@principles/core 1.277.0 → 1.277.2

package/dist/runtime-v2/internalization/rule-host-input-builder.d.ts

@@ -19,6 +19,7 @@
  *   6. Empty/null       (null / '' / undefined, /project)
  */
 import type { RuleHostInput } from './rule-host-contracts.js';
+import type { CanonicalKind } from './rule-context-v2.js';
 /**
  * Normalize a file path to a project-relative POSIX-style path.
  *
@@ -37,6 +38,15 @@ export interface ExtractFilePathOptions {
     isBashTool?: boolean;
     /** The tool name (used for synthetic path generation). */
     toolName?: string;
+    /**
+     * PRI-634-F: canonical kind from the ToolSemanticRegistry. When provided,
+     * unspecified isBashTool/isWriteTool hints are DERIVED from it
+     * (execute→isBashTool, write→isWriteTool) so extraction behavior is a pure
+     * function of (toolName, params, projectDir, registry) — identical in
+     * replay and production. Explicit hints keep precedence for callers that
+     * classify with their own host dispatch surface.
+     */
+    canonicalKind?: CanonicalKind;
 }
 /**
  * Extract the file path from tool call params, using the same heuristic
@@ -51,12 +61,23 @@ export interface ExtractFilePathOptions {
  */
 export declare function extractFilePathFromParams(params: Record<string, unknown>, options?: ExtractFilePathOptions): string | null;
 export type BuildRuleHostActionOptions = ExtractFilePathOptions;
+/**
+ * PRI-634-F Phase 2: derive extraction hints from a canonical kind.
+ * execute → bash-tool extraction; write → write-tool synthetic path; all
+ * other kinds → no tool-specific extraction. Pure, total.
+ */
+export declare function deriveToolHintsFromCanonicalKind(canonicalKind: CanonicalKind): {
+    isBashTool: boolean;
+    isWriteTool: boolean;
+};
 /**
  * Build the `action` field of RuleHostInput — the unified snapshot used by
  * both Golden Trace replay and the production OpenClaw Gate.
  *
  * This function combines file path extraction + path normalization into a
  * single pure call, ensuring both paths produce the same `normalizedPath`.
+ * When `options.canonicalKind` is provided it is echoed onto the action
+ * snapshot and drives hint derivation (see ExtractFilePathOptions).
  */
 export declare function buildRuleHostAction(toolName: string, params: Record<string, unknown>, projectDir: string, options?: BuildRuleHostActionOptions): RuleHostInput['action'];
 //# sourceMappingURL=rule-host-input-builder.d.ts.map

package/dist/runtime-v2/internalization/rule-host-input-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-host-input-builder.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,EAAE,MAAM,GACjB,MAAM,CAqDR;AA8DD,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,GAAE,sBAA2B,GACnC,MAAM,GAAG,IAAI,CA4Bf;AAID,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAEhE;;;;;;GAMG;AAEH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,0BAA+B,GACvC,aAAa,CAAC,QAAQ,CAAC,CAQzB"}
+{"version":3,"file":"rule-host-input-builder.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,EAAE,MAAM,GACjB,MAAM,CAqDR;AA8DD,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,GAAE,sBAA2B,GACnC,MAAM,GAAG,IAAI,CA4Bf;AAID,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,aAAa,EAAE,aAAa,GAC3B;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAK/C;AAYD;;;;;;;;GAQG;AAEH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,0BAA+B,GACvC,aAAa,CAAC,QAAQ,CAAC,CAYzB"}

