@akagilnc/pi-workflow-roles 0.1.3708 → 0.1.3712

package/src/host-contracts.ts

@@ -127,11 +127,7 @@ export type RoleTurnActivation =
   | { readonly role: "gatekeeper" }
   | { readonly role: "navigator" }
   | { readonly role: "auditor" }
-  | {
-      readonly role: "diarist";
-      /** Frozen source-catalog path; absent for a true-unbound summons (#708). */
-      readonly sourcesPath?: string;
-    };
+  | { readonly role: "diarist" };
 
 export type RoleTurnContinuation =
   | { readonly kind: "initial"; readonly prompt: string }

package/src/package-contracts/terminating-tools.ts

@@ -303,7 +303,7 @@ export function validateAcceptedLifecycle(
   if (toolName === DIARIST_OUTPUT_TOOL_NAME) {
     // Envelope-owned mechanical sitian facts are runtime-bound on details only
     // (same shape as the Doctor runtime cost); the submitted arguments carry the
-    // role's own selections. Machine facts never come from model self-report.
+    // role's own entries. Machine facts never come from model self-report.
     const { sitian: _mechanical, ...submitted } = details as DiaristOutput & { sitian?: unknown };
     const testimony = validateAcceptedDetails(toolName, argumentsValue);
     if (!deepEqual(testimony, submitted)) throw new Error("accepted tool lifecycle details mismatch");

package/src/packaged-role-registry.ts

@@ -12,10 +12,7 @@ import { COUNTERSIGN_OUTPUT_TOOL_NAME } from "./countersign-contracts.ts";
 import { GLEANER_LEFT_OUTPUT_TOOL_NAME } from "./gleaner-left-contracts.ts";
 import { INSPECTOR_OUTPUT_TOOL_NAME } from "./inspector-contracts.ts";
 import { AUDITOR_OUTPUT_TOOL_NAME } from "./package-contracts/auditor-output.ts";
-import {
-  DIARIST_OUTPUT_TOOL_NAME,
-  DIARIST_SOURCES_FLAG,
-} from "./diarist-contracts.ts";
+import { DIARIST_OUTPUT_TOOL_NAME } from "./diarist-contracts.ts";
 
 /** Shared by public notary and gatekeeper-province notary. */
 export const NOTARY_SESSION_MATERIALS = [
@@ -214,14 +211,13 @@ export const PUBLIC_ROLE_RECORDS = [
     activationStage: "load-and-install",
     sessionMaterials: AUDITOR_PUBLIC_SESSION_MATERIALS,
   },
-  // #708 / ADR 0075 `diarist-is-role`: 起居郎 is a seat like any other. The
-  // frozen source catalog rides the shared input-flag seam; it is absent for a
-  // true-unbound summons (no ticket → no diary).
+  // #708 / ADR 0075 `diarist-is-role` / #779: 起居郎 is a seat like any other.
+  // No input flag — LLM finds materials itself (caller-transparent).
   {
     role: "diarist",
     phases: [null],
     outputTool: DIARIST_OUTPUT_TOOL_NAME,
-    inputFlag: DIARIST_SOURCES_FLAG.name,
+    inputFlag: undefined,
     phaseFlag: undefined,
     activationStage: "load-and-install",
     sessionMaterials: [

package/src/pi/role-turn-host.ts

@@ -149,13 +149,7 @@ function buildActivationFlagArgs(activation: RoleTurnActivation): string[] {
     case "auditor":
       return ["--ak-role", "auditor"];
     case "diarist":
-      return [
-        "--ak-role",
-        "diarist",
-        ...(activation.sourcesPath === undefined
-          ? []
-          : ["--ak-diarist-sources", activation.sourcesPath]),
-      ];
+      return ["--ak-role", "diarist"];
     default: {
       const _exhaustive: never = activation;
       return _exhaustive;

