create-principles-disciple 1.144.14 → 1.144.16

package/_release/product-identity.json

@@ -1,5 +1,5 @@
 {
   "schemaVersion": 1,
   "productVersion": "2.2.0",
-  "sourceCommit": "f3ae780daf77b0c88d1c979603e83ddd9046b2b2"
+  "sourceCommit": "2fd137868a809631a15ad1be09b2c3bfe54e249d"
 }

package/console/dist/server/routes/update-history.d.ts

@@ -32,6 +32,20 @@ export declare function appendUpdateHistory(workspaceDir: string, entry: Omit<Up
  * executor, the initiating Console may be dead when an update reaches a
  * terminal state — the journal is the durable fact, and this derives any
  * missing history entries from it (idempotent by transactionId; append-only).
+ *
+ * PRI-926 truthfulness rules:
+ * - Only journals in the ReleaseManager update domain
+ *   (`isReleaseManagerTransactionId`) are Owner-facing update facts —
+ *   installer/test transactions sharing ~/.pd/transactions/ never synthesize
+ *   rows, and rows previously projected from outside the domain are dropped
+ *   (a wrongly-projected row of this read model, not Owner data).
+ * - A synthesized row carries the journal's own truth: fromVersion from the
+ *   planned line's `preUpdateProductVersion` (absence stays 'unknown' — the
+ *   honest gap for pre-PRI-926 journals, rc-9), and the timestamp of the
+ *   journal's first line, never the scan moment.
+ * - The synthesized id is deterministic (`reconciled-<transactionId>`), so a
+ *   row evicted by the 50-entry cap cannot resurrect under a fresh id; merged
+ *   rows are ordered by fact time.
  */
 export declare function reconcileUpdateHistoryFromJournals(workspaceDir: string, pdHome: string): void;
 export declare function handleUpdateHistoryRoute(req: IncomingMessage, res: ServerResponse, workspaceDir: string, _subPath: string): Promise<void>;

