@akagilnc/pi-workflow-roles 0.1.5483 → 0.1.5571

package/dist/run-ticket-number.js

@@ -1,9 +1,35 @@
+import { readPageSync } from "./run-dossier.js";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { isEnoent, isRecord } from "./unknown-value.js";
 const MIGRATION_TICKET_DERIVATION_PAGE = "migration-ticket-derivation.json";
+function isPositiveTicketNumber(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 1;
+}
 function isSafePositiveTicketNumber(value) {
-  return typeof value === "number" && Number.isSafeInteger(value) && value >= 1;
+  return isPositiveTicketNumber(value) && Number.isSafeInteger(value);
+}
+function isTicketNumberString(value) {
+  return typeof value === "string" && /^[1-9][0-9]*$/.test(value);
+}
+function parseTicketNumber(value) {
+  if (isSafePositiveTicketNumber(value)) return value;
+  if (!isTicketNumberString(value)) return void 0;
+  const parsed = Number(value);
+  return isSafePositiveTicketNumber(parsed) ? parsed : void 0;
+}
+function sitianSubjectTicketNumber(subject) {
+  if (typeof subject === "string" || typeof subject === "number") {
+    return parseTicketNumber(subject);
+  }
+  if (subject !== null && typeof subject === "object" && !Array.isArray(subject)) {
+    return parseTicketNumber(subject.ticketNumber);
+  }
+  return void 0;
+}
+function ticketNumberFromSitianSubject(subject) {
+  const parsed = sitianSubjectTicketNumber(subject);
+  return parsed === void 0 ? void 0 : String(parsed);
 }
 function readDeclaredTicketNumber(value) {
   if (isSafePositiveTicketNumber(value)) return value;
@@ -11,8 +37,7 @@ function readDeclaredTicketNumber(value) {
   const trimmed = value.trim();
   const match = /^#?([1-9]\d*)(?!\.\d)(?:\b|$)/.exec(trimmed);
   if (match === null) return void 0;
-  const ticketNumber = Number(match[1]);
-  return isSafePositiveTicketNumber(ticketNumber) ? ticketNumber : void 0;
+  return parseTicketNumber(match[1]);
 }
 function requireSafePositiveTicketNumber(ticketNumber, context = "ticketNumber") {
   if (!isSafePositiveTicketNumber(ticketNumber)) {
@@ -37,13 +62,24 @@ async function readJsonObject(path) {
     throw error;
   }
 }
-async function readBoardPageTicketNumber(runDirectory, page) {
-  const record = await readJsonObject(join(runDirectory, page));
+const LEGACY_BOARD_PAGE = {
+  admitted: "admitted-request.json",
+  invocation: "invocation.json"
+};
+function readBoardPageTicketNumberFromRows(runDirectory, section) {
+  const fromRows = readPageSync(runDirectory, section);
+  return fromRows === void 0 ? void 0 : ticketFromRecord(fromRows);
+}
+async function readBoardPageTicketNumberFromLegacy(runDirectory, section) {
+  const record = await readJsonObject(join(runDirectory, LEGACY_BOARD_PAGE[section]));
   if (record === void 0) return void 0;
   return ticketFromRecord(record);
 }
 async function readBoardTicketNumber(runDirectory) {
-  return await readBoardPageTicketNumber(runDirectory, "admitted-request.json") ?? await readBoardPageTicketNumber(runDirectory, "invocation.json");
+  return readBoardPageTicketNumberFromRows(runDirectory, "admitted") ?? readBoardPageTicketNumberFromRows(runDirectory, "invocation");
+}
+async function readMigrationBoardTicketNumber(runDirectory) {
+  return await readBoardTicketNumber(runDirectory) ?? await readBoardPageTicketNumberFromLegacy(runDirectory, "admitted") ?? await readBoardPageTicketNumberFromLegacy(runDirectory, "invocation");
 }
 async function readMigrationDerivedTicketNumber(runDirectory) {
   const record = await readJsonObject(
@@ -58,10 +94,16 @@ async function readRunTicketNumber(runDirectory) {
 }
 export {
   MIGRATION_TICKET_DERIVATION_PAGE,
+  isPositiveTicketNumber,
   isSafePositiveTicketNumber,
+  isTicketNumberString,
+  parseTicketNumber,
   readBoardTicketNumber,
   readDeclaredTicketNumber,
+  readMigrationBoardTicketNumber,
   readMigrationDerivedTicketNumber,
   readRunTicketNumber,
-  requireSafePositiveTicketNumber
+  requireSafePositiveTicketNumber,
+  sitianSubjectTicketNumber,
+  ticketNumberFromSitianSubject
 };

