create-principles-disciple 1.112.2 → 1.113.0

package/core/dist/runtime-v2/types/index.d.ts

@@ -21,10 +21,10 @@ export type { PersistenceAction, HygieneStats, } from './hygiene-types.js';
 export { PersistenceActionSchema, HygieneStatsSchema, createEmptyHygieneStats, } from './hygiene-types.js';
 export type { RuntimeTruth, AnalyticsTruth, TrendMetrics, } from './runtime-summary-types.js';
 export { RuntimeTruthSchema, AnalyticsTruthSchema, TrendMetricsSchema, } from './runtime-summary-types.js';
-export type { EventType, EventCategory, EventLogEntry, ToolCallEventData, PainSignalEventData, RulePromotionEventData, HookExecutionEventData, GateBlockEventData, GateBypassEventData, PlanApprovalEventData, EvolutionTaskEventData, EmpathyRollbackEventData, HeartbeatDiagnosisEventData, DiagnosisTaskEventData, DiagnosticianReportEventData, PrincipleCandidateEventData, RuleEnforcedEventData, RuleHostEvaluatedEventData, RuleHostBlockedEventData, RuleHostRequireApprovalEventData, RuleHostAutoCorrectProposedEventData, RuleHostAutoCorrectAppliedEventData, RuntimeV2PromptActivationsInjectedEventData, RuleHostUnhealthyEventData, RuleHostSkippedEventData, ToolCallStats, ErrorStats, EmpathyEventStats, GfiStats, EventEvolutionStats, HookStats, DailyStats, } from './event-types.js';
-export { EventTypeSchema, EventCategorySchema, EventLogEntrySchema, ToolCallEventDataSchema, PainSignalEventDataSchema, RulePromotionEventDataSchema, HookExecutionEventDataSchema, GateBlockEventDataSchema, GateBypassEventDataSchema, PlanApprovalEventDataSchema, EvolutionTaskEventDataSchema, EmpathyRollbackEventDataSchema, HeartbeatDiagnosisEventDataSchema, DiagnosisTaskEventDataSchema, DiagnosticianReportEventDataSchema, PrincipleCandidateEventDataSchema, RuleEnforcedEventDataSchema, RuleHostEvaluatedEventDataSchema, RuleHostBlockedEventDataSchema, RuleHostRequireApprovalEventDataSchema, RuleHostAutoCorrectProposedEventDataSchema, RuleHostAutoCorrectAppliedEventDataSchema, RuntimeV2PromptActivationsInjectedEventDataSchema, RuleHostUnhealthyEventDataSchema, RuleHostSkippedEventDataSchema, ToolCallStatsSchema, ErrorStatsSchema, EmpathyEventStatsSchema, GfiStatsSchema, EventEvolutionStatsSchema, HookStatsSchema, DailyStatsSchema, createEmptyDailyStats, } from './event-types.js';
+export type { EventType, EventCategory, EventLogEntry, ToolCallEventData, PainSignalEventData, RulePromotionEventData, HookExecutionEventData, GateBlockEventData, GateBypassEventData, EvolutionTaskEventData, EmpathyRollbackEventData, HeartbeatDiagnosisEventData, DiagnosisTaskEventData, DiagnosticianReportEventData, PrincipleCandidateEventData, RuleEnforcedEventData, RuleHostEvaluatedEventData, RuleHostBlockedEventData, RuleHostRequireApprovalEventData, RuleHostAutoCorrectProposedEventData, RuleHostAutoCorrectAppliedEventData, RuntimeV2PromptActivationsInjectedEventData, RuleHostUnhealthyEventData, RuleHostSkippedEventData, ToolCallStats, ErrorStats, EmpathyEventStats, GfiStats, EventEvolutionStats, HookStats, DailyStats, } from './event-types.js';
