@kontourai/survey 6.1.0 → 8.0.0

package/dist/src/review-workbench/review-workbench.js

@@ -1,32 +1,38 @@
 import { canonicalJson } from "./canonical.js";
 import { assertReviewResolutionConsistency } from "../producer-discipline.js";
-import { candidateForDecision, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewWorkbenchState, defaultReviewSessionName, effectiveValueForDecision, initialReviewQueueSessionState, replayReviewSessionEvents, reviewWorkbenchSessionStorageKey, workbenchDecisionDefinitions, } from "./review-queue-session.js";
+import { candidateForDecision, conflictSelectionIssue, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, unchosenProposedCandidates, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewWorkbenchState, defaultReviewSessionName, effectiveValueForDecision, initialReviewQueueSessionState, isScoreBlind, assertReviewSessionConditions, sessionConditionsStamp, replayReviewSessionEvents, reviewWorkbenchSessionStorageKey, workbenchDecisionDefinitions, } from "./review-queue-session.js";
 import { reviewSessionReplayWarningsForSnapshot, validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
 import { buildSurfaceProjectionPreview, formatValue, } from "./review-surface-preview.js";
 import { buildReviewCandidatePresentation, buildReviewItemPresentation, } from "./review-presentation.js";
 import { findSoleCandidateById, reviewResourceApiVersion, } from "../review-resource.js";
 import { validateAuthorizing, buildAuthorizedActionAuthorizing } from "../review-authorizing.js";
-import { candidateVerificationNotes, excludedProposalsSentence, humanizeIdentifier } from "./review-presentation.js";
+import { attestReviewQueueExtraction } from "./queue-binding.js";
+import { candidateVerificationNotes, excludedProposalsSentence, excludedProposalsUnreadableSentence } from "./review-presentation.js";
 import { editedValueFromEditorText, isIsoCalendarDate, parsePlainDecimal } from "./edited-value.js";
+import { renderFieldStatesHtml } from "./field-state-view.js";
 import { createAuditFactTrace, } from "./audit-rows.js";
 export { reviewAuditRowKeys } from "./audit-rows.js";
-export { assertReviewQueueAgainstExtractionImport, assertReviewQueueBinding, bindReviewQueue, hashReviewQueueSnapshot, UnattestedExtractionQueueError, UnattestedReviewQueueError, validateReviewQueueAgainstExtractionImport, validateReviewQueueBinding, } from "./queue-binding.js";
+export { assertReviewQueueAgainstExtractionImport, assertReviewQueueBinding, attestReviewQueueExtraction, bindReviewQueue, reviewItemCarriesExtractionBinding, unverifiedExtractionQueueSentence, hashReviewQueueSnapshot, UnattestedExtractionQueueError, UnattestedReviewQueueError, validateReviewQueueAgainstExtractionImport, validateReviewQueueBinding, } from "./queue-binding.js";
 export { buildExtractionInspectorModel, exportExtractionInspector, filterExtractionInspectorCandidates, mountExtractionInspector, } from "./extraction-inspector.js";
-export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, } from "./review-queue-session.js";
+export { renderFieldStatesHtml } from "./field-state-view.js";
+export { drawRandomAuditSample, openRandomAuditSession, } from "./audit-sample.js";
+export { buildReviewSessionEvents, buildReviewSessionEvent, buildReviewSessionResource, candidateForDecision, conflictSelectionIssue, unchosenProposedCandidates, decisionCandidateId, decisionSelectsNoCandidate, keepActionDecision, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, initialReviewWorkbenchState, isScoreBlind, assertReviewSessionConditions, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, } from "./review-queue-session.js";
 export { buildReviewCandidatePresentation, buildReviewItemPresentation, buildReviewResultPresentation, humanizeIdentifier, } from "./review-presentation.js";
 export { buildSurfaceProjectionPreview, } from "./review-surface-preview.js";
 export { reviewSessionReplayWarningsForSnapshot, validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
 export { checkEditedValueForItem, editedValueFromEditorText, } from "./edited-value.js";
 export { assertReviewDecisionModeAllows, DecisionModeViolationError, validateReviewDecisionMode, } from "./producer-decision-mode.js";
-export function buildReviewDecision(state) {
+export function buildReviewDecision(state, options = {}) {
     if (!state.decision) {
         return undefined;
     }
     const definition = workbenchDecisionDefinitions[state.decision];
+    assertReviewSessionConditions(state);
     if (state.decision === "could-not-confirm" && !state.note.trim()) {
         throw new Error("Could not confirm requires a non-empty reason.");
     }
-    const candidate = candidateForDecision(state.item, state.decision);
+    const candidate = candidateForDecision(state.item, state.decision, state.selectedCandidateId);
+    const unchosen = unchosenProposedCandidates(state.item, state.decision, state.selectedCandidateId);
     // A decision that selects no candidate (a value-neutral decision on a
     // conflict) records no candidate id and no candidate's projection hints.
     const selectsNone = decisionSelectsNoCandidate(state.item, state.decision);
@@ -36,7 +42,7 @@ export function buildReviewDecision(state) {
             ?? `${state.item.metadata.name}:${state.decision}:review-outcome`,
     };
     const candidateProjection = selectsNone ? undefined : candidate.projection;
-    const authorizing = buildDecisionCardAuthorizing(state);
+    const authorizing = buildDecisionCardAuthorizing(state, options.presentationAdapter);
     const reviewDecision = {
         apiVersion: reviewResourceApiVersion,
         kind: "ReviewDecision",
@@ -66,6 +72,12 @@ export function buildReviewDecision(state) {
             ...(state.decision === "accept-proposed" && state.editedValue !== undefined
                 ? { editedValue: state.editedValue }
                 : {}),
+            // A choice between conflicting values records the rivals it passed over.
