@akagilnc/pi-workflow-roles 0.1.4929 → 0.1.4949

package/dist/sitian-appender.js

@@ -39,6 +39,36 @@ function sealTornTail(recordFile) {
     appendFileSync(recordFile, "\n", "utf8");
   }
 }
+function appendSitianRecordBlock(input, block) {
+  if (block === "") return;
+  try {
+    const { sessionDir, recordFile, ledgerHome } = resolveSitianRecordPath(input);
+    ensureRealDirectoryTree(ledgerHome, sessionDir);
+    appendFileSync(recordFile, "", "utf8");
+    sealTornTail(recordFile);
+    const identityOf = (line) => {
+      try {
+        const row = JSON.parse(line);
+        return isRecord(row) && typeof row.identity === "string" ? row.identity : void 0;
+      } catch {
+        return void 0;
+      }
+    };
+    const identities = new Set(readFileSync(recordFile, "utf8").split("\n").map(identityOf).filter((id) => id !== void 0));
+    for (const line of block.match(/[^\n]*\n|[^\n]+$/g) ?? []) {
+      const identity = identityOf(line);
+      if (identity !== void 0 && identities.has(identity)) continue;
+      appendFileSync(recordFile, line, "utf8");
+      if (identity !== void 0) identities.add(identity);
+    }
+  } catch (error) {
+    if (error instanceof SitianInfrastructureError) throw error;
+    throw new SitianInfrastructureError(
+      `Sitian appender persistence failure: ${errorText(error)}`,
+      { cause: error }
+    );
+  }
+}
 function findIdentityPointer(recordFile, identity, kind, level) {
   if (!existsSync(recordFile)) return void 0;
   const text = readFileSync(recordFile, "utf8");
@@ -170,6 +200,9 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     );
     sessionDir = paths.sessionDir;
     recordFile = paths.recordFile;
+  } else if (category === "ticket-provenance" && input.runDirectory !== void 0) {
+    sessionDir = input.runDirectory;
+    recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
   } else {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
@@ -177,6 +210,9 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     sessionDir = join(dirname(input.sessionParent), category);
     recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
   }
+  if (!physicallyContainedIn(ledgerHome, sessionDir)) {
+    throw new Error("Sitian record ownership requires a directory inside the ledger home");
+  }
   return { sessionDir, recordFile, ledgerHome };
 }
 function projectTicketRecordsPathShape() {
@@ -188,7 +224,7 @@ function projectTicketRecordsPathShape() {
   return recordFile.replace(/\\/g, "/");
 }
 function resolveSitianRecordPath(input) {
-  const ledgerHome = input.home !== void 0 && input.home.length > 0 ? resolveActivationLedgerHome(input.home) : resolveActivationLedgerHomeForPath(input.sessionParent);
+  const ledgerHome = input.home !== void 0 && input.home.length > 0 ? resolveActivationLedgerHome(input.home) : resolveActivationLedgerHomeForPath(input.runDirectory ?? input.sessionParent);
   return resolveSitianRecordPathInLedger(input, ledgerHome);
 }
 function appendSitianRecord(input) {
@@ -226,6 +262,7 @@ function appendSitianRecord(input) {
 export {
   S4_SUBMISSION_LEDGER_KINDS,
   appendSitianRecord,
+  appendSitianRecordBlock,
   projectTicketRecordsPathShape,
   resolveSitianRecordPath,
   resolveSitianRecordPathInLedger,

package/dist/ticket-provenance-contracts.js

@@ -82,7 +82,7 @@ export function projectTicketProvenanceSessions(value) {
 export function projectTicketProvenanceHeader(value) {
     if (!isRecord(value))
         return undefined;
-    const ticket = positiveInteger(value.ticket);
+    const ticket = value.ticket === null ? null : positiveInteger(value.ticket);
     if (ticket === undefined)
         return undefined;
     if (typeof value.repo !== "string")