package/dist/session-assistant-usage.js

@@ -1,25 +1,16 @@
-import { join } from "node:path";
+import { ROLE_RUN_SESSION_FILENAME, sessionFileOf } from "./role-run-placement.js";
+import { readStrictPiSessionJsonl } from "./ledger-session-read.js";
 import { errorText } from "./unknown-value.js";
 export async function readAssistantUsageFromSessionFile(sessionFile) {
-    const { readFile } = await import("node:fs/promises");
-    let text;
+    let rows;
     try {
-        text = await readFile(sessionFile, "utf8");
+        rows = await readStrictPiSessionJsonl(sessionFile);
     }
     catch (error) {
         if (error?.code === "ENOENT")
             return undefined;
-        throw error;
-    }
-    let rows;
-    try {
-        rows = text
-            .trim()
-            .split("\n")
-            .filter(Boolean)
-            .map((line) => JSON.parse(line));
-    }
-    catch (error) {
+        if (!(error instanceof SyntaxError))
+            throw error;
         throw new Error(`session usage parse failed (${sessionFile}): ${errorText(error)}`, { cause: error });
     }
     let total = 0;
@@ -82,11 +73,11 @@ export async function readAssistantUsageFromSessionFile(sessionFile) {
  */
 export function sessionFileFromPublicSummon(summoned) {
     if (typeof summoned.runDirectory === "string" && summoned.runDirectory.trim() !== "") {
-        return join(summoned.runDirectory, "session", "session.jsonl");
+        return sessionFileOf(summoned.runDirectory);
     }
     const fromArtifacts = summoned.terminal?.artifacts
         ?.map((a) => a.path)
-        .find((p) => typeof p === "string" && p.endsWith("session.jsonl"));
+        .find((p) => typeof p === "string" && p.endsWith(ROLE_RUN_SESSION_FILENAME));
     if (fromArtifacts !== undefined)
         return fromArtifacts;
     const outcome = summoned.terminal?.roleOutcome;
@@ -95,7 +86,7 @@ export function sessionFileFromPublicSummon(summoned) {
     const facts = outcome.decisiveFacts;
     const pointer = facts?.runPointer;
     if (typeof pointer === "string" && pointer.trim() !== "") {
-        return join(pointer, "session", "session.jsonl");
+        return sessionFileOf(pointer);
     }
     return undefined;
 }

