create-principles-disciple 1.144.10 → 1.144.11

package/_release/product-identity.json

@@ -1,5 +1,5 @@
 {
   "schemaVersion": 1,
   "productVersion": "2.2.0",
-  "sourceCommit": "a28db4f06b726c412be36a066a27bc319f00c876"
+  "sourceCommit": "9b993151f65b075845e56a4f19dd523eac9810da"
 }

package/console/dist/server/index.js

@@ -3,7 +3,7 @@ import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
 import { fileURLToPath } from 'url';
-import { resolveApplyFullTimeoutMs } from './update-timeout.js';
+import { resolveApplyFullTimeoutMs, resolveCheckTimeoutMs } from './update-timeout.js';
 import { loadPdConfig, computeFlagsFromLoadResult, getFeedbackMaintainerEmail, getFeedbackChannelConfig, } from './config/pd-config-store.js';
 import { resolveOwnerIdentity, defaultOwnerIdentityHomeDir } from '@principles/core/runtime-v2';
 import { createProductTelemetryService, scheduleProductTelemetryExport } from '@principles/host-runtime';
@@ -194,6 +194,13 @@ const UPDATE_APPLY_TIMEOUT_MS = 120000;
 // the PRI-671 upgrade gate on Windows/AV-slow disks). Same knob pattern as
 // the installer's PD_INSTALL_TIMEOUT_MS.
 const UPDATE_APPLY_FULL_TIMEOUT_MS = resolveApplyFullTimeoutMs();
+// A check refreshes the signed channel over the network (TUF metadata + channel
+// document + release metadata, several sequential requests to the metadata
+// host). Measured on a CN network against GitHub Pages: normally ~1.2s, but a
+// single slow DNS/TLS leg pushes it past 12s, which the old 10s default turned
+// into a 504 "Request timeout" on every page load (observed ~1 run in 5).
+// Same knob pattern as apply-full: PD_UPDATE_CHECK_TIMEOUT_MS (ms) overrides.
+const UPDATE_CHECK_TIMEOUT_MS = resolveCheckTimeoutMs();
 function asyncHandler(fn, timeoutMs = REQUEST_TIMEOUT_MS) {
     return (innerReq, innerRes) => {
         const timeoutId = setTimeout(() => {
@@ -415,14 +422,17 @@ function handleRequest(services) {
                 asyncHandler(() => handleUpdateTransactionRoute(req, res, subPath))(req, res);
                 return;
             }
-            // Update routes: GET /api/update/check, POST /api/update/apply, POST /api/update/rollback
+            // Update routes: GET /api/update/check, POST /api/update/apply-full
+            // (handleUpdateRoute 404s every other subPath)
             if (urlPath === '/api/update' || urlPath.startsWith('/api/update/')) {
                 const subPath = urlPath.slice('/api/update'.length);
                 const isApply = subPath === '/apply';
                 const isApplyFull = subPath === '/apply-full';
+                const isCheck = subPath === '/check';
                 const timeout = isApplyFull ? UPDATE_APPLY_FULL_TIMEOUT_MS
                     : isApply ? UPDATE_APPLY_TIMEOUT_MS
-                        : undefined;
+                        : isCheck ? UPDATE_CHECK_TIMEOUT_MS
+                            : undefined;
                 asyncHandler(() => handleUpdateRoute(req, res, services.workspaceDir, subPath), timeout)(req, res);
                 return;
             }

package/console/dist/server/models/ApprovalsConsoleModel.d.ts

@@ -65,6 +65,16 @@ export declare class ApprovalsConsoleModel {
      * the activation is committed and the Owner decides whether to retire older
      * principles. A projection error is also surfaced (never silent) but must
      * not fail the approve.
+     *
+     * PRI-935 — the console holds no session, so it cannot supply the production
+     * round key and the projection runs `legacy_fifo_prefix_v1`. That is NOT a
+     * conservative forecast: FIFO structurally drops the newest activation from
+     * every truncated selection, while the live plugin route rotates and injects
+     * it within N user turns (PRI-904). Reporting that as "will NOT enter agent
+     * behavior until older ones are deactivated" told the Owner a falsehood and
+     * pushed them to deactivate healthy principles. The console now reports the
+     * policy it actually ran and, when the activation is merely rotated out of
+     * the current window, says so instead of claiming starvation.
      */
     private checkPromptInjectionBudget;
     /**

