create-principles-disciple 1.121.7 → 1.121.9

package/console/dist/ui/App.js

@@ -130,7 +130,7 @@ function AuthRoutes() {
     }, []);
     return (_jsxs(Routes, { children: [_jsx(Route, { path: "/splash", element: _jsx(SplashScreen, { onComplete: () => {
                         setShowSplash(false);
-                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, { featureFlags: featureFlags ?? undefined }), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/welcome", element: _jsx(WelcomePage, { workspaceId: currentWorkspaceId }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, {}) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/control-center/signal-keywords", element: _jsx(SignalKeywordsPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/failed-tasks", element: _jsx(FailedTasksPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
+                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, { featureFlags: featureFlags ?? undefined }), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/welcome", element: _jsx(WelcomePage, { workspaceId: currentWorkspaceId }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, { featureFlags: featureFlags ?? undefined }) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/control-center/signal-keywords", element: _jsx(SignalKeywordsPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/failed-tasks", element: _jsx(FailedTasksPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
 }
 export function App() {
     return (_jsx(ThemeProvider, { children: _jsxs(I18nextProvider, { i18n: i18n, children: [_jsx(HashRouter, { children: _jsx(AuthRoutes, {}) }), _jsx(Toaster, {})] }) }));

package/console/dist/ui/api.d.ts

@@ -1,6 +1,7 @@
 import type { ApiResponse } from "../types.js";
 import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm } from "./utils/signal-keywords-api.js";
-import type { OwnerGovernanceView } from '@principles/core/runtime-v2';
+import type { GovernanceExperienceSnapshot, OwnerGovernanceView } from '@principles/core/runtime-v2';
+import type { OwnerIdentityViewData, OwnerIdentityRegisterData, OwnerIdentityUnregisterData } from "./utils/validators.js";
 import type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, FeedbackChannelsData, FeedbackSubmitResultData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, RecoveryResultData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, TrajectoryData, IntentSummaryData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, IntentInitResultData, IntentSaveResultData, IntentRawContentData, IntentVersionData, RuleCodeOwnerReviewData, RuleCodeMutationData } from "./utils/validators.js";
 declare function getToken(): string | null;
 declare function setToken(token: string): void;
@@ -48,6 +49,7 @@ export interface PrincipleReceiptsData {
     presenceCount: number;
     lastEffectAt: string | null;
     events: ReceiptEventData[];
+    coverage: ReceiptEvidenceCoverageData;
 }
 export interface ReceiptCountEntryData {
     principleId: string;
@@ -60,6 +62,18 @@ export interface ReceiptCountsData {
     reason?: string;
     nextAction?: string;
     counts: ReceiptCountEntryData[];
+    coverage: ReceiptEvidenceCoverageData;
+}
+export type ReceiptSourceStatusData = "available" | "disabled" | "unavailable";
+export type ReceiptValidationStatusData = "valid" | "partial" | "malformed";
+export interface ReceiptEvidenceCoverageData {
+    sourceStatus: ReceiptSourceStatusData;
+    validationStatus: ReceiptValidationStatusData;
+    observedFrom: string | null;
+    asOf: string;
+    retentionPolicyDays: number;
+    reasonCode?: string;
+    nextActionCode?: string;
 }
 declare function fetchPrincipleReceipts(principleId: string): Promise<ApiResponse<PrincipleReceiptsData>>;
 declare function fetchReceiptCounts(): Promise<ApiResponse<ReceiptCountsData>>;
@@ -84,6 +98,9 @@ declare function fetchConfigSummary(): Promise<ApiResponse<ConfigSummaryData>>;
 declare function fetchConfigCatalog(): Promise<ApiResponse<ConfigCatalogData>>;
 declare function updateAgentBinding(agentName: string, runtimeProfile: string, enabled: boolean): Promise<ApiResponse<AgentBindingUpdateData>>;
 declare function updateDefaultRuntime(defaultRuntime: string): Promise<ApiResponse<DefaultRuntimeUpdateData>>;
+export declare function fetchOwnerIdentity(): Promise<ApiResponse<OwnerIdentityViewData>>;
+export declare function registerOwnerIdentity(ownerId: string, credentialId: string): Promise<ApiResponse<OwnerIdentityRegisterData>>;
+export declare function unregisterOwnerIdentity(): Promise<ApiResponse<OwnerIdentityUnregisterData>>;
 /**
  * Create a new runtime profile.
