@akagilnc/pi-workflow-roles 0.1.3708 → 0.1.3712

package/dist/role-runtime.js

@@ -1,4 +1,5 @@
-import { writeSync } from "node:fs";
+import { readFileSync, writeSync } from "node:fs";
+import { join } from "node:path";
 import { ExplicitInternalActivationError, } from "./host-contracts.js";
 import { recordReviewerDispatchRejectionSync } from "./public-cli/reviewer-dispatch-rejection.js";
 import { Value } from "typebox/value";
@@ -6,7 +7,7 @@ import { sitianReport } from "./sitian-facade.js";
 import { createSubmissionLedgerHost } from "./submission-ledger.js";
 import { createCollectorLedger } from "./collector-ledger.js";
 import { activationTraceRecordSchema, namedActivationCause } from "./activation-trace.js";
-import { resolveActivationLedgerHomeForPath } from "./activation-ledger-topology.js";
+import { homeFromRunDirectory, resolveActivationLedgerHomeForPath, } from "./activation-ledger-topology.js";
 import { appendAcceptedActivationToBook, buildAcceptedActivationFact, correlationIdentityFromEnv, durableSessionPointer, resolveActivationLedgerHome, resolveBookKeyFromGit, } from "./activation-ledger.js";
 import { writeStderrJsonlRecord } from "./stderr-jsonl.js";
 import { createToolExecutionObservationFace, systemToolExecutionObservationMonoNow, writeToolExecutionObservationRecord, } from "./tool-execution-observation.js";
@@ -24,8 +25,8 @@ import { GLEANER_LEFT_ACCEPTED_TEXT, GLEANER_LEFT_BASE_FLAG } from "./gleaner-le
 import { INSPECTOR_TOOL_SPEC, } from "./inspector-role.js";
 import { INSPECTOR_ACCEPTED_TEXT } from "./inspector-contracts.js";
 import { DIARIST_TOOL_SPEC, } from "./diarist-role.js";
-import { DIARIST_ACCEPTED_TEXT, DIARIST_SOURCES_FLAG, projectDiaristSelections, } from "./diarist-contracts.js";
-import { commitDiaristSelections, DiaristTicketVerificationError, loadDiaristSourceCatalog, verifyAssertedTicketNumber, } from "./diarist.js";
+import { DIARIST_ACCEPTED_TEXT, projectDiaristEntries, } from "./diarist-contracts.js";
+import { commitDiaristEntries } from "./diarist.js";
 import { bindTicketNumberOnRunDirectory } from "./public-cli/invocation.js";
 import { GATEKEEPER_TOOL_SPEC, } from "./gatekeeper-role.js";
 import { NAVIGATOR_TOOL_SPEC, } from "./navigator-role.js";
@@ -90,13 +91,6 @@ const GLEANER_LEFT_TRANSPORT_FLAGS = Object.freeze([
         definition: GLEANER_LEFT_BASE_FLAG.definition,
     }),
 ]);
-/** Diarist private transport: frozen source catalog path (ADR 0018 / #708). */
-const DIARIST_TRANSPORT_FLAGS = Object.freeze([
-    Object.freeze({
-        name: DIARIST_SOURCES_FLAG.name,
-        definition: DIARIST_SOURCES_FLAG.definition,
-    }),
-]);
 /**
  * Decode private transport flags into frozen admitted inputs.
  * Envelope-owned; necessary JSON decode only (public --authority-ref owns grammar).
@@ -499,8 +493,9 @@ export function createAuditorRoleRuntime(roleHost, dependencies) {
     };
 }
 /**
- * LLM typed court-target assertion from diarist output (ADR 0075).
+ * LLM typed court-target assertion from diarist output (ADR 0075 / #779).
  * null/absent = true-unbound; positive safe integer = ticket N.
+ * Shape-only read of the typed field — not content judgment of free text.
  * Any other shape fails honestly — never washes into unbound.
  */
 function readDiaristTicketAssertion(submitted) {
@@ -519,21 +514,40 @@ function readDiaristTicketAssertion(submitted) {
             return { kind: "ticket", ticketNumber: n };
         }
     }
-    throw new DiaristTicketVerificationError("assertion-uninterpretable", "diarist ticketNumber must be a safe integer >= 1, null, or absent");
+    throw new Error("diarist ticketNumber must be a safe integer >= 1, null, or absent");
+}
+/** Run coordinates + optional pre-bound ticket from durable pages (#779). */
+function readDiaristRunCoordinates() {
+    const runDirectory = process.env.AK_ROLE_RUN_DIR;
+    if (typeof runDirectory !== "string" || runDirectory.trim() === "") {
+        throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
+    }
+    const admittedPath = join(runDirectory, "admitted-request.json");
+    const admitted = JSON.parse(readFileSync(admittedPath, "utf8"));
+    if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
