  if (options.project !== void 0) {
-    requireOptionPath("--project", options.project);
-  }
   const projectRoot = resolve9(options.project ?? options.cwd);
   const runId = options.runId ?? (options.createRunId ?? uuidv7)();
   const ticketFields = ticketAdmissionFields(options.assertedTicketNumber);
@@ -21243,11 +21204,11 @@ function parseAnalystCohortIssueToken(raw, flag) {
       `${flag} requires a comma-separated list of N or book:N`
     );
   }
-  const sep6 = trimmed.lastIndexOf(":");
-  if (sep6 > 0) {
-    const rhs = trimmed.slice(sep6 + 1);
+  const sep5 = trimmed.lastIndexOf(":");
+  if (sep5 > 0) {
+    const rhs = trimmed.slice(sep5 + 1);
     if (ANALYST_TICKET_NUMBER_PATTERN.test(rhs)) {
-      const bookKey = trimmed.slice(0, sep6);
+      const bookKey = trimmed.slice(0, sep5);
       if (bookKey.trim() === "") {
         throw new CliUsageError(
           `${flag} book:N requires a non-empty book key, got ${raw}`
@@ -21627,6 +21588,48 @@ var init_role_turn_host_resolution = __esm({
   }
 });
 
+// src/public-cli/role-seat-runtime.ts
+var role_seat_runtime_exports = {};
+__export(role_seat_runtime_exports, {
+  openRoleSeatRuntime: () => openRoleSeatRuntime
+});
+function openRoleSeatRuntime(input) {
+  const hostAdapters = composeRoleTurnHostAdapters(
+    input.resolution,
+    input.principalAuthority
+  );
+  const roleTurnHost = selectRoleTurnHost(hostAdapters, {
+    role: input.role,
+    seat: input.seat
+  });
+  input.afterHost?.();
+  const seatWithModel = resolvedSeatWithModel(input.seat);
+  if (seatWithModel === void 0) return { ok: false };
+  const projected = input.hostFacingModel ?? projectHostFacingProvider(
+    seatWithModel.selection,
+    seatWithModel.host,
+    loadHostProvidersTable(input.home),
+    input.home
+  );
+  return {
+    ok: true,
+    roleTurnHost,
+    hostAdapters,
+    ...projected === void 0 ? {} : { model: projected },
+    ...pickEngineAxis(seatWithModel),
+    host: seatWithModel.host
+  };
+}
+var init_role_seat_runtime = __esm({
+  "src/public-cli/role-seat-runtime.ts"() {
+    "use strict";
+    init_engine_material();
+    init_config2();
+    init_host_providers();
+    init_role_turn_host_resolution();
+  }
+});
+
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir4 } from "node:fs/promises";
 import { join as join22 } from "node:path";
@@ -24899,6 +24902,16 @@ var init_seat_ticket_binding = __esm({
 });
 
 // src/public-cli/turn-request.ts
+function projectPublicTurnAxes(env) {
+  return {
+    packageRoot: env.packageRoot,
+    home: env.home,
+    agentDir: env.agentDir,
+    ...env.model === void 0 ? {} : { model: env.model },
+    ...pickEngineAxis(env),
+    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs }
+  };
+}
 function projectRoleTurnRequest(admitted, roleDetails, options) {
   const cwd = admitted.projectRoot ?? admitted.repoRoot ?? admitted.cwd;
   if (cwd === void 0) throw new Error("admitted invocation missing working directory");
@@ -25105,7 +25118,7 @@ __export(instruction_seat_run_exports, {
   runPublicInstructionSeat: () => runPublicInstructionSeat,
   runPublicInstructionSeatResume: () => runPublicInstructionSeatResume
 });
-import { dirname as dirname17, resolve as resolve11, sep as sep4 } from "node:path";
+import { dirname as dirname17, resolve as resolve11 } from "node:path";
 function unreadablePostSubmissionStatus(admitted, terminal) {
   if (terminal?.roleOutcome.kind !== "accepted") return void 0;
   const route = POST_SUBMISSION_ROUTING[admitted.role];
@@ -25337,27 +25350,43 @@ async function runOmittedLensBatch(argv2, parsed, env, io) {
   io.stdout(formatTerminalResult(terminal));
   return { exitCode: failed ? 1 : 0, terminal };
 }
+function resumeSameParentInstructionSeat(input) {
+  return tryResumeSameTicketSeatRun({
+    home: input.env.home,
+    projectRoot: input.projectRoot,
+    role: input.role,
+    parentRunPath: input.parentRunPath,
+    ...input.ticketNumber === void 0 ? {} : { ticketNumber: input.ticketNumber },
+    freshSummons: input.env.freshSummons,
+    summons: input.summons,
+    resume: (runId, materials) => runPublicInstructionSeatResume(
+      { runId, ...materials === void 0 ? {} : { summons: materials } },
+      input.env,
+      input.io
+    )
+  });
+}
+function sameParentInstruction(env, fallback) {
+  const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
+  if (resumeInstruction === void 0) return fallback;
+  return { instruction: resumeInstruction, instructionEmpty: false };
+}
 async function runCountersignBody(parsed, env, io) {
   const gateParentRunPath = typeof env.parentRunPath === "string" && env.parentRunPath.trim() !== "" ? env.parentRunPath : void 0;
   if (gateParentRunPath !== void 0) {
     const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction ?? parsed.instruction ?? "";
-    const resumed = await tryResumeSameTicketSeatRun({
