create-principles-disciple 1.101.0 → 1.102.0

package/core/dist/runtime-v2/config/pd-profile-constants.js

@@ -0,0 +1,145 @@
+/**
+ * PD Profile Defaults — PRI-304 / PRI-466
+ *
+ * Deterministic defaults for agent behavioral profile config.
+ * Matches existing PROFILE_DEFAULTS in openclaw-plugin/src/core/profile.ts
+ * for backward compatibility with the transition to core types.
+ *
+ * All defaults are testable and explicit.
+ */
+// ── Default Sub-Configs ─────────────────────────────────────────────────────
+export const PROFILE_DEFAULT_GATE = {
+    require_plan_for_risk_paths: true,
+    require_audit_before_write: true,
+    require_reviewer_after_write: true,
+};
+export const PROFILE_DEFAULT_TESTS = {
+    on_change: 'smoke',
+    on_risk_change: 'unit',
+    commands: {},
+};
+export const PROFILE_DEFAULT_ADAPTIVE_PAIN = {
+    enabled: true,
+    spiral_boost: 20,
+    min_threshold: 15,
+    max_threshold: 70,
+    backlog_trigger: 6,
+    hard_failure_trigger: 1,
+    low_recent_success_boost: 15,
+    high_recent_pain_boost: 10,
+};
+export const PROFILE_DEFAULT_PAIN = {
+    soft_capture_threshold: 30,
+    adaptive: { ...PROFILE_DEFAULT_ADAPTIVE_PAIN },
+};
+export const PROFILE_DEFAULT_LIFECYCLE = {
+    enabled: true,
+    heartbeat_stale_hours: 72,
+};
+export const PROFILE_DEFAULT_PLAN_APPROVALS = {
+    enabled: false,
+    max_lines_override: -1,
+    allowed_patterns: [],
+    allowed_operations: [],
+};
+export const PROFILE_DEFAULT_PROGRESSIVE_GATE = {
+    enabled: true,
+    plan_approvals: { ...PROFILE_DEFAULT_PLAN_APPROVALS },
+};
+export const PROFILE_DEFAULT_EDIT_VERIFICATION = {
+    enabled: true,
+    max_file_size_bytes: 10 * 1024 * 1024, // 10MB
+    fuzzy_match_enabled: true,
+    fuzzy_match_threshold: 0.8,
+    skip_large_file_action: 'warn',
+};
+export const PROFILE_DEFAULT_THINKING_CHECKPOINT = {
+    enabled: false, // Default OFF to avoid blocking new users
+    window_ms: 5 * 60 * 1000, // 5 minutes
+    high_risk_tools: ['run_shell_command', 'delete_file', 'move_file'],
+};
+export const PROFILE_DEFAULT_CUSTOM_GUARDS = [];
+// ── Full Profile Defaults ───────────────────────────────────────────────────
+export const PROFILE_DEFAULTS = {
+    audit_level: 'medium',
+    risk_paths: [],
+    evolution_mode: 'realtime',
+    gate: { ...PROFILE_DEFAULT_GATE },
+    tests: { ...PROFILE_DEFAULT_TESTS },
+    pain: {
+        soft_capture_threshold: PROFILE_DEFAULT_PAIN.soft_capture_threshold,
+        adaptive: { ...PROFILE_DEFAULT_ADAPTIVE_PAIN },
+    },
+    lifecycle: { ...PROFILE_DEFAULT_LIFECYCLE },
+    progressive_gate: {
+        enabled: PROFILE_DEFAULT_PROGRESSIVE_GATE.enabled,
+        plan_approvals: { ...PROFILE_DEFAULT_PLAN_APPROVALS },
+    },
+    edit_verification: { ...PROFILE_DEFAULT_EDIT_VERIFICATION },
+    thinking_checkpoint: { ...PROFILE_DEFAULT_THINKING_CHECKPOINT },
+    custom_guards: [],
+};
+/**
+ * Deep-merge a partial user profile with PROFILE_DEFAULTS.
+ * Returns a fully resolved ProfileConfig.
