create-principles-disciple 1.132.0 → 1.132.1

package/console/dist/server/routes/update.js

@@ -713,8 +713,148 @@ function depsMeaningfullyChanged(oldDeps, newDeps) {
     return aKeys.some((k, i) => bKeys[i] !== k || a[k] !== b[k]);
 }
 /**
- * Create the node_modules resolution links for the installed components, if
- * missing.
+ * Move the current occupant of a dependency slot aside (same-directory
+ * rename: same volume, atomic, reversible). The quarantine name starts with
+ * a dot and is not a valid package name, so npm module resolution ignores it.
+ */
+function quarantineSlot(slot) {
+    try {
+        const quarantinePath = path.join(path.dirname(slot), `.${path.basename(slot)}.update-quarantine-${Date.now()}`);
+        fs.renameSync(slot, quarantinePath);
+        return { slot, quarantinePath };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Restore quarantined slots to their original locations (update failure
+ * path). The slot at that point holds the link reconciliation created —
+ * unlink removes the link itself, never its target. Best-effort, never
+ * throws; failures are logged (rc-9: observable degradation).
+ */
+function restoreQuarantined(quarantined) {
+    for (const entry of [...quarantined].reverse()) {
+        try {
+            try {
+                fs.unlinkSync(entry.slot);
+            }
+            catch { /* slot may already be gone */ }
+            fs.renameSync(entry.quarantinePath, entry.slot);
+        }
+        catch (error) {
+            console.error(`[pd-console:update] failed to restore quarantined dependency entry ${entry.slot}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+/**
+ * Discard quarantined slots (update success path). The quarantined entries
+ * are stale pre-update copies of internal @principles packages; the new
+ * canonical components are installed by the copy steps. Best-effort,
+ * failures are logged and non-fatal (rc-9).
+ */
+function cleanupQuarantined(quarantined) {
+    for (const entry of quarantined) {
+        try {
+            fs.rmSync(entry.quarantinePath, { recursive: true, force: true });
+        }
+        catch (error) {
+            console.warn(`[pd-console:update] failed to clean quarantined dependency entry ${entry.quarantinePath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+/**
+ * True when the link at linkPath resolves to exactly `target` (string
+ * comparison — the target dir may legitimately not exist yet at
+ * reconciliation time). Windows paths compare case-insensitively.
+ */
+function linkPointsAt(linkPath, target) {
+    const resolved = path.resolve(path.dirname(linkPath), fs.readlinkSync(linkPath));
+    const expected = path.resolve(target);
+    return process.platform === 'win32'
+        ? resolved.toLowerCase() === expected.toLowerCase()
+        : resolved === expected;
+}
+function createResolutionLink(linkPath, target) {
+    try {
+        fs.mkdirSync(path.dirname(linkPath), { recursive: true });
+        if (process.platform === 'win32') {
+            fs.symlinkSync(target, linkPath, 'junction');
+        }
+        else {
+            fs.symlinkSync(path.relative(path.dirname(linkPath), target), linkPath, 'dir');
+        }
+        return undefined;
+    }
+    catch (error) {
+        return `Failed to create runtime resolution link at ${linkPath}: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+/**
+ * Reconcile ONE deployed dependency slot against its canonical target
+ * (PRI-665, 2026-09-03 incident). The previous "existsSync → skip" logic
+ * silently kept stale PHYSICAL copies of internal @principles packages that
+ * legacy installs had left in these slots, so the updated dist resolved the
+ * old components and crashed at startup. Semantics:
+ *
+ *   - missing slot              → create the link (fresh installs);
+ *   - link pointing at target   → keep (npm- or installer-created);
+ *   - wrong-target link         → quarantine + replace;
+ *   - physical dir / plain file → quarantine + replace (the incident shape).
+ *
+ * Returns an error message on failure (the slot is rolled back first), or
+ * undefined; a successful quarantine is recorded in `quarantined` for the
+ * caller to restore on failure / discard on success.
