@principles/core 1.103.0 → 1.105.0

package/dist/runtime-v2/evidence-triage/admission-events.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Admission Events — PEAT-B2
+ *
+ * Structured event types for the pain evidence admission pipeline.
+ * These events make admission decisions observable without exposing raw data.
+ *
+ * Privacy boundary: events MUST NOT contain raw prompt, raw chat, raw trajectory,
+ * full local paths, file contents, env vars, tokens, or API keys.
+ *
+ * ERR checklist:
+ * - ERR-002: Every event has reason + nextAction.
+ * - ERR-009: Malformed input events include validation error details.
+ */
+import type { TriggerOutcome, TriggerDecision } from './trigger-controller.js';
+import type { SourceKind, TriageDecision } from './types.js';
+/**
+ * Base fields shared by all admission events.
+ */
+interface AdmissionEventBase {
+    /** Unique event ID */
+    readonly eventId: string;
+    /** ISO timestamp */
+    readonly timestamp: string;
+    /** Source kind that was evaluated */
+    readonly sourceKind: SourceKind;
+    /** Workspace reference (directory name only, no full path) */
+    readonly workspaceRef: string;
+    /** Session ID (may be truncated for privacy) */
+    readonly sessionId?: string;
+}
+/**
+ * Emitted when the admission controller makes a decision.
+ * This is the primary observability event for the admission pipeline.
+ */
+export interface AdmissionDecisionEvent extends AdmissionEventBase {
+    readonly eventType: 'admission_decision';
+    readonly triageDecision: TriageDecision;
+    readonly triggerOutcome: TriggerOutcome;
+    readonly reason: string;
+    readonly nextAction: string;
+    readonly shouldCreateDiagnosticTask: boolean;
+}
+/**
+ * Emitted when a diagnostic task is created as a result of admission.
+ */
+export interface DiagnosisTaskCreatedEvent extends AdmissionEventBase {
+    readonly eventType: 'diagnosis_task_created';
+    readonly painId: string;
+    readonly taskId: string;
+    readonly triggerOutcome: TriggerOutcome;
+}
+/**
+ * Emitted when evidence is recorded without triggering diagnosis.
+ */
+export interface EvidenceOnlyRecordedEvent extends AdmissionEventBase {
+    readonly eventType: 'evidence_only_recorded';
+    readonly triageDecision: TriageDecision;
+    readonly reason: string;
+    readonly nextAction: string;
+}
+/**
+ * Emitted when a signal is skipped or refused.
+ */
+export interface SkippedRefusedEvent extends AdmissionEventBase {
+    readonly eventType: 'skipped_refused';
+    readonly triggerOutcome: TriggerOutcome;
+    readonly reason: string;
+    readonly nextAction: string;
+}
+/**
+ * Union of all admission event types.
+ */
+export type AdmissionEvent = AdmissionDecisionEvent | DiagnosisTaskCreatedEvent | EvidenceOnlyRecordedEvent | SkippedRefusedEvent;
+/**
+ * Create an AdmissionDecisionEvent from a TriggerDecision.
+ *
+ * This is the canonical way to produce an admission event.
+ * The event contains no raw sensitive data — only structured metadata.
+ */
+export declare function createAdmissionDecisionEvent(decision: TriggerDecision, options: {
+    workspaceRef: string;
+    sessionId?: string;
+}): AdmissionDecisionEvent;
+/**
+ * Create a DiagnosisTaskCreatedEvent.
+ */
+export declare function createDiagnosisTaskCreatedEvent(opts: {
+    painId: string;
+    taskId: string;
+    decision: TriggerDecision;
+    workspaceRef: string;
+    sessionId?: string;
+}): DiagnosisTaskCreatedEvent;
+/**
+ * Create an EvidenceOnlyRecordedEvent.
+ */
+export declare function createEvidenceOnlyRecordedEvent(decision: TriggerDecision, options: {
+    workspaceRef: string;
+    sessionId?: string;
+}): EvidenceOnlyRecordedEvent;
+/**
+ * Create a SkippedRefusedEvent.
+ */
+export declare function createSkippedRefusedEvent(decision: TriggerDecision, options: {
+    workspaceRef: string;
+    sessionId?: string;
+}): SkippedRefusedEvent;
+/**
+ * Serialize an admission event to a JSONL-safe string.
+ *
+ * Privacy boundary: only structured fields are included.
+ * No raw prompt/chat/trajectory/file content/token/path secrets.
+ */
+export declare function serializeAdmissionEvent(event: AdmissionEvent): string;
+/**
+ * Validate that an admission event does not contain raw sensitive data.
+ *
+ * Returns true if the event passes privacy checks.
+ * This is a defense-in-depth check for tests and auditing.
+ */
+export declare function validateEventPrivacy(event: AdmissionEvent): {
+    valid: boolean;
+    violations: string[];
+};
+export {};
+//# sourceMappingURL=admission-events.d.ts.map

