create-principles-disciple 1.121.7 → 1.121.9

package/console/dist/ui/i18n/zh-CN.json

@@ -136,6 +136,90 @@
                 "degraded": "降级"
             },
             "nextActionLabel": "建议操作：",
+            "experience": {
+                "attention": {
+                    "setupRequired": "需要初始设置",
+                    "ownerDecisionRequired": "等待拥有者决策",
+                    "recoveryRequired": "需要恢复处理",
+                    "degraded": "数据降级",
+                    "backgroundProcessing": "后台处理中",
+                    "allClear": "一切正常"
+                },
+                "reason": {
+                    "ownerIdentityMissing": "尚未配置拥有者身份。RuleCode 治理决策入口被阻塞，需要设置 PD_OWNER_ID 与 PD_OWNER_CREDENTIAL_ID 并启用控制台令牌认证。",
+                    "approvalPending": "有原则审批正在等待你的决策。",
+                    "rulecodeOwnerDecision": "有 RuleCode 影子激活正在等待你的晋升决策。",
+                    "noPendingDecision": "当前没有等待决策的原则审批。",
+                    "ownerDecisionAvailable": "治理决策入口由已配置的拥有者持有。",
+                    "breakGlassEntry": "由于未配置拥有者身份，紧急暂停当前通过本地破窗路径生效。",
+                    "recoveryRequired": "部分治理工作已停滞，需要先恢复才能继续。",
+                    "sourceUnavailable": "必需的治理数据源不可用，进行中的工作无法推进。",
+                    "configInvalid": "工作区配置文件无效，环境分类未知。",
+                    "processing": "治理工作正在后台运行，当前无需决策。",
+                    "workspaceClear": "所有治理工作已就绪，没有需要你关注的事项。",
+                    "workspaceEmpty": "暂无治理记录。管线运行后 PD 会填充此视图。"
+                },
+                "next": {
+                    "configureOwner": "配置 PD_OWNER_ID 与 PD_OWNER_CREDENTIAL_ID，并启用控制台令牌认证。",
+                    "reviewApprovals": "在下方处理待决策事项。",
+                    "inspectRecovery": "打开失败任务页面并恢复停滞的工作。",
+                    "inspectSources": "检查 state.db 与原则账本，然后重启控制台。",
+                    "fixConfig": "修复 .pd/config.yaml 中的无效配置。",
+                    "monitor": "暂无需操作——下一个决策出现时 PD 会在这里提示。",
+                    "none": "当前无需操作。"
+                },
+                "ownerGuide": {
+                    "title": "设置拥有者身份",
+                    "intro": "复制以下命令，在启动 OpenClaw 与 PD 控制台的 shell 中执行（把 <owner-id> 与 <credential-id> 换成你自己的 ID），然后重启两者。",
+                    "tokenAuthHint": "还需要启用控制台令牌认证（--token 或 PD_CONSOLE_TOKEN）——这是拥有者身份成立的必要条件；若尚未启用，请按配置文档完成该步骤。",
+                    "cmdPowerShell": "PowerShell（Windows）",
+                    "cmdBash": "bash（macOS / Linux）",
+                    "copy": "复制",
+                    "copied": "已复制",
+                    "docLink": "查看配置说明与验证方法 →"
+                },
+                "activity": {
+                    "needsDecision": "{{count}} 项决策待处理",
+                    "needsRecovery": "{{count}} 项需要恢复",
+                    "blocked": "数据源不可用，进展被阻塞",
+                    "processing": "后台处理中（{{count}}）"
+                },
+                "readiness": {
+                    "identity": {
+                        "configured": "拥有者身份：已配置",
+                        "missing": "拥有者身份：未配置"
+                    },
+                    "principleApproval": "原则审批：操作员入口",
+                    "rulecode": {
+                        "ready": "RuleCode 决策：拥有者入口",
+                        "blocked": "RuleCode 决策：已阻塞（缺少拥有者身份）"
+                    },
+                    "pause": {
+                        "owner": "紧急暂停：拥有者入口",
+                        "breakGlass": "紧急暂停：破窗入口"
+                    }
+                },
+                "trust": {
+                    "environment": {
+                        "production": "环境：生产",
+                        "development": "环境：开发",
+                        "demo": "环境：演示",
+                        "test": "环境：测试",
+                        "unknown": "环境：未知"
+                    },
+                    "lineage": {
+                        "strong": "溯源置信度：强",
+                        "weak": "溯源置信度：弱",
+                        "unknown": "溯源置信度：未知"
+                    }
+                },
+                "dataQuality": {
+                    "degraded": "数据质量降级——例如 {{reasonCode}}（{{count}} 次）。部分解释可能不完整。"
+                },
+                "error": {
+                    "snapshotUnavailable": "治理体验快照加载失败。"
+                }
+            },
             "inProgressTitle": "治理链路进行中",
             "inProgressDetail": "当内化管线完成并生成可审查的原则候选后，PD 会在这里展示。",
             "degradedTitle": "系统信号",
@@ -452,6 +536,24 @@
                     "empty": "最近没有记录——这条原则尚未在运行中被触发。",
                     "note": "两级语义：Effect（行为生效）= 拦截 / 自动纠正 / 智能体自述遵循；Presence（参与上下文）= 原则进入任务上下文（灰色行）。参与决策 ≠ 已改变行为。智能体自述为概率性自报，与确定性事件分列。",
                     "unavailableReason": "暂无法读取生效履历。",
+                    "coverage": {
+                        "label": "证据覆盖",
+                        "statusAvailable": "可用",
+                        "statusDisabled": "生效履历采集已关闭",
+                        "statusUnavailable": "生效履历数据不可用",
+                        "observedSince": "观察起点 {{date}}",
+                        "observedSinceEmpty": "当前无保留记录",
+                        "asOf": "截至 {{date}}",
+                        "retention": "保留 {{days}} 天",
+                        "limitation": "无法保证历史完整性——数字代表当前保留的证据，不是完整历史。",
+                        "validationPartial": "部分记录无法展示。",
+                        "validationMalformed": "生效履历数据需要修复——数字可能不可靠。",
+                        "reasonCodes": {
+                            "receiptRowsDropped": "部分记录在校验时被跳过",
+                            "ledgerLevelInvalid": "存在层级异常的记录",
+                            "ledgerCountsUnreadable": "计数无法读取"
+                        }
+                    },
                     "kind": {
                         "rule_blocked": "拦截",
                         "auto_correct_applied": "自动纠正",
@@ -508,6 +610,7 @@
                     "process": "当前阶段",
                     "automation": "自动化状态",
                     "nextAction": "下一步安全动作",
+                    "nextActionLabel": "建议操作：",
                     "blockers": "需要关注",
                     "uncertainty": "证据不确定性",
                     "provenance": "规范证据引用",
@@ -637,6 +740,57 @@
             "runtimeCapability": "运行时 {{version}} · 影子证据{{supported}}",
