@principles/host-runtime 0.9.1 → 0.9.2

package/dist/internalization-consumer-cycle.d.ts

@@ -20,7 +20,7 @@
  * Hosts inject: a logger, a structured-event sink, their tool catalog, and an
  * env getter. Everything else is the existing production path.
  */
-import { type ToolSemanticRegistry } from '@principles/core/runtime-v2';
+import { type ToolSemanticRegistry, type BehaviorEvidencePort } from '@principles/core/runtime-v2';
 import { type ConsumerGovernanceLogger } from './internalization-consumer-governance.js';
 export declare const INTERNALIZATION_AUTO_CONSUMER_FLAG_ID = "internalization_auto_consumer";
 /** Structural logger port — OpenClaw PluginLogger and worker loggers satisfy this. */
@@ -60,6 +60,17 @@ export interface InternalizationConsumerCyclePorts {
      * omitted → the artificer prompt is built without host context.
      */
     readonly hostKinds?: readonly string[];
+    /**
+     * PRI-982 (SPEC-PD-IAER-001 FR-02/FR-03): host-injected Owner evidence
+     * assembly for code_tool_hook artificer tasks. The production
+     * implementation (openclaw-plugin) wraps `BehaviorExamplePackAssembler`;
+     * hosts that cannot assemble evidence (Codex worker as of PRI-982) omit it.
+     * Absent port + a code-channel task degrades OBSERVABLY
+     * (evidence_source_unavailable) and the task STAYS PENDING — a host
+     * assembly gap must never read as "Owner has not labeled" (SPEC §6.2),
+     * and the runner is never constructed evidence-less.
+     */
+    readonly behaviorEvidence?: BehaviorEvidencePort;
     /** Log label used in human log prefixes ('AutoConsumer' | 'CodexWorker' | …). */
     readonly logLabel: string;
     readonly envGetter?: (name: string) => string | undefined;

package/dist/internalization-consumer-cycle.js

@@ -23,7 +23,7 @@
 import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, PhilosopherRunner, ScribeRunner, ArtificerRunner, buildArtificerHostSemanticContext, EvaluatorRunner, RolloutReviewerRunner, DefaultDreamerValidator, DefaultPhilosopherValidator, DefaultScribeValidator, DefaultArtificerValidator, DefaultEvaluatorValidator, DefaultRolloutReviewerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, ArtificerL2Adapter, buildL2PrincipleReaderFromLedger, OpenClawCliRuntimeAdapter, storeEmitter, createProductionGateDeps, resolveRuntimeConfigFromPdConfig, resolveRuntimeConfigForAgent, AGENT_NAME_FOR_TASK_KIND, isRuntimeConfigError, computeConsumerDecision, FULL_CHAIN_CONSUMER_RUNNER_KINDS, DEFAULT_CONSUMER_RUNNER_KINDS, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, SqliteConnection, SqliteReconciliationCursorStore, SUCCEEDED_TRANSITIONS_SCOPE, PrincipleTreeLedgerAdapter, 
 // PRI-714: resolve outputLanguage from the same effective config the
 // runners already receive (EP-07: canonical resolved value, not raw input).
-resolveOutputLanguage, } from '@principles/core/runtime-v2';
+resolveOutputLanguage, hydratePITaskRecord, preflightArtificerOwnerEvidence, } from '@principles/core/runtime-v2';
 import { loadLedger } from '@principles/core/principle-tree-ledger';
 import { loadPdConfigForPlugin, loadFeatureFlagFromConfig } from './pd-config.js';
 import { createEvaluatorRepairDeps, createRolloutGovernanceDeps } from './internalization-consumer-governance.js';
@@ -296,6 +296,22 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
         // without touching leases, idempotency, dependency order, or the
         // single-task-per-cycle semantics. Ties keep the original priority order.
         const orderedRunnerKinds = orderKindsByOldestReadyStage(decision.runnerKinds, snapshot.readyTasks);
+        // PRI-634 A3: workspace-scoped telemetry sink. Constructed here (per-wake,
+        // workspaceDir in scope) so events from THIS workspace's runners are
+        // attributable to THIS workspace — a global subscriber on the storeEmitter
+        // singleton cannot (multi-workspace isolation, see
+        // workspace-telemetry-emitter.ts). Persist failures degrade through the
+        // host's structured event port, never break the runner.