package/dist/runtime-v2/evidence-triage/admission-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-events.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/admission-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI7D;;GAEG;AACH,UAAU,kBAAkB;IAC1B,sBAAsB;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oBAAoB;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,kBAAkB;IACnE,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAA0B,SAAQ,kBAAkB;IACnE,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,yBAAyB,GACzB,mBAAmB,CAAC;AAUxB;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE;IACP,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,sBAAsB,CAcxB;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,yBAAyB,CAY3B;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE;IACP,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,yBAAyB,CAY3B;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE;IACP,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,mBAAmB,CAYrB;AAID;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAgCrE;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAwBpG"}

package/dist/runtime-v2/evidence-triage/admission-events.js

@@ -0,0 +1,159 @@
+/**
+ * Admission Events — PEAT-B2
+ *
+ * Structured event types for the pain evidence admission pipeline.
+ * These events make admission decisions observable without exposing raw data.
+ *
+ * Privacy boundary: events MUST NOT contain raw prompt, raw chat, raw trajectory,
+ * full local paths, file contents, env vars, tokens, or API keys.
+ *
+ * ERR checklist:
+ * - ERR-002: Every event has reason + nextAction.
+ * - ERR-009: Malformed input events include validation error details.
+ */
+// ── Event Factory Functions ─────────────────────────────────────────────────
+let eventCounter = 0;
+function nextEventId() {
+    return `adm_${Date.now()}_${++eventCounter}`;
+}
+/**
+ * Create an AdmissionDecisionEvent from a TriggerDecision.
+ *
+ * This is the canonical way to produce an admission event.
+ * The event contains no raw sensitive data — only structured metadata.
+ */
+export function createAdmissionDecisionEvent(decision, options) {
+    return {
+        eventType: 'admission_decision',
+        eventId: nextEventId(),
+        timestamp: decision.decidedAt,
+        sourceKind: decision.sourceKind,
+        workspaceRef: options.workspaceRef,
+        sessionId: options.sessionId,
+        triageDecision: decision.triageDecision,
+        triggerOutcome: decision.outcome,
+        reason: decision.reason,
+        nextAction: decision.nextAction,
+        shouldCreateDiagnosticTask: decision.shouldCreateDiagnosticTask,
+    };
+}
+/**
+ * Create a DiagnosisTaskCreatedEvent.
+ */
+export function createDiagnosisTaskCreatedEvent(opts) {
+    return {
+        eventType: 'diagnosis_task_created',
+        eventId: nextEventId(),
+        timestamp: new Date().toISOString(),
+        sourceKind: opts.decision.sourceKind,
+        workspaceRef: opts.workspaceRef,
+        sessionId: opts.sessionId,
+        painId: opts.painId,
+        taskId: opts.taskId,
+        triggerOutcome: opts.decision.outcome,
+    };
+}
+/**
+ * Create an EvidenceOnlyRecordedEvent.
+ */
+export function createEvidenceOnlyRecordedEvent(decision, options) {
+    return {
+        eventType: 'evidence_only_recorded',
+        eventId: nextEventId(),
+        timestamp: decision.decidedAt,
+        sourceKind: decision.sourceKind,
+        workspaceRef: options.workspaceRef,
+        sessionId: options.sessionId,
+        triageDecision: decision.triageDecision,
+        reason: decision.reason,
+        nextAction: decision.nextAction,
+    };
+}
+/**
+ * Create a SkippedRefusedEvent.
+ */
+export function createSkippedRefusedEvent(decision, options) {
+    return {
+        eventType: 'skipped_refused',
+        eventId: nextEventId(),
+        timestamp: decision.decidedAt,
+        sourceKind: decision.sourceKind,
+        workspaceRef: options.workspaceRef,
+        sessionId: options.sessionId,
+        triggerOutcome: decision.outcome,
+        reason: decision.reason,
+        nextAction: decision.nextAction,
+    };
+}
+// ── Event Serialization ─────────────────────────────────────────────────────
+/**
+ * Serialize an admission event to a JSONL-safe string.
+ *
+ * Privacy boundary: only structured fields are included.
+ * No raw prompt/chat/trajectory/file content/token/path secrets.
+ */
+export function serializeAdmissionEvent(event) {
+    // Explicit field selection prevents accidental raw data leakage
+    const safe = {
+        eventType: event.eventType,
+        eventId: event.eventId,
+        timestamp: event.timestamp,
+        sourceKind: event.sourceKind,
+        workspaceRef: event.workspaceRef,
+        sessionId: event.sessionId,
+    };
+    if (event.eventType === 'admission_decision') {
+        safe.triageDecision = event.triageDecision;
+        safe.triggerOutcome = event.triggerOutcome;
+        safe.reason = event.reason;
+        safe.nextAction = event.nextAction;
+        safe.shouldCreateDiagnosticTask = event.shouldCreateDiagnosticTask;
+    }
+    else if (event.eventType === 'diagnosis_task_created') {
+        safe.painId = event.painId;
+        safe.taskId = event.taskId;
+        safe.triggerOutcome = event.triggerOutcome;
+    }
+    else if (event.eventType === 'evidence_only_recorded') {
+        safe.triageDecision = event.triageDecision;
+        safe.reason = event.reason;
+        safe.nextAction = event.nextAction;
+    }
+    else if (event.eventType === 'skipped_refused') {
+        safe.triggerOutcome = event.triggerOutcome;
+        safe.reason = event.reason;
+        safe.nextAction = event.nextAction;
+    }
+    return JSON.stringify(safe);
+}
+// ── Validation ──────────────────────────────────────────────────────────────
+/**
+ * Validate that an admission event does not contain raw sensitive data.
+ *
+ * Returns true if the event passes privacy checks.
+ * This is a defense-in-depth check for tests and auditing.
+ */
+export function validateEventPrivacy(event) {
+    const violations = [];
+    const serialized = JSON.stringify(event);
+    // Check for common sensitive patterns
+    if (/sk-[a-zA-Z0-9]{20,}/.test(serialized)) {
+        violations.push('potential_api_key_detected');
+    }
+    // Check for absolute paths in JSON-serialized form.
+    // JSON.stringify('C:\\Users\\admin') produces "C:\\\\Users\\\\admin" in the JSON string.
+    // At runtime, serialized.includes('Users\\') checks for Users followed by one backslash.
+    const hasWindowsPath = serialized.includes('Users\\') ||
+        /[A-Z]:\\[Uu]sers/.test(serialized);
+    if (hasWindowsPath) {
+        violations.push('absolute_windows_path_detected');
+    }
+    if (/\/home\/[a-z]/.test(serialized)) {
+        violations.push('absolute_unix_path_detected');
+    }
+    if (/"prompt"\s*:\s*"/.test(serialized) && serialized.length > 2000) {
+        violations.push('potential_raw_prompt_in_event');
+    }
+    return { valid: violations.length === 0, violations };
+}
+//# sourceMappingURL=admission-events.js.map