package/dist/session-identity.js

@@ -1,33 +1,63 @@
-import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { DEFAULT_ROLE_TURN_HOST, lookupHeadlessHostDescription, lookupHostDescription, } from "./host-descriptions.js";
-/** Durable session binding stored beside the host-owned session principal. */
-export function createSessionIdentityAuthority(authority, sessionBindingFile) {
-    const bindingPath = (principal) => join(authority.decode(principal).sessionDirectory, sessionBindingFile);
+import { renderCurrentSync, RUN_STATE_FILE } from "./run-dossier.js";
+import { readSitianRecords, reportRunRecord } from "./sitian-facade.js";
+import { errorText, isRecord } from "./unknown-value.js";
+/** Log record kind of one host-session binding (a host's native session id for this run). */
+export const HOST_SESSION_ID_RECORD_KIND = "host-session-id";
+/**
+ * Durable session binding: one state row per bind, scoped by host name — a run
+ * that changes hosts on resume must never hand one host's native session id to
+ * another. The latest record for the host wins. The public call projects
+ * `current.json` at the bind so host.sessions appears before the host CLI
+ * starts; a refused projection does not undo the binding fact or become a
+ * host/session failure (facts stay in state.jsonl; settlement still renders).
+ */
+export function createSessionIdentityAuthority(authority, hostName) {
+    const runDirectoryOf = (principal) => dirname(authority.decode(principal).sessionDirectory);
     return {
         resolveSessionFile(principal) {
             return authority.decode(principal).sessionFile;
         },
         async load(principal) {
-            try {
-                const value = JSON.parse(await readFile(bindingPath(principal), "utf8"));
-                if (typeof value !== "object" || value === null || typeof value.sessionId !== "string") {
+            const runDirectory = runDirectoryOf(principal);
+            const { records, diagnostics } = await readSitianRecords(join(runDirectory, RUN_STATE_FILE));
+            // Control path fails closed on damaged rows — same class as readPageSync.
+            // Rendering may keep reachable facts; dispatch must not reuse a prior binding
+            // after syntax damage (#1161 C3).
+            if (diagnostics.length > 0) {
+                throw new Error(`${RUN_STATE_FILE} has ${diagnostics.length} malformed row(s); refusing stale session binding: ${runDirectory}`);
+            }
+            let bound;
+            for (const record of records) {
+                if (record.kind !== HOST_SESSION_ID_RECORD_KIND)
+                    continue;
+                // Non-object / cannot name a host: unattributable damage — refuse
+                // (settled C3-payload). Never treat as a skippable "other host" row.
+                if (!isRecord(record.payload) || typeof record.payload.host !== "string") {
                     throw new Error("durable session binding is invalid");
                 }
-                return value.sessionId;
-            }
-            catch (error) {
-                if (error.code === "ENOENT")
-                    return undefined;
-                throw error;
+                // Explicit other host only: that host's bad id must not block this one.
+                if (record.payload.host !== hostName)
+                    continue;
+                // This host's null / non-string sessionId: refuse — do not reuse a prior
+                // binding for the same host (#1161 C3).
+                if (typeof record.payload.sessionId !== "string") {
+                    throw new Error("durable session binding is invalid");
+                }
+                bound = record.payload.sessionId;
             }
+            return bound;
         },
         async bind(principal, sessionId) {
-            const target = bindingPath(principal);
-            await mkdir(dirname(target), { recursive: true });
-            const temporary = `${target}.${process.pid}.tmp`;
-            await writeFile(temporary, `${JSON.stringify({ sessionId })}\n`, { encoding: "utf8", mode: 0o600 });
-            await rename(temporary, target);
+            const runDirectory = runDirectoryOf(principal);
+            reportRunRecord(runDirectory, HOST_SESSION_ID_RECORD_KIND, { host: hostName, sessionId }, "session-identity");
+            try {
+                renderCurrentSync(runDirectory);
+            }
+            catch (error) {
+                process.stderr.write(`[session-identity] current.json render refused after host-session-id; binding fact kept: ${runDirectory}: ${errorText(error)}\n`);
+            }
         },
     };
 }
@@ -42,7 +72,7 @@ export async function readStoredHostSessionId(host, authority, principal) {
     const description = lookupHostDescription(host) ?? lookupHeadlessHostDescription(host);
     if (description === undefined)
         return undefined;
-    const sessionId = await createSessionIdentityAuthority(authority, description.sessionBindingFile).load(principal);
+    const sessionId = await createSessionIdentityAuthority(authority, host).load(principal);
     if (sessionId === undefined || sessionId === "")
         return undefined;
     return sessionId;

