@principles/core 1.274.4 → 1.275.0

package/dist/runtime-v2/pain-ingress-payload.d.ts

@@ -0,0 +1,207 @@
+/**
+ * Pain Ingress shared invariants + persisted payload contract — PRI-642.
+ *
+ * This module is THE single source for:
+ *  - the report field parsers (origin / correlation / evidence / score)
+ *    shared by write-time evaluation and persisted-payload re-entry;
+ *  - the origin/correlation invariant (`validateOriginCorrelationInvariant`)
+ *    — the valid-combination rules of SPEC §8.2 that must never diverge
+ *    between write time and re-entry;
+ *  - the sentinel session constant (frozen decision #4);
+ *  - the versioned `painIngress.v1` persisted namespace (SPEC §9) written
+ *    by PainSignalBridge.buildDiagnosticJson beside the legacy top-level
+ *    fields, and re-validated by executePendingDiagnosis / retry paths.
+ *
+ * INVARIANT EQUIVALENCE (review blocker 2): re-entry validation is NOT
+ * weaker than write-time validation. parsePainIngressV1Payload shares the
+ * field parsers and the invariant with evaluatePainIngress
+ * (pain-ingress.ts), so every state illegal at write time — sentinel
+ * session ids, empty "available" evidence, impossible origin/correlation
+ * combinations — is also rejected on re-entry.
+ *
+ * Legacy compatibility (SPEC §9): payloads WITHOUT a painIngress.v1 block
+ * keep the tolerant legacy normalization branch in pain-signal-bridge.ts;
+ * this strictness applies only to payloads CLAIMING the v1 namespace.
+ *
+ * Pure module — no I/O. @principles/host-runtime and other adapters depend
+ * on core; core depends on no adapter.
+ */
+import type { PainProvenance } from './admission-gate.js';
+export declare const PAIN_INGRESS_PAYLOAD_VERSION = "v1";
+export type PainIngressOriginV1 = {
+    kind: 'owner_manual';
+    channel: 'openclaw_command' | 'cli_explicit_session' | 'external_cli_unbound';
+} | {
+    kind: 'automatic_hook';
+    source: string;
+};
+export type PainIngressCorrelationV1 = {
+    status: 'bound';
+    hostKind: 'openclaw';
+    sessionId: string;
+    traceId?: string;
+} | {
+    status: 'bound';
+    hostKind: 'codex';
+    rootSessionId: string;
+    rolloutIdentity: string;
+    logicalObservationKey: string;
+    hostTurnId: string;
+    traceId?: string;
+} | {
+    status: 'unbound';
+    reason: 'external_cli' | 'missing_host_session';
+};
+export type PainIngressEvidenceClassV1 = {
+    status: 'available';
+    entryCount: number;
+} | {
+    status: 'unavailable';
+    reason: 'trajectory_unavailable' | 'session_not_found' | 'empty_trajectory' | 'evidence_read_failed' | 'evidence_invalid'
+    /** Unbound Owner reports never consult a trajectory — no evidence is sought. */
+     | 'not_applicable_unbound';
+};
+export type PainEvidenceUnavailableReason = 'trajectory_unavailable' | 'session_not_found' | 'empty_trajectory' | 'evidence_read_failed' | 'evidence_invalid'
+/** Unbound Owner reports never consult a trajectory — no evidence is sought. */
+ | 'not_applicable_unbound';
+export interface IngressEvidenceEntry {
+    kind: 'behavior_trace' | 'system_event';
+    sourceRef: string;
+    note: string;
+}
+export type PainEvidenceBundle = {
+    status: 'available';
+    entries: readonly [IngressEvidenceEntry, ...IngressEvidenceEntry[]];
+} | {
+    status: 'unavailable';
+    reason: PainEvidenceUnavailableReason;
+};
+export type PainOrigin = PainIngressOriginV1;
+export type PainCorrelation = PainIngressCorrelationV1;
+export interface PainIngressReport {
+    identity: {
+        kind: 'manual_pain_id';
+        painId: string;
+    } | {
+        kind: 'host_observation';
+        observationId: string;
+    };
+    painType: 'tool_failure' | 'subagent_error' | 'user_frustration';
+    source: string;
+    reason: string;
+    score?: number;
+    origin: PainOrigin;
+    correlation: PainCorrelation;
+    evidence: PainEvidenceBundle;
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Sentinel session ids are never real correlations (frozen decision #4).
