@akagilnc/pi-workflow-roles 0.1.3673 → 0.1.3685

package/dist/public-cli/run-lifecycle.js

@@ -827,34 +827,6 @@ export async function findLatestRunIdForSeatTicket(input) {
     }
     return best;
 }
-/**
- * Ticket identities this book's retained runs already record (#709).
- * Read-only reuse surface for seat ticket binding — no ticket number is minted here.
- */
-export async function collectBookRunTicketNumbers(input) {
-    const ledgerHome = resolveActivationLedgerHome(input.home);
-    const runsDir = join(activationBookDirectory(ledgerHome, input.bookKey), "runs");
-    let entries;
-    try {
-        entries = await readdir(runsDir);
-    }
-    catch (error) {
-        if (errorCodeOf(error) === "ENOENT")
-            return new Set();
-        throw error;
-    }
-    const known = new Set();
-    for (const entry of entries) {
-        // runs/ also holds non-run files (institutional-resolution.json, Finder
-        // .DS_Store); only `<runId>@<role>` directories are runs (#769).
-        if (!entry.includes("@"))
-            continue;
-        const ticketNumber = await readRunTicketNumber(join(runsDir, entry));
-        if (ticketNumber !== undefined)
-            known.add(ticketNumber);
-    }
-    return known;
-}
 /** Restore optional correlation + typed ticket identity from a durable admitted page. */
 function parsePersistedTicketIdentity(record) {
     const correlationId = typeof record.correlationId === "string" && record.correlationId.trim() !== ""