+        throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
+    }
+    const bound = typeof admitted.ticketNumber === "number" &&
+        Number.isSafeInteger(admitted.ticketNumber) &&
+        admitted.ticketNumber >= 1
+        ? admitted.ticketNumber
+        : undefined;
+    return {
+        runDirectory,
+        projectRoot: admitted.projectRoot,
+        home: homeFromRunDirectory(runDirectory),
+        ...(bound === undefined ? {} : { boundTicketNumber: bound }),
+    };
 }
 /**
- * #708: 起居郎 public seat on the shared filed-officer envelope.
- * Semantic collection happened in this role's own turn; the accept hook runs the
- * mechanical band (ticket verify when first-summons + verbatim reverse-verify →
- * idempotent sitian append → watermark) and records the resulting sitian facts
- * next to the receipt. Machine facts never come from model self-report (锚定宪法).
+ * #708 / #779: 起居郎 public seat on the shared filed-officer envelope.
+ * Semantic collection happened in this role's own turn (LLM finds materials).
+ * Accept hook: bind typed ticket assertion → idempotent sitian append of whole
+ * blocks the LLM submitted. No frozen catalog, no quote/ticket reverse-verify
+ * of LLM output. Machine facts never come from model self-report (锚定宪法).
  */
-export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag) {
-    // This turn's catalog, snapshotted at activate: the candidateIndexes the role
-    // saw and the rows accept commits are the same bytes. Accept never re-reads
-    // the file, so anything written to it mid-turn cannot become a diary entry.
-    let catalog;
-    const runtime = createFiledOfficerRuntime(roleHost, {
+export function createDiaristRoleRuntime(roleHost, dependencies) {
+    return createFiledOfficerRuntime(roleHost, {
         role: "diarist",
         tool: DIARIST_TOOL_SPEC,
         acceptedText: DIARIST_ACCEPTED_TEXT,
@@ -543,8 +557,8 @@ export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag)
                 ? parameters
                 : undefined;
             // LLM cannot identify the court target — escalate without machine facts.
-            // Strip sitian (锚定宪法) and ticketNumber (unverified — must not leak
-            // into caller-visible admitted typed key via decisiveFacts mirror).
+            // Strip sitian (锚定宪法) and ticketNumber (must not leak into
+            // caller-visible admitted typed key via decisiveFacts mirror).
             if (submitted?.status === "escalate") {
                 if (!("sitian" in submitted) && !("ticketNumber" in submitted)) {
                     return submitted;
@@ -555,35 +569,17 @@ export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag)
                 return stripped;
             }
             const assertion = readDiaristTicketAssertion(submitted);
-            // No frozen catalog: only true-unbound is lawful without volume work.
-            // A self-reported `sitian` is not machine fact (锚定宪法).
-            if (catalog === undefined) {
-                if (assertion.kind === "ticket") {
-                    throw new DiaristTicketVerificationError("assertion-uninterpretable", `diarist asserted ticket #${assertion.ticketNumber} but no source catalog was frozen for this turn`);
-                }
-                if (submitted === undefined || !("sitian" in submitted))
-                    return undefined;
-                const stripped = { ...submitted };
-                delete stripped.sitian;
-                return stripped;
-            }
+            const coords = readDiaristRunCoordinates();
             // Already bound before the turn (typed handoff / resume): skip re-recognition
-            // (ADR 0075 已绑定 ticket 优先) and commit under that identity.
-            if (catalog.ticketNumber !== undefined) {
-                const facts = await commitDiaristSelections({
-                    catalog,
-                    selections: projectDiaristSelections(parameters),
-                });
-                return {
-                    ...(submitted ?? { receipt: parameters }),
-                    ticketNumber: catalog.ticketNumber,
-                    sitian: facts,
-                };
-            }