+ * Import this constant instead of re-declaring the set in another module.
+ */
+export declare const SENTINEL_SESSION_IDS: ReadonlySet<string>;
+export declare function isSentinelSessionId(value: string): boolean;
+export declare function parseOrigin(value: unknown): PainOrigin | null;
+/**
+ * THE correlation parser — used by report validation (write time) and the
+ * persisted-payload validator (re-entry) so sentinel rejection and lineage
+ * completeness cannot drift between the two.
+ */
+export declare function parseCorrelation(value: unknown): {
+    value: PainCorrelation;
+    error?: undefined;
+} | {
+    value?: undefined;
+    error: string;
+};
+export declare function parseEvidence(value: unknown): {
+    value: PainEvidenceBundle;
+    error?: undefined;
+} | {
+    value?: undefined;
+    error: string;
+};
+/** rc-3/rc-9: a present-but-invalid score is rejected, not silently dropped. */
+export declare function parseScore(value: unknown): {
+    score: number | undefined;
+    scoreInvalid?: undefined;
+} | {
+    score: undefined;
+    scoreInvalid: true;
+};
+export type PainIngressParseResult = {
+    ok: true;
+    report: PainIngressReport;
+} | {
+    ok: false;
+    reasonCode: string;
+    message: string;
+};
+/**
+ * Validate an untrusted report (parsed JSON / host payload) into a typed
+ * PainIngressReport. Fails loud with a structured reasonCode (rc-3); uses
+ * the SAME field parsers and invariant as the persisted-payload validator
+ * (rc-1/rc-2/rc-3/rc-4).
+ */
+export declare function parsePainIngressReport(input: unknown): PainIngressParseResult;
+/**
+ * Origin/correlation combinations the matrix (SPEC §8.2) declares invalid.
+ * Shared by evaluatePainIngress (write time) and parsePainIngressV1Payload
+ * (re-entry) so an illegal state can never become legal across a
+ * persistence round trip. Returns a reasonCode string when invalid, null
+ * when the combination is valid.
+ */
+export declare function validateOriginCorrelationInvariant(origin: PainOrigin, correlation: PainCorrelation): string | null;
+/**
+ * The persisted v1 block. Evidence ENTRIES are intentionally not duplicated
+ * here — they remain in the legacy top-level `evidence` field; this block
+ * records their validated classification only (SPEC §9: one versioned
+ * namespace for the rev-2 facts, legacy fields stay authoritative for
+ * their own consumers).
+ */
+export interface PainIngressV1Payload {
+    version: typeof PAIN_INGRESS_PAYLOAD_VERSION;
+    origin: PainIngressOriginV1;
+    correlation: PainIngressCorrelationV1;
+    evidenceClass: PainIngressEvidenceClassV1;
+}
+export type PainIngressV1ParseResult = {
+    ok: true;
+    payload: PainIngressV1Payload;
+} | {
+    ok: false;
+    reasonCode: string;
+};
+/**
+ * Runtime validation of an untrusted persisted painIngress block
+ * (rc-1/rc-2/rc-3). Shares parseOrigin/parseCorrelation and the
+ * origin/correlation invariant with the write-time evaluator, so sentinel
+ * sessions, incomplete Codex lineage and impossible combinations are
+ * rejected identically at write time and on re-entry.
+ */
+export declare function parsePainIngressV1Payload(value: unknown): PainIngressV1ParseResult;
+/**
+ * Derive the legacy provenance from validated rev-2 facts (SPEC §8.3).
+ * Adapters do not supply provenance independently; this is the one
+ * derivation shared by writers and re-entry validation.
+ */
+export declare function deriveProvenanceFromIngressFacts(origin: PainIngressOriginV1, correlation: PainIngressCorrelationV1): PainProvenance;
+/**
+ * Re-entry consistency check between the nested v1 block and the legacy
+ * top-level fields produced by the same builder (SPEC §9, §12.2.4).
+ * Returns null when consistent; a reasonCode string otherwise.
+ *
+ * Coverage (review blocker 2 closure): every dimension of the
+ * nested/top-level contract is asserted — provenance, host session id,
+ * evidence count, evidence availability class, and host binding
+ * state. A v1 block with unavailable evidence cannot coexist with
+ * legacy top-level entries; an unbound v1 block cannot coexist with
+ * a legacy sessionIdHint.