package/console/dist/server/models/ApprovalsConsoleModel.js

@@ -153,10 +153,12 @@ export class ApprovalsConsoleModel {
         }
         // PRI-890 (PRI-768 v6-02): after a successful prompt-channel activation,
         // verify the new activation actually fits the prompt injection budget.
-        // The prompt surface renders active activations FIFO (activated_at ASC)
-        // under a hard char cap; when the budget is saturated the newest Owner
-        // approval silently never reaches agent behavior. Surface it as a
-        // non-fatal warning (rc-9) instead — the activation stays committed.
+        // The prompt surface renders active activations under a hard char cap;
+        // when the budget is saturated the newest Owner approval may not reach
+        // agent behavior on THIS turn. Surface it as a non-fatal warning (rc-9)
+        // instead — the activation stays committed. PRI-935: whether "not on this
+        // turn" means "queued behind rotation" or genuinely starved depends on the
+        // selection policy, which checkPromptInjectionBudget now reports honestly.
         let injectionWarning;
         if (isActivationSuccess(activation) && existing.channel === 'prompt') {
             // isActivationSuccess is not a type predicate; the success variants all
@@ -179,6 +181,16 @@ export class ApprovalsConsoleModel {
      * the activation is committed and the Owner decides whether to retire older
      * principles. A projection error is also surfaced (never silent) but must
      * not fail the approve.
+     *
+     * PRI-935 — the console holds no session, so it cannot supply the production
+     * round key and the projection runs `legacy_fifo_prefix_v1`. That is NOT a
+     * conservative forecast: FIFO structurally drops the newest activation from
+     * every truncated selection, while the live plugin route rotates and injects
+     * it within N user turns (PRI-904). Reporting that as "will NOT enter agent
+     * behavior until older ones are deactivated" told the Owner a falsehood and
+     * pushed them to deactivate healthy principles. The console now reports the
+     * policy it actually ran and, when the activation is merely rotated out of
+     * the current window, says so instead of claiming starvation.
      */
     async checkPromptInjectionBudget(activationId) {
         let projection;
@@ -199,7 +211,29 @@ export class ApprovalsConsoleModel {
             // that instead of blaming the budget.
             return `injection_excluded_non_budget: the activation is committed but excluded from the prompt injection projection for a non-budget reason.${projectionDetail} nextAction=inspect the artifact/activation pair via pd runtime activation list`;
         }
-        return `injection_budget_excluded: the activation is committed but the prompt injection budget (${projection.budget}c, FIFO by activated_at) is already filled by ${projection.injectedActivationIds.length} earlier activation(s) — this principle will NOT enter agent behavior until older ones are deactivated. nextAction=review the activations page and deactivate superseded principles`;
+        // PRI-935: fair rotation is the live plugin-local policy (PRI-904). An
+        // activation that SOME round does inject is rotated out of the current
+        // window, not starved — report that bounded fact instead of the old FIFO
+        // starvation claim. The shared route genuinely does not rotate, so its
+        // empty reachability set falls through to the starvation branch below.
+        if (projection.productionRotates && projection.eventuallyInjectedActivationIds.includes(activationId)) {
+            const window = projection.eligibleCount;
+            return `injection_budget_queued: the activation is committed but sits outside the CURRENT prompt injection window (${projection.budget}c; ${projection.injectedActivationIds.length} of ${window} eligible activations injected this round; production selection policy fair_rotation_v1). Fair rotation advances the window by one position per recorded user turn, so this principle WILL enter agent behavior within at most ${window} consecutive user turns of a continuously advancing session — deactivating older principles is NOT required. nextAction=none; verify presence via the activations page or the prompt injection telemetry`;
+        }
+        // PRI-935: report the PRODUCTION policy, not the policy this forecast
+        // happened to run. The console holds no session round key, so its own
+        // projection is always `legacy_fifo_prefix_v1` even on a route where
+        // production rotates — labelling that value "the current production
+        // selection policy" would reintroduce exactly the lie this fix removes.
+        const policyNote = projection.productionRotates
+            ? 'production selection policy fair_rotation_v1'
+            : 'production selection policy legacy_fifo_prefix_v1 (FIFO by activated_at)';
+        // On a rotating route the only unreachable entries are oversized ones, so
+        // say WHY rather than implying a positional problem that rotation solves.
+        const unreachableNote = projection.productionRotates
+            ? ' (this forecast ran without a round key, so the window shown is the legacy FIFO prefix; the entry is unreachable because it exceeds the budget on its own, not because of its position)'
+            : '';
+        return `injection_budget_excluded: the activation is committed but the prompt injection budget (${projection.budget}c) is full and this activation is not reachable under the ${policyNote}; ${projection.injectedActivationIds.length}/${projection.eligibleCount} eligible injected${unreachableNote} — this principle will NOT enter agent behavior until capacity frees up. nextAction=review the activations page and deactivate superseded principles`;
     }
     /**
      * Bug-O L3b fix: upgrade the ledger principle linked to `artifactId` from

package/console/dist/server/models/ApprovalsGroupedConsoleModel.d.ts

@@ -7,6 +7,14 @@ export interface ApprovalGroup {
      *  review the candidate content instead of staring at an internal ID. */
     candidateDescription?: string;
     status: 'pending' | 'approved' | 'rejected';
+    /**
+     * PRI-935: whether this candidate's own serialized prompt entry fits the
+     * injection budget on its own. `false` means the entry is oversized, so fair
+     * rotation can NEVER inject it �?the pre-approval badge must not promise it
+     * will come around. Computed server-side with the production serializer
+     * (the client has no access to the escaped, serialized size).
+     */
+    fitsPromptBudget?: boolean;
     records: {
         id: string;
         artifactId: string;
@@ -28,11 +36,11 @@ export declare class ApprovalsGroupedConsoleModel {
     getApprovalsGrouped(): Promise<ApprovalsGroupedResponse>;
     /**
      * PRI-908: recompute the production prompt injection projection so the
-     * focus page can forecast "approved ≠ effective" BEFORE the Owner decides.
+     * focus page can forecast "approved �?effective" BEFORE the Owner decides.
      * PR #1844 follow-up: the forecast follows the workspace's REAL injection
-     * route (`buildLivePromptInjectionProjection` — legacy trimToBudget vs
+     * route (`buildLivePromptInjectionProjection` �?legacy trimToBudget vs
      * shared render via abstraction_layer_v1), matching the PRI-890 approve-time
-     * check. Advisory only: a projection failure omits the field — the
+     * check. Advisory only: a projection failure omits the field �?the
      * approve-time warning remains the fail-loud exclusion report (rc-9), so
      * this must never fail the grouped read.
      */

