@kontourai/survey 3.0.0 → 5.0.0

package/dist/src/review-workbench/review-workbench.css

@@ -244,6 +244,8 @@
 .survey-workbench-embed .inspector-heading h2{ margin: 0; }
 .survey-workbench-embed .inspector-posture{ display: flex; flex-direction: column; padding: .75rem; border-radius: var(--k-radius-sm); background: var(--k-positive-wash); }
 .survey-workbench-embed .inspector-posture.digest-mismatch, .survey-workbench-embed .inspector-posture.artifact-unavailable, .survey-workbench-embed .inspector-posture.excerpt-mismatch{ background: var(--k-negative-wash); color: var(--k-negative); border: 2px solid currentColor; }
+.survey-workbench-embed .inspector-posture.extraction-failed{ background: var(--k-negative-wash); color: var(--k-negative); border: 2px solid currentColor; }
+.survey-workbench-embed .inspector-posture.extraction-incomplete{ background: var(--k-caution-wash); color: var(--k-caution); border: 2px solid currentColor; }
 .survey-workbench-embed .inspector-filters{ display: flex; flex-wrap: wrap; gap: .6rem; margin: 1rem 0; }
 .survey-workbench-embed .inspector-filters label{ display: grid; gap: .25rem; font-size: .75rem; color: var(--k-text-muted); }
 .survey-workbench-embed .inspector-filters select, .survey-workbench-embed .inspector-filters input{ color: var(--k-text); background: var(--k-sunken); border: 1px solid var(--k-line); padding: .4rem; }

