create-principles-disciple 1.85.0 → 1.87.0

package/pd-cli/dist/services/quality-scorecard/strong-model-gate.js

@@ -0,0 +1,128 @@
+/**
+ * PRI-361 — Strong Model Adjudication Gate (I/O layer in pd-cli)
+ *
+ * Calls cloud model for adjudication. Uses core validation
+ * to parse responses — no unsafe casts.
+ */
+import { RUBRIC_LABELS, RUBRIC_DIMENSIONS as DIMS, meetsMvpThreshold, validateAdjudicationResponse, extractJsonFromLlmResponse, } from '@principles/core/quality-scorecard';
+function buildAdjudicationPrompt(episode, localEval) {
+    const localScores = DIMS.map(d => `- ${d} (${RUBRIC_LABELS[d]}): ${localEval.dimensionScores[d]}/2 — ${localEval.dimensionRationales[d]}`).join('\n');
+    return `You are a senior quality adjudicator for an AI agent evolution pipeline.
+Your job is to independently re-evaluate a pain episode that was first scored by a local (smaller) model.
+You must provide your own scores — do NOT simply copy the local model's scores.
+
+## Pain Episode
+- ID: ${episode.episodeId}
+- Source: ${episode.source}
+- Pain Score: ${episode.score}
+- Severity: ${episode.severity}
+- Summary: ${episode.summary}
+- Evolution Task Resolution: ${episode.evolutionTaskResolution ?? 'none'}
+- Linked Principles: ${episode.linkedPrinciples.length > 0 ? episode.linkedPrinciples.join(', ') : 'none'}
+
+## Local Model Scores (${localEval.model})
+${localScores}
+Flags: ${localEval.flags.length > 0 ? localEval.flags.join(', ') : 'none'}
+
+## Your Task
+1. Independently score each dimension (0/1/2) based on the evidence.
+2. Check for: language inconsistency, over-abstraction, fabricated evidence.
+3. If your scores differ from the local model by >=2 points on any dimension, explain why.
+4. Give a final verdict: pass, fail, or needs-review.
+
+## Output Format (STRICT JSON)
+{
+  "scores": { "G1": 0-2, "G2": 0-2, "G3": 0-2, "G4": 0-2, "G5": 0-2, "G6": 0-2, "G7": 0-2 },
+  "rationale": "Overall assessment...",
+  "verdict": "pass" | "fail" | "needs-review"
+}
+
+Do NOT output anything other than this JSON object.`;
+}
+export async function adjudicate(episode, localEval, config) {
+    const { modelId: strongModelId, log } = config;
+    const prompt = buildAdjudicationPrompt(episode, localEval);
+    const baseUrl = process.env.OPENAI_BASE_URL || 'https://api.openai.com/v1';
+    const apiKey = process.env.OPENAI_API_KEY;
+    if (!apiKey) {
+        return {
+            model: strongModelId,
+            adjudicationStatus: 'needs-review',
+            confirmedScores: null,
+            confirmedMvpMet: null,
+            rationale: 'OPENAI_API_KEY not set — cannot run strong-model adjudication',
+            nextAction: 'Set OPENAI_API_KEY and re-run with --strong-model',
+        };
+    }
+    try {
+        const resp = await fetch(`${baseUrl}/chat/completions`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${apiKey}`,
+            },
+            body: JSON.stringify({
+                model: strongModelId,
+                messages: [
+                    { role: 'system', content: 'You are a precise JSON-output quality adjudicator. Output only valid JSON.' },
+                    { role: 'user', content: prompt },
+                ],
+                temperature: 0.1,
+                max_tokens: 2000,
+            }),
+            signal: AbortSignal.timeout(120_000),
+        });
+        if (!resp.ok) {
+            throw new Error(`Strong model request failed: ${resp.status}`);
+        }
+        const data = (await resp.json());
+        const content = data.choices?.[0]?.message?.content ?? '';
+        const parsed = extractJsonFromLlmResponse(content);
+        if (parsed === null) {
+            throw new Error('Strong model returned non-JSON');
+        }
+        const validated = validateAdjudicationResponse(parsed);
+        const { scores, verdict } = validated;
+        return {
+            model: strongModelId,
+            adjudicationStatus: verdict,
+            confirmedScores: scores,
+            confirmedMvpMet: meetsMvpThreshold(scores),
