create-principles-disciple 1.104.0 → 1.104.2

package/core/dist/runtime-v2/runner/base-peer-runner.d.ts

@@ -19,13 +19,16 @@
  * @see Linear PRI-302
  */
 import type { RuntimeStateManager } from '../store/runtime-state-manager.js';
-import type { PDRuntimeAdapter, RunHandle } from '../runtime-protocol.js';
+import type { PDRuntimeAdapter, RunHandle, RunStatus, RuntimeKind } from '../runtime-protocol.js';
 import type { StoreEventEmitter } from '../store/event-emitter.js';
 import type { PIArtifactStore } from '../internalization/pi-artifact.js';
 import type { TaskRecord } from '../task-status.js';
 import { type PDErrorCategory } from '../error-categories.js';
 import { RunnerPhase } from './runner-phase.js';
 import type { PeerRunnerOptions, ResolvedPeerRunnerOptions, PeerRunnerDeps, PeerRunnerConfig, PeerRunnerResult, PeerRunnerValidationResult, FailureContext } from './peer-runner-types.js';
+import type { SummaryRunnerKind } from '../internalization/artifact-summary.js';
+import { type LoadedPredecessorArtifact } from '../internalization/attach-summary-envelope.js';
+import type { ContextManifest } from '../internalization/context-manifest.js';
 /**
  * Abstract base class for peer runners.
  *
@@ -41,11 +44,18 @@ export declare abstract class BasePeerRunner<TContext extends {
     protected readonly artifactStore: PIArtifactStore;
     protected readonly resolvedOptions: ResolvedPeerRunnerOptions;
     protected readonly config: PeerRunnerConfig;
+    /**
+     * Optional store for agent-authored draft context (Task 12).
+     * When undefined, permanent failures do not write a draft — backward compatible.
+     */
+    private readonly pendingAgentDraftStore?;
+    /** Layer 0 summary envelope hash function, injected by the plugin/CLI layer (design §6.1). */
+    private readonly contentHashFn?;
     private phase;
     constructor(deps: PeerRunnerDeps, options: PeerRunnerOptions, config: PeerRunnerConfig);
     /** Current internal phase. For testing/observability only. */
     get currentPhase(): RunnerPhase;
-    private getRuntimeKind;
+    protected getRuntimeKind(): RuntimeKind;
     /** Permanent error categories — runner's inherent property. */
     abstract get permanentErrorCategories(): ReadonlySet<PDErrorCategory>;
     /** Build runner-specific context from task and predecessor outputs. */
@@ -89,14 +99,14 @@ export declare abstract class BasePeerRunner<TContext extends {
      * Event type: `{runnerName}_{eventType}`
      */
     protected emitEvent(eventType: string, taskId: string, payload: Record<string, unknown>): void;
-    private pollUntilTerminal;
+    protected pollUntilTerminal(runHandle: RunHandle): Promise<RunStatus>;
     /**
      * Fetch raw output from the runtime adapter.
      *
      * Returns `unknown` — the payload is untrusted LLM/runtime output.
      * Callers MUST validate before treating as TOutput (ERR-001, ERR-005).
      */
-    private fetchAndParseOutput;
+    protected fetchAndParseOutput(runId: string, taskId: string): Promise<unknown>;
     /** Resolve artifact IDs from predecessor tasks for lineage tracking. */
     protected resolveLineageArtifactIds(taskId: string): Promise<{
         ids: string[];
@@ -125,5 +135,108 @@ export declare abstract class BasePeerRunner<TContext extends {
     private classifyError;
     private mapRunStatusToErrorCategory;
     protected sleep(ms: number): Promise<void>;
+    /**
+     * ADR-0019: Check if diagnostician LLM rate-limit degradation is enabled.
+     * Reads the `diagnostician_llm_degradation` feature flag from effectiveConfig.
+     * Returns false when effectiveConfig is not provided (legacy behavior).
+     */
+    protected isDegradationEnabled(): boolean;
+    /**
+     * Whether the Layer 0 `artifact_summary_redundancy` flag is on.
+     * Returns false when effectiveConfig is not provided (legacy behavior:
+     * no summary written, contentJson shape unchanged).
+     */
+    protected isArtifactSummaryEnabled(): boolean;
+    /**
+     * Build the artifact `contentJson` string, optionally carrying the Layer 0
+     * summary envelope (design §6.1). Single wiring point shared by all 8
+     * writer paths (task 3.11), so no runner duplicates the flag check,
+     * the envelope construction, or the degradation telemetry.
