create-principles-disciple 1.145.1 → 1.145.4

package/host-runtime/dist/workspace-behavior-evidence.js

@@ -0,0 +1,74 @@
+/** Read-only adapter over the canonical trajectory store; never creates/migrates it. */
+import path from 'node:path';
+import Database from 'better-sqlite3';
+import { createOwnerEvidenceScopeError } from '@principles/core/runtime-v2/internalization/evidence-readiness';
+import { BehaviorExamplePackAssembler } from './behavior-example-pack-assembler.js';
+import { resolveWorkspaceHostToolSemantics } from './host-tool-semantic-resolver.js';
+function record(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function contextRow(value) {
+    if (!record(value) || typeof value.id !== 'number' || !Number.isSafeInteger(value.id)
+        || typeof value.tool_name !== 'string' || typeof value.outcome !== 'string' || typeof value.params_json !== 'string') {
+        throw new Error('Malformed trajectory context row');
+    }
+    const params = JSON.parse(value.params_json);
+    if (!record(params))
+        throw new Error('Malformed trajectory params object');
+    if (Object.keys(params).some((key) => key === '__proto__' || key === 'constructor' || key === 'prototype')) {
+        throw new Error('Unsafe keys in persisted trajectory params');
+    }
+    return { id: value.id, toolName: value.tool_name, outcome: value.outcome, paramsJson: value.params_json };
+}
+function source(db) {
+    return {
+        getPainEventByCanonicalId(id) {
+            const row = db.prepare('SELECT id, session_id FROM pain_events WHERE canonical_pain_id = ? LIMIT 1').get(id);
+            if (row === undefined)
+                return null;
+            if (!record(row) || typeof row.id !== 'number' || typeof row.session_id !== 'string')
+                throw new Error('Malformed pain lineage row');
+            return { id: row.id, sessionId: row.session_id };
+        },
+        getRuleHostEvidenceRow(id) {
+            const row = db.prepare('SELECT id, session_id, tool_name, outcome, params_json FROM tool_calls WHERE id = ? LIMIT 1').get(id);
+            if (row === undefined)
+                return null;
+            if (!record(row) || typeof row.session_id !== 'string')
+                throw new Error('Malformed trajectory evidence row');
+            return { ...contextRow(row), sessionId: row.session_id };
+        },
+        getRuleHostContextRowsBefore(sessionId, beforeId, limit) {
+            const rows = db.prepare('SELECT id, tool_name, outcome, params_json FROM tool_calls WHERE session_id = ? AND id < ? ORDER BY id DESC LIMIT ?').all(sessionId, beforeId, limit + 1);
+            return { rows: rows.slice(0, limit).reverse().map(contextRow), truncated: rows.length > limit };
+        },
+    };
+}
+/** Lazy storage access: missing labels need no DB, and a failed open remains observable. */
+export function createWorkspaceBehaviorEvidencePort(workspaceDir, toolSemantics) {
+    return {
+        assemble(selection) {
+            const resolved = toolSemantics === undefined ? resolveWorkspaceHostToolSemantics(workspaceDir) : null;
+            if (resolved !== null && !resolved.ok)
+                throw createOwnerEvidenceScopeError('evidence_source_error', resolved.reason);
+            const semantics = toolSemantics ?? (resolved !== null && resolved.ok ? resolved.registry : undefined);
+            if (semantics === undefined)
+                throw createOwnerEvidenceScopeError('evidence_source_error', 'Host tool semantics unavailable');
+            let db;
+            try {
+                db = new Database(path.join(workspaceDir, '.state', 'trajectory.db'), { readonly: true, fileMustExist: true });
+            }
+            catch (error) {
+                throw createOwnerEvidenceScopeError('evidence_source_error', `Trajectory evidence unavailable: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            try {
+                // One read snapshot prevents a pack combining different trajectory revisions.
+                return db.transaction(() => new BehaviorExamplePackAssembler({ source: source(db), toolSemantics: semantics })
+                    .assemble({ ...selection, projectDir: workspaceDir }))();
+            }
+            finally {
+                db.close();
+            }
+        },
+    };
+}