package/console/dist/server/routes/update-history.js

@@ -1,5 +1,6 @@
 import * as fs from 'fs';
 import * as path from 'path';
+import { isReleaseManagerTransactionId } from 'create-principles-disciple/update-console';
 import { sendSuccess, sendMethodNotAllowed } from '../utils/response.js';
 /** Historical authority values remain readable; only ReleaseManager writes new attempts. */
 export const UPDATE_HISTORY_AUTHORITIES = ['release-manager', 'legacy-console-updater'];
@@ -62,6 +63,17 @@ function parseHistoryEntry(value) {
 function getHistoryPath(workspaceDir) {
     return path.join(workspaceDir, '.pd', 'update-history.json');
 }
+/**
+ * PRI-926: sort key for fact-time ordering. History rows span eras and
+ * formats (legacy records, journal `at` values are loosely read), so string
+ * comparison would mis-order mixed shapes like '…00Z' vs '…00.000Z' or
+ * non-UTC offsets — compare parsed instants instead. Unparseable values take
+ * a stable epoch fallback (sort oldest); they are never dropped.
+ */
+function factTimeMs(timestamp) {
+    const ms = Date.parse(timestamp);
+    return Number.isNaN(ms) ? 0 : ms;
+}
 function loadHistory(historyPath) {
     if (fs.existsSync(historyPath)) {
         try {
@@ -106,13 +118,32 @@ export function appendUpdateHistory(workspaceDir, entry) {
  * executor, the initiating Console may be dead when an update reaches a
  * terminal state — the journal is the durable fact, and this derives any
  * missing history entries from it (idempotent by transactionId; append-only).
+ *
+ * PRI-926 truthfulness rules:
+ * - Only journals in the ReleaseManager update domain
+ *   (`isReleaseManagerTransactionId`) are Owner-facing update facts —
+ *   installer/test transactions sharing ~/.pd/transactions/ never synthesize
+ *   rows, and rows previously projected from outside the domain are dropped
+ *   (a wrongly-projected row of this read model, not Owner data).
+ * - A synthesized row carries the journal's own truth: fromVersion from the
+ *   planned line's `preUpdateProductVersion` (absence stays 'unknown' — the
+ *   honest gap for pre-PRI-926 journals, rc-9), and the timestamp of the
+ *   journal's first line, never the scan moment.
+ * - The synthesized id is deterministic (`reconciled-<transactionId>`), so a
+ *   row evicted by the 50-entry cap cannot resurrect under a fresh id; merged
+ *   rows are ordered by fact time.
  */
 export function reconcileUpdateHistoryFromJournals(workspaceDir, pdHome) {
     const transactionsDir = path.join(pdHome, 'transactions');
     if (!fs.existsSync(transactionsDir))
         return;
     const historyPath = getHistoryPath(workspaceDir);
-    const history = loadHistory(historyPath);
+    const loaded = loadHistory(historyPath);
+    // A row WITHOUT a transactionId has no domain evidence either way — realtime
+    // and legacy records stay untouched. A transactionId OUTSIDE the update
+    // domain proves the row was projected from a non-update journal.
+    const history = loaded.filter((entry) => entry.transactionId === undefined || isReleaseManagerTransactionId(entry.transactionId));
+    const changedByCleanup = history.length !== loaded.length;
     const journaledIds = new Set(history
         .filter((entry) => typeof entry.transactionId === 'string' && entry.transactionId.length > 0)
         .map((entry) => entry.transactionId));
@@ -122,47 +153,66 @@ export function reconcileUpdateHistoryFromJournals(workspaceDir, pdHome) {
         failed: { kind: 'failure', success: false, toVersion: 'failed' },
         refused: { kind: 'refusal', success: false, toVersion: '' },
     };
-    let changed = false;
+    let added = 0;
     for (const entry of fs.readdirSync(transactionsDir)) {
         if (!entry.endsWith('.jsonl'))
             continue;
         const transactionId = entry.slice(0, -'.jsonl'.length);
+        if (!isReleaseManagerTransactionId(transactionId))
+            continue;
         if (journaledIds.has(transactionId))
             continue;
         let lastState = null;
         let productVersion = null;
+        let fromVersion = null;
+        let firstAt = null;
         try {
             const raw = fs.readFileSync(path.join(transactionsDir, entry), 'utf-8');
             for (const line of raw.split('\n')) {
                 if (line.trim().length === 0)
                     continue;
-                const { to: transitionTo, productVersion: transitionProductVersion } = JSON.parse(line);
+                const parsed = JSON.parse(line);
+                const { to: transitionTo, productVersion: transitionProductVersion } = parsed;
                 if (typeof transitionTo === 'string')
                     lastState = transitionTo;
                 if (typeof transitionProductVersion === 'string')
                     productVersion = transitionProductVersion;
+                // First-line truth: the planned transition carries the transaction's
+                // moment and the version the update started FROM (PRI-926).
+                if (firstAt === null && typeof parsed.at === 'string' && parsed.at.length > 0)
+                    firstAt = parsed.at;
+                if (fromVersion === null && typeof parsed.preUpdateProductVersion === 'string' && parsed.preUpdateProductVersion.length > 0) {
+                    fromVersion = parsed.preUpdateProductVersion;
+                }
             }
         }
         catch {
             // unreadable journal — recovery diagnostics own that; skip for history
             continue;
         }
-        const mapping = lastState !== null ? terminalKind[lastState] : undefined;
+        // External input indexes a plain-object table — guard with Object.hasOwn
+        // before the lookup (ERR-013: '__proto__' must not resolve a mapping).
+        let mapping;
+        if (lastState !== null && Object.hasOwn(terminalKind, lastState)) {
+            mapping = terminalKind[lastState];
+        }
         if (mapping === undefined)
             continue;
         history.push({
-            fromVersion: 'unknown',
+            fromVersion: fromVersion ?? 'unknown',
             toVersion: mapping.toVersion === '' ? (productVersion ?? 'unknown') : mapping.toVersion,
             success: mapping.success,
             kind: mapping.kind,
             authority: 'release-manager',
             transactionId,
-            id: `update-${Date.now()}-${transactionId.slice(-8)}`,
-            timestamp: new Date().toISOString(),
+            id: `reconciled-${transactionId}`,
+            timestamp: firstAt ?? new Date().toISOString(),
         });
-        changed = true;
+        added += 1;
     }
-    if (changed) {
+    if (added > 0 || changedByCleanup) {
+        // Order by fact time (stable for equal instants), then keep the newest 50.
+        history.sort((a, b) => factTimeMs(a.timestamp) - factTimeMs(b.timestamp));
         if (history.length > 50) {
             history.splice(0, history.length - 50);
         }