+            ...(unchosen.length ? { unselectedCandidateIds: unchosen.map((entry) => entry.id) } : {}),
+            // The session's conditions, never the reviewer's: a score-blind session
+            // records that the decision was made without scores on screen.
+            ...(state.presentation !== undefined ? { presentation: { scoreBlind: state.presentation.scoreBlind } } : {}),
+            ...(state.sampling !== undefined ? { sampling: { ...state.sampling } } : {}),
         },
         status: {
             ...(candidateProjection?.claimId ? { appliedToClaimIds: [candidateProjection.claimId] } : {}),
@@ -91,12 +103,11 @@ const DECISION_CARD_PROMPT_REF = "review-workbench/decision-card@v1";
  * On validation failure, emits a console warning and returns undefined so the
  * outcome is recorded without authorizing (transparency-gap-not-blocker per ADR 0004).
  */
-function buildDecisionCardAuthorizing(state) {
+function buildDecisionCardAuthorizing(state, adapter) {
     if (!state.decision) {
         return undefined;
     }
-    const targetLabel = humanizeIdentifier(state.item.spec.target);
-    const renderedPrompt = decisionCardRenderedPrompt(state, targetLabel);
+    const renderedPrompt = decisionCardRenderedPrompt(state, buildReviewItemPresentation(state.item, adapter), adapter);
     // Reviewer note present means the reviewer also typed a rationale — "typed".
     // Control-only affirmation (no note) is "affirmed-control".
     const action = state.note?.trim() ? "typed" : "affirmed-control";
@@ -121,35 +132,48 @@ function buildDecisionCardAuthorizing(state) {
     }
 }
 /**
- * Derives the exact decision prompt rendered on the workbench decision card
- * for a given review item and decision.
+ * Renders the decision card's prompt for a review item and decision.
+ *
+ * It is rebuilt from the item when the decision is built, not captured from
+ * what a reviewer's screen showed: it records what the card states for this
+ * item, with the same presentation adapter, target label and value text.
  *
  * Format mirrors the review question shown in the workbench header:
  * "For {target}, decide whether {proposed} should replace {current}."
  * followed by the selected decision label so the block is self-contained.
  */
-function decisionCardRenderedPrompt(state, targetLabel) {
-    // The card shows proposals excluded at import; the recorded prompt must say
-    // the reviewer was told about them.
-    const excluded = excludedProposalsSentence(buildReviewItemPresentation(state.item).excludedProposals);
-    // Likewise the verifier records the card showed, read against the same value.
-    const verification = candidateVerificationNotes(state.item, state.decision === "accept-proposed" ? state.editedValue : undefined).map((note) => note.sentence);
-    return [decisionCardBasePrompt(state, targetLabel), ...(excluded ? [excluded] : []), ...verification].join(" ");
-}
-function decisionCardBasePrompt(state, targetLabel) {
+function decisionCardRenderedPrompt(state, presentation, adapter) {
+    // The card states proposals excluded at import, and stored ones it cannot
+    // show; so does the prompt.
+    const excluded = excludedProposalsSentence(presentation.excludedProposals);
+    const unreadable = excludedProposalsUnreadableSentence(presentation.excludedProposalsUnreadable);
+    // Likewise the verifier records the card shows, read against the same value.
+    // A score-blind card shows no verifier result, so the recorded prompt names none.
+    const verification = isScoreBlind(state) ? [] : candidateVerificationNotes(state.item, state.decision === "accept-proposed" ? state.editedValue : undefined).map((note) => note.sentence);
+    return [decisionCardBasePrompt(state, presentation.targetLabel, adapter), ...(excluded ? [excluded] : []), ...(unreadable ? [unreadable] : []), ...verification].join(" ");
+}
+function decisionCardBasePrompt(state, targetLabel, adapter) {
+    const valueText = (candidate) => buildReviewCandidatePresentation(state.item, candidate, adapter, targetLabel).valueText;
     const currentCandidate = state.item.spec.candidates.find((c) => c.role === "current");
     const proposedCandidates = state.item.spec.candidates.filter((c) => c.role === "proposed");
-    // A conflict card lists every proposed value and offers reject-all or could
-    // not confirm; the prompt states the same, naming no single value.