package/dist/ticket-provenance.js

@@ -6,14 +6,14 @@
  */
 import { createHash } from "node:crypto";
 import { appendFileSync } from "node:fs";
-import { readFile } from "node:fs/promises";
+import { readFile, unlink } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import { ensureRealDirectoryTree, errnoCode, packageMachineHome, physicalPathIdentity, physicallyContainedIn, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
 import { readLedgerSessionJsonlLines, } from "./ledger-session-read.js";
 import { isSafePositiveTicketNumber } from "./run-ticket-number.js";
 import { adaptSessionDialogue, nativeEventId } from "./session-dialogue.js";
-import { appendSitianRecord, resolveSitianRecordPath, } from "./sitian-facade.js";
+import { appendSitianRecordBlock, appendSitianRecord, resolveSitianRecordPath, } from "./sitian-facade.js";
 import { TICKET_PROVENANCE_KIND, projectTicketProvenanceHeader, projectTicketProvenanceLine, projectTicketProvenanceSessions, } from "./ticket-provenance-contracts.js";
 /**
  * Typed input failure for diarist bounds/session path (reask, not infrastructure).
@@ -73,11 +73,12 @@ export function ticketProvenanceSubject(ticketNumber) {
     return String(ticketNumber);
 }
 /** Topology input only — no destination parameter (ADR 0065 record-entry). */
-function ticketProvenanceRecordInput(ticketNumber, cwd, home) {
+function ticketProvenanceRecordInput(ticketNumber, cwd, home, runDirectory) {
     return {
         level: "event",
         kind: TICKET_PROVENANCE_KIND,
-        subject: ticketProvenanceSubject(ticketNumber),
+        ...(ticketNumber === null ? {} : { subject: ticketProvenanceSubject(ticketNumber) }),
+        ...(runDirectory === undefined ? {} : { runDirectory }),
         cwd,
         ...(home === undefined ? {} : { home }),
     };
@@ -140,8 +141,10 @@ function projectTicketProvenanceCommit(value) {
     return { timestamp: record.timestamp, sessions, lines };
 }
 /** Read the unique diary file (empty/absent → no header, no lines). */
-export async function readTicketProvenance(ticketNumber, cwd, home) {
-    const { recordFile } = resolveTicketProvenanceVolume(ticketNumber, cwd, home);
+export async function readTicketProvenance(ticketNumber, cwd, home, runDirectory) {
+    const { recordFile } = ticketNumber === null
+        ? resolveSitianRecordPath(ticketProvenanceRecordInput(null, cwd, home, runDirectory))
+        : resolveTicketProvenanceVolume(ticketNumber, cwd, home);
     let text;
     try {
         text = await readFile(recordFile, "utf8");
@@ -252,7 +255,7 @@ export async function readTicketProvenance(ticketNumber, cwd, home) {
                 repo: header?.repo ?? resolveBookKeyFromGit(cwd),
                 ticket: ticketNumber,
                 createdAt: header?.createdAt ?? now,
-                updatedAt: now,
+                updatedAt: header?.updatedAt !== undefined && header.updatedAt > now ? header.updatedAt : now,
                 sessions: merged.sessions,
             };
             const carried = lines.map((entry) => ({
@@ -293,6 +296,21 @@ export function ensureTicketProvenanceVolume(ticketNumber, cwd, home) {
     appendFileSync(path.recordFile, "", "utf8");
     return { recordFile: path.recordFile, volumeDir: path.sessionDir };
 }
+/** Assign a run-owned unbound diary as its original block through Sitian. */
+export async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
+    const source = join(runDirectory, "records.jsonl");
+    let content;
+    try {
+        content = await readFile(source, "utf8");
+    }
+    catch (error) {
+        if (errnoCode(error) === "ENOENT")
+            return;
+        throw error;
+    }
+    appendSitianRecordBlock(ticketProvenanceRecordInput(ticketNumber, cwd, home), content);
+    await unlink(source);
+}
 /**
  * Resolve a bound endpoint against this round's session lines.
  * id → first physical line carrying that native id; line → that 1-based line.
@@ -583,7 +601,7 @@ async function projectSessionRanges(input) {
  * Persistence appends one immutable commit through the Sitian appender seam.
  */
 export async function reprojectTicketProvenance(input) {
-    const prior = await readTicketProvenance(input.ticketNumber, input.cwd, input.home);
+    const prior = await readTicketProvenance(input.ticketNumber, input.cwd, input.home, input.runDirectory);
     if (input.sessions.length === 0) {
         const now = new Date().toISOString();
         return {
@@ -663,7 +681,7 @@ export async function reprojectTicketProvenance(input) {
     });
     const identity = `ticket-provenance:${createHash("sha256").update(identityMaterial).digest("hex")}`;
     const pointer = appendSitianRecord({
-        ...ticketProvenanceRecordInput(input.ticketNumber, input.cwd, input.home),
+        ...ticketProvenanceRecordInput(input.ticketNumber, input.cwd, input.home, input.runDirectory),
         identity,
         payload: {
             type: "ticket-provenance-append",
@@ -671,7 +689,7 @@ export async function reprojectTicketProvenance(input) {
             lines: [...fresh, ...raw],
         },
     });
-    const folded = await readTicketProvenance(input.ticketNumber, input.cwd, input.home);
+    const folded = await readTicketProvenance(input.ticketNumber, input.cwd, input.home, input.runDirectory);
     return {
         recordFile: pointer.recordFile,
         header: folded.header ?? header,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.4929",
+  "version": "0.1.4949",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/coder-output-guide.md