-            // First summons: LLM typed assertion → mechanical verify → bind → commit.
-            // true-unbound → 无录 (no volume). Verification failure throws (失败诚实).
-            // Cannot-identify must arrive as status=escalate above — never as silent unbound.
-            if (assertion.kind === "true-unbound") {
+            // and commit under that identity (ADR 0075 已绑定 ticket 优先).
+            const ticketNumber = coords.boundTicketNumber !== undefined
+                ? coords.boundTicketNumber
+                : assertion.kind === "ticket"
+                    ? assertion.ticketNumber
+                    : undefined;
+            // true-unbound → 无录 (no volume). Cannot-identify must arrive as
+            // status=escalate above — never as silent unbound.
+            if (ticketNumber === undefined) {
                 if (submitted === undefined || !("sitian" in submitted)) {
                     return { ...(submitted ?? { receipt: parameters }), ticketNumber: null };
                 }
@@ -594,43 +590,22 @@ export function createDiaristRoleRuntime(roleHost, dependencies, getSourcesFlag)
                 delete stripped.sitian;
                 return stripped;
             }
-            await verifyAssertedTicketNumber({
-                ticketNumber: assertion.ticketNumber,
-                instruction: catalog.instruction,
-                projectRoot: catalog.projectRoot,
-            });
-            await bindTicketNumberOnRunDirectory(catalog.runDirectory, assertion.ticketNumber);
-            const boundCatalog = {
-                ...catalog,
-                ticketNumber: assertion.ticketNumber,
-            };
-            const facts = await commitDiaristSelections({
-                catalog: boundCatalog,
-                selections: projectDiaristSelections(parameters),
+            if (coords.boundTicketNumber === undefined) {
+                await bindTicketNumberOnRunDirectory(coords.runDirectory, ticketNumber);
+            }
+            const facts = await commitDiaristEntries({
+                ticketNumber,
+                cwd: coords.projectRoot,
+                home: coords.home,
+                entries: projectDiaristEntries(parameters),
             });
             return {
                 ...(submitted ?? { receipt: parameters }),
-                ticketNumber: assertion.ticketNumber,
+                ticketNumber,
                 sitian: facts,
             };
         },
     }, dependencies);
-    return {
-        async activate() {
-            catalog = loadFrozenDiaristCatalog(getSourcesFlag);
-            return runtime.activate();
-        },
-    };
-}
-/** Envelope-owned decode + one-shot load of the frozen catalog (ADR 0018). */
-function loadFrozenDiaristCatalog(getFlag) {
-    const raw = getFlag();
-    if (raw === undefined)
-        return undefined;
-    if (typeof raw !== "string" || raw.trim() === "") {
-        throw new Error("Diarist source catalog flag must be a nonempty path");
-    }
-    return loadDiaristSourceCatalog(raw);
 }
 /** Countersign status words the queue reads (#753). */
 const COUNTERSIGN_QUEUE_STATUSES = new Set(["converged", "continue", "escalate"]);
@@ -695,9 +670,6 @@ export function createRoleRuntimeExtension(dependencies) {
         for (const flag of GLEANER_LEFT_TRANSPORT_FLAGS) {
             roleHost.registerFlag(flag.name, flag.definition);
         }
-        for (const flag of DIARIST_TRANSPORT_FLAGS) {
-            roleHost.registerFlag(flag.name, flag.definition);
-        }
         let admitted = false;
         let selectedRole;
         /** Live Reviewer parent activation for envelope agent_start prompt assembly. */
@@ -1164,7 +1136,7 @@ export function createRoleRuntimeExtension(dependencies) {
                     throw new Error("Diarist runtime dependencies are not configured");
                 return dependencies.loadDiaristSoul();
             },
-        }, () => envelopeHost.host.getFlag(DIARIST_SOURCES_FLAG.name));
+        });
         let sessionMergerGitState = dependencies.mergerGitState;
         const merger = createMergerRoleRuntime(roleHost, {
             async loadSoul() { if (!dependencies.loadMergerSoul)

