@principles/pd-cli 1.152.12 → 1.152.13

package/tests/commands/run-rulehost-handler.test.ts

@@ -1,908 +0,0 @@
-/**
- * handleRunRuleHost behaviour tests (PRI-429) — input validation gates,
- * dry-run output, and capability branches.
- *
- * The existing flag-wiring test only proves Commander parses the flags.
- * This file verifies the handler's behavioural gates:
- *   - mutual exclusivity of --dry-run and --confirm
- *   - required pain-id (and whitespace-only forms)
- *   - channel allowlist enforcement
- *   - --max-rounds / --timeout-ms positive-integer validation
- *   - default dry-run output (both plain-text and JSON)
- *   - --json output parses as a single JSON object
- *
- * These gates are the CLI-gate contract for run-rulehost. If any of them
- * regress, operators silently get undefined behaviour instead of a clear
- * error + next-action recommendation.
- */
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import * as yaml from 'js-yaml';
-import { handleRunRuleHost } from '../../src/commands/runtime-internalization-run-rulehost.js';
-
-// ── workspace helpers ─────────────────────────────────────────────────────
-
-function mkTmpDir(): string {
-  return fs.mkdtempSync(path.join(os.tmpdir(), 'pd-rulehost-handler-'));
-}
-
-function writeMinimalValidConfig(workspaceDir: string): void {
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-// ── stdout/stderr capture helpers ──────────────────────────────────────
-
-interface StdIoState {
-  stdout: string;
-  stderr: string;
-  exitCode: number | undefined;
-}
-
-function parseJsonObject(text: string): Record<string, unknown> {
-  const parsed: unknown = JSON.parse(text);
-  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
-    throw new Error('stdout is not a JSON object');
-  }
-  return parsed;
-}
-
-/** Type guard: narrows `unknown` to `Record<string, unknown>` without `as`. */
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-function captureStdio(fn: () => Promise<void>): Promise<StdIoState> {
-  return new Promise((resolve, reject) => {
-    const origExitCode = process.exitCode;
-    process.exitCode = undefined;
-    let stdout = '';
-    let stderr = '';
-    const stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation((chunk: string | Uint8Array) => {
-      stdout += typeof chunk === 'string' ? chunk : chunk.toString();
-      return true;
-    });
-    const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation((chunk: string | Uint8Array) => {
-      stderr += typeof chunk === 'string' ? chunk : chunk.toString();
-      return true;
-    });
-    const consoleErrorSpy = vi.spyOn(console, 'error').mockImplementation((...args: unknown[]) => {
-      stderr += args.map((a) => (typeof a === 'string' ? a : String(a))).join(' ') + '\n';
-    });
-    fn()
-      .then(() => {
-        const captured = { stdout, stderr, exitCode: process.exitCode };
-        stdoutSpy.mockRestore();
-        stderrSpy.mockRestore();
-        consoleErrorSpy.mockRestore();
-        process.exitCode = origExitCode;
-        resolve(captured);
-      })
-      .catch((err) => {
-        stdoutSpy.mockRestore();
-        stderrSpy.mockRestore();
-        consoleErrorSpy.mockRestore();
-        process.exitCode = origExitCode;
-        reject(err);
-      });
-  });
-}
-
-describe('handleRunRuleHost — input validation gates', () => {
-  it('sets exitCode=1 and emits an error when both --dry-run and --confirm are passed (plain text)', async () => {
-    const { stdout, stderr, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, confirm: true }),
-    );
-    expect(exitCode).toBe(1);
-    // plain-text mode: error on stderr includes 'mutually exclusive'
-    expect(stderr).toMatch(/mutually exclusive/i);
-    // stdout must not contain JSON object (handler writes to stderr).
