create-principles-disciple 1.146.1 → 1.146.2

package/_release/product-identity.json

@@ -1,5 +1,5 @@
 {
   "schemaVersion": 1,
   "productVersion": "2.7.0",
-  "sourceCommit": "028bd1d8197cd5e6cd3187d3e6c0944848a95b9b"
+  "sourceCommit": "0a1891dc148e850c30d4fb823ae0a816ec8e4cf8"
 }

package/console/dist/server/models/ActivationsConsoleModel.d.ts

@@ -2,6 +2,7 @@ import type { ActivationStatusRecord, PromotionReadinessResult, ActivationContro
 import { type PromptInjectionTargetHost } from '@principles/host-runtime';
 import type { PromptActivationInjectionStatusWire, PromptInjectionRouteSummaryWire } from '../../shared/prompt-injection-contract.js';
 import { type GovernanceAuditWriter } from 'principles-disciple/governance-audit';
+import type { ApprovedRuleRevisionRequest } from '../../shared/approved-rule-revision-contract.js';
 /**
  * PRI-491 — owner-observable activation record.
  *
@@ -151,6 +152,8 @@ export declare class ActivationsConsoleModel {
     private readonly workspaceDir;
     private readonly governanceAuditWriter;
     constructor(workspaceDir: string, governanceAuditWriter?: GovernanceAuditWriter);
+    previewApprovedRuleRevision(activationId: string): Promise<import("@principles/core/runtime-v2").ApprovedRuleRevisionPreview>;
+    reviseApprovedRuleOnce(activationId: string, input: ApprovedRuleRevisionRequest, actor: OwnerPromotionActor): Promise<import("@principles/core/runtime-v2").ApprovedRuleRevisionResult>;
     getActivations(targetHost?: PromptInjectionTargetHost): Promise<ActivationsResponse>;
     getOwnerReview(activationId: string, ownerIdentityConfigured?: boolean, options?: {
         ownerActor?: OwnerPromotionActor;

package/console/dist/server/models/ActivationsConsoleModel.js

@@ -1,4 +1,4 @@
-import { SqliteConnection, SqliteActivationStateStore, SqlitePIArtifactStore, extractPrincipleId, extractEvidenceRefs, PromotionReadinessReader, RuleHostWriter, createProductionGateDeps, SqliteActivationSafetyStore, isFeatureEnabled, RuleCodeOwnerDecisionService, collectOpenClawPromotionChecks, summarizeRuleCodeShadowEvents, buildPromotionEvidenceSnapshot, } from '@principles/core/runtime-v2';
+import { SqliteConnection, SqliteActivationStateStore, SqlitePIArtifactStore, extractPrincipleId, extractEvidenceRefs, PromotionReadinessReader, RuleHostWriter, createProductionGateDeps, SqliteActivationSafetyStore, isFeatureEnabled, RuleCodeOwnerDecisionService, collectOpenClawPromotionChecks, summarizeRuleCodeShadowEvents, buildPromotionEvidenceSnapshot, createRuntimeStateHandle, PrincipleTreeLedgerAdapter, previewApprovedRuleRevision, reviseApprovedRuleOnce, } from '@principles/core/runtime-v2';
 import { resolvePromotionHostLiveness, resolveWorkspaceHostToolSemantics, readPromptActivationInjectionStatuses, operatorDeclaredBudgetResolution, runtimeBudgetObservationToResolution, selectConsoleRuntimeBudgetFacts, RUNTIME_BUDGET_OBSERVATION_STALE_REASON, RUNTIME_V2_EVENT_LOG_CANDIDATE_DIRS } from '@principles/host-runtime';
 import { PROMPT_BUDGET_HOST_KINDS } from '@principles/core/runtime-v2';
 import { loadPdConfig, computeFlagsFromLoadResult } from '../config/pd-config-store.js';
@@ -168,6 +168,30 @@ export class ActivationsConsoleModel {
         this.workspaceDir = workspaceDir;
         this.governanceAuditWriter = governanceAuditWriter;
     }
+    async previewApprovedRuleRevision(activationId) {
+        const handle = await createRuntimeStateHandle({ workspaceDir: this.workspaceDir, readonly: true, bootstrapIfMissing: false });
+        try {
+            const ledger = new PrincipleTreeLedgerAdapter({ stateDir: path.join(this.workspaceDir, '.state') });
+            return await previewApprovedRuleRevision({ stateManager: handle.stateManager,
+                ledger: { resolveForCandidate: async (id) => ledger.resolveCandidatePrincipleIdentity(id, 'rule'),
+                    withLockedRuleCandidateIdentity: (id, operation) => ledger.withLockedRuleCandidateIdentity(id, operation) }, activationId });
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    async reviseApprovedRuleOnce(activationId, input, actor) {
+        const handle = await createRuntimeStateHandle({ workspaceDir: this.workspaceDir, bootstrapIfMissing: false });
+        try {
+            const ledger = new PrincipleTreeLedgerAdapter({ stateDir: path.join(this.workspaceDir, '.state') });
+            return await reviseApprovedRuleOnce({ stateManager: handle.stateManager,
+                ledger: { resolveForCandidate: async (id) => ledger.resolveCandidatePrincipleIdentity(id, 'rule'),
+                    withLockedRuleCandidateIdentity: (id, operation) => ledger.withLockedRuleCandidateIdentity(id, operation) }, activationId, ...input, actor });
+        }
+        finally {
+            await handle.close();
+        }
+    }
     async getActivations(targetHost) {
         const stateDbPath = path.join(this.workspaceDir, '.pd', 'state.db');
         if (!fs.existsSync(stateDbPath)) {

package/console/dist/server/models/ApprovalsConsoleModel.d.ts

@@ -71,6 +71,11 @@ export type ApproveWithActivationResult = {
     error: 'prompt_replacement_refused';
     reason: string;
     nextAction: string;
+} | {
+    ok: false;
+    error: 'rule_replacement_refused';
+    reason: string;
+    nextAction: string;
 }
 /**
  * PD_PROMPT_CAPACITY_V1 R-B2: the prompt-channel write gate refused BEFORE

