@principles/core 1.284.16 → 1.284.18

package/dist/runtime-v2/internalization/artificer-prompt-builder.js

@@ -31,8 +31,8 @@ OUTPUT FORMAT (pure JSON, no markdown):
   "risks": ["<risk 1>", "<risk 2>"],
   "implementationCode": "function evaluate(input, helpers) { if (input.action.canonicalKind === 'write' && typeof input.action.normalizedPath === 'string' && input.action.normalizedPath.startsWith('/system/')) { return { decision: 'block', matched: true, reason: 'write to system path' }; } return { decision: 'allow', matched: false, reason: 'no risk pattern' }; }",
   "goldenTraceCases": [
-    {"caseId":"negative-1","kind":"negative","toolName":"write","params":{"path":"/system/file"},"expectedDecision":"block","ruleContext":"<the case's ruleContext object, copied exactly from the behaviorExamplePack>"},
-    {"caseId":"positive-1","kind":"positive","toolName":"write","params":{"path":"/workspace/file"},"expectedDecision":"allow","ruleContext":"<the case's ruleContext object, copied exactly from the behaviorExamplePack>"}
+    {"caseId":"negative-1","kind":"negative","toolName":"write","params":{"path":"/system/file"},"expectedDecision":"block","ruleContext":{"version":2,"history":{"status":"available","truncated":false,"calls":[]},"facts":{"priorReadOfTarget":"unknown","readCount":0,"writeCount":0,"uniqueWritePathCount":0,"sameActionBlockCount":null}}},
+    {"caseId":"positive-1","kind":"positive","toolName":"write","params":{"path":"/workspace/file"},"expectedDecision":"allow","ruleContext":{"version":2,"history":{"status":"available","truncated":false,"calls":[]},"facts":{"priorReadOfTarget":"unknown","readCount":0,"writeCount":0,"uniqueWritePathCount":0,"sameActionBlockCount":null}}}
   ],
   "affectedTools": ["write"],
   "generatedAt": "<ISO-8601 timestamp>"
@@ -64,6 +64,7 @@ CONSTRAINTS:
 - NEVER call string methods on paramsSummary itself — paramsSummary.includes(...), paramsSummary.startsWith(...), paramsSummary.match(...) are always bugs and will crash with "is not a function"
 - To inspect a parameter, access its specific key (e.g. paramsSummary.path) and guard its type at runtime (typeof paramsSummary.path === 'string') before using it as a string
 - For path logic prefer input.action.normalizedPath (a normalized string) over reading raw params strings
+- ADVERSARIAL GUARD CONTRACT: when your rule declares requiresContextVersion: 2, action-level safety still dominates the context — if helpers.isRiskPath() is true the decision MUST be block regardless of input.context; writes to well-known sensitive system locations (/etc/**, system configuration outside the governed workspace) must block even when context reports priorReadOfTarget === 'yes' (a context-provided read outside the workspace is untrusted signal, never authorization)
 - implementationCode MUST be deterministic and self-contained: no imports, require, eval, Function, I/O, network, timers, Date.now, or randomness
 - goldenTraceCases MUST contain 2-10 cases with at least one positive allow case and one negative block case
 - goldenTraceCases expectedDecision MUST be only "allow" or "block" — do NOT emit "propose_correction", "requireApproval", or "auto_correct" (seed-user MVP only supports allow/block; all other action types are rejected by the schema validator)
@@ -110,6 +111,27 @@ PRIOR OUTPUT-CONTRACT REJECTIONS (when \`priorValidatorErrors\` is present):
 // The v2 contract below is the only generation contract; a missing
 // BehaviorExamplePack fails generation loud rather than degrading to an
 // action-only rule.
+/**
+ * PRI-839: appended ONLY when `dreamerContext` is present, so a pre-PRI-508 /
+ * degraded prompt is unchanged (the same conditional shape
+ * `hostSemanticContext` already uses).
+ *
+ * This block exists so the model can answer the three questions the single
+ * `candidates[0]` projection made unanswerable: which alternative paths the
+ * Dreamer explored, why one is the primary one, and what risks the others
+ * carry. It is deliberately explicit that `priorityRank` is a reading aid and
+ * NOT an authority — the critique + principle draft own the intent, and the
+ * block must not become a licence to widen the rule's scope.
+ */
+export const DREAMER_CANDIDATE_SET_INSTRUCTION = `
+
+DREAMER CANDIDATE SET (PRI-839, when \`dreamerContext\` is present):
+- \`dreamerContext.candidates\` is a BOUNDED, priority-ranked set of the Dreamer's proposals for this formation — not only the first one.
+- \`priorityRank\` 1 is the Dreamer's highest-confidence, lowest-risk proposal by its own authored signals (\`candidateIndex\` is the order the Dreamer wrote them in). This ranking is a READING AID, not an authority: the scribe principle draft and the philosopher critique decide the intent.
