create-principles-disciple 1.145.17 → 1.145.19

package/README.md

@@ -46,8 +46,23 @@ npx create-principles-disciple --yes --workspace "/path/to/workspace" --json
 --non-interactive       Skip prompts
 --workspace <path>      Workspace directory
 --json                  Output result as JSON (implies non-interactive)
+--provider <name>       LLM provider for the pd.default runtime profile (openai/anthropic/deepseek)
+--api-key-env <name>    NAME of the env var holding your LLM API key. Requires --provider
+--model <id>            LLM model id (optional; the per-provider default applies when omitted)
+--base-url <url>        OpenAI-compatible custom endpoint (optional; env: PD_BASE_URL)
 ```
 
+## LLM runtime profile — required before the internal agents can run
+
+PD's internal agents (diagnostician, dreamer, scribe, artificer, signal collector) call the LLM
+provider **you** configure. PD ships no keys, stores no key values, and `--api-key-env` names an
+environment variable rather than carrying a secret.
+
+`--yes` without `--provider` installs in evidence-only mode: pain signals are captured and kept,
+but diagnosis does not run and no principle is proposed. The post-install summary says so, and at any
+later time `pd config doctor --workspace "<path>"` names the missing field. Full operator walkthrough:
+[`docs/runbooks/USER_GUIDE.md`](../../docs/runbooks/USER_GUIDE.md) — “Before You Start: Give PD an LLM”.
+
 ## Post-Install Verification
 
 The installer automatically verifies the installation during setup:

package/_release/product-identity.json

@@ -1,5 +1,5 @@
 {
   "schemaVersion": 1,
   "productVersion": "2.3.10",
-  "sourceCommit": "72df0b91189c8ad18dbbfefb48c140609bad5c14"
+  "sourceCommit": "2eeb69dfb7bdfe0c72a291f4172809b64e70a855"
 }

package/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/codex-adapter",
-  "version": "0.5.10",
+  "version": "0.5.12",
   "description": "Codex CLI host adapter for Principles Disciple — implements HostAdapter interface for OpenAI Codex CLI's stdin/stdout JSON hook model (ADR-0020).",
   "type": "module",
   "main": "./dist/index.js",

package/console/dist/server/models/ActivationsConsoleModel.js

@@ -1,5 +1,6 @@
 import { SqliteConnection, SqliteActivationStateStore, SqlitePIArtifactStore, extractPrincipleId, extractEvidenceRefs, PromotionReadinessReader, RuleHostWriter, createProductionGateDeps, SqliteActivationSafetyStore, isFeatureEnabled, RuleCodeOwnerDecisionService, collectOpenClawPromotionChecks, summarizeRuleCodeShadowEvents, buildPromotionEvidenceSnapshot, } from '@principles/core/runtime-v2';
-import { resolvePromotionHostLiveness, resolveWorkspaceHostToolSemantics, readPromptActivationInjectionStatuses, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, RUNTIME_BUDGET_OBSERVATION_STALE_REASON, RUNTIME_V2_EVENT_LOG_CANDIDATE_DIRS } from '@principles/host-runtime';
+import { resolvePromotionHostLiveness, resolveWorkspaceHostToolSemantics, readPromptActivationInjectionStatuses, operatorDeclaredBudgetResolution, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, RUNTIME_BUDGET_OBSERVATION_STALE_REASON, RUNTIME_V2_EVENT_LOG_CANDIDATE_DIRS } from '@principles/host-runtime';
+import { PROMPT_BUDGET_HOST_KINDS } from '@principles/core/runtime-v2';
 import { loadPdConfig, computeFlagsFromLoadResult } from '../config/pd-config-store.js';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -332,6 +333,21 @@ export class ActivationsConsoleModel {
                     ...(targetHost !== undefined ? { targetHost } : {}),
                 });
                 const perHostBudget = new Map([...budgetFacts.perHost].map(([hostKind, observation]) => [hostKind, runtimeBudgetObservationToResolution(observation)]));
+                // PRI-1020: hosts with no fresh observation fall back to the Owner's
+                // declared basis (.pd/config.yaml promptBudget), same as the grouped
+                // surface — observation wins when present.