-      home: env.home,
+    const resumed = await resumeSameParentInstructionSeat({
+      env,
+      io,
       projectRoot: resolve11(parsed.project ?? env.cwd),
       role: "countersign",
       parentRunPath: gateParentRunPath,
       ...isSafePositiveTicketNumber(env.boundTicketNumber) ? { ticketNumber: env.boundTicketNumber } : {},
-      freshSummons: env.freshSummons,
       summons: {
         sourceRunPath: gateParentRunPath,
         instruction: resumeInstruction,
         instructionEmpty: resumeInstruction.trim() === ""
-      },
-      resume: (runId, materials) => runPublicInstructionSeatResume(
-        { runId, ...materials === void 0 ? {} : { summons: materials } },
-        env,
-        io
-      )
+      }
     });
     if (resumed != null) return resumed;
   }
@@ -25389,12 +25418,7 @@ async function runCountersignBody(parsed, env, io) {
         admitted = { ...admitted, sourceRunPath: gateParentRunPath };
       }
       const turnProjection = {
-        packageRoot: env.packageRoot,
-        home: env.home,
-        agentDir: env.agentDir,
-        ...env.model === void 0 ? {} : { model: env.model },
-        ...pickEngineAxis(env),
-        ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
+        ...projectPublicTurnAxes(env),
         ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
         continuation: {
           kind: "initial",
@@ -25465,17 +25489,18 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
   let auditorSubject;
   let auditorSource;
   let auditorTicket;
+  let resolvedNotarySource;
   if (record4.sameParent === "subject-source") {
-    if (!isAuditorSoulRole(parsed.subject)) {
+    if (parsed.subject === void 0) {
       presentStructuralRejection(new CliUsageError("auditor --subject requires judge|doctor"), io);
       return { exitCode: 2 };
     }
     auditorSubject = parsed.subject;
-    const source = typeof parsed.sourceRun === "string" ? parsed.sourceRun.trim() : "";
-    if (source === "") {
+    if (parsed.sourceRun === void 0) {
       presentStructuralRejection(new CliUsageError("auditor --source-run requires a run locator"), io);
       return { exitCode: 2 };
     }
+    const source = parsed.sourceRun;
     try {
       const resolved = await resolveNotarySourceRunLocator({ projectRoot, sourceRun: source, home: env.home });
       auditorSource = resolved.runDirectory;
@@ -25486,26 +25511,23 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
     }
     if (auditorSource === void 0) return { exitCode: 2 };
     const sourceDirectory = auditorSource;
-    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
     const summons = {
-      ...resumeInstruction === void 0 ? { instruction: parsed.instruction ?? "", instructionEmpty: (parsed.instruction ?? "").trim() === "" } : { instruction: resumeInstruction, instructionEmpty: false },
+      ...sameParentInstruction(env, {
+        instruction: parsed.instruction ?? "",
+        instructionEmpty: (parsed.instruction ?? "").trim() === ""
+      }),
       attachmentPaths: parsed.attachmentPaths ?? []
     };
     const resumed = await withAuditorSoulEnv({
       subject: auditorSubject,
       sourceRunDirectory: auditorSource,
-      run: () => tryResumeSameTicketSeatRun({
-        home: env.home,
+      run: () => resumeSameParentInstructionSeat({
+        env,
+        io,
         projectRoot,
         role,
         parentRunPath: sourceDirectory,
-        freshSummons: env.freshSummons,
-        summons,
-        resume: (runId, materials) => runPublicInstructionSeatResume(
-          { runId, ...materials === void 0 ? {} : { summons: materials } },
-          env,
-          io
-        )
+        summons
       })
     });
     if (resumed != null) return resumed;
@@ -25513,24 +25535,21 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
   if (record4.sameParent === "gate-pointer") {
     const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction ?? "");
     if (parentRunPath !== void 0) {
-      const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
       const summons = {
         sourceRunPath: parentRunPath,
-        ...resumeInstruction === void 0 ? { instruction: parsed.instruction ?? "", instructionEmpty: (parsed.instruction ?? "").trim() === "" } : { instruction: resumeInstruction, instructionEmpty: false },
+        ...sameParentInstruction(env, {
+          instruction: parsed.instruction ?? "",
+          instructionEmpty: (parsed.instruction ?? "").trim() === ""
+        }),
         attachmentPaths: parsed.attachmentPaths ?? []
       };
-      const resumed = await tryResumeSameTicketSeatRun({
-        home: env.home,
+      const resumed = await resumeSameParentInstructionSeat({
+        env,
+        io,
         projectRoot,
         role,
         parentRunPath,
-        freshSummons: env.freshSummons,
-        summons,