+     *
+     * Contract (Requirements 1.1 / 1.8 / 1.10, F11):
+     *   - flag off → returns `JSON.stringify(output)` verbatim; contentJson is
+     *     byte-identical to the pre-Layer-0 shape (CP-32)
+     *   - flag on, derivation succeeds → `summary` (and `predecessorSummary`
+     *     when an edge predecessor was loaded) merged as sibling keys
+     *   - any derivation/predecessor degradation → an `artifact_summary_*`
+     *     telemetry event with an explicit reason (rc-9), and the task still
+     *     succeeds with its original result (summary is never load-bearing)
+     *   - never throws: a summary failure must not turn into `output_invalid`
+     *
+     * `loadedPredecessor` MUST be an object the runner's own `buildContext`
+     * already loaded — this method performs zero artifact-store reads (F3).
+     */
+    protected buildArtifactContentJson(taskId: string, runnerKind: SummaryRunnerKind, output: unknown, loadedPredecessor: LoadedPredecessorArtifact | null): string;
+    /**
+     * Whether the Layer 1 `context_manifest_budget` flag is on. Returns false
+     * when effectiveConfig is absent (legacy: existing buildContext assembly).
+     */
+    protected isContextManifestBudgetEnabled(): boolean;
+    /**
+     * Whether the Layer 2 `progressive_evaluator` flag is on (design §6.5, PR 4).
+     * When on, the evaluator runner runs two-stage evaluation; off = single stage.
+     */
+    protected isProgressiveEvaluatorEnabled(): boolean;
+    /**
+     * Run a single LLM evaluation: startRun → pollUntilTerminal → fetchAndParseOutput.
+     * Returns the untrusted payload (unknown). Used by the two-stage progressive
+     * evaluator to run Stage 1 and Stage 2 independently (design §6.5, PR 4 task 9.11).
+     *
+     * This method is protected (not private) so the EvaluatorRunner can call it
+     * twice (once per stage) from its overridden invokeRuntime.
+     */
+    protected runSingleEvaluation(taskId: string, promptMessage: string): Promise<unknown>;
+    /**
+     * Resolve the cross-level context injection for a runner via the Layer 1
+     * manifest + budget path (design §6.2/§6.3/§6.2.2).
+     *
+     * Single wiring point shared by the 4 peer runners (task 5.9). Returns:
+     *   - `{ mode: 'focused', fields }` — use the manifest-allocated fields as
+     *     the focused context (a `Record<string,string>` of path → preview text)
+     *   - `{ mode: 'fallback' }` — resolution was too sparse; the caller MUST
+     *     fall back to the legacy full-predecessor injection (F13). The fallback
+     *     emits exactly one `manifest_resolution_insufficient` event (rc-9).
+     *   - `{ mode: 'disabled' }` — flag off; caller uses the existing assembly.
+     *
+     * `predecessorContentJson` is the loaded predecessor artifact's contentJson
+     * (the same object buildContext already holds — zero extra store reads, F3).
+     * It carries the Layer 0 `summary` / `predecessorSummary` envelope; the
+     * summary-field-reader extracts the manifest-declared paths from it.
+     *
+     * budgetTokens scope (design §6.2.1): covers ONLY manifest-declared fields.
+     *
+     * `taskId` is used for telemetry event attribution (runnerKind comes from
+     * the manifest itself via event.runnerKind).
+     */
+    protected resolveContextInjection(taskId: string, manifest: ContextManifest, predecessorContentJson: unknown): {
+        mode: 'focused';
+        fields: Readonly<Record<string, string>>;
+    } | {
+        mode: 'fallback';
+    } | {
+        mode: 'disabled';
+    };
+    /**
+     * Task 12: Construct an AgentDraftPayload from the permanent-failure
+     * context and write it to pending_agent_drafts via the injected
+     * PendingAgentDraftStore. Best-effort: never throws. All failures are
+     * observed via telemetry (rc-9: no silent fallback) so the maintainer
+     * can diagnose draft-write issues without the markFailed terminal-state
+     * contract being broken.
+     *
+     * No-op when pendingAgentDraftStore is not injected (backward compatible).
+     *
+     * ERR checklist:
+     * - EP-01 / ERR-001, ERR-005, ERR-013: diagnosticJson parsed as unknown,
+     *   narrowed with typeof + Object.hasOwn. No `as` casts on parsed data.
+     * - EP-03 / ERR-002: insertPendingDraft returns { ok: false, error };
+     *   we emit a telemetry event with reason + nextAction (rc-9).
+     * - EP-03 / ERR-074, ERR-089: every branch (store missing, insert
+     *   returns !ok, insert throws) applies the SAME best-effort contract —
+     *   never propagate, always observe.
