@principles/core 1.274.4 → 1.275.1

package/dist/runtime-v2/internalization/repair-replay-resolver.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Repair Replay Resolver — PRI-634 PR-A (SPEC Slice B, §23–§30).
+ *
+ * Resolves the deterministic replay evidence a repair round needs, BY
+ * REFERENCE, from the one durable authority: the source Evaluator artifact's
+ * runtime-owned `adversarialResult`. The resolved RepairReplayContext exists
+ * only in prompt context — it is never persisted, never a second fact store,
+ * and RepairPayload stays a bounded control payload.
+ *
+ * Pipeline:
+ *   RepairPayload.sourceEvaluatorTaskId
+ *     → evaluator task's durable completionIntent.sourceRunId (deterministic
+ *       artifact identity: pi-art-<taskId>-<runId>)
+ *     → PiArtifactStore.getArtifactById (fallback: listBySourceTaskId when
+ *       the intent is absent — exactly-one rule, otherwise fail loud)
+ *     → runtime-validate contentJson.adversarialResult (rc-1/rc-4)
+ *     → normalize legacy actualDecision=<errorType> representation (SPEC §21)
+ *     → partition trace failures / system failures / global violations
+ *     → bounded deterministic stratified selection (SPEC §30)
+ *
+ * Trust boundary: artifact contentJson is durable-but-untrusted at read time.
+ * Every field access uses Object.hasOwn (rc-5) and typeof/Array.isArray
+ * guards (rc-4) — no `as` casts. Missing or ambiguous evidence fails loud
+ * with a structured reason (rc-3/rc-9) so the caller can refuse a blind
+ * repair retry (SPEC §27).
+ */
+import type { TaskRecord } from '../task-status.js';
+import type { PIArtifactStore } from './pi-artifact.js';
+/**
+ * Repair-prompt budget cap for replay evidence (SPEC §29): at most this many
+ * failure entries enter the Artificer repair prompt. 16 entries × ~30 tokens
+ * stays comfortably inside the existing prompt budget.
+ */
+export declare const MAX_REPLAY_FAILURES_IN_REPAIR = 16;
+export interface ReplayFailureEvidence {
+    readonly caseId: string;
+    readonly attackType?: string;
+    readonly expectedDecision?: string;
+    /** Real decision the rule returned; absent for timeout/throw failures. */
+    readonly actualDecision?: string;
+    readonly errorType: string;
+    readonly message?: string;
+}
+export interface RepairReplayContext {
+    readonly sourceEvaluatorTaskId: string;
+    readonly sourceEvaluatorArtifactId: string;
+    /** True — the presence of a runtime-owned adversarialResult means replay ran. */
+    readonly ran: boolean;
+    readonly passed: boolean;
+    /** Total durable failures (pre-selection). */
+    readonly failedCaseCount: number;
+    /** Selected trace-case failures (bounded, mismatch-first stratified). */
+    readonly traceFailures: readonly ReplayFailureEvidence[];
+    /** Selected system-sentinel failures (bounded; excludes forbidden patterns). */
+    readonly systemFailures: readonly ReplayFailureEvidence[];
+    /** Selected forbidden-pattern violations (bounded, shared budget). */
+    readonly globalViolations: readonly string[];
+    /** Total durable forbidden-pattern violations (pre-selection). */
+    readonly globalViolationCount: number;
+    /** True when bounded selection omitted any durable failure or violation. */
+    readonly truncated: boolean;
+}
+export type RepairReplayResolutionFailureReason = 'task_missing' | 'artifact_missing' | 'artifact_ambiguous' | 'adversarial_result_missing' | 'adversarial_result_invalid';
+export type RepairReplayResolution = {
+    readonly ok: true;
+    readonly context: RepairReplayContext;
+} | {
+    readonly ok: false;
+    readonly reason: RepairReplayResolutionFailureReason;
+    readonly detail: string;
+};
+export interface RepairReplayResolverDeps {
+    readonly artifactStore: Pick<PIArtifactStore, 'getArtifactById' | 'listBySourceTaskId'>;
+    readonly getTask: (taskId: string) => Promise<TaskRecord | null>;
+}
+/**
+ * Bounded deterministic stratified selection (SPEC §30 as tightened by review
+ * 2026-09-02). Trace failures, system failures, and global violations share
+ * ONE capacity budget — no evidence class can bypass the prompt bound:
+ *
+ *   1. system failure representatives (stable order);
+ *   2. one global-violation representative for the whole violation group;
+ *   3. true decision mismatches FIRST by expected axis — at least one
+ *      expected=allow, one expected=block, one expected=propose_correction
+ *      representative each (when present) — so low-value runtime failures can
+ *      never evict every behavioral mismatch from the prompt;
+ *   4. remaining errorType × expectedDecision group representatives
+ *      (stable first-occurrence order, mismatch-preferring);
+ *   5. stable-order fill over trace → system → remaining violations;
+ *   6. truncated=true when anything was omitted.