+    // A conflict card lists every proposed value and offers a choice of one,
+    // reject-all or could not confirm; the prompt states the same: every value,
+    // and for a choice, which value was chosen and which were not.
     if (proposedCandidates.length > 1) {
+        const values = `For ${targetLabel}, ${proposedCandidates.length} different values were proposed: ${proposedCandidates.map(valueText).join(", ")}.`;
+        if (state.decision === "select-proposed") {
+            const chosen = proposedCandidates.find((c) => c.id === state.selectedCandidateId);
+            const unchosen = proposedCandidates.filter((c) => c.id !== state.selectedCandidateId);
+            return `${values} Selected decision: ${workbenchDecisionDefinitions[state.decision].label}: ${chosen ? valueText(chosen) : formatValue("")} (not chosen: ${unchosen.map(valueText).join(", ")}).`;
+        }
         const decisionLabel = state.decision === "reject-proposed"
             ? "Reject all values"
             : state.decision ? workbenchDecisionDefinitions[state.decision].label : "";
-        return `For ${targetLabel}, ${proposedCandidates.length} different values were proposed: ${proposedCandidates.map((c) => formatValue(c.value)).join(", ")}. Selected decision: ${decisionLabel}.`;
+        return `${values} Selected decision: ${decisionLabel}.`;
     }
     const proposedCandidate = proposedCandidates[0];
-    const currentValue = formatValue(currentCandidate?.value ?? "");
-    const proposedValue = formatValue(proposedCandidate?.value ?? "");
+    const currentValue = currentCandidate ? valueText(currentCandidate) : formatValue("");
+    const proposedValue = proposedCandidate ? valueText(proposedCandidate) : formatValue("");
     const decisionLabel = state.decision ? workbenchDecisionDefinitions[state.decision].label : "";
     return `For ${targetLabel}, decide whether ${proposedValue} should replace ${currentValue}. Selected decision: ${decisionLabel}.`;
 }
@@ -161,7 +185,7 @@ export class ReviewApplyActionMappingError extends Error {
         this.issues = issues;
     }
 }
-export function buildReviewDecisionsFromSession(session) {
+export function buildReviewDecisionsFromSession(session, options = {}) {
     return session.items.flatMap((item) => {
         const decision = session.decisionsByItemName[item.metadata.name];
         if (!decision) {
@@ -170,7 +194,7 @@ export function buildReviewDecisionsFromSession(session) {
         const reviewDecision = buildReviewDecision(currentReviewWorkbenchState({
             ...session,
             activeItemName: item.metadata.name,
-        }));
+        }), options);
         return reviewDecision ? [reviewDecision] : [];
     });
 }
@@ -291,7 +315,7 @@ function matchingSelectedCandidate(item, result) {
 function structuralEqual(left, right) {
     return canonicalJson(left) === canonicalJson(right);
 }
-export function buildReviewWorkbenchResultsFromSession(session) {
+export function buildReviewWorkbenchResultsFromSession(session, options = {}) {
     return session.items.flatMap((item) => {
         const decision = session.decisionsByItemName[item.metadata.name];
         if (!decision) {
@@ -301,7 +325,7 @@ export function buildReviewWorkbenchResultsFromSession(session) {
             ...session,
             activeItemName: item.metadata.name,
         });
-        const reviewDecision = buildReviewDecision(state);
+        const reviewDecision = buildReviewDecision(state, options);
         if (!reviewDecision) {
             return [];
         }
@@ -315,11 +339,12 @@ export function buildReviewWorkbenchResultsFromSession(session) {
                     rationale: reviewDecision.spec.rationale,
                 }];
         }
-        const selectedCandidate = candidateForDecision(item, decision);
+        const selectedCandidateId = session.selectedCandidateIdsByItemName?.[item.metadata.name];
+        const selectedCandidate = candidateForDecision(item, decision, selectedCandidateId);
         const editedValue = decision === "accept-proposed"
             ? session.editedValuesByItemName?.[item.metadata.name]
             : undefined;
-        const effectiveValue = effectiveValueForDecision(item, decision, editedValue);
+        const effectiveValue = effectiveValueForDecision(item, decision, editedValue, selectedCandidateId);
         return [{
                 reviewItemName: item.metadata.name,
                 decision,
@@ -338,12 +363,12 @@ export function buildReviewWorkbenchResultsFromSession(session) {
             }];
     });
 }
-export function buildReviewWorkbenchSessionExport(session, events = buildReviewSessionEvents(session)) {
+export function buildReviewWorkbenchSessionExport(session, events = buildReviewSessionEvents(session), options = {}) {
     return {
         session: buildReviewSessionResource(session, events),
         events,
-        decisions: buildReviewDecisionsFromSession(session),
-        results: buildReviewWorkbenchResultsFromSession(session),
+        decisions: buildReviewDecisionsFromSession(session, options),
+        results: buildReviewWorkbenchResultsFromSession(session, options),
     };
 }
 export function replayReviewSessionEventsForSnapshot(snapshot, events) {
@@ -353,9 +378,9 @@ export function replayReviewSessionEventsForSnapshot(snapshot, events) {
     }
     return replayReviewSessionEvents(snapshot, events);
 }
-export function buildReviewWorkbenchSessionExportForSnapshot(snapshot, events) {
+export function buildReviewWorkbenchSessionExportForSnapshot(snapshot, events, options = {}) {
     const replayedSession = replayReviewSessionEventsForSnapshot(snapshot, events);
-    return buildReviewWorkbenchSessionExport(replayedSession, events);
+    return buildReviewWorkbenchSessionExport(replayedSession, events, options);
 }
 export function deriveReviewSessionApplyResultForSnapshot(options) {
     const requiredResolvedItems = options.requiredResolvedItems ?? "none";
@@ -371,7 +396,7 @@ export function deriveReviewSessionApplyResultForSnapshot(options) {
     }
     const warnings = reviewSessionReplayWarningsForSnapshot(options.snapshot, options.events);
     const replayedSession = replayReviewSessionEvents(options.snapshot, options.events);
-    const sessionExport = buildReviewWorkbenchSessionExport(replayedSession, options.events);
+    const sessionExport = buildReviewWorkbenchSessionExport(replayedSession, options.events, { presentationAdapter: options.presentationAdapter });
     const resolvedItemNames = new Set(sessionExport.results.map((result) => result.reviewItemName));
     const unresolvedItemNames = options.snapshot.items
         .map((item) => item.metadata.name)
@@ -498,7 +523,7 @@ export function createPersistentReviewSessionEventStore(options) {
 }
 export function renderReviewWorkbenchHtml(state, _events, options = {}) {
     const session = queueSessionFromStartState(state);
-    return renderReviewQueueSessionHtml(session, options.presentationAdapter, normalizeReviewQueueView(options.queueView));
+    return renderReviewQueueSessionHtml(session, options.presentationAdapter, normalizeReviewQueueView(options.queueView), attestReviewQueueExtraction(session.items, options.extractionImport), options.fieldStates);
 }
 /**
  * The visual/decision state of a field card, derived from the reviewer's local
@@ -506,7 +531,7 @@ export function renderReviewWorkbenchHtml(state, _events, options = {}) {
  * candidate set (e.g. a pre-decided item seeded by the host) as already-kept.