-        resume: (runId, materials) => runPublicInstructionSeatResume(
-          { runId, ...materials === void 0 ? {} : { summons: materials } },
-          env,
-          io
-        )
+        summons
       });
       if (resumed != null) return resumed;
     }
@@ -25556,28 +25575,28 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
       sourceRun: source,
       ...resumeInstruction === void 0 ? {} : { instruction: resumeInstruction, instructionEmpty: false }
     };
-    const resumed = await tryResumeSameTicketSeatRun({
-      home: env.home,
+    resolvedNotarySource = source;
+    const resumed = await resumeSameParentInstructionSeat({
+      env,
+      io,
       projectRoot,
       role,
       parentRunPath: source.runDirectory,
-      freshSummons: env.freshSummons,
-      summons,
-      resume: (runId, materials) => runPublicInstructionSeatResume(
-        { runId, ...materials === void 0 ? {} : { summons: materials } },
-        env,
-        io
-      )
+      summons
     });
     if (resumed != null) return resumed;
   }
   let admitted;
   try {
+    const admissionOverride = {
+      ...auditorTicket === void 0 ? {} : { assertedTicketNumber: auditorTicket },
+      ...resolvedNotarySource === void 0 ? {} : { resolvedSourceRun: resolvedNotarySource }
+    };
     admitted = await admitPublicRole(
       role,
       parsed,
       env,
-      auditorTicket === void 0 ? void 0 : { assertedTicketNumber: auditorTicket }
+      auditorTicket === void 0 && resolvedNotarySource === void 0 ? void 0 : admissionOverride
     );
   } catch (error) {
     const rejected = usageExit(error, io);
@@ -25615,7 +25634,7 @@ async function runPublicInstructionSeat(argv2, env, io, role, parseArgv2) {
           thrown: error
         }, seatAdapters(admitted, env), env.principalAuthority, io);
       }
-      if (outcome.admitted?.runDirectory.includes(`${sep4}unbound${sep4}runs${sep4}`)) {
+      if (outcome.admitted !== void 0 && isUnboundRunDirectory(outcome.admitted.runDirectory)) {
         await recordChildDiaristRun(admitted, outcome.admitted.runId);
       }
       if (outcome.failedWithoutEscalate !== void 0) {
@@ -25964,6 +25983,7 @@ var AUDITED_ROLES, SECRETARIAT_STATUS_REASK, COUNTERSIGN_STATUS_REASK, WORKER_RO
 var init_instruction_seat_run = __esm({
   "src/public-cli/instruction-seat-run.ts"() {
     "use strict";
+    init_role_run_placement();
     init_compliance_transport();
     init_archivist_record_pointer();
     init_doctor_auditor();
@@ -26112,12 +26132,6 @@ async function resolveSummonHome(options) {
   if (fromCwd !== void 0 && fromCwd.length > 0) return fromCwd;
   return packageMachineHome2();
 }
-function projectSeatEngine(seat) {
-  return pickEngineAxis(seat);
-}
-function projectSeatHost(seat) {
-  return seat.host === void 0 ? {} : { host: seat.host };
-}
 function hostSelectionFailureFromUnknown(error) {
   if (typeof error !== "object" || error === null) return void 0;
   if (error.name !== "HostSelectionError") return void 0;
@@ -26128,44 +26142,36 @@ async function createSummonEnv(options, afterHost) {
   const [
     { piDurablePrincipalAuthority: piDurablePrincipalAuthority2 },
     { appendPiSessionCustomEntry: appendPiSessionCustomEntry2 },
-    { resolveRoleTurnHost: resolveRoleTurnHost2 },
-    { missingResolvedSeatModelMessage: missingResolvedSeatModelMessage2, resolvedSeatWithModel: resolvedSeatWithModel2 }
+    { openRoleSeatRuntime: openRoleSeatRuntime2 },
+    { missingResolvedSeatModelMessage: missingResolvedSeatModelMessage2 }
   ] = await Promise.all([
     Promise.resolve().then(() => (init_durable_principal(), durable_principal_exports)),
     Promise.resolve().then(() => (init_role_turn_host(), role_turn_host_exports)),
-    Promise.resolve().then(() => (init_role_turn_host_resolution(), role_turn_host_resolution_exports)),
+    Promise.resolve().then(() => (init_role_seat_runtime(), role_seat_runtime_exports)),
     Promise.resolve().then(() => (init_config2(), config_exports))
   ]);
   const principalAuthority = options.principalAuthority ?? piDurablePrincipalAuthority2;
-  const roleTurnHost = resolveRoleTurnHost2(
-    {
+  const opened = openRoleSeatRuntime2({
+    resolution: {
       packageRoot: options.packageRoot,
       ...options.roleTurnHost === void 0 ? {} : { roleTurnHost: options.roleTurnHost },
       ...options.hostAdapters === void 0 ? {} : { hostAdapters: options.hostAdapters },
       ...options.extraPiArgs === void 0 || options.extraPiArgs.length === 0 ? {} : { extraPiArgs: options.extraPiArgs },
       ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     },
-    { role: options.role, seat: options.seat, principalAuthority }
-  );
-  afterHost?.();
-  const seatWithModel = resolvedSeatWithModel2(options.seat);
-  if (seatWithModel === void 0) {
+    principalAuthority,
+    role: options.role,
+    seat: options.seat,
