@akagilnc/pi-workflow-roles 0.1.5504 → 0.1.5571

package/dist/ticket-provenance.js

@@ -3,15 +3,16 @@
  * 一册＝一个追加式 records.jsonl。每轮新投影经司天台 appender 追加为不可变提交；
  * 纯追加、不回读历史去重、不折叠。
  */
-import { readFile, unlink } from "node:fs/promises";
+import { readFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
 import { errnoCode, packageMachineHome, physicallyContainedIn, resolveActivationLedgerHome, } from "./activation-ledger-topology.js";
 import { readLedgerSessionJsonlLines, } from "./ledger-session-read.js";
 import { isSafePositiveTicketNumber } from "./run-ticket-number.js";
 import { runDirectoryOfSessionFile, sessionFileOf } from "./role-run-placement.js";
-import { sitianVolumeRecordsFile } from "./sitian-appender.js";
+import { RUN_HISTORY_FILE } from "./run-dossier-files.js";
 import { adaptSessionDialogue, nativeEventId } from "./session-dialogue.js";
 import { appendSitianRecordBlock, appendSitianRecord, resolveSitianRecordPath, } from "./sitian-facade.js";
+import { decodeSitianRecordLine } from "./sitian-reader.js";
 import { TICKET_PROVENANCE_KIND, } from "./ticket-provenance-contracts.js";
 import { errorText } from "./unknown-value.js";
 /**
@@ -88,18 +89,32 @@ export function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
 }
 /** Assign a run-owned unbound diary as its original block through Sitian. */
 export async function rehomeUnboundTicketProvenance(runDirectory, ticketNumber, cwd, home) {
-    const source = sitianVolumeRecordsFile(runDirectory);
-    let content;
+    const ticketInput = ticketProvenanceRecordInput(ticketNumber, cwd, home);
+    // Live staging: ticket-provenance rows in the run's history.jsonl. Append-only
+    // history keeps the staging rows; the ticket-root diary is the home.
+    // Old run/records.jsonl is not a runtime input (#1161); only migration tools read it.
+    let history;
     try {
-        content = await readFile(source, "utf8");
+        history = await readFile(join(runDirectory, RUN_HISTORY_FILE), "utf8");
     }
     catch (error) {
         if (errnoCode(error) === "ENOENT")
             return;
         throw error;
     }
-    appendSitianRecordBlock(ticketProvenanceRecordInput(ticketNumber, cwd, home), content);
-    await unlink(source);
+    const block = history
+        .split("\n")
+        .flatMap((line, index) => {
+        const decoded = decodeSitianRecordLine(line, index + 1);
+        if (decoded === undefined || !decoded.ok)
+            return [];
+        if (decoded.record.kind !== TICKET_PROVENANCE_KIND)
+            return [];
+        return [`${line}\n`];
+    })
+        .join("");
+    if (block !== "")
+        appendSitianRecordBlock(ticketInput, block);
 }
 /**
  * Resolve a bound endpoint against this round's session lines.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.5504",
+  "version": "0.1.5571",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/scripts/build-package.mjs

@@ -14,6 +14,8 @@ const entries = [
   // navigator-session-contracts is a static import of the published attendance root
   // (#590: published non-bundle graph must stay closed under its own relative edges).
   "navigator-public-session",
+  // Static import of navigator-public-session (sitianReportSafe).
+  "host-session-record",
   "navigator-session-contracts",
   // Static import of navigator-attendance and navigator-public-session.
   "navigator-work-base",

package/src/acp-host/production-host.ts

@@ -61,7 +61,7 @@ export function createProductionAcpRoleTurnHost(options: ProductionAcpHostOption
 
   return createComposedAcpRoleTurnHost({
     hostName,
-    sessionIdentity: createSessionIdentityAuthority(principalAuthority, description.sessionBindingFile),
+    sessionIdentity: createSessionIdentityAuthority(principalAuthority, hostName),
     modelPassing: description.modelPassing,
     ...(description.setModelId === undefined ? {} : { setModelId: description.setModelId }),
     roleRuntimeDependencies: createRoleRuntimeDependencies(packageRoot),