+- \`dreamerContext.differenceSummary\` states factually how the proposals differ.
+- Use the alternatives to bound the rule correctly: a proposal's concrete failure mode and concrete better-decision are EVIDENCE for which concrete patterns your evaluate() must cover.
+- Do NOT widen the rule beyond the intent the scribeArtifact formalised, and do NOT merge mutually exclusive proposals into one matcher.
+- \`dreamerContext.omittedCandidateCount\` > 0 means further proposals existed but were dropped to stay within budget — note that in \`risks\` instead of guessing at them.`;
 const V2_CONTEXT_INSTRUCTION = `
 CONTEXT MODE: v2 (Owner-labelled evidence is present)
 - Treat behaviorExamplePack labels as authoritative: sourceNegativeCase MUST remain block and every positiveCounterexample MUST remain allow.
@@ -150,7 +172,94 @@ CONTEXT MODE: v2 (Owner-labelled evidence is present)
  * the CONTEXT MODE block documents the runtime context capabilities
  * (history/facts, default-on assembly, host unavailable declarations).
  */
-export const ARTIFICER_PROMPT_CONTRACT_VERSION = 'artificer-output-v2.prompt.v6';
+/**
+ * PRI-817: bumped v6 → v7. The OUTPUT FORMAT example previously omitted the
+ * three v2-mandatory obligations (requiresContextVersion, evidenceRefs,
+ * case-level ruleContext) and misreferenced the CONTEXT MODE block as
+ * "above" — an LLM imitating the example verbatim was guaranteed rejected.
+ * The example now carries all three obligations with a validator-legal
+ * ruleContext object literal, the position reference is corrected, and a
+ * NOTE line marks them as REQUIRED.
+ */
+/**
+ * PRI-839: bumped v7 → v8. The prompt INPUT shape changed — `dreamerContext`
+ * went from a single 5-dim candidate object (`candidates[0]`) to a bounded,
+ * priority-ranked candidate SET plus a difference summary — and the system
+ * prompt gained the conditional DREAMER_CANDIDATE_SET_INSTRUCTION block.
+ * The OUTPUT schema is unchanged, so only the `.prompt.vN` segment moves.
+ */
+export const ARTIFICER_PROMPT_CONTRACT_VERSION = 'artificer-output-v2.prompt.v8';
+// ── EP002-R4: bounded pack projection at the prompt boundary ─────────────────
+//
+// The persisted BehaviorExamplePack keeps full-fidelity raw tool-call payloads
+// (entire file contents, edit diffs). Real workspaces produce real-sized
+// calls, and a single example routinely exceeds the whole 50k prompt budget
+// (live workspace: pack 115,198 chars vs cap 50,000), making v2 generation
+// structurally unreachable there. Bound each example's payload HERE, at the
+// LLM trust boundary (rc-8), never in the pack itself: the model sees bounded
+// previews with an explicit truncation marker, the persisted evidence stays
+// complete, and validateBehaviorExamplePack still runs on the original pack.
+const MAX_PROMPT_PARAM_STRING_CHARS = 2_500;
+const PROMPT_PARAM_TRUNCATION_MARKER = '…[truncated-for-prompt]';
+// Live-workspace measurement: one case's ruleContext.history carried 100 raw
+// calls (45,380 chars) — the aggregate, not any single string, blows the 50k
+// prompt budget. The prompt projection keeps only the window immediately
+// preceding the labeled call; the persisted pack keeps the full history and
+// the runtime gate reconstructs its own context at evaluation time.
+const MAX_PROMPT_HISTORY_CALLS = 12;
+function boundPromptParamString(value) {
+    return value.length <= MAX_PROMPT_PARAM_STRING_CHARS
+        ? value
+        : value.slice(0, MAX_PROMPT_PARAM_STRING_CHARS) + PROMPT_PARAM_TRUNCATION_MARKER;
+}
+function boundPromptParams(params) {
+    const bounded = {};
+    for (const key of Object.keys(params)) {
+        const value = params[key];
+        bounded[key] = typeof value === 'string'
+            ? boundPromptParamString(value)
+            : value;
+    }
+    return bounded;
+}
+function boundCaseForPrompt(value) {
+    const boundedContext = value.ruleContext !== undefined
+        ? {
+            ...value.ruleContext,
+            history: {
+                ...value.ruleContext.history,
+                truncated: value.ruleContext.history.truncated
+                    || value.ruleContext.history.calls.length > MAX_PROMPT_HISTORY_CALLS,
+                calls: value.ruleContext.history.calls
+                    .slice(-MAX_PROMPT_HISTORY_CALLS)
+                    .map((call) => ({ ...call, paramsSummary: boundPromptParams(call.paramsSummary) })),
+            },
+        }
+        : undefined;
+    return {
+        ...value,
+        params: boundPromptParams(value.params),
+        ...(value.expectedProposedParams !== undefined
+            ? { expectedProposedParams: boundPromptParams(value.expectedProposedParams) }
+            : {}),
+        ...(boundedContext !== undefined ? { ruleContext: boundedContext } : {}),
+    };
+}
+/**
+ * EP002-R4: the SINGLE bounded projection shared by the prompt AND the v2
+ * echo-contract validation. The model can only copy what it saw, so the
+ * "Owner-labelled example was rewritten" check MUST compare against the same
+ * bounded cases the prompt presented — comparing against the raw pack would
+ * reject every honest echo on real-sized workspaces. Idempotent: an
+ * already-bounded pack passes through unchanged.
