@principles/pd-cli 1.152.11 → 1.152.13

package/src/commands/candidate.ts

@@ -1,1260 +0,0 @@
-/**
- * pd candidate commands — Principle candidate inspection, intake, audit, repair.
- *
- * Usage:
- *   pd candidate list --task-id <taskId> --workspace <path> [--json]
- *   pd candidate show <candidateId> --workspace <path> [--json]
- *   pd candidate intake --candidate-id <id> [--workspace <path>] [--json] [--dry-run]
- *   pd candidate audit --workspace <path> [--json]
- *   pd candidate repair --candidate-id <id> --workspace <path> [--json]
- *   pd candidate route --candidate-id <id> --workspace <path> [--json]
- */
-import { randomUUID } from 'crypto';
-import * as path from 'path';
-import {
-  RuntimeStateManager,
-  SqliteConnection,
-  candidateList,
-  candidateShow,
-  CandidateIntakeService,
-  CandidateIntakeError,
-  decideInternalizationRoute,
-  buildDreamerSeedFromCandidate,
-  findExistingDreamerTask,
-  PrincipleTreeLedgerAdapter,
-  type LedgerPrincipleEntry,
-} from '@principles/core/runtime-v2';
-import { loadLedger, getLedgerFilePathPublic } from '@principles/core/principle-tree-ledger';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-import { resolvePromptFullPipelineSeedMode } from '../services/pd-config-loader.js';
-import { createRemediationResult, remediationAction } from './remediation-output.js';
-import type { RemediationResult } from './remediation-output.js';
-import { checkAdmissionGate } from './admission-gate.js';
-
-// ── Interfaces ────────────────────────────────────────────────────────────────
-
-interface CandidateListOptions {
-  taskId: string;
-  workspace?: string;
-  json?: boolean;
-}
-
-interface CandidateShowOptions {
-  candidateId: string;
-  workspace?: string;
-  json?: boolean;
-}
-
-interface CandidateIntakeOptions {
-  candidateId: string;
-  workspace?: string;
-  json?: boolean;
-  dryRun?: boolean;
-}
-
-interface CandidateAuditOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-interface CandidateRepairOptions {
-  candidateId: string;
-  workspace?: string;
-  json?: boolean;
-}
-
-interface AuditResult {
-  status: 'ok' | 'degraded';
-  consumedCount: number;
-  missingLedgerEntryIds: string[];
-  checkedLedgerPath: string;
-  checkedDbPath: string;
-}
-
-// ── Shared helpers ───────────────────────────────────────────────────────────
-
-/** Update candidate status. Sets consumed_at when status='consumed'. */
-interface UpdateCandidateStatusOptions {
-  stateManager: RuntimeStateManager;
-  candidateId: string;
-  targetStatus: string;
-  expectedCurrentStatus?: string;
-}
-
-async function updateCandidateStatus(opts: UpdateCandidateStatusOptions): Promise<void> {
-  const { stateManager, candidateId, targetStatus, expectedCurrentStatus } = opts;
-  const db = stateManager.connection;
-  const now = new Date().toISOString();
-  if (targetStatus === 'consumed') {
-    const result = db.getDb().prepare(
-      'UPDATE principle_candidates SET status = ?, consumed_at = ? WHERE candidate_id = ? AND status = ?'
-    ).run(targetStatus, now, candidateId, expectedCurrentStatus ?? targetStatus);
-    if (result.changes === 0) {
-      throw new Error(`Guarded transition failed: candidate ${candidateId} is not in expected status '${expectedCurrentStatus ?? targetStatus}'`);
-    }
-  } else {
-    const result = db.getDb().prepare(
-      'UPDATE principle_candidates SET status = ? WHERE candidate_id = ? AND status = ?'
-    ).run(targetStatus, candidateId, expectedCurrentStatus ?? targetStatus);
-    if (result.changes === 0) {
-      throw new Error(`Guarded transition failed: candidate ${candidateId} is not in expected status '${expectedCurrentStatus ?? targetStatus}'`);
-    }
-  }
-}
-
-/**
- * Ensure consumed_at is set for a consumed candidate.
- * Returns the consumed_at value (existing or newly written), or null if candidate not found.
- */
-async function ensureConsumedAt(stateManager: RuntimeStateManager, candidateId: string): Promise<string | null> {
-  const db = stateManager.connection;
-  const row = db.getDb().prepare('SELECT consumed_at FROM principle_candidates WHERE candidate_id = ?').get(candidateId) as { consumed_at: string | null } | undefined;
-  if (!row) return null;
-  if (row.consumed_at) return row.consumed_at;
-  const now = new Date().toISOString();
-  db.getDb().prepare('UPDATE principle_candidates SET consumed_at = ? WHERE candidate_id = ?').run(now, candidateId);
-  return now;
-}
-
-interface ResolvedRecommendation {
-  kind: string;
-  description: string;
-  triggerPattern?: string;
-  action?: string;
-  abstractedPrinciple?: string;
-  usedFallback: boolean;
-}
-
-/**
- * Resolve `sourcePainId` from the canonical diagnostician task chain.
- *
- * The `CandidateRecord` does not carry `sourcePainId` — it must be resolved by
- * looking up the diagnostician task (`candidate.taskId`) and parsing its
- * `diagnosticJson`, which contains `sourcePainId` as a top-level key (set by
- * `PainSignalBridge.buildDiagnosticJson`).
- *
- * Runtime Contract:
- *   - Rule 1: parsed JSON treated as `unknown`
- *   - Rule 2: no `as` bypass; type narrowing via `typeof` + `Object.hasOwn`
- *   - Rule 5: `Object.hasOwn` for untrusted key checks
- *
- * ERR-004: `sourcePainId` resolved from canonical chain, never invented.
- *
- * @returns The validated `sourcePainId`, or `null` when it cannot be resolved
- *          (task missing, JSON malformed, field absent, wrong type, or blank).
- *          Callers at the production boundary must fail loud on `null`.
- */
-export async function resolveSourcePainIdFromDiagnostician(
-  stateManager: RuntimeStateManager,
-  candidate: { taskId?: string; sourceRunId?: string },
-): Promise<string | null> {
-  const candidateTaskId = candidate.taskId?.trim();
-  if (!candidateTaskId) return null;
-
-  let diagTask = await stateManager.getTask(candidateTaskId);
-  if (!diagTask) return null;
-
-  // Production candidates are emitted by diag_router. Resolve its validated
-  // diagnosisId from the exact source run, then verify the referenced task is
-  // a diagnostician task before trusting its lineage.