package/dist/src/review-workbench/review-workbench.d.ts

@@ -1,14 +1,15 @@
 import { type ReviewQueueSessionState, type ReviewWorkbenchDecision, type ReviewWorkbenchState } from "./review-queue-session.js";
-import { type ReviewSessionReplayIssue } from "./review-session-replay.js";
+import { type ReviewSessionReplayIssue, type ReviewSessionReplayWarning } from "./review-session-replay.js";
 import { type ReviewPresentationAdapter } from "./review-presentation.js";
 import { type ReviewCandidate, type ReviewDecision, type ReviewItem, type ReviewSession, type ReviewSessionEvent, type ReviewValueDescriptor } from "../review-resource.js";
 export { reviewAuditRowKeys, type ReviewAuditRowKey } from "./audit-rows.js";
 export { assertReviewQueueAgainstExtractionImport, assertReviewQueueBinding, bindReviewQueue, hashReviewQueueSnapshot, UnattestedExtractionQueueError, UnattestedReviewQueueError, validateReviewQueueAgainstExtractionImport, validateReviewQueueBinding, type BindReviewQueueOptions, type ReviewQueueBinding, type ReviewQueueBindingIssue, type ReviewQueueBindingIssueCode, type ReviewQueueExtractionIssue, type ReviewQueueExtractionIssueCode, type ValidateReviewQueueBindingOptions, } from "./queue-binding.js";
 export { buildExtractionInspectorModel, exportExtractionInspector, filterExtractionInspectorCandidates, mountExtractionInspector, type ExtractionAlignmentState, type ArtifactUnavailableCode, type BuiltExtractionInspectorCandidate, type BuiltExtractionInspectorModel, type ExtractionInspectorCandidate, type ExtractionInspectorEntry, type ExtractionInspectorExportOptions, type ExtractionInspectorFilters, type ExtractionInspectorInput, type ExtractionInspectorMountOptions, type ExtractionInspectorModel, type ExtractionInspectorSource, type ResolvedExtractionArtifact, } from "./extraction-inspector.js";
-export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, type ReviewQueueRowStatus, type ReviewQueueSessionState, type ReviewSessionSummary, type ReviewWorkbenchDecision, type ReviewWorkbenchState, } from "./review-queue-session.js";
+export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, type ReviewQueueRowStatus, type ReviewQueueSessionState, type ReviewSessionSummary, type ReviewWorkbenchDecision, type ReviewWorkbenchState, } from "./review-queue-session.js";
 export { buildReviewCandidatePresentation, buildReviewItemPresentation, buildReviewResultPresentation, humanizeIdentifier, type ReviewCandidatePresentation, type ReviewCandidatePresentationContext, type ReviewItemPresentation, type ReviewItemPresentationContext, type ReviewPresentationAdapter, type ReviewPresentationLink, type ReviewResultPresentation, type ReviewTracePresentationContext, type ReviewTraceRef, type ReviewValuePresentationContext, } from "./review-presentation.js";
 export { buildSurfaceProjectionPreview, type PreviewAuthorityTrace, type PreviewCandidateHistory, type PreviewClaim, type PreviewIntegrityPosture, type PreviewReviewEvent, type PreviewSourceAuthority, type PreviewSourceEvidence, type SurfaceProjectionPreview, } from "./review-surface-preview.js";
-export { validateReviewSessionEventsForSnapshot, type ReviewSessionReplayIssue, type ReviewSessionReplayIssueCode, } from "./review-session-replay.js";
+export { reviewSessionReplayWarningsForSnapshot, validateReviewSessionEventsForSnapshot, type ReviewSessionReplayIssue, type ReviewSessionReplayIssueCode, type ReviewSessionReplayWarning, } from "./review-session-replay.js";
+export { checkEditedValueForItem, editedValueFromEditorText, type EditedValueCheck, } from "./edited-value.js";
 export { assertReviewDecisionModeAllows, DecisionModeViolationError, validateReviewDecisionMode, type ReviewDecisionModeIssue, type ReviewDecisionModeIssueCode, type ReviewDecisionModeResult, } from "./producer-decision-mode.js";
 export declare function buildReviewDecision(state: ReviewWorkbenchState): ReviewDecision | undefined;
 export interface ReviewWorkbenchSessionExport {
@@ -34,6 +35,8 @@ export interface DeriveReviewSessionApplyResultForSnapshotOptions {
 export type DeriveReviewSessionApplyResultForSnapshotResult = {
     readonly ok: true;
     readonly issues: readonly [];
+    /** Non-fatal replay notes, e.g. a legacy text edit converted to its typed value. */
+    readonly warnings?: readonly ReviewSessionReplayWarning[];
     readonly unresolvedItemNames: readonly string[];
     readonly replayedSession: ReviewQueueSessionState;
     readonly sessionExport: ReviewWorkbenchSessionExport;
@@ -42,6 +45,7 @@ export type DeriveReviewSessionApplyResultForSnapshotResult = {
 } | {
     readonly ok: false;
     readonly issues: readonly ReviewSessionApplyIssue[];
+    readonly warnings?: readonly ReviewSessionReplayWarning[];
     readonly unresolvedItemNames: readonly string[];
     readonly replayedSession?: ReviewQueueSessionState;
     readonly sessionExport?: ReviewWorkbenchSessionExport;
@@ -106,24 +110,31 @@ export interface ReviewQueueWindow {
 export interface BrowserReviewWorkbenchConfig {
     readonly startState?: ReviewQueueSessionState | ReviewWorkbenchState;
 }
+/**
+ * The in-process outcome of one workbench decision, derived from the session.
+ * For a decision that selects no candidate ({@link decisionSelectsNoCandidate}:
+ * reject-all or could-not-confirm on a conflict), every `selected*` and
+ * `effective*` field is absent, `unselectedCandidates` holds every candidate,
+ * and `reviewDecision.spec.candidateId` is absent.
+ */
 export interface ReviewWorkbenchResult {
     readonly reviewItemName: string;
     readonly decision: ReviewWorkbenchDecision;
-    readonly selectedCandidate: ReviewCandidate;
-    readonly selectedCandidateId: string;
+    readonly selectedCandidate?: ReviewCandidate;
+    readonly selectedCandidateId?: string;
     readonly selectedCandidateRole?: ReviewCandidate["role"];
     /** The selected candidate's original value, unaffected by any reviewer edit. Used
      *  for candidate-identity matching (see `matchingSelectedCandidate`); consumers who
      *  want the reviewer's edited value should read `effectiveValue` instead. */
-    readonly selectedValue: unknown;
-    readonly selectedDisplayValue: string;
+    readonly selectedValue?: unknown;
+    readonly selectedDisplayValue?: string;
     /** Reviewer-edited override captured for an accept-proposed decision, if the
      *  reviewer changed the proposed value before applying it. Additive/optional. */
     readonly editedValue?: unknown;
     /** The value that should actually be applied: `editedValue` when present (and the
      *  decision selects the proposed candidate), otherwise `selectedValue`. */
-    readonly effectiveValue: unknown;
-    readonly effectiveDisplayValue: string;
+    readonly effectiveValue?: unknown;
+    readonly effectiveDisplayValue?: string;
     readonly unselectedCandidates: readonly ReviewCandidate[];
     readonly reviewDecision: ReviewDecision;
     readonly status: ReviewDecision["spec"]["status"];
@@ -207,8 +218,8 @@ export declare function buildReviewQueueWindow(session: ReviewQueueSessionState,
  * error message when the value violates the declared type/enum constraint, or
  * `undefined` when it is acceptable — including when there is no descriptor or
  * the type carries no single-line constraint (string/array/object). This is a
- * FORMAT check only: it never coerces or rewrites the value (the workbench
- * stores the reviewer's string edit unchanged, as it did before typed editors).
+ * FORMAT check on the editor text; on accept the workbench stores the text
+ * converted to the descriptor's JSON type (`editedValueFromEditorText`).
  */
 export declare function validateProposedValue(descriptor: ReviewValueDescriptor | undefined, rawValue: string): string | undefined;
 export declare function mountReviewWorkbench(root: HTMLElement, startState?: ReviewQueueSessionState | ReviewWorkbenchState, options?: MountReviewWorkbenchOptions): void;