package/host-runtime/dist/workspace-telemetry-emitter.js

@@ -25,6 +25,14 @@ import { StoreEventEmitter } from '@principles/core/runtime-v2';
  *   - artificer_l2_complete（PRI-795 review P1：Artificer L2 的 completion
  *     证据 — abortOwner/budgetMs/elapsedMs/stopReason/tokenUsage — 必须
  *     crash 前落盘，否则 EP002-R3 的「失败后什么都查不到」重演）
+ *   - artificer_blocked_on_owner_evidence（PRI-982 / SPEC-PD-IAER-001
+ *     FR-04：consumer evidence preflight 把任务原子转入 needs_human_review
+ *     时的 Owner 恢复证据 — 稳定 reasonCode + nextAction + reviewPersisted。
+ *     与 artificer_l2_complete 同理必须 crash 前落盘：进程内 storeEmitter
+ *     生产装配零订阅者，事件丢失会让 NHR 任务变成「为什么被挡」的无头案
+ *     （EP002-R3 类）。注意 readiness_checked 刻意不入列：它对每个 gate
+ *     verdict 都发（含 ready），落盘会形成高频第二日志；blocked 才是
+ *     Owner 必须能事后取证的判定点）
  *   - reuse_gate_triggered（PRI-939 Option A：Reuse Review Gate 挂起观察，
  *     Owner 复用闭环的入口证据）
  *   - reuse_evaluation_unavailable（PRI-939 Option A：语义评估降级信号 —
@@ -44,6 +52,11 @@ const CRITICAL_EVENT_ALLOWLIST = new Set([
     'evaluator_rule_assembled',
     'evaluator_rule_assembly_failed',
     'artificer_l2_complete',
+    // PRI-982 (SPEC-PD-IAER-001 FR-04): Owner-recovery evidence for a task the
+    // consumer evidence preflight just blocked into needs_human_review — stable
+    // reasonCode + nextAction must survive a crash (same EP002-R3 class as
+    // artificer_l2_complete above; justification in the header comment).
+    'artificer_blocked_on_owner_evidence',
     'reuse_gate_triggered',
     'reuse_evaluation_unavailable',
 ]);

package/host-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/host-runtime",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Shared host-neutral orchestration for Principles Disciple MVP-Core hook paths.",
   "type": "module",
   "main": "./dist/index.js",
@@ -10,7 +10,15 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./behavior-example-pack-assembler": {
+      "types": "./dist/behavior-example-pack-assembler.d.ts",
+      "default": "./dist/behavior-example-pack-assembler.js"
+    },
+    "./behavior-history": {
+      "types": "./dist/behavior-history.d.ts",
+      "default": "./dist/behavior-history.js"
+    }
   },
   "files": [
     "dist",

package/install-layout/dist/index.d.ts

@@ -6,7 +6,23 @@ export type InstallHost = (typeof INSTALL_HOSTS)[number];
 export interface InstallManifest {
     layoutVersion: typeof INSTALL_LAYOUT_VERSION;
     mode: InstallLayoutMode;
+    /**
+     * Hosts THIS reader version recognizes. Host strings the reader does not
+     * know are NOT here — they land in `unknownHosts` so an install registered
+     * with a newer host keeps resolving instead of being rejected as malformed.
+     */
     hosts: InstallHost[];
+    /**
+     * Host strings present in the persisted `hosts` array that this reader
+     * version does not know (forward compatibility, 2026-10-16). A NEWER
+     * installer may register a host an OLDER reader never heard of; that is a
+     * compatibility warning, never "manifest malformed" — treating it as one
+     * made every pre-WorkBuddy Companion report `console_runtime_not_installed`
+     * against a healthy 3-host install and mass-stop its workers. Fail-closed
+     * stays reserved for structural damage: wrong layoutVersion, non-array or
+     * non-string hosts, bad mode, illegal workspace paths.
+     */
+    unknownHosts?: readonly string[];
     /**
      * Canonical absolute paths of Workspaces the install serves (PRI-624 Slice C).
      * Optional so pre-PRI-624 manifests stay valid; always normalized to
@@ -16,6 +32,11 @@ export interface InstallManifest {
      */
     workspaces?: readonly string[];
 }
+/** Structured forward-compatibility observation from manifest parsing (rc-9). */
+export interface InstallManifestWarning {
+    code: 'install_manifest_unknown_host';
+    host: string;
+}
 export interface InstallLayoutPaths {
     homeDir: string;
     pdDir: string;
@@ -58,6 +79,8 @@ export interface LayoutResolution {
     manifest?: InstallManifest;
     reason?: string;
     nextAction?: string;
+    /** Forward-compatibility warnings surfaced while parsing the manifest. */
+    warnings?: readonly InstallManifestWarning[];
 }
 export interface ResolveInstallLayoutOptions {
     homeDir: string;
@@ -65,10 +88,26 @@ export interface ResolveInstallLayoutOptions {
     canonicalRuntimeExists: boolean;
     legacyExtensionExists: boolean;
 }
-/** Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
+/**
+ * Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
 export declare function mergeInstallManifestWorkspaces(current: InstallManifest | undefined, workspaceDir: string): string[];
+/**
+ * The `hosts` array a manifest WRITER must persist: every registration the
+ * reader recognized plus every unknown one, deduped, known hosts first.
+ * Writers that rebuild `hosts` from `manifest.hosts` alone silently DELETE a
+ * newer host's registration — the write-side twin of the read-side
+ * unknown-host brick (2026-10-16). `undefined` yields `[]` so the installer's
+ * fresh-install path keeps working unchanged.
+ */
+export declare function installManifestHostsForPersist(manifest: InstallManifest | undefined): string[];
+/**
+ * Parse the install manifest. Structural damage fails closed with `error`;
+ * a host string this reader version does not know is a `warnings` entry and
+ * the manifest still parses (forward compatibility — see `InstallManifest.unknownHosts`).
+ */
 export declare function parseInstallManifest(value: unknown): {
     manifest?: InstallManifest;
+    warnings?: readonly InstallManifestWarning[];
     error?: string;
 };
 export declare function getInstallLayoutPaths(homeDir: string): InstallLayoutPaths;