+ */
+function reconcileResolutionLink(linkPath, target, quarantined) {
+    let stat;
+    try {
+        stat = fs.lstatSync(linkPath);
+    }
+    catch {
+        stat = undefined; // ENOENT — create below
+    }
+    if (stat === undefined) {
+        return createResolutionLink(linkPath, target);
+    }
+    if (stat.isSymbolicLink()) {
+        try {
+            if (linkPointsAt(linkPath, target))
+                return undefined; // correct link — keep
+        }
+        catch {
+            // Unreadable link target — fall through to replace.
+        }
+    }
+    const entry = quarantineSlot(linkPath);
+    if (entry === undefined) {
+        return `Failed to quarantine the existing dependency entry at ${linkPath} (required to install the canonical resolution link). Resolve any file locks and retry the update.`;
+    }
+    const error = createResolutionLink(linkPath, target);
+    if (error) {
+        // Roll this slot back before failing — the install stays untouched
+        // (the PRI-561 fail-closed ordering contract).
+        try {
+            fs.unlinkSync(linkPath);
+        }
+        catch { /* nothing we created */ }
+        try {
+            fs.renameSync(entry.quarantinePath, entry.slot);
+        }
+        catch {
+            // The in-slot rename failed (e.g. a transient lock). Hand the entry to
+            // the outer rollback so it retries the restore — restoreQuarantined
+            // tolerates a missing slot when unlinking before renaming back.
+            quarantined.push(entry);
+        }
+        return error;
+    }
+    quarantined.push(entry);
+    return undefined;
+}
+/**
+ * Create or RECONCILE the node_modules resolution links for the installed
+ * components.
  *
  * Mirrors installer.ts syncPdCli: junction on Windows (no elevation needed),
  * relative symlink elsewhere. Fresh installs get these links via npm install
@@ -738,8 +878,11 @@ function depsMeaningfullyChanged(oldDeps, newDeps) {
  *      host-runtime/node_modules/@principles/install-layout missing and
  *      every pd-cli runtime command failing with ERR_MODULE_NOT_FOUND.
  *
- * Returns undefined on success, or an error message (rc-9: observable, never
- * silent — a missing link means the updated console cannot start).
+ * Returns { error } on failure with every quarantine rolled back (rc-9:
+ * observable, never silent — a missing or unreconciled link means the
+ * updated console cannot start), or { quarantined } listing the dependency
+ * entries replaced during reconciliation. The caller restores the
+ * quarantined entries if a LATER step fails, and discards them on success.
  */
 function ensureRuntimeResolutionLinks(layout, tempDir) {
     const links = [
@@ -784,47 +927,35 @@ function ensureRuntimeResolutionLinks(layout, tempDir) {
         }
     };
     const fileDepSpecs = collectFileDepLinkSpecs(stagedComponents, readStagedDependencies);
-    const createResolutionLink = (linkPath, target) => {
-        // Idempotent: never overwrite an existing link or directory (fresh
-        // installs have npm-created real dirs in these slots).
-        if (fs.existsSync(linkPath))
-            return undefined;
-        try {
-            fs.mkdirSync(path.dirname(linkPath), { recursive: true });
-            if (process.platform === 'win32') {
-                fs.symlinkSync(target, linkPath, 'junction');
-            }
-            else {
-                fs.symlinkSync(path.relative(path.dirname(linkPath), target), linkPath, 'dir');
-            }
-            return undefined;
-        }
-        catch (error) {
-            return `Failed to create runtime resolution link at ${linkPath}: ${error instanceof Error ? error.message : String(error)}`;
-        }
-    };
+    const quarantined = [];
     // Pass 1 — explicit known-critical links, fail-closed BEFORE any byte is
-    // swapped (a link-creation failure aborts with the installed packages
-    // untouched: the PRI-561 ordering contract).
+    // swapped (a link-reconciliation failure aborts with the installed packages
+    // untouched: the PRI-561 ordering contract). Existing entries are
+    // RECONCILED, not skipped: a correct link is kept, but a stale physical