  */
 function fieldCardState(item, decision) {
-    if (decision === "accept-proposed")
+    if (decision === "accept-proposed" || decision === "select-proposed")
         return "accepted";
     if (decision === "keep-current")
         return "kept";
@@ -528,7 +553,9 @@ function fieldCardState(item, decision) {
  */
 function chipLabel(state, hasCurrentValue, conflictingValues) {
     switch (state) {
-        case "accepted": return "Accepted";
+        // On a conflict the only accepting decision is a choice of one value, and
+        // the chip says it was a choice, never a plain accept.
+        case "accepted": return conflictingValues ? `Chose 1 of ${conflictingValues} values` : "Accepted";
         case "kept": return hasCurrentValue ? "Kept current" : conflictingValues ? "All values rejected" : "Left unset";
         case "rejected": return hasCurrentValue ? "Kept — flagged wrong" : conflictingValues ? "All values rejected" : "Left unset";
         case "could-not-confirm": return "Could not confirm";
@@ -584,7 +611,16 @@ function isEmptyValue(value) {
 }
 const ARROW_SVG = "<svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" aria-hidden=\"true\"><path d=\"M5 12h14M13 6l6 6-6 6\"/></svg>";
 const WARNING_SVG = "<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" aria-hidden=\"true\"><path d=\"M12 9v4M12 17h.01\"/><path d=\"M10.3 3.9 1.8 18a2 2 0 0 0 1.7 3h17a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0Z\"/></svg>";
-function renderReviewQueueSessionHtml(session, presentationAdapter, queueView) {
+function renderReviewQueueSessionHtml(session, presentationAdapter, queueView, attestation, fieldStates) {
+    // A queue that does not match its stored extraction import is not reviewed:
+    // its items could hide or alter what the source said.
+    if (attestation.state === "diverges") {
+        return `
+    <section class="workbench-shell review" data-testid="review-workbench-shell" data-queue-attestation="diverges" aria-label="Survey review workbench">
+      <div class="queue-attestation diverges" data-testid="queue-attestation" data-state="diverges" role="alert">${WARNING_SVG}<span>${escapeHtml(attestation.message)}</span></div>
+    </section>
+  `;
+    }
     const totalCount = session.items.length;
     const decidedCount = session.items.filter((item) => session.decisionsByItemName[item.metadata.name] !== undefined
         || item.spec.candidateSetStatus === "resolved").length;
@@ -594,7 +630,13 @@ function renderReviewQueueSessionHtml(session, presentationAdapter, queueView) {
     const headerTitle = typeof producerName === "string" && producerName.length > 0 ? producerName : "Review queue";
     const window = buildReviewQueueWindow(session, queueView);
     return `
-    <section class="workbench-shell review" data-testid="review-workbench-shell" aria-label="Survey review workbench">
+    <section class="workbench-shell review" data-testid="review-workbench-shell" data-queue-attestation="${attestation.state}" aria-label="Survey review workbench">
+      ${attestation.state === "unverified"
+        ? `<div class="queue-attestation unverified" data-testid="queue-attestation" data-state="unverified" role="note">${WARNING_SVG}<span>${escapeHtml(attestation.message)}</span></div>`
+        : ""}
+      ${isScoreBlind(session)
+        ? `<div class="queue-attestation score-blind" data-testid="score-blind-notice" data-sampling="${escapeHtml(session.sampling?.kind ?? "")}" role="note"><span>${escapeHtml(scoreBlindNotice(session))}</span></div>`
+        : ""}
       <header class="rhead">
         <div class="top">
           <div class="subj">
@@ -611,6 +653,7 @@ function renderReviewQueueSessionHtml(session, presentationAdapter, queueView) {
           <button class="apply" type="button" data-testid="apply-button"${decidedCount === 0 ? " disabled" : ""}>Apply ${decidedCount} decision${decidedCount === 1 ? "" : "s"}</button>
         </div>
       </header>
+      ${fieldStates ? renderFieldStatesHtml(fieldStates, session) : ""}
       <nav class="queue-controls" aria-label="Review queue navigation">
         <label>
           <span>Find fields</span>
@@ -654,9 +697,9 @@ function renderFieldCard(item, session, presentationAdapter) {
     const decided = decision !== undefined;
     const current = item.spec.candidates.find((candidate) => candidate.role === "current");
     const proposedCandidates = item.spec.candidates.filter((candidate) => candidate.role === "proposed");
-    // Several proposed values for one claim are a conflict. A control names a
-    // role, not a value, so none may make one of them the trusted value; the
-    // reviewer can still reject them all or end the round as could-not-confirm.
