create-principles-disciple 1.101.0 → 1.103.0

package/console/dist/ui/App.js

@@ -8,7 +8,7 @@ import { AppSidebar } from "./components/layout/app-sidebar.js";
 import { SplashScreen } from "./components/auth/splash-screen.js";
 import { LoginForm } from "./components/auth/login-form.js";
 import { ErrorBoundary } from "./components/error-boundary.js";
-import { checkAuth } from "./api.js";
+import { checkAuth, fetchConfigSummary, fetchWorkspaces } from "./api.js";
 import { NotificationProvider } from "./components/notifications/NotificationProvider.js";
 import { Toaster } from "./components/ui/sonner.js";
 // New page imports (CR2 directory structure)
@@ -19,17 +19,27 @@ import { PrincipleDetailPage } from "./pages/principles/PrincipleDetailPage.js";
 import { ActivationPage } from "./pages/activation/ActivationPage.js";
 import { DebtPage } from "./pages/debt/DebtPage.js";
 import { ControlCenterPage } from "./pages/control-center/ControlCenterPage.js";
+import { SignalKeywordsPage } from "./pages/signal-keywords/SignalKeywordsPage.js";
 import { SettingsPage } from "./pages/settings/SettingsPage.js";
 import { UpdatePage } from "./pages/settings/UpdatePage.js";
 import { ReportProblemPage } from "./pages/report-problem/ReportProblemPage.js";
 import { IntentPage } from "./pages/intent/IntentPage.js";
 import { DesignSystemPage } from "./pages/design-system/DesignSystemPage.js";
+import { WelcomePage } from "./pages/welcome/WelcomePage.js";
+import { getOnboardingState } from "./utils/onboarding-state.js";
 // Vite replaces import.meta.env.DEV with a boolean literal at build time.
 // The cast avoids TS2339 without needing a generated .d.ts file.
 const IS_DEV = import.meta.env.DEV;
 function AuthRoutes() {
     const [authed, setAuthed] = useState(null);
     const [showSplash, setShowSplash] = useState(true);
+    // Onboarding redirect needs workspaceId (for onboarding-state lookup) and
+    // feature flags (to gate the redirect). Both are fetched after auth.
+    const [currentWorkspaceId, setCurrentWorkspaceId] = useState("default");
+    const [featureFlags, setFeatureFlags] = useState(null);
+    // P2-C: tracks whether workspace fetch succeeded. If it failed, we skip
+    // the onboarding redirect so state isn't saved under a fake "default" key.
+    const [workspaceReady, setWorkspaceReady] = useState(false);
     const navigate = useNavigate();
     const verifyAuth = useCallback(async () => {
         const valid = await checkAuth();
@@ -47,27 +57,76 @@ function AuthRoutes() {
         // SplashScreen has its own 2200ms timer; we wait for it to call onComplete
         // This effect only handles the case where auth resolves after splash is done
     }, [authed, showSplash, navigate]);
+    // Fetch workspace list + feature flags after auth for onboarding redirect.
+    // P2-5: use Promise.all so both states update together — prevents the
+    // redirect effect from firing with the wrong workspaceId (race condition).
+    // rc-9: on fetch failure, set featureFlags to {} so the redirect effect
+    // fires (defaults to /focus — safe, no onboarding forced).
     useEffect(() => {
-        if (authed === true) {
-            const currentPath = window.location.hash;
-            if (currentPath === "#/login" || currentPath === "#/splash" || currentPath === "#/") {
-                navigate("/focus", { replace: true });
+        if (authed !== true)
+            return;
+        Promise.all([
+            fetchWorkspaces().catch(() => null),
+            fetchConfigSummary().catch(() => null),
+        ]).then(([wsResult, cfgResult]) => {
+            // Update workspaceId first (if we have a real workspace)
+            if (wsResult &&
+                wsResult.success &&
+                Array.isArray(wsResult.data) &&
