@principles/core 1.297.11 → 1.298.1

package/dist/runtime-v2/pain-recall-capability.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Pain Recall Capability Facade — SPEC-PD-AGENT-CAPABILITY-API-001 v0.5 §7/§8.
+ *
+ * The single OD-A projection authority: constructs the protocol-independent
+ * `pd.capability.v1` envelope for `pd_recall_principle_pains` from the full
+ * PainRecallResult produced by the read model. The envelope is built
+ * field-by-field from the frozen od-a-v1 whitelist ("construction IS the
+ * whitelist") — DENY fields (canonicalId, painId, evidenceRefs, pain text,
+ * diagnoses.*, correctionEvidence.*, lineage hops, statusDetail-as-data, …)
+ * are structurally absent, never constructed-then-stripped.
+ *
+ * Every call re-asserts BOTH the leaf-key path set AND the structural
+ * container paths of the produced envelope (array indices normalized to
+ * `[]`); any non-whitelisted leaf — or any container that is not a proper
+ * ancestor of a whitelisted leaf (this catches a forbidden key hiding in an
+ * EMPTY array or object, which a leaf-only walk cannot see) — fails closed:
+ * the violating payload is withheld and an `unavailable` envelope with a
+ * stable internal error code is returned instead. The production self-check
+ * does NOT include the Gate 2 experimental sentinel regex — sentinel
+ * scanning is a test technique (see the capability tests).
+ *
+ * Layer contract (v0.5 §7.1): this facade is protocol-independent. It does
+ * NOT build MCP `content` blocks, does NOT set `isError`, and contains no
+ * transport/execution-boundary logic — the 32 KiB response budget and the
+ * 10 s call deadline are MCP Adapter (Gate 4) responsibilities and must not
+ * be implemented here. Read-model execution errors (an unexpected throw)
+ * propagate to the Adapter, which maps them per the Gate 4 contract; they
+ * are deliberately NOT swallowed into this envelope (v0.5 §7.3).
+ *
+ * Zero file I/O: everything is an in-memory projection over the read model's
+ * result, so this module is not registered in io-seam-registry.json (only
+ * files that actually perform controlled I/O are registered).
+ *
+ * OD-A scope (Owner decision 2026-11-01, v0.5 §8.2): od-a-v1 governs MCP
+ * Tool RESPONSE DISCLOSURE only. It is not a global agent data boundary and
+ * does not prevent the existing CLI (Skill-guided) from returning the full
+ * `pd.pain-recall.v1` output.
+ */
+import { type AssociationType, type ItemAvailability, type SourceAvailability } from './pain-recall-read-model.js';
+export declare const CAPABILITY_SCHEMA_VERSION: 'pd.capability.v1';
+export declare const OD_A_DISCLOSURE_PROFILE: 'od-a-v1';
+export declare const RECALL_PAIN_CAPABILITY_ID: 'pd_recall_principle_pains';
+/** Trusted-context input. `workspaceDir` is injected by the Adapter (launch
+ * configuration); it must NEVER be a model-supplied tool parameter. */
+export interface PainRecallCapabilityInput {
+    readonly workspaceDir: string;
+    readonly principleId: string;
+    readonly limit?: number;
+}
+export type PainRecallCapabilityStatus = 'ok' | 'no_matches' | 'partial' | 'not_found' | 'unavailable' | 'invalid_input';
+export interface PainRecallCapabilityPrinciple {
+    readonly requestedId: string;
+    readonly identityStatus: 'resolved' | 'not_found' | 'ambiguous';
+}
+export interface PainRecallCapabilityQuery {
+    readonly limit: number;
+    readonly contextUsedForRanking: boolean;
+    readonly truncated: boolean;
+}
+export interface PainRecallCapabilityResultEntry {
+    readonly association: {
+        readonly type: AssociationType;
+        readonly confidence: 'explicit' | 'lineage_verified';
+    };
+    readonly availability: {
+        readonly painEvent: 'available';
+        readonly diagnoses: ItemAvailability;
+        readonly correctionEvidence: ItemAvailability;
+    };
+}
+export interface PainRecallCapabilityData {
+    readonly principle: PainRecallCapabilityPrinciple;
+    readonly query: PainRecallCapabilityQuery;
+    readonly results: readonly PainRecallCapabilityResultEntry[];
+    readonly summary: {
+        readonly returned: number;
+        readonly availableCandidates: number;
+        readonly truncated: boolean;
+    };
+    readonly sources: {
+        readonly ledger: SourceAvailability;
+        readonly trajectoryDb: SourceAvailability;
+        readonly stateDb: SourceAvailability;
+    };
+    readonly unresolvedAssociations: readonly {
+        readonly reason: string;
+    }[];
+}
+export interface PainRecallCapabilityProvenanceSource {