package/src/acp-host/role-turn-host.ts

@@ -9,6 +9,7 @@ import {
   disposeExternalRoleTurn,
   externalHostFailure as failure,
   raceAgainstHostAbort,
+  recordTurnDelivery,
 } from "../external-host-turn-loop.ts";
 import { describeErrorIdentity } from "../public-cli/run-lifecycle.ts";
 import { projectThrownFailureLeaf, retainPackageFault } from "../public-cli/settlement.ts";
@@ -372,6 +373,14 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
           roundLimitName: "AcpRoundLimit",
           currentSessionId: () => sessionId,
           async runRound({ prompt, abortSignal }) {
+            // One history row per actual session/prompt start (催交回合各算一次).
+            // MCP advertises tool.parameters; prepared.jsonSchema is the headless
+            // draft-07 stamp of that clone — record the delivered parameters face.
+            const { $schema: _headlessStamp, ...deliveredSchema } = prepared.jsonSchema;
+            await recordTurnDelivery(request.runDirectory, {
+              systemPrompt: systemPromptOverride,
+              outputSchema: deliveredSchema,
+            }, "acp-host");
             let result: Readonly<Record<string, unknown>>;
             // Open the prose gate only for this prompt round; clear any stale chunks first.
             agentProseChunks.length = 0;
@@ -498,8 +507,6 @@ export function createAcpRoleTurnHost(config: AcpRoleTurnHostConfig): RoleTurnHo
             cwd: request.cwd,
             sessionDirectory: sessionDirectoryOf(request.runDirectory),
             sessionParent,
-            continuation: request.continuation,
-            ...(request.model !== undefined ? { model: request.model } : {}),
             ...(request.home !== undefined ? { home: request.home } : {}),
           });
         } catch (error) {

package/src/analyst-gate-cycles-read.ts

@@ -1,5 +1,5 @@
 /**
- * Sole nested-volume reader for gate-cycle facts under session/auditor-roles/.
+ * Sole reader for gate-cycle facts of the officers pointed at from current.json `officers`.
  *
  * Consumer: Analyst sole ledger scan (classifyScopedRun). Metric families must
  * not open a second disk scan — they consume retained facts.
@@ -8,9 +8,8 @@
  * the current gatekeeper/inspector/notary English face. Projection always uses
  * the current English officer identity (inspector | notary).
  *
- * Missing auditor-roles directory (ENOENT only) → empty rounds (lawful zero).
- * Path present but not a directory (ENOTDIR) and discovered nested JSONL that
- * fails canonical read/parse must fail loudly (never silently under-count).
+ * Absent `officers` section → empty rounds (lawful zero). A pointer whose
+ * officer session fails canonical read/parse must fail loudly (never silently under-count).
  * An accepted gate terminating receipt (isError:false pair on dispatch/officer
  * tool) whose required typed facts are unusable — status, dispatch officer, or
  * first/last span missing/unknown/unparseable/inverted — also fails loudly via
@@ -23,9 +22,6 @@
  * `ak_auditor_parent_attempt_binding.parent.attemptEntryId` — never seat/time guessing.
  * An orphan accepted dispatch must not consume a later same-seat direct officer.
  */
-import { readdir } from "node:fs/promises";
-import { join } from "node:path";
-
 import {
   AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE,
 } from "./compliance-transport.ts";
@@ -39,7 +35,7 @@ import {
 import { isRecord, isEnoent } from "./unknown-value.ts";
 import { retainedRunPathsMatch } from "./role-run-relocation.ts";
 import { runDirectoryOfSessionFile } from "./role-run-placement.ts";
-import { resolveOfficerSessionFromPointerFile } from "./archivist-record-pointer.ts";
+import { readOfficerPointers } from "./archivist-record-pointer.ts";
 
 /** One completed gate round: direct officer receipt or historical province/officer pair. */
 /** Honest origin discriminant: direct summons vs historical province dispatch. */
@@ -418,68 +414,38 @@ function pairGateRounds(
 }
 