  *
@@ -129,7 +146,8 @@ declare function patchFeatureFlag(featureName: string, enabled: boolean): Promis
 declare function fetchOutputLanguage(): Promise<ApiResponse<OutputLanguageData>>;
 declare function updateOutputLanguage(outputLanguage: string): Promise<ApiResponse<OutputLanguageData>>;
 declare function fetchGovernanceQueue(): Promise<ApiResponse<GovernanceQueueData>>;
-declare function recoverFailedTask(taskId: string, reason?: string): Promise<ApiResponse<RecoveryResultData>>;
+declare function fetchGovernanceExperience(): Promise<ApiResponse<GovernanceExperienceSnapshot>>;
+declare function recoverFailedTask(taskId: string, reason?: string, force?: boolean): Promise<ApiResponse<RecoveryResultData>>;
 declare function fetchApprovalsGrouped(): Promise<ApiResponse<ApprovalsGroupedData>>;
 declare function fetchAllActivations(): Promise<ApiResponse<ActivationsData>>;
 declare function disableActivation(activationId: string): Promise<ApiResponse<DisableActivationData>>;
@@ -196,7 +214,7 @@ export interface FollowUpPayload {
     candidateId?: string;
 }
 declare function dispatchFollowUp(decisionId: string, payload: FollowUpPayload): Promise<ApiResponse<FollowUpResponseData>>;
-export { request, listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+export { request, listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchGovernanceExperience, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
 export type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, FeedbackChannelsData, FeedbackSubmitResultData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, RecoveryResultData, ActivationsData, DisableActivationData, RuleCodeOwnerReviewData, RuleCodeMutationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, EvidenceChainRecordData, EvidenceChainStateData, TrajectoryData, TrajectoryStageData, IntentSummaryData, IntentSectionsData, IntentDocWarningData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, LinkCandidateFollowUpData, GuideRulehostFollowUpData, GeneratePatchProposalFollowUpData, IntentVersionEntry, IntentVersionData, } from "./utils/validators.js";
 export type { SignalKeyword, PendingSignalTerm } from "./utils/signal-keywords-types.js";
 export type { ActivationRecordData as ActivationRecord } from "./utils/validators.js";
@@ -213,6 +231,7 @@ export type { RedactedFeatureSummaryData as RedactedFeatureSummary } from "./uti
 export type { RedactedAgentSummaryData as RedactedAgentSummary } from "./utils/validators.js";
 export type { UpdateHistoryEntryData as UpdateHistoryEntry } from "./utils/validators.js";
 export type { ReadinessStatus } from "./utils/validators.js";
+export type { OwnerIdentityViewData, OwnerIdentityRegisterData, OwnerIdentityUnregisterData } from "./utils/validators.js";
 export type { ConfigSource } from "./utils/validators.js";
 export interface PrincipleDetail {
     id: string;

package/console/dist/ui/api.js

@@ -1,5 +1,5 @@
 import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, } from "./utils/signal-keywords-api.js";
-import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateRuleCodeOwnerReview, validateRuleCodeMutation, } from "./utils/validators.js";
+import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateGovernanceExperienceSnapshot, validateRuleCodeOwnerReview, validateRuleCodeMutation, validateOwnerIdentityView, validateOwnerIdentityRegister, validateOwnerIdentityUnregister, } from "./utils/validators.js";
 // ── Auth ──────────────────────────────────────────────────────────────────────
 function getToken() {
     return sessionStorage.getItem("pd_token");
@@ -136,6 +136,32 @@ async function unarchivePrinciple(principleId) {
 async function fetchPrincipleTrajectory(principleId) {
     return request(`/api/principles/${encodeURIComponent(principleId)}/trajectory`, undefined, validateTrajectoryData);
 }
+const RECEIPT_SOURCE_STATUSES = new Set(["available", "disabled", "unavailable"]);
+const RECEIPT_VALIDATION_STATUSES = new Set(["valid", "partial", "malformed"]);
+function validateReceiptCoverage(value) {