+            rationale: validated.rationale,
+            nextAction: null,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        log(`Adjudication error: ${msg}`);
+        return {
+            model: strongModelId,
+            adjudicationStatus: 'needs-review',
+            confirmedScores: null,
+            confirmedMvpMet: null,
+            rationale: `Adjudication failed: ${msg}`,
+            nextAction: 'Retry with strong model or manually review',
+        };
+    }
+}
+export function skippedAdjudication(reason) {
+    return {
+        model: 'none',
+        adjudicationStatus: 'skipped',
+        confirmedScores: null,
+        confirmedMvpMet: null,
+        rationale: reason,
+        nextAction: 'Configure and run strong-model adjudication for final quality verdict',
+    };
+}
+export function determineFinalLabel(localEval, adjudication) {
+    if (!adjudication || adjudication.adjudicationStatus === 'skipped') {
+        if (localEval.mvpMet && localEval.totalScore >= 12)
+            return 'local-pass';
+        if (localEval.totalScore <= 6)
+            return 'local-fail';
+        return 'needs-review';
+    }
+    return adjudication.adjudicationStatus;
+}
+//# sourceMappingURL=strong-model-gate.js.map

package/pd-cli/dist/services/quality-scorecard/strong-model-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strong-model-gate.js","sourceRoot":"","sources":["../../../src/services/quality-scorecard/strong-model-gate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,EACL,aAAa,EACb,iBAAiB,IAAI,IAAI,EACzB,iBAAiB,EACjB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAE5C,SAAS,uBAAuB,CAC9B,OAAoB,EACpB,SAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC/B,KAAK,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CACxG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;;;;;QAKD,OAAO,CAAC,SAAS;YACb,OAAO,CAAC,MAAM;gBACV,OAAO,CAAC,KAAK;cACf,OAAO,CAAC,QAAQ;aACjB,OAAO,CAAC,OAAO;+BACG,OAAO,CAAC,uBAAuB,IAAI,MAAM;uBACjD,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;;yBAEhF,SAAS,CAAC,KAAK;EACtC,WAAW;SACJ,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;;;;;;;;;;;;;;;oDAerB,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAoB,EACpB,SAA0B,EAC1B,MAAuD;IAEvD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,2BAA2B,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,kBAAkB,EAAE,cAAc;YAClC,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,+DAA+D;YAC1E,UAAU,EAAE,mDAAmD;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4EAA4E,EAAE;oBACzG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;iBAClC;gBACD,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoD,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,SAAS,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAEtC,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,kBAAkB,EAAE,OAAO;YAC3B,eAAe,EAAE,MAAM;YACvB,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,kBAAkB,EAAE,cAAc;YAClC,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,wBAAwB,GAAG,EAAE;YACxC,UAAU,EAAE,4CAA4C;SACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO;QACL,KAAK,EAAE,MAAM;QACb,kBAAkB,EAAE,SAAS;QAC7B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,uEAAuE;KACpF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAA0B,EAC1B,YAA4C;IAE5C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,UAAU,IAAI,EAAE;YAAE,OAAO,YAAY,CAAC;QACxE,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC;QACnD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,YAAY,CAAC,kBAAkB,CAAC;AACzC,CAAC"}

package/pd-cli/dist/services/resolve-runtime-from-pd-config.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Unified runtime config resolver from .pd/config.yaml — PRI-393
+ *
+ * All MVP mainline execution paths (probe, run-once, diagnose, pain-retry)
+ * MUST use this helper instead of the legacy resolveRuntimeConfig(stateDir)
+ * which reads .state/workflows.yaml.
+ *
+ * Canonical source: .pd/config.yaml via loadPdConfig → resolveRuntimeConfigFromPdConfig.
+ * .state/workflows.yaml is reported as a legacy warning only.