+    home: options.home,
+    ...afterHost === void 0 ? {} : { afterHost },
+    ...options.hostFacingModel === void 0 ? {} : { hostFacingModel: options.hostFacingModel }
+  });
+  if (!opened.ok) {
     return {
       ok: false,
       missingModelMessage: missingResolvedSeatModelMessage2(options.role)
     };
   }
-  const hostName = seatWithModel.host ?? "pi";
-  let hostFacingSelection = options.hostFacingModel;
-  if (hostFacingSelection === void 0) {
-    const { loadHostProvidersTable: loadHostProvidersTable2, projectHostFacingProvider: projectHostFacingProvider2 } = await Promise.resolve().then(() => (init_host_providers(), host_providers_exports));
-    hostFacingSelection = projectHostFacingProvider2(
-      seatWithModel.selection,
-      hostName,
-      loadHostProvidersTable2(options.home),
-      options.home
-    );
-  }
   return {
     ok: true,
     env: {
@@ -26174,12 +26180,13 @@ async function createSummonEnv(options, afterHost) {
       agentDir: options.agentDir,
       sessionAppender: appendPiSessionCustomEntry2,
       packageRoot: options.packageRoot,
-      roleTurnHost,
+      roleTurnHost: opened.roleTurnHost,
       cwd: options.cwd,
       credentials: options.credentials,
-      ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
-      ...projectSeatEngine(seatWithModel),
-      ...projectSeatHost(seatWithModel),
+      ...opened.model === void 0 ? {} : { model: opened.model },
+      ...opened.engine === void 0 ? {} : { engine: opened.engine },
+      ...opened.engineModel === void 0 ? {} : { engineModel: opened.engineModel },
+      host: opened.host,
       ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
     }
   };
@@ -26187,13 +26194,14 @@ async function createSummonEnv(options, afterHost) {
 async function summonPublicRole(options) {
   const packageRoot2 = resolveSummonsPackageRoot(options.packageRoot);
   const home = await resolveSummonHome(options);
-  const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join29(home, ".pi", "agent");
   const {
     loadCredentialProviders: loadCredentialProviders2,
     loadPublicCliConfig: loadPublicCliConfig2,
     resolveEffectiveSeat: resolveEffectiveSeat2,
+    resolvePublicAgentDir: resolvePublicAgentDir2,
     validatePublicCliConfigAxes: validatePublicCliConfigAxes2
   } = await Promise.resolve().then(() => (init_config2(), config_exports));
+  const agentDir = resolvePublicAgentDir2(options.agentDir, home);
   const credentials = options.credentials ?? await loadCredentialProviders2(agentDir);
   const config = await loadPublicCliConfig2(home);
   validatePublicCliConfigAxes2(config, packageRoot2);
@@ -26550,7 +26558,6 @@ var AK_ROLE_PACKAGE_ROOT_ENV, execFileAsync3;
 var init_public_role_summons = __esm({
   "src/public-role-summons.ts"() {
     "use strict";
-    init_engine_material();
     AK_ROLE_PACKAGE_ROOT_ENV = "AK_ROLE_PACKAGE_ROOT";
     execFileAsync3 = promisify3(execFile3);
   }
@@ -26689,11 +26696,11 @@ var init_compliance_transport = __esm({
 });
 
 // src/role-run-relocation.ts
-import { join as join30, sep as sep5 } from "node:path";
+import { join as join30, sep as sep4 } from "node:path";
 function rewriteRunDirectoryPathValue(value, oldRunDirectory, newRunDirectory) {
   if (typeof value !== "string") return value;
   if (value === oldRunDirectory) return newRunDirectory;
-  const prefix = `${oldRunDirectory}${sep5}`;
+  const prefix = `${oldRunDirectory}${sep4}`;
   if (value.startsWith(prefix)) {
     return `${newRunDirectory}${value.slice(oldRunDirectory.length)}`;
   }
@@ -26703,7 +26710,7 @@ function rewriteRunDirectoryPathValueAgainstRewrites(value, rewrites) {
   if (typeof value !== "string" || rewrites.length === 0) return value;
   let best;
   for (const rewrite of rewrites) {
-    if (value === rewrite.oldRunDirectory || value.startsWith(`${rewrite.oldRunDirectory}${sep5}`)) {
+    if (value === rewrite.oldRunDirectory || value.startsWith(`${rewrite.oldRunDirectory}${sep4}`)) {
       if (best === void 0 || rewrite.oldRunDirectory.length > best.oldRunDirectory.length) {
         best = rewrite;
       }
@@ -27777,14 +27784,10 @@ function admitResumedRole(loaded) {
     }
     case "review-basis": {
       const rawBase = fields.baseRevision;
-      if (rawBase === void 0 || rawBase.trim() === "") {
+      const baseFault = admittedReviewerBaseFault(rawBase);
+      if (baseFault !== void 0 || rawBase === void 0) {
         throw new CliUsageError(
-          `role run admitted reviewer base revision is missing: ${runId}`
-        );
-      }
-      if (/\s/.test(rawBase) || rawBase.startsWith("-")) {
-        throw new CliUsageError(
-          `role run admitted reviewer base revision is damaged: ${runId}`
+          baseFault === "damaged" ? `role run admitted reviewer base revision is damaged: ${runId}` : `role run admitted reviewer base revision is missing: ${runId}`
         );