+export { EventTypeSchema, EventCategorySchema, EventLogEntrySchema, ToolCallEventDataSchema, PainSignalEventDataSchema, RulePromotionEventDataSchema, HookExecutionEventDataSchema, GateBlockEventDataSchema, GateBypassEventDataSchema, EvolutionTaskEventDataSchema, EmpathyRollbackEventDataSchema, HeartbeatDiagnosisEventDataSchema, DiagnosisTaskEventDataSchema, DiagnosticianReportEventDataSchema, PrincipleCandidateEventDataSchema, RuleEnforcedEventDataSchema, RuleHostEvaluatedEventDataSchema, RuleHostBlockedEventDataSchema, RuleHostRequireApprovalEventDataSchema, RuleHostAutoCorrectProposedEventDataSchema, RuleHostAutoCorrectAppliedEventDataSchema, RuntimeV2PromptActivationsInjectedEventDataSchema, RuleHostUnhealthyEventDataSchema, RuleHostSkippedEventDataSchema, ToolCallStatsSchema, ErrorStatsSchema, EmpathyEventStatsSchema, GfiStatsSchema, EventEvolutionStatsSchema, HookStatsSchema, DailyStatsSchema, createEmptyDailyStats, } from './event-types.js';
 export type { EventLogEntry as DiscriminatedEventLogEntry, } from './event-payload.js';
-export { DiscriminatedEventLogEntrySchema, isToolCallEventEntry, isPainSignalEventEntry, isRulePromotionEventEntry, isHookExecutionEventEntry, isGateBlockEventEntry, isGateBypassEventEntry, isPlanApprovalEventEntry, isEvolutionTaskEventEntry, isEmpathyRollbackEventEntry, } from './event-payload.js';
+export { DiscriminatedEventLogEntrySchema, isToolCallEventEntry, isPainSignalEventEntry, isRulePromotionEventEntry, isHookExecutionEventEntry, isGateBlockEventEntry, isGateBypassEventEntry, isEvolutionTaskEventEntry, isEmpathyRollbackEventEntry, } from './event-payload.js';
 export type { PainSeverity as TypeboxPainSeverity, PainSignal, PainSignalValidationResult, } from './pain-signal.js';
 export { PainSeverity as PainSeveritySchema, PainSignalSchema, deriveSeverity, validatePainSignal, } from './pain-signal.js';
 export type { LedgerPrinciple, LedgerRule, LedgerTreeStore, LegacyPrincipleTrainingState, LegacyPrincipleTrainingStore, HybridLedgerStore, } from './ledger-store.js';

package/core/dist/runtime-v2/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,4BAA4B,EAC5B,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,kCAAkC,EAClC,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,SAAS,EACT,IAAI,EACJ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,YAAY,EACZ,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAE3E,YAAY,EACV,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,YAAY,EACV,KAAK,EACL,WAAW,EACX,UAAU,EACV,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,iBAAiB,EACjB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,EAChC,oCAAoC,EACpC,mCAAmC,EACnC,2CAA2C,EAC3C,0BAA0B,EAC1B,wBAAwB,EACxB,aAAa,EACb,UAAU,EAEV,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,SAAS,EACT,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,sCAAsC,EACtC,0CAA0C,EAC1C,yCAAyC,EACzC,iDAAiD,EACjD,gCAAgC,EAChC,8BAA8B,EAC9B,mBAAmB,EACnB,gBAAgB,EAEhB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,aAAa,IAAI,0BAA0B,GAC5C,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,YAAY,IAAI,mBAAmB,EACnC,UAAU,EACV,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,IAAI,kBAAkB,EAClC,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAO1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,eAAe,EACf,4BAA4B,EAC5B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,YAAY,EACV,cAAc,EACd,eAAe,EACf,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,YAAY,IAAI,oBAAoB,EACpC,aAAa,IAAI,qBAAqB,EACtC,eAAe,IAAI,uBAAuB,EAC1C,eAAe,IAAI,uBAAuB,EAE1C,aAAa,IAAI,0BAA0B,GAC5C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EAErB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,4BAA4B,EAC5B,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,kCAAkC,EAClC,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,SAAS,EACT,IAAI,EACJ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,YAAY,EACZ,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,YAAY,