+    if (typeof value !== "object" || value === null)
+        return null;
+    const rec = value;
+    if (typeof rec.sourceStatus !== "string" || !RECEIPT_SOURCE_STATUSES.has(rec.sourceStatus))
+        return null;
+    if (typeof rec.validationStatus !== "string" || !RECEIPT_VALIDATION_STATUSES.has(rec.validationStatus))
+        return null;
+    if (rec.observedFrom !== null && typeof rec.observedFrom !== "string")
+        return null;
+    if (typeof rec.asOf !== "string")
+        return null;
+    if (typeof rec.retentionPolicyDays !== "number")
+        return null;
+    return {
+        sourceStatus: rec.sourceStatus,
+        validationStatus: rec.validationStatus,
+        observedFrom: rec.observedFrom,
+        asOf: rec.asOf,
+        retentionPolicyDays: rec.retentionPolicyDays,
+        ...(typeof rec.reasonCode === "string" ? { reasonCode: rec.reasonCode } : {}),
+        ...(typeof rec.nextActionCode === "string" ? { nextActionCode: rec.nextActionCode } : {}),
+    };
+}
 const RECEIPT_KINDS = new Set(["rule_blocked", "auto_correct_applied", "self_reported", "prompt_injected"]);
 function validateReceiptEvent(value) {
     if (typeof value !== "object" || value === null)
@@ -164,6 +190,11 @@ function validatePrincipleReceipts(data) {
     const rec = data;
     if (typeof rec.principleId !== "string")
         return null;
+    // PRI-590: coverage is a required field of the receipt contract — a missing
+    // or malformed block means server/client contract skew; reject loudly.
+    const coverage = validateReceiptCoverage(rec.coverage);
+    if (coverage === null)
+        return null;
     const events = [];
     if (Array.isArray(rec.events)) {
         for (const item of rec.events) {
@@ -181,12 +212,16 @@ function validatePrincipleReceipts(data) {
         presenceCount: typeof rec.presenceCount === "number" ? rec.presenceCount : 0,
         lastEffectAt: typeof rec.lastEffectAt === "string" ? rec.lastEffectAt : null,
         events,
+        coverage,
     };
 }
 function validateReceiptCounts(data) {
     if (typeof data !== "object" || data === null)
         return null;
     const rec = data;
+    const coverage = validateReceiptCoverage(rec.coverage);
+    if (coverage === null)
+        return null;
     const counts = [];
     if (Array.isArray(rec.counts)) {
         for (const item of rec.counts) {
@@ -208,6 +243,7 @@ function validateReceiptCounts(data) {
         reason: typeof rec.reason === "string" ? rec.reason : undefined,
         nextAction: typeof rec.nextAction === "string" ? rec.nextAction : undefined,
         counts,
+        coverage,
     };
 }
 async function fetchPrincipleReceipts(principleId) {
@@ -305,6 +341,19 @@ async function updateDefaultRuntime(defaultRuntime) {
         body: JSON.stringify({ defaultRuntime }),
     }, validateDefaultRuntimeUpdate);
 }
+// ── Owner identity (ADR-0022 / PRI-578) ──────────────────────────────────────
+export async function fetchOwnerIdentity() {
+    return request('/api/v1/owner-identity', undefined, validateOwnerIdentityView);
+}
+export async function registerOwnerIdentity(ownerId, credentialId) {
+    return request('/api/v1/owner-identity', {
+        method: 'POST',
+        body: JSON.stringify({ ownerId, credentialId }),
+    }, validateOwnerIdentityRegister);
+}
+export async function unregisterOwnerIdentity() {
+    return request('/api/v1/owner-identity', { method: 'DELETE' }, validateOwnerIdentityUnregister);
+}
 // ── Runtime Profile CRUD (POST/PATCH/DELETE /api/v1/config/profiles) ──────────
 /**
  * Create a new runtime profile.
@@ -382,13 +431,24 @@ async function updateOutputLanguage(outputLanguage) {
 async function fetchGovernanceQueue() {
     return request('/api/v1/governance/queue', undefined, validateGovernanceQueue);
 }
+// PRI-586: read-only governance experience snapshot. Only called when the
+// governance_experience_v1 flag is enabled — flag-off the endpoint 403s and
+// the Console keeps the legacy Focus experience (ERR-102: disabled ≠ unavailable).