-  if (diagTask.taskKind === 'diag_router') {
-    const sourceRunId = candidate.sourceRunId?.trim();
-    if (!sourceRunId) return null;
-    const sourceRun = await stateManager.getRun(sourceRunId);
-    if (!sourceRun || sourceRun.taskId !== candidateTaskId || typeof sourceRun.outputPayload !== 'string') return null;
-    let routerOutput: unknown;
-    try {
-      routerOutput = JSON.parse(sourceRun.outputPayload);
-    } catch {
-      return null;
-    }
-    if (routerOutput === null || typeof routerOutput !== 'object' || Array.isArray(routerOutput) ||
-        !Object.hasOwn(routerOutput, 'diagnosisId')) return null;
-    const diagnosisId = Reflect.get(routerOutput, 'diagnosisId');
-    if (typeof diagnosisId !== 'string' || diagnosisId.trim() === '') return null;
-    diagTask = await stateManager.getTask(diagnosisId.trim());
-  }
-
-  // Reject every non-canonical task kind to prevent cross-chain lineage
-  // contamination from arbitrary candidate.taskId values.
-  if (!diagTask || diagTask.taskKind !== 'diagnostician') return null;
-
-  if (typeof diagTask.diagnosticJson !== 'string') return null;
-
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(diagTask.diagnosticJson);
-  } catch {
-    return null;
-  }
-
-  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) return null;
-  if (!Object.hasOwn(parsed, 'sourcePainId')) return null;
-
-  const sourcePainId = Reflect.get(parsed, 'sourcePainId');
-  if (typeof sourcePainId !== 'string' || sourcePainId.trim() === '') return null;
-
-  return sourcePainId.trim();
-}
-
-function resolveCandidateRecommendation(
-  candidate: { sourceRecommendationJson?: string; description?: string },
-  stateManager: RuntimeStateManager,
-  candidateId: string,
-): ResolvedRecommendation {
-  if (candidate.sourceRecommendationJson) {
-    try {
-      const parsed = JSON.parse(candidate.sourceRecommendationJson);
-      if (parsed?.kind) {
-        return {
-          kind: parsed.kind,
-          description: parsed.description ?? candidate.description ?? '',
-          triggerPattern: parsed.triggerPattern,
-          action: parsed.action,
-          abstractedPrinciple: parsed.abstractedPrinciple,
-          usedFallback: false,
-        };
-      }
-    } catch { /* fall through to column fallback */ }
-  }
-
-  const row = stateManager.connection.getDb().prepare(
-    'SELECT recommendation_kind, trigger_pattern, action, abstracted_principle FROM principle_candidates WHERE candidate_id = ?',
-  ).get(candidateId) as
-    { recommendation_kind: string; trigger_pattern: string | null; action: string | null; abstracted_principle: string | null } | undefined;
-
-  if (row) {
-    return {
-      kind: row.recommendation_kind,
-      description: candidate.description || '',
-      triggerPattern: row.trigger_pattern ?? undefined,
-      action: row.action ?? undefined,
-      abstractedPrinciple: row.abstracted_principle ?? undefined,
-      usedFallback: true,
-    };
-  }
-
-  return {
-    kind: 'defer',
-    description: candidate.description || 'No recommendation data available',
-    usedFallback: false,
-  };
-}
-
-// ── List ───────────────────────────────────────────────────────────────────────
-
-export async function handleCandidateList(opts: CandidateListOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-
-  try {
-    await stateManager.initialize();
-
-    const result = await candidateList({
-      taskId: opts.taskId,
-      stateManager,
-    });
-
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-      return;
-    }
-
-    if (result.candidates.length === 0) {
-      console.log(`No candidates found for task: ${opts.taskId}`);
-      return;
-    }
-
-    console.log(`\nPrinciple Candidates for Task: ${opts.taskId}\n`);
-    console.log(`  Total: ${result.candidates.length}\n`);
-
-    for (const candidate of result.candidates) {
-      console.log(`  Candidate: ${candidate.candidateId}`);
-      console.log(`    Title:       ${candidate.title}`);
-      console.log(`    Artifact:    ${candidate.artifactId}`);
-      console.log(`    Source Run:  ${candidate.sourceRunId}`);
-      console.log(`    Confidence:  ${candidate.confidence ?? 'N/A'}`);
-      console.log(`    Status:      ${candidate.status}`);
-      console.log(`    Description: ${candidate.description.substring(0, 100)}${candidate.description.length > 100 ? '...' : ''}`);
-      console.log('');
-    }
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Internalize (PRI-89) ──────────────────────────────────────────────────────
-
-interface CandidateInternalizeOptions {
-  candidateId: string;
-  workspace?: string;
-  json?: boolean;
-  dryRun?: boolean;
-}
-
-interface CandidateInternalizeResult {
-  candidateId: string;
-  route: string;
-  taskId?: string;
-  channel?: string;
-  status: 'created' | 'existing' | 'dry_run' | 'no_task_created';
-  reason?: string;
-  /** Required for degraded/refused/failed statuses — tells the operator what to do next. */
-  nextAction?: string;
-}
-
-export async function handleCandidateInternalize(opts: CandidateInternalizeOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-  // PRI-720: resolve the full-chain override once per invocation (seed-time
-  // application; affects only chains this command seeds).
-  const seedPipelineMode = resolvePromptFullPipelineSeedMode(workspaceDir);
-
-  try {
-    await stateManager.initialize();
-
-    const candidate = await stateManager.getCandidate(opts.candidateId);
-    if (!candidate) {
-      const result: CandidateInternalizeResult = {
-        candidateId: opts.candidateId,
-        route: 'unknown',
-        status: 'no_task_created',
-        reason: `Candidate not found: ${opts.candidateId}`,
-        nextAction: 'Verify candidate ID and run pd candidate show <id> to check existence',
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.error(`Candidate not found: ${opts.candidateId}`);
-      }
-      process.exit(1);
-      return;
-    }
-
-    const recommendation = resolveCandidateRecommendation(candidate, stateManager, opts.candidateId);
-
-    const decision = decideInternalizationRoute(recommendation as Parameters<typeof decideInternalizationRoute>[0]);
-
-    // PRI-435: Resolve sourcePainId from the canonical diagnostician task chain.
-    // The CandidateRecord does not carry sourcePainId — it must be looked up
-    // from the diagnostician task's diagnosticJson via candidate.taskId.