+    // copy or a wrong-target link is quarantined and replaced (PRI-665,
+    // 2026-09-03: legacy installs left physical @principles copies in these
+    // slots and updated dists crashed resolving them).
     for (const { linkPath, target } of links) {
         if (!fs.existsSync(target))
             continue;
-        const error = createResolutionLink(linkPath, target);
-        if (error)
-            return error;
+        const error = reconcileResolutionLink(linkPath, target, quarantined);
+        if (error) {
+            restoreQuarantined(quarantined);
+            return { error, quarantined: [] };
+        }
     }
     // Pass 2 — data-driven derived links. Their deployed target dir may be
     // created by the copy steps that follow (a brand-new component's dir does
     // not exist yet); each staged target's existence was already proven by the
     // extraction, and the copies below run unconditionally.
     for (const spec of fileDepSpecs) {
-        if (fs.existsSync(spec.linkPath))
-            continue;
-        const error = createResolutionLink(spec.linkPath, spec.target);
-        if (error)
-            return error;
+        const error = reconcileResolutionLink(spec.linkPath, spec.target, quarantined);
+        if (error) {
+            restoreQuarantined(quarantined);
+            return { error, quarantined: [] };
+        }
     }
-    return undefined;
+    return { quarantined };
 }
 async function doInlineFullUpdate(workspaceDir) {
     const layout = resolveUpdateLayout();
@@ -861,6 +992,9 @@ async function doInlineFullUpdate(workspaceDir) {
     // overwrites it (PR #1332 companion — see reapplySkillLanguage).
     const skillLanguage = detectInstalledSkillLanguage(extDir);
     let tempDir;
+    // Dependency entries quarantined during resolution-link reconciliation;
+    // restored on failure, discarded on success (PRI-665).
+    let reconciledQuarantine = [];
     try {
         // 2. Fetch installer package info from npm
         const response = await fetchWithRetry(NPM_REGISTRY_INSTALLER, 'Installer registry check');
@@ -1018,7 +1152,8 @@ async function doInlineFullUpdate(workspaceDir) {
             if (fs.existsSync(path.join(installLayoutSrc, 'package.json')) && fs.existsSync(path.join(installLayoutSrc, 'dist'))) {
                 copyDirRecursive(installLayoutSrc, layout.installLayoutDir, SKIP_DIRS);
             }
-            const linkError = ensureRuntimeResolutionLinks(layout, tempDir);
+            const { error: linkError, quarantined } = ensureRuntimeResolutionLinks(layout, tempDir);
+            reconciledQuarantine = quarantined;
             if (linkError) {
                 appendUpdateHistory(workspaceDir, {
                     fromVersion,
@@ -1078,6 +1213,13 @@ async function doInlineFullUpdate(workspaceDir) {
         if (tempDir && fs.existsSync(tempDir)) {
             fs.rmSync(tempDir, { recursive: true, force: true });
         }
+        // 6.5 Discard the quarantined stale dependency copies — the canonical
+        // components are in place now (PRI-665). Both the success return and the
+        // version-drift failure return flow through here with files already
+        // swapped, so restoring the stale copies would re-break resolution.
+        if (reconciledQuarantine.length > 0) {
+            cleanupQuarantined(reconciledQuarantine);
+        }
         // 7. Version-advance check (drift guard). The full update installs the
         // plugin bundled inside the installer. If the installer is stale (its
         // bundled plugin is NOT newer than what is installed), the "update" is a
@@ -1122,6 +1264,12 @@ async function doInlineFullUpdate(workspaceDir) {
         };
     }
     catch (error) {
+        // PRI-665: restore any dependency slots quarantined during link
+        // reconciliation FIRST — a failed update must not leave the install
+        // half-migrated (new dist with the old resolution quarantined away).
+        if (reconciledQuarantine.length > 0) {
+            restoreQuarantined(reconciledQuarantine);
+        }
         // Clean up temp dir on failure
         if (tempDir && fs.existsSync(tempDir)) {
             try {