+ */
+export function resolveProfile(userProfile) {
+    if (!userProfile) {
+        return { ...PROFILE_DEFAULTS };
+    }
+    return {
+        audit_level: userProfile.audit_level ?? PROFILE_DEFAULTS.audit_level,
+        risk_paths: userProfile.risk_paths ?? PROFILE_DEFAULTS.risk_paths,
+        evolution_mode: userProfile.evolution_mode ?? PROFILE_DEFAULTS.evolution_mode,
+        gate: {
+            require_plan_for_risk_paths: userProfile.gate?.require_plan_for_risk_paths ?? PROFILE_DEFAULTS.gate.require_plan_for_risk_paths,
+            require_audit_before_write: userProfile.gate?.require_audit_before_write ?? PROFILE_DEFAULTS.gate.require_audit_before_write,
+            require_reviewer_after_write: userProfile.gate?.require_reviewer_after_write ?? PROFILE_DEFAULTS.gate.require_reviewer_after_write,
+        },
+        tests: {
+            on_change: userProfile.tests?.on_change ?? PROFILE_DEFAULTS.tests.on_change,
+            on_risk_change: userProfile.tests?.on_risk_change ?? PROFILE_DEFAULTS.tests.on_risk_change,
+            commands: { ...PROFILE_DEFAULTS.tests.commands, ...(userProfile.tests?.commands ?? {}) },
+        },
+        pain: {
+            soft_capture_threshold: userProfile.pain?.soft_capture_threshold ?? PROFILE_DEFAULTS.pain.soft_capture_threshold,
+            adaptive: {
+                enabled: userProfile.pain?.adaptive?.enabled ?? PROFILE_DEFAULTS.pain.adaptive.enabled,
+                spiral_boost: userProfile.pain?.adaptive?.spiral_boost ?? PROFILE_DEFAULTS.pain.adaptive.spiral_boost,
+                min_threshold: userProfile.pain?.adaptive?.min_threshold ?? PROFILE_DEFAULTS.pain.adaptive.min_threshold,
+                max_threshold: userProfile.pain?.adaptive?.max_threshold ?? PROFILE_DEFAULTS.pain.adaptive.max_threshold,
+                backlog_trigger: userProfile.pain?.adaptive?.backlog_trigger ?? PROFILE_DEFAULTS.pain.adaptive.backlog_trigger,
+                hard_failure_trigger: userProfile.pain?.adaptive?.hard_failure_trigger ?? PROFILE_DEFAULTS.pain.adaptive.hard_failure_trigger,
+                low_recent_success_boost: userProfile.pain?.adaptive?.low_recent_success_boost ?? PROFILE_DEFAULTS.pain.adaptive.low_recent_success_boost,
+                high_recent_pain_boost: userProfile.pain?.adaptive?.high_recent_pain_boost ?? PROFILE_DEFAULTS.pain.adaptive.high_recent_pain_boost,
+            },
+        },
+        lifecycle: {
+            enabled: userProfile.lifecycle?.enabled ?? PROFILE_DEFAULTS.lifecycle.enabled,
+            heartbeat_stale_hours: userProfile.lifecycle?.heartbeat_stale_hours ?? PROFILE_DEFAULTS.lifecycle.heartbeat_stale_hours,
+        },
+        progressive_gate: {
+            enabled: userProfile.progressive_gate?.enabled ?? PROFILE_DEFAULTS.progressive_gate.enabled,
+            plan_approvals: {
+                enabled: userProfile.progressive_gate?.plan_approvals?.enabled ?? PROFILE_DEFAULTS.progressive_gate.plan_approvals.enabled,
+                max_lines_override: userProfile.progressive_gate?.plan_approvals?.max_lines_override ?? PROFILE_DEFAULTS.progressive_gate.plan_approvals.max_lines_override,
+                allowed_patterns: userProfile.progressive_gate?.plan_approvals?.allowed_patterns ?? PROFILE_DEFAULTS.progressive_gate.plan_approvals.allowed_patterns,
+                allowed_operations: userProfile.progressive_gate?.plan_approvals?.allowed_operations ?? PROFILE_DEFAULTS.progressive_gate.plan_approvals.allowed_operations,
+            },
+        },
+        edit_verification: {
+            enabled: userProfile.edit_verification?.enabled ?? PROFILE_DEFAULTS.edit_verification.enabled,
+            max_file_size_bytes: userProfile.edit_verification?.max_file_size_bytes ?? PROFILE_DEFAULTS.edit_verification.max_file_size_bytes,
+            fuzzy_match_enabled: userProfile.edit_verification?.fuzzy_match_enabled ?? PROFILE_DEFAULTS.edit_verification.fuzzy_match_enabled,