-    // Missing/malformed sourcePainId must fail loud with no side effects.
-    const sourcePainId = await resolveSourcePainIdFromDiagnostician(stateManager, candidate);
-    if (sourcePainId === null) {
-      const result: CandidateInternalizeResult = {
-        candidateId: opts.candidateId,
-        route: decision.route,
-        status: 'no_task_created',
-        reason: `Cannot resolve sourcePainId from diagnostician task chain for candidate ${opts.candidateId}`,
-        nextAction: 'Verify the diagnostician task diagnosticJson contains a valid top-level sourcePainId; re-run diagnosis if the pain signal is missing',
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.error(`Cannot resolve sourcePainId for candidate ${opts.candidateId}`);
-        console.error(`Next: ${result.nextAction}`);
-      }
-      process.exit(1);
-      return;
-    }
-
-    const seed = buildDreamerSeedFromCandidate(candidate, { route: decision.route, ready: decision.ready, sourcePainId, pipelineMode: seedPipelineMode });
-    // eslint-disable-next-line no-restricted-syntax -- 'in' required for discriminated union narrowing (BridgeTaskSeed | BridgeDecision)
-    if ('decision' in seed) {
-      const decisionResult = seed as { decision: string; reason?: string; taskId?: string };
-      const reason = decisionResult.decision === 'already_exists'
-        ? `Task ${decisionResult.taskId} already exists`
-        : decisionResult.reason ?? 'Seed not created';
-      const result: CandidateInternalizeResult = {
-        candidateId: opts.candidateId,
-        route: decision.route,
-        status: 'no_task_created',
-        reason,
-        nextAction: reason.startsWith('Candidate ')
-          ? 'Check candidate lineage fields (taskId, artifactId, sourceRunId)'
-          : 'Verify internalization route configuration and candidate readiness',
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.log(`\nCandidate Internalize: ${opts.candidateId}\n`);
-        console.log(`  Route:   ${decision.route}`);
-        console.log(`  Ready:   ${decision.ready}`);
-        console.log(`  Reason:  ${reason}`);
-        console.log(`  Next:    ${result.nextAction}`);
-        console.log('');
-      }
-      return;
-    }
-
-    const { channel } = seed;
-
-    if (opts.dryRun) {
-      const result: CandidateInternalizeResult = {
-        candidateId: opts.candidateId,
-        route: decision.route,
-        channel: seed.channel,
-        status: 'dry_run',
-        reason: 'Dry-run mode — no task created',
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.log(`\nCandidate Internalize (dry-run): ${opts.candidateId}\n`);
-        console.log(`  Route:    ${decision.route}`);
-        console.log(`  Channel:  ${channel}`);
-        console.log(`  Would create: dreamer PI task`);
-        console.log('');
-      }
-      return;
-    }
-
-    // PRI-720 C6: candidate-level dedup (demotion may change the derived
-    // channel suffix vs a pre-existing chain).
-    const existingTask = await findExistingDreamerTask((id) => stateManager.getTask(id), opts.candidateId);
-    if (existingTask) {
-      const result: CandidateInternalizeResult = {
-        candidateId: opts.candidateId,
-        route: decision.route,
-        taskId: existingTask.taskId,
-        channel: seed.channel,
-        status: 'existing',
-        reason: 'Task already exists for this candidate (any channel variant)',
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.log(`\nCandidate Internalize: ${opts.candidateId}\n`);
-        console.log(`  Route:    ${decision.route}`);
-        console.log(`  Channel:  ${channel}`);
-        console.log(`  Task:     ${existingTask.taskId} (existing)`);
-        console.log('');
-      }
-      return;
-    }
-
-    const task = await stateManager.createTask({
-      taskId: seed.taskId,
-      taskKind: seed.taskKind,
-      status: seed.status,
-      attemptCount: seed.attemptCount,
-      maxAttempts: seed.maxAttempts,
-      diagnosticJson: seed.diagnosticJson,
-    });
-
-    const result: CandidateInternalizeResult = {
-      candidateId: opts.candidateId,
-      route: decision.route,
-      taskId: task.taskId,
-      channel: seed.channel,
-      status: 'created',
-    };
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`\nCandidate Internalize: ${opts.candidateId}\n`);
-      console.log(`  Route:    ${decision.route}`);
-      console.log(`  Channel:  ${channel}`);
-      console.log(`  Task:     ${task.taskId} (created)`);
-      console.log('');
-    }
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Show ───────────────────────────────────────────────────────────────────────
-
-export async function handleCandidateShow(opts: CandidateShowOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-
-  try {
-    await stateManager.initialize();
-
-    const ledgerAdapter = new PrincipleTreeLedgerAdapter({ stateDir: path.join(workspaceDir, '.state') });
-
-    const result = await candidateShow({
-      candidateId: opts.candidateId,
-      stateManager,
-      ledgerAdapter,
-    });
-
-    if (!result) {
-      console.error(`Candidate not found: ${opts.candidateId}`);
-      process.exit(1);
-    }
-
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-      return;
-    }
-
-    console.log(`\nPrinciple Candidate: ${result.candidateId}\n`);
-    console.log(`  Title:       ${result.title}`);
-    console.log(`  Description: ${result.description}`);
-    console.log(`  Artifact:    ${result.artifactId}`);
-    console.log(`  Task:        ${result.taskId}`);
-    console.log(`  Source Run:  ${result.sourceRunId}`);
-    console.log(`  Confidence:  ${result.confidence ?? 'N/A'}`);
-    console.log(`  Status:      ${result.status}`);
-    console.log(`  Created:     ${result.createdAt}`);
-    if (result.ledgerEntryId) {
-      console.log(`  Ledger Entry: ${result.ledgerEntryId}`);
-    }
-    // F10-1: surface dangling sourceRunId warning in text mode (rc-9).
-    if (result.warning) {
-      console.log(`  ⚠ WARNING:   ${result.warning}`);
-    }
-    if (result.nextAction) {
-      console.log(`  Next Action: ${result.nextAction}`);
-    }
-    console.log('');
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Intake ───────────────────────────────────────────────────────────────────
-
-/**
- * pd candidate intake --candidate-id <id> [--workspace <path>] [--json] [--dry-run]
- *
- * Intakes a principle candidate into the ledger.
- * Wires together CandidateIntakeService + PrincipleTreeLedgerAdapter.
- * Updates candidate status to 'consumed' (with consumed_at) after successful ledger write.