 /**
- * Read and pair gate-cycle rounds from one or more auditor-roles directories.
- * Accepts historical nested JSONL volumes and #675 direct-officer-run-pointer
- * files that name the independent officer session 正本.
- * ENOENT (directory truly absent) → []. ENOTDIR and other errors propagate
- * (failure honesty — damaged topology must not wash to zero rounds).
+ * Read and pair gate-cycle rounds from the officer pointers booked in one
+ * run's current.json `officers` section; each pointer names the independent
+ * officer session 正本. Absent section → [] (lawful zero). A damaged pointer or
+ * officer session propagates — damaged topology must not wash to zero rounds.
  *
  * Pass `parentSessionFile` to keep only rounds whose attempt binding names that parent.
  */
-export async function readAnalystGateCyclesFromAuditorRoles(
-  auditorRolesDirectory: string | readonly string[],
+export async function readAnalystGateCyclesFromOfficers(
+  parentRunDirectory: string,
   options: {
     readonly parentSessionFile?: string;
   } = {},
 ): Promise<readonly AnalystGateCycleRound[]> {
-  const directories = typeof auditorRolesDirectory === "string"
-    ? [auditorRolesDirectory]
-    : auditorRolesDirectory;
   const volumes: ClassifiedVolume[] = [];
-  // Same officer session pointed at N times (historical multi-mint pointers, or
-  // one parent booking many leaves) must classify once — else each accepted
-  // seal is counted ×N in gate-cycle statistics (#753 acceptance A).
+  // Same officer session pointed at N times must classify once — else each
+  // accepted seal is counted ×N in gate-cycle statistics (#753 acceptance A).
   const classifiedOfficerSessions = new Set<string>();
-  for (const directory of directories) {
-    let names: string[];
-    try {
-      const entries = await readdir(directory, { withFileTypes: true });
-      names = entries
-        .filter(
-          (e) =>
-            e.isFile()
-            && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json")),
-        )
-        .map((e) => e.name)
-        .sort();
-    } catch (error) {
-      if (isEnoent(error)) continue;
-      throw error;
-    }
-    for (const name of names) {
-      const path = join(directory, name);
-      const fromPointer = name.endsWith(".pointer.json");
-      const pointer = fromPointer
-        ? await resolveOfficerSessionFromPointerFile(path)
-        : undefined;
-      const sessionPath = pointer?.sessionFile ?? path;
-      if (fromPointer) {
-        if (classifiedOfficerSessions.has(sessionPath)) continue;
-        classifiedOfficerSessions.add(sessionPath);
-      }
-      const officer = pointer?.officer === "inspector" || pointer?.officer === "notary"
-        ? pointer.officer : undefined;
-      const classified = await classifyAuditorVolume(sessionPath, officer);
-      for (const volume of classified) {
-        if (
-          options.parentSessionFile !== undefined &&
-          volume.parentSessionFile !== undefined &&
-          !await retainedRunPathsMatch(volume.parentSessionFile, options.parentSessionFile, runDirectoryOfSessionFile(options.parentSessionFile))
-        ) {
-          continue;
-        }
-        volumes.push(volume);
+  for (const pointer of await readOfficerPointers(parentRunDirectory)) {
+    if (classifiedOfficerSessions.has(pointer.sessionFile)) continue;
+    classifiedOfficerSessions.add(pointer.sessionFile);
+    const officer = pointer.officer === "inspector" || pointer.officer === "notary"
+      ? pointer.officer : undefined;
+    const classified = await classifyAuditorVolume(pointer.sessionFile, officer);
+    for (const volume of classified) {
+      if (
+        options.parentSessionFile !== undefined &&
+        volume.parentSessionFile !== undefined &&
+        !await retainedRunPathsMatch(volume.parentSessionFile, options.parentSessionFile, runDirectoryOfSessionFile(options.parentSessionFile))
+      ) {
+        continue;
       }
+      volumes.push(volume);
     }
   }
   return pairGateRounds(volumes);

package/src/analyst-ledger.ts

@@ -12,6 +12,7 @@
  * A2: classifyScopedRun retains typed per-run facts (frame span, tool intervals,
  * terminal face) for metric-family modules — no longer discarded after checks.
  */
+import { readSectionSync } from "./run-dossier.ts";
 import { readdir, readFile } from "node:fs/promises";
 import { basename, join } from "node:path";
 