package/console/dist/ui/i18n/en.json

@@ -97,6 +97,7 @@
             "evidenceSummary": "Evidence: {{count}} record(s)",
             "untitledCandidate": "Untitled candidate principle",
             "artifactUnavailableNote": "The draft artifact this approval points to is no longer in the artifact store (likely superseded by a newer revision), so its content cannot be shown. If in doubt, reject it; the raw artifact ID is shown in the edit section's current-artifact field.",
+            "unlinkedCandidateNote": "No principle name is available for this card: its lineage cannot be resolved to a principle, and no readable title could be extracted from its stored content. Judge it from the evidence summary below; if you cannot decide, you can reject it.",
             "approveAction": "Approve",
             "rejectAction": "Reject",
             "editAction": "Edit",

package/console/dist/ui/i18n/zh-CN.json

@@ -97,6 +97,7 @@
             "evidenceSummary": "证据：{{count}} 条记录",
             "untitledCandidate": "待命名候选原则",
             "artifactUnavailableNote": "该审批指向的草稿原件已不在工件库中（可能已被新版本取代），内容无法显示。如无法判断，可选择拒绝；原始工件编号可点「编辑」后在「当前工件」一栏查看。",
+            "unlinkedCandidateNote": "这张卡片没有可展示的原则名称：无法把它的血缘解析到某条原则，也没能从其存档内容里提取出可读的标题。请依据下方的证据摘要判断；如无法判断，可选择拒绝。",
             "approveAction": "批准",
             "rejectAction": "拒绝",
             "editAction": "编辑",