+ */
+export declare function selectBoundedReplayFailures(params: {
+    traceFailures: readonly ReplayFailureEvidence[];
+    systemFailures: readonly ReplayFailureEvidence[];
+    globalViolations: readonly string[];
+    capacity: number;
+}): {
+    readonly selectedTrace: readonly ReplayFailureEvidence[];
+    readonly selectedSystem: readonly ReplayFailureEvidence[];
+    readonly selectedGlobalViolations: readonly string[];
+    readonly truncated: boolean;
+};
+/**
+ * Resolve the bounded, normalized replay-evidence context for a repair round.
+ * Pure read + transform: no writes, no telemetry side effects — callers own
+ * observability.
+ */
+export declare function resolveRepairReplayContext(params: {
+    readonly sourceEvaluatorTaskId: string;
+    readonly deps: RepairReplayResolverDeps;
+}): Promise<RepairReplayResolution>;
+//# sourceMappingURL=repair-replay-resolver.d.ts.map

package/dist/runtime-v2/internalization/repair-replay-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-replay-resolver.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/repair-replay-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAyBxD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzD,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,MAAM,mCAAmC,GAC3C,cAAc,GACd,kBAAkB,GAClB,oBAAoB,GACpB,4BAA4B,GAC5B,4BAA4B,CAAC;AAEjC,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GAC5D;IACA,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEJ,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,oBAAoB,CAAC,CAAC;IACxF,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAClE;AAwED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAChD,cAAc,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG;IACF,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC1D,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,CA2EA;AAiED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;CACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAmFlC"}

package/dist/runtime-v2/internalization/repair-replay-resolver.js

@@ -0,0 +1,332 @@
+import { hydratePITaskRecord } from './pitask-metadata.js';
+/** Sandbox error enums that legacy artifacts stored inside actualDecision. */
+const LEGACY_SANDBOX_ERROR_TYPES = new Set([
+    'forbidden_pattern',
+    'syntax_error',
+    'runtime_error',
+    'timeout',
+    'validation_failed',
+    'unknown',
+]);
+/** Real decisions a rule can return — never valid errorType values. */
+const RULEHOST_DECISIONS = new Set([
+    'allow',
+    'block',
+    'requireApproval',
+    'auto_correct',
+]);
+/** System sentinel prefix/suffix convention (SPEC §17): `__name__`. */
+function isSystemSentinelCaseId(caseId) {
+    return caseId.startsWith('__') && caseId.endsWith('__') && caseId.length > 4;
+}
+/**
+ * Repair-prompt budget cap for replay evidence (SPEC §29): at most this many
+ * failure entries enter the Artificer repair prompt. 16 entries × ~30 tokens
+ * stays comfortably inside the existing prompt budget.
+ */
+export const MAX_REPLAY_FAILURES_IN_REPAIR = 16;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function optionalNonEmptyString(value) {
+    return typeof value === 'string' && value.trim() !== '' ? value : undefined;
+}
+/**
+ * Normalize one durable failed-case entry (rc-4: element-level validation).
+ *
+ * Legacy representation (pre PR-A): `actualDecision` carries a sandbox error
+ * enum and no `errorType` exists → errorType moves over, actualDecision is
+ * dropped (SPEC §21 — readers normalize, no migration).
+ *
+ * Current representation: `errorType` is authoritative; `actualDecision`
+ * appears only when a real decision mismatched and must not be an error enum.
+ * Entries that fail structural validation are invalid — the caller fails
+ * loud rather than silently dropping evidence (rc-3).