package/dist/runtime-v2/internalization/rule-host-input-builder.js

@@ -162,21 +162,48 @@ export function extractFilePathFromParams(params, options = {}) {
     }
     return null;
 }
+/**
+ * PRI-634-F Phase 2: derive extraction hints from a canonical kind.
+ * execute → bash-tool extraction; write → write-tool synthetic path; all
+ * other kinds → no tool-specific extraction. Pure, total.
+ */
+export function deriveToolHintsFromCanonicalKind(canonicalKind) {
+    return {
+        isBashTool: canonicalKind === 'execute',
+        isWriteTool: canonicalKind === 'write',
+    };
+}
+function withDerivedHints(options) {
+    if (options.canonicalKind === undefined)
+        return options;
+    const derived = deriveToolHintsFromCanonicalKind(options.canonicalKind);
+    return {
+        ...options,
+        isBashTool: options.isBashTool ?? derived.isBashTool,
+        isWriteTool: options.isWriteTool ?? derived.isWriteTool,
+    };
+}
 /**
  * Build the `action` field of RuleHostInput — the unified snapshot used by
  * both Golden Trace replay and the production OpenClaw Gate.
  *
  * This function combines file path extraction + path normalization into a
  * single pure call, ensuring both paths produce the same `normalizedPath`.
+ * When `options.canonicalKind` is provided it is echoed onto the action
+ * snapshot and drives hint derivation (see ExtractFilePathOptions).
  */
 // eslint-disable-next-line @typescript-eslint/max-params
 export function buildRuleHostAction(toolName, params, projectDir, options = {}) {
-    const filePath = extractFilePathFromParams(params, { ...options, toolName });
+    const effectiveOptions = withDerivedHints(options);
+    const filePath = extractFilePathFromParams(params, { ...effectiveOptions, toolName });
     const normalizedPath = normalizePathPure(filePath, projectDir);
     return {
         toolName,
         normalizedPath,
         paramsSummary: { ...params },
+        ...(effectiveOptions.canonicalKind !== undefined
+            ? { canonicalKind: effectiveOptions.canonicalKind }
+            : {}),
     };
 }
 //# sourceMappingURL=rule-host-input-builder.js.map