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAE3E,YAAY,EACV,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,YAAY,EACV,KAAK,EACL,WAAW,EACX,UAAU,EACV,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,iBAAiB,EACjB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,EAChC,oCAAoC,EACpC,mCAAmC,EACnC,2CAA2C,EAC3C,0BAA0B,EAC1B,wBAAwB,EACxB,aAAa,EACb,UAAU,EAEV,iBAAiB,EACjB,QAAQ,EACR,mBAAmB,EACnB,SAAS,EACT,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,sCAAsC,EACtC,0CAA0C,EAC1C,yCAAyC,EACzC,iDAAiD,EACjD,gCAAgC,EAChC,8BAA8B,EAC9B,mBAAmB,EACnB,gBAAgB,EAEhB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,aAAa,IAAI,0BAA0B,GAC5C,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,YAAY,IAAI,mBAAmB,EACnC,UAAU,EACV,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,IAAI,kBAAkB,EAClC,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAO1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,eAAe,EACf,4BAA4B,EAC5B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,YAAY,EACV,cAAc,EACd,eAAe,EACf,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,YAAY,IAAI,oBAAoB,EACpC,aAAa,IAAI,qBAAqB,EACtC,eAAe,IAAI,uBAAuB,EAC1C,eAAe,IAAI,uBAAuB,EAE1C,aAAa,IAAI,0BAA0B,GAC5C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EAErB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC"}

package/core/dist/runtime-v2/types/index.js

@@ -10,10 +10,10 @@ export { PrincipleTreeStoreSchema } from './principle-tree-store.js';
 export { toQueueItemId, toWorkflowId, toSessionKey, isQueueItemId, isWorkflowId, isSessionKey, } from './queue-types.js';
 export { PersistenceActionSchema, HygieneStatsSchema, createEmptyHygieneStats, } from './hygiene-types.js';
 export { RuntimeTruthSchema, AnalyticsTruthSchema, TrendMetricsSchema, } from './runtime-summary-types.js';
-export { EventTypeSchema, EventCategorySchema, EventLogEntrySchema, ToolCallEventDataSchema, PainSignalEventDataSchema, RulePromotionEventDataSchema, HookExecutionEventDataSchema, GateBlockEventDataSchema, GateBypassEventDataSchema, PlanApprovalEventDataSchema, EvolutionTaskEventDataSchema, EmpathyRollbackEventDataSchema, HeartbeatDiagnosisEventDataSchema, DiagnosisTaskEventDataSchema, DiagnosticianReportEventDataSchema, PrincipleCandidateEventDataSchema, RuleEnforcedEventDataSchema, RuleHostEvaluatedEventDataSchema, RuleHostBlockedEventDataSchema, RuleHostRequireApprovalEventDataSchema, RuleHostAutoCorrectProposedEventDataSchema, RuleHostAutoCorrectAppliedEventDataSchema, RuntimeV2PromptActivationsInjectedEventDataSchema, RuleHostUnhealthyEventDataSchema, RuleHostSkippedEventDataSchema, ToolCallStatsSchema, ErrorStatsSchema, 
+export { EventTypeSchema, EventCategorySchema, EventLogEntrySchema, ToolCallEventDataSchema, PainSignalEventDataSchema, RulePromotionEventDataSchema, HookExecutionEventDataSchema, GateBlockEventDataSchema, GateBypassEventDataSchema, EvolutionTaskEventDataSchema, EmpathyRollbackEventDataSchema, HeartbeatDiagnosisEventDataSchema, DiagnosisTaskEventDataSchema, DiagnosticianReportEventDataSchema, PrincipleCandidateEventDataSchema, RuleEnforcedEventDataSchema, RuleHostEvaluatedEventDataSchema, RuleHostBlockedEventDataSchema, RuleHostRequireApprovalEventDataSchema, RuleHostAutoCorrectProposedEventDataSchema, RuleHostAutoCorrectAppliedEventDataSchema, RuntimeV2PromptActivationsInjectedEventDataSchema, RuleHostUnhealthyEventDataSchema, RuleHostSkippedEventDataSchema, ToolCallStatsSchema, ErrorStatsSchema, 
 // PainStatsSchema re-export removed (PRI-451 Wave 1.5): no live reader.