package/console/dist/ui/pages/focus/FocusPage.js

@@ -9,7 +9,7 @@ import { SectionTitle } from "../../components/layout/section-title.js";
 import { DailyThoughtCard } from "../../components/focus/daily-thought-card.js";
 import { ShinyText } from "../../components/ui/shiny-text.js";
 import { fetchGovernanceQueue, fetchApprovalsGrouped, approveApproval, rejectApproval, editApproval, fetchAllActivations, fetchOwnerDecisions, } from "../../api.js";
-import { selectApprovalGroupDisplayTitle, validateApprovalsGroupedData } from "./focus-validation.js";
+import { selectApprovalGroupDisplayTitle, showsUnlinkedCandidateNote, validateApprovalsGroupedData } from "./focus-validation.js";
 import { OwnerDecisionCard } from "./OwnerDecisionCard.js";
 import { localizeApprovalWarning, splitApprovalWarnings } from "../../utils/approval-warning-localization.js";
 /** PRI-908: how long the decided card stays visible before the pending list refresh removes it. */
@@ -178,12 +178,12 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
     }
     // Display title: prefer candidateDescription (human-readable) over principleTitle
     // (which falls back to a fabricated principleId when the principle isn't in ledger).
-    // PRI-940: the selection rule lives in focus-validation (contract-tested) —
-    // when the pinned artifact is missing, principleTitle IS the machine id
-    // (`unlinked:<artifactId>`) and must fall through to the untitled copy; the
-    // degradation note below explains why there is no content.
+    // The selection rule and each degradation reason live in focus-validation
+    // (PRI-940 / PRI-941, contract-tested); the mutually exclusive notes below say
+    // why a particular card has no title.
     const displayTitle = selectApprovalGroupDisplayTitle(group)
         ?? t("pages.focus.untitledCandidate", { defaultValue: "待命名候选原则" });
+    const unlinkedCandidateNote = showsUnlinkedCandidateNote(group);
     async function applyDecisionToAllRecords(action, reason) {
         // Only process pending records — skip already-approved/rejected to avoid
         // stable partial failures on mixed-status groups.
@@ -309,7 +309,7 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
                     ? "border-green/40 bg-green/10 text-green"
                     : "border-line bg-surface/80 text-ink-3"}`, role: "status", "data-testid": `decided-banner-${group.principleId}`, children: decidedOutcome === "approved"
                     ? t("pages.focus.decidedApproved", { defaultValue: "已批准 ✓ 正在写入生效记录…" })
-                    : t("pages.focus.decidedRejected", { defaultValue: "已拒绝" }) })), _jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("span", { className: "inline-flex items-center border border-line rounded-[2px] px-[7px] py-1 font-mono text-[11px] text-ink-3 bg-surface/80 uppercase", children: channelLabel }), isReversible && (_jsx("span", { className: "inline-flex items-center border border-amber/35 text-amber rounded-[2px] px-[7px] py-1 font-mono text-[11px] uppercase", children: primaryChannel === "prompt" ? t("pages.focus.tagReversible") : t("pages.focus.tagLowRisk") }))] }), _jsx("div", { className: "mt-[14px] mb-2 font-semibold text-ink leading-snug", children: displayTitle }), group.artifactUnavailable === true && (_jsx("div", { className: "mb-2 text-[12.5px] leading-relaxed text-amber", "data-testid": `artifact-unavailable-${group.principleId}`, children: t("pages.focus.artifactUnavailableNote") })), _jsx("div", { className: "mt-2 px-3 py-2 bg-surface/60 border-l-2 border-gov text-ink-3 text-[13px] leading-snug", children: t("pages.focus.evidenceSummary", { count: group.records.length }) }), actionsLocked && (_jsxs("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 p-3", "data-testid": `pending-actions-locked-${group.principleId}`, children: [_jsx("p", { className: "text-ink-2 text-[12.5px] leading-relaxed", children: actionsLockedReason }), _jsx(Link, { to: "/settings", "data-testid": `pending-actions-locked-settings-${group.principleId}`, className: "mt-2 inline-flex items-center border border-line text-ink bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.ownerDecision.goSettingsCta") })] })), decidedOutcome === null && primaryChannel === "prompt" && promptInjection?.truncated === true && (_jsx("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 px-3 py-2 text-[12.5px] text-amber", "data-testid": `approve-queue-badge-${group.principleId}`, children: promptInjection.productionRotates === true && group.fitsPromptBudget === true