package/dist/public-cli/seat-ticket-binding.js

@@ -1,110 +1,21 @@
 /**
  * Shared ticket identity seam for public court seats (#635 / #637 / #709 / #747 / #771).
- * Court target = first `#N` in the summons instruction. Other seats reuse that
- * number only when this book already records it (retained run pages + 起居录
- * volumes); 起居郎 takes it as the caller-supplied identity on a first summons
- * (ADR 0081 `initial-court-ticket-supplied`). No seat-side model call, no second
- * ticket-number source of truth, no minting from human titles. No `#N` leaves
- * the run unbound (真无票), which is lawful. No CLI --ticket and no attachment
- * frontmatter binding. #747: officer same-parent resume also lives here.
+ *
+ * ADR 0075 `diarist-resolves-ticket-llm-layer`: the seat's LLM names the court
+ * target as a typed assertion; the mechanical layer only verifies that assertion
+ * (complete decimal of N appears in the summons; ticket exists). Code never
+ * judges which ticket the summons is about — no prose harvest, no first-#N
+ * position pick, no matching book-known numbers against instruction text
+ * (锚定宪法; owner 2026-09-08: 代码不准做判断). Other seats reuse a typed
+ * identity already handed over (起居郎 assertion / source-run / already-bound
+ * resume) — they do not re-recognize from instruction. No CLI --ticket, no
+ * attachment frontmatter. #747: officer same-parent resume also lives here.
+ *
+ * Mechanical verify helpers live on diarist.ts / invocation.ts (sole owners).
+ * This module owns same-ticket / same-parent resume only.
  */
-import { existsSync } from "node:fs";
-import { ActivationGitRepositoryRequiredError, resolveBookKeyFromGit, } from "../activation-ledger-git.js";
-import { resolveTicketProvenanceVolume } from "../ticket-provenance.js";
-import { bindAdmittedTicketNumber, } from "./invocation.js";
-import { collectBookRunTicketNumbers, findLatestRunIdForSeatTicket, } from "./run-lifecycle.js";
-/**
- * Hash-marked ticket references in an instruction, in order of first appearance.
- * `#582` is one token; a leading-zero run is not a ticket literal; bare digit
- * runs (`r1`, `D2`, sha islands, counts) are not ticket references. Callers name
- * the court target as the first `#N` (ADR 0081 `initial-court-ticket-supplied`).
- */
-export function instructionTicketTokens(instruction) {
-    const tokens = [];
-    const seen = new Set();
-    for (const match of instruction.matchAll(/#([1-9]\d*)/g)) {
-        const parsed = Number(match[1]);
-        if (!Number.isSafeInteger(parsed))
-            continue;
-        if (seen.has(parsed))
-            continue;
-        seen.add(parsed);
-        tokens.push(parsed);
-    }
-    return tokens;
-}
-/**
- * Ticket identity this summons reuses, or undefined when the court target is not
- * already on this book. The first `#N` is the court target; later `#N` are
- * neighbors/PRs and never steal the bind. Known identities come only from
- * records this book already holds: 起居录 volume partitions and ticket numbers
- * on retained run pages. Nothing matched leaves the run unbound — never guess.
- */
-export async function resolveKnownTicketNumber(input) {
-    const tokens = instructionTicketTokens(input.instruction);
-    if (tokens.length === 0)
-        return undefined;
-    const target = tokens[0];
-    const volume = resolveTicketProvenanceVolume(target, input.projectRoot, input.home);
-    if (existsSync(volume.volumeDir))
-        return target;
-    const runTickets = await readBookRunTickets(input);
-    return runTickets.has(target) ? target : undefined;
-}
-/**
- * Diarist summons identity (ADR 0081 `initial-court-ticket-supplied`).
- * The first `#N` in the caller's dispatch is the supplied court target — the
- * working 起居郎 round establishes the volume on a first summons; later `#N`
- * (neighbors, PR numbers) do not unbind it. No `#N` stays unbound (真无票).
- * Not a second ticket-number source of truth and not an extra recognizer call.
- */
-export async function resolveDiaristSummonsTicketNumber(input) {
-    const tokens = instructionTicketTokens(input.instruction);
-    return tokens[0];
-}
-/**
- * Ticket numbers on this book's retained runs.
- * A directory with no book (not a git repository) simply holds no run history —
- * admission owns that rejection face, this lookup does not pre-empt it.
- */
-async function readBookRunTickets(input) {
-    let bookKey;
-    try {
-        bookKey = input.bookKey ?? resolveBookKeyFromGit(input.projectRoot);
-    }
-    catch (error) {
-        if (error instanceof ActivationGitRepositoryRequiredError)
-            return new Set();
-        throw error;
-    }
-    return await collectBookRunTicketNumbers({ home: input.home, bookKey });
-}
-/** Bind a reused ticket number onto an admission that is still unbound. */
-export async function bindReusedTicketNumber(admitted, ticketNumber) {
-    if (ticketNumber === undefined)
-        return;
-    if (admitted.ticketNumber !== undefined)
-        return;
-    await bindAdmittedTicketNumber(admitted, ticketNumber);
-}
-/**
- * Sole seat disposition for an unbound admission (#635 / #709).
- * Already-bound admissions short-circuit — resume keeps the identity it has.
- * Used by seats that do not pre-resolve for same-ticket resume; the seats that
- * do (countersign / inspector / diarist) reuse the number they already resolved.
- */
-export async function resolveSeatTicketBinding(admitted, env) {
-    if (admitted.ticketNumber !== undefined)
-        return admitted.ticketNumber;
-    const ticketNumber = await resolveKnownTicketNumber({
-        instruction: admitted.instruction,
-        projectRoot: admitted.projectRoot,
-        home: env.home,
-        bookKey: admitted.bookKey,
-    });
-    await bindReusedTicketNumber(admitted, ticketNumber);
-    return ticketNumber;
-}
+import { resolveBookKeyFromGit } from "../activation-ledger-git.js";
+import { findLatestRunIdForSeatTicket, } from "./run-lifecycle.js";
 /**
  * Sole same-seat → resume decision (#637 / #724 / #747).
  * Officer seats (notary/inspector/auditor) look up by parent run path; countersign

package/dist/readable-gate-item.js

@@ -0,0 +1,16 @@
+/**
+ * Parent-visible relay of one gate bounce/finding item (#750 / #775).
+ *
+ * Strings stay as-is. Any other value is JSON-serialized so structured content
+ * (article/reason/evidence, category/law/evidence, …) is not lost as
+ * `[object Object]` when joined into parent-seat text.
+ *
+ * Presentation only: does not legislate carrier format for LLM-to-LLM traffic.
+ */
+export function readableGateItem(value) {
+    return typeof value === "string" ? value : JSON.stringify(value);
+}
+/** Join gate items into one parent-visible line. */
+export function joinReadableGateItems(items, separator = "; ") {
+    return items.map(readableGateItem).join(separator);
+}