             "supported": "受支持",
             "unsupported": "不受支持",
+            "checks": {
+                "bounded_scope": "明确的工具范围",
+                "runtime_compatibility": "运行时兼容性",
+                "host_liveness_composition": "宿主存活性与探针组合",
+                "emergency_controls": "紧急熔断控制可用性",
+                "runtime_shadow_evidence": "运行时影子观察证据",
+                "owner_identity_configuration": "拥有者身份配置",
+                "activation_eligibility": "生效资格",
+                "lineage_binding": "血缘与工件绑定",
+                "production_compile_load": "生产环境编译与加载",
+                "golden_trace": "基准用例验证",
+                "evidence_binding": "安全证据绑定"
+            },
+            "checkStatus": {
+                "passed": "已通过",
+                "failed": "未通过"
+            },
+            "reasonCodes": {
+                "required_check_missing": "缺少必要的安全检查结果",
+                "duplicate_check_result": "记录了重复的检查结果",
+                "runtime_shadow_evidence_unsupported": "当前宿主运行时不支持收集影子证据",
+                "explicit_affected_tools_required": "必须明确指定受影响的工具列表",
+                "host_liveness_contract_missing_invalid_or_unsupported": "宿主存活性契约缺失、无效或不受支持",
+                "neutral_probe_or_live_composition_failed": "中性探针或实时组合检查失败",
+                "neutral_probe_blocked": "中性对照探针被 RuleCode 拦截",
+                "safety_controls_disabled": "持久化 RuleCode 安全控制已禁用",
+                "out_of_band_controls_unavailable": "带外紧急控制不可用",
+                "configured_owner_missing": "缺少已配置的拥有者凭据或凭据未通过验证",
+                "unresolved_shadow_unhealthy_evidence": "影子观察期间记录了未解决的运行时异常",
+                "shadow_telemetry_source_unavailable": "影子遥测数据源缺失或不可读",
+                "artifact_digest_mismatch": "工件摘要与当前生效版本不匹配",
+                "active_shadow_activation_required": "提升上线前必须存在活跃的影子观察记录",
+                "activation_not_unique": "存在多条活跃的生效记录",
+                "activation_artifact_mismatch": "生效工件与当前评审主体不匹配",
+                "artifact_lineage_missing": "工件血缘（来源任务或父工件）缺失",
+                "artifact_not_found": "在安全存储中未找到指定工件",
+                "hard_check_failed": "强制安全门禁未通过",
+                "promotion_safety_gate_blocked": "安全门禁检查未通过，提升已阻止",
+                "promotion_readiness_unavailable": "无法确认提升就绪状态",
+                "promotion_snapshot_stale": "评审期间生效工件发生变更，快照已过期",
+                "evidence_override_reason_required": "有限证据提升需要选择拥有者特批原因",
+                "evidence_override_note_required": "有限证据提升必须填写拥有者说明",
+                "host_contract_unavailable": "宿主存活性契约不可用",
+                "promotion_commit_failed": "持久化安全存储写入提升记录失败",
+                "feature_not_enabled": "该功能未启用",
+                "safety_controls_unavailable": "安全控制不可用",
+                "owner_authentication_required": "需要拥有者身份认证",
+                "cli_owner_note_required": "CLI 提升必须提供拥有者评审说明",
+                "confirmation_required": "需要明确确认上线执行",
+                "promotion_request_invalid": "提升请求参数无效"
+            },
             "hardSafetyChecks": "上线安全检查",
             "live24Hours": "Live 监控 · 24 小时",
             "live7Days": "Live 监控 · 7 天",
@@ -817,6 +971,34 @@
             "enterAccessToken": "输入访问令牌",
             "tokenSaved": "令牌已保存",
             "tokenSessionOnly": "令牌仅存储在浏览器会话中。",
+            "ownerIdentity": {
+                "title": "拥有者身份",
+                "intro": "拥有者身份决定治理决策入口（RuleCode 晋升、紧急暂停等）。登记到 ~/.pd/owner.json（安装级，跨工作区生效）。若环境变量 PD_OWNER_ID 与 PD_OWNER_CREDENTIAL_ID 成对设置，则作为一对整体优先生效。",
+                "loading": "加载中…",
+                "statusConfigured": "已登记",
+                "statusMissing": "未登记",
+                "statusInvalid": "环境变量配置无效",
+                "sourceEnv": "来源：环境变量（最高优先级）",
+                "sourceFile": "来源：~/.pd/owner.json",
+                "sourceInvalid": "来源：环境变量（配置不完整）",
+                "sourceNone": "尚未登记",
+                "governanceReady": "治理：就绪",
+                "governanceNotReady": "治理：未就绪",
+                "governanceReasonTokenAuth": "需要先启用控制台令牌认证，拥有者治理动作才能执行。",
+                "governanceReasonIdentity": "需要先具备完整的拥有者身份，拥有者治理动作才能执行。",
+                "governanceNextActionTokenAuth": "下一步：以 --token <值> 启动 pd-console，或设置 PD_CONSOLE_TOKEN，然后重试。",
+                "invalidEnvHint": "PD_OWNER_ID 与 PD_OWNER_CREDENTIAL_ID 必须成对设置且均非空。在补齐这对变量或将其全部移除之前，任何拥有者权限都不会生效——文件登记同样不生效。",
+                "ownerIdLabel": "拥有者 ID",
+                "credentialIdLabel": "凭据 ID",
+                "register": "登记",
+                "unregister": "注销",
+                "registeredAt": "登记于",
+                "envHint": "当前身份来自环境变量。要改用文件登记，请先移除环境变量并重启控制台。",
+                "required": "拥有者 ID 与凭据 ID 都不能为空。",
+                "operationFailed": "操作失败，请重试。",
+                "registered": "已登记拥有者身份。",
+                "unregistered": "已注销拥有者身份。"
+            },
             "workspace": "工作空间",
             "addWorkspace": "添加工作空间",
             "syncWorkspace": "同步",
@@ -1060,6 +1242,16 @@
             "noHistory": "暂无更新历史。",
             "version": "版本",
             "failed": "失败",
+            "historyKind": {
+                "update": "更新",
+                "reinstall": "重新安装",
+                "legacy_migration": "历史迁移",
+                "rollback": "回滚",
+                "refusal": "已拒绝",
+                "failure": "失败",
+                "recovery": "恢复",
+                "unknown": "未知操作"
+            },
             "checkError": "检查出错",
             "syncPending": "最新版 {{pluginVersion}} 已发布，安装器同步中（当前可更新至上方列出的版本）。请稍后再试。",
             "loadError": "无法加载更新数据。你可以尝试刷新页面。",
@@ -1377,6 +1569,10 @@
             "recoverConfirmActionDesc": "重置任务并允许运行时重新执行",
             "recoverConfirmImpactLabel": "影响",
             "recoverConfirmImpactDesc": "既有产物将被保留，并将创建一次新的执行尝试。",
+            "recoverConfirmAttempts": "已用重试次数",
+            "recoverExhaustedWarning": "此任务已用完全部重试次数（{{attempt}}/{{max}}），普通恢复将被拒绝。",
+            "recoverConfirmForceButton": "强制恢复",
+            "recoverConfirmForceImpactDesc": "强制重置任务：清空错误与租约记录，重试上限提升 3 次并创建一次新的执行尝试。既有产物将被保留。",
             "recoverConfirmButton": "恢复",
             "recoverSuccess": "恢复已接受——任务已重新进入待处理状态",