package/dist/runtime-v2/internalization/rule-host-input-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule-host-input-builder.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAmC,EACnC,UAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzD,gCAAgC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAElE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,cAAc,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,YAAY,IAAI,eAAe;QAC9C,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,CAAC;IAEZ,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACxC,wCAAwC;QACxC,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAChD,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,EAAU;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEzD,4BAA4B;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OACE,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC3B,SAAS,GAAG,MAAM,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,EACzC,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAExB,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAaD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,OAAO,GAA2B,EAAE;IAEpC,6BAA6B;IAC7B,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;IAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GACjB,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,qEAAqE;YACrE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,OAAO,CAAC,QAAQ,GAAG,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAMD;;;;;;GAMG;AACH,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAA+B,EAC/B,UAAkB,EAClB,OAAO,GAA+B,EAAE;IAExC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/D,OAAO;QACL,QAAQ;QACR,cAAc;QACd,aAAa,EAAE,EAAE,GAAG,MAAM,EAAE;KAC7B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"rule-host-input-builder.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAmC,EACnC,UAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzD,gCAAgC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAElE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,cAAc,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,YAAY,IAAI,eAAe;QAC9C,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,CAAC;IAEZ,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACxC,wCAAwC;QACxC,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAChD,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,EAAU;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEzD,4BAA4B;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OACE,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC3B,SAAS,GAAG,MAAM,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,EACzC,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAExB,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,OAAO,GAA2B,EAAE;IAEpC,6BAA6B;IAC7B,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;IAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GACjB,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,qEAAqE;YACrE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,OAAO,CAAC,QAAQ,GAAG,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC9C,aAA4B;IAE5B,OAAO;QACL,UAAU,EAAE,aAAa,KAAK,SAAS;QACvC,WAAW,EAAE,aAAa,KAAK,OAAO;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA+B;IACvD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxD,MAAM,OAAO,GAAG,gCAAgC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QACpD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;KACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAA+B,EAC/B,UAAkB,EAClB,OAAO,GAA+B,EAAE;IAExC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,GAAG,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/D,OAAO;QACL,QAAQ;QACR,cAAc;QACd,aAAa,EAAE,EAAE,GAAG,MAAM,EAAE;QAC5B,GAAG,CAAC,gBAAgB,CAAC,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,aAAa,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/runtime-v2/internalization/rule-reliability-validation.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Rule Reliability Validation & Failure Attribution — PRI-634-F Phase 3
+ *
+ * PURPOSE: answer "哪里错 / 为什么 / 谁负责" for rule reliability failures
+ * (SPEC §8) instead of free-text "replay failed". Two pure capabilities:
+ *
+ *   1. validateRuleReliability — deterministic pre-gate check (SPEC §7/§9 V1):
+ *      every declared tool (affectedTools + goldenTraceCases toolName) must be
+ *      known to the ToolSemanticRegistry, otherwise adapter/tool_alias_unknown.
+ *
+ *   2. classifyReplayFailure — map a RefinerRuleHostGate outcome to ONE
+ *      FailureLayer with a stable reasonCode, bounded evidence and a next
+ *      action. Routing only — no repair (SPEC §10).
+ *
+ * Layer semantics (SPEC §8):
+ *   rule    — the generated RuleCode itself is defective
+ *   test    — the golden trace material is deficient
+ *   adapter — the tool mapping/host adapter surface is wrong
+ *   runtime — the evaluation infrastructure/environment failed
+ *   unknown — cannot be determined
+ *
+ * Pure logic — zero I/O. No new subsystem, no repair loop.
+ */
+import type { RefinerRuleHostGateDecision } from './refiner-rulehost-gate.js';
+import type { RefinerSandboxResult } from './refiner-sandbox-wrapper.js';
+import type { ToolSemanticRegistry } from './tool-semantic-registry.js';
+export type FailureLayer = 'rule' | 'test' | 'adapter' | 'runtime' | 'unknown';
+export interface RuleReliabilityFailure {
+    readonly layer: FailureLayer;
+    readonly reasonCode: string;
+    /** Bounded human-readable evidence (rc-8: never assume stringify of arbitrary values). */
+    readonly evidence: string;
+    readonly nextAction: string;
+}
+export interface RuleReliabilityValidationInput {
+    /** ArtificerRuleOutput.affectedTools (declared scope of the rule). */
+    readonly affectedTools: readonly string[];
+    /** Tool names used by the rule's goldenTraceCases. */
+    readonly goldenTraceCaseToolNames: readonly string[];
+    /** The registry the production gate resolves tool semantics with. */
+    readonly toolSemantics: ToolSemanticRegistry;
+}
+export interface RuleReliabilityValidationResult {
+    readonly valid: boolean;
+    readonly failure?: RuleReliabilityFailure;
+}
+/**
+ * V1 validation (SPEC §9, revised in R2 per review): every tool name the rule
+ * declares or tests against must be HOST-DISPATCHABLE — resolvable is not
+ * enough. Three verdicts:
+ *
+ *   tool_alias_unknown          — resolves nowhere (not even baseline);
+ *   tool_not_host_dispatchable  — semantically classifiable (baseline generic
+ *                                 vocabulary like `execute_command`, or a
+ *                                 read/search family the host gate never
+ *                                 routes) but NOT declared by the host layer.
+ *                                 A rule matching this name passes replay
+ *                                 against fictional inputs and never fires
+ *                                 in production — reject (SC1).
+ *   tool_registry_host_layer_missing — the registry carries no host
+ *                                 declaration at all; existence cannot be
+ *                                 verified. Configuration defect, fail loud
+ *                                 rather than silently skipping the check.
+ */
+export declare function validateRuleReliability(input: RuleReliabilityValidationInput): RuleReliabilityValidationResult;
+export declare function classifyReplayFailure(decision: Exclude<RefinerRuleHostGateDecision, 'accepted_shadow'>, sandboxResult: RefinerSandboxResult): RuleReliabilityFailure;
+//# sourceMappingURL=rule-reliability-validation.d.ts.map

package/dist/runtime-v2/internalization/rule-reliability-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-reliability-validation.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-reliability-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,2BAA2B,EAAG,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAYD,MAAM,WAAW,8BAA8B;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,sDAAsD;IACtD,QAAQ,CAAC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,qEAAqE;IACrE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,8BAA8B,GACpC,+BAA+B,CA+DjC;AASD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,EACjE,aAAa,EAAE,oBAAoB,GAClC,sBAAsB,CAmExB"}