+    // Several proposed values for one claim are a conflict. The reviewer can
+    // choose one of them by candidate id (select-proposed), reject them all, or
+    // end the round as could-not-confirm; no role-based control may pick one.
     const conflict = proposedCandidates.length > 1;
     const proposed = proposedCandidates.length === 1 ? proposedCandidates[0] : undefined;
     const presentation = buildReviewItemPresentation(item, presentationAdapter);
@@ -698,11 +741,11 @@ function renderFieldCard(item, session, presentationAdapter) {
         ${proposed
         ? renderDiffRow(item, current, proposed, presentation.targetLabel, decided, effectiveProposedText, currentPresentationText)
         : proposedCandidates.length > 1
-            ? renderConflictingProposals(item, proposedCandidates, presentationAdapter, presentation.targetLabel)
+            ? renderConflictingProposals(item, proposedCandidates, presentationAdapter, presentation.targetLabel, decision, session.selectedCandidateIdsByItemName?.[item.metadata.name])
             : "<p class=\"field-value\">No proposed value is available for this field.</p>"}
-        ${proposed ? renderProvenanceRow(item, proposed, presentationAdapter) : ""}
+        ${proposed ? renderProvenanceRow(item, proposed, presentationAdapter, isScoreBlind(session)) : ""}
         ${renderExtractionImportNotes(presentation)}
-        ${renderVerificationNotes(candidateVerificationNotes(item, decision === "accept-proposed" ? editedValue : undefined))}
+        ${isScoreBlind(session) ? "" : renderVerificationNotes(candidateVerificationNotes(item, decision === "accept-proposed" ? editedValue : undefined))}
         <div class="decide">
           ${keepDecision === undefined ? "" : `<button class="btn keep" type="button" data-testid="keep-current" data-item-name="${escapeHtml(item.metadata.name)}">${keepLabel}</button>`}
           ${proposed ? `<button class="btn use" type="button" data-testid="use-proposed" data-item-name="${escapeHtml(item.metadata.name)}">Use proposed</button>
@@ -732,18 +775,37 @@ function renderFieldCard(item, session, presentationAdapter) {
 }
 /**
  * The card body for an item whose candidate set holds several proposed values.
- * Lists every value with its excerpt; the workbench records a decision against
- * a role, so it cannot pick one of them, and says what the reviewer can do.
+ * Lists every value with its excerpt. Until the field is decided, each value
+ * has its own "Use this value" control, which records `select-proposed` with
+ * that candidate's id. Once a value is chosen, every value stays listed and is
+ * marked chosen or not chosen, so the card never reads as if there had been
+ * one value. Proposals excluded at import are not candidates: they are listed
+ * by {@link renderExtractionImportNotes} and cannot be chosen.
  */
-function renderConflictingProposals(item, candidates, presentationAdapter, targetLabel) {
+function renderConflictingProposals(item, candidates, presentationAdapter, targetLabel, decision, selectedCandidateId) {
+    const chose = decision === "select-proposed";
     const values = candidates.map((candidate) => {
         const text = buildReviewCandidatePresentation(item, candidate, presentationAdapter, targetLabel).valueText;
         const excerpt = candidate.locator?.excerpt;
-        return `<li data-testid="conflicting-value"><span class="vtext">${escapeHtml(text)}</span>${excerpt ? ` <q>${escapeHtml(excerpt)}</q>` : ""}</li>`;
+        const chosen = chose && candidate.id === selectedCandidateId;
+        const mark = chose
+            ? ` <span class="choice-tag ${chosen ? "chosen" : "not-chosen"}" data-testid="choice-tag">${chosen ? "Chosen" : "Not chosen"}</span>`
+            : "";
+        const control = decision === undefined
+            ? `<button class="btn choose" type="button" data-testid="select-value" data-item-name="${escapeHtml(item.metadata.name)}" data-candidate-id="${escapeHtml(candidate.id)}" aria-label="Use ${escapeHtml(text)} for ${escapeHtml(targetLabel)}">Use this value</button>`
+            : "";
+        return `<li data-testid="conflicting-value" data-candidate-id="${escapeHtml(candidate.id)}"${chose ? ` data-chosen="${chosen ? "true" : "false"}"` : ""}>
+        <span class="conflict-text"><span class="vtext">${escapeHtml(text)}</span>${excerpt ? ` <q>${escapeHtml(excerpt)}</q>` : ""}${mark}</span>${control}
+      </li>`;
     }).join("");
+    const intro = decision === undefined
+        ? `${candidates.length} different values were proposed for this field. Use the value the source supports, reject them all, or mark the field Could not confirm with a reason.`
+        : chose
+            ? `${candidates.length} different values were proposed for this field. One was chosen; ${candidates.length === 2 ? "the other was" : "the others were"} seen and not chosen.`
+            : `${candidates.length} different values were proposed for this field.`;
     return `
-    <div class="field-value" data-testid="conflicting-proposals">
-      <p>${candidates.length} different values were proposed for this field. This queue cannot choose one of them yet: reject them all, or mark the field Could not confirm with a reason.</p>
+    <div class="field-value conflict-values" data-testid="conflicting-proposals">
+      <p>${escapeHtml(intro)}</p>
       <ul>${values}</ul>
     </div>
   `;
@@ -906,7 +968,7 @@ export function validateProposedValue(descriptor, rawValue) {
             return undefined;
     }
 }
-function renderProvenanceRow(item, proposed, presentationAdapter) {
+function renderProvenanceRow(item, proposed, presentationAdapter, scoreBlind) {
     const excerpt = proposed.locator?.excerpt;
     if (!excerpt) {
         return `
@@ -919,7 +981,8 @@ function renderProvenanceRow(item, proposed, presentationAdapter) {
       </div>
     `;
     }
-    const confidence = proposed.extraction.confidence ?? proposed.confidence;
+    // A score-blind session never renders the proposer's confidence.