+        // PRI-795 review P1: shared by the EvaluatorRunner AND the ArtificerL2
+        // adapter so `artificer_l2_complete` evidence (abortOwner/budget/elapsed/
+        // stopReason/tokenUsage) persists durably instead of vanishing with the
+        // process (the EP002-R3 "nothing recoverable after a failure" class).
+        const workspaceEmitter = new WorkspaceTelemetryEmitter(storeEmitter, workspaceDir, (detail) => {
+            emitEvent('WORKSPACE_TELEMETRY_PERSIST_FAILED', detail);
+        });
+        let artificerEvidence = null;
+        let authoritativeChannel = null;
+        let preflightSkipReason;
         for (const kind of orderedRunnerKinds) {
             const agentName = AGENT_NAME_FOR_TASK_KIND[kind];
             if (agentName === undefined) {
@@ -327,6 +343,109 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             }
             const candidate = await orchestrator.wakeOnce(kind);
             if (candidate.decision === 'would_lease') {
+                // PRI-982 (SPEC-PD-IAER-001 §4.2 / FR-02): authoritative channel routing
+                // for artificer tasks. The channel is written deterministically by the
+                // intake bridge at seed time (pi_metadata.channel — the SINGLE authority,
+                // inherited along the chain) and is read from the leased task's hydrated
+                // metadata here; the cycle NEVER guesses it from task names or model text.
+                //   - code_tool_hook → RuleCode sub-chain: evidence preflight FIRST, then
+                //     L2 (flag permitting) with the assembled pack injected;
+                //   - prompt → the legal non-L2 pipeline (PiAi), evidence-exempt
+                //     (production: 40 successes on that pipeline);
+                //   - unresolvable → refuse to guess: observable skip, no run (T08).
+                const leasedTaskForChannel = await stateManager.getTask(candidate.taskId);
+                const leasedPiTask = leasedTaskForChannel ? hydratePITaskRecord(leasedTaskForChannel) : null;
+                authoritativeChannel = leasedPiTask?.channel ?? null;
+                if (candidate.taskKind === 'artificer') {
+                    if (authoritativeChannel === null || leasedPiTask === null) {
+                        // Defensive: wakeOnce never leases non-hydratable tasks, so reaching
+                        // here means the metadata corrupted between wake and read. Fail closed
+                        // — never route an artificer task without an authoritative channel.
+                        const channelInfo = JSON.stringify({
+                            reason: 'artificer_channel_unresolvable',
+                            taskId: candidate.taskId,
+                            nextAction: 'Inspect and repair the task metadata (pi_metadata.channel); the consumer refuses to route an artificer task without an authoritative channel (SPEC-PD-IAER-001 §4.2, T08).',
+                        });
+                        emitEvent('INTERNALIZATION_CONSUMER_SKIP', channelInfo);
+                        logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: authoritative channel unresolvable.`);
+                        preflightSkipReason = 'artificer_channel_unresolvable';
+                        continue;
+                    }
+                    if (authoritativeChannel === 'code_tool_hook') {
+                        // Capability OFF must block generation, not merely select L1.
+                        if (!loadFeatureFlagFromConfig(workspaceDir, 'code_rule_capability').enabled) {
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', JSON.stringify({
+                                reason: 'code_rule_capability_disabled',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: 'Owner must enable code_rule_capability before Code Rule generation.',
+                            }));
+                            logger.warn('[PD:' + logLabel + '] Code Rule task ' + candidate.taskId + ' paused: capability disabled.');
+                            preflightSkipReason = 'code_rule_capability_disabled';
+                            continue;
+                        }
+                        artificerEvidence = await preflightArtificerOwnerEvidence({
+                            taskId: candidate.taskId,
+                            piTask: leasedPiTask,
+                            owner,
+                            workspaceDir, // FR-08 run-correlation telemetry (PRI-984)
+                            stateManager,
+                            eventEmitter: workspaceEmitter,
+                            behaviorEvidence: ports.behaviorEvidence,
+                        });
+                        if (artificerEvidence.decision === 'evidence_source_unavailable') {
+                            // SPEC §6.2: a host assembly gap is NOT "Owner has not labeled".
+                            // The task stays pending (re-observable next cycle, zero model
+                            // cost); the runner is never constructed evidence-less.