package/install-layout/dist/index.js

@@ -8,6 +8,9 @@ function isRecord(value) {
 function isHost(value) {
     return typeof value === 'string' && INSTALL_HOSTS.includes(value);
 }
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
 /** Workspace entries must be non-empty absolute paths — the Companion spawns per-Workspace workers keyed by canonical path. */
 function parseWorkspaceList(value) {
     if (value === undefined)
@@ -25,7 +28,8 @@ function parseWorkspaceList(value) {
     }
     return { workspaces: resolved };
 }
-/** Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
+/**
+ * Merge one Workspace into a manifest's workspace list (installer write path). Idempotent by canonical path. */
 export function mergeInstallManifestWorkspaces(current, workspaceDir) {
     const canonical = path.resolve(workspaceDir);
     const resolved = [];
@@ -38,6 +42,22 @@ export function mergeInstallManifestWorkspaces(current, workspaceDir) {
         resolved.push(canonical);
     return resolved;
 }
+/**
+ * The `hosts` array a manifest WRITER must persist: every registration the
+ * reader recognized plus every unknown one, deduped, known hosts first.
+ * Writers that rebuild `hosts` from `manifest.hosts` alone silently DELETE a
+ * newer host's registration — the write-side twin of the read-side
+ * unknown-host brick (2026-10-16). `undefined` yields `[]` so the installer's
+ * fresh-install path keeps working unchanged.
+ */
+export function installManifestHostsForPersist(manifest) {
+    return [...new Set([...(manifest?.hosts ?? []), ...(manifest?.unknownHosts ?? [])])];
+}
+/**
+ * Parse the install manifest. Structural damage fails closed with `error`;
+ * a host string this reader version does not know is a `warnings` entry and
+ * the manifest still parses (forward compatibility — see `InstallManifest.unknownHosts`).
+ */
 export function parseInstallManifest(value) {
     if (!isRecord(value))
         return { error: 'install_manifest_malformed: expected an object' };
@@ -47,14 +67,55 @@ export function parseInstallManifest(value) {
     if (value.mode !== 'canonical' && value.mode !== 'legacy') {
         return { error: 'install_manifest_malformed: mode must be canonical or legacy' };
     }
-    if (!Array.isArray(value.hosts) || value.hosts.length === 0 || !value.hosts.every(isHost)) {
-        return { error: 'install_manifest_malformed: hosts must contain codex, openclaw and/or workbuddy' };
+    // Host entries must be non-empty strings; WHICH strings are valid hosts is
+    // version-relative knowledge, so unknown strings warn instead of failing.
+    if (!Array.isArray(value.hosts) || !value.hosts.every(isNonEmptyString)) {
+        return { error: 'install_manifest_malformed: hosts must be an array of host name strings' };
+    }
+    // Idempotency: the parser must re-read its own output. An all-unknown-hosts
+    // manifest parses to hosts: [] + unknownHosts, so the optional persisted
+    // `unknownHosts` field is accepted on input too (installManifestHostsForPersist
+    // reunifies them on write; writers persist the union into `hosts`).
+    let carriedUnknownHosts = [];
+    if (value.unknownHosts !== undefined) {
+        if (!Array.isArray(value.unknownHosts) || !value.unknownHosts.every(isNonEmptyString)) {
+            return { error: 'install_manifest_malformed: unknownHosts must be an array of host name strings' };
+        }
+        carriedUnknownHosts = value.unknownHosts.filter((host) => !isHost(host));
+    }
+    if (value.hosts.length === 0 && carriedUnknownHosts.length === 0) {
+        return { error: 'install_manifest_malformed: hosts must contain at least one host' };
+    }
+    const hosts = [];
+    const unknownHosts = [];
+    const warnings = [];
+    for (const host of [...new Set(value.hosts)]) {
+        if (isHost(host))
+            hosts.push(host);
+        else {
+            unknownHosts.push(host);
+            warnings.push({ code: 'install_manifest_unknown_host', host });
+        }
+    }
+    for (const host of carriedUnknownHosts) {
+        if (!unknownHosts.includes(host)) {
+            unknownHosts.push(host);
+            warnings.push({ code: 'install_manifest_unknown_host', host });
+        }
     }
-    const hosts = [...new Set(value.hosts)];
     const workspaces = parseWorkspaceList(value.workspaces);
     if (workspaces.error)
         return { error: workspaces.error };
-    return { manifest: { layoutVersion: INSTALL_LAYOUT_VERSION, mode: value.mode, hosts, workspaces: workspaces.workspaces } };
+    return {
+        manifest: {
+            layoutVersion: INSTALL_LAYOUT_VERSION,
+            mode: value.mode,
+            hosts,
+            ...(unknownHosts.length > 0 ? { unknownHosts } : {}),
+            workspaces: workspaces.workspaces,
+        },
+        ...(warnings.length > 0 ? { warnings } : {}),
+    };
 }
 export function getInstallLayoutPaths(homeDir) {
     const home = path.resolve(homeDir);
@@ -96,8 +157,28 @@ export function getWorkbuddyWorkspaceDir(homeDir) {
 export function resolveInstallLayout(options) {
     const paths = getInstallLayoutPaths(options.homeDir);
     const parsed = parseInstallManifest(options.manifest);
+    const { warnings } = parsed;
     if (parsed.manifest && parsed.manifest.mode === 'canonical' && options.canonicalRuntimeExists) {
-        return { mode: 'canonical', paths, manifest: parsed.manifest };
+        return { mode: 'canonical', paths, manifest: parsed.manifest, ...(warnings !== undefined ? { warnings } : {}) };
+    }
+    // RF-01 (review 2026-10-16): when a canonical runtime EXISTS, the manifest
+    // is the install-state authority. A manifest that was READ but cannot be
+    // honored (newer layoutVersion, structural damage) must refuse the whole
+    // resolution — falling through to the legacy extension dir would launch a
+    // runtime that does not match the installed protocol. Legacy fallback stays
+    // legitimate only when the reader genuinely saw NO manifest (absent file →
+    // `options.manifest === undefined`), i.e. a real legacy-only install, or
+    // when there is no canonical runtime to bypass.
+    if (options.canonicalRuntimeExists && options.manifest !== undefined && parsed.manifest === undefined) {
+        return {
+            mode: 'missing',
+            paths,
+            reason: parsed.error ?? 'install_manifest_malformed',
+            nextAction: parsed.error?.startsWith('install_manifest_unsupported_version')
+                ? 'Update PD Companion from https://github.com/csuzngjh/principles/releases (companion-v* Windows installer); do not reinstall the healthy PD runtime.'
+                : 'Run the PD installer/updater to repair the structurally damaged installation manifest.',
+            ...(warnings !== undefined ? { warnings } : {}),
+        };
     }
     if (options.legacyExtensionExists) {
         return {
@@ -106,6 +187,7 @@ export function resolveInstallLayout(options) {
             ...(parsed.manifest ? { manifest: parsed.manifest } : {}),
             reason: parsed.error ?? 'install_layout_legacy_fallback',
             nextAction: 'Run the installer update to migrate the shared runtime to ~/.pd/runtime.',
+            ...(warnings !== undefined ? { warnings } : {}),
         };
     }
     return {

package/install-layout/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/install-layout",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-principles-disciple",
-  "version": "1.145.1",
+  "version": "1.145.4",
   "description": "Interactive CLI installer for Principles Disciple OpenClaw plugin",
   "type": "module",
   "bin": {
@@ -58,7 +58,7 @@
   "author": "csuzngjh",
   "license": "Apache-2.0",
   "dependencies": {
-    "@principles/install-layout": "^0.3.1",
+    "@principles/install-layout": "^0.4.0",
     "@tufjs/models": "3.0.1",
     "@inquirer/prompts": "^8.7.2",
     "commander": "^14.0.3",
@@ -89,6 +89,6 @@
     "directory": "packages/create-principles-disciple"
   },
   "pd": {
-    "bundledPluginVersion": "2.1.4"
+    "bundledPluginVersion": "2.1.6"
   }
 }