+    const confidence = scoreBlind ? undefined : proposed.extraction.confidence ?? proposed.confidence;
     const presentation = buildReviewCandidatePresentation(item, proposed, presentationAdapter);
     const sourceLinkHtml = presentation.sourceLink
         ? `<a href="${escapeHtml(presentation.sourceLink.href)}">${escapeHtml(presentation.sourceLink.label ?? presentation.sourceText)}</a>`
@@ -944,7 +1007,8 @@ function renderProvenanceRow(item, proposed, presentationAdapter) {
  */
 function renderExtractionImportNotes(presentation) {
     const { excerptVerification: verification, excludedProposals: excluded } = presentation;
-    if (verification === undefined && excluded.length === 0)
+    const unreadable = excludedProposalsUnreadableSentence(presentation.excludedProposalsUnreadable);
+    if (verification === undefined && excluded.length === 0 && unreadable === undefined)
         return "";
     const excludedHtml = excluded.length === 0 ? "" : `
       <div class="noprov" data-testid="excluded-proposals" role="note">
@@ -954,12 +1018,18 @@ function renderExtractionImportNotes(presentation) {
           ${excluded.map((entry) => `<span data-testid="excluded-proposal" data-proposal-index="${escapeHtml(String(entry.proposalIndex))}"><q>${escapeHtml(entry.valueText)}</q> (proposal ${escapeHtml(String(entry.proposalIndex))}, ${escapeHtml(entry.locator)})</span>`).join(", ")}.
           Unverifiable is not disproven: check the source before deciding.</span>
       </div>`;
+    const unreadableHtml = unreadable === undefined ? "" : `
+      <div class="noprov" data-testid="excluded-proposals-unreadable" data-reason="${escapeHtml(presentation.excludedProposalsUnreadable.reason)}" role="note">
+        ${WARNING_SVG}
+        <span class="tag">${presentation.excludedProposalsUnreadable.reason === "binding-broken" ? "Binding broken" : "Unreadable"}</span>
+        <span>${escapeHtml(unreadable)} Check the source before deciding.</span>
+      </div>`;
     const verificationHtml = verification === undefined ? "" : `
       <p class="excerpt-verification" data-testid="excerpt-verification" data-verified="${verification === "verified" ? "true" : "false"}">${verification === "verified"
         ? "Excerpts checked against the prepared source text at import."
