@principles/pd-cli 1.152.12 → 1.152.13

package/src/commands/runtime-diagnostics-export.ts

@@ -1,229 +0,0 @@
-import * as path from 'path';
-import * as fs from 'fs';
-import {
-  OperatorHealthReadModel,
-  SchemaConformanceReadModel,
-  PruningReadModel,
-  createInternalizationQueueReadModel,
-  InternalizationChainIntegrityReadModel,
-  auditCandidateLedgerConsistency,
-  buildGfiWorkspaceSnapshot,
-} from '@principles/core/runtime-v2';
-import { runCanaryChecks } from './runtime-canary.js';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-
-export interface BundleManifestArtifact {
-  name: string;
-  path: string;
-  status: 'ok' | 'failed';
-  error?: string;
-}
-
-export interface BundleManifest {
-  generatedAt: string;
-  workspace: string;
-  outputDir: string;
-  artifacts: BundleManifestArtifact[];
-}
-
-export interface DiagnosticsExportOptions {
-  workspace?: string;
-  out?: string;
-  json?: boolean;
-}
-
-function validateOutputPath(outDir: string, workspaceDir: string): string {
-  const resolvedOut = path.resolve(outDir);
-  const resolvedWs = path.resolve(workspaceDir);
-  const relative = path.relative(resolvedWs, resolvedOut);
-  if (relative.startsWith('..') || path.isAbsolute(relative)) {
-    throw new Error('Output path must be within workspace directory');
-  }
-  return resolvedOut;
-}
-
-function sanitizeForExport(data: unknown): unknown {
-  if (data === null || data === undefined) return data;
-  if (typeof data === 'string') {
-    return data.replace(/(?:api[_-]?key|secret|token|password|authorization|bearer)\s*[:=]\s*\S+/gi, '[REDACTED]');
-  }
-  if (Array.isArray(data)) return data.map(sanitizeForExport);
-  if (typeof data === 'object') {
-    const result: Record<string, unknown> = {};
-    for (const [key, value] of Object.entries(data as Record<string, unknown>)) {
-      const lowerKey = key.toLowerCase();
-      if (/key|secret|token|password|auth|bearer|credential/i.test(lowerKey)) {
-        result[key] = '[REDACTED]';
-      } else {
-        result[key] = sanitizeForExport(value);
-      }
-    }
-    return result;
-  }
-  return data;
-}
-
-interface CollectArtifactContext {
-  name: string;
-  fileName: string;
-  outputDir: string;
-  collector: () => Promise<unknown> | unknown;
-  artifacts: BundleManifestArtifact[];
-  errors: { artifact: string; error: string }[];
-}
-
-async function collectArtifact(ctx: CollectArtifactContext): Promise<void> {
-  try {
-    const data = await ctx.collector();
-    const sanitized = sanitizeForExport(data);
-    const filePath = path.join(ctx.outputDir, ctx.fileName);
-    fs.writeFileSync(filePath, JSON.stringify(sanitized, null, 2), 'utf8');
-    ctx.artifacts.push({ name: ctx.name, path: ctx.fileName, status: 'ok' });
-  } catch (err) {
-    ctx.artifacts.push({ name: ctx.name, path: ctx.fileName, status: 'failed', error: String(err) });
-    ctx.errors.push({ artifact: ctx.name, error: String(err) });
-  }
-}
-
-export async function exportDiagnosticsBundle(workspaceDir: string, outDir: string): Promise<BundleManifest> {
-  const generatedAt = new Date().toISOString();
-  const resolvedOut = validateOutputPath(outDir, workspaceDir);
-  const artifacts: BundleManifestArtifact[] = [];
-  const errors: { artifact: string; error: string }[] = [];
-
-  fs.mkdirSync(resolvedOut, { recursive: true });
-
-  const baseCtx = { outputDir: resolvedOut, artifacts, errors };
-
-  await collectArtifact({ ...baseCtx, name: 'runtime-health', fileName: 'runtime-health.json', collector: async () => {