       }
       const lens = fields.lens;
@@ -28510,12 +28513,10 @@ async function recordBestEffortPostDispatchDiagnostic(admitted, env, diagnostic,
   } catch (appendError) {
     try {
       const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-      await writeFile7(
-        join35(artifactsDir, `post-admission-diagnostic-${randomUUID6()}.json`),
-        `${JSON.stringify({ version: 1, ...payload }, null, 2)}
-`,
-        { encoding: "utf8", flag: "wx" }
-      );
+      await writeHardenedArtifactFile(artifactsDir, "post-admission-diagnostic", {
+        version: 1,
+        ...payload
+      });
     } catch (artifactError) {
       retentionFailure = `post-dispatch diagnostic durable retention failed on both channels (best-effort continue): dossier=${describeErrorIdentity(appendError)}; artifact=${describeErrorIdentity(artifactError)}`;
     }
@@ -29013,13 +29014,8 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
     prompt = "";
   }
   return {
-    packageRoot: env.packageRoot,
-    home: env.home,
+    ...projectPublicTurnAxes(env),
     ...env.host === void 0 ? {} : { host: env.host },
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...pickEngineAxis(env),
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
     ...env.correlationId === void 0 && admitted.correlationId === void 0 ? {} : { correlationId: env.correlationId ?? admitted.correlationId },
     continuation: {
       kind: "resume",
@@ -29032,13 +29028,8 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 function roleTurnOptions(env, admitted, continuation) {
   const correlationId = env.correlationId ?? admitted.correlationId;
   return {
-    packageRoot: env.packageRoot,
-    home: env.home,
+    ...projectPublicTurnAxes(env),
     ...env.host === void 0 ? {} : { host: env.host },
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...pickEngineAxis(env),
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
     ...correlationId === void 0 || correlationId.trim() === "" ? {} : { correlationId },
     continuation,
     ...env.stationChild === void 0 ? {} : { stationChild: env.stationChild }
@@ -29056,6 +29047,43 @@ async function dispatchAfterWriterLease(input) {
     }
   }
 }
+async function runSettledAutoResumeLoop(input) {
+  const adapters = withOnceSuccessfulBeforeDispatch(input.adapters);
+  const dispatchEnv = input.dispatchEnv ?? input.env;
+  return runWithAutoResumeLoop({
+    admitted: input.admitted,
+    principalAuthority: input.env.principalAuthority,
+    io: input.io,
+    sessionAppender: input.env.sessionAppender,
+    autoResumeLimit: input.env.autoResumeLimit,
+    ...input.env.signal === void 0 ? {} : { signal: input.env.signal },
+    buildInitialPayload: input.buildInitialPayload,
+    buildResumePayload: input.buildResumePayload,
+    dispatch: async (payload, lease, _isFirst, attemptIo) => dispatchAfterWriterLease({
+      ...lease === void 0 ? {} : { lease },
+      build: () => input.toRequest(payload),
+      dispatch: async (request) => {
+        const result = await dispatchPostAdmissionTurn({
+          admitted: input.admitted,
+          env: dispatchEnv,
+          io: attemptIo,
+          request,
+          ...lease === void 0 ? {} : { lease },
+          adapters,
+          persistRunState: false,
+          ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
+        });
+        return settleDeferredPersist(
+          input.admitted,
+          input.env.principalAuthority,
+          adapters,
+          attemptIo,
+          result
+        );
+      }
+    })
+  });
+}
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute8(attachmentPath) ? attachmentPath : resolve12(attachmentPath);
   return pathContainedIn(join35(runDirectory, "attachments"), absolute);
@@ -29169,60 +29197,34 @@ async function runPostAdmissionSeatResume(input) {
   try {
     if (env.stationChild === true) {
       let firstTurn;
-      const stationAdapters = withOnceSuccessfulBeforeDispatch(adapters);
       const invocationScopeId = mintEngineDetourInvocationScope({
         ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
       });
-      return await runWithAutoResumeLoop({
+      return await runSettledAutoResumeLoop({
         admitted: loaded.admitted,
-        principalAuthority: env.principalAuthority,
+        env,
         io: input.io,
-        sessionAppender: env.sessionAppender,
-        autoResumeLimit: env.autoResumeLimit,
-        ...env.signal === void 0 ? {} : { signal: env.signal },
+        adapters,
+        ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine },
         buildInitialPayload: () => ({ resumeTurn: false }),
         buildResumePayload: () => ({ resumeTurn: true }),
-        // Same as public manual resume: prior-court sealed acceptance is not a
-        // redispatch brake (#833). New-court station-child turns still auto-resume.