+ */
+export declare function checkIngressTopLevelConsistency(input: {
+    payload: PainIngressV1Payload;
+    topLevelProvenance: unknown;
+    topLevelSessionIdHint: unknown;
+    topLevelEvidenceCount: number;
+}): string | null;
+//# sourceMappingURL=pain-ingress-payload.d.ts.map

package/dist/runtime-v2/pain-ingress-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-ingress-payload.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-ingress-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAIjD,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,kBAAkB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;CAC/E,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CAAA;CAAE,CAAC;AAE3E,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EACF,wBAAwB,GACxB,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB;IACpB,gFAAgF;OAC9E,wBAAwB,CAAC;CAC9B,CAAC;AAEN,MAAM,MAAM,6BAA6B,GACrC,wBAAwB,GACxB,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB;AACpB,gFAAgF;GAC9E,wBAAwB,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,SAAS,CAAC,oBAAoB,EAAE,GAAG,oBAAoB,EAAE,CAAC,CAAA;CAAE,GAC5F;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,6BAA6B,CAAA;CAAE,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAC7C,MAAM,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EACJ;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAC1C;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,QAAQ,EAAE,cAAc,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,eAAe,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAKD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAMD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAA+B,CAAC;AAErF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAa7D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAiCrI;AAiBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBrI;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,IAAI,CAAA;CAAE,CAM7I;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAoD7E;AAED;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,eAAe,GAC3B,MAAM,GAAG,IAAI,CASf;AAID;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,4BAA4B,CAAC;IAC7C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,WAAW,EAAE,wBAAwB,CAAC;IACtC,aAAa,EAAE,0BAA0B,CAAC;CAC3C;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAsBtC;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAYlF;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,mBAAmB,EAC3B,WAAW,EAAE,wBAAwB,GACpC,cAAc,CAIhB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,GAAG,IAAI,CAqChB"}

package/dist/runtime-v2/pain-ingress-payload.js

@@ -0,0 +1,340 @@
+/**
+ * Pain Ingress shared invariants + persisted payload contract — PRI-642.
+ *
+ * This module is THE single source for:
+ *  - the report field parsers (origin / correlation / evidence / score)
+ *    shared by write-time evaluation and persisted-payload re-entry;
+ *  - the origin/correlation invariant (`validateOriginCorrelationInvariant`)
+ *    — the valid-combination rules of SPEC §8.2 that must never diverge
+ *    between write time and re-entry;
+ *  - the sentinel session constant (frozen decision #4);
+ *  - the versioned `painIngress.v1` persisted namespace (SPEC §9) written
+ *    by PainSignalBridge.buildDiagnosticJson beside the legacy top-level
+ *    fields, and re-validated by executePendingDiagnosis / retry paths.
+ *
+ * INVARIANT EQUIVALENCE (review blocker 2): re-entry validation is NOT
+ * weaker than write-time validation. parsePainIngressV1Payload shares the
+ * field parsers and the invariant with evaluatePainIngress
+ * (pain-ingress.ts), so every state illegal at write time — sentinel
+ * session ids, empty "available" evidence, impossible origin/correlation
+ * combinations — is also rejected on re-entry.
+ *
+ * Legacy compatibility (SPEC §9): payloads WITHOUT a painIngress.v1 block
+ * keep the tolerant legacy normalization branch in pain-signal-bridge.ts;
+ * this strictness applies only to payloads CLAIMING the v1 namespace.
+ *
+ * Pure module — no I/O. @principles/host-runtime and other adapters depend
+ * on core; core depends on no adapter.
+ */
+import { normalizePainProvenance } from './admission-gate.js';
+export const PAIN_INGRESS_PAYLOAD_VERSION = 'v1';
+// ── Shared invariants and parsers (ONE implementation for write time AND
+//    re-entry) ───────────────────────────────────────────────────────────────
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hasOwnString(obj, key) {
+    return Object.hasOwn(obj, key) && typeof obj[key] === 'string' && (obj[key]).length > 0;
+}
+/**
+ * Sentinel session ids are never real correlations (frozen decision #4).
+ * Import this constant instead of re-declaring the set in another module.