package/dist/src/review-workbench/review-workbench.js

@@ -1,20 +1,22 @@
 import { canonicalJson } from "./canonical.js";
 import { assertReviewResolutionConsistency } from "../producer-discipline.js";
-import { candidateForDecision, keepActionDecision, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewWorkbenchState, defaultReviewSessionName, effectiveValueForDecision, initialReviewQueueSessionState, replayReviewSessionEvents, reviewWorkbenchSessionStorageKey, workbenchDecisionDefinitions, } from "./review-queue-session.js";
-import { validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
+import { candidateForDecision, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewWorkbenchState, defaultReviewSessionName, effectiveValueForDecision, initialReviewQueueSessionState, replayReviewSessionEvents, reviewWorkbenchSessionStorageKey, workbenchDecisionDefinitions, } from "./review-queue-session.js";
+import { reviewSessionReplayWarningsForSnapshot, validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
 import { buildSurfaceProjectionPreview, formatValue, } from "./review-surface-preview.js";
 import { buildReviewCandidatePresentation, buildReviewItemPresentation, } from "./review-presentation.js";
 import { findSoleCandidateById, reviewResourceApiVersion, } from "../review-resource.js";
 import { validateAuthorizing, buildAuthorizedActionAuthorizing } from "../review-authorizing.js";
 import { humanizeIdentifier } from "./review-presentation.js";
+import { editedValueFromEditorText, isIsoCalendarDate, parsePlainDecimal } from "./edited-value.js";
 import { createAuditFactTrace, } from "./audit-rows.js";
 export { reviewAuditRowKeys } from "./audit-rows.js";
 export { assertReviewQueueAgainstExtractionImport, assertReviewQueueBinding, bindReviewQueue, hashReviewQueueSnapshot, UnattestedExtractionQueueError, UnattestedReviewQueueError, validateReviewQueueAgainstExtractionImport, validateReviewQueueBinding, } from "./queue-binding.js";
 export { buildExtractionInspectorModel, exportExtractionInspector, filterExtractionInspectorCandidates, mountExtractionInspector, } from "./extraction-inspector.js";
-export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, } from "./review-queue-session.js";
+export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, } from "./review-queue-session.js";
 export { buildReviewCandidatePresentation, buildReviewItemPresentation, buildReviewResultPresentation, humanizeIdentifier, } from "./review-presentation.js";
 export { buildSurfaceProjectionPreview, } from "./review-surface-preview.js";
-export { validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
+export { reviewSessionReplayWarningsForSnapshot, validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
+export { checkEditedValueForItem, editedValueFromEditorText, } from "./edited-value.js";
 export { assertReviewDecisionModeAllows, DecisionModeViolationError, validateReviewDecisionMode, } from "./producer-decision-mode.js";
 export function buildReviewDecision(state) {
     if (!state.decision) {
@@ -25,11 +27,15 @@ export function buildReviewDecision(state) {
         throw new Error("Could not confirm requires a non-empty reason.");
     }
     const candidate = candidateForDecision(state.item, state.decision);
+    // A decision that selects no candidate (a value-neutral decision on a
+    // conflict) records no candidate id and no candidate's projection hints.
+    const selectsNone = decisionSelectsNoCandidate(state.item, state.decision);
     const projection = {
-        ...candidate.projection,
-        reviewOutcomeId: candidate.projection?.reviewOutcomeId
+        ...(selectsNone ? state.item.spec.projection : candidate.projection),
+        reviewOutcomeId: (selectsNone ? state.item.spec.projection : candidate.projection)?.reviewOutcomeId
             ?? `${state.item.metadata.name}:${state.decision}:review-outcome`,
     };
+    const candidateProjection = selectsNone ? undefined : candidate.projection;
     const authorizing = buildDecisionCardAuthorizing(state);
     const reviewDecision = {
         apiVersion: reviewResourceApiVersion,
@@ -41,7 +47,7 @@ export function buildReviewDecision(state) {
         },
         spec: {
             reviewItemName: state.item.metadata.name,
-            candidateId: candidate.id,
+            ...(selectsNone ? {} : { candidateId: candidate.id }),
             status: definition.status,
             ...(state.decision === "could-not-confirm"
                 ? {
@@ -62,7 +68,7 @@ export function buildReviewDecision(state) {
                 : {}),
         },
         status: {
-            ...(candidate.projection?.claimId ? { appliedToClaimIds: [candidate.projection.claimId] } : {}),
+            ...(candidateProjection?.claimId ? { appliedToClaimIds: [candidateProjection.claimId] } : {}),
         },
     };
     assertReviewResolutionConsistency(`ReviewDecision ${reviewDecision.metadata.name}`, {