+                    : t("pages.focus.decidedRejected", { defaultValue: "已拒绝" }) })), _jsxs("div", { className: "flex items-center gap-2 flex-wrap", children: [_jsx("span", { className: "inline-flex items-center border border-line rounded-[2px] px-[7px] py-1 font-mono text-[11px] text-ink-3 bg-surface/80 uppercase", children: channelLabel }), isReversible && (_jsx("span", { className: "inline-flex items-center border border-amber/35 text-amber rounded-[2px] px-[7px] py-1 font-mono text-[11px] uppercase", children: primaryChannel === "prompt" ? t("pages.focus.tagReversible") : t("pages.focus.tagLowRisk") }))] }), _jsx("div", { className: "mt-[14px] mb-2 font-semibold text-ink leading-snug", children: displayTitle }), group.artifactUnavailable === true && (_jsx("div", { className: "mb-2 text-[12.5px] leading-relaxed text-amber", "data-testid": `artifact-unavailable-${group.principleId}`, children: t("pages.focus.artifactUnavailableNote") })), unlinkedCandidateNote && (_jsx("div", { className: "mb-2 text-[12.5px] leading-relaxed text-amber", "data-testid": `unlinked-candidate-${group.principleId}`, children: t("pages.focus.unlinkedCandidateNote") })), _jsx("div", { className: "mt-2 px-3 py-2 bg-surface/60 border-l-2 border-gov text-ink-3 text-[13px] leading-snug", children: t("pages.focus.evidenceSummary", { count: group.records.length }) }), actionsLocked && (_jsxs("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 p-3", "data-testid": `pending-actions-locked-${group.principleId}`, children: [_jsx("p", { className: "text-ink-2 text-[12.5px] leading-relaxed", children: actionsLockedReason }), _jsx(Link, { to: "/settings", "data-testid": `pending-actions-locked-settings-${group.principleId}`, className: "mt-2 inline-flex items-center border border-line text-ink bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.ownerDecision.goSettingsCta") })] })), decidedOutcome === null && primaryChannel === "prompt" && promptInjection?.truncated === true && (_jsx("div", { className: "mt-3 rounded-[3px] border border-amber/40 bg-amber/5 px-3 py-2 text-[12.5px] text-amber", "data-testid": `approve-queue-badge-${group.principleId}`, children: promptInjection.productionRotates === true && group.fitsPromptBudget === true
                     ? t("pages.focus.approveQueueBadgeRotation", {
                         defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。当前按公平轮转选取，新原则会在后续轮次自行轮到，无需停用旧原则。",
                         used: promptInjection.usedChars,
@@ -325,7 +325,7 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
                             defaultValue: "批准后可能排队：提示词注入位已满（{{used}}/{{budget}} 字符）。",
                             used: promptInjection.usedChars,
                             budget: promptInjection.budget,
-                        }) })), _jsxs("div", { className: "flex gap-2 mt-4 flex-wrap items-center", children: [_jsx("button", { type: "button", onClick: handleApprove, disabled: decisionDisabled, "data-testid": `approve-btn-${group.principleId}`, className: "inline-flex items-center border border-gov bg-gov text-paper rounded-[3px] px-[14px] py-[6px] text-[12.5px] font-medium hover:bg-gov-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: actionLoading ? t("common.loading") + "…" : t("pages.focus.approveAction", { defaultValue: "批准" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput((v) => !v); setShowRejectInput(false); }, disabled: decisionDisabled, "data-testid": `edit-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.editAction", { defaultValue: "编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput((v) => !v); setShowEditInput(false); }, disabled: decisionDisabled, "data-testid": `reject-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.rejectAction", { defaultValue: "拒绝" }) }), _jsx(Link, { to: "/evidence", className: "inline-flex items-center text-gov text-[12.5px] hover:underline focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.viewFullChain") })] }), showRejectInput && (_jsxs("div", { className: "mt-3 p-3 border border-danger/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.rejectReasonLabel", { defaultValue: "拒绝原因（必填）" }) }), _jsx("textarea", { value: rejectReason, onChange: (e) => setRejectReason(e.target.value), "data-testid": `reject-reason-${group.principleId}`, placeholder: t("pages.focus.rejectReasonPlaceholder", { defaultValue: "请说明拒绝原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleReject, disabled: !rejectReason.trim() || actionLoading, "data-testid": `confirm-reject-${group.principleId}`, className: "inline-flex items-center border border-danger text-danger bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-danger/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmReject", { defaultValue: "确认拒绝" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput(false); setRejectReason(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] })), showEditInput && (_jsxs("div", { className: "mt-3 p-3 border border-gov/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.editReasonLabel", { defaultValue: "编辑原因（必填）" }) }), _jsxs("div", { className: "mb-2 text-ink-4 text-[12px] font-mono", children: [t("pages.focus.currentArtifactLabel", { defaultValue: "当前工件" }), ": ", currentArtifactId] }), _jsx("input", { type: "text", value: newArtifactId, onChange: (e) => setNewArtifactId(e.target.value), "data-testid": `edit-new-artifact-${group.principleId}`, placeholder: t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] mb-2 focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov", "aria-label": t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }) }), _jsx("textarea", { value: editReason, onChange: (e) => setEditReason(e.target.value), "data-testid": `edit-reason-${group.principleId}`, placeholder: t("pages.focus.editReasonPlaceholder", { defaultValue: "请说明编辑原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleEdit, disabled: !editReason.trim() || !newArtifactId.trim() || actionLoading, "data-testid": `confirm-edit-${group.principleId}`, className: "inline-flex items-center border border-gov text-gov bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-gov/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmEdit", { defaultValue: "确认编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput(false); setEditReason(""); setNewArtifactId(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] }))] }));