package/console/dist/server/models/ApprovalsConsoleModel.js

@@ -2,7 +2,7 @@ import { Value } from '@sinclair/typebox/value';
 import { approvalReviewMaterial } from './approval-review-material.js';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
-import { SqliteConnection, SqliteApprovalQueueStore, SqliteActivationStateStore, SqlitePIArtifactStore, ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, createProductionGateDeps, ApprovalCompletionService, ApprovalQueue, mapConfidenceToLabel, isArtifactRevisionOf, detectPromptReplacementTarget, buildOwnerRevisionArtifact, PrincipleTreeLedgerAdapter, MVP_CHANNELS, computeArtifactDigest, } from '@principles/core/runtime-v2';
+import { SqliteConnection, SqliteApprovalQueueStore, SqliteActivationStateStore, SqlitePIArtifactStore, ActivationDispatcher, PromptWriter, DeferArchiveWriter, RuleHostWriter, createProductionGateDeps, ApprovalCompletionService, ApprovalQueue, mapConfidenceToLabel, isArtifactRevisionOf, detectPromptReplacementTarget, detectRuleReplacementTarget, buildOwnerRevisionArtifact, PrincipleTreeLedgerAdapter, MVP_CHANNELS, computeArtifactDigest, } from '@principles/core/runtime-v2';
 import { resolveLedgerPrincipleId } from './principle-id-resolution.js';
 import { createArtifactPrincipleResolutionDeps } from './artifact-principle-resolver.js';
 import { loadPdConfig, computeFlagsFromLoadResult } from '../config/pd-config-store.js';
@@ -191,6 +191,39 @@ export class ApprovalsConsoleModel {
                 catch { /* best-effort */ }
             }
         }
+        // SPEC-RULECODE-APPROVED-REVISION-001 §B: approving a revised RuleCode
+        // artifact replaces its superseded shadow in the SAME transaction as the
+        // new activation (no stop-old-then-start-new window). Detection is
+        // fail-closed on ambiguity and refuses to shadow an already-live rule.
+        if (existing.channel === 'code_tool_hook' && (existing.status === 'pending' || (existing.status === 'approved' && options?.retryActivation === true))) {
+            const { connection } = this.createReadContext();
+            try {
+                const ruleArtifactStore = new SqlitePIArtifactStore(connection);
+                const detection = await detectRuleReplacementTarget({
+                    approvalArtifactId: existing.artifactId,
+                    getArtifactById: async (id) => ruleArtifactStore.getArtifactById(id),
+                    listRuleActivations: async () => new SqliteActivationStateStore(connection).listCodeToolHookActivations(),
+                });
+                if (!detection.ok) {
+                    // An unreadable NEW artifact is not a replacement decision: the
+                    // activation path already reports it with a precise reason and the
+                    // established status code. Only replacement-specific refusals stop here.
+                    if (!detection.error.startsWith('rule_replacement_artifact_unreadable')) {
+                        return { ok: false, error: 'rule_replacement_refused', reason: detection.error, nextAction: detection.nextAction };
+                    }
+                }
+                else {
+                    supersedeActivationId = detection.target?.supersededActivationId;
+                    supersedeArtifactId = detection.target?.supersededArtifactId;
+                }
+            }
+            finally {
+                try {
+                    connection.close();
+                }
+                catch { /* best-effort */ }
+            }
+        }
         const { queue: writeQueue, connection: writeConnection } = this.createWriteContext();
         let approvalResult;
         try {
@@ -236,7 +269,12 @@ export class ApprovalsConsoleModel {
                 }
             }
             catch { /* best-effort rollback */ }
-            return { ok: false, error: 'activation_failed', reason: detail, approvalRolledBack };
+            // Carry the dispatcher's nextAction (it names the concrete cause for a
+            // replacement failure); without it the Owner only sees a stable code.
+            const activationNextAction = 'nextAction' in activation && typeof activation.nextAction === 'string'
+                ? activation.nextAction : undefined;
+            return { ok: false, error: 'activation_failed', reason: detail, approvalRolledBack,
+                ...(activationNextAction !== undefined ? { nextAction: activationNextAction } : {}) };
         }
         // P1 #4 fix: when activation is skipped (feature flag disabled), surface
         // a clear warning so the owner knows behavior did NOT change. The approval