package/dist/sitian-appender.js

@@ -1,6 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { appendFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { basename, dirname, join } from "node:path";
+import { parseRunLeaf, sessionDirectoryOf } from "./role-run-placement.js";
+import { RUN_HISTORY_FILE, RUN_HISTORY_KINDS, RUN_LOG_FILE, RUN_STATE_FILE, RUN_STATE_KINDS } from "./run-dossier-files.js";
+import { ticketNumberFromSitianSubject } from "./run-ticket-number.js";
 import { resolveBookKeyFromGit } from "./activation-ledger-git.js";
 import {
   activationBookDirectory,
@@ -27,27 +30,26 @@ function appendSitianRecordBlock(input, block) {
     );
   }
 }
-const S4_SUBMISSION_LEDGER_KINDS = /* @__PURE__ */ new Set([
-  "candidate",
-  "roundContext",
-  "outcome",
-  "sealed",
-  "post-seal-anomaly"
-]);
 function resolveSitianVolumeCategory(kind) {
-  if (S4_SUBMISSION_LEDGER_KINDS.has(kind)) {
-    return "submission-ledger";
-  }
   return kind;
 }
 const SITIAN_RECORDS_LEAF = "records.jsonl";
+function sitianVolumeDirectory(sessionDirectory, category) {
+  return join(sessionDirectory, category);
+}
+function sitianRunVolumeDirectory(runDirectory, category) {
+  return sitianVolumeDirectory(sessionDirectoryOf(runDirectory), category);
+}
+function sitianVolumeRecordsFile(volumeDirectory) {
+  return join(volumeDirectory, SITIAN_RECORDS_LEAF);
+}
 function ticketProvenanceUnderBookPaths(ledgerHome, bookKey, ticketId) {
   const sessionDir = join(activationBookDirectory(ledgerHome, bookKey), ticketId);
-  return { sessionDir, recordFile: join(sessionDir, SITIAN_RECORDS_LEAF) };
+  return { sessionDir, recordFile: sitianVolumeRecordsFile(sessionDir) };
 }
 function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
-  const ticketNumber = category === "ticket-provenance" ? typeof input.subject === "string" && /^[1-9][0-9]*$/.test(input.subject) ? input.subject : typeof input.subject === "object" && typeof input.subject.ticketNumber === "number" && Number.isSafeInteger(input.subject.ticketNumber) && input.subject.ticketNumber > 0 ? String(input.subject.ticketNumber) : void 0 : void 0;
+  const ticketNumber = category === "ticket-provenance" ? ticketNumberFromSitianSubject(input.subject) : void 0;
   let sessionDir;
   let recordFile;
   if (ticketNumber !== void 0) {
@@ -60,13 +62,20 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
     recordFile = paths.recordFile;
   } else if (category === "ticket-provenance" && input.runDirectory !== void 0) {
     sessionDir = input.runDirectory;
-    recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
+    recordFile = join(sessionDir, RUN_HISTORY_FILE);
   } else {
     if (input.sessionParent === void 0 || input.sessionParent.length === 0 || !physicallyContainedIn(ledgerHome, input.sessionParent)) {
       throw new Error("Sitian record ownership requires a parent session inside the ledger home");
     }
-    sessionDir = join(dirname(input.sessionParent), category);
-    recordFile = join(sessionDir, SITIAN_RECORDS_LEAF);
+    const sessionParentDir = dirname(input.sessionParent);
+    const runDirectory = dirname(sessionParentDir);
+    if (basename(sessionParentDir) === "session" && parseRunLeaf(basename(runDirectory)) !== void 0) {
+      sessionDir = runDirectory;
+      recordFile = join(runDirectory, RUN_HISTORY_KINDS.has(input.kind) ? RUN_HISTORY_FILE : RUN_STATE_KINDS.has(input.kind) ? RUN_STATE_FILE : RUN_LOG_FILE);
+    } else {
+      sessionDir = sitianVolumeDirectory(sessionParentDir, category);
+      recordFile = sitianVolumeRecordsFile(sessionDir);
+    }
   }
   if (!physicallyContainedIn(ledgerHome, sessionDir)) {
     throw new Error("Sitian record ownership requires a directory inside the ledger home");
@@ -115,10 +124,12 @@ function appendSitianRecord(input) {
   }
 }
 export {
-  S4_SUBMISSION_LEDGER_KINDS,
   appendSitianRecord,
   appendSitianRecordBlock,
   resolveSitianRecordPath,
   resolveSitianRecordPathInLedger,
-  resolveSitianVolumeCategory
+  resolveSitianVolumeCategory,
+  sitianRunVolumeDirectory,
+  sitianVolumeDirectory,
+  sitianVolumeRecordsFile
 };