+            fuzzy_match_threshold: userProfile.edit_verification?.fuzzy_match_threshold ?? PROFILE_DEFAULTS.edit_verification.fuzzy_match_threshold,
+            skip_large_file_action: userProfile.edit_verification?.skip_large_file_action ?? PROFILE_DEFAULTS.edit_verification.skip_large_file_action,
+        },
+        thinking_checkpoint: {
+            enabled: userProfile.thinking_checkpoint?.enabled ?? PROFILE_DEFAULTS.thinking_checkpoint.enabled,
+            window_ms: userProfile.thinking_checkpoint?.window_ms ?? PROFILE_DEFAULTS.thinking_checkpoint.window_ms,
+            high_risk_tools: userProfile.thinking_checkpoint?.high_risk_tools ?? PROFILE_DEFAULTS.thinking_checkpoint.high_risk_tools,
+        },
+        custom_guards: userProfile.custom_guards ?? PROFILE_DEFAULTS.custom_guards,
+    };
+}
+//# sourceMappingURL=pd-profile-constants.js.map

package/core/dist/runtime-v2/config/pd-profile-constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pd-profile-constants.js","sourceRoot":"","sources":["../../../src/runtime-v2/config/pd-profile-constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,2BAA2B,EAAE,IAAI;IACjC,0BAA0B,EAAE,IAAI;IAChC,4BAA4B,EAAE,IAAI;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAuB;IACvD,SAAS,EAAE,OAAO;IAClB,cAAc,EAAE,MAAM;IACtB,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAA8B;IACtE,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,EAAE;IACjB,eAAe,EAAE,CAAC;IAClB,oBAAoB,EAAE,CAAC;IACvB,wBAAwB,EAAE,EAAE;IAC5B,sBAAsB,EAAE,EAAE;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,sBAAsB,EAAE,EAAE;IAC1B,QAAQ,EAAE,EAAE,GAAG,6BAA6B,EAAE;CAC/C,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,OAAO,EAAE,IAAI;IACb,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAA+B;IACxE,OAAO,EAAE,KAAK;IACd,kBAAkB,EAAE,CAAC,CAAC;IACtB,gBAAgB,EAAE,EAAE;IACpB,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAiC;IAC5E,OAAO,EAAE,IAAI;IACb,cAAc,EAAE,EAAE,GAAG,8BAA8B,EAAE;CACtD,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAkC;IAC9E,OAAO,EAAE,IAAI;IACb,mBAAmB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IAC9C,mBAAmB,EAAE,IAAI;IACzB,qBAAqB,EAAE,GAAG;IAC1B,sBAAsB,EAAE,MAAM;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAoC;IAClF,OAAO,EAAE,KAAK,EAAE,0CAA0C;IAC1D,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;IACtC,eAAe,EAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,WAAW,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAyB,EAAE,CAAC;AAEtE,+EAA+E;AAE/E,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,WAAW,EAAE,QAAQ;IACrB,UAAU,EAAE,EAAE;IACd,cAAc,EAAE,UAAU;IAC1B,IAAI,EAAE,EAAE,GAAG,oBAAoB,EAAE;IACjC,KAAK,EAAE,EAAE,GAAG,qBAAqB,EAAE;IACnC,IAAI,EAAE;QACJ,sBAAsB,EAAE,oBAAoB,CAAC,sBAAsB;QACnE,QAAQ,EAAE,EAAE,GAAG,6BAA6B,EAAE;KAC/C;IACD,SAAS,EAAE,EAAE,GAAG,yBAAyB,EAAE;IAC3C,gBAAgB,EAAE;QAChB,OAAO,EAAE,gCAAgC,CAAC,OAAO;QACjD,cAAc,EAAE,EAAE,GAAG,8BAA8B,EAAE;KACtD;IACD,iBAAiB,EAAE,EAAE,GAAG,iCAAiC,EAAE;IAC3D,mBAAmB,EAAE,EAAE,GAAG,mCAAmC,EAAE;IAC/D,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,WAA+C;IAC5E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAED,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW;QACpE,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU;QACjE,cAAc,EAAE,WAAW,CAAC,cAAc,IAAI,gBAAgB,CAAC,cAAc;QAC7E,IAAI,EAAE;YACJ,2BAA2B,EAAE,WAAW,CAAC,IAAI,EAAE,2BAA2B,IAAI,gBAAgB,CAAC,IAAI,CAAC,2BAA2B;YAC/H,0BAA0B,EAAE,WAAW,CAAC,IAAI,EAAE,0BAA0B,IAAI,gBAAgB,CAAC,IAAI,CAAC,0BAA0B;YAC5H,4BAA4B,EAAE,WAAW,CAAC,IAAI,EAAE,4BAA4B,IAAI,gBAAgB,CAAC,IAAI,CAAC,4BAA4B;SACnI;QACD,KAAK,EAAE;YACL,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,SAAS;YAC3E,cAAc,EAAE,WAAW,CAAC,KAAK,EAAE,cAAc,IAAI,gBAAgB,CAAC,KAAK,CAAC,cAAc;YAC1F,QAAQ,EAAE,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE;SACzF;QACD,IAAI,EAAE;YACJ,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,gBAAgB,CAAC,IAAI,CAAC,sBAAsB;YAChH,QAAQ,EAAE;gBACR,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;gBACtF,YAAY,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACrG,aAAa,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;gBACxG,aAAa,