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.d.ts

@@ -0,0 +1,44 @@
+/**
+ * pd runtime internalization audit-artificer-evidence — read-only history audit
+ * (SPEC-PD-IAER-001 FR-09, T11, AC-10; PRI-985).
+ *
+ * Scans the workspace runtime state DB for runs that failed with the
+ * `behavior_example_pack_missing` signature (runtime kinds `pi-ai-l2` AND
+ * `pi-ai`), aggregates them BY TASK ID (production evidence: ~385 runs across
+ * ~82 tasks — runs are not tasks), and reports four anomaly markers per task
+ * plus a summary. This command is read-only BY CONSTRUCTION:
+ *
+ * - the DB is opened with `readonly: true, bootstrapIfMissing: false`
+ *   (ERR-023 precedent from runtime-artifact-repair.ts) — a missing state.db
+ *   is a structured refusal, never a fresh workspace;
+ * - no --confirm exists and no write path exists in this file (cli-4 moot:
+ *   there is nothing to confirm; cli-5: failure paths mutate nothing);
+ * - no recovery/reschedule is performed here (that is the FR-09 B-side,
+ *   handled by the existing retry / failed-tasks recovery entries).
+ *
+ * CLI contract (EP-04): `--json` prints exactly one parseable JSON object on
+ * stdout (cli-1); no matching data is a structured EMPTY result with a
+ * nextAction, not an error; a missing/unreadable DB or missing tables is a
+ * structured refusal with exit code 1 (cli-2/cli-6).
+ */
+import type { Command } from 'commander';
+import { type ArtificerEvidenceAuditReport } from '../services/artificer-evidence-audit.js';
+export interface AuditArtificerEvidenceOptions {
+    workspace?: string;
+    json?: boolean;
+}
+export interface AuditArtificerEvidenceOutput {
+    ok: boolean;
+    mode: 'read_only_audit';
+    workspace: string;
+    status: 'complete' | 'empty' | 'failed';
+    summary?: ArtificerEvidenceAuditReport['summary'];
+    tasks?: ArtificerEvidenceAuditReport['tasks'];
+    governanceDetection?: string;
+    reason?: string;
+    nextAction?: string;
+}
+export declare function handleRuntimeInternalizationAuditArtificerEvidence(opts: AuditArtificerEvidenceOptions): Promise<void>;
+/** Register the production `pd runtime internalization audit-artificer-evidence` command. */
+export declare function registerRuntimeInternalizationAuditArtificerEvidenceCommand(internalizationCmd: Command, handler?: (opts: AuditArtificerEvidenceOptions) => Promise<void>): Command;
+//# sourceMappingURL=runtime-internalization-audit-artificer-evidence.d.ts.map

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-audit-artificer-evidence.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-audit-artificer-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,yCAAyC,CAAC;AAEjD,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,OAAO,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAClD,KAAK,CAAC,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6CD,wBAAsB,kDAAkD,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAwD3H;AAED,6FAA6F;AAC7F,wBAAgB,2DAA2D,CACzE,kBAAkB,EAAE,OAAO,EAC3B,OAAO,GAAE,CAAC,IAAI,EAAE,6BAA6B,KAAK,OAAO,CAAC,IAAI,CAAsD,GACnH,OAAO,CAST"}