package/host-runtime/dist/evaluator-runtime-context.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Evaluator Runtime Context — PRI-661: ONE builder for the deterministic
+ * adversarial-replay context every HOST-NEUTRAL evaluator entry uses.
+ *
+ * WHY THIS EXISTS: PR #1495 wired the shared consumer cycle (in-host
+ * auto-consumer / Codex worker) with production gateDeps + the host-threaded
+ * tool registry, but the host-neutral CLI entries kept divergent wiring:
+ *
+ *   - `pd runtime internalization run-once --runner evaluator` assembled
+ *     EvaluatorRunner with NO gateDeps at all — the deterministic adversarial
+ *     replay was structurally unreachable (the code-bearing guard fails loud
+ *     with an assembly defect instead of evaluating anything);
+ *   - `pd runtime internalization run-rulehost` (rulehost-pipeline-runner)
+ *     replayed through the bare sandbox gate — no workspace root, no host
+ *     tool registry — so a rule could pass generation-time replay and fail
+ *     the production activation gate on the SAME workspace (the exact
+ *     drift class PRI-634-F closed everywhere else).
+ *
+ * WHAT THIS MODULE IS NOT: it is not a second tool registry and not a new
+ * authority. Host-threaded callers (the consumer cycle) keep passing their
+ * live in-memory registry — the running host IS the authority for its own
+ * session. Host-neutral callers omit it and the DURABLE workspace provenance
+ * (`.pd/host-tool-semantics/<hostKind>.json`, persisted by every host on
+ * startup) is resolved through the ONE resolver
+ * (`resolveWorkspaceHostToolSemantics`). Unresolvable provenance is a
+ * structured refusal — never a silent fallback to the core baseline (an
+ * existence check against baseline names is a forged proof; ERR-114).
+ *
+ * Parity contract (pinned by evaluator-runtime-context.test.ts and the
+ * run-once evaluator parity test): the same artifact + workspace + declared
+ * host produces the SAME deterministic replay verdict whether it travels the
+ * consumer cycle (live registry) or a CLI entry (durable declaration), because
+ * hosts persist the same mapping constants they pass in memory.
+ */
+import { type RefinerRuleHostGateDeps, type ToolSemanticRegistry } from '@principles/core/runtime-v2';
+export interface EvaluatorRuntimeContextInput {
+    /** Workspace root the replay normalizes paths against (projectDir). */
+    readonly workspaceDir: string;
+    /**
+     * Host-threaded callers pass their live registry here (consumer-cycle
+     * ports). Host-neutral CLI callers omit it — the durable workspace
+     * declaration is resolved instead.
+     */
+    readonly toolSemantics?: ToolSemanticRegistry;
+}
+export type EvaluatorRuntimeContextResolution = {
+    readonly ok: true;
+    readonly gateDeps: RefinerRuleHostGateDeps;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+    readonly nextAction: string;
+};
+/**
+ * Build the evaluator's deterministic replay context.
+ *
+ * Mirrors the consumer-cycle assembly (PRI-634 A1/A3):
+ *   gateDeps: createProductionGateDeps({ toolSemantics, projectDir: workspaceDir })
+ * — gateDeps belongs to evaluator PRODUCTION semantics, never to host-optional
+ * capability, and always travels in the runner OPTIONS (second constructor
+ * argument), never the deps argument.
+ */
+export declare function createEvaluatorRuntimeContext(input: EvaluatorRuntimeContextInput): EvaluatorRuntimeContextResolution;