package/console/dist/server/routes/activations.js

@@ -1,6 +1,7 @@
 import { ActivationsConsoleModel } from '../models/ActivationsConsoleModel.js';
 import { ApprovalsConsoleModel } from '../models/ApprovalsConsoleModel.js';
 import { sendSuccess, sendError, sendNotFound } from '../utils/response.js';
+import { validateApprovedRuleRevisionRequest } from '../../shared/approved-rule-revision-contract.js';
 const MAX_BODY_SIZE = 1024 * 1024; // 1 MB
 const models = new Map();
 const approvalsModels = new Map();
@@ -116,6 +117,52 @@ export async function handleActivationsRoute(req, res, workspaceDir, subPath, au
         }
         return;
     }
+    const revisionMatch = /^\/([^/]+)\/(rule-revision-preview|revise-rule-once)$/.exec(subPath);
+    if (revisionMatch && ((req.method === 'GET' && revisionMatch[2] === 'rule-revision-preview')
+        || (req.method === 'POST' && revisionMatch[2] === 'revise-rule-once'))) {
+        const actor = authority?.ownerActor;
+        if (!actor) {
+            sendError(res, 403, 'owner_authentication_required', 'This revision requires the configured Owner identity.', { nextAction: 'Authenticate as the configured Owner in the Console.' });
+            return;
+        }
+        const [, rawId] = revisionMatch;
+        if (!rawId) {
+            sendError(res, 400, 'invalid_id', 'Activation ID is missing');
+            return;
+        }
+        let activationId;
+        try {
+            activationId = decodeURIComponent(rawId);
+        }
+        catch {
+            sendError(res, 400, 'invalid_id', 'Activation ID contains invalid URI encoding');
+            return;
+        }
+        let input;
+        if (req.method === 'POST') {
+            try {
+                input = validateApprovedRuleRevisionRequest(await readJson(req));
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                sendError(res, message === 'payload_too_large' ? 413 : 400, 'validation_error', message);
+                return;
+            }
+            if (!input) {
+                sendError(res, 400, 'validation_error', 'Revision requires the reviewed artifact, digest, binding/control/task versions, requestId and 1–4000 characters of directed feedback.', { nextAction: 'Refresh the revision preview and describe the required correction.' });
+                return;
+            }
+        }
+        try {
+            const model = getModel(workspaceDir);
+            sendSuccess(res, input ? await model.reviseApprovedRuleOnce(activationId, input, actor) : await model.previewApprovedRuleRevision(activationId));
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            sendError(res, 500, 'rule_revision_unavailable', message, { nextAction: 'Refresh the revision preview; keep the current rule in shadow.' });
+        }
+        return;
+    }
     const mutationMatch = /^\/([^/]+)\/(continue-observing|promote|reject-after-shadow|emergency-deactivate|recover-to-shadow)$/.exec(subPath);
     const pauseMatch = subPath === '/emergency-pause';
     const releaseMatch = /^\/emergency-pause\/([^/]+)\/release$/.exec(subPath);

package/console/dist/server/routes/approvals.js

@@ -175,7 +175,7 @@ export async function handleApprovalsRoute(req, res, workspaceDir, subPath) {
                 else if (result.error === 'unsupported_channel') {
                     sendError(res, 403, 'unsupported_channel', `Cannot approve unsupported channel. Only MVP proven channels (${MVP_CHANNEL_LIST}) can be approved.`);
                 }
-                else if (result.error === 'prompt_replacement_refused') {
+                else if (result.error === 'prompt_replacement_refused' || result.error === 'rule_replacement_refused') {
                     sendError(res, 409, result.error, result.reason, { nextAction: result.nextAction });
                 }
                 else if (result.error === 'activation_failed') {

package/console/dist/shared/approved-rule-revision-contract.d.ts

@@ -0,0 +1,8 @@
+import type { previewApprovedRuleRevision, reviseApprovedRuleOnce } from '@principles/core/runtime-v2';
+/** Wire projections of the core authority; no independent revision state. */
+export type ApprovedRuleRevisionPreview = Awaited<ReturnType<typeof previewApprovedRuleRevision>>;
+export type ApprovedRuleRevisionResult = Awaited<ReturnType<typeof reviseApprovedRuleOnce>>;
+export type ApprovedRuleRevisionRequest = Pick<Parameters<typeof reviseApprovedRuleOnce>[0], 'expectedArtifactId' | 'expectedArtifactDigest' | 'expectedBindingRevision' | 'expectedControlVersion' | 'expectedTaskRevisionEpoch' | 'requestId' | 'feedback'>;
+export declare function validateApprovedRuleRevisionRequest(value: unknown): ApprovedRuleRevisionRequest | null;
+export declare function validateApprovedRuleRevisionPreview(value: unknown): ApprovedRuleRevisionPreview | null;
+export declare function validateApprovedRuleRevisionResult(value: unknown): ApprovedRuleRevisionResult | null;

package/console/dist/shared/approved-rule-revision-contract.js

@@ -0,0 +1,48 @@
+function record(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function text(value) { return typeof value === 'string' && value.trim().length > 0; }
+function version(value) { return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0; }
+export function validateApprovedRuleRevisionRequest(value) {
+    if (!record(value) || !text(value.expectedArtifactId) || !text(value.expectedArtifactDigest)
+        || !/^sha256:[a-f0-9]{64}$/.test(value.expectedArtifactDigest)
+        || !version(value.expectedBindingRevision) || !version(value.expectedControlVersion)
+        || !version(value.expectedTaskRevisionEpoch) || !text(value.requestId) || value.requestId.length > 200
+        || !text(value.feedback) || value.feedback.length > 4000)
+        return null;
+    return { expectedArtifactId: value.expectedArtifactId, expectedArtifactDigest: value.expectedArtifactDigest,
+        expectedBindingRevision: value.expectedBindingRevision, expectedControlVersion: value.expectedControlVersion,
+        expectedTaskRevisionEpoch: value.expectedTaskRevisionEpoch, requestId: value.requestId, feedback: value.feedback.trim() };
+}
+function refused(value) {
+    return value.status === 'refused' && text(value.reason) && text(value.nextAction)
+        ? { status: 'refused', reason: value.reason, nextAction: value.nextAction } : null;
+}
+export function validateApprovedRuleRevisionPreview(value) {
+    if (!record(value))
+        return null;
+    if (value.status === 'refused')
+        return refused(value);
+    if (value.status !== 'ready' || !text(value.activationId) || !text(value.candidateId)
+        || !text(value.principleId) || !text(value.artificerTaskId) || !text(value.expectedArtifactId)
+        || !text(value.expectedArtifactDigest) || !/^sha256:[a-f0-9]{64}$/.test(value.expectedArtifactDigest)
+        || !version(value.expectedBindingRevision) || !version(value.expectedControlVersion)
+        || !version(value.expectedTaskRevisionEpoch))
+        return null;
+    return { status: 'ready', activationId: value.activationId, candidateId: value.candidateId,
+        principleId: value.principleId, artificerTaskId: value.artificerTaskId,
+        expectedArtifactId: value.expectedArtifactId, expectedArtifactDigest: value.expectedArtifactDigest,
+        expectedBindingRevision: value.expectedBindingRevision, expectedControlVersion: value.expectedControlVersion,
+        expectedTaskRevisionEpoch: value.expectedTaskRevisionEpoch };
+}
+export function validateApprovedRuleRevisionResult(value) {
+    if (!record(value))
+        return null;
+    if (value.status === 'refused')
+        return refused(value);
+    if ((value.status !== 'started' && value.status !== 'already_started') || !text(value.artificerTaskId)
+        || !text(value.causeId) || !version(value.taskRevisionEpoch))
+        return null;
+    return { status: value.status, artificerTaskId: value.artificerTaskId,
+        causeId: value.causeId, taskRevisionEpoch: value.taskRevisionEpoch };
+}