+    readonly name: 'ledger' | 'trajectoryDb' | 'stateDb';
+    readonly status: SourceAvailability;
+}
+export interface PainRecallCapabilityProvenance {
+    readonly workspaceBinding: 'configured';
+    readonly sources: readonly PainRecallCapabilityProvenanceSource[];
+}
+export interface PainRecallCapabilityWarning {
+    readonly code: string;
+    readonly message: string;
+}
+export interface PainRecallCapabilityError {
+    readonly code: string;
+    readonly message: string;
+}
+export interface PainRecallCapabilityNextAction {
+    readonly code: string;
+    readonly message: string;
+}
+/** The `pd.capability.v1` envelope (v0.5 §7.2). `data` is non-null for every
+ * status except `unavailable` and `invalid_input`, where nothing may be
+ * disclosed about the workspace. */
+export interface PainRecallCapabilityResult {
+    readonly schemaVersion: typeof CAPABILITY_SCHEMA_VERSION;
+    readonly capability: typeof RECALL_PAIN_CAPABILITY_ID;
+    readonly disclosureProfile: typeof OD_A_DISCLOSURE_PROFILE;
+    readonly status: PainRecallCapabilityStatus;
+    readonly data: PainRecallCapabilityData | null;
+    readonly provenance: PainRecallCapabilityProvenance;
+    readonly warnings: readonly PainRecallCapabilityWarning[];
+    readonly error: PainRecallCapabilityError | null;
+    readonly nextAction: PainRecallCapabilityNextAction | null;
+}
+/**
+ * Recall a principle's verifiably-associated historical pains through the
+ * od-a-v1 disclosure profile.
+ *
+ * Duty sequence (v0.5 §7.1): validate input (fail-closed `invalid_input`,
+ * the read model is never called on bad input) → `recallPains` on the trusted
+ * workspace → OD-A projection (construction IS the whitelist) → leaf AND
+ * structural key-path self-check (violation ⇒ withhold the payload, return
+ * `unavailable`) → return.
+ *
+ * Resource constraint owned here (v0.5 §7.5.2, the only Core-layer limit):
+ * `limit ∈ [1, 10]`, default `PAIN_RECALL_DEFAULT_LIMIT` (3); the returned
+ * entry count is bounded by the read model's existing truncation semantics
+ * (≤ limit ≤ 10). The 32 KiB response budget and the 10 s deadline are NOT
+ * implemented here — they are Gate 4 MCP Adapter responsibilities.
+ */
+export declare function recallPrinciplePainsCapability(input: PainRecallCapabilityInput): Promise<PainRecallCapabilityResult>;
+//# sourceMappingURL=pain-recall-capability.d.ts.map

package/dist/runtime-v2/pain-recall-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-recall-capability.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-recall-capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAGrB,KAAK,kBAAkB,EACxB,MAAM,6BAA6B,CAAC;AAErC,eAAO,MAAM,yBAAyB,EAAG,kBAA2B,CAAC;AACrE,eAAO,MAAM,uBAAuB,EAAG,SAAkB,CAAC;AAC1D,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAE9E;uEACuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAClC,IAAI,GACJ,YAAY,GACZ,SAAS,GACT,WAAW,GACX,aAAa,GACb,eAAe,CAAC;AAEpB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,kBAAkB,CAAA;KAAE,CAAC;IAC/G,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;QAChC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACrC,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;KAC/C,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACnH,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAC3I,QAAQ,CAAC,sBAAsB,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzE;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,oCAAoC,EAAE,CAAC;CACnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;oCAEoC;AACpC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,yBAAyB,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,OAAO,yBAAyB,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,uBAAuB,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,8BAA8B,GAAG,IAAI,CAAC;CAC5D;AA4QD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAoBrC"}

package/dist/runtime-v2/pain-recall-capability.js

@@ -0,0 +1,334 @@
+/**
+ * Pain Recall Capability Facade — SPEC-PD-AGENT-CAPABILITY-API-001 v0.5 §7/§8.
+ *
+ * The single OD-A projection authority: constructs the protocol-independent
+ * `pd.capability.v1` envelope for `pd_recall_principle_pains` from the full
+ * PainRecallResult produced by the read model. The envelope is built
+ * field-by-field from the frozen od-a-v1 whitelist ("construction IS the
+ * whitelist") — DENY fields (canonicalId, painId, evidenceRefs, pain text,
+ * diagnoses.*, correctionEvidence.*, lineage hops, statusDetail-as-data, …)
+ * are structurally absent, never constructed-then-stripped.