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa;gBACxG,eAAe,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe;gBAC9G,oBAAoB,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB;gBAC7H,wBAAwB,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,wBAAwB,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB;gBACzI,sBAAsB,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,sBAAsB,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB;aACpI;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE,OAAO,IAAI,gBAAgB,CAAC,SAAS,CAAC,OAAO;YAC7E,qBAAqB,EAAE,WAAW,CAAC,SAAS,EAAE,qBAAqB,IAAI,gBAAgB,CAAC,SAAS,CAAC,qBAAqB;SACxH;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,WAAW,CAAC,gBAAgB,EAAE,OAAO,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,OAAO;YAC3F,cAAc,EAAE;gBACd,OAAO,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,EAAE,OAAO,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,OAAO;gBAC1H,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,kBAAkB;gBAC3J,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,gBAAgB;gBACrJ,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,cAAc,CAAC,kBAAkB;aAC5J;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,WAAW,CAAC,iBAAiB,EAAE,OAAO,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,OAAO;YAC7F,mBAAmB,EAAE,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,mBAAmB;YACjI,mBAAmB,EAAE,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,mBAAmB;YACjI,qBAAqB,EAAE,WAAW,CAAC,iBAAiB,EAAE,qBAAqB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,qBAAqB;YACvI,sBAAsB,EAAE,WAAW,CAAC,iBAAiB,EAAE,sBAAsB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,sBAAsB;SAC3I;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,WAAW,CAAC,mBAAmB,EAAE,OAAO,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,OAAO;YACjG,SAAS,EAAE,WAAW,CAAC,mBAAmB,EAAE,SAAS,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,SAAS;YACvG,eAAe,EAAE,WAAW,CAAC,mBAAmB,EAAE,eAAe,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,eAAe;SAC1H;QACD,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,gBAAgB,CAAC,aAAa;KAC3E,CAAC;AACJ,CAAC"}

package/core/dist/runtime-v2/config/pd-validate-profile.d.ts

@@ -0,0 +1,28 @@
+/**
+ * PD Profile Config Validation — PRI-304 / PRI-466
+ *
+ * Runtime validation from `unknown` (parsed YAML/JSON profile section).
+ * No `as` bypasses on untrusted input (ERR-001, ERR-005).
+ * Uses `Object.hasOwn()` for key checks (ERR-013).
+ * Unknown keys produce warnings rather than hard errors (forward compat).
+ */
+import { type ProfileConfig } from './pd-config-types.js';
+export interface ProfileValidationWarning {
+    path: string;
+    message: string;
+}
+export type ProfileValidationResult = {
+    ok: true;
+    value: Partial<ProfileConfig>;
+    warnings: ProfileValidationWarning[];
+} | {
+    ok: false;
+    errors: ProfileValidationWarning[];
+};
+/**
+ * Validate a parsed profile config value from unknown input.
+ * Profile is optional — missing profile is OK (defaults applied in effective config).
+ * Partial input is accepted (warnings for invalid sub-fields, valid partial fields kept).
+ */
+export declare function validateProfileConfig(raw: unknown, path?: string): ProfileValidationResult;
+//# sourceMappingURL=pd-validate-profile.d.ts.map

package/core/dist/runtime-v2/config/pd-validate-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pd-validate-profile.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/config/pd-validate-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,KAAK,aAAa,EAOnB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAAC,QAAQ,EAAE,wBAAwB,EAAE,CAAA;CAAE,GACjF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,wBAAwB,EAAE,CAAA;CAAE,CAAC;AA4NtD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,SAAY,GAAG,uBAAuB,CAsH7F"}

package/core/dist/runtime-v2/config/pd-validate-profile.js

@@ -0,0 +1,482 @@
+/**
+ * PD Profile Config Validation — PRI-304 / PRI-466
+ *
+ * Runtime validation from `unknown` (parsed YAML/JSON profile section).
