create-principles-disciple 1.146.9 → 1.147.1

package/_release/product-identity.json

@@ -1,5 +1,5 @@
 {
   "schemaVersion": 1,
   "productVersion": "2.8.0",
-  "sourceCommit": "8e0cdc607ee5d25e0b66a0655a6e0ce033a1fe99"
+  "sourceCommit": "32312b70d5b4f8a661949680fe765e91077e5c16"
 }

package/codex-adapter/dist/ingestion/explicit-owner-statement.d.ts

@@ -11,6 +11,12 @@ export type RecordOwnerStatementResult = {
      * rollout to promote from). The receipt discloses it instead of failing.
      */
     promotionDegraded?: string;
+    /**
+     * PainIngress warning when the Owner statement legitimately degraded
+     * (e.g. ingestion OFF → no persisted observation to use as behavior
+     * evidence). The Pain + task still exist; the receipt discloses the basis.
+     */
+    ingressWarning?: string;
 } | {
     status: 'rejected';
     reason: 'statement_empty' | 'statement_too_long' | 'transcript_unavailable' | 'lineage_invalid' | 'rate_limited' | 'continuation_failed';

package/codex-adapter/dist/ingestion/explicit-owner-statement.js

@@ -84,6 +84,11 @@ export async function recordExplicitOwnerStatement(args) {
     if (outcome.disposition === 'rate_limited') {
         return { status: 'rejected', reason: 'rate_limited', nextAction: 'The per-root-session correction quota (5/hour) is exhausted; resubmit later — the statement was NOT recorded.' };
     }
+    if (outcome.disposition !== 'admitted' && outcome.disposition !== 'already_admitted') {
+        // An explicit Owner statement bypasses keyword detection entirely, so it
+        // can never legitimately land in the Stage-2 review state machine.
+        return { status: 'rejected', reason: 'continuation_failed', nextAction: `unexpected admission disposition for an explicit statement: ${outcome.disposition}` };
+    }
     // Promotion runs BEFORE the task enqueue (deliberate): the durable task is
     // the receipt's hard guarantee, and promoting first closes the window in
     // which the background worker could start the first diagnosis before the
@@ -126,5 +131,6 @@ export async function recordExplicitOwnerStatement(args) {
         disposition: outcome.disposition === 'already_admitted' ? 'already_admitted' : 'admitted',
         logicalObservationKey: candidate.logicalObservationKey,
         ...(promotionDegraded !== undefined ? { promotionDegraded } : {}),
+        ...(ensured.ingressWarning !== undefined ? { ingressWarning: ensured.ingressWarning } : {}),
     };
 }

package/codex-adapter/dist/pd-hook.js

@@ -362,8 +362,11 @@ export async function processHookInvocation(rawStdin, _env = process.env, cwd =
                     const promotionNotice = receipt.promotionDegraded === 'conversation_ingestion_disabled'
                         ? '会话证据提升已跳过：会话摄取未启用（按隐私边界未读取会话内容，也未写入会话观察）'
                         : `会话证据提升暂不可用：${receipt.promotionDegraded}`;
-                    explicitReceiptContext = `[PD] 已收到痛苦反馈（painId=${receipt.painId}, taskId=${receipt.taskId}${receipt.disposition === 'already_admitted' ? ', 重复提交已合并为同一信号' : ''}）。后台将自动诊断；请在回复中如实转述本回执，不要声称仍在等待用户输入，也不要虚构诊断结论。${receipt.promotionDegraded !== undefined ? `（注意：${promotionNotice}；诊断仍会基于你提交的陈述进行。）` : ''}`;
-                    explicitDiagnostics.push(diagnostic(`owner_statement_received:${receipt.painId}:${receipt.taskId}${receipt.promotionDegraded !== undefined ? `:promotion_degraded:${receipt.promotionDegraded}` : ''}`, 'Durable enqueue complete; the workspace worker continues diagnosis in the background.'));
+                    const ingressNotice = receipt.ingressWarning !== undefined
+                        ? `行为证据缺失，已按 Owner 陈述降级准入：${receipt.ingressWarning}`
+                        : undefined;
+                    explicitReceiptContext = `[PD] 已收到痛苦反馈（painId=${receipt.painId}, taskId=${receipt.taskId}${receipt.disposition === 'already_admitted' ? ', 重复提交已合并为同一信号' : ''}）。后台将自动诊断；请在回复中如实转述本回执，不要声称仍在等待用户输入，也不要虚构诊断结论。${receipt.promotionDegraded !== undefined ? `（注意：${promotionNotice}；诊断仍会基于你提交的陈述进行。）` : ''}${ingressNotice !== undefined ? `（注意：${ingressNotice}；诊断仍会基于你提交的陈述进行。）` : ''}`;
+                    explicitDiagnostics.push(diagnostic(`owner_statement_received:${receipt.painId}:${receipt.taskId}${receipt.promotionDegraded !== undefined ? `:promotion_degraded:${receipt.promotionDegraded}` : ''}${receipt.ingressWarning !== undefined ? `:ingress_degraded:${receipt.ingressWarning}` : ''}`, 'Durable enqueue complete; the workspace worker continues diagnosis in the background.'));
                 }
                 else {
                     explicitDiagnostics.push(diagnostic(`owner_statement_${receipt.reason}`, receipt.nextAction));