@@ -124,7 +130,16 @@ function buildDecisionCardAuthorizing(state) {
  */
 function decisionCardRenderedPrompt(state, targetLabel) {
     const currentCandidate = state.item.spec.candidates.find((c) => c.role === "current");
-    const proposedCandidate = state.item.spec.candidates.find((c) => c.role === "proposed");
+    const proposedCandidates = state.item.spec.candidates.filter((c) => c.role === "proposed");
+    // A conflict card lists every proposed value and offers reject-all or could
+    // not confirm; the prompt states the same, naming no single value.
+    if (proposedCandidates.length > 1) {
+        const decisionLabel = state.decision === "reject-proposed"
+            ? "Reject all values"
+            : state.decision ? workbenchDecisionDefinitions[state.decision].label : "";
+        return `For ${targetLabel}, ${proposedCandidates.length} different values were proposed: ${proposedCandidates.map((c) => formatValue(c.value)).join(", ")}. Selected decision: ${decisionLabel}.`;
+    }
+    const proposedCandidate = proposedCandidates[0];
     const currentValue = formatValue(currentCandidate?.value ?? "");
     const proposedValue = formatValue(proposedCandidate?.value ?? "");
     const decisionLabel = state.decision ? workbenchDecisionDefinitions[state.decision].label : "";
@@ -204,7 +219,9 @@ function duplicateTargetIssues(items) {
     return issues;
 }
 function mapReviewApplyResultToActions(input) {
-    if (input.result.decision === "could-not-confirm") {
+    // Could-not-confirm applies nothing, and neither does a decision that selects
+    // no candidate (rejecting every value of a conflict): there is no value to apply.
+    if (input.result.decision === "could-not-confirm" || input.result.selectedCandidateId === undefined) {
         return [];
     }
     const context = buildReviewApplyActionContext(input.result, input.itemByName, input.issues);
@@ -254,6 +271,8 @@ function buildReviewApplyActionContext(result, itemByName, issues) {
     };
 }
 function matchingSelectedCandidate(item, result) {
+    if (result.selectedCandidateId === undefined)
+        return undefined;
     const candidate = findSoleCandidateById(item, result.selectedCandidateId);
     return candidate
         && candidate.role === result.selectedCandidateRole
@@ -278,6 +297,16 @@ export function buildReviewWorkbenchResultsFromSession(session) {
         if (!reviewDecision) {
             return [];
         }
+        if (decisionSelectsNoCandidate(item, decision)) {
+            return [{
+                    reviewItemName: item.metadata.name,
+                    decision,
+                    unselectedCandidates: [...item.spec.candidates],
+                    reviewDecision,
+                    status: reviewDecision.spec.status,
+                    rationale: reviewDecision.spec.rationale,
+                }];
+        }
         const selectedCandidate = candidateForDecision(item, decision);
         const editedValue = decision === "accept-proposed"
             ? session.editedValuesByItemName?.[item.metadata.name]
@@ -332,6 +361,7 @@ export function deriveReviewSessionApplyResultForSnapshot(options) {
             results: [],
         };
     }
+    const warnings = reviewSessionReplayWarningsForSnapshot(options.snapshot, options.events);
     const replayedSession = replayReviewSessionEvents(options.snapshot, options.events);
     const sessionExport = buildReviewWorkbenchSessionExport(replayedSession, options.events);
     const resolvedItemNames = new Set(sessionExport.results.map((result) => result.reviewItemName));
@@ -356,6 +386,7 @@ export function deriveReviewSessionApplyResultForSnapshot(options) {
         return {
             ok: false,
             issues,
+            warnings,
             unresolvedItemNames,
             replayedSession,
             sessionExport,
@@ -366,6 +397,7 @@ export function deriveReviewSessionApplyResultForSnapshot(options) {
     return {
         ok: true,
         issues: [],
+        warnings,
         unresolvedItemNames,
         replayedSession,
         sessionExport,
@@ -486,13 +518,13 @@ function fieldCardState(item, decision) {
  * {@link keepActionDecision}). Saying "Kept — flagged wrong" there would claim a
  * distinction the record does not hold, so the chip states only what happened.
  */
-function chipLabel(state, hasCurrentValue) {
+function chipLabel(state, hasCurrentValue, conflictingValues) {
     switch (state) {
         case "accepted": return "Accepted";
-        case "kept": return hasCurrentValue ? "Kept current" : "Left unset";
-        case "rejected": return hasCurrentValue ? "Kept — flagged wrong" : "Left unset";
+        case "kept": return hasCurrentValue ? "Kept current" : conflictingValues ? "All values rejected" : "Left unset";
+        case "rejected": return hasCurrentValue ? "Kept — flagged wrong" : conflictingValues ? "All values rejected" : "Left unset";