@@ -26,7 +27,6 @@ import {
   parseRunLeaf,
   sessionFileOf,
 } from "./role-run-placement.ts";
-import { sitianRunVolumeDirectory } from "./sitian-appender.ts";
 import { autopsyWriterLock, readRoleRunIdentity } from "./public-cli/run-lifecycle.ts";
 import { readRunTicketNumber } from "./run-ticket-number.ts";
 import { rewriteRunDirectoryPathValue } from "./role-run-relocation.ts";
@@ -40,8 +40,8 @@ import {
   type SessionToolInterval,
 } from "./ledger-session-read.ts";
 import {
-  readRunTerminalArtifact,
-  type RunTerminalArtifactFile,
+  readRunTerminal,
+  type RunTerminalFace,
 } from "./run-terminal-artifacts.ts";
 import type {
   AnalystFirstFrameAt,
@@ -51,7 +51,7 @@ import type {
   AnalystUnreadableRun,
 } from "./analyst-page.ts";
 import {
-  readAnalystGateCyclesFromAuditorRoles,
+  readAnalystGateCyclesFromOfficers,
   type AnalystGateCycleRound,
 } from "./analyst-gate-cycles-read.ts";
 
@@ -63,7 +63,7 @@ export type { AnalystGateCycleRound } from "./analyst-gate-cycles-read.ts";
 const LIVE_RUN_STATES = new Set(["admitted", "running", "resumable"]);
 
 /**
- * Read lifecycle state from the existing run-state.json face.
+ * Read lifecycle state from the state.jsonl run-state fact row.
  * Used only to distinguish live in-flight runs from terminal no-receipt.
  */
 async function readExistingRunLifecycleState(
@@ -134,7 +134,7 @@ async function classifyGhostCandidate(input: {
  * Invocation scope faces used for issue 圈定 (C4 / #399).
  * projectRoot is retained for narrow path match and conflict facts;
  * ticketNumber is the #176 typed face when present (integer ≥ 1).
- * Single read of invocation.json — no second parse kernel.
+ * Single read of the current.json invocation section — no second parse kernel.
  */
 type InvocationScopeFields = {
   readonly projectRoot: string;
@@ -154,15 +154,8 @@ async function listLedgerBookNames(booksRoot: string): Promise<string[]> {
 async function readInvocationScopeFields(
   runDirectory: string,
 ): Promise<InvocationScopeFields | undefined> {
-  let raw: string;
-  try {
-    raw = await readFile(join(runDirectory, "invocation.json"), "utf8");
-  } catch (error) {
-    if (isMissingPathError(error)) return undefined;
-    throw error;
-  }
-  const parsed: unknown = JSON.parse(raw);
-  if (!isRecord(parsed)) return undefined;
+  const parsed = readSectionSync(runDirectory, "invocation");
+  if (parsed === undefined) return undefined;
   if (typeof parsed.projectRoot !== "string" || parsed.projectRoot.trim() === "") {
     return undefined;
   }
@@ -212,20 +205,11 @@ async function resolveSessionFile(
   runDirectory: string,
 ): Promise<string> {
   // Prefer invocation.sessionFile when present; fall back to S-family principal.
-  try {
-    const raw = await readFile(join(runDirectory, "invocation.json"), "utf8");
-    const parsed: unknown = JSON.parse(raw);
-    if (
-      isRecord(parsed)
-      && typeof parsed.sessionFile === "string"
-      && parsed.sessionFile.trim() !== ""
-    ) {
-      return typeof parsed.runDirectory === "string"
-        ? rewriteRunDirectoryPathValue(parsed.sessionFile, parsed.runDirectory, runDirectory) as string
-        : parsed.sessionFile;
-    }
-  } catch (error) {
-    if (!isMissingPathError(error)) throw error;
+  const parsed = readSectionSync(runDirectory, "invocation");
+  if (parsed !== undefined && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
+    return typeof parsed.runDirectory === "string"
+      ? rewriteRunDirectoryPathValue(parsed.sessionFile, parsed.runDirectory, runDirectory) as string
+      : parsed.sessionFile;
   }
   return sessionFileOf(runDirectory);
 }
@@ -327,7 +311,7 @@ export type AnalystRunTerminalFace =
   | { readonly status: "absent" }
   | {
       readonly status: "present";
-      readonly file: RunTerminalArtifactFile;
+      readonly face: RunTerminalFace;
       readonly body: Record<string, unknown>;
       /** Nonblank producer role — sole owner is readRunTerminalArtifact. */
       readonly role: string;
@@ -352,9 +336,9 @@ export type AnalystReadableRunFacts = {
    */
   readonly models: readonly string[];
   /**
-   * Paired gate-cycle rounds from session/auditor-roles/ (#446).
-   * Missing directory → empty (lawful zero rounds).
-   * Damaged discovered nested JSONL → leg unreadable (`auditor-roles` source).
+   * Paired gate-cycle rounds of the officers booked in current.json (#446).
+   * No officers booked → empty (lawful zero rounds).
+   * A damaged officer pointer or session → leg unreadable (`auditor-roles` source).
    */
   readonly gateCycles: readonly AnalystGateCycleRound[];
 };
@@ -515,10 +499,14 @@ async function classifyScopedRun(input: {
   }
 