-    expect(stdout.trim()).toBe('');
-  });
-
-  it('sets exitCode=1 and emits a JSON object when both --dry-run and --confirm are passed with --json', async () => {
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, confirm: true, json: true }),
-    );
-    expect(exitCode).toBe(1);
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('failed');
-    expect(payload.nextAction).toBeDefined();
-    expect(typeof payload.reason).toBe('string');
-  });
-
-  it('sets exitCode=1 when --pain-id is missing (falsy string)', async () => {
-    const { exitCode } = await captureStdio(() => handleRunRuleHost({ painId: '' }));
-    expect(exitCode).toBe(1);
-  });
-
-  it('sets exitCode=1 when --pain-id is whitespace-only', async () => {
-    const { exitCode } = await captureStdio(() => handleRunRuleHost({ painId: '   \t ' }));
-    expect(exitCode).toBe(1);
-  });
-
-  it('sets exitCode=1 for unsupported channels (plain-text mode)', async () => {
-    const { exitCode, stderr } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', channel: 'wizard' }),
-    );
-    expect(exitCode).toBe(1);
-    expect(stderr).toMatch(/wizard/);
-  });
-
-  it('sets exitCode=1 for unsupported channels (JSON mode)', async () => {
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', channel: 'wizard', json: true }),
-    );
-    expect(exitCode).toBe(1);
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('failed');
-    expect(payload.reason).toMatch(/wizard/);
-  });
-
-  it('sets exitCode=1 when --max-rounds is zero', async () => {
-    const { exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', maxRounds: 0, dryRun: true }));
-    expect(exitCode).toBe(1);
-  });
-
-  it('sets exitCode=1 when --max-rounds is negative', async () => {
-    const { exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', maxRounds: -5, dryRun: true }));
-    expect(exitCode).toBe(1);
-  });
-
-  it('sets exitCode=1 when --timeout-ms is zero', async () => {
-    const { exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', timeoutMs: 0, dryRun: true }));
-    expect(exitCode).toBe(1);
-  });
-
-  it('sets exitCode=1 when --timeout-ms is negative', async () => {
-    const { exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', timeoutMs: -100, dryRun: true }));
-    expect(exitCode).toBe(1);
-  });
-
-  it.each([
-    ['NaN maxRounds', { maxRounds: Number.NaN }],
-    ['fractional maxRounds', { maxRounds: 1.5 }],
-    ['NaN timeoutMs', { timeoutMs: Number.NaN }],
-    ['fractional timeoutMs', { timeoutMs: 1.5 }],
-  ])('sets exitCode=1 for %s', async (_label, invalidOption) => {
-    const { exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, ...invalidOption }),
-    );
-    expect(exitCode).toBe(1);
-  });
-});
-
-describe('handleRunRuleHost — dry-run mode output shape (with minimal pd-config.yaml', () => {
-  let workspaceDir: string;
-  let savedEnv: NodeJS.ProcessEnv;
-
-  beforeEach(() => {
-    workspaceDir = mkTmpDir();
-    writeMinimalValidConfig(workspaceDir);
-    savedEnv = { ...process.env };
-    process.env.ANTHROPIC_API_KEY = 'sk-ant-test-key';
-  });
-
-  afterEach(() => {
-    process.env = savedEnv;
-    try { fs.rmSync(workspaceDir, { recursive: true, force: true }); } catch { /* ignore */ }
-  });
-
-  it('emits a single JSON object in --json dry-run mode', async () => {
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('dry_run');
-    expect(typeof payload.capabilityStatus).toBe('string');
-    expect(typeof payload.nextAction).toBe('string');
-    expect(payload.painId).toBe('pain-1');
-    // Must not be error-exit for a valid dry-run.