+ *
+ * Every call re-asserts BOTH the leaf-key path set AND the structural
+ * container paths of the produced envelope (array indices normalized to
+ * `[]`); any non-whitelisted leaf — or any container that is not a proper
+ * ancestor of a whitelisted leaf (this catches a forbidden key hiding in an
+ * EMPTY array or object, which a leaf-only walk cannot see) — fails closed:
+ * the violating payload is withheld and an `unavailable` envelope with a
+ * stable internal error code is returned instead. The production self-check
+ * does NOT include the Gate 2 experimental sentinel regex — sentinel
+ * scanning is a test technique (see the capability tests).
+ *
+ * Layer contract (v0.5 §7.1): this facade is protocol-independent. It does
+ * NOT build MCP `content` blocks, does NOT set `isError`, and contains no
+ * transport/execution-boundary logic — the 32 KiB response budget and the
+ * 10 s call deadline are MCP Adapter (Gate 4) responsibilities and must not
+ * be implemented here. Read-model execution errors (an unexpected throw)
+ * propagate to the Adapter, which maps them per the Gate 4 contract; they
+ * are deliberately NOT swallowed into this envelope (v0.5 §7.3).
+ *
+ * Zero file I/O: everything is an in-memory projection over the read model's
+ * result, so this module is not registered in io-seam-registry.json (only
+ * files that actually perform controlled I/O are registered).
+ *
+ * OD-A scope (Owner decision 2026-11-01, v0.5 §8.2): od-a-v1 governs MCP
+ * Tool RESPONSE DISCLOSURE only. It is not a global agent data boundary and
+ * does not prevent the existing CLI (Skill-guided) from returning the full
+ * `pd.pain-recall.v1` output.
+ */
+import { recallPains, PAIN_RECALL_DEFAULT_LIMIT, PAIN_RECALL_MIN_LIMIT, PAIN_RECALL_MAX_LIMIT, } from './pain-recall-read-model.js';
+export const CAPABILITY_SCHEMA_VERSION = 'pd.capability.v1';
+export const OD_A_DISCLOSURE_PROFILE = 'od-a-v1';
+export const RECALL_PAIN_CAPABILITY_ID = 'pd_recall_principle_pains';
+/**
+ * Frozen od-a-v1 allowed leaf-key paths (array indices normalized to `[]`).
+ * Copied field-by-field from the hash-anchored Gate 2 executable projection
+ * (`project.mjs` ALLOWED_PATHS) plus the single v0.5 addition
+ * `disclosureProfile`. NOT exported: the contract is pinned behaviorally by
+ * the capability tests; widening requires a new profile version + Owner
+ * decision (v0.5 §7.4). Do not rebuild this list from documentation.
+ */
+const ALLOWED_PATHS = new Set([
+    'schemaVersion', 'capability', 'status', 'disclosureProfile',
+    'data.principle.requestedId', 'data.principle.identityStatus',
+    'data.query.limit', 'data.query.contextUsedForRanking', 'data.query.truncated',
+    'data.results[].association.type', 'data.results[].association.confidence',
+    'data.results[].availability.painEvent', 'data.results[].availability.diagnoses',
+    'data.results[].availability.correctionEvidence',
+    'data.summary.returned', 'data.summary.availableCandidates', 'data.summary.truncated',
+    'data.sources.ledger', 'data.sources.trajectoryDb', 'data.sources.stateDb',
+    'data.unresolvedAssociations[].reason',
+    'provenance.workspaceBinding', 'provenance.sources[].name', 'provenance.sources[].status',
+    'warnings[].code', 'warnings[].message',
+    'error', 'error.code', 'error.message',
+    'nextAction', 'nextAction.code', 'nextAction.message',
+]);
+/**
+ * OUTER_STATUS — the single authority table (v0.5 §7.3). `ambiguous_principle`
+ * is RESERVED: the read model never produces it today (identity resolves
+ * exactly or reports not_found), and this facade must not fabricate the
+ * capability; the mapping row exists so a future read-model change surfaces
+ * as invalid_input instead of silently passing through. `denied` /
+ * `unconfirmed` are NOT enabled in the first release (v0.5 §7.3).