package/console/dist/server/models/ApprovalsGroupedConsoleModel.js

@@ -1,5 +1,6 @@
-import { SqliteConnection, SqliteApprovalQueueStore, SqlitePIArtifactStore, ApprovalQueue, } from '@principles/core/runtime-v2';
+import { SqliteConnection, SqliteApprovalQueueStore, SqlitePIArtifactStore, ApprovalQueue, RUNTIME_V2_PRINCIPLE_BUDGET, resolvePrincipleFromArtifact, } from '@principles/core/runtime-v2';
 import { buildLivePromptInjectionProjection } from '@principles/host-runtime';
+import { escapeXml } from '@principles/core/prompt-builder';
 import { loadLedger } from '@principles/core/principle-tree-ledger';
 import { createArtifactPrincipleResolutionDeps, resolveArtifactPrincipleId, } from './artifact-principle-resolver.js';
 import * as fs from 'node:fs';
@@ -16,7 +17,7 @@ function isMissingTableError(err) {
 /**
  * Wave 7: Extract a human-readable description from a PIArtifact's contentJson.
  *
- * The artifact kinds have different contentJson shapes — this function unifies
+ * The artifact kinds have different contentJson shapes �?this function unifies
  * them into a single description string the Owner can actually read to make a
  * review decision, instead of staring at a fabricated principleId.
  *
@@ -49,7 +50,7 @@ function extractCandidateDescription(contentJson) {
         const principleText = principleRaw ? principleRaw.trim() : null;
         const ruleText = ruleRaw ? ruleRaw.trim() : null;
         if (principleText && ruleText)
-            return `${principleText} — ${ruleText}`;
+            return `${principleText} �?${ruleText}`;
         if (ruleText)
             return ruleText;
         if (principleText)
@@ -64,7 +65,7 @@ function extractCandidateDescription(contentJson) {
         const title = typeof draft.title === 'string' ? draft.title.trim() : '';
         const statement = typeof draft.statement === 'string' ? draft.statement.trim() : '';
         if (title && statement)
-            return `${title} — ${statement}`;
+            return `${title} �?${statement}`;
         if (title)
             return title;
         if (statement)
@@ -88,6 +89,48 @@ function extractCandidateDescription(contentJson) {
     }
     return null;
 }
+/**
+ * PRI-935: would this candidate's own prompt entry fit the injection budget if
+ * it were the ONLY entry?
+ *
+ * Uses the production text resolver and the production entry format/escaping
+ * (`- [<id>] <text>` via escapeXml, plus the section header `trimToBudget`
+ * charges before any entry) so the answer matches what the real selector
+ * computes rather than an approximation. An entry that cannot fit alone is
+ * "oversized" in the core selector and is skipped in EVERY rotation round, so
+ * fair rotation cannot deliver it.
+ *
+ * Degrades to `false` (do not promise rotation) whenever the real size cannot be
+ * determined �?an unknown size must never become a promise (rc-9).
+ */
+function candidateFitsPromptBudget(artifact) {
+    if (!artifact?.contentJson)
+        return false;
+    // The pending candidate has no activation row yet, but the resolver only
+    // needs the artifact plus an id pair �?this mirrors what approve will do.
+    const resolved = resolvePrincipleFromArtifact({
+        artifact_id: artifact.artifactId,
+        artifact_kind: artifact.artifactKind,
+        content_json: artifact.contentJson,
+        validation_status: artifact.validationStatus,
+    }, {
+        activationId: `pending:${artifact.artifactId}`,
+        idempotencyKey: `pending:${artifact.artifactId}::prompt`,
+        artifactId: artifact.artifactId,
+        channel: 'prompt',
+        action: 'prompt_activate',
+        targetRef: `pending://${artifact.artifactId}`,
+        activatedAt: new Date(0).toISOString(),
+        deactivatedAt: null,
+    });
+    if (!resolved.ok)
+        return false;
+    // The real principle id is unknown pre-approval; a UUID allowance is the
+    // worst case, and the actual id can only make the entry smaller.
+    const entry = `- [${escapeXml('00000000-0000-0000-0000-000000000000')}] ${escapeXml(resolved.principle.text)}`;
+    const header = 'Runtime V2 activated principles:';
+    return entry.length + 1 + header.length <= RUNTIME_V2_PRINCIPLE_BUDGET;
+}
 export class ApprovalsGroupedConsoleModel {
     workspaceDir;
     constructor(workspaceDir) {
@@ -96,7 +139,7 @@ export class ApprovalsGroupedConsoleModel {
     async getApprovalsGrouped() {
         const stateDbPath = path.join(this.workspaceDir, '.pd', 'state.db');
         if (!fs.existsSync(stateDbPath)) {
-            return { groups: [], generatedAt: new Date().toISOString(), note: 'state.db not found — workspace may not be initialized' };
+            return { groups: [], generatedAt: new Date().toISOString(), note: 'state.db not found �?workspace may not be initialized' };
         }
         const conn = new SqliteConnection({ workspaceDir: this.workspaceDir, readonly: true });
         try {
@@ -109,21 +152,24 @@ export class ApprovalsGroupedConsoleModel {
             }
             catch (err) {
                 if (isMissingTableError(err)) {
-                    return { groups: [], generatedAt: new Date().toISOString(), note: 'approval table not found — workspace may not be initialized' };
+                    return { groups: [], generatedAt: new Date().toISOString(), note: 'approval table not found �?workspace may not be initialized' };
