@akagilnc/pi-workflow-roles 0.1.5462 → 0.1.5478

package/souls/quality-law.md

@@ -2,6 +2,8 @@
 
 ## 复杂度即成本
 
+施工前核对派单与任务是否违法或缺少授权；事实不成立或需要未授权设计时据理拒绝并给出可核验证据，不猜测施工。
+
 能删除、合并或修改现有机制解决的，不得新增机制。同一业务规则只保留一个权威实现；被替代的代码、测试和兼容路径随改动删除。
 
 新增护栏前必须回答三问：故障发生概率多大，后果多重，下游是否已有检测或恢复能力。答不上来，或已有兜底足以承接，不加。同一处反复只增不减，停止补丁，回查根因。

package/src/acp-host/description.ts

@@ -18,11 +18,17 @@ export type AcpHostDescription = HostIdentityDescription & Readonly<{
   }>;
   /**
    * How the seat model reaches the agent:
-   * - "argv": passed as the CLI `--model` flag (grok);
-   * - "set_model": sent as an ACP `session/set_model` RPC with modelId
-   *   `provider:model` (hermes).
+   * - "argv": passed as the CLI `--model` flag;
+   * - "set_model": sent as an ACP `session/set_model` RPC after session new/load
+   *   and before prompt. Catalog modelId shape is `setModelId` (host-native).
    */
   modelPassing: "argv" | "set_model";
+  /**
+   * Host-native `session/set_model` modelId form when `modelPassing` is
+   * `"set_model"`. hermes catalogs are `provider:model`; grok catalogs are bare
+   * model ids. Ignored for `"argv"` hosts.
+   */
+  setModelId?: "bare" | "provider:model";
   /**
    * When set, the production factory ensures a seat profile whose SOUL.md is a
    * symlink to the packaged role soul, and prefixes argv with `flag <name>`.
@@ -51,14 +57,19 @@ export function acpStdioArgs(
 
 /**
  * The modelId the host addresses the seat model by.
- * "argv" hosts address by bare model name; "set_model" hosts address by the
- * `provider:model` modelId the ACP catalog exposes (seat provider after host
- * alias projection, concatenated — never a package provider map).
+ * "argv" hosts use the bare model on the CLI flag. "set_model" hosts use the
+ * host-native catalog form in `setModelId` (hermes `provider:model` after seat
+ * provider / host-alias projection; grok bare model — never a package map).
  */
 export function acpModelId(
-  modelPassing: AcpHostDescription["modelPassing"],
+  description: {
+    readonly modelPassing: AcpHostDescription["modelPassing"];
+    readonly setModelId?: AcpHostDescription["setModelId"] | undefined;
+  },
   model?: { readonly model?: string; readonly provider?: string },
 ): string | undefined {
   if (model?.model === undefined) return undefined;
-  return modelPassing === "set_model" ? `${model.provider}:${model.model}` : model.model;
+  if (description.modelPassing !== "set_model") return model.model;
+  const form = description.setModelId ?? "provider:model";
+  return form === "bare" ? model.model : `${model.provider}:${model.model}`;
 }

package/src/acp-host/production-host.ts

@@ -63,6 +63,7 @@ export function createProductionAcpRoleTurnHost(options: ProductionAcpHostOption
     hostName,
     sessionIdentity: createSessionIdentityAuthority(principalAuthority, description.sessionBindingFile),
     modelPassing: description.modelPassing,
+    ...(description.setModelId === undefined ? {} : { setModelId: description.setModelId }),
     roleRuntimeDependencies: createRoleRuntimeDependencies(packageRoot),
     async connect(request) {
       const seatProfile = description.seatProfileSoul;

package/src/acp-host/role-turn-host.ts

@@ -98,10 +98,13 @@ export type AcpRoleTurnHostConfig = Readonly<{
   hostName: string;
   /**
    * How the seat model reaches the agent: "set_model" sends an ACP
-   * `session/set_model` RPC with modelId `provider:model` once the session
-   * exists (new or loaded); "argv" leaves it to the connect argv (--model).
+   * `session/set_model` RPC once the session exists (new or loaded); "argv"
+   * leaves it to the connect argv (--model). Catalog modelId shape is
+   * `setModelId` (host-native).
    */
   modelPassing: AcpHostDescription["modelPassing"];
+  /** Host-native set_model catalog id; see AcpHostDescription.setModelId. */
+  setModelId?: AcpHostDescription["setModelId"];
   connect(request: RoleTurnRequest): Promise<AcpConnection>;
   prepare(request: RoleTurnRequest): Promise<PreparedRoleTurn>;
 }>;
@@ -296,7 +299,7 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
           : undefined;
         if (request.model !== undefined && availableModels !== undefined && !availableModels.some((entry) =>
           typeof entry === "object" && entry !== null
-          && (entry as { modelId?: unknown }).modelId === acpModelId(config.modelPassing, request.model))) {
+          && (entry as { modelId?: unknown }).modelId === acpModelId(config, request.model))) {
           outcome = failure("activation", "AcpHostModelMismatch", "host-model-mismatch", {
             provider: request.model.provider,
             model: request.model.model,
@@ -354,11 +357,11 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
         }
 
         if (sessionReady) {
-        // set_model seat provider:model (#778); may rebuild agent — re-bind via loadSession.
+        // set_model host-native catalog id (#778 / #1146); may rebuild agent — re-bind via loadSession.
         if (config.modelPassing === "set_model" && request.model !== undefined && sessionId !== undefined) {
           await rpc("session/set_model", {
             sessionId,
-            modelId: acpModelId(config.modelPassing, request.model),
+            modelId: acpModelId(config, request.model),
           });
           sessionId = await loadSession(sessionId);
         }

package/src/collector-tool-schemas.ts

@@ -4,7 +4,7 @@ import { withTerminatingOutputDeclarations } from "./package-contracts/terminati
 