+ */
+const OUTER_STATUS = {
+    ok: 'ok',
+    no_matches: 'no_matches',
+    partial: 'partial',
+    principle_not_found: 'not_found',
+    pain_not_found: 'not_found',
+    source_missing: 'unavailable',
+    source_unreadable: 'unavailable',
+    ambiguous_principle: 'invalid_input', // reserved — not produced (v0.5 F8)
+};
+/** errorFor — status → stable error derivation (Gate 2 semantics, verbatim).
+ * `statusDetail` participates ONLY here (pain_not_found code derivation);
+ * it is never emitted as a data field (frozen per v0.5 §8.1 detail 1). */
+function errorFor(result) {
+    const s = result.status;
+    if (s === 'ok' || s === 'no_matches' || s === 'partial')
+        return null;
+    if (s === 'principle_not_found') {
+        return { code: 'principle_not_found', message: 'The requested principle id does not resolve to a canonical ledger principle.' };
+    }
+    if (s === 'pain_not_found') {
+        return {
+            code: result.statusDetail ?? 'pain_not_found',
+            message: 'The requested pain is not within this principle\'s verified associations.',
+        };
+    }
+    if (s === 'source_missing') {
+        return { code: 'source_missing', message: 'A required data source is missing; the query cannot be answered.' };
+    }
+    if (s === 'source_unreadable') {
+        return { code: 'source_unreadable', message: 'A required data source is unreadable; the query cannot be answered.' };
+    }
+    // Reserved row (ambiguous_principle → invalid_input): a stable refusal
+    // without fabricating capability the read model never claimed.
+    return { code: 'invalid_input', message: 'The request violates the tool input contract.' };
+}
+/** OD-A projection of a full PainRecallResult into the envelope. Construction
+ * IS the whitelist: every field below is an ALLOWED_PATHS leaf; nothing else
+ * from `result` is reachable. (Gate 2 projectEnvelope + disclosureProfile +
+ * the v0.5 §7.2 data-null rule: an `unavailable` outcome discloses no data.) */
+function projectEnvelope(result) {
+    const status = OUTER_STATUS[result.status] ?? 'unavailable';
+    return {
+        schemaVersion: CAPABILITY_SCHEMA_VERSION,
+        capability: RECALL_PAIN_CAPABILITY_ID,
+        disclosureProfile: OD_A_DISCLOSURE_PROFILE,
+        status,
+        // §7.2: data is null for BOTH unavailable and invalid_input (the
+        // reserved ambiguous→invalid_input row included — review round 2,
+        // P2-3). Every other status carries the projected data object.
+        data: status === 'unavailable' || status === 'invalid_input' ? null : {
+            principle: {
+                requestedId: result.principle.requestedId,
+                identityStatus: result.principle.identityStatus,
+            },
+            query: {
+                limit: result.query.limit,
+                contextUsedForRanking: result.query.contextUsedForRanking,
+                truncated: result.query.truncated,
+            },
+            results: result.results.map((e) => ({
+                association: { type: e.association.type, confidence: e.association.confidence },
+                availability: {
+                    painEvent: e.availability.painEvent,
+                    diagnoses: e.availability.diagnoses,
+                    correctionEvidence: e.availability.correctionEvidence,
+                },
+            })),
+            summary: {
+                returned: result.summary.returned,
+                availableCandidates: result.summary.availableCandidates,
+                truncated: result.summary.truncated,
+            },
+            sources: {
+                ledger: result.sources.ledger,
+                trajectoryDb: result.sources.trajectoryDb,
+                stateDb: result.sources.stateDb,
+            },
+            unresolvedAssociations: result.unresolvedAssociations.map((u) => ({ reason: u.reason })),
+        },
+        provenance: {
+            workspaceBinding: 'configured',
+            sources: [
+                { name: 'ledger', status: result.sources.ledger },
+                { name: 'trajectoryDb', status: result.sources.trajectoryDb },
+                { name: 'stateDb', status: result.sources.stateDb },
+            ],
+        },
+        warnings: [],
+        error: errorFor(result),
+        nextAction: null,