+ *
+ * ERR refs:
+ * - ERR-002: fail loud with reason + nextAction
+ * - EP-07: runtime state source alignment
+ */
+import type { RuntimeConfigResult, RuntimeConfig } from '@principles/core/runtime-v2';
+import type { PdConfigLoadResult } from './pd-config-loader.js';
+export interface ResolvedRuntimeFromPdConfig {
+    /** The resolved runtime config (or error). */
+    result: RuntimeConfigResult;
+    /** Legacy files detected (.state/workflows.yaml etc.) — informational only. */
+    legacyWarnings: string[];
+    /** The PD config load result for downstream use (feature flags, etc.). */
+    configLoadResult: PdConfigLoadResult;
+    /** Canonical config source label, e.g. ".pd/config.yaml". */
+    configSource: string;
+    /**
+     * PRI-402: Resolved runtime profile ID for the diagnostician agent.
+     * e.g. "pi-ai.lmstudio". null when config resolution fails or profile is not found.
+     */
+    runtimeProfileId: string | null;
+    /**
+     * PRI-402: Human-readable runtime profile label for the diagnostician agent.
+     * e.g. "pi-ai: lmstudio/qwen3.6-27b-mtp". null when config resolution fails.
+     * Matches the label format used by `pd config doctor`.
+     */
+    runtimeProfileLabel: string | null;
+}
+/**
+ * Resolve runtime configuration exclusively from .pd/config.yaml.
+ *
+ * This is the ONLY production entry point for runtime config resolution
+ * in pd-cli commands. Legacy resolveRuntimeConfig(stateDir) must NOT be
+ * called by probe/run-once/diagnose/pain-retry.
+ *
+ * @param workspaceDir - The resolved workspace directory.
+ * @param getEnvVar - Env var accessor, defaults to process.env.
+ * @returns Resolved runtime config with legacy warnings.
+ */
+export declare function resolveRuntimeFromPdConfig(workspaceDir: string, getEnvVar?: (name: string) => string | undefined): ResolvedRuntimeFromPdConfig;
+/**
+ * Resolve runtime config from .pd/config.yaml, then merge with CLI flag overrides.
+ *
+ * CLI flags take priority over config values (same semantics as before PRI-393,
+ * but reading from .pd/config.yaml instead of .state/workflows.yaml).
+ *
+ * @param workspaceDir - The resolved workspace directory.
+ * @param overrides - CLI flag overrides (provider, model, apiKeyEnv, etc.).
+ * @param getEnvVar - Env var accessor.
+ */
+export declare function resolveRuntimeWithOverrides(workspaceDir: string, overrides: {
+    provider?: string;
+    model?: string;
+    apiKeyEnv?: string;
+    baseUrl?: string;
+    maxRetries?: number;
+    timeoutMs?: number;
+}, getEnvVar?: (name: string) => string | undefined): ResolvedRuntimeFromPdConfig & {
+    mergedConfig: RuntimeConfig | null;
+};
+//# sourceMappingURL=resolve-runtime-from-pd-config.d.ts.map

package/pd-cli/dist/services/resolve-runtime-from-pd-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-runtime-from-pd-config.d.ts","sourceRoot":"","sources":["../../src/services/resolve-runtime-from-pd-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EAEd,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C,8CAA8C;IAC9C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,+EAA+E;IAC/E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,gBAAgB,EAAE,kBAAkB,CAAC;IACrC,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAuC,GAC5E,2BAA2B,CA0D7B;AAGD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE;IACT,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,SAAS,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAuC,GAC5E,2BAA2B,GAAG;IAAE,YAAY,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,CA6BtE"}

package/pd-cli/dist/services/resolve-runtime-from-pd-config.js

@@ -0,0 +1,138 @@
+/**
+ * Unified runtime config resolver from .pd/config.yaml — PRI-393
+ *
+ * All MVP mainline execution paths (probe, run-once, diagnose, pain-retry)
+ * MUST use this helper instead of the legacy resolveRuntimeConfig(stateDir)
+ * which reads .state/workflows.yaml.
+ *
+ * Canonical source: .pd/config.yaml via loadPdConfig → resolveRuntimeConfigFromPdConfig.
+ * .state/workflows.yaml is reported as a legacy warning only.