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.js

@@ -0,0 +1,138 @@
+/**
+ * pd runtime internalization audit-artificer-evidence — read-only history audit
+ * (SPEC-PD-IAER-001 FR-09, T11, AC-10; PRI-985).
+ *
+ * Scans the workspace runtime state DB for runs that failed with the
+ * `behavior_example_pack_missing` signature (runtime kinds `pi-ai-l2` AND
+ * `pi-ai`), aggregates them BY TASK ID (production evidence: ~385 runs across
+ * ~82 tasks — runs are not tasks), and reports four anomaly markers per task
+ * plus a summary. This command is read-only BY CONSTRUCTION:
+ *
+ * - the DB is opened with `readonly: true, bootstrapIfMissing: false`
+ *   (ERR-023 precedent from runtime-artifact-repair.ts) — a missing state.db
+ *   is a structured refusal, never a fresh workspace;
+ * - no --confirm exists and no write path exists in this file (cli-4 moot:
+ *   there is nothing to confirm; cli-5: failure paths mutate nothing);
+ * - no recovery/reschedule is performed here (that is the FR-09 B-side,
+ *   handled by the existing retry / failed-tasks recovery entries).
+ *
+ * CLI contract (EP-04): `--json` prints exactly one parseable JSON object on
+ * stdout (cli-1); no matching data is a structured EMPTY result with a
+ * nextAction, not an error; a missing/unreadable DB or missing tables is a
+ * structured refusal with exit code 1 (cli-2/cli-6).
+ */
+import * as path from 'path';
+import { SqliteConnection } from '@principles/core/runtime-v2';
+import { resolveWorkspaceDir } from '../resolve-workspace.js';
+import { aggregateArtificerEvidenceRuns, loadArtificerEvidenceAuditInputs, } from '../services/artificer-evidence-audit.js';
+function emit(out, json) {
+    if (json) {
+        // cli-1-strict-json: exactly one parseable JSON object on stdout.
+        console.log(JSON.stringify(out, null, 2));
+        return;
+    }
+    console.log(`Artificer Evidence Audit (${out.mode}) — ${out.workspace}`);
+    if (out.status === 'failed') {
+        console.log(`  status:     failed`);
+        console.log(`  reason:     ${out.reason ?? 'unknown'}`);
+        console.log(`  nextAction: ${out.nextAction ?? ''}`);
+        return;
+    }
+    const s = out.summary;
+    console.log(`  status:            ${out.status}`);
+    console.log(`  pack-missing runs: ${s?.totalRuns ?? 0}`);
+    console.log(`  distinct tasks:    ${s?.distinctTasks ?? 0}`);
+    console.log(`  by runtime kind:   ${Object.entries(s?.byRuntimeKind ?? {}).map(([k, v]) => `${k}=${v}`).join(', ') || '-'}`);
+    console.log(`  by final status:   ${Object.entries(s?.byFinalTaskStatus ?? {}).map(([k, v]) => `${k}=${v}`).join(', ') || '-'}`);
+    console.log(`  anomalies:         repeatedRetry=${s?.anomalyCounts.repeatedRetryConsumption ?? 0}, succeededArtifactThenFailed=${s?.anomalyCounts.succeededArtifactThenFailed ?? 0}, governanceSideEffects=${s?.anomalyCounts.hasGovernanceSideEffects ?? 0} (detection: ${out.governanceDetection ?? 'unknown'})`);
+    console.log(`  nextAction:        ${out.nextAction ?? ''}`);
+    const tasks = out.tasks ?? [];
+    if (tasks.length > 0) {
+        console.log('');
+        console.log('Tasks (oldest first):');
+        for (const t of tasks) {
+            console.log(`  - ${t.taskId}`);
+            console.log(`    taskKind:   ${t.taskKind ?? '-'}`);
+            console.log(`    status:     ${t.taskStatus ?? 'unknown (no task row)'}${t.attemptCount !== null ? ` (${t.attemptCount}/${t.maxAttempts} attempts)` : ''}`);
+            console.log(`    runs:       ${t.runCount}${Object.keys(t.failureCategories).length > 0 ? ` [${Object.entries(t.failureCategories).map(([k, v]) => `${k}=${v}`).join(', ')}]` : ''}`);
+            console.log(`    window:     ${t.firstFailureAt} .. ${t.lastFailureAt}`);
+            const flags = [
+                t.anomalies.repeatedRetryConsumption ? 'repeated_retry_consumption' : null,
+                t.anomalies.succeededArtifactThenFailed ? 'succeeded_artifact_then_failed' : null,