         case "could-not-confirm": return "Could not confirm";
-        default: return "Needs review";
+        default: return conflictingValues ? `Conflict: ${conflictingValues} values` : "Needs review";
     }
 }
 const DEFAULT_REVIEW_QUEUE_PAGE_SIZE = 50;
@@ -613,11 +645,16 @@ function renderFieldCard(item, session, presentationAdapter) {
     const state = fieldCardState(item, decision);
     const decided = decision !== undefined;
     const current = item.spec.candidates.find((candidate) => candidate.role === "current");
-    const proposed = item.spec.candidates.find((candidate) => candidate.role === "proposed");
+    const proposedCandidates = item.spec.candidates.filter((candidate) => candidate.role === "proposed");
+    // Several proposed values for one claim are a conflict. A control names a
+    // role, not a value, so none may make one of them the trusted value; the
+    // reviewer can still reject them all or end the round as could-not-confirm.
+    const conflict = proposedCandidates.length > 1;
+    const proposed = proposedCandidates.length === 1 ? proposedCandidates[0] : undefined;
     const presentation = buildReviewItemPresentation(item, presentationAdapter);
     const hasCurrentValue = current !== undefined && !isEmptyValue(current.value);
     const kind = hasCurrentValue ? "Update" : "New";
-    const keepLabel = hasCurrentValue ? "Keep current" : "Leave unset";
+    const keepLabel = hasCurrentValue ? "Keep current" : conflict ? "Reject all values" : "Leave unset";
     // Only render controls whose decision this item can actually record. Every
     // decision resolves to a candidate role, so a control routed at a role the
     // item does not carry cannot emit anything — it used to throw mid-click and
@@ -648,11 +685,13 @@ function renderFieldCard(item, session, presentationAdapter) {
         <div class="frow1">
           <span class="fname">${escapeHtml(presentation.targetLabel)}</span>
           <span class="fkind">${kind}</span>
-          <span class="chip ${state} push" data-testid="field-chip">${chipLabel(state, hasCurrentValue)}</span>
+          <span class="chip ${state} push" data-testid="field-chip">${chipLabel(state, hasCurrentValue, conflict ? proposedCandidates.length : undefined)}</span>
         </div>
         ${proposed
         ? renderDiffRow(item, current, proposed, presentation.targetLabel, decided, effectiveProposedText, currentPresentationText)
-        : "<p class=\"field-value\">No proposed value is available for this field.</p>"}
+        : proposedCandidates.length > 1
+            ? renderConflictingProposals(item, proposedCandidates, presentationAdapter, presentation.targetLabel)
+            : "<p class=\"field-value\">No proposed value is available for this field.</p>"}
         ${proposed ? renderProvenanceRow(item, proposed, presentationAdapter) : ""}
         <div class="decide">
           ${keepDecision === undefined ? "" : `<button class="btn keep" type="button" data-testid="keep-current" data-item-name="${escapeHtml(item.metadata.name)}">${keepLabel}</button>`}
@@ -662,6 +701,7 @@ function renderFieldCard(item, session, presentationAdapter) {
             Suggestion was wrong
           </label>
           <button class="btn unconfirmed" type="button" data-testid="could-not-confirm" data-item-name="${escapeHtml(item.metadata.name)}">Could not confirm</button>` : ""}
+          ${conflict ? `<button class="btn unconfirmed" type="button" data-testid="could-not-confirm" data-item-name="${escapeHtml(item.metadata.name)}">Could not confirm</button>` : ""}
         </div>
         <!--
           A control's precondition message belongs where the control is. The
@@ -672,7 +712,7 @@ function renderFieldCard(item, session, presentationAdapter) {
         -->
         <span class="derr" data-testid="decision-error" role="alert" hidden></span>
         <div class="decided">
-          <span class="chip ${state}" data-testid="decided-chip">${chipLabel(state, hasCurrentValue)}</span>
+          <span class="chip ${state}" data-testid="decided-chip">${chipLabel(state, hasCurrentValue, conflict ? proposedCandidates.length : undefined)}</span>
           <button class="undo" type="button" data-testid="undo-decision" data-item-name="${escapeHtml(item.metadata.name)}">Change</button>
         </div>
         ${renderAuditDetails(item, current, proposed, session, presentationAdapter)}
@@ -680,6 +720,24 @@ function renderFieldCard(item, session, presentationAdapter) {
     </section>
   `;
 }
+/**
+ * The card body for an item whose candidate set holds several proposed values.
+ * Lists every value with its excerpt; the workbench records a decision against
+ * a role, so it cannot pick one of them, and says what the reviewer can do.
+ */
+function renderConflictingProposals(item, candidates, presentationAdapter, targetLabel) {