                 }
                 throw err;
             }
-            // Build artifactId → sourcePrincipleId map AND artifactId → candidateDescription map.
+            // Build artifactId �?sourcePrincipleId map AND artifactId �?candidateDescription map.
             // Wave 7: candidateDescription lets FocusPage show human-readable content
             // instead of a fabricated principleId.
             //
             // PRI-768 v5 follow-up (F3): sourcePrincipleId is null for most scribe
             // artifacts, which used to collapse every group to `unlinked:<id>` and
             // dead-end the owner decision UI. When the column is missing, fall back
-            // to the shared lineage resolver (scribe → dreamer seed → candidateId →
-            // ledger derivedFromPainIds) so groups bind to the REAL ledger id.
+            // to the shared lineage resolver (scribe �?dreamer seed �?candidateId �?      // ledger derivedFromPainIds) so groups bind to the REAL ledger id.
             const artifactPrincipleMap = new Map();
             const artifactDescriptionMap = new Map();
+            // PRI-935: per-artifact "does this entry fit the budget alone" fact, so
+            // the pre-approval badge never promises rotation for an entry that is
+            // oversized (rotation cannot rescue a per-entry overflow).
+            const artifactFitsBudgetMap = new Map();
             const stateDir = path.join(this.workspaceDir, '.state');
             const resolutionDeps = createArtifactPrincipleResolutionDeps(conn, artifactStore, this.workspaceDir);
             for (const approval of allApprovals) {
@@ -138,11 +184,13 @@ export class ApprovalsGroupedConsoleModel {
                         else {
                             artifactDescriptionMap.set(approval.artifactId, null);
                         }
+                        artifactFitsBudgetMap.set(approval.artifactId, candidateFitsPromptBudget(artifact));
                     }
                     catch (err) {
                         if (isMissingTableError(err)) {
                             artifactPrincipleMap.set(approval.artifactId, null);
                             artifactDescriptionMap.set(approval.artifactId, null);
+                            artifactFitsBudgetMap.set(approval.artifactId, false);
                         }
                         else {
                             throw err;
@@ -159,9 +207,9 @@ export class ApprovalsGroupedConsoleModel {
                 }
             }
             catch {
-                // Ledger not available — will fall back to principleId
+                // Ledger not available �?will fall back to principleId
             }
-            // Group by principleId (null → "unlinked")
+            // Group by principleId (null �?"unlinked")
             const groupMap = new Map();
             for (const approval of allApprovals) {
                 const mappedPrincipleId = artifactPrincipleMap.get(approval.artifactId);
@@ -205,6 +253,11 @@ export class ApprovalsGroupedConsoleModel {
                     principleTitle,
                     candidateDescription,
                     status,
+                    // PRI-935: undefined-safe �?absent when the artifact could not be
+                    // read, which the UI treats as "do not promise rotation".
+                    ...(firstArtifactId !== undefined && artifactFitsBudgetMap.has(firstArtifactId)
+                        ? { fitsPromptBudget: artifactFitsBudgetMap.get(firstArtifactId) === true }
+                        : {}),
                     records,
                 });
             }
@@ -223,11 +276,11 @@ export class ApprovalsGroupedConsoleModel {
     }
     /**
      * PRI-908: recompute the production prompt injection projection so the
-     * focus page can forecast "approved ≠ effective" BEFORE the Owner decides.
+     * focus page can forecast "approved �?effective" BEFORE the Owner decides.
      * PR #1844 follow-up: the forecast follows the workspace's REAL injection
-     * route (`buildLivePromptInjectionProjection` — legacy trimToBudget vs
+     * route (`buildLivePromptInjectionProjection` �?legacy trimToBudget vs
      * shared render via abstraction_layer_v1), matching the PRI-890 approve-time
-     * check. Advisory only: a projection failure omits the field — the
+     * check. Advisory only: a projection failure omits the field �?the
      * approve-time warning remains the fail-loud exclusion report (rc-9), so
      * this must never fail the grouped read.
      */
@@ -239,6 +292,13 @@ export class ApprovalsGroupedConsoleModel {
                     budget: projection.budget,
                     usedChars: projection.usedChars,
                     truncated: projection.truncated,
+                    // PRI-935: the badge must describe what the PRODUCTION route will do,
+                    // not which policy this session-less forecast happened to run.
+                    // Without it the UI can only say "will queue", which under fair
+                    // rotation reads as permanent starvation and pushes the Owner to
+                    // deactivate healthy principles.
+                    productionRotates: projection.productionRotates,
+                    eligibleCount: projection.eligibleCount,
                 },
             };
         }