+                const configLoad = loadPdConfig(this.workspaceDir);
+                const declaredConfig = configLoad.ok ? configLoad.effective.config.promptBudget : undefined;
+                const declaredHosts = new Set();
+                for (const hostKind of PROMPT_BUDGET_HOST_KINDS) {
+                    if (perHostBudget.has(hostKind))
+                        continue;
+                    const declared = operatorDeclaredBudgetResolution(declaredConfig, hostKind);
+                    if (declared !== undefined) {
+                        perHostBudget.set(hostKind, declared);
+                        declaredHosts.add(hostKind);
+                    }
+                }
                 const report = await readPromptActivationInjectionStatuses({
                     workspaceDir: this.workspaceDir,
                     ...(targetHost !== undefined ? { targetHost } : {}),
@@ -342,9 +358,11 @@ export class ActivationsConsoleModel {
                 });
                 // The status report resolved the route internally; bind the observation
                 // to THAT host only. A stale observation is never presented as current.
+                // PRI-1020: nor when a declared basis actually backed the route — the
+                // stale marker would contradict the declared source label.
                 const decidedHost = report.route.status === 'confirmed' ? report.route.hostKind : undefined;
                 const usedObservation = decidedHost !== undefined ? budgetFacts.perHost.get(decidedHost) : undefined;
-                const staleObservation = decidedHost !== undefined && usedObservation === undefined
+                const staleObservation = decidedHost !== undefined && usedObservation === undefined && !declaredHosts.has(decidedHost)
                     ? budgetFacts.stalePerHost.get(decidedHost)
                     : undefined;
                 promptInjectionRoute = {

package/console/dist/server/models/ApprovalsConsoleModel.js

@@ -3,7 +3,8 @@ import * as path from 'node:path';
 import { SqliteConnection, SqliteApprovalQueueStore, SqliteActivationStateStore, SqlitePIArtifactStore, ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, createProductionGateDeps, ApprovalCompletionService, ApprovalQueue, mapConfidenceToLabel, isArtifactRevisionOf, detectPromptReplacementTarget, buildOwnerRevisionArtifact, PrincipleTreeLedgerAdapter, MVP_CHANNELS, } from '@principles/core/runtime-v2';
 import { resolveLedgerPrincipleId } from './principle-id-resolution.js';
 import { loadPdConfig, computeFlagsFromLoadResult } from '../config/pd-config-store.js';
-import { resolveWorkspaceHostToolSemantics, checkPromptArtifactDeliverabilityById, resolveLivePromptInjectionProjection, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, } from '@principles/host-runtime';
+import { resolveWorkspaceHostToolSemantics, checkPromptArtifactDeliverabilityById, operatorDeclaredBudgetResolution, resolveLivePromptInjectionProjection, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, } from '@principles/host-runtime';
+import { PROMPT_BUDGET_HOST_KINDS } from '@principles/core/runtime-v2';
 const MVP_PROVEN_CHANNELS = new Set(MVP_CHANNELS);
 const EMPTY_STATS = { pending: 0, approved: 0, rejected: 0, cancelled: 0 };
 function isMissingTableError(err) {
@@ -21,7 +22,7 @@ function isActivationSuccess(activation) {
  * without its own basis lets one host's observation look like another host's
  * confirmation.
  */
-function describeBudgetBasis(hostKind, facts) {
+function describeBudgetBasis(hostKind, facts, declared) {
     const used = facts.perHost.get(hostKind);
     if (used !== undefined) {
         return used.capacityStatus === 'confirmed'
@@ -31,6 +32,11 @@ function describeBudgetBasis(hostKind, facts) {
             // budget, not a host window — say so.
             : `budget basis=runtime_observation_fallback (${hostKind}, runtime reason=${used.fallbackReason ?? 'unknown'}, observed at ${used.observedAt})`;
     }
+    // PRI-1020: the Owner's declared window backing this forecast — name it as
+    // a declaration, never as a runtime fact.