+    const values = candidates.map((candidate) => {
+        const text = buildReviewCandidatePresentation(item, candidate, presentationAdapter, targetLabel).valueText;
+        const excerpt = candidate.locator?.excerpt;
+        return `<li data-testid="conflicting-value"><span class="vtext">${escapeHtml(text)}</span>${excerpt ? ` <q>${escapeHtml(excerpt)}</q>` : ""}</li>`;
+    }).join("");
+    return `
+    <div class="field-value" data-testid="conflicting-proposals">
+      <p>${candidates.length} different values were proposed for this field. This queue cannot choose one of them yet: reject them all, or mark the field Could not confirm with a reason.</p>
+      <ul>${values}</ul>
+    </div>
+  `;
+}
 /**
  * Renders the Current → Proposed diff row. The proposed side is editable
  * (via {@link renderProposedValueEditor}) until the field has a decision.
@@ -804,8 +862,8 @@ function toDateInputValue(text) {
  * error message when the value violates the declared type/enum constraint, or
  * `undefined` when it is acceptable — including when there is no descriptor or
  * the type carries no single-line constraint (string/array/object). This is a
- * FORMAT check only: it never coerces or rewrites the value (the workbench
- * stores the reviewer's string edit unchanged, as it did before typed editors).
+ * FORMAT check on the editor text; on accept the workbench stores the text
+ * converted to the descriptor's JSON type (`editedValueFromEditorText`).
  */
 export function validateProposedValue(descriptor, rawValue) {
     if (!descriptor)
@@ -815,7 +873,9 @@ export function validateProposedValue(descriptor, rawValue) {
         case "number":
             if (value === "")
                 return "Enter a number.";
-            return Number.isFinite(Number(value)) ? undefined : `"${rawValue}" is not a number.`;
+            return parsePlainDecimal(value) !== undefined
+                ? undefined
+                : `"${rawValue}" is not a number (use plain decimal digits: any safe integer, or a fraction of at most 15 significant digits).`;
         case "boolean":
             if (value === "")
                 return "Choose true or false.";
@@ -823,7 +883,7 @@ export function validateProposedValue(descriptor, rawValue) {
         case "date":
             if (value === "")
                 return "Enter a date.";
-            return /^\d{4}-\d{2}-\d{2}$/.test(value) && !Number.isNaN(Date.parse(value))
+            return isIsoCalendarDate(value)
                 ? undefined
                 : `"${rawValue}" is not a valid date (YYYY-MM-DD).`;
         case "enum": {
@@ -1158,7 +1218,7 @@ function createReviewWorkbenchController(root, startState, options) {
         const session = sessionForEvent;
         const item = itemName ? session.items.find((entry) => entry.metadata.name === itemName) : undefined;
         const decision = itemName ? session.decisionsByItemName[itemName] : undefined;
-        const candidate = item && decision ? candidateForDecision(item, decision) : undefined;
+        const candidateId = item && decision ? decisionCandidateId(item, decision) : undefined;
         const definition = decision ? workbenchDecisionDefinitions[decision] : undefined;
         const note = itemName ? session.notesByItemName[itemName] : undefined;
         // Carry the reviewer's inline edit in the event (accept-proposed only), so
@@ -1181,7 +1241,7 @@ function createReviewWorkbenchController(root, startState, options) {
             occurredAt: session.reviewedAt,
             reviewItemName: itemName,
             reviewDecisionName: item && decision ? `${item.metadata.name}-${decision}` : undefined,
-            candidateId: candidate?.id,
+            candidateId,
             status: definition?.status,
             ...(decision === "could-not-confirm"
                 ? {
@@ -1210,7 +1270,12 @@ function createReviewWorkbenchController(root, startState, options) {
         const originalText = proposed ? formatValue(proposed.value) : undefined;
         const nextEditedValuesByItemName = { ...session.editedValuesByItemName };
         if (decision === "accept-proposed" && rawEditedValue !== undefined && rawEditedValue !== originalText) {
-            nextEditedValuesByItemName[itemName] = rawEditedValue;
+            // Store the edit as the descriptor's JSON type (a number field's "42" is
+            // 42), so the decision event and effectiveValue carry a typed value the
+            // server apply boundary accepts (kontourai/survey#278). Text that does not
+            // parse is kept as typed; the apply boundary refuses it.
+            const typedValue = editedValueFromEditorText(item?.spec.valueDescriptor, rawEditedValue);
+            nextEditedValuesByItemName[itemName] = typedValue === undefined ? rawEditedValue : typedValue;
         }
         else {
             delete nextEditedValuesByItemName[itemName];