package/codex-adapter/dist/worker/workspace-worker.d.ts

@@ -1,4 +1,4 @@
-import { type InternalizationConsumerCycleOutcome, type ConsumerCycleLogger, type ReconcileGovernanceContinuationResult } from '@principles/host-runtime';
+import { type InternalizationConsumerCycleOutcome, type ConsumerCycleLogger, type ReconcileGovernanceContinuationResult, type SignalLlmClassifier, type Stage2CorrectionCycleReport } from '@principles/host-runtime';
 import { type CodexCatchUpResult } from '../ingestion/catch-up.js';
 import type { TranscriptPort } from '../ingestion/transcript-decoder.js';
 export type CodexWorkerMode = 'ready' | 'manual_action_required' | 'paused' | 'degraded';
@@ -34,6 +34,11 @@ export interface CodexWorkerCycleStepReport {
         readonly reuseReviewRequiredCandidateIds?: readonly string[];
     } | null;
     readonly downstream: InternalizationConsumerCycleOutcome | null;
+    /**
+     * Phase B Stage-2 review step. Always the LAST step so it can never starve
+     * the Diagnostician (bounded to ≤2 candidates / ≤60s aggregate).
+     */
+    readonly stage2?: Stage2CorrectionCycleReport;
 }
 export interface CodexWorkerCycleResult {
     readonly workspaceDir: string;
@@ -53,6 +58,13 @@ export interface CodexWorkerCycleOptions {
     readonly port?: TranscriptPort;
     /** Cap on diagnostician candidates inspected per cycle (default 5). */
     readonly diagnosticianCandidateLimit?: number;
+    /**
+     * Stage-2 classifier injection (tests). `undefined` = resolve the
+     * signalCollector profile from the workspace config; `null` = explicitly
+     * unavailable (candidates with a durable review result still settle).
+     */
+    readonly stage2Classifier?: SignalLlmClassifier | null;
+    readonly stage2AggregateBudgetMs?: number;
 }
 export declare function readCodexWorkerLiveness(workspaceDir: string): Record<string, unknown> | null;
 /**