 EmpathyEventStatsSchema, GfiStatsSchema, EventEvolutionStatsSchema, HookStatsSchema, DailyStatsSchema, createEmptyDailyStats, } from './event-types.js';
-export { DiscriminatedEventLogEntrySchema, isToolCallEventEntry, isPainSignalEventEntry, isRulePromotionEventEntry, isHookExecutionEventEntry, isGateBlockEventEntry, isGateBypassEventEntry, isPlanApprovalEventEntry, isEvolutionTaskEventEntry, isEmpathyRollbackEventEntry, } from './event-payload.js';
+export { DiscriminatedEventLogEntrySchema, isToolCallEventEntry, isPainSignalEventEntry, isRulePromotionEventEntry, isHookExecutionEventEntry, isGateBlockEventEntry, isGateBypassEventEntry, isEvolutionTaskEventEntry, isEmpathyRollbackEventEntry, } from './event-payload.js';
 export { PainSeverity as PainSeveritySchema, PainSignalSchema, deriveSeverity, validatePainSignal, } from './pain-signal.js';
 export { TREE_NAMESPACE } from './ledger-store.js';
 export { PDTaskScheduleSchema, PDTaskExecutionSchema, PDTaskDeliverySchema, PDTaskMetaSchema, PDTaskSpecSchema, BUILTIN_PD_TASKS, } from './pd-task-types.js';

package/core/dist/runtime-v2/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,kCAAkC,EAClC,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EACL,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAc/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAO3E,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAUrE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAuCpC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,sCAAsC,EACtC,0CAA0C,EAC1C,yCAAyC,EACzC,iDAAiD,EACjD,gCAAgC,EAChC,8BAA8B,EAC9B,mBAAmB,EACnB,gBAAgB;AAChB,wEAAwE;AACxE,uBAAuB,EACvB,cAAc,EACd,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,YAAY,IAAI,kBAAkB,EAClC,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAgB1B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWnD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAgB5B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB;AACrB,sEAAsE;AACtE,qBAAqB,GACtB,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime-v2/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,cAAc,EACd,kCAAkC,EAClC,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EACL,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAc/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAO3E,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAUrE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAsCpC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,sCAAsC,EACtC,0CAA0C,EAC1C,yCAAyC,EACzC,iDAAiD,EACjD,gCAAgC,EAChC,8BAA8B,EAC9B,mBAAmB,EACnB,gBAAgB;AAChB,wEAAwE;AACxE,uBAAuB,EACvB,cAAc,EACd,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EACL,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,YAAY,IAAI,kBAAkB,EAClC,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAgB1B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWnD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAgB5B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB;AACrB,sEAAsE;AACtE,qBAAqB,GACtB,MAAM,8BAA8B,CAAC"}

package/dist/installer.d.ts

@@ -44,6 +44,55 @@ export declare function migrateLegacyPdBackups(): void;
  * Exported for real-filesystem tests (tests/backup-location.test.ts).
  */
 export declare function backupExistingInstall(): BackupResult;
+/**
+ * Legacy rule contract preflight (2026-08-19).
+ *
+ * Before replacing the current installation, run the NEW pd-cli's
+ * `runtime compatibility-scan` against the target workspace: if any ACTIVE
+ * owner-approved RuleCode still references a RuleHost contract symbol this
+ * version removed (recentThinking, planStatus, hasPlanFile, ...), upgrading
+ * would silently change that rule's behavior. Refusing here keeps the old
+ * installation untouched (cli-5) and tells the owner exactly which rules
+ * block the upgrade.
+ */
+/**
+ * Compatibility preflight status taxonomy (P1-3, 2026-08-20).