   try {
-    const artifact = await readRunTerminalArtifact(input.runDirectory);
+    const read = readRunTerminal(input.runDirectory);
+    // A no_receipt terminal is the explicit form of "no accepted receipt".
+    const artifact = read.status === "present" && read.face === "no_receipt"
+      ? { status: "absent" as const }
+      : read;
     if (artifact.status === "unreadable") {
       missingSources.push("terminal-artifact");
-      reasons.push(`${artifact.file}: ${artifact.reason}`);
+      reasons.push(`terminal: ${artifact.reason}`);
     } else if (artifact.status === "absent") {
       if (lifecycle === "admitted" || lifecycle === "running") {
         // No terminal yet: ghost report only, or live in-flight omit.
@@ -530,10 +518,10 @@ async function classifyScopedRun(input: {
       }
       terminal = { status: "absent" };
     } else {
-      // role already required nonblank by readRunTerminalArtifact (single owner).
+      // role already required nonblank by readRunTerminal (single owner).
       terminal = {
         status: "present",
-        file: artifact.file,
+        face: artifact.face,
         body: artifact.body,
         role: artifact.body.role as string,
       };
@@ -574,16 +562,13 @@ async function classifyScopedRun(input: {
     );
   }
 
-  // Nested auditor-roles gate pairs stay inside the sole scan (families must
+  // Officer gate pairs stay inside the sole scan (families must
   // not readdir this tree again). Missing directory → []. Damaged discovered
   // nested JSONL is page-local unreadable — never silently under-count rounds.
   let gateCycles: readonly AnalystGateCycleRound[];
   try {
     const parentSessionFile = sessionFileOf(input.runDirectory);
-    gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      sitianRunVolumeDirectory(input.runDirectory, "auditor-roles"),
-      { parentSessionFile },
-    );
+    gateCycles = await readAnalystGateCyclesFromOfficers(input.runDirectory, { parentSessionFile });
   } catch (error) {
     return {
       kind: "unreadable",

package/src/analyst-metric-families/acceptance-success-rework.ts

@@ -97,7 +97,10 @@ export type AnalystAcceptanceSuccessReworkSection = {
   readonly rework: AnalystReworkLens;
 };
 