+ *
+ * ERR refs:
+ * - ERR-002: fail loud with reason + nextAction
+ * - EP-07: runtime state source alignment
+ */
+import { resolveRuntimeConfigFromPdConfig, isRuntimeConfigError, resolveAgentRuntimeBinding, } from '@principles/core/runtime-v2';
+import { loadPdConfig } from './pd-config-loader.js';
+/**
+ * Build a profile label matching the format used by `pd config doctor`.
+ * Mirrors `buildProfileLabel` in `pd-config-redaction.ts` (core).
+ */
+function buildProfileLabel(profileId, profile) {
+    if (profile.type === 'openclaw') {
+        const parts = ['openclaw'];
+        if (profile.provider)
+            parts.push(profile.provider);
+        if (profile.model)
+            parts.push(profile.model);
+        if (profile.source && !profile.provider && !profile.model)
+            parts.push(profile.source);
+        return parts.join(': ');
+    }
+    // pi-ai
+    return `pi-ai: ${profile.provider ?? 'unknown'}/${profile.model ?? 'unknown'}`;
+}
+/**
+ * Resolve runtime configuration exclusively from .pd/config.yaml.
+ *
+ * This is the ONLY production entry point for runtime config resolution
+ * in pd-cli commands. Legacy resolveRuntimeConfig(stateDir) must NOT be
+ * called by probe/run-once/diagnose/pain-retry.
+ *
+ * @param workspaceDir - The resolved workspace directory.
+ * @param getEnvVar - Env var accessor, defaults to process.env.
+ * @returns Resolved runtime config with legacy warnings.
+ */
+export function resolveRuntimeFromPdConfig(workspaceDir, getEnvVar = (name) => process.env[name]) {
+    const configLoadResult = loadPdConfig(workspaceDir);
+    // Malformed config → fail loud. Do NOT fall back to defaults for execution.
+    // Missing config is ok (loadPdConfig returns ok:true with defaults), but
+    // ok:false always means the file exists and is broken.
+    if (!configLoadResult.ok) {
+        const [firstError] = configLoadResult.errors;
+        const result = {
+            ok: false,
+            reason: `config_malformed:${firstError?.reason ?? 'unknown'}`,
+            message: firstError?.reason ?? '.pd/config.yaml is malformed',
+            nextAction: firstError?.nextAction ?? 'Fix .pd/config.yaml syntax and retry',
+        };
+        const legacyWarnings = configLoadResult.legacyFilesDetected.length > 0
+            ? [
+                `Legacy config files detected: ${configLoadResult.legacyFilesDetected.join(', ')}. ` +
+                    `These are NOT used for runtime resolution. PD uses .pd/config.yaml exclusively.`,
+            ]
+            : [];
+        return {
+            result,
+            legacyWarnings,
+            configLoadResult,
+            configSource: '.pd/config.yaml',
+            runtimeProfileId: null,
+            runtimeProfileLabel: null,
+        };
+    }
+    const result = resolveRuntimeConfigFromPdConfig(configLoadResult.effective, getEnvVar);
+    // PRI-402: Extract profile ID and label for probe output alignment with doctor
+    let runtimeProfileId = null;
+    let runtimeProfileLabel = null;
+    const bindingResult = resolveAgentRuntimeBinding(configLoadResult.effective, 'diagnostician');
+    if (bindingResult.ok) {
+        runtimeProfileId = bindingResult.profileId;
+        runtimeProfileLabel = buildProfileLabel(bindingResult.profileId, bindingResult.profile);
+    }
+    const legacyWarnings = configLoadResult.legacyFilesDetected.length > 0
+        ? [
+            `Legacy config files detected: ${configLoadResult.legacyFilesDetected.join(', ')}. ` +
+                `These are NOT used for runtime resolution. PD uses .pd/config.yaml exclusively.`,
+        ]
+        : [];
+    return {
+        result,
+        legacyWarnings,
+        configLoadResult,
+        configSource: '.pd/config.yaml',
+        runtimeProfileId,
+        runtimeProfileLabel,
+    };
+}
+/**
+ * Resolve runtime config from .pd/config.yaml, then merge with CLI flag overrides.
