@principles/host-runtime 0.1.0 → 0.1.1

package/dist/production-rulehost-gate.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { buildRuleHostAction, estimateLineChanges, mergeDecisions, SqliteConnection, UNAVAILABLE_RULE_CONTEXT, validateRuleContextV2, validateRuleHostResult, } from '@principles/core/runtime-v2';
+import { scanRetiredContractSymbols } from './legacy-rule-contract-symbols.js';
 import { createNodeRuleImplementationRuntime, MAX_ACTIVE_RULES, RULE_BATCH_SOURCE_BYTES, RULE_SOURCE_BYTES, } from './rule-implementation-runtime.js';
 const WARNING_LIMIT = 500;
 const MAX_WARNINGS = 16;
@@ -76,7 +77,7 @@ export function createProductionRuleHostGate(options = {}) {
         if (action.normalizedPath === null)
             return { decision: 'allow', source: event.source, metadata: { evaluatedLiveRules: 0 } };
         let context;
-        let enrichment = { currentGfi: 0, recentThinking: false, epTier: 0, bashRisk: 'unknown' };
+        let enrichment = { currentGfi: 0, epTier: 0, bashRisk: 'unknown' };
         const request = {
             workspaceDir: event.context.workspaceDir, sessionId: event.context.sessionId,
             targetPath: action.normalizedPath, toolName: input.toolName, rawPayload: event.rawPayload,
@@ -85,9 +86,9 @@ export function createProductionRuleHostGate(options = {}) {
             try {
                 const candidate = await withinGateDeadline(options.ruleInputEnrichmentProvider(request), startedAt);
                 if (isRecord(candidate) && typeof candidate.currentGfi === 'number' && Number.isFinite(candidate.currentGfi)
-                    && typeof candidate.recentThinking === 'boolean' && typeof candidate.epTier === 'number' && Number.isFinite(candidate.epTier)
+                    && typeof candidate.epTier === 'number' && Number.isFinite(candidate.epTier)
                     && (candidate.bashRisk === 'safe' || candidate.bashRisk === 'normal' || candidate.bashRisk === 'dangerous' || candidate.bashRisk === 'unknown')) {
-                    enrichment = { currentGfi: candidate.currentGfi, recentThinking: candidate.recentThinking, epTier: candidate.epTier, bashRisk: candidate.bashRisk };
+                    enrichment = { currentGfi: candidate.currentGfi, epTier: candidate.epTier, bashRisk: candidate.bashRisk };
                 }
                 else
                     addWarning(warnings, 'rule_input_enrichment_invalid', 'repair the host enrichment provider');
@@ -127,11 +128,25 @@ export function createProductionRuleHostGate(options = {}) {
         const connection = new SqliteConnection({ workspaceDir: event.context.workspaceDir, readonly: true, bootstrapIfMissing: false });
         const candidates = [];
         try {
+            const globalPause = connection.getDb().prepare(`
+        SELECT pause_id FROM global_rulecode_pauses WHERE status = 'paused' LIMIT 1
+      `).get();
+            if (globalPause !== undefined) {
+                return {
+                    decision: 'allow',
+                    source: event.source,
+                    warnings: [boundedWarning('global_rulecode_pause_active', 'review the incident in the Owner Console before releasing the global pause')],
+                    metadata: { evaluatedLiveRules: 0 },
+                };
+            }
             const rows = connection.getDb().prepare(`
         SELECT a.activation_id, a.artifact_id, a.target_ref, a.action,
+               c.enforcement, c.isolation_decision_id,
                p.source_rule_id, p.source_principle_id,
                length(CAST(p.content_json AS BLOB)) AS content_bytes
-        FROM activations a JOIN pi_artifacts p ON a.artifact_id = p.artifact_id
+        FROM activations a
+        JOIN pi_artifacts p ON a.artifact_id = p.artifact_id
+        LEFT JOIN activation_control_states c ON a.activation_id = c.activation_id
         WHERE a.channel = 'code_tool_hook' AND a.deactivated_at IS NULL
         ORDER BY a.activated_at ASC
         LIMIT ?
@@ -158,6 +173,15 @@ export function createProductionRuleHostGate(options = {}) {
                         addWarning(warnings, 'activation_row_invalid', 'deactivate and recreate the malformed activation');
                         continue;
                     }
+                    const activationId = typeof row.activation_id === 'string' ? row.activation_id : 'unknown';
+                    if (row.enforcement === 'safety_isolated') {
+                        addWarning(warnings, `activation_safety_isolated: ${activationId}`, 'recover the activation to shadow after reviewing safety evidence');
+                        continue;
+                    }
+                    if (row.enforcement !== 'eligible') {
+                        addWarning(warnings, `activation_control_state_invalid: ${activationId}`, 'repair the activation control state before RuleCode enforcement');
+                        continue;
+                    }
                     const group = groups.get(row.target_ref) ?? [];
                     group.push(row);
                     groups.set(row.target_ref, group);
@@ -216,6 +240,23 @@ export function createProductionRuleHostGate(options = {}) {
                         }
                         const ruleId = typeof content.ruleId === 'string' ? content.ruleId : typeof row.source_rule_id === 'string' ? row.source_rule_id : artifactId;
                         const principleId = typeof content.principleId === 'string' ? content.principleId : typeof row.source_principle_id === 'string' ? row.source_principle_id : ruleId;
+                        // Retired-contract backstop (2026-08-19; host-liveness correction
+                        // 2026-08-21):
+                        // persisted LIVE RuleCode that references removed RuleHost
+                        // contract symbols can never run safely against the new contract
+                        // — reads silently resolve to undefined and change owner-approved
+                        // behavior. The incompatible activation is therefore skipped and
+                        // surfaced with an actionable warning. It must not turn a runtime
+                        // compatibility defect into a host-wide deny; healthy sibling
+                        // rules continue to evaluate. The scan is a local copy (see
+                        // legacy-rule-contract-symbols.ts) so the published bundle keeps
+                        // working against the currently published core.
+                        const retiredSymbols = scanRetiredContractSymbols(content.implementationCode);
+                        if (retiredSymbols.length > 0) {
+                            const nextAction = 'migrate the RuleCode off the retired contract symbols or deactivate the activation, then re-approve a migrated rule';
+                            addWarning(warnings, `legacy_rule_contract_dependency: ${retiredSymbols.join(', ')} (activation=${activationId})`, nextAction);
+                            continue;
+                        }
                         const fallbackMeta = { name: activationId, version: '1', ruleId, coversCondition: 'all' };
                         candidates.push({ implId: activationId, ruleId, principleId, meta: isRuleMeta(content.meta) ? content.meta : fallbackMeta, source: content.implementationCode });
                     }
@@ -226,8 +267,8 @@ export function createProductionRuleHostGate(options = {}) {
             }
             const hostInput = {
                 action,
-                workspace: { isRiskPath: false, planStatus: 'NONE', hasPlanFile: false },
-                session: { sessionId: event.context.sessionId, currentGfi: enrichment.currentGfi, recentThinking: enrichment.recentThinking },
+                workspace: { isRiskPath: false },
+                session: { sessionId: event.context.sessionId, currentGfi: enrichment.currentGfi },
                 evolution: { epTier: enrichment.epTier },
                 derived: { estimatedLineChanges: estimateLineChanges({ toolName: input.toolName, params: input.params }), bashRisk: enrichment.bashRisk },
                 ...(context ? { context } : {}),

