@kontourai/survey 7.0.0 → 8.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -6,6 +6,7 @@
 
 [![npm version](https://img.shields.io/npm/v/%40kontourai%2Fsurvey)](https://www.npmjs.com/package/@kontourai/survey)
 [![CI](https://github.com/kontourai/survey/actions/workflows/ci.yml/badge.svg)](https://github.com/kontourai/survey/actions/workflows/ci.yml)
+[![Docs](https://img.shields.io/badge/docs-kontourai.github.io-blue)](https://kontourai.github.io/survey/)
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)
 
 [Documentation](https://kontourai.github.io/survey/) · [Record Contracts](docs/record-contracts.md) · [Consumer Guide](docs/consumer-integration-guide.md) · [kontourai.io/survey](https://kontourai.io/survey)
@@ -30,7 +31,7 @@ Survey does not decide whether a real-world value is true. It preserves the prod
 
 ## See it
 
-The Review Workbench rendering a real example queue — current vs proposed values, source evidence, decision effect, and the Surface projection preview:
+The Review Workbench rendering a real example queue — current vs proposed values, source evidence, decision effect, and the Surface projection preview. [Open the live demo](https://kontourai.github.io/survey/demo/).
 
 ![Survey Review Workbench showing a review queue, current versus proposed values, decision controls, and a Surface preview](docs/assets/review-workbench-desktop.png)
 

package/dist/src/calibration.d.ts

@@ -75,6 +75,21 @@ export interface DeriveCalibrationOptions {
      * labeled samples. Default false — see the module note on circularity.
      */
     readonly includeAutoAccepted?: boolean;
+    /**
+     * Count only audit labels: outcomes whose metadata records a score-blind
+     * decision (`presentation.scoreBlind === true`) on a random audit sample
+     * (`sampling.kind === "random-audit"`), as the review workbench writes them
+     * for a session opened with `openRandomAuditSession`. Default false (every
+     * human outcome counts, as before). Other outcomes are skipped and counted
+     * in `skippedCount`, as windowed-out outcomes are.
+     *
+     * Calibration reads these fields as recorded on the outcome. The review
+     * session validates them (a `random-audit` rate in (0, 1] and a stable seed)
+     * and replay refuses events recorded under other conditions than the
+     * snapshot's, but an outcome assembled outside Survey's apply path is taken
+     * at its word: only feed outcomes from a store you trust.
+     */
+    readonly auditSamplesOnly?: boolean;
 }
 /** One labeled calibration sample: a prediction paired with the human label. */
 export interface CalibrationSample {

package/dist/src/calibration.js

@@ -80,6 +80,10 @@ export function deriveCalibration(input, options = {}) {
     const samples = [];
     let skippedCount = 0;
     for (const outcome of input.reviewOutcomes) {
+        if (options.auditSamplesOnly && !isScoreBlindAuditOutcome(outcome)) {
+            skippedCount++;
+            continue;
+        }
         if (outcome.resolution === "could_not_confirm") {
             skippedCount++;
             continue;
@@ -142,6 +146,13 @@ export function deriveCalibration(input, options = {}) {
 // ---------------------------------------------------------------------------
 // Internal: sample construction
 // ---------------------------------------------------------------------------
+/** A decision recorded score-blind on a random audit sample (see `openRandomAuditSession`). */
+function isScoreBlindAuditOutcome(outcome) {
+    const presentation = outcome.metadata?.presentation;
+    const sampling = outcome.metadata?.sampling;
+    return typeof presentation === "object" && presentation !== null && presentation.scoreBlind === true
+        && typeof sampling === "object" && sampling !== null && sampling.kind === "random-audit";
+}
 function toSample(outcome, candidateSetById, extractionById, includeAutoAccepted) {
     // No human label yet.
     if (outcome.status === "proposed")