-/** Locate collector groups array: receipt.groups or top-level groups. */
+/**
+ * Locate collector groups array from the canonical typed receipt faces.
+ * Same leaf order as extractStatus: body / receipt / decisiveFacts / payloads.
+ */
 function findCollectorGroups(body: Record<string, unknown>): unknown {
   if (Array.isArray(body.groups)) return body.groups;
   const receipt = body.receipt;
@@ -106,6 +109,15 @@ function findCollectorGroups(body: Record<string, unknown>): unknown {
   if (isRecord(outcome)) {
     const facts = outcome.decisiveFacts;
     if (isRecord(facts) && Array.isArray(facts.groups)) return facts.groups;
+    // Typed sealed receipt: settlement keeps payloads on attempt-history; the
+    // terminal reader rehydrates them via attemptHistoryIdentity. Groups are the
+    // collector leaf on that receipt — never invent a second discriminator.
+    if (Array.isArray(outcome.payloads)) {
+      for (let index = outcome.payloads.length - 1; index >= 0; index -= 1) {
+        const payload = outcome.payloads[index];
+        if (isRecord(payload) && Array.isArray(payload.groups)) return payload.groups;
+      }
+    }
   }
   return undefined;
 }
@@ -116,6 +128,17 @@ export function extractStatus(body: Record<string, unknown>): string | undefined
   if (isRecord(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
     return outcome.status;
   }
+  // Typed sealed receipt: settlement keeps payloads on attempt-history; the
+  // terminal reader rehydrates them via attemptHistoryIdentity. Status is the role's
+  // own leaf on that receipt — never invent a second mapping.
+  if (isRecord(outcome) && Array.isArray(outcome.payloads)) {
+    for (let index = outcome.payloads.length - 1; index >= 0; index -= 1) {
+      const payload = outcome.payloads[index];
+      if (isRecord(payload) && typeof payload.status === "string" && payload.status.trim() !== "") {
+        return payload.status;
+      }
+    }
+  }
   const receipt = body.receipt;
   if (isRecord(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
     return receipt.status;

package/src/analyst-metric-families/gate-cycles.ts

@@ -26,7 +26,7 @@ export type AnalystGateCyclesLeg = {
   readonly runId: string;
   readonly book: string;
   readonly role: string;
-  /** Paired dispatch↔officer volume count (0 when no auditor-roles). */
+  /** Paired dispatch↔officer volume count (0 when no officers booked). */
   readonly roundCount: number;
   readonly rounds: readonly AnalystGateCyclesRoundRow[];
 };

package/src/analyst-metric-families/round-timeline.ts

@@ -82,13 +82,10 @@ function projectTerminal(facts: AnalystReadableRunFacts): AnalystRoundTimelineTe
   if (facts.terminal.status === "absent") {
     return { kind: "death", channel: "no-receipt" };
   }
-  if (facts.terminal.file === "error.json") {
+  if (facts.terminal.face === "error") {
     return { kind: "death", channel: "error" };
   }
-  if (facts.terminal.file === "audit-incomplete.json") {
-    return { kind: "death", channel: "audit-incomplete" };
-  }
-  // report.json — receipt face; classCount only when producer wrote a number.
+  // report face — receipt; classCount only when producer wrote a number.
   const status = extractStatus(facts.terminal.body);
   const classCount = readClassCount(facts.terminal.body);
   const receiptStatus = status ?? "unparsed";

package/src/analyst-page.ts

@@ -28,9 +28,9 @@ export type AnalystMissingSource =
   /** Model-groups mode: leg has no usable session model identity. */
   | "session-model"
   /**
-   * Nested session/auditor-roles volume was discovered but failed canonical
-   * read/parse (#446). Missing auditor-roles directory is lawful zero rounds,
-   * not this face.
+   * A booked officer pointer or its session failed canonical read/parse (#446).
+   * No officers booked is lawful zero rounds, not this face.
+   * Public label stays `auditor-roles` (终局来源标签以外不得改名).
    */
   | "auditor-roles";
 

package/src/archivist-record-entry.ts

@@ -293,7 +293,7 @@ export type RecordSessionParent = {
 export type CreateRecordSessionOptions = {
   /** Role working directory passed to the record session; not a placement input. */
   readonly cwd: string;
-  /** What kind of record this is (e.g. "auditor-roles"). Single path segment; not a destination path. */
+  /** What kind of record this is (e.g. "attendance"). Single path segment; not a destination path. */
   readonly kind: string;
   /** Parent session — nesting authority for ordinary kinds; optional parentSession link for navigator. */
   readonly parent?: RecordSessionParent;
@@ -373,7 +373,7 @@ export type RecordSessionOpen = {
  * symlink). New principals mint under the already-validated sessionDir.
  * Navigator work-subject nests use their AK ledger; worker-submission-gate asks the
  * host to continue its recent native session without selecting a stored file path.
- * Other ordinary no-subject children (auditor-roles, …) always mint fresh.
+ * Other ordinary no-subject children (attendance, …) always mint fresh.
  * New persisted principals materialize their deferred session header before return so
  * custom-entry-only writers do not need a parallel delayed-header helper.
  *