package/dist/runtime-v2/internalization/rule-reliability-validation.js

@@ -0,0 +1,178 @@
+/**
+ * Rule Reliability Validation & Failure Attribution — PRI-634-F Phase 3
+ *
+ * PURPOSE: answer "哪里错 / 为什么 / 谁负责" for rule reliability failures
+ * (SPEC §8) instead of free-text "replay failed". Two pure capabilities:
+ *
+ *   1. validateRuleReliability — deterministic pre-gate check (SPEC §7/§9 V1):
+ *      every declared tool (affectedTools + goldenTraceCases toolName) must be
+ *      known to the ToolSemanticRegistry, otherwise adapter/tool_alias_unknown.
+ *
+ *   2. classifyReplayFailure — map a RefinerRuleHostGate outcome to ONE
+ *      FailureLayer with a stable reasonCode, bounded evidence and a next
+ *      action. Routing only — no repair (SPEC §10).
+ *
+ * Layer semantics (SPEC §8):
+ *   rule    — the generated RuleCode itself is defective
+ *   test    — the golden trace material is deficient
+ *   adapter — the tool mapping/host adapter surface is wrong
+ *   runtime — the evaluation infrastructure/environment failed
+ *   unknown — cannot be determined
+ *
+ * Pure logic — zero I/O. No new subsystem, no repair loop.
+ */
+const EVIDENCE_MAX_CHARS = 300;
+function boundEvidence(text) {
+    return text.length > EVIDENCE_MAX_CHARS ? `${text.slice(0, EVIDENCE_MAX_CHARS)}…` : text;
+}
+/**
+ * V1 validation (SPEC §9, revised in R2 per review): every tool name the rule
+ * declares or tests against must be HOST-DISPATCHABLE — resolvable is not
+ * enough. Three verdicts:
+ *
+ *   tool_alias_unknown          — resolves nowhere (not even baseline);
+ *   tool_not_host_dispatchable  — semantically classifiable (baseline generic
+ *                                 vocabulary like `execute_command`, or a
+ *                                 read/search family the host gate never
+ *                                 routes) but NOT declared by the host layer.
+ *                                 A rule matching this name passes replay
+ *                                 against fictional inputs and never fires
+ *                                 in production — reject (SC1).
+ *   tool_registry_host_layer_missing — the registry carries no host
+ *                                 declaration at all; existence cannot be
+ *                                 verified. Configuration defect, fail loud
+ *                                 rather than silently skipping the check.
+ */
+export function validateRuleReliability(input) {
+    if (!input.toolSemantics.hasHostLayer) {
+        return {
+            valid: false,
+            failure: {
+                layer: 'adapter',
+                reasonCode: 'tool_registry_host_layer_missing',
+                evidence: 'ToolSemanticRegistry has no host-declared layer — tool existence cannot be verified against the production host',
+                nextAction: 'supply a host-declared registry (host mappings), or run the host once so its declaration is persisted for the workspace',
+            },
+        };
+    }
+    const classify = (tool) => {
+        if (input.toolSemantics.hasHostTool(tool))
+            return 'ok';
+        return input.toolSemantics.lookup(tool) === null ? 'unknown' : 'not_dispatchable';
+    };
+    const unknownAffected = input.affectedTools.filter((tool) => classify(tool) === 'unknown');
+    const notDispatchableAffected = input.affectedTools.filter((tool) => classify(tool) === 'not_dispatchable');
+    if (unknownAffected.length > 0) {
+        return {
+            valid: false,
+            failure: {
+                layer: 'adapter',
+                reasonCode: 'tool_alias_unknown',
+                evidence: boundEvidence(`affectedTools unknown to any tool vocabulary: ${unknownAffected.join(', ')}`),
+                nextAction: 'regenerate the rule using real host tool names (see the host tool semantic declaration)',
+            },
+        };
+    }
+    if (notDispatchableAffected.length > 0) {
+        return {
+            valid: false,
+            failure: {
+                layer: 'adapter',
+                reasonCode: 'tool_not_host_dispatchable',
+                evidence: boundEvidence(`affectedTools semantically classifiable but NOT dispatched by this host (never reach the RuleHost gate): ${notDispatchableAffected.join(', ')}`),
+                nextAction: 'regenerate the rule against host-declared tool names — generic LLM vocabulary and read/search-family names cannot trigger rules in production',
+            },
+        };
+    }
+    const unknownCaseTools = input.goldenTraceCaseToolNames.filter((tool) => classify(tool) === 'unknown');
+    const notDispatchableCaseTools = input.goldenTraceCaseToolNames.filter((tool) => classify(tool) === 'not_dispatchable');
