create-principles-disciple 1.121.8 → 1.121.10

package/console/dist/server/utils/update-links.d.ts

@@ -0,0 +1,38 @@
+export type FileDepLinkSpec = {
+    linkPath: string;
+    /** Deployed layout dir the link points at; may be created by the copy
+     *  steps that run after derivation (see stagedTargetExists). */
+    target: string;
+    /** The staged sibling dir proving this component ships in this release. */
+    stagedTarget: string;
+};
+export type StagedComponent = {
+    /** Freshly extracted component dir under the update temp dir. */
+    manifestDir: string;
+    /** Deployed layout dir this component is (or will be) installed into. */
+    deployedDir: string;
+};
+/**
+ * Derive the node_modules link specs implied by each staged component's
+ * declared `file:` dependencies.
+ *
+ * - `readDependencies(manifestDir)` returns the component's dependency map
+ *   (name -> version-or-ref); return {} for unreadable/missing manifests.
+ * - A `file:` ref is resolved against its staged manifest dir to find the
+ *   staged sibling target; the deployed link target is taken from the same
+ *   staged->deployed pairing the caller provides — component identity is
+ *   the staged directory itself (normalized absolute path), NOT the
+ *   deployed directory's basename. In the legacy layout the deployed
+ *   plugin dir is named `principles-disciple` while the staged one is
+ *   `plugin`, so a basename lookup would silently drop the derived link
+ *   (review P1, PR #1457).
+ * - Deps whose staged target is not one of the layout components (e.g.
+ *   @principles/codex-adapter — a separate host install, not part of this
+ *   layout) are skipped.
+ *
+ * Note: `target` (the deployed dir) may not exist yet at derivation time —
+ * for components whose copy step runs after this call, the caller creates
+ * the directory right after deriving and creating these links. Use
+ * `stagedTarget` to verify the component actually ships in this release.
+ */
+export declare function collectFileDepLinkSpecs(stagedComponents: readonly StagedComponent[], readDependencies: (manifestDir: string) => Record<string, string>): FileDepLinkSpec[];

package/console/dist/server/utils/update-links.js

@@ -0,0 +1,71 @@
+/**
+ * Data-driven resolution-link derivation for the full-update pipeline.
+ *
+ * The deployed console performs full updates with the update logic baked
+ * into its own dist — one generation behind the components it installs. A
+ * hardcoded link list therefore goes stale the moment a release introduces
+ * a new internal `file:` dependency (observed 2026-08-29: the 1.221.2
+ * console could not know about the newly introduced install-layout
+ * component, so the 1.222.5 update left
+ * host-runtime/node_modules/@principles/install-layout missing and every
+ * pd-cli runtime command failed with ERR_MODULE_NOT_FOUND).
+ *
+ * The authoritative source for "which links does the UPDATED tree need" is
+ * the STAGED manifests under the update's temp dir (the freshly extracted
+ * release trees) — NOT the deployed pre-update manifests, which by
+ * definition do not declare newly added dependencies.
+ *
+ * Each staged component's `file:` refs resolve to a sibling staged
+ * component directory; the deployed link target is that sibling's entry in
+ * the same staged->deployed pairing.
+ */
+import * as path from 'node:path';
+/**
+ * Derive the node_modules link specs implied by each staged component's
+ * declared `file:` dependencies.
+ *
+ * - `readDependencies(manifestDir)` returns the component's dependency map
+ *   (name -> version-or-ref); return {} for unreadable/missing manifests.
+ * - A `file:` ref is resolved against its staged manifest dir to find the
+ *   staged sibling target; the deployed link target is taken from the same
+ *   staged->deployed pairing the caller provides — component identity is
+ *   the staged directory itself (normalized absolute path), NOT the
+ *   deployed directory's basename. In the legacy layout the deployed
+ *   plugin dir is named `principles-disciple` while the staged one is
+ *   `plugin`, so a basename lookup would silently drop the derived link
+ *   (review P1, PR #1457).
+ * - Deps whose staged target is not one of the layout components (e.g.
+ *   @principles/codex-adapter — a separate host install, not part of this
+ *   layout) are skipped.
+ *
+ * Note: `target` (the deployed dir) may not exist yet at derivation time —
+ * for components whose copy step runs after this call, the caller creates
+ * the directory right after deriving and creating these links. Use
+ * `stagedTarget` to verify the component actually ships in this release.
+ */
+export function collectFileDepLinkSpecs(stagedComponents, readDependencies) {
+    const deployedDirByStagedDir = new Map();
+    for (const component of stagedComponents) {
+        deployedDirByStagedDir.set(path.resolve(component.manifestDir), component.deployedDir);
+    }
+    const specs = [];
+    const seen = new Set();
+    for (const component of stagedComponents) {
+        for (const [name, ref] of Object.entries(readDependencies(component.manifestDir))) {
+            if (typeof ref !== 'string' || !ref.startsWith('file:'))
+                continue;
+            const stagedTarget = path.resolve(component.manifestDir, ref.slice('file:'.length));
+            const deployedTarget = deployedDirByStagedDir.get(stagedTarget);
+            if (deployedTarget === undefined)
+                continue;
+            // The link lives in the DEPLOYED component dir (what the updated dist
+            // resolves against) — never inside the throwaway temp dir.
+            const linkPath = path.join(component.deployedDir, 'node_modules', name);
+            if (seen.has(linkPath))
+                continue;
+            seen.add(linkPath);
+            specs.push({ linkPath, target: deployedTarget, stagedTarget });
+        }
+    }
+    return specs;
+}