+ *
+ * The scanner's status is preserved end-to-end so a refusal names the real
+ * cause instead of smearing every failure into "legacy RuleCode":
+ *
+ *   clean             → allow upgrade
+ *   no_state_db       → allow (nothing persisted to be incompatible)
+ *   legacy_dependency → refuse → migrate/deactivate the listed rules
+ *   scan_failed       → refuse → repair DB / permissions
+ *   scan_unavailable  → refuse → repair/re-download the installer
+ *
+ * Any unrecognized status is treated as a refusal (fail closed).
+ */
+export type CompatibilityStatus = 'clean' | 'no_state_db' | 'legacy_dependency' | 'scan_failed' | 'scan_unavailable';
+export interface LegacyRulePreflightOutcome {
+    ok: boolean;
+    status?: CompatibilityStatus;
+    /** rc-9: structured reason + remediation whenever ok=false. */
+    reason?: string;
+    remediation?: string;
+}
+/** Injected runner so tests can exercise refusal without a built pd-cli. */
+export type LegacyRulePreflightRunner = (pdCliEntry: string, workspaceDir: string) => Promise<LegacyRulePreflightOutcome>;
+/**
+ * Strict (ok, status) protocol parse (P2, 2026-08-20).
+ *
+ * Boolean `ok` alone is NOT authoritative — the (ok, status) pair is the
+ * contract. Only ok=true + (clean|no_state_db) is a successful scan. Every
+ * other combination fails closed:
+ *   - ok=true + refusal/success-impossible status → protocol invalid
+ *   - ok=false + clean|no_state_db/unknown   → protocol invalid
+ *   - ok=false + legacy_dependency|scan_failed|scan_unavailable → refusal
+ *   - non-boolean / missing ok               → protocol invalid
+ * The payload is never trusted to self-describe a pass.
+ */
+export declare function parseCompatibilityScanStdout(stdout: unknown): LegacyRulePreflightOutcome;
+export declare function runLegacyRuleContractPreflight(pluginDir: string, workspaceDir: string, runScan?: LegacyRulePreflightRunner): Promise<LegacyRulePreflightOutcome>;
 export declare function checkBuiltPlugin(pluginDir: string): Promise<void>;
 export declare function installPluginToStaging(pluginDir: string, language: SkillLanguage): Promise<void>;
 export interface InstallResult {

package/dist/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAaL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EAExB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEtF,iFAAiF;AACjF,eAAO,MAAM,8BAA8B,EAAG,yBAAkC,CAAC;AAMjF;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCjG;AAyDD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAW5E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOpF;AA8CD,UAAU,YAAY;IACpB,IAAI,EAAE,aAAa,GAAG,WAAW,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA+B7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,YAAY,CAiBpD;AAwFD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvE;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAetG;AAyzBD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;0FACsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAoCD,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA0V3H"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAaL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EAExB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAsB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEtF,iFAAiF;AACjF,eAAO,MAAM,8BAA8B,EAAG,yBAAkC,CAAC;AAMjF;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCjG;AAyDD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAW5E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAOpF;AA+CD,UAAU,YAAY;IACpB,IAAI,EAAE,aAAa,GAAG,WAAW,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CA+B7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,YAAY,CAiBpD;AAwFD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAC3B,OAAO,GACP,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,kBAAkB,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,MAAM,yBAAyB,GAAG,CACtC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,KACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAkDzC;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAgCxF;AAiCD,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,yBAA4D,GACpE,OAAO,CAAC,0BAA0B,CAAC,CAiDrC;AA0BD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvE;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAetG;AAyzBD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;0FACsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAoCD,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAyX3H"}

package/dist/installer.js

@@ -144,6 +144,7 @@ export function validateWorkspacePath(targetPath, workspaceDir) {