package/src/public-cli/countersign-run.ts

@@ -104,8 +104,7 @@ type CourtDiaristIdentity =
  * Non-zero exit without escalate status is not rethrown here — caller decides
  * whether refresh must fail or first-entry settles controlled failure.
  * When `boundTicketNumber` is set (typed handoff from countersign), diarist
- * freezes under that key so issue face enters the catalog — never mechanical
- * recognition from prose.
+ * binds under that key before the turn — never mechanical recognition from prose.
  */
 async function invokeCourtDiarist(input: {
   readonly instruction: string;
@@ -218,7 +217,7 @@ export async function runCountersignCourtDiaristStation(
       instruction: `整理 #${admitted.ticketNumber} 的本案依据。`,
       projectRoot: admitted.projectRoot,
       failureLabel: `ticket #${admitted.ticketNumber}`,
-      // Refresh holds a typed key — hand it off so freeze loads issue face.
+      // Refresh holds a typed key — hand it off so identity is bound before turn.
       boundTicketNumber: admitted.ticketNumber,
     },
     env,

package/src/public-cli/diarist-run.ts

@@ -1,20 +1,11 @@
 /**
- * Public Diarist (起居郎) Role run — #708 / ADR 0075 `diarist-is-role`.
+ * Public Diarist (起居郎) Role run — #708 / ADR 0075 `diarist-is-role` / #779.
  * Same admit → post-admission → settle shape as the other instruction seats.
- * Semantic collection is the role's own turn; this seat only freezes the
- * mechanical source catalog the turn selects from (`diarist-collector-is-own-turn`).
+ * Semantic collection is the role's own turn: LLM finds materials itself
+ * (no frozen candidate catalog, no path/attachment burden on the caller).
  * Who calls it and in what order is the caller's business (ADR 0010 `no-call-rule`).
  */
-import { existsSync } from "node:fs";
-import { writeFile } from "node:fs/promises";
-import { join } from "node:path";
-
 import type { DurablePrincipalAuthority, RoleTurnRequest } from "../host-contracts.ts";
-import {
-  loadDiaristIssueFace,
-  prepareDiaristSourceCatalog,
-  serializeDiaristSourceCatalog,
-} from "../diarist.ts";
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.ts";
 import { CliUsageError } from "./cli-errors.ts";
 import {
@@ -35,7 +26,6 @@ import {
 import {
   loadResumableDiaristRun,
   markRunAdmitted,
-  readRoleRunIdentity,
   type PublicResumeRequest,
   type SameTicketSummonsMaterials,
 } from "./run-lifecycle.ts";
@@ -57,107 +47,29 @@ export type DiaristRunEnv = PostAdmissionEnv & {
   /**
    * Typed handoff from a caller that already holds a verified ticket key
    * (countersign refresh / post-assert). Never derived from summons prose.
-   * When set: same-ticket resume under that key, else bind-before-freeze so
-   * issue face enters the catalog (ADR 0075 / 0081).
+   * When set: same-ticket resume under that key, else bind before the turn
+   * so identity is already on the run pages (ADR 0075 / 0081).
    */
   boundTicketNumber?: number;
 };
 
-/** Frozen catalog filename inside the run dossier (durable material, not argv). */
-const DIARIST_SOURCE_CATALOG_FILE = "diarist-sources.json" as const;
-
-/** Neutral path identifier only (ADR 0073) — catalog bytes stay on disk. */
-function withDiaristCatalogPath(
-  prompt: string,
-  sourcesPath: string | undefined,
-): string {
-  if (sourcesPath === undefined || sourcesPath.trim() === "") return prompt;
-  return `${prompt}\n\n已冻结来源文件（路径）：\n- ${sourcesPath}`;
-}
-
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildDiaristTurnRequest(
   admitted: AdmittedDiaristInvocation,
   options: RoleTurnRequestProjectionOptions,
-  sourcesPath?: string,
 ): RoleTurnRequest {
-  const continuation =
-    sourcesPath === undefined
-      ? options.continuation
-      : {
-          ...options.continuation,
-          prompt: withDiaristCatalogPath(options.continuation.prompt, sourcesPath),
-        };
   return projectRoleTurnRequest(
     admitted,
-    {
-      activation: {
-        role: "diarist" as const,
-        ...(sourcesPath === undefined ? {} : { sourcesPath }),
-      },
-    },
-    { ...options, continuation },
+    { activation: { role: "diarist" as const } },
+    options,
   );
 }
 