+ * No `as` bypasses on untrusted input (ERR-001, ERR-005).
+ * Uses `Object.hasOwn()` for key checks (ERR-013).
+ * Unknown keys produce warnings rather than hard errors (forward compat).
+ */
+import { PROFILE_AUDIT_LEVELS, PROFILE_EVOLUTION_MODES, PROFILE_TEST_LEVELS, } from './pd-config-types.js';
+// ── Helpers ─────────────────────────────────────────────────────────────────
+function isRecord(value) {
+    return value !== null && value !== undefined && typeof value === 'object' && !Array.isArray(value);
+}
+function isString(value) {
+    return typeof value === 'string';
+}
+function isBoolean(value) {
+    return typeof value === 'boolean';
+}
+function isNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function warn(path, message) {
+    return { path, message };
+}
+function readOwn(obj, key) {
+    // DANGEROUS_KEYS check: profile does not have __proto__/constructor risk at runtime
+    return Object.hasOwn(obj, key) ? obj[key] : undefined;
+}
+const VALID_SEVERITIES = new Set(['info', 'warning', 'error', 'fatal']);
+// ── Sub-validators ──────────────────────────────────────────────────────────
+function validateGate(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `gate must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const bv = readOwn(raw, 'require_plan_for_risk_paths');
+    if (bv !== undefined) {
+        if (isBoolean(bv))
+            value.require_plan_for_risk_paths = bv;
+        else
+            warnings.push(warn(`${path}.require_plan_for_risk_paths`, `must be boolean`));
+    }
+    const ba = readOwn(raw, 'require_audit_before_write');
+    if (ba !== undefined) {
+        if (isBoolean(ba))
+            value.require_audit_before_write = ba;
+        else
+            warnings.push(warn(`${path}.require_audit_before_write`, `must be boolean`));
+    }
+    const br = readOwn(raw, 'require_reviewer_after_write');
+    if (br !== undefined) {
+        if (isBoolean(br))
+            value.require_reviewer_after_write = br;
+        else
+            warnings.push(warn(`${path}.require_reviewer_after_write`, `must be boolean`));
+    }
+    return { value, warnings };
+}
+function validateTests(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `tests must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const oc = readOwn(raw, 'on_change');
+    if (oc !== undefined) {
+        if (isString(oc) && PROFILE_TEST_LEVELS.includes(oc))
+            value.on_change = oc;
+        else
+            warnings.push(warn(`${path}.on_change`, `must be one of: ${PROFILE_TEST_LEVELS.join(', ')}`));
+    }
+    const orc = readOwn(raw, 'on_risk_change');
+    if (orc !== undefined) {
+        if (isString(orc) && PROFILE_TEST_LEVELS.includes(orc))
+            value.on_risk_change = orc;
+        else
+            warnings.push(warn(`${path}.on_risk_change`, `must be one of: ${PROFILE_TEST_LEVELS.join(', ')}`));
+    }
+    const cmds = readOwn(raw, 'commands');
+    if (cmds !== undefined) {
+        if (isRecord(cmds)) {
+            const cleaned = {};
+            for (const k of Object.keys(cmds)) {
+                const v = cmds[k];
+                if (isString(v))
+                    cleaned[k] = v;
+                else
+                    warnings.push(warn(`${path}.commands.${k}`, `command value must be a string`));
+            }
+            value.commands = cleaned;
+        }
+        else {
+            warnings.push(warn(`${path}.commands`, `must be an object (string→string map)`));
+        }
+    }
+    return { value, warnings };
+}
+function validateAdaptivePain(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `adaptive must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const en = readOwn(raw, 'enabled');
+    if (en !== undefined) {
+        if (isBoolean(en))
+            value.enabled = en;
+        else
+            warnings.push(warn(`${path}.enabled`, `must be boolean`));
+    }
+    const sb = readOwn(raw, 'spiral_boost');
+    if (sb !== undefined) {
+        if (isNumber(sb))
+            value.spiral_boost = sb;
+        else
+            warnings.push(warn(`${path}.spiral_boost`, `must be a finite number`));
+    }