package/dist/rule-implementation-runtime.js

@@ -37,8 +37,6 @@ try {
         ' getToolName: () => __pdCallInput.action.toolName,' +
         ' getEstimatedLineChanges: () => __pdCallInput.derived.estimatedLineChanges,' +
         ' getBashRisk: () => __pdCallInput.derived.bashRisk,' +
-        ' hasPlanFile: () => __pdCallInput.workspace.hasPlanFile,' +
-        ' getPlanStatus: () => __pdCallInput.workspace.planStatus,' +
         ' getEpTier: () => __pdCallInput.evolution.epTier' +
         '});', { filename: rule.filename + '.bootstrap' }
       ).runInContext(context, { timeout: 1000 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,16 +22,21 @@
   },
   "dependencies": {
     "@principles/core": "^1.74.1",
+    "@principles/install-layout": "0.1.0",
     "better-sqlite3": "^13.0.3",
     "js-yaml": "^5.2.0"
   },
   "devDependencies": {
-    "@types/better-sqlite3": "^7.6.13",
+    "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.1.2",
     "@types/js-yaml": "^4.0.9",
     "typescript": "^7.0.2",
     "vite": "^8.0.16",
     "vitest": "^4.1.10"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/csuzngjh/principles.git"
+  },
   "license": "MIT"
 }