-    expect(exitCode).toBeUndefined();
-  });
-
-  it('does NOT emit JSON on stdout in plain-text dry-run mode', async () => {
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, workspace: workspaceDir }),
-    );
-    expect(stdout).toMatch(/RuleHost Pipeline/);
-    // Plain text output should not start with '{'
-    expect(() => JSON.parse(stdout.trim())).toThrow();
-  });
-
-  it('defaults to dry-run behaviour when neither --dry-run nor --confirm is passed', async () => {
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('dry_run');
-  });
-
-  it('accepts the three supported channels and passes config', async () => {
-    for (const channel of ['prompt', 'code_tool_hook', 'defer_archive'] as const) {
-      const { exitCode } = await captureStdio(() =>
-        handleRunRuleHost({ painId: 'pain-1', channel, dryRun: true, workspace: workspaceDir }),
-      );
-      // Channel gate passed — exitCode should not be 1 for supported channels.
-      expect(exitCode).toBeUndefined();
-    }
-  });
-});
-
-// ── PRI-461: readiness integration tests ──────────────────────────────────
-//
-// Verifies the handler emits the three readiness statuses (ready /
-// text_principle_only / refused) with the correct exit codes and JSON shape.
-// These tests exercise the full path: config → resolveRuleHostReadiness →
-// handler output, ensuring the readiness gate is wired into production code
-// (EP-02) and that refused statuses fail loud with reason + nextAction (EP-03).
-
-function writeFullReadyConfig(workspaceDir: string): void {
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: true },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-function writeTextPrincipleOnlyConfig(workspaceDir: string): void {
-  // code_rule_capability explicitly OFF → text_principle_only
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: false },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-function writeEvaluatorDisabledConfig(workspaceDir: string): void {
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: true },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: false, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-function writeRefusedConfig(workspaceDir: string): void {
-  // dreamer disabled → required agent missing → refused
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: true },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: false, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-describe('handleRunRuleHost — PRI-461 readiness integration', () => {
-  let workspaceDir: string;
-  let savedEnv: NodeJS.ProcessEnv;
-
-  beforeEach(() => {
-    workspaceDir = mkTmpDir();
-    savedEnv = { ...process.env };
-    process.env.ANTHROPIC_API_KEY = 'sk-ant-test-key';
-  });
-
-  afterEach(() => {
-    process.env = savedEnv;
-    try { fs.rmSync(workspaceDir, { recursive: true, force: true }); } catch { /* ignore */ }
-  });
-
-  // ── ready ───────────────────────────────────────────────────────────────
-
-  it('emits readiness=ready in --json dry-run when all agents and code-rule capability are ON', async () => {
-    writeFullReadyConfig(workspaceDir);
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('dry_run');
-    expect(payload.readinessStatus).toBe('ready');
-    const readiness = payload.readiness;
-    expect(isRecord(readiness)).toBe(true);
-    if (!isRecord(readiness)) {
-      throw new Error('readiness is not a record');
-    }
-    expect(readiness.status).toBe('ready');
-    expect(exitCode).toBeUndefined();
-  });
-
-  it('emits readiness=ready in plain-text dry-run output', async () => {
-    writeFullReadyConfig(workspaceDir);
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, workspace: workspaceDir }),
-    );
-    expect(stdout).toMatch(/readiness:\s*READY/i);
-  });
-
-  // ── text_principle_only ─────────────────────────────────────────────────
-
-  it('emits readiness=text_principle_only in --json dry-run when code_rule_capability is OFF', async () => {
-    writeTextPrincipleOnlyConfig(workspaceDir);
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('dry_run');
-    expect(payload.readinessStatus).toBe('text_principle_only');