-    const model = new OperatorHealthReadModel({ workspaceDir });
-    try {
-      return await model.getSnapshot();
-    } finally {
-      await model.close();
-    }
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'canary', fileName: 'canary.json', collector: async () => {
-    return await runCanaryChecks(workspaceDir);
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'schema-conformance', fileName: 'schema-conformance.json', collector: () => {
-    const model = new SchemaConformanceReadModel({ workspaceDir });
-    return model.check();
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'candidate-audit', fileName: 'candidate-audit.json', collector: async () => {
-    return await auditCandidateLedgerConsistency(workspaceDir);
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'gfi-snapshot', fileName: 'gfi-snapshot.json', collector: () => {
-    const sessionDir = path.join(workspaceDir, '.state', 'sessions');
-    const sessions: { sessionId: string; currentGfi: number; lastActivityAt: number; consecutiveErrors: number }[] = [];
-    if (fs.existsSync(sessionDir)) {
-      for (const file of fs.readdirSync(sessionDir)) {
-        if (!file.endsWith('.json')) continue;
-        try {
-          const raw = fs.readFileSync(path.join(sessionDir, file), 'utf8');
-          const parsed = JSON.parse(raw);
-          if (parsed?.sessionId) {
-            sessions.push({
-              sessionId: parsed.sessionId,
-              currentGfi: parsed.currentGfi ?? 0,
-              lastActivityAt: parsed.lastActivityAt ?? parsed.lastControlActivityAt ?? 0,
-              consecutiveErrors: parsed.consecutiveErrors ?? 0,
-            });
-          }
-        } catch { /* skip malformed */ }
-      }
-    }
-    return buildGfiWorkspaceSnapshot({ sessions, nowMs: Date.now() });
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'pruning-orphans', fileName: 'pruning-orphans.json', collector: () => {
-    const model = new PruningReadModel({ workspaceDir });
-    return model.getOrphanDerivedCandidates();
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'internalization-queue', fileName: 'internalization-queue.json', collector: async () => {
-    const { readModel, close } = await createInternalizationQueueReadModel({ workspaceDir, readonly: true });
-    try {
-      return await readModel.getSnapshot();
-    } finally {
-      await close();
-    }
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'internalization-integrity', fileName: 'internalization-integrity.json', collector: () => {
-    const model = new InternalizationChainIntegrityReadModel({ workspaceDir });
-    return model.check();
-  } });
-
-  await collectArtifact({ ...baseCtx, name: 'recent-session-summary', fileName: 'recent-session-summary.json', collector: () => {
-    const sessionDir = path.join(workspaceDir, '.state', 'sessions');
-    const summaries: { sessionId: string; status: string; lastActivityAt: number }[] = [];
-    if (fs.existsSync(sessionDir)) {
-      for (const file of fs.readdirSync(sessionDir)) {
-        if (!file.endsWith('.json')) continue;
-        try {
-          const raw = fs.readFileSync(path.join(sessionDir, file), 'utf8');
-          const parsed = JSON.parse(raw);
-          if (parsed?.sessionId) {
-            summaries.push({
-              sessionId: parsed.sessionId,
-              status: parsed.status ?? 'unknown',
-              lastActivityAt: parsed.lastActivityAt ?? parsed.lastControlActivityAt ?? 0,
-            });
-          }
-        } catch { /* skip */ }
-      }
-    }
