create-principles-disciple 1.145.1 → 1.145.3

package/host-runtime/dist/internalization-consumer-cycle.js

@@ -23,7 +23,7 @@
 import { createRuntimeStateHandle, InternalizationOrchestrator, DreamerRunner, PhilosopherRunner, ScribeRunner, ArtificerRunner, buildArtificerHostSemanticContext, EvaluatorRunner, RolloutReviewerRunner, DefaultDreamerValidator, DefaultPhilosopherValidator, DefaultScribeValidator, DefaultArtificerValidator, DefaultEvaluatorValidator, DefaultRolloutReviewerValidator, PiAiRuntimeAdapter, L2AgentLoopAdapter, ArtificerL2Adapter, buildL2PrincipleReaderFromLedger, OpenClawCliRuntimeAdapter, storeEmitter, createProductionGateDeps, resolveRuntimeConfigFromPdConfig, resolveRuntimeConfigForAgent, AGENT_NAME_FOR_TASK_KIND, isRuntimeConfigError, computeConsumerDecision, FULL_CHAIN_CONSUMER_RUNNER_KINDS, DEFAULT_CONSUMER_RUNNER_KINDS, InternalizationQueueReadModel, MVP_CORE_TASK_KINDS, SqliteConnection, SqliteReconciliationCursorStore, SUCCEEDED_TRANSITIONS_SCOPE, PrincipleTreeLedgerAdapter, 
 // PRI-714: resolve outputLanguage from the same effective config the
 // runners already receive (EP-07: canonical resolved value, not raw input).
-resolveOutputLanguage, } from '@principles/core/runtime-v2';
+resolveOutputLanguage, hydratePITaskRecord, preflightArtificerOwnerEvidence, } from '@principles/core/runtime-v2';
 import { loadLedger } from '@principles/core/principle-tree-ledger';
 import { loadPdConfigForPlugin, loadFeatureFlagFromConfig } from './pd-config.js';
 import { createEvaluatorRepairDeps, createRolloutGovernanceDeps } from './internalization-consumer-governance.js';
@@ -296,6 +296,22 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
         // without touching leases, idempotency, dependency order, or the
         // single-task-per-cycle semantics. Ties keep the original priority order.
         const orderedRunnerKinds = orderKindsByOldestReadyStage(decision.runnerKinds, snapshot.readyTasks);
+        // PRI-634 A3: workspace-scoped telemetry sink. Constructed here (per-wake,
+        // workspaceDir in scope) so events from THIS workspace's runners are
+        // attributable to THIS workspace — a global subscriber on the storeEmitter
+        // singleton cannot (multi-workspace isolation, see
+        // workspace-telemetry-emitter.ts). Persist failures degrade through the
+        // host's structured event port, never break the runner.
+        // PRI-795 review P1: shared by the EvaluatorRunner AND the ArtificerL2
+        // adapter so `artificer_l2_complete` evidence (abortOwner/budget/elapsed/
+        // stopReason/tokenUsage) persists durably instead of vanishing with the
+        // process (the EP002-R3 "nothing recoverable after a failure" class).
+        const workspaceEmitter = new WorkspaceTelemetryEmitter(storeEmitter, workspaceDir, (detail) => {
+            emitEvent('WORKSPACE_TELEMETRY_PERSIST_FAILED', detail);
+        });
+        let artificerEvidence = null;
+        let authoritativeChannel = null;
+        let preflightSkipReason;
         for (const kind of orderedRunnerKinds) {
             const agentName = AGENT_NAME_FOR_TASK_KIND[kind];
             if (agentName === undefined) {
@@ -327,6 +343,109 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             }
             const candidate = await orchestrator.wakeOnce(kind);
             if (candidate.decision === 'would_lease') {
+                // PRI-982 (SPEC-PD-IAER-001 §4.2 / FR-02): authoritative channel routing
+                // for artificer tasks. The channel is written deterministically by the
+                // intake bridge at seed time (pi_metadata.channel — the SINGLE authority,
+                // inherited along the chain) and is read from the leased task's hydrated
+                // metadata here; the cycle NEVER guesses it from task names or model text.
+                //   - code_tool_hook → RuleCode sub-chain: evidence preflight FIRST, then
+                //     L2 (flag permitting) with the assembled pack injected;
+                //   - prompt → the legal non-L2 pipeline (PiAi), evidence-exempt
+                //     (production: 40 successes on that pipeline);
+                //   - unresolvable → refuse to guess: observable skip, no run (T08).