package/codex-adapter/dist/worker/workspace-worker.js

@@ -28,7 +28,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { computeFeatureFlagsFromConfig, createRuntimeStateHandle, createPainSignalBridge, isRetryWaitBackoffElapsed, PrincipleTreeLedgerAdapter, resolveDiagnosticianCapability, } from '@principles/core/runtime-v2';
-import { createWorkspaceBehaviorEvidencePort, createCodexArtificerTrustedFactsPort, loadPdConfigForPlugin, loadFeatureFlagFromConfig, reconcileGovernanceContinuation, runInternalizationConsumerCycle, saveHostToolDeclaration, } from '@principles/host-runtime';
+import { createWorkspaceBehaviorEvidencePort, createCodexArtificerTrustedFactsPort, loadPdConfigForPlugin, loadFeatureFlagFromConfig, reconcileGovernanceContinuation, runInternalizationConsumerCycle, runStage2CorrectionCycle, createSignalClassifierForWorkspace, saveHostToolDeclaration, } from '@principles/host-runtime';
 import { catchUpCodexIngestion } from '../ingestion/catch-up.js';
 import { CODEX_TOOL_SEMANTIC_MAPPINGS, CODEX_TOOL_SEMANTICS } from '../tool-semantics.js';
 const WORKER_OWNER = 'companion-worker';
@@ -419,6 +419,28 @@ export async function runCodexWorkspaceWorkerCycle(options) {
         // No hostToolCatalog: PD has not declared a Codex tool catalog; a wrong
         // (OpenClaw) catalog would be worse than none (PRI-630 follow-up).
     });
+    // Step 8 (SPEC v0.3.1 §2) — bounded Stage-2 correction review, ALWAYS last:
+    // the Diagnostician has already run, so this step cannot starve it. ≤2
+    // candidates, ≤60s aggregate, single 60s classification timeout.
+    const stage2Resolution = options.stage2Classifier === undefined
+        ? createSignalClassifierForWorkspace(workspaceDir)
+        : null;
+    const stage2Classifier = options.stage2Classifier !== undefined
+        ? options.stage2Classifier
+        : (stage2Resolution?.ok === true ? stage2Resolution.classifier : null);
+    const stage2ClassifierState = options.stage2Classifier === null
+        ? 'disabled'
+        : stage2Classifier === null
+            ? (stage2Resolution !== null && !stage2Resolution.ok && stage2Resolution.readiness === 'disabled' ? 'disabled' : 'unavailable')
+            : 'used';
+    const stage2 = await runStage2CorrectionCycle({
+        workspaceDir,
+        classifier: stage2Classifier,
+        classifierState: stage2ClassifierState,
+        ...(options.stage2AggregateBudgetMs !== undefined ? { aggregateBudgetMs: options.stage2AggregateBudgetMs } : {}),
+        ...(options.now !== undefined ? { now: options.now } : {}),
+        onEvent: emitEvent,
+    });
     // Aggregated mode: degraded overrides all (review P1).  Any component
     // degrading — catch-up, reconciliation, diagnostician or downstream —
     // surfaces the workspace as degraded, with the highest-priority reason.
@@ -429,7 +451,8 @@ export async function runCodexWorkspaceWorkerCycle(options) {
             : diagnostician?.status === 'failed' && diagnostician.errorCategory !== 'lease_conflict' ? `diagnostician_failed:${diagnostician.message ?? 'max_attempts_exceeded'}`
                 : diagnostician?.status === 'degraded' ? `diagnostician_degraded:${diagnostician.message ?? 'unknown'}`
                     : downstream.skipReason === 'runtime_config_error' || downstream.skipReason === 'cycle_error' || downstream.skipReason === 'config_malformed' ? `downstream:${downstream.skipReason}`
-                        : undefined;
+                        : !stage2.ok ? `stage2:${stage2.reason ?? 'failed'}`
+                            : undefined;
     writeLiveness(workspaceDir, {
         runningStage: null,
         stageDeadline: null,
@@ -442,7 +465,7 @@ export async function runCodexWorkspaceWorkerCycle(options) {
         ...base,
         mode: degradedReason !== undefined ? 'degraded' : 'ready',
         ...(degradedReason !== undefined ? { reason: degradedReason, nextAction: 'Inspect the Workspace .pd/config.yaml runtime profile and the per-step report above; the worker retries automatically on the next cycle.' } : {}),
-        report: { catchUp, reconcile, postProcessing, diagnostician, downstream },
+        report: { catchUp, reconcile, postProcessing, diagnostician, downstream, stage2 },
     };
 }
 // Slice D (PRI-625): the mode authority moved to host-runtime so the CLI and

package/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@principles/codex-adapter",
-  "version": "0.6.3",
+  "version": "0.7.0",
   "description": "Codex CLI host adapter for Principles Disciple — implements HostAdapter interface for OpenAI Codex CLI's stdin/stdout JSON hook model (ADR-0020).",
   "type": "module",
   "main": "./dist/index.js",

package/console/dist/shared/prompt-injection-contract.d.ts

@@ -15,7 +15,7 @@
 export type PromptInjectionTargetHostName = 'openclaw' | 'codex' | 'workbuddy';
 export type PromptInjectionRouteName = 'legacy_trim' | 'shared_render';
 export type PromptInjectionBudgetScopeName = 'selected_lines' | 'full_directive_context';
-export type PromptBudgetCapacitySourceWire = 'operator_declared' | 'host_effective_window' | 'pi_catalog_exact' | 'legacy_fallback';
+export type PromptBudgetCapacitySourceWire = 'operator_declared' | 'host_effective_window' | 'pi_catalog_exact' | 'pi_catalog_model_id' | 'legacy_fallback';
 export type PromptBudgetCapacityStatusWire = 'confirmed' | 'unknown';
 /**
  * Bounded machine-readable fallback reason. Closed set mirroring the core