package/dist/role-runtime.js

@@ -25,7 +25,8 @@ import { INSPECTOR_TOOL_SPEC, } from "./inspector-role.js";
 import { INSPECTOR_ACCEPTED_TEXT } from "./inspector-contracts.js";
 import { DIARIST_TOOL_SPEC, } from "./diarist-role.js";
 import { DIARIST_ACCEPTED_TEXT, DIARIST_SOURCES_FLAG, projectDiaristSelections, } from "./diarist-contracts.js";
-import { commitDiaristSelections, loadDiaristSourceCatalog, } from "./diarist.js";
+import { commitDiaristSelections, DiaristTicketVerificationError, loadDiaristSourceCatalog, verifyAssertedTicketNumber, } from "./diarist.js";
+import { bindTicketNumberOnRunDirectory } from "./public-cli/invocation.js";
 import { GATEKEEPER_TOOL_SPEC, } from "./gatekeeper-role.js";
 import { NAVIGATOR_TOOL_SPEC, } from "./navigator-role.js";
 import { AUDITOR_TOOL_SPEC, } from "./auditor-role.js";
@@ -495,12 +496,35 @@ export function createAuditorRoleRuntime(roleHost, dependencies) {
         },
     };
 }
+/**
+ * LLM typed court-target assertion from diarist output (ADR 0075).
+ * null/absent = true-unbound; positive safe integer = ticket N.
+ * Any other shape fails honestly — never washes into unbound.
+ */
+function readDiaristTicketAssertion(submitted) {
+    if (submitted === undefined || !("ticketNumber" in submitted)) {
+        return { kind: "true-unbound" };
+    }
+    const raw = submitted.ticketNumber;
+    if (raw === null)
+        return { kind: "true-unbound" };
+    if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) {
+        return { kind: "ticket", ticketNumber: raw };
+    }
+    if (typeof raw === "string" && /^[1-9]\d*$/.test(raw)) {
+        const n = Number(raw);
+        if (Number.isSafeInteger(n) && n >= 1) {
+            return { kind: "ticket", ticketNumber: n };
+        }
+    }
+    throw new DiaristTicketVerificationError("assertion-uninterpretable", "diarist ticketNumber must be a safe integer >= 1, null, or absent");
+}
 /**
  * #708: 起居郎 public seat on the shared filed-officer envelope.
  * Semantic collection happened in this role's own turn; the accept hook runs the
- * mechanical band (verbatim reverse-verify → idempotent sitian append →
- * watermark) and records the resulting sitian facts next to the receipt.
- * Machine facts never come from model self-report (锚定宪法).
+ * mechanical band (ticket verify when first-summons + verbatim reverse-verify →
+ * idempotent sitian append → watermark) and records the resulting sitian facts
+ * next to the receipt. Machine facts never come from model self-report (锚定宪法).
  */
 export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag) {
     // This turn's catalog, snapshotted at activate: the candidateIndexes the role
@@ -516,22 +540,77 @@ export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag)
             const submitted = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
                 ? parameters
                 : undefined;
-            // True-unbound summons: no ticket, no catalog, no diary committed — so
-            // this turn produced no sitian facts. A self-reported `sitian` is not
-            // one (锚定宪法); drop it rather than let it ride into decisiveFacts.
-            // Carrying the field is not a reason to bounce the receipt (第 0 条).
+            // LLM cannot identify the court target — escalate without machine facts.
+            // Strip sitian (锚定宪法) and ticketNumber (unverified — must not leak
+            // into caller-visible admitted typed key via decisiveFacts mirror).
+            if (submitted?.status === "escalate") {
+                if (!("sitian" in submitted) && !("ticketNumber" in submitted)) {
+                    return submitted;
+                }
+                const stripped = { ...submitted };
+                delete stripped.sitian;
+                delete stripped.ticketNumber;
+                return stripped;
+            }
+            const assertion = readDiaristTicketAssertion(submitted);
+            // No frozen catalog: only true-unbound is lawful without volume work.
+            // A self-reported `sitian` is not machine fact (锚定宪法).
             if (catalog === undefined) {
+                if (assertion.kind === "ticket") {
+                    throw new DiaristTicketVerificationError("assertion-uninterpretable", `diarist asserted ticket #${assertion.ticketNumber} but no source catalog was frozen for this turn`);
+                }
                 if (submitted === undefined || !("sitian" in submitted))
                     return undefined;
                 const stripped = { ...submitted };
                 delete stripped.sitian;
                 return stripped;
             }
+            // Already bound before the turn (typed handoff / resume): skip re-recognition
+            // (ADR 0075 已绑定 ticket 优先) and commit under that identity.
+            if (catalog.ticketNumber !== undefined) {
+                const facts = await commitDiaristSelections({
+                    catalog,
+                    selections: projectDiaristSelections(parameters),
+                });
+                return {
+                    ...(submitted ?? { receipt: parameters }),
+                    ticketNumber: catalog.ticketNumber,
+                    sitian: facts,
+                };
+            }
+            // First summons: LLM typed assertion → mechanical verify → bind → commit.
+            // true-unbound → 无录 (no volume). Verification failure throws (失败诚实).
+            // Cannot-identify must arrive as status=escalate above — never as silent unbound.
+            if (assertion.kind === "true-unbound") {
+                if (submitted === undefined || !("sitian" in submitted)) {
+                    return { ...(submitted ?? { receipt: parameters }), ticketNumber: null };
+                }
+                const stripped = {
+                    ...submitted,
+                    ticketNumber: null,
+                };
+                delete stripped.sitian;
+                return stripped;
+            }
+            await verifyAssertedTicketNumber({
+                ticketNumber: assertion.ticketNumber,
+                instruction: catalog.instruction,
+                projectRoot: catalog.projectRoot,
+            });
+            await bindTicketNumberOnRunDirectory(catalog.runDirectory, assertion.ticketNumber);
+            const boundCatalog = {
+                ...catalog,
+                ticketNumber: assertion.ticketNumber,
+            };
             const facts = await commitDiaristSelections({
-                catalog,
+                catalog: boundCatalog,
                 selections: projectDiaristSelections(parameters),
             });
-            return { ...(submitted ?? { receipt: parameters }), sitian: facts };
+            return {
+                ...(submitted ?? { receipt: parameters }),
+                ticketNumber: assertion.ticketNumber,
+                sitian: facts,
+            };
         },
     }, dependencies);
     return {