+                const leasedTaskForChannel = await stateManager.getTask(candidate.taskId);
+                const leasedPiTask = leasedTaskForChannel ? hydratePITaskRecord(leasedTaskForChannel) : null;
+                authoritativeChannel = leasedPiTask?.channel ?? null;
+                if (candidate.taskKind === 'artificer') {
+                    if (authoritativeChannel === null || leasedPiTask === null) {
+                        // Defensive: wakeOnce never leases non-hydratable tasks, so reaching
+                        // here means the metadata corrupted between wake and read. Fail closed
+                        // — never route an artificer task without an authoritative channel.
+                        const channelInfo = JSON.stringify({
+                            reason: 'artificer_channel_unresolvable',
+                            taskId: candidate.taskId,
+                            nextAction: 'Inspect and repair the task metadata (pi_metadata.channel); the consumer refuses to route an artificer task without an authoritative channel (SPEC-PD-IAER-001 §4.2, T08).',
+                        });
+                        emitEvent('INTERNALIZATION_CONSUMER_SKIP', channelInfo);
+                        logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: authoritative channel unresolvable.`);
+                        preflightSkipReason = 'artificer_channel_unresolvable';
+                        continue;
+                    }
+                    if (authoritativeChannel === 'code_tool_hook') {
+                        // Capability OFF must block generation, not merely select L1.
+                        if (!loadFeatureFlagFromConfig(workspaceDir, 'code_rule_capability').enabled) {
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', JSON.stringify({
+                                reason: 'code_rule_capability_disabled',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: 'Owner must enable code_rule_capability before Code Rule generation.',
+                            }));
+                            logger.warn('[PD:' + logLabel + '] Code Rule task ' + candidate.taskId + ' paused: capability disabled.');
+                            preflightSkipReason = 'code_rule_capability_disabled';
+                            continue;
+                        }
+                        artificerEvidence = await preflightArtificerOwnerEvidence({
+                            taskId: candidate.taskId,
+                            piTask: leasedPiTask,
+                            owner,
+                            workspaceDir, // FR-08 run-correlation telemetry (PRI-984)
+                            stateManager,
+                            eventEmitter: workspaceEmitter,
+                            behaviorEvidence: ports.behaviorEvidence,
+                        });
+                        if (artificerEvidence.decision === 'evidence_source_unavailable') {
+                            // SPEC §6.2: a host assembly gap is NOT "Owner has not labeled".
+                            // The task stays pending (re-observable next cycle, zero model
+                            // cost); the runner is never constructed evidence-less.
+                            const gapInfo = JSON.stringify({
+                                reason: 'evidence_source_unavailable',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: 'Host must wire the behaviorEvidence port (BehaviorExamplePackAssembler) into the consumer cycle ports; the task stays pending until then.',
+                            });
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', gapInfo);
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: evidence source unavailable (host must wire the behaviorEvidence port).`);
+                            preflightSkipReason = 'evidence_source_unavailable';
+                            continue;
+                        }
+                        if (artificerEvidence.decision === 'evidence_source_error') {
+                            // PRI-980 review P2-1 — SPEC §6.2 case 3: a trajectory-store I/O
+                            // fault is preserved AS a storage fault. Same family as the absent
+                            // port: the task stays wake-eligible (the next cycle retries the
+                            // assembly at zero model cost), the runner is never constructed,
+                            // and the preflight already emitted the structured degradation
+                            // telemetry (reason=evidence_source_error, reviewPersisted=false).
+                            const storageInfo = JSON.stringify({
+                                reason: 'evidence_source_error',
+                                taskId: candidate.taskId,
+                                taskKind: candidate.taskKind,
+                                nextAction: artificerEvidence.nextAction,
+                                ...(artificerEvidence.detail !== undefined ? { detail: artificerEvidence.detail } : {}),
+                            });
+                            emitEvent('INTERNALIZATION_CONSUMER_SKIP', storageInfo);
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} skipped: evidence source error (storage fault preserved; task stays wake-eligible).`);
+                            preflightSkipReason = 'evidence_source_error';
+                            continue;
+                        }
+                        if (artificerEvidence.decision === 'blocked') {
+                            // FR-04: the preflight already moved the task atomically into
+                            // needs_human_review — outside the wake scan (pending/retry_wait
+                            // only), so it is never auto-rewoken (FR-05/T02). reviewPersisted
+                            // = false means a concurrent writer won the CAS; still no run.