+ *
+ * CLI flags take priority over config values (same semantics as before PRI-393,
+ * but reading from .pd/config.yaml instead of .state/workflows.yaml).
+ *
+ * @param workspaceDir - The resolved workspace directory.
+ * @param overrides - CLI flag overrides (provider, model, apiKeyEnv, etc.).
+ * @param getEnvVar - Env var accessor.
+ */
+export function resolveRuntimeWithOverrides(workspaceDir, overrides, getEnvVar = (name) => process.env[name]) {
+    const base = resolveRuntimeFromPdConfig(workspaceDir, getEnvVar);
+    if (isRuntimeConfigError(base.result)) {
+        return { ...base, mergedConfig: null };
+    }
+    const config = base.result;
+    // CLI flags override config values
+    // Use ?? (not ||) so empty-string overrides are preserved until the guard below
+    const merged = {
+        ...config,
+        provider: overrides.provider ?? config.provider,
+        model: overrides.model ?? config.model,
+        apiKeyEnv: overrides.apiKeyEnv ?? config.apiKeyEnv,
+        baseUrl: overrides.baseUrl ?? config.baseUrl,
+        maxRetries: overrides.maxRetries ?? config.maxRetries,
+        timeoutMs: overrides.timeoutMs ?? config.timeoutMs,
+    };
+    // Guard: empty-string provider/model/apiKeyEnv/baseUrl after merge means the user
+    // explicitly passed '' or the config has a blank value. Normalise to
+    // undefined so downstream validation (handlePiAiProbe) can catch it.
+    if (!merged.provider)
+        merged.provider = undefined;
+    if (!merged.model)
+        merged.model = undefined;
+    if (!merged.apiKeyEnv)
+        merged.apiKeyEnv = undefined;
+    if (!merged.baseUrl)
+        merged.baseUrl = undefined;
+    return { ...base, mergedConfig: merged };
+}
+//# sourceMappingURL=resolve-runtime-from-pd-config.js.map

package/pd-cli/dist/services/resolve-runtime-from-pd-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-runtime-from-pd-config.js","sourceRoot":"","sources":["../../src/services/resolve-runtime-from-pd-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AAMrC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAyBrD;;;GAGG;AACH,SAAS,iBAAiB,CAAC,SAAiB,EAAE,OAA6E;IACzH,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAa,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,QAAQ;IACR,OAAO,UAAU,OAAO,CAAC,QAAQ,IAAI,SAAS,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,YAAkD,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAE7E,MAAM,gBAAgB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAEpD,4EAA4E;IAC5E,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC7C,MAAM,MAAM,GAAuB;YACjC,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB,UAAU,EAAE,MAAM,IAAI,SAAS,EAAE;YAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,8BAA8B;YAC7D,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,sCAAsC;SAC7E,CAAC;QAEF,MAAM,cAAc,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAC;gBACE,iCAAiC,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpF,iFAAiF;aAClF;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;YACL,MAAM;YACN,cAAc;YACd,gBAAgB;YAChB,YAAY,EAAE,iBAAiB;YAC/B,gBAAgB,EAAE,IAAI;YACtB,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEvF,+EAA+E;IAC/E,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,mBAAmB,GAAkB,IAAI,CAAC;IAC9C,MAAM,aAAa,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC9F,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;QACrB,gBAAgB,GAAG,aAAa,CAAC,SAAS,CAAC;QAC3C,mBAAmB,GAAG,iBAAiB,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,cAAc,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QACpE,CAAC,CAAC;YACE,iCAAiC,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpF,iFAAiF;SAClF;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,MAAM;QACN,cAAc;QACd,gBAAgB;QAChB,YAAY,EAAE,iBAAiB;QAC/B,gBAAgB;QAChB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAGD;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,YAAoB,EACpB,SAOC,EACD,YAAkD,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAE7E,MAAM,IAAI,GAAG,0BAA0B,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEjE,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,mCAAmC;IACnC,gFAAgF;IAChF,MAAM,MAAM,GAAkB;QAC5B,GAAG,MAAM;QACT,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAC/C,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACtC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAClD,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;QAC5C,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;QACrD,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;KACnD,CAAC;IAEF,kFAAkF;IAClF,qEAAqE;IACrE,qEAAqE;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;IAEhD,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC"}

package/pd-cli/dist/services/rulehost-pipeline-runner.d.ts

@@ -0,0 +1,132 @@
+import type { AdversarialLoopResult, PDRuntimeAdapter, RefinerRuleHostGateDeps, PIArtifactStore } from '@principles/core/runtime-v2';
+/**
+ * Code-rule capability (atomic: ArtificerL2 + Evaluator).