+     * - EP-08 / ERR-003, ERR-024: redactAbsolutePaths / redactTokenLikeValues
+     *   / redactEnvLikeValues are applied to observedFailure BEFORE persist.
+     */
+    private injectAgentDraftOnPermanentFailure;
 }
 //# sourceMappingURL=base-peer-runner.d.ts.map

package/core/dist/runtime-v2/runner/base-peer-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-peer-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/runner/base-peer-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EAGV,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,0BAA0B,EAC1B,cAAc,EACf,MAAM,wBAAwB,CAAC;AA8BhC;;;;;GAKG;AACH,8BAAsB,cAAc,CAAC,QAAQ,SAAS;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO;IAEpF,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IAC9D,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAC5C,OAAO,CAAC,KAAK,CAAiC;gBAG5C,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,gBAAgB;IAY1B,8DAA8D;IAC9D,IAAI,YAAY,IAAI,WAAW,CAE9B;IAED,OAAO,CAAC,cAAc;IAQtB,+DAA+D;IAC/D,QAAQ,KAAK,wBAAwB,IAAI,WAAW,CAAC,eAAe,CAAC,CAAC;IAEtE,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAExD,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IAE7E,0FAA0F;IAC1F,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAEhH,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAIrC,8EAA8E;IAE9E,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAI3F;;;OAGG;IAEH,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAI5F;;;;;;;;;;OAUG;IAEH,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IASjG;;;;;;;OAOG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IA4G7D;;;OAGG;IACH,SAAS,CAAC,SAAS,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI;YAaO,iBAAiB;IAqC/B;;;;;OAKG;YACW,mBAAmB;IAuCjC,wEAAwE;cACxD,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;YA4B7F,iBAAiB;IAqC/B,iFAAiF;IACjF,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM;YAYnD,uBAAuB;YAyCvB,oBAAoB;YAepB,oBAAoB;cAsBlB,qBAAqB,CAAC,GAAG,EAAE;QACzC,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,eAAe,CAAC;KACjC,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAkBtC;;;;;;OAMG;cACa,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IA0GpF,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,2BAA2B;IAUnC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C"}
+{"version":3,"file":"base-peer-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/runner/base-peer-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,KAAK,EACV,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,0BAA0B,EAC1B,cAAc,EACf,MAAM,wBAAwB,CAAC;AAUhC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AA4E9E;;;;;GAKG;AACH,8BAAsB,cAAc,CAAC,QAAQ,SAAS;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO;IAEpF,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IACrD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC;IACpD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IAC9D,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAC5C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAyB;IACjE,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAA4B;IAC3D,OAAO,CAAC,KAAK,CAAiC;IAE9C,YACE,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,gBAAgB,EAUzB;IAID,8DAA8D;IAC9D,IAAI,YAAY,IAAI,WAAW,CAE9B;IAED,SAAS,CAAC,cAAc,IAAI,WAAW,CAItC;IAID,+DAA+D;IAC/D,QAAQ,KAAK,wBAAwB,IAAI,WAAW,CAAC,eAAe,CAAC,CAAC;IAEtE,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzD,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9E,0FAA0F;IAC1F,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAEjH,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,QAAQ,GAChB,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAItC,8EAA8E;IAE9E,SAAS,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAE1F;IAED;;;OAGG;IAEH,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAE3F;IAED;;;;;;;;;;OAUG;IAEH,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAKhG;IAID;;;;;;;OAOG;IACG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAwG5D;IAID;;;OAGG;IACH,SAAS,CAAC,SAAS,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CASN;IAID,UAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAiC1E;IAID;;;;;OAKG;IACH,UAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAmCnF;IAID,wEAAwE;IACxE,UAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC,CAwB1G;YAIa,iBAAiB;IAqC/B,iFAAiF;IACjF,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAQhE;YAIa,uBAAuB;YAyCvB,oBAAoB;YAepB,oBAAoB;IAsBlC,UAAgB,qBAAqB,CAAC,GAAG,EAAE;QACzC,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,aAAa,CAAC,EAAE,eAAe,CAAC;KACjC,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAcrC;IAID;;;;;;OAMG;IACH,UAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAgJnF;IAKD,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,2BAA2B;IAUnC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzC;IAED;;;;OAIG;IACH,SAAS,CAAC,oBAAoB,IAAI,OAAO,CAKxC;IAID;;;;OAIG;IACH,SAAS,CAAC,wBAAwB,IAAI,OAAO,CAK5C;IAED;;;;;;;;;;;;;;;;;;OAkBG;IAEH,SAAS,CAAC,wBAAwB,CAChC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,iBAAiB,EAC7B,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,yBAAyB,GAAG,IAAI,GAClD,MAAM,CA+ER;IAID;;;OAGG;IACH,SAAS,CAAC,8BAA8B,IAAI,OAAO,CAKlD;IAED;;;OAGG;IACH,SAAS,CAAC,6BAA6B,IAAI,OAAO,CAKjD;IAED;;;;;;;OAOG;IACH,UAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB3F;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CAAC,uBAAuB,CAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,eAAe,EACzB,sBAAsB,EAAE,OAAO,GAC9B;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAgC7G;IAID;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,kCAAkC;CA6D3C"}