+                wsResult.data.length > 0) {
+                const firstWorkspace = wsResult.data[0];
+                if (firstWorkspace) {
+                    setCurrentWorkspaceId(firstWorkspace.name);
+                    // P2-C: only mark workspaceReady when we have a real workspace name.
+                    setWorkspaceReady(true);
+                }
+            }
+            // Then update featureFlags — the redirect effect waits for this.
+            // rc-9: on any failure, default to {} so redirect fires to /focus.
+            const flags = {};
+            if (cfgResult &&
+                cfgResult.success &&
+                cfgResult.data) {
+                const summary = cfgResult.data;
+                for (const f of summary.features) {
+                    flags[f.id] = { enabled: f.enabled };
+                }
             }
+            setFeatureFlags(flags);
+        });
+    }, [authed]);
+    // P1-4: After splash finishes, if user is not authenticated, go to login.
+    // (The authed === true case is handled by the redirect effect below.)
+    useEffect(() => {
+        if (showSplash || authed !== false)
+            return;
+        navigate('/login', { replace: true });
+    }, [showSplash, authed, navigate]);
+    // First-visit redirect: check new_user_onboarding flag + onboarding state.
+    // P1-4: Only redirect AFTER splash is done AND featureFlags are loaded.
+    // This prevents the race where splash navigates to /focus before flags
+    // load, which would bypass the onboarding redirect entirely.
+    useEffect(() => {
+        if (authed !== true || featureFlags === null || showSplash)
+            return;
+        const flagEnabled = featureFlags?.new_user_onboarding?.enabled === true;
+        // P2-C: if workspace fetch failed, don't force onboarding under "default" key.
+        if (flagEnabled && workspaceReady) {
+            const onboardingState = getOnboardingState(currentWorkspaceId);
+            navigate(onboardingState.completed ? '/focus' : '/welcome', { replace: true });
         }
-    }, [authed, navigate]);
+        else {
+            navigate('/focus', { replace: true });
+        }
+    }, [authed, featureFlags, showSplash, currentWorkspaceId, workspaceReady, navigate]);
     const handleAuthSuccess = useCallback(() => {
         setAuthed(true);
-        navigate("/focus", { replace: true });
-    }, [navigate]);
+        // Post-auth redirect is handled by the authed + featureFlags effect above,
+        // which fires once feature flags have loaded.
+    }, []);
     return (_jsxs(Routes, { children: [_jsx(Route, { path: "/splash", element: _jsx(SplashScreen, { onComplete: () => {
                         setShowSplash(false);
-                        if (authed) {
-                            navigate("/focus", { replace: true });
-                        }
-                        else {
-                            navigate("/login", { replace: true });
-                        }
-                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, {}), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, {}) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
+                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, {}), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/welcome", element: _jsx(WelcomePage, { workspaceId: currentWorkspaceId }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, {}) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/control-center/signal-keywords", element: _jsx(SignalKeywordsPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
 }
 export function App() {
     return (_jsx(ThemeProvider, { children: _jsxs(I18nextProvider, { i18n: i18n, children: [_jsx(HashRouter, { children: _jsx(AuthRoutes, {}) }), _jsx(Toaster, {})] }) }));