+                        }) })), _jsxs("div", { className: "flex gap-2 mt-4 flex-wrap items-center", children: [_jsx("button", { type: "button", onClick: handleApprove, disabled: decisionDisabled, "data-testid": `approve-btn-${group.principleId}`, className: "inline-flex items-center border border-gov bg-gov text-paper rounded-[3px] px-[14px] py-[6px] text-[12.5px] font-medium hover:bg-gov-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: actionLoading ? t("common.loading") + "…" : t("pages.focus.approveAction", { defaultValue: "批准" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput((v) => !v); setShowRejectInput(false); }, disabled: decisionDisabled, "data-testid": `edit-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.editAction", { defaultValue: "编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput((v) => !v); setShowEditInput(false); }, disabled: decisionDisabled, "data-testid": `reject-btn-${group.principleId}`, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors disabled:opacity-50 disabled:cursor-not-allowed focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.rejectAction", { defaultValue: "拒绝" }) }), _jsx(Link, { to: "/pain", className: "inline-flex items-center text-gov text-[12.5px] hover:underline focus-visible:outline-2 focus-visible:outline-gov focus-visible:outline-offset-2", children: t("pages.focus.viewFullChain") })] }), showRejectInput && (_jsxs("div", { className: "mt-3 p-3 border border-danger/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.rejectReasonLabel", { defaultValue: "拒绝原因（必填）" }) }), _jsx("textarea", { value: rejectReason, onChange: (e) => setRejectReason(e.target.value), "data-testid": `reject-reason-${group.principleId}`, placeholder: t("pages.focus.rejectReasonPlaceholder", { defaultValue: "请说明拒绝原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleReject, disabled: !rejectReason.trim() || actionLoading, "data-testid": `confirm-reject-${group.principleId}`, className: "inline-flex items-center border border-danger text-danger bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-danger/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmReject", { defaultValue: "确认拒绝" }) }), _jsx("button", { type: "button", onClick: () => { setShowRejectInput(false); setRejectReason(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] })), showEditInput && (_jsxs("div", { className: "mt-3 p-3 border border-gov/20 rounded-[var(--radius-md)]", children: [_jsx("label", { className: "block font-mono text-[11px] uppercase tracking-[0.08em] text-ink-3 mb-2", children: t("pages.focus.editReasonLabel", { defaultValue: "编辑原因（必填）" }) }), _jsxs("div", { className: "mb-2 text-ink-4 text-[12px] font-mono", children: [t("pages.focus.currentArtifactLabel", { defaultValue: "当前工件" }), ": ", currentArtifactId] }), _jsx("input", { type: "text", value: newArtifactId, onChange: (e) => setNewArtifactId(e.target.value), "data-testid": `edit-new-artifact-${group.principleId}`, placeholder: t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] mb-2 focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov", "aria-label": t("pages.focus.editNewArtifactPlaceholder", { defaultValue: "输入新的已验证工件 ID" }) }), _jsx("textarea", { value: editReason, onChange: (e) => setEditReason(e.target.value), "data-testid": `edit-reason-${group.principleId}`, placeholder: t("pages.focus.editReasonPlaceholder", { defaultValue: "请说明编辑原因" }), className: "w-full border border-line rounded-[var(--radius-md)] bg-surface text-ink px-3 py-2 text-[13px] min-h-[80px] resize-y focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov" }), _jsxs("div", { className: "flex gap-2 mt-2", children: [_jsx("button", { type: "button", onClick: handleEdit, disabled: !editReason.trim() || !newArtifactId.trim() || actionLoading, "data-testid": `confirm-edit-${group.principleId}`, className: "inline-flex items-center border border-gov text-gov bg-surface rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:bg-gov/5 transition-colors disabled:opacity-50 disabled:cursor-not-allowed", children: t("pages.focus.confirmEdit", { defaultValue: "确认编辑" }) }), _jsx("button", { type: "button", onClick: () => { setShowEditInput(false); setEditReason(""); setNewArtifactId(""); }, className: "inline-flex items-center border border-line bg-surface text-ink rounded-[3px] px-[14px] py-[6px] text-[12.5px] hover:border-line-2 transition-colors", children: t("pages.focus.cancelAction", { defaultValue: "取消" }) })] })] }))] }));
 }
 function StagnationSignalCard({ signal }) {
     const { t } = useTranslation();