package/dist/submission-errors.js

@@ -1,6 +1,9 @@
+import { joinReadableGateItems } from "./readable-gate-item.js";
 function gatekeeperNonPassMessage(result) {
     if (result.status === "bounce") {
-        const findings = result.findings.length === 0 ? "（无 findings）" : result.findings.join("; ");
+        const findings = result.findings.length === 0
+            ? "（无 findings）"
+            : joinReadableGateItems(result.findings);
         return `门下省打回重写，findings：${findings}`;
     }
     if (result.status === "unreadable") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.3673",
+  "version": "0.1.3685",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/diarist-collect.md

@@ -23,3 +23,13 @@
 - 入选即整块保留：指向文件中的完整 transcript，不指针化、不摘要替代正文。
 - 引语必须是该块 transcript 内的**连续原文子串**。拼接、改写、跨段拼贴会在机械反验中失败并拒入录。
 - 宁多勿漏：拿不准是否决策相关时入选，由下游反验与人读面承接。
+
+## 本票身份
+
+由你（本席 LLM）判断当前要办的是哪张票，在交卷对象上以 typed 字段交出——代码不做认票裁定（ADR 0075 `diarist-resolves-ticket-llm-layer`；owner：代码不准做判断）。机械层只验你断言的号逐字出现于指令且票真实存在；后续衙门沿用 typed 键，不再另找。
+
+- 派单已给明确票号（含 issue 链接或等价指称）时：`status: completed` 且 `ticketNumber: N`。
+- 派单是真无票对象（方案/派单/处置案等）：`status: completed` 且 `ticketNumber: null`（或省略）。真无票是合法结果，不入录。
+- 派单看起来有票、但你认不出本庭对象是哪一张：`status: escalate` 并写明 `reason`。识别不了就上抛，不得省略票号假装无录，也不得猜一个号。
+- 不得从候选材料、旁及的他票或任何猜测里挑一个号顶替派单未给出的身份。
+- 传召文自然会提轮次、决定编号、commit sha、邻票号；你认的是本庭对象，不是文中出现的每一个数字。

package/src/audit-escalation.ts

@@ -3,6 +3,7 @@ import type { Usage } from "@earendil-works/pi-ai";
 import type {
   ComplianceDecision,
 } from "./compliance-transport.ts";
+import { readableGateItem } from "./readable-gate-item.ts";
 
 export const AUDIT_ESCALATION_KIND = "audit_escalation" as const;
 
@@ -126,17 +127,17 @@ function humanDecisionText(
     lines.push(`Reason: ${result.reason}`);
   }
   if (Array.isArray(result.conflicts)) {
-    lines.push("Conflicts:", ...result.conflicts.map((conflict) => `- ${conflict}`));
+    lines.push("Conflicts:", ...result.conflicts.map((conflict) => `- ${readableGateItem(conflict)}`));
   }
   if (officer !== undefined && Array.isArray(result.findings) && result.findings.length > 0) {
-    lines.push("Findings:", ...result.findings.map((finding) => `- ${finding}`));
+    lines.push("Findings:", ...result.findings.map((finding) => `- ${readableGateItem(finding)}`));
   }
   const gate = result.auditDecisionGate;
   if (gate !== null && typeof gate === "object" && !Array.isArray(gate)) {
     const record = gate as Record<string, unknown>;
     if (typeof record.question === "string") lines.push(`Question: ${record.question}`);
     if (Array.isArray(record.options)) {
-      lines.push("Options:", ...record.options.map((option) => `- ${option}`));
+      lines.push("Options:", ...record.options.map((option) => `- ${readableGateItem(option)}`));
     }
   }
   return lines.join("\n");