package/console/dist/shared/feedback-channel-ids.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Feedback channel identity constants — PRI-613.
+ *
+ * Kept in a dependency-free module so the browser bundle can import the
+ * runtime const WITHOUT pulling @sinclair/typebox in (the schema module
+ * imports typebox; importing it at runtime from UI code would add ~850KB to
+ * the browser bundle — measured, SPEC §10.5 stop condition). The schema
+ * module derives its literal union from this const; the UI derives its
+ * runtime channel-ID check from the same const. One authority, two safe
+ * import contexts.
+ */
+export declare const FEEDBACK_CHANNEL_IDS: readonly ['ingest', 'github', 'email', 'file'];
+export type FeedbackChannelId = (typeof FEEDBACK_CHANNEL_IDS)[number];

package/console/dist/shared/feedback-channel-ids.js

@@ -0,0 +1,12 @@
+/**
+ * Feedback channel identity constants — PRI-613.
+ *
+ * Kept in a dependency-free module so the browser bundle can import the
+ * runtime const WITHOUT pulling @sinclair/typebox in (the schema module
+ * imports typebox; importing it at runtime from UI code would add ~850KB to
+ * the browser bundle — measured, SPEC §10.5 stop condition). The schema
+ * module derives its literal union from this const; the UI derives its
+ * runtime channel-ID check from the same const. One authority, two safe
+ * import contexts.
+ */
+export const FEEDBACK_CHANNEL_IDS = ['ingest', 'github', 'email', 'file'];

package/console/dist/shared/feedback-contract.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Feedback submit-ladder shared contract — PRI-613 Schema→Type→Validator pilot.
+ *
+ * Canonical authority for the wire shapes shared by server and UI. The
+ * TypeBox schemas here are the single source: the server's ChannelStatus
+ * derives from them (type-only import), and the UI's validator data shapes
+ * derive via `import type` — the browser bundle must NOT import this module
+ * at runtime (it would bundle @sinclair/typebox, ~850KB; see
+ * feedback-channel-ids.ts for the runtime-safe const).
+ *
+ * UI validators (ui/utils/validators.ts) are a machine-enforced mirror:
+ * tests/integration/feedback-contract.test.ts asserts schema-vs-validator
+ * equivalence on an accept/reject matrix, so drift is CI-detectable without
+ * shipping typebox to the browser.
+ *
+ * Single direction: Schema → Static type. Do NOT add a parallel interface
+ * next to these schemas.
+ */
+import { type Static } from '@sinclair/typebox';
+export declare const FeedbackChannelStatusSchema: import("@sinclair/typebox").TObject<{
+    id: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"email" | "file" | "github" | "ingest">[]>;
+    available: import("@sinclair/typebox").TBoolean;
+    reason: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+    nextAction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+}>;
+export type FeedbackChannelStatus = Static<typeof FeedbackChannelStatusSchema>;
+export declare const FeedbackChannelsDataSchema: import("@sinclair/typebox").TObject<{
+    channels: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"email" | "file" | "github" | "ingest">[]>;
+        available: import("@sinclair/typebox").TBoolean;
+        reason: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+        nextAction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+    }>>;
+}>;
+export type FeedbackChannelsData = Static<typeof FeedbackChannelsDataSchema>;
+export declare const FeedbackSubmitResultSchema: import("@sinclair/typebox").TObject<{
+    ok: import("@sinclair/typebox").TBoolean;
+    alreadySubmitted: import("@sinclair/typebox").TBoolean;
+    status: import("@sinclair/typebox").TString;
+    submittedVia: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+    trackingId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+    externalUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+    writeBackFailed: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    nextAction: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>>;
+}>;
+export type FeedbackSubmitResult = Static<typeof FeedbackSubmitResultSchema>;