-/**
- * Mechanical source enumeration into a frozen catalog for this turn.
- * Bound summons: establish the per-ticket volume and load the issue face.
- * First-summons (unbound): freeze session candidates + summons text so the LLM
- * turn can assert ticketNumber; accept verifies and mints the volume (ADR 0075).
- * True-unbound is decided by the LLM assertion (null/absent ticketNumber), not
- * by skipping the freeze here.
- *
- * A run that has not settled yet (crash-resume, open-court continuation) keeps
- * the catalog its candidateIndexes were minted against — re-enumerating there
- * would rebind the role's indexes to bytes it never saw. Only a settled run
- * re-enumerates on the next same-ticket summons (ADR 0075 增量).
- */
-async function freezeDiaristSourceCatalog(
-  admitted: AdmittedDiaristInvocation,
-  env: Pick<DiaristRunEnv, "cwd" | "home">,
-): Promise<string> {
-  const path = join(admitted.runDirectory, DIARIST_SOURCE_CATALOG_FILE);
-  if (existsSync(path)) {
-    const identity = await readRoleRunIdentity(admitted.runDirectory);
-    if (identity !== undefined && identity.state !== "terminal") return path;
-  }
-  const issueFace =
-    admitted.ticketNumber === undefined
-      ? undefined
-      : await loadDiaristIssueFace({
-          ticketNumber: admitted.ticketNumber,
-          projectRoot: admitted.projectRoot,
-          home: env.home,
-        });
-  const catalog = await prepareDiaristSourceCatalog({
-    ...(admitted.ticketNumber === undefined
-      ? {}
-      : { ticketNumber: admitted.ticketNumber }),
-    instruction: admitted.instruction,
-    runDirectory: admitted.runDirectory,
-    projectRoot: admitted.projectRoot,
-    cwd: admitted.projectRoot,
-    home: env.home,
-    ...(issueFace === undefined ? {} : { issueFace }),
-    sessionCwds: [admitted.projectRoot, env.cwd],
-  });
-  await writeFile(path, serializeDiaristSourceCatalog(catalog), "utf8");
-  return path;
-}
-
-function diaristAdapters(options?: {
-  beforeDispatch?: (
-    admitted: AdmittedDiaristInvocation,
-  ) => void | Promise<void>;
-}): PostAdmissionAdapters<AdmittedDiaristInvocation> {
+function diaristAdapters(): PostAdmissionAdapters<AdmittedDiaristInvocation> {
   return {
     trySettle: (admitted, authority, scope) =>
       trySettleDiaristTerminalResult(admitted, authority, scope),
     shouldPresentSettled: () => true,
-    ...(options?.beforeDispatch === undefined
-      ? {}
-      : { beforeDispatch: options.beforeDispatch }),
   };
 }
 
@@ -182,11 +94,10 @@ export async function runPublicDiarist(
     throw error;
   }
 
-  // #637 / #771 / ADR 0075: ticket identity is the LLM's typed assertion on this
-  // turn (mechanical verify on accept), OR a typed handoff key already held by
-  // the caller (countersign refresh). Code never pre-judges the summons text
-  // against book-known numbers. First summons without handoff stays unbound
-  // until assert.
+  // #637 / #771 / ADR 0075 / #779: ticket identity is the LLM's typed assertion
+  // on this turn, OR a typed handoff key already held by the caller (countersign
+  // refresh). Code never pre-judges the summons text and never freezes a
+  // candidate catalog. First summons without handoff stays unbound until assert.
 
   const projectRoot = parsed.project ?? env.cwd;
   const handoffTicket = env.boundTicketNumber;
@@ -240,7 +151,7 @@ export async function runPublicDiarist(
 
   await markRunAdmitted(admitted, env.principalAuthority);
 