+async function fetchGovernanceExperience() {
+    return request('/api/v1/governance/experience', undefined, validateGovernanceExperienceSnapshot);
+}
 // Governance Recovery Actions v1: Owner-triggered recovery of a failed /
 // needs_human_review internalization task (failed→pending | needs_human_review→pending).
-async function recoverFailedTask(taskId, reason) {
+// force=true recovers a task whose attempt budget is exhausted (core raises
+// its maxAttempts); it only affects the failed path.
+async function recoverFailedTask(taskId, reason, force) {
     const body = {};
     if (reason !== undefined && reason.length > 0) {
         body.reason = reason;
     }
+    if (force === true) {
+        body.force = true;
+    }
     return request('/api/v1/failed-tasks/' + encodeURIComponent(taskId) + '/recover', {
         method: 'POST',
         body: JSON.stringify(body),
@@ -510,4 +570,4 @@ listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendin
 // auth
 getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, 
 // Feedback submit ladder (Slice 3, spec §8)
-fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchGovernanceExperience, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };

package/console/dist/ui/components/receipts/ReceiptCoverageDisclosure.d.ts

@@ -0,0 +1,6 @@
+import type { ReceiptEvidenceCoverageData, ReceiptSourceStatusData } from "../../api.js";
+/** Localized label key for a source status — shared by the degraded notes. */
+export declare function getReceiptSourceStatusLabelKey(status: ReceiptSourceStatusData): string;
+export declare function ReceiptCoverageDisclosure({ coverage }: {
+    coverage: ReceiptEvidenceCoverageData;
+}): import("react").JSX.Element;

package/console/dist/ui/components/receipts/ReceiptCoverageDisclosure.js

@@ -0,0 +1,66 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Receipt evidence coverage disclosure — PRI-590.
+ *
+ * Shared block that explains what receipt numbers MEAN: source status,
+ * observed range, retention policy, and the "observed evidence, not full
+ * history" limitation. Used by the PrincipleDetail receipt section and the
+ * Activation page counts context.
+ *
+ * Never displays file paths, digests, raw payloads, or tool arguments.
+ *
+ * Keys use full paths ("pages.principles.…") because this component binds
+ * useTranslation() to the default `common` namespace, which carries the
+ * whole locale tree — usable from pages that pick other namespaces.
+ */
+import { useTranslation } from "react-i18next";
+import { formatDate } from "../../utils/format-date.js";
+// ERR-106: exhaustive Records over the status unions — a binary ternary would
+// fold one member into a default and misrepresent its state.
+const SOURCE_STATUS_LABEL_KEYS = {
+    available: "pages.principles.detail.receipts.coverage.statusAvailable",
+    disabled: "pages.principles.detail.receipts.coverage.statusDisabled",
+    unavailable: "pages.principles.detail.receipts.coverage.statusUnavailable",
+};
+const SOURCE_STATUS_PILL_CLASS = {
+    available: "border-green/35 text-green bg-green/5",
+    disabled: "border-amber/35 text-amber bg-amber/5",
+    unavailable: "border-line text-ink-4 bg-surface/80",
+};
+const VALIDATION_NOTE_KEYS = {
+    valid: null,
+    partial: "pages.principles.detail.receipts.coverage.validationPartial",
+    malformed: "pages.principles.detail.receipts.coverage.validationMalformed",
+};
+/**
+ * reasonCode → localized phrase. Owner-facing copy must not leak snake_case
+ * technical codes (review round 2). A Map (not a plain object) because the
+ * lookup key comes from the API payload — no prototype-chain exposure
+ * (EP-01/ERR-013). Unknown codes fall back to the raw code — fail-visible
+ * rather than blank, so the debug clue survives.