package/dist/ticket-provenance-contracts.js

@@ -6,11 +6,6 @@
 export const TICKET_PROVENANCE_KIND = "ticket-provenance";
 /** Human-read view filename co-located with the JSONL volume. */
 export const TICKET_PROVENANCE_HUMAN_VIEW = "起居录.md";
-/**
- * Incremental watermark: identities already offered to the collector this ticket
- * (selected or not). Process state next to the volume — not a diary dual-source.
- */
-export const TICKET_PROVENANCE_OFFERED_WATERMARK = "offered-identities.jsonl";
 /** Payload discriminator: diagnostic residue (not a diary body entry). */
 export const TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC = "diagnostic";
 function isRecord(value) {

package/dist/ticket-provenance.js

@@ -3,10 +3,10 @@
  * Write/read via sitian facade only; no parallel destination logic.
  */
 import { createHash } from "node:crypto";
-import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { appendFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { resolveSitianRecordPath, sitianReport, readSitianRecords, } from "./sitian-facade.js";
-import { TICKET_PROVENANCE_HUMAN_VIEW, TICKET_PROVENANCE_KIND, TICKET_PROVENANCE_OFFERED_WATERMARK, TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC, projectTicketProvenanceDiagnostic, projectTicketProvenanceEntry, } from "./ticket-provenance-contracts.js";
+import { TICKET_PROVENANCE_HUMAN_VIEW, TICKET_PROVENANCE_KIND, projectTicketProvenanceDiagnostic, projectTicketProvenanceEntry, } from "./ticket-provenance-contracts.js";
 /** Subject string for ticket-keyed volumes — history follows the ticket. */
 export function ticketProvenanceSubject(ticketNumber) {
     if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
@@ -75,82 +75,8 @@ export function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
         recordFile: path.recordFile,
         volumeDir: path.sessionDir,
         humanViewFile: join(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
-        offeredWatermarkFile: join(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK),
     };
 }
-/** Honest failure when the offered-identity watermark cannot be read as written. */
-export class TicketProvenanceWatermarkError extends Error {
-    code = "ticket-provenance-watermark";
-    reason;
-    constructor(reason, message, options) {
-        super(message, options);
-        this.name = "TicketProvenanceWatermarkError";
-        this.reason = reason;
-    }
-}
-/**
- * Read identities already offered to the collector (append-only watermark).
- * Absent file → empty set. Any non-empty line that is not a JSON object with a
- * non-empty string `identity` throws TicketProvenanceWatermarkError (失败诚实：
- * never interpret corruption as "unseen" and silently re-offer).
- */
-export function readOfferedIdentities(ticketNumber, cwd, home) {
-    const { offeredWatermarkFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
-    if (!existsSync(offeredWatermarkFile))
-        return new Set();
-    let text;
-    try {
-        text = readFileSync(offeredWatermarkFile, "utf8");
-    }
-    catch (error) {
-        throw new TicketProvenanceWatermarkError("unreadable", `ticket-provenance offered watermark unreadable (${offeredWatermarkFile})`, { cause: error });
-    }
-    const seen = new Set();
-    const lines = text.split("\n");
-    for (let index = 0; index < lines.length; index += 1) {
-        const trimmed = lines[index].trim();
-        if (!trimmed)
-            continue;
-        let parsed;
-        try {
-            parsed = JSON.parse(trimmed);
-        }
-        catch (error) {
-            throw new TicketProvenanceWatermarkError("malformed-json", `ticket-provenance offered watermark malformed JSON at line ${index + 1} (${offeredWatermarkFile})`, { cause: error });
-        }
-        if (typeof parsed !== "object" ||
-            parsed === null ||
-            Array.isArray(parsed) ||
-            typeof parsed.identity !== "string" ||
-            parsed.identity.length === 0) {
-            throw new TicketProvenanceWatermarkError("bad-shape", `ticket-provenance offered watermark bad shape at line ${index + 1} (${offeredWatermarkFile})`);
-        }
-        seen.add(parsed.identity);
-    }
-    return seen;
-}
-/**
- * Append offered identities after a successful collector pass (selected or not).
- * Idempotent per identity within the file (skip already-present). Creates volume
- * dir only when writing the first watermark row.
- */