- * If ledger write succeeds but DB update fails, exits non-zero with clear error.
- */
-export async function handleCandidateIntake(opts: CandidateIntakeOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-
-  try {
-    await stateManager.initialize();
-
-    const ledgerAdapter = new PrincipleTreeLedgerAdapter({ stateDir: path.join(workspaceDir, '.state') });
-    const service = new CandidateIntakeService({ stateManager, ledgerAdapter });
-
-    // Fetch candidate once for admission gate check and downstream paths.
-    const candidate = await stateManager.getCandidate(opts.candidateId);
-    if (!candidate) {
-      console.error(`Candidate not found: ${opts.candidateId}`);
-      process.exit(1);
-      return;
-    }
-
-    // PRI-442 Stage 4: admission gate check — refuse non-admitted candidates
-    // to prevent CLI from bypassing the production admission gate.
-    const admissionBlock = checkAdmissionGate(candidate);
-    if (admissionBlock) {
-      const result = {
-        candidateId: opts.candidateId,
-        status: 'refused',
-        admissionDecision: admissionBlock.decision,
-        reason: admissionBlock.reason,
-        nextAction: admissionBlock.nextAction,
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.error(`Admission gate refused candidate ${opts.candidateId}: ${admissionBlock.decision}`);
-        console.error(`  Reason:      ${admissionBlock.reason}`);
-        console.error(`  Next Action: ${admissionBlock.nextAction}`);
-      }
-      process.exit(1);
-      return;
-    }
-
-    if (opts.dryRun) {
-      const artifact = await stateManager.getArtifact(candidate.artifactId);
-      if (!artifact) {
-        console.error(`Artifact not found for candidate: ${opts.candidateId}`);
-        process.exit(1);
-      }
-      let recommendation: { title?: string; text?: string; triggerPattern?: string; action?: string } = {};
-      try {
-        const parsed = JSON.parse(artifact.contentJson || '{}');
-        recommendation = parsed.recommendation || parsed;
-      } catch (err) {
-        console.warn(`Warning: could not parse artifact content as JSON — using defaults. ${err instanceof Error ? err.message : String(err)}`);
-      }
-      const entry: LedgerPrincipleEntry = {
-        id: randomUUID(),
-        title: recommendation.title || candidate.title,
-        text: recommendation.text || candidate.description || '',
-        triggerPattern: recommendation.triggerPattern || '',
-        action: recommendation.action || '',
-        status: 'probation',
-        evaluability: 'weak_heuristic',
-        sourceRef: `candidate://${opts.candidateId}`,
-        artifactRef: `artifact://${candidate.artifactId}`,
-        taskRef: candidate.taskId ? `task://${candidate.taskId}` : undefined,
-        createdAt: new Date().toISOString(),
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(entry, null, 2));
-      } else {
-        console.log(`Dry-run: would write entry for candidate ${opts.candidateId}`);
-        console.log(JSON.stringify(entry, null, 2));
-      }
-      return;
-    }
-
-    // Normal intake: ledger write first
-    const entry = await service.intake(opts.candidateId);
-
-    // Check if already consumed before this call
-    if (candidate?.status === 'consumed') {
-      const infoMessage = `Candidate ${opts.candidateId} was already consumed. Ledger entry: ${entry.id}`;
-      if (opts.json) {
-        console.log(JSON.stringify({
-          candidateId: opts.candidateId,
-          ledgerEntryId: entry.id,
-          status: 'already_consumed',
-          message: infoMessage,
-        }, null, 2));
-      } else {
-        console.log(infoMessage);
-      }
-      return;
-    }
-
-    // Update DB status — this must succeed; if it fails, exit non-zero
-    try {
-      await updateCandidateStatus({ stateManager, candidateId: opts.candidateId, targetStatus: 'consumed', expectedCurrentStatus: 'pending' });
-    } catch (err) {
-      const msg = `Ledger write succeeded (entry ${entry.id}) but DB status update failed: ${err instanceof Error ? err.message : String(err)}. ` +
-        `Candidate ${opts.candidateId} may be in inconsistent state.`;
-      console.error(`ERROR: ${msg}`);
-      process.exit(1);
-    }
-
-    const result = {
-      candidateId: opts.candidateId,
-      ledgerEntryId: entry.id,
-      status: 'consumed',
-    };
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`\nPrinciple Candidate Intake: ${opts.candidateId}\n`);
-      console.log(`  Candidate:    ${opts.candidateId}`);
-      console.log(`  Title:        ${entry.title}`);
-      console.log(`  Ledger Entry: ${entry.id}`);
-      console.log(`  Status:       consumed\n`);
-      console.log('Intake complete.\n');
-    }
-  } catch (err) {
-    if (err instanceof CandidateIntakeError || (err as { name?: string }).name === 'CandidateIntakeError') {
-      const e = err as { code?: string; message: string };
-      console.error(`Intake failed [${e.code ?? 'unknown'}]: ${e.message}`);
-    } else {
-      console.error(`Intake failed: ${String(err)}`);
-    }
-    process.exit(1);
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Audit ─────────────────────────────────────────────────────────────────────
-
-/**
- * pd candidate audit --workspace <path> [--json]
- *
- * Reads workspace/.pd/state.db principle_candidates and
- * the workspace ledger (same file used by OpenClaw plugin).
- * Checks each consumed candidate has a ledger entry.
- * Exits non-zero if any consumed candidate is missing from ledger.