-        dispatch: async (payload, lease, _isFirst, attemptIo) => dispatchAfterWriterLease({
-          ...lease === void 0 ? {} : { lease },
-          build: async () => {
-            if (payload.resumeTurn && firstTurn !== void 0) {
-              return {
-                ...firstTurn,
-                continuation: {
-                  kind: "resume",
-                  prompt: RESUME_TRANSPORT_ENVELOPE
-                }
-              };
-            }
-            const turnRequest = withEngineDetourInvocationScope(
-              await buildRequestAfterLease(),
-              invocationScopeId
-            );
-            firstTurn = turnRequest;
-            return turnRequest;
-          },
-          dispatch: async (turnRequest) => {
-            const result = await dispatchPostAdmissionTurn({
-              admitted: loaded.admitted,
-              env,
-              io: attemptIo,
-              request: turnRequest,
-              ...lease === void 0 ? {} : { lease },
-              adapters: stationAdapters,
-              persistRunState: false,
-              ...input.effectiveEngine === void 0 ? {} : { effectiveEngine: input.effectiveEngine }
-            });
-            return settleDeferredPersist(
-              loaded.admitted,
-              env.principalAuthority,
-              stationAdapters,
-              attemptIo,
-              result
-            );
+        toRequest: async (payload) => {
+          if (payload.resumeTurn && firstTurn !== void 0) {
+            return {
+              ...firstTurn,
+              continuation: {
+                kind: "resume",
+                prompt: RESUME_TRANSPORT_ENVELOPE
+              }
+            };
           }
-        })
+          const turnRequest = withEngineDetourInvocationScope(
+            await buildRequestAfterLease(),
+            invocationScopeId
+          );
+          firstTurn = turnRequest;
+          return turnRequest;
+        }
       });
     }
     const resumed = await runPostAdmissionManualResume({
@@ -29354,38 +29356,25 @@ async function runPostAdmissionOneShot(input) {
 }
 async function runPostAdmissionResumable(input) {
   const { admitted, env, io, buildInitialRequest, buildResumeRequest, effectiveEngine } = input;
-  const adapters = withOnceSuccessfulBeforeDispatch(input.adapters);
   const invocationScopeId = mintEngineDetourInvocationScope({
     ...effectiveEngine === void 0 ? {} : { effectiveEngine }
   });
   const buildScopedInitial = () => withEngineDetourInvocationScope(buildInitialRequest(), invocationScopeId);
   const buildScopedResume = () => withEngineDetourInvocationScope(buildResumeRequest(), invocationScopeId);
-  return runWithAutoResumeLoop({
+  return runSettledAutoResumeLoop({
     admitted,
-    principalAuthority: env.principalAuthority,
+    env,
     io,
-    sessionAppender: env.sessionAppender,
-    autoResumeLimit: env.autoResumeLimit,
-    ...env.signal === void 0 ? {} : { signal: env.signal },
+    adapters: input.adapters,
+    ...effectiveEngine === void 0 ? {} : { effectiveEngine },
+    // Ordinary in-call retry keeps the admitted correlation when one was stored.