-    const readiness = payload.readiness;
-    expect(isRecord(readiness)).toBe(true);
-    if (!isRecord(readiness)) {
-      throw new Error('readiness is not a record');
-    }
-    expect(readiness.status).toBe('text_principle_only');
-    expect(typeof readiness.reason).toBe('string');
-    expect(typeof readiness.nextAction).toBe('string');
-    expect(exitCode).toBeUndefined();
-  });
-
-  it('does not reclassify evaluator-disabled text_principle_only as runtime resolution failure', async () => {
-    writeEvaluatorDisabledConfig(workspaceDir);
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('dry_run');
-    expect(payload.readinessStatus).toBe('text_principle_only');
-    const readiness = payload.readiness;
-    expect(isRecord(readiness)).toBe(true);
-    if (!isRecord(readiness)) {
-      throw new Error('readiness is not a record');
-    }
-    expect(readiness.status).toBe('text_principle_only');
-    expect(String(readiness.reason)).toContain('evaluator');
-    expect(String(payload.capabilityStatus)).toContain('evaluator');
-    expect(exitCode).toBeUndefined();
-  });
-
-  it('emits readiness=text_principle_only in plain-text dry-run output', async () => {
-    writeTextPrincipleOnlyConfig(workspaceDir);
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, workspace: workspaceDir }),
-    );
-    expect(stdout).toMatch(/readiness:\s*TEXT_PRINCIPLE_ONLY/i);
-  });
-
-  // ── refused ─────────────────────────────────────────────────────────────
-
-  it('exits with code=1 and emits status=refused in --json when dreamer is disabled', async () => {
-    writeRefusedConfig(workspaceDir);
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('refused');
-    expect(typeof payload.reason).toBe('string');
-    expect(typeof payload.nextAction).toBe('string');
-    expect(exitCode).toBe(1);
-  });
-
-  it('exits with code=1 and emits REFUSED in plain-text when dreamer is disabled', async () => {
-    writeRefusedConfig(workspaceDir);
-    const { stderr, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, workspace: workspaceDir }),
-    );
-    expect(stderr).toMatch(/REFUSED/i);
-    expect(stderr).toMatch(/dreamer/i);
-    expect(exitCode).toBe(1);
-  });
-
-  it('refused status includes the full readiness object in --json output', async () => {
-    writeRefusedConfig(workspaceDir);
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.readiness).toBeDefined();
-    const readiness = payload.readiness;
-    expect(isRecord(readiness)).toBe(true);
-    if (!isRecord(readiness)) {
-      throw new Error('readiness is not a record');
-    }
-    expect(readiness.status).toBe('refused');
-    expect(readiness.agentStatuses).toBeDefined();
-  });
-
-  it('refused status does NOT attempt pipeline execution or adapter construction', async () => {
-    // If the handler tried to construct adapters with a disabled dreamer,
-    // resolveRunRuleHostRuntime would throw. The readiness gate must prevent
-    // that by exiting before resolveRunRuleHostRuntime is called.
-    writeRefusedConfig(workspaceDir);
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', dryRun: true, json: true, workspace: workspaceDir }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    // Must be 'refused', NOT 'failed' with 'agent_runtime_resolution_failed'
-    expect(payload.status).toBe('refused');
-    expect(payload.reason).not.toMatch(/agent_runtime_resolution_failed/);
-    expect(exitCode).toBe(1);
-  });
-});
-
-// ── PR #1122: behavior-examples fail-fast + v2-aware text output ──────────
-//
-// CodeRabbit PR2 Comment 1 (P1): when --behavior-examples is provided but the
-// file is missing or contains invalid JSON, the handler MUST return a
-// structured error immediately instead of silently degrading to
-// text_principle_only (rc-9-no-silent-fallback).
-//
-// CodeRabbit PR2 Comment 2 (P2): the text dry-run branch must use the same
-// v2-aware capabilityStatus source as the JSON branch (behaviorExamplesReason-
-// aware), not the stale resolvedRuntime.capabilityStatus.
-//
-// These tests require `rulecode_context_v2` enabled so the handler enters the
-// v2 path where --behavior-examples is honored.