-export function recordOfferedIdentities(input) {
-    if (input.identities.length === 0)
-        return;
-    const { volumeDir, offeredWatermarkFile } = resolveTicketProvenanceVolume(input.ticketNumber, input.cwd, input.home);
-    const already = new Set(readOfferedIdentities(input.ticketNumber, input.cwd, input.home));
-    const rows = [];
-    for (const identity of input.identities) {
-        if (identity.length === 0 || already.has(identity))
-            continue;
-        rows.push(`${JSON.stringify({ identity })}\n`);
-        already.add(identity);
-    }
-    if (rows.length === 0)
-        return;
-    mkdirSync(volumeDir, { recursive: true });
-    appendFileSync(offeredWatermarkFile, rows.join(""), "utf8");
-}
 /** Read projected diary entries + diagnostics for a ticket (empty when volume absent). */
 export async function readTicketProvenance(ticketNumber, cwd, home) {
     const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
@@ -254,79 +180,6 @@ export function ensureTicketProvenanceVolume(ticketNumber, cwd, home) {
     appendFileSync(volume.recordFile, "", "utf8");
     return volume;
 }
-/**
- * Append a typed diagnostic onto the ticket-provenance volume (append-only).
- * Same sitian kind + subject partition as diary entries; payload uses recordClass
- * discriminator — never forged as a source entry. No sidecar / parallel ledger.
- */
-export function appendTicketProvenanceDiagnostic(input) {
-    const subject = ticketProvenanceSubject(input.ticketNumber);
-    // quote-verify: content-stable identity so mid-batch retry does not duplicate.
-    // collector/issue-source: recordedAt keeps per-court failure history.
-    const identityParts = input.diagnostic.diagnosticKind === "quote-verify-failed"
-        ? [
-            subject,
-            input.diagnostic.recordClass,
-            input.diagnostic.diagnosticKind,
-            input.diagnostic.cause,
-            input.diagnostic.reason ?? "",
-        ]
-        : [
-            subject,
-            input.diagnostic.recordClass,
-            input.diagnostic.diagnosticKind,
-            input.diagnostic.recordedAt,
-            input.diagnostic.cause,
-            input.diagnostic.reason ?? "",
-        ];
-    const identity = createHash("sha256")
-        .update(identityParts.join("\u0000"), "utf8")
-        .digest("hex");
-    return sitianReport({
-        level: "event",
-        kind: TICKET_PROVENANCE_KIND,
-        identity,
-        subject,
-        cwd: input.cwd,
-        ...(input.home === undefined ? {} : { home: input.home }),
-        host: input.host ?? "diarist",
-        source: input.source ?? "diarist-diagnostic",
-        payload: input.diagnostic,
-    });
-}
-/** Issue-face source acquisition failure — typed diagnostic on the ticket volume. */
-export function appendIssueSourceFailureDiagnostic(input) {
-    const recordedAt = input.recordedAt ?? new Date().toISOString();
-    return appendTicketProvenanceDiagnostic({
-        ticketNumber: input.ticketNumber,
-        cwd: input.cwd,
-        ...(input.home === undefined ? {} : { home: input.home }),
-        source: "diarist-issue-source",
-        diagnostic: {
-            recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
-            diagnosticKind: "issue-source-failed",
-            cause: input.cause,
-            recordedAt,
-            reason: input.reason,
-        },
-    });
-}
-/** Quote reverse-verify failure — single diagnostic expression (not a diary entry). */
-export function appendQuoteVerifyFailureDiagnostic(input) {
-    const recordedAt = input.recordedAt ?? new Date().toISOString();
-    return appendTicketProvenanceDiagnostic({
-        ticketNumber: input.ticketNumber,
-        cwd: input.cwd,
-        ...(input.home === undefined ? {} : { home: input.home }),
-        source: "diarist-quote-verify",
-        diagnostic: {
-            recordClass: TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC,
-            diagnosticKind: "quote-verify-failed",
-            cause: input.cause,
-            recordedAt,
-        },
-    });
-}
 /** Write the co-located human view next to the JSONL volume (derived, not dual-source).
  * Ensures volume dir exists so empty courts still get the md face. */
 export function writeTicketProvenanceHumanView(input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.3708",
+  "version": "0.1.3712",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/diarist-collect.md