package/console/dist/ui/api.d.ts

@@ -1,8 +1,23 @@
 import type { ApiResponse } from "../types.js";
-import type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, TrajectoryData, IntentSummaryData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, IntentInitResultData, IntentSaveResultData, IntentRawContentData, IntentVersionData } from "./utils/validators.js";
+import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm } from "./utils/signal-keywords-api.js";
+import type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, TrajectoryData, IntentSummaryData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, IntentInitResultData, IntentSaveResultData, IntentRawContentData, IntentVersionData } from "./utils/validators.js";
 declare function getToken(): string | null;
 declare function setToken(token: string): void;
 declare function clearToken(): void;
+/**
+ * Send an authenticated request to the Console API.
+ *
+ * Two overloads:
+ * 1. request(path, options?) → ApiResponse<unknown>
+ *    For endpoints without a runtime validator (health checks, etc.).
+ *    The caller receives unvalidated data and must not assume a specific shape.
+ *
+ * 2. request<T>(path, options, validate) → ApiResponse<T>
+ *    For endpoints with a runtime validator. The validator is applied to the
+ *    raw response; if validation fails, returns an error envelope instead.
+ */
+declare function request(path: string, options?: RequestInit): Promise<ApiResponse<unknown>>;
+declare function request<T>(path: string, options: RequestInit | undefined, validate: (value: unknown) => T | null): Promise<ApiResponse<T>>;
 declare function checkAuth(): Promise<boolean>;
 declare function fetchWorkspaces(): Promise<ApiResponse<WorkspaceEntryData[]>>;
 declare function addWorkspace(name: string, path: string): Promise<ApiResponse<WorkspaceEntryData>>;
@@ -26,6 +41,47 @@ declare function fetchConfigSummary(): Promise<ApiResponse<ConfigSummaryData>>;
 declare function fetchConfigCatalog(): Promise<ApiResponse<ConfigCatalogData>>;
 declare function updateAgentBinding(agentName: string, runtimeProfile: string, enabled: boolean): Promise<ApiResponse<AgentBindingUpdateData>>;
 declare function updateDefaultRuntime(defaultRuntime: string): Promise<ApiResponse<DefaultRuntimeUpdateData>>;
+/**
+ * Create a new runtime profile.
+ *
+ * Body shape: `{ id: string, profile: { type, provider?, model?, ... } }`.
+ * Server validates per-type requirements (pi-ai needs provider/model/apiKeyEnv)
+ * and returns 400 with a message on validation failure. The server response is
+ * `{ profileId, profile }`; we validate the contract fields and rely on the
+ * caller to re-fetch the catalog for display.
+ *
+ * rc-9: server-side validation errors surface as `result.error` (no silent
+ * fallback) — the request() helper extracts the message from the error envelope.
+ */
+declare function createRuntimeProfile(id: string, profile: Record<string, unknown>): Promise<ApiResponse<RuntimeProfileMutationData>>;
+/**
+ * Update an existing runtime profile (partial patch).
+ *
+ * Body shape: a partial profile object (e.g. `{ model: 'new-model' }`).
+ * The server rejects type changes with 400; other fields are merged.
+ */
+declare function updateRuntimeProfile(profileId: string, patch: Record<string, unknown>): Promise<ApiResponse<RuntimeProfileMutationData>>;
+/**
+ * Delete a runtime profile.
+ *
+ * The server rejects deletion with 400 when the profile is the defaultRuntime
+ * or is referenced by any agent (error message lists the agent names). The
+ * caller must surface this error to the user (rc-9: no silent fallback).
+ */
+declare function deleteRuntimeProfile(profileId: string): Promise<ApiResponse<RuntimeProfileMutationData>>;
+/**
+ * Fetch dynamic readiness for a single agent (GET /api/v1/config/readiness/:name).
+ *
+ * The summary/catalog endpoints return a static, pessimistic readiness that
+ * doesn't probe the actual provider. This endpoint performs a live check
+ * (e.g. testing whether the API key env var is set and the provider responds).
+ *
+ * Used by AgentCard when L2 is expanded and the static readiness is 'unknown'
+ * — the pessimistic value is replaced with the live result. On failure the
+ * caller falls back to the static value (rc-9: the error is surfaced via the
+ * ApiResponse error envelope, not silently swallowed).
+ */
+declare function fetchAgentReadiness(agentName: string): Promise<ApiResponse<ReadinessCheckData>>;
 declare function patchFeatureFlag(featureName: string, enabled: boolean): Promise<ApiResponse<FeatureFlagUpdateData>>;
 declare function fetchOutputLanguage(): Promise<ApiResponse<OutputLanguageData>>;
 declare function updateOutputLanguage(outputLanguage: string): Promise<ApiResponse<OutputLanguageData>>;
@@ -91,8 +147,9 @@ export interface FollowUpPayload {
     candidateId?: string;
 }
 declare function dispatchFollowUp(decisionId: string, payload: FollowUpPayload): Promise<ApiResponse<FollowUpResponseData>>;
-export { getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleTrajectory, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
-export type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, EvidenceChainRecordData, EvidenceChainStateData, TrajectoryData, TrajectoryStageData, IntentSummaryData, IntentSectionsData, IntentDocWarningData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, LinkCandidateFollowUpData, GuideRulehostFollowUpData, GeneratePatchProposalFollowUpData, IntentVersionEntry, IntentVersionData, } from "./utils/validators.js";
+export { request, listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleTrajectory, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+export type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, EvidenceChainRecordData, EvidenceChainStateData, TrajectoryData, TrajectoryStageData, IntentSummaryData, IntentSectionsData, IntentDocWarningData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, LinkCandidateFollowUpData, GuideRulehostFollowUpData, GeneratePatchProposalFollowUpData, IntentVersionEntry, IntentVersionData, } from "./utils/validators.js";
+export type { SignalKeyword, PendingSignalTerm } from "./utils/signal-keywords-types.js";
 export type { ActivationRecordData as ActivationRecord } from "./utils/validators.js";
 export type { ApprovalRecordData as ApprovalRecord } from "./utils/validators.js";
 export type { WorkspaceEntryData as WorkspaceEntry } from "./utils/validators.js";