package/dist/src/review-workbench/review-workbench.standalone.css

@@ -39,6 +39,8 @@
 .inspector-heading h2 { margin: 0; }
 .inspector-posture { display: flex; flex-direction: column; padding: .75rem; border-radius: var(--k-radius-sm); background: var(--k-positive-wash); }
 .inspector-posture.digest-mismatch, .inspector-posture.artifact-unavailable, .inspector-posture.excerpt-mismatch { background: var(--k-negative-wash); color: var(--k-negative); border: 2px solid currentColor; }
+.inspector-posture.extraction-failed { background: var(--k-negative-wash); color: var(--k-negative); border: 2px solid currentColor; }
+.inspector-posture.extraction-incomplete { background: var(--k-caution-wash); color: var(--k-caution); border: 2px solid currentColor; }
 .inspector-filters { display: flex; flex-wrap: wrap; gap: .6rem; margin: 1rem 0; }
 .inspector-filters label { display: grid; gap: .25rem; font-size: .75rem; color: var(--k-text-muted); }
 .inspector-filters select, .inspector-filters input { color: var(--k-text); background: var(--k-sunken); border: 1px solid var(--k-line); padding: .4rem; }

package/dist/src/review-workbench/server-review-session.d.ts

@@ -1,6 +1,6 @@
 import { type DeriveReviewSessionApplyResultForSnapshotResult, type MapReviewWorkbenchResultsToApplyActionsOptions, type ReviewApplyActionIssue, type ReviewApplyActionMapping, type ReviewSessionApplyIssue, type ReviewSessionApplyResolutionRequirement, type ReviewWorkbenchResult } from "./review-workbench.js";
 import { type ReviewDecisionModeIssue } from "./producer-decision-mode.js";
-import { type ReviewSessionReplayIssue } from "./review-session-replay.js";
+import { type ReviewSessionReplayIssue, type ReviewSessionReplayWarning } from "./review-session-replay.js";
 import type { ReviewDecision, ReviewSessionEvent } from "../review-resource.js";
 import { type ReviewQueueBinding } from "./queue-binding.js";
 import { type ReviewQueueSessionState } from "./review-queue-session.js";
@@ -128,6 +128,8 @@ export type ApplyReviewSessionIssue = ReviewSessionApplyIssue | {
 export type ApplyReviewSessionResult<TAction = never> = {
     readonly ok: true;
     readonly issues: readonly [];
+    /** Non-fatal replay notes, e.g. a legacy text edit converted to its typed value. */
+    readonly warnings?: readonly ReviewSessionReplayWarning[];
     readonly decisions: readonly ReviewDecision[];
     readonly results: readonly ReviewWorkbenchResult[];
     readonly actions: readonly ReviewApplyActionMapping<TAction>[];

