@principles/host-runtime 0.7.8 → 0.7.10

package/dist/internalization-consumer-cycle.js

@@ -20,7 +20,7 @@
  * Hosts inject: a logger, a structured-event sink, their tool catalog, and an
  * env getter. Everything else is the existing production path.
  */
-import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, PhilosopherRunner, ScribeRunner, ArtificerRunner, buildArtificerHostSemanticContext, EvaluatorRunner, RolloutReviewerRunner, DefaultDreamerValidator, DefaultPhilosopherValidator, DefaultScribeValidator, DefaultArtificerValidator, DefaultEvaluatorValidator, DefaultRolloutReviewerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, ArtificerL2Adapter, buildL2PrincipleReaderFromLedger, OpenClawCliRuntimeAdapter, storeEmitter, createProductionGateDeps, resolveRuntimeConfigFromPdConfig, resolveRuntimeConfigForAgent, AGENT_NAME_FOR_TASK_KIND, isRuntimeConfigError, computeConsumerDecision, FULL_CHAIN_CONSUMER_RUNNER_KINDS, DEFAULT_CONSUMER_RUNNER_KINDS, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, SqliteConnection, SqliteReconciliationCursorStore, SUCCEEDED_TRANSITIONS_SCOPE, 
+import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, PhilosopherRunner, ScribeRunner, ArtificerRunner, buildArtificerHostSemanticContext, EvaluatorRunner, RolloutReviewerRunner, DefaultDreamerValidator, DefaultPhilosopherValidator, DefaultScribeValidator, DefaultArtificerValidator, DefaultEvaluatorValidator, DefaultRolloutReviewerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, ArtificerL2Adapter, buildL2PrincipleReaderFromLedger, OpenClawCliRuntimeAdapter, storeEmitter, createProductionGateDeps, resolveRuntimeConfigFromPdConfig, resolveRuntimeConfigForAgent, AGENT_NAME_FOR_TASK_KIND, isRuntimeConfigError, computeConsumerDecision, FULL_CHAIN_CONSUMER_RUNNER_KINDS, DEFAULT_CONSUMER_RUNNER_KINDS, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, SqliteConnection, SqliteReconciliationCursorStore, SUCCEEDED_TRANSITIONS_SCOPE, PrincipleTreeLedgerAdapter, 
 // PRI-714: resolve outputLanguage from the same effective config the
 // runners already receive (EP-07: canonical resolved value, not raw input).
 resolveOutputLanguage, } from '@principles/core/runtime-v2';
@@ -459,7 +459,18 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
                 runner = new PhilosopherRunner({ stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultPhilosopherValidator() }, runnerOptions);
                 break;
             case 'scribe':
-                runner = new ScribeRunner({ stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultScribeValidator() }, runnerOptions);
+                runner = new ScribeRunner({
+                    stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultScribeValidator(),
+                    // I2 — CHAIN STAMPING (Owner review of PR #1856, P1): the scribe
+                    // stamps the ledger principle UUID (minted at intake, keyed by the
+                    // dreamer task seed's candidateId) onto the artifact it writes, so
+                    // the dispatcher's ledger identity gate sees a resolvable
+                    // identity on the live production chain. listForCandidate reads
+                    // the ledger from disk per call — no cross-cycle staleness.
+                    ledgerIdentity: {
+                        listForCandidate: (candidateId) => new PrincipleTreeLedgerAdapter({ stateDir: `${workspaceDir}/.state` }).listForCandidate(candidateId),
+                    },
+                }, runnerOptions);
                 break;
             case 'artificer':
                 runner = new ArtificerRunner({ stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultArtificerValidator() }, 
@@ -483,6 +494,14 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
                 runner = new EvaluatorRunner({
                     stateManager, runtimeAdapter: adapter, eventEmitter: workspaceEmitter,
                     artifactStore: stateManager.piArtifactStore, validator: new DefaultEvaluatorValidator(),
+                    // PRI-911A (I1 writer boundary): the rule artifact's identity is a
+                    // ledger UUID or nothing. hasPrinciple turns "UUID-shaped" into
+                    // "UUID the ledger actually mints", so a shaped-but-unknown id is
+                    // refused as invalid_identity instead of being carried forward.
+                    // Same per-call disk read as the scribe wiring above.
+                    ledgerIdentity: {
+                        hasPrinciple: (principleId) => new PrincipleTreeLedgerAdapter({ stateDir: `${workspaceDir}/.state` }).hasPrinciple(principleId),
+                    },
                     ...createEvaluatorRepairDeps(workspaceDir, stateManager, logger),
                 }, {
                     ...runnerOptions,