-  // Typed handoff: bind before freeze so issue face enters the catalog.
+  // Typed handoff: bind before the turn so identity is on durable pages.
   if (
     typeof handoffTicket === "number" &&
     Number.isSafeInteger(handoffTicket) &&
@@ -270,7 +181,6 @@ export async function runPublicDiarist(
       ),
     },
   };
-  // Mutable shell: ticket bind + catalog freeze re-project activation before executeTurn.
   const turnRequest = buildDiaristTurnRequest(admitted, turnProjection);
 
   return await runPostAdmissionOneShot({
@@ -278,15 +188,7 @@ export async function runPublicDiarist(
     env,
     io,
     request: turnRequest,
-    adapters: diaristAdapters({
-      beforeDispatch: async (admittedSeat) => {
-        const sourcesPath = await freezeDiaristSourceCatalog(admittedSeat, env);
-        Object.assign(
-          turnRequest,
-          buildDiaristTurnRequest(admittedSeat, turnProjection, sourcesPath),
-        );
-      },
-    }),
+    adapters: diaristAdapters(),
     ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),
   }).then(async (result) => {
     // Accept may have bound ticket onto durable pages after LLM assertion.
@@ -323,9 +225,7 @@ export async function runPublicDiarist(
 
 /**
  * Resume a previously admitted Diarist run (#708 / ADR 0079 同票传召 = resume).
- * A re-entry into a settled run re-enumerates fresh sources; the offered
- * watermark keeps the pass incremental so already-seen blocks are not
- * re-offered. An unfinished run keeps its frozen catalog (see freeze above).
+ * LLM re-finds materials; entry identity keeps the volume idempotent.
  */
 export async function runPublicDiaristResume(
   request: PublicResumeRequest,
@@ -347,7 +247,6 @@ export async function runPublicDiaristResume(
         admitted.runDirectory,
         effective.summons,
       );
-      const sourcesPath = await freezeDiaristSourceCatalog(admitted, env);
       return buildDiaristTurnRequest(
         admitted,
         resumeTurnRequestProjectionOptions(
@@ -356,7 +255,6 @@ export async function runPublicDiaristResume(
           env,
           summonsPrepared,
         ),
-        sourcesPath,
       );
     },
     adapters: diaristAdapters(),

package/src/role-runtime.ts

@@ -1,4 +1,5 @@
-import { writeSync } from "node:fs";
+import { readFileSync, writeSync } from "node:fs";
+import { join } from "node:path";
 import {
   ExplicitInternalActivationError,
   type HostContext,
@@ -13,7 +14,10 @@ import { createSubmissionLedgerHost } from "./submission-ledger.ts";
 import { createCollectorLedger } from "./collector-ledger.ts";
 
 import { activationTraceRecordSchema, namedActivationCause, type ActivationTraceRecord, type ActivationTraceWriter } from "./activation-trace.ts";
-import { resolveActivationLedgerHomeForPath } from "./activation-ledger-topology.ts";
+import {
+  homeFromRunDirectory,
+  resolveActivationLedgerHomeForPath,
+} from "./activation-ledger-topology.ts";
 import {
   appendAcceptedActivationToBook,
   buildAcceptedActivationFact,
@@ -76,16 +80,9 @@ import {
 } from "./diarist-role.ts";
 import {
   DIARIST_ACCEPTED_TEXT,
-  DIARIST_SOURCES_FLAG,
-  projectDiaristSelections,
+  projectDiaristEntries,
 } from "./diarist-contracts.ts";
-import {
-  commitDiaristSelections,
-  DiaristTicketVerificationError,
-  loadDiaristSourceCatalog,
-  verifyAssertedTicketNumber,
-  type DiaristSourceCatalog,
-} from "./diarist.ts";
+import { commitDiaristEntries } from "./diarist.ts";
 import { bindTicketNumberOnRunDirectory } from "./public-cli/invocation.ts";
 import {
   GATEKEEPER_TOOL_SPEC,
@@ -180,14 +177,6 @@ const GLEANER_LEFT_TRANSPORT_FLAGS = Object.freeze([
   }),
 ] as const);
 