+                            emitEvent('INTERNALIZATION_CONSUMER_EVIDENCE_BLOCKED', JSON.stringify({
+                                taskId: candidate.taskId,
+                                reasonCode: artificerEvidence.reasonCode,
+                                nextAction: artificerEvidence.nextAction,
+                                ...(artificerEvidence.missingFields !== undefined ? { missingFields: [...artificerEvidence.missingFields] } : {}),
+                                ...(artificerEvidence.detail !== undefined ? { detail: artificerEvidence.detail } : {}),
+                                reviewPersisted: artificerEvidence.reviewPersisted,
+                            }));
+                            logger.warn(`[PD:${logLabel}] Artificer task ${candidate.taskId} blocked on Owner evidence (${artificerEvidence.reasonCode}, reviewPersisted=${artificerEvidence.reviewPersisted}).`);
+                            preflightSkipReason = 'artificer_blocked_on_owner_evidence';
+                            continue;
+                        }
+                    }
+                }
                 wakeResult = candidate;
                 taskRuntimeConfig = kindRuntime;
                 break;
@@ -337,6 +456,10 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             lastSkipReason = candidate.decision === 'no_ready_tasks' ? candidate.reason : undefined;
         }
         if (!wakeResult || taskRuntimeConfig === null) {
+            if (preflightSkipReason !== undefined) {
+                lastSkipDecision = preflightSkipReason;
+                lastSkipReason = undefined;
+            }
             // A: 预算由周期 finally 统一执行 (每周期恰一次,含 backlog 场景)
             const skipPayload = { decision: lastSkipDecision };
             if (lastSkipReason) {
@@ -349,19 +472,6 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
         // PRI-719: everything downstream reads the LEASED TASK's resolved config —
         // the kind-specific profile, not the shared gate resolution.
         const taskRuntimeKind = taskRuntimeConfig.runtimeKind;
-        // PRI-634 A3: workspace-scoped telemetry sink. Constructed here (per-wake,
-        // workspaceDir in scope) so events from THIS workspace's runners are
-        // attributable to THIS workspace — a global subscriber on the storeEmitter
-        // singleton cannot (multi-workspace isolation, see
-        // workspace-telemetry-emitter.ts). Persist failures degrade through the
-        // host's structured event port, never break the runner.
-        // PRI-795 review P1: shared by the EvaluatorRunner AND the ArtificerL2
-        // adapter so `artificer_l2_complete` evidence (abortOwner/budget/elapsed/
-        // stopReason/tokenUsage) persists durably instead of vanishing with the
-        // process (the EP002-R3 "nothing recoverable after a failure" class).
-        const workspaceEmitter = new WorkspaceTelemetryEmitter(storeEmitter, workspaceDir, (detail) => {
-            emitEvent('WORKSPACE_TELEMETRY_PERSIST_FAILED', detail);
-        });
         let adapter;
         if (taskRuntimeKind === 'pi-ai') {
             // PRI-419: when l2_dreamer flag is on AND this is a dreamer task, route
@@ -372,9 +482,15 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
             // so the model can self-iterate before submitting. Honors the
             // code_rule_capability emergency-disable flag (PR #1661 CodeRabbit P1).
             const codeRuleFlag = loadFeatureFlagFromConfig(workspaceDir, 'code_rule_capability');
+            // PRI-982 (SPEC-PD-IAER-001 §4.2): the authoritative TARGET CHANNEL is
+            // part of the L2 selection — `pi_metadata.channel === 'code_tool_hook'`
+            // (the seed-time bridge authority). prompt-channel artificer tasks are
+            // misroutes on L2 (production: 54 failures) and keep the legal non-L2
+            // PiAi pipeline below; unresolvable channels never enter L2.
             if (wakeResult.taskKind === 'artificer'
                 && taskRuntimeKind === 'pi-ai'
-                && codeRuleFlag.enabled) {
+                && codeRuleFlag.enabled
+                && authoritativeChannel === 'code_tool_hook') {
                 adapter = new ArtificerL2Adapter({
                     // Profile readiness check guarantees these are non-undefined for
                     // pi-ai runtime kind (validatePdLocalProfile enforces provider/model/apiKeyEnv).