+ */
+export function boundPackForPrompt(pack) {
+    return {
+        ...pack,
+        sourceNegativeCase: boundCaseForPrompt(pack.sourceNegativeCase),
+        positiveCounterexamples: pack.positiveCounterexamples.map(boundCaseForPrompt),
+    };
+}
 /**
  * PRI-741: render the host semantic projection as a prompt block. Mirrors the
  * evaluator's TOOL CATALOG AUTHORITY pattern: the list is authoritative for
@@ -200,6 +309,9 @@ export class ArtificerPromptBuilder {
         }
         const artificerInstruction = ARTIFICER_PROTOCOL_INSTRUCTION
             + V2_CONTEXT_INSTRUCTION
+            // PRI-839: candidate-set guidance (absent = no block, prompt unchanged
+            // for formations without resolvable dreamer proposals).
+            + (input.dreamerContext !== undefined ? DREAMER_CANDIDATE_SET_INSTRUCTION : '')
             // PRI-741: host semantic projection (absent = no block, prompt
             // unchanged for workspaces without a host declaration).
             + (input.hostSemanticContext !== undefined ? buildHostSemanticContextBlock(input.hostSemanticContext) : '')
@@ -207,7 +319,10 @@ export class ArtificerPromptBuilder {
             // (empty string when outputLanguage is undefined).
             + buildLanguageDirective(input.outputLanguage, 'implementation');
         const promptInput = {
-            behaviorExamplePack: input.behaviorExamplePack,
+            // EP002-R4: bounded projection — the pack's raw payloads can exceed the
+            // 50k prompt cap on real workspaces; the LLM gets bounded previews while
+            // the persisted pack (and everything downstream of it) keeps full fidelity.
+            behaviorExamplePack: boundPackForPrompt(input.behaviorExamplePack),
             taskId: input.taskId,
             contextHash: input.contextHash,
             sourceScribeArtifactId: input.sourceScribeArtifactId,

package/dist/runtime-v2/internalization/artificer-prompt-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"artificer-prompt-builder.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/artificer-prompt-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAMzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAiJlE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuG7C,CAAC;AAEF,0EAA0E;AAC1E,2EAA2E;AAC3E,mEAAmE;AACnE,wEAAwE;AACxE,oBAAoB;AAEpB,MAAM,sBAAsB,GAAG;;;;;;;;;;CAU9B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,+BAA+B,CAAC;AAEjF;;;;;GAKG;AACH,SAAS,6BAA6B,CAAC,OAAqC;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO;;EAEP,QAAQ,oDAAoD,QAAQ;;;CAGrE,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAChE,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAC7D,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,UAAU,iCAAiC,CAC/C,QAA8B,EAC9B,SAAS,GAAsB,EAAE;IAEjC,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,EAAE,QAAQ;aACZ,YAAY,EAAE;aACd,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;aAChE,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAsB;IACjC,qEAAqE;IACrE,WAAW,CAAC,KAAkC;QAC5C,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6FAA6F,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;QACD,MAAM,oBAAoB,GAAG,8BAA8B;cACvD,sBAAsB;YACxB,+DAA+D;YAC/D,wDAAwD;cACtD,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3G,uEAAuE;YACvE,mDAAmD;cACjD,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAyB;YACxC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,qBAAqB,EAAE,iCAAiC;YACxD,gEAAgE;YAChE,mEAAmE;YACnE,GAAG,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC1F,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,oEAAoE;YACpE,0EAA0E;YAC1E,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,oEAAoE;YACpE,mEAAmE;YACnE,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;gBAChF,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,mEAAmE;YACnE,kDAAkD;YAClD,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,0EAA0E;YAC1E,0DAA0D;YAC1D,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,qEAAqE;YACrE,wDAAwD;YACxD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvG,CAAC;QAEF,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"artificer-prompt-builder.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/artificer-prompt-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAQzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AA8JlE,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwG7C,CAAC;AAEF,0EAA0E;AAC1E,2EAA2E;AAC3E,mEAAmE;AACnE,wEAAwE;AACxE,oBAAoB;AAEpB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;;;;;;;;4KAQ2H,CAAC;AAE7K,MAAM,sBAAsB,GAAG;;;;;;;;;;CAU9B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,+BAA+B,CAAC;AAEjF,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAE7E,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AACjE,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,MAAM,IAAI,6BAA6B;QAClD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC,GAAG,8BAA8B,CAAC;AACrF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA+B;IACxD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAY,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ;YACtC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA2B;IACrD,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS;QACpD,CAAC,CAAC;YACE,GAAG,KAAK,CAAC,WAAW;YACpB,OAAO,EAAE;gBACP,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO;gBAC5B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS;uBACzC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,wBAAwB;gBACtE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK;qBACnC,KAAK,CAAC,CAAC,wBAAwB,CAAC;qBAChC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;aACtF;SACF;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE;YAC7E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,OAAO;QACL,GAAG,IAAI;QACP,kBAAkB,EAAE,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC/D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,kBAAkB,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CAAC,OAAqC;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO;;EAEP,QAAQ,oDAAoD,QAAQ;;;CAGrE,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAChE,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAC7D,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,UAAU,iCAAiC,CAC/C,QAA8B,EAC9B,SAAS,GAAsB,EAAE;IAEjC,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,EAAE,QAAQ;aACZ,YAAY,EAAE;aACd,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;aAChE,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAsB;IACjC,qEAAqE;IACrE,WAAW,CAAC,KAAkC;QAC5C,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6FAA6F,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;QACD,MAAM,oBAAoB,GAAG,8BAA8B;cACvD,sBAAsB;YACxB,uEAAuE;YACvE,wDAAwD;cACtD,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,+DAA+D;YAC/D,wDAAwD;cACtD,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3G,uEAAuE;YACvE,mDAAmD;cACjD,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAyB;YACxC,wEAAwE;YACxE,yEAAyE;YACzE,4EAA4E;YAC5E,mBAAmB,EAAE,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAClE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,qBAAqB,EAAE,iCAAiC;YACxD,gEAAgE;YAChE,mEAAmE;YACnE,GAAG,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC1F,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,oEAAoE;YACpE,0EAA0E;YAC1E,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,oEAAoE;YACpE,mEAAmE;YACnE,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;gBAChF,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,mEAAmE;YACnE,kDAAkD;YAClD,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,0EAA0E;YAC1E,0DAA0D;YAC1D,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,qEAAqE;YACrE,wDAAwD;YACxD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvG,CAAC;QAEF,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;IACtE,CAAC;CACF"}

package/dist/runtime-v2/internalization/artificer-runner.d.ts

@@ -202,6 +202,18 @@ export declare class ArtificerRunner extends BasePeerRunner<ArtificerContext, Ar
     private isArtificerOutputRetryEnabled;
     buildContext(taskId: string): Promise<ArtificerContext>;
     invokeRuntime(taskId: string, context: ArtificerContext): Promise<RunHandle>;
+    /**
+     * EP002-R4: restore Owner-labelled goldenTraceCases from the authoritative
+     * (bounded) pack BEFORE validation. The v2 contract requires the artifact to
+     * carry the Owner-labelled evidence verbatim — but demanding that the MODEL
+     * transcribe multi-KB history windows byte-perfectly rejected honest echoes
+     * on real-sized packs (live evidence: 2/2 L2 submissions succeeded, both
+     * rejected as "was rewritten"). Mechanical restoration is strictly STRONGER
+     * against fabrication: the model cannot rewrite what the code overwrites.
+     * The model's own additional cases (different caseIds) pass through
+     * untouched and still face full validation.
+     */
+    protected fetchAndParseOutput(runId: string, taskId: string): Promise<unknown>;
     validateOutput(output: unknown, taskId: string, context: ArtificerContext): Promise<PeerRunnerValidationResult>;
     succeedTask(taskId: string, runId: string, output: ArtificerRuleOutput, task: TaskRecord, contextHash: string, context: ArtificerContext): Promise<PeerRunnerResult<ArtificerRuleOutput>>;
     /**

package/dist/runtime-v2/internalization/artificer-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artificer-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/artificer-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAkB,KAAK,eAAe,EAAqB,MAAM,wBAAwB,CAAC;AAEjG,OAAO,EAAuB,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAmD,MAAM,sBAAsB,CAAC;AAE1J,OAAO,EAA0B,KAAK,uBAAuB,EAAE,KAAK,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAIxI,YAAY,EAAE,4BAA4B,EAAE,CAAC;AAI7C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKtE,uFAAuF;AACvF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAC7C;;;;;;;OAOG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;CACrD;AA2BD,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,QAAA,MAAM,gCAAgC,EAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,EAAE,OAAO,GAAG,aAAa,CAAC,CAKpG,CAAC;AAEX,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,sBAAsB,GAAG,8BAA8B,CAS7G;AAID,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CACpD;AAoWD;;uDAEuD;AACvD,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,kEAAkE;IAClE,QAAQ,CAAC,eAAe,CAAC,EAAE,iBAAiB,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