+    dispatchEnv: {
+      ...env,
+      ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
+    },
     buildInitialPayload: buildScopedInitial,
     buildResumePayload: buildScopedResume,
-    dispatch: async (request, lease, _isFirst, attemptIo) => {
-      const result = await dispatchPostAdmissionTurn({
-        admitted,
-        env: {
-          ...env,
-          ...admitted.correlationId === void 0 ? {} : { correlationId: admitted.correlationId }
-        },
-        io: attemptIo,
-        request,
-        ...lease === void 0 ? {} : { lease },
-        adapters,
-        persistRunState: false,
-        // #600: every attempt (initial + auto-resume) writes seat engine when present.
-        ...effectiveEngine === void 0 ? {} : { effectiveEngine }
-      });
-      return settleDeferredPersist(admitted, env.principalAuthority, adapters, attemptIo, result);
-    }
+    toRequest: async (request) => request
   });
 }
 async function runPostAdmissionManualResume(input) {
@@ -29437,6 +29426,7 @@ var init_post_admission = __esm({
     "use strict";
     init_run_lifecycle();
     init_cli_errors();
+    init_turn_request();
     init_invocation();
     init_submission_ledger();
     init_run_ticket_number();
@@ -31604,7 +31594,6 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join40 } from "node:path";
 function publicSeatArgv(owner) {
   return {
     parse: (args) => parsePublicSeatArgv(owner, args),
@@ -31643,50 +31632,42 @@ function takePublicGlobalFlag(argv2, index, options) {
   return void 0;
 }
 function createRoleEnvironment(env, options, afterHost) {
-  const role = options.role;
   const extraPiArgs = env.extraPiArgs;
   const timeoutMs = env.timeoutMs;
-  const hostAdapters = composeRoleTurnHostAdapters(
-    {
+  const opened = openRoleSeatRuntime({
+    resolution: {
       packageRoot: env.packageRoot,
       ...env.roleTurnHost === void 0 ? {} : { roleTurnHost: env.roleTurnHost },
       ...env.hostAdapters === void 0 ? {} : { hostAdapters: env.hostAdapters },
       ...extraPiArgs === void 0 ? {} : { extraPiArgs },
       ...timeoutMs === void 0 ? {} : { timeoutMs }
     },
-    env.principalAuthority
-  );
-  const roleTurnHost = selectRoleTurnHost(hostAdapters, {
-    role,
-    seat: options.seat
+    principalAuthority: env.principalAuthority,
+    role: options.role,
+    seat: options.seat,
+    home: options.home,
+    ...afterHost === void 0 ? {} : { afterHost }
   });
-  afterHost?.();
-  const seatWithModel = resolvedSeatWithModel(options.seat);
-  if (seatWithModel === void 0) {
+  if (!opened.ok) {
     throw new CliUsageError(
       missingResolvedSeatModelMessage(options.seat.seat, "invocation-or-config")
     );
   }
-  const hostFacingSelection = projectHostFacingProvider(
-    seatWithModel.selection,
-    seatWithModel.host,
-    loadHostProvidersTable(options.home),
-    options.home
-  );
   return {
     home: options.home,
     principalAuthority: env.principalAuthority,
     agentDir: options.agentDir,
     sessionAppender: appendPiSessionCustomEntry,
     packageRoot: env.packageRoot,
-    roleTurnHost,
-    hostAdapters,
+    roleTurnHost: opened.roleTurnHost,
+    hostAdapters: opened.hostAdapters,
     cwd: options.cwd,
     ...options.credentials === void 0 ? {} : { credentials: options.credentials },
     ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId },
-    ...hostFacingSelection === void 0 ? {} : { model: hostFacingSelection },
-    ...projectSeatEngine2(options.seat),
-    ...projectSeatHost2(options.seat),
+    ...opened.model === void 0 ? {} : { model: opened.model },
+    ...opened.engine === void 0 ? {} : { engine: opened.engine },
+    ...opened.engineModel === void 0 ? {} : { engineModel: opened.engineModel },
+    host: opened.host,
     ...timeoutMs === void 0 ? {} : { timeoutMs },
     ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
     ...options.config?.autoResumeLimit === void 0 ? {} : { autoResumeLimit: options.config.autoResumeLimit },
@@ -31695,15 +31676,19 @@ function createRoleEnvironment(env, options, afterHost) {
     ...env.signal === void 0 ? {} : { signal: env.signal }
   };
 }
-async function dispatchPublicRoleCommand(env, home, io, parsed, role, parse, run) {
-  const agentDir = resolveAgentDir(env, home);
+async function loadPublicRoleDispatchParts(env, home) {
+  const agentDir = resolvePublicAgentDir(env.agentDir, home);
   const cwd = env.cwd ?? process.cwd();
   const config = await loadAndValidateConfig(home, env.packageRoot);
   const credentials = env.credentials ?? await loadCredentialProviders(agentDir);
+  return { agentDir, cwd, config, credentials };
+}
+async function dispatchPublicRoleCommand(env, home, io, parsed, role, parse, run) {
+  const parts = await loadPublicRoleDispatchParts(env, home);
   const seat = resolveEffectiveSeat(
-    config,
+    parts.config,
     role,
-    credentials,