package/console/dist/ui/api.d.ts

@@ -4,6 +4,7 @@ import type { OwnerDecisionsData, OwnerResolutionResultData, OwnerDecisionInboxD
 import type { DesignGateAction, DesignGateDecision, DesignGateDeclaration, DesignGateScope } from "@principles/core/runtime-v2/internalization/design-gate-facts";
 import type { RuleBindingReviewView, RuleBindingQueueView } from '../shared/rule-candidate-binding-contract.js';
 import type { RuleCandidateBindingRequest } from '@principles/core/runtime-v2';
+import type { ApprovedRuleRevisionPreview, ApprovedRuleRevisionRequest, ApprovedRuleRevisionResult } from '../shared/approved-rule-revision-contract.js';
 import type { GovernanceExperienceSnapshot, OwnerGovernanceView, OwnerDecisionViewCore } from '@principles/core/runtime-v2';
 import type { OwnerIdentityViewData, OwnerIdentityRegisterData, OwnerIdentityUnregisterData } from "./utils/validators.js";
 import type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, FeedbackChannelsData, FeedbackSubmitResultData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, RecoveryResultData, FailedTaskDetailData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, UpdateRecoveryData, UpdateTransactionData, ApprovalRecordData, PrinciplesListData, CorePrinciplesData, ApprovalsGroupedData, EvidenceChainData, TrajectoryData, IntentSummaryData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, IntentInitResultData, IntentSaveResultData, IntentRawContentData, IntentVersionData, RuleCodeOwnerReviewData, RuleCodeMutationData } from "./utils/validators.js";
@@ -311,6 +312,8 @@ declare function fetchApprovalsGrouped(targetHost?: 'openclaw' | 'codex' | 'work
 declare function fetchAllActivations(targetHost?: 'openclaw' | 'codex' | 'workbuddy'): Promise<ApiResponse<ActivationsData>>;
 declare function disableActivation(activationId: string): Promise<ApiResponse<DisableActivationData>>;
 declare function fetchRuleCodeOwnerReview(activationId: string): Promise<ApiResponse<RuleCodeOwnerReviewData>>;
+export declare function fetchApprovedRuleRevisionPreview(activationId: string): Promise<ApiResponse<ApprovedRuleRevisionPreview>>;
+export declare function reviseApprovedRuleOnce(activationId: string, input: ApprovedRuleRevisionRequest): Promise<ApiResponse<ApprovedRuleRevisionResult>>;
 export interface ProposeRevisionData {
     ok: boolean;
     alreadyPending?: boolean;

package/console/dist/ui/api.js

@@ -1,5 +1,6 @@
 import { validateApprovalReview } from './utils/approval-review.js';
 import { clearStoredToken, loadStoredToken, storeToken } from "./utils/token-storage.js";
+import { validateApprovedRuleRevisionPreview, validateApprovedRuleRevisionResult } from '../shared/approved-rule-revision-contract.js';
 import { validateBindingReview, validateBindingQueue, validateBindingMutation, validateBindingRevise } from './utils/rule-binding-validators.js';
 import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateFailedTaskDetail, validateOwnerDecisionsData, validateOwnerResolutionResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateUpdateRecovery, validateUpdateTransaction, validateApprovalRecordDirect, validatePrinciplesList, validateCorePrinciples, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateOwnerDecisionViewCore, validateOwnerDecisionInbox, validateOwnerDecisionLibrary, validateGovernanceExperienceSnapshot, validateRuleCodeOwnerReview, validateRuleCodeMutation, validateOwnerIdentityView, validateOwnerIdentityRegister, validateOwnerIdentityUnregister, } from "./utils/validators.js";
 // ── Auth ──────────────────────────────────────────────────────────────────────
@@ -793,6 +794,14 @@ async function disableActivation(activationId) {
 async function fetchRuleCodeOwnerReview(activationId) {
     return request(`/api/v1/activations/${encodeURIComponent(activationId)}/owner-review`, undefined, validateRuleCodeOwnerReview);
 }
+export async function fetchApprovedRuleRevisionPreview(activationId) {
+    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/rule-revision-preview`, undefined, validateApprovedRuleRevisionPreview);
+}
+export async function reviseApprovedRuleOnce(activationId, input) {
+    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/revise-rule-once`, {
+        method: 'POST', body: JSON.stringify(input),
+    }, validateApprovedRuleRevisionResult);
+}
 async function proposePromptRevision(activationId, statement, targetHost) {
     return request(`/api/v1/activations/${encodeURIComponent(activationId)}/propose-revision`, {
         method: 'POST',

package/console/dist/ui/i18n/en.json

@@ -1371,6 +1371,13 @@
             "evaluationErrors": "Errors",
             "notCollected": "Not collected",
             "scopeArtifactCode": "Scope, artifact and implementation",
+            "ruleRevisionTitle": "Revise this rule for a new review",
+            "ruleRevisionReviewQueue": "View review queue",
+            "ruleRevisionBoundary": "Revise once using this feedback. Existing code and approvals are preserved. New code requires fresh approval and will not activate automatically.",
+            "ruleRevisionFeedback": "Required correction (up to 4000 characters)",
+            "ruleRevisionOnce": "Revise once with feedback",
+            "ruleRevisionStarted": "Revision queued. The result will appear for review; the current rule stays in shadow.",
+            "ruleRevisionAlreadyExists": "This artifact already has a revision; this request did not start a new one.",
             "ownerReviewNote": "Owner review note",
             "continueObserving": "Continue observing",
             "rejectAfterShadow": "Reject and deactivate",

