create-principles-disciple 1.123.0 → 1.124.0

package/host-runtime/dist/internalization-consumer-governance.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Internalization consumer governance wiring (host-neutral, PRI-624).
+ *
+ * Ported verbatim from openclaw-plugin `auto-consumer-governance-wiring.ts`
+ * (P0-D/E/F 生产接线) so the OpenClaw auto-consumer and the Companion
+ * workspace worker share ONE wiring implementation instead of copying it:
+ *   - evaluator: isRepairLoopEnabled + seedArtificerRepairTask (bounded repair)
+ *   - rollout_reviewer: dispatchActivation (approve_rollout → ActivationDispatcher,
+ *     低风险 auto_activate / 高风险 approvals.pending) + reopenRevisionTarget
+ *     (needs_revision → reopen scribe/artificer, 禁止入 approval)
+ *
+ * Everything is assembled from @principles/core stores/dispatchers; the only
+ * host knowledge is a structural logger. Idempotency (INV-08): dispatcher
+ * dedupes by `${artifactId}::${channel}`; reopen idempotency is owned by
+ * orchestrator.reopenTaskForRevision.
+ */
+import { type RolloutAutoDispatchInput, type RolloutAutoDispatchOutcome, type RolloutRevisionRoutingInput, type SeedArtificerRepairParams, type RuntimeStateManager, type InternalizationOrchestrator } from '@principles/core/runtime-v2';
+/** Structural logger port — PluginLogger satisfies this without adaptation. */
+export interface ConsumerGovernanceLogger {
+    info?: (msg: string) => void;
+    warn?: (msg: string) => void;
+}
+/** rollout → ActivationDispatcher 的生产接线 (per dispatch 打开短连接, 与 Console 模式一致) */
+export declare function dispatchRolloutActivation(workspaceDir: string, input: RolloutAutoDispatchInput, logger?: ConsumerGovernanceLogger): Promise<RolloutAutoDispatchOutcome>;
+/** flag 探针: config 异常 → 全 false (fail-closed, 不 throw) */
+/** evaluator repair deps (PRI-509 机制的生产接线; flag 语义保留为运行时开关) */
+export declare function createEvaluatorRepairDeps(workspaceDir: string, stateManager: RuntimeStateManager, logger?: ConsumerGovernanceLogger): {
+    isRepairLoopEnabled: () => boolean;
+    seedArtificerRepairTask: (params: SeedArtificerRepairParams) => Promise<string>;
+};
+/** rollout reviewer 治理 deps: dispatch + revision reopen */
+export declare function createRolloutGovernanceDeps(workspaceDir: string, orchestrator: InternalizationOrchestrator, logger?: ConsumerGovernanceLogger): {
+    dispatchActivation: (input: RolloutAutoDispatchInput) => Promise<RolloutAutoDispatchOutcome>;
+    reopenRevisionTarget: (input: RolloutRevisionRoutingInput) => Promise<{
+        ok: boolean;
+        reason: string;
+        reopenedTaskId?: string;
+    }>;
+};

