@akagilnc/pi-workflow-roles 0.1.3671 → 0.1.3682

package/dist/diarist-contracts.js

@@ -1,16 +1,16 @@
 /**
  * Public 起居郎 (diarist) terminating receipt contracts — ADR 0075 `diarist-is-role`.
- * Lawful explicit release: completed, with empty or nonempty selections.
+ * Lawful explicit releases: completed (入录选择) | escalate (认不出本庭对象上抛).
  * Machine facts about the volume come from the mechanical sitian seam, never
  * from model self-report (锚定宪法); this module owns the receipt shape only.
  */
 export const DIARIST_OUTPUT_TOOL_NAME = "ak_diarist_output";
 export const DIARIST_ACCEPTED_TEXT = "起居郎回执已接受";
-/** Internal transport: frozen candidate-catalog path for this turn's ticket. */
+/** Internal transport: frozen candidate-catalog path for this turn. */
 export const DIARIST_SOURCES_FLAG = {
     name: "ak-diarist-sources",
     definition: {
-        description: "Frozen per-ticket source catalog the diarist selects from",
+        description: "Frozen source catalog the diarist selects from (may be unbound until LLM asserts ticketNumber)",
         type: "string",
     },
 };
@@ -25,7 +25,7 @@ export function validateRecordedDiaristOutput(value) {
     catch {
         throw new Error("Diarist output has no execution discriminator");
     }
-    if (status === "completed") {
+    if (status === "completed" || status === "escalate") {
         return value;
     }
     throw new Error("Diarist output has no execution discriminator");

package/dist/diarist-role.js

@@ -7,15 +7,21 @@ export { validateRecordedDiaristOutput };
 /** 起居郎交卷形状；形状指引，非 schema 闸。 */
 export const diaristOutputSchema = withInfrastructureFailureDeclaration(openToolObject(Type.Object({
     status: Type.Unknown({
-        description: "completed — 形状指引，非 schema 闸",
+        description: "completed | escalate — 形状指引，非 schema 闸",
     }),
+    ticketNumber: Type.Optional(Type.Unknown({
+        description: "本庭对象票号（正整数）或 null/省略＝真无票；机械验真后下游走 typed 键；认不出用 status=escalate，不洗成无录",
+    })),
+    reason: Type.Optional(Type.String({
+        description: "status 为 escalate 时：认不出本庭对象的原因",
+    })),
     selections: Type.Array(Type.Object({
         candidateIndex: Type.Number({ description: "候选目录中的整块序号" }),
         quotes: Type.Array(Type.String(), {
             description: "该块 transcript 内的连续原文；机械反验",
         }),
         note: Type.Optional(Type.String({ description: "该材料与本案的关系（人读）" })),
-    }, { additionalProperties: true, description: "一条入录选择" }), { description: "入录选择；空列表合法完局" }),
+    }, { additionalProperties: true, description: "一条入录选择" }), { description: "入录选择；空列表合法完局；escalate 时可不交" }),
 })));
 /**
  * 决定工具规格。生命周期装配归注册信封 owner——src/role-runtime.ts（ADR 0018）。
@@ -23,7 +29,7 @@ export const diaristOutputSchema = withInfrastructureFailureDeclaration(openTool
 export const DIARIST_TOOL_SPEC = {
     name: DIARIST_OUTPUT_TOOL_NAME,
     label: "起居郎输出",
-    description: "起居郎入录选择。",
-    promptSnippet: "起居郎入录选择",
+    description: "起居郎入录选择与本票身份断言；认不出本庭对象则 escalate。",
+    promptSnippet: "起居郎入录选择与本票身份",
     parameters: diaristOutputSchema,
 };