package/dist/src/canonical-reviewed-trust-input.d.ts

@@ -1,6 +1,7 @@
 import type { SurveyInput } from "./types.js";
 import type { ReviewItem } from "./review-resource.js";
 import type { ReviewWorkbenchResult } from "./review-workbench/review-workbench.js";
+import { type DeriveFieldStatesInput } from "./field-states.js";
 export interface BuildCanonicalReviewedTrustInputOptions {
     /** Producer identity for the resulting SurveyInput batch. */
     readonly source: string;
@@ -12,6 +13,15 @@ export interface BuildCanonicalReviewedTrustInputOptions {
     readonly items: readonly ReviewItem[];
     /** Results derived by Survey's server apply boundary from snapshot + events. */
     readonly results: readonly ReviewWorkbenchResult[];
+    /**
+     * The extraction imports the items came from (and optionally verifier
+     * records and supersessions). When present, each claim whose item one of
+     * these imports produced carries its derived content and lifecycle states
+     * under `metadata["survey.kontourai.io/field-state"]` (see
+     * `deriveFieldStates`). The states are derived here from the imports and the
+     * results' own decisions, never supplied as labels. Claim status is unchanged.
+     */
+    readonly fieldStates?: Omit<DeriveFieldStatesInput, "decisions" | "carryForwards">;
 }
 export interface CanonicalReviewedTrustInput {
     readonly surveyInput: SurveyInput;

package/dist/src/canonical-reviewed-trust-input.js

@@ -1,6 +1,7 @@
 import { SURVEY_INPUT_CONTRACT_VERSION } from "./types.js";
 import { canonicalJson } from "./review-workbench/canonical.js";
 import { decisionSelectsNoCandidate, workbenchDecisionDefinitions } from "./review-workbench/review-queue-session.js";
+import { deriveFieldStates, fieldStateClaimMetadata, FIELD_STATE_METADATA_KEY } from "./field-states.js";
 /**
  * Projects server-applied review records into the complete SurveyInput consumed
  * by buildSurveyTrustBundle. The ReviewItem and ReviewWorkbenchResult are the
@@ -22,6 +23,13 @@ export function buildCanonicalReviewedTrustInput(options) {
     if (itemsByName.size !== resultsByName.size) {
         throw new Error("Canonical review projection requires exactly one resolved result for every ReviewItem.");
     }
+    const fieldStatesByItem = new Map();
+    if (options.fieldStates) {
+        const states = deriveFieldStates({ ...options.fieldStates, decisions: options.results.map((result) => result.reviewDecision) });
+        for (const state of states)
+            if (state.reviewItemName !== undefined)
+                fieldStatesByItem.set(state.reviewItemName, state);
+    }
     const rawSources = new Map();
     const extractions = new Map();
     const candidateSets = new Map();
@@ -106,6 +114,10 @@ export function buildCanonicalReviewedTrustInput(options) {
                 ...(decision.unselectedCandidateIds?.length
                     ? { unselectedCandidateIds: decision.unselectedCandidateIds.map((id) => recordIdFor(item, id)) }
                     : {}),
+                // How the decision was made: whether scores were hidden, and how the
+                // item was sampled. Calibration reads these to select audit labels.
+                ...(decision.presentation !== undefined ? { presentation: { scoreBlind: decision.presentation.scoreBlind } } : {}),
+                ...(decision.sampling !== undefined ? { sampling: { ...decision.sampling } } : {}),
             },
         };
         addConsistent(reviewOutcomes, reviewOutcome, "review outcome");
@@ -146,6 +158,9 @@ export function buildCanonicalReviewedTrustInput(options) {
             ...(hint.derivedFrom ? { derivedFrom: [...hint.derivedFrom] } : {}),
             collectedBy: hint.collectedBy ?? sharedExtractor(selected ? [selected] : item.spec.candidates) ?? options.source,
             ...(decision.actor?.id ? { actor: decision.actor.id } : {}),
+            ...(fieldStatesByItem.has(item.metadata.name)
+                ? { metadata: { [FIELD_STATE_METADATA_KEY]: fieldStateClaimMetadata(fieldStatesByItem.get(item.metadata.name)) } }
+                : {}),
         };
         addConsistent(claims, claim, "claim target");
     }

