@principles/host-runtime 0.10.3 → 0.10.4

package/dist/governance-signal-admission.d.ts

@@ -144,12 +144,23 @@ export type AdmitGovernanceSignalsResult = {
     ok: true;
     outcomes: readonly GovernanceAdmissionOutcome[];
 } | Degradation;
+/** Public generic intake stays Codex + explicit WorkBuddy only. */
+export declare function admitGovernanceSignals(input: AdmitGovernanceSignalsInput): AdmitGovernanceSignalsResult;
+/** Pure check: no DB, no filesystem, no classifier, no historical transcript. */
+export declare function assessWorkbuddyLiveKeyword(text: string, sessionId: string): {
+    matched: boolean;
+    reason: 'matched' | 'not_a_signal' | 'prompt_too_large';
+};
 /**
- * Admit governance signal candidates. Each candidate commits in its own
- * trajectory.db transaction (marker + pain row + quota together), so one
- * failing candidate never rolls back another's admission.
+ * Narrow native event gateway: validate true current user origin and flags.
+ * The ordinary generic admission API cannot bypass this WorkBuddy gate.
  */
-export declare function admitGovernanceSignals(input: AdmitGovernanceSignalsInput): AdmitGovernanceSignalsResult;
+export declare function admitTrustedWorkbuddyLiveCorrection(input: {
+    workspaceDir: string;
+    rawEvent: unknown;
+    now?: Date;
+    databaseFactory?: ObservationDatabaseFactory;
+}): AdmitGovernanceSignalsResult;
 export interface EnsureGovernanceTaskInput {
     readonly workspaceDir: string;
     readonly logicalObservationKey: string;

package/dist/governance-signal-admission.js

@@ -34,7 +34,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import Database from 'better-sqlite3';
-import { collectSync, CORRECTION_SEED_KEYWORDS, buildToolFailureObservation, evaluateTriage, evaluateTriggerController, resolveSourceKind, PainToPrincipleService, PrincipleTreeLedgerAdapter, RuntimeStateManager, createDiagnosticianTaskId, disposePainSignalBridgesForWorkspace, sanitizeString, boundCorrectionEvidenceText, MAX_EVIDENCE_VALUE_CHARS, } from '@principles/core/runtime-v2';
+import { collectSync, computeFeatureFlagsFromConfig, CORRECTION_SEED_KEYWORDS, buildToolFailureObservation, evaluateTriage, evaluateTriggerController, resolveSourceKind, PainToPrincipleService, PrincipleTreeLedgerAdapter, RuntimeStateManager, createDiagnosticianTaskId, disposePainSignalBridgesForWorkspace, sanitizeString, boundCorrectionEvidenceText, MAX_EVIDENCE_VALUE_CHARS, } from '@principles/core/runtime-v2';
 import { deriveProductionCorrectionPainIdentity, deriveProductionToolPainIdentity, hasProductionPainSchema, PRODUCTION_WRITE_TOOLS, } from './production-pain-evidence.js';
 import { promoteGovernanceEvidence, ensureGovernanceSchema } from './governance-observation-store.js';
 import { loadPdConfigForPlugin } from './pd-config.js';
@@ -432,7 +432,8 @@ function toolFailureTaskPayload(fields) {
     };
     return JSON.stringify(payload);
 }
-function taskSubmissionPayload(candidate, workspaceDir, reason) {
+function taskSubmissionPayload(candidate, workspaceDir, details) {
+    const { reason, canonicalPainId } = details;
     if (candidate.kind === 'user_correction') {
         // P1-1 privacy (review round 2): sanitize the FULL text before any
         // truncation — a token crossing the 200-char boundary must be redacted, not
@@ -446,9 +447,14 @@ function taskSubmissionPayload(candidate, workspaceDir, reason) {
             hostKind: candidate.hostKind,
             // WorkBuddy explicit intake has no transcript observation to promote.
             // The classified Owner statement is its input basis, not a pseudo-trace.
-            evidence: candidate.hostKind === 'workbuddy' && candidate.explicitOwnerStatement === true
-                ? []
-                : [{ sourceRef: `governance_observation:${candidate.logicalObservationKey}`, note: sanitizeString(candidate.text, workspaceDir) }],
+            evidence: candidate.hostKind === 'workbuddy'
+                ? candidate.explicitOwnerStatement === true ? [] : [{
+                        // WorkBuddy has no governance_observation, anchor to the canonical
+                        // Pain persisted in this same trajectory.db transaction.