+    const min = readOwn(raw, 'min_threshold');
+    if (min !== undefined) {
+        if (isNumber(min))
+            value.min_threshold = min;
+        else
+            warnings.push(warn(`${path}.min_threshold`, `must be a finite number`));
+    }
+    const max = readOwn(raw, 'max_threshold');
+    if (max !== undefined) {
+        if (isNumber(max))
+            value.max_threshold = max;
+        else
+            warnings.push(warn(`${path}.max_threshold`, `must be a finite number`));
+    }
+    const bt = readOwn(raw, 'backlog_trigger');
+    if (bt !== undefined) {
+        if (isNumber(bt))
+            value.backlog_trigger = bt;
+        else
+            warnings.push(warn(`${path}.backlog_trigger`, `must be a finite number`));
+    }
+    const hf = readOwn(raw, 'hard_failure_trigger');
+    if (hf !== undefined) {
+        if (isNumber(hf))
+            value.hard_failure_trigger = hf;
+        else
+            warnings.push(warn(`${path}.hard_failure_trigger`, `must be a finite number`));
+    }
+    const lrsb = readOwn(raw, 'low_recent_success_boost');
+    if (lrsb !== undefined) {
+        if (isNumber(lrsb))
+            value.low_recent_success_boost = lrsb;
+        else
+            warnings.push(warn(`${path}.low_recent_success_boost`, `must be a finite number`));
+    }
+    const hrpb = readOwn(raw, 'high_recent_pain_boost');
+    if (hrpb !== undefined) {
+        if (isNumber(hrpb))
+            value.high_recent_pain_boost = hrpb;
+        else
+            warnings.push(warn(`${path}.high_recent_pain_boost`, `must be a finite number`));
+    }
+    return { value, warnings };
+}
+function validatePain(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `pain must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const sct = readOwn(raw, 'soft_capture_threshold');
+    if (sct !== undefined) {
+        if (isNumber(sct))
+            value.soft_capture_threshold = sct;
+        else
+            warnings.push(warn(`${path}.soft_capture_threshold`, `must be a finite number`));
+    }
+    const ad = readOwn(raw, 'adaptive');
+    if (ad !== undefined) {
+        const r = validateAdaptivePain(ad, `${path}.adaptive`);
+        if (r.value)
+            value.adaptive = r.value;
+        warnings.push(...r.warnings);
+    }
+    return { value, warnings };
+}
+function validateLifecycle(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `lifecycle must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const en = readOwn(raw, 'enabled');
+    if (en !== undefined) {
+        if (isBoolean(en))
+            value.enabled = en;
+        else
+            warnings.push(warn(`${path}.enabled`, `must be boolean`));
+    }
+    const hb = readOwn(raw, 'heartbeat_stale_hours');
+    if (hb !== undefined) {
+        if (isNumber(hb))
+            value.heartbeat_stale_hours = hb;
+        else
+            warnings.push(warn(`${path}.heartbeat_stale_hours`, `must be a finite number`));
+    }
+    return { value, warnings };
+}
+function validatePlanApprovals(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `plan_approvals must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const en = readOwn(raw, 'enabled');
+    if (en !== undefined) {
+        if (isBoolean(en))
+            value.enabled = en;
+        else
+            warnings.push(warn(`${path}.enabled`, `must be boolean`));
+    }
+    const ml = readOwn(raw, 'max_lines_override');
+    if (ml !== undefined) {
+        if (isNumber(ml) && Number.isInteger(ml))
+            value.max_lines_override = ml;
+        else
+            warnings.push(warn(`${path}.max_lines_override`, `must be an integer`));
+    }
+    const ap = readOwn(raw, 'allowed_patterns');
+    if (ap !== undefined) {
+        if (Array.isArray(ap))
+            value.allowed_patterns = ap.filter(isString);
+        else
+            warnings.push(warn(`${path}.allowed_patterns`, `must be an array of strings`));
+    }
+    const ao = readOwn(raw, 'allowed_operations');
+    if (ao !== undefined) {
+        if (Array.isArray(ao))
+            value.allowed_operations = ao.filter(isString);
+        else