package/host-runtime/dist/internalization-consumer-governance.js

@@ -0,0 +1,152 @@
+/**
+ * Internalization consumer governance wiring (host-neutral, PRI-624).
+ *
+ * Ported verbatim from openclaw-plugin `auto-consumer-governance-wiring.ts`
+ * (P0-D/E/F 生产接线) so the OpenClaw auto-consumer and the Companion
+ * workspace worker share ONE wiring implementation instead of copying it:
+ *   - evaluator: isRepairLoopEnabled + seedArtificerRepairTask (bounded repair)
+ *   - rollout_reviewer: dispatchActivation (approve_rollout → ActivationDispatcher,
+ *     低风险 auto_activate / 高风险 approvals.pending) + reopenRevisionTarget
+ *     (needs_revision → reopen scribe/artificer, 禁止入 approval)
+ *
+ * Everything is assembled from @principles/core stores/dispatchers; the only
+ * host knowledge is a structural logger. Idempotency (INV-08): dispatcher
+ * dedupes by `${artifactId}::${channel}`; reopen idempotency is owned by
+ * orchestrator.reopenTaskForRevision.
+ */
+import { ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, SqliteConnection, SqliteActivationStateStore, SqliteApprovalQueueStore, SqlitePIArtifactStore, createProductionGateDeps, createPITaskDiagnosticJson, computeFeatureFlagsFromConfig, isFeatureEnabled, } from '@principles/core/runtime-v2';
+import { loadPdConfigForPlugin } from './pd-config.js';
+function normalizeDecision(decision) {
+    if (decision.decision === 'activated') {
+        return { decision: decision.decision, activationId: decision.activationId };
+    }
+    if (decision.decision === 'already_activated') {
+        return { decision: decision.decision, reason: 'idempotent_redispatch' };
+    }
+    if (decision.decision === 'queued_for_approval') {
+        return { decision: decision.decision, reason: decision.approvalId };
+    }
+    // refused / would_* 家族
+    const reason = 'reason' in decision && typeof decision.reason === 'string' ? decision.reason : decision.decision;
+    return { decision: decision.decision, reason };
+}
+function makeFlagProbe(workspaceDir) {
+    const configResult = loadPdConfigForPlugin(workspaceDir);
+    if (!configResult.ok)
+        return () => false;
+    const flags = computeFeatureFlagsFromConfig(configResult.effective);
+    return (flagId) => isFeatureEnabled(flags, flagId);
+}
+/** rollout → ActivationDispatcher 的生产接线 (per dispatch 打开短连接, 与 Console 模式一致) */
+export async function dispatchRolloutActivation(workspaceDir, input, logger) {
+    const connection = new SqliteConnection(workspaceDir);
+    try {
+        const piArtifactStore = new SqlitePIArtifactStore(connection);
+        const artifactReadModel = {
+            getArtifactById: async (id) => {
+                const rec = await piArtifactStore.getArtifactById(id);
+                if (!rec)
+                    return null;
+                return {
+                    artifactId: rec.artifactId,
+                    artifactKind: rec.artifactKind,
+                    sourceTaskId: rec.sourceTaskId,
+                    sourcePrincipleId: rec.sourcePrincipleId,
+                    sourceRuleId: rec.sourceRuleId,
+                    lineageArtifactIds: rec.lineageArtifactIds,
+                    validationStatus: rec.validationStatus,
+                    contentJson: rec.contentJson,
+                    createdAt: rec.createdAt,
+                    updatedAt: rec.updatedAt,
+                };
+            },
+        };
+        const activationStateStore = new SqliteActivationStateStore(connection);
+        const approvalQueueStore = new SqliteApprovalQueueStore(connection);
+        const flagProbe = makeFlagProbe(workspaceDir);
+        const dispatcher = new ActivationDispatcher(artifactReadModel, activationStateStore, {
+            writers: [
+                new PromptWriter(),
+                new RuleHostWriter({ gateDeps: createProductionGateDeps(), featureFlagProbe: flagProbe }),
+                new DeferArchiveWriter(),
+            ],
+            approvalQueueStore,