+ */
+export const SENTINEL_SESSION_IDS = new Set(['cli', 'unknown']);
+export function isSentinelSessionId(value) {
+    return SENTINEL_SESSION_IDS.has(value);
+}
+export function parseOrigin(value) {
+    if (!isRecord(value))
+        return null;
+    if (value.kind === 'owner_manual') {
+        const { channel } = value;
+        if (channel === 'openclaw_command' || channel === 'cli_explicit_session' || channel === 'external_cli_unbound') {
+            return { kind: 'owner_manual', channel };
+        }
+        return null;
+    }
+    if (value.kind === 'automatic_hook' && typeof value.source === 'string' && value.source.length > 0) {
+        return { kind: 'automatic_hook', source: value.source };
+    }
+    return null;
+}
+/**
+ * THE correlation parser — used by report validation (write time) and the
+ * persisted-payload validator (re-entry) so sentinel rejection and lineage
+ * completeness cannot drift between the two.
+ */
+export function parseCorrelation(value) {
+    if (!isRecord(value))
+        return { error: 'correlation_invalid' };
+    if (value.status === 'unbound') {
+        if (value.reason === 'external_cli' || value.reason === 'missing_host_session') {
+            return { value: { status: 'unbound', reason: value.reason } };
+        }
+        return { error: 'correlation_invalid' };
+    }
+    if (value.status !== 'bound')
+        return { error: 'correlation_invalid' };
+    if (value.hostKind === 'openclaw') {
+        if (!hasOwnString(value, 'sessionId'))
+            return { error: 'correlation_invalid' };
+        if (isSentinelSessionId(value.sessionId))
+            return { error: 'session_sentinel_invalid' };
+        const correlation = { status: 'bound', hostKind: 'openclaw', sessionId: value.sessionId };
+        if (typeof value.traceId === 'string')
+            correlation.traceId = value.traceId;
+        return { value: correlation };
+    }
+    if (value.hostKind === 'codex') {
+        if (!hasOwnString(value, 'rootSessionId'))
+            return { error: 'codex_lineage_incomplete' };
+        if (!hasOwnString(value, 'rolloutIdentity'))
+            return { error: 'codex_lineage_incomplete' };
+        if (!hasOwnString(value, 'logicalObservationKey'))
+            return { error: 'codex_lineage_incomplete' };
+        if (!hasOwnString(value, 'hostTurnId'))
+            return { error: 'codex_lineage_incomplete' };
+        const correlation = {
+            status: 'bound',
+            hostKind: 'codex',
+            rootSessionId: value.rootSessionId,
+            rolloutIdentity: value.rolloutIdentity,
+            logicalObservationKey: value.logicalObservationKey,
+            hostTurnId: value.hostTurnId,
+        };
+        if (typeof value.traceId === 'string')
+            correlation.traceId = value.traceId;
+        return { value: correlation };
+    }
+    return { error: 'correlation_invalid' };
+}
+const EVIDENCE_UNAVAILABLE_REASONS = [
+    'trajectory_unavailable',
+    'session_not_found',
+    'empty_trajectory',
+    'evidence_read_failed',
+    'evidence_invalid',
+    'not_applicable_unbound',
+];
+function isEvidenceUnavailableReason(value) {
+    return EVIDENCE_UNAVAILABLE_REASONS.includes(value);
+}
+export function parseEvidence(value) {
+    if (!isRecord(value))
+        return { error: 'evidence_invalid' };
+    if (value.status === 'available') {
+        if (!Array.isArray(value.entries) || value.entries.length === 0)
+            return { error: 'evidence_invalid' };
+        const entries = [];
+        for (const entry of value.entries) {
+            if (!isRecord(entry))
+                return { error: 'evidence_invalid' };
+            if (entry.kind !== 'behavior_trace' && entry.kind !== 'system_event')
+                return { error: 'evidence_invalid' };
+            if (typeof entry.sourceRef !== 'string' || entry.sourceRef.length === 0)
+                return { error: 'evidence_invalid' };
+            if (typeof entry.note !== 'string')
+                return { error: 'evidence_invalid' };
+            entries.push({ kind: entry.kind, sourceRef: entry.sourceRef, note: entry.note });
+        }
+        return { value: { status: 'available', entries: entries } };
+    }
+    const reasons = EVIDENCE_UNAVAILABLE_REASONS;
+    if (value.status === 'unavailable' && reasons.includes(value.reason)) {
+        return { value: { status: 'unavailable', reason: value.reason } };
+    }
+    return { error: 'evidence_invalid' };
+}
+/** rc-3/rc-9: a present-but-invalid score is rejected, not silently dropped. */
+export function parseScore(value) {
+    if (value === undefined)
+        return { score: undefined };
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0 || value > 100) {
+        return { score: undefined, scoreInvalid: true };
+    }
+    return { score: value };
+}
+/**
+ * Validate an untrusted report (parsed JSON / host payload) into a typed
+ * PainIngressReport. Fails loud with a structured reasonCode (rc-3); uses
+ * the SAME field parsers and invariant as the persisted-payload validator
+ * (rc-1/rc-2/rc-3/rc-4).