package/console/dist/ui/api.js

@@ -1,4 +1,5 @@
-import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, } from "./utils/validators.js";
+import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, } from "./utils/signal-keywords-api.js";
+import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, } from "./utils/validators.js";
 // ── Auth ──────────────────────────────────────────────────────────────────────
 function getToken() {
     return sessionStorage.getItem("pd_token");
@@ -194,6 +195,62 @@ async function updateDefaultRuntime(defaultRuntime) {
         body: JSON.stringify({ defaultRuntime }),
     }, validateDefaultRuntimeUpdate);
 }
+// ── Runtime Profile CRUD (POST/PATCH/DELETE /api/v1/config/profiles) ──────────
+/**
+ * Create a new runtime profile.
+ *
+ * Body shape: `{ id: string, profile: { type, provider?, model?, ... } }`.
+ * Server validates per-type requirements (pi-ai needs provider/model/apiKeyEnv)
+ * and returns 400 with a message on validation failure. The server response is
+ * `{ profileId, profile }`; we validate the contract fields and rely on the
+ * caller to re-fetch the catalog for display.
+ *
+ * rc-9: server-side validation errors surface as `result.error` (no silent
+ * fallback) — the request() helper extracts the message from the error envelope.
+ */
+async function createRuntimeProfile(id, profile) {
+    return request('/api/v1/config/profiles', {
+        method: 'POST',
+        body: JSON.stringify({ id, profile }),
+    }, validateRuntimeProfileMutation);
+}
+/**
+ * Update an existing runtime profile (partial patch).
+ *
+ * Body shape: a partial profile object (e.g. `{ model: 'new-model' }`).
+ * The server rejects type changes with 400; other fields are merged.
+ */
+async function updateRuntimeProfile(profileId, patch) {
+    return request(`/api/v1/config/profiles/${encodeURIComponent(profileId)}`, {
+        method: 'PATCH',
+        body: JSON.stringify(patch),
+    }, validateRuntimeProfileMutation);
+}
+/**
+ * Delete a runtime profile.
+ *
+ * The server rejects deletion with 400 when the profile is the defaultRuntime
+ * or is referenced by any agent (error message lists the agent names). The
+ * caller must surface this error to the user (rc-9: no silent fallback).
+ */
+async function deleteRuntimeProfile(profileId) {
+    return request(`/api/v1/config/profiles/${encodeURIComponent(profileId)}`, { method: 'DELETE' }, validateRuntimeProfileMutation);
+}
+/**
+ * Fetch dynamic readiness for a single agent (GET /api/v1/config/readiness/:name).
+ *
+ * The summary/catalog endpoints return a static, pessimistic readiness that
+ * doesn't probe the actual provider. This endpoint performs a live check
+ * (e.g. testing whether the API key env var is set and the provider responds).
+ *
+ * Used by AgentCard when L2 is expanded and the static readiness is 'unknown'
+ * — the pessimistic value is replaced with the live result. On failure the
+ * caller falls back to the static value (rc-9: the error is surfaced via the
+ * ApiResponse error envelope, not silently swallowed).
+ */
+async function fetchAgentReadiness(agentName) {
+    return request(`/api/v1/config/readiness/${encodeURIComponent(agentName)}`, undefined, validateReadinessCheck);
+}
 // ── Feature Flag Toggle (spec 2026-06-27 §13.5) ─────────────────────────────
 async function patchFeatureFlag(featureName, enabled) {
     return request(`/api/v1/config/features/${encodeURIComponent(featureName)}`, {
@@ -308,4 +365,8 @@ async function dispatchFollowUp(decisionId, payload) {
     }, validateFollowUpResponse);
 }
 // ── Exports ───────────────────────────────────────────────────────────────────
-export { getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleTrajectory, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+export { request, 
+// signal-keywords (UI stubs, see signal-keywords-api.ts)
+listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, 
+// auth
+getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleTrajectory, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };

package/console/dist/ui/components/onboarding/CircuitDiagram.d.ts

@@ -0,0 +1,8 @@
+interface CircuitDiagramProps {
+    /** Highlight a specific node (evidence/principle/ownerGate/behavior) */
+    highlightNode?: 'evidence' | 'principle' | 'ownerGate' | 'behavior' | null;
+    /** Compact mode for smaller spaces */
+    compact?: boolean;
+}
+export declare function CircuitDiagram({ highlightNode, compact }: CircuitDiagramProps): import("react/jsx-runtime").JSX.Element;
+export {};