+    if (declared !== undefined) {
+        return `budget basis=operator_declared (${hostKind}, context window declared as ${declared.contextWindowTokens ?? 'unknown'} tokens in .pd/config.yaml)`;
+    }
     const stale = facts.stalePerHost.get(hostKind);
     if (stale !== undefined) {
         return `budget basis=fixed_fallback (the runtime budget observation for ${hostKind} is stale — older than 24h and NOT used as the current budget)`;
@@ -327,6 +333,11 @@ export class ApprovalsConsoleModel {
     async checkPromptInjectionBudget(activationId, targetHost) {
         let resolution;
         let budgetFacts;
+        // PRI-1020: declared bases per host (Owner's promptBudget config), used
+        // when a host has no fresh runtime observation. Scoped here so the basis
+        // descriptions at the call sites below see the same facts the projection
+        // ran under.
+        let declaredBudgetByHost = new Map();
         // PRI-1017: the post-approval forecast runs under the workspace's most
         // recent runtime budget OBSERVATION for the target host (per-host for
         // unconfirmed routes), so the warning describes the budget the last real
@@ -339,6 +350,19 @@ export class ApprovalsConsoleModel {
                 ...(targetHost !== undefined ? { targetHost } : {}),
             });
             const perHostBudget = new Map([...budgetFacts.perHost].map(([hostKind, observation]) => [hostKind, runtimeBudgetObservationToResolution(observation)]));
+            // PRI-1020: no fresh observation ⇒ the Owner's declared basis, same as
+            // the grouped/activations surfaces; a fresh observation still wins.
+            const configLoad = loadPdConfig(this.workspaceDir);
+            const declaredConfig = configLoad.ok ? configLoad.effective.config.promptBudget : undefined;
+            for (const hostKind of PROMPT_BUDGET_HOST_KINDS) {
+                if (perHostBudget.has(hostKind))
+                    continue;
+                const declared = operatorDeclaredBudgetResolution(declaredConfig, hostKind);
+                if (declared !== undefined) {
+                    perHostBudget.set(hostKind, declared);
+                    declaredBudgetByHost.set(hostKind, declared);
+                }
+            }
             resolution = await resolveLivePromptInjectionProjection({
                 workspaceDir: this.workspaceDir,
                 ...(targetHost !== undefined ? { targetHost } : {}),
@@ -358,7 +382,7 @@ export class ApprovalsConsoleModel {
             // Each per-host forecast ran under ITS OWN budget basis (observation,
             // runtime fallback, stale fallback, or no observation) — the headline
             // numbers must never imply a single host's confirmation covers them all.
-            return `injection_capacity_unconfirmed: the activation is committed but this workspace's effective injection route cannot be confirmed (${resolution.decision.unconfirmedReason ?? 'unknown reason'}); per-host forecasts: ${resolution.perHost.map((entry) => `${entry.hostKind}=${entry.projection.route} (${entry.projection.usedChars}c/${entry.projection.budget}c${entry.projection.truncated ? ', truncated' : ''}) ${describeBudgetBasis(entry.hostKind, budgetFacts)}`).join('; ')}. nextAction=${resolution.decision.nextAction ?? 'pass an explicit target host (openclaw|codex|workbuddy)'}`;
+            return `injection_capacity_unconfirmed: the activation is committed but this workspace's effective injection route cannot be confirmed (${resolution.decision.unconfirmedReason ?? 'unknown reason'}); per-host forecasts: ${resolution.perHost.map((entry) => `${entry.hostKind}=${entry.projection.route} (${entry.projection.usedChars}c/${entry.projection.budget}c${entry.projection.truncated ? ', truncated' : ''}) ${describeBudgetBasis(entry.hostKind, budgetFacts, declaredBudgetByHost.get(entry.hostKind))}`).join('; ')}. nextAction=${resolution.decision.nextAction ?? 'pass an explicit target host (openclaw|codex|workbuddy)'}`;
         }
         const { projection } = resolution;
         if (projection.injectedActivationIds.includes(activationId)) {
@@ -367,7 +391,7 @@ export class ApprovalsConsoleModel {
         // Never let a stale observation masquerade as the current budget in the
         // warning: name the basis the forecast actually ran under.