package/console/dist/shared/feedback-contract.js

@@ -0,0 +1,45 @@
+/**
+ * Feedback submit-ladder shared contract — PRI-613 Schema→Type→Validator pilot.
+ *
+ * Canonical authority for the wire shapes shared by server and UI. The
+ * TypeBox schemas here are the single source: the server's ChannelStatus
+ * derives from them (type-only import), and the UI's validator data shapes
+ * derive via `import type` — the browser bundle must NOT import this module
+ * at runtime (it would bundle @sinclair/typebox, ~850KB; see
+ * feedback-channel-ids.ts for the runtime-safe const).
+ *
+ * UI validators (ui/utils/validators.ts) are a machine-enforced mirror:
+ * tests/integration/feedback-contract.test.ts asserts schema-vs-validator
+ * equivalence on an accept/reject matrix, so drift is CI-detectable without
+ * shipping typebox to the browser.
+ *
+ * Single direction: Schema → Static type. Do NOT add a parallel interface
+ * next to these schemas.
+ */
+import { Type } from '@sinclair/typebox';
+import { FEEDBACK_CHANNEL_IDS } from './feedback-channel-ids.js';
+/**
+ * Optional explanation fields are `string | null` on the wire: absent means
+ * "no reason to show"; explicit null is accepted and normalized to absent by
+ * the UI validator (legacy readNullableString semantics).
+ */
+const optionalNullableString = Type.Optional(Type.Union([Type.String(), Type.Null()]));
+export const FeedbackChannelStatusSchema = Type.Object({
+    id: Type.Union(FEEDBACK_CHANNEL_IDS.map((id) => Type.Literal(id))),
+    available: Type.Boolean(),
+    reason: optionalNullableString,
+    nextAction: optionalNullableString,
+});
+export const FeedbackChannelsDataSchema = Type.Object({
+    channels: Type.Array(FeedbackChannelStatusSchema),
+});
+export const FeedbackSubmitResultSchema = Type.Object({
+    ok: Type.Boolean(),
+    alreadySubmitted: Type.Boolean(),
+    status: Type.String(),
+    submittedVia: optionalNullableString,
+    trackingId: optionalNullableString,
+    externalUrl: optionalNullableString,
+    writeBackFailed: Type.Optional(Type.Boolean()),
+    nextAction: optionalNullableString,
+});