-/** Diarist private transport: frozen source catalog path (ADR 0018 / #708). */
-const DIARIST_TRANSPORT_FLAGS = Object.freeze([
-  Object.freeze({
-    name: DIARIST_SOURCES_FLAG.name,
-    definition: DIARIST_SOURCES_FLAG.definition,
-  }),
-] as const);
-
 /**
  * Decode private transport flags into frozen admitted inputs.
  * Envelope-owned; necessary JSON decode only (public --authority-ref owns grammar).
@@ -926,8 +915,9 @@ export function createAuditorRoleRuntime(
 }
 
 /**
- * LLM typed court-target assertion from diarist output (ADR 0075).
+ * LLM typed court-target assertion from diarist output (ADR 0075 / #779).
  * null/absent = true-unbound; positive safe integer = ticket N.
+ * Shape-only read of the typed field — not content judgment of free text.
  * Any other shape fails honestly — never washes into unbound.
  */
 function readDiaristTicketAssertion(
@@ -947,29 +937,56 @@ function readDiaristTicketAssertion(
       return { kind: "ticket", ticketNumber: n };
     }
   }
-  throw new DiaristTicketVerificationError(
-    "assertion-uninterpretable",
+  throw new Error(
     "diarist ticketNumber must be a safe integer >= 1, null, or absent",
   );
 }
 
+/** Run coordinates + optional pre-bound ticket from durable pages (#779). */
+function readDiaristRunCoordinates(): {
+  readonly runDirectory: string;
+  readonly projectRoot: string;
+  readonly home: string;
+  readonly boundTicketNumber?: number;
+} {
+  const runDirectory = process.env.AK_ROLE_RUN_DIR;
+  if (typeof runDirectory !== "string" || runDirectory.trim() === "") {
+    throw new Error("diarist accept requires AK_ROLE_RUN_DIR");
+  }
+  const admittedPath = join(runDirectory, "admitted-request.json");
+  const admitted = JSON.parse(readFileSync(admittedPath, "utf8")) as Record<
+    string,
+    unknown
+  >;
+  if (typeof admitted.projectRoot !== "string" || admitted.projectRoot.trim() === "") {
+    throw new Error(`diarist admitted-request missing projectRoot (${admittedPath})`);
+  }
+  const bound =
+    typeof admitted.ticketNumber === "number" &&
+    Number.isSafeInteger(admitted.ticketNumber) &&
+    admitted.ticketNumber >= 1
+      ? admitted.ticketNumber
+      : undefined;
+  return {
+    runDirectory,
+    projectRoot: admitted.projectRoot,
+    home: homeFromRunDirectory(runDirectory),
+    ...(bound === undefined ? {} : { boundTicketNumber: bound }),
+  };
+}
+
 /**
- * #708: 起居郎 public seat on the shared filed-officer envelope.
- * Semantic collection happened in this role's own turn; the accept hook runs the
- * mechanical band (ticket verify when first-summons + verbatim reverse-verify →
- * idempotent sitian append → watermark) and records the resulting sitian facts
- * next to the receipt. Machine facts never come from model self-report (锚定宪法).
+ * #708 / #779: 起居郎 public seat on the shared filed-officer envelope.
+ * Semantic collection happened in this role's own turn (LLM finds materials).
+ * Accept hook: bind typed ticket assertion → idempotent sitian append of whole
+ * blocks the LLM submitted. No frozen catalog, no quote/ticket reverse-verify
+ * of LLM output. Machine facts never come from model self-report (锚定宪法).
  */
 export function createDiaristRoleRuntime(
   roleHost: RoleHost,
   dependencies: DiaristRuntimeDependencies,
-  getSourcesFlag: () => unknown,
 ) {
-  // This turn's catalog, snapshotted at activate: the candidateIndexes the role
-  // saw and the rows accept commits are the same bytes. Accept never re-reads
-  // the file, so anything written to it mid-turn cannot become a diary entry.
-  let catalog: DiaristSourceCatalog | undefined;
-  const runtime = createFiledOfficerRuntime(
+  return createFiledOfficerRuntime(
     roleHost,
     {
       role: "diarist",
@@ -983,8 +1000,8 @@ export function createDiaristRoleRuntime(
             : undefined;
 