+ */
+export function parsePainIngressReport(input) {
+    if (!isRecord(input)) {
+        return { ok: false, reasonCode: 'report_invalid', message: 'ingress report must be an object' };
+    }
+    if (!isRecord(input.identity))
+        return { ok: false, reasonCode: 'identity_invalid', message: 'identity must be an object' };
+    if (input.identity.kind === 'manual_pain_id') {
+        if (!hasOwnString(input.identity, 'painId'))
+            return { ok: false, reasonCode: 'identity_invalid', message: 'manual_pain_id requires painId' };
+    }
+    else if (input.identity.kind === 'host_observation') {
+        if (!hasOwnString(input.identity, 'observationId'))
+            return { ok: false, reasonCode: 'identity_invalid', message: 'host_observation requires observationId' };
+    }
+    else {
+        return { ok: false, reasonCode: 'identity_invalid', message: 'identity.kind must be manual_pain_id or host_observation' };
+    }
+    const painTypes = ['tool_failure', 'subagent_error', 'user_frustration'];
+    if (!painTypes.includes(input.painType)) {
+        return { ok: false, reasonCode: 'pain_type_invalid', message: 'painType must be tool_failure | subagent_error | user_frustration' };
+    }
+    if (!hasOwnString(input, 'source'))
+        return { ok: false, reasonCode: 'source_invalid', message: 'source is required' };
+    if (!hasOwnString(input, 'reason'))
+        return { ok: false, reasonCode: 'reason_invalid', message: 'reason is required' };
+    const origin = parseOrigin(input.origin);
+    if (origin === null)
+        return { ok: false, reasonCode: 'origin_invalid', message: 'origin must be owner_manual{channel} or automatic_hook{source}' };
+    const correlation = parseCorrelation(input.correlation);
+    if (correlation.error !== undefined) {
+        return { ok: false, reasonCode: correlation.error, message: `correlation rejected: ${correlation.error}` };
+    }
+    const evidence = parseEvidence(input.evidence);
+    if (evidence.error !== undefined) {
+        return { ok: false, reasonCode: evidence.error, message: `evidence rejected: ${evidence.error}` };
+    }
+    // rc-3/rc-9: a present-but-invalid score is rejected, not silently dropped.
+    const { score, scoreInvalid } = parseScore(input.score);
+    if (scoreInvalid) {
+        return { ok: false, reasonCode: 'score_invalid', message: 'score must be a number between 0 and 100' };
+    }
+    return {
+        ok: true,
+        report: {
+            identity: input.identity,
+            painType: input.painType,
+            source: input.source,
+            reason: input.reason,
+            score,
+            origin,
+            correlation: correlation.value,
+            evidence: evidence.value,
+        },
+    };
+}
+/**
+ * Origin/correlation combinations the matrix (SPEC §8.2) declares invalid.
+ * Shared by evaluatePainIngress (write time) and parsePainIngressV1Payload
+ * (re-entry) so an illegal state can never become legal across a
+ * persistence round trip. Returns a reasonCode string when invalid, null
+ * when the combination is valid.
