@principles/pd-cli 1.152.11 → 1.152.13

package/src/commands/runtime-internalization-integrity.ts

@@ -1,107 +0,0 @@
-import * as path from 'path';
-import { InternalizationChainIntegrityReadModel } from '@principles/core/runtime-v2';
-import type { ChainIntegrityResult } from '@principles/core/runtime-v2';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-import { assembleMainlineSnapshot } from '../services/mainline-snapshot-assembler.js';
-
-interface InternalizationIntegrityOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-function formatTextOutput(result: ChainIntegrityResult): string {
-  const lines: string[] = [];
-  const icon = result.overallStatus === 'ok' ? '✓' : result.overallStatus === 'degraded' ? '⚠' : '✗';
-
-  lines.push('Internalization Chain Integrity Report');
-  lines.push(`generatedAt: ${result.generatedAt}`);
-  lines.push(`OVERALL: ${icon} ${result.overallStatus.toUpperCase()}`);
-  lines.push('');
-
-  lines.push('Chain Summaries:');
-  lines.push(`  totalCandidates: ${result.chainSummaries.totalCandidates}`);
-  lines.push(`  totalDreamerTasks: ${result.chainSummaries.totalDreamerTasks}`);
-  lines.push(`  totalPhilosopherTasks: ${result.chainSummaries.totalPhilosopherTasks}`);
-  lines.push(`  totalPIArtifacts: ${result.chainSummaries.totalPIArtifacts}`);
-  lines.push(`  chainsWithBrokenLinks: ${result.chainSummaries.chainsWithBrokenLinks}`);
-  lines.push('');
-
-  if (result.brokenLinks.length === 0) {
-    lines.push('No broken links found. Chain integrity is OK.');
-  } else {
-    lines.push(`Broken Links (${result.brokenLinks.length}):`);
-    for (const link of result.brokenLinks) {
-      const sevIcon = link.severity === 'error' ? '✗' : '⚠';
-      lines.push(`  ${sevIcon} [${link.severity}] ${link.type}: ${link.reason}`);
-      if (link.taskId) lines.push(`    taskId: ${link.taskId}`);
-      if (link.runId) lines.push(`    runId: ${link.runId}`);
-      if (link.candidateId) lines.push(`    candidateId: ${link.candidateId}`);
-      lines.push(`    action: ${link.recommendedAction}`);
-    }
-  }
-
-  return lines.join('\n');
-}
-
-export async function handleRuntimeInternalizationIntegrity(opts: InternalizationIntegrityOptions): Promise<void> {
-  const workspaceDir = opts.workspace
-    ? path.resolve(opts.workspace)
-    : resolveWorkspaceDir();
-
-  let warnings: string[];
-  let snapshot;
-  try {
-    ({ snapshot, warnings } = await assembleMainlineSnapshot({ workspaceDir }));
-  } catch (error: unknown) {
-    const reason = error instanceof Error ? error.message : String(error);
-    const failure: ChainIntegrityResult = {
-      overallStatus: 'error',
-      brokenLinks: [{
-        type: 'mainline_snapshot_assembly_failed',
-        severity: 'error',
-        reason: `Failed to assemble mainline snapshot: ${reason}`,
-        recommendedAction: 'Verify workspace state.db/config and rerun `pd runtime internalization integrity`.',
-      }],
-      chainSummaries: {
-        totalCandidates: 0,
-        totalDreamerTasks: 0,
-        totalPhilosopherTasks: 0,
-        totalPIArtifacts: 0,
-        chainsWithBrokenLinks: 0,
-      },
-      generatedAt: new Date().toISOString(),
-    };
-    if (opts.json) {
-      console.log(JSON.stringify(failure, null, 2));
-    } else {
-      const [firstBrokenLink] = failure.brokenLinks;
-      const failReason = firstBrokenLink ? firstBrokenLink.reason : 'unknown failure';
-      console.error(`FAIL: ${failReason}`);
-    }
-    process.exitCode = 1;
-    return;
-  }
-
-  if (!opts.json && warnings.length > 0) {
-    for (const warning of warnings) {
-      console.warn(`Warning: ${warning}`);
-    }
-  }
-
-  const model = new InternalizationChainIntegrityReadModel({ workspaceDir, mainlineSnapshot: snapshot });
-  const result = model.check();
-
-  if (opts.json) {
-    console.log(JSON.stringify(result, null, 2));
-  } else {
-    console.log(formatTextOutput(result));
-  }
-
-  if (result.overallStatus !== 'ok') {
-    if (!opts.json) {
-      console.error('');
-      console.error(`FAIL: overallStatus=${result.overallStatus}`);
-    }
-    process.exitCode = 1;
-  }
-}

package/src/commands/runtime-internalization-queue.ts

@@ -1,135 +0,0 @@
-/**
- * pd runtime internalization queue command handler.