package/console/dist/server/update-timeout.d.ts

@@ -1 +1,2 @@
 export declare function resolveApplyFullTimeoutMs(): number;
+export declare function resolveCheckTimeoutMs(): number;

package/console/dist/server/update-timeout.js

@@ -1,14 +1,24 @@
 const UPDATE_APPLY_FULL_DEFAULT_TIMEOUT_MS = 180000;
+const UPDATE_CHECK_DEFAULT_TIMEOUT_MS = 30000;
 // Node clamps delays above this limit to 1ms instead of honoring the timeout.
-const MAX_APPLY_FULL_TIMEOUT_MS = 2_147_483_647;
-export function resolveApplyFullTimeoutMs() {
-    const raw = process.env.PD_UPDATE_APPLY_FULL_TIMEOUT_MS;
+const MAX_TIMEOUT_MS = 2_147_483_647;
+function resolveTimeoutMs(envKey, defaultMs) {
+    const raw = process.env[envKey];
     if (raw === undefined || raw.trim().length === 0)
-        return UPDATE_APPLY_FULL_DEFAULT_TIMEOUT_MS;
-    const parsed = Number(raw);
-    if (!Number.isFinite(parsed) || !Number.isInteger(parsed) || parsed <= 0 || parsed > MAX_APPLY_FULL_TIMEOUT_MS) {
-        console.error(`[pd-console] PD_UPDATE_APPLY_FULL_TIMEOUT_MS=${JSON.stringify(raw)} must be an integer between 1 and ${MAX_APPLY_FULL_TIMEOUT_MS} — using the ${UPDATE_APPLY_FULL_DEFAULT_TIMEOUT_MS}ms default.`);
-        return UPDATE_APPLY_FULL_DEFAULT_TIMEOUT_MS;
+        return defaultMs;
+    // Plain decimal digits only: Number() also reads '0x10' as 16, so a hex or
+    // exponent form would silently collapse the budget instead of widening it.
+    const trimmed = raw.trim();
+    const parsed = /^\d+$/.test(trimmed) ? Number(trimmed) : Number.NaN;
+    if (!Number.isSafeInteger(parsed) || parsed <= 0 || parsed > MAX_TIMEOUT_MS) {
+        console.error(`[pd-console] ${envKey}=${JSON.stringify(raw)} must be a plain decimal integer between 1 and ${MAX_TIMEOUT_MS} — using the ${defaultMs}ms default.`);
+        return defaultMs;
     }
     return parsed;
 }
+export function resolveApplyFullTimeoutMs() {
+    return resolveTimeoutMs('PD_UPDATE_APPLY_FULL_TIMEOUT_MS', UPDATE_APPLY_FULL_DEFAULT_TIMEOUT_MS);
+}
+export function resolveCheckTimeoutMs() {
+    return resolveTimeoutMs('PD_UPDATE_CHECK_TIMEOUT_MS', UPDATE_CHECK_DEFAULT_TIMEOUT_MS);
+}

package/console/dist/shared/prompt-injection-contract.d.ts

@@ -17,6 +17,21 @@ export interface PromptInjectionBudgetStatus {
     budget: number;
     /** Chars currently injected into the agent prompt. */
     usedChars: number;
-    /** True when the FIFO projection already truncated — new approvals will queue. */
+    /**
+     * True when the CURRENT projection already truncated — the newly approved
+     * principle may not enter the prompt on this turn. PRI-935: this is
+     * policy-dependent (see `selectionPolicy`); the badge copy must not imply
+     * permanent starvation when rotation is in play.
+     */
     truncated: boolean;
+    /**
+     * PRI-935: whether the PRODUCTION route rotates. This — not the forecast's
+     * own selection policy — decides whether an out-of-window approval is queued
+     * behind rotation or genuinely starved, and therefore which badge copy is
+     * truthful. Optional so a pre-PRI-935 payload still validates; absent
+     * behaves as `false` (the conservative pre-PRI-935 reading).
+     */
+    productionRotates?: boolean;
+    /** PRI-935: eligible activations that reached the selector. */
+    eligibleCount?: number;
 }

package/console/dist/ui/i18n/en.json

@@ -111,13 +111,18 @@
             "approveSucceededCount": "Approved {{count}} principle(s)",
             "decidedApproved": "Approved ✓",
             "decidedRejected": "Rejected",
-            "approveQueueBadge": "May queue after approval: prompt injection slots are full ({{used}}/{{budget}} chars). Deactivate superseded principles to make room.",
+            "approveQueueBadge": "May queue after approval: prompt injection slots are full ({{used}}/{{budget}} chars).",
+            "approveQueueBadgeRotation": "May queue after approval: prompt injection slots are full ({{used}}/{{budget}} chars). Selection is rotating fairly, so new principles come around on later turns — no need to deactivate older principles.",
+            "approveQueueBadgeOversized": "May queue after approval: prompt injection slots are full ({{used}}/{{budget}} chars). This principle is itself larger than the injection limit, so rotation cannot fit it — shorten its content first.",
             "approveWarningDetail": "Server details",
             "goActivationCta": "Open activations",
             "approveWarning": {
                 "budgetExcludedTitle": "Approved, but not yet in effect",
-                "budgetExcludedBody": "This principle was approved and saved, but the prompt injection slots are full ({{budget}}-char cap, first-come-first-served) — currently filled by {{earlierCount}} earlier activation(s). Deactivate superseded principles to let it reach agent behavior.",
-                "budgetExcludedBodySimple": "This principle was approved and saved, but the prompt injection slots are full (first-come-first-served). Deactivate superseded principles to let it reach agent behavior.",
+                "budgetExcludedBody": "This principle was approved and saved, but the prompt injection budget is full ({{budget}}-char cap) and only {{earlierCount}} principle(s) fit the current window. It will not affect agent behavior until capacity frees up.",
+                "budgetExcludedBodySimple": "This principle was approved and saved, but the prompt injection budget is full. It will not affect agent behavior until capacity frees up.",
+                "queuedTitle": "Approved — queued to take effect",
+                "queuedBody": "This principle was approved and saved. The prompt injection window is full ({{budget}}-char cap), so it is not in the prompt this turn. Selection rotates fairly, advancing one position per user turn, so it will come around within at most {{turns}} consecutive turns — there is no need to deactivate other principles.",
+                "queuedBodySimple": "This principle was approved and saved and is queued for the prompt. Selection rotates fairly, so it will come around on a later turn — there is no need to deactivate other principles.",
                 "excludedTitle": "Approved, but not yet in effect",
                 "excludedNonBudgetBody": "This principle was approved and saved but is not in the agent prompt for a non-budget reason. Check the activations page for status.",
                 "checkFailedTitle": "Approved — effect unverified",