-    return { sessionCount: summaries.length, sessions: summaries.slice(0, 20) };
-  } });
-
-  if (errors.length > 0) {
-    await collectArtifact({ outputDir: resolvedOut, artifacts, errors: [], name: 'errors', fileName: 'errors.json', collector: () => errors });
-  }
-
-  const manifest: BundleManifest = {
-    generatedAt,
-    workspace: workspaceDir,
-    outputDir: resolvedOut,
-    artifacts,
-  };
-
-  fs.writeFileSync(
-    path.join(resolvedOut, 'manifest.json'),
-    JSON.stringify(manifest, null, 2),
-    'utf8',
-  );
-
-  return manifest;
-}
-
-export async function handleRuntimeDiagnosticsExport(opts: DiagnosticsExportOptions): Promise<void> {
-  const workspaceDir = opts.workspace
-    ? path.resolve(opts.workspace)
-    : resolveWorkspaceDir();
-
-  const outDir = opts.out
-    ? path.resolve(workspaceDir, opts.out)
-    : path.resolve(workspaceDir, '.state', 'control-plane-observation', 'snapshots');
-
-  const manifest = await exportDiagnosticsBundle(workspaceDir, outDir);
-
-  if (opts.json) {
-    console.log(JSON.stringify(manifest, null, 2));
-  } else {
-    console.log(`Diagnostic bundle exported to: ${manifest.outputDir}`);
-    console.log(`Artifacts: ${manifest.artifacts.length}`);
-    for (const artifact of manifest.artifacts) {
-      const icon = artifact.status === 'ok' ? '✓' : '✗';
-      console.log(`  ${icon} ${artifact.name} (${artifact.path})`);
-    }
-    const failedCount = manifest.artifacts.filter(a => a.status === 'failed').length;
-    if (failedCount > 0) {
-      console.log(`\n${failedCount} artifact(s) failed to generate. See errors.json for details.`);
-    }
-  }
-}

package/src/commands/runtime-features.ts

@@ -1,153 +0,0 @@
-/**
- * pd runtime features — Show effective feature flags from .pd/config.yaml.
- *
- * PRI-305: Cutover from .pd/feature-flags.yaml to .pd/config.yaml.
- * Uses core computeFeatureFlagsFromConfig for flag computation.
- * --json outputs a single parseable JSON object.
- * Missing config uses core defaults with nextAction.
- * Malformed config fails loud with reason and nextAction.
- * No secret output.
- */
-
-import * as path from 'path';
-import { loadPdConfig, computeFlagsFromLoadResult } from '../services/pd-config-loader.js';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-import { emitResult } from '../services/cli-output.js';
-
-// ── Output types ─────────────────────────────────────────────────────────────
-
-export interface RuntimeFeaturesOutput {
-  status: 'ok' | 'degraded' | 'failed';
-  source: 'defaults' | 'user_config' | 'malformed';
-  configPath: string;
-  features: {
-    id: string;
-    category: string;
-    enabled: boolean;
-  }[];
-  enabledMvpChannels: string[];
-  totalFlags: number;
-  enabledCount: number;
-  disabledCount: number;
-  warnings: string[];
-  reason?: string;
-  nextAction?: string;
-  /** Malformed config errors (only present when source=malformed) */
-  errors?: { path: string; reason: string; nextAction: string }[];
-}
-
-// ── Build output ─────────────────────────────────────────────────────────────
-
-export function buildRuntimeFeaturesStatus(workspaceDir: string): RuntimeFeaturesOutput {
-  const loadResult = loadPdConfig(workspaceDir);
-  const flags = computeFlagsFromLoadResult(loadResult);
-
-  const allFlags = Object.values(flags.flags);
-  const enabledCount = allFlags.filter(f => f.enabled).length;
-  const features = allFlags.map(f => ({
-    id: f.id,
-    category: f.category,
-    enabled: f.enabled,
-  }));
-
-  // Determine status
-  let status: RuntimeFeaturesOutput['status'] = 'ok';