+            warnings.push(warn(`${path}.allowed_operations`, `must be an array of strings`));
+    }
+    return { value, warnings };
+}
+function validateEditVerification(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `edit_verification must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const en = readOwn(raw, 'enabled');
+    if (en !== undefined) {
+        if (isBoolean(en))
+            value.enabled = en;
+        else
+            warnings.push(warn(`${path}.enabled`, `must be boolean`));
+    }
+    const mfs = readOwn(raw, 'max_file_size_bytes');
+    if (mfs !== undefined) {
+        if (isNumber(mfs) && mfs >= 0)
+            value.max_file_size_bytes = mfs;
+        else
+            warnings.push(warn(`${path}.max_file_size_bytes`, `must be a non-negative number`));
+    }
+    const fm = readOwn(raw, 'fuzzy_match_enabled');
+    if (fm !== undefined) {
+        if (isBoolean(fm))
+            value.fuzzy_match_enabled = fm;
+        else
+            warnings.push(warn(`${path}.fuzzy_match_enabled`, `must be boolean`));
+    }
+    const fmt = readOwn(raw, 'fuzzy_match_threshold');
+    if (fmt !== undefined) {
+        if (isNumber(fmt) && fmt > 0 && fmt <= 1)
+            value.fuzzy_match_threshold = fmt;
+        else
+            warnings.push(warn(`${path}.fuzzy_match_threshold`, `must be a number in (0, 1]`));
+    }
+    const sla = readOwn(raw, 'skip_large_file_action');
+    if (sla !== undefined) {
+        if (sla === 'warn' || sla === 'block')
+            value.skip_large_file_action = sla;
+        else
+            warnings.push(warn(`${path}.skip_large_file_action`, `must be "warn" or "block"`));
+    }
+    return { value, warnings };
+}
+function validateThinkingCheckpoint(raw, path) {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        warnings.push(warn(path, `thinking_checkpoint must be an object, got ${typeof raw}`));
+        return { warnings };
+    }
+    const value = {};
+    const en = readOwn(raw, 'enabled');
+    if (en !== undefined) {
+        if (isBoolean(en))
+            value.enabled = en;
+        else
+            warnings.push(warn(`${path}.enabled`, `must be boolean`));
+    }
+    const wm = readOwn(raw, 'window_ms');
+    if (wm !== undefined) {
+        if (isNumber(wm) && wm > 0)
+            value.window_ms = wm;
+        else
+            warnings.push(warn(`${path}.window_ms`, `must be a positive number`));
+    }
+    const hrt = readOwn(raw, 'high_risk_tools');
+    if (hrt !== undefined) {
+        if (Array.isArray(hrt))
+            value.high_risk_tools = hrt.filter(isString);
+        else
+            warnings.push(warn(`${path}.high_risk_tools`, `must be an array of strings`));
+    }
+    return { value, warnings };
+}
+function validateCustomGuards(raw, path) {
+    const warnings = [];
+    if (!Array.isArray(raw)) {
+        warnings.push(warn(path, `custom_guards must be an array, got ${typeof raw}`));
+        return { warnings };
+    }
+    const guards = [];
+    for (let i = 0; i < raw.length; i++) {
+        const item = raw[i];
+        if (!isRecord(item)) {
+            warnings.push(warn(`${path}[${i}]`, `must be an object`));
+            continue;
+        }
+        const pattern = readOwn(item, 'pattern');
+        const message = readOwn(item, 'message');
+        const severity = readOwn(item, 'severity');
+        if (!isString(pattern) || pattern.length === 0) {
+            warnings.push(warn(`${path}[${i}].pattern`, `must be a non-empty string`));
+            continue;
+        }
+        guards.push({
+            pattern,
+            message: isString(message) ? message : 'Custom guard triggered',
+            severity: isString(severity) && VALID_SEVERITIES.has(severity.toLowerCase()) ? severity.toLowerCase() : 'error',
+        });
+    }
+    return { value: guards, warnings };
+}
+// ── Top-Level Validator ─────────────────────────────────────────────────────
+/**
+ * Validate a parsed profile config value from unknown input.
+ * Profile is optional — missing profile is OK (defaults applied in effective config).
+ * Partial input is accepted (warnings for invalid sub-fields, valid partial fields kept).