-
-function writeContextV2EnabledConfig(workspaceDir: string): void {
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: true },
-      rulecode_context_v2: { category: 'core', enabled: true },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-function writeContextV2KillSwitchConfig(workspaceDir: string): void {
-  const configDir = path.join(workspaceDir, '.pd');
-  fs.mkdirSync(configDir, { recursive: true });
-  const cfg = {
-    version: 1,
-    features: {
-      prompt: { category: 'core', enabled: true },
-      code_tool_hook: { category: 'core', enabled: true },
-      defer_archive: { category: 'core', enabled: true },
-      code_rule_capability: { category: 'core', enabled: true },
-      // PRI-780: explicit kill switch (the flag itself defaults ON).
-      rulecode_context_v2: { category: 'quiet', enabled: false },
-    },
-    workspace: { default: workspaceDir },
-    runtimeProfiles: {
-      'pi-ai.default': { type: 'pi-ai', provider: 'anthropic', model: 'claude-sonnet', apiKeyEnv: 'ANTHROPIC_API_KEY' },
-    },
-    internalAgents: {
-      defaultRuntime: 'pi-ai.default',
-      agents: {
-        dreamer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        philosopher: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        scribe: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        artificer: { enabled: true, runtimeProfile: 'pi-ai.default' },
-        evaluator: { enabled: true, runtimeProfile: 'pi-ai.default' },
-      },
-    },
-  };
-  fs.writeFileSync(path.join(configDir, 'config.yaml'), yaml.dump(cfg), 'utf8');
-}
-
-describe('handleRunRuleHost — PR #1122 behavior-examples fail-fast (CodeRabbit Comment 1+2)', () => {
-  let workspaceDir: string;
-  let savedEnv: NodeJS.ProcessEnv;
-
-  beforeEach(() => {
-    workspaceDir = mkTmpDir();
-    savedEnv = { ...process.env };
-    process.env.ANTHROPIC_API_KEY = 'sk-ant-test-key';
-  });
-
-  afterEach(() => {
-    process.env = savedEnv;
-    try { fs.rmSync(workspaceDir, { recursive: true, force: true }); } catch { /* ignore */ }
-  });
-
-  it('returns status=failed with behavior_examples_unreadable reason in --json mode when --behavior-examples file does not exist', async () => {
-    writeContextV2EnabledConfig(workspaceDir);
-    const missingPath = path.join(workspaceDir, 'nonexistent-examples.json');
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({
-        painId: 'pain-1',
-        dryRun: true,
-        json: true,
-        workspace: workspaceDir,
-        behaviorExamples: missingPath,
-      }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('failed');
-    expect(typeof payload.reason).toBe('string');
-    expect(payload.reason).toMatch(/^behavior_examples_unreadable:/);
-    expect(typeof payload.nextAction).toBe('string');
-    expect(exitCode).toBe(1);
-  });
-
-  it('returns status=failed with behavior_examples_invalid reason in --json mode when --behavior-examples file has invalid JSON shape', async () => {
-    writeContextV2EnabledConfig(workspaceDir);
-    const examplesPath = path.join(workspaceDir, 'bad-examples.json');
-    // Valid JSON but missing required fields → behavior_examples_invalid: ...
-    fs.writeFileSync(examplesPath, JSON.stringify({ foo: 'bar' }), 'utf8');
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({
-        painId: 'pain-1',
-        dryRun: true,
-        json: true,
-        workspace: workspaceDir,
-        behaviorExamples: examplesPath,
-      }),
-    );
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('failed');
-    expect(payload.reason).toMatch(/^behavior_examples_invalid:/);
-    expect(exitCode).toBe(1);
-  });
-
-  it('emits error on stderr in plain-text mode when --behavior-examples file does not exist', async () => {
-    writeContextV2EnabledConfig(workspaceDir);
-    const missingPath = path.join(workspaceDir, 'nonexistent-examples.json');
-    const { stdout, stderr, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({
-        painId: 'pain-1',
-        dryRun: true,
-        workspace: workspaceDir,
-        behaviorExamples: missingPath,
-      }),
-    );
-    expect(exitCode).toBe(1);
-    expect(stderr).toMatch(/behavior_examples_unreadable:/);
-    // Plain-text mode must NOT emit a JSON object on stdout.