+ *
+ * Per the user correction (2026-06-18): ArtificerL2 and Evaluator are atomic —
+ * both must run or neither runs. When enabled, the adversarial loop runs with
+ * the artificerAdapter (L2 write-test-fix). When disabled or not provided, the
+ * pipeline degrades to text-principle-only.
+ *
+ * The caller (CLI handler) resolves per-agent config (enabled/runtimeProfile)
+ * and constructs the ArtificerL2Adapter when both artificer + evaluator are
+ * enabled. The pipeline runner branches on `enabled` — it does NOT do config
+ * resolution itself (separation of concerns: service vs I/O).
+ */
+export interface CodeRuleCapability {
+    /** Whether the capability is enabled (atomic: both artificer + evaluator enabled in config). */
+    readonly enabled: boolean;
+    /**
+     * The ArtificerL2Adapter (or test-double) for the artificer stage. Required
+     * when enabled. When enabled, this adapter replaces the base runtimeAdapter
+     * for the ArtificerRunner only; EvaluatorRunner still uses the base adapter.
+     * Ignored when disabled (may be omitted or set to the base adapter).
+     */
+    readonly artificerAdapter?: PDRuntimeAdapter;
+    /** Structured reason when disabled (for degradation reporting). Required when disabled. */
+    readonly disabledReason?: string;
+}
+export interface RuleHostAgentAdapters {
+    readonly dreamer: PDRuntimeAdapter;
+    readonly philosopher: PDRuntimeAdapter;
+    readonly scribe: PDRuntimeAdapter;
+    readonly evaluator: PDRuntimeAdapter;
+}
+export interface RuleHostPipelineOptions {
+    /** Workspace directory containing .state/ (SQLite stores). */
+    readonly workspaceDir: string;
+    /** Pain ID whose internalization chain to drive. */
+    readonly painId: string;
+    /**
+     * Runtime adapter (LLM). Caller constructs it (PiAi / test-double) so the
+     * service stays runtime-agnostic. Mirrors full-chain-real-llm.test.ts.
+     *
+     * Used for: dreamer, philosopher, scribe, and evaluator (when capability ON).
+     * The artificer stage uses codeRuleCapability.artificerAdapter when enabled.
+     */
+    readonly runtimeAdapter: PDRuntimeAdapter;
+    /** Production per-agent adapters. Tests may omit this to use runtimeAdapter for every stage. */
+    readonly agentAdapters?: RuleHostAgentAdapters;
+    /**
+     * Code-rule capability (atomic: ArtificerL2 + Evaluator). When omitted, the
+     * capability is treated as OFF with reason 'code_rule_capability not provided'.
+     */
+    readonly codeRuleCapability?: CodeRuleCapability;
+    /** Internalization channel for created tasks (default 'code_tool_hook'). */
+    readonly channel?: 'prompt' | 'code_tool_hook' | 'defer_archive';
+    /** Max adversarial rounds (PRD cap = 2). */
+    readonly maxRounds?: number;
+    /** Per-LLM-call timeout (default 300_000). */
+    readonly timeoutMs?: number;
+    /** Runner poll interval (default 100). */
+    readonly pollIntervalMs?: number;
+    /**
+     * Max stage retry attempts for transient `retried` status (default 2).
+     * Each retry gets fresh state from the state manager (Runtime Contract Rule 7).
+     * When exhausted, the stage is marked 'degraded' with a structured reason.