@@ -518,7 +634,16 @@ export async function runInternalizationConsumerCycle(workspaceDir, ports) {
                 }, runnerOptions);
                 break;
             case 'artificer':
-                runner = new ArtificerRunner({ stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultArtificerValidator() }, 
+                runner = new ArtificerRunner({
+                    stateManager, runtimeAdapter: adapter, eventEmitter: storeEmitter, artifactStore: stateManager.piArtifactStore, validator: new DefaultArtificerValidator(),
+                    // PRI-982 (SPEC-PD-IAER-001 FR-02): the preflight-assembled Owner
+                    // evidence pack — present only when the authoritative channel is
+                    // code_tool_hook AND the readiness gate returned ready (same
+                    // ArtificerRunnerDeps shape as the run-rulehost CLI pipeline).
+                    ...(artificerEvidence !== null && artificerEvidence.decision === 'ready'
+                        ? { behaviorExamplePack: artificerEvidence.pack }
+                        : {}),
+                }, 
                 // PRI-741: thread the host semantic projection into generation.
                 { ...runnerOptions, ...(artificerHostSemanticContext !== undefined ? { hostSemanticContext: artificerHostSemanticContext } : {}) });
                 break;

package/host-runtime/dist/workspace-telemetry-emitter.js

@@ -25,6 +25,14 @@ import { StoreEventEmitter } from '@principles/core/runtime-v2';
  *   - artificer_l2_complete（PRI-795 review P1：Artificer L2 的 completion
  *     证据 — abortOwner/budgetMs/elapsedMs/stopReason/tokenUsage — 必须
  *     crash 前落盘，否则 EP002-R3 的「失败后什么都查不到」重演）
+ *   - artificer_blocked_on_owner_evidence（PRI-982 / SPEC-PD-IAER-001
+ *     FR-04：consumer evidence preflight 把任务原子转入 needs_human_review
+ *     时的 Owner 恢复证据 — 稳定 reasonCode + nextAction + reviewPersisted。
+ *     与 artificer_l2_complete 同理必须 crash 前落盘：进程内 storeEmitter
+ *     生产装配零订阅者，事件丢失会让 NHR 任务变成「为什么被挡」的无头案
+ *     （EP002-R3 类）。注意 readiness_checked 刻意不入列：它对每个 gate
+ *     verdict 都发（含 ready），落盘会形成高频第二日志；blocked 才是
+ *     Owner 必须能事后取证的判定点）
  *   - reuse_gate_triggered（PRI-939 Option A：Reuse Review Gate 挂起观察，
  *     Owner 复用闭环的入口证据）
  *   - reuse_evaluation_unavailable（PRI-939 Option A：语义评估降级信号 —
@@ -44,6 +52,11 @@ const CRITICAL_EVENT_ALLOWLIST = new Set([
     'evaluator_rule_assembled',
     'evaluator_rule_assembly_failed',
     'artificer_l2_complete',
+    // PRI-982 (SPEC-PD-IAER-001 FR-04): Owner-recovery evidence for a task the
+    // consumer evidence preflight just blocked into needs_human_review — stable
+    // reasonCode + nextAction must survive a crash (same EP002-R3 class as
+    // artificer_l2_complete above; justification in the header comment).
+    'artificer_blocked_on_owner_evidence',
     'reuse_gate_triggered',
     'reuse_evaluation_unavailable',
 ]);

package/host-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-principles-disciple",
-  "version": "1.145.1",
+  "version": "1.145.3",
   "description": "Interactive CLI installer for Principles Disciple OpenClaw plugin",
   "type": "module",
   "bin": {
@@ -89,6 +89,6 @@
     "directory": "packages/create-principles-disciple"
   },
   "pd": {
-    "bundledPluginVersion": "2.1.4"
+    "bundledPluginVersion": "2.1.5"
   }
 }

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.d.ts

@@ -0,0 +1,44 @@
+/**
+ * pd runtime internalization audit-artificer-evidence — read-only history audit
+ * (SPEC-PD-IAER-001 FR-09, T11, AC-10; PRI-985).