         // LLM cannot identify the court target — escalate without machine facts.
-        // Strip sitian (锚定宪法) and ticketNumber (unverified — must not leak
-        // into caller-visible admitted typed key via decisiveFacts mirror).
+        // Strip sitian (锚定宪法) and ticketNumber (must not leak into
+        // caller-visible admitted typed key via decisiveFacts mirror).
         if (submitted?.status === "escalate") {
           if (!("sitian" in submitted) && !("ticketNumber" in submitted)) {
             return submitted;
@@ -996,40 +1013,20 @@ export function createDiaristRoleRuntime(
         }
 
         const assertion = readDiaristTicketAssertion(submitted);
-
-        // No frozen catalog: only true-unbound is lawful without volume work.
-        // A self-reported `sitian` is not machine fact (锚定宪法).
-        if (catalog === undefined) {
-          if (assertion.kind === "ticket") {
-            throw new DiaristTicketVerificationError(
-              "assertion-uninterpretable",
-              `diarist asserted ticket #${assertion.ticketNumber} but no source catalog was frozen for this turn`,
-            );
-          }
-          if (submitted === undefined || !("sitian" in submitted)) return undefined;
-          const stripped = { ...submitted };
-          delete stripped.sitian;
-          return stripped;
-        }
+        const coords = readDiaristRunCoordinates();
 
         // Already bound before the turn (typed handoff / resume): skip re-recognition
-        // (ADR 0075 已绑定 ticket 优先) and commit under that identity.
-        if (catalog.ticketNumber !== undefined) {
-          const facts = await commitDiaristSelections({
-            catalog,
-            selections: projectDiaristSelections(parameters),
-          });
-          return {
-            ...(submitted ?? { receipt: parameters }),
-            ticketNumber: catalog.ticketNumber,
-            sitian: facts,
-          };
-        }
+        // and commit under that identity (ADR 0075 已绑定 ticket 优先).
+        const ticketNumber =
+          coords.boundTicketNumber !== undefined
+            ? coords.boundTicketNumber
+            : assertion.kind === "ticket"
+              ? assertion.ticketNumber
+              : undefined;
 
-        // First summons: LLM typed assertion → mechanical verify → bind → commit.
-        // true-unbound → 无录 (no volume). Verification failure throws (失败诚实).
-        // Cannot-identify must arrive as status=escalate above — never as silent unbound.
-        if (assertion.kind === "true-unbound") {
+        // true-unbound → 无录 (no volume). Cannot-identify must arrive as
+        // status=escalate above — never as silent unbound.
+        if (ticketNumber === undefined) {
           if (submitted === undefined || !("sitian" in submitted)) {
             return { ...(submitted ?? { receipt: parameters }), ticketNumber: null };
           }
@@ -1041,50 +1038,25 @@ export function createDiaristRoleRuntime(
           return stripped;
         }
 
-        await verifyAssertedTicketNumber({
-          ticketNumber: assertion.ticketNumber,
-          instruction: catalog.instruction,
-          projectRoot: catalog.projectRoot,
-        });
-        await bindTicketNumberOnRunDirectory(
-          catalog.runDirectory,
-          assertion.ticketNumber,
-        );
-        const boundCatalog: DiaristSourceCatalog = {
-          ...catalog,
-          ticketNumber: assertion.ticketNumber,
-        };
-        const facts = await commitDiaristSelections({
-          catalog: boundCatalog,
-          selections: projectDiaristSelections(parameters),
+        if (coords.boundTicketNumber === undefined) {
+          await bindTicketNumberOnRunDirectory(coords.runDirectory, ticketNumber);
+        }
+
+        const facts = await commitDiaristEntries({
+          ticketNumber,
+          cwd: coords.projectRoot,
+          home: coords.home,
+          entries: projectDiaristEntries(parameters),
         });
         return {
           ...(submitted ?? { receipt: parameters }),
-          ticketNumber: assertion.ticketNumber,
+          ticketNumber,
           sitian: facts,
         };
       },
     },
     dependencies,
   );
-  return {
-    async activate() {
-      catalog = loadFrozenDiaristCatalog(getSourcesFlag);
-      return runtime.activate();
-    },
-  };
-}
-
-/** Envelope-owned decode + one-shot load of the frozen catalog (ADR 0018). */
-function loadFrozenDiaristCatalog(
-  getFlag: () => unknown,
-): DiaristSourceCatalog | undefined {
-  const raw = getFlag();
-  if (raw === undefined) return undefined;
-  if (typeof raw !== "string" || raw.trim() === "") {
-    throw new Error("Diarist source catalog flag must be a nonempty path");
-  }
-  return loadDiaristSourceCatalog(raw);
 }
 