+    };
+}
+/** Deep key-path walk over the envelope for whitelist assertions. Leaves
+ * (primitives/null) contribute their exact path; every container additionally
+ * contributes a STRUCTURAL path — objects at `prefix`, arrays at
+ * `prefix + '[]'` — so a forbidden key cannot hide behind an EMPTY array or
+ * empty object (a leaf-only walk would see nothing at all; review round 2,
+ * P1-2). Gate 2's leaf-only collectPaths semantics remain for the leaf set. */
+function collectPaths(value, prefix, out) {
+    if (Array.isArray(value)) {
+        for (const v of value)
+            collectPaths(v, prefix + '[]', out);
+        return;
+    }
+    if (value !== null && typeof value === 'object') {
+        for (const [k, v] of Object.entries(value))
+            collectPaths(v, prefix ? prefix + '.' + k : k, out);
+        return;
+    }
+    out.add(prefix);
+}
+/** All structural container paths of the envelope: objects at their key path,
+ * arrays at their `[]`-normalized key path. Empty containers contribute ONLY
+ * a structural path — exactly the case a leaf-only walk cannot see. */
+function collectStructuralPaths(value, prefix, out) {
+    if (Array.isArray(value)) {
+        if (prefix !== '')
+            out.add(prefix + '[]');
+        for (const v of value)
+            collectStructuralPaths(v, prefix + '[]', out);
+        return;
+    }
+    if (value !== null && typeof value === 'object') {
+        if (prefix !== '')
+            out.add(prefix);
+        for (const [k, v] of Object.entries(value))
+            collectStructuralPaths(v, prefix ? prefix + '.' + k : k, out);
+        return;
+    }
+}
+const ALLOWED_PATH_LIST = [...ALLOWED_PATHS];
+/** A structural container path is legal only when it is a proper ancestor of
+ * at least one whitelisted leaf path: objects must be followed by a whitelisted
+ * `structural.` descendant, arrays by a whitelisted `structural[]…` one. A
+ * whitelisted LEAF path made a container (e.g. someone turns `status` into an
+ * object) has no such descendant and fails here. */
+function isAllowedStructuralPath(structural, isArray) {
+    const marker = isArray ? `${structural}[]` : `${structural}.`;
+    return ALLOWED_PATH_LIST.some((p) => p.startsWith(marker));
+}
+/** Production self-check: BOTH leaf paths and structural container paths of
+ * the envelope, against the frozen whitelist. Violations are returned to the
+ * facade, which withholds the whole payload — the violating paths/values
+ * never leave this module.
+ *
+ * §7.2 null form: `data: null` is the envelope's explicit empty marker for
+ * the `unavailable` / `invalid_input` statuses. It surfaces as a bare `data`
+ * leaf, which the frozen od-a-v1 path set does not list (the Gate 2
+ * prototype never projected a null data) — the whitelist governs the
+ * POPULATED shape of `data.*`, so the null marker is exempted here and
+ * nowhere else. */
+function collectDisclosureViolations(envelope) {
+    const leafPaths = new Set();
+    collectPaths(envelope, '', leafPaths);
+    if (envelope.data === null)
+        leafPaths.delete('data');
+    const violations = [...leafPaths].filter((p) => !ALLOWED_PATHS.has(p));
+    const structuralPaths = new Set();
+    collectStructuralPaths(envelope, '', structuralPaths);
+    for (const p of structuralPaths) {
+        const isArray = p.endsWith('[]');
+        const base = isArray ? p.slice(0, -2) : p;
+        if (!isAllowedStructuralPath(base, isArray))
+            violations.push(p);
+    }
+    return violations;
+}
+// ── Input validation (rc-1/rc-2: unknown in, field-by-field guards) ─────────
+const PRINCIPLE_ID_MAX_LENGTH = 200;
+const INPUT_KEYS = new Set(['workspaceDir', 'principleId', 'limit']);
+function truncateForMessage(value, max = 40) {
+    return value.length <= max ? value : `${value.slice(0, max)}…`;
+}
+function invalid(reason) {
+    return { ok: false, error: { code: 'invalid_input', message: `The request violates the tool input contract: ${reason}` } };
+}
+/**
+ * Validate the capability input field by field, rejecting every undeclared
+ * property. Fail-closed: any violation prevents the read model from being
+ * called at all. Messages name the field and the rule — never the value
+ * (bounded output, rc-8; the input is untrusted model output in the Gate 4
+ * deployment).