+ */
+const REASON_CODE_LABEL_KEYS = new Map([
+    ["receipt_rows_dropped", "pages.principles.detail.receipts.coverage.reasonCodes.receiptRowsDropped"],
+    ["ledger_level_invalid", "pages.principles.detail.receipts.coverage.reasonCodes.ledgerLevelInvalid"],
+    ["ledger_counts_unreadable", "pages.principles.detail.receipts.coverage.reasonCodes.ledgerCountsUnreadable"],
+]);
+/** Localized label key for a source status — shared by the degraded notes. */
+export function getReceiptSourceStatusLabelKey(status) {
+    return SOURCE_STATUS_LABEL_KEYS[status];
+}
+export function ReceiptCoverageDisclosure({ coverage }) {
+    const { t, i18n } = useTranslation();
+    const validationNoteKey = VALIDATION_NOTE_KEYS[coverage.validationStatus];
+    // Known codes render as a localized phrase; unknown codes fall back to the
+    // raw code in parentheses (fail-visible debug clue, never a blank verdict).
+    let reasonSuffix = null;
+    if (coverage.reasonCode !== undefined) {
+        const labelKey = REASON_CODE_LABEL_KEYS.get(coverage.reasonCode);
+        reasonSuffix = labelKey !== undefined ? ` — ${t(labelKey)}` : ` (${coverage.reasonCode})`;
+    }
+    return (_jsxs("div", { "data-testid": "receipt-coverage", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("span", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4", children: t("pages.principles.detail.receipts.coverage.label") }), _jsx("span", { className: `inline-flex items-center border rounded-[2px] px-[7px] py-0.5 font-mono text-[11px] uppercase ${SOURCE_STATUS_PILL_CLASS[coverage.sourceStatus]}`, children: t(SOURCE_STATUS_LABEL_KEYS[coverage.sourceStatus]) })] }), _jsxs("p", { className: "mt-1.5 text-[11px] leading-relaxed text-ink-4", children: [coverage.observedFrom !== null
+                        ? t("pages.principles.detail.receipts.coverage.observedSince", {
+                            date: formatDate(coverage.observedFrom, i18n.language),
+                        })
+                        : t("pages.principles.detail.receipts.coverage.observedSinceEmpty"), " · ", t("pages.principles.detail.receipts.coverage.asOf", { date: formatDate(coverage.asOf, i18n.language) }), " · ", t("pages.principles.detail.receipts.coverage.retention", { days: coverage.retentionPolicyDays })] }), _jsx("p", { className: "mt-1 text-[11px] leading-relaxed text-ink-4", children: t("pages.principles.detail.receipts.coverage.limitation") }), validationNoteKey !== null && (_jsxs("p", { "data-testid": "receipt-coverage-validation", className: "mt-1 text-[11px] leading-relaxed text-amber", children: [t(validationNoteKey), reasonSuffix] }))] }));
+}

package/console/dist/ui/i18n/en.json

@@ -136,6 +136,90 @@
                 "degraded": "Degraded"
             },
             "nextActionLabel": "Suggested action:",
+            "experience": {
+                "attention": {
+                    "setupRequired": "Setup Required",
+                    "ownerDecisionRequired": "Owner Decision Required",
+                    "recoveryRequired": "Recovery Required",
+                    "degraded": "Degraded",
+                    "backgroundProcessing": "Background Processing",
+                    "allClear": "All Clear"
+                },
+                "reason": {
+                    "ownerIdentityMissing": "The Owner identity is not configured. RuleCode governance decisions are blocked until PD_OWNER_ID and PD_OWNER_CREDENTIAL_ID are set and the console token auth is enabled.",
+                    "approvalPending": "Principle approvals are waiting for your decision.",
+                    "rulecodeOwnerDecision": "RuleCode shadow activations are waiting for your promotion decision.",
+                    "noPendingDecision": "No principle approval is waiting right now.",
+                    "ownerDecisionAvailable": "The configured Owner holds the governance decision entry.",
+                    "breakGlassEntry": "Emergency pause currently resolves through the local break-glass path because no Owner identity is configured.",
+                    "recoveryRequired": "Some governance work stalled and needs recovery before it can continue.",
+                    "sourceUnavailable": "A required governance source is unavailable, so ongoing work cannot progress.",
+                    "configInvalid": "The workspace config file is invalid; the environment classification is unknown.",
+                    "processing": "Governance work is running in the background. No decision is needed right now.",
+                    "workspaceClear": "All governance work is settled. Nothing needs your attention.",
+                    "workspaceEmpty": "No governance records yet. PD will populate this view once the pipeline runs."