+                        sourceRef: 'pain_event:' + (canonicalPainId ?? ''),
+                        note: sanitizeString(candidate.text, workspaceDir),
+                    }]
+                : [{ sourceRef: 'governance_observation:' + candidate.logicalObservationKey, note: sanitizeString(candidate.text, workspaceDir) }],
             // SPEC-CODEX-PAIN-CLOSURE-001 CR-02 (merged from main): an explicit
             // Owner statement rides as classified correction evidence — never
             // summarized by an AI, never inside evidence[] pseudo-trace entries.
@@ -544,7 +550,7 @@ function admitCorrection({ db, candidate, workspaceDir, now, nowIso, keywordStor
                 // detection, so `detection` is optional — no ruleVersion exists for them.
                 ruleVersion: detection?.ruleVersion ?? null,
                 reason,
-                payloadJson: taskSubmissionPayload(candidate, workspaceDir, reason),
+                payloadJson: taskSubmissionPayload(candidate, workspaceDir, { reason, canonicalPainId: painId }),
                 nowIso,
             });
         })();
@@ -637,7 +643,7 @@ function admitToolFailure({ db, candidate, workspaceDir, nowIso }) {
                 canonicalPainId: painId,
                 ruleVersion: null,
                 reason: sanitizeString(reason, workspaceDir),
-                payloadJson: taskSubmissionPayload(candidate, workspaceDir, reason),
+                payloadJson: taskSubmissionPayload(candidate, workspaceDir, { reason }),
                 nowIso,
             });
         }
@@ -650,8 +656,8 @@ function admitToolFailure({ db, candidate, workspaceDir, nowIso }) {
     }
     return { disposition: 'admitted', kind: 'tool_failure', logicalObservationKey: candidate.logicalObservationKey, canonicalPainId: painId, duplicate, ruleVersion: null };
 }
-function admitOne({ db, candidate, workspaceDir, now, nowIso, keywordStore, onDegradation }) {
-    if (candidate.hostKind !== 'codex' && !(candidate.hostKind === 'workbuddy' && candidate.kind === 'user_correction' && candidate.explicitOwnerStatement === true)) {
+function admitOne({ db, candidate, workspaceDir, now, nowIso, keywordStore, onDegradation, trustedWorkbuddyLive }) {
+    if (candidate.hostKind !== 'codex' && !(candidate.hostKind === 'workbuddy' && candidate.kind === 'user_correction' && (candidate.explicitOwnerStatement === true || trustedWorkbuddyLive === true))) {
         return { ok: false, reason: 'unsupported_host_kind', nextAction: 'governance signal admission accepts Codex observations or explicit WorkBuddy Owner statements' };
     }
     const marker = db.prepare('SELECT * FROM governance_signal_admissions WHERE logical_observation_key = ?').get(candidate.logicalObservationKey);
@@ -676,7 +682,7 @@ function admitOne({ db, candidate, workspaceDir, now, nowIso, keywordStore, onDe
  * trajectory.db transaction (marker + pain row + quota together), so one
  * failing candidate never rolls back another's admission.
  */
-export function admitGovernanceSignals(input) {
+function admitGovernanceSignalsInternal(input, trustedWorkbuddyLive = false) {
     const opened = openAdmissionStore(input.workspaceDir, input.databaseFactory);
     if (!('db' in opened))
         return opened;
@@ -691,7 +697,7 @@ export function admitGovernanceSignals(input) {
     const outcomes = [];
     try {
         for (const candidate of input.candidates) {
-            outcomes.push(admitOne({ db, candidate, workspaceDir, now, nowIso, ...(input.keywordStore ? { keywordStore: input.keywordStore } : {}), ...(input.onDegradation ? { onDegradation: input.onDegradation } : {}) }));
+            outcomes.push(admitOne({ db, candidate, workspaceDir, now, nowIso, ...(input.keywordStore ? { keywordStore: input.keywordStore } : {}), ...(input.onDegradation ? { onDegradation: input.onDegradation } : {}), trustedWorkbuddyLive }));
         }
         return { ok: true, outcomes };
     }
@@ -703,6 +709,87 @@ export function admitGovernanceSignals(input) {
         close();
     }
 }
+/** Public generic intake stays Codex + explicit WorkBuddy only. */
+export function admitGovernanceSignals(input) {
+    return admitGovernanceSignalsInternal(input);
+}
+/** P0: a four-term projection of existing canonical high-precision seeds. */
+const WORKBUDDY_AUTO_TERMS = new Set(['这是错的', '不要自作主张', '不应该这么做', '又搞错']);
+const WORKBUDDY_MAX_PROMPT_BYTES = 16 * 1024;
+function workbuddyP0KeywordStore() {
+    const seed = buildSharedSeedKeywordStore();
+    const terms = {};
+    for (const [term, def] of Object.entries(seed.terms)) {
+        if (WORKBUDDY_AUTO_TERMS.has(term) && def.category === 'correction' && def.precision === 'high') {
+            terms[term] = def;
+        }
+    }
+    return { version: seed.version, terms };
+}
+/** Pure check: no DB, no filesystem, no classifier, no historical transcript. */
+export function assessWorkbuddyLiveKeyword(text, sessionId) {
+    if (Buffer.byteLength(text, 'utf8') > WORKBUDDY_MAX_PROMPT_BYTES) {
+        return { matched: false, reason: 'prompt_too_large' };
+    }
+    const store = workbuddyP0KeywordStore();
+    // Prefer precision to recall: reject quoted/embedded/reported phrases.