package/dist/runtime-v2/evidence-triage/admission-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-events.js","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/admission-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA2EH,+EAA+E;AAE/E,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,WAAW;IAClB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAyB,EACzB,OAGC;IAED,OAAO;QACL,SAAS,EAAE,oBAAoB;QAC/B,OAAO,EAAE,WAAW,EAAE;QACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,cAAc,EAAE,QAAQ,CAAC,OAAO;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;KAChE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAMC;IAED,OAAO;QACL,SAAS,EAAE,wBAAwB;QACnC,OAAO,EAAE,WAAW,EAAE;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;QACpC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAC7C,QAAyB,EACzB,OAGC;IAED,OAAO;QACL,SAAS,EAAE,wBAAwB;QACnC,OAAO,EAAE,WAAW,EAAE;QACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAyB,EACzB,OAGC;IAED,OAAO;QACL,SAAS,EAAE,iBAAiB;QAC5B,OAAO,EAAE,WAAW,EAAE;QACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,QAAQ,CAAC,OAAO;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,gEAAgE;IAChE,MAAM,IAAI,GAA4B;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,CAAC;IACrE,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC7C,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,wBAAwB,EAAE,CAAC;QACxD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEzC,sCAAsC;IACtC,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,oDAAoD;IACpD,yFAAyF;IACzF,yFAAyF;IACzF,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QACnD,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,cAAc,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,UAAU,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACpE,UAAU,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACxD,CAAC"}