+        });
+        const decision = await dispatcher.dispatch({
+            artifactId: input.artifactId,
+            channel: input.channel, // InternalizationChannel union; rollout 链的 channel 已由任务元数据校验
+            rolloutDecision: 'auto_activate',
+            actor: { kind: 'system', source: 'rollout_reviewer' },
+            now: new Date().toISOString(),
+            confirm: true,
+            confidence: input.confidence,
+        });
+        const outcome = normalizeDecision(decision);
+        logger?.info?.(`[PD:Consumer] rollout dispatch: artifact=${input.artifactId} channel=${input.channel} → ${outcome.decision}${outcome.activationId ? ` (${outcome.activationId})` : ''}${outcome.reason ? ` reason=${outcome.reason}` : ''}`);
+        return outcome;
+    }
+    finally {
+        try {
+            connection.close();
+        }
+        catch { /* best-effort */ }
+    }
+}
+/** flag 探针: config 异常 → 全 false (fail-closed, 不 throw) */
+/** evaluator repair deps (PRI-509 机制的生产接线; flag 语义保留为运行时开关) */
+export function createEvaluatorRepairDeps(workspaceDir, stateManager, logger) {
+    return {
+        isRepairLoopEnabled: () => {
+            // flag evaluator_artificer_repair_loop (registry 默认已改为 ON — 见
+            // feature-flag-contract.ts;此处读取 config 以保留运行时可关闭能力)
+            const configResult = loadPdConfigForPlugin(workspaceDir);
+            if (!configResult.ok)
+                return false;
+            const flags = computeFeatureFlagsFromConfig(configResult.effective);
+            return isFeatureEnabled(flags, 'evaluator_artificer_repair_loop');
+        },
+        seedArtificerRepairTask: async (params) => {
+            // P0-4: 确定性 revision identity — evaluatorTaskId + iteration 唯一定位
+            // 一个逻辑 repair 任务; 重放 (consumer 重复周期 / crash 恢复) reuse 而非再建。
+            const repairTaskId = `artificer-repair-${params.repairPayload.sourceEvaluatorTaskId}-r${params.repairPayload.repairIteration}`;
+            const existing = await stateManager.getTask(repairTaskId);
+            if (existing) {
+                logger?.info?.(`[PD:Consumer] repair task ${repairTaskId} already exists; reusing (idempotent seed)`);
+                return repairTaskId;
+            }
+            await stateManager.createTask({
+                taskId: repairTaskId,
+                taskKind: 'artificer',
+                status: 'pending',
+                attemptCount: 0,
+                maxAttempts: 3,
+                diagnosticJson: createPITaskDiagnosticJson({
+                    dependencyTaskIds: [...params.inheritedDependencyTaskIds],
+                    channel: params.inheritedChannel,
+                    timeoutMs: params.inheritedTimeoutMs,
+                    inputArtifactRefs: [...params.inheritedInputArtifactRefs],
+                    outputArtifactRefs: [],
+                    repairPayload: params.repairPayload,
+                }),
+            });
+            logger?.info?.(`[PD:Consumer] seeded artificer repair task ${repairTaskId} (iteration ${params.repairPayload.repairIteration})`);
+            return repairTaskId;
+        },
+    };
+}
+/** rollout reviewer 治理 deps: dispatch + revision reopen */
+export function createRolloutGovernanceDeps(workspaceDir, orchestrator, logger) {
+    return {
+        dispatchActivation: (input) => dispatchRolloutActivation(workspaceDir, input, logger),
+        reopenRevisionTarget: async (input) => {
+            const result = await orchestrator.reopenTaskForRevision(input.targetTaskId, {
+                revisionFeedback: input.revisionFeedback,
+                reason: `rollout_revision_iteration_${input.revisionIteration}`,
+                revisionCauseId: `rollout-${input.sourceRolloutTaskId}-r${input.revisionIteration}`,
+            });
+            return result.ok
+                ? { ok: true, reason: result.reason, reopenedTaskId: input.targetTaskId }
+                : { ok: false, reason: result.reason };
+        },
+    };
+}