CAC7D;AAED,qBAAa,eAAgB,SAAQ,cAAc,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACxF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;IACtE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2C;IAE/E,YAAY,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,EAarE;IAED;;;;;;;OAOG;IAIH;;;;;;;;;OASG;IACH,IAAI,wBAAwB,IAAI,WAAW,CAAC,eAAe,CAAC,CAY3D;IAED;;;;OAIG;IACH,OAAO,CAAC,6BAA6B;IAO/B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyK5D;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAyHjF;IAEK,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA+BpH;IAGK,WAAW,CACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAsGhD;IAID;;;;;;;OAOG;IACH,UAAmB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAkBhH;IAED,UAAmB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAMzF;CACF;AAED,OAAO,EAAE,gCAAgC,EAAE,CAAC"}
+{"version":3,"file":"artificer-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/artificer-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAwB,MAAM,uBAAuB,CAAC;AAC3G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAkB,KAAK,eAAe,EAAqB,MAAM,wBAAwB,CAAC;AAEjG,OAAO,EAAuB,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAmD,MAAM,sBAAsB,CAAC;AAE1J,OAAO,EAA8C,KAAK,uBAAuB,EAAE,KAAK,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAK5J,YAAY,EAAE,4BAA4B,EAAE,CAAC;AAG7C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAItE,uFAAuF;AACvF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAC7C;;;;;;;OAOG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;CACrD;AAID,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,QAAA,MAAM,gCAAgC,EAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,EAAE,OAAO,GAAG,aAAa,CAAC,CAKpG,CAAC;AAEX,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,sBAAsB,GAAG,8BAA8B,CAS7G;AAID,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CACpD;AAsTD;;uDAEuD;AACvD,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,kEAAkE;IAClE,QAAQ,CAAC,eAAe,CAAC,EAAE,iBAAiB,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CAC7D;AAED,qBAAa,eAAgB,SAAQ,cAAc,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACxF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;IACtE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2C;IAE/E,YAAY,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,EAarE;IAED;;;;;;;OAOG;IAIH;;;;;;;;;OASG;IACH,IAAI,wBAAwB,IAAI,WAAW,CAAC,eAAe,CAAC,CAY3D;IAED;;;;OAIG;IACH,OAAO,CAAC,6BAA6B;IAO/B,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyK5D;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAwFjF;IAED;;;;;;;;;;OAUG;IACH,UAAyB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB5F;IAEK,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAmCpH;IAGK,WAAW,CACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAsGhD;IAID;;;;;;;OAOG;IACH,UAAmB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAkBhH;IAED,UAAmB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAMzF;CACF;AAED,OAAO,EAAE,gCAAgC,EAAE,CAAC"}

package/dist/runtime-v2/internalization/artificer-runner.js

@@ -2,35 +2,11 @@ import { PDRuntimeError, isPDErrorCategory } from '../error-categories.js';
 import { computeFeatureFlagsFromConfig, isFeatureEnabled } from '../config/pd-config-feature-flags.js';
 import { hydratePITaskRecord, parseLastValidatorErrors, isFreshForNextAttempt } from './pitask-metadata.js';
 import { extractIntentContract } from './intent-contract.js';
-import { ArtificerPromptBuilder } from './artificer-prompt-builder.js';
-import { ARTIFICER_MANIFEST, ARTIFICER_REPAIR_MANIFEST } from './context-manifests.js';
+import { ArtificerPromptBuilder, boundPackForPrompt } from './artificer-prompt-builder.js';
+import { projectDreamerProposals, summarizeCandidateDifferences } from './formation-context.js';
 import { reconcileLineageEcho } from './peer-runner-contracts.js';
 import { resolveRepairReplayContext, } from './repair-replay-resolver.js';
 import { BasePeerRunner } from '../runner/base-peer-runner.js';
-/**
- * Layer 0 (design §6.1): artificer's edge predecessor is `scribe`, whose
- * artifact `buildContext` already loaded. Reusing that string keeps the writer
- * path at zero extra store reads (F3). Returns null when no scribe artifact
- * was resolved (buildContext's `empty-context` short-circuit, or a missing
- * sourceTrace) — the writer then emits `artifact_summary_predecessor_absent`
- * and writes only the self `summary` (rc-9).
- */
-function toScribePredecessor(context) {
-    if (!context.scribeArtifact || !context.sourceScribeArtifactId)
-        return null;
-    let contentJson;
-    try {
-        contentJson = JSON.parse(context.scribeArtifact);
-    }
-    catch {
-        contentJson = context.scribeArtifact;
-    }
-    return {
-        artifactId: context.sourceScribeArtifactId,
-        runnerKind: 'scribe',
-        contentJson,
-    };
-}
 const DEFAULT_ARTIFICER_RUNNER_OPTIONS = {
     pollIntervalMs: 5_000,
     timeoutMs: 300_000,
@@ -52,8 +28,22 @@ function isRecord(value) {
 }
 // ── PRI-508: Dreamer context extraction ─────────────────────────────────────
 /**
- * Resolve the dreamer candidate 5-dim context from the dreamer artifact
- * referenced by `scribe.sourceTrace.dreamerArtifactId`.