package/console/dist/ui/i18n/zh-CN.json

@@ -1371,6 +1371,13 @@
             "evaluationErrors": "异常",
             "notCollected": "未采集",
             "scopeArtifactCode": "范围、产物与实现代码",
+            "ruleRevisionTitle": "修正规则后重新审阅",
+            "ruleRevisionReviewQueue": "查看待审列表",
+            "ruleRevisionBoundary": "只按本次反馈修订一次，保留旧规则和审批记录。新代码需重新审阅批准，不会自动启用。",
+            "ruleRevisionFeedback": "需要修正什么（最多4000字）",
+            "ruleRevisionOnce": "按反馈修订一次",
+            "ruleRevisionStarted": "修订已排队。完成后将在待审列表出现；当前规则保持影子状态。",
+            "ruleRevisionAlreadyExists": "该工件已有修订，本次请求未启动新的修订。",
             "ownerReviewNote": "拥有者评审备注",
             "continueObserving": "继续观察",
             "rejectAfterShadow": "拒绝并停用",

package/console/dist/ui/pages/activation/ActivationPage.js

@@ -8,7 +8,7 @@ import { PageLoading } from "../../components/layout/page-loading.js";
 import { SectionTitle } from "../../components/layout/section-title.js";
 import { ShinyText } from "../../components/ui/shiny-text.js";
 import { Button } from "../../components/ui/button.js";
-import { fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchReceiptCounts, fetchRuleCodeOwnerReview, proposePromptRevision, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, } from "../../api.js";
+import { fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchReceiptCounts, fetchRuleCodeOwnerReview, fetchApprovedRuleRevisionPreview, reviseApprovedRuleOnce, proposePromptRevision, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, } from "../../api.js";
 import { ReceiptCoverageDisclosure, getReceiptSourceStatusLabelKey } from "../../components/receipts/ReceiptCoverageDisclosure.js";
 import { validateActivationsData, validateLifecycleMetricsData, isReversibleChannel, } from "./ActivationValidators.js";
 import { enumLabel } from "../../utils/enum-labels.js";
@@ -41,6 +41,73 @@ function CapabilityBoundaryDeclaration() {
     const { t } = useTranslation();
     return (_jsx("div", { className: "px-[18px] py-[14px] bg-panel border border-line rounded-[6px] text-ink-3 text-[13px] leading-relaxed", role: "note", "aria-label": t("pages.activation.boundaryLabel"), children: t("pages.activation.boundaryText") }));
 }
+function ApprovedRuleRevisionPanel({ activationId, onChanged }) {
+    const { t } = useTranslation();
+    const [preview, setPreview] = useState(null);
+    const [feedback, setFeedback] = useState('');
+    const [error, setError] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const [submitted, setSubmitted] = useState(false);
+    // A concurrent/earlier revision already holds this artifact's budget. That is
+    // not this request succeeding, and the feedback just typed was NOT recorded.
+    const [alreadyStarted, setAlreadyStarted] = useState(false);
+    // Preserve the exact request across a transport retry; a new ID is not a new
+    // budget (the server's budget is anchored on the artifact digest + receipt,
+    // so editing the feedback and resending cannot spend a second round).
+    const [pendingRequestId, setPendingRequestId] = useState(null);
+    const load = useCallback(async () => {
+        const result = await fetchApprovedRuleRevisionPreview(activationId);
+        if (result.success) {
+            setPreview(result.data);
+            setError(null);
+        }
+        else
+            setError(result.error);
+    }, [activationId]);
+    useEffect(() => { void load(); }, [load]);
+    const revise = async () => {
+        if (preview?.status !== 'ready')
+            return;
+        const input = {
+            expectedArtifactId: preview.expectedArtifactId, expectedArtifactDigest: preview.expectedArtifactDigest,
+            expectedBindingRevision: preview.expectedBindingRevision, expectedControlVersion: preview.expectedControlVersion,
+            expectedTaskRevisionEpoch: preview.expectedTaskRevisionEpoch,
+            requestId: pendingRequestId ?? crypto.randomUUID(), feedback: feedback.trim(),
+        };
+        setPendingRequestId(input.requestId);
+        setBusy(true);
+        setError(null);
+        const result = await reviseApprovedRuleOnce(activationId, input);
+        setBusy(false);
+        if (!result.success) {
+            setError(result.error);
+            return;
+        }
+        if (result.data.status === 'refused') {
+            setPendingRequestId(null);
+            // Take the server verdict as the current view: if the refresh below also
+            // fails, the stale `ready` form must not stay submittable.
+            setPreview(result.data);
+            setError(result.data.nextAction);
+            await load();
+            return;
+        }
+        if (result.data.status === 'already_started') {
+            toast.info(t('pages.activation.ruleRevisionAlreadyExists'));
+            setAlreadyStarted(true);
+            return;
+        }
+        // Announce before onChanged(): the parent reload unmounts this panel, and a
+        // panel-local confirmation would disappear with it.
+        toast.success(t('pages.activation.ruleRevisionStarted'));
+        setSubmitted(true);
+        onChanged();
+    };
+    return _jsxs("div", { className: "mt-3 rounded border border-line p-3 text-[12px] text-ink-3", "data-testid": `approved-rule-revision-${activationId}`, children: [_jsx("div", { className: "font-medium text-ink", children: t('pages.activation.ruleRevisionTitle') }), _jsx("p", { className: "mt-1", children: t('pages.activation.ruleRevisionBoundary') }), error && _jsx("p", { role: "alert", className: "mt-2 text-danger", children: error }), alreadyStarted ? _jsxs("div", { className: "mt-2", children: [_jsx("p", { role: "status", children: t('pages.activation.ruleRevisionAlreadyExists') }), _jsx(Link, { to: "/focus", className: "mt-1 inline-block text-gov underline", children: t('pages.activation.ruleRevisionReviewQueue') })] })