@@ -1,10 +1,20 @@
 # 起居郎收集方法（owner-domain）
 
-本文件是起居郎语义收集的方法真源（ADR 0075 `diarist-llm-collector` / `transcribe-whole-blocks`）。
+本文件是起居郎语义收集的方法真源（ADR 0075 `diarist-llm-collector` / `transcribe-whole-blocks`；#779 调用方无感）。
 
 ## 任务
 
-从本票已冻结的来源块文件中，选出**与本票决策相关**的整块。文件路径见本轮材料中的路径指针，自行读取；不要等别人把正文贴进对话。
+为本案找出决策相关材料，以**整块**交卷入本票起居录。材料由你自己去找——不要等调用方贴路径、附件或预切清单。
+
+## 如何找材料
+
+你是 LLM，自己读：
+
+- 本仓 Claude 会话卷：`~/.claude/projects/` 下与本仓相关的目录（路径里的 `_` 在目录名里常写作 `-`；主 clone 与 worktree 可能共用或分列，自行辨认）
+- 本票票面与评论：用 `gh` 或等价方式读 GitHub issue
+- 票面引用的 ADR 原件：仓内 `docs/adr/`
+
+调用方只给传召文与 `--project`；不附清单、不写候选路径。找不到就如实说明，不编造。
 
 ## 何谓决策相关
 
@@ -16,20 +26,20 @@
 - 陛下（owner）原话、确认、否决、收口条件
 - 为上述裁决提供必要上下文的紧邻块
 
-无关闲聊、纯工具噪声、与本票决策无涉的他票材料不选。
+无关闲聊、纯工具噪声、与本票决策无涉的他票材料不选。相关性由你裁决。
 
 ## 誊录整块
 
-- 入选即整块保留：指向文件中的完整 transcript，不指针化、不摘要替代正文。
-- 引语必须是该块 transcript 内的**连续原文子串**。拼接、改写、跨段拼贴会在机械反验中失败并拒入录。
-- 宁多勿漏：拿不准是否决策相关时入选，由下游反验与人读面承接。
+- 入选即整块保留：交卷对象里写完整 `transcript`，并带上可回指的 `sourceRef`（会话文件+entry、issue URL、ADR path 等）。
+- 不指针化、不摘要替代正文。
+- 宁多勿漏：拿不准是否决策相关时入选。
 
 ## 本票身份
 
-由你（本席 LLM）判断当前要办的是哪张票，在交卷对象上以 typed 字段交出——代码不做认票裁定（ADR 0075 `diarist-resolves-ticket-llm-layer`；owner：代码不准做判断）。机械层只验你断言的号逐字出现于指令且票真实存在；后续衙门沿用 typed 键，不再另找。
+由你（本席 LLM）判断当前要办的是哪张票，在交卷对象上以 typed 字段交出——代码不做认票裁定（ADR 0075 `diarist-resolves-ticket-llm-layer`；owner：代码不准做判断／机械层不判断 LLM 输出）。
 