             "recoverFailed": "恢复失败",

package/console/dist/ui/pages/activation/ActivationPage.js

@@ -9,6 +9,7 @@ import { SectionTitle } from "../../components/layout/section-title.js";
 import { ShinyText } from "../../components/ui/shiny-text.js";
 import { Button } from "../../components/ui/button.js";
 import { fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchReceiptCounts, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, } from "../../api.js";
+import { ReceiptCoverageDisclosure, getReceiptSourceStatusLabelKey } from "../../components/receipts/ReceiptCoverageDisclosure.js";
 import { validateActivationsData, validateLifecycleMetricsData, isReversibleChannel, } from "./ActivationValidators.js";
 import { enumLabel } from "../../utils/enum-labels.js";
 import { formatDate } from "../../utils/format-date.js";
@@ -86,7 +87,7 @@ function RuleCodeOwnerPanel({ record, onChanged }) {
     const value = (number) => number === null ? t('pages.activation.notCollected') : String(number);
     const affectedTools = Array.isArray(review.artifact.content?.affectedTools) ? review.artifact.content.affectedTools.filter((item) => typeof item === 'string') : [];
     const renderWindow = (title, window) => _jsxs("div", { className: "rounded border border-line p-2", children: [_jsx("div", { className: "font-medium text-ink", children: title }), _jsxs("div", { className: "mt-1 grid grid-cols-2 gap-1 md:grid-cols-5", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(window.eligible)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(window.matched)] }), _jsxs("span", { children: [t('pages.activation.blocked'), ": ", value(window.blocked)] }), _jsxs("span", { children: [t('pages.activation.unhealthy'), ": ", value(window.unhealthy)] }), _jsxs("span", { children: [t('pages.activation.circuitTrips'), ": ", window.circuitTrips] })] }), _jsxs("div", { className: "mt-1 text-ink-4", children: [t('pages.activation.toolDistribution'), ": ", window.toolDistribution === null ? t('pages.activation.notCollected') : Object.entries(window.toolDistribution).map(([tool, count]) => `${tool} ${count}`).join(', ') || '—'] })] });
-    return _jsxs("div", { className: "mt-4 rounded-[5px] border border-gov/25 bg-surface/70 p-4", "data-testid": `owner-review-${record.activationId}`, children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("strong", { className: "text-[13px] text-ink", children: t('pages.activation.ownerDecisionTitle') }), _jsx("span", { className: "font-mono text-[11px] text-gov", children: review.readiness.status }), review.controlState?.enforcement === 'safety_isolated' && _jsx("span", { className: "text-danger text-[11px]", children: t('pages.activation.safetyIsolation') })] }), _jsxs("div", { className: "mt-2 grid grid-cols-2 gap-2 text-[12px] text-ink-3 md:grid-cols-4", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(summary.observed)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(summary.matched)] }), _jsxs("span", { children: [t('pages.activation.wouldBlock'), ": ", value(summary.wouldBlock)] }), _jsxs("span", { children: [t('pages.activation.wouldAllow'), ": ", value(summary.wouldAllow)] }), _jsxs("span", { children: [t('pages.activation.requireApproval'), ": ", value(summary.requireApproval)] }), _jsxs("span", { children: [t('pages.activation.autoCorrect'), ": ", value(summary.autoCorrect)] }), _jsxs("span", { children: [t('pages.activation.neutralControl'), ": ", value(summary.neutralControl)] }), _jsxs("span", { children: [t('pages.activation.evaluationErrors'), ": ", value(summary.errors)] })] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.shadowWindow', { first: summary.firstObservedAt ?? t('pages.activation.notCollected'), last: summary.lastObservedAt ?? t('pages.activation.notCollected') }) }), _jsx("div", { className: "mt-2 text-[12px] text-ink-3", children: t('pages.activation.runtimeCapability', { version: review.runtimeCapability.hostRuntimeVersion, supported: t(review.runtimeCapability.shadowEvidence ? 'pages.activation.supported' : 'pages.activation.unsupported') }) }), _jsx("div", { className: "mt-2 text-[12px] text-amber", children: t('pages.activation.worstImpact', { tools: affectedTools.join(', ') || t('pages.activation.notCollected') }) }), _jsxs("div", { className: "mt-3 text-[12px] text-ink-3", children: [_jsx("div", { className: "mb-1 font-medium text-ink", children: t('pages.activation.hardSafetyChecks') }), review.readiness.evidenceSnapshot.safetyGateResults.map(check => _jsxs("div", { className: check.status === 'passed' ? 'text-green' : 'text-danger', children: [check.checkId, ": ", check.status, check.reasonCode ? ` · ${check.reasonCode}` : ''] }, check.checkId))] }), review.readiness.failedChecks.length > 0 && _jsx("ul", { className: "mt-2 text-[12px] text-danger", children: review.readiness.failedChecks.map(check => _jsxs("li", { children: [check.checkId, ": ", check.reasonCode] }, check.checkId)) }), _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.scopeArtifactCode') }), _jsx("pre", { className: "mt-2 max-h-64 overflow-auto whitespace-pre-wrap text-ink-3", children: JSON.stringify(review.artifact.content, null, 2) })] }), _jsxs("div", { className: "mt-3 grid gap-2 text-[11px] text-ink-3 md:grid-cols-2", children: [renderWindow(t('pages.activation.live24Hours'), review.liveMetrics.last24Hours), renderWindow(t('pages.activation.live7Days'), review.liveMetrics.last7Days)] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-3", children: t('pages.activation.behaviorDrift', { approved: value(review.behaviorDrift.approvedBlockRate), live: value(review.behaviorDrift.liveBlockRate), delta: value(review.behaviorDrift.delta) }) }), review.liveMetrics.representativeSamples.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.representativeSamples') }), review.liveMetrics.representativeSamples.map((sample, index) => _jsxs("div", { className: "font-mono text-ink-3", children: [sample.toolName, " \u00B7 ", sample.decision, " \u00B7 ", sample.pathCategory] }, `${sample.toolName}-${index}`))] }), review.decisions.