+    if (!Object.keys(store.terms).some(term => text.trimStart().toLowerCase().startsWith(term.toLowerCase()))) {
+        return { matched: false, reason: 'not_a_signal' };
+    }
+    const out = collectSync(text, sessionId, store, SYNC_DETECTION_CONFIG, new Date().toISOString());
+    const matched = out.isSignal && out.strength === 'STRONG' &&
+        out.type === 'correction' && out.matchedPrecision === 'high';
+    return { matched, reason: matched ? 'matched' : 'not_a_signal' };
+}
+/**
+ * Narrow native event gateway: validate true current user origin and flags.
+ * The ordinary generic admission API cannot bypass this WorkBuddy gate.
+ */
+export function admitTrustedWorkbuddyLiveCorrection(input) {
+    const raw = input.rawEvent;
+    if (!isRecord(raw) || own(raw, 'hook_event_name') !== 'UserPromptSubmit' ||
+        own(raw, 'is_internal_continuation') !== false) {
+        return { ok: false, reason: 'native_current_user_unverified', nextAction: 'Require a real current WorkBuddy UserPromptSubmit event.' };
+    }
+    const sessionId = own(raw, 'session_id');
+    const generationId = own(raw, 'generation_id');
+    const prompt = own(raw, 'prompt');
+    if (typeof sessionId !== 'string' || !sessionId.trim() ||
+        typeof generationId !== 'string' || !generationId.trim() ||
+        typeof prompt !== 'string') {
+        return { ok: false, reason: 'native_identity_invalid', nextAction: 'Require nonblank native session_id/generation_id and prompt.' };
+    }
+    const config = loadPdConfigForPlugin(input.workspaceDir);
+    if (!config.ok)
+        return { ok: false, reason: 'workbuddy_config_invalid', nextAction: 'Repair WorkBuddy governance workspace config.' };
+    const { flags } = computeFeatureFlagsFromConfig(config.effective);
+    if (flags['host.workbuddy']?.enabled !== true || flags.workbuddy_live_keyword_pain?.enabled !== true) {
+        return { ok: false, reason: 'workbuddy_auto_disabled', nextAction: 'Explicitly enable both WorkBuddy host and live keyword Pain.' };
+    }
+    if (prompt.trimStart().startsWith('PD记录痛苦')) {
+        return { ok: false, reason: 'explicit_owner_statement_reserved', nextAction: 'Use original Owner intake; no keyword fallback.' };
+    }
+    if (!assessWorkbuddyLiveKeyword(prompt, sessionId).matched) {
+        return { ok: true, outcomes: [] };
+    }
+    const nativeIdentity = JSON.stringify(['workbuddy', sessionId, generationId]);
+    return admitGovernanceSignalsInternal({
+        workspaceDir: input.workspaceDir,
+        candidates: [{
+                kind: 'user_correction',
+                hostKind: 'workbuddy',
+                logicalObservationKey: nativeIdentity + '|user',
+                rolloutIdentity: JSON.stringify(['workbuddy', sessionId]),
+                rootSessionId: sessionId,
+                hostTurnId: nativeIdentity,
+                text: prompt,
+                observedAt: (input.now ?? new Date()).toISOString(),
+            }],
+        keywordStore: workbuddyP0KeywordStore(),
+        ...(input.now ? { now: input.now } : {}),
+        ...(input.databaseFactory ? { databaseFactory: input.databaseFactory } : {}),
+    }, true);
+}
 // ─── Diagnostician continuation (one pain → exactly one pending task) ───────
 function isGovernanceTaskPayload(value) {
     if (!isRecord(value))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -31,7 +31,7 @@
     "lint": "eslint \"src/**/*.ts\""
   },
   "dependencies": {
-    "@principles/core": "^1.293.5",
+    "@principles/core": "^1.294.1",
     "@principles/install-layout": "^0.4.0",
     "better-sqlite3": "^13.0.3",
     "js-yaml": "^5.4.3"