package/dist/diarist.js

@@ -13,6 +13,81 @@ import { parseGitHubOriginRemote } from "./reviewer-pinned-git.js";
 import { appendIssueSourceFailureDiagnostic, appendQuoteVerifyFailureDiagnostic, appendTicketProvenanceEntry, ensureTicketProvenanceVolume, readOfferedIdentities, readTicketProvenance, recordOfferedIdentities, resolveTicketProvenanceVolume, ticketProvenanceEntryIdentity, writeTicketProvenanceHumanView, } from "./ticket-provenance.js";
 import { readSitianRecords } from "./sitian-facade.js";
 import { execFileSync } from "node:child_process";
+/**
+ * Honest failure of mechanical ticket verification (ADR 0075).
+ * Must settle as failure — never wash into true-unbound / 无录.
+ */
+export class DiaristTicketVerificationError extends Error {
+    code = "diarist-ticket-verification";
+    reason;
+    constructor(reason, message, options) {
+        super(message, options);
+        this.name = "DiaristTicketVerificationError";
+        this.reason = reason;
+    }
+}
+/**
+ * Decision-key exact identity: complete decimal number N appears in instruction.
+ * A longer number's digit substring (e.g. 82 inside 582) is not N.
+ * Verifies a typed claim — does not harvest candidates from prose.
+ */
+export function instructionContainsTicketNumber(instruction, ticketNumber) {
+    if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1)
+        return false;
+    // Complete decimal token: not preceded or followed by another digit.
+    // Plain string (not template) so the digit-class backslash survives emit.
+    return new RegExp("(?<!\\d)" + String(ticketNumber) + "(?!\\d)").test(instruction);
+}
+/**
+ * Production live-ticket check over shared gh issue-body projection.
+ * Available issue face → exists; unavailable/invalid → missing.
+ */
+export function createGhTicketExistenceChecker(options) {
+    const runner = options?.runner ?? createGhApiRunner();
+    return async (input) => {
+        const projected = await projectGhIssueBody(runner, {
+            owner: input.owner,
+            repo: input.repo,
+            ticketNumber: input.ticketNumber,
+            ...(input.signal === undefined ? {} : { signal: input.signal }),
+        });
+        return projected.status === "available";
+    };
+}
+/**
+ * Mechanical verify of an LLM typed ticket assertion (ADR 0075).
+ * Complete decimal of N must appear in the summons; ticket must exist live.
+ * Throws DiaristTicketVerificationError — caller must not wash into 无录.
+ */
+export async function verifyAssertedTicketNumber(input) {
+    const n = input.ticketNumber;
+    if (!Number.isSafeInteger(n) || n < 1) {
+        throw new DiaristTicketVerificationError("assertion-uninterpretable", `diarist ticket assertion must be a safe integer >= 1, got ${String(n)}`);
+    }
+    if (!instructionContainsTicketNumber(input.instruction, n)) {
+        throw new DiaristTicketVerificationError("number-not-in-instruction", `diarist ticket assertion #${n} complete decimal number does not appear in accepted instruction`);
+    }
+    const origin = resolveDiaristGithubOrigin(input.projectRoot);
+    if (origin === undefined) {
+        throw new DiaristTicketVerificationError("origin-unresolved", `diarist ticket assertion #${n} requires a resolvable github.com origin remote for live verification`);
+    }
+    const checkExistence = input.checkExistence ?? createGhTicketExistenceChecker();
+    let exists;
+    try {
+        exists = await checkExistence({
+            owner: origin.owner,
+            repo: origin.repo,
+            ticketNumber: n,
+            ...(input.signal === undefined ? {} : { signal: input.signal }),
+        });
+    }
+    catch (error) {
+        throw new DiaristTicketVerificationError("ticket-missing", `diarist ticket assertion #${n} live verification failed`, { cause: error });
+    }
+    if (!exists) {
+        throw new DiaristTicketVerificationError("ticket-missing", `diarist ticket assertion #${n} does not exist as a live issue on ${origin.owner}/${origin.repo}`);
+    }
+}
 /** Bound-ticket issue source failure — not a soft degrade to empty face. */
 export class DiaristIssueSourceError extends Error {
     code = "diarist-issue-source";
@@ -181,26 +256,36 @@ function loadSourceBlocks(input) {
 }
 /**
  * Mechanical half A — source enumeration into a frozen catalog.
- * Establishes the per-ticket volume + human view for every bound run (ADR 0075
- * `ticket-provenance-file` 每票一份起居录), then offers only blocks whose entry