- */
-export async function handleCandidateAudit(opts: CandidateAuditOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-   
-  let conn: SqliteConnection | undefined;
-
-  try {
-    const dbPath = path.join(workspaceDir, '.pd', 'state.db');
-    const ledgerStateDir = path.join(workspaceDir, '.state');
-    const ledgerPath = getLedgerFilePathPublic(ledgerStateDir);
-
-    conn = new SqliteConnection({ workspaceDir, readonly: true });
-    const db = conn.getDb();
-
-    const consumedRows = db.prepare(
-      "SELECT candidate_id FROM principle_candidates WHERE status = 'consumed'"
-    ).all() as { candidate_id: string }[];
-
-    const consumedIds = consumedRows.map(r => r.candidate_id);
-
-    const ledger = loadLedger(ledgerStateDir);
-    const ledgerPrinciples = ledger.tree.principles;
-
-    const missingLedgerEntryIds: string[] = [];
-    for (const candidateId of consumedIds) {
-      const found = Object.values(ledgerPrinciples).some((p) =>
-        p.derivedFromPainIds.includes(candidateId),
-      );
-      if (!found) {
-        missingLedgerEntryIds.push(candidateId);
-      }
-    }
-
-    const result: AuditResult = {
-      status: missingLedgerEntryIds.length === 0 ? 'ok' : 'degraded',
-      consumedCount: consumedIds.length,
-      missingLedgerEntryIds,
-      checkedLedgerPath: ledgerPath,
-      checkedDbPath: dbPath,
-    };
-
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`\nCandidate Audit Results\n`);
-      console.log(`  consumedCount: ${result.consumedCount}`);
-      console.log(`  checkedLedgerPath: ${result.checkedLedgerPath}`);
-      console.log(`  checkedDbPath: ${result.checkedDbPath}`);
-      console.log(`  status: ${result.status}`);
-      if (result.missingLedgerEntryIds.length > 0) {
-        console.log(`\n  MISSING LEDGER ENTRIES (${result.missingLedgerEntryIds.length}):`);
-        result.missingLedgerEntryIds.forEach(id => console.log(`    - ${id}`));
-      } else {
-        console.log(`\n  All consumed candidates have ledger entries.`);
-      }
-      console.log('');
-    }
-
-    if (result.status === 'degraded') {
-      process.exit(1);
-    }
-  } catch (err) {
-    console.error(`Audit failed: ${err instanceof Error ? err.message : String(err)}`);
-    process.exit(1);
-  } finally {
-    try { conn?.close(); } catch { /* best-effort close */ }
-  }
-}
-
-// ── Repair ─────────────────────────────────────────────────────────────────────
-
-/**
- * pd candidate repair --candidate-id <id> --workspace <path> [--json]
- *
- * Handles consumed but missing ledger entries.
- * Re-calls CandidateIntakeService.intake() to write ledger entry.
- * Does not regenerate candidate; does not update status (already consumed).
- * Fills consumed_at if empty.
- */
-export async function handleCandidateRepair(opts: CandidateRepairOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-
-  try {
-    await stateManager.initialize();
-
-    // Verify candidate exists and is consumed
-    const candidate = await stateManager.getCandidate(opts.candidateId);
-    if (!candidate) {
-      console.error(`Candidate not found: ${opts.candidateId}`);
-      process.exit(1);
-    }
-    if (candidate.status !== 'consumed') {
-      console.error(`Candidate ${opts.candidateId} is not consumed (status=${candidate.status}). Repair only handles consumed candidates.`);
-      process.exit(1);
-    }
-
-    // PRI-442 Stage 4: admission gate check — even for consumed candidates,
-    // re-verify admission before re-intaking to prevent bypassing the gate.
-    // A consumed candidate that would fail the gate indicates data corruption
-    // or a prior bypass; refuse and surface the reason.
-    const admissionBlock = checkAdmissionGate(candidate);
-    if (admissionBlock) {
-      const result = {
-        candidateId: opts.candidateId,
-        status: 'refused',
-        admissionDecision: admissionBlock.decision,
-        reason: admissionBlock.reason,
-        nextAction: admissionBlock.nextAction,
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.error(`Admission gate refused candidate ${opts.candidateId}: ${admissionBlock.decision}`);
-        console.error(`  Reason:      ${admissionBlock.reason}`);
-        console.error(`  Next Action: ${admissionBlock.nextAction}`);
-      }
-      process.exit(1);
-      return;
-    }
-
-    const ledgerAdapter = new PrincipleTreeLedgerAdapter({ stateDir: path.join(workspaceDir, '.state') });
-    const service = new CandidateIntakeService({ stateManager, ledgerAdapter });
-
-    // Check if already in ledger
-    const existing = ledgerAdapter.existsForCandidate(opts.candidateId);
-    if (existing) {
-      const consumedAt = await ensureConsumedAt(stateManager, opts.candidateId);
-      const result = {
-        candidateId: opts.candidateId,
-        status: 'already_consistent',
-        message: `Candidate ${opts.candidateId} already has ledger entry.`,
-        ledgerEntryId: existing.id,
-        consumedAt,
-      };
-      if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
-      } else {
-        console.log(`\nCandidate ${opts.candidateId} already has ledger entry: ${existing.id}\n`);
-        console.log('No repair needed.\n');
-      }
-      return;
-    }
-
-    // Re-intake to restore ledger entry
-    const entry = await service.intake(opts.candidateId);
-    const consumedAt = await ensureConsumedAt(stateManager, opts.candidateId);
-
-    const result = {
-      candidateId: opts.candidateId,
-      status: 'repaired',
-      ledgerEntryId: entry.id,
-      consumedAt,
-      message: `Ledger entry restored for consumed candidate ${opts.candidateId}.`,
-    };
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`\nCandidate Repair: ${opts.candidateId}\n`);
-      console.log(`  Status:        repaired`);
-      console.log(`  Ledger Entry:   ${entry.id}\n`);
-      console.log('Repair complete.\n');
-    }
-  } catch (err) {
-    if (err instanceof CandidateIntakeError || (err as { name?: string }).name === 'CandidateIntakeError') {
-      const e = err as { code?: string; message: string };
-      console.error(`Repair failed [${e.code ?? 'unknown'}]: ${e.message}`);
-    } else {
-      console.error(`Repair failed: ${String(err)}`);
-    }
-    process.exit(1);
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Internalization Backfill (consumed candidates missing dreamer tasks) ──────
-
-interface CandidateBackfillOptions {
-  workspace?: string;
-  json?: boolean;
-  dryRun?: boolean;
-  confirm?: boolean;
-  includePending?: boolean;
-}
-
-interface BackfillCandidateResult {
-  candidateId: string;
-  route: string;
-  status: 'would_create' | 'created' | 'existing' | 'deferred' | 'error' | 'would_intake_and_create' | 'intake_failed' | 'intake_succeeded_existing_task';
-  taskId?: string;
-  channel?: string;
-  reason?: string;
-  statusBefore?: string;
-  statusAfter?: string;
-  intakeDecision?: 'would_intake' | 'intake_succeeded' | 'intake_failed' | 'skipped' | 'not_needed';
-  seedDecision?: 'would_seed' | 'seeded' | 'existing' | 'skipped' | 'not_needed';
-  nextAction?: string;
-}
-
-interface BackfillOutput {
-  mode: 'dry-run' | 'confirm';
-  totalConsumed: number;
-  totalPending: number;