+                },
+                "next": {
+                    "configureOwner": "Configure PD_OWNER_ID and PD_OWNER_CREDENTIAL_ID, then enable console token auth.",
+                    "reviewApprovals": "Review the pending decisions below.",
+                    "inspectRecovery": "Open Failed Tasks and recover the stalled work.",
+                    "inspectSources": "Inspect state.db and the principle ledger, then restart the console.",
+                    "fixConfig": "Fix the invalid keys in .pd/config.yaml.",
+                    "monitor": "Nothing to do — PD will surface the next decision here.",
+                    "none": "Nothing to do right now."
+                },
+                "ownerGuide": {
+                    "title": "Set the Owner identity",
+                    "intro": "Copy the command below and run it in the shell that launches OpenClaw and the PD Console (replace <owner-id> and <credential-id> with your own IDs), then restart both.",
+                    "tokenAuthHint": "Console token authentication (--token or PD_CONSOLE_TOKEN) is also required for the identity to take effect; if not enabled yet, complete that step per the configuration guide.",
+                    "cmdPowerShell": "PowerShell (Windows)",
+                    "cmdBash": "bash (macOS / Linux)",
+                    "copy": "Copy",
+                    "copied": "Copied",
+                    "docLink": "Configuration guide and verification →"
+                },
+                "activity": {
+                    "needsDecision": "{{count}} decision(s) waiting",
+                    "needsRecovery": "{{count}} item(s) need recovery",
+                    "blocked": "Progress is blocked by an unavailable source",
+                    "processing": "Background processing ({{count}})"
+                },
+                "readiness": {
+                    "identity": {
+                        "configured": "Owner identity: configured",
+                        "missing": "Owner identity: missing"
+                    },
+                    "principleApproval": "Principle approvals: operator entry",
+                    "rulecode": {
+                        "ready": "RuleCode decisions: Owner entry",
+                        "blocked": "RuleCode decisions: blocked (no Owner identity)"
+                    },
+                    "pause": {
+                        "owner": "Emergency pause: Owner entry",
+                        "breakGlass": "Emergency pause: break-glass entry"
+                    }
+                },
+                "trust": {
+                    "environment": {
+                        "production": "Environment: production",
+                        "development": "Environment: development",
+                        "demo": "Environment: demo",
+                        "test": "Environment: test",
+                        "unknown": "Environment: unknown"
+                    },
+                    "lineage": {
+                        "strong": "Lineage confidence: strong",
+                        "weak": "Lineage confidence: weak",
+                        "unknown": "Lineage confidence: unknown"
+                    }
+                },
+                "dataQuality": {
+                    "degraded": "Data quality degraded — e.g. {{reasonCode}} ({{count}} occurrence(s)). Some explanations may be incomplete."
+                },
+                "error": {
+                    "snapshotUnavailable": "The governance experience snapshot could not be loaded."
+                }
+            },
             "inProgressTitle": "Governance in progress",
             "inProgressDetail": "PD will surface a principle candidate here once the internalization pipeline completes and an owner-reviewable artifact is generated.",
             "degradedTitle": "System Signals",
@@ -452,6 +536,24 @@
                     "empty": "No recent records — this principle has not been triggered at runtime yet.",
                     "note": "Two levels: Effect = the principle actually changed behavior (block / auto-correction / agent self-report); Presence = the principle entered task context (gray rows). Presence in a decision ≠ changed behavior. Self-reports are probabilistic agent claims, listed separately from deterministic events.",
                     "unavailableReason": "Receipt history is unavailable right now.",
+                    "coverage": {
+                        "label": "Evidence coverage",
+                        "statusAvailable": "Available",
+                        "statusDisabled": "Receipt collection disabled",
+                        "statusUnavailable": "Receipt data unavailable",
+                        "observedSince": "Observed since {{date}}",
+                        "observedSinceEmpty": "No records retained",
+                        "asOf": "as of {{date}}",
+                        "retention": "retention {{days}} days",
+                        "limitation": "Historical completeness cannot be guaranteed — counts show currently retained evidence, not full history.",