package/console/dist/ui/i18n/zh-CN.json

@@ -111,13 +111,18 @@
             "approveSucceededCount": "已批准 {{count}} 条原则",
             "decidedApproved": "已批准 ✓",
             "decidedRejected": "已拒绝",
-            "approveQueueBadge": "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符），需先停用被取代的旧原则。",
+            "approveQueueBadge": "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。",
+            "approveQueueBadgeRotation": "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。当前按公平轮转选取，新原则会在后续轮次自行轮到，无需停用旧原则。",
+            "approveQueueBadgeOversized": "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。但这条原则本身已超出注入位上限，轮转也装不下它——需要先精简它的内容。",
             "approveWarningDetail": "原始信息",
             "goActivationCta": "前往生效情况",
             "approveWarning": {
                 "budgetExcludedTitle": "已批准，但暂未生效",
-                "budgetExcludedBody": "这条原则已批准并保存，但提示词注入位已满（上限 {{budget}} 字符、先到先得），目前由 {{earlierCount}} 条更早激活的原则占满。需先停用被取代的旧原则，它才会开始影响智能体行为。",
-                "budgetExcludedBodySimple": "这条原则已批准并保存，但提示词注入位已满（先到先得）。需先停用被取代的旧原则，它才会开始影响智能体行为。",
+                "budgetExcludedBody": "这条原则已批准并保存，但提示词注入位已满（上限 {{budget}} 字符），当前仅 {{earlierCount}} 条原则进入注入窗口。它不会影响智能体行为，直到有容量释放。",
+                "budgetExcludedBodySimple": "这条原则已批准并保存，但提示词注入位已满。它不会影响智能体行为，直到有容量释放。",
+                "queuedTitle": "已批准，正在排队生效",
+                "queuedBody": "这条原则已批准并保存。当前提示词注入窗口已满（上限 {{budget}} 字符），所以它这一轮还没进入提示词。按公平轮转，每个用户回合窗口前移一位，因此最多再经过 {{turns}} 个连续回合它就会自行进入——不需要停用其他原则。",
+                "queuedBodySimple": "这条原则已批准并保存，正在排队进入提示词。按公平轮转，它会在后续回合自行进入，不需要停用其他原则。",
                 "excludedTitle": "已批准，但暂未生效",
                 "excludedNonBudgetBody": "这条原则已批准并保存，但因非预算原因暂时未进入智能体提示词。可前往生效情况页查看状态。",
                 "checkFailedTitle": "已批准，生效状态待确认",