-  missingDreamerTask: number;
-  alreadyHaveTask: number;
-  deferred: number;
-  created: number;
-  intakeSucceeded: number;
-  intakeFailed: number;
-  errors: number;
-  results: BackfillCandidateResult[];
-}
-
-function createBackfillRemediationResult(output: BackfillOutput): RemediationResult {
-  const actions = output.results
-    .filter((result) => result.status === 'would_create' || result.status === 'created' || result.status === 'would_intake_and_create' || result.status === 'intake_failed' || result.status === 'intake_succeeded_existing_task')
-    .map((result) => {
-      if (result.status === 'would_intake_and_create') {
-        return remediationAction({
-          action: 'would_intake_and_create_dreamer_task',
-          targetId: result.candidateId,
-          previousState: 'pending_candidate_without_dreamer',
-          nextState: 'dreamer_task_would_be_created',
-          reason: result.reason ?? `Backfill would intake pending candidate and create dreamer task${result.taskId ? ` ${result.taskId}` : ''}`,
-        });
-      }
-      if (result.status === 'intake_failed') {
-        return remediationAction({
-          action: 'intake_failed',
-          targetId: result.candidateId,
-          previousState: 'pending_candidate',
-          nextState: 'pending_candidate_intake_failed',
-          reason: result.reason ?? `Backfill intake failed for pending candidate`,
-        });
-      }
-      if (result.status === 'intake_succeeded_existing_task') {
-        return remediationAction({
-          action: 'intake_succeeded_existing_task',
-          targetId: result.candidateId,
-          previousState: 'pending_candidate',
-          nextState: 'consumed_candidate_with_existing_dreamer',
-          reason: result.reason ?? `Backfill intake succeeded but dreamer task already exists`,
-        });
-      }
-      return remediationAction({
-        action: result.status === 'created' ? 'create_dreamer_task' : 'would_create_dreamer_task',
-        targetId: result.candidateId,
-        previousState: 'consumed_candidate_without_dreamer',
-        nextState: result.status === 'created' ? 'dreamer_task_created' : 'dreamer_task_would_be_created',
-        reason: result.reason ?? `Backfill ${result.status === 'created' ? 'created' : 'would create'} dreamer task${result.taskId ? ` ${result.taskId}` : ''}`,
-      });
-    });
-
-  return createRemediationResult({
-    mode: output.mode === 'confirm' ? 'confirm' : 'dry_run',
-    repairedCount: output.created,
-    skippedCount: output.alreadyHaveTask + output.deferred + output.errors + output.intakeFailed,
-    actions,
-    warnings: output.errors > 0 ? [`${output.errors} candidate(s) could not be backfilled.`] : (output.intakeFailed > 0 ? [`${output.intakeFailed} pending candidate(s) intake failed.`] : []),
-    status: (output.errors > 0 || output.intakeFailed > 0) && output.created === 0 ? 'error' : undefined,
-    safeToConfirm: output.mode === 'dry-run' && (output.missingDreamerTask > 0 || output.totalPending > 0) && output.errors === 0,
-  });
-}
-
-export async function handleCandidateInternalizationBackfill(opts: CandidateBackfillOptions): Promise<void> {
-  if (opts.dryRun && opts.confirm) {
-    console.error('Error: --dry-run and --confirm are mutually exclusive');
-    process.exit(1);
-    return;
-  }
-
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const isConfirm = opts.confirm ?? false;
-  const stateManager = new RuntimeStateManager({ workspaceDir, readonly: !isConfirm });
-  // PRI-720: resolve the full-chain override once per invocation.
-  const seedPipelineMode = resolvePromptFullPipelineSeedMode(workspaceDir);
-
-  try {
-    await stateManager.initialize();
-
-    const db = stateManager.connection.getDb();
-
-    const consumedRows = db.prepare(
-      "SELECT candidate_id FROM principle_candidates WHERE status = 'consumed'"
-    ).all() as { candidate_id: string }[];
-
-    let pendingRows: { candidate_id: string }[] = [];
-    if (opts.includePending) {
-      pendingRows = db.prepare(
-        "SELECT candidate_id FROM principle_candidates WHERE status = 'pending'"
-      ).all() as { candidate_id: string }[];
-    }
-
-    const output: BackfillOutput = {
-      mode: isConfirm ? 'confirm' : 'dry-run',
-      totalConsumed: consumedRows.length,
-      totalPending: pendingRows.length,
-      missingDreamerTask: 0,
-      alreadyHaveTask: 0,
-      deferred: 0,
-      created: 0,
-      intakeSucceeded: 0,
-      intakeFailed: 0,
-      errors: 0,
-      results: [],
-    };
-
-    for (const row of consumedRows) {
-      const candidateId = row.candidate_id;
-
-      const candidate = await stateManager.getCandidate(candidateId);
-      if (!candidate) {
-        output.errors++;
-        output.results.push({ candidateId, route: 'unknown', status: 'error', reason: 'Candidate not found in DB', statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'skipped', nextAction: 'Investigate why consumed candidate is missing from DB' });
-        continue;
-      }
-
-      const recommendation = resolveCandidateRecommendation(candidate, stateManager, candidateId);
-      const decision = decideInternalizationRoute(recommendation as Parameters<typeof decideInternalizationRoute>[0]);
-
-      // PRI-435: Resolve sourcePainId from the canonical diagnostician task chain.
-      // Missing/malformed sourcePainId must fail loud per-candidate with no side effects.
-      const sourcePainId = await resolveSourcePainIdFromDiagnostician(stateManager, candidate);
-      if (sourcePainId === null) {
-        output.errors++;
-        output.results.push({ candidateId, route: decision.route, status: 'error', reason: `Cannot resolve sourcePainId from diagnostician task chain for candidate ${candidateId}`, statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'skipped', nextAction: 'Verify the diagnostician task diagnosticJson contains a valid top-level sourcePainId; re-run diagnosis if the pain signal is missing' });
-        continue;
-      }
-      const seed = buildDreamerSeedFromCandidate(candidate, { route: decision.route, ready: decision.ready, sourcePainId, pipelineMode: seedPipelineMode });
-      // eslint-disable-next-line no-restricted-syntax -- 'in' required for discriminated union narrowing (BridgeTaskSeed | BridgeDecision)
-      if ('decision' in seed) {
-        output.deferred++;
-        const decisionResult = seed as { decision: string; reason?: string; taskId?: string };
-        const reason = decisionResult.decision === 'already_exists'
-          ? `Task ${decisionResult.taskId} already exists`
-          : decisionResult.reason ?? 'Seed not created';
-        output.results.push({ candidateId, route: decision.route, status: 'deferred', reason, statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'skipped', nextAction: reason.startsWith('Candidate ') ? 'Check candidate lineage fields (taskId, artifactId, sourceRunId)' : 'Verify internalization route configuration' });
-        continue;
-      }
-
-      const { channel } = seed;
-      const { taskId } = seed;
-
-      // PRI-720 C6: candidate-level dedup (demotion may change the derived
-      // channel suffix vs a pre-existing chain).