+                t.anomalies.hasGovernanceSideEffects ? 'has_governance_side_effects' : null,
+                t.anomalies.packMissingFailure ? 'pack_missing_failure' : null,
+            ].filter((f) => f !== null);
+            console.log(`    anomalies:  ${flags.length > 0 ? flags.join(', ') : '(none)'}`);
+            console.log(`    nextAction: ${t.nextAction}`);
+        }
+    }
+}
+export async function handleRuntimeInternalizationAuditArtificerEvidence(opts) {
+    // Resolution runs inside the try so an unresolvable default workspace is
+    // also a structured refusal (cli-6); if resolution itself fails, the
+    // refusal reports the raw --workspace value, when one was given.
+    let resolvedWorkspace = null;
+    let conn = null;
+    try {
+        const workspaceDir = path.resolve(resolveWorkspaceDir(opts.workspace));
+        resolvedWorkspace = workspaceDir;
+        // ERR-023 precedent: read-only audit opens the DB readonly and must not
+        // bootstrap an empty state.db — a missing state.db is a refusal.
+        conn = new SqliteConnection({ workspaceDir, readonly: true, bootstrapIfMissing: false });
+        const db = conn.getDb();
+        const inputs = loadArtificerEvidenceAuditInputs(db);
+        const report = aggregateArtificerEvidenceRuns(inputs);
+        const empty = report.summary.distinctTasks === 0;
+        const out = {
+            ok: true,
+            mode: 'read_only_audit',
+            workspace: workspaceDir,
+            status: empty ? 'empty' : 'complete',
+            summary: report.summary,
+            tasks: report.tasks,
+            governanceDetection: report.governanceDetection,
+            reason: empty
+                ? 'No runs match the behavior_example_pack_missing signature for runtime kinds pi-ai-l2/pi-ai'
+                : undefined,
+            nextAction: empty
+                ? 'Nothing to audit. If a failure is expected, verify the workspace path: this audit scans <workspace>/.pd/state.db'
+                : report.summary.anomalyCounts.packMissingFailure > 0
+                    ? 'Read-only result — nothing was modified. Recovery is per-task and Owner-driven: attach evidence via the recovery entry (PRI-983), then use the per-task nextAction (pd runtime internalization retry --confirm for needs_human_review, pd runtime recovery failed-tasks --confirm for failed).'
+                    : 'Read-only result — nothing was modified.',
+        };
+        emit(out, opts.json);
+    }
+    catch (err) {
+        // Structured refusal (cli-6): reason + nextAction, exit 1, no repair attempts.
+        const out = {
+            ok: false,
+            mode: 'read_only_audit',
+            workspace: resolvedWorkspace ?? opts.workspace ?? '(workspace unresolved)',
+            status: 'failed',
+            reason: err instanceof Error ? err.message : String(err),
+            nextAction: 'Verify --workspace points at a workspace with an initialized .pd/state.db (pd runtime init), then retry. This audit does not create or repair databases.',
+        };
+        emit(out, opts.json);
+        process.exitCode = 1;
+    }
+    finally {
+        try {
+            conn?.close();
+        }
+        catch {
+            // best-effort close of a read-only handle; the report is already emitted
+        }
+    }
+}
+/** Register the production `pd runtime internalization audit-artificer-evidence` command. */
+export function registerRuntimeInternalizationAuditArtificerEvidenceCommand(internalizationCmd, handler = handleRuntimeInternalizationAuditArtificerEvidence) {
+    return internalizationCmd
+        .command('audit-artificer-evidence')
+        .description('Read-only history audit: aggregate behavior_example_pack_missing failures by task (FR-09)')
+        .option('-w, --workspace <path>', 'Workspace directory')
+        .option('--json', 'Output as JSON')
+        .action(async (opts) => {
+        await handler(opts);
+    });
+}
+//# sourceMappingURL=runtime-internalization-audit-artificer-evidence.js.map