@@ -2,3 +2,4 @@
 
 提交：标题冠 ak-roles: 在最前；forward commit，严禁 amend——改错就再提交一笔，不改历史。
 交卷回执：改动清单与票面逐项对得上；验证证据附命令与结果原文。
+新造通用件：回执写明仓内、语言标准库、包生态各搜了什么、为什么不用。

package/souls/fixer-output-guide.md

@@ -2,3 +2,4 @@
 
 提交：标题冠 ak-roles: 在最前；forward commit，严禁 amend——改错就再提交一笔，不改历史。
 交卷回执：逐 finding 报处置；验证证据按仓级 CLAUDE.md 证据条款：指针（runId/toolCallId）或摘抄结论皆合格，以读者能直接核为准。
+新造通用件：回执写明仓内、语言标准库、包生态各搜了什么、为什么不用。

package/souls/quality-law.md

@@ -8,6 +8,8 @@
 
 取舍位次：过测试 → 显意图 → 无重复 → 最少元素。
 
+生态里已有的不自己造：仓内、语言标准库、包生态有现成件而另写一份，即复杂度缺陷。新造的通用件（序列化、重试、锁、diff、路径处理之类）须答得出搜了这三处各是什么、为什么不用；答不出即封驳。
+
 ## 先搜，再想简单的（owner 2026-09-20）
 
 > 逐字：「请你们思考实现方式的时候。多搜搜互联网，多想简单的方式，不是在那加加加，加一堆烂机制最终还要烧我的token来删！」

package/src/book-topology-record-class-migrators.ts

@@ -522,7 +522,7 @@ function tryBareTicketProvenanceVolume(
   // Legacy SitianRecord rows carry a typed kind — leave them to line placement.
   if (recordClassOfKind(first.value.kind) !== undefined) return undefined;
   const header = projectTicketProvenanceHeader(first.value);
-  if (header === undefined) return undefined;
+  if (header === undefined || header.ticket === null) return undefined;
   return { ticket: header.ticket, body };
 }
 

package/src/diarist-contracts.ts

@@ -23,7 +23,7 @@ export type DiaristOutput =
       readonly status: "completed";
       /**
        * Typed court-target assertion (ADR 0075 `diarist-resolves-ticket-llm-layer`).
-       * Positive integer = 本庭对象=票N; null/absent = true-unbound (真无票→无录).
+       * Positive integer = 本庭对象=票N; null/absent = true-unbound (先录入 unbound).
        * LLM owns recognition; mechanical layer does not re-judge the number.
        */
       readonly ticketNumber?: number | null;