+ */
+export function validateOriginCorrelationInvariant(origin, correlation) {
+    if (origin.kind !== 'owner_manual')
+        return null;
+    if (origin.channel === 'external_cli_unbound' && correlation.status === 'bound') {
+        return 'origin_correlation_mismatch';
+    }
+    if (origin.channel === 'cli_explicit_session' && correlation.status === 'unbound') {
+        return 'origin_correlation_mismatch';
+    }
+    return null;
+}
+/**
+ * Persisted mirror of the write-time evidence bundle classification
+ * (PainEvidenceBundle). `available` requires entryCount >= 1 — the same
+ * invariant the write-time bundle enforces (a non-empty entries tuple), so
+ * an "available with zero entries" state can never pass here.
+ */
+function parseEvidenceClass(value) {
+    if (!isRecord(value))
+        return null;
+    if (value.status === 'available') {
+        if (Object.hasOwn(value, 'entryCount') && typeof value.entryCount === 'number' && Number.isInteger(value.entryCount) && value.entryCount >= 1) {
+            return { status: 'available', entryCount: value.entryCount };
+        }
+        return null;
+    }
+    if (value.status === 'unavailable' && isEvidenceUnavailableReason(value.reason)) {
+        return { status: 'unavailable', reason: value.reason };
+    }
+    return null;
+}
+/**
+ * Runtime validation of an untrusted persisted painIngress block
+ * (rc-1/rc-2/rc-3). Shares parseOrigin/parseCorrelation and the
+ * origin/correlation invariant with the write-time evaluator, so sentinel
+ * sessions, incomplete Codex lineage and impossible combinations are
+ * rejected identically at write time and on re-entry.
+ */
+export function parsePainIngressV1Payload(value) {
+    if (!isRecord(value))
+        return { ok: false, reasonCode: 'ingress_payload_invalid' };
+    if (value.version !== PAIN_INGRESS_PAYLOAD_VERSION)
+        return { ok: false, reasonCode: 'ingress_payload_version_unsupported' };
+    const origin = parseOrigin(value.origin);
+    if (origin === null)
+        return { ok: false, reasonCode: 'ingress_origin_invalid' };
+    const correlation = parseCorrelation(value.correlation);
+    if (correlation.error !== undefined)
+        return { ok: false, reasonCode: correlation.error };
+    const evidenceClass = parseEvidenceClass(value.evidenceClass);
+    if (evidenceClass === null)
+        return { ok: false, reasonCode: 'ingress_evidence_class_invalid' };
+    const invariantViolation = validateOriginCorrelationInvariant(origin, correlation.value);
+    if (invariantViolation !== null)
+        return { ok: false, reasonCode: invariantViolation };
+    return { ok: true, payload: { version: PAIN_INGRESS_PAYLOAD_VERSION, origin, correlation: correlation.value, evidenceClass } };
+}
+/**
+ * Derive the legacy provenance from validated rev-2 facts (SPEC §8.3).
+ * Adapters do not supply provenance independently; this is the one
+ * derivation shared by writers and re-entry validation.
+ */
+export function deriveProvenanceFromIngressFacts(origin, correlation) {
+    if (origin.kind === 'automatic_hook')
+        return 'automatic_hook';
+    if (correlation.status === 'bound')
+        return 'host_context_bound';
+    return 'owner_reported_no_host_trace';
+}
+/**
+ * Re-entry consistency check between the nested v1 block and the legacy
+ * top-level fields produced by the same builder (SPEC §9, §12.2.4).
+ * Returns null when consistent; a reasonCode string otherwise.
+ *
+ * Coverage (review blocker 2 closure): every dimension of the
+ * nested/top-level contract is asserted — provenance, host session id,
+ * evidence count, evidence availability class, and host binding
+ * state. A v1 block with unavailable evidence cannot coexist with
+ * legacy top-level entries; an unbound v1 block cannot coexist with
+ * a legacy sessionIdHint.
+ */
+export function checkIngressTopLevelConsistency(input) {
+    const { payload, topLevelProvenance, topLevelSessionIdHint, topLevelEvidenceCount } = input;
+    const expectedProvenance = deriveProvenanceFromIngressFacts(payload.origin, payload.correlation);
+    const actualProvenance = typeof topLevelProvenance === 'string' ? normalizePainProvenance(topLevelProvenance) : undefined;
+    if (actualProvenance !== expectedProvenance) {
+        return 'ingress_payload_mismatch:provenance';
+    }
+    // Unbound v1 must not coexist with a non-empty top-level session hint
+    // (the host would have inferred a real binding at write time).