+ * Resolve the dreamer candidate context from the dreamer artifact referenced
+ * by `scribe.sourceTrace.dreamerArtifactId`.
+ *
+ * PRI-839: this previously projected `candidates[0]` and silently discarded the
+ * rest (PRI-835 §DC-3). Production has 31 of 33 dreamer artifacts carrying ≥2
+ * candidates, so the upstream exploration cost was paid and then thrown away.
+ * The projection is now a BOUNDED, priority-ranked SET — the shape validation,
+ * per-field clamping and deterministic ranking live in
+ * `formation-context.ts` (`projectDreamerProposals`), which the Scribe's
+ * formation context also uses, so there is ONE definition of a projected
+ * dreamer proposal rather than two divergent ones.
+ *
+ * The bounding idiom is not new to this file: `boundPackForPrompt`
+ * (artificer-prompt-builder.ts, EP002-R4) already bounds the BehaviorExamplePack
+ * at the same prompt boundary for the same reason — the persisted evidence
+ * keeps full fidelity while the LLM receives a bounded preview.
  *
  * Trust boundary (rc-1, rc-2): scribe contentJson and dreamer contentJson are
  * untrusted. All field access uses Object.hasOwn (rc-5) and typeof / Array.isArray
@@ -67,6 +57,9 @@ function isRecord(value) {
  * `dreamer_artifact_missing` / `dreamer_context_invalid` event so the gap is
  * observable. Returns undefined (best-effort, non-blocking) so the artificer
  * can still proceed with the scribe principle alone.
+ *
+ * The event vocabulary below is deliberately UNCHANGED from pre-PRI-839 so the
+ * existing observability contract still holds.
  */
 async function resolveDreamerContext(params) {
     const { scribeContentJson, taskId, emitEvent } = params;
@@ -123,57 +116,44 @@ async function resolveDreamerContext(params) {
         emitEvent('dreamer_context_invalid', taskId, { dreamerArtifactId, reason: 'content_not_record' });
         return undefined;
     }
-    // rc-4: validate candidates is a non-empty array, then element[0] shape.
-    // rc-2: avoid `as` cast — let `Array.isArray` type-guard narrow the local var.
-    if (!Object.hasOwn(dreamerParsed, 'candidates')) {
-        emitEvent('dreamer_context_invalid', taskId, { dreamerArtifactId, reason: 'candidates_not_array' });
-        return undefined;
-    }
-    const candidatesField = dreamerParsed.candidates;
-    if (!Array.isArray(candidatesField)) {
-        emitEvent('dreamer_context_invalid', taskId, { dreamerArtifactId, reason: 'candidates_not_array' });
-        return undefined;
-    }
-    if (candidatesField.length === 0) {
-        emitEvent('dreamer_context_invalid', taskId, { dreamerArtifactId, reason: 'candidates_empty' });
-        return undefined;
-    }
-    const [firstCandidate] = candidatesField;
-    if (!isRecord(firstCandidate)) {
-        emitEvent('dreamer_context_invalid', taskId, { dreamerArtifactId, reason: 'candidate0_not_record' });
-        return undefined;
-    }
-    // Validate the 5-dim fields. badDecision/betterDecision/rationale are required strings.
-    // riskLevel/strategicPerspective are optional but must be string when present.
-    const requiredString = (key) => {
-        if (!Object.hasOwn(firstCandidate, key))
-            return undefined;
-        const value = firstCandidate[key];
-        return typeof value === 'string' && value.trim() !== '' ? value : undefined;
-    };
-    const badDecision = requiredString('badDecision');
-    const betterDecision = requiredString('betterDecision');
-    const rationale = requiredString('rationale');
-    if (badDecision === undefined || betterDecision === undefined || rationale === undefined) {
+    // PRI-839: one bounded projection shared with the scribe's formation context.
+    const projection = projectDreamerProposals(dreamerParsed);
+    if (projection.candidates.length === 0) {
+        // No usable proposal. Preserve the pre-PRI-839 reason vocabulary so the
+        // observability contract is unchanged even though the check is now set-wide.
+        const candidatesField = dreamerParsed.candidates;
+        let reason = 'missing_required_5dim_fields';
+        if (!Array.isArray(candidatesField)) {
+            reason = 'candidates_not_array';
+        }
+        else if (candidatesField.length === 0) {
+            reason = 'candidates_empty';
+        }
+        else if (!isRecord(candidatesField[0])) {
+            reason = 'candidate0_not_record';
+        }
         emitEvent('dreamer_context_invalid', taskId, {
             dreamerArtifactId,
-            reason: 'missing_required_5dim_fields',
-            hasBadDecision: badDecision !== undefined,
-            hasBetterDecision: betterDecision !== undefined,
-            hasRationale: rationale !== undefined,
+            reason,
+            truncationNotes: projection.truncationNotes,
         });
         return undefined;
     }
-    const riskLevel = requiredString('riskLevel');
-    const strategicPerspective = requiredString('strategicPerspective');
-    const dreamerContext = {
-        badDecision,
-        betterDecision,
-        rationale,
-        ...(riskLevel !== undefined ? { riskLevel } : {}),
-        ...(strategicPerspective !== undefined ? { strategicPerspective } : {}),
+    if (projection.truncationNotes.length > 0) {
+        // rc-9: a partially usable set still carries an explicit trace of what was
+        // dropped, so a quality regression can be traced back to the bound.