package/src/diarist.ts

@@ -12,7 +12,7 @@ import type { TicketProvenanceSession } from "./ticket-provenance-contracts.ts";
  * Populated by the envelope accept hook — never from model self-report.
  */
 export type DiaristCommitFacts = {
-  readonly ticketNumber: number;
+  readonly ticketNumber: number | null;
   readonly volumeRecordFile: string;
   /** Dialogue lines written by this reproject. */
   readonly lineCount: number;
@@ -24,9 +24,10 @@ export type DiaristCommitFacts = {
  * this seam only copies source facts into the volume.
  */
 export async function commitDiaristProjection(input: {
-  readonly ticketNumber: number;
+  readonly ticketNumber: number | null;
   readonly cwd: string;
   readonly home?: string;
+  readonly runDirectory?: string;
   readonly sessions: readonly TicketProvenanceSession[];
 }): Promise<DiaristCommitFacts> {
   const result = await reprojectTicketProvenance({
@@ -34,6 +35,7 @@ export async function commitDiaristProjection(input: {
     cwd: input.cwd,
     ...(input.home === undefined ? {} : { home: input.home }),
     sessions: input.sessions,
+    ...(input.runDirectory === undefined ? {} : { runDirectory: input.runDirectory }),
   });
   return {
     ticketNumber: input.ticketNumber,

package/src/public-cli/countersign-run.ts

@@ -78,6 +78,7 @@ export type CourtDiaristIdentity =
 
 export type CourtDiaristInvocationResult = {
   readonly identity: CourtDiaristIdentity;
+  readonly admitted?: import("./invocation.ts").AdmittedRoleInvocation;
   readonly failedWithoutEscalate?: { readonly diagnostic: string };
 };
 
@@ -278,6 +279,7 @@ export async function invokeCourtDiarist(
         kind: "escalate",
         diagnostic: courtDiaristEscalateDiagnostic(roleOutcome, submissions),
       },
+      ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
     };
   }
 
@@ -288,6 +290,7 @@ export async function invokeCourtDiarist(
         : result.stderr?.trim() || `exit ${result.exitCode}`;
     return {
       identity: { kind: "unbound" },
+      ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
       failedWithoutEscalate: {
         diagnostic: `court diarist station failed for ${input.failureLabel}: ${diagnostic}`,
       },
@@ -308,10 +311,12 @@ export async function invokeCourtDiarist(
         ticketNumber: asserted,
         ...(courtTicketNumbers === undefined ? {} : { courtTicketNumbers }),
       },
+      ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
     };
   }
   return {
     identity: { kind: "unbound" },
+    ...(result.admitted === undefined ? {} : { admitted: result.admitted }),
   };
 }
 

package/src/public-cli/instruction-seat-run.ts

@@ -4,7 +4,7 @@
  * starts two ordinary single-axis runs here. Countersign keeps deferred
  * identity on this entry; the court diarist station stays in countersign-run.
  */
-import { resolve } from "node:path";
+import { resolve, sep } from "node:path";
 
 import type { DurablePrincipalAuthority, RoleTurnRequest } from "../host-contracts.ts";
 import { isSafePositiveTicketNumber, readBoardTicketNumber } from "../run-ticket-number.ts";
@@ -32,6 +32,7 @@ import {
   materializeCountersignInvocation,
   persistAdmittedSourceRunPath,
   recordAdmittedCorrelation,
+  recordChildDiaristRun,
   relocateAdmittedRunToTicket,
   withPreparedAttachments,
   type AdmittedCountersignInvocation,
@@ -429,6 +430,7 @@ async function runCountersignBody(
       let typedTicket: number | undefined;
       let typedCourtTicketNumbers: readonly number[] | undefined;
       let identityDiaristRan = false;
+      let unboundDiaristRunId: string | undefined;
 
       if (env.runCourtDiaristStation === undefined) {
         let outcome: Awaited<ReturnType<typeof invokeCourtDiarist>>;
@@ -452,6 +454,9 @@ async function runCountersignBody(
           }, seatAdapters(admitted, env), env.principalAuthority, io) as SeatRunResult;
         }
         identityDiaristRan = true;
+        if (outcome.admitted?.runDirectory.includes(`${sep}unbound${sep}runs${sep}`)) {
+          unboundDiaristRunId = outcome.admitted.runId;
+        }
         if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== undefined) {
           const diagnostic = outcome.identity.kind === "escalate"
             ? outcome.identity.diagnostic
@@ -459,6 +464,7 @@ async function runCountersignBody(
           await materializeAdmission(
             isSafePositiveTicketNumber(env.boundTicketNumber) ? env.boundTicketNumber : undefined,
           );
+          if (unboundDiaristRunId !== undefined) await recordChildDiaristRun(admitted, unboundDiaristRunId);
           await markRunAdmitted(admitted, env.principalAuthority);
           return await presentControlledFailure(admitted, {
             timedOut: false,
@@ -479,6 +485,9 @@ async function runCountersignBody(
 