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.ownerDecisionHistory') }), review.decisions.map(decision => _jsxs("div", { className: "mt-1 border-l border-line pl-2 text-ink-3", children: [_jsx("span", { className: "font-mono", children: decision.decidedAt }), " \u00B7 ", decision.decision, " \u00B7 ", decision.principalKind, ":", decision.actorId, " \u00B7 ", decision.authenticationMethod, " \u00B7 ", decision.reasonCode, decision.note ? ` · ${decision.note}` : ''] }, decision.decisionId))] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.circuitConditions') }), review.readiness.status === 'evidence_insufficient' && _jsxs("label", { className: "mt-3 block text-[12px] text-ink-3", children: [t('pages.activation.overrideReason'), _jsxs("select", { value: overrideReason, onChange: event => setOverrideReason(event.target.value), className: "mt-1 w-full rounded border border-line bg-panel px-3 py-2 text-ink", children: [_jsx("option", { value: "rare_behavior", children: t('pages.activation.overrideRareBehavior') }), _jsx("option", { value: "controlled_rollout", children: t('pages.activation.overrideControlledRollout') }), _jsx("option", { value: "owner_accepts_limited_evidence", children: t('pages.activation.overrideOwnerAccepts') })] })] }), _jsx("input", { value: note, onChange: event => setNote(event.target.value), placeholder: t('pages.activation.ownerReviewNote'), className: "mt-3 w-full rounded border border-line bg-panel px-3 py-2 text-[12px] text-ink" }), _jsxs("div", { className: "mt-3 flex flex-wrap gap-2", children: [review.globalPause?.status === 'paused' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void releasePause(), children: t('pages.activation.releaseGlobalPause') }), record.action === 'code_tool_hook_shadow_activate' && _jsxs(_Fragment, { children: [_jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, onClick: () => void decide('continue-observing'), children: t('pages.activation.continueObserving') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('reject-after-shadow'), children: t('pages.activation.rejectAfterShadow') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled || (review.readiness.status !== 'ready' && review.readiness.status !== 'evidence_insufficient') || (review.readiness.status === 'evidence_insufficient' && note.trim().length === 0), onClick: () => void decide('promote'), children: t('pages.activation.confirmLive') })] }), (record.action === 'code_tool_hook_live_activate' || review.controlState?.enforcement === 'safety_isolated') && _jsx(Button, { disabled: busy, variant: "destructive", onClick: () => void decide('emergency-deactivate'), children: t('pages.activation.emergencyDeactivate') }), review.controlState?.enforcement === 'safety_isolated' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('recover-to-shadow'), children: t('pages.activation.recoverToShadow') })] }), !review.ownerDecisionEnabled && _jsx("div", { className: "mt-2 text-[11px] text-amber", children: t('pages.activation.rolloutDisabled') })] });
+    return _jsxs("div", { className: "mt-4 rounded-[5px] border border-gov/25 bg-surface/70 p-4", "data-testid": `owner-review-${record.activationId}`, children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("strong", { className: "text-[13px] text-ink", children: t('pages.activation.ownerDecisionTitle') }), _jsx("span", { className: "font-mono text-[11px] text-gov", children: review.readiness.status }), review.controlState?.enforcement === 'safety_isolated' && _jsx("span", { className: "text-danger text-[11px]", children: t('pages.activation.safetyIsolation') })] }), _jsxs("div", { className: "mt-2 grid grid-cols-2 gap-2 text-[12px] text-ink-3 md:grid-cols-4", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(summary.observed)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(summary.matched)] }), _jsxs("span", { children: [t('pages.activation.wouldBlock'), ": ", value(summary.wouldBlock)] }), _jsxs("span", { children: [t('pages.activation.wouldAllow'), ": ", value(summary.wouldAllow)] }), _jsxs("span", { children: [t('pages.activation.requireApproval'), ": ", value(summary.requireApproval)] }), _jsxs("span", { children: [t('pages.activation.autoCorrect'), ": ", value(summary.autoCorrect)] }), _jsxs("span", { children: [t('pages.activation.neutralControl'), ": ", value(summary.neutralControl)] }), _jsxs("span", { children: [t('pages.activation.evaluationErrors'), ": ", value(summary.errors)] })] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.shadowWindow', { first: summary.firstObservedAt ?? t('pages.activation.notCollected'), last: summary.lastObservedAt ?? t('pages.activation.notCollected') }) }), _jsx("div", { className: "mt-2 text-[12px] text-ink-3", children: t('pages.activation.runtimeCapability', { version: review.runtimeCapability.hostRuntimeVersion, supported: t(review.runtimeCapability.shadowEvidence ? 'pages.activation.supported' : 'pages.activation.unsupported') }) }), _jsx("div", { className: "mt-2 text-[12px] text-amber", children: t('pages.activation.worstImpact', { tools: affectedTools.join(', ') || t('pages.activation.notCollected') }) }), _jsxs("div", { className: "mt-3 text-[12px] text-ink-3", children: [_jsx("div", { className: "mb-1 font-medium text-ink", children: t('pages.activation.hardSafetyChecks') }), review.readiness.evidenceSnapshot.safetyGateResults.map(check => _jsxs("div", { className: check.status === 'passed' ? 'text-green' : 'text-danger', children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.checkStatus.