package/console/dist/ui/components/onboarding/CircuitDiagram.js

@@ -0,0 +1,18 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useTranslation } from 'react-i18next';
+const NODES = [
+    { id: 'evidence', labelKey: 'pages.welcome.step1.circuitNodes.evidence', cx: 80, cy: 80 },
+    { id: 'principle', labelKey: 'pages.welcome.step1.circuitNodes.principle', cx: 240, cy: 80 },
+    { id: 'ownerGate', labelKey: 'pages.welcome.step1.circuitNodes.ownerGate', cx: 240, cy: 180 },
+    { id: 'behavior', labelKey: 'pages.welcome.step1.circuitNodes.behavior', cx: 80, cy: 180 },
+];
+export function CircuitDiagram({ highlightNode = null, compact = false }) {
+    const { t } = useTranslation();
+    const size = compact ? 240 : 320;
+    const nodeRadius = compact ? 28 : 36;
+    return (_jsx("div", { className: "circuit-diagram", role: "img", "aria-label": t('pages.welcome.step1.circuitLabel'), children: _jsxs("svg", { width: size, height: size * 0.75, viewBox: "0 0 320 240", fill: "none", xmlns: "http://www.w3.org/2000/svg", children: [_jsx("line", { x1: NODES[0].cx, y1: NODES[0].cy, x2: NODES[1].cx, y2: NODES[1].cy, stroke: "var(--color-gov)", strokeWidth: "1.5" }), _jsx("line", { x1: NODES[1].cx, y1: NODES[1].cy, x2: NODES[2].cx, y2: NODES[2].cy, stroke: "var(--color-gov)", strokeWidth: "1.5" }), _jsx("line", { x1: NODES[2].cx, y1: NODES[2].cy, x2: NODES[3].cx, y2: NODES[3].cy, stroke: "var(--color-gov)", strokeWidth: "1.5" }), _jsx("line", { x1: NODES[3].cx, y1: NODES[3].cy, x2: NODES[0].cx, y2: NODES[0].cy, stroke: "var(--color-gov)", strokeWidth: "1.5" }), _jsx("polygon", { points: `${NODES[1].cx - 8},${NODES[1].cy - 4} ${NODES[1].cx - 8},${NODES[1].cy + 4} ${NODES[1].cx},${NODES[1].cy}`, fill: "var(--color-gov)" }), _jsx("polygon", { points: `${NODES[2].cx + 4},${NODES[2].cy - 8} ${NODES[2].cx - 4},${NODES[2].cy - 8} ${NODES[2].cx},${NODES[2].cy}`, fill: "var(--color-gov)" }), _jsx("polygon", { points: `${NODES[3].cx + 8},${NODES[3].cy - 4} ${NODES[3].cx + 8},${NODES[3].cy + 4} ${NODES[3].cx},${NODES[3].cy}`, fill: "var(--color-gov)" }), _jsx("polygon", { points: `${NODES[0].cx - 4},${NODES[0].cy + 8} ${NODES[0].cx + 4},${NODES[0].cy + 8} ${NODES[0].cx},${NODES[0].cy}`, fill: "var(--color-gov)" }), NODES.map((node) => {
+                    const isHighlighted = highlightNode === node.id;
+                    const isOwnerGate = node.id === 'ownerGate';
+                    return (_jsxs("g", { children: [_jsx("circle", { cx: node.cx, cy: node.cy, r: nodeRadius, fill: isHighlighted ? 'var(--color-gov)' : 'var(--color-surface)', stroke: isOwnerGate ? 'var(--color-gov)' : 'var(--color-border)', strokeWidth: isOwnerGate ? 2.5 : 1.5 }), _jsx("text", { x: node.cx, y: node.cy, textAnchor: "middle", dominantBaseline: "middle", fontSize: compact ? 9 : 11, fill: isHighlighted ? 'white' : 'var(--color-ink)', fontFamily: "var(--font-sans)", children: t(node.labelKey) })] }, node.id));
+                })] }) }));
+}

package/console/dist/ui/components/onboarding/DemoResultView.d.ts

@@ -0,0 +1,22 @@
+export interface DemoStage {
+    name: string;
+    status: 'passed' | 'failed' | 'degraded' | 'skipped';
+    reason?: string;
+    nextAction?: string;
+    evidenceRef?: string;
+}
+export interface DemoResultData {
+    status: string;
+    generatedAt?: string;
+    narrative?: string;
+    storyDescription?: string;
+    stages?: DemoStage[];
+    simulated?: boolean;
+}
+interface DemoResultViewProps {
+    result: DemoResultData | null;
+    loading: boolean;
+    error: string | null;
+}
+export declare function DemoResultView({ result, loading, error }: DemoResultViewProps): import("react/jsx-runtime").JSX.Element | null;
+export {};