- *
- * Usage:
- *   pd runtime internalization queue --workspace <path> --json
- *
- * Provides a read-only snapshot of the PI task queue health.
- * Never acquires leases or mutates any task/run/artifact/ledger state.
- */
-import * as path from 'path';
-import { createInternalizationQueueReadModel } from '@principles/core/runtime-v2';
-import type { InternalizationQueueSnapshot } from '@principles/core/runtime-v2';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-import { loadPdConfig, computeFlagsFromLoadResult } from '../services/pd-config-loader.js';
-
-interface QueueOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-function formatTextOutput(snap: InternalizationQueueSnapshot, workspaceDir: string, autoConsumerEnabled: boolean): string {
-  const lines: string[] = [];
-  lines.push(`Internalization Queue Snapshot`);
-  lines.push(`  pending: ${snap.pendingCount}  retry_wait: ${snap.retryWaitCount}`);
-
-  if (snap.invalidMetadataCount > 0) {
-    lines.push(`  invalid_metadata: ${snap.invalidMetadataCount}  (${snap.sampleInvalidTaskIds.join(', ')})`);
-  }
-
-  lines.push(`  ready: ${snap.readyTasks.length}`);
-
-  const taskKinds = Object.entries(snap.countsByTaskKind);
-  if (taskKinds.length > 0) {
-    lines.push(`  by_kind: ${taskKinds.map(([k, v]) => `${k}=${v}`).join(', ')}`);
-  }
-
-  const channels = Object.entries(snap.countsByChannel);
-  if (channels.length > 0) {
-    lines.push(`  by_channel: ${channels.map(([k, v]) => `${k}=${v}`).join(', ')}`);
-  }
-
-  if (snap.blockedSummary.count > 0) {
-    lines.push(`  blocked: ${snap.blockedSummary.count}`);
-    for (const s of snap.blockedSummary.samples.slice(0, 3)) {
-      lines.push(`    ${s.taskId} (${s.taskKind}) blocked by: ${s.blockedBy.join(', ')}`);
-    }
-  }
-
-  if (snap.dependencyFailedSummary.count > 0) {
-    lines.push(`  dependency_failed: ${snap.dependencyFailedSummary.count}`);
-    for (const s of snap.dependencyFailedSummary.samples.slice(0, 3)) {
-      lines.push(`    ${s.taskId} (${s.taskKind}) failed deps: ${s.failedDependencies.join(', ')}`);
-    }
-  }
-
-  if (snap.leaseConflictSummary.count > 0) {
-    lines.push(`  lease_conflict: ${snap.leaseConflictSummary.count}`);
-    for (const s of snap.leaseConflictSummary.samples.slice(0, 3)) {
-      lines.push(`    ${s.taskId} (${s.taskKind}) owner: ${s.leaseOwner}, expires: ${s.leaseExpiresAt}`);
-    }
-  }
-
-  if (snap.retryWaitPendingSummary.count > 0) {
-    lines.push(`  retry_wait_pending: ${snap.retryWaitPendingSummary.count}`);
-    for (const s of snap.retryWaitPendingSummary.samples.slice(0, 3)) {
-      lines.push(`    ${s.taskId} (${s.taskKind}) retry_after: ${s.retryAfter}`);
-    }
-  }
-
-  if (snap.noReadyTasks) {
-    lines.push(`  no_ready_tasks: ${snap.noReadyTasks.reason} (inspected: ${snap.noReadyTasks.inspectedCount})`);
-  }
-
-  if (snap.suppressedTasks.length > 0) {
-    lines.push(`  suppressed (${snap.suppressedTasks.length}):`);
-    for (const s of snap.suppressedTasks.slice(0, 5)) {
-      lines.push(`    ${s.taskId} (${s.taskKind}, ${s.channel}) reason: ${s.reason}`);
-    }
-  }
-
-  if (snap.readyTasks.length > 0) {
-    if (autoConsumerEnabled) {
-      lines.push(`  consumerStatus: auto_consumer_enabled`);
-    } else {
-      const nextAction = `pd runtime internalization run-once --workspace "${workspaceDir}" --runner dreamer --runtime config --json`;
-      lines.push(`  consumerStatus: manual_action_required`);
-      lines.push(`  nextAction: ${nextAction}`);
-    }
-  }
-
-  return lines.join('\n');
-}
-
-export async function handleRuntimeInternalizationQueue(opts: QueueOptions): Promise<void> {
-  const workspaceDir = opts.workspace ? path.resolve(opts.workspace) : resolveWorkspaceDir();
-
-  // Single canonical config load — replaces split-brain legacy + canonical reads (PRI-460).