- * identity is not already on the volume or the offered watermark (增量幂等).
+ * When ticketNumber is known: establishes the per-ticket volume + human view
+ * (ADR 0075 `ticket-provenance-file` 每票一份起居录) and offers only blocks not
+ * yet on the volume / offered watermark (增量幂等).
+ * When ticketNumber is absent (first summons): offers session candidates without
+ * minting a volume — the LLM turn asserts identity; accept verifies and mints.
  */
 export async function prepareDiaristSourceCatalog(input) {
-    ensureTicketProvenanceVolume(input.ticketNumber, input.cwd, input.home);
-    const volume = await readTicketProvenance(input.ticketNumber, input.cwd, input.home);
-    writeTicketProvenanceHumanView({
-        ticketNumber: input.ticketNumber,
-        cwd: input.cwd,
-        ...(input.home === undefined ? {} : { home: input.home }),
-        entries: volume.entries,
-    });
+    const known = input.ticketNumber;
+    if (known !== undefined) {
+        ensureTicketProvenanceVolume(known, input.cwd, input.home);
+        const volume = await readTicketProvenance(known, input.cwd, input.home);
+        writeTicketProvenanceHumanView({
+            ticketNumber: known,
+            cwd: input.cwd,
+            ...(input.home === undefined ? {} : { home: input.home }),
+            entries: volume.entries,
+        });
+    }
     const rawBlocks = loadSourceBlocks(input);
     // Safeguard only (notify filter + dedupe) — never prose-based exclusion.
     const safeguarded = mechanicalSafeguardPipeline(rawBlocks);
-    const seen = await loadSeenEntryIdentities(input.ticketNumber, input.cwd, input.home);
-    const fresh = safeguarded.filter((block) => !seen.has(blockEntryIdentity(input.ticketNumber, block)));
+    const seen = known === undefined
+        ? new Set()
+        : await loadSeenEntryIdentities(known, input.cwd, input.home);
+    const fresh = safeguarded.filter((block) => known === undefined || !seen.has(blockEntryIdentity(known, block)));
     return {
-        ticketNumber: input.ticketNumber,
+        ...(known === undefined ? {} : { ticketNumber: known }),
+        instruction: input.instruction,
+        runDirectory: input.runDirectory,
+        projectRoot: input.projectRoot,
         cwd: input.cwd,
         ...(input.home === undefined ? {} : { home: input.home }),
         candidates: fresh.map((block, candidateIndex) => ({ ...block, candidateIndex })),
@@ -216,8 +301,23 @@ export function loadDiaristSourceCatalog(path) {
         throw new Error(`diarist source catalog is not an object (${path})`);
     }
     const record = parsed;
-    if (typeof record.ticketNumber !== "number" || typeof record.cwd !== "string") {
-        throw new Error(`diarist source catalog is missing ticket coordinates (${path})`);
+    if (typeof record.cwd !== "string") {
+        throw new Error(`diarist source catalog is missing cwd (${path})`);
+    }
+    if (typeof record.instruction !== "string") {
+        throw new Error(`diarist source catalog is missing instruction (${path})`);
+    }
+    if (typeof record.runDirectory !== "string") {
+        throw new Error(`diarist source catalog is missing runDirectory (${path})`);
+    }
+    if (typeof record.projectRoot !== "string") {
+        throw new Error(`diarist source catalog is missing projectRoot (${path})`);
+    }
+    if (record.ticketNumber !== undefined &&
+        (typeof record.ticketNumber !== "number" ||
+            !Number.isSafeInteger(record.ticketNumber) ||
+            record.ticketNumber < 1)) {
+        throw new Error(`diarist source catalog ticketNumber is not a safe ticket (${path})`);
     }
     if (!Array.isArray(record.candidates)) {
         throw new Error(`diarist source catalog is missing candidates (${path})`);
@@ -231,7 +331,11 @@ export function loadDiaristSourceCatalog(path) {
  * never bounces the receipt (第 0 条) and never enters the volume as an entry.
  */
 export async function commitDiaristSelections(input) {
-    const { ticketNumber, cwd } = input.catalog;
+    const ticketNumber = input.catalog.ticketNumber;
+    if (ticketNumber === undefined) {
+        throw new Error("commitDiaristSelections requires a bound ticketNumber on the catalog");
+    }
+    const { cwd } = input.catalog;
     const homeOpt = input.catalog.home === undefined ? {} : { home: input.catalog.home };
     const volumePaths = ensureTicketProvenanceVolume(ticketNumber, cwd, input.catalog.home);
     const anchors = buildDiaristAnchors({ ticketNumber });