${check.status}`, { defaultValue: check.status }), check.reasonCode ? ` · ${t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })}` : ''] }, check.checkId))] }), review.readiness.failedChecks.length > 0 && _jsx("ul", { className: "mt-2 text-[12px] text-danger", children: review.readiness.failedChecks.map(check => _jsxs("li", { children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })] }, check.checkId)) }), _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.scopeArtifactCode') }), _jsx("pre", { className: "mt-2 max-h-64 overflow-auto whitespace-pre-wrap text-ink-3", children: JSON.stringify(review.artifact.content, null, 2) })] }), _jsxs("div", { className: "mt-3 grid gap-2 text-[11px] text-ink-3 md:grid-cols-2", children: [renderWindow(t('pages.activation.live24Hours'), review.liveMetrics.last24Hours), renderWindow(t('pages.activation.live7Days'), review.liveMetrics.last7Days)] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-3", children: t('pages.activation.behaviorDrift', { approved: value(review.behaviorDrift.approvedBlockRate), live: value(review.behaviorDrift.liveBlockRate), delta: value(review.behaviorDrift.delta) }) }), review.liveMetrics.representativeSamples.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.representativeSamples') }), review.liveMetrics.representativeSamples.map((sample, index) => _jsxs("div", { className: "font-mono text-ink-3", children: [sample.toolName, " \u00B7 ", sample.decision, " \u00B7 ", sample.pathCategory] }, `${sample.toolName}-${index}`))] }), review.decisions.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.ownerDecisionHistory') }), review.decisions.map(decision => _jsxs("div", { className: "mt-1 border-l border-line pl-2 text-ink-3", children: [_jsx("span", { className: "font-mono", children: decision.decidedAt }), " \u00B7 ", decision.decision, " \u00B7 ", decision.principalKind, ":", decision.actorId, " \u00B7 ", decision.authenticationMethod, " \u00B7 ", decision.reasonCode, decision.note ? ` · ${decision.note}` : ''] }, decision.decisionId))] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.circuitConditions') }), review.readiness.status === 'evidence_insufficient' && _jsxs("label", { className: "mt-3 block text-[12px] text-ink-3", children: [t('pages.activation.overrideReason'), _jsxs("select", { value: overrideReason, onChange: event => setOverrideReason(event.target.value), className: "mt-1 w-full rounded border border-line bg-panel px-3 py-2 text-ink", children: [_jsx("option", { value: "rare_behavior", children: t('pages.activation.overrideRareBehavior') }), _jsx("option", { value: "controlled_rollout", children: t('pages.activation.overrideControlledRollout') }), _jsx("option", { value: "owner_accepts_limited_evidence", children: t('pages.activation.overrideOwnerAccepts') })] })] }), _jsx("input", { value: note, onChange: event => setNote(event.target.value), placeholder: t('pages.activation.ownerReviewNote'), className: "mt-3 w-full rounded border border-line bg-panel px-3 py-2 text-[12px] text-ink" }), _jsxs("div", { className: "mt-3 flex flex-wrap gap-2", children: [review.globalPause?.status === 'paused' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void releasePause(), children: t('pages.activation.releaseGlobalPause') }), record.action === 'code_tool_hook_shadow_activate' && _jsxs(_Fragment, { children: [_jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, onClick: () => void decide('continue-observing'), children: t('pages.activation.continueObserving') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('reject-after-shadow'), children: t('pages.activation.rejectAfterShadow') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled || (review.readiness.status !== 'ready' && review.readiness.status !== 'evidence_insufficient') || (review.readiness.status === 'evidence_insufficient' && note.trim().length === 0), onClick: () => void decide('promote'), children: t('pages.activation.confirmLive') })] }), (record.action === 'code_tool_hook_live_activate' || review.controlState?.enforcement === 'safety_isolated') && _jsx(Button, { disabled: busy, variant: "destructive", onClick: () => void decide('emergency-deactivate'), children: t('pages.activation.emergencyDeactivate') }), review.controlState?.enforcement === 'safety_isolated' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('recover-to-shadow'), children: t('pages.activation.recoverToShadow') })] }), !review.ownerDecisionEnabled && _jsx("div", { className: "mt-2 text-[11px] text-amber", children: t('pages.activation.rolloutDisabled') })] });
 }
 function ActivationFactCard({ record, lifecycleData, receiptCount, onDisable, disabling, onChanged, }) {
     const { t, i18n } = useTranslation();
@@ -122,6 +123,12 @@ export function ActivationPage() {
     const [lifecycleCache, setLifecycleCache] = useState({});
     const [receiptCounts, setReceiptCounts] = useState(null);
     const [receiptDegraded, setReceiptDegraded] = useState(null);
+    // PRI-590: page-level coverage disclosure for the receipt counts.
+    const [receiptCoverage, setReceiptCoverage] = useState(null);
+    // PRI-594: unknown is never presented as a trustworthy zero — when the ledger
+    // is malformed the per-card count rows are omitted and the page-level
+    // coverage block carries the "requires recovery" verdict instead.
+    const receiptCountsUntrustworthy = receiptCoverage !== null && receiptCoverage.validationStatus === "malformed";
     const [loadingState, setLoadingState] = useState("loading");
     const [errorMessage, setErrorMessage] = useState(null);
     const [disablingIds, setDisablingIds] = useState(new Set());
@@ -132,6 +139,7 @@ export function ActivationPage() {
         setDegradedNote(null);
         setReceiptCounts(null);
         setReceiptDegraded(null);
+        setReceiptCoverage(null);
         const result = await fetchAllActivations();
         if (!result.success) {
             setLoadingState("error");
@@ -166,12 +174,16 @@ export function ActivationPage() {
                     byId[entry.principleId] = entry;
                 }
                 setReceiptCounts(byId);
+                setReceiptCoverage(rResult.data.coverage);
             }
             else {
                 setReceiptDegraded({
                     reason: rResult.data.reason ?? "unknown",
                     ...(rResult.data.nextAction === undefined ? {} : { nextAction: rResult.data.nextAction }),
                 });
+                // Degraded responses still carry coverage — it names the state
+                // (disabled vs unavailable) for the localized headline.