+ */
+/** Repair-prompt budget cap for a single failure message (SPEC §23). */
+const MAX_EVIDENCE_MESSAGE_LENGTH = 300;
+function boundMessage(message) {
+    return message.length > MAX_EVIDENCE_MESSAGE_LENGTH
+        ? `${message.slice(0, MAX_EVIDENCE_MESSAGE_LENGTH)}…`
+        : message;
+}
+function normalizeFailedCaseEntry(entry) {
+    if (!isRecord(entry))
+        return null;
+    const caseId = optionalNonEmptyString(entry.caseId);
+    if (caseId === undefined)
+        return null;
+    const rawErrorType = optionalNonEmptyString(entry.errorType);
+    const rawActual = optionalNonEmptyString(entry.actualDecision);
+    let errorType = rawErrorType;
+    let actualDecision = rawActual;
+    if (errorType === undefined && rawActual !== undefined) {
+        if (LEGACY_SANDBOX_ERROR_TYPES.has(rawActual)) {
+            // Legacy drift: actualDecision held the error classification.
+            errorType = rawActual;
+            actualDecision = undefined;
+        }
+        else if (RULEHOST_DECISIONS.has(rawActual)) {
+            // Legacy decision-mismatch entry: the mismatch was a validation failure.
+            errorType = 'validation_failed';
+        }
+        else {
+            errorType = 'unknown';
+        }
+    }
+    if (errorType === undefined)
+        errorType = 'unknown';
+    // Defense-in-depth on current-shape entries: an errorType value inside
+    // actualDecision is always reclassification drift, never a real decision.
+    if (actualDecision !== undefined && LEGACY_SANDBOX_ERROR_TYPES.has(actualDecision)) {
+        actualDecision = undefined;
+    }
+    const rationale = optionalNonEmptyString(entry.rationale);
+    const message = optionalNonEmptyString(entry.message) ?? rationale;
+    return {
+        caseId,
+        attackType: optionalNonEmptyString(entry.attackType),
+        expectedDecision: optionalNonEmptyString(entry.expectedDecision),
+        ...(actualDecision !== undefined ? { actualDecision } : {}),
+        errorType,
+        ...(message !== undefined ? { message: boundMessage(message) } : {}),
+    };
+}
+/**
+ * Bounded deterministic stratified selection (SPEC §30 as tightened by review
+ * 2026-09-02). Trace failures, system failures, and global violations share
+ * ONE capacity budget — no evidence class can bypass the prompt bound:
+ *
+ *   1. system failure representatives (stable order);
+ *   2. one global-violation representative for the whole violation group;
+ *   3. true decision mismatches FIRST by expected axis — at least one
+ *      expected=allow, one expected=block, one expected=propose_correction
+ *      representative each (when present) — so low-value runtime failures can
+ *      never evict every behavioral mismatch from the prompt;
+ *   4. remaining errorType × expectedDecision group representatives
+ *      (stable first-occurrence order, mismatch-preferring);
+ *   5. stable-order fill over trace → system → remaining violations;
+ *   6. truncated=true when anything was omitted.
+ */
+export function selectBoundedReplayFailures(params) {
+    const capacity = Math.max(0, params.capacity);
+    let remaining = capacity;
+    const chosenFailures = new Set();
+    const chosenViolations = new Set();
+    // Selected failures are recorded in SELECTION PRIORITY order so the repair
+    // prompt renders behavioral mismatches before raw structural errors.
+    const traceIdentity = new Set(params.traceFailures);
+    const orderedSelected = [];
+    const takeFailure = (failure) => {
+        if (remaining <= 0 || chosenFailures.has(failure))
+            return;
+        chosenFailures.add(failure);
+        orderedSelected.push(failure);
+        remaining -= 1;
+    };
+    const takeViolation = (violation) => {
+        if (remaining <= 0 || chosenViolations.has(violation))
+            return;
+        chosenViolations.add(violation);
+        remaining -= 1;
+    };
+    // 1. system representatives first.
+    for (const systemFailure of params.systemFailures) {
+        if (remaining <= 0)
+            break;
+        takeFailure(systemFailure);
+    }
+    // 2. one global-violation representative.
+    const [firstViolation] = params.globalViolations;
+    if (firstViolation !== undefined)
+        takeViolation(firstViolation);
+    // 3. decision mismatches by expected axis (canonical decision order).