+    if (unknownCaseTools.length > 0 || notDispatchableCaseTools.length > 0) {
+        const parts = [];
+        if (unknownCaseTools.length > 0)
+            parts.push(`unknown: ${unknownCaseTools.join(', ')}`);
+        if (notDispatchableCaseTools.length > 0)
+            parts.push(`not host-dispatchable: ${notDispatchableCaseTools.join(', ')}`);
+        return {
+            valid: false,
+            failure: {
+                layer: 'adapter',
+                reasonCode: unknownCaseTools.length > 0 ? 'tool_alias_unknown' : 'tool_not_host_dispatchable',
+                evidence: boundEvidence(`goldenTraceCases toolName ${parts.join('; ')}`),
+                nextAction: 'regenerate golden trace cases against host-declared tool names so replay exercises inputs production can actually produce',
+            },
+        };
+    }
+    return { valid: true };
+}
+// ---------------------------------------------------------------------------
+// 2. Replay Failure Classification (SPEC §8 / §10 — routing only)
+// ---------------------------------------------------------------------------
+/** Sentinel caseIds produced by infrastructure, never by a trace case. */
+const INFRA_CASE_IDS = new Set(['__sandbox__', '__no_evaluator__', '__compile__', '__return_shape__', '__matched_false_decision__']);
+export function classifyReplayFailure(decision, sandboxResult) {
+    switch (decision) {
+        case 'rejected_no_cases':
+            return {
+                layer: 'test',
+                reasonCode: 'golden_trace_empty',
+                evidence: 'goldenTrace.cases is empty — no test material to validate against',
+                nextAction: 'regenerate the artifact with at least one positive and one negative golden trace case',
+            };
+        case 'rejected_forbidden_pattern':
+            return {
+                layer: 'rule',
+                reasonCode: 'forbidden_pattern',
+                evidence: boundEvidence(`forbidden patterns: ${sandboxResult.forbiddenPatternViolations.join(', ')}`),
+                nextAction: 'regenerate RuleCode without forbidden APIs (no fs/process/require/eval/network)',
+            };
+        case 'rejected_timeout':
+            return {
+                layer: 'rule',
+                reasonCode: 'evaluation_timeout',
+                evidence: boundEvidence(sandboxResult.failedCases.map((c) => `${c.caseId}: ${c.message}`).join('; ')),
+                nextAction: 'regenerate RuleCode with bounded logic (no unbounded loops)',
+            };
+        case 'rejected_validation_failed': {
+            // Sentinels here are static-shape defects of the RULE CODE itself
+            // (return shape, matched=false pairing) — still rule-layer.
+            const detail = sandboxResult.failedCases
+                .filter((c) => c.errorType === 'validation_failed')
+                .map((c) => `${c.caseId}: ${c.message}`)
+                .join('; ');
+            return {
+                layer: 'rule',
+                reasonCode: 'replay_decision_mismatch',
+                evidence: boundEvidence(detail || 'validation failed with no case detail'),
+                nextAction: 'fix the RuleCode decision logic to satisfy the golden trace expectations',
+            };
+        }
+        case 'rejected_runtime_error': {
+            // Distinguish rule-code defects (case-level syntax/runtime errors) from
+            // infrastructure failures (sandbox adapter throw, opaque sandbox state).
+            const infraCases = sandboxResult.failedCases.filter((c) => INFRA_CASE_IDS.has(c.caseId));
+            if (infraCases.length > 0) {
+                return {
+                    layer: 'runtime',
+                    reasonCode: 'sandbox_infrastructure_failure',
+                    evidence: boundEvidence(infraCases.map((c) => `${c.caseId}: ${c.message}`).join('; ')),
+                    nextAction: 'inspect the sandbox/gate adapter wiring, then re-run the gate',
+                };
+            }
+            const ruleCases = sandboxResult.failedCases.map((c) => `${c.caseId}: ${c.errorType} — ${c.message}`);
+            return {
+                layer: 'rule',
+                reasonCode: 'rule_code_execution_error',
+                evidence: boundEvidence(ruleCases.join('; ')),
+                nextAction: 'fix the RuleCode so evaluate() handles every input shape without throwing',
+            };
+        }
+        default:
+            return {
+                layer: 'unknown',
+                reasonCode: 'unclassified',
+                evidence: boundEvidence(`gate decision ${String(decision)}`),
+                nextAction: 'inspect the full gate result manually',
+            };
+    }
+}
+//# sourceMappingURL=rule-reliability-validation.js.map