         const decidedHost = resolution.decision.hostKind;
-        const budgetBasisNote = decidedHost === undefined ? '' : ` ${describeBudgetBasis(decidedHost, budgetFacts)}`;
+        const budgetBasisNote = decidedHost === undefined ? '' : ` ${describeBudgetBasis(decidedHost, budgetFacts, declaredBudgetByHost.get(decidedHost))}`;
         const projectionDetail = projection.warnings.length > 0 ? ` projection warnings: ${projection.warnings.join(' | ')}` : '';
         // AC-02/R-A3: oversized is independent of `truncated` — say WHY first.
         if (projection.oversizedActivationIds.includes(activationId)) {

package/console/dist/server/models/ApprovalsGroupedConsoleModel.js

@@ -1,6 +1,8 @@
 import { SqliteConnection, SqliteApprovalQueueStore, SqlitePIArtifactStore, ApprovalQueue, RUNTIME_V2_PRINCIPLE_BUDGET, detectPromptReplacementTarget, SqliteActivationStateStore, } from '@principles/core/runtime-v2';
-import { checkPromptArtifactDeliverability, resolveLivePromptInjectionProjection, RUNTIME_BUDGET_OBSERVATION_STALE_REASON, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, } from '@principles/host-runtime';
+import { checkPromptArtifactDeliverability, operatorDeclaredBudgetResolution, resolveLivePromptInjectionProjection, RUNTIME_BUDGET_OBSERVATION_STALE_REASON, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, } from '@principles/host-runtime';
+import { PROMPT_BUDGET_HOST_KINDS } from '@principles/core/runtime-v2';
 import { loadLedger } from '@principles/core/principle-tree-ledger';
+import { loadPdConfig } from '../config/pd-config-store.js';
 import { createArtifactPrincipleResolutionDeps, resolveArtifactPrincipleId, } from './artifact-principle-resolver.js';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -391,6 +393,23 @@ export class ApprovalsGroupedConsoleModel {
                 ...(targetHost !== undefined ? { targetHost } : {}),
             });
             const perHostBudget = new Map([...facts.perHost].map(([hostKind, observation]) => [hostKind, runtimeBudgetObservationToResolution(observation)]));
+            // PRI-1020: a host with NO fresh runtime observation falls back to the
+            // Owner's declared basis (.pd/config.yaml promptBudget) instead of the
+            // fixed 2000 — resolved through the same tier-0 policy branch the real
+            // injection uses, so forecast and injection can never disagree. A fresh
+            // observation still wins (it is what the runtime actually did last).
+            const configLoad = loadPdConfig(this.workspaceDir);
+            const declaredConfig = configLoad.ok ? configLoad.effective.config.promptBudget : undefined;
+            const declaredHosts = new Set();
+            for (const hostKind of PROMPT_BUDGET_HOST_KINDS) {
+                if (perHostBudget.has(hostKind))
+                    continue;
+                const declared = operatorDeclaredBudgetResolution(declaredConfig, hostKind);
+                if (declared !== undefined) {
+                    perHostBudget.set(hostKind, declared);
+                    declaredHosts.add(hostKind);
+                }
+            }
             const resolution = await resolveLivePromptInjectionProjection({
                 workspaceDir: this.workspaceDir,
                 ...(targetHost !== undefined ? { targetHost } : {}),
@@ -424,7 +443,13 @@ export class ApprovalsGroupedConsoleModel {
                         nextAction: resolution.decision.nextAction ?? 'pass an explicit target host (openclaw|codex|workbuddy)',
                         perHost: resolution.perHost.map((entry) => {
                             const observation = facts.perHost.get(entry.hostKind);
-                            const stale = observation === undefined ? facts.stalePerHost.get(entry.hostKind) : undefined;
+                            // PRI-1020: the stale marker explains a FALLBACK that ignored a
+                            // too-old observation; it must not contradict a declared basis
+                            // that was actually used.