-  const warnings = [...loadResult.warnings, ...flags.warnings];
-
-  if (!loadResult.ok) {
-    status = 'failed';
-  } else if (warnings.length > 0) {
-    status = 'degraded';
-  }
-
-  const output: RuntimeFeaturesOutput = {
-    status,
-    source: loadResult.ok ? loadResult.source : 'malformed',
-    configPath: loadResult.configPath,
-    features,
-    enabledMvpChannels: [...flags.enabledChannels],
-    totalFlags: allFlags.length,
-    enabledCount,
-    disabledCount: allFlags.length - enabledCount,
-    warnings,
-  };
-
-  // Add reason and nextAction for non-ok states
-  if (!loadResult.ok) {
-    output.reason = `Config validation failed: ${loadResult.errors.map(e => e.reason).join('; ')}`;
-    output.nextAction = loadResult.errors[0]?.nextAction ?? 'Fix .pd/config.yaml and retry';
-    output.errors = loadResult.errors;
-  } else if (warnings.length > 0) {
-    output.reason = `Config warnings: ${warnings.slice(0, 3).join('; ')}`;
-    output.nextAction = 'Review .pd/config.yaml for warnings';
-  }
-
-  return output;
-}
-
-// ── Text formatting ──────────────────────────────────────────────────────────
-
-function formatTextOutput(output: RuntimeFeaturesOutput): string {
-  const lines: string[] = [];
-
-  lines.push('PD Runtime Features');
-  lines.push(`source: ${output.source}`);
-  lines.push(`config: ${output.configPath}`);
-  lines.push('');
-
-  const categoryOrder = ['core', 'quiet', 'gone'] as const;
-  for (const category of categoryOrder) {
-    const categoryFlags = output.features.filter(f => f.category === category);
-    if (categoryFlags.length === 0) continue;
-
-    lines.push(`  ${category.toUpperCase()} (${categoryFlags.length})`);
-    for (const flag of categoryFlags) {
-      const icon = flag.enabled ? '+' : '-';
-      lines.push(`    [${icon}] ${flag.id}`);
-    }
-    lines.push('');
-  }
-
-  lines.push(`Total: ${output.totalFlags} flags, ${output.enabledCount} enabled, ${output.disabledCount} disabled`);
-  lines.push(`MVP channels: ${output.enabledMvpChannels.length > 0 ? output.enabledMvpChannels.join(', ') : '(none)'}`);
-
-  if (output.warnings.length > 0) {
-    lines.push('');
-    lines.push('Warnings:');
-    for (const w of output.warnings) {
-      lines.push(`  [!] ${w}`);
-    }
-  }
-
-  if (output.errors && output.errors.length > 0) {
-    lines.push('');
-    lines.push('Errors:');
-    for (const e of output.errors) {
-      lines.push(`  [x] ${e.path}: ${e.reason}`);
-      lines.push(`      → ${e.nextAction}`);
-    }
-  }
-
-  return lines.join('\n');
-}
-
-// ── CLI handler ──────────────────────────────────────────────────────────────
-
-interface FeaturesOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-export async function handleRuntimeFeaturesStatus(opts: FeaturesOptions): Promise<void> {
-  const workspaceDir = opts.workspace
-    ? path.resolve(opts.workspace)
-    : resolveWorkspaceDir();
-
-  const output = buildRuntimeFeaturesStatus(workspaceDir);
-
-  emitResult(output, { json: opts.json ?? false, formatText: formatTextOutput });
-
-  if (output.status === 'failed') {
-    process.exitCode = 1;
-  }
-}

package/src/commands/runtime-gfi-snapshot.ts

@@ -1,135 +0,0 @@
-/**
- * pd runtime gfi snapshot command — GFI workspace snapshot for Runtime V2.
- *
- * Usage:
- *   pd runtime gfi snapshot --workspace <path> --json
- *   pd runtime health gfi --workspace <path> --json  (alias)
- *
- * Shows active vs stale session breakdown for GFI visibility.
- * Stale sessions (>2h inactive) do NOT influence the active snapshot.