package/{plugin/dist/service/workspace-telemetry-sink.d.ts → host-runtime/dist/workspace-telemetry-emitter.d.ts}

@@ -1,13 +1,14 @@
 import { StoreEventEmitter, type TelemetryEvent } from '@principles/core/runtime-v2';
+export type WorkspaceTelemetryPersistFailureSink = (detailJson: string) => void;
 export declare class WorkspaceTelemetryEmitter extends StoreEventEmitter {
     private readonly upstream;
     private readonly sinkFilePath;
-    private readonly workspaceDir;
-    constructor(upstream: StoreEventEmitter, workspaceDir: string);
+    private readonly onPersistFailure;
+    constructor(upstream: StoreEventEmitter, workspaceDir: string, onPersistFailure: WorkspaceTelemetryPersistFailureSink);
     /**
      * Validate + persist (allowlist) + forward upstream. Never throws —
-     * persistence errors degrade to SystemLogger (the upstream emit semantics
-     * are preserved unchanged).
+     * persistence errors degrade to the injected failure sink (the upstream
+     * emit semantics are preserved unchanged).
      */
     emitTelemetry(event: TelemetryEvent): true;
     private persist;

package/host-runtime/dist/workspace-telemetry-emitter.js

@@ -0,0 +1,74 @@
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { StoreEventEmitter } from '@principles/core/runtime-v2';
+/**
+ * PRI-634 A3 — workspace-scoped durable observability for critical runner
+ * telemetry (host-neutral; PRI-624 Slice C final integration).
+ *
+ * 背景：`StoreEventEmitter`（进程内单例）生产装配零订阅者、零持久化 ——
+ * `evaluator_adversarial_replay_skipped` 等关键事件发射即丢，事故（如
+ * 48371236 链）无法从日志取证。
+ *
+ * 为什么不是「给全局 storeEmitter 挂落盘订阅者」：singleton 的 telemetry
+ * payload 不含 workspaceDir，multi-workspace 进程下全局订阅者无法判断事件
+ * 归属，会重演 SystemLogger PRI-504 修过的 cross-workspace log leakage
+ * （ERR-092）。正确粒度是 **workspace-scoped**：本 emitter 在 consumer
+ * cycle 的 per-wake 装配处构造，只经手本 workspace runner 发出的事件。
+ *
+ * 持久化策略：**allowlist**，只落盘 4 类 critical events（与 telemetry-event
+ * schema 枚举同源），不做全量 telemetry 无差别写盘（日志量 + 隐私审计面
+ * 无谓扩大）：
+ *   - evaluator_adversarial_replay_skipped
+ *   - evaluator_adversarial_replay
+ *   - evaluator_rule_assembled
+ *   - evaluator_rule_assembly_failed
+ *
+ * 落点 `<workspaceDir>/.pd/telemetry/critical-events.jsonl`（JSONL，一行一
+ * 事件，含完整 TelemetryEvent）。同步 append：事件量小（allowlist 限流），
+ * 换取 crash 前落盘的 durable 语义。写失败绝不影响 runner —— 降级为
+ * `onPersistFailure` 回调（宿主注入的结构化告警口；OpenClaw 是
+ * SystemLogger，Companion worker 是自己的事件口）。
+ */
+const CRITICAL_EVENT_ALLOWLIST = new Set([
+    'evaluator_adversarial_replay_skipped',
+    'evaluator_adversarial_replay',
+    'evaluator_rule_assembled',
+    'evaluator_rule_assembly_failed',
+]);
+export class WorkspaceTelemetryEmitter extends StoreEventEmitter {
+    upstream;
+    sinkFilePath;
+    onPersistFailure;
+    constructor(upstream, workspaceDir, onPersistFailure) {
+        super();
+        this.upstream = upstream;
+        this.onPersistFailure = onPersistFailure;
+        this.sinkFilePath = join(workspaceDir, '.pd', 'telemetry', 'critical-events.jsonl');
+    }
+    /**
+     * Validate + persist (allowlist) + forward upstream. Never throws —
+     * persistence errors degrade to the injected failure sink (the upstream
+     * emit semantics are preserved unchanged).
+     */
+    emitTelemetry(event) {
+        if (CRITICAL_EVENT_ALLOWLIST.has(event.eventType)) {
+            this.persist(event);
+        }
+        return this.upstream.emitTelemetry(event);
+    }
+    persist(event) {
+        try {
+            mkdirSync(dirname(this.sinkFilePath), { recursive: true });
+            appendFileSync(this.sinkFilePath, `${JSON.stringify(event)}\n`, 'utf8');
+        }
+        catch (err) {
+            // Non-fatal by contract: losing a telemetry line must never break the
+            // runner. Surface once per occurrence through the injected host sink.
+            this.onPersistFailure(JSON.stringify({
+                eventType: event.eventType,
+                sinkFilePath: this.sinkFilePath,
+                error: err instanceof Error ? err.message : String(err),
+            }));
+        }
+    }
+}