-- 派单已给明确票号（含 issue 链接或等价指称）时：`status: completed` 且 `ticketNumber: N`。
-- 派单是真无票对象（方案/派单/处置案等）：`status: completed` 且 `ticketNumber: null`（或省略）。真无票是合法结果，不入录。
-- 派单看起来有票、但你认不出本庭对象是哪一张：`status: escalate` 并写明 `reason`。识别不了就上抛，不得省略票号假装无录，也不得猜一个号。
-- 不得从候选材料、旁及的他票或任何猜测里挑一个号顶替派单未给出的身份。
+- 认得出本庭对象：`status: completed` 且 `ticketNumber: N`，并交 `entries`（可空）。
+- 真无票对象（方案/派单/处置案等）：`status: completed` 且 `ticketNumber: null`（或省略）。真无票是合法结果，不入录。
+- 认不出本庭对象是哪一张：`status: escalate` 并写明 `reason`。识别不了就上抛，不得省略票号假装无录，也不得猜一个号。
+- 不得从旁及的他票或任何猜测里挑一个号顶替认不出的身份。
 - 传召文自然会提轮次、决定编号、commit sha、邻票号；你认的是本庭对象，不是文中出现的每一个数字。

package/src/acp-host/role-envelope.ts

@@ -79,7 +79,7 @@ export function projectAcpActivationFlags(request: RoleTurnRequest): Map<string,
         : "casePath" in activation ? activation.casePath
           : "inputPath" in activation ? activation.inputPath
             : "sourceRun" in activation ? activation.sourceRun
-              : "sourcesPath" in activation ? activation.sourcesPath : undefined;
+              : undefined;
     if (path !== undefined) flags.set(inputFlag, path);
   }
   if (activation.role === "fixer" && activation.prerequisitesPath !== undefined) flags.set("ak-fixer-prerequisites", activation.prerequisitesPath);

package/src/adr-path-refs.ts

@@ -1,6 +1,6 @@
 /**
  * Shared docs/adr path extraction from free text (issue body / ticket face).
- * Single authority for reviewer Spec discovery and diarist source enumeration.
+ * Single authority for reviewer Spec discovery.
  *
  * Shape only: segments under docs/adr/ without `..` or empty parts. Real IO
  * confinement still lives at the read seam (ADR 0038).

package/src/diarist-contracts.ts

@@ -1,29 +1,31 @@
 /**
  * Public 起居郎 (diarist) terminating receipt contracts — ADR 0075 `diarist-is-role`.
- * Lawful explicit releases: completed (入录选择) | escalate (认不出本庭对象上抛).
+ * Lawful explicit releases: completed (入录) | escalate (认不出本庭对象上抛).
  * Machine facts about the volume come from the mechanical sitian seam, never
  * from model self-report (锚定宪法); this module owns the receipt shape only.
+ *
+ * #779: no frozen candidate catalog; LLM finds sources and submits whole blocks.
+ * Mechanical layer does not judge LLM output (no quote/ticket/relevance verify).
  */
 
+import type {
+  TicketProvenanceSourceKind,
+  TicketProvenanceSourceRef,
+} from "./ticket-provenance-contracts.ts";
+
 export const DIARIST_OUTPUT_TOOL_NAME = "ak_diarist_output";
 export const DIARIST_ACCEPTED_TEXT = "起居郎回执已接受";
 