+                            const declaredUsed = observation === undefined && declaredHosts.has(entry.hostKind);
+                            const stale = observation === undefined && !declaredUsed
+                                ? facts.stalePerHost.get(entry.hostKind)
+                                : undefined;
                             return {
                                 hostKind: entry.hostKind,
                                 route: entry.projection.route,
@@ -450,7 +475,8 @@ export class ApprovalsGroupedConsoleModel {
             // to whichever host happens to appear first.
             const decidedHost = resolution.decision.hostKind;
             const usedObservation = decidedHost !== undefined ? facts.perHost.get(decidedHost) : undefined;
-            const staleObservation = decidedHost !== undefined && usedObservation === undefined
+            const declaredHeadlineUsed = decidedHost !== undefined && usedObservation === undefined && declaredHosts.has(decidedHost);
+            const staleObservation = decidedHost !== undefined && usedObservation === undefined && !declaredHeadlineUsed
                 ? facts.stalePerHost.get(decidedHost)
                 : undefined;
             return {

package/console/dist/shared/prompt-injection-contract.d.ts

@@ -15,7 +15,7 @@
 export type PromptInjectionTargetHostName = 'openclaw' | 'codex' | 'workbuddy';
 export type PromptInjectionRouteName = 'legacy_trim' | 'shared_render';
 export type PromptInjectionBudgetScopeName = 'selected_lines' | 'full_directive_context';
-export type PromptBudgetCapacitySourceWire = 'host_effective_window' | 'pi_catalog_exact' | 'legacy_fallback';
+export type PromptBudgetCapacitySourceWire = 'operator_declared' | 'host_effective_window' | 'pi_catalog_exact' | 'legacy_fallback';
 export type PromptBudgetCapacityStatusWire = 'confirmed' | 'unknown';
 /**
  * Bounded machine-readable fallback reason. Closed set mirroring the core

package/console/dist/ui/i18n/en.json

@@ -102,6 +102,7 @@
             "promptCapacityListRoute": "list injection (billed on the selected lines)",
             "promptCapacityPerHostEntry": "{{host}}: {{billing}} — {{used}}/{{budget}} chars{{full}}{{observed}}",
             "promptCapacityPerHostFull": " (full)",
+            "promptCapacityPerHostDeclared": "(budget from the workspace config declaration)",
             "promptCapacityPerHostObserved": " (budget from this host's most recent runtime observation at {{observedAt}})",
             "promptCapacityViewAsHost": "View as {{host}}",
             "promptCapacityClearHost": "Clear selection",
@@ -116,6 +117,8 @@
             "promptBudgetFallbackObservedSuffix": "; the runtime's most recent observation was at {{observedAt}}",
             "budgetCapacitySourceHostWindow": "host effective context window",
             "budgetCapacitySourcePiCatalog": "exact model catalog match",
+            "budgetCapacitySourceOperatorDeclared": "workspace config declaration",
+            "budgetCapacitySourceOperatorDeclaredSuffix": ", source: workspace config declaration",
             "budgetFallbackReason": {
                 "host_capacity_absent": "the host provided no context capacity fact",
                 "host_capacity_source_untrusted": "the host capacity source is untrusted",
@@ -1456,7 +1459,7 @@
             "configDisabled": "All agents are disabled.",
             "configErrors": "Configuration Errors",
             "internalAgents": "Internal Agents",