 /** Countersign status words the queue reads (#753). */
@@ -1172,9 +1144,6 @@ export function createRoleRuntimeExtension(
     for (const flag of GLEANER_LEFT_TRANSPORT_FLAGS) {
       roleHost.registerFlag(flag.name, flag.definition);
     }
-    for (const flag of DIARIST_TRANSPORT_FLAGS) {
-      roleHost.registerFlag(flag.name, flag.definition);
-    }
 
     let admitted = false;
     let selectedRole: string | undefined;
@@ -1651,7 +1620,6 @@ export function createRoleRuntimeExtension(
           return dependencies.loadDiaristSoul();
         },
       },
-      () => envelopeHost.host.getFlag(DIARIST_SOURCES_FLAG.name),
     );
     let sessionMergerGitState = dependencies.mergerGitState;
     const merger = createMergerRoleRuntime(roleHost, {

package/src/ticket-provenance-contracts.ts

@@ -9,12 +9,6 @@ export const TICKET_PROVENANCE_KIND = "ticket-provenance" as const;
 /** Human-read view filename co-located with the JSONL volume. */
 export const TICKET_PROVENANCE_HUMAN_VIEW = "起居录.md" as const;
 
-/**
- * Incremental watermark: identities already offered to the collector this ticket
- * (selected or not). Process state next to the volume — not a diary dual-source.
- */
-export const TICKET_PROVENANCE_OFFERED_WATERMARK = "offered-identities.jsonl" as const;
-
 /** Payload discriminator: diagnostic residue (not a diary body entry). */
 export const TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC = "diagnostic" as const;
 
@@ -27,17 +21,17 @@ export type TicketProvenanceSourceKind =
 
 /**
  * How a block entered the volume.
- * - llm-semantic: LLM collector selected the block (after mechanical reverse-verify).
- *   basis.anchors carry ticket # and mechanical/claimed quote notes for audit only.
+ * - llm-semantic: LLM selected and submitted the whole block (#779: no mechanical reverse-verify).
+ *   basis.anchors may carry ticket # / human notes for audit only — not a gate.
  */
 export type TicketProvenanceBasisMethod = "llm-semantic";
 
-/** Basis for inclusion — LLM judgment plus mechanical anchor notes for audit. */
+/** Basis for inclusion — LLM judgment; anchors/notes are audit-only. */
 export type TicketProvenanceBasis = {
   readonly method: TicketProvenanceBasisMethod;
-  /** Mechanical anchors (ticket #, quotes, keywords) used for candidate/verify reference only. */
+  /** Audit notes (ticket #, human labels). Not a machine gate. */
   readonly anchors?: readonly string[];
-  /** Free diagnostic note (failure cause, filter reason). Not a machine gate. */
+  /** Free diagnostic note. Not a machine gate. */
   readonly note?: string;
 };
 
@@ -66,7 +60,7 @@ export type TicketProvenanceEntry = {
  * Separated by recordClass discriminator — never disguised as a source entry.
  */
 export type TicketProvenanceDiagnosticKind =
-  /** Historical rows only — the diarist turn's own failure settles the run (#708). */
+  /** Historical rows only — retained for reading older volumes (#779 deleted writers). */
   | "collector-failed"
   | "issue-source-failed"
   | "quote-verify-failed";