package/console/dist/ui/components/onboarding/DemoResultView.js

@@ -0,0 +1,33 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useTranslation } from 'react-i18next';
+/**
+ * Map backend demo stage identifiers (snake_case English, stable contract
+ * from demo-story-a-runner.ts) to localized labels. Falls back to the raw
+ * name if no mapping exists, so new stages still render (rc-9: no silent
+ * failure) but future stages should be added here.
+ */
+const STAGE_LABEL_KEYS = {
+    evidence_seed: 'pages.welcome.step2.stages.evidenceSeed',
+    principle_proposal: 'pages.welcome.step2.stages.principleProposal',
+    owner_review: 'pages.welcome.step2.stages.ownerReview',
+    activation: 'pages.welcome.step2.stages.activation',
+    follow_up_observation: 'pages.welcome.step2.stages.followUpObservation',
+    rollback_proof: 'pages.welcome.step2.stages.rollbackProof',
+};
+function localizeStageName(rawName, t) {
+    const key = STAGE_LABEL_KEYS[rawName];
+    return key ? t(key) : rawName;
+}
+export function DemoResultView({ result, loading, error }) {
+    const { t } = useTranslation();
+    if (loading) {
+        return (_jsx("div", { className: "demo-result-view demo-loading", role: "status", "aria-live": "polite", children: _jsx("span", { className: "demo-status-text", children: t('pages.welcome.step2.demoRunning') }) }));
+    }
+    if (error) {
+        return (_jsxs("div", { className: "demo-result-view demo-error", role: "alert", children: [_jsx("span", { className: "demo-status-text", children: t('pages.welcome.step2.demoFailed') }), _jsx("p", { className: "demo-error-detail", children: error })] }));
+    }
+    if (!result) {
+        return null;
+    }
+    return (_jsxs("div", { className: "demo-result-view", role: "region", "aria-label": t('pages.welcome.step2.demoComplete'), children: [result.simulated && (_jsx("div", { className: "demo-simulated-banner", role: "note", children: t('pages.welcome.step2.demoSimulatedNote') })), result.stages && result.stages.length > 0 && (_jsx("ol", { className: "demo-stages", children: result.stages.map((stage, idx) => (_jsxs("li", { className: `demo-stage demo-stage-${stage.status}`, children: [_jsx("span", { className: "demo-stage-name", children: localizeStageName(stage.name, t) }), stage.reason && _jsx("span", { className: "demo-stage-detail", children: stage.reason })] }, idx))) })), _jsxs("div", { className: "demo-labels", children: [_jsx("div", { className: "demo-label-item", children: _jsx("span", { className: "demo-label-title", children: t('pages.welcome.step2.evidenceLabel') }) }), _jsx("div", { className: "demo-label-item", children: _jsx("span", { className: "demo-label-title", children: t('pages.welcome.step2.candidateLabel') }) }), _jsx("div", { className: "demo-label-item", children: _jsx("span", { className: "demo-label-title", children: t('pages.welcome.step2.ownerGateLabel') }) }), _jsx("div", { className: "demo-label-item", children: _jsx("span", { className: "demo-label-title", children: t('pages.welcome.step2.activationLabel') }) }), _jsx("div", { className: "demo-label-item", children: _jsx("span", { className: "demo-label-title", children: t('pages.welcome.step2.rollbackLabel') }) })] })] }));
+}