+ *
+ * Scans the workspace runtime state DB for runs that failed with the
+ * `behavior_example_pack_missing` signature (runtime kinds `pi-ai-l2` AND
+ * `pi-ai`), aggregates them BY TASK ID (production evidence: ~385 runs across
+ * ~82 tasks — runs are not tasks), and reports four anomaly markers per task
+ * plus a summary. This command is read-only BY CONSTRUCTION:
+ *
+ * - the DB is opened with `readonly: true, bootstrapIfMissing: false`
+ *   (ERR-023 precedent from runtime-artifact-repair.ts) — a missing state.db
+ *   is a structured refusal, never a fresh workspace;
+ * - no --confirm exists and no write path exists in this file (cli-4 moot:
+ *   there is nothing to confirm; cli-5: failure paths mutate nothing);
+ * - no recovery/reschedule is performed here (that is the FR-09 B-side,
+ *   handled by the existing retry / failed-tasks recovery entries).
+ *
+ * CLI contract (EP-04): `--json` prints exactly one parseable JSON object on
+ * stdout (cli-1); no matching data is a structured EMPTY result with a
+ * nextAction, not an error; a missing/unreadable DB or missing tables is a
+ * structured refusal with exit code 1 (cli-2/cli-6).
+ */
+import type { Command } from 'commander';
+import { type ArtificerEvidenceAuditReport } from '../services/artificer-evidence-audit.js';
+export interface AuditArtificerEvidenceOptions {
+    workspace?: string;
+    json?: boolean;
+}
+export interface AuditArtificerEvidenceOutput {
+    ok: boolean;
+    mode: 'read_only_audit';
+    workspace: string;
+    status: 'complete' | 'empty' | 'failed';
+    summary?: ArtificerEvidenceAuditReport['summary'];
+    tasks?: ArtificerEvidenceAuditReport['tasks'];
+    governanceDetection?: string;
+    reason?: string;
+    nextAction?: string;
+}
+export declare function handleRuntimeInternalizationAuditArtificerEvidence(opts: AuditArtificerEvidenceOptions): Promise<void>;
+/** Register the production `pd runtime internalization audit-artificer-evidence` command. */
+export declare function registerRuntimeInternalizationAuditArtificerEvidenceCommand(internalizationCmd: Command, handler?: (opts: AuditArtificerEvidenceOptions) => Promise<void>): Command;
+//# sourceMappingURL=runtime-internalization-audit-artificer-evidence.d.ts.map

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-audit-artificer-evidence.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-audit-artificer-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,yCAAyC,CAAC;AAEjD,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,OAAO,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAClD,KAAK,CAAC,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6CD,wBAAsB,kDAAkD,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAwD3H;AAED,6FAA6F;AAC7F,wBAAgB,2DAA2D,CACzE,kBAAkB,EAAE,OAAO,EAC3B,OAAO,GAAE,CAAC,IAAI,EAAE,6BAA6B,KAAK,OAAO,CAAC,IAAI,CAAsD,GACnH,OAAO,CAST"}

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.js

@@ -0,0 +1,138 @@
+/**
+ * pd runtime internalization audit-artificer-evidence — read-only history audit
+ * (SPEC-PD-IAER-001 FR-09, T11, AC-10; PRI-985).
+ *
+ * Scans the workspace runtime state DB for runs that failed with the
+ * `behavior_example_pack_missing` signature (runtime kinds `pi-ai-l2` AND
+ * `pi-ai`), aggregates them BY TASK ID (production evidence: ~385 runs across
+ * ~82 tasks — runs are not tasks), and reports four anomaly markers per task
+ * plus a summary. This command is read-only BY CONSTRUCTION:
+ *
+ * - the DB is opened with `readonly: true, bootstrapIfMissing: false`
+ *   (ERR-023 precedent from runtime-artifact-repair.ts) — a missing state.db
+ *   is a structured refusal, never a fresh workspace;
+ * - no --confirm exists and no write path exists in this file (cli-4 moot:
+ *   there is nothing to confirm; cli-5: failure paths mutate nothing);
+ * - no recovery/reschedule is performed here (that is the FR-09 B-side,
+ *   handled by the existing retry / failed-tasks recovery entries).
+ *
+ * CLI contract (EP-04): `--json` prints exactly one parseable JSON object on
+ * stdout (cli-1); no matching data is a structured EMPTY result with a
+ * nextAction, not an error; a missing/unreadable DB or missing tables is a
+ * structured refusal with exit code 1 (cli-2/cli-6).
+ */
+import * as path from 'path';
+import { SqliteConnection } from '@principles/core/runtime-v2';
+import { resolveWorkspaceDir } from '../resolve-workspace.js';
+import { aggregateArtificerEvidenceRuns, loadArtificerEvidenceAuditInputs, } from '../services/artificer-evidence-audit.js';
+function emit(out, json) {
+    if (json) {
+        // cli-1-strict-json: exactly one parseable JSON object on stdout.