package/dist/src/console/review-console-server.d.ts

@@ -12,6 +12,10 @@
  *   GET  /api/health    Health check
  *   GET  /dist/*        Compiled assets served from the dist tree (traversal-safe)
  */
+import { type ServerReviewSessionRecord } from "../review-workbench/server-review-session.js";
+import { type ReviewQueueBinding } from "../review-workbench/queue-binding.js";
+import type { ReviewWorkbenchResult } from "../review-workbench/review-workbench.js";
+import type { ReviewSessionEvent } from "../review-resource.js";
 export interface ReviewConsoleServerOptions {
     /** Absolute path to the session JSON file. */
     readonly sessionPath: string;
@@ -19,6 +23,22 @@ export interface ReviewConsoleServerOptions {
     readonly port?: number;
     /** Host to bind on. Must be a loopback address. Defaults to 127.0.0.1. */
     readonly host?: string;
+    /** Producer-owned application. The binding must come from queue construction. */
+    readonly producerApply?: {
+        readonly binding: ReviewQueueBinding;
+        /** Revalidate domain currency/authentication and apply idempotently under the producer's lock. */
+        readonly apply: (input: ReviewConsoleApplyInput) => Promise<ReviewConsoleApplication>;
+    };
+}
+export interface ReviewConsoleApplyInput {
+    readonly record: ServerReviewSessionRecord;
+    readonly events: readonly ReviewSessionEvent[];
+    readonly results: readonly ReviewWorkbenchResult[];
+    readonly revision: string;
+}
+export interface ReviewConsoleApplication {
+    readonly reference: string;
+    readonly summary: string;
 }
 export interface ReviewConsoleServerHandle {
     readonly url: string;

package/dist/src/console/review-console-server.js

@@ -163,7 +163,7 @@ async function serveDistFile(distDir, pathname, res) {
 // ---------------------------------------------------------------------------
 // HTML shell
 // ---------------------------------------------------------------------------
-function buildConsoleHtml(sessionPath) {
+function buildConsoleHtml(sessionPath, canApply) {
     const escapedPath = sessionPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/'/g, "\\'");
     // workbench.js lives at dist/src/review-workbench/review-workbench.js relative to distRoot
     const workbenchJsPath = "/dist/src/review-workbench/review-workbench.js";
@@ -253,7 +253,7 @@ body {
   gap: 5px;
   font-family: var(--k-font-mono, monospace);
   font-size: 10px;
-  color: var(--k-text-faint, #72869b);
+  color: var(--k-text-faint, #75889d);
   padding: 3px 8px;
   border: 1px solid var(--k-line, rgba(150,180,210,0.12));
   border-radius: 999px;
@@ -314,6 +314,7 @@ body {
     </button>
   </div>
 </header>
+${canApply ? '<div style="display:flex;justify-content:flex-end;padding:8px 16px"><button type="button" id="apply-review" class="theme-toggle">Send review to workflow</button></div>' : ''}
 <div id="console-save-status" class="console-save-status" role="alert" data-testid="console-save-status" hidden></div>
 <main id="review-workbench" class="workbench survey-workbench-embed" data-testid="review-workbench"></main>
 <script type="module">
@@ -376,7 +377,7 @@ function createConsoleEventStore(baseRevision) {
     }
     if (res.ok) {
       const body = await res.json().catch(() => ({}));
-      if (typeof body.revision === "string") revision = body.revision;
+      if (typeof body.revision === "string") { revision = body.revision; currentRevision = revision; }
       persistedCount = localEvents.length;
       showSaveStatus("");
       return;
@@ -395,12 +396,34 @@ function createConsoleEventStore(baseRevision) {
     save: (_session, events) => {
       const localEvents = [...events];
       saveChain = saveChain.then(() => persist(localEvents));
+      pendingSave = saveChain;
       return saveChain;
     },
   };
 }
 
 let activeItemName = null;
+let currentRevision = null;
+let applying = false;
+let wasApplied = false;
+let pendingSave = Promise.resolve();
+const applyButton = document.getElementById("apply-review");
+applyButton?.addEventListener("click", async () => {
+  if (applying || !currentRevision) return;
+  applying = true;
+  applyButton.disabled = true;
+  try {
+    await pendingSave;
+    const response = await fetch("/api/apply", {
+      method: "POST", headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ baseRevision: currentRevision }),
+    });
+    const body = await response.json();
+    showSaveStatus(response.ok ? body.application.summary : body.error);
+    await fetchAndMount();
+  } catch { showSaveStatus("The review could not reach the workflow. Reload before trying again."); }
+  finally { applying = false; applyButton.disabled = wasApplied || !currentRevision; }
+});
 