       await materializeAdmission(typedTicket);
       await markRunAdmitted(admitted, env.principalAuthority);
+      if (unboundDiaristRunId !== undefined) {
+        await recordChildDiaristRun(admitted, unboundDiaristRunId);
+      }
       if (gateParentRunPath !== undefined) {
         await persistAdmittedSourceRunPath(admitted, gateParentRunPath);
         admitted = { ...admitted, sourceRunPath: gateParentRunPath };
@@ -745,6 +754,9 @@ export async function runPublicInstructionSeat(
         ...(env.signal === undefined ? {} : { signal: env.signal }),
         ...(env.hostAdapters === undefined ? {} : { hostAdapters: env.hostAdapters }),
       }, io);
+      if (outcome.admitted?.runDirectory.includes(`${sep}unbound${sep}runs${sep}`)) {
+        await recordChildDiaristRun(admitted, outcome.admitted.runId);
+      }
       if (outcome.identity.kind === "escalate" || outcome.failedWithoutEscalate !== undefined) {
         const diagnostic = outcome.identity.kind === "escalate"
           ? outcome.identity.diagnostic
@@ -758,6 +770,9 @@ export async function runPublicInstructionSeat(
       }
       if (outcome.identity.kind === "ticket") {
         try {
+          if (outcome.admitted === undefined) throw new Error("court diarist ticket has no admitted run");
+          await bindAdmittedTicketNumber(outcome.admitted, outcome.identity.ticketNumber);
+          await relocateAdmittedRunToTicket(outcome.admitted, env.principalAuthority);
           await bindAdmittedTicketNumber(admitted, outcome.identity.ticketNumber);
           await relocateAdmittedRunToTicket(admitted, env.principalAuthority);
         } catch (error) {

package/src/public-cli/invocation.ts

@@ -83,6 +83,7 @@ import {
   type MergerInput,
 } from "../merger-contracts.ts";
 import { sha256Hex } from "../sha256.ts";
+import { rehomeUnboundTicketProvenance } from "../ticket-provenance.ts";
 import { uuidv7 } from "../uuidv7.ts";
 import {
   NOTARY_FIXED_KICKOFF,
@@ -661,9 +662,36 @@ export async function relocateAdmittedRunToTicket(
   // Keep that failure before the filesystem commit point.
   const principal = authority.seal(target);
 
-  // Rename is the only durable commit. Persisted paths are resolved from typed
-  // run identity on read, so online relocation never writes unleased peers or
-  // pretends a directory rename plus page rewrites form one transaction.
+  if (admitted.role !== "diarist") {
+    const parentPage = JSON.parse(await readFile(admitted.admittedRequestPath, "utf8")) as Record<string, unknown>;
+    const childRunIds = parentPage.childDiaristRunIds;
+    for (const childRunId of Array.isArray(childRunIds) ? childRunIds : []) {
+      if (typeof childRunId !== "string") continue;
+      const childDirectory = join(dirname(oldRunDirectory), `${childRunId}@diarist`);
+      const childTarget = roleRunPlacement(ledgerHome, {
+        bookKey: admitted.bookKey,
+        subject: { ticketNumber: admitted.ticketNumber },
+        runId: childRunId,
+        role: "diarist",
+      });
+      authority.seal(childTarget);
+      if (!existsSync(childDirectory) && existsSync(childTarget.runDirectory)) continue;
+      await bindTicketNumberOnRunDirectory(childDirectory, admitted.ticketNumber);
+      await rehomeUnboundTicketProvenance(childDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
+      ensureRoleRunDirectory(ledgerHome, dirname(childTarget.runDirectory));
+      await rename(childDirectory, childTarget.runDirectory);
+    }
+  }
+
+  // An identity diarist can file before its caller obtains a ticket. Both its
+  // own bind and the caller's later bind use this existing relocation seam.
+  if (admitted.role === "diarist") {
+    await rehomeUnboundTicketProvenance(oldRunDirectory, admitted.ticketNumber, admitted.projectRoot, homeFromRunDirectory(oldRunDirectory));
+  }
+
+  // Rename commits the run placement. Diary assignment above is an idempotent
+  // Sitian append, not part of an atomic transaction with this directory move.
+  // Persisted paths are resolved from typed run identity on read.
   await rename(oldRunDirectory, target.runDirectory);
 