+                setReceiptCoverage(rResult.data.coverage);
             }
         }
         catch (err) {
@@ -269,7 +281,7 @@ export function ActivationPage() {
     const ordinaryActive = activeActivations.filter(record => !pendingRuleCode.includes(record) && !safetyAlerts.includes(record));
     const inactiveActivations = activations.filter((a) => a.status === "inactive");
     const neverActivatedCount = activations.filter((a) => a.activatedAt === null).length;
-    return (_jsx(PageShell, { children: _jsxs("div", { className: "animate-[pdFadeIn_400ms_ease-out]", children: [_jsx("div", { className: "font-mono text-[12px] tracking-[0.14em] text-ink-3 uppercase mb-3", children: t("pages.activation.eyebrow") }), _jsx(ShinyText, { as: "h1", className: "text-[29px] font-semibold tracking-tight text-ink mb-2", duration: 4.5, brightness: 0.5, disabled: activeActivations.length === 0, children: t("pages.activation.title") }), _jsx("p", { className: "text-ink-3 text-[14px] max-w-[760px] leading-relaxed mb-7", children: t("pages.activation.subtitle") }), _jsxs("div", { className: "text-sm leading-relaxed text-ink-2 mb-7 px-[18px] py-[14px] bg-panel border border-line rounded-[6px]", role: "status", "aria-live": "polite", children: [_jsx("span", { className: "font-mono font-semibold text-ink tabular-nums", children: activeActivations.length }), " ", _jsx("span", { className: "text-ink-3", children: t("pages.activation.summaryActive") }), " ", "/", " ", _jsx("span", { className: "font-mono font-semibold text-ink tabular-nums", children: inactiveActivations.length }), " ", _jsx("span", { className: "text-ink-3", children: t("pages.activation.summaryInactive") }), neverActivatedCount > 0 && (_jsxs(_Fragment, { children: [" ", "/", " ", _jsx("span", { className: "font-mono font-semibold text-amber tabular-nums", children: neverActivatedCount }), " ", _jsx("span", { className: "text-amber", children: t("pages.activation.summaryNeverActivated") })] }))] }), _jsx(CapabilityBoundaryDeclaration, {}), activeActivations.some(record => record.action === 'code_tool_hook_live_activate') && _jsx("div", { className: "mt-4 flex justify-end", children: _jsx(Button, { variant: "destructive", onClick: () => void handleEmergencyPause(), children: t('pages.activation.pauseAll') }) }), degradedNote && (_jsx("div", { className: "mt-4 text-ink-4 text-[13px] bg-surface/60 border-l-2 border-amber px-3 py-2", children: degradedNote })), receiptDegraded && (_jsxs("div", { className: "mt-4 text-ink-4 text-[13px] bg-surface/60 border-l-2 border-amber px-3 py-2", "data-testid": "receipt-counts-degraded", children: [t("pages.activation.receiptsUnavailable", { reason: receiptDegraded.reason }), receiptDegraded.nextAction && (_jsx("span", { className: "mt-1 block font-mono text-[12px]", children: receiptDegraded.nextAction }))] })), pendingRuleCode.length > 0 && _jsxs("section", { className: "mt-8", "aria-labelledby": "section-pending-rulecode", children: [_jsx(SectionTitle, { id: "section-pending-rulecode", children: t('pages.activation.pendingRules') }), _jsx("p", { className: "mb-3 text-[12px] text-ink-3", children: t('pages.activation.pendingRulesDescription') }), _jsx("div", { className: "space-y-[14px]", children: pendingRuleCode.map(record => _jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId)) })] }), safetyAlerts.length > 0 && _jsxs("section", { className: "mt-8", "aria-labelledby": "section-safety-alerts", children: [_jsx(SectionTitle, { id: "section-safety-alerts", children: t('pages.activation.safetyAlerts') }), _jsx("p", { className: "mb-3 text-[12px] text-danger", children: t('pages.activation.safetyAlertsDescription') }), _jsx("div", { className: "space-y-[14px]", children: safetyAlerts.map(record => _jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId)) })] }), _jsxs("section", { className: "mt-8", "aria-labelledby": "section-active", children: [_jsx(SectionTitle, { id: "section-active", children: t("pages.activation.sectionActive") }), ordinaryActive.length > 0 ? (_jsx("div", { className: "space-y-[14px]", children: ordinaryActive.map((record) => (_jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: receiptCounts !== null ? (Object.hasOwn(receiptCounts, record.principleId) ? receiptCounts[record.principleId] : null) : undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId))) })) : (_jsx("div", { className: "text-ink-3 text-[13px] leading-relaxed py-3", children: t("pages.activation.emptyActive") }))] }), inactiveActivations.length > 0 && (_jsxs("section", { className: "mt-8", "aria-labelledby": "section-inactive", children: [_jsx(SectionTitle, { id: "section-inactive", children: t("pages.activation.sectionInactive") }), _jsx("div", { className: "space-y-[14px]", children: inactiveActivations.map((record) => (_jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: receiptCounts !== null ? (Object.hasOwn(receiptCounts, record.principleId) ? receiptCounts[record.principleId] : null) : undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId))) })] })), neverActivatedCount > 0 && (_jsxs("section", { className: "mt-8", "aria-labelledby": "section-never-activated", children: [_jsx(SectionTitle, { id: "section-never-activated", children: t("pages.activation.sectionNeverActivated") }), _jsx("div", { className: "space-y-[10px]", children: activations
+    return (_jsx(PageShell, { children: _jsxs("div", { className: "animate-[pdFadeIn_400ms_ease-out]", children: [_jsx("div", { className: "font-mono text-[12px] tracking-[0.14em] text-ink-3 uppercase mb-3", children: t("pages.activation.eyebrow") }), _jsx(ShinyText, { as: "h1", className: "text-[29px] font-semibold tracking-tight text-ink mb-2", duration: 4.5, brightness: 0.5, disabled: activeActivations.length === 0, children: t("pages.activation.title") }), _jsx("p", { className: "text-ink-3 text-[14px] max-w-[760px] leading-relaxed mb-7", children: t("pages.activation.subtitle") }), _jsxs("div", { className: "text-sm leading-relaxed text-ink-2 mb-7 px-[18px] py-[14px] bg-panel border border-line rounded-[6px]", role: "status", "aria-live": "polite", children: [_jsx("span", { className: "font-mono font-semibold text-ink tabular-nums", children: activeActivations.length }), " ", _jsx("span", { className: "text-ink-3", children: t("pages.activation.summaryActive") }), " ", "/", " ", _jsx("span", { className: "font-mono font-semibold text-ink tabular-nums", children: inactiveActivations.length }), " ", _jsx("span", { className: "text-ink-3", children: t("pages.activation.summaryInactive") }), neverActivatedCount > 0 && (_jsxs(_Fragment, { children: [" ", "/", " ", _jsx("span", { className: "font-mono font-semibold text-amber tabular-nums", children: neverActivatedCount }), " ", _jsx("span", { className: "text-amber", children: t("pages.activation.summaryNeverActivated") })] }))] }), _jsx(CapabilityBoundaryDeclaration, {}), activeActivations.some(record => record.action === 'code_tool_hook_live_activate') && _jsx("div", { className: "mt-4 flex justify-end", children: _jsx(Button, { variant: "destructive", onClick: () => void handleEmergencyPause(), children: t('pages.activation.pauseAll') }) }), degradedNote && (_jsx("div", { className: "mt-4 text-ink-4 text-[13px] bg-surface/60 border-l-2 border-amber px-3 py-2", children: degradedNote })), receiptDegraded && (_jsxs("div", { className: "mt-4 text-ink-4 text-[13px] bg-surface/60 border-l-2 border-amber px-3 py-2", "data-testid": "receipt-counts-degraded", children: [receiptCoverage !