package/console/dist/ui/i18n/en.json

@@ -697,8 +697,116 @@
             },
             "techDetail": "Technical Details",
             "profileLabelShort": "Runtime",
+            "manageProfiles": "Manage Profiles",
+            "readinessChecking": "Checking readiness…",
             "unknownAgentsWarning": "Detected {{count}} unrecognized agent(s): {{names}}. They are not shown in groups.",
-            "footerNote": "9 agents are distributed across the internalization pipeline and sidechain services. The Core Trio must be enabled together — otherwise PD cannot turn errors into principles."
+            "footerNote": "9 agents are distributed across the internalization pipeline and sidechain services. The Core Trio must be enabled together — otherwise PD cannot turn errors into principles.",
+            "profiles": {
+                "sectionTitle": "Runtime Profile Management",
+                "sectionDescription": "Create, edit, and delete runtime profiles. Profiles referenced by an agent or set as default cannot be deleted.",
+                "createButton": "Create Profile",
+                "editButton": "Edit",
+                "deleteButton": "Delete",
+                "cancelButton": "Cancel",
+                "saveButton": "Save",
+                "creating": "Creating…",
+                "saving": "Saving…",
+                "deleting": "Deleting…",
+                "empty": "No runtime profiles yet.",
+                "columnId": "ID",
+                "columnType": "Type",
+                "columnProvider": "Provider",
+                "columnModel": "Model",
+                "columnApiKeyEnv": "API Key Env Var",
+                "columnReadiness": "Readiness",
+                "columnActions": "Actions",
+                "formTitleCreate": "Create Runtime Profile",
+                "formTitleEdit": "Edit Profile: {{id}}",
+                "fieldId": "Profile ID",
+                "fieldIdHint": "Unique identifier, cannot be changed after creation (e.g. anthropic-cloud)",
+                "fieldIdPlaceholder": "my-profile",
+                "fieldType": "Type",
+                "fieldProvider": "Provider",
+                "fieldProviderPlaceholder": "anthropic",
+                "fieldModel": "Model",
+                "fieldModelPlaceholder": "claude-sonnet-4",
+                "fieldApiKeyEnv": "API Key Env Var Name",
+                "fieldApiKeyEnvHint": "Environment variable name, not the key value (e.g. ANTHROPIC_API_KEY)",
+                "fieldApiKeyEnvPlaceholder": "ANTHROPIC_API_KEY",
+                "fieldBaseUrl": "Base URL (optional)",
+                "fieldBaseUrlPlaceholder": "https://api.anthropic.com",
+                "fieldSource": "Source (optional)",
+                "fieldSourcePlaceholder": "default",
+                "typeOpenclaw": "openclaw",
+                "typePiAi": "pi-ai",
+                "validationIdRequired": "Profile ID is required",
+                "validationProviderRequired": "pi-ai profile requires provider",
+                "validationModelRequired": "pi-ai profile requires model",
+                "validationApiKeyEnvRequired": "pi-ai profile requires apiKeyEnv",
+                "deleteConfirmTitle": "Confirm Delete",
+                "deleteConfirmMessage": "Delete profile \"{{id}}\"? This action cannot be undone.",
+                "deleteConfirmAck": "Confirm Delete",
+                "deleteConfirmCancel": "Cancel",
+                "createSuccess": "Profile created",
+                "updateSuccess": "Profile updated",
+                "deleteSuccess": "Profile deleted",
+                "operationFailed": "Operation failed"
+            }
+        },
+        "signalKeywords": {
+            "title": "Signal Keywords",
+            "subtitle": "Manage signal keywords for agents — when the signal collector detects these keywords, it triggers deep analysis.",
+            "empty": "No signal keywords yet",
+            "loadError": "Failed to load signal keywords",
+            "saveError": "Failed to save",
+            "saving": "Saving…",
+            "searchPlaceholder": "Search keywords…",
+            "filterAll": "All",
+            "filterActive": "Active",
+            "filterArchived": "Archived",
+            "active": "Active",
+            "archived": "Archived",
+            "confirmDeleteTitle": "Confirm delete keyword",
+            "confirmDeleteMessage": "Are you sure you want to delete \"{{term}}\"? This action cannot be undone.",
+            "confirmDeleteAck": "Confirm delete",
+            "confirmDeleteCancel": "Cancel",
+            "deleteSuccess": "Deleted",
+            "archiveSuccess": "Archived",
+            "unarchiveSuccess": "Restored",
+            "phase2Tooltip": "This feature will be enabled in a future version",
+            "colTerm": "Term",
+            "colCategory": "Category",
+            "colPrecision": "Precision",
+            "colWeight": "Weight",
+            "colReason": "Reason",
+            "colActions": "Actions",
+            "categoryCorrection": "Correction",
+            "categoryEmpathy": "Empathy",
+            "precisionHigh": "High",
+            "precisionAmbiguous": "Ambiguous",
+            "nTerms": "{{count}} terms",
+            "selectedNOfTotal": "Selected {{selected}} of {{total}}",
+            "nTermsPendingReview": "{{count}} terms pending review",
+            "weightLabel": "Weight: {{percent}}%",
+            "addKeyword": "Add Keyword",
+            "addKeywordDialogTitle": "Add Signal Keyword",
+            "submitAdd": "Add",
+            "noSearchResults": "No matching keywords",
+            "pendingTerms": {
+                "title": "Pending Signal Terms",
+                "subtitle": "The signal collector suggests the following terms as potential keywords from unmatched messages. Review and confirm or ignore.",