package/console/dist/ui/App.js

@@ -130,7 +130,7 @@ function AuthRoutes() {
     }, []);
     return (_jsxs(Routes, { children: [_jsx(Route, { path: "/splash", element: _jsx(SplashScreen, { onComplete: () => {
                         setShowSplash(false);
-                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, { featureFlags: featureFlags ?? undefined }), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/welcome", element: _jsx(WelcomePage, { workspaceId: currentWorkspaceId }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, {}) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/control-center/signal-keywords", element: _jsx(SignalKeywordsPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/failed-tasks", element: _jsx(FailedTasksPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
+                    } }) }), _jsx(Route, { path: "/login", element: _jsx(LoginForm, { onAuthSuccess: handleAuthSuccess }) }), _jsx(Route, { path: "/*", element: authed === null ? (_jsx("div", { className: "min-h-screen bg-paper flex items-center justify-center", children: _jsxs("div", { className: "flex flex-col items-center gap-4", children: [_jsx("div", { className: "w-8 h-8 border-2 border-gov border-t-transparent rounded-full animate-spin" }), _jsx("span", { className: "text-[12px] font-mono tracking-wider text-ink-3 uppercase", children: "Verifying Session..." })] }) })) : authed ? (_jsx(NotificationProvider, { children: _jsxs("div", { className: "min-h-screen bg-paper text-ink", children: [_jsx("a", { href: "#main-content", className: "sr-only focus:not-sr-only focus:absolute focus:z-50 focus:p-4 focus:bg-paper focus:text-ink", children: "Skip to main content" }), _jsx(AppSidebar, { featureFlags: featureFlags ?? undefined }), _jsx("main", { id: "main-content", className: "ml-[256px] min-h-screen overflow-y-auto", children: _jsx(ErrorBoundary, { children: _jsxs(Routes, { children: [_jsx(Route, { path: "/", element: _jsx(Navigate, { to: "/focus", replace: true }) }), _jsx(Route, { path: "/welcome", element: _jsx(WelcomePage, { workspaceId: currentWorkspaceId }) }), _jsx(Route, { path: "/focus", element: _jsx(FocusPage, { featureFlags: featureFlags ?? undefined }) }), _jsx(Route, { path: "/pain", element: _jsx(PainPage, {}) }), _jsx(Route, { path: "/principles", element: _jsx(PrinciplesPage, {}) }), _jsx(Route, { path: "/principles/:id", element: _jsx(PrincipleDetailPage, {}) }), _jsx(Route, { path: "/activation", element: _jsx(ActivationPage, {}) }), _jsx(Route, { path: "/debt", element: _jsx(DebtPage, {}) }), _jsx(Route, { path: "/control-center", element: _jsx(ControlCenterPage, {}) }), _jsx(Route, { path: "/control-center/signal-keywords", element: _jsx(SignalKeywordsPage, {}) }), _jsx(Route, { path: "/settings", element: _jsx(SettingsPage, {}) }), _jsx(Route, { path: "/update", element: _jsx(UpdatePage, {}) }), _jsx(Route, { path: "/report-problem", element: _jsx(ReportProblemPage, {}) }), _jsx(Route, { path: "/failed-tasks", element: _jsx(FailedTasksPage, {}) }), _jsx(Route, { path: "/intent", element: _jsx(IntentPage, {}) }), IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(DesignSystemPage, {}) })), !IS_DEV && (_jsx(Route, { path: "/design-system", element: _jsx(Navigate, { to: "/focus", replace: true }) }))] }) }) })] }) })) : (_jsx(Navigate, { to: "/login", replace: true })) })] }));
 }
 export function App() {
     return (_jsx(ThemeProvider, { children: _jsxs(I18nextProvider, { i18n: i18n, children: [_jsx(HashRouter, { children: _jsx(AuthRoutes, {}) }), _jsx(Toaster, {})] }) }));

package/console/dist/ui/api.d.ts

@@ -1,6 +1,7 @@
 import type { ApiResponse } from "../types.js";
 import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm } from "./utils/signal-keywords-api.js";
-import type { OwnerGovernanceView } from '@principles/core/runtime-v2';
+import type { GovernanceExperienceSnapshot, OwnerGovernanceView } from '@principles/core/runtime-v2';
+import type { OwnerIdentityViewData, OwnerIdentityRegisterData, OwnerIdentityUnregisterData } from "./utils/validators.js";
 import type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, FeedbackChannelsData, FeedbackSubmitResultData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, RecoveryResultData, ActivationsData, DisableActivationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, TrajectoryData, IntentSummaryData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, IntentInitResultData, IntentSaveResultData, IntentRawContentData, IntentVersionData, RuleCodeOwnerReviewData, RuleCodeMutationData } from "./utils/validators.js";
 declare function getToken(): string | null;
 declare function setToken(token: string): void;
@@ -48,6 +49,7 @@ export interface PrincipleReceiptsData {
     presenceCount: number;
     lastEffectAt: string | null;
     events: ReceiptEventData[];
+    coverage: ReceiptEvidenceCoverageData;
 }
 export interface ReceiptCountEntryData {
     principleId: string;
@@ -60,6 +62,18 @@ export interface ReceiptCountsData {
     reason?: string;
     nextAction?: string;
     counts: ReceiptCountEntryData[];
+    coverage: ReceiptEvidenceCoverageData;
+}
+export type ReceiptSourceStatusData = "available" | "disabled" | "unavailable";
+export type ReceiptValidationStatusData = "valid" | "partial" | "malformed";
+export interface