 }
 const INSTALL_STEPS = [
     { name: 'Checking built plugin', weight: 3 },
+    { name: 'Checking workspace rule compatibility', weight: 1 },
     { name: 'Backing up existing install', weight: 3 },
     { name: 'Installing bundled @principles/core', weight: 8 },
     { name: 'Installing bundled @principles/host-runtime', weight: 3 },
@@ -316,6 +317,185 @@ function buildGatewayRefusalResult(options, detail) {
         ...(detail.error !== undefined ? { error: detail.error } : {}),
     };
 }
+/** Map a scanner refusal status into the preflight refusal contract (P1-3). */
+function refuseForStatus(status, parsedReason, remediation) {
+    switch (status) {
+        case 'legacy_dependency':
+            return {
+                ok: false,
+                status: 'legacy_dependency',
+                reason: parsedReason ?? `legacy_rule_contract_dependency: ${status}`,
+                ...(remediation !== undefined ? { remediation } : {}),
+            };
+        case 'scan_failed':
+            return {
+                ok: false,
+                status: 'scan_failed',
+                reason: parsedReason ?? 'compatibility_scan_failed: workspace state could not be scanned',
+                ...(remediation !== undefined
+                    ? { remediation }
+                    : { remediation: 'Repair the workspace database or its permissions, then retry the upgrade. The current installation has not been replaced.' }),
+            };
+        case 'scan_unavailable':
+            return {
+                ok: false,
+                status: 'scan_unavailable',
+                reason: parsedReason ?? 'compatibility_scan_unavailable',
+                ...(remediation !== undefined
+                    ? { remediation }
+                    : { remediation: 'Re-download/rebuild the installer before upgrading. The current installation has not been replaced.' }),
+            };
+    }
+}
+/** Fail closed with the strict protocol-violation reason (P2, 2026-08-20). */
+function protocolInvalid(detail) {
+    return {
+        ok: false,
+        status: 'scan_failed',
+        reason: `compatibility_scan_protocol_invalid: ${detail}`,
+        remediation: 'The compatibility scanner returned an unexpected result. Re-download/rebuild the installer before upgrading. The current installation has not been replaced.',
+    };
+}
+/**
+ * Strict (ok, status) protocol parse (P2, 2026-08-20).
+ *
+ * Boolean `ok` alone is NOT authoritative — the (ok, status) pair is the
+ * contract. Only ok=true + (clean|no_state_db) is a successful scan. Every
+ * other combination fails closed:
+ *   - ok=true + refusal/success-impossible status → protocol invalid
+ *   - ok=false + clean|no_state_db/unknown   → protocol invalid
+ *   - ok=false + legacy_dependency|scan_failed|scan_unavailable → refusal
+ *   - non-boolean / missing ok               → protocol invalid
+ * The payload is never trusted to self-describe a pass.
+ */
+export function parseCompatibilityScanStdout(stdout) {
+    if (typeof stdout !== 'string' || stdout.trim().length === 0) {
+        return { ok: false, status: 'scan_failed', reason: 'compatibility_scan_unreadable: empty stdout' };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return { ok: false, status: 'scan_failed', reason: 'compatibility_scan_unreadable: stdout is not JSON' };
+    }
+    if (!isRecord(parsed)) {
+        return { ok: false, status: 'scan_failed', reason: 'compatibility_scan_unreadable: stdout is not an object' };
+    }
+    const status = typeof parsed.status === 'string' ? parsed.status : 'unknown';
+    const reason = typeof parsed.reason === 'string' ? parsed.reason : undefined;
+    const remediation = typeof parsed.remediation === 'string' ? parsed.remediation : undefined;
+    if (parsed.ok === true) {
+        if (status === 'clean' || status === 'no_state_db') {
+            return { ok: true, status };
+        }
+        return protocolInvalid(`ok=true with status=${status}`);
+    }
+    if (parsed.ok === false) {
+        if (status === 'legacy_dependency' || status === 'scan_failed' || status === 'scan_unavailable') {
+            return refuseForStatus(status, reason, remediation);
+        }
+        return protocolInvalid(`ok=false with status=${status}`);
+    }
+    return protocolInvalid(`ok is not a boolean`);
+}
+async function defaultLegacyRulePreflightRunner(pdCliEntry, workspaceDir) {
+    // The entry path is boundary-checked before it is used as a subprocess
+    // target, and the subprocess is invoked with an argv array (no shell).