-            "internalAgentsDescription": "Each PD internal agent uses an OpenClaw runtime profile. Keys stay outside PD.",
+            "internalAgentsDescription": "Each PD internal agent runs on the runtime profile you configure — provider, model, and the name of the environment variable holding your API key. Keys stay outside PD.",
             "defaultRuntime": "Default Runtime",
             "defaultRuntimeDescription": "The default runtime profile for agents without explicit overrides.",
             "advancedDiagnostics": "Advanced Diagnostics",

package/console/dist/ui/i18n/zh-CN.json

@@ -102,6 +102,7 @@
             "promptCapacityListRoute": "列表注入（按选中行计费）",
             "promptCapacityPerHostEntry": "{{host}}：{{billing}} — {{used}}/{{budget}} 字符{{full}}{{observed}}",
             "promptCapacityPerHostFull": "（已满）",
+            "promptCapacityPerHostDeclared": "（预算来自工作区配置声明）",
             "promptCapacityPerHostObserved": "（预算来自该宿主最近一次运行时观测，观测于 {{observedAt}}）",
             "promptCapacityViewAsHost": "按 {{host}} 查看",
             "promptCapacityClearHost": "清除选择",
@@ -116,6 +117,8 @@
             "promptBudgetFallbackObservedSuffix": "；运行时最近一次观测于 {{observedAt}}",
             "budgetCapacitySourceHostWindow": "宿主有效上下文窗口",
             "budgetCapacitySourcePiCatalog": "模型目录精确匹配",
+            "budgetCapacitySourceOperatorDeclared": "工作区配置声明",
+            "budgetCapacitySourceOperatorDeclaredSuffix": "，来源: 工作区配置声明",
             "budgetFallbackReason": {
                 "host_capacity_absent": "宿主未提供上下文容量事实",
                 "host_capacity_source_untrusted": "宿主容量来源不可信",
@@ -1456,7 +1459,7 @@
             "configDisabled": "所有智能体已停用。",
             "configErrors": "配置错误",
             "internalAgents": "内部智能体",
-            "internalAgentsDescription": "每个 PD 内部智能体使用一个 OpenClaw 运行时配置。密钥留在 PD 之外。",
+            "internalAgentsDescription": "每个 PD 内部智能体都运行在您配置的运行时配置上——provider、model，以及存放 API Key 的环境变量名。密钥本身留在 PD 之外。",
             "defaultRuntime": "默认运行时",
             "defaultRuntimeDescription": "未设置显式覆盖的智能体使用的默认运行时配置。",
             "advancedDiagnostics": "高级诊断",

package/console/dist/ui/pages/activation/ActivationPage.js

@@ -414,7 +414,9 @@ export function ActivationPage() {
                                         defaultValue: "注入状态中的预算数字取自最近一次运行时观测（来源 {{source}}，上下文 {{window}} tokens，观测于 {{observedAt}}），并非实时确认值。",
                                         source: route.budgetCapacitySource === "pi_catalog_exact"
                                             ? t("pages.focus.budgetCapacitySourcePiCatalog", { defaultValue: "模型目录精确匹配" })
-                                            : t("pages.focus.budgetCapacitySourceHostWindow", { defaultValue: "宿主有效上下文窗口" }),
+                                            : route.budgetCapacitySource === "operator_declared"
+                                                ? t("pages.focus.budgetCapacitySourceOperatorDeclared", { defaultValue: "工作区配置声明" })
+                                                : t("pages.focus.budgetCapacitySourceHostWindow", { defaultValue: "宿主有效上下文窗口" }),
                                         window: route.budgetContextWindowTokens,
                                         observedAt: route.budgetObservedAt,
                                     }) }));

package/console/dist/ui/pages/control-center/ControlCenterPage.js

@@ -27,6 +27,14 @@ function validateSource(raw) {
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+// Overall readiness → the plain-language sentence shown under the internal-agents heading.