package/install-layout/dist/index.d.ts

@@ -7,6 +7,14 @@ export interface InstallManifest {
     layoutVersion: typeof INSTALL_LAYOUT_VERSION;
     mode: InstallLayoutMode;
     hosts: InstallHost[];
+    /**
+     * Canonical absolute paths of Workspaces the install serves (PRI-624 Slice C).
+     * Optional so pre-PRI-624 manifests stay valid; always normalized to
+     * resolved absolute paths and deduped. The installer merges the install
+     * Workspace in; the Companion worker discovers its per-Workspace workers
+     * from this list (SPEC §13 "canonical install manifest").
+     */
+    workspaces?: readonly string[];
 }
 export interface InstallLayoutPaths {
     homeDir: string;
@@ -37,6 +45,8 @@ export interface ResolveInstallLayoutOptions {
     canonicalRuntimeExists: boolean;
     legacyExtensionExists: boolean;
 }
+/** Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
+export declare function mergeInstallManifestWorkspaces(current: InstallManifest | undefined, workspaceDir: string): string[];
 export declare function parseInstallManifest(value: unknown): {
     manifest?: InstallManifest;
     error?: string;

package/install-layout/dist/index.js

@@ -8,6 +8,36 @@ function isRecord(value) {
 function isHost(value) {
     return typeof value === 'string' && INSTALL_HOSTS.includes(value);
 }
+/** Workspace entries must be non-empty absolute paths — the Companion spawns per-Workspace workers keyed by canonical path. */
+function parseWorkspaceList(value) {
+    if (value === undefined)
+        return { workspaces: [] };
+    if (!Array.isArray(value))
+        return { error: 'install_manifest_malformed: workspaces must be non-empty absolute paths' };
+    const resolved = [];
+    for (const entry of value) {
+        if (typeof entry !== 'string' || entry.length === 0 || !path.isAbsolute(entry)) {
+            return { error: 'install_manifest_malformed: workspaces must be non-empty absolute paths' };
+        }
+        const canonical = path.resolve(entry);
+        if (!resolved.includes(canonical))
+            resolved.push(canonical);
+    }
+    return { workspaces: resolved };
+}
+/** Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
+export function mergeInstallManifestWorkspaces(current, workspaceDir) {
+    const canonical = path.resolve(workspaceDir);
+    const resolved = [];
+    for (const entry of current?.workspaces ?? []) {
+        const normalized = path.resolve(entry);
+        if (!resolved.includes(normalized))
+            resolved.push(normalized);
+    }
+    if (!resolved.includes(canonical))
+        resolved.push(canonical);
+    return resolved;
+}
 export function parseInstallManifest(value) {
     if (!isRecord(value))
         return { error: 'install_manifest_malformed: expected an object' };
@@ -21,7 +51,10 @@ export function parseInstallManifest(value) {
         return { error: 'install_manifest_malformed: hosts must contain codex and/or openclaw' };
     }
     const hosts = [...new Set(value.hosts)];
-    return { manifest: { layoutVersion: INSTALL_LAYOUT_VERSION, mode: value.mode, hosts } };
+    const workspaces = parseWorkspaceList(value.workspaces);
+    if (workspaces.error)
+        return { error: workspaces.error };
+    return { manifest: { layoutVersion: INSTALL_LAYOUT_VERSION, mode: value.mode, hosts, workspaces: workspaces.workspaces } };
 }
 export function getInstallLayoutPaths(homeDir) {
     const home = path.resolve(homeDir);