== null && (_jsx("span", { className: "block font-medium text-ink-3", children: t(getReceiptSourceStatusLabelKey(receiptCoverage.sourceStatus)) })), t("pages.activation.receiptsUnavailable", { reason: receiptDegraded.reason }), receiptDegraded.nextAction && (_jsx("span", { className: "mt-1 block font-mono text-[12px]", children: receiptDegraded.nextAction }))] })), receiptCounts !== null && receiptCoverage !== null && (_jsx("div", { className: "mt-4 bg-surface/60 border-l-2 border-line px-3 py-2", "data-testid": "receipt-counts-coverage", children: _jsx(ReceiptCoverageDisclosure, { coverage: receiptCoverage }) })), pendingRuleCode.length > 0 && _jsxs("section", { className: "mt-8", "aria-labelledby": "section-pending-rulecode", children: [_jsx(SectionTitle, { id: "section-pending-rulecode", children: t('pages.activation.pendingRules') }), _jsx("p", { className: "mb-3 text-[12px] text-ink-3", children: t('pages.activation.pendingRulesDescription') }), _jsx("div", { className: "space-y-[14px]", children: pendingRuleCode.map(record => _jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId)) })] }), safetyAlerts.length > 0 && _jsxs("section", { className: "mt-8", "aria-labelledby": "section-safety-alerts", children: [_jsx(SectionTitle, { id: "section-safety-alerts", children: t('pages.activation.safetyAlerts') }), _jsx("p", { className: "mb-3 text-[12px] text-danger", children: t('pages.activation.safetyAlertsDescription') }), _jsx("div", { className: "space-y-[14px]", children: safetyAlerts.map(record => _jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId)) })] }), _jsxs("section", { className: "mt-8", "aria-labelledby": "section-active", children: [_jsx(SectionTitle, { id: "section-active", children: t("pages.activation.sectionActive") }), ordinaryActive.length > 0 ? (_jsx("div", { className: "space-y-[14px]", children: ordinaryActive.map((record) => (_jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: receiptCounts !== null && !receiptCountsUntrustworthy ? (Object.hasOwn(receiptCounts, record.principleId) ? receiptCounts[record.principleId] : null) : undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId))) })) : (_jsx("div", { className: "text-ink-3 text-[13px] leading-relaxed py-3", children: t("pages.activation.emptyActive") }))] }), inactiveActivations.length > 0 && (_jsxs("section", { className: "mt-8", "aria-labelledby": "section-inactive", children: [_jsx(SectionTitle, { id: "section-inactive", children: t("pages.activation.sectionInactive") }), _jsx("div", { className: "space-y-[14px]", children: inactiveActivations.map((record) => (_jsx(ActivationFactCard, { record: record, lifecycleData: lifecycleCache[record.principleId], receiptCount: receiptCounts !== null && !receiptCountsUntrustworthy ? (Object.hasOwn(receiptCounts, record.principleId) ? receiptCounts[record.principleId] : null) : undefined, onDisable: handleDisable, disabling: disablingIds.has(record.activationId), onChanged: () => void loadData() }, record.activationId))) })] })), neverActivatedCount > 0 && (_jsxs("section", { className: "mt-8", "aria-labelledby": "section-never-activated", children: [_jsx(SectionTitle, { id: "section-never-activated", children: t("pages.activation.sectionNeverActivated") }), _jsx("div", { className: "space-y-[10px]", children: activations
                                 .filter((a) => a.activatedAt === null)
                                 .map((record) => (_jsxs("article", { className: "relative pl-[22px] py-[14px] pr-[18px] bg-panel border border-amber/20 border-l-[3px] border-l-amber rounded-[6px]", children: [_jsxs("div", { className: "text-ink-2 text-sm leading-relaxed", children: [_jsx("span", { className: "font-medium text-ink", children: t("pages.activation.neverActivatedCard") }), " ", "\u2014 ", record.action, " \u00B7 ", getChannelLabel(record.channel, t), _jsx("span", { className: "ml-2 font-mono text-[11px] text-ink-4", children: record.principleId })] }), _jsxs(Link, { to: "/debt", className: "inline-flex items-center mt-2 text-gov text-[13px] hover:underline focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: [t("pages.activation.viewDebt"), " \u2192"] })] }, record.activationId))) })] })), _jsx("footer", { className: "mt-12 pt-6 border-t border-line text-ink-3 text-[13px]", children: t("pages.activation.footer") })] }) }));
 }

package/console/dist/ui/pages/failed-tasks/FailedTasksPage.js

@@ -74,12 +74,14 @@ function validateTask(v) {
     const taskKind = readString(v, "taskKind");
     const status = readString(v, "status");
     const attemptCount = readNumber(v, "attemptCount");
+    const maxAttempts = readNumber(v, "maxAttempts");
     const createdAt = readString(v, "createdAt");
     // Required fields — fail loud when missing or wrong type (rc-3)
     if (taskId === null ||
         taskKind === null ||
         status === null ||
         attemptCount === null ||
+        maxAttempts === null ||
         createdAt === null) {
         return null;
     }
@@ -93,6 +95,7 @@ function validateTask(v) {
         status,
         lastError,
         attemptCount,
+        maxAttempts,
         createdAt,
         lastAttemptAt,
     };
@@ -129,6 +132,10 @@ function statusToVariant(status) {
         return "amber";
     return "default";
 }
+/** A failed task whose retry budget is spent — only a force recovery can requeue it. */
+function isAttemptBudgetExhausted(task) {
+    return task.status === "failed" && task.attemptCount >= task.maxAttempts;
+}
 function groupTasksByKind(tasks) {
     const grouped = new Map();
     for (const task of tasks) {
@@ -148,6 +155,16 @@ export function FailedTasksPage() {
     const [recoveryEnabled, setRecoveryEnabled] = useState(false);
     const [recoverTarget, setRecoverTarget] = useState(null);
     const [recoverLoading, setRecoverLoading] = useState(false);
+    // Exhausted targets recover with force: the dialog warns first and the
+    // action button becomes 强制恢复 (server refuses force=false for these).