-    expect(stdout.trim()).toBe('');
-  });
-
-  it('text dry-run output uses v2-aware capabilityStatus when --behavior-examples is missing (CodeRabbit Comment 2)', async () => {
-    // With contextV2Enabled=true and no --behavior-examples, the handler sets
-    // behaviorExamplesReason='behavior_examples_missing'. The text dry-run
-    // branch must derive capabilityStatus from the EFFECTIVE capability
-    // (PRI-780 review M2), surfacing the reason — not the stale
-    // resolvedRuntime.capabilityStatus ("ON").
-    writeContextV2EnabledConfig(workspaceDir);
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({
-        painId: 'pain-1',
-        dryRun: true,
-        workspace: workspaceDir,
-      }),
-    );
-    expect(stdout).toMatch(/code_rule_capability: OFF \(behavior_examples_missing;/);
-    expect(stdout).not.toMatch(/code_rule_capability: ON/);
-  });
-
-  it('PRI-780 M2: kill-switch dry-run reports OFF with the kill-switch reason, never ON', async () => {
-    writeContextV2KillSwitchConfig(workspaceDir);
-    const { stdout } = await captureStdio(() =>
-      handleRunRuleHost({
-        painId: 'pain-1',
-        dryRun: true,
-        workspace: workspaceDir,
-      }),
-    );
-    expect(stdout).toMatch(/code_rule_capability: OFF \(rulecode_context_v2_disabled/);
-    expect(stdout).not.toMatch(/code_rule_capability: ON/);
-    // Codex review round 2 P2: the plain-text "Next" line must derive from the
-    // EFFECTIVE capability too — confirmation cannot run the code-rule pipeline.
-    expect(stdout).not.toMatch(/Next: pass --confirm to actually run the pipeline/);
-    expect(stdout).toMatch(/Next: fix the code-rule capability issue above/);
-  });
-});
-
-// ── PRI-657: production-identical gateDeps wiring (cli-7 real wiring) ──────
-//
-// The ArtificerL2Adapter's self-validation replay must use the SAME gate
-// semantics as the activation gate: createProductionGateDeps({toolSemantics,
-// projectDir}) resolved from the workspace host declaration (mirrors
-// internalization-consumer-cycle.ts). Previously it used createSandboxGateDeps()
-// with no workspace semantics — rules validated against a different tool
-// vocabulary than the one they will be activated under.
-// These tests drive the REAL handler (confirm path) and assert the constructor
-// options the command actually passes (EP-02/EP-04). On resolver failure the
-// command degrades observably to the baseline gate (rc-9: structured reason +
-// nextAction on stderr) while stdout keeps exactly one JSON object (cli-1).
-// NOTE: vitest hoists the vi.mock calls file-wide, so the stubs below also
-// apply to the other describes in this file — safe today because none of them
-// reach the adapter/pipeline paths; a future test needing the real
-// ArtificerL2Adapter or runRuleHostPipeline must live in its own file.
