create-principles-disciple 1.132.6 → 1.133.1

package/console/dist/server/routes/update.js

@@ -1666,6 +1666,16 @@ function releaseManagerFlagEnabled(workspaceDir) {
     const flags = computeFlagsFromLoadResult(loadPdConfig(workspaceDir));
     return isFeatureEnabled(flags, 'release_manager_shadow');
 }
+/**
+ * PRI-698 Phase 1: gates routing /apply-full to the ReleaseManager write
+ * orchestration. Default off — the legacy updater serves with an explicit
+ * `release_manager_write_disabled` fallback reason. Requires the shadow flag
+ * too (the whole authority layer is gated on it first).
+ */
+function releaseManagerWriteFlagEnabled(workspaceDir) {
+    const flags = computeFlagsFromLoadResult(loadPdConfig(workspaceDir));
+    return isFeatureEnabled(flags, 'release_manager_write_authority');
+}
 function fallbackToLegacyForAllKinds(reason) {
     for (const kind of MUTATION_KINDS) {
         updateMutationController.unregister(kind, RELEASE_MANAGER_AUTHORITY);
@@ -1745,6 +1755,87 @@ async function runReleaseManagerCheckDispatch(mod, req, res, ctx) {
         sendError(res, 500, 'update_check_error', err instanceof Error ? err.message : 'Unknown error');
     }
 }
+/**
+ * PRI-698 Phase 1: governed apply-full dispatch (flag `release_manager_write_
+ * authority` on, readiness ready at registration time). The ReleaseManager
+ * orchestrates the update through the installer + transaction journal; this
+ * layer maps the outcome into the legacy doInlineFullUpdate response contract
+ * ({success, message, reason?, nextAction?, newVersion?, requiresRestart}) —
+ * wire contract unchanged. It performs NO runtime mutation itself.
+ */
+async function runReleaseManagerApplyFullDispatch(mod, req, res, ctx) {
+    if (req.method !== 'POST') {
+        sendMethodNotAllowed(res);
+        return;
+    }
+    let authority;
+    try {
+        authority = mod.createReleaseManagerAuthority({
+            pdHome: path.join(os.homedir(), '.pd'),
+            metadataBaseUrl: process.env.PD_RELEASE_METADATA_URL,
+        });
+    }
+    catch {
+        res.setHeader('X-PD-Mutation-Authority', `${LEGACY_MUTATION_AUTHORITY} (preferred: ${RELEASE_MANAGER_AUTHORITY} unavailable)`);
+        res.setHeader('X-PD-Mutation-Fallback-Reason', 'authority_module_unavailable');
+        await legacyApplyFullMutation(req, res, ctx);
+        return;
+    }
+    if (authority.installStatus === null || !authority.kinds['apply-full'].ready) {
+        // Readiness flipped between registration sync and dispatch — explicit
+        // fallback, never a half-governed mutation.
+        const reasons = authority.installStatus === null
+            ? 'install_state_corrupt'
+            : authority.kinds['apply-full'].reasons.join(',');
+        res.setHeader('X-PD-Mutation-Authority', `${LEGACY_MUTATION_AUTHORITY} (preferred: ${RELEASE_MANAGER_AUTHORITY} unavailable)`);
+        res.setHeader('X-PD-Mutation-Fallback-Reason', `release_manager_unavailable:${reasons}`);
+        await legacyApplyFullMutation(req, res, ctx);
+        return;
+    }
+    try {
+        const outcome = await authority.manager.apply({ workspaceDir: ctx.workspaceDir });
+        if (outcome.kind === 'applied') {
+            sendSuccess(res, {
+                success: true,
+                message: `Updated to ${outcome.productVersion}. Transaction ${outcome.transactionId} confirmed in the journal.`,
+                newVersion: outcome.productVersion,
+                requiresRestart: true,
+                nextAction: 'Restart PD Console to run the updated build.',