package/src/diarist-contracts.ts

@@ -1,6 +1,6 @@
 /**
  * Public 起居郎 (diarist) terminating receipt contracts — ADR 0075 `diarist-is-role`.
- * Lawful explicit release: completed, with empty or nonempty selections.
+ * Lawful explicit releases: completed (入录选择) | escalate (认不出本庭对象上抛).
  * Machine facts about the volume come from the mechanical sitian seam, never
  * from model self-report (锚定宪法); this module owns the receipt shape only.
  */
@@ -8,11 +8,12 @@
 export const DIARIST_OUTPUT_TOOL_NAME = "ak_diarist_output";
 export const DIARIST_ACCEPTED_TEXT = "起居郎回执已接受";
 
-/** Internal transport: frozen candidate-catalog path for this turn's ticket. */
+/** Internal transport: frozen candidate-catalog path for this turn. */
 export const DIARIST_SOURCES_FLAG = {
   name: "ak-diarist-sources",
   definition: {
-    description: "Frozen per-ticket source catalog the diarist selects from",
+    description:
+      "Frozen source catalog the diarist selects from (may be unbound until LLM asserts ticketNumber)",
     type: "string" as const,
   },
 } as const;
@@ -27,10 +28,22 @@ export type DiaristSelection = {
   readonly note?: string;
 };
 
-export type DiaristOutput = {
-  readonly status: "completed";
-  readonly selections: readonly DiaristSelection[];
-};
+export type DiaristOutput =
+  | {
+      readonly status: "completed";
+      readonly selections: readonly DiaristSelection[];
+      /**
+       * Typed court-target assertion (ADR 0075 `diarist-resolves-ticket-llm-layer`).
+       * Positive integer = 本庭对象=票N; null/absent = true-unbound (真无票→无录).
+       * Mechanical layer verifies N; verification failure is failure, never 无录.
+       */
+      readonly ticketNumber?: number | null;
+    }
+  | {
+      /** LLM cannot tell which ticket this summons is about — escalate, never wash into 无录. */
+      readonly status: "escalate";
+      readonly reason: string;
+    };
 
 export function validateRecordedDiaristOutput(value: unknown): DiaristOutput {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -42,7 +55,7 @@ export function validateRecordedDiaristOutput(value: unknown): DiaristOutput {
   } catch {
     throw new Error("Diarist output has no execution discriminator");
   }
-  if (status === "completed") {
+  if (status === "completed" || status === "escalate") {
     return value as DiaristOutput;
   }
   throw new Error("Diarist output has no execution discriminator");
@@ -73,4 +86,3 @@ export function projectDiaristSelections(value: unknown): DiaristSelection[] {
   }
   return out;
 }
-

package/src/diarist-role.ts

@@ -21,8 +21,19 @@ export const diaristOutputSchema = withInfrastructureFailureDeclaration(
   openToolObject(
     Type.Object({
       status: Type.Unknown({
-        description: "completed — 形状指引，非 schema 闸",
+        description: "completed | escalate — 形状指引，非 schema 闸",
       }),
+      ticketNumber: Type.Optional(
+        Type.Unknown({
+          description:
+            "本庭对象票号（正整数）或 null/省略＝真无票；机械验真后下游走 typed 键；认不出用 status=escalate，不洗成无录",
+        }),
+      ),
+      reason: Type.Optional(
+        Type.String({
+          description: "status 为 escalate 时：认不出本庭对象的原因",
+        }),
+      ),
       selections: Type.Array(
         Type.Object(
           {
@@ -36,7 +47,7 @@ export const diaristOutputSchema = withInfrastructureFailureDeclaration(
           },
           { additionalProperties: true, description: "一条入录选择" },
         ),
-        { description: "入录选择；空列表合法完局" },
+        { description: "入录选择；空列表合法完局；escalate 时可不交" },
       ),
     }),
   ),
@@ -54,7 +65,7 @@ export type DiaristRuntimeDependencies = {
 export const DIARIST_TOOL_SPEC = {
   name: DIARIST_OUTPUT_TOOL_NAME,
   label: "起居郎输出",
-  description: "起居郎入录选择。",
-  promptSnippet: "起居郎入录选择",
+  description: "起居郎入录选择与本票身份断言；认不出本庭对象则 escalate。",
+  promptSnippet: "起居郎入录选择与本票身份",
   parameters: diaristOutputSchema,
 } as const;