-      const existingTask = await findExistingDreamerTask((id) => stateManager.getTask(id), candidateId);
-      if (existingTask) {
-        if (isConfirm && existingTask.diagnosticJson) {
-          try {
-            const diagObj = JSON.parse(existingTask.diagnosticJson);
-            if (!diagObj.candidateId) {
-              diagObj.candidateId = candidateId;
-              await stateManager.updateTaskDiagnosticJson(taskId, JSON.stringify(diagObj));
-            }
-          } catch { /* best-effort */ }
-        }
-        output.alreadyHaveTask++;
-        output.results.push({ candidateId, route: decision.route, status: 'existing', taskId: existingTask.taskId, channel, statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'existing' });
-        continue;
-      }
-
-      output.missingDreamerTask++;
-
-      if (!isConfirm) {
-        output.results.push({ candidateId, route: decision.route, status: 'would_create', taskId, channel, statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'would_seed' });
-        continue;
-      }
-
-      try {
-        const task = await stateManager.createTask({
-          taskId: seed.taskId,
-          taskKind: seed.taskKind,
-          status: seed.status,
-          attemptCount: seed.attemptCount,
-          maxAttempts: seed.maxAttempts,
-          diagnosticJson: seed.diagnosticJson,
-        });
-
-        output.created++;
-        output.results.push({ candidateId, route: decision.route, status: 'created', taskId: task.taskId, channel, statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'seeded' });
-      } catch (err) {
-        output.errors++;
-        output.results.push({ candidateId, route: decision.route, status: 'error', reason: err instanceof Error ? err.message : String(err), statusBefore: 'consumed', statusAfter: 'consumed', intakeDecision: 'not_needed', seedDecision: 'skipped', nextAction: 'Investigate dreamer task creation failure' });
-      }
-    }
-
-    const ledgerAdapter = new PrincipleTreeLedgerAdapter({ stateDir: path.join(workspaceDir, '.state') });
-    const intakeService = new CandidateIntakeService({ stateManager, ledgerAdapter });
-
-    for (const row of pendingRows) {
-      const candidateId = row.candidate_id;
-
-      const candidate = await stateManager.getCandidate(candidateId);
-      if (!candidate) {
-        output.errors++;
-        output.results.push({ candidateId, route: 'unknown', status: 'error', reason: 'Pending candidate not found in DB', statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'skipped', seedDecision: 'skipped', nextAction: 'Investigate why pending candidate is missing from DB' });
-        continue;
-      }
-
-      // PRI-442 Stage 4: admission gate check — refuse non-admitted pending
-      // candidates to prevent backfill from bypassing the admission gate.
-      const admissionBlock = checkAdmissionGate(candidate);
-      if (admissionBlock) {
-        output.intakeFailed++;
-        output.results.push({ candidateId, route: 'unknown', status: 'intake_failed', reason: `Admission gate refused: ${admissionBlock.reason}`, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'skipped', seedDecision: 'skipped', nextAction: admissionBlock.nextAction });
-        continue;
-      }
-
-      const recommendation = resolveCandidateRecommendation(candidate, stateManager, candidateId);
-      const decision = decideInternalizationRoute(recommendation as Parameters<typeof decideInternalizationRoute>[0]);
-
-      // PRI-435: Resolve sourcePainId from the canonical diagnostician task chain.
-      // Missing/malformed sourcePainId must fail loud per-candidate with no side effects.
-      const sourcePainId = await resolveSourcePainIdFromDiagnostician(stateManager, candidate);
-      if (sourcePainId === null) {
-        output.errors++;
-        output.results.push({ candidateId, route: decision.route, status: 'error', reason: `Cannot resolve sourcePainId from diagnostician task chain for candidate ${candidateId}`, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'skipped', seedDecision: 'skipped', nextAction: 'Verify the diagnostician task diagnosticJson contains a valid top-level sourcePainId; re-run diagnosis if the pain signal is missing' });
-        continue;
-      }
-      const seed = buildDreamerSeedFromCandidate(candidate, { route: decision.route, ready: decision.ready, sourcePainId, pipelineMode: seedPipelineMode });
-      // eslint-disable-next-line no-restricted-syntax -- 'in' required for discriminated union narrowing (BridgeTaskSeed | BridgeDecision)
-      if ('decision' in seed) {
-        output.deferred++;
-        const decisionResult = seed as { decision: string; reason?: string; taskId?: string };
-        const reason = decisionResult.decision === 'already_exists'
-          ? `Task ${decisionResult.taskId} already exists`
-          : decisionResult.reason ?? 'Seed not created';
-        output.results.push({ candidateId, route: decision.route, status: 'deferred', reason, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'skipped', seedDecision: 'skipped', nextAction: 'Investigate why bridge decision is not seeded' });
-        continue;
-      }
-
-      const { channel } = seed;
-      const { taskId } = seed;
-
-      if (!isConfirm) {
-        output.missingDreamerTask++;
-        output.results.push({ candidateId, route: decision.route, status: 'would_intake_and_create', taskId, channel, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'would_intake', seedDecision: 'would_seed', nextAction: 'Run with --confirm to intake and seed' });
-        continue;
-      }
-
-      const intakeEntry = await intakeService.intake(candidateId).catch((intakeErr: unknown) => {
-        output.intakeFailed++;
-        const intakeReason = intakeErr instanceof CandidateIntakeError
-          ? `Intake failed [${(intakeErr as { code?: string }).code ?? 'unknown'}]: ${intakeErr.message}`
-          : `Intake failed: ${intakeErr instanceof Error ? intakeErr.message : String(intakeErr)}`;
-        output.results.push({ candidateId, route: decision.route, status: 'intake_failed', reason: intakeReason, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'intake_failed', seedDecision: 'skipped', nextAction: 'Fix intake issue and re-run backfill' });
-        return null;
-      });
-
-      if (!intakeEntry) {
-        continue;
-      }
-
-      try {