+        emitEvent('dreamer_context_partial', taskId, {
+            dreamerArtifactId,
+            candidateCount: projection.candidates.length,
+            omittedCandidateCount: projection.omittedCandidateCount,
+            truncationNotes: projection.truncationNotes,
+        });
+    }
+    return {
+        candidates: projection.candidates,
+        differenceSummary: summarizeCandidateDifferences(projection.candidates),
+        omittedCandidateCount: projection.omittedCandidateCount,
     };
-    return dreamerContext;
 }
 // ── PRI-509: Evaluator repair feedback formatting ───────────────────────────
 /**
@@ -213,50 +193,6 @@ function formatReplayEvidenceBlock(context) {
     }
     return lines.join('\n');
 }
-/**
- * PR B: expose the RepairPayload and the PR-A replay evidence as RELATED
- * context sources (design §33). They are causal references — NOT ancestry — so
- * nothing here reaches into `lineageArtifactIds`.
- *
- * The replay values come straight from the already-bounded
- * `RepairReplayContext`: the information plane therefore inherits PR A's ≤16
- * selection (`MAX_REPLAY_FAILURES_IN_REPAIR`) and never re-expands the durable
- * `failedCases` array (design §43).
- */
-function buildRepairRelatedSources(context) {
-    const sources = [];
-    const { replayContext, repairPayload } = context;
-    if (repairPayload !== undefined) {
-        sources.push({
-            namespace: 'repair',
-            summary: {
-                requiredChanges: repairPayload.requiredChanges,
-                concerns: repairPayload.concerns,
-            },
-        });
-    }
-    if (replayContext !== undefined) {
-        const failureTypes = new Set();
-        for (const failure of [...replayContext.systemFailures, ...replayContext.traceFailures]) {
-            failureTypes.add(failure.errorType);
-        }
-        sources.push({
-            namespace: 'replay',
-            summary: {
-                passed: replayContext.passed,
-                failedCaseCount: replayContext.failedCaseCount,
-                // Deterministic: sorted, so the same context always renders identically.
-                failureTypes: [...failureTypes].sort(),
-            },
-            raw: {
-                traceFailures: replayContext.traceFailures,
-                systemFailures: replayContext.systemFailures,
-                globalViolations: replayContext.globalViolations,
-            },
-        });
-    }
-    return sources;
-}
 /**
  * Format a validated RepairPayload into a repairFeedback string for the
  * artificer prompt. The format is PoC-validated (Campaign 1 R2):
@@ -615,48 +551,16 @@ export class ArtificerRunner extends BasePeerRunner {
         catch {
             scribeArtifactInput = context.scribeArtifact;
         }
-        // PRI-703 Phase 1（评审 P1 修正）：intent contract 必须在 manifest 收窄
-        // 之前从完整 scribe 工件提取——focused 模式会把 scribeArtifactInput 替换
-        // 为扁平 summary 字段（intentOwner 等），根级 intentContract 对象不再
-        // 存在，收窄后提取恒为 null（context_manifest_budget 开启即丢契约）。
+        // PRI-703 Phase 1：intent contract 从完整 scribe 工件提取
+        //（manifest 收窄路径已随 PRI-819 R-06 退役，工件不再被替换）。
         const fullScribeArtifact = scribeArtifactInput;
-        // Layer 1 (design §6.2/§6.3, task 5.9) + PR B Shared Information Plane:
-        // resolve the manifest against the scribe predecessor's summary envelope,
-        // the durable CandidateLineage ancestry (tier2 raw), and — for repair
-        // rounds — the related replay evidence. Focused → inject only the
-        // allocated fields; fallback/disabled → legacy full scribeArtifact (F13).
-        const scribePred = toScribePredecessor(context);
-        let replayViaManifest = false;
-        if (scribePred !== null) {
-            const isRepair = context.replayContext !== undefined;
-            const manifest = isRepair ? ARTIFICER_REPAIR_MANIFEST : ARTIFICER_MANIFEST;
-            const relatedSources = isRepair ? buildRepairRelatedSources(context) : undefined;
-            // Required-evidence gate (design §35/§43): on a repair round the replay
-            // evidence MUST reach the prompt. If the manifest budget cannot carry it,
-            // resolution falls back and the bounded PR-A string channel is used
-            // instead of injecting a thinner prompt. Normal artificer tier2 stays
-            // optional — `dreamerContext` (PRI-508, F2) is its safety net.