package/dist/package-contracts/terminating-tools.js

@@ -123,7 +123,7 @@ export function validateAcceptedDetails(toolName, details) {
         [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
         [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
         [AUDITOR_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-        [DIARIST_OUTPUT_TOOL_NAME]: ["completed"],
+        [DIARIST_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
     };
     const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
     const baseDiscriminator = discriminator;

package/dist/public-cli/inspector-run.js

@@ -1,6 +1,6 @@
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
-import { bindReusedTicketNumber, resolveKnownTicketNumber, tryResumeSameTicketSeatRun, } from "./seat-ticket-binding.js";
+import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { admitInspectorInvocation, buildInspectorTransportPrompt, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInspectorRun, markRunAdmitted, parentRunPathFromGatePointerInstruction, } from "./run-lifecycle.js";
@@ -27,14 +27,9 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
         throw error;
     }
     // #747: same parent (卷宗指针) → resume prior inspector run with this summons' materials.
-    // #709: ticket identity is reused from records this book already holds — no seat model call.
+    // #771: no mechanical ticket match against instruction text; parent-run path only.
     // No bare catch→fresh: lookup/resume failures surface; only true absence mints new.
     const projectRoot = parsed.project ?? env.cwd;
-    const reusedTicketNumber = await resolveKnownTicketNumber({
-        instruction: parsed.instruction,
-        projectRoot,
-        home: env.home,
-    });
     const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
     if (parentRunPath !== undefined) {
         const summons = {
@@ -100,12 +95,7 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
         env,
         io,
         request: turnRequest,
-        adapters: inspectorAdapters({
-            beforeDispatch: async (admittedSeat) => {
-                // #635/#709: bind the reused identity inside the controlled-failure boundary.
-                await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
-            },
-        }),
+        adapters: inspectorAdapters(),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
     });
 }

package/dist/public-cli/instruction-seat-run.js

@@ -4,7 +4,7 @@ import { CliUsageError } from "./cli-errors.js";
 import { admitAuditorInvocation, admitGatekeeperInvocation, admitNavigatorInvocation, bindAdmittedTicketNumber, buildInstructionTransportPrompt, persistAdmittedSourceRunPath, } from "./invocation.js";
 import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
 import { loadResumableInstructionSeatRun, markRunAdmitted, } from "./run-lifecycle.js";
-import { bindReusedTicketNumber, resolveKnownTicketNumber, tryResumeSameTicketSeatRun, } from "./seat-ticket-binding.js";
+import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { presentStructuralRejection, readEngineDetourInfrastructureFailure, trySettleAuditorTerminalResult, trySettleGatekeeperTerminalResult, trySettleNavigatorTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
 /** Project an admitted instruction-seat invocation onto the host-neutral turn request. */
@@ -119,10 +119,10 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
     let auditorSubject;
     let auditorSourceRun;
     let auditorSourceTicket;
-    let reusedTicketNumber;
-    // #637 / #747: resume prior seat run with this summons' materials.
-    // Auditor (#747): parent --source-run path is the lookup key.
-    // Other instruction seats: reuse known ticket (#709). No bare catch→fresh.
+    // #637 / #747 / #771: resume prior seat run with this summons' materials.
+    // Auditor (#747): parent --source-run path is the lookup key (typed inherit).
+    // Other instruction seats: no mechanical ticket match against instruction text.
+    // No bare catch→fresh.
     const projectRoot = parsed.project ?? env.cwd;
     if (role === "auditor") {
         if (parsed.subject !== "judge" && parsed.subject !== "doctor") {
@@ -150,13 +150,6 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
             return { exitCode: 2 };
         }
     }
-    else {
-        reusedTicketNumber = await resolveKnownTicketNumber({
-            instruction: parsed.instruction,
-            projectRoot,
-            home: env.home,
-        });
-    }
     const summons = {
         instruction: parsed.instruction,
         instructionEmpty: parsed.instruction.trim() === "",
@@ -179,19 +172,6 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
         if (resumed !== undefined)
             return resumed;
     }
-    else if (reusedTicketNumber !== undefined) {
-        const resumed = await tryResumeSameTicketSeatRun({
-            home: env.home,
-            projectRoot,
-            role,
-            ticketNumber: reusedTicketNumber,
-            freshSummons: env.freshSummons,
-            summons,
-            resume: (runId, materials) => runPublicInstructionSeatResume({ runId, ...(materials === undefined ? {} : { summons: materials }) }, env, io),
-        });
-        if (resumed !== undefined)
-            return resumed;
-    }
     let admitted;
     try {
         admitted = await admitInstructionSeat(role, {
@@ -248,15 +228,10 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
                 request: turnRequest,
                 adapters: instructionSeatAdapters({
                     beforeDispatch: async (admittedSeat) => {
-                        // #635/#709: ticket bind inside controlled-failure boundary.
-                        // Auditor inherits source-run ticket (notary face).
-                        // Other seats: reuse known ticket identity.
+                        // Auditor inherits source-run ticket (notary face) — typed, not prose match.
                         if (auditorSourceTicket !== undefined) {
                             await bindAdmittedTicketNumber(admittedSeat, auditorSourceTicket);
                         }
-                        else {
-                            await bindReusedTicketNumber(admittedSeat, reusedTicketNumber);
-                        }
                     },
                 }),
                 ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),