+                "empty": "No pending signal terms",
+                "emptyDescription": "When the empathy observer detects recurring unmatched patterns, it will suggest new signal terms here.",
+                "confirm": "Confirm add",
+                "ignore": "Ignore",
+                "confirmBatch": "Confirm all",
+                "ignoreBatch": "Ignore all",
+                "sourceCount": "From {{count}} messages",
+                "confirmSuccess": "Confirmed",
+                "ignoreSuccess": "Ignored",
+                "batchConfirmSuccess": "Confirmed {{count}} terms",
+                "batchIgnoreSuccess": "Ignored {{count}} terms"
+            }
         },
         "login": {
             "title": "Login",
@@ -942,6 +1050,69 @@
             "demoteTooltip": "Demote endpoint under development",
             "principleAriaLabel": "Debt Principle {{id}}",
             "listAriaLabel": "Debt principles list"
+        },
+        "welcome": {
+            "title": "Welcome to Principles Disciple",
+            "subtitle": "Turn your repeated corrections into reviewed, reversible principles.",
+            "stateSaveError": "Couldn't save onboarding progress. Check browser storage permissions and retry.",
+            "stepIndicator": "Step {{current}} of {{total}}",
+            "step1": {
+                "title": "What is PD?",
+                "description": "An owner-governed behavior internalization system. PD turns behavioral evidence into reviewed, reversible principles that shape future agent behavior.",
+                "circuitLabel": "Core governance loop",
+                "circuitNodes": {
+                    "evidence": "Evidence",
+                    "principle": "Principle",
+                    "ownerGate": "Owner Gate",
+                    "behavior": "Behavior Change"
+                },
+                "startButton": "Start",
+                "skipButton": "Skip onboarding"
+            },
+            "step2": {
+                "title": "See the full governance loop in action",
+                "description": "This is a controlled demo using simulated evidence. In real use, your agent produces evidence through the pd-pain-signal skill.",
+                "runDemoButton": "Run demo",
+                "demoRunning": "Running demo...",
+                "demoComplete": "Demo complete",
+                "demoFailed": "Demo failed",
+                "demoSimulatedNote": "This evidence is simulated for demo purposes.",
+                "nextButton": "Next",
+                "evidenceLabel": "Evidence (simulated)",
+                "candidateLabel": "Candidate Principle",
+                "ownerGateLabel": "Owner Gate: Review and approve",
+                "activationLabel": "Activation Result",
+                "rollbackLabel": "Rollback path available",
+                "stages": {
+                    "evidenceSeed": "Evidence (simulated)",
+                    "principleProposal": "Candidate principle",
+                    "ownerReview": "Owner review",
+                    "activation": "Activation result",
+                    "followUpObservation": "Follow-up observation",
+                    "rollbackProof": "Rollback path ready"
+                }
+            },
+            "step3": {
+                "title": "Ready to record real evidence",
+                "description": "When your agent makes a mistake or you repeatedly correct it, tell the agent: 'Use pd-pain-signal to record this.'",
+                "examplePrompt": "Example prompt to agent:",
+                "examplePromptText": "I just corrected you on X. Use pd-pain-signal to record this as a pain signal.",
+                "tryNowButton": "Try it now (2-hour window)",
+                "goToFocusButton": "Got it, go to Focus",
+                "skipButton": "Skip for now",
+                "windowHint": "We'll check back in 2 hours. No pressure — you can always record evidence later.",
+                "pollingActive": "Listening for evidence... We'll check every 30 seconds for 2 hours.",
+                "stopPollingButton": "Stop and continue",
+                "evidenceFound": "Evidence detected! You can now review it in the Focus page.",
+                "timeoutHint": "No evidence detected in 2 hours. That's okay — you can record evidence anytime with pd-pain-signal.",
+                "pollingError": "Couldn't check for evidence. The evidence service may be unavailable.",
+                "retryButton": "Retry"
+            },
+            "progress": {
+                "step1": "Welcome",
+                "step2": "Demo",
+                "step3": "Invite"
+            }
         }
     },
     "components": {
@@ -1050,6 +1221,23 @@
             "tooShort": "Reason must be at least 10 characters",
             "cancel": "Cancel",
             "submit": "Confirm Rejection"
+        },
+        "onboardingReset": {
+            "title": "Onboarding",
+            "resetButton": "Reset onboarding state",
+            "resetConfirm": "This will restart the onboarding wizard on next login. Continue?",
+            "resetSuccess": "Onboarding state reset. You'll see the welcome page on next visit.",
+            "resetFailed": "Couldn't reset onboarding. Check browser storage permissions and retry."
+        },
+        "onboardingFlag": {
+            "title": "Onboarding Feature",
+            "label": "New user onboarding wizard",
+            "description": "Show the welcome wizard on first visit. Disable for experienced users.",
+            "toggleAriaLabel": "Toggle new user onboarding feature",
+            "enabled": "Onboarding wizard enabled",
+            "disabled": "Onboarding wizard disabled",
+            "toggleFailed": "Failed to toggle onboarding feature",
+            "loadFailed": "Failed to load onboarding flag state"
         }
     }
 }