+        console.log(JSON.stringify(out, null, 2));
+        return;
+    }
+    console.log(`Artificer Evidence Audit (${out.mode}) — ${out.workspace}`);
+    if (out.status === 'failed') {
+        console.log(`  status:     failed`);
+        console.log(`  reason:     ${out.reason ?? 'unknown'}`);
+        console.log(`  nextAction: ${out.nextAction ?? ''}`);
+        return;
+    }
+    const s = out.summary;
+    console.log(`  status:            ${out.status}`);
+    console.log(`  pack-missing runs: ${s?.totalRuns ?? 0}`);
+    console.log(`  distinct tasks:    ${s?.distinctTasks ?? 0}`);
+    console.log(`  by runtime kind:   ${Object.entries(s?.byRuntimeKind ?? {}).map(([k, v]) => `${k}=${v}`).join(', ') || '-'}`);
+    console.log(`  by final status:   ${Object.entries(s?.byFinalTaskStatus ?? {}).map(([k, v]) => `${k}=${v}`).join(', ') || '-'}`);
+    console.log(`  anomalies:         repeatedRetry=${s?.anomalyCounts.repeatedRetryConsumption ?? 0}, succeededArtifactThenFailed=${s?.anomalyCounts.succeededArtifactThenFailed ?? 0}, governanceSideEffects=${s?.anomalyCounts.hasGovernanceSideEffects ?? 0} (detection: ${out.governanceDetection ?? 'unknown'})`);
+    console.log(`  nextAction:        ${out.nextAction ?? ''}`);
+    const tasks = out.tasks ?? [];
+    if (tasks.length > 0) {
+        console.log('');
+        console.log('Tasks (oldest first):');
+        for (const t of tasks) {
+            console.log(`  - ${t.taskId}`);
+            console.log(`    taskKind:   ${t.taskKind ?? '-'}`);
+            console.log(`    status:     ${t.taskStatus ?? 'unknown (no task row)'}${t.attemptCount !== null ? ` (${t.attemptCount}/${t.maxAttempts} attempts)` : ''}`);
+            console.log(`    runs:       ${t.runCount}${Object.keys(t.failureCategories).length > 0 ? ` [${Object.entries(t.failureCategories).map(([k, v]) => `${k}=${v}`).join(', ')}]` : ''}`);
+            console.log(`    window:     ${t.firstFailureAt} .. ${t.lastFailureAt}`);
+            const flags = [
+                t.anomalies.repeatedRetryConsumption ? 'repeated_retry_consumption' : null,
+                t.anomalies.succeededArtifactThenFailed ? 'succeeded_artifact_then_failed' : null,
+                t.anomalies.hasGovernanceSideEffects ? 'has_governance_side_effects' : null,
+                t.anomalies.packMissingFailure ? 'pack_missing_failure' : null,
+            ].filter((f) => f !== null);
+            console.log(`    anomalies:  ${flags.length > 0 ? flags.join(', ') : '(none)'}`);
+            console.log(`    nextAction: ${t.nextAction}`);
+        }
+    }
+}
+export async function handleRuntimeInternalizationAuditArtificerEvidence(opts) {
+    // Resolution runs inside the try so an unresolvable default workspace is
+    // also a structured refusal (cli-6); if resolution itself fails, the
+    // refusal reports the raw --workspace value, when one was given.
+    let resolvedWorkspace = null;
+    let conn = null;
+    try {
+        const workspaceDir = path.resolve(resolveWorkspaceDir(opts.workspace));
+        resolvedWorkspace = workspaceDir;
+        // ERR-023 precedent: read-only audit opens the DB readonly and must not
+        // bootstrap an empty state.db — a missing state.db is a refusal.