package/install-layout/dist/index.test.js

@@ -1,5 +1,6 @@
 import { describe, expect, it } from 'vitest';
-import { getInstallLayoutPaths, getConsoleServerEntry, parseInstallManifest, resolveInstallLayout } from './index.js';
+import * as path from 'node:path';
+import { getInstallLayoutPaths, getConsoleServerEntry, parseInstallManifest, resolveInstallLayout, mergeInstallManifestWorkspaces, } from './index.js';
 describe('install layout', () => {
     it('resolves a canonical Codex-only install without OpenClaw', () => {
         const paths = getInstallLayoutPaths('C:/Users/alice');
@@ -31,4 +32,38 @@ describe('install layout', () => {
             error: 'install_manifest_malformed: hosts must contain codex and/or openclaw',
         });
     });
+    it('accepts a manifest without workspaces (pre-PRI-624 manifests stay valid)', () => {
+        const { manifest, error } = parseInstallManifest({ layoutVersion: 1, mode: 'canonical', hosts: ['codex'] });
+        expect(error).toBeUndefined();
+        expect(manifest?.workspaces).toEqual([]);
+    });
+    it('parses workspaces as canonical absolute paths, deduped in insertion order', () => {
+        const { manifest, error } = parseInstallManifest({
+            layoutVersion: 1,
+            mode: 'canonical',
+            hosts: ['codex'],
+            workspaces: ['D:/Code/ws-a', 'D:\\Code\\ws-a', 'C:/work/ws b'],
+        });
+        expect(error).toBeUndefined();
+        expect(manifest?.workspaces?.length).toBe(2);
+        expect(manifest?.workspaces?.[0]).toBe(path.resolve('D:/Code/ws-a'));
+        expect(manifest?.workspaces).toContain(path.resolve('C:/work/ws b'));
+    });
+    it('rejects malformed workspace entries loudly', () => {
+        expect(parseInstallManifest({ layoutVersion: 1, mode: 'canonical', hosts: ['codex'], workspaces: [''] })).toEqual({
+            error: 'install_manifest_malformed: workspaces must be non-empty absolute paths',
+        });
+        expect(parseInstallManifest({ layoutVersion: 1, mode: 'canonical', hosts: ['codex'], workspaces: ['ws-a'] })).toEqual({
+            error: 'install_manifest_malformed: workspaces must be non-empty absolute paths',
+        });
+    });
+    it('merges a workspace into an existing manifest without duplicates', () => {
+        const merged = mergeInstallManifestWorkspaces({ layoutVersion: 1, mode: 'canonical', hosts: ['codex'], workspaces: ['D:/Code/ws-a'] }, 'D:\\Code\\ws-a');
+        expect(merged.length).toBe(1);
+        expect(merged[0]).toBe(path.resolve('D:/Code/ws-a'));
+    });
+    it('merge accepts unknown current manifests and starts a fresh list', () => {
+        const merged = mergeInstallManifestWorkspaces(undefined, 'D:/Code/ws-b');
+        expect(merged).toEqual([path.resolve('D:/Code/ws-b')]);
+    });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-principles-disciple",
-  "version": "1.123.0",
+  "version": "1.124.0",
   "description": "Interactive CLI installer for Principles Disciple OpenClaw plugin",
   "type": "module",
   "bin": {
@@ -72,6 +72,6 @@
     "directory": "packages/create-principles-disciple"
   },
   "pd": {
-    "bundledPluginVersion": "1.224.0"
+    "bundledPluginVersion": "1.225.0"
   }
 }

package/pd-cli/dist/commands/codex-ingest-catchup.d.ts

@@ -0,0 +1,20 @@
+interface CodexIngestCatchUpOptions {
+    workspace?: string;
+    json?: boolean;
+    maxRollouts?: number;
+}
+export interface CodexIngestCatchUpReport {
+    generatedAt: string;
+    host: 'codex';
+    workspace: string;
+    status: 'ok' | 'degraded' | 'skipped';
+    reason?: string;
+    nextAction?: string;
+    rolloutsProcessed: number;
+    remainingLagRollouts: string[];
+    unexaminedRollouts: string[];
+    degradations: string[];
+}
+export declare function handleCodexIngestCatchUp(options: CodexIngestCatchUpOptions): Promise<void>;
+export {};
+//# sourceMappingURL=codex-ingest-catchup.d.ts.map