package/dist/internalization-consumer-governance.js

@@ -14,7 +14,7 @@
  * dedupes by `${artifactId}::${channel}`; reopen idempotency is owned by
  * orchestrator.reopenTaskForRevision.
  */
-import { ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, SqliteConnection, SqliteActivationStateStore, SqliteApprovalQueueStore, SqlitePIArtifactStore, createProductionGateDeps, createPITaskDiagnosticJson, artificerRepairTaskId, computeFeatureFlagsFromConfig, isFeatureEnabled, } from '@principles/core/runtime-v2';
+import { ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, SqliteConnection, SqliteActivationStateStore, SqliteApprovalQueueStore, SqlitePIArtifactStore, PrincipleTreeLedgerAdapter, createProductionGateDeps, createPITaskDiagnosticJson, artificerRepairTaskId, computeFeatureFlagsFromConfig, isFeatureEnabled, } from '@principles/core/runtime-v2';
 import { loadPdConfigForPlugin } from './pd-config.js';
 function normalizeDecision(decision) {
     if (decision.decision === 'activated') {
@@ -64,6 +64,27 @@ export async function dispatchRolloutActivation(workspaceDir, input, options = {
         const activationStateStore = new SqliteActivationStateStore(connection);
         const approvalQueueStore = new SqliteApprovalQueueStore(connection);
         const flagProbe = makeFlagProbe(workspaceDir);
+        // I3 upgrade (Owner review of PR #1856, P1): the production dispatch path
+        // verifies ledger membership BEFORE the approval record and the activation
+        // commit. The ledger SSOT lives in <workspace>/.state (same dir the intake
+        // used to mint the principle UUID); candidate lineage reuses the artifact
+        // read model plus raw diagnostic_json reads.
+        const ledgerIdentity = {
+            ledger: new PrincipleTreeLedgerAdapter({ stateDir: `${workspaceDir}/.state` }),
+            getArtifactById: artifactReadModel.getArtifactById,
+            getTaskDiagnosticJson: (taskId) => {
+                try {
+                    const row = connection
+                        .getDb()
+                        .prepare('SELECT diagnostic_json FROM tasks WHERE task_id = ?')
+                        .get(taskId);
+                    return row?.diagnostic_json ?? null;
+                }
+                catch {
+                    return null;
+                }
+            },
+        };
         const dispatcher = new ActivationDispatcher(artifactReadModel, activationStateStore, {
             writers: [
                 new PromptWriter(),
@@ -79,6 +100,7 @@ export async function dispatchRolloutActivation(workspaceDir, input, options = {
                 new DeferArchiveWriter(),
             ],
             approvalQueueStore,
+            ledgerIdentity,
         });
         const decision = await dispatcher.dispatch({
             artifactId: input.artifactId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.7.8",
+  "version": "0.7.10",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,7 +21,7 @@
     "lint": "eslint \"src/**/*.ts\""
   },
   "dependencies": {
-    "@principles/core": "^1.287.2",
+    "@principles/core": "^1.287.5",
     "@principles/install-layout": "^0.2.7",
     "better-sqlite3": "^13.0.3",
     "js-yaml": "^5.4.1"