+    if (payload.correlation.status === 'unbound') {
+        if (topLevelSessionIdHint !== null && topLevelSessionIdHint !== undefined && topLevelSessionIdHint !== '') {
+            return 'ingress_payload_mismatch:unbound_session_hint';
+        }
+    }
+    // Bound v1 (OpenClaw) → the host and the v1 must agree on the session id.
+    if (payload.correlation.status === 'bound' && payload.correlation.hostKind === 'openclaw') {
+        if (topLevelSessionIdHint !== payload.correlation.sessionId) {
+            return 'ingress_payload_mismatch:session';
+        }
+    }
+    // evidenceClass ↔ top-level evidence count: an unavailable v1 cannot
+    // coexist with legacy entries; an available v1 must match the count.
+    if (payload.evidenceClass.status === 'unavailable') {
+        if (topLevelEvidenceCount !== 0) {
+            return 'ingress_payload_mismatch:unavailable_evidence_count';
+        }
+    }
+    else {
+        if (payload.evidenceClass.entryCount !== topLevelEvidenceCount) {
+            return 'ingress_payload_mismatch:evidence_count';
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=pain-ingress-payload.js.map

package/dist/runtime-v2/pain-ingress-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-ingress-payload.js","sourceRoot":"","sources":["../../src/runtime-v2/pain-ingress-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAyEjD,0EAA0E;AAC1E,+EAA+E;AAE/E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B,EAAE,GAAW;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAErF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,MAAM,EAAC,OAAO,EAAC,GAAG,KAAK,CAAC;QACxB,IAAI,OAAO,KAAK,kBAAkB,IAAI,OAAO,KAAK,sBAAsB,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;YAC/G,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YAC/E,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC/E,IAAI,mBAAmB,CAAC,KAAK,CAAC,SAAmB,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QACjG,MAAM,WAAW,GAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAmB,EAAE,CAAC;QACrH,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAAE,WAAW,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QACxF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC1F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,uBAAuB,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAChG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QACrF,MAAM,WAAW,GAAoB;YACnC,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,OAAO;YACjB,aAAa,EAAE,KAAK,CAAC,aAAuB;YAC5C,eAAe,EAAE,KAAK,CAAC,eAAyB;YAChD,qBAAqB,EAAE,KAAK,CAAC,qBAA+B;YAC5D,UAAU,EAAE,KAAK,CAAC,UAAoB;SACvC,CAAC;QACF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAAE,WAAW,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,4BAA4B,GAAG;IACnC,wBAAwB;IACxB,mBAAmB;IACnB,kBAAkB;IAClB,sBAAsB;IACtB,kBAAkB;IAClB,wBAAwB;CAChB,CAAC;AAIX,SAAS,2BAA2B,CAAC,KAAc;IACjD,OAAQ,4BAAmD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACtG,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YAC3G,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YAC9G,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAA4D,EAAE,EAAE,CAAC;IACnH,CAAC;IACD,MAAM,OAAO,GAAG,4BAA4B,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAK,OAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAmC,EAAE,EAAE,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAC3H,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC/I,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC/J,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;IAC5H,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,CAAU,CAAC;IAClF,IAAI,CAAE,SAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACtH,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAEtH,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC;IAEnJ,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,yBAAyB,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAC7G,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,sBAAsB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACpG,CAAC;IAED,4EAA4E;IAC5E,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACzG,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,QAAyC;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAyC;YACzD,MAAM,EAAE,KAAK,CAAC,MAAgB;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAgB;YAC9B,KAAK;YACL,MAAM;YACN,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,QAAQ,EAAE,QAAQ,CAAC,KAAK;SACzB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAAkB,EAClB,WAA4B;IAE5B,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,sBAAsB,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChF,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,sBAAsB,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClF,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAsBD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;YAC9I,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,yBAAyB,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