+        conn = new SqliteConnection({ workspaceDir, readonly: true, bootstrapIfMissing: false });
+        const db = conn.getDb();
+        const inputs = loadArtificerEvidenceAuditInputs(db);
+        const report = aggregateArtificerEvidenceRuns(inputs);
+        const empty = report.summary.distinctTasks === 0;
+        const out = {
+            ok: true,
+            mode: 'read_only_audit',
+            workspace: workspaceDir,
+            status: empty ? 'empty' : 'complete',
+            summary: report.summary,
+            tasks: report.tasks,
+            governanceDetection: report.governanceDetection,
+            reason: empty
+                ? 'No runs match the behavior_example_pack_missing signature for runtime kinds pi-ai-l2/pi-ai'
+                : undefined,
+            nextAction: empty
+                ? 'Nothing to audit. If a failure is expected, verify the workspace path: this audit scans <workspace>/.pd/state.db'
+                : report.summary.anomalyCounts.packMissingFailure > 0
+                    ? 'Read-only result — nothing was modified. Recovery is per-task and Owner-driven: attach evidence via the recovery entry (PRI-983), then use the per-task nextAction (pd runtime internalization retry --confirm for needs_human_review, pd runtime recovery failed-tasks --confirm for failed).'
+                    : 'Read-only result — nothing was modified.',
+        };
+        emit(out, opts.json);
+    }
+    catch (err) {
+        // Structured refusal (cli-6): reason + nextAction, exit 1, no repair attempts.
+        const out = {
+            ok: false,
+            mode: 'read_only_audit',
+            workspace: resolvedWorkspace ?? opts.workspace ?? '(workspace unresolved)',
+            status: 'failed',
+            reason: err instanceof Error ? err.message : String(err),
+            nextAction: 'Verify --workspace points at a workspace with an initialized .pd/state.db (pd runtime init), then retry. This audit does not create or repair databases.',
+        };
+        emit(out, opts.json);
+        process.exitCode = 1;
+    }
+    finally {
+        try {
+            conn?.close();
+        }
+        catch {
+            // best-effort close of a read-only handle; the report is already emitted
+        }
+    }
+}
+/** Register the production `pd runtime internalization audit-artificer-evidence` command. */
+export function registerRuntimeInternalizationAuditArtificerEvidenceCommand(internalizationCmd, handler = handleRuntimeInternalizationAuditArtificerEvidence) {
+    return internalizationCmd
+        .command('audit-artificer-evidence')
+        .description('Read-only history audit: aggregate behavior_example_pack_missing failures by task (FR-09)')
+        .option('-w, --workspace <path>', 'Workspace directory')
+        .option('--json', 'Output as JSON')
+        .action(async (opts) => {
+        await handler(opts);
+    });
+}
+//# sourceMappingURL=runtime-internalization-audit-artificer-evidence.js.map

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-audit-artificer-evidence.js","sourceRoot":"","sources":["../../src/commands/runtime-internalization-audit-artificer-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GAEjC,MAAM,yCAAyC,CAAC;AAmBjD,SAAS,IAAI,CAAC,GAAiC,EAAE,IAAc;IAC7D,IAAI,IAAI,EAAE,CAAC;QACT,kEAAkE;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,aAAa,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC7H,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACjI,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,aAAa,CAAC,wBAAwB,IAAI,CAAC,iCAAiC,CAAC,EAAE,aAAa,CAAC,2BAA2B,IAAI,CAAC,2BAA2B,CAAC,EAAE,aAAa,CAAC,wBAAwB,IAAI,CAAC,gBAAgB,GAAG,CAAC,mBAAmB,IAAI,SAAS,GAAG,CAAC,CAAC;IACpT,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,UAAU,IAAI,uBAAuB,GAAG,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5J,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtL,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,cAAc,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI;gBAC1E,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI;gBACjF,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI;gBAC3E,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI;aAC/D,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,IAAmC;IAC1G,yEAAyE;IACzE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,IAAI,GAA4B,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,iBAAiB,GAAG,YAAY,CAAC;QAEjC,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAiC;YACxC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,4FAA4F;gBAC9F,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,KAAK;gBACf,CAAC,CAAC,kHAAkH;gBACpH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,kBAAkB,GAAG,CAAC;oBACnD,CAAC,CAAC,gSAAgS;oBAClS,CAAC,CAAC,0CAA0C;SACjD,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+EAA+E;QAC/E,MAAM,GAAG,GAAiC;YACxC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,iBAAiB,IAAI,IAAI,CAAC,SAAS,IAAI,wBAAwB;YAC1E,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxD,UAAU,EAAE,0JAA0J;SACvK,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,IAAI,EAAE,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,2DAA2D,CACzE,kBAA2B,EAC3B,OAAO,GAA2D,kDAAkD;IAEpH,OAAO,kBAAkB;SACtB,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,IAAmC,EAAE,EAAE;QACpD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/pd-cli/dist/commands/runtime-internalization-evidence.d.ts

@@ -0,0 +1,72 @@
+/**
+ * pd runtime internalization evidence — Owner evidence attach/resume (B1).