package/dist/runtime-v2/internalization/rule-reliability-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-reliability-validation.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-reliability-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAgBH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,CAAC;AAoBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAqC;IAErC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE;gBACP,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,kCAAkC;gBAC9C,QAAQ,EAAE,iHAAiH;gBAC3H,UAAU,EAAE,yHAAyH;aACtI;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAyC,EAAE;QACvE,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACpF,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3F,MAAM,uBAAuB,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;IAC5G,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE;gBACP,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,aAAa,CAAC,iDAAiD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtG,UAAU,EAAE,yFAAyF;aACtG;SACF,CAAC;IACJ,CAAC;IACD,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE;gBACP,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,4BAA4B;gBACxC,QAAQ,EAAE,aAAa,CACrB,4GAA4G,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjJ;gBACD,UAAU,EAAE,+IAA+I;aAC5J;SACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IACvG,MAAM,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;IACxH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrH,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE;gBACP,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,4BAA4B;gBAC7F,QAAQ,EAAE,aAAa,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,UAAU,EAAE,2HAA2H;aACxI;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAE1J,MAAM,UAAU,qBAAqB,CACnC,QAAiE,EACjE,aAAmC;IAEnC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,mBAAmB;YACtB,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,mEAAmE;gBAC7E,UAAU,EAAE,uFAAuF;aACpG,CAAC;QACJ,KAAK,4BAA4B;YAC/B,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ,EAAE,aAAa,CAAC,uBAAuB,aAAa,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrG,UAAU,EAAE,iFAAiF;aAC9F,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,aAAa,CACrB,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7E;gBACD,UAAU,EAAE,6DAA6D;aAC1E,CAAC;QACJ,KAAK,4BAA4B,EAAE,CAAC;YAClC,kEAAkE;YAClE,4DAA4D;YAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW;iBACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,mBAAmB,CAAC;iBAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACvC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,0BAA0B;gBACtC,QAAQ,EAAE,aAAa,CAAC,MAAM,IAAI,uCAAuC,CAAC;gBAC1E,UAAU,EAAE,0EAA0E;aACvF,CAAC;QACJ,CAAC;QACD,KAAK,wBAAwB,EAAE,CAAC;YAC9B,wEAAwE;YACxE,yEAAyE;YACzE,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,gCAAgC;oBAC5C,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACtF,UAAU,EAAE,+DAA+D;iBAC5E,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACrG,OAAO;gBACL,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,2BAA2B;gBACvC,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,UAAU,EAAE,2EAA2E;aACxF,CAAC;QACJ,CAAC;QACD;YACE,OAAO;gBACL,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,aAAa,CAAC,iBAAiB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5D,UAAU,EAAE,uCAAuC;aACpD,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/runtime-v2/internalization/tool-semantic-baseline.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Tool Semantic Baseline — host-neutral alias table (PRI-634-F Phase 1)
+ *
+ * The baseline maps GENERIC, cross-host tool vocabulary names (the names LLMs
+ * produce when no host catalog constrains them) to CanonicalKind. Host tool
+ * names live in host declarations layered via buildToolSemanticRegistry —
+ * never here (SPEC §5: core owns canonicalKind, hosts own rawToolName).
+ *
+ * Single source of truth for the table: rule-context-v2's canonicalizeToolKind
+ * and tool-semantic-registry's baseline layer both read THIS module.
+ *
+ * Pure logic — zero I/O.
+ */
+import type { CanonicalKind } from './rule-context-v2.js';
+export declare const CANONICAL_KIND_VALUES: ReadonlySet<string>;
+/** Type guard for untrusted canonicalKind values (rc-2: guard, not `as`). */
+export declare function isCanonicalKind(value: unknown): value is CanonicalKind;
+/**
+ * Host-neutral baseline alias table. Originally the static TOOL_ALIAS table of
+ * rule-context-v2 (spec §4.4); PRI-634-F adds the generic LLM vocabulary names
+ * observed in Artificer output (execute_command / run_script / code_interpreter
+ * — SPEC §1 Problem A) so the baseline resolves the names rules are actually
+ * generated against.
+ */
+export declare const baselineToolAlias: Readonly<Record<string, CanonicalKind>>;
+//# sourceMappingURL=tool-semantic-baseline.d.ts.map