 async function fetchAndMount() {
   try {
@@ -414,6 +437,9 @@ async function fetchAndMount() {
     }
     const data = await res.json();
     const { snapshot, events, revision, extractionImport } = data;
+    currentRevision = revision;
+    wasApplied = Boolean(data.producerApplication);
+    if (applyButton) applyButton.disabled = applying || wasApplied;
     const state = events && events.length > 0
       ? replayReviewSessionEvents(snapshot, events)
       : snapshot;
@@ -574,6 +600,10 @@ export async function startReviewConsoleServer(options) {
         throw new Error("survey-review-console only serves loopback addresses");
     }
     const sessionPath = resolve(options.sessionPath);
+    const producerApply = options.producerApply ? {
+        binding: structuredClone(options.producerApply.binding),
+        apply: options.producerApply.apply,
+    } : undefined;
     const distDir = distRoot();
     const broadcaster = createSseBroadcaster();
     const stopWatcher = watchSessionFile(sessionPath, () => {
@@ -624,6 +654,7 @@ export async function startReviewConsoleServer(options) {
                     revision: reviewSessionRevision(content.events),
                     state: currentSessionState(content.snapshot, content.events),
                     queueAttestation: attestation.state,
+                    ...(content.producerApplication ? { producerApplication: content.producerApplication } : {}),
                     ...(content.extractionImport !== undefined ? { extractionImport: content.extractionImport } : {}),
                 });
                 return;
@@ -650,6 +681,8 @@ export async function startReviewConsoleServer(options) {
                 const outcome = await updateReviewSessionFile(sessionPath, (content) => {
                     const { snapshot, events: existingEvents } = content;
                     const revision = reviewSessionRevision(existingEvents);
+                    if (content.producerApplication !== undefined)
+                        return { result: { status: 409, body: { error: "This review was sent to its workflow; open a new review session", revision } } };
                     // Compare-and-swap: the appended events express decisions made on
                     // the reviewer's view of the log, so they are only safe to append
                     // when that view is the log that is stored right now.
@@ -700,6 +733,44 @@ export async function startReviewConsoleServer(options) {
                 sendJson(res, outcome.status, outcome.body);
                 return;
             }
+            // ---- Producer-owned workflow application ----
+            if (pathname === "/api/apply" && req.method === "POST") {
+                if (!producerApply) {
+                    sendJson(res, 404, { error: "No workflow application is configured" });
+                    return;
+                }
+                const guardError = originGuard(req, listenPort) ?? contentTypeGuard(req);
+                if (guardError) {
+                    sendJson(res, 403, { error: guardError });
+                    return;
+                }
+                const body = await readJsonBody(req);
+                const outcome = await updateReviewSessionFile(sessionPath, async (content) => {
+                    const revision = reviewSessionRevision(content.events);
+                    if (typeof body.baseRevision !== "string")
+                        return { result: { status: 428, body: { error: "baseRevision is required" } } };
+                    if (body.baseRevision !== revision)
+                        return { result: { status: 409, body: { error: "Session changed since it was read; reload before sending it" } } };
+                    if (content.producerApplication !== undefined)
+                        return { result: { status: 409, body: { error: "This review was already sent to its workflow" } } };
+                    const record = createServerReviewSessionRecord({ sessionName: storedReviewSessionName(content), snapshot: content.snapshot, eventCount: content.events.length });
+                    try {
+                        const derived = deriveServerReviewSessionApplyResult({ record, events: content.events, binding: producerApply.binding, extractionImport: content.extractionImport, requiredResolvedItems: "all" });
+                        if (!derived.ok)
+                            return { result: { status: 422, body: { error: "Resolve every review item before sending it to the workflow" } } };
+                        const application = await producerApply.apply(structuredClone({ record, events: content.events, results: derived.results, revision }));
+                        if (!application || typeof application.reference !== "string" || !application.reference.trim() || application.reference.length > 2048 || typeof application.summary !== "string" || !application.summary.trim() || application.summary.length > 4096)
+                            throw new Error("Workflow returned an invalid application receipt");
+                        const stored = { reference: application.reference, summary: application.summary, revision };
+                        return { next: { ...content, producerApplication: stored }, result: { status: 200, body: { application: stored } } };
+                    }
+                    catch (error) {
+                        return { result: { status: 409, body: { error: error instanceof Error ? error.message : "Workflow refused this review" } } };
+                    }
+                });
+                sendJson(res, outcome.status, outcome.body);
+                return;
+            }
             // ---- Health ----
             if (pathname === "/health" && req.method === "GET") {
                 sendJson(res, 200, { ok: true });
@@ -707,7 +778,7 @@ export async function startReviewConsoleServer(options) {
             }
             // ---- HTML shell (catch-all for GET) ----
             if (req.method === "GET" || req.method === "HEAD") {
-                const html = buildConsoleHtml(sessionPath);
+                const html = buildConsoleHtml(sessionPath, Boolean(producerApply));
                 send(res, 200, html, "text/html; charset=utf-8");
                 return;
             }