-  const pdConfigResult = loadPdConfig(workspaceDir);
-  if (!pdConfigResult.ok) {
-    const configWarning = JSON.stringify({
-      level: 'warning',
-      source: 'pd_config',
-      errors: pdConfigResult.errors.map(e => ({ reason: e.reason, nextAction: e.nextAction })),
-    });
-    process.stderr.write(`${configWarning}\n`);
-  }
-  const pdFlags = computeFlagsFromLoadResult(pdConfigResult);
-  const enabledChannels = new Set(pdFlags.enabledChannels);
-  const autoConsumerEnabled = pdFlags.flags.internalization_auto_consumer?.enabled ?? false;
-
-  const { readModel, close } = await createInternalizationQueueReadModel({ workspaceDir, enabledChannels });
-
-  try {
-    const snapshot = await readModel.getSnapshot();
-
-    if (opts.json) {
-      const output: Record<string, unknown> = { ...snapshot };
-
-      if (snapshot.readyTasks.length > 0) {
-        if (autoConsumerEnabled) {
-          output.consumerStatus = 'auto_consumer_enabled';
-        } else {
-          output.nextAction = `pd runtime internalization run-once --workspace "${workspaceDir}" --runner dreamer --runtime config --json`;
-          output.consumerStatus = 'manual_action_required';
-        }
-      }
-
-      console.log(JSON.stringify(output, null, 2));
-    } else {
-      console.log(formatTextOutput(snapshot, workspaceDir, autoConsumerEnabled));
-    }
-  } finally {
-    await close();
-  }
-}

package/src/commands/runtime-internalization-retry.ts

@@ -1,191 +0,0 @@
-/**
- * pd runtime internalization retry — needs_human_review 的 Owner 出边
- * (MVP_CORE_LOOP_CONTRACT INV-03: inspect / retry / revise / reject-archive)。
- *
- * 修复前 needs_human_review 是 display-only 单向终态 (审计 ISSUE-006)。
- * 本命令把 needs_human_review 任务重新入队 (→ pending, attemptCount 重置),
- * 由 auto-consumer / run-once 重新驱动。
- *
- * Owner retry = 显式人类 authority reset,与 crash retry 严格区分:
- * crash / lease recovery / automatic retry 保留 completionIntent(入口门
- * resume 原 verdict,零 LLM);Owner retry 必须同时清空 runnerDecision 与
- * completionIntent,允许新一轮 LLM verdict 成为 authority——否则入口门会
- * resume/finalize 旧 verdict,LLM 永不运行,Owner retry 实际失效。
- *
- * 落库形态: status/attemptCount 与清空后的 metadata 在同一次 updateTask
- * (SQLite 单条 UPDATE) 中原子生效——两个独立写之间失败会留下
- * "authority 已清但任务仍 needs_human_review" 的 partial Owner action。
- * metadata 不可 hydrate 时 fail closed (metadata_invalid),不得只改 status。
- *
- * CLI gate: 默认 dry-run;--confirm 才落地 (cli-4);JSON 模式严格单对象 (cli-1);
- * 失败路径不产生任何状态变更 (cli-5)。
- */
-
-import * as path from 'path';
-import { RuntimeStateManager, ownerRetryNeedsHumanReviewTask } from '@principles/core/runtime-v2';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-
-export interface InternalizationRetryOptions {
-  workspace?: string;
-  taskId?: string;
-  confirm?: boolean;
-  json?: boolean;
-}
-
-export interface InternalizationRetryOutput {
-  status: 'requeued' | 'dry_run' | 'skipped' | 'failed';
-  taskId: string;
-  taskKind?: string;
-  previousStatus?: string;
-  reason?: string;
-  nextAction?: string;
-}
-
-function emit(out: InternalizationRetryOutput, json?: boolean): void {
-  if (json) {
-    console.log(JSON.stringify(out, null, 2));
-    return;
-  }
-  console.log(`Retry: ${out.status}${out.previousStatus ? ` (was ${out.previousStatus})` : ''}`);
-  if (out.reason) console.log(`  reason: ${out.reason}`);
-  if (out.nextAction) console.log(`  nextAction: ${out.nextAction}`);
-}
-
-export async function handleRuntimeInternalizationRetry(opts: InternalizationRetryOptions): Promise<void> {
-  if (!opts.taskId) {
-    const out: InternalizationRetryOutput = {
-      status: 'failed',
-      taskId: '',
-      reason: 'task_id_required',
-      nextAction: 'Pass --task <taskId> (find ids via: pd runtime internalization queue --json or pd errors list)',
-    };
-    emit(out, opts.json);
-    process.exitCode = 1;
-    return;
-  }
-
-  const workspaceDir = opts.workspace ? path.resolve(opts.workspace) : resolveWorkspaceDir();
-  const stateManager = new RuntimeStateManager({ workspaceDir });
-  try {
-    await stateManager.initialize();
-    const task = await stateManager.getTask(opts.taskId);
-    if (!task) {
-      const out: InternalizationRetryOutput = {
-        status: 'failed',
-        taskId: opts.taskId,
-        reason: 'task_not_found',