package/console/dist/ui/pages/focus/focus-validation.d.ts

@@ -15,5 +15,26 @@ export declare function validateApprovalsGroupedData(raw: unknown): ApprovalsGro
  * revision rendered `unlinked:pi-art-scribe-…` on the card). Returns undefined
  * for that case so the caller falls back to the localized untitled copy; the
  * degradation itself is explained by the artifactUnavailable note, not here.
+ *
+ * PRI-941 closes the second path to the same key: the artifact row exists, so
+ * `artifactUnavailable` is never set, yet it yields no description and its
+ * lineage still cannot be resolved. The grouping key — and therefore
+ * `principleTitle` — is the machine id either way, so the prefix check guards
+ * the render rule itself instead of relying on one producer's flag.
+ *
+ * What this predicate cannot catch: the prefix only marks unresolved lineage.
+ * When the ledger read fails, groups whose lineage DID resolve fall back to a
+ * bare principle UUID (`principleTitles.get(id) ?? id`), which renders as a
+ * machine id with no note — recorded as a follow-up, not papered over here.
  */
 export declare function selectApprovalGroupDisplayTitle(group: Pick<ApprovalGroup, "candidateDescription" | "principleTitle" | "artifactUnavailable">): string | undefined;
+/**
+ * PRI-941: an untitled card must say why (rc-9 — degradation may not be silent).
+ * The artifactUnavailable copy already covers "the draft artifact is gone"; this
+ * is the other reason the title ends up empty: the artifact row exists but
+ * yields no description, and its grouping key never resolved to a principle.
+ * Derived from the title rule itself so the note can never contradict a title
+ * the card actually managed to show — a candidate whose description extracted
+ * fine keeps its title and gets no warning.
+ */
+export declare function showsUnlinkedCandidateNote(group: Pick<ApprovalGroup, "candidateDescription" | "principleTitle" | "artifactUnavailable">): boolean;

package/console/dist/ui/pages/focus/focus-validation.js

@@ -112,6 +112,16 @@ export function validateApprovalsGroupedData(raw) {
         promptInjection: validatePromptInjectionBudgetStatus(raw.promptInjection) ?? undefined,
     };
 }
+/**
+ * The server synthesizes this grouping key when an approval's lineage cannot be
+ * resolved (`ApprovalsGroupedConsoleModel`: `unlinked:${artifactId}`). It is an
+ * internal identifier, never Owner copy.
+ */
+const UNLINKED_GROUPING_KEY_PREFIX = "unlinked:";
+/** True when a title is the synthesized grouping key rather than a real name. */
+function isUnlinkedSyntheticPrincipleTitle(title) {
+    return title.startsWith(UNLINKED_GROUPING_KEY_PREFIX);
+}
 /**
  * PRI-940: which string may the pending-review card render as its title.
  *
@@ -121,6 +131,17 @@ export function validateApprovalsGroupedData(raw) {
  * revision rendered `unlinked:pi-art-scribe-…` on the card). Returns undefined
  * for that case so the caller falls back to the localized untitled copy; the
  * degradation itself is explained by the artifactUnavailable note, not here.
+ *
+ * PRI-941 closes the second path to the same key: the artifact row exists, so
+ * `artifactUnavailable` is never set, yet it yields no description and its
+ * lineage still cannot be resolved. The grouping key — and therefore
+ * `principleTitle` — is the machine id either way, so the prefix check guards
+ * the render rule itself instead of relying on one producer's flag.
+ *
+ * What this predicate cannot catch: the prefix only marks unresolved lineage.
+ * When the ledger read fails, groups whose lineage DID resolve fall back to a
+ * bare principle UUID (`principleTitles.get(id) ?? id`), which renders as a
+ * machine id with no note — recorded as a follow-up, not papered over here.
  */
 export function selectApprovalGroupDisplayTitle(group) {
     if (group.candidateDescription !== undefined && group.candidateDescription !== "") {
@@ -128,5 +149,20 @@ export function selectApprovalGroupDisplayTitle(group) {
     }
     if (group.artifactUnavailable === true)
         return undefined;
-    return group.principleTitle;
+    return isUnlinkedSyntheticPrincipleTitle(group.principleTitle) ? undefined : group.principleTitle;
+}
+/**
+ * PRI-941: an untitled card must say why (rc-9 — degradation may not be silent).
+ * The artifactUnavailable copy already covers "the draft artifact is gone"; this
+ * is the other reason the title ends up empty: the artifact row exists but
+ * yields no description, and its grouping key never resolved to a principle.
+ * Derived from the title rule itself so the note can never contradict a title
+ * the card actually managed to show — a candidate whose description extracted
+ * fine keeps its title and gets no warning.
+ */
+export function showsUnlinkedCandidateNote(group) {
+    if (group.artifactUnavailable === true)
+        return false;
+    return (isUnlinkedSyntheticPrincipleTitle(group.principleTitle)
+        && selectApprovalGroupDisplayTitle(group) === undefined);
 }