+            });
+        }
+        else {
+            sendSuccess(res, {
+                success: true,
+                message: `No update applied: ${outcome.note}`,
+                requiresRestart: false,
+            });
+        }
+    }
+    catch (error) {
+        const mapped = mod.mapReleaseManagerErrorToFallback(error);
+        // PRI-698 default-on safety net: a refusal thrown BEFORE the update
+        // transaction was opened (layout unsupported, metadata unavailable,
+        // journal unwritable) has ZERO side effects, so — exactly like the
+        // governed check — the explicit fallback serves the request with the
+        // refusal reason annotated. A refusal AFTER the transaction opened
+        // (transactionOpened) may have runtime-side effects (staging writes,
+        // journal tail): it surfaces as the legacy failure body, never as a
+        // fallback.
+        if (mapped.transactionOpened !== true) {
+            res.setHeader('X-PD-Mutation-Authority', `${LEGACY_MUTATION_AUTHORITY} (preferred: ${RELEASE_MANAGER_AUTHORITY} refused pre-transaction: ${mapped.reason})`);
+            res.setHeader('X-PD-Mutation-Fallback-Reason', `release_manager_refused_pre_transaction:${mapped.reason}`);
+            await legacyApplyFullMutation(req, res, ctx);
+            return;
+        }
+        sendSuccess(res, {
+            success: false,
+            message: mapped.message,
+            reason: mapped.reason,
+            nextAction: mapped.nextAction ?? 'The runtime is unchanged. Retry the update after resolving the cause.',
+            requiresRestart: false,
+        });
+    }
+}
 /**
  * Bring the authority registration in line with current flag + readiness
  * state, then dispatch happens through the controller as usual. Idempotent;
@@ -1780,6 +1871,7 @@ async function syncReleaseManagerAuthority(workspaceDir) {
         fallbackToLegacyForAllKinds('authority_module_unavailable');
         return;
     }
+    const writeAuthorityEnabled = releaseManagerWriteFlagEnabled(workspaceDir);
     for (const rmKind of mod.RELEASE_MANAGER_AUTHORITY_KINDS) {
         const readiness = authority.kinds[rmKind];
         if (readiness.ready && rmKind === 'check') {
@@ -1789,9 +1881,21 @@ async function syncReleaseManagerAuthority(workspaceDir) {
             });
             updateMutationController.setFallbackReason('check', null);
         }
+        else if (readiness.ready && rmKind === 'apply-full' && writeAuthorityEnabled) {
+            updateMutationController.register('apply-full', {
+                name: RELEASE_MANAGER_AUTHORITY,
+                handler: (req, res, ctx) => runReleaseManagerApplyFullDispatch(mod, req, res, ctx),
+            });
+            updateMutationController.setFallbackReason('apply-full', null);
+        }
         else {
             updateMutationController.unregister(rmKind, RELEASE_MANAGER_AUTHORITY);
-            updateMutationController.setFallbackReason(rmKind, `release_manager_unavailable:${readiness.reasons.join(',')}`);
+            // PRI-698 Phase 1: a structurally-ready apply-full with the write flag
+            // off is a deliberate gate, not an unavailability — name it distinctly.
+            const reason = readiness.ready && rmKind === 'apply-full'
+                ? 'release_manager_write_disabled'
+                : `release_manager_unavailable:${readiness.reasons.join(',')}`;
+            updateMutationController.setFallbackReason(rmKind, reason);
         }
     }
 }