package/dist/runtime-v2/internalization/tool-semantic-baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-semantic-baseline.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/tool-semantic-baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAOpD,CAAC;AAEH,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAuBpE,CAAC"}

package/dist/runtime-v2/internalization/tool-semantic-baseline.js

@@ -0,0 +1,57 @@
+/**
+ * Tool Semantic Baseline — host-neutral alias table (PRI-634-F Phase 1)
+ *
+ * The baseline maps GENERIC, cross-host tool vocabulary names (the names LLMs
+ * produce when no host catalog constrains them) to CanonicalKind. Host tool
+ * names live in host declarations layered via buildToolSemanticRegistry —
+ * never here (SPEC §5: core owns canonicalKind, hosts own rawToolName).
+ *
+ * Single source of truth for the table: rule-context-v2's canonicalizeToolKind
+ * and tool-semantic-registry's baseline layer both read THIS module.
+ *
+ * Pure logic — zero I/O.
+ */
+export const CANONICAL_KIND_VALUES = new Set([
+    'read',
+    'search',
+    'write',
+    'execute',
+    'agent',
+    'other',
+]);
+/** Type guard for untrusted canonicalKind values (rc-2: guard, not `as`). */
+export function isCanonicalKind(value) {
+    return typeof value === 'string' && CANONICAL_KIND_VALUES.has(value);
+}
+/**
+ * Host-neutral baseline alias table. Originally the static TOOL_ALIAS table of
+ * rule-context-v2 (spec §4.4); PRI-634-F adds the generic LLM vocabulary names
+ * observed in Artificer output (execute_command / run_script / code_interpreter
+ * — SPEC §1 Problem A) so the baseline resolves the names rules are actually
+ * generated against.
+ */
+export const baselineToolAlias = Object.freeze({
+    read: 'read',
+    read_file: 'read',
+    read_many_files: 'read',
+    grep: 'search',
+    grep_search: 'search',
+    search_file_content: 'search',
+    glob: 'search',
+    write: 'write',
+    write_file: 'write',
+    edit: 'write',
+    edit_file: 'write',
+    replace: 'write',
+    apply_patch: 'write',
+    bash: 'execute',
+    exec: 'execute',
+    execute: 'execute',
+    run_shell_command: 'execute',
+    // PRI-634-F baseline additions — generic LLM vocabulary, not host tools:
+    execute_command: 'execute',
+    run_script: 'execute',
+    code_interpreter: 'execute',
+    sessions_spawn: 'agent',
+});
+//# sourceMappingURL=tool-semantic-baseline.js.map

package/dist/runtime-v2/internalization/tool-semantic-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-semantic-baseline.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/tool-semantic-baseline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAS;IACxE,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA4C,MAAM,CAAC,MAAM,CAAC;IACtF,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,MAAM;IACjB,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,QAAQ;IAC7B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,OAAO;IACnB,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,OAAO;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,SAAS;IAC5B,yEAAyE;IACzE,eAAe,EAAE,SAAS;IAC1B,UAAU,EAAE,SAAS;IACrB,gBAAgB,EAAE,SAAS;IAC3B,cAAc,EAAE,OAAO;CACxB,CAAC,CAAC"}