package/dist/sitian-facade.js

@@ -1,3 +1,4 @@
+import { sessionFileOf } from "./role-run-placement.js";
 import { appendSitianRecord } from "./sitian-appender.js";
 export * from "./sitian-contracts.js";
 export * from "./sitian-appender.js";
@@ -5,6 +6,16 @@ export * from "./sitian-reader.js";
 function sitianReport(input) {
   return appendSitianRecord(input);
 }
+function reportRunRecord(runDirectory, kind, payload, source) {
+  return appendSitianRecord({
+    level: "event",
+    kind,
+    sessionParent: sessionFileOf(runDirectory),
+    source,
+    payload
+  });
+}
 export {
+  reportRunRecord,
   sitianReport
 };

package/dist/sitian-reader.js

@@ -1,41 +1,56 @@
-import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
-import { isRecord, errorText } from "./unknown-value.js";
-async function readSitianRecords(recordFile) {
-  if (!existsSync(recordFile)) {
-    return { records: [], diagnostics: [] };
+import { isRecord, errorText, isEnoent } from "./unknown-value.js";
+function decodeSitianRecordLine(line, lineNumber) {
+  if (!line.trim()) return void 0;
+  try {
+    const parsed = JSON.parse(line);
+    if (isRecord(parsed)) {
+      return { ok: true, record: parsed };
+    }
+    const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
+    return {
+      ok: false,
+      diagnostic: {
+        kind: "malformed",
+        line: lineNumber,
+        raw: line,
+        error: `expected JSON object, got ${typeDesc}`
+      }
+    };
+  } catch (error) {
+    return {
+      ok: false,
+      diagnostic: {
+        kind: "malformed",
+        line: lineNumber,
+        raw: line,
+        error: errorText(error)
+      }
+    };
   }
-  const text = await readFile(recordFile, "utf8");
+}
+function parseSitianRecordText(text) {
   const lines = text.split("\n");
   const records = [];
   const diagnostics = [];
   for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index];
-    if (!line.trim()) continue;
-    try {
-      const parsed = JSON.parse(line);
-      if (isRecord(parsed)) {
-        records.push(parsed);
-      } else {
-        const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
-        diagnostics.push({
-          kind: "malformed",
-          line: index + 1,
-          raw: line,
-          error: `expected JSON object, got ${typeDesc}`
-        });
-      }
-    } catch (error) {
-      diagnostics.push({
-        kind: "malformed",
-        line: index + 1,
-        raw: line,
-        error: errorText(error)
-      });
-    }
+    const decoded = decodeSitianRecordLine(lines[index], index + 1);
+    if (decoded === void 0) continue;
+    if (decoded.ok) records.push(decoded.record);
+    else diagnostics.push(decoded.diagnostic);
   }
   return { records, diagnostics };
 }
+async function readSitianRecords(recordFile) {
+  try {
+    return parseSitianRecordText(await readFile(recordFile, "utf8"));
+  } catch (error) {
+    if (isEnoent(error)) return { records: [], diagnostics: [] };
+    throw error;
+  }
+}
 export {
+  decodeSitianRecordLine,
+  parseSitianRecordText,
   readSitianRecords
 };

package/dist/submission-gate.js

@@ -52,7 +52,7 @@ export function createDefaultGateOfficerSummon(options) {
     };
 }
 /**
- * Book a typed pointer under parent session/auditor-roles (archivist-owned write).
+ * Book a typed pointer in the parent run's current.json officers section.
  * Offline mocks without a real session leave no nested volume (lawful zero).
  */
 function bookDirectOfficerPointer(context, officer, result, summoned, toolCallId) {