+                : submitted ? _jsxs("div", { className: "mt-2", children: [_jsx("p", { role: "status", className: "text-green", children: t('pages.activation.ruleRevisionStarted') }), _jsx(Link, { to: "/focus", className: "mt-1 inline-block text-gov underline", children: t('pages.activation.ruleRevisionReviewQueue') })] })
+                    : preview?.status === 'ready' ? _jsxs(_Fragment, { children: [_jsxs("label", { className: "mt-2 block", children: [t('pages.activation.ruleRevisionFeedback'), _jsx("textarea", { value: feedback, maxLength: 4000, disabled: busy, onChange: event => { setFeedback(event.target.value); setPendingRequestId(null); }, className: "mt-1 min-h-20 w-full rounded border border-line bg-panel px-3 py-2 text-ink" })] }), _jsx(Button, { disabled: busy || feedback.trim().length === 0, onClick: () => void revise(), children: t('pages.activation.ruleRevisionOnce') })] }) : preview?.status === 'refused' ? _jsx("p", { className: "mt-2", children: preview.nextAction })
+                        : _jsx("p", { className: "mt-2", children: t('pages.activation.ownerDecisionLoading') })] });
+}
 function RuleCodeOwnerPanel({ record, onChanged }) {
     const { t } = useTranslation();
     const [review, setReview] = useState(null);
@@ -96,7 +163,7 @@ function RuleCodeOwnerPanel({ record, onChanged }) {
     const value = (number) => number === null ? t('pages.activation.notCollected') : String(number);
     const affectedTools = Array.isArray(review.artifact.content?.affectedTools) ? review.artifact.content.affectedTools.filter((item) => typeof item === 'string') : [];
     const renderWindow = (title, window) => _jsxs("div", { className: "rounded border border-line p-2", children: [_jsx("div", { className: "font-medium text-ink", children: title }), _jsxs("div", { className: "mt-1 grid grid-cols-2 gap-1 md:grid-cols-5", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(window.eligible)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(window.matched)] }), _jsxs("span", { children: [t('pages.activation.blocked'), ": ", value(window.blocked)] }), _jsxs("span", { children: [t('pages.activation.unhealthy'), ": ", value(window.unhealthy)] }), _jsxs("span", { children: [t('pages.activation.circuitTrips'), ": ", window.circuitTrips] })] }), _jsxs("div", { className: "mt-1 text-ink-4", children: [t('pages.activation.toolDistribution'), ": ", window.toolDistribution === null ? t('pages.activation.notCollected') : Object.entries(window.toolDistribution).map(([tool, count]) => `${tool} ${count}`).join(', ') || '—'] })] });
-    return _jsxs("div", { className: "mt-4 rounded-[5px] border border-gov/25 bg-surface/70 p-4", "data-testid": `owner-review-${record.activationId}`, children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("strong", { className: "text-[13px] text-ink", children: t('pages.activation.ownerDecisionTitle') }), _jsx("span", { className: "font-mono text-[11px] text-gov", children: review.readiness.status }), review.controlState?.enforcement === 'safety_isolated' && _jsx("span", { className: "text-danger text-[11px]", children: t('pages.activation.safetyIsolation') })] }), _jsxs("div", { className: "mt-2 grid grid-cols-2 gap-2 text-[12px] text-ink-3 md:grid-cols-4", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(summary.observed)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(summary.matched)] }), _jsxs("span", { children: [t('pages.activation.wouldBlock'), ": ", value(summary.wouldBlock)] }), _jsxs("span", { children: [t('pages.activation.wouldAllow'), ": ", value(summary.wouldAllow)] }), _jsxs("span", { children: [t('pages.activation.requireApproval'), ": ", value(summary.requireApproval)] }), _jsxs("span", { children: [t('pages.activation.autoCorrect'), ": ", value(summary.autoCorrect)] }), _jsxs("span", { children: [t('pages.activation.neutralControl'), ": ", value(summary.neutralControl)] }), _jsxs("span", { children: [t('pages.activation.evaluationErrors'), ": ", value(summary.errors)] })] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.shadowWindow', { first: summary.firstObservedAt ?? t('pages.activation.notCollected'), last: summary.lastObservedAt ?? t('pages.activation.notCollected') }) }), _jsx("div", { className: "mt-2 text-[12px] text-ink-3", children: t('pages.activation.runtimeCapability', { version: review.runtimeCapability.hostRuntimeVersion, supported: t(review.runtimeCapability.shadowEvidence ? 'pages.activation.supported' : 'pages.activation.unsupported') }) }), _jsx("div", { className: "mt-2 text-[12px] text-amber", children: t('pages.activation.worstImpact', { tools: affectedTools.join(', ') || t('pages.activation.notCollected') }) }), _jsxs("div", { className: "mt-3 text-[12px] text-ink-3", children: [_jsx("div", { className: "mb-1 font-medium text-ink", children: t('pages.activation.hardSafetyChecks') }), review.readiness.evidenceSnapshot.safetyGateResults.map(check => _jsxs("div", { className: check.status === 'passed' ? 'text-green' : 'text-danger', children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.checkStatus.${check.status}`, { defaultValue: check.status }), check.reasonCode ? ` · ${t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })}` : ''] }, check.checkId))] }), review.readiness.failedChecks.length > 0 && _jsx("ul", { className: "mt-2 text-[12px] text-danger", children: review.readiness.failedChecks.map(check => _jsxs("li", { children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })] }, check.checkId)) }), _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.scopeArtifactCode') }), _jsx("pre", { className: "mt-2 max-h-64 overflow-auto whitespace-pre-wrap text-ink-3", children: JSON.stringify(review.artifact.content, null, 2) })] }), _jsxs("div", { className: "mt-3 grid gap-2 text-[11px] text-ink-3 md:grid-cols-2", children: [renderWindow(t('pages.activation.live24Hours'), review.liveMetrics.last24Hours), renderWindow(t('pages.activation.live7Days'), review.liveMetrics.last7Days)] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-3", children: t('pages.activation.behaviorDrift', { approved: value(review.behaviorDrift.approvedBlockRate), live: value(review.behaviorDrift.liveBlockRate), delta: value(review.behaviorDrift.delta) }) }), review.liveMetrics.representativeSamples.