+    const mismatchByExpected = new Map();
+    for (const failure of params.traceFailures) {
+        if (failure.actualDecision === undefined)
+            continue;
+        const key = failure.expectedDecision ?? 'unknown';
+        if (!mismatchByExpected.has(key))
+            mismatchByExpected.set(key, failure);
+    }
+    for (const expectedKey of ['allow', 'block', 'propose_correction']) {
+        if (remaining <= 0)
+            break;
+        const representative = mismatchByExpected.get(expectedKey);
+        if (representative !== undefined)
+            takeFailure(representative);
+    }
+    // 4. remaining group representatives (mismatch-preferring, stable order).
+    const groups = new Map();
+    for (const failure of params.traceFailures) {
+        const key = `${failure.errorType}×${failure.expectedDecision ?? 'unknown'}`;
+        const existing = groups.get(key);
+        if (existing === undefined || (existing.actualDecision === undefined && failure.actualDecision !== undefined)) {
+            groups.set(key, failure);
+        }
+    }
+    for (const representative of groups.values()) {
+        if (remaining <= 0)
+            break;
+        takeFailure(representative);
+    }
+    // 5. stable-order fill: trace → system → remaining violations.
+    for (const failure of [...params.traceFailures, ...params.systemFailures]) {
+        if (remaining <= 0)
+            break;
+        takeFailure(failure);
+    }
+    for (const violation of params.globalViolations) {
+        if (remaining <= 0)
+            break;
+        takeViolation(violation);
+    }
+    const total = params.traceFailures.length + params.systemFailures.length + params.globalViolations.length;
+    const selectedCount = chosenFailures.size + chosenViolations.size;
+    return {
+        selectedTrace: orderedSelected.filter((f) => traceIdentity.has(f)),
+        selectedSystem: orderedSelected.filter((f) => !traceIdentity.has(f)),
+        selectedGlobalViolations: params.globalViolations.filter((v) => chosenViolations.has(v)),
+        truncated: selectedCount < total,
+    };
+}
+/**
+ * Resolve the authoritative Evaluator artifact for a repair round.
+ *
+ * Selection authority (SPEC §26, tightened by review 2026-09-02): the
+ * evaluator task's durable completionIntent records the exact run that
+ * produced the verdict, and the artifact ID is deterministically
+ * `pi-art-<taskId>-<runId>`. When the intent exists, that artifact IS the
+ * authority — if it is missing we FAIL LOUD; another run's artifact may never
+ * become a fallback authority. Only when no intent exists (legacy tasks) does
+ * the exactly-one list rule apply: zero or many → fail loud, never a
+ * positional pick.
+ */
+async function resolveAuthoritativeEvaluatorArtifact(sourceEvaluatorTaskId, deps) {
+    const task = await deps.getTask(sourceEvaluatorTaskId);
+    if (!task) {
+        return { ok: false, reason: 'task_missing', detail: `evaluator task ${sourceEvaluatorTaskId} not found` };
+    }
+    const piTask = hydratePITaskRecord(task);
+    const intentRunId = piTask?.completionIntent?.sourceRunId;
+    if (typeof intentRunId === 'string' && intentRunId.trim() !== '') {
+        const artifactId = `pi-art-${sourceEvaluatorTaskId}-${intentRunId}`;
+        const artifact = await deps.artifactStore.getArtifactById(artifactId);
+        if (artifact) {
+            return { ok: true, artifactId: artifact.artifactId, contentJson: artifact.contentJson };
+        }
+        // The durable authority is KNOWN — a different run's artifact must never
+        // be silently promoted into its place (P1 review 2026-09-02).
+        return {
+            ok: false,
+            reason: 'artifact_missing',
+            detail: `completionIntent names run ${intentRunId} as authoritative but artifact ${artifactId} does not exist — refusing cross-run fallback`,
+        };
+    }
+    const artifacts = (await deps.artifactStore.listBySourceTaskId(sourceEvaluatorTaskId))
+        .filter((a) => a.artifactKind === 'principle');
+    if (artifacts.length === 0) {
+        return {
+            ok: false,
+            reason: 'artifact_missing',
+            detail: `no principle artifact for evaluator task ${sourceEvaluatorTaskId}`,
+        };
+    }
+    if (artifacts.length > 1) {
+        return {
+            ok: false,
+            reason: 'artifact_ambiguous',
+            detail: `evaluator task ${sourceEvaluatorTaskId} has ${artifacts.length} principle artifacts and no resolvable completion intent — authority is ambiguous: ${artifacts.map((a) => a.artifactId).sort().join(', ')}`,
+        };
+    }
+    const [only] = artifacts;
+    if (!only) {
+        return { ok: false, reason: 'artifact_missing', detail: `no principle artifact for evaluator task ${sourceEvaluatorTaskId}` };
+    }
+    return { ok: true, artifactId: only.artifactId, contentJson: only.contentJson };
+}
+/**
+ * Resolve the bounded, normalized replay-evidence context for a repair round.