+    const { execFile } = await import('node:child_process');
+    const { promisify } = await import('node:util');
+    const execFileAsync = promisify(execFile);
+    try {
+        const result = await execFileAsync(process.execPath, [pdCliEntry, 'runtime', 'compatibility-scan', '--json', '--workspace', workspaceDir], { timeout: 60_000 });
+        return parseCompatibilityScanStdout(result.stdout);
+    }
+    catch (err) {
+        // The scan command exits 1 WITH valid JSON for any refusal (legacy
+        // dependency, DB failure, ...). Preserve that structured result instead
+        // of smearing scan_failed into legacy_dependency (P1-3).
+        const { stdout } = err;
+        if (typeof stdout === 'string' && stdout.trim().length > 0) {
+            const fromStdout = parseCompatibilityScanStdout(stdout);
+            if (!fromStdout.ok)
+                return fromStdout;
+        }
+        return {
+            ok: false,
+            status: 'scan_failed',
+            reason: `compatibility_scan_failed: ${err instanceof Error ? err.message : String(err)}`,
+            remediation: 'Repair the workspace database or its permissions, then retry the upgrade. The current installation has not been replaced.',
+        };
+    }
+}
+export async function runLegacyRuleContractPreflight(pluginDir, workspaceDir, runScan = defaultLegacyRulePreflightRunner) {
+    const resolvedWorkspace = path.resolve(workspaceDir);
+    // Self-contained status decision (P0/P1-2): a workspace with no persisted
+    // PD state has nothing a contract change could break, so the scan is
+    // skipped cleanly. The function must NOT rely on the caller having
+    // pre-checked for state.db — Console/installer callers differ.
+    const stateDbPath = path.join(resolvedWorkspace, '.pd', 'state.db');
+    if (!existsSync(stateDbPath)) {
+        return {
+            ok: true,
+            status: 'no_state_db',
+            reason: 'state.db not found — no persisted activations to scan',
+        };
+    }
+    const pdCliRoot = path.resolve(pluginDir, 'pd-cli');
+    const pdCliEntry = path.resolve(pdCliRoot, 'dist', 'index.js');
+    if (pdCliEntry !== pdCliRoot && !pdCliEntry.startsWith(pdCliRoot + path.sep)) {
+        return {
+            ok: false,
+            status: 'scan_unavailable',
+            reason: `compatibility_scan_unavailable: pd-cli entry escapes package dir (${pdCliEntry})`,
+            remediation: 'Re-download/rebuild the installer before upgrading. The current installation has not been replaced.',
+        };
+    }
+    if (!existsSync(pdCliEntry) || !statSync(pdCliEntry).isFile()) {
+        // A stateful workspace is about to be upgraded and we cannot prove its
+        // active RuleCode is compatible with the new runtime. This is NOT a
+        // "fresh layout, skip it" case — fresh workspaces were handled above by
+        // the no_state_db early return. Fail closed (P0/P1-2).
+        return {
+            ok: false,
+            status: 'scan_unavailable',
+            reason: 'compatibility_scan_unavailable',
+            remediation: 'The bundled compatibility scanner is missing. The package may be incomplete or corrupted. ' +
+                'Re-download/rebuild the installer before upgrading. The current installation has not been replaced.',
+        };
+    }
+    try {
+        return await runScan(pdCliEntry, resolvedWorkspace);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            status: 'scan_failed',
+            reason: `compatibility_scan_failed: ${err instanceof Error ? err.message : String(err)}`,
+            remediation: 'Repair the workspace database or its permissions, then retry the upgrade. The current installation has not been replaced.',
+        };
+    }
+}
+/**
+ * Structured refusal for the legacy-contract preflight: nothing has been
+ * mutated yet (the old installation is untouched) and the message names the
+ * affected rules via the scan's remediation text.