package/dist/submission-ledger.js

@@ -1,4 +1,4 @@
-import { join } from "node:path";
+import { sessionFileIn, sessionFileOf } from "./role-run-placement.js";
 import { resolveActivationLedgerHome, tryHomeFromAkRolesPath, } from "./activation-ledger-topology.js";
 import { courtAttemptIdFromHostContext, runDirectoryFromHostContext, } from "./host-contracts.js";
 import { runIdFromRunDirectory } from "./run-terminal-artifacts.js";
@@ -49,7 +49,7 @@ async function submissionRecordFile(cwd, runId, scope) {
         const discoveredRun = await findRunDirectoryById(scope.home, runId);
         if (discoveredRun === undefined)
             return undefined;
-        sessionParent = join(discoveredRun, "session", "session.jsonl");
+        sessionParent = sessionFileOf(discoveredRun);
     }
     return resolveSitianRecordPathInLedger({
         level: "event",
@@ -265,13 +265,13 @@ async function restoreState(cwd, runId, scope) {
 function sessionParentFromHostContext(context) {
     const runDirectory = runDirectoryFromHostContext(context);
     if (runDirectory !== undefined)
-        return join(runDirectory, "session", "session.jsonl");
+        return sessionFileOf(runDirectory);
     const sessionFile = context.sessionManager.getSessionFile?.();
     if (typeof sessionFile === "string" && sessionFile.length > 0)
         return sessionFile;
     const sessionDir = context.sessionManager.getSessionDir?.();
     if (typeof sessionDir === "string" && sessionDir.length > 0) {
-        return join(sessionDir, "session.jsonl");
+        return sessionFileIn(sessionDir);
     }
     return undefined;
 }

package/dist/ticket-provenance-contracts.js

@@ -1,3 +1,4 @@
+import { parseTicketNumber } from "./run-ticket-number.js";
 import { isRecord } from "./unknown-value.js";
 /**
  * 起居录（ticket-provenance）typed 形状 —— ADR 0075 / ADR 0081 / #1090。
@@ -9,14 +10,7 @@ import { isRecord } from "./unknown-value.js";
 /** Sitian kind for per-ticket court diary volumes. */
 export const TICKET_PROVENANCE_KIND = "ticket-provenance";
 function positiveInteger(value) {
-    if (typeof value === "number" && Number.isSafeInteger(value) && value >= 1)
-        return value;
-    if (typeof value === "string" && /^[1-9][0-9]*$/.test(value)) {
-        const parsed = Number(value);
-        if (Number.isSafeInteger(parsed))
-            return parsed;
-    }
-    return undefined;
+    return parseTicketNumber(value);
 }
 function projectBound(value) {
     if (!isRecord(value))

package/dist/ticket-provenance.js

@@ -3,13 +3,16 @@
  * 一册＝一个追加式 records.jsonl。每轮新投影经司天台 appender 追加为不可变提交；
  * 纯追加、不回读历史去重、不折叠。
  */
-import { readFile, unlink } from "node:fs/promises";
-import { basename, dirname, join, resolve } from "node:path";
+import { readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
 import { errnoCode, packageMachineHome, physicallyContainedIn, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
 import { readLedgerSessionJsonlLines, } from "./ledger-session-read.js";
 import { isSafePositiveTicketNumber } from "./run-ticket-number.js";
+import { runDirectoryOfSessionFile, sessionFileOf } from "./role-run-placement.js";
+import { RUN_HISTORY_FILE } from "./run-dossier-files.js";
 import { adaptSessionDialogue, nativeEventId } from "./session-dialogue.js";
 import { appendSitianRecordBlock, appendSitianRecord, resolveSitianRecordPath, } from "./sitian-facade.js";
+import { decodeSitianRecordLine } from "./sitian-reader.js";
 import { TICKET_PROVENANCE_KIND, } from "./ticket-provenance-contracts.js";
 import { errorText } from "./unknown-value.js";
 /**
@@ -48,8 +51,7 @@ function isLedgerRoleSessionFile(absolute, home) {
     const ledgerHome = resolveActivationLedgerHome(machineHome);
     if (!physicallyContainedIn(ledgerHome, absolute))
         return false;
-    return (basename(absolute) === "session.jsonl" &&
-        basename(dirname(absolute)) === "session");
+    return sessionFileOf(runDirectoryOfSessionFile(absolute)) === absolute;
 }
 /** Real I/O seam gate: only host session stores or sitian role-run session.jsonl. */
 function assertDialogueSessionSourcePath(path, home) {
@@ -87,18 +89,32 @@ export function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
 }
 /** Assign a run-owned unbound diary as its original block through Sitian. */
 export async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
-    const source = join(runDirectory, "records.jsonl");
-    let content;
+    const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
+    // Live staging: ticket-provenance rows in the run's history.jsonl. Append-only
+    // history keeps the staging rows; the ticket-root diary is the home.
+    // Old run/records.jsonl is not a runtime input (#1161); only migration tools read it.
+    let history;
     try {
-        content = await readFile(source, "utf8");
+        history = await readFile(join(runDirectory, RUN_HISTORY_FILE), "utf8");
     }
     catch (error) {
         if (errnoCode(error) === "ENOENT")
             return;
         throw error;
     }
-    appendSitianRecordBlock(ticketProvenanceRecordInput(ticketNumber, cwd, home), content);
-    await unlink(source);
+    const block = history
+        .split("\n")
+        .flatMap((line, index) => {
+        const decoded = decodeSitianRecordLine(line, index + 1);
+        if (decoded === undefined || !decoded.ok)
+            return [];
+        if (decoded.record.kind !== TICKET_PROVENANCE_KIND)
+            return [];
+        return [`${line}\n`];
+    })
+        .join("");
+    if (block !== "")
+        appendSitianRecordBlock(ticketInput, block);
 }
 /**
  * Resolve a bound endpoint against this round's session lines.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5483",
+  "version": "0.1.5571",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/build-package.mjs