package/pd-cli/dist/commands/codex-ingest-catchup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-ingest-catchup.d.ts","sourceRoot":"","sources":["../../src/commands/codex-ingest-catchup.ts"],"names":[],"mappings":"AAwBA,UAAU,yBAAyB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAyCD,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BhG"}

package/pd-cli/dist/commands/codex-ingest-catchup.js

@@ -0,0 +1,95 @@
+/**
+ * pd codex ingest catch-up command implementation (Codex Governance Closure
+ * Slice C, PRI-624; SPEC §13/§15 recovery command).
+ *
+ * Performs ONE bounded non-destructive catch-up pass over the workspace's
+ * durable Codex checkpoints: resolves each previously-authenticated rollout
+ * by exact uuid, re-authorizes the transcript path, and resumes the bounded
+ * incremental ingestion from the checkpoint — then feeds any admission
+ * candidates through the same Slice B admission/continuation pass the hook
+ * uses. Flag-off (`codex_conversation_ingestion=false`) performs ZERO
+ * transcript filesystem I/O and reports a structured skip.
+ *
+ * This is the manual-mode counterpart of the Companion worker's catch-up
+ * step (worker cycle step 2); it creates no LLM execution.
+ *
+ * CLI gate compliance:
+ * - cli-1: --json outputs exactly one parseable JSON object on stdout.
+ * - cli-2: exit paths stop execution.
+ * - cli-5/6: skipped/degraded results carry reason + nextAction; nothing is
+ *   mutated on failure (the ingestion seam is transactional per rollout).
+ */
+import { resolveWorkspaceDir } from '../resolve-workspace.js';
+import { catchUpCodexIngestion } from '@principles/codex-adapter';
+function buildReport(generatedAt, workspace, result) {
+    if (result.status === 'skipped') {
+        return {
+            generatedAt,
+            host: 'codex',
+            workspace,
+            status: 'skipped',
+            reason: result.reason,
+            nextAction: result.nextAction,
+            rolloutsProcessed: 0,
+            remainingLagRollouts: [],
+            unexaminedRollouts: [],
+            degradations: [],
+        };
+    }
+    const degradations = [];
+    for (const rollout of result.rollouts) {
+        for (const degradation of rollout.admissionDegradations) {
+            degradations.push(`${rollout.rolloutIdentity}: ${degradation.reason}`);
+        }
+        if (rollout.outcome.status === 'degraded') {
+            degradations.push(`${rollout.rolloutIdentity}: ${rollout.outcome.reason}`);
+        }
+    }
+    return {
+        generatedAt,
+        host: 'codex',
+        workspace,
+        status: result.status,
+        rolloutsProcessed: result.rollouts.length,
+        remainingLagRollouts: [...result.remainingLagRollouts],
+        unexaminedRollouts: [...result.unexaminedRollouts],
+        degradations: degradations.slice(0, 10),
+        ...(degradations.length > 0 && result.status === 'degraded'
+            ? { reason: 'one or more rollouts degraded; committed observations remain durable', nextAction: 'Inspect the per-rollout degradations; re-run catch-up after fixing the underlying condition (Slice D adds the audited quarantine command).' }
+            : {}),
+    };
+}
+export async function handleCodexIngestCatchUp(options) {
+    const generatedAt = new Date().toISOString();
+    const workspace = resolveWorkspaceDir(options.workspace);
+    const result = await catchUpCodexIngestion({
+        workspaceDir: workspace,
+        env: { CODEX_HOME: process.env.CODEX_HOME },
+        ...(typeof options.maxRollouts === 'number' ? { maxRollouts: options.maxRollouts } : {}),
+    });
+    const report = buildReport(generatedAt, workspace, result);
+    if (options.json) {
+        console.log(JSON.stringify(report));
+        if (report.status === 'degraded')
+            process.exitCode = 1;
+        return;
+    }
+    const lines = [
+        `Codex ingestion catch-up (${workspace})`,
+        `  status:             ${report.status}`,
+        `  rollouts processed: ${report.rolloutsProcessed}`,
+        `  remaining lag:      ${report.remainingLagRollouts.length}`,
+        `  unexamined (bound): ${report.unexaminedRollouts.length}`,
+    ];
+    for (const degradation of report.degradations) {
+        lines.push(`  degradation: ${degradation}`);
+    }
+    if (report.reason !== undefined)
+        lines.push(`  reason: ${report.reason}`);
+    if (report.nextAction !== undefined)
+        lines.push(`  next action: ${report.nextAction}`);
+    console.log(lines.join('\n'));
+    if (report.status === 'degraded')
+        process.exitCode = 1;
+}
+//# sourceMappingURL=codex-ingest-catchup.js.map