package/pd-cli/dist/commands/runtime-internalization-audit-artificer-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-audit-artificer-evidence.js","sourceRoot":"","sources":["../../src/commands/runtime-internalization-audit-artificer-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GAEjC,MAAM,yCAAyC,CAAC;AAmBjD,SAAS,IAAI,CAAC,GAAiC,EAAE,IAAc;IAC7D,IAAI,IAAI,EAAE,CAAC;QACT,kEAAkE;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,aAAa,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC7H,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACjI,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,aAAa,CAAC,wBAAwB,IAAI,CAAC,iCAAiC,CAAC,EAAE,aAAa,CAAC,2BAA2B,IAAI,CAAC,2BAA2B,CAAC,EAAE,aAAa,CAAC,wBAAwB,IAAI,CAAC,gBAAgB,GAAG,CAAC,mBAAmB,IAAI,SAAS,GAAG,CAAC,CAAC;IACpT,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,UAAU,IAAI,uBAAuB,GAAG,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5J,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtL,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,cAAc,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI;gBAC1E,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI;gBACjF,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI;gBAC3E,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI;aAC/D,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,IAAmC;IAC1G,yEAAyE;IACzE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,IAAI,GAA4B,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,iBAAiB,GAAG,YAAY,CAAC;QAEjC,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,MAAM,GAAG,gCAAgC,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAiC;YACxC,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YACpC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,4FAA4F;gBAC9F,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,KAAK;gBACf,CAAC,CAAC,kHAAkH;gBACpH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,kBAAkB,GAAG,CAAC;oBACnD,CAAC,CAAC,gSAAgS;oBAClS,CAAC,CAAC,0CAA0C;SACjD,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+EAA+E;QAC/E,MAAM,GAAG,GAAiC;YACxC,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,iBAAiB,IAAI,IAAI,CAAC,SAAS,IAAI,wBAAwB;YAC1E,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxD,UAAU,EAAE,0JAA0J;SACvK,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,IAAI,EAAE,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,2DAA2D,CACzE,kBAA2B,EAC3B,OAAO,GAA2D,kDAAkD;IAEpH,OAAO,kBAAkB;SACtB,OAAO,CAAC,0BAA0B,CAAC;SACnC,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,IAAmC,EAAE,EAAE;QACpD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/pd-cli/dist/commands/runtime-internalization-evidence.d.ts