+ *
+ * SPEC-PD-IAER-001 FR-03/FR-06 (PRI-983): the Owner recovery entry for
+ * Artificer tasks blocked on evidence (needs_human_review + a stable FR-04
+ * evidence reasonCode). Three subcommands, ALL default dry-run; `--confirm`
+ * performs the mutation (cli-4):
+ *
+ *   evidence list   --workspace <dir> [--json]
+ *       Read-only: tasks waiting for Owner evidence with pain linkage,
+ *       missing fields and the concrete next action (FR-06 1/2).
+ *
+ *   evidence attach --task <id> --pain <painId> --negative <id>
+ *                   --positive <id>... --outcome <text>
+ *                   [--decidedBy <label>] [--json] [--confirm]
+ *       Assembles the labelled examples through the production assembler
+ *       (same chain as run-rulehost), and on --confirm persists the
+ *       digest-verified selection into pi_metadata via CAS. The task STAYS
+ *       needs_human_review — attach never unblocks (FR-06 6).
+ *
+ *   evidence resume --task <id> [--decidedBy <label>] [--json] [--confirm]
+ *       Re-assembles, verifies the stored contentDigest, and on --confirm
+ *       performs the ATOMIC authority reset through the single recovery
+ *       authority (ownerRetryNeedsHumanReviewTask, CAS precondition) — at
+ *       most one concurrent resume wins (FR-06 7, §6.3, T06).
+ *
+ * Authorization expression (repo reality — no owner authentication exists):
+ * explicit --confirm + decidedBy label + append-only audit
+ * (.state/recovery_actions.jsonl) + revision/contentDigest provenance.
+ *
+ * CLI contract: --json prints exactly ONE parseable JSON object (cli-1);
+ * refusal paths set exit 1 with stable reason + nextAction and mutate
+ * nothing (cli-2/cli-5/cli-6). No V1 fallback exists on any path (PRI-780).
+ * No new feature flag: rollback = git revert (mvp-q-3).
+ *
+ * Lazy plugin import: `principles-disciple/rulehost-evidence` is loaded only
+ * when an attach/resume actually needs assembly — same rationale as
+ * run-rulehost (pd --version must not pull the plugin bundle).
+ */
+import type { Command } from 'commander';
+export interface EvidenceListOptions {
+    workspace?: string;
+    json?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceList(opts: EvidenceListOptions): Promise<void>;
+export interface EvidenceAttachOptions {
+    workspace?: string;
+    task?: string;
+    pain?: string;
+    negative?: number;
+    positive?: string[];
+    outcome?: string;
+    decidedBy?: string;
+    json?: boolean;
+    confirm?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceAttach(opts: EvidenceAttachOptions): Promise<void>;
+export interface EvidenceResumeOptions {
+    workspace?: string;
+    task?: string;
+    decidedBy?: string;
+    json?: boolean;
+    confirm?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceResume(opts: EvidenceResumeOptions): Promise<void>;
+/** Register `pd runtime internalization evidence list|attach|resume`. */
+export declare function registerRuntimeInternalizationEvidenceCommand(internalizationCmd: Command, handlers?: {
+    list?: typeof handleRuntimeInternalizationEvidenceList;
+    attach?: typeof handleRuntimeInternalizationEvidenceAttach;
+    resume?: typeof handleRuntimeInternalizationEvidenceResume;
+}): Command;
+//# sourceMappingURL=runtime-internalization-evidence.d.ts.map

package/pd-cli/dist/commands/runtime-internalization-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-evidence.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgFzC,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,wCAAwC,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDvG;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA4DD,wBAAsB,0CAA0C,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE3G;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuCD,wBAAsB,0CAA0C,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD3G;AAID,yEAAyE;AACzE,wBAAgB,6CAA6C,CAC3D,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,GAAE;IACR,IAAI,CAAC,EAAE,OAAO,wCAAwC,CAAC;IACvD,MAAM,CAAC,EAAE,OAAO,0CAA0C,CAAC;IAC3D,MAAM,CAAC,EAAE,OAAO,0CAA0C,CAAC;CACvD,GACL,OAAO,CA+CT"}