package/dist/public-cli/invocation.js

@@ -3,6 +3,7 @@
  * Attachments, project default/override (ADR 0052 / #106).
  */
 import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
 import { lstat, mkdir, readFile, realpath, writeFile, } from "node:fs/promises";
 import { basename, isAbsolute, join, resolve, sep } from "node:path";
 import { activationBookDirectory, ensureRealDirectoryTree, homeFromRunDirectory, pathContainedIn, resolveActivationLedgerHome, } from "../activation-ledger-topology.js";
@@ -164,6 +165,37 @@ export async function bindAdmittedTicketNumber(admitted, ticketNumber) {
     const current = JSON.parse(await readFile(admittedPath, "utf8"));
     await writeFile(admittedPath, `${JSON.stringify({ ...current, ticketNumber }, null, 2)}\n`, "utf8");
 }
+/**
+ * Bind ticket identity onto a run directory's durable pages when the admitted
+ * object is not in hand (起居郎 accept hook after LLM assertion, #771).
+ * Idempotent when the same number is already on the pages.
+ */
+export async function bindTicketNumberOnRunDirectory(runDirectory, ticketNumber) {
+    if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
+        throw new Error(`bindTicketNumberOnRunDirectory requires a safe positive integer, got ${String(ticketNumber)}`);
+    }
+    const admittedPath = join(runDirectory, "admitted-request.json");
+    const invocationPath = join(runDirectory, "invocation.json");
+    const admitted = JSON.parse(await readFile(admittedPath, "utf8"));
+    const existing = admitted.ticketNumber;
+    if (typeof existing === "number") {
+        if (existing === ticketNumber)
+            return;
+        throw new Error(`bindTicketNumberOnRunDirectory refuses to replace existing ticket #${existing} with #${ticketNumber}`);
+    }
+    // Conflict guard before any write: crash window of bindAdmittedTicketNumber
+    // can leave invocation bound while admitted-request is still unbound — refuse
+    // silent rebind. Read-before-merge; never check the page just overwritten.
+    if (existsSync(invocationPath)) {
+        const invocation = JSON.parse(await readFile(invocationPath, "utf8"));
+        if (typeof invocation.ticketNumber === "number" &&
+            invocation.ticketNumber !== ticketNumber) {
+            throw new Error(`bindTicketNumberOnRunDirectory refuses to replace invocation ticket #${invocation.ticketNumber} with #${ticketNumber}`);
+        }
+    }
+    await writeFile(admittedPath, `${JSON.stringify({ ...admitted, ticketNumber }, null, 2)}\n`, "utf8");
+    await mergeInvocationIdentityPage(runDirectory, { ticketNumber });
+}
 /** Add the identity returned by the production Pi launch seam to its existing ledger page. */
 export async function recordLaunchedPiIdentity(runDirectory, identity) {
     await mergeInvocationIdentityPage(runDirectory, {

package/dist/public-cli/judge-run.js

@@ -1,7 +1,6 @@
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
 import { admitJudgeInvocation, buildJudgeTransportPrompt, } from "./invocation.js";
-import { resolveSeatTicketBinding } from "./seat-ticket-binding.js";
 import { loadResumableJudgeRun, markRunAdmitted, buildResumeContinuationPrompt, } from "./run-lifecycle.js";
 import { presentStructuralRejection, readEngineDetourInfrastructureFailure, trySettleJudgeTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
@@ -91,12 +90,7 @@ export async function runPublicJudge(argv, env, io, parseJudgeArgv) {
                 }),
             },
         }),
-        adapters: {
-            ...judgeAdapters(),
-            beforeDispatch: async (admittedSeat) => {
-                await resolveSeatTicketBinding(admittedSeat, env);
-            },
-        },
+        adapters: judgeAdapters(),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
     });
 }