+                            const gapInfo = JSON.stringify({
+                                reason: 'evidence_source_unavailable',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: 'Host must wire the behaviorEvidence port (BehaviorExamplePackAssembler) into the consumer cycle ports; the task stays pending until then.',
+                            });
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', gapInfo);
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: evidence source unavailable (host must wire the behaviorEvidence port).`);
+                            preflightSkipReason = 'evidence_source_unavailable';
+                            continue;
+                        }
+                        if (artificerEvidence.decision === 'evidence_source_error') {
+                            // PRI-980 review P2-1 — SPEC §6.2 case 3: a trajectory-store I/O
+                            // fault is preserved AS a storage fault. Same family as the absent
+                            // port: the task stays wake-eligible (the next cycle retries the
+                            // assembly at zero model cost), the runner is never constructed,
+                            // and the preflight already emitted the structured degradation
+                            // telemetry (reason=evidence_source_error, reviewPersisted=false).
+                            const storageInfo = JSON.stringify({
+                                reason: 'evidence_source_error',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: artificerEvidence.nextAction,
+                                ...(artificerEvidence.detail !== undefined ? { detail: artificerEvidence.detail } : {}),
+                            });
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', storageInfo);
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: evidence source error (storage fault preserved; task stays wake-eligible).`);
+                            preflightSkipReason = 'evidence_source_error';
+                            continue;
+                        }
+                        if (artificerEvidence.decision === 'blocked') {
+                            // FR-04: the preflight already moved the task atomically into
+                            // needs_human_review — outside the wake scan (pending/retry_wait
+                            // only), so it is never auto-rewoken (FR-05/T02). reviewPersisted
+                            // = false means a concurrent writer won the CAS; still no run.
+                            emitEvent('INTERNALIZATION_CONSUMER_EVIDENCE_BLOCKED', JSON.stringify({
+                                taskId: candidate.taskId,
+                                reasonCode: artificerEvidence.reasonCode,
+                                nextAction: artificerEvidence.nextAction,
+                                ...(artificerEvidence.missingFields !== undefined ? { missingFields: [...artificerEvidence.missingFields] } : {}),
+                                ...(artificerEvidence.detail !== undefined ? { detail: artificerEvidence.detail } : {}),
+                                reviewPersisted: artificerEvidence.reviewPersisted,
+                            }));
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} blocked on Owner evidence (${artificerEvidence.reasonCode}, reviewPersisted=${artificerEvidence.reviewPersisted}).`);
+                            preflightSkipReason = 'artificer_blocked_on_owner_evidence';
+                            continue;
+                        }
+                    }
+                }
                 wakeResult = candidate;
                 taskRuntimeConfig = kindRuntime;
                 break;
@@ -337,6 +456,10 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             lastSkipReason = candidate.decision === 'no_ready_tasks' ? candidate.reason : undefined;
         }
         if (!wakeResult || taskRuntimeConfig === null) {
+            if (preflightSkipReason !== undefined) {
+                lastSkipDecision = preflightSkipReason;
+                lastSkipReason = undefined;
+            }
             // A: 预算由周期 finally 统一执行 (每周期恰一次,含 backlog 场景)
             const skipPayload = { decision: lastSkipDecision };
             if (lastSkipReason) {
@@ -349,19 +472,6 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
         // PRI-719: everything downstream reads the LEASED TASK's resolved config —
         // the kind-specific profile, not the shared gate resolution.
         const taskRuntimeKind = taskRuntimeConfig.runtimeKind;
-        // PRI-634 A3: workspace-scoped telemetry sink. Constructed here (per-wake,
-        // workspaceDir in scope) so events from THIS workspace's runners are
-        // attributable to THIS workspace — a global subscriber on the storeEmitter
-        // singleton cannot (multi-workspace isolation, see
-        // workspace-telemetry-emitter.ts). Persist failures degrade through the
-        // host's structured event port, never break the runner.
-        // PRI-795 review P1: shared by the EvaluatorRunner AND the ArtificerL2
-        // adapter so `artificer_l2_complete` evidence (abortOwner/budget/elapsed/
-        // stopReason/tokenUsage) persists durably instead of vanishing with the
-        // process (the EP002-R3 "nothing recoverable after a failure" class).