package/console/dist/ui/pages/principles/PrincipleDetailPage.js

@@ -440,7 +440,7 @@ export function PrincipleDetailPage() {
                                                 }
                                             }, className: "font-mono text-[11px] h-7", children: evidenceCopied
                                                 ? t("principles.detail.evidenceCopied", { defaultValue: "已复制" })
-                                                : t("principles.detail.copyEvidenceId", { defaultValue: "复制证据 ID" }) }), _jsx("button", { type: "button", onClick: () => setEvidenceExpanded((v) => !v), className: "font-mono text-[11px] text-ink-4 hover:text-ink-3 transition-colors underline-offset-2 hover:underline", children: t("principles.detail.expandTechDetails", { defaultValue: "展开技术细节" }) }), _jsx(Link, { to: "/evidence", className: "font-mono text-[11px] text-gov hover:underline transition-colors", children: t("principles.detail.viewEvidenceChain", { defaultValue: "在证据链页查看 →" }) })] }), evidenceExpanded && (_jsx("div", { className: "mt-3 p-3 bg-paper-2 border border-line rounded-[var(--radius-sm)]", children: _jsx("div", { className: "grid grid-cols-[auto 1fr] gap-x-4 gap-y-2 text-[13px]", children: principle.derivedFromPainIds.map((painId, idx) => (_jsxs("div", { className: "contents", children: [_jsx("span", { className: "font-mono text-ink-4", children: t("principles.detail.evidenceIdLabel", {
+                                                : t("principles.detail.copyEvidenceId", { defaultValue: "复制证据 ID" }) }), _jsx("button", { type: "button", onClick: () => setEvidenceExpanded((v) => !v), className: "font-mono text-[11px] text-ink-4 hover:text-ink-3 transition-colors underline-offset-2 hover:underline", children: t("principles.detail.expandTechDetails", { defaultValue: "展开技术细节" }) }), _jsx(Link, { to: "/pain", className: "font-mono text-[11px] text-gov hover:underline transition-colors", children: t("principles.detail.viewEvidenceChain", { defaultValue: "在证据链页查看 →" }) })] }), evidenceExpanded && (_jsx("div", { className: "mt-3 p-3 bg-paper-2 border border-line rounded-[var(--radius-sm)]", children: _jsx("div", { className: "grid grid-cols-[auto 1fr] gap-x-4 gap-y-2 text-[13px]", children: principle.derivedFromPainIds.map((painId, idx) => (_jsxs("div", { className: "contents", children: [_jsx("span", { className: "font-mono text-ink-4", children: t("principles.detail.evidenceIdLabel", {
                                                         defaultValue: "证据 {{n}} ID",
                                                         n: idx + 1,
                                                     }) }), _jsx("span", { className: "font-mono text-ink-2 break-all", children: painId })] }, `${painId}-${idx}`))) }) }))] }))] }), _jsxs("section", { className: "mb-8 border-t border-line pt-6", children: [_jsx(SectionTitle, { children: t("principles.detail.ownerReflection") }), _jsxs("div", { className: "space-y-3", children: [_jsx("div", { className: "border-l-2 border-l-gov pl-3 text-ink-2 text-[13px] leading-relaxed", children: t("principles.detail.reflectionQ1") }), _jsx("div", { className: "border-l-2 border-l-gov pl-3 text-ink-2 text-[13px] leading-relaxed", children: t("principles.detail.reflectionQ2") }), _jsx("div", { className: "border-l-2 border-l-gov pl-3 text-ink-2 text-[13px] leading-relaxed", children: t("principles.detail.reflectionQ3") })] })] }), _jsxs("details", { className: "mb-8 border border-line rounded-[var(--radius-md)]", children: [_jsx("summary", { className: "px-4 py-3 cursor-pointer font-mono text-[11px] uppercase tracking-[0.1em] text-ink-3 hover:text-ink focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-gov", children: t("principles.detail.trajectory") }), _jsxs("div", { className: "px-4 pb-4 border-t border-line pt-4", children: [governance !== null && (_jsxs("section", { className: "mb-6", "data-testid": "governance-timeline", children: [_jsx(SectionTitle, { children: t('principles.detail.governance.timeline') }), governance.timeline.length === 0 ? _jsx("p", { className: "text-[13px] text-ink-4", children: t('principles.detail.governance.timelineEmpty') }) : (_jsx("ol", { className: "space-y-3 border-l border-line pl-4", children: governance.timeline.map((event, index) => {