package/core/dist/runtime-v2/runner/base-peer-runner.js

@@ -20,6 +20,12 @@
  */
 import { PDRuntimeError } from '../error-categories.js';
 import { RunnerPhase } from './runner-phase.js';
+import { computeFeatureFlagsFromConfig, isFeatureEnabled } from '../config/pd-config-feature-flags.js';
+import { redactAbsolutePaths, redactTokenLikeValues, redactEnvLikeValues, } from '../feedback/redact-sensitive.js';
+import { attachSummaryEnvelope, } from '../internalization/attach-summary-envelope.js';
+import { declaredFields } from '../internalization/context-manifest.js';
+import { resolveInjection } from '../internalization/resolve-injection.js';
+import { buildAvailableMap } from '../internalization/summary-field-reader.js';
 // ── Defaults ─────────────────────────────────────────────────────────────────
 const DEFAULT_PEER_RUNNER_OPTIONS = {
     pollIntervalMs: 5_000,
@@ -40,6 +46,52 @@ function resolvePeerRunnerOptions(options, defaultAgentId) {
         coreGrounding: options.coreGrounding ?? true,
     };
 }
+/**
+ * Type guard: narrow `unknown` to `Record<string, unknown>` for safe property
+ * access on parsed JSON. Mirrors the isRecord / isPlainObject helpers in
+ * pending-agent-draft-store.ts and sqlite-task-store.ts (rc-1, rc-2: no `as`).
+ */
+function isPlainObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/**
+ * Safely extract `sourcePainId` from a task's `diagnosticJson` column.
+ *
+ * `diagnosticJson` is an optional JSON string that may carry PI metadata
+ * including the originating pain signal ID (for diagnostician tasks). We
+ * parse it defensively (rc-1: treat as unknown): malformed JSON or a
+ * non-string sourcePainId yield null rather than throwing, so a corrupt
+ * payload cannot break the draft-injection path (rc-9: graceful
+ * degradation — painId is optional linkage, not a required field).
+ *
+ * Mirrors the extractPainIdFromDiagnosticJson helper in
+ * sqlite-task-store.ts (Task 8). Inlined here because the original is a
+ * module-private function and core must not introduce a new shared
+ * utility surface for a single-call-site helper (avoid over-engineering).
+ *
+ * ERR-013 / rc-5: Object.hasOwn (not `in`) checks the sourcePainId key.
+ * ERR-001 / rc-2: no `as` casts — uses a type guard (isPlainObject) to
+ * narrow the parsed JSON before property access.
+ */
+function extractPainIdFromDiagnostic(diagnosticJson) {
+    if (typeof diagnosticJson !== 'string' || diagnosticJson.length === 0)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(diagnosticJson);
+    }
+    catch {
+        return null;
+    }
+    if (!isPlainObject(parsed))
+        return null;
+    if (!Object.hasOwn(parsed, 'sourcePainId'))
+        return null;
+    const { sourcePainId } = parsed;
+    if (typeof sourcePainId !== 'string' || sourcePainId.length === 0)
+        return null;
+    return sourcePainId;
+}
 // ── BasePeerRunner ───────────────────────────────────────────────────────────
 /**
  * Abstract base class for peer runners.
@@ -55,12 +107,21 @@ export class BasePeerRunner {
     artifactStore;
     resolvedOptions;
     config;
+    /**
+     * Optional store for agent-authored draft context (Task 12).
+     * When undefined, permanent failures do not write a draft — backward compatible.
+     */
+    pendingAgentDraftStore;
+    /** Layer 0 summary envelope hash function, injected by the plugin/CLI layer (design §6.1). */
+    contentHashFn;
     phase = RunnerPhase.Idle;
     constructor(deps, options, config) {
         this.stateManager = deps.stateManager;
         this.runtimeAdapter = deps.runtimeAdapter;
         this.eventEmitter = deps.eventEmitter;
         this.artifactStore = deps.artifactStore;
+        this.pendingAgentDraftStore = deps.pendingAgentDraftStore;
+        this.contentHashFn = deps.contentHashFn;
         this.config = config;
         this.resolvedOptions = resolvePeerRunnerOptions(options, config.defaultAgentId);
     }
@@ -471,6 +532,12 @@ export class BasePeerRunner {
                 failureReason: ctx.failureReason,
             });
             this.phase = RunnerPhase.Failed;
+            // Task 12: inject agent-authored draft into pending_agent_drafts so the
+            // feedback-report pipeline (Task 13) can later merge the agent's
+            // perspective into the maintainer-facing report. Best-effort: failures
+            // are observed via telemetry (rc-9) but never propagate, so a draft
+            // write error cannot break the markFailed terminal-state contract.