-        await updateCandidateStatus({ stateManager, candidateId, targetStatus: 'consumed', expectedCurrentStatus: 'pending' });
-      } catch (statusErr) {
-        const statusMsg = `Ledger write succeeded (entry ${intakeEntry.id}) but DB status update failed: ${statusErr instanceof Error ? statusErr.message : String(statusErr)}`;
-        output.intakeFailed++;
-        output.results.push({ candidateId, route: decision.route, status: 'intake_failed', reason: statusMsg, statusBefore: 'pending', statusAfter: 'pending', intakeDecision: 'intake_failed', seedDecision: 'skipped', nextAction: 'Candidate may be in inconsistent state — check ledger and DB manually' });
-        continue;
-      }
-
-      output.intakeSucceeded++;
-
-      const existingTask = await stateManager.getTask(taskId);
-      if (existingTask) {
-        output.alreadyHaveTask++;
-        output.results.push({ candidateId, route: decision.route, status: 'intake_succeeded_existing_task', taskId: existingTask.taskId, channel, statusBefore: 'pending', statusAfter: 'consumed', intakeDecision: 'intake_succeeded', seedDecision: 'existing', reason: `Intake succeeded but dreamer task ${existingTask.taskId} already exists` });
-        continue;
-      }
-
-      try {
-        const task = await stateManager.createTask({
-          taskId: seed.taskId,
-          taskKind: seed.taskKind,
-          status: seed.status,
-          attemptCount: seed.attemptCount,
-          maxAttempts: seed.maxAttempts,
-          diagnosticJson: seed.diagnosticJson,
-        });
-
-        output.created++;
-        output.results.push({ candidateId, route: decision.route, status: 'created', taskId: task.taskId, channel, statusBefore: 'pending', statusAfter: 'consumed', intakeDecision: 'intake_succeeded', seedDecision: 'seeded' });
-      } catch (err) {
-        output.errors++;
-        output.results.push({ candidateId, route: decision.route, status: 'error', reason: err instanceof Error ? err.message : String(err), statusBefore: 'pending', statusAfter: 'consumed', intakeDecision: 'intake_succeeded', seedDecision: 'skipped', nextAction: 'Intake succeeded but dreamer task creation failed — candidate is consumed, re-run backfill for consumed candidates' });
-      }
-    }
-
-    if (opts.json) {
-      console.log(JSON.stringify({ ...createBackfillRemediationResult(output), details: output }, null, 2));
-    } else {
-      const remediation = createBackfillRemediationResult(output);
-      console.log(`\nCandidate Internalization Backfill (${output.mode})\n`);
-      console.log(`  status:              ${remediation.status}`);
-      console.log(`  safe_to_confirm:     ${remediation.safeToConfirm}`);
-      console.log(`  total_consumed:      ${output.totalConsumed}`);
-      if (opts.includePending) {
-        console.log(`  total_pending:       ${output.totalPending}`);
-      }
-      console.log(`  missing_dreamer:     ${output.missingDreamerTask}`);
-      console.log(`  already_have_task:   ${output.alreadyHaveTask}`);
-      console.log(`  deferred:            ${output.deferred}`);
-      if (isConfirm) {
-        console.log(`  created:             ${output.created}`);
-        console.log(`  errors:              ${output.errors}`);
-        if (opts.includePending) {
-          console.log(`  intake_succeeded:    ${output.intakeSucceeded}`);
-          console.log(`  intake_failed:       ${output.intakeFailed}`);
-        }
-      }
-      for (const r of output.results) {
-        const prefix = r.statusBefore === 'pending' ? '[pending]' : '[consumed]';
-        console.log(`  ${prefix} ${r.candidateId}: ${r.status} (${r.route})${r.taskId ? ` → ${r.taskId}` : ''}${r.reason ? ` — ${r.reason}` : ''}`);
-      }
-      if (!isConfirm && (output.missingDreamerTask > 0 || output.totalPending > 0)) {
-        console.log(`\n  (use --confirm to create missing dreamer tasks${opts.includePending ? ' and intake pending candidates' : ''})`);
-      }
-      console.log('');
-    }
-
-    if ((output.missingDreamerTask > 0 || output.totalPending > 0) && !isConfirm) {
-      process.exitCode = 1;
-    }
-  } finally {
-    await stateManager.close();
-  }
-}
-
-// ── Route (Internalization Inspection) ──────────────────────────────────────
-
-interface CandidateRouteOptions {
-  candidateId: string;
-  workspace?: string;
-  json?: boolean;
-}
-
-/**
- * pd candidate route --candidate-id <id> --workspace <path> [--json]
- *
- * Read-only: shows which internalization pipeline route a candidate will enter,
- * whether it's ready, and what fields are missing.
- */
-export async function handleCandidateRoute(opts: CandidateRouteOptions): Promise<void> {
-  const workspaceDir = resolveWorkspaceDir(opts.workspace);
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-
-  try {
-    await stateManager.initialize();
-
-    const candidate = await stateManager.getCandidate(opts.candidateId);
-    if (!candidate) {
-      console.error(`Candidate not found: ${opts.candidateId}`);
-      process.exit(1);
-      return; // unreachable in production, needed for test mocks
-    }
-
-    const recommendation = resolveCandidateRecommendation(candidate, stateManager, opts.candidateId);
-
-    const decision = decideInternalizationRoute(recommendation as Parameters<typeof decideInternalizationRoute>[0]);
-
-    const result = {
-      candidateId: opts.candidateId,
-      recommendationKind: recommendation.kind,
-      route: decision.route,
-      ready: decision.ready,
-      missingFields: decision.missingFields,
-      reason: decision.reason,
-      nextAction: decision.nextAction,
-      ...(recommendation.usedFallback && { _meta: { source: 'column_fallback' } }),
-    };
-
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(`\nCandidate Route: ${result.candidateId}\n`);
-      console.log(`  Kind:           ${result.recommendationKind}`);
-      console.log(`  Route:          ${result.route}`);
-      console.log(`  Ready:          ${result.ready}`);
-      console.log(`  Missing Fields: ${result.missingFields.length > 0 ? result.missingFields.join(', ') : '(none)'}`);
-      console.log(`  Reason:         ${result.reason}`);
-      console.log(`  Next Action:    ${result.nextAction}`);
-      if (recommendation.usedFallback) {
-        console.log(`  Source:         column_fallback (source_recommendation_json unavailable)`);
-      }
-      console.log('');
-    }
-  } finally {
-    await stateManager.close();
-  }
-}