   // rename moved the open lock inode with the directory. Transfer cleanup
@@ -697,6 +725,19 @@ export async function relocateAdmittedRunToTicket(
   return { oldRunDirectory, newRunDirectory: target.runDirectory };
 }
 
+/** Persist the exact child identity; later parent binding never inspects siblings. */
+export async function recordChildDiaristRun(
+  parent: AdmittedRoleInvocation,
+  childRunId: string,
+): Promise<void> {
+  const page = JSON.parse(await readFile(parent.admittedRequestPath, "utf8")) as Record<string, unknown>;
+  const existing = Array.isArray(page.childDiaristRunIds)
+    ? page.childDiaristRunIds.filter((runId): runId is string => typeof runId === "string")
+    : [];
+  const childDiaristRunIds = existing.includes(childRunId) ? existing : [...existing, childRunId];
+  await writeFile(parent.admittedRequestPath, `${JSON.stringify({ ...page, childDiaristRunIds }, null, 2)}\n`, "utf8");
+}
+
 /**
  * Bind ticket identity onto a run directory's durable pages when the admitted
  * object is not in hand (起居郎 accept hook after LLM assertion, #771).

package/src/role-runtime.ts

@@ -905,29 +905,30 @@ export function createDiaristRoleRuntime(
           if (coords.boundTicketNumber === undefined) {
             await bindTicketNumberOnRunDirectory(coords.runDirectory, ticketNumber);
           }
-          const sessions = projectDiaristSessions(parameters);
-          if (sessions === undefined) {
-            throw new ParentQueueReaskError(DIARIST_BOUNDS_REASK);
-          }
-          let facts;
-          try {
-            facts = await commitDiaristProjection({
-              ticketNumber,
-              cwd: coords.projectRoot,
-              home: coords.home,
-              sessions,
-            });
-          } catch (error) {
-            // Bound/session input failures → reask via typed identity (not message prefix).
-            // Unexpected infrastructure keeps its own identity (do not wash).
-            if (error instanceof ParentQueueReaskError) throw error;
-            if (error instanceof TicketProvenanceInputError) {
-              throw new ParentQueueReaskError(
-                `${DIARIST_BOUNDS_REASK}\n${error.message}`,
-              );
-            }
-            throw error;
+        }
+        const sessions = projectDiaristSessions(parameters);
+        if (sessions === undefined) {
+          throw new ParentQueueReaskError(DIARIST_BOUNDS_REASK);
+        }
+        let facts;
+        try {
+          facts = await commitDiaristProjection({
+            ticketNumber: ticketNumber ?? null,
+            cwd: coords.projectRoot,
+            home: coords.home,
+            runDirectory: coords.runDirectory,
+            sessions,
+          });
+        } catch (error) {
+          // Bound/session input failures → reask via typed identity (not message prefix).
+          // Unexpected infrastructure keeps its own identity (do not wash).
+          if (error instanceof ParentQueueReaskError) throw error;
+          if (error instanceof TicketProvenanceInputError) {
+            throw new ParentQueueReaskError(
+              `${DIARIST_BOUNDS_REASK}\n${error.message}`,
+            );
           }
+          throw error;
         }
         return parameters;
       },