package/pd-cli/dist/commands/codex-ingest-catchup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-ingest-catchup.js","sourceRoot":"","sources":["../../src/commands/codex-ingest-catchup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAA2B,MAAM,2BAA2B,CAAC;AAqB3F,SAAS,WAAW,CAAC,WAAmB,EAAE,SAAiB,EAAE,MAA0B;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,WAAW;YACX,IAAI,EAAE,OAAO;YACb,SAAS;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,iBAAiB,EAAE,CAAC;YACpB,oBAAoB,EAAE,EAAE;YACxB,kBAAkB,EAAE,EAAE;YACtB,YAAY,EAAE,EAAE;SACjB,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACxD,YAAY,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,eAAe,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1C,YAAY,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO;QACL,WAAW;QACX,IAAI,EAAE,OAAO;QACb,SAAS;QACT,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QACzC,oBAAoB,EAAE,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtD,kBAAkB,EAAE,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAClD,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YACzD,CAAC,CAAC,EAAE,MAAM,EAAE,sEAAsE,EAAE,UAAU,EAAE,4IAA4I,EAAE;YAC9O,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAkC;IAC/E,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,YAAY,EAAE,SAAS;QACvB,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;QAC3C,GAAG,CAAC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,6BAA6B,SAAS,GAAG;QACzC,yBAAyB,MAAM,CAAC,MAAM,EAAE;QACxC,yBAAyB,MAAM,CAAC,iBAAiB,EAAE;QACnD,yBAAyB,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE;QAC7D,yBAAyB,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE;KAC5D,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzD,CAAC"}

package/pd-cli/dist/commands/codex-worker.d.ts

@@ -0,0 +1,20 @@
+interface CodexWorkerOptions {
+    workspace?: string;
+    json?: boolean;
+    once?: boolean;
+    intervalMs?: number;
+    status?: boolean;
+}
+export interface CodexWorkerStatusReport {
+    generatedAt: string;
+    host: 'codex';
+    workspace: string;
+    mode: 'ready' | 'manual_action_required' | 'paused' | 'degraded';
+    registeredInInstallManifest: boolean;
+    reason?: string;
+    nextAction?: string;
+}
+export declare function handleCodexWorker(options: CodexWorkerOptions): Promise<void>;
+export {};
+/** SPEC §15 worker mode, evaluated without executing anything. */ 
+//# sourceMappingURL=codex-worker.d.ts.map

package/pd-cli/dist/commands/codex-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-worker.d.ts","sourceRoot":"","sources":["../../src/commands/codex-worker.ts"],"names":[],"mappings":"AA6BA,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,GAAG,wBAAwB,GAAG,QAAQ,GAAG,UAAU,CAAC;IACjE,2BAA2B,EAAE,OAAO,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6ED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDlF;;AAED,kEAAkE"}