@stage5/lumine 0.3.36 → 0.3.37

package/lib/admin.js

@@ -3509,7 +3509,7 @@ export function parseAdminOperation(options) {
     // long as two GPT-6.1 Sol calls, so it gets its own timeout. The daily
     // website management run calls it in a bounded loop (Mikey, 2026-09-28).
     const usage =
-      "Usage: lumine admin reward-bank coverage <buildId> [--max-step 3] | seed <buildId> [--max-step 3] [--identity zero|ciel|auto] | report <buildId> [--days 1].";
+      "Usage: lumine admin reward-bank coverage <buildId> [--max-step 3] | seed <buildId> [--max-step 3] [--identity zero|ciel|auto] | report <buildId> [--days 1] | question <buildId> --question-id <id> | repair <buildId> --file <repair.json> [--dry-run].";
     const buildId = parseRequiredInteger(
       target || options.adminBuild,
       "Build ID",
@@ -3519,6 +3519,59 @@ export function parseAdminOperation(options) {
       ? parseRequiredInteger(options.adminMaxStep, "--max-step", 1)
       : 3;
     if (maxStep > 10) throw cliValidationError("--max-step must be at most 10.");
+    if (action === "question") {
+      const questionId = parseRequiredInteger(
+        options.adminQuestionId,
+        "--question-id",
+        1,
+      );
+      return readOperation(
+        "reward-bank.question",
+        withQuery("/cli/admin/reward-bank/question", {
+          buildId: String(buildId),
+          questionId: String(questionId),
+        }),
+        { requiresRun: false },
+      );
+    }
+    if (action === "repair") {
+      const repair = readAdminJsonFile(
+        options.adminFile,
+        "--file <repair.json>",
+        { maxBytes: 16 * 1024 },
+      );
+      const fields = ["questionId", "expectedFingerprint", "answer", "reason"];
+      if (
+        !repair ||
+        typeof repair !== "object" ||
+        Array.isArray(repair) ||
+        Object.keys(repair).some((key) => !fields.includes(key)) ||
+        !Number.isSafeInteger(repair.questionId) ||
+        repair.questionId <= 0 ||
+        typeof repair.answer !== "number" ||
+        !Number.isFinite(repair.answer) ||
+        typeof repair.expectedFingerprint !== "string" ||
+        !/^[a-f0-9]{64}$/.test(repair.expectedFingerprint) ||
+        typeof repair.reason !== "string" ||
+        !repair.reason.trim() ||
+        repair.reason.length > 2000
+      ) {
+        throw cliValidationError(
+          "Repair JSON needs questionId, the inspected expectedFingerprint, a finite numeric answer and a reason (1–2000 characters); no other fields.",
+        );
+      }
+      return writeOperation(
+        "reward-bank.repair",
+        "POST",
+        "/cli/admin/reward-bank/repair",
+        {
+          buildId,
+          repair,
+          dryRun: Boolean(options.adminDryRun),
+        },
+        { requiresRun: false, mutates: !options.adminDryRun },
+      );
+    }
     if (action === "report") {
       const days = options.adminDays
         ? parseRequiredInteger(options.adminDays, "--days", 1)
@@ -7385,6 +7438,26 @@ function printAdminResult({ operation, result }) {
     }
   }
   if (operation.name.startsWith("reward-bank.")) {
+    if (
+      ["reward-bank.question", "reward-bank.repair"].includes(operation.name)
+    ) {
+      const question = data.question;
+      console.log(
+        `Question #${question.id} · Build ${question.buildId} · ${question.mode} · ${question.status}`,
+      );
+      console.log(question.prompt);
+      console.log(`Stored answer: ${question.answer}`);
+      if (question.hint) console.log(`Hint: ${question.hint}`);
+      if (question.guide) console.log(`Guide: ${question.guide}`);
+      console.log(`Fingerprint: ${data.fingerprint}`);
+      console.log(`History: ${JSON.stringify(data.impact)}`);
+      if (Object.hasOwn(data, "proposedAnswer"))
+        console.log(
+          `Proposed answer: ${data.proposedAnswer} · would change: ${data.wouldChange}`,
+        );
+      console.log(data.historyPolicy);
+      return;
+    }
     if (operation.name === "reward-bank.seed") {
       console.log(
         data.seeded

package/lib/commands.js

@@ -2803,6 +2803,7 @@ export function parseArgs(args) {
     adminEditionId: raw.editionId ? String(raw.editionId) : "",
     adminLeaseToken: raw.leaseToken ? String(raw.leaseToken) : "",
     adminFile: raw.file ? String(raw.file) : "",
+    adminQuestionId: raw.questionId ? String(raw.questionId) : "",
     rewardPreflight: Boolean(raw.preflight),
     rewardApprovalFile: raw.approvalFile ? String(raw.approvalFile) : "",
     // admin craft revise --item <id|name> [--why] [--emoji] [--category]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage5/lumine",
-  "version": "0.3.36",
+  "version": "0.3.37",
   "description": "Command line tools for launching Lumine builds on Twinkle.",
   "type": "module",
   "bin": {

package/sdk/LUMINE_ADMIN.md

@@ -1714,8 +1714,32 @@ them so the first learner on a unit never waits or pays.
 lumine admin reward-bank coverage <buildId> [--max-step 3] [--json]   # read-only, no run
 lumine admin reward-bank seed <buildId> [--max-step 3] [--json]       # delegated full run
 lumine admin reward-bank report <buildId> [--days 1] [--json]         # read-only telemetry
+lumine admin reward-bank question <buildId> --question-id <id> [--json]
+lumine admin reward-bank repair <buildId> --file <repair.json> --dry-run [--json]
+lumine admin reward-bank repair <buildId> --file <repair.json> [--json]
 ```
 
+`question` returns the complete prompt, answer, hint and guide, question
+statistics, a canonical `fingerprint`, and aggregate challenge history. It is
+owner-only and does not need a daily run. A report excerpt is not an exact
+question inspection.
+
+`repair` accepts exactly `{ "questionId": 41, "expectedFingerprint": "<hash
+from inspection>", "answer": 0.5, "reason": "Verified explanation and arithmetic" }`.
+Inspect and verify the mathematics before preparing a repair. `--dry-run`
+checks the same guard without writing. The real command locks and rechecks the
+question, changes only its numeric answer, returns canonical readback and
+records an idempotent transaction audit. A stale fingerprint is rejected;
+inspect again instead of guessing a new hash. Unknown plan fields are rejected.
+No model call or AI Energy charge is involved.
+
+The repaired answer governs subsequent attempts, including already-issued
+unsolved challenges. Past attempts, grades, ladders, question statistics and
+rewards stay unchanged; the receipt states this explicitly. The history counts
+are observations, not a lock over every learner's activity. If the old answer
+affected a learner, inspect that history and prepare a separate, exact remedy;
+this command never guesses compensating rewards or rewrites past grades.
+
 `report` covers the last `--days` (1-31): generation rounds by source
 (learner or seed) with outcomes (`accepted`, `off_brief`: the checker judged
 the question outside the brief's language, level or LaTeX rule;