-        nextAction: 'Verify the task id and workspace',
-      };
-      emit(out, opts.json);
-      process.exitCode = 1;
-      return;
-    }
-
-    if (task.status !== 'needs_human_review') {
-      const out: InternalizationRetryOutput = {
-        status: 'skipped',
-        taskId: opts.taskId,
-        taskKind: task.taskKind,
-        previousStatus: task.status,
-        reason: 'only_needs_human_review_tasks_are_retryable',
-        nextAction: 'This task is not in the owner attention queue; use run-once / enqueue-successors instead',
-      };
-      emit(out, opts.json);
-      return;
-    }
-
-    if (!opts.confirm) {
-      const out: InternalizationRetryOutput = {
-        status: 'dry_run',
-        taskId: opts.taskId,
-        taskKind: task.taskKind,
-        previousStatus: task.status,
-        reason: 'dry_run_no_mutation',
-        nextAction: 'Re-run with --confirm to requeue this task',
-      };
-      emit(out, opts.json);
-      return;
-    }
-
-    // Owner retry = authority reset: runnerDecision 与 completionIntent 同时
-    // 清空 (保留 revisionCount / revisionCauseId / rolloutRevisionPayload /
-    // repairPayload / lineage — revision budget 证据不动)。
-    // 落库序列提取在 core ownerRetryNeedsHumanReviewTask (Governance Recovery
-    // Actions v1): Console 恢复端点与 CLI 走同一段逻辑,禁止复制。
-    const outcome = await ownerRetryNeedsHumanReviewTask(stateManager, opts.taskId);
-
-    if (outcome.status === 'not_found') {
-      const out: InternalizationRetryOutput = {
-        status: 'failed',
-        taskId: opts.taskId,
-        reason: 'task_not_found',
-        nextAction: 'Verify the task id and workspace',
-      };
-      emit(out, opts.json);
-      process.exitCode = 1;
-      return;
-    }
-    if (outcome.status === 'skipped') {
-      const out: InternalizationRetryOutput = {
-        status: 'skipped',
-        taskId: opts.taskId,
-        taskKind: outcome.taskKind,
-        previousStatus: outcome.previousStatus,
-        reason: 'only_needs_human_review_tasks_are_retryable',
-        nextAction: 'This task is not in the owner attention queue; use run-once / enqueue-successors instead',
-      };
-      emit(out, opts.json);
-      return;
-    }
-    if (outcome.status === 'rejected') {
-      // PRI-629 Recover guard: decision-capable 人工裁决不走 authority reset —
-      // 治理出口在 Console 治理焦点 (或 owner-decisions API)。
-      const out: InternalizationRetryOutput = {
-        status: 'skipped',
-        taskId: opts.taskId,
-        taskKind: outcome.taskKind,
-        previousStatus: outcome.previousStatus,
-        reason: outcome.reason,
-        nextAction: 'This task awaits an Owner decision (accept / revise once / reject). Resolve it in the Console governance focus, or via the owner-decisions API. Recover is not a governance exit.',
-      };
-      emit(out, opts.json);
-      return;
-    }
-    if (outcome.status === 'metadata_invalid') {
-      // fail closed: 只改 status 会把(可能损坏的)旧 authority 记录原样留在
-      // metadata 里,下一次 run 由它接管 —— 产生 partial retry。
-      const out: InternalizationRetryOutput = {
-        status: 'failed',
-        taskId: opts.taskId,
-        taskKind: outcome.taskKind,
-        previousStatus: 'needs_human_review',
-        reason: 'metadata_invalid',
-        nextAction: 'Task metadata failed PI hydration; a retry now would risk a partial authority reset. Inspect: pd runtime internalization integrity --json',
-      };
-      emit(out, opts.json);
-      process.exitCode = 1;
-      return;
-    }
-
-    const out: InternalizationRetryOutput = {
-      status: 'requeued',
-      taskId: opts.taskId,
-      taskKind: outcome.taskKind,
-      previousStatus: outcome.previousStatus,
-      nextAction: 'Task requeued; it will be picked up by the auto-consumer cycle, or advance manually: pd runtime internalization run-once',
-    };
-    emit(out, opts.json);
-  } catch (err) {
-    const out: InternalizationRetryOutput = {
-      status: 'failed',
-      taskId: opts.taskId,
-      reason: err instanceof Error ? err.message : String(err),
-      nextAction: 'Check workspace DB integrity (pd runtime internalization integrity)',
-    };
-    emit(out, opts.json);
-    process.exitCode = 1;
-  } finally {
-    await stateManager.close();
-  }
-}
-