@principles/workbuddy-adapter 0.2.3 → 0.2.5

package/dist/codec/input-decoder.js

@@ -180,6 +180,18 @@ export function decodeWorkbuddyInput(raw) {
     // is ever fabricated when missing (rc-6).
     const turnId = consumedOptionalString(raw, 'generation_id');
     const base = { sessionId, ...(turnId !== undefined ? { turnId } : {}) };
+    // SPEC-PD-MODEL-AWARE-PROMPT-BUDGET-001 §5.3: `model` is an OBSERVED
+    // OPTIONAL field of the frozen host contract — the only model identity
+    // this host exposes (no capacity field exists). Consumed SOFTLY (absent or
+    // malformed → undefined, fixed-budget fallback) rather than
+    // consumedOptionalString's fail-loud: SPEC §8.6 forbids metadata failure
+    // from blocking the host conversation, and a bad model string degrades to
+    // the legacy budget instead of erroring the hook. Dynamic support is
+    // therefore catalog-unambiguous-match-only — never a guessed capacity.
+    const rawModel = own(raw, 'model');
+    const modelId = typeof rawModel === 'string' && rawModel.trim().length > 0 ? rawModel : undefined;
+    const modelContext = modelId !== undefined ? { modelId } : undefined;
+    const baseWithContext = modelContext !== undefined ? { ...base, modelContext } : base;
     let context;
     let rawPayload = raw;
     if (kind === 'session_start') {
@@ -190,12 +202,12 @@ export function decodeWorkbuddyInput(raw) {
         requiredString(raw, 'permission_mode');
         requiredString(raw, 'client');
         requiredString(raw, 'version');
-        context = { ...base, workspaceDir: '', source };
+        context = { ...baseWithContext, workspaceDir: '', source };
     }
     else if (kind === 'before_prompt_build') {
         const cwd = requiredAbsoluteCwd(raw);
         validateOptionalStringType(raw, 'permission_mode');
-        context = { ...base, workspaceDir: cwd, promptContent: requiredString(raw, 'prompt') };
+        context = { ...baseWithContext, workspaceDir: cwd, promptContent: requiredString(raw, 'prompt') };
     }
     else {
         const cwd = requiredAbsoluteCwd(raw);
@@ -218,10 +230,10 @@ export function decodeWorkbuddyInput(raw) {
                 const thrownError = requiredString(raw, 'error');
                 toolOutput = { result: raw, error: thrownError };
             }
-            context = { ...base, workspaceDir: cwd, toolName, ...(callId !== undefined ? { toolCallId: callId } : {}), toolInput, toolOutput };
+            context = { ...baseWithContext, workspaceDir: cwd, toolName, ...(callId !== undefined ? { toolCallId: callId } : {}), toolInput, toolOutput };
         }
         else {
-            context = { ...base, workspaceDir: cwd, toolName, ...(callId !== undefined ? { toolCallId: callId } : {}), toolInput };
+            context = { ...baseWithContext, workspaceDir: cwd, toolName, ...(callId !== undefined ? { toolCallId: callId } : {}), toolInput };
         }
         // The shared production gate reads its tool tuple from rawPayload.toolInput
         // (production-rulehost-gate readToolInput contract).