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.representativeSamples') }), review.liveMetrics.representativeSamples.map((sample, index) => _jsxs("div", { className: "font-mono text-ink-3", children: [sample.toolName, " \u00B7 ", sample.decision, " \u00B7 ", sample.pathCategory] }, `${sample.toolName}-${index}`))] }), review.decisions.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.ownerDecisionHistory') }), review.decisions.map(decision => _jsxs("div", { className: "mt-1 border-l border-line pl-2 text-ink-3", children: [_jsx("span", { className: "font-mono", children: decision.decidedAt }), " \u00B7 ", decision.decision, " \u00B7 ", decision.principalKind, ":", decision.actorId, " \u00B7 ", decision.authenticationMethod, " \u00B7 ", decision.reasonCode, decision.note ? ` · ${decision.note}` : ''] }, decision.decisionId))] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.circuitConditions') }), review.readiness.status === 'evidence_insufficient' && _jsxs("label", { className: "mt-3 block text-[12px] text-ink-3", children: [t('pages.activation.overrideReason'), _jsxs("select", { value: overrideReason, onChange: event => setOverrideReason(event.target.value), className: "mt-1 w-full rounded border border-line bg-panel px-3 py-2 text-ink", children: [_jsx("option", { value: "rare_behavior", children: t('pages.activation.overrideRareBehavior') }), _jsx("option", { value: "controlled_rollout", children: t('pages.activation.overrideControlledRollout') }), _jsx("option", { value: "owner_accepts_limited_evidence", children: t('pages.activation.overrideOwnerAccepts') })] })] }), _jsx("input", { value: note, onChange: event => setNote(event.target.value), placeholder: t('pages.activation.ownerReviewNote'), className: "mt-3 w-full rounded border border-line bg-panel px-3 py-2 text-[12px] text-ink" }), _jsxs("div", { className: "mt-3 flex flex-wrap gap-2", children: [review.globalPause?.status === 'paused' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void releasePause(), children: t('pages.activation.releaseGlobalPause') }), record.action === 'code_tool_hook_shadow_activate' && _jsxs(_Fragment, { children: [_jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, onClick: () => void decide('continue-observing'), children: t('pages.activation.continueObserving') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('reject-after-shadow'), children: t('pages.activation.rejectAfterShadow') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled || (review.readiness.status !== 'ready' && review.readiness.status !== 'evidence_insufficient') || (review.readiness.status === 'evidence_insufficient' && note.trim().length === 0), onClick: () => void decide('promote'), children: t('pages.activation.confirmLive') })] }), (record.action === 'code_tool_hook_live_activate' || review.controlState?.enforcement === 'safety_isolated') && _jsx(Button, { disabled: busy, variant: "destructive", onClick: () => void decide('emergency-deactivate'), children: t('pages.activation.emergencyDeactivate') }), review.controlState?.enforcement === 'safety_isolated' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('recover-to-shadow'), children: t('pages.activation.recoverToShadow') })] }), !review.ownerDecisionEnabled && _jsx("div", { className: "mt-2 text-[11px] text-amber", children: t('pages.activation.rolloutDisabled') })] });
+    return _jsxs("div", { className: "mt-4 rounded-[5px] border border-gov/25 bg-surface/70 p-4", "data-testid": `owner-review-${record.activationId}`, children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("strong", { className: "text-[13px] text-ink", children: t('pages.activation.ownerDecisionTitle') }), _jsx("span", { className: "font-mono text-[11px] text-gov", children: review.readiness.status }), review.controlState?.enforcement === 'safety_isolated' && _jsx("span", { className: "text-danger text-[11px]", children: t('pages.activation.safetyIsolation') })] }), _jsxs("div", { className: "mt-2 grid grid-cols-2 gap-2 text-[12px] text-ink-3 md:grid-cols-4", children: [_jsxs("span", { children: [t('pages.activation.eligibleEvaluations'), ": ", value(summary.observed)] }), _jsxs("span", { children: [t('pages.activation.matched'), ": ", value(summary.matched)] }), _jsxs("span", { children: [t('pages.activation.wouldBlock'), ": ", value(summary.wouldBlock)] }), _jsxs("span", { children: [t('pages.activation.wouldAllow'), ": ", value(summary.wouldAllow)] }), _jsxs("span", { children: [t('pages.activation.requireApproval'), ": ", value(summary.requireApproval)] }), _jsxs("span", { children: [t('pages.activation.autoCorrect'), ": ", value(summary.autoCorrect)] }), _jsxs("span", { children: [t('pages.activation.neutralControl'), ": ", value(summary.neutralControl)] }), _jsxs("span", { children: [t('pages.activation.evaluationErrors'), ": ", value(summary.errors)] })] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.shadowWindow', { first: summary.firstObservedAt ?? t('pages.activation.notCollected'), last: summary.lastObservedAt ?? t('pages.activation.notCollected') }) }), _jsx("div", { className: "mt-2 text-[12px] text-ink-3", children: t('pages.activation.runtimeCapability', { version: review.runtimeCapability.hostRuntimeVersion, supported: t(review.runtimeCapability.shadowEvidence ? 