package/host-runtime/dist/evaluator-runtime-context.js

@@ -0,0 +1,61 @@
+/**
+ * Evaluator Runtime Context — PRI-661: ONE builder for the deterministic
+ * adversarial-replay context every HOST-NEUTRAL evaluator entry uses.
+ *
+ * WHY THIS EXISTS: PR #1495 wired the shared consumer cycle (in-host
+ * auto-consumer / Codex worker) with production gateDeps + the host-threaded
+ * tool registry, but the host-neutral CLI entries kept divergent wiring:
+ *
+ *   - `pd runtime internalization run-once --runner evaluator` assembled
+ *     EvaluatorRunner with NO gateDeps at all — the deterministic adversarial
+ *     replay was structurally unreachable (the code-bearing guard fails loud
+ *     with an assembly defect instead of evaluating anything);
+ *   - `pd runtime internalization run-rulehost` (rulehost-pipeline-runner)
+ *     replayed through the bare sandbox gate — no workspace root, no host
+ *     tool registry — so a rule could pass generation-time replay and fail
+ *     the production activation gate on the SAME workspace (the exact
+ *     drift class PRI-634-F closed everywhere else).
+ *
+ * WHAT THIS MODULE IS NOT: it is not a second tool registry and not a new
+ * authority. Host-threaded callers (the consumer cycle) keep passing their
+ * live in-memory registry — the running host IS the authority for its own
+ * session. Host-neutral callers omit it and the DURABLE workspace provenance
+ * (`.pd/host-tool-semantics/<hostKind>.json`, persisted by every host on
+ * startup) is resolved through the ONE resolver
+ * (`resolveWorkspaceHostToolSemantics`). Unresolvable provenance is a
+ * structured refusal — never a silent fallback to the core baseline (an
+ * existence check against baseline names is a forged proof; ERR-114).
+ *
+ * Parity contract (pinned by evaluator-runtime-context.test.ts and the
+ * run-once evaluator parity test): the same artifact + workspace + declared
+ * host produces the SAME deterministic replay verdict whether it travels the
+ * consumer cycle (live registry) or a CLI entry (durable declaration), because
+ * hosts persist the same mapping constants they pass in memory.
+ */
+import { createProductionGateDeps, } from '@principles/core/runtime-v2';
+import { resolveWorkspaceHostToolSemantics } from './host-tool-semantic-resolver.js';
+/**
+ * Build the evaluator's deterministic replay context.
+ *
+ * Mirrors the consumer-cycle assembly (PRI-634 A1/A3):
+ *   gateDeps: createProductionGateDeps({ toolSemantics, projectDir: workspaceDir })
+ * — gateDeps belongs to evaluator PRODUCTION semantics, never to host-optional
+ * capability, and always travels in the runner OPTIONS (second constructor
+ * argument), never the deps argument.
+ */
+export function createEvaluatorRuntimeContext(input) {
+    if (input.toolSemantics) {
+        return {
+            ok: true,
+            gateDeps: createProductionGateDeps({ projectDir: input.workspaceDir, toolSemantics: input.toolSemantics }),
+        };
+    }
+    const resolved = resolveWorkspaceHostToolSemantics(input.workspaceDir);
+    if (!resolved.ok) {
+        return { ok: false, reason: resolved.reason, nextAction: resolved.nextAction };
+    }
+    return {
+        ok: true,
+        gateDeps: createProductionGateDeps({ projectDir: input.workspaceDir, toolSemantics: resolved.registry }),
+    };
+}

package/host-runtime/dist/index.d.ts

@@ -17,6 +17,7 @@ export * from './internalization-consumer-governance.js';
 export * from './internalization-consumer-cycle.js';
 export * from './host-tool-declaration.js';
 export * from './host-tool-semantic-resolver.js';
+export * from './evaluator-runtime-context.js';
 export * from './workspace-telemetry-emitter.js';
 export * from './product-telemetry/consent-store.js';
 export * from './product-telemetry/eligibility.js';

package/host-runtime/dist/index.js

@@ -21,6 +21,8 @@ export * from './internalization-consumer-cycle.js';
 // neutral consumers (pd-cli/pd-console) resolve through the ONE resolver.
 export * from './host-tool-declaration.js';
 export * from './host-tool-semantic-resolver.js';
+// PRI-661: ONE evaluator replay-context builder for host-neutral CLI entries.
+export * from './evaluator-runtime-context.js';
 // PRI-634 A3: workspace-scoped critical telemetry — canonical implementation
 // moved from openclaw-plugin so both hosts share ONE semantics.
 export * from './workspace-telemetry-emitter.js';

package/host-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-principles-disciple",
-  "version": "1.132.0",
+  "version": "1.132.1",
   "description": "Interactive CLI installer for Principles Disciple OpenClaw plugin",
   "type": "module",
   "bin": {
@@ -41,7 +41,7 @@
   "author": "csuzngjh",
   "license": "MIT",
   "dependencies": {
-    "@principles/install-layout": "0.1.0",
+    "@principles/install-layout": "^0.2.0",
     "@tufjs/models": "3.0.1",
     "@inquirer/prompts": "^8.5.2",
     "commander": "^14.0.3",

package/pd-cli/dist/commands/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/commands/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA0BtD,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAoBD,wBAAsB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4H1E;AAED;;;;GAIG;AACH,UAAU,qBAAqB;IAC7B,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,iBAAiB,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAE,qBAA0B,GAAG,IAAI,CAkClG"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/commands/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA2EtD,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAoBD,wBAAsB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuI1E;AAED;;;;GAIG;AACH,UAAU,qBAAqB;IAC7B,MAAM,CAAC,EAAE,OAAO,YAAY,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,iBAAiB,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAE,qBAA0B,GAAG,IAAI,CAkClG"}