+    const recoverExhausted = recoverTarget !== null && isAttemptBudgetExhausted(recoverTarget);
+    let recoverConfirmLabel = t("pages.failedTasks.recoverConfirmButton");
+    if (recoverLoading) {
+        recoverConfirmLabel = t("common.loading");
+    }
+    else if (recoverExhausted) {
+        recoverConfirmLabel = t("pages.failedTasks.recoverConfirmForceButton");
+    }
     useEffect(() => {
         let cancelled = false;
         fetchConfigSummary()
@@ -246,7 +263,7 @@ export function FailedTasksPage() {
             return;
         setRecoverLoading(true);
         try {
-            const result = await recoverFailedTask(recoverTarget.taskId);
+            const result = await recoverFailedTask(recoverTarget.taskId, undefined, recoverExhausted);
             if (result.success) {
                 toast.success(t("pages.failedTasks.recoverSuccess"));
                 setRecoverTarget(null);
@@ -271,14 +288,17 @@ export function FailedTasksPage() {
                     if (!open && !recoverLoading) {
                         setRecoverTarget(null);
                     }
-                }, children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsx(AlertDialogTitle, { children: t("pages.failedTasks.recoverConfirmTitle") }), _jsx(AlertDialogDescription, { asChild: true, children: _jsxs("div", { className: "space-y-2 text-[13px] leading-relaxed", children: [_jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmStatus"), ":"] }), " ", _jsx("span", { className: "font-mono", children: recoverTarget?.status ?? "—" })] }), _jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmActionLabel"), ":"] }), " ", t("pages.failedTasks.recoverConfirmActionDesc")] }), _jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmImpactLabel"), ":"] }), " ", t("pages.failedTasks.recoverConfirmImpactDesc")] })] }) })] }), _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { disabled: recoverLoading, children: t("common.cancel") }), _jsx(AlertDialogAction, { disabled: recoverLoading, onClick: (event) => {
+                }, children: _jsxs(AlertDialogContent, { children: [_jsxs(AlertDialogHeader, { children: [_jsx(AlertDialogTitle, { children: t("pages.failedTasks.recoverConfirmTitle") }), _jsx(AlertDialogDescription, { asChild: true, children: _jsxs("div", { className: "space-y-2 text-[13px] leading-relaxed", children: [_jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmStatus"), ":"] }), " ", _jsx("span", { className: "font-mono", children: recoverTarget?.status ?? "—" })] }), recoverExhausted && (_jsxs(_Fragment, { children: [_jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmAttempts"), ":"] }), " ", _jsxs("span", { className: "font-mono", children: [recoverTarget?.attemptCount, " / ", recoverTarget?.maxAttempts] })] }), _jsx("div", { className: "text-danger", children: t("pages.failedTasks.recoverExhaustedWarning", {
+                                                            attempt: recoverTarget?.attemptCount ?? 0,
+                                                            max: recoverTarget?.maxAttempts ?? 0,
+                                                        }) })] })), _jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmActionLabel"), ":"] }), " ", t("pages.failedTasks.recoverConfirmActionDesc")] }), _jsxs("div", { children: [_jsxs("span", { className: "font-medium", children: [t("pages.failedTasks.recoverConfirmImpactLabel"), ":"] }), " ", recoverExhausted
+                                                        ? t("pages.failedTasks.recoverConfirmForceImpactDesc")
+                                                        : t("pages.failedTasks.recoverConfirmImpactDesc")] })] }) })] }), _jsxs(AlertDialogFooter, { children: [_jsx(AlertDialogCancel, { disabled: recoverLoading, children: t("common.cancel") }), _jsx(AlertDialogAction, { disabled: recoverLoading, onClick: (event) => {
                                         // Prevent Radix from auto-closing before the async POST
                                         // resolves; handleRecoverConfirmed closes on success.
                                         event.preventDefault();
                                         void handleRecoverConfirmed();
-                                    }, children: recoverLoading
-                                        ? t("common.loading")
-                                        : t("pages.failedTasks.recoverConfirmButton") })] })] }) })] }));
+                                    }, children: recoverConfirmLabel })] })] }) })] }));
 }
 function LoadedContent({ data, onCreateDraft, onRecover, t }) {
     const hasTasks = data.tasks.length > 0;

package/console/dist/ui/pages/focus/FocusPage.d.ts

@@ -1,3 +1,4 @@
+import type { GovernanceExperienceReasonCode, GovernanceExperienceNextActionCode, GovernancePrimaryAttention } from "@principles/core/runtime-v2";
 type DecisionResult = {
     success: true;
 } | {
@@ -10,5 +11,31 @@ export declare function summarizeDecisionResults(results: readonly DecisionResul
     failedCount: number;
     failureReason?: string;
 };
-export declare function FocusPage(): import("react").JSX.Element;
+export interface OwnerConfigureCommand {
+    /** i18n key for the shell label, e.g. "pages.focus.experience.ownerGuide.cmdPowerShell". */
+    labelKey: string;
+    /** Exact multi-line command to set both variables in that shell. */
+    command: string;
+}
+export interface OwnerConfigureGuide {
+    docUrl: string;
+    commands: readonly OwnerConfigureCommand[];
+}
+export declare const OWNER_CONFIGURE_DOC_URL = "https://github.com/csuzngjh/principles/blob/main/docs/runbooks/ops/owner-identity-configuration.md";
+export declare const OWNER_CONFIGURE_COMMANDS: readonly OwnerConfigureCommand[];
+/** Returns the configure guide when the Owner identity is missing, else null. */
+export declare function deriveOwnerConfigureGuide(ownerIdentityConfiguration: string | undefined): OwnerConfigureGuide | null;
+export declare const EXPERIENCE_ATTENTION: Record<GovernancePrimaryAttention, {
+    labelKey: string;
+    badgeClass: string;
+}>;
+export declare const EXPERIENCE_REASON: Record<GovernanceExperienceReasonCode, string>;
+export declare const EXPERIENCE_NEXT_ACTION: Record<GovernanceExperienceNextActionCode, string>;
+export interface FocusPageProps {
+    /** Feature flags from /api/v1/config/summary — gates the experience snapshot path. */
+    featureFlags?: Record<string, {
+        enabled: boolean;
+    } | undefined>;
+}
+export declare function FocusPage({ featureFlags }: FocusPageProps): import("react").JSX.Element;
 export {};