'pages.activation.supported' : 'pages.activation.unsupported') }) }), _jsx("div", { className: "mt-2 text-[12px] text-amber", children: t('pages.activation.worstImpact', { tools: affectedTools.join(', ') || t('pages.activation.notCollected') }) }), _jsxs("div", { className: "mt-3 text-[12px] text-ink-3", children: [_jsx("div", { className: "mb-1 font-medium text-ink", children: t('pages.activation.hardSafetyChecks') }), review.readiness.evidenceSnapshot.safetyGateResults.map(check => _jsxs("div", { className: check.status === 'passed' ? 'text-green' : 'text-danger', children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.checkStatus.${check.status}`, { defaultValue: check.status }), check.reasonCode ? ` · ${t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })}` : ''] }, check.checkId))] }), review.readiness.failedChecks.length > 0 && _jsx("ul", { className: "mt-2 text-[12px] text-danger", children: review.readiness.failedChecks.map(check => _jsxs("li", { children: [t(`pages.activation.checks.${check.checkId}`, { defaultValue: check.checkId }), ": ", t(`pages.activation.reasonCodes.${check.reasonCode}`, { defaultValue: check.reasonCode })] }, check.checkId)) }), _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.scopeArtifactCode') }), _jsx("pre", { className: "mt-2 max-h-64 overflow-auto whitespace-pre-wrap text-ink-3", children: JSON.stringify(review.artifact.content, null, 2) })] }), _jsxs("div", { className: "mt-3 grid gap-2 text-[11px] text-ink-3 md:grid-cols-2", children: [renderWindow(t('pages.activation.live24Hours'), review.liveMetrics.last24Hours), renderWindow(t('pages.activation.live7Days'), review.liveMetrics.last7Days)] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-3", children: t('pages.activation.behaviorDrift', { approved: value(review.behaviorDrift.approvedBlockRate), live: value(review.behaviorDrift.liveBlockRate), delta: value(review.behaviorDrift.delta) }) }), review.liveMetrics.representativeSamples.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.representativeSamples') }), review.liveMetrics.representativeSamples.map((sample, index) => _jsxs("div", { className: "font-mono text-ink-3", children: [sample.toolName, " \u00B7 ", sample.decision, " \u00B7 ", sample.pathCategory] }, `${sample.toolName}-${index}`))] }), review.decisions.length > 0 && _jsxs("details", { className: "mt-2 text-[12px]", children: [_jsx("summary", { className: "cursor-pointer text-gov", children: t('pages.activation.ownerDecisionHistory') }), review.decisions.map(decision => _jsxs("div", { className: "mt-1 border-l border-line pl-2 text-ink-3", children: [_jsx("span", { className: "font-mono", children: decision.decidedAt }), " \u00B7 ", decision.decision, " \u00B7 ", decision.principalKind, ":", decision.actorId, " \u00B7 ", decision.authenticationMethod, " \u00B7 ", decision.reasonCode, decision.note ? ` · ${decision.note}` : ''] }, decision.decisionId))] }), _jsx("div", { className: "mt-2 text-[11px] text-ink-4", children: t('pages.activation.circuitConditions') }), record.action === 'code_tool_hook_shadow_activate' && _jsx(ApprovedRuleRevisionPanel, { activationId: record.activationId, onChanged: onChanged }), review.readiness.status === 'evidence_insufficient' && _jsxs("label", { className: "mt-3 block text-[12px] text-ink-3", children: [t('pages.activation.overrideReason'), _jsxs("select", { value: overrideReason, onChange: event => setOverrideReason(event.target.value), className: "mt-1 w-full rounded border border-line bg-panel px-3 py-2 text-ink", children: [_jsx("option", { value: "rare_behavior", children: t('pages.activation.overrideRareBehavior') }), _jsx("option", { value: "controlled_rollout", children: t('pages.activation.overrideControlledRollout') }), _jsx("option", { value: "owner_accepts_limited_evidence", children: t('pages.activation.overrideOwnerAccepts') })] })] }), _jsx("input", { value: note, onChange: event => setNote(event.target.value), placeholder: t('pages.activation.ownerReviewNote'), className: "mt-3 w-full rounded border border-line bg-panel px-3 py-2 text-[12px] text-ink" }), _jsxs("div", { className: "mt-3 flex flex-wrap gap-2", children: [review.globalPause?.status === 'paused' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void releasePause(), children: t('pages.activation.releaseGlobalPause') }), record.action === 'code_tool_hook_shadow_activate' && _jsxs(_Fragment, { children: [_jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, onClick: () => void decide('continue-observing'), children: t('pages.activation.continueObserving') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('reject-after-shadow'), children: t('pages.activation.rejectAfterShadow') }), _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled || (review.readiness.status !== 'ready' && review.readiness.status !== 'evidence_insufficient') || (review.readiness.status === 'evidence_insufficient' && note.trim().length === 0), onClick: () => void decide('promote'), children: t('pages.activation.confirmLive') })] }), (record.action === 'code_tool_hook_live_activate' || review.controlState?.enforcement === 'safety_isolated') && _jsx(Button, { disabled: busy, variant: "destructive", onClick: () => void decide('emergency-deactivate'), children: t('pages.activation.emergencyDeactivate') }), review.controlState?.enforcement === 'safety_isolated' && _jsx(Button, { disabled: busy || !review.ownerDecisionEnabled, variant: "outline", onClick: () => void decide('recover-to-shadow'), children: t('pages.activation.recoverToShadow') })] }), !review.ownerDecisionEnabled && _jsx("div", { className: "mt-2 text-[11px] text-amber", children: t('pages.activation.rolloutDisabled') })] });
 }
 function ActivationFactCard({ record, lifecycleData, receiptCount, onDisable, disabling, onChanged, }) {
     const { t, i18n } = useTranslation();

package/console/dist/web/assets/app.css

@@ -678,6 +678,9 @@
   .min-h-0 {
     min-height: 0px;
   }
+  .min-h-20 {
+    min-height: calc(var(--spacing) * 20);
+  }
   .min-h-\[44px\] {
     min-height: 44px;
   }