         : "Excerpts not checked against the prepared source text at import."}</p>`;
     return `
-    <div class="prov import-notes">${excludedHtml}${verificationHtml}
+    <div class="prov import-notes">${excludedHtml}${unreadableHtml}${verificationHtml}
     </div>
   `;
 }
@@ -1005,10 +1075,13 @@ function renderAuditDetails(item, current, proposed, session, presentationAdapte
         note,
         decision,
         editedValue: session.editedValuesByItemName?.[item.metadata.name],
+        selectedCandidateId: session.selectedCandidateIdsByItemName?.[item.metadata.name],
         reviewedAt: session.reviewedAt,
         actorId: session.actorId,
+        ...(session.presentation !== undefined ? { presentation: session.presentation } : {}),
+        ...(session.sampling !== undefined ? { sampling: session.sampling } : {}),
     };
-    const reviewDecisionPayload = buildReviewDecision(state);
+    const reviewDecisionPayload = buildReviewDecision(state, { presentationAdapter });
     const preview = buildSurfaceProjectionPreview(item, reviewDecisionPayload, presentationAdapter);
     // Seeded with what the card face already shows, so the audit surface never
     // reprints it. Passed down through every section: the sections render in DOM
@@ -1033,7 +1106,12 @@ function renderAuditDetails(item, current, proposed, session, presentationAdapte
           ${proposed?.extraction.model ? fieldItem("model", "Model", proposed.extraction.model) : ""}
           ${proposed ? placementItem(trace, { of: proposed.id, property: "extraction.extractor" }, "extractor", "Extractor", proposed.extraction.extractor ?? "unknown") : ""}
           ${proposed ? fieldItem("extracted-at", "Extracted at", proposed.extraction.extractedAt ?? "unknown") : ""}
-          ${buildReviewItemPresentation(item, presentationAdapter).excludedProposals.map((entry) => fieldItem("excluded-proposal", `Excluded proposal ${entry.proposalIndex}`, `${entry.valueText} at ${entry.locator}: excerpt not at the cited span`)).join("")}
+          ${(() => {
+        const itemPresentation = buildReviewItemPresentation(item, presentationAdapter);
+        const unreadable = excludedProposalsUnreadableSentence(itemPresentation.excludedProposalsUnreadable);
+        return itemPresentation.excludedProposals.map((entry) => fieldItem("excluded-proposal", `Excluded proposal ${entry.proposalIndex}`, `${entry.valueText} at ${entry.locator}: excerpt not at the cited span`)).join("")
+            + (unreadable ? fieldItem("excluded-proposals-unreadable", "Excluded proposals not shown", unreadable) : "");
+    })()}
         </dl>
         ${preview
         ? `<div class="preview-section-grid">${renderSurfacePreviewSections(preview, trace)}</div><p class="preview-disclaimer preview-disclaimer-footer">${escapeHtml(preview.postureDisclaimer)}</p>`
@@ -1257,6 +1335,9 @@ function createReviewWorkbenchController(root, startState, options) {
     let events = eventStore?.load(baseSession) ?? [];
     let session = events.length > 0 ? replayReviewSessionEvents(baseSession, events) : baseSession;
     let queueView = normalizeReviewQueueView({ pageSize: options.pageSize });
+    // The queue's items never change after mount (decisions live in events), so
+    // the check against its extraction import runs once.
+    const attestation = attestReviewQueueExtraction(baseSession.items, options.extractionImport);
     const persistEvents = () => {
         eventStore?.save(session, events);
     };
@@ -1272,7 +1353,7 @@ function createReviewWorkbenchController(root, startState, options) {
         const session = sessionForEvent;
         const item = itemName ? session.items.find((entry) => entry.metadata.name === itemName) : undefined;
         const decision = itemName ? session.decisionsByItemName[itemName] : undefined;
-        const candidateId = item && decision ? decisionCandidateId(item, decision) : undefined;
+        const candidateId = item && decision ? decisionCandidateId(item, decision, session.selectedCandidateIdsByItemName?.[item.metadata.name]) : undefined;
         const definition = decision ? workbenchDecisionDefinitions[decision] : undefined;
         const note = itemName ? session.notesByItemName[itemName] : undefined;
         // Carry the reviewer's inline edit in the event (accept-proposed only), so
@@ -1283,10 +1364,14 @@ function createReviewWorkbenchController(root, startState, options) {
         const attemptEvidenceIds = itemName && decision === "could-not-confirm"
             ? session.attemptEvidenceIdsByItemName?.[itemName]
             : undefined;
+        const conditions = sessionConditionsStamp(session);
         const defaultData = decision
-            ? (editedValue !== undefined
-                ? { workbenchDecision: decision, workbenchEditedValue: editedValue }
-                : { workbenchDecision: decision, ...(attemptEvidenceIds?.length ? { attemptEvidenceIds } : {}) })
+            ? {
+                ...(editedValue !== undefined
+                    ? { workbenchDecision: decision, workbenchEditedValue: editedValue }
+                    : { workbenchDecision: decision, ...(attemptEvidenceIds?.length ? { attemptEvidenceIds } : {}) }),
+                ...(conditions ? { sessionConditions: conditions } : {}),
+            }
             : undefined;
         return buildReviewSessionEvent(session, {
             sessionName: defaultReviewSessionName,
@@ -1315,7 +1400,7 @@ function createReviewWorkbenchController(root, startState, options) {
         events = [...events, event];
         persistEvents();
     };
-    const setDecision = (itemName, decision, rawEditedValue) => {
+    const setDecision = (itemName, decision, rawEditedValue, selectedCandidateId) => {
         if (decision === "could-not-confirm" && !session.notesByItemName[itemName]?.trim()) {
             throw new Error("Could not confirm requires a non-empty reason.");
         }
@@ -1334,11 +1419,19 @@ function createReviewWorkbenchController(root, startState, options) {
         else {
             delete nextEditedValuesByItemName[itemName];
         }
+        const nextSelections = { ...session.selectedCandidateIdsByItemName };