-/** Internal transport: frozen candidate-catalog path for this turn. */
-export const DIARIST_SOURCES_FLAG = {
-  name: "ak-diarist-sources",
-  definition: {
-    description:
-      "Frozen source catalog the diarist selects from (may be unbound until LLM asserts ticketNumber)",
-    type: "string" as const,
-  },
-} as const;
-
-/** One selected block reference into the frozen candidate catalog. */
-export type DiaristSelection = {
-  /** Index into the catalog the diarist received. */
-  readonly candidateIndex: number;
-  /** Quotes claimed verbatim from that block (reverse-verified mechanically). */
-  readonly quotes: readonly string[];
+/**
+ * One whole block the diarist chose to enter (ADR 0075 `transcribe-whole-blocks`).
+ * LLM supplies the block bytes + source pointer; mechanical layer appends as-is.
+ */
+export type DiaristEntrySubmission = {
+  readonly sourceKind: TicketProvenanceSourceKind;
+  readonly sourceRef: TicketProvenanceSourceRef;
+  /** Whole-block transcript — not a pointer-only stand-in. */
+  readonly transcript: string;
+  readonly timestamp: string;
   /** Human-facing note (relation to this case). Not a machine gate. */
   readonly note?: string;
 };
@@ -31,13 +33,14 @@ export type DiaristSelection = {
 export type DiaristOutput =
   | {
       readonly status: "completed";
-      readonly selections: readonly DiaristSelection[];
       /**
        * Typed court-target assertion (ADR 0075 `diarist-resolves-ticket-llm-layer`).
        * Positive integer = 本庭对象=票N; null/absent = true-unbound (真无票→无录).
-       * Mechanical layer verifies N; verification failure is failure, never 无录.
+       * LLM owns recognition; mechanical layer does not re-judge the number.
        */
       readonly ticketNumber?: number | null;
+      /** Whole blocks to append under the asserted ticket. Empty list is lawful. */
+      readonly entries?: readonly DiaristEntrySubmission[];
     }
   | {
       /** LLM cannot tell which ticket this summons is about — escalate, never wash into 无录. */
@@ -62,25 +65,38 @@ export function validateRecordedDiaristOutput(value: unknown): DiaristOutput {
 }
 
 /**
- * Lenient projection of submitted selections (第 0 条: shape is not an admission
- * gate). Rows that carry no usable candidateIndex are dropped from the commit,
- * never bounced back at the role.
+ * Lenient projection of submitted entries (第 0 条: shape is not an admission
+ * gate). Rows that cannot form a lawful volume entry are dropped from the
+ * commit, never bounced back at the role. This is write-seam self-check only —
+ * not quote/ticket/relevance judgment of LLM content (#779).
  */
-export function projectDiaristSelections(value: unknown): DiaristSelection[] {
-  const rows = (value as { selections?: unknown } | null)?.selections;
+export function projectDiaristEntries(value: unknown): DiaristEntrySubmission[] {
+  const rows = (value as { entries?: unknown } | null)?.entries;
   if (!Array.isArray(rows)) return [];
-  const out: DiaristSelection[] = [];
+  const out: DiaristEntrySubmission[] = [];
   for (const row of rows) {
     if (row === null || typeof row !== "object" || Array.isArray(row)) continue;
     const record = row as Record<string, unknown>;
-    const index = record.candidateIndex;
-    if (typeof index !== "number" || !Number.isInteger(index) || index < 0) continue;
-    const quotes = Array.isArray(record.quotes)
-      ? record.quotes.filter((q): q is string => typeof q === "string" && q.length > 0)
-      : [];
+    if (typeof record.sourceKind !== "string") continue;
+    if (typeof record.transcript !== "string" || record.transcript.length === 0) continue;
+    if (typeof record.timestamp !== "string" || record.timestamp.length === 0) continue;
+    if (record.sourceRef === null || typeof record.sourceRef !== "object" || Array.isArray(record.sourceRef)) {
+      continue;
+    }
+    const ref = record.sourceRef as Record<string, unknown>;
+    const sourceRef: TicketProvenanceSourceRef = {
+      ...(typeof ref.sessionFile === "string" ? { sessionFile: ref.sessionFile } : {}),
+      ...(typeof ref.entryId === "string" || typeof ref.entryId === "number"
+        ? { entryId: ref.entryId }
+        : {}),
+      ...(typeof ref.path === "string" ? { path: ref.path } : {}),
+      ...(typeof ref.url === "string" ? { url: ref.url } : {}),
+    };
     out.push({
-      candidateIndex: index,
-      quotes,
+      sourceKind: record.sourceKind as TicketProvenanceSourceKind,
+      sourceRef,
+      transcript: record.transcript,
+      timestamp: record.timestamp,
       ...(typeof record.note === "string" ? { note: record.note } : {}),
     });
   }