+            this.injectAgentDraftOnPermanentFailure(ctx);
             return {
                 status: 'failed',
                 taskId: ctx.taskId,
@@ -479,6 +546,43 @@ export class BasePeerRunner {
                 attemptCount: ctx.task.attemptCount,
             };
         }
+        // ADR-0019: Rate-limit graceful degradation. When the diagnostician_llm_degradation
+        // feature flag is enabled AND the error is rate_limit, mark the task as failed with
+        // `rate_limit` errorCategory (not max_attempts_exceeded) + emit observable telemetry.
+        // rc-9 (no silent fallback): telemetry event carries nextAction.
+        if (ctx.errorCategory === 'rate_limit' && this.isDegradationEnabled()) {
+            try {
+                await this.stateManager.markTaskFailed(ctx.taskId, 'rate_limit', `LLM rate limit degraded: ${ctx.failureReason}`);
+            }
+            catch (stateErr) {
+                this.emitEvent('mark_failed_error', ctx.taskId, {
+                    errorCategory: 'storage_unavailable',
+                    attemptCount: ctx.task.attemptCount,
+                    errorMessage: stateErr instanceof Error ? stateErr.message : String(stateErr),
+                });
+                return {
+                    status: 'failed',
+                    taskId: ctx.taskId,
+                    errorCategory: 'storage_unavailable',
+                    failureReason: `State manager error: ${ctx.failureReason}`,
+                    attemptCount: ctx.task.attemptCount,
+                };
+            }
+            this.emitEvent('diag_llm_rate_limit_degraded', ctx.taskId, {
+                errorCategory: 'rate_limit',
+                attemptCount: ctx.task.attemptCount,
+                failureReason: ctx.failureReason,
+                nextAction: 'Retry diagnosis manually with `pd pain retry` when rate limit clears, or enable fallback provider.',
+            });
+            this.phase = RunnerPhase.Failed;
+            return {
+                status: 'failed',
+                taskId: ctx.taskId,
+                errorCategory: 'rate_limit',
+                failureReason: `LLM rate limit degraded: ${ctx.failureReason}`,
+                attemptCount: ctx.task.attemptCount,
+            };
+        }
         // Retry policy check
         const shouldRetry = this.stateManager.getRetryPolicy().shouldRetry(ctx.task);
         if (shouldRetry) {
@@ -568,5 +672,304 @@ export class BasePeerRunner {
     sleep(ms) {
         return new Promise((resolve) => setTimeout(resolve, ms));
     }
+    /**
+     * ADR-0019: Check if diagnostician LLM rate-limit degradation is enabled.
+     * Reads the `diagnostician_llm_degradation` feature flag from effectiveConfig.
+     * Returns false when effectiveConfig is not provided (legacy behavior).
+     */
+    isDegradationEnabled() {
+        const { effectiveConfig } = this.config;
+        if (!effectiveConfig)
+            return false;
+        const flags = computeFeatureFlagsFromConfig(effectiveConfig);
+        return isFeatureEnabled(flags, 'diagnostician_llm_degradation');
+    }
+    // ── Layer 0: summary envelope (design §6.1, PR 1 task 3.11) ────────────────
+    /**
+     * Whether the Layer 0 `artifact_summary_redundancy` flag is on.
+     * Returns false when effectiveConfig is not provided (legacy behavior:
+     * no summary written, contentJson shape unchanged).
+     */
+    isArtifactSummaryEnabled() {
+        const { effectiveConfig } = this.config;
+        if (!effectiveConfig)
+            return false;
+        const flags = computeFeatureFlagsFromConfig(effectiveConfig);
+        return isFeatureEnabled(flags, 'artifact_summary_redundancy');
+    }
+    /**
+     * Build the artifact `contentJson` string, optionally carrying the Layer 0
+     * summary envelope (design §6.1). Single wiring point shared by all 8
+     * writer paths (task 3.11), so no runner duplicates the flag check,
+     * the envelope construction, or the degradation telemetry.