-
-const hoisted657 = vi.hoisted(() => {
-  const artificerL2Calls: unknown[] = [];
-  const gateDepsSentinel = { kind: 'production-gate-deps-stub' };
-  return {
-    artificerL2Calls,
-    gateDepsSentinel,
-    mockResolveWorkspaceHostToolSemantics: vi.fn(() => ({
-      ok: false,
-      reason: 'no_host_declaration: test default (no persisted declaration)',
-      nextAction: 'test default — assert the baseline-gate degradation path',
-    })),
-    mockCreateProductionGateDeps: vi.fn(() => gateDepsSentinel),
-    mockCreateSandboxGateDeps: vi.fn(() => ({ kind: 'sandbox-gate-deps-stub' })),
-    mockRunRuleHostPipeline: vi.fn(),
-  };
-});
-
-vi.mock('@principles/core/runtime-v2', async (importOriginal) => {
-  const original = await importOriginal<typeof import('@principles/core/runtime-v2')>();
-  class MockArtificerL2Adapter {
-    constructor(options: unknown) {
-      hoisted657.artificerL2Calls.push(options);
-    }
-  }
-  return {
-    ...original,
-    ArtificerL2Adapter: MockArtificerL2Adapter,
-    createProductionGateDeps: hoisted657.mockCreateProductionGateDeps,
-  };
-});
-
-vi.mock('@principles/host-runtime', async (importOriginal) => {
-  const original = await importOriginal<typeof import('@principles/host-runtime')>();
-  return {
-    ...original,
-    resolveWorkspaceHostToolSemantics: hoisted657.mockResolveWorkspaceHostToolSemantics,
-    WorkspaceTelemetryEmitter: class MockWorkspaceTelemetryEmitter {
-      constructor(_emitter: unknown, _workspaceDir: unknown, _onError: unknown) { /* no-op */ }
-    },
-  };
-});
-
-vi.mock('../../src/services/rulehost-pipeline-runner.js', async (importOriginal) => {
-  const original = await importOriginal<typeof import('../../src/services/rulehost-pipeline-runner.js')>();
-  return {
-    ...original,
-    runRuleHostPipeline: hoisted657.mockRunRuleHostPipeline,
-    createSandboxGateDeps: hoisted657.mockCreateSandboxGateDeps,
-  };
-});
-
-describe('handleRunRuleHost — PRI-657 production-identical gateDeps wiring', () => {
-  let workspaceDir: string;
-  let savedEnv: NodeJS.ProcessEnv;
-
-  const fakeRegistry = { resolve: vi.fn(), hostMappings: vi.fn().mockReturnValue([]) };
-  const pipelineReadyResult = {
-    decision: 'candidate_ready_for_owner_review',
-    painId: 'pain-1',
-    stages: [],
-    scribeTaskId: 'scribe-1',
-    ruleArtifactId: 'pi-rule-1' as string | null,
-    principleArtifactId: null as string | null,
-    approvalId: 'apr-1' as string | null,
-    degradationReason: null as string | null,
-  };
-
-  beforeEach(() => {
-    vi.clearAllMocks();
-    hoisted657.artificerL2Calls.length = 0;
-    workspaceDir = mkTmpDir();
-    writeFullReadyConfig(workspaceDir);
-    savedEnv = { ...process.env };
-    process.env.ANTHROPIC_API_KEY = 'sk-ant-test-key';
-    hoisted657.mockRunRuleHostPipeline.mockResolvedValue(pipelineReadyResult);
-  });
-
-  afterEach(() => {
-    process.env = savedEnv;
-    try { fs.rmSync(workspaceDir, { recursive: true, force: true }); } catch { /* ignore */ }
-  });
-
-  function firstArtificerL2Options(): Record<string, unknown> {
-    expect(hoisted657.artificerL2Calls).toHaveLength(1);
-    const options = hoisted657.artificerL2Calls[0];
-    if (!isRecord(options)) throw new Error('ArtificerL2Adapter options are not a record');
-    return options;
-  }
-
-  it('wires the workspace host-tool-semantics registry + projectDir into ArtificerL2 gateDeps (production parity)', async () => {
-    hoisted657.mockResolveWorkspaceHostToolSemantics.mockReturnValue({ ok: true, registry: fakeRegistry, hostKinds: ['codex'] });
-
-    const { stdout, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', confirm: true, json: true, workspace: workspaceDir }),
-    );
-
-    expect(hoisted657.mockResolveWorkspaceHostToolSemantics).toHaveBeenCalledWith(workspaceDir);
-    expect(hoisted657.mockCreateProductionGateDeps).toHaveBeenCalledWith({ toolSemantics: fakeRegistry, projectDir: workspaceDir });
-    expect(hoisted657.mockCreateSandboxGateDeps).not.toHaveBeenCalled();
-    expect(firstArtificerL2Options().gateDeps).toBe(hoisted657.gateDepsSentinel);
-
-    // cli-1: stdout stays exactly one parseable JSON result.