package/dist/pd-hook.js

@@ -37,7 +37,7 @@ import path from 'node:path';
 import process from 'node:process';
 import { pathToFileURL, fileURLToPath } from 'node:url';
 import { appendEventLogLine, redactTelemetryString, isRuleHostEvaluatedEventData } from '@principles/core/runtime-v2';
-import { createProductionHostRuntime, loadPdConfigForPlugin, parseOwnerStatementPrefix } from '@principles/host-runtime';
+import { createProductionHostRuntime, loadPdConfigForPlugin, parseOwnerStatementPrefix, assessWorkbuddyLiveKeyword, admitTrustedWorkbuddyLiveCorrection, ensureGovernanceDiagnosticianTask } from '@principles/host-runtime';
 import { computeFeatureFlagsFromConfig } from '@principles/core/runtime-v2';
 import { WorkBuddyHooksHostAdapter } from './host-adapter.js';
 import { WORKBUDDY_TOOL_SEMANTICS } from './tool-semantics.js';
@@ -255,6 +255,76 @@ export async function processWorkbuddyHookInvocation(rawStdin, channelEventName,
     const ownerReceipt = channelEventName === 'UserPromptSubmit'
         ? await recordWorkbuddyOwnerStatement(event, resolution.workspaceDir)
         : undefined;
+    // SPEC-PD-CROSS-HOST-KEYWORD-PAIN-001 P0: only a REAL current-user
+    // UserPromptSubmit may enter this quiet, default-OFF live keyword path.
+    // It does not inspect transcripts or alter normal hook stdout / exit codes.
+    const autoDiagnostics = [];
+    if (channelEventName === 'UserPromptSubmit' &&
+        event.kind === 'before_prompt_build' &&
+        flags.workbuddy_live_keyword_pain?.enabled === true) {
+        try {
+            const raw = parsed;
+            const prompt = event.context.promptContent;
+            const fromOwner = Object.getOwnPropertyDescriptor(raw, 'is_internal_continuation')?.value === false;
+            const nativeId = event.context.turnId;
+            const explicitReserved = typeof prompt === 'string' && prompt.trimStart().startsWith('PD记录痛苦');
+            if (fromOwner && nativeId !== undefined && nativeId.trim().length > 0 &&
+                typeof prompt === 'string' && !explicitReserved) {
+                const matched = assessWorkbuddyLiveKeyword(prompt, event.context.sessionId);
+                if (matched.matched) {
+                    const admitted = admitTrustedWorkbuddyLiveCorrection({
+                        workspaceDir: resolution.workspaceDir,
+                        rawEvent: parsed,
+                    });
+                    if (!admitted.ok) {
+                        autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_admission_' + admitted.reason, admitted.nextAction));
+                    }
+                    else {
+                        for (const outcome of admitted.outcomes) {
+                            if (!('disposition' in outcome)) {
+                                autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_admission_rejected', outcome.reason));
+                                continue;
+                            }
+                            if (outcome.disposition === 'admitted' || outcome.disposition === 'already_admitted') {
+                                const ensured = await ensureGovernanceDiagnosticianTask({
+                                    workspaceDir: resolution.workspaceDir,
+                                    logicalObservationKey: outcome.logicalObservationKey,
+                                    canonicalPainId: outcome.canonicalPainId,
+                                });
+                                if (!ensured.ok) {
+                                    autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_task_' + ensured.reason, ensured.nextAction));
+                                }
+                                else {
+                                    // Metadata only: never log the raw prompt or fabricate a
+                                    // completed diagnosis, approval or activation.
+                                    try {
+                                        appendEventLogLine(path.join(resolution.workspaceDir, '.state'), {
+                                            ts: new Date().toISOString(),
+                                            type: 'workbuddy_keyword_pain_admitted',
+                                            category: 'detected',
+                                            sessionId: event.context.sessionId,
+                                            data: { hostKind: 'workbuddy', outcome: outcome.disposition,
+                                                painId: outcome.canonicalPainId, taskId: ensured.taskId },
+                                        });
+                                    }
+                                    catch { /* Evidence-log failure must not block the prompt. */ }
+                                }
+                            }
+                            else if (outcome.disposition === 'rate_limited') {
+                                autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_rate_limited', 'Per-session strong signal limit reached; no new Pain was created.'));
+                            }
+                        }
+                    }
+                }
+                else if (matched.reason === 'prompt_too_large') {
+                    autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_prompt_too_large', 'Oversized prompt was not scanned or persisted as a keyword signal.'));
+                }
+            }
+        }
+        catch (error) {
+            autoDiagnostics.push(diagnostic('degraded', 'workbuddy_keyword_unexpected:' + errorMessage(error), 'The current prompt was preserved; inspect the governance workspace.'));
+        }
+    }
     const receiptOutput = (output) => ownerReceipt === undefined ? output : {
         hookSpecificOutput: { hookEventName: 'UserPromptSubmit', additionalContext: [ownerReceipt, output?.hookSpecificOutput.additionalContext].filter(Boolean).join('\n\n') },
     };
@@ -360,6 +430,7 @@ export async function processWorkbuddyHookInvocation(rawStdin, channelEventName,
             ...annotateContextWarnings(result.warnings ?? []).slice(0, 16).map((warning) => diagnostic('degraded', warning, 'Inspect the PD governance workspace state and retry; the hook stayed permissive (allow+warnings is degraded health, not fail-closed).')),
             ...evaluationDiagnostics,
             ...evidenceDiagnostics,
+            ...autoDiagnostics,
         ];
         return { stdout: receiptOutput(encoded), exitCode: 0, stderr: [...stderr, ...(ownerReceipt === undefined ? [] : [ownerReceipt])] };
     }
@@ -373,7 +444,7 @@ export async function processWorkbuddyHookInvocation(rawStdin, channelEventName,
         }
         // UserPromptSubmit: protect the prompt (exit 2 clears it — P02).
         // after_tool_call: the tool already ran — report evidence degradation only.
-        return { stdout: receiptOutput(null), exitCode: 0, stderr: [diagnostic('degraded', reason, nextAction), ...(ownerReceipt === undefined ? [] : [ownerReceipt])] };
+        return { stdout: receiptOutput(null), exitCode: 0, stderr: [diagnostic('degraded', reason, nextAction), ...autoDiagnostics, ...(ownerReceipt === undefined ? [] : [ownerReceipt])] };
     }
 }
 // ─── Process-boundary belt (PRI-943 pattern, WorkBuddy exit-code semantics) ──

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/workbuddy-adapter",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "WorkBuddy host adapter for Principles Disciple — implements the HostAdapter interface for WorkBuddy's Git Bash command-hook model (ADR-0020 third host, SPEC workbuddy-host-adapter v0.3.0).",
   "type": "module",
   "main": "./dist/index.js",
@@ -42,8 +42,8 @@
     "lint": "eslint \"src/**/*.ts\""
   },
   "dependencies": {
-    "@principles/core": "^1.293.4",
-    "@principles/host-runtime": "^0.10.2",
+    "@principles/core": "^1.295.0",
+    "@principles/host-runtime": "^0.11.0",
     "@principles/install-layout": "^0.4.0"
   },
   "devDependencies": {