package/dist/src/review-workbench/server-review-session.js

@@ -225,6 +225,7 @@ export function applyReviewSession(options) {
     return {
         ok: true,
         issues: [],
+        warnings: derived.warnings ?? [],
         decisions: derived.decisions,
         results: derived.results,
         actions,

package/dist/src/reviewed-candidate-resolution.js

@@ -1,4 +1,5 @@
 import { candidateReviewRecord } from "./builder.js";
+import { ReviewAgreementError } from "./to-surface.js";
 export function reviewedCandidateResolution(input) {
     return candidateReviewRecord({
         id: input.id,
@@ -11,13 +12,12 @@ export function reviewedCandidateResolution(input) {
             ...input.reviewOutcome,
             candidateId: input.reviewOutcome.candidateId ?? input.selectedCandidateId,
         },
-        observations: input.observations.map((observation) => ({
-            ...observation,
-            claim: {
-                ...observation.claim,
-                status: observation.claim.status ?? claimStatusForObservation(input, observation),
-            },
-        })),
+        observations: input.observations.map((observation) => {
+            const status = observation.claim.status ?? claimStatusForObservation(input, observation);
+            if (observationCandidateId(observation) === input.selectedCandidateId)
+                assertSelectedStatusAgrees(input, status);
+            return { ...observation, claim: { ...observation.claim, status } };
+        }),
     });
 }
 function claimStatusForObservation(input, observation) {
@@ -26,6 +26,12 @@ function claimStatusForObservation(input, observation) {
     }
     return input.unselectedClaimStatus ?? "superseded";
 }
+/** A trusted selected claim must carry the status its review decided. */
+function assertSelectedStatusAgrees(input, status) {
+    if ((status === "verified" || status === "assumed") && status !== input.reviewOutcome.status) {
+        throw new ReviewAgreementError("status-mismatch", `Candidate set ${input.id} selected claim status ${status} disagrees with review outcome status ${input.reviewOutcome.status}`);
+    }
+}
 function observationCandidateId(observation) {
     return observation.candidate?.id ?? `${observation.id}.candidate`;
 }

package/dist/src/schema-mapping.d.ts

@@ -21,6 +21,7 @@
  *      capping.
  */
 import type { TrustBundle } from "@kontourai/surface";
+import type { AutoAcceptWarning } from "./producer-profile.js";
 import type { Candidate, CandidateSet, ReviewOutcome, SurveyInput } from "./types.js";
 /**
  * A stable reference to one field within one system's schema.
@@ -109,6 +110,10 @@ export interface SchemaMappingOptions {
      * If set, proposals at or above this confidence threshold are auto-accepted
      * as "assumed" (mirrors applyAutoAcceptPolicy in inquiry-mapping).
      * Conflicting proposals are never auto-accepted.
+     *
+     * Experimental: the gate trusts the proposer's self-reported confidence.
+     * Must be a finite number in (0, 1] (otherwise `RangeError`); a proposal
+     * whose confidence is not a finite number in [0, 1] is never auto-accepted.
      */
     autoAcceptMinConfidence?: number;
     /** ISO 8601 timestamp; defaults to new Date().toISOString(). */
@@ -116,6 +121,18 @@ export interface SchemaMappingOptions {
     /** Identifies the Survey producer run. */
     source?: string;
 }
+/**
+ * The schema-mapping profile's own payload, carried verbatim under the core's
+ * canonical `Candidate.metadata` key (see `./producer-profile.js`). Covers
+ * every field read across `mappingReviewToSurface`'s read-back sites and
+ * written at Candidate-projection time below.
+ */
+/**
+ * The value a schema-mapping candidate and its claim carry: the whole mapping,
+ * source field included, so a reviewed claim's value is exactly the reviewed
+ * candidate value.
+ */
+export type SchemaMappingValue = Pick<MappingProposalRecord, "relation" | "sourceField" | "targetField" | "conversion">;
 /**
  * Run the extractor against the provided system schemas and project the
  * resulting proposals into the standard Survey chain:
@@ -142,6 +159,12 @@ export declare function surveySchemaMapping(context: {
     surveyInput: SurveyInput;
     proposals: MappingProposalRecord[];
     candidateSets: CandidateSet[];
+    /**
+     * Proposals the auto-accept policy refused because their confidence is not
+     * a finite number in [0, 1]. Present only when non-empty; those proposals
+     * stay in human review.
+     */
+    autoAcceptWarnings?: AutoAcceptWarning[];
 }>;
 /**
  * A reviewed (accepted or rejected) mapping record: the CandidateSet, the