+const CONFIG_READINESS_KEY = {
+    ready: "pages.controlCenter.configReady",
+    needs_setup: "pages.controlCenter.configNeedsSetup",
+    not_ready: "pages.controlCenter.configNotReady",
+    unknown: "pages.controlCenter.configUnknown",
+    disabled: "pages.controlCenter.configDisabled",
+};
 function validateReadinessStatus(raw) {
     if (typeof raw !== "string")
         return null;
@@ -486,7 +494,9 @@ export function ControlCenterPage() {
     };
     const overallReadiness = computeOverallReadiness(diagnostics);
     const availableProfiles = catalogData?.profiles ?? configData.runtimeProfiles;
-    return (_jsx(PageShell, { children: _jsxs("div", { className: "animate-[pdFadeIn_400ms_ease-out]", children: [_jsx("div", { className: "font-mono text-[12px] tracking-[0.14em] text-ink-3 uppercase mb-3", children: t("pages.controlCenter.eyebrow") }), _jsx("h1", { className: "text-[29px] font-semibold tracking-tight text-ink mb-2", children: t("pages.controlCenter.title") }), _jsx("p", { className: "text-ink-3 text-[14px] max-w-[760px] leading-relaxed mb-7", children: t("pages.controlCenter.subtitle") }), _jsx(WorkflowDiagram, {}), _jsx(CompactStatusBar, { readiness: overallReadiness, agents: configData.agents }), _jsx(DesignGatePanel, {}), _jsxs("section", { className: "mt-8", "aria-labelledby": "section-agents", children: [_jsx(SectionTitle, { id: "section-agents", children: t("pages.controlCenter.internalAgents") }), _jsx("p", { className: "text-ink-3 text-[13px] leading-relaxed mb-3", children: t("pages.controlCenter.internalAgentsDescription") }), (() => {
+    return (_jsx(PageShell, { children: _jsxs("div", { className: "animate-[pdFadeIn_400ms_ease-out]", children: [_jsx("div", { className: "font-mono text-[12px] tracking-[0.14em] text-ink-3 uppercase mb-3", children: t("pages.controlCenter.eyebrow") }), _jsx("h1", { className: "text-[29px] font-semibold tracking-tight text-ink mb-2", children: t("pages.controlCenter.title") }), _jsx("p", { className: "text-ink-3 text-[14px] max-w-[760px] leading-relaxed mb-7", children: t("pages.controlCenter.subtitle") }), _jsx(WorkflowDiagram, {}), _jsx(CompactStatusBar, { readiness: overallReadiness, agents: configData.agents }), _jsx(DesignGatePanel, {}), _jsxs("section", { className: "mt-8", "aria-labelledby": "section-agents", children: [_jsx(SectionTitle, { id: "section-agents", children: t("pages.controlCenter.internalAgents") }), _jsx("p", { className: "text-ink-3 text-[13px] leading-relaxed mb-3", children: t("pages.controlCenter.internalAgentsDescription") }), _jsx("p", { className: overallReadiness === "ready"
+                                ? "text-ink-4 text-[13px] leading-relaxed mb-3"
+                                : "text-amber text-[13px] leading-relaxed mb-3", children: t(CONFIG_READINESS_KEY[overallReadiness]) }), (() => {
                             const { groups, unknown } = groupAgentsByDependency(configData.agents);
                             const locale = i18n.language.startsWith("en")
                                 ? "en"

package/console/dist/ui/pages/focus/FocusPage.js

@@ -441,15 +441,24 @@ function PendingReviewCard({ group, actionsLockedReason, onDecisionApplied, prom
                                     // present a past observation as a live confirmation.
                                     ? t("pages.focus.promptBudgetObservedNote", {
                                         defaultValue: "预算取自最近一次运行时观测（来源 {{source}}，上下文 {{window}} tokens，观测于 {{observedAt}}）",
+                                        // PRI-1020: three-way source label — the owner-declared
+                                        // basis reads as a declaration, never as a runtime fact.