+     *
+     * Contract (Requirements 1.1 / 1.8 / 1.10, F11):
+     *   - flag off → returns `JSON.stringify(output)` verbatim; contentJson is
+     *     byte-identical to the pre-Layer-0 shape (CP-32)
+     *   - flag on, derivation succeeds → `summary` (and `predecessorSummary`
+     *     when an edge predecessor was loaded) merged as sibling keys
+     *   - any derivation/predecessor degradation → an `artifact_summary_*`
+     *     telemetry event with an explicit reason (rc-9), and the task still
+     *     succeeds with its original result (summary is never load-bearing)
+     *   - never throws: a summary failure must not turn into `output_invalid`
+     *
+     * `loadedPredecessor` MUST be an object the runner's own `buildContext`
+     * already loaded — this method performs zero artifact-store reads (F3).
+     */
+    // eslint-disable-next-line @typescript-eslint/max-params -- single shared wiring point (task 3.11); matches the 4 inputs every writer needs (taskId, kind, output, predecessor).
+    buildArtifactContentJson(taskId, runnerKind, output, loadedPredecessor) {
+        if (!this.isArtifactSummaryEnabled()) {
+            return JSON.stringify(output);
+        }
+        try {
+            const hashFn = this.contentHashFn;
+            // Without an injected hash we cannot compute the predecessor
+            // contentHash that staleness detection depends on, so the predecessor
+            // ref is skipped explicitly rather than written without a hash.
+            const effectivePredecessor = hashFn ? loadedPredecessor : null;
+            if (!hashFn && loadedPredecessor !== null) {
+                this.emitEvent('artifact_summary_predecessor_skipped', taskId, {
+                    runnerKind,
+                    reason: 'content_hash_fn_not_injected',
+                    nextAction: 'Inject contentHashFn into PeerRunnerDeps (plugin/CLI layer) to enable predecessorSummary.',
+                });
+            }
+            const envelope = attachSummaryEnvelope(runnerKind, output, effectivePredecessor, hashFn ?? ((input) => input), (event) => {
+                this.emitEvent(event.type, taskId, { runnerKind: event.runnerKind, reason: event.reason });
+            });
+            if (envelope.summary === undefined) {
+                // Self-derivation failed; attachSummaryEnvelope already emitted
+                // artifact_summary_skipped with the reason.
+                return JSON.stringify(output);
+            }
+            // Merge as sibling keys. Spreading `output` first keeps every original
+            // key byte-identical; only `summary` / `predecessorSummary` are added.
+            if (output === null || typeof output !== 'object' || Array.isArray(output)) {
+                // Non-object outputs cannot carry sibling keys. deriveArtifactSummary
+                // would have already failed here, but stay defensive rather than
+                // producing a malformed envelope.
+                return JSON.stringify(output);
+            }
+            const outputRecord = output;
+            // P1 data-integrity guard (CodeRabbit PR #1273): several stage output
+            // schemas already declare a top-level `summary` field (diag_rootcause's
+            // symptom summary, diag_router's DiagnosticianOutputV1.summary). The
+            // Layer 0 envelope would OVERWRITE that legitimate field if added
+            // unconditionally (design §7 promises "不删不改任何既有字段"). When the
+            // collision is detected, skip writing the envelope `summary` key, emit a
+            // structured degradation (rc-9), and still attach `predecessorSummary`
+            // (which does not collide). The self-summary remains derivable on the
+            // read side from the unchanged output via deriveArtifactSummary.
+            const hasSummaryCollision = Object.hasOwn(outputRecord, 'summary');
+            if (hasSummaryCollision) {
+                this.emitEvent('artifact_summary_skipped', taskId, {
+                    runnerKind,
+                    reason: 'output_summary_key_collision',
+                    nextAction: 'Runner output already declares a top-level `summary` field; the Layer 0 envelope summary key is skipped to avoid overwriting it. predecessorSummary is still attached.',
+                });
+            }
+            return JSON.stringify({
+                ...outputRecord,
+                ...(hasSummaryCollision ? {} : { summary: envelope.summary }),
+                ...(envelope.predecessorSummary !== undefined
+                    ? { predecessorSummary: envelope.predecessorSummary }
+                    : {}),
+            });
+        }
+        catch (summaryErr) {
+            // F11: a summary failure must never change task success/failure.
+            this.emitEvent('artifact_summary_skipped', taskId, {
+                runnerKind,
+                reason: 'unexpected_error',
+                errorMessage: summaryErr instanceof Error ? summaryErr.message : String(summaryErr),
+            });
+            return JSON.stringify(output);
+        }
+    }
+    // ── Layer 1: manifest + budget injection (design §6.2/§6.3, PR 2 task 5.9) ──
+    /**
+     * Whether the Layer 1 `context_manifest_budget` flag is on. Returns false
+     * when effectiveConfig is absent (legacy: existing buildContext assembly).