package/dist/runtime-v2/evidence-triage/index.d.ts

@@ -1,7 +1,7 @@
 /**
- * Evidence Triage — PEAT-B1
+ * Evidence Triage — PEAT-B1 → B2
  *
- * Public API for pre-diagnosis evidence triage.
+ * Public API for pre-diagnosis evidence triage and trigger control.
  * Pure types and policy — no I/O, no plugin imports.
  */
 export type { SourceKind, TriageDecision, TriageResult, TriageInput, } from './types.js';
@@ -9,4 +9,8 @@ export { isSourceKind } from './types.js';
 export type { SourceDescriptor } from './source-descriptors.js';
 export { SOURCE_DESCRIPTORS, getSourceDescriptor } from './source-descriptors.js';
 export { evaluateTriage } from './triage-policy.js';
+export type { TriggerOutcome, TriggerDecision, TriggerControllerInput, } from './trigger-controller.js';
+export { evaluateTriggerController, shouldCreateTask, isAdmittedOutcome, isSkippedOutcome, } from './trigger-controller.js';
+export type { AdmissionDecisionEvent, DiagnosisTaskCreatedEvent, EvidenceOnlyRecordedEvent, SkippedRefusedEvent, AdmissionEvent, } from './admission-events.js';
+export { createAdmissionDecisionEvent, createDiagnosisTaskCreatedEvent, createEvidenceOnlyRecordedEvent, createSkippedRefusedEvent, serializeAdmissionEvent, validateEventPrivacy, } from './admission-events.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime-v2/evidence-triage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGlF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGlF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,YAAY,EACV,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,mBAAmB,EACnB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}

package/dist/runtime-v2/evidence-triage/index.js

@@ -1,11 +1,13 @@
 /**
- * Evidence Triage — PEAT-B1
+ * Evidence Triage — PEAT-B1 → B2
  *
- * Public API for pre-diagnosis evidence triage.
+ * Public API for pre-diagnosis evidence triage and trigger control.
  * Pure types and policy — no I/O, no plugin imports.
  */
 export { isSourceKind } from './types.js';
 export { SOURCE_DESCRIPTORS, getSourceDescriptor } from './source-descriptors.js';
 // Triage policy
 export { evaluateTriage } from './triage-policy.js';
+export { evaluateTriggerController, shouldCreateTask, isAdmittedOutcome, isSkippedOutcome, } from './trigger-controller.js';
+export { createAdmissionDecisionEvent, createDiagnosisTaskCreatedEvent, createEvidenceOnlyRecordedEvent, createSkippedRefusedEvent, serializeAdmissionEvent, validateEventPrivacy, } from './admission-events.js';
 //# sourceMappingURL=index.js.map

package/dist/runtime-v2/evidence-triage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI1C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAElF,gBAAgB;AAChB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI1C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAElF,gBAAgB;AAChB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQpD,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAUjC,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,+BAA+B,EAC/B,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}