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('candidate_ready_for_owner_review');
-    expect(exitCode).toBeUndefined();
-  });
-
-  it('degrades observably to the baseline gate when workspace host semantics are unresolvable (rc-9 + cli-1)', async () => {
-    hoisted657.mockResolveWorkspaceHostToolSemantics.mockReturnValue({
-      ok: false,
-      reason: 'no_host_declaration: no persisted host tool declaration for this workspace',
-      nextAction: 'run `pd runtime host-declare` (or activate via a host) then re-run',
-    });
-
-    const { stdout, stderr, exitCode } = await captureStdio(() =>
-      handleRunRuleHost({ painId: 'pain-1', confirm: true, json: true, workspace: workspaceDir }),
-    );
-
-    // Baseline gate: createProductionGateDeps with NO options (the registry is
-    // absent, so a wrong-host vocabulary must not be guessed).
-    expect(hoisted657.mockCreateProductionGateDeps).toHaveBeenCalledWith();
-    expect(hoisted657.mockCreateSandboxGateDeps).not.toHaveBeenCalled();
-    expect(firstArtificerL2Options().gateDeps).toBe(hoisted657.gateDepsSentinel);
-
-    // rc-9: the degradation carries reason + nextAction on stderr.
-    expect(stderr).toContain('no_host_declaration');
-    expect(stderr).toContain('host-declare');
-
-    // cli-1: stderr noise must not leak into the machine-readable stdout.
-    const payload = parseJsonObject(stdout.trim());
-    expect(payload.status).toBe('candidate_ready_for_owner_review');
-    expect(exitCode).toBeUndefined();
-  });
-});
-
-// ── Owner Decision v1 review fix (Codex P1): identity-gated publication ─────
-
-describe('describePublicationOutcome — identity-gated refusal reporting (Codex P1)', () => {
-  const baseResult = {
-    decision: 'candidate_ready_for_owner_review' as const,
-    painId: 'pain-1',
-    stages: [],
-    scribeTaskId: 'scribe-1',
-    ruleArtifactId: 'pi-rule-1' as string | null,
-    principleArtifactId: null as string | null,
-    approvalId: null as string | null,
-    degradationReason: null as string | null,
-  };
-
-  it('flags the identity-blocked state and provides a repair nextAction', async () => {
-    const { describePublicationOutcome } = await import('../../src/commands/runtime-internalization-run-rulehost.js');
-    const outcome = describePublicationOutcome({
-      ...baseResult,
-      degradationReason: 'identity_binding_unverified: ledger_missing. Rule artifact NOT enqueued for Owner review (governance publication boundary).',
-    });
-    expect(outcome.blocked).toBe(true);
-    expect(outcome.nextAction).toContain('NOT enqueued');
-    expect(outcome.nextAction).toContain('re-run');
-  });
-
-  it('does not flag a healthy ready result with a real approval id', async () => {
-    const { describePublicationOutcome } = await import('../../src/commands/runtime-internalization-run-rulehost.js');
-    const outcome = describePublicationOutcome({ ...baseResult, approvalId: 'apr-1' });
-    expect(outcome.blocked).toBe(false);
-  });
-
-  it('text output for the identity-blocked result never claims WAITING for owner review', async () => {
-    const { formatTextOutput } = await import('../../src/commands/runtime-internalization-run-rulehost.js');
-    const text = formatTextOutput({
-      ...baseResult,
-      degradationReason: 'identity_binding_unverified: ledger_missing. Rule artifact NOT enqueued for Owner review (governance publication boundary).',
-    });
-    expect(text).toContain('PUBLICATION REFUSED');
-    expect(text).not.toContain('WAITING for owner review');
-    expect(text).toContain('NOT enqueued for Owner review');
-  });
-});