+ * Pure read + transform: no writes, no telemetry side effects — callers own
+ * observability.
+ */
+export async function resolveRepairReplayContext(params) {
+    const { sourceEvaluatorTaskId, deps } = params;
+    const artifactResolution = await resolveAuthoritativeEvaluatorArtifact(sourceEvaluatorTaskId, deps);
+    if (!artifactResolution.ok) {
+        return artifactResolution;
+    }
+    const { artifactId, contentJson } = artifactResolution;
+    let parsed;
+    try {
+        parsed = JSON.parse(contentJson);
+    }
+    catch {
+        return { ok: false, reason: 'adversarial_result_invalid', detail: `evaluator artifact ${artifactId} contentJson is unparseable` };
+    }
+    if (!isRecord(parsed) || !Object.hasOwn(parsed, 'adversarialResult')) {
+        return { ok: false, reason: 'adversarial_result_missing', detail: `evaluator artifact ${artifactId} carries no adversarialResult` };
+    }
+    const { adversarialResult } = parsed;
+    if (!isRecord(adversarialResult) || typeof adversarialResult.passed !== 'boolean') {
+        return { ok: false, reason: 'adversarial_result_invalid', detail: `evaluator artifact ${artifactId} adversarialResult is malformed (passed must be a boolean)` };
+    }
+    if (!Object.hasOwn(adversarialResult, 'failedCases') || !Array.isArray(adversarialResult.failedCases)) {
+        return { ok: false, reason: 'adversarial_result_invalid', detail: `evaluator artifact ${artifactId} adversarialResult.failedCases is missing or not an array` };
+    }
+    // rc-4: validate every element; any structurally invalid entry fails loud —
+    // dropping evidence silently would re-create the blind-retry hole.
+    const normalized = [];
+    for (const [index, entry] of adversarialResult.failedCases.entries()) {
+        const normalizedEntry = normalizeFailedCaseEntry(entry);
+        if (normalizedEntry === null) {
+            return {
+                ok: false,
+                reason: 'adversarial_result_invalid',
+                detail: `evaluator artifact ${artifactId} adversarialResult.failedCases[${index}] is structurally invalid`,
+            };
+        }
+        normalized.push(normalizedEntry);
+    }
+    // Partition by identity (SPEC §17/§18): real trace IDs vs system sentinels
+    // vs code-level global violations. Forbidden-pattern entries are counted
+    // ONLY as global violations — never also as system failures (review P2
+    // 2026-09-02: no double-count in the prompt) — and share the bounded
+    // selection budget with everything else.
+    const traceFailures = [];
+    const systemFailures = [];
+    const globalViolations = [];
+    for (const failure of normalized) {
+        if (failure.caseId === '__forbidden_pattern__') {
+            globalViolations.push(failure.message ?? `forbidden pattern (${failure.errorType})`);
+            continue;
+        }
+        if (isSystemSentinelCaseId(failure.caseId)) {
+            systemFailures.push(failure);
+            continue;
+        }
+        traceFailures.push(failure);
+    }
+    const selection = selectBoundedReplayFailures({
+        traceFailures,
+        systemFailures,
+        globalViolations,
+        capacity: MAX_REPLAY_FAILURES_IN_REPAIR,
+    });
+    return {
+        ok: true,
+        context: {
+            sourceEvaluatorTaskId,
+            sourceEvaluatorArtifactId: artifactId,
+            ran: true,
+            passed: adversarialResult.passed,
+            failedCaseCount: normalized.length,
+            traceFailures: selection.selectedTrace,
+            systemFailures: selection.selectedSystem,
+            globalViolations: selection.selectedGlobalViolations,
+            globalViolationCount: globalViolations.length,
+            truncated: selection.truncated,
+        },
+    };
+}
+//# sourceMappingURL=repair-replay-resolver.js.map

package/dist/runtime-v2/internalization/repair-replay-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-replay-resolver.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/repair-replay-resolver.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG3D,8EAA8E;AAC9E,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,mBAAmB;IACnB,cAAc;IACd,eAAe;IACf,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,OAAO;IACP,OAAO;IACP,iBAAiB;IACjB,cAAc;CACf,CAAC,CAAC;AAEH,uEAAuE;AACvE,SAAS,sBAAsB,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAoDhD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,wEAAwE;AACxE,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,OAAO,CAAC,MAAM,GAAG,2BAA2B;QACjD,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,GAAG;QACrD,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE/D,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,cAAc,GAAG,SAAS,CAAC;IAC/B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,8DAA8D;YAC9D,SAAS,GAAG,SAAS,CAAC;YACtB,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;aAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,yEAAyE;YACzE,SAAS,GAAG,mBAAmB,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,SAAS;QAAE,SAAS,GAAG,SAAS,CAAC;IACnD,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,cAAc,KAAK,SAAS,IAAI,0BAA0B,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACnF,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACnE,OAAO;QACL,MAAM;QACN,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC;QACpD,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS;QACT,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAK3C;IAMC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,eAAe,GAA4B,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,CAAC,OAA8B,EAAQ,EAAE;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAC1D,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,SAAS,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAQ,EAAE;QAChD,IAAI,SAAS,IAAI,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC9D,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,SAAS,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,mCAAmC;IACnC,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAClD,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,WAAW,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,0CAA0C;IAC1C,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,IAAI,cAAc,KAAK,SAAS;QAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAEhE,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,SAAS;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,IAAI,SAAS,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACnE,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,cAAc,KAAK,SAAS;YAAE,WAAW,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,EAAE,CAAC;YAC9G,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,WAAW,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IAED,+DAA+D;IAC/D,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1E,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,WAAW,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAChD,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;IAC1G,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IAClE,OAAO;QACL,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpE,wBAAwB,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxF,SAAS,EAAE,aAAa,GAAG,KAAK;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,qCAAqC,CAClD,qBAA6B,EAC7B,IAA8B;IAK9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,qBAAqB,YAAY,EAAE,CAAC;IAC5G,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC;IAC1D,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,UAAU,qBAAqB,IAAI,WAAW,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1F,CAAC;QACD,yEAAyE;QACzE,8DAA8D;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,8BAA8B,WAAW,kCAAkC,UAAU,+CAA+C;SAC7I,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;SACnF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;IACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,4CAA4C,qBAAqB,EAAE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,kBAAkB,qBAAqB,QAAQ,SAAS,CAAC,MAAM,sFAAsF,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACpN,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,4CAA4C,qBAAqB,EAAE,EAAE,CAAC;IAChI,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAGhD;IACC,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAE/C,MAAM,kBAAkB,GAAG,MAAM,qCAAqC,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACpG,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;IAEvD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,UAAU,6BAA6B,EAAE,CAAC;IACpI,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,UAAU,+BAA+B,EAAE,CAAC;IACtI,CAAC;IACD,MAAM,EAAC,iBAAiB,EAAC,GAAG,MAAM,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,OAAO,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,UAAU,4DAA4D,EAAE,CAAC;IACnK,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,sBAAsB,UAAU,2DAA2D,EAAE,CAAC;IAClK,CAAC;IAED,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACrE,MAAM,eAAe,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,4BAA4B;gBACpC,MAAM,EAAE,sBAAsB,UAAU,kCAAkC,KAAK,2BAA2B;aAC3G,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,yCAAyC;IACzC,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,MAAM,cAAc,GAA4B,EAAE,CAAC;IACnD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC/C,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,sBAAsB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,2BAA2B,CAAC;QAC5C,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,QAAQ,EAAE,6BAA6B;KACxC,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,qBAAqB;YACrB,yBAAyB,EAAE,UAAU;YACrC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,iBAAiB,CAAC,MAAM;YAChC,eAAe,EAAE,UAAU,CAAC,MAAM;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,gBAAgB,EAAE,SAAS,CAAC,wBAAwB;YACpD,oBAAoB,EAAE,gBAAgB,CAAC,MAAM;YAC7C,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime-v2/pain-ingress-payload.d.ts

@@ -0,0 +1,207 @@
+/**
+ * Pain Ingress shared invariants + persisted payload contract — PRI-642.