,OAAO,KAAK,4BAA4B;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,qCAAqC,EAAE,CAAC;IAC5H,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,wBAAwB,EAAE,CAAC;IAChF,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;IACzF,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC;IAC/F,MAAM,kBAAkB,GAAG,kCAAkC,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;AACjI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAA2B,EAC3B,WAAqC;IAErC,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,gBAAgB,CAAC;IAC9D,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC;IAChE,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,GAAG,KAAK,CAAC;IAE5F,MAAM,kBAAkB,GAAG,gCAAgC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjG,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1H,IAAI,gBAAgB,KAAK,kBAAkB,EAAE,CAAC;QAC5C,OAAO,qCAAqC,CAAC;IAC/C,CAAC;IAED,sEAAsE;IACtE,+DAA+D;IAC/D,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,qBAAqB,KAAK,IAAI,IAAI,qBAAqB,KAAK,SAAS,IAAI,qBAAqB,KAAK,EAAE,EAAE,CAAC;YAC1G,OAAO,+CAA+C,CAAC;QACzD,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC1F,IAAI,qBAAqB,KAAK,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;YAC5D,OAAO,kCAAkC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACnD,IAAI,qBAAqB,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,qDAAqD,CAAC;QAC/D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,aAAa,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;YAC/D,OAAO,yCAAyC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime-v2/pain-ingress.d.ts

@@ -0,0 +1,61 @@
+import type { PainIngressV1Payload, PainIngressReport, IngressEvidenceEntry } from './pain-ingress-payload.js';
+import type { PainProvenance } from './admission-gate.js';
+export { SENTINEL_SESSION_IDS, isSentinelSessionId, parsePainIngressReport, validateOriginCorrelationInvariant, } from './pain-ingress-payload.js';
+export type { PainOrigin, PainCorrelation, IngressEvidenceEntry, PainEvidenceBundle, PainEvidenceUnavailableReason, PainIngressReport, PainIngressParseResult, PainIngressV1Payload, } from './pain-ingress-payload.js';
+/**
+ * The legacy write-side shape handed to PainToPrincipleService. Derived by
+ * the ingress — callers do not assemble provenance/evidence themselves.
+ */
+export interface LegacyPainSubmission {
+    painId: string;
+    painType: PainIngressReport['painType'];
+    source: string;
+    reason: string;
+    score?: number;
+    sessionId?: string;
+    agentId?: string;
+    traceId?: string;
+    provenance: PainProvenance;
+    hostKind?: 'openclaw' | 'codex';
+    evidence: IngressEvidenceEntry[];
+    /** Versioned rev-2 facts persisted beside the legacy top-level fields. */
+    painIngress: PainIngressV1Payload;
+}
+export type PainIngressDecision = {
+    action: 'submit';
+    legacy: LegacyPainSubmission;
+    painIngress: PainIngressV1Payload;
+    warnings: string[];
+    reasonCode?: undefined;
+} | {
+    /** Explicit degradation: submission is still allowed (honest empty evidence + warning). */
+    action: 'degrade';
+    reasonCode: string;
+    warning: string;
+    nextAction: string;
+    legacy: LegacyPainSubmission;
+    painIngress: PainIngressV1Payload;
+} | {
+    action: 'refuse';
+    reasonCode: string;
+    warning: string;
+    nextAction: string;
+} | {
+    /**
+     * Automatic signal without binding/evidence — no LLM, no diagnostic
+     * task. `legacy` still carries the derived (empty-evidence) submission
+     * shape so host funnels can keep their observability projection via
+     * the bridge's empty-evidence short-circuit (SPEC §12.2.1/§12.2.2).
+     */
+    action: 'observation_only';
+    reasonCode: string;
+    note: string;
+    legacy: LegacyPainSubmission;
+    painIngress: PainIngressV1Payload;
+};
+/**
+ * Decide the pre-LLM action for a validated report, per SPEC §8.2. Pure —
+ * no I/O, no persistence, no identity minting.
+ */
+export declare function evaluatePainIngress(report: PainIngressReport): PainIngressDecision;
+//# sourceMappingURL=pain-ingress.d.ts.map

package/dist/runtime-v2/pain-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-ingress.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-ingress.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EACV,oBAAoB,EACpB,iBAAiB,EAEjB,oBAAoB,EACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,EAC7B,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAChC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,0EAA0E;IAC1E,WAAW,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,SAAS,CAAA;CAAE,GACjI;IACE,2FAA2F;IAC3F,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,WAAW,EAAE,oBAAoB,CAAC;CACnC,GACD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7E;IACE;;;;;OAKG;IACH,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,oBAAoB,CAAC;IAC7B,WAAW,EAAE,oBAAoB,CAAC;CACnC,CAAC;AAuDN;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG,mBAAmB,CAkFlF"}