package/dist/runtime-v2/internalization/tool-semantic-registry.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Tool Semantic Registry — PRI-634-F Phase 1 (Tool Semantic Closure)
+ *
+ * PURPOSE: One authoritative mapping from raw tool names to the closed
+ * CanonicalKind enum, so replay and production resolve identical tool
+ * semantics for the same raw name.
+ *
+ * OWNERSHIP (SPEC §5, mirroring the anti-drift note in rule-context-v2.ts):
+ *   - core owns the CLOSED CanonicalKind enum + the host-neutral baseline
+ *     table (generic LLM vocabulary names, no host-specific tools);
+ *   - each host owns its raw tool name list and declares mappings that are
+ *     layered on top of the baseline (host wins on conflict);
+ *   - core never grows the baseline with host tool names.
+ *
+ * Pure logic — zero I/O. Runtime Contract: mappings arrive as untrusted
+ * `unknown` at the public builder boundary and are validated structurally
+ * (rc-1, rc-2, rc-4, rc-5) before use.
+ */
+import type { CanonicalKind } from './rule-context-v2.js';
+export type { CanonicalKind } from './rule-context-v2.js';
+export interface ToolSemanticMappingV1 {
+    readonly rawToolName: string;
+    readonly canonicalKind: CanonicalKind;
+}
+/** Resolved registry: closed lookup surface shared by replay and production. */
+export interface ToolSemanticRegistry {
+    readonly version: 1;
+    /**
+     * Explicit lookup. Returns `null` when the raw name has no mapping in
+     * baseline + host layers — classification contexts use this to distinguish
+     * "known kind" from "unknown".
+     */
+    lookup(rawToolName: string): CanonicalKind | null;
+    /**
+     * Runtime lookup with graceful fallback: unknown names resolve to 'other'
+     * (same semantics as canonicalizeToolKind — production evaluation must
+     * never throw on an unmapped tool name).
+     */
+    resolve(rawToolName: string): CanonicalKind;
+    /**
+     * PRI-634-F R2 (review P1): SEMANTIC RESOLVABILITY IS NOT HOST EXISTENCE.
+     * True iff the raw name is declared by the HOST layer — i.e. the host
+     * actually dispatches this tool name AND routes it to the RuleHost gate.
+     * Core-baseline membership (generic LLM vocabulary like `execute_command`,
+     * or read/search names the OpenClaw hook never routes) never counts as
+     * existence evidence: a rule matching such a name passes replay against
+     * fictional inputs while never firing in production — exactly the failure
+     * class PRI-634-F exists to eliminate.
+     */
+    hasHostTool(rawToolName: string): boolean;
+    /** True iff this registry carries a host-declared layer at all. */
+    readonly hasHostLayer: boolean;
+}
+export interface ToolSemanticMappingValidationResult {
+    readonly valid: boolean;
+    readonly errors: readonly string[];
+}
+/**
+ * Validate untrusted host mappings (rc-1: unknown until validated; rc-4: every
+ * element checked, not just "is array"; rc-5: Object.hasOwn over `in`).
+ */
+export declare function validateToolSemanticMappings(raw: unknown): ToolSemanticMappingValidationResult;
+/**
+ * Build the effective registry: host mappings validated then layered over the
+ * host-neutral core baseline (host wins on conflict). Returns a discriminated
+ * result so an invalid host declaration fails loud at construction (rc-3)
+ * instead of silently degrading to baseline.
+ */
+export declare function buildToolSemanticRegistry(hostMappings?: readonly ToolSemanticMappingV1[]): {
+    ok: true;
+    registry: ToolSemanticRegistry;
+} | {
+    ok: false;
+    errors: readonly string[];
+};
+//# sourceMappingURL=tool-semantic-registry.d.ts.map

package/dist/runtime-v2/internalization/tool-semantic-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-semantic-registry.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/tool-semantic-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC;IAC5C;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAQD;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,mCAAmC,CAsC9F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAC9C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAwCzF"}