 /**
  * #1088: LLM gathers evidence via host CLI and submits the receipt.
- * Field declarations guide the model — host must not pure-shape-reject (第 0 条 / ADR 0057).
+ * Field declarations guide the model — host must not pure-shape-reject (仓内 CLAUDE.md 开篇 / ADR 0057).
  * Presence of `groups` remains the Collector terminal discriminator for settlement/analyst.
  */
 export const collectorOutputBaseSchema = openToolObject(

package/src/host-descriptions.ts

@@ -32,15 +32,19 @@ export const DEFAULT_ROLE_TURN_HOST = "pi" as const;
 export type HostFamily = "acp" | "headless";
 
 export const HOST_DESCRIPTIONS: Readonly<Record<string, AcpHostDescription>> = Object.freeze({
-  /** Operator home `~/.grok`, native session/load resume, `agent [--model X] stdio`. */
+  /**
+   * Operator home `~/.grok`, native session/load resume, `agent stdio`.
+   * Model arrives as ACP `session/set_model` with bare modelId (grok catalog);
+   * argv `--model` is ignored by current grok (#1146 probe).
+   */
   "grok-build": Object.freeze({
     binaryFromHome: Object.freeze([".grok", "bin", "grok"]),
     argv: Object.freeze({
       prefix: Object.freeze(["agent"]),
       suffix: Object.freeze(["stdio"]),
-      modelFlag: "--model",
     }),
-    modelPassing: "argv",
+    modelPassing: "set_model",
+    setModelId: "bare",
     sessionBindingFile: "grok-acp-session.json",
   }),
   /**
@@ -58,6 +62,7 @@ export const HOST_DESCRIPTIONS: Readonly<Record<string, AcpHostDescription>> = O
       thinkingFlag: "--reasoning",
     }),
     modelPassing: "set_model",
+    setModelId: "provider:model",
     sessionBindingFile: "hermes-acp-session.json",
     seatProfileSoul: Object.freeze({
       flag: "-p",

package/src/package-contracts/gatekeeper-output.ts

@@ -42,7 +42,7 @@ function asStringArray(value: unknown): readonly string[] {
 
 /**
  * Project one explicit Gatekeeper decision.
- * No throw on shape — ADR 0055 / 第 0 条: already-submitted params are retained as-is;
+ * No throw on shape — ADR 0055 / 仓内 CLAUDE.md 开篇: already-submitted params are retained as-is;
  * public-terminal projects non-usable releases via typed failure cause.
  */
 /** #836: no field drop — original object is the receipt. */

package/src/package-contracts/navigator-output.ts

@@ -29,7 +29,7 @@ export type NavigatorAdvice = { readonly prose: string };
  * Project one Navigator advice receipt as prose.
  * Accepts { prose }, a bare string, or any object — objects stringify as the
  * prose body so historical / free-form submissions still present. Shape is not
- * an admission gate (ADR 0055 / 第 0 条 / #959).
+ * an admission gate (ADR 0055 / 仓内 CLAUDE.md 开篇 / #959).
  */
 export function projectLawfulNavigatorOutput(value: unknown): NavigatorAdvice | undefined {
   if (value === undefined || value === null) return undefined;

package/src/package-contracts/terminating-infrastructure.ts

@@ -22,7 +22,7 @@ export const INFRASTRUCTURE_FAILURE_DIAGNOSTIC_KEY = "diagnostic" as const;
 /**
  * Shared declaration fragment for model guidance (#541 / #676 C / ADR 0057).
  * Nested field declarations + descriptions only — host must not pure-shape-reject
- * the envelope (第 0 条). Runtime `failOnInfrastructureFailureDeclaration` still
+ * the envelope (仓内 CLAUDE.md 开篇). Runtime `failOnInfrastructureFailureDeclaration` still
  * recognizes a real non-empty diagnostic string as the failure declaration.
  * No required/minLength/type host gates on the declaration fragment.
  */

package/src/public-cli/option-definitions.ts

@@ -1236,7 +1236,7 @@ const ROLE_COMMAND_HELP = {
   },
   notary: {
     command: "notary",
-    summary: "Direct Notary document check (quote fidelity + ticket alignment); zero prompt/attachment.",
+    summary: "Direct Notary summons; duties: souls/notary.md. Zero prompt/attachment.",
     usage: ["ak-role notary --source-run <runId@role|path> [options]"],
     examples: [
       "ak-role notary --source-run 01a034f1-75bf-71a6-bcf5-d1299145b1a5@judge",