package/console/dist/ui/i18n/en.json

@@ -357,6 +357,10 @@
             "chainInternalizationTask": "Internalization Task ID",
             "chainDreamerStatus": "Dreamer Status",
             "fieldTrigger": "Trigger",
+            "hostKind": {
+                "codex": "Codex",
+                "openclaw": "OpenClaw"
+            },
             "fieldConclusion": "PD's Conclusion",
             "fieldApplicability": "Applicability",
             "fieldConfidence": "Confidence",

package/console/dist/ui/i18n/zh-CN.json

@@ -357,6 +357,10 @@
             "chainInternalizationTask": "内化任务 ID",
             "chainDreamerStatus": "Dreamer 状态",
             "fieldTrigger": "触发行为",
+            "hostKind": {
+                "codex": "Codex",
+                "openclaw": "OpenClaw"
+            },
             "fieldConclusion": "PD 的结论",
             "fieldApplicability": "适用/说明",
             "fieldConfidence": "置信度",

package/console/dist/ui/pages/pain/PainPage.js

@@ -135,7 +135,7 @@ function EvidenceChainCard({ record, expanded, onToggle, t }) {
     const confidenceDisplay = layers.layer2.confidence
         ? `${enumLabel('confidence', layers.layer2.confidence.label, t)} (${layers.layer2.confidence.raw.toFixed(2)})`
         : null;
-    return (_jsxs(Card, { className: "overflow-hidden", children: [_jsx(CardHeader, { children: _jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx(Badge, { variant: stateVariant, children: stateLabel }), _jsx(Badge, { variant: "outline", children: sourceLabel }), record.admissionDecision && (_jsx(Badge, { variant: "secondary", children: enumLabel('admission', record.admissionDecision, t) }))] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0", children: [_jsx(Button, { variant: "ghost", size: "sm", "data-testid": `pain-feedback-${record.id}`, onClick: () => {
+    return (_jsxs(Card, { className: "overflow-hidden", children: [_jsx(CardHeader, { children: _jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx(Badge, { variant: stateVariant, children: stateLabel }), _jsx(Badge, { variant: "outline", children: sourceLabel }), record.hostKind && record.hostKind !== 'unknown' && (_jsx(Badge, { variant: "secondary", children: t(`pages.pain.hostKind.${record.hostKind}`) })), record.admissionDecision && (_jsx(Badge, { variant: "secondary", children: enumLabel('admission', record.admissionDecision, t) }))] }), _jsxs("div", { className: "flex items-center gap-2 shrink-0", children: [_jsx(Button, { variant: "ghost", size: "sm", "data-testid": `pain-feedback-${record.id}`, onClick: () => {
                                         const params = new URLSearchParams({ source: "pain_page", painId: record.id });
                                         navigate(`/report-problem?${params.toString()}`);
                                     }, children: t('pages.reportProblem.entryFeedback') }), _jsx("span", { className: "font-mono text-[11px] text-ink-4 whitespace-nowrap", children: formatDate(record.observedAt) })] })] }) }), _jsxs(CardContent, { children: [_jsxs("div", { className: "space-y-3 mb-4", children: [_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldTrigger') }), layer2Empty ? (_jsx("p", { className: "text-ink-3 text-sm italic leading-relaxed", children: t('pages.pain.noHumanSummary') })) : (_jsx(CardTitle, { className: "text-[15px] leading-relaxed", children: layers.layer2.triggerSummary }))] }), layers.layer2.conclusion && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldConclusion') }), _jsx("p", { className: "text-ink text-sm leading-relaxed font-medium", children: layers.layer2.conclusion })] })), layers.layer2.applicability && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldApplicability') }), _jsx("p", { className: "text-ink-2 text-sm leading-relaxed", children: layers.layer2.applicability })] })), confidenceDisplay && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldConfidence') }), _jsx("p", { className: "text-ink-2 text-sm", children: confidenceDisplay })] })), layers.layer2.failureReason && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldFailureReason') }), _jsx("p", { className: "text-danger text-sm leading-relaxed", children: layers.layer2.failureReason })] })), layers.layer2.degradedReason && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldDegradedReason') }), _jsx("p", { className: "text-amber text-sm leading-relaxed", children: layers.layer2.degradedReason })] })), layers.layer2.nextAction && (_jsxs("div", { children: [_jsx("div", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4 mb-1", children: t('pages.pain.fieldNextAction') }), _jsx("p", { className: "text-ink-2 text-sm leading-relaxed", children: layers.layer2.nextAction })] }))] }), shouldRenderIntentTensionPanel(layers.layer2.intentTension) && (_jsx(IntentTensionPanel, { tension: layers.layer2.intentTension, recordId: record.id, painId: record.id, taskId: record.linkedTaskId ?? undefined, linkedCandidateId: record.linkedCandidateId ?? undefined, t: t })), _jsxs("div", { className: "mt-4 pt-3 border-t border-line", children: [_jsxs("div", { className: "flex items-center gap-3 flex-wrap", children: [_jsx(Button, { variant: "ghost", size: "sm", onClick: async () => {

package/console/dist/ui/utils/validators.d.ts

@@ -536,6 +536,8 @@ export interface EvidenceChainRecordData {
     dreamerTaskStatus?: string;
     /** PRI-469: optional intent tension from diagnostician artifact (SPEC §16). */
     intentTension?: IntentTensionData;
+    /** PRI-625 Slice D: evidence host attribution — openclaw | codex | unknown. */
+    hostKind?: 'openclaw' | 'codex' | 'unknown';
 }
 export interface IntentTensionData {
     source: string;

package/console/dist/ui/utils/validators.js

@@ -1791,6 +1791,13 @@ function validateEvidenceChainRecord(v) {
         summary: v.summary,
     };
     // Optional fields — fail loud when present but wrong type (ERR-009)
+    if (Object.hasOwn(v, 'hostKind')) {
+        if (!isString(v.hostKind))
+            return null;
+        if (v.hostKind !== 'openclaw' && v.hostKind !== 'codex' && v.hostKind !== 'unknown')
+            return null;
+        result.hostKind = v.hostKind;
+    }
     if (Object.hasOwn(v, 'admissionDecision')) {
         if (!isString(v.admissionDecision))
             return null;