package/pd-cli/dist/commands/health.js

@@ -13,7 +13,35 @@ import Database from 'better-sqlite3';
 import { resolveWorkspaceDir } from '../resolve-workspace.js';
 import { PruningReadModel, PainChainReadModel, auditCandidateLedgerConsistency } from '@principles/core/runtime-v2';
 import { getLedgerFilePathPublic } from '@principles/core/principle-tree-ledger';
+import { createEvaluatorRuntimeContext, loadHostToolDeclarations, resolveWorkspaceHostToolSemantics, } from '@principles/host-runtime';
 import { handleHealthCodex } from './health-codex.js';
+function assessReliability(workspaceDir) {
+    const loaded = loadHostToolDeclarations(workspaceDir);
+    const resolver = resolveWorkspaceHostToolSemantics(workspaceDir);
+    const replay = createEvaluatorRuntimeContext({ workspaceDir });
+    if (loaded.ok) {
+        return {
+            registry: {
+                status: 'ok',
+                hosts: loaded.declarations.map((d) => d.hostKind).sort(),
+                declaredTools: loaded.declarations.reduce((n, d) => n + d.mappings.length, 0),
+            },
+            resolver: resolver.ok ? 'ready' : 'not_ready',
+            replay: replay.ok ? 'ready' : 'not_ready',
+        };
+    }
+    // Fresh-install expected state until each host starts once — explicit, never
+    // a silent baseline fallback (ERR-114). Informational: the refusal authority
+    // lives in the activation/evaluator paths, so the health exit code is
+    // unchanged by this section.
+    return {
+        registry: { status: 'degraded', hosts: [], declaredTools: 0 },
+        resolver: 'not_ready',
+        replay: 'not_ready',
+        reason: loaded.reason,
+        nextAction: loaded.nextAction,
+    };
+}
 function painChainTraceToLastSuccessfulChain(trace) {
     const totalMs = (trace.latencyMs.painToTask ?? 0)
         + (trace.latencyMs.taskToRun ?? 0)
@@ -42,6 +70,7 @@ export async function handleHealth(opts = {}) {
     const healthSummary = pruningModel.getHealthSummary();
     const ledgerByStatus = healthSummary.byStatus;
     const { missingLedgerCount } = await auditCandidateLedgerConsistency(workspaceDir);
+    const reliability = assessReliability(workspaceDir);
     let candidatesTotal = 0, candidatesConsumed = 0, candidatesPending = 0;
     let tasksTotal = 0;
     const tasksByStatus = {};
@@ -66,6 +95,7 @@ export async function handleHealth(opts = {}) {
                 status: missingLedgerCount === 0 ? 'ok' : 'degraded',
                 missing: missingLedgerCount,
             },
+            reliability,
             lastSuccessfulChain,
         };
     }
@@ -92,6 +122,15 @@ export async function handleHealth(opts = {}) {
         console.log(`tasks.byStatus: ${JSON.stringify(health.tasks.byStatus)}`);
         console.log(`candidateLedgerConsistency.status: ${health.candidateLedgerConsistency.status}`);
         console.log(`candidateLedgerConsistency.missing: ${health.candidateLedgerConsistency.missing}`);
+        console.log(`reliability.registry.status: ${health.reliability.registry.status}`);
+        console.log(`reliability.registry.hosts: ${health.reliability.registry.hosts.join('+') || '(none)'}`);
+        console.log(`reliability.registry.declaredTools: ${health.reliability.registry.declaredTools}`);
+        console.log(`reliability.resolver: ${health.reliability.resolver}`);
+        console.log(`reliability.replay: ${health.reliability.replay}`);
+        if (health.reliability.reason) {
+            console.log(`reliability.reason: ${health.reliability.reason}`);
+            console.log(`reliability.nextAction: ${health.reliability.nextAction}`);
+        }
         if (health.lastSuccessfulChain) {
             console.log('lastSuccessfulChain:');
             console.log(`  taskId:       ${health.lastSuccessfulChain.taskId}`);