                                         source: promptInjection.budgetCapacitySource === "pi_catalog_exact"
                                             ? t("pages.focus.budgetCapacitySourcePiCatalog", { defaultValue: "模型目录精确匹配" })
-                                            : t("pages.focus.budgetCapacitySourceHostWindow", { defaultValue: "宿主有效上下文窗口" }),
+                                            : promptInjection.budgetCapacitySource === "operator_declared"
+                                                ? t("pages.focus.budgetCapacitySourceOperatorDeclared", { defaultValue: "工作区配置声明" })
+                                                : t("pages.focus.budgetCapacitySourceHostWindow", { defaultValue: "宿主有效上下文窗口" }),
                                         window: promptInjection.budgetContextWindowTokens,
                                         observedAt: promptInjection.budgetObservedAt,
                                     })
                                     : t("pages.focus.promptBudgetModelAwareNote", {
-                                        defaultValue: "预算按已确认的模型上下文解析（{{window}} tokens）",
+                                        defaultValue: "预算按已确认的模型上下文解析（{{window}} tokens{{sourceSuffix}}）",
                                         window: promptInjection.budgetContextWindowTokens,
+                                        // PRI-1020: without an observation, a confirmed budget can
+                                        // only come from the Owner's declaration — say so.
+                                        sourceSuffix: promptInjection.budgetCapacitySource === "operator_declared"
+                                            ? t("pages.focus.budgetCapacitySourceOperatorDeclaredSuffix", { defaultValue: "，来源: 工作区配置声明" })
+                                            : "",
                                     })
                                 : promptInjection.budgetObservedAt !== undefined
                                     // PRI-1017: a fallback that still carries an observation
@@ -822,7 +831,14 @@ export function FocusPage({ featureFlags }) {
                                                             defaultValue: "（预算来自该宿主最近一次运行时观测，观测于 {{observedAt}}）",
                                                             observedAt: entry.budgetObservedAt,
                                                         })
-                                                        : "",
+                                                        // PRI-1020: a declared basis is the Owner's own config
+                                                        // fact — label it as a declaration, never as an
+                                                        // observation.
+                                                        : entry.budgetCapacitySource === "operator_declared"
+                                                            ? t("pages.focus.promptCapacityPerHostDeclared", {
+                                                                defaultValue: "（预算来自工作区配置声明）",
+                                                            })
+                                                            : "",
                                                 }), entry.budgetFallbackReason !== undefined && (_jsxs("span", { "data-testid": `prompt-capacity-perhost-reason-${entry.hostKind}`, children: [" · ", t(`pages.focus.budgetFallbackReason.${entry.budgetFallbackReason}`, {
                                                             defaultValue: entry.budgetFallbackReason,
                                                         })] }))] }, entry.hostKind))) }), unconfirmed.nextAction !== undefined && (_jsx("p", { className: "mt-1 text-ink-2", children: unconfirmed.nextAction })), _jsxs("div", { className: "mt-2 flex gap-2", children: [["openclaw", "codex", "workbuddy"].map((host) => (_jsx("button", { type: "button", onClick: () => setPromptTargetHost(host), "data-testid": `prompt-capacity-pick-${host}`, className: `inline-flex items-center border rounded-[3px] px-[10px] py-[4px] transition-colors ${promptTargetHost === host ? "border-amber bg-amber/10" : "border-line hover:border-line-2"}`, children: t("pages.focus.promptCapacityViewAsHost", { host: host === "openclaw" ? "OpenClaw" : host === "workbuddy" ? "WorkBuddy" : "Codex" }) }, host))), promptTargetHost !== null && (_jsx("button", { type: "button", onClick: () => setPromptTargetHost(null), "data-testid": "prompt-capacity-pick-clear", className: "inline-flex items-center border border-line rounded-[3px] px-[10px] py-[4px] hover:border-line-2", children: t("pages.focus.promptCapacityClearHost", { defaultValue: "清除选择" }) }))] })] }));

package/console/dist/ui/utils/validators.js

@@ -85,7 +85,7 @@ function isPromptBudgetFallbackReason(value) {
     return isString(value) && PROMPT_BUDGET_FALLBACK_REASONS.has(value);
 }
 function isPromptBudgetCapacitySource(value) {
-    return value === 'host_effective_window' || value === 'pi_catalog_exact' || value === 'legacy_fallback';
+    return value === 'operator_declared' || value === 'host_effective_window' || value === 'pi_catalog_exact' || value === 'legacy_fallback';
 }
 function isPromptBudgetCapacityStatus(value) {
     return value === 'confirmed' || value === 'unknown';