+ */
+function validateCapabilityInput(input) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input)) {
+        return invalid('the input must be an object');
+    }
+    const record = input;
+    for (const key of Object.keys(record)) {
+        if (!INPUT_KEYS.has(key)) {
+            return invalid(`unknown property "${truncateForMessage(key)}" is not allowed`);
+        }
+    }
+    const { workspaceDir, principleId, limit } = record;
+    if (typeof workspaceDir !== 'string' || workspaceDir.length === 0) {
+        return invalid('workspaceDir must be a non-empty string (injected trusted context)');
+    }
+    if (typeof principleId !== 'string' || principleId.length === 0 || principleId.length > PRINCIPLE_ID_MAX_LENGTH) {
+        return invalid(`principleId must be a string of 1..${PRINCIPLE_ID_MAX_LENGTH} characters`);
+    }
+    if (limit !== undefined) {
+        if (typeof limit !== 'number' || !Number.isInteger(limit) || limit < PAIN_RECALL_MIN_LIMIT || limit > PAIN_RECALL_MAX_LIMIT) {
+            return invalid(`limit must be an integer between ${PAIN_RECALL_MIN_LIMIT} and ${PAIN_RECALL_MAX_LIMIT}`);
+        }
+    }
+    return { ok: true, value: { workspaceDir, principleId, limit: limit ?? PAIN_RECALL_DEFAULT_LIMIT } };
+}
+// ── Fail-closed envelopes ────────────────────────────────────────────────────
+function envelopeShell(status, error) {
+    return {
+        schemaVersion: CAPABILITY_SCHEMA_VERSION,
+        capability: RECALL_PAIN_CAPABILITY_ID,
+        disclosureProfile: OD_A_DISCLOSURE_PROFILE,
+        status,
+        data: null,
+        provenance: { workspaceBinding: 'configured', sources: [] },
+        warnings: [],
+        error,
+        nextAction: null,
+    };
+}
+// ── Capability entry point ───────────────────────────────────────────────────
+/**
+ * Recall a principle's verifiably-associated historical pains through the
+ * od-a-v1 disclosure profile.
+ *
+ * Duty sequence (v0.5 §7.1): validate input (fail-closed `invalid_input`,
+ * the read model is never called on bad input) → `recallPains` on the trusted
+ * workspace → OD-A projection (construction IS the whitelist) → leaf AND
+ * structural key-path self-check (violation ⇒ withhold the payload, return
+ * `unavailable`) → return.
+ *
+ * Resource constraint owned here (v0.5 §7.5.2, the only Core-layer limit):
+ * `limit ∈ [1, 10]`, default `PAIN_RECALL_DEFAULT_LIMIT` (3); the returned
+ * entry count is bounded by the read model's existing truncation semantics
+ * (≤ limit ≤ 10). The 32 KiB response budget and the 10 s deadline are NOT
+ * implemented here — they are Gate 4 MCP Adapter responsibilities.
+ */
+export async function recallPrinciplePainsCapability(input) {
+    const validated = validateCapabilityInput(input);
+    if (!validated.ok) {
+        return envelopeShell('invalid_input', validated.error);
+    }
+    const raw = await recallPains(validated.value.workspaceDir, {
+        requestedPrincipleId: validated.value.principleId,
+        limit: validated.value.limit,
+    });
+    const envelope = projectEnvelope(raw);
+    if (collectDisclosureViolations(envelope).length > 0) {
+        // Disclosure assertion failed: the payload is withheld (never returned),
+        // and the message stays generic so a violating field cannot leak through
+        // the failure channel either (values AND key paths stay internal).
+        return envelopeShell('unavailable', {
+            code: 'disclosure_assertion_failed',
+            message: 'Internal disclosure assertion failed; the response was withheld.',
+        });
+    }
+    return envelope;
+}
+//# sourceMappingURL=pain-recall-capability.js.map

package/dist/runtime-v2/pain-recall-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-recall-capability.js","sourceRoot":"","sources":["../../src/runtime-v2/pain-recall-capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,GAMtB,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAA2B,CAAC;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,2BAAoC,CAAC;AAuF9E;;;;;;;GAOG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB;IAC5D,4BAA4B,EAAE,+BAA+B;IAC7D,kBAAkB,EAAE,kCAAkC,EAAE,sBAAsB;IAC9E,iCAAiC,EAAE,uCAAuC;IAC1E,uCAAuC,EAAE,uCAAuC;IAChF,gDAAgD;IAChD,uBAAuB,EAAE,kCAAkC,EAAE,wBAAwB;IACrF,qBAAqB,EAAE,2BAA2B,EAAE,sBAAsB;IAC1E,sCAAsC;IACtC,6BAA6B,EAAE,2BAA2B,EAAE,6BAA6B;IACzF,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,YAAY,EAAE,eAAe;IACtC,YAAY,EAAE,iBAAiB,EAAE,oBAAoB;CACtD,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,YAAY,GAAmE;IACnF,EAAE,EAAE,IAAI;IACR,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,mBAAmB,EAAE,WAAW;IAChC,cAAc,EAAE,WAAW;IAC3B,cAAc,EAAE,aAAa;IAC7B,iBAAiB,EAAE,aAAa;IAChC,mBAAmB,EAAE,eAAe,EAAE,oCAAoC;CAC3E,CAAC;AAEF;;0EAE0E;AAC1E,SAAS,QAAQ,CAAC,MAAwB;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC,KAAK,qBAAqB,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8EAA8E,EAAE,CAAC;IAClI,CAAC;IACD,IAAI,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,YAAY,IAAI,gBAAgB;YAC7C,OAAO,EAAE,2EAA2E;SACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kEAAkE,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,KAAK,mBAAmB,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,qEAAqE,EAAE,CAAC;IACvH,CAAC;IACD,uEAAuE;IACvE,+DAA+D;IAC/D,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;AAC7F,CAAC;AAED;;;gFAGgF;AAChF,SAAS,eAAe,CAAC,MAAwB;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC;IAC5D,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,UAAU,EAAE,yBAAyB;QACrC,iBAAiB,EAAE,uBAAuB;QAC1C,MAAM;QACN,iEAAiE;QACjE,kEAAkE;QAClE,+DAA+D;QAC/D,IAAI,EAAE,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,SAAS,EAAE;gBACT,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;gBACzC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc;aAChD;YACD,KAAK,EAAE;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;gBACzB,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB;gBACzD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;aAClC;YACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE;gBAC/E,YAAY,EAAE;oBACZ,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,SAAS;oBACnC,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,SAAS;oBACnC,kBAAkB,EAAE,CAAC,CAAC,YAAY,CAAC,kBAAkB;iBACtD;aACF,CAAC,CAAC;YACH,OAAO,EAAE;gBACP,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;gBACjC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB;gBACvD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;aACpC;YACD,OAAO,EAAE;gBACP,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC7B,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;gBACzC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;aAChC;YACD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACzF;QACD,UAAU,EAAE;YACV,gBAAgB,EAAE,YAAY;YAC9B,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;gBACjD,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE;gBAC7D,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;aACpD;SACF;QACD,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC;QACvB,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED;;;;;+EAK+E;AAC/E,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc,EAAE,GAAgB;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED;;uEAEuE;AACvE,SAAS,sBAAsB,CAAC,KAAc,EAAE,MAAc,EAAE,GAAgB;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,MAAM,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,sBAAsB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1G,OAAO;IACT,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAsB,CAAC,GAAG,aAAa,CAAC,CAAC;AAEhE;;;;oDAIoD;AACpD,SAAS,uBAAuB,CAAC,UAAkB,EAAE,OAAgB;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;IAC9D,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;mBAUmB;AACnB,SAAS,2BAA2B,CAAC,QAAoC;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,sBAAsB,CAAC,QAAQ,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAE/E,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1F,SAAS,kBAAkB,CAAC,KAAa,EAAE,GAAG,GAAG,EAAE;IACjD,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AACjE,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAE7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iDAAiD,MAAM,EAAE,EAAE,EAAE,CAAC;AAC7H,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAG7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,qBAAqB,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACpD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC,oEAAoE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAChH,OAAO,OAAO,CAAC,sCAAsC,uBAAuB,aAAa,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,qBAAqB,IAAI,KAAK,GAAG,qBAAqB,EAAE,CAAC;YAC5H,OAAO,OAAO,CAAC,oCAAoC,qBAAqB,QAAQ,qBAAqB,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,yBAAyB,EAAE,EAAE,CAAC;AACvG,CAAC;AAED,gFAAgF;AAEhF,SAAS,aAAa,CAAC,MAAkC,EAAE,KAAuC;IAChG,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,UAAU,EAAE,yBAAyB;QACrC,iBAAiB,EAAE,uBAAuB;QAC1C,MAAM;QACN,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QAC3D,QAAQ,EAAE,EAAE;QACZ,KAAK;QACL,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAgC;IAEhC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE;QAC1D,oBAAoB,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW;QACjD,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,OAAO,aAAa,CAAC,aAAa,EAAE;YAClC,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runtime-v2/pain-recall-read-model.d.ts

@@ -0,0 +1,113 @@
+export declare const PAIN_RECALL_SCHEMA_VERSION = "pd.pain-recall.v1";
+export declare const PAIN_RECALL_DEFAULT_LIMIT = 3;
+export declare const PAIN_RECALL_MIN_LIMIT = 1;
+export declare const PAIN_RECALL_MAX_LIMIT = 10;
+export type PainRecallStatus = 'ok' | 'no_matches' | 'principle_not_found' | 'ambiguous_principle' | 'pain_not_found' | 'source_missing' | 'source_unreadable' | 'partial';
+export type SourceAvailability = 'ok' | 'missing' | 'unreadable' | 'not_checked';
+export type AssociationType = 'explicit_reuse' | 'derived_from' | 'multiple_paths';
+export interface RecallEvidenceRef {
+    kind: 'reuse_evidence' | 'candidate_lineage';
+    candidateId: string;
+    taskId?: string;
+    decidedAt?: string;
+    decisionId?: string;
+}
+export interface RecallAssociation {
+    type: AssociationType;
+    confidence: 'explicit' | 'lineage_verified';
+    evidenceRefs: RecallEvidenceRef[];
+}
+export interface PainEventView {
+    occurredAt: string | null;
+    source: string | null;
+    host: string;
+    score: number | null;
+    severity: string | null;
+    reason: string | null;
+    text: string | null;
+    /** A verbatim owner statement is only reported via correctionEvidence; the
+     * pain row itself never carries one, so this is structurally null. */
+    rawStatement: null;
+}
+export interface DiagnosisView {
+    diagnosisId: string;
+    taskId: string;
+    category: string;
+    rootCause: string;
+    supportingEvidence: readonly {
+        sourceRef: string;
+        note: string;
+    }[];
+    confidence: number | null;
+    isOriginalOwnerStatement: false;
+}
+export interface CorrectionEvidenceView {
+    text: string;
+    classification?: string;
+    channel?: string;
+    sessionId?: string;
+    occurredAt?: string;
+}
+export type ItemAvailability = 'available' | 'not_recorded' | 'unreadable';
+export interface RecallLineageHop {
+    from: string;
+    to: string;
+    relation: string;
+}
+export interface PainRecallEntry {
+    painId: string;
+    association: RecallAssociation;
+    pain: PainEventView;
+    diagnoses: DiagnosisView[];
+    correctionEvidence: CorrectionEvidenceView | null;
+    availability: {
+        painEvent: 'available';
+        diagnoses: ItemAvailability;
+        correctionEvidence: ItemAvailability;
+    };
+    lineage: RecallLineageHop[];
+}
+export interface PainRecallQuery {
+    requestedPrincipleId: string;
+    painId?: string;
+    context?: string;
+    /** Validated upstream: integer within [1, 10]. */
+    limit: number;
+}
+export interface UnresolvedAssociation {
+    painId?: string;
+    candidateId?: string;
+    reason: string;
+}
+export interface PainRecallResult {
+    schemaVersion: string;
+    status: PainRecallStatus;
+    /** Sub-reason for pain_not_found: not_associated | pain_event_not_found. */
+    statusDetail?: string;
+    principle: {
+        requestedId: string;
+        canonicalId: string | null;
+        identityStatus: 'resolved' | 'not_found' | 'ambiguous';
+        text?: string;
+    };
+    query: {
+        limit: number;
+        painId?: string;
+        contextUsedForRanking: boolean;
+        truncated: boolean;
+    };
+    results: PainRecallEntry[];
+    summary: {
+        returned: number;
+        availableCandidates: number;
+        truncated: boolean;
+    };
+    sources: {
+        ledger: SourceAvailability;
+        trajectoryDb: SourceAvailability;
+        stateDb: SourceAvailability;
+    };
+    unresolvedAssociations: UnresolvedAssociation[];
+}
+export declare function recallPains(workspaceDir: string, query: PainRecallQuery): Promise<PainRecallResult>;
+//# sourceMappingURL=pain-recall-read-model.d.ts.map

package/dist/runtime-v2/pain-recall-read-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pain-recall-read-model.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-recall-read-model.ts"],"names":[],"mappings":"AAmEA,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,MAAM,MAAM,gBAAgB,GACxB,IAAI,GACJ,YAAY,GACZ,qBAAqB,GACrB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEnF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,UAAU,GAAG,kBAAkB,CAAC;IAC5C,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB;0EACsE;IACtE,YAAY,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,SAAS;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,wBAAwB,EAAE,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,cAAc,GAAG,YAAY,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,iBAAiB,CAAC;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,kBAAkB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAClD,YAAY,EAAE;QAAE,SAAS,EAAE,WAAW,CAAC;QAAC,SAAS,EAAE,gBAAgB,CAAC;QAAC,kBAAkB,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC5G,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;QACvD,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9F,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/E,OAAO,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAC;QAAC,YAAY,EAAE,kBAAkB,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE,CAAC;IACvG,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;CACjD;AAoSD,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+YzG"}