package/pd-cli/dist/commands/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/commands/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA+BtD,SAAS,mCAAmC,CAAC,KAAqB;IAChE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;UAC7C,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC;UAChC,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;QACzD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAI,GAAkB,EAAE;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS;QACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,mBAAmB,EAAE,CAAC;IAE1B,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;IAE9C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,+BAA+B,CAAC,YAAY,CAAC,CAAC;IAEnF,IAAI,eAAe,GAAG,CAAC,EAAE,kBAAkB,GAAG,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC;IACvE,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,mBAAmB,GAAoC,SAAS,CAAC;IACrE,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,SAAS,WAAW;QAClB,OAAO;YACL,WAAW;YACX,SAAS,EAAE,YAAY;YACvB,aAAa;YACb,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;YACjD,MAAM,EAAE;gBACN,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBACjC,eAAe,EAAE,aAAa,CAAC,eAAe;gBAC9C,QAAQ,EAAE,cAAc;aACzB;YACD,UAAU,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,EAAE;YAChG,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE;YACrD,0BAA0B,EAAE;gBAC1B,MAAM,EAAE,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBACpD,OAAO,EAAE,kBAAkB;aAC5B;YACD,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAED,SAAS,WAAW;QAClB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,qFAAqF,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;YAChI,OAAO,CAAC,IAAI,CAAC,qFAAqF,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;YAChI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,EAAyC,CAAC;YACnJ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC;gBAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;oBAAE,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1D,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;oBAAE,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;YAC1D,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,EAAyC,CAAC;YACrI,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC;gBACtB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACpC,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,sBAAsB,EAAE,CAAC;gBAC5D,IAAI,KAAK,EAAE,CAAC;oBACV,mBAAmB,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,wEAAwE,GAAG,EAAE,CAAC,CAAC;YAC5F,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,WAAW,EAAE,CAAC;AAChB,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,QAAQ,GAA0B,EAAE;IAC1F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC/D,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CAAC,eAAe,EAAE,0EAA0E,CAAC;SACnG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC;QACrC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,qDAAqD;YACrD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,cAAc;oBACtB,IAAI;oBACJ,UAAU,EAAE,0CAA0C;iBACvD,CAAC,CAAC,CAAC;gBACJ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,sCAAsC,CAAC,CAAC;YAC7E,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;YAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/commands/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAEpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAiCtD,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,MAAM,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,iCAAiC,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,6BAA6B,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAE/D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;gBACxD,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;aAC9E;YACD,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YAC7C,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;SAC1C,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,6EAA6E;IAC7E,sEAAsE;IACtE,6BAA6B;IAC7B,OAAO;QACL,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC7D,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAoBD,SAAS,mCAAmC,CAAC,KAAqB;IAChE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;UAC7C,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC;UAChC,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;QACzD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAI,GAAkB,EAAE;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS;QACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,mBAAmB,EAAE,CAAC;IAE1B,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;IAE9C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEpD,IAAI,eAAe,GAAG,CAAC,EAAE,kBAAkB,GAAG,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC;IACvE,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,mBAAmB,GAAoC,SAAS,CAAC;IACrE,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,SAAS,WAAW;QAClB,OAAO;YACL,WAAW;YACX,SAAS,EAAE,YAAY;YACvB,aAAa;YACb,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;YACjD,MAAM,EAAE;gBACN,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBACjC,eAAe,EAAE,aAAa,CAAC,eAAe;gBAC9C,QAAQ,EAAE,cAAc;aACzB;YACD,UAAU,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,EAAE;YAChG,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE;YACrD,0BAA0B,EAAE;gBAC1B,MAAM,EAAE,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBACpD,OAAO,EAAE,kBAAkB;aAC5B;YACD,WAAW;YACX,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAED,SAAS,WAAW;QAClB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,qFAAqF,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;YAChI,OAAO,CAAC,IAAI,CAAC,qFAAqF,GAAG,YAAY,GAAG,UAAU,CAAC,CAAC;YAChI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,EAAyC,CAAC;YACnJ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC;gBAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;oBAAE,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1D,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;oBAAE,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;YAC1D,CAAC;YAED,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,EAAyC,CAAC;YACrI,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC;gBACtB,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YACpC,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,sBAAsB,EAAE,CAAC;gBAC5D,IAAI,KAAK,EAAE,CAAC;oBACV,mBAAmB,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,wEAAwE,GAAG,EAAE,CAAC,CAAC;YAC5F,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,WAAW,EAAE,CAAC;AAChB,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,QAAQ,GAA0B,EAAE;IAC1F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC/D,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CAAC,eAAe,EAAE,0EAA0E,CAAC;SACnG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC;QACrC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,qDAAqD;YACrD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,cAAc;oBACtB,IAAI;oBACJ,UAAU,EAAE,0CAA0C;iBACvD,CAAC,CAAC,CAAC;gBACJ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,sCAAsC,CAAC,CAAC;YAC7E,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;YAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/pd-cli/dist/commands/runtime-internalization-run-once.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-internalization-run-once.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-run-once.ts"],"names":[],"mappings":"AAkCA,UAAU,cAAc;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAyXD,wBAAsB,mCAAmC,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA2O7F"}
+{"version":3,"file":"runtime-internalization-run-once.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-run-once.ts"],"names":[],"mappings":"AAoCA,UAAU,cAAc;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAyXD,wBAAsB,mCAAmC,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkR7F"}