@@ -14,6 +14,8 @@ const entries = [
   // navigator-session-contracts is a static import of the published attendance root
   // (#590: published non-bundle graph must stay closed under its own relative edges).
   "navigator-public-session",
+  // Static import of navigator-public-session (sitianReportSafe).
+  "host-session-record",
   "navigator-session-contracts",
   // Static import of navigator-attendance and navigator-public-session.
   "navigator-work-base",

package/src/acp-host/production-host.ts

@@ -61,7 +61,7 @@ export function createProductionAcpRoleTurnHost(options: ProductionAcpHostOption
 
   return createComposedAcpRoleTurnHost({
     hostName,
-    sessionIdentity: createSessionIdentityAuthority(principalAuthority, description.sessionBindingFile),
+    sessionIdentity: createSessionIdentityAuthority(principalAuthority, hostName),
     modelPassing: description.modelPassing,
     ...(description.setModelId === undefined ? {} : { setModelId: description.setModelId }),
     roleRuntimeDependencies: createRoleRuntimeDependencies(packageRoot),

package/src/acp-host/role-turn-host.ts

@@ -1,14 +1,15 @@
-import { join } from "node:path";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 
 import type { RoleTurnHost, RoleTurnRequest, RoleTurnResult } from "../host-contracts.ts";
+import { sessionDirectoryOf } from "../role-run-placement.ts";
 import {
   createSerializedRoleTurnHost,
   driveExternalRoleTurnRounds,
   disposeExternalRoleTurn,
   externalHostFailure as failure,
   raceAgainstHostAbort,
+  recordTurnDelivery,
 } from "../external-host-turn-loop.ts";
 import { describeErrorIdentity } from "../public-cli/run-lifecycle.ts";
 import { projectThrownFailureLeaf, retainPackageFault } from "../public-cli/settlement.ts";
@@ -372,6 +373,14 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
           roundLimitName: "AcpRoundLimit",
           currentSessionId: () => sessionId,
           async runRound({ prompt, abortSignal }) {
+            // One history row per actual session/prompt start (催交回合各算一次).
+            // MCP advertises tool.parameters; prepared.jsonSchema is the headless
+            // draft-07 stamp of that clone — record the delivered parameters face.
+            const { $schema: _headlessStamp, ...deliveredSchema } = prepared.jsonSchema;
+            await recordTurnDelivery(request.runDirectory, {
+              systemPrompt: systemPromptOverride,
+              outputSchema: deliveredSchema,
+            }, "acp-host");
             let result: Readonly<Record<string, unknown>>;
             // Open the prose gate only for this prompt round; clear any stale chunks first.
             agentProseChunks.length = 0;
@@ -496,10 +505,8 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
             host: config.hostName,
             sessionId,
             cwd: request.cwd,
-            sessionDirectory: join(request.runDirectory, "session"),
+            sessionDirectory: sessionDirectoryOf(request.runDirectory),
             sessionParent,
-            continuation: request.continuation,
-            ...(request.model !== undefined ? { model: request.model } : {}),
             ...(request.home !== undefined ? { home: request.home } : {}),
           });
         } catch (error) {