-            const resolved = await this.resolveContextInjectionAsync({
-                taskId,
-                manifest,
-                predecessorContentJson: scribePred.contentJson,
-                startArtifactId: context.sourceScribeArtifactId ?? undefined,
-                ...(relatedSources !== undefined ? { relatedSources } : {}),
-                requiredPaths: isRepair ? [...ARTIFICER_REPAIR_MANIFEST.tier2] : [],
-            });
-            if (resolved.mode === 'focused') {
-                scribeArtifactInput = resolved.fields;
-                replayViaManifest = isRepair;
-            }
-        }
-        // PR B (design §26): pick the replay-evidence channel. When the manifest
-        // carried it, the base string keeps concerns + required changes only; when
-        // the flag is off (or the budget could not carry the evidence) the PR-A
-        // bounded evidence block is appended — exactly the pre-PR-B behavior, so
-        // the replay evidence never depends on a quiet flag being on.
+        // PR B (design §26): the replay-evidence channel. The manifest channel was
+        // retired with PRI-819 R-06 (context_manifest_budget gone); the PR-A
+        // bounded evidence block is the unconditional channel, so the replay
+        // evidence never depended on a quiet flag being on.
         let { repairFeedback } = context;
         const { replayContext, repairPayload } = context;
-        if (replayContext !== undefined && repairPayload !== undefined && !replayViaManifest) {
+        if (replayContext !== undefined && repairPayload !== undefined) {
             repairFeedback = formatRepairFeedback(repairPayload, formatReplayEvidenceBlock(replayContext));
         }
         // PRI-703 Phase 1: extract from the FULL scribe artifact (captured before
@@ -720,9 +624,49 @@ ${context.revisionFeedback}
             systemPrompt,
         });
     }
+    /**
+     * EP002-R4: restore Owner-labelled goldenTraceCases from the authoritative
+     * (bounded) pack BEFORE validation. The v2 contract requires the artifact to
+     * carry the Owner-labelled evidence verbatim — but demanding that the MODEL
+     * transcribe multi-KB history windows byte-perfectly rejected honest echoes
+     * on real-sized packs (live evidence: 2/2 L2 submissions succeeded, both
+     * rejected as "was rewritten"). Mechanical restoration is strictly STRONGER
+     * against fabrication: the model cannot rewrite what the code overwrites.
+     * The model's own additional cases (different caseIds) pass through
+     * untouched and still face full validation.
+     */
+    async fetchAndParseOutput(runId, taskId) {
+        const output = await super.fetchAndParseOutput(runId, taskId);
+        if (this.behaviorExamplePack === undefined
+            || output === null || typeof output !== 'object' || Array.isArray(output)) {
+            return output;
+        }
+        const record = output;
+        if (!Array.isArray(record.goldenTraceCases))
+            return output;
+        const bounded = boundPackForPrompt(this.behaviorExamplePack);
+        const authoritative = new Map();
+        for (const ownerCase of [bounded.sourceNegativeCase, ...bounded.positiveCounterexamples]) {
+            authoritative.set(ownerCase.caseId, ownerCase);
+        }
+        record.goldenTraceCases = record.goldenTraceCases.map((entry) => {
+            if (entry !== null && typeof entry === 'object' && !Array.isArray(entry)) {
+                const { caseId } = entry;
+                const restored = typeof caseId === 'string' ? authoritative.get(caseId) : undefined;
+                if (restored !== undefined)
+                    return restored;
+            }
+            return entry;
+        });
+        return record;
+    }
     async validateOutput(output, taskId, context) {
         const result = await this.validator.validate(output, taskId, context.sourceScribeArtifactId ?? undefined);
-        const modeErrors = validateV2OutputContract(output, this.behaviorExamplePack);
+        // EP002-R4: the echo contract must compare against the SAME bounded
+        // projection the prompt presented (the model can only copy what it
+        // saw); validating against the raw pack would reject every honest
+        // echo on real-sized workspaces.
+        const modeErrors = validateV2OutputContract(output, this.behaviorExamplePack !== undefined ? boundPackForPrompt(this.behaviorExamplePack) : undefined);
         // Trust-boundary: validator returns `string | undefined` for errorCategory.
         // Must not `as`-cast; validate at runtime (ERR-001, ERR-005).
         const rawCategory = result.errorCategory;
@@ -804,7 +748,7 @@ ${context.revisionFeedback}
                 // scribe. The dreamer 5-dim context still flows through the separate
                 // PRI-508 `resolveDreamerContext` path (F2) — it does NOT enter
                 // `predecessorSummary` (which holds exactly one edge predecessor).
-                contentJson: this.buildArtifactContentJson(taskId, 'artificer', output, toScribePredecessor(context)),
+                contentJson: JSON.stringify(output),
                 createdAt: now,
                 updatedAt: now,
             });