package/pd-cli/dist/commands/runtime-internalization-run-once.js

@@ -9,6 +9,7 @@ import { resolveRuntimeAdapterFromConfig, ConfigResolutionError, } from '../serv
 // path. EP-02: prior code passed only the 5 base deps, leaving the repair
 // loop as dead code at runtime.
 import { createEvaluatorRunnerDeps, contentHashFn } from '../services/rulehost-pipeline-runner.js';
+import { createEvaluatorRuntimeContext } from '@principles/host-runtime';
 const OWNER = 'pd-cli-internalization-run-once';
 const RUNTIME_KIND = 'local-worker';
 // PRI-458: philosopher, evaluator, rollout_reviewer are MVP-Quiet (default off).
@@ -367,6 +368,33 @@ export async function handleRuntimeInternalizationRunOnce(opts) {
         process.exitCode = 1;
         return;
     }
+    // PRI-661: the evaluator's deterministic adversarial replay needs the
+    // production gate context (workspace root + host tool registry from durable
+    // provenance) — the SAME context the consumer cycle replays with. Refuse
+    // BEFORE leasing any task (cli-5: no mutation on refusal) with the same
+    // structured semantics as runtime-activation's code_tool_hook refusal.
+    let evaluatorGateDeps;
+    if (runnerKind === 'evaluator') {
+        const evaluatorContext = createEvaluatorRuntimeContext({ workspaceDir });
+        if (!evaluatorContext.ok) {
+            const refused = {
+                decision: 'refused',
+                reason: evaluatorContext.reason,
+                nextAction: evaluatorContext.nextAction,
+            };
+            if (opts.json) {
+                console.log(JSON.stringify(refused, null, 2));
+            }
+            else {
+                console.log(`Run-once: refused`);
+                console.log(`  reason: ${refused.reason}`);
+                console.log(`  nextAction: ${refused.nextAction}`);
+            }
+            process.exitCode = 1;
+            return;
+        }
+        evaluatorGateDeps = evaluatorContext.gateDeps;
+    }
     const stateManager = new RuntimeStateManager({ workspaceDir });
     await stateManager.initialize();
     // Issue 2: resolve effective config for feature-flag-aware runners
@@ -447,7 +475,19 @@ export async function handleRuntimeInternalizationRunOnce(opts) {
                     // `context_manifest_budget` were structurally unreadable on this
                     // path — the two-stage evaluator could never be enabled from the
                     // CLI. Mirrors line 525 (artificer) and rulehost runnerOptsFor.
-                    { owner: OWNER, runtimeKind: runtimeAdapter.kind(), pollIntervalMs: 100, timeoutMs: effectiveTimeoutMs, effectiveConfig });
+                    //
+                    // PRI-661: gateDeps resolved ABOVE via the ONE
+                    // createEvaluatorRuntimeContext builder (durable workspace
+                    // provenance + workspace root) — replay/production parity with
+                    // the consumer cycle. Options argument (2nd), never deps (1st).
+                    {
+                        owner: OWNER,
+                        runtimeKind: runtimeAdapter.kind(),
+                        pollIntervalMs: 100,
+                        timeoutMs: effectiveTimeoutMs,
+                        effectiveConfig,
+                        gateDeps: evaluatorGateDeps,
+                    });
                     runnerResult = await runner.run(wakeResult.taskId);
                 }
                 else if (runnerKind === 'rollout_reviewer') {