package/console/dist/ui/pages/focus/FocusPage.js

@@ -148,10 +148,20 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
     function notifySuccessWarnings(successWarnings) {
         const segments = successWarnings.flatMap((warning) => splitApprovalWarnings(warning));
         const localized = segments.map((warning) => localizeApprovalWarning(warning, t));
-        const renderDetail = (detail) => `${t("pages.focus.approveWarningDetail", { defaultValue: "原始信息" })}: ${detail}`;
+        // PRI-935: the raw server text is still preserved verbatim (rc-9 — never
+        // dropped), but it is operator-facing English, not Owner-facing prose. It
+        // used to be appended flat under the localized body, so the toast rendered
+        // as one mixed Chinese/English block and the machine text visually
+        // dominated the message. Collapse it behind a native <details> so the
+        // Owner reads plain language first and can still open the raw evidence.
+        const renderDetail = (detail) => (_jsxs("details", { className: "mt-2 text-[11.5px] opacity-80", children: [_jsx("summary", { className: "cursor-pointer select-none", children: t("pages.focus.approveWarningDetail", { defaultValue: "原始信息" }) }), _jsx("pre", { className: "mt-1 max-h-40 overflow-auto whitespace-pre-wrap break-words font-mono text-[11px]", children: detail })] }));
         for (const item of localized.slice(0, MAX_WARNING_TOASTS)) {
             toast.warning(item.title, {
-                description: item.body ? `${item.body}\n${renderDetail(item.detail)}` : item.detail,
+                description: item.body
+                    ? (_jsxs(_Fragment, { children: [item.body, renderDetail(item.detail)] }))
+                    // An unrecognized code degrades to the raw string as the whole
+                    // message (rc-9) — there is no localized body to sit above it.
+                    : item.detail,
                 duration: 15000,
                 action: item.activationAction
                     ? { label: t("pages.focus.goActivationCta", { defaultValue: "前往生效情况" }), onClick: () => navigate("/activation") }
@@ -161,7 +171,7 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
         const overflow = localized.slice(MAX_WARNING_TOASTS);
         if (overflow.length > 0) {
             toast.warning(t("pages.focus.approveWarning.overflowTitle", { defaultValue: "还有 {{count}} 条警告", count: overflow.length }), {
-                description: overflow.map((item) => renderDetail(item.detail)).join("\n"),
+                description: (_jsx(_Fragment, { children: overflow.map((item) => (_jsxs("div", { className: "mb-1 last:mb-0", children: [_jsx("div", { children: item.title }), item.body ? _jsx("div", { children: item.body }) : null, renderDetail(item.detail)] }, item.detail))) })),
                 duration: 15000,
             });
         }
@@ -296,11 +306,23 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
                     ? "border-green/40 bg-green/10 text-green"
                     : "border-line bg-surface/80 text-ink-3"}`, role: "status", "data-testid": `decided-banner-${group.principleId}`, children: decidedOutcome === "approved"
                     ? t("pages.focus.decidedApproved", { defaultValue: "已批准 ✓ 正在写入生效记录…" })
-                    : t("pages.focus.decidedRejected", { defaultValue: "已拒绝" }) })), _jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("span", { className: "inline-flex items-center border border-line rounded-[2px] px-[7px] py-1 font-mono text-[11px] text-ink-3 bg-surface/80 uppercase", children: channelLabel }), isReversible && (_jsx("span", { className: "inline-flex items-center border border-amber/35 text-amber rounded-[2px] px-[7px] py-1 font-mono text-[11px] uppercase", children: primaryChannel === "prompt" ? t("pages.focus.tagReversible") : t("pages.focus.tagLowRisk") }))] }), _jsx("div", { className: "mt-[14px] mb-2 font-semibold text-ink leading-snug", children: displayTitle }), _jsx("div", { className: "mt-2 px-3 py-2 bg-surface/60 border-l-2 border-gov text-ink-3 text-[13px] leading-snug", children: t("pages.focus.evidenceSummary", { count: group.records.length }) }), actionsLocked && (_jsxs("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 p-3", "data-testid": `pending-actions-locked-${group.principleId}`, children: [_jsx("p", { className: "text-ink-2 text-[12.5px] leading-relaxed", children: actionsLockedReason }), _jsx(Link, { to: "/settings", "data-testid": `pending-actions-locked-settings-${group.principleId}`, className: "mt-2 inline-flex items-center border border-line text-ink bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.ownerDecision.goSettingsCta") })] })), decidedOutcome === null && primaryChannel === "prompt" && promptInjection?.truncated === true && (_jsx("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 px-3 py-2 text-[12.5px] text-amber", "data-testid": `approve-queue-badge-${group.principleId}`, children: t("pages.focus.approveQueueBadge", {
-                    defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符），需先停用被取代的旧原则。",
-                    used: promptInjection.usedChars,
-                    budget: promptInjection.budget,
-                }) })), _jsxs("div", { className: "flex gap-2 mt-4 flex-wrap items-center", children: [_jsx("button", { type: "button", onClick: handleApprove, disabled: decisionDisabled, "data-testid": `approve-btn-${group.principleId}`, className: "inline-flex items-center border border-gov bg-gov text-paper rounded-[3px] px-[14px] py-[6px] text-[12.5px] font-medium hover:bg-gov-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: actionLoading ? t("common.loading") + "…" : t("pages.focus.approveAction", { defaultValue: "批准" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput((v) => !v); setShowRejectInput(false); }, disabled: decisionDisabled, "data-testid": `edit-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.editAction", { defaultValue: "编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput((v) => !v); setShowEditInput(false); }, disabled: decisionDisabled, "data-testid": `reject-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.rejectAction", { defaultValue: "拒绝" }) }), _jsx(Link, { to: "/evidence", className: "inline-flex items-center text-gov text-[12.5px] hover:underline focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.viewFullChain") })] }), showRejectInput && (_jsxs("div", { className: "mt-3 p-3 border border-danger/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.rejectReasonLabel", { defaultValue: "拒绝原因（必填）" }) }), _jsx("textarea", { value: rejectReason, onChange: (e) => setRejectReason(e.target.value), "data-testid": `reject-reason-${group.principleId}`, placeholder: t("pages.focus.rejectReasonPlaceholder", { defaultValue: "请说明拒绝原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleReject, disabled: !rejectReason.trim() || actionLoading, "data-testid": `confirm-reject-${group.principleId}`, className: "inline-flex items-center border border-danger text-danger bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-danger/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmReject", { defaultValue: "确认拒绝" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput(false); setRejectReason(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] })), showEditInput && (_jsxs("div", { className: "mt-3 p-3 border border-gov/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.editReasonLabel", { defaultValue: "编辑原因（必填）" }) }), _jsxs("div", { className: "mb-2 text-ink-4 text-[12px] font-mono", children: [t("pages.focus.currentArtifactLabel", { defaultValue: "当前工件" }), ": ", currentArtifactId] }), _jsx("input", { type: "text", value: newArtifactId, onChange: (e) => setNewArtifactId(e.target.value), "data-testid": `edit-new-artifact-${group.principleId}`, placeholder: t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] mb-2 focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov", "aria-label": t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }) }), _jsx("textarea", { value: editReason, onChange: (e) => setEditReason(e.target.value), "data-testid": `edit-reason-${group.principleId}`, placeholder: t("pages.focus.editReasonPlaceholder", { defaultValue: "请说明编辑原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleEdit, disabled: !editReason.trim() || !newArtifactId.trim() || actionLoading, "data-testid": `confirm-edit-${group.principleId}`, className: "inline-flex items-center border border-gov text-gov bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-gov/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmEdit", { defaultValue: "确认编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput(false); setEditReason(""); setNewArtifactId(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] }))] }));