-        const workspaceEmitter = new WorkspaceTelemetryEmitter(storeEmitter, workspaceDir, (detail) => {
-            emitEvent('WORKSPACE_TELEMETRY_PERSIST_FAILED', detail);
-        });
         let adapter;
         if (taskRuntimeKind === 'pi-ai') {
             // PRI-419: when l2_dreamer flag is on AND this is a dreamer task, route
@@ -372,9 +482,15 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             // so the model can self-iterate before submitting. Honors the
             // code_rule_capability emergency-disable flag (PR #1661 CodeRabbit P1).
             const codeRuleFlag = loadFeatureFlagFromConfig(workspaceDir, 'code_rule_capability');
+            // PRI-982 (SPEC-PD-IAER-001 §4.2): the authoritative TARGET CHANNEL is
+            // part of the L2 selection — `pi_metadata.channel === 'code_tool_hook'`
+            // (the seed-time bridge authority). prompt-channel artificer tasks are
+            // misroutes on L2 (production: 54 failures) and keep the legal non-L2
+            // PiAi pipeline below; unresolvable channels never enter L2.
             if (wakeResult.taskKind === 'artificer'
                 && taskRuntimeKind === 'pi-ai'
-                && codeRuleFlag.enabled) {
+                && codeRuleFlag.enabled
+                && authoritativeChannel === 'code_tool_hook') {
                 adapter = new ArtificerL2Adapter({
                     // Profile readiness check guarantees these are non-undefined for
                     // pi-ai runtime kind (validatePdLocalProfile enforces provider/model/apiKeyEnv).
@@ -518,7 +634,16 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
                 }, runnerOptions);
                 break;
             case 'artificer':
-                runner = new ArtificerRunner({ stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultArtificerValidator() }, 
+                runner = new ArtificerRunner({
+                    stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultArtificerValidator(),
+                    // PRI-982 (SPEC-PD-IAER-001 FR-02): the preflight-assembled Owner
+                    // evidence pack — present only when the authoritative channel is
+                    // code_tool_hook AND the readiness gate returned ready (same
+                    // ArtificerRunnerDeps shape as the run-rulehost CLI pipeline).
+                    ...(artificerEvidence !== null && artificerEvidence.decision === 'ready'
+                        ? { behaviorExamplePack: artificerEvidence.pack }
+                        : {}),
+                }, 
                 // PRI-741: thread the host semantic projection into generation.
                 { ...runnerOptions, ...(artificerHostSemanticContext !== undefined ? { hostSemanticContext: artificerHostSemanticContext } : {}) });
                 break;

package/dist/workspace-telemetry-emitter.js

@@ -25,6 +25,14 @@ import { StoreEventEmitter } from '@principles/core/runtime-v2';
  *   - artificer_l2_complete（PRI-795 review P1：Artificer L2 的 completion
  *     证据 — abortOwner/budgetMs/elapsedMs/stopReason/tokenUsage — 必须
  *     crash 前落盘，否则 EP002-R3 的「失败后什么都查不到」重演）
+ *   - artificer_blocked_on_owner_evidence（PRI-982 / SPEC-PD-IAER-001
+ *     FR-04：consumer evidence preflight 把任务原子转入 needs_human_review
+ *     时的 Owner 恢复证据 — 稳定 reasonCode + nextAction + reviewPersisted。
+ *     与 artificer_l2_complete 同理必须 crash 前落盘：进程内 storeEmitter
+ *     生产装配零订阅者，事件丢失会让 NHR 任务变成「为什么被挡」的无头案
+ *     （EP002-R3 类）。注意 readiness_checked 刻意不入列：它对每个 gate
+ *     verdict 都发（含 ready），落盘会形成高频第二日志；blocked 才是
+ *     Owner 必须能事后取证的判定点）
  *   - reuse_gate_triggered（PRI-939 Option A：Reuse Review Gate 挂起观察，
  *     Owner 复用闭环的入口证据）
  *   - reuse_evaluation_unavailable（PRI-939 Option A：语义评估降级信号 —
@@ -44,6 +52,11 @@ const CRITICAL_EVENT_ALLOWLIST = new Set([
     'evaluator_rule_assembled',
     'evaluator_rule_assembly_failed',
     'artificer_l2_complete',
+    // PRI-982 (SPEC-PD-IAER-001 FR-04): Owner-recovery evidence for a task the
+    // consumer evidence preflight just blocked into needs_human_review — stable
+    // reasonCode + nextAction must survive a crash (same EP002-R3 class as
+    // artificer_l2_complete above; justification in the header comment).
+    'artificer_blocked_on_owner_evidence',
     'reuse_gate_triggered',
     'reuse_evaluation_unavailable',
 ]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -23,7 +23,7 @@
     "lint": "eslint \"src/**/*.ts\""
   },
   "dependencies": {
-    "@principles/core": "^1.292.1",
+    "@principles/core": "^1.292.2",
     "@principles/install-layout": "^0.3.1",
     "better-sqlite3": "^13.0.3",
     "js-yaml": "^5.4.3"