+     */
+    isContextManifestBudgetEnabled() {
+        const { effectiveConfig } = this.config;
+        if (!effectiveConfig)
+            return false;
+        const flags = computeFeatureFlagsFromConfig(effectiveConfig);
+        return isFeatureEnabled(flags, 'context_manifest_budget');
+    }
+    /**
+     * Whether the Layer 2 `progressive_evaluator` flag is on (design §6.5, PR 4).
+     * When on, the evaluator runner runs two-stage evaluation; off = single stage.
+     */
+    isProgressiveEvaluatorEnabled() {
+        const { effectiveConfig } = this.config;
+        if (!effectiveConfig)
+            return false;
+        const flags = computeFeatureFlagsFromConfig(effectiveConfig);
+        return isFeatureEnabled(flags, 'progressive_evaluator');
+    }
+    /**
+     * Run a single LLM evaluation: startRun → pollUntilTerminal → fetchAndParseOutput.
+     * Returns the untrusted payload (unknown). Used by the two-stage progressive
+     * evaluator to run Stage 1 and Stage 2 independently (design §6.5, PR 4 task 9.11).
+     *
+     * This method is protected (not private) so the EvaluatorRunner can call it
+     * twice (once per stage) from its overridden invokeRuntime.
+     */
+    async runSingleEvaluation(taskId, promptMessage) {
+        const runtimeKind = this.getRuntimeKind();
+        const runHandle = await this.runtimeAdapter.startRun({
+            agentSpec: { agentId: this.resolvedOptions.agentId, schemaVersion: 'v1' },
+            taskRef: { taskId },
+            inputPayload: promptMessage,
+            contextItems: [],
+            outputSchemaRef: this.config.resultRefPrefix.includes('evaluator')
+                ? 'evaluator-output-v1'
+                : `${this.config.expectedTaskKind}-output-v1`,
+            timeoutMs: this.resolvedOptions.timeoutMs,
+        });
+        this.emitEvent('run_started', taskId, { runtimeKind, stage: 'progressive_evaluation' });
+        const finalStatus = await this.pollUntilTerminal(runHandle);
+        if (finalStatus.status !== 'succeeded') {
+            throw new PDRuntimeError(finalStatus.status === 'timed_out' ? 'timeout' : 'execution_failed', `Progressive evaluation run ${runHandle.runId} ended with status ${finalStatus.status}`);
+        }
+        return this.fetchAndParseOutput(runHandle.runId, taskId);
+    }
+    /**
+     * Resolve the cross-level context injection for a runner via the Layer 1
+     * manifest + budget path (design §6.2/§6.3/§6.2.2).
+     *
+     * Single wiring point shared by the 4 peer runners (task 5.9). Returns:
+     *   - `{ mode: 'focused', fields }` — use the manifest-allocated fields as
+     *     the focused context (a `Record<string,string>` of path → preview text)
+     *   - `{ mode: 'fallback' }` — resolution was too sparse; the caller MUST
+     *     fall back to the legacy full-predecessor injection (F13). The fallback
+     *     emits exactly one `manifest_resolution_insufficient` event (rc-9).
+     *   - `{ mode: 'disabled' }` — flag off; caller uses the existing assembly.
+     *
+     * `predecessorContentJson` is the loaded predecessor artifact's contentJson
+     * (the same object buildContext already holds — zero extra store reads, F3).
+     * It carries the Layer 0 `summary` / `predecessorSummary` envelope; the
+     * summary-field-reader extracts the manifest-declared paths from it.
+     *
+     * budgetTokens scope (design §6.2.1): covers ONLY manifest-declared fields.
+     *
+     * `taskId` is used for telemetry event attribution (runnerKind comes from
+     * the manifest itself via event.runnerKind).
+     */
+    resolveContextInjection(taskId, manifest, predecessorContentJson) {
+        if (!this.isContextManifestBudgetEnabled()) {
+            return { mode: 'disabled' };
+        }
+        const paths = declaredFields(manifest);
+        const available = buildAvailableMap(paths, predecessorContentJson);
+        const emit = (event) => {
+            if (event.type === 'manifest_resolution_insufficient') {
+                this.emitEvent('manifest_resolution_insufficient', taskId, {
+                    runnerKind: event.runnerKind,
+                    manifestId: event.manifestId,
+                    absentCount: event.absentCount,
+                    declaredCount: event.declaredCount,
+                    absentRatio: event.absentRatio,
+                    fallback: event.fallback,
+                });
+            }
+            else {
+                // context_truncated — surface as telemetry so Layer 3 can show it.