+                        "validationPartial": "Some records could not be displayed.",
+                        "validationMalformed": "Receipt data requires recovery — counts may be unreliable.",
+                        "reasonCodes": {
+                            "receiptRowsDropped": "some rows were skipped during validation",
+                            "ledgerLevelInvalid": "records with an invalid level exist",
+                            "ledgerCountsUnreadable": "counts could not be read"
+                        }
+                    },
                     "kind": {
                         "rule_blocked": "Block",
                         "auto_correct_applied": "Auto-correct",
@@ -508,6 +610,7 @@
                     "process": "Current stage",
                     "automation": "Automation",
                     "nextAction": "Next safe action",
+                    "nextActionLabel": "Next action:",
                     "blockers": "Needs attention",
                     "uncertainty": "Evidence uncertainty",
                     "provenance": "Canonical evidence references",
@@ -636,8 +739,59 @@
             "safetyIsolation": "Safety Isolation",
             "runtimeCapability": "Runtime {{version}} · shadow evidence {{supported}}",
             "supported": "supported",
-            "unsupported": "unsupported",
-            "hardSafetyChecks": "Promotion safety checks",
+            "unsupported": "Unsupported",
+            "checks": {
+                "bounded_scope": "Bounded Tool Scope",
+                "runtime_compatibility": "Runtime Compatibility",
+                "host_liveness_composition": "Host Liveness Composition",
+                "emergency_controls": "Emergency Controls Health",
+                "runtime_shadow_evidence": "Runtime Shadow Evidence",
+                "owner_identity_configuration": "Owner Identity Configuration",
+                "activation_eligibility": "Activation Eligibility",
+                "lineage_binding": "Lineage & Artifact Binding",
+                "production_compile_load": "Production Compile & Load",
+                "golden_trace": "Golden Trace Evaluation",
+                "evidence_binding": "Evidence Binding"
+            },
+            "checkStatus": {
+                "passed": "Passed",
+                "failed": "Failed"
+            },
+            "reasonCodes": {
+                "required_check_missing": "Required safety check result missing",
+                "duplicate_check_result": "Duplicate check result recorded",
+                "runtime_shadow_evidence_unsupported": "Host runtime does not support shadow evidence collection",
+                "explicit_affected_tools_required": "Explicit affected tools must be defined",
+                "host_liveness_contract_missing_invalid_or_unsupported": "Host liveness contract is missing, invalid, or unsupported",
+                "neutral_probe_or_live_composition_failed": "Neutral probe or live composition check failed",
+                "neutral_probe_blocked": "Neutral probe was blocked by RuleCode",
+                "safety_controls_disabled": "Durable RuleCode safety controls are disabled",
+                "out_of_band_controls_unavailable": "Out-of-band emergency controls are unavailable",
+                "configured_owner_missing": "Configured Owner credential is missing or unverified",
+                "unresolved_shadow_unhealthy_evidence": "Unresolved runtime errors recorded during shadow observation",
+                "shadow_telemetry_source_unavailable": "Shadow telemetry source is missing or unreadable",
+                "artifact_digest_mismatch": "Artifact digest does not match the active version",
+                "active_shadow_activation_required": "Active shadow activation required for promotion",
+                "activation_not_unique": "Multiple active activations found",
+                "activation_artifact_mismatch": "Activation artifact does not match review subject",
+                "artifact_lineage_missing": "Artifact lineage (source task or parent artifacts) is missing",
+                "artifact_not_found": "Artifact not found in safety store",
+                "hard_check_failed": "Hard safety check failed",
+                "promotion_safety_gate_blocked": "Promotion blocked by safety gate checks",
+                "promotion_readiness_unavailable": "Promotion readiness could not be established",
+                "promotion_snapshot_stale": "Activation artifact changed during review",
+                "evidence_override_reason_required": "Evidence-insufficient promotion requires an Owner override reason",
+                "evidence_override_note_required": "Evidence-insufficient promotion requires an Owner review note",
+                "host_contract_unavailable": "Host liveness contract unavailable",
+                "promotion_commit_failed": "Failed to commit promotion to durable safety store",
+                "feature_not_enabled": "Feature is not enabled",