package/dist/runtime-v2/evidence-triage/trigger-controller.d.ts

@@ -0,0 +1,116 @@
+/**
+ * Trigger Controller — PEAT-B2
+ *
+ * Pure core module that connects triage/admission decisions to a concrete
+ * trigger outcome. This is the ONLY module that decides whether a diagnostic
+ * task is created.
+ *
+ * Input:  triage result + source descriptor + minimal evidence metadata
+ * Output: TriggerDecision with structured outcome
+ *
+ * Every output carries reason + nextAction (ERR-002).
+ * No raw sensitive data in outputs (privacy boundary).
+ *
+ * ERR checklist:
+ * - ERR-001: No `as` casts. Input validated with runtime guards.
+ * - ERR-002: Every decision carries reason + nextAction.
+ * - ERR-009: Malformed/missing state fails loud with reason.
+ * - ERR-025: Production-path wiring, not just helper tests.
+ * - ERR-031/034: Config source alignment — decisions from canonical descriptors.
+ * - ERR-048: Activation/write-read disconnect prevented by recording decisions.
+ */
+import type { SourceKind, TriageDecision, TriageResult } from './types.js';
+/**
+ * The outcome of a trigger controller evaluation.
+ *
+ * Each variant represents a distinct state that is observable by the owner:
+ * - evidence_only: recorded but no diagnosis created
+ * - diagnosis_created: diagnostician task was/will be created
+ * - diagnosis_skipped: admission was 'admit' but something prevented diagnosis
+ * - cooldown_skipped: admitted but cooldown prevented creation
+ * - manual_owner_admitted: owner explicit pain bypasses normal gate
+ * - refused: malformed or invalid input rejected
+ * - health_only: infrastructure health signal only
+ * - owner_confirm_required: needs owner confirmation before diagnosis
+ */
+export type TriggerOutcome = 'evidence_only' | 'diagnosis_created' | 'diagnosis_skipped' | 'cooldown_skipped' | 'manual_owner_admitted' | 'refused' | 'health_only' | 'owner_confirm_required';
+/**
+ * Structured trigger decision returned by the controller.
+ *
+ * Every field is required to prevent silent degradation (ERR-002).
+ */
+export interface TriggerDecision {
+    /** The trigger outcome */
+    readonly outcome: TriggerOutcome;
+    /** Human-readable reason for this decision */
+    readonly reason: string;
+    /** What should happen next */
+    readonly nextAction: string;
+    /** Source kind that was evaluated */
+    readonly sourceKind: SourceKind;
+    /** The triage decision that led to this trigger outcome */
+    readonly triageDecision: TriageDecision;
+    /** Whether this decision should result in a diagnostic task */
+    readonly shouldCreateDiagnosticTask: boolean;
+    /** Timestamp of the decision */
+    readonly decidedAt: string;
+    /** Optional operator note for debugging */
+    readonly operatorNote?: string;
+}
+/**
+ * Input to the trigger controller.
+ *
+ * Combines triage result with additional context that the trigger controller
+ * needs but the triage policy does not.
+ */
+export interface TriggerControllerInput {
+    /** Result from evidence triage (PEAT-B1) */
+    readonly triageResult: TriageResult;
+    /** Whether this is an owner manual pain signal */
+    readonly isOwnerManual: boolean;
+    /** Whether cooldown is currently active for this source/session */
+    readonly isCooldownActive: boolean;
+    /** Whether the input was valid (malformed → refused) */
+    readonly isValid: boolean;
+    /** Optional validation error message when isValid is false */
+    readonly validationError?: string;
+    /** Pain score (0-100) */
+    readonly score: number;
+    /** Optional session ID for cooldown scoping */
+    readonly sessionId?: string;
+    /** Whether cooldown bypass is allowed (owner manual always bypasses) */
+    readonly cooldownBypassAllowed?: boolean;
+}
+/**
+ * Evaluate trigger controller for incoming pain evidence.
+ *
+ * This is the ONLY function that decides whether a diagnostic task is created.
+ * The production path (hooks, CLI, manual) must call this before creating tasks.
+ *
+ * Decision precedence:
+ * 1. Invalid input → refused
+ * 2. Owner manual → manual_owner_admitted (always creates task)
+ * 3. Triage decision → evidence_only / diagnosis_created / health_only / etc.
+ * 4. Cooldown check → cooldown_skipped (within 'admit' branch)
+ *
+ * @param input - Trigger controller input with triage result and context
+ * @returns Structured trigger decision
+ */
+export declare function evaluateTriggerController(input: TriggerControllerInput): TriggerDecision;
+/**
+ * Check if a trigger outcome should result in a diagnostic task being created.
+ *
+ * Convenience function for callers that just need the boolean.
+ */
+export declare function shouldCreateTask(decision: TriggerDecision): boolean;
+/**
+ * Check if a trigger outcome represents an "admitted" state
+ * (i.e., the signal was accepted into the pipeline, even if it didn't create a task).
+ */
+export declare function isAdmittedOutcome(outcome: TriggerOutcome): boolean;
+/**
+ * Check if a trigger outcome represents a "skipped" state
+ * (i.e., the signal was valid but something prevented task creation).
+ */
+export declare function isSkippedOutcome(outcome: TriggerOutcome): boolean;
+//# sourceMappingURL=trigger-controller.d.ts.map

package/dist/runtime-v2/evidence-triage/trigger-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-controller.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/evidence-triage/trigger-controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM3E;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,cAAc,GACtB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,uBAAuB,GACvB,SAAS,GACT,aAAa,GACb,wBAAwB,CAAC;AAE7B;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,gCAAgC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAID;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAgKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,sBAAsB,GAAG,eAAe,CAaxF;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEnE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAElE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAEjE"}