+    parts.credentials,
     invocationFromParsed(parsed)
   );
   let parsedRoleArgv;
@@ -31711,7 +31696,15 @@ async function dispatchPublicRoleCommand(env, home, io, parsed, role, parse, run
     parsed.args,
     createRoleEnvironment(
       env,
-      { role, home, agentDir, cwd, credentials, seat, config },
+      {
+        role,
+        home,
+        agentDir: parts.agentDir,
+        cwd: parts.cwd,
+        credentials: parts.credentials,
+        seat,
+        config: parts.config
+      },
       () => {
         parsedRoleArgv = parse(parsed.args);
       }
@@ -31742,9 +31735,6 @@ function defaultIo() {
 function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
-function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join40(home, ".pi", "agent");
-}
 function parseThinking(value) {
   return value;
 }
@@ -31863,12 +31853,6 @@ function requireCallableSeat(seat, axis, verb) {
     throw new CliUsageError(`unknown ${axis}-axis seat: ${seat}`);
   }
 }
-function projectSeatEngine2(seat) {
-  return pickEngineAxis(seat);
-}
-function projectSeatHost2(seat) {
-  return { host: seat.host };
-}
 function loadAndValidateConfig(home, packageRoot2) {
   return loadPublicCliConfig(home).then((config) => {
     try {
@@ -32314,7 +32298,7 @@ async function runAkRole(argv2, env) {
         throw new CliUsageError("roles takes no arguments");
       }
       const config = await loadAndValidateConfig(home, env.packageRoot);
-      const credentials = env.credentials ?? await loadCredentialProviders(resolveAgentDir(env, home));
+      const credentials = env.credentials ?? await loadCredentialProviders(resolvePublicAgentDir(env.agentDir, home));
       const seats = effectiveSeatConfigurations(
         config,
         credentials,
@@ -32354,16 +32338,13 @@ async function runAkRole(argv2, env) {
         runId: resumeRequest.runId,
         authority: env.principalAuthority ?? piDurablePrincipalAuthority
       };
-      const agentDir = resolveAgentDir(env, home);
-      const cwd = env.cwd ?? process.cwd();
-      const config = await loadAndValidateConfig(home, env.packageRoot);
-      const credentials = env.credentials ?? await loadCredentialProviders(agentDir);
+      const parts = await loadPublicRoleDispatchParts(env, home);
       const resumeRole = await peekRoleRunRole(home, resumeRequest.runId);
       const seatRole = resumeRole ?? "judge";
       const seat = resolveEffectiveSeat(
-        config,
+        parts.config,
         seatRole,
-        credentials,
+        parts.credentials,
         invocationFromParsed(parsed)
       );
       const result = await runPublicInstructionSeatResume(
@@ -32371,11 +32352,11 @@ async function runAkRole(argv2, env) {
         createRoleEnvironment(env, {
           role: seatRole,
           home,
-          agentDir,
-          cwd,
-          credentials,
+          agentDir: parts.agentDir,
+          cwd: parts.cwd,
+          credentials: parts.credentials,
           seat,
-          config
+          config: parts.config
         }),
         io
       );
@@ -32389,15 +32370,20 @@ async function runAkRole(argv2, env) {
         };
         const parentRole = await peekRoleRunRole(home, parentRunId);
         if (parentRole === void 0) break;
-        const parentSeat = resolveEffectiveSeat(config, parentRole, credentials, invocationFromParsed(parsed));
+        const parentSeat = resolveEffectiveSeat(
+          parts.config,
+          parentRole,
+          parts.credentials,
+          invocationFromParsed(parsed)
+        );
         const parentEnv = createRoleEnvironment(env, {
           role: parentRole,
           home,
-          agentDir,
-          cwd,
-          credentials,
+          agentDir: parts.agentDir,
+          cwd: parts.cwd,
+          credentials: parts.credentials,
           seat: parentSeat,
-          config
+          config: parts.config
         });
         current = await continueParentAfterChild(parentRunId, current.admitted, parentEnv, io);
       }
@@ -32480,6 +32466,7 @@ var init_cli = __esm({
     init_machine_method_skills();
     init_post_admission();
     init_role_turn_host();
+    init_role_seat_runtime();
     init_role_turn_host_resolution();
     init_invocation();
     init_option_definitions();
@@ -32505,7 +32492,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { dirname as dirname23, join as join41 } from "node:path";
+import { dirname as dirname23, join as join40 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -32594,8 +32581,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname23(fileURLToPath2(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join41(binDir, "..", "..");
-  if (existsSync11(join41(canonical, "package.json"))) {
+  const canonical = join40(binDir, "..", "..");
+  if (existsSync11(join40(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;