- *
- * PRI-78/PRI-82: GFI Observability
- */
-import * as path from 'path';
-import * as fs from 'fs';
-import { buildGfiWorkspaceSnapshot } from '@principles/core/runtime-v2';
-import type { GfiWorkspaceSnapshot } from '@principles/core/runtime-v2';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-
-interface GfiSnapshotOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-function formatTextOutput(snapshot: GfiWorkspaceSnapshot): string {
-  const lines: string[] = [];
-
-  lines.push('GFI Workspace Snapshot');
-  lines.push(`generatedAt: ${snapshot.generatedAt}`);
-  lines.push('');
-
-  if (snapshot.active) {
-    const a = snapshot.active;
-    lines.push('ACTIVE SESSION');
-    lines.push(`  currentGfi: ${a.currentGfi}  stage: ${a.stage}`);
-    lines.push(`  dominantSource: ${a.dominantSource ?? '(none)'}`);
-    lines.push(`  consecutiveErrors: ${a.consecutiveErrors}`);
-    lines.push(`  dailyGfiPeak: ${a.dailyGfiPeak ?? '(none)'}`);
-    lines.push(`  attitudeMode: ${a.consumers.attitudeMode}`);
-    lines.push(`  painDiagnosticReason: ${a.consumers.painDiagnosticReason}`);
-  } else {
-    lines.push('ACTIVE SESSION: (none)');
-  }
-
-  lines.push('');
-
-  if (snapshot.staleSessionCount > 0 && snapshot.staleGfiRange) {
-    lines.push(`STALE SESSIONS: ${snapshot.staleSessionCount} session(s)` +
-      ` (GFI range: ${snapshot.staleGfiRange.min}-${snapshot.staleGfiRange.max})`);
-  } else {
-    lines.push('STALE SESSIONS: 0');
-  }
-
-  lines.push('');
-  lines.push(`TOTAL: ${snapshot.totalSessionCount} session(s) (${snapshot.activeSessionCount} active)`);
-
-  return lines.join('\n');
-}
-
-function readPersistedSessions(workspaceDir: string): {
-  sessionId: string;
-  currentGfi: number;
-  gfiBySource?: Record<string, number>;
-  lastErrorSource?: string;
-  consecutiveErrors: number;
-  lastGfiDecayAt?: number;
-  dailyGfiPeak?: number;
-  lastActivityAt: number;
-}[] {
-  const sessionDir = path.join(workspaceDir, '.state', 'sessions');
-
-  if (!fs.existsSync(sessionDir)) {
-    return [];
-  }
-
-  const sessions: {
-    sessionId: string;
-    currentGfi: number;
-    gfiBySource?: Record<string, number>;
-    lastErrorSource?: string;
-    consecutiveErrors: number;
-    lastGfiDecayAt?: number;
-    dailyGfiPeak?: number;
-    lastActivityAt: number;
-  }[] = [];
-  let skippedCount = 0;
-
-  for (const file of fs.readdirSync(sessionDir)) {
-    if (!file.endsWith('.json')) continue;
-    try {
-      const raw = fs.readFileSync(path.join(sessionDir, file), 'utf8');
-      const parsed = JSON.parse(raw);
-      if (parsed?.sessionId) {
-        sessions.push({
-          sessionId: parsed.sessionId ?? file.replace('.json', ''),
-          currentGfi: parsed.currentGfi ?? 0,
-          gfiBySource: parsed.gfiBySource,
-          lastErrorSource: parsed.lastErrorSource,
-          consecutiveErrors: parsed.consecutiveErrors ?? 0,
-          lastGfiDecayAt: parsed.lastGfiDecayAt,
-          dailyGfiPeak: parsed.dailyGfiPeak,
-          lastActivityAt: parsed.lastActivityAt ?? parsed.lastControlActivityAt ?? 0,
-        });
-      } else {
-        skippedCount++;
-      }
-    } catch {
-      skippedCount++;
-    }
-  }
-
-  if (skippedCount > 0) {
-    console.warn(`[runtime-gfi-snapshot] Skipped ${skippedCount} malformed session file(s)`);
-  }
-
-  return sessions;
-}
-
-export async function handleRuntimeGfiSnapshot(opts: GfiSnapshotOptions): Promise<void> {
-  const workspaceDir = opts.workspace
-    ? path.resolve(opts.workspace)
-    : resolveWorkspaceDir();
-
-  const sessions = readPersistedSessions(workspaceDir);
-
-  const snapshot = buildGfiWorkspaceSnapshot({
-    sessions,
-    nowMs: Date.now(),
-  });
-
-  if (opts.json) {
-    console.log(JSON.stringify(snapshot, null, 2));
-  } else {
-    console.log(formatTextOutput(snapshot));
-  }
-}

package/src/commands/runtime-health-snapshot.ts

@@ -1,108 +0,0 @@
-/**
- * pd runtime health snapshot command — Operator health snapshot for Runtime V2.
- *
- * Usage:
- *   pd runtime health snapshot --workspace <path> --json
- *
- * Aggregates chain reliability, candidate/ledger consistency, and pruning
- * lifecycle signals into a single operator-facing read-only snapshot.