+                "safety_controls_unavailable": "Safety controls unavailable",
+                "owner_authentication_required": "Owner authentication required",
+                "cli_owner_note_required": "CLI promotion requires an Owner review note",
+                "confirmation_required": "Live enforcement confirmation required",
+                "promotion_request_invalid": "Promotion request parameters are invalid"
+            },
+            "hardSafetyChecks": "Promotion Safety Checks",
             "live24Hours": "Live monitoring · 24 hours",
             "live7Days": "Live monitoring · 7 days",
             "matched": "Matched",
@@ -817,6 +971,34 @@
             "enterAccessToken": "Enter access token",
             "tokenSaved": "Token saved",
             "tokenSessionOnly": "Token is stored in browser session only.",
+            "ownerIdentity": {
+                "title": "Owner identity",
+                "intro": "The Owner identity gates governance decision entry points (RuleCode promotion, emergency pause, etc.). Register to ~/.pd/owner.json (install-level, shared across workspaces). If the PD_OWNER_ID and PD_OWNER_CREDENTIAL_ID environment variables are set together, they take precedence as a pair.",
+                "loading": "Loading…",
+                "statusConfigured": "Registered",
+                "statusMissing": "Not registered",
+                "statusInvalid": "Env configuration invalid",
+                "sourceEnv": "Source: environment variables (highest priority)",
+                "sourceFile": "Source: ~/.pd/owner.json",
+                "sourceInvalid": "Source: environment variables (incomplete pair)",
+                "sourceNone": "Not registered",
+                "governanceReady": "Governance: Ready",
+                "governanceNotReady": "Governance: Not ready",
+                "governanceReasonTokenAuth": "Console token authentication is required before any Owner governance action can execute.",
+                "governanceReasonIdentity": "A complete Owner identity is required before any Owner governance action can execute.",
+                "governanceNextActionTokenAuth": "Next action: start pd-console with --token <value> or set PD_CONSOLE_TOKEN, then retry.",
+                "invalidEnvHint": "PD_OWNER_ID and PD_OWNER_CREDENTIAL_ID must be set together and both non-empty. Until the pair is completed or both variables are removed, no Owner authority is active — the file registration is NOT in effect.",
+                "ownerIdLabel": "Owner ID",
+                "credentialIdLabel": "Credential ID",
+                "register": "Register",
+                "unregister": "Unregister",
+                "registeredAt": "registered",
+                "envHint": "The identity currently comes from environment variables. To switch to file registration, remove the env vars and restart the console.",
+                "required": "Owner ID and Credential ID must not be empty.",
+                "operationFailed": "Operation failed. Please retry.",
+                "registered": "Owner identity registered.",
+                "unregistered": "Owner identity unregistered."
+            },
             "workspace": "Workspaces",
             "addWorkspace": "Add Workspace",
             "syncWorkspace": "Sync",
@@ -1060,6 +1242,16 @@
             "noHistory": "No update history available.",
             "version": "Version",
             "failed": "Failed",
+            "historyKind": {
+                "update": "Update",
+                "reinstall": "Reinstall",
+                "legacy_migration": "Legacy migration",
+                "rollback": "Rollback",
+                "refusal": "Refused",
+                "failure": "Failed",
+                "recovery": "Recovery",
+                "unknown": "Unknown operation"
+            },
             "checkError": "Check error",
             "syncPending": "Version {{pluginVersion}} is published, but the installer is syncing (you can update to the version shown above for now). Please try again later.",
             "loadError": "Unable to load update data. You can try refreshing the page.",
@@ -1377,6 +1569,10 @@
             "recoverConfirmActionDesc": "Reset the task and allow runtime execution",
             "recoverConfirmImpactLabel": "Impact",
             "recoverConfirmImpactDesc": "Existing artifacts are preserved. A new execution attempt will be created.",
+            "recoverConfirmAttempts": "Attempts used",
+            "recoverExhaustedWarning": "This task has used its entire retry budget ({{attempt}}/{{max}}). A plain recovery will be refused.",
+            "recoverConfirmForceButton": "Force recover",
+            "recoverConfirmForceImpactDesc": "Force-reset the task: clear its error and lease, raise the retry budget by 3, and create a new execution attempt. Existing artifacts are preserved.",
             "recoverConfirmButton": "Recover",
             "recoverSuccess": "Recovery accepted — the task is pending again",
             "recoverFailed": "Recovery failed",