+                this.emitEvent('context_truncated', taskId, {
+                    runnerKind: event.runnerKind,
+                    manifestId: event.manifestId,
+                    fieldPath: event.fieldPath,
+                    reason: event.reason,
+                    remainingBudgetTokens: event.remainingBudgetTokens,
+                });
+            }
+        };
+        const result = resolveInjection(manifest, available, emit);
+        if (result.kind === 'focused') {
+            return { mode: 'focused', fields: result.allocated.fields };
+        }
+        return { mode: 'fallback' };
+    }
+    // ── Agent draft injection (Task 12) ────────────────────────────────────────
+    /**
+     * Task 12: Construct an AgentDraftPayload from the permanent-failure
+     * context and write it to pending_agent_drafts via the injected
+     * PendingAgentDraftStore. Best-effort: never throws. All failures are
+     * observed via telemetry (rc-9: no silent fallback) so the maintainer
+     * can diagnose draft-write issues without the markFailed terminal-state
+     * contract being broken.
+     *
+     * No-op when pendingAgentDraftStore is not injected (backward compatible).
+     *
+     * ERR checklist:
+     * - EP-01 / ERR-001, ERR-005, ERR-013: diagnosticJson parsed as unknown,
+     *   narrowed with typeof + Object.hasOwn. No `as` casts on parsed data.
+     * - EP-03 / ERR-002: insertPendingDraft returns { ok: false, error };
+     *   we emit a telemetry event with reason + nextAction (rc-9).
+     * - EP-03 / ERR-074, ERR-089: every branch (store missing, insert
+     *   returns !ok, insert throws) applies the SAME best-effort contract —
+     *   never propagate, always observe.
+     * - EP-08 / ERR-003, ERR-024: redactAbsolutePaths / redactTokenLikeValues
+     *   / redactEnvLikeValues are applied to observedFailure BEFORE persist.
+     */
+    injectAgentDraftOnPermanentFailure(ctx) {
+        if (!this.pendingAgentDraftStore)
+            return;
+        const { taskKind } = ctx.task;
+        const { errorCategory } = ctx;
+        const observedFailureRaw = ctx.failureReason;
+        // Apply all three redactors in sequence (mirrors redactTelemetryString
+        // composition). Order: paths → tokens → env. Each is a no-op on
+        // non-matching input, so the composition is safe regardless of content.
+        const observedFailure = redactEnvLikeValues(redactAbsolutePaths(redactTokenLikeValues(observedFailureRaw)));
+        const agentDraft = {
+            summary: `${taskKind} failed with category=${errorCategory} at ${new Date().toISOString()}`,
+            observedFailure,
+            // commandSummary omitted: RunRecord has no toolCalls field (verified
+            // against run-store.ts). Adding it later requires extending RunRecord
+            // + adapter contract — out of scope for Task 12.
+        };
+        // rc-7 / ERR-015: read painId fresh from the current task record's
+        // diagnosticJson. ctx.task is the leased task snapshot; diagnosticJson
+        // is the canonical source for sourcePainId linkage.
+        const painId = extractPainIdFromDiagnostic(ctx.task.diagnosticJson);
+        try {
+            const result = this.pendingAgentDraftStore.insertPendingDraft({
+                taskId: ctx.taskId,
+                painId: painId ?? undefined,
+                agentDraft,
+            });
+            if (!result.ok) {
+                // rc-9: surface the failure with a reason + nextAction — never silent.
+                this.emitEvent('agent_draft_insert_failed', ctx.taskId, {
+                    errorCategory,
+                    attemptCount: ctx.task.attemptCount,
+                    errorMessage: result.error,
+                    nextAction: 'Inspect pending_agent_drafts table integrity; draft will be retried on next permanent failure of the same taskId (idempotent UPDATE).',
+                });
+                return;
+            }
+            this.emitEvent('agent_draft_inserted', ctx.taskId, {
+                errorCategory,
+                attemptCount: ctx.task.attemptCount,
+                draftId: result.id,
+                painIdLinked: painId !== null,
+            });
+        }
+        catch (err) {
+            // Defensive: insertPendingDraft is documented to never throw (it
+            // catches internally and returns { ok: false }), but a misbehaving
+            // store implementation or a synchronous throw before the inner try
+            // must not break the markFailed contract.
+            this.emitEvent('agent_draft_insert_failed', ctx.taskId, {
+                errorCategory,
+                attemptCount: ctx.task.attemptCount,
+                errorMessage: err instanceof Error ? err.message : String(err),
+                nextAction: 'PendingAgentDraftStore.insertPendingDraft threw unexpectedly; inspect the store implementation.',
+            });
+        }
+    }
 }
 //# sourceMappingURL=base-peer-runner.js.map