- *
- * PRI-28: Operator health snapshot.
- */
-import * as path from 'path';
-import { OperatorHealthReadModel } from '@principles/core/runtime-v2';
-import type { OperatorHealthSnapshot } from '@principles/core/runtime-v2';
-import { resolveWorkspaceDir } from '../resolve-workspace.js';
-
-interface HealthSnapshotOptions {
-  workspace?: string;
-  json?: boolean;
-}
-
-function formatTextOutput(snapshot: OperatorHealthSnapshot): string {
-  const lines: string[] = [];
-  const statusIcon = snapshot.overallStatus === 'healthy' ? '✓' : '✗';
-
-  lines.push(`Operator Health Snapshot`);
-  lines.push(`generatedAt: ${snapshot.generatedAt}`);
-  lines.push(`workspace:   ${snapshot.workspace}`);
-  lines.push('');
-  lines.push(`OVERALL: ${statusIcon} ${snapshot.overallStatus.toUpperCase()}`);
-  lines.push('');
-
-  // Pain chain
-  lines.push('painChain:');
-  if (snapshot.painChain.lastSuccessfulChain) {
-    const c = snapshot.painChain.lastSuccessfulChain;
-    lines.push(`  lastChain: ${c.painId} → ${c.taskId} → ${c.runId ?? '-'} → ${c.artifactId ?? '-'}`);
-    lines.push(`  candidates: ${c.candidateIds.length}, ledgerEntries: ${c.ledgerEntryIds.length}`);
-  } else {
-    lines.push('  lastChain: (none)');
-  }
-  lines.push('');
-
-  // Candidate/ledger
-  lines.push('candidateLedger:');
-  lines.push(`  status: ${snapshot.candidateLedger.auditStatus}`);
-  if (snapshot.candidateLedger.missingLedgerCount > 0) {
-    lines.push(`  missingLedger: ${snapshot.candidateLedger.missingLedgerCount}`);
-  }
-  lines.push('');
-
-  // Pruning
-  lines.push('pruning:');
-  lines.push(`  watchCount: ${snapshot.pruning.watchCount}, reviewCount: ${snapshot.pruning.reviewCount}`);
-  if (snapshot.pruning.orphanDerivedCandidateCount > 0) {
-    lines.push(`  orphanDerivedCandidates: ${snapshot.pruning.orphanDerivedCandidateCount}`);
-  }
-  lines.push('');
-
-  // GFI
-  if (snapshot.gfi.active) {
-    const g = snapshot.gfi.active;
-    lines.push(`gfi: stage=${g.stage} currentGfi=${g.currentGfi} dominantSource=${g.dominantSource ?? '-'} sessions=${snapshot.gfi.activeSessionCount}active/${snapshot.gfi.staleSessionCount}stale`);
-  } else {
-    lines.push('gfi: (no active sessions)');
-  }
-  lines.push('');
-
-  // Actions
-  if (snapshot.recommendedActions.length === 0) {
-    lines.push('No actions recommended.');
-  } else {
-    lines.push('Recommended actions:');
-    for (const action of snapshot.recommendedActions) {
-      lines.push(`  [!] ${action}`);
-    }
-  }
-
-  return lines.join('\n');
-}
-
-export async function handleRuntimeHealthSnapshot(opts: HealthSnapshotOptions): Promise<void> {
-  const workspaceDir = opts.workspace
-    ? path.resolve(opts.workspace)
-    : resolveWorkspaceDir();
-
-  const model = new OperatorHealthReadModel({ workspaceDir });
-
-  try {
-    const snapshot = await model.getSnapshot();
-
-    if (opts.json) {
-      console.log(JSON.stringify(snapshot, null, 2));
-    } else {
-      console.log(formatTextOutput(snapshot));
-    }
-
-    if (snapshot.overallStatus !== 'healthy') {
-      if (!opts.json) {
-        console.error('');
-        console.error(`FAIL: overallStatus=${snapshot.overallStatus}`);
-      }
-      process.exitCode = 1;
-    }
-  } finally {
-    await model.close();
-  }
-}