package/src/sitian-appender.ts

@@ -59,6 +59,38 @@ function sealTornTail(recordFile: string): void {
   }
 }
 
+/** Assign already-recorded lines, preserving their original text and malformed lines. */
+export function appendSitianRecordBlock(input: SitianRecordInput, block: string): void {
+  if (block === "") return;
+  try {
+    const { sessionDir, recordFile, ledgerHome } = resolveSitianRecordPath(input);
+    ensureRealDirectoryTree(ledgerHome, sessionDir);
+    appendFileSync(recordFile, "", "utf8");
+    sealTornTail(recordFile);
+    const identityOf = (line: string): string | undefined => {
+      try {
+        const row: unknown = JSON.parse(line);
+        return isRecord(row) && typeof row.identity === "string" ? row.identity : undefined;
+      } catch {
+        return undefined;
+      }
+    };
+    const identities = new Set(readFileSync(recordFile, "utf8").split("\n").map(identityOf).filter((id): id is string => id !== undefined));
+    for (const line of block.match(/[^\n]*\n|[^\n]+$/g) ?? []) {
+      const identity = identityOf(line);
+      if (identity !== undefined && identities.has(identity)) continue;
+      appendFileSync(recordFile, line, "utf8");
+      if (identity !== undefined) identities.add(identity);
+    }
+  } catch (error) {
+    if (error instanceof SitianInfrastructureError) throw error;
+    throw new SitianInfrastructureError(
+      `Sitian appender persistence failure: ${errorText(error)}`,
+      { cause: error },
+    );
+  }
+}
+
 function findIdentityPointer(
   recordFile: string,
   identity: string,
@@ -254,6 +286,9 @@ export function resolveSitianRecordPathInLedger(
     );
     sessionDir = paths.sessionDir;
     recordFile = paths.recordFile;
+  } else if (category === "ticket-provenance" && input.runDirectory !== undefined) {
+    sessionDir = input.runDirectory;
+    recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
   } else {
     if (
       input.sessionParent === undefined
@@ -265,6 +300,9 @@ export function resolveSitianRecordPathInLedger(
     sessionDir = join(dirname(input.sessionParent), category);
     recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
   }
+  if (!physicallyContainedIn(ledgerHome, sessionDir)) {
+    throw new Error("Sitian record ownership requires a directory inside the ledger home");
+  }
 
   return { sessionDir, recordFile, ledgerHome };
 }
@@ -288,7 +326,7 @@ export function resolveSitianRecordPath(input: SitianRecordInput): SitianRecordP
   const ledgerHome =
     input.home !== undefined && input.home.length > 0
       ? resolveActivationLedgerHome(input.home)
-      : resolveActivationLedgerHomeForPath(input.sessionParent);
+      : resolveActivationLedgerHomeForPath(input.runDirectory ?? input.sessionParent);
   return resolveSitianRecordPathInLedger(input, ledgerHome);
 }
 

package/src/sitian-contracts.ts

@@ -63,6 +63,8 @@ export type SitianRecordInput = {
   readonly identity?: string | undefined;
   readonly subject?: SitianSubject | undefined;
   readonly sessionParent?: string | undefined;
+  /** Run owner for ticket provenance before a ticket is known. */
+  readonly runDirectory?: string | undefined;
   readonly priorEventId?: string | undefined;
   readonly timestamp?: string | undefined;
   readonly host?: string | undefined;

package/src/ticket-provenance-contracts.ts

@@ -40,7 +40,7 @@ export type TicketProvenanceSession = {
 /** 读取时折叠出的逻辑册子头。sessions 为累计区间；reopen 与跨宿主并入，不新建册。 */
 export type TicketProvenanceHeader = {
   readonly repo: string;
-  readonly ticket: number;
+  readonly ticket: number | null;
   readonly createdAt: string;
   readonly updatedAt: string;
   readonly sessions: readonly TicketProvenanceSession[];
@@ -132,7 +132,7 @@ export function projectTicketProvenanceHeader(
   value: unknown,
 ): TicketProvenanceHeader | undefined {
   if (!isRecord(value)) return undefined;
-  const ticket = positiveInteger(value.ticket);
+  const ticket = value.ticket === null ? null : positiveInteger(value.ticket);
   if (ticket === undefined) return undefined;
   if (typeof value.repo !== "string") return undefined;
   if (typeof value.createdAt !== "string" || typeof value.updatedAt !== "string") {