+ *
+ * This module is THE single source for:
+ *  - the report field parsers (origin / correlation / evidence / score)
+ *    shared by write-time evaluation and persisted-payload re-entry;
+ *  - the origin/correlation invariant (`validateOriginCorrelationInvariant`)
+ *    — the valid-combination rules of SPEC §8.2 that must never diverge
+ *    between write time and re-entry;
+ *  - the sentinel session constant (frozen decision #4);
+ *  - the versioned `painIngress.v1` persisted namespace (SPEC §9) written
+ *    by PainSignalBridge.buildDiagnosticJson beside the legacy top-level
+ *    fields, and re-validated by executePendingDiagnosis / retry paths.
+ *
+ * INVARIANT EQUIVALENCE (review blocker 2): re-entry validation is NOT
+ * weaker than write-time validation. parsePainIngressV1Payload shares the
+ * field parsers and the invariant with evaluatePainIngress
+ * (pain-ingress.ts), so every state illegal at write time — sentinel
+ * session ids, empty "available" evidence, impossible origin/correlation
+ * combinations — is also rejected on re-entry.
+ *
+ * Legacy compatibility (SPEC §9): payloads WITHOUT a painIngress.v1 block
+ * keep the tolerant legacy normalization branch in pain-signal-bridge.ts;
+ * this strictness applies only to payloads CLAIMING the v1 namespace.
+ *
+ * Pure module — no I/O. @principles/host-runtime and other adapters depend
+ * on core; core depends on no adapter.
+ */
+import type { PainProvenance } from './admission-gate.js';
+export declare const PAIN_INGRESS_PAYLOAD_VERSION = "v1";
+export type PainIngressOriginV1 = {
+    kind: 'owner_manual';
+    channel: 'openclaw_command' | 'cli_explicit_session' | 'external_cli_unbound';
+} | {
+    kind: 'automatic_hook';
+    source: string;
+};
+export type PainIngressCorrelationV1 = {
+    status: 'bound';
+    hostKind: 'openclaw';
+    sessionId: string;
+    traceId?: string;
+} | {
+    status: 'bound';
+    hostKind: 'codex';
+    rootSessionId: string;
+    rolloutIdentity: string;
+    logicalObservationKey: string;
+    hostTurnId: string;
+    traceId?: string;
+} | {
+    status: 'unbound';
+    reason: 'external_cli' | 'missing_host_session';
+};
+export type PainIngressEvidenceClassV1 = {
+    status: 'available';
+    entryCount: number;
+} | {
+    status: 'unavailable';
+    reason: 'trajectory_unavailable' | 'session_not_found' | 'empty_trajectory' | 'evidence_read_failed' | 'evidence_invalid'
+    /** Unbound Owner reports never consult a trajectory — no evidence is sought. */
+     | 'not_applicable_unbound';
+};
+export type PainEvidenceUnavailableReason = 'trajectory_unavailable' | 'session_not_found' | 'empty_trajectory' | 'evidence_read_failed' | 'evidence_invalid'
+/** Unbound Owner reports never consult a trajectory — no evidence is sought. */
+ | 'not_applicable_unbound';
+export interface IngressEvidenceEntry {
+    kind: 'behavior_trace' | 'system_event';
+    sourceRef: string;
+    note: string;
+}
+export type PainEvidenceBundle = {
+    status: 'available';
+    entries: readonly [IngressEvidenceEntry, ...IngressEvidenceEntry[]];
+} | {
+    status: 'unavailable';
+    reason: PainEvidenceUnavailableReason;
+};
+export type PainOrigin = PainIngressOriginV1;
+export type PainCorrelation = PainIngressCorrelationV1;
+export interface PainIngressReport {
+    identity: {
+        kind: 'manual_pain_id';
+        painId: string;
+    } | {
+        kind: 'host_observation';
+        observationId: string;
+    };
+    painType: 'tool_failure' | 'subagent_error' | 'user_frustration';
+    source: string;
+    reason: string;
+    score?: number;
+    origin: PainOrigin;
+    correlation: PainCorrelation;
+    evidence: PainEvidenceBundle;
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Sentinel session ids are never real correlations (frozen decision #4).
+ * Import this constant instead of re-declaring the set in another module.
+ */
+export declare const SENTINEL_SESSION_IDS: ReadonlySet<string>;
+export declare function isSentinelSessionId(value: string): boolean;
+export declare function parseOrigin(value: unknown): PainOrigin | null;
+/**
+ * THE correlation parser — used by report validation (write time) and the
+ * persisted-payload validator (re-entry) so sentinel rejection and lineage
+ * completeness cannot drift between the two.