+                    : t("pages.focus.decidedRejected", { defaultValue: "已拒绝" }) })), _jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("span", { className: "inline-flex items-center border border-line rounded-[2px] px-[7px] py-1 font-mono text-[11px] text-ink-3 bg-surface/80 uppercase", children: channelLabel }), isReversible && (_jsx("span", { className: "inline-flex items-center border border-amber/35 text-amber rounded-[2px] px-[7px] py-1 font-mono text-[11px] uppercase", children: primaryChannel === "prompt" ? t("pages.focus.tagReversible") : t("pages.focus.tagLowRisk") }))] }), _jsx("div", { className: "mt-[14px] mb-2 font-semibold text-ink leading-snug", children: displayTitle }), _jsx("div", { className: "mt-2 px-3 py-2 bg-surface/60 border-l-2 border-gov text-ink-3 text-[13px] leading-snug", children: t("pages.focus.evidenceSummary", { count: group.records.length }) }), actionsLocked && (_jsxs("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 p-3", "data-testid": `pending-actions-locked-${group.principleId}`, children: [_jsx("p", { className: "text-ink-2 text-[12.5px] leading-relaxed", children: actionsLockedReason }), _jsx(Link, { to: "/settings", "data-testid": `pending-actions-locked-settings-${group.principleId}`, className: "mt-2 inline-flex items-center border border-line text-ink bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.ownerDecision.goSettingsCta") })] })), decidedOutcome === null && primaryChannel === "prompt" && promptInjection?.truncated === true && (_jsx("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 px-3 py-2 text-[12.5px] text-amber", "data-testid": `approve-queue-badge-${group.principleId}`, children: promptInjection.productionRotates === true && group.fitsPromptBudget === true
+                    ? t("pages.focus.approveQueueBadgeRotation", {
+                        defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。当前按公平轮转选取，新原则会在后续轮次自行轮到，无需停用旧原则。",
+                        used: promptInjection.usedChars,
+                        budget: promptInjection.budget,
+                    })
+                    : promptInjection.productionRotates === true
+                        ? t("pages.focus.approveQueueBadgeOversized", {
+                            defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。这条原则本身已超出注入位上限，轮转也无法让它进入提示词——需要先精简它的内容。",
+                            used: promptInjection.usedChars,
+                            budget: promptInjection.budget,
+                        })
+                        : t("pages.focus.approveQueueBadge", {
+                            defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。",
+                            used: promptInjection.usedChars,
+                            budget: promptInjection.budget,
+                        }) })), _jsxs("div", { className: "flex gap-2 mt-4 flex-wrap items-center", children: [_jsx("button", { type: "button", onClick: handleApprove, disabled: decisionDisabled, "data-testid": `approve-btn-${group.principleId}`, className: "inline-flex items-center border border-gov bg-gov text-paper rounded-[3px] px-[14px] py-[6px] text-[12.5px] font-medium hover:bg-gov-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: actionLoading ? t("common.loading") + "…" : t("pages.focus.approveAction", { defaultValue: "批准" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput((v) => !v); setShowRejectInput(false); }, disabled: decisionDisabled, "data-testid": `edit-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.editAction", { defaultValue: "编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput((v) => !v); setShowEditInput(false); }, disabled: decisionDisabled, "data-testid": `reject-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.rejectAction", { defaultValue: "拒绝" }) }), _jsx(Link, { to: "/evidence", className: "inline-flex items-center text-gov text-[12.5px] hover:underline focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.viewFullChain") })] }), showRejectInput && (_jsxs("div", { className: "mt-3 p-3 border border-danger/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.rejectReasonLabel", { defaultValue: "拒绝原因（必填）" }) }), _jsx("textarea", { value: rejectReason, onChange: (e) => setRejectReason(e.target.value), "data-testid": `reject-reason-${group.principleId}`, placeholder: t("pages.focus.rejectReasonPlaceholder", { defaultValue: "请说明拒绝原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleReject, disabled: !rejectReason.trim() || actionLoading, "data-testid": `confirm-reject-${group.principleId}`, className: "inline-flex items-center border border-danger text-danger bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-danger/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmReject", { defaultValue: "确认拒绝" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput(false); setRejectReason(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] })), showEditInput && (_jsxs("div", { className: "mt-3 p-3 border border-gov/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.editReasonLabel", { defaultValue: "编辑原因（必填）" }) }), _jsxs("div", { className: "mb-2 text-ink-4 text-[12px] font-mono", children: [t("pages.focus.currentArtifactLabel", { defaultValue: "当前工件" }), ": ", currentArtifactId] }), _jsx("input", { type: "text", value: newArtifactId, onChange: (e) => setNewArtifactId(e.target.value), "data-testid": `edit-new-artifact-${group.principleId}`, placeholder: t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] mb-2 focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov", "aria-label": t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }) }), _jsx("textarea", { value: editReason, onChange: (e) => setEditReason(e.target.value), "data-testid": `edit-reason-${group.principleId}`, placeholder: t("pages.focus.editReasonPlaceholder", { defaultValue: "请说明编辑原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleEdit, disabled: !editReason.trim() || !newArtifactId.trim() || actionLoading, "data-testid": `confirm-edit-${group.principleId}`, className: "inline-flex items-center border border-gov text-gov bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-gov/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmEdit", { defaultValue: "确认编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput(false); setEditReason(""); setNewArtifactId(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] }))] }));
 }
 function StagnationSignalCard({ signal }) {
     const { t } = useTranslation();

package/console/dist/ui/pages/focus/focus-validation.js

@@ -54,11 +54,22 @@ function validateApprovalGroup(raw) {
             return null;
         candidateDescription = description;
     }
+    // PRI-935: fitsPromptBudget is optional. ERR-009 discipline — present but
+    // wrong type fails loud; absent stays undefined, which the badge treats as
+    // "unknown size → do not promise rotation".
+    let fitsPromptBudget;
+    if (Object.hasOwn(raw, "fitsPromptBudget")) {
+        const { fitsPromptBudget: fits } = raw;
+        if (typeof fits !== "boolean")
+            return null;
+        fitsPromptBudget = fits;
+    }
     return {
         principleId,
         principleTitle,
         candidateDescription,
         status,
+        fitsPromptBudget,
         records: validRecords,
     };
 }