@@ -0,0 +1,71 @@
+/**
+ * pd runtime internalization evidence — Owner evidence attach/resume (B1).
+ *
+ * SPEC-PD-IAER-001 FR-03/FR-06 (PRI-983): the Owner recovery entry for
+ * Artificer tasks blocked on evidence (needs_human_review + a stable FR-04
+ * evidence reasonCode). Three subcommands, ALL default dry-run; `--confirm`
+ * performs the mutation (cli-4):
+ *
+ *   evidence list   --workspace <dir> [--json]
+ *       Read-only: tasks waiting for Owner evidence with pain linkage,
+ *       missing fields and the concrete next action (FR-06 1/2).
+ *
+ *   evidence attach --task <id> --pain <painId> --negative <id>
+ *                   --positive <id>... --outcome <text>
+ *                   [--decidedBy <label>] [--json] [--confirm]
+ *       Assembles the labelled examples through the production assembler
+ *       (same chain as run-rulehost), and on --confirm persists the
+ *       digest-verified selection into pi_metadata via CAS. The task STAYS
+ *       needs_human_review — attach never unblocks (FR-06 6).
+ *
+ *   evidence resume --task <id> [--decidedBy <label>] [--json] [--confirm]
+ *       Re-assembles, verifies the stored contentDigest, and on --confirm
+ *       performs the ATOMIC authority reset through the single recovery
+ *       authority (ownerRetryNeedsHumanReviewTask, CAS precondition) — at
+ *       most one concurrent resume wins (FR-06 7, §6.3, T06).
+ *
+ * Authorization expression (repo reality — no owner authentication exists):
+ * explicit --confirm + decidedBy label + append-only audit
+ * (.state/recovery_actions.jsonl) + revision/contentDigest provenance.
+ *
+ * CLI contract: --json prints exactly ONE parseable JSON object (cli-1);
+ * refusal paths set exit 1 with stable reason + nextAction and mutate
+ * nothing (cli-2/cli-5/cli-6). No V1 fallback exists on any path (PRI-780).
+ * No new feature flag: rollback = git revert (mvp-q-3).
+ *
+ * Host-neutral trajectory assembly is shared with the background worker.
+ * It uses persisted host tool declarations; unknown host semantics fail loud.
+ */
+import type { Command } from 'commander';
+export interface EvidenceListOptions {
+    workspace?: string;
+    json?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceList(opts: EvidenceListOptions): Promise<void>;
+export interface EvidenceAttachOptions {
+    workspace?: string;
+    task?: string;
+    pain?: string;
+    negative?: number;
+    positive?: string[];
+    outcome?: string;
+    decidedBy?: string;
+    json?: boolean;
+    confirm?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceAttach(opts: EvidenceAttachOptions): Promise<void>;
+export interface EvidenceResumeOptions {
+    workspace?: string;
+    task?: string;
+    decidedBy?: string;
+    json?: boolean;
+    confirm?: boolean;
+}
+export declare function handleRuntimeInternalizationEvidenceResume(opts: EvidenceResumeOptions): Promise<void>;
+/** Register `pd runtime internalization evidence list|attach|resume`. */
+export declare function registerRuntimeInternalizationEvidenceCommand(internalizationCmd: Command, handlers?: {
+    list?: typeof handleRuntimeInternalizationEvidenceList;
+    attach?: typeof handleRuntimeInternalizationEvidenceAttach;
+    resume?: typeof handleRuntimeInternalizationEvidenceResume;
+}): Command;
+//# sourceMappingURL=runtime-internalization-evidence.d.ts.map

package/pd-cli/dist/commands/runtime-internalization-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-internalization-evidence.d.ts","sourceRoot":"","sources":["../../src/commands/runtime-internalization-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiDzC,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,wCAAwC,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDvG;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA4DD,wBAAsB,0CAA0C,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE3G;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAuCD,wBAAsB,0CAA0C,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD3G;AAID,yEAAyE;AACzE,wBAAgB,6CAA6C,CAC3D,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,GAAE;IACR,IAAI,CAAC,EAAE,OAAO,wCAAwC,CAAC;IACvD,MAAM,CAAC,EAAE,OAAO,0CAA0C,CAAC;IAC3D,MAAM,CAAC,EAAE,OAAO,0CAA0C,CAAC;CACvD,GACL,OAAO,CA+CT"}