+ */
+function buildCompatibilityRefusalResult(options, outcome) {
+    const nextAction = outcome.remediation ?? 'Migrate or deactivate the listed rules, then re-run the installer.';
+    return {
+        success: false,
+        workspaceDir: options.workspaceDir,
+        configYamlPath: getConfigYamlPath(options.workspaceDir),
+        templatesCount: 0,
+        components: { plugin: 'skipped', cli: 'skipped', console: 'skipped' },
+        verification: { features: 'skipped', storyA: 'skipped' },
+        enabledChannels: options.channels,
+        nextAction,
+        reason: outcome.reason ?? 'legacy_rule_contract_dependency',
+        ...(outcome.remediation !== undefined ? { error: outcome.remediation } : {}),
+    };
+}
 export async function checkBuiltPlugin(pluginDir) {
     const distDir = path.join(pluginDir, 'plugin', 'dist');
     const pluginJson = path.join(pluginDir, 'plugin', 'openclaw.plugin.json');
@@ -1209,6 +1389,21 @@ export async function install(options, pluginDir, mode = {}) {
         await checkBuiltPlugin(pluginDir);
         verification.manifestActivation = 'verified';
         stepIndex++;
+        // Legacy rule contract preflight — run BEFORE the backup/rename step so
+        // a refusal leaves the existing installation completely untouched. Only
+        // meaningful when the target workspace already has PD state; fresh
+        // workspaces scan clean (no state.db → nothing persisted to conflict).
+        if (existsSync(path.join(path.resolve(options.workspaceDir), '.pd', 'state.db'))) {
+            if (spinner)
+                updateProgress(spinner, stepIndex, 'Checking workspace rule compatibility...');
+            const compat = await runLegacyRuleContractPreflight(pluginDir, options.workspaceDir);
+            if (!compat.ok) {
+                if (!quiet)
+                    logger.error(compat.reason ?? 'legacy_rule_contract_dependency');
+                return buildCompatibilityRefusalResult(options, compat);
+            }
+        }
+        stepIndex++;
         if (spinner)
             updateProgress(spinner, stepIndex, 'Backing up existing install...');
         migrateLegacyPdBackups();
@@ -1330,9 +1525,26 @@ export async function install(options, pluginDir, mode = {}) {
         if (spinner)
             updateProgress(spinner, stepIndex, 'Verifying demo...');
         try {
-            const installedPdCliEntry = path.join(getInstalledPdCliDir(), 'dist', 'index.js');
-            execFileSync(process.execPath, [installedPdCliEntry, 'demo', 'story-a', '--json', '--workspace', options.workspaceDir], {
-                stdio: 'pipe',
+            // Demo isolation (2026-08-19): the install target already holds
+            // initialized PD state at this point (.pd/state.db, .principles/
+            // PROFILE.json), so the CLI's demo guard refuses to write demo data
+            // into it. Run WITHOUT --workspace — pd-cli provisions and cleans up
+            // its own throwaway temp workspace, exercising the same installed
+            // pd-cli + core chain without polluting the user's workspace.
+            // The entry path is boundary-checked before it is used as a
+            // subprocess target (canonical-path containment + existence).
+            const pdCliRoot = path.resolve(getInstalledPdCliDir());
+            const pdCliEntry = path.resolve(pdCliRoot, 'dist', 'index.js');
+            if (pdCliEntry !== pdCliRoot && !pdCliEntry.startsWith(pdCliRoot + path.sep)) {
+                throw new Error(`pd-cli entry escapes install dir: ${pdCliEntry}`);
+            }
+            if (!existsSync(pdCliEntry) || !statSync(pdCliEntry).isFile()) {
+                throw new Error(`pd-cli entry missing: ${pdCliEntry}`);
+            }
+            const { execFile } = await import('node:child_process');
+            const { promisify } = await import('node:util');
+            const execFileAsync = promisify(execFile);
+            await execFileAsync(process.execPath, [pdCliEntry, 'demo', 'story-a', '--json'], {
                 timeout: STORY_A_VERIFICATION_TIMEOUT_MS,
             });
             verification.storyA = 'passed';