+     */
+    readonly maxStageRetries?: number;
+    /** Correlation prefix for task IDs. */
+    readonly correlationId?: string;
+    /** Progress callback (stage start/complete). Optional. */
+    readonly onProgress?: (stage: string, status: 'start' | 'succeeded' | 'failed' | 'degraded' | 'skipped', detail?: string) => void;
+    /**
+     * Called once after the internal RuntimeStateManager + artifactStore are
+     * constructed, so the caller (e.g. a test-double adapter) can wire the store
+     * for artifactId resolution. Optional.
+     */
+    readonly onStoreReady?: (store: PIArtifactStore) => void;
+}
+export type RuleHostPipelineStageStatus = 'succeeded' | 'failed' | 'skipped' | 'degraded';
+export interface RuleHostPipelineStage {
+    readonly name: 'pain_lookup' | 'dreamer' | 'philosopher' | 'scribe' | 'adversarial_loop';
+    readonly status: RuleHostPipelineStageStatus;
+    readonly taskId?: string;
+    readonly reason?: string;
+}
+/**
+ * Final pipeline decision.
+ *
+ * - `candidate_ready_for_owner_review`: adversarial loop approved. A validated
+ *   rule artifact exists and is WAITING for owner review. This is NOT owner
+ *   approval — it means the candidate is ready for the owner to review.
+ * - `text_principle_only`: code-rule capability OFF (artificer or evaluator
+ *   disabled). No rule artifact; a text principle artifact is produced for
+ *   prompt-channel fallback.
+ * - `generation_rejected`: pipeline failed (no dreamer task, stage failure, or
+ *   evaluator rejected the candidate). No rule artifact.
+ */
+export interface RuleHostPipelineResult {
+    readonly decision: 'candidate_ready_for_owner_review' | 'text_principle_only' | 'generation_rejected';
+    readonly painId: string;
+    readonly stages: RuleHostPipelineStage[];
+    /** Scribe task that fed the adversarial loop (or text-principle path). */
+    readonly scribeTaskId: string | null;
+    /** From the adversarial loop result, when reached. */
+    readonly adversarialLoop?: AdversarialLoopResult;
+    /** Rule artifact ID when candidate_ready_for_owner_review; null otherwise. */
+    readonly ruleArtifactId: string | null;
+    /** Principle artifact ID (always present when scribe ran). */
+    readonly principleArtifactId: string | null;
+    /**
+     * Approval ID when the candidate was auto-enqueued into the ApprovalQueue.
+     * Present when decision='candidate_ready_for_owner_review' and the pipeline
+     * successfully enqueued the candidate for owner review (P1 #1 fix).
+     * Null when the candidate was not enqueued (text_principle_only, rejected,
+     * or enqueue failed — check degradationReason for details).
+     */
+    readonly approvalId: string | null;
+    /** Structured reason when decision is not candidate_ready_for_owner_review. */
+    readonly degradationReason?: string;
+}
+/**
+ * Build the sandbox gate deps for adversarial replay.
+ *
+ * `compileDemoRule` is byte-equivalent to openclaw-plugin's
+ * `loadRuleImplementationModule` (same vm.createContext, same normalize, same
+ * evaluate-shape check). pd-cli cannot import openclaw-plugin (package
+ * boundary), so this duplicate is intentional and capability-identical, not a
+ * stripped demo. See demo-rule-compiler.ts header comment.
+ */
+export declare function createSandboxGateDeps(): RefinerRuleHostGateDeps;
+export declare function runRuleHostPipeline(opts: RuleHostPipelineOptions): Promise<RuleHostPipelineResult>;
+//# sourceMappingURL=rulehost-pipeline-runner.d.ts.map

package/pd-cli/dist/services/rulehost-pipeline-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulehost-pipeline-runner.d.ts","sourceRoot":"","sources":["../../src/services/rulehost-pipeline-runner.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAEhB,uBAAuB,EACvB,eAAe,EAEhB,MAAM,6BAA6B,CAAC;AAMrC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAC1C,gGAAgG;IAChG,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,gBAAgB,GAAG,eAAe,CAAC;IACjE,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,uCAAuC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClI;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CAC1D;AAED,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1F,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,kBAAkB,CAAC;IACzF,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;IACtG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACjD,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,8DAA8D;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAID;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,uBAAuB,CAc/D;AAQD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAyNxG"}