+ */
+export declare function parseCorrelation(value: unknown): {
+    value: PainCorrelation;
+    error?: undefined;
+} | {
+    value?: undefined;
+    error: string;
+};
+export declare function parseEvidence(value: unknown): {
+    value: PainEvidenceBundle;
+    error?: undefined;
+} | {
+    value?: undefined;
+    error: string;
+};
+/** rc-3/rc-9: a present-but-invalid score is rejected, not silently dropped. */
+export declare function parseScore(value: unknown): {
+    score: number | undefined;
+    scoreInvalid?: undefined;
+} | {
+    score: undefined;
+    scoreInvalid: true;
+};
+export type PainIngressParseResult = {
+    ok: true;
+    report: PainIngressReport;
+} | {
+    ok: false;
+    reasonCode: string;
+    message: string;
+};
+/**
+ * Validate an untrusted report (parsed JSON / host payload) into a typed
+ * PainIngressReport. Fails loud with a structured reasonCode (rc-3); uses
+ * the SAME field parsers and invariant as the persisted-payload validator
+ * (rc-1/rc-2/rc-3/rc-4).
+ */
+export declare function parsePainIngressReport(input: unknown): PainIngressParseResult;
+/**
+ * Origin/correlation combinations the matrix (SPEC §8.2) declares invalid.
+ * Shared by evaluatePainIngress (write time) and parsePainIngressV1Payload
+ * (re-entry) so an illegal state can never become legal across a
+ * persistence round trip. Returns a reasonCode string when invalid, null
+ * when the combination is valid.
+ */
+export declare function validateOriginCorrelationInvariant(origin: PainOrigin, correlation: PainCorrelation): string | null;
+/**
+ * The persisted v1 block. Evidence ENTRIES are intentionally not duplicated
+ * here — they remain in the legacy top-level `evidence` field; this block
+ * records their validated classification only (SPEC §9: one versioned
+ * namespace for the rev-2 facts, legacy fields stay authoritative for
+ * their own consumers).
+ */
+export interface PainIngressV1Payload {
+    version: typeof PAIN_INGRESS_PAYLOAD_VERSION;
+    origin: PainIngressOriginV1;
+    correlation: PainIngressCorrelationV1;
+    evidenceClass: PainIngressEvidenceClassV1;
+}
+export type PainIngressV1ParseResult = {
+    ok: true;
+    payload: PainIngressV1Payload;
+} | {
+    ok: false;
+    reasonCode: string;
+};
+/**
+ * Runtime validation of an untrusted persisted painIngress block
+ * (rc-1/rc-2/rc-3). Shares parseOrigin/parseCorrelation and the
+ * origin/correlation invariant with the write-time evaluator, so sentinel
+ * sessions, incomplete Codex lineage and impossible combinations are
+ * rejected identically at write time and on re-entry.
+ */
+export declare function parsePainIngressV1Payload(value: unknown): PainIngressV1ParseResult;
+/**
+ * Derive the legacy provenance from validated rev-2 facts (SPEC §8.3).
+ * Adapters do not supply provenance independently; this is the one
+ * derivation shared by writers and re-entry validation.
+ */
+export declare function deriveProvenanceFromIngressFacts(origin: PainIngressOriginV1, correlation: PainIngressCorrelationV1): PainProvenance;
+/**
+ * Re-entry consistency check between the nested v1 block and the legacy
+ * top-level fields produced by the same builder (SPEC §9, §12.2.4).
+ * Returns null when consistent; a reasonCode string otherwise.
+ *
+ * Coverage (review blocker 2 closure): every dimension of the
+ * nested/top-level contract is asserted — provenance, host session id,
+ * evidence count, evidence availability class, and host binding
+ * state. A v1 block with unavailable evidence cannot coexist with
+ * legacy top-level entries; an unbound v1 block cannot coexist with
+ * a legacy sessionIdHint.
+ */
+export declare function checkIngressTopLevelConsistency(input: {
+    payload: PainIngressV1Payload;
+    topLevelProvenance: unknown;
+    topLevelSessionIdHint: unknown;
+    topLevelEvidenceCount: number;
+}): string | null;
+//# sourceMappingURL=pain-ingress-payload.d.ts.map