+        if (decision === "select-proposed" && selectedCandidateId !== undefined) {
+            nextSelections[itemName] = selectedCandidateId;
+        }
+        else {
+            delete nextSelections[itemName];
+        }
         commitSessionUpdate({
             ...session,
             activeItemName: itemName,
             decisionsByItemName: { ...session.decisionsByItemName, [itemName]: decision },
             editedValuesByItemName: nextEditedValuesByItemName,
+            selectedCandidateIdsByItemName: nextSelections,
         }, "decision-changed", itemName);
     };
     const clearDecision = (itemName) => {
@@ -1348,12 +1441,15 @@ function createReviewWorkbenchController(root, startState, options) {
         delete remainingEdits[itemName];
         const remainingAttemptEvidenceIds = { ...session.attemptEvidenceIdsByItemName };
         delete remainingAttemptEvidenceIds[itemName];
+        const remainingSelections = { ...session.selectedCandidateIdsByItemName };
+        delete remainingSelections[itemName];
         commitSessionUpdate({
             ...session,
             activeItemName: itemName,
             decisionsByItemName: remainingDecisions,
             editedValuesByItemName: remainingEdits,
             attemptEvidenceIdsByItemName: remainingAttemptEvidenceIds,
+            selectedCandidateIdsByItemName: remainingSelections,
         }, "decision-changed", itemName, { workbenchDecision: null });
     };
     const updateReviewerNote = (itemName, note) => {
@@ -1361,8 +1457,9 @@ function createReviewWorkbenchController(root, startState, options) {
     };
     const controller = {
         currentSession: () => session,
-        currentSessionExport: () => buildReviewWorkbenchSessionExport(session, events),
-        renderCurrentState: () => renderCurrentState(root, session, controller, options.presentationAdapter, queueView),
+        currentSessionExport: () => buildReviewWorkbenchSessionExport(session, events, { presentationAdapter: options.presentationAdapter }),
+        presentationAdapter: options.presentationAdapter,
+        renderCurrentState: () => renderCurrentState(root, session, controller, options.presentationAdapter, queueView, attestation, options.fieldStates),
         setDecision,
         clearDecision,
         updateReviewerNote,
@@ -1382,8 +1479,8 @@ function reviewSessionStorageKey(session, keyPrefix) {
     const itemNames = buildReviewSessionResource(session).spec.reviewItemNames.join(",");
     return `${keyPrefix}:${itemNames}`;
 }
-function renderCurrentState(root, session, controller, presentationAdapter, queueView) {
-    root.innerHTML = renderReviewWorkbenchHtml(session, undefined, { presentationAdapter, queueView });
+function renderCurrentState(root, session, controller, presentationAdapter, queueView, attestation, fieldStates) {
+    root.innerHTML = renderReviewQueueSessionHtml(session, presentationAdapter, queueView ?? normalizeReviewQueueView(undefined), attestation ?? attestReviewQueueExtraction(session.items, undefined), fieldStates);
     bindFieldCardInteractions(root, controller);
     bindApplyButton(root, controller);
     bindClampToggles(root);
@@ -1431,10 +1528,19 @@ function queueSessionFromStartState(startState) {
         ...(startState.attemptEvidenceIds?.length
             ? { attemptEvidenceIdsByItemName: { [startState.item.metadata.name]: [...startState.attemptEvidenceIds] } }
             : {}),
+        ...(startState.decision === "select-proposed" && startState.selectedCandidateId !== undefined
+            ? { selectedCandidateIdsByItemName: { [startState.item.metadata.name]: startState.selectedCandidateId } }
+            : {}),
         reviewedAt: startState.reviewedAt,
         actorId: startState.actorId,
+        ...(startState.presentation !== undefined ? { presentation: startState.presentation } : {}),
+        ...(startState.sampling !== undefined ? { sampling: startState.sampling } : {}),
     };
 }
+function scoreBlindNotice(session) {
+    const audit = session.sampling?.kind === "random-audit" ? "Random audit sample. " : "";
+    return `${audit}Score-blind review: confidence and verifier results are hidden for this whole session. Decide from the source and its excerpt.`;
+}
 const COULD_NOT_CONFIRM_REASON_REQUIRED = "A reason is required when you could not confirm.";
 /**
  * Opens every collapsed region between `control` and the card before anything
@@ -1488,6 +1594,21 @@ function bindFieldCardInteractions(root, controller) {
             controller.renderCurrentState();
         });
     });
+    // One value of a conflict: the button names its candidate, and the decision
+    // records that id. The builder refuses an id that is not one of the item's
+    // proposed candidates, so a stale or forged button changes nothing.
+    root.querySelectorAll("[data-testid='select-value']").forEach((button) => {
+        button.addEventListener("click", () => {
+            const itemName = button.dataset.itemName ?? "";
+            const candidateId = button.dataset.candidateId ?? "";
+            const item = controller.currentSession().items.find((entry) => entry.metadata.name === itemName);
+            if (!item || conflictSelectionIssue(item, candidateId)) {
+                return;
+            }
+            controller.setDecision(itemName, "select-proposed", undefined, candidateId);
+            controller.renderCurrentState();
+        });
+    });
     root.querySelectorAll("[data-testid='keep-current']").forEach((button) => {
         button.addEventListener("click", () => {
             const itemName = button.dataset.itemName ?? "";
@@ -1598,7 +1719,7 @@ function refreshAuditPayloadForItem(textarea, controller, itemName) {
         reviewedAt: session.reviewedAt,
         actorId: session.actorId,
     };
-    payload.textContent = JSON.stringify(buildReviewDecision(state) ?? null, null, 2);
+    payload.textContent = JSON.stringify(buildReviewDecision(state, { presentationAdapter: controller.presentationAdapter }) ?? null, null, 2);
 }
 function bindClampToggles(root) {
     root.querySelectorAll("[data-clamp-toggle]").forEach((button) => {