+ */
+export function validateProfileConfig(raw, path = 'profile') {
+    const warnings = [];
+    if (!isRecord(raw)) {
+        return { ok: false, errors: [warn(path, `profile must be an object, got ${typeof raw}`)] };
+    }
+    const result = {};
+    // audit_level
+    const al = readOwn(raw, 'audit_level');
+    if (al !== undefined) {
+        if (isString(al) && PROFILE_AUDIT_LEVELS.includes(al)) {
+            result.audit_level = al;
+        }
+        else {
+            warnings.push(warn(`${path}.audit_level`, `must be one of: ${PROFILE_AUDIT_LEVELS.join(', ')}, got ${JSON.stringify(al)}`));
+        }
+    }
+    // evolution_mode
+    const em = readOwn(raw, 'evolution_mode');
+    if (em !== undefined) {
+        if (isString(em) && PROFILE_EVOLUTION_MODES.includes(em)) {
+            result.evolution_mode = em;
+        }
+        else {
+            warnings.push(warn(`${path}.evolution_mode`, `must be one of: ${PROFILE_EVOLUTION_MODES.join(', ')}, got ${JSON.stringify(em)}`));
+        }
+    }
+    // risk_paths
+    const rp = readOwn(raw, 'risk_paths');
+    if (rp !== undefined) {
+        if (Array.isArray(rp)) {
+            result.risk_paths = rp.filter(isString);
+        }
+        else if (isString(rp)) {
+            result.risk_paths = [rp];
+        }
+        else {
+            warnings.push(warn(`${path}.risk_paths`, `must be an array of strings or a single string`));
+        }
+    }
+    // Sub-objects
+    const gateRaw = readOwn(raw, 'gate');
+    if (gateRaw !== undefined) {
+        const r = validateGate(gateRaw, `${path}.gate`);
+        if (r.value)
+            result.gate = r.value;
+        warnings.push(...r.warnings);
+    }
+    const testsRaw = readOwn(raw, 'tests');
+    if (testsRaw !== undefined) {
+        const r = validateTests(testsRaw, `${path}.tests`);
+        if (r.value)
+            result.tests = r.value;
+        warnings.push(...r.warnings);
+    }
+    const painRaw = readOwn(raw, 'pain');
+    if (painRaw !== undefined) {
+        const r = validatePain(painRaw, `${path}.pain`);
+        if (r.value)
+            result.pain = r.value;
+        warnings.push(...r.warnings);
+    }
+    const lifecycleRaw = readOwn(raw, 'lifecycle');
+    if (lifecycleRaw !== undefined) {
+        const r = validateLifecycle(lifecycleRaw, `${path}.lifecycle`);
+        if (r.value)
+            result.lifecycle = r.value;
+        warnings.push(...r.warnings);
+    }
+    // progressive_gate
+    const pgRaw = readOwn(raw, 'progressive_gate');
+    if (pgRaw !== undefined) {
+        const warnings2 = [];
+        const pgResult = {};
+        if (isRecord(pgRaw)) {
+            // Inside isRecord guard, TypeScript narrows pgRaw to Record<string, unknown>
+            const pgEnabled = readOwn(pgRaw, 'enabled');
+            if (pgEnabled !== undefined) {
+                if (isBoolean(pgEnabled))
+                    pgResult.enabled = pgEnabled;
+                else
+                    warnings2.push(warn(`${path}.progressive_gate.enabled`, `must be boolean`));
+            }
+            const paRaw = readOwn(pgRaw, 'plan_approvals');
+            if (paRaw !== undefined) {
+                const r = validatePlanApprovals(paRaw, `${path}.progressive_gate.plan_approvals`);
+                if (r.value)
+                    pgResult.plan_approvals = r.value;
+                warnings2.push(...r.warnings);
+            }
+        }
+        else {
+            warnings2.push(warn(`${path}.progressive_gate`, `must be an object`));
+        }
+        if (Object.keys(pgResult).length > 0)
+            result.progressive_gate = pgResult;
+        warnings.push(...warnings2);
+    }
+    const evRaw = readOwn(raw, 'edit_verification');
+    if (evRaw !== undefined) {
+        const r = validateEditVerification(evRaw, `${path}.edit_verification`);
+        if (r.value)
+            result.edit_verification = r.value;
+        warnings.push(...r.warnings);
+    }
+    const tcRaw = readOwn(raw, 'thinking_checkpoint');
+    if (tcRaw !== undefined) {
+        const r = validateThinkingCheckpoint(tcRaw, `${path}.thinking_checkpoint`);
+        if (r.value)
+            result.thinking_checkpoint = r.value;
+        warnings.push(...r.warnings);
+    }
+    const cgRaw = readOwn(raw, 'custom_guards');
+    if (cgRaw !== undefined) {
+        const r = validateCustomGuards(cgRaw, `${path}.custom_guards`);
+        if (r.value)
+            result.custom_guards = r.value;
+        warnings.push(...r.warnings);
+    }
+    return {
+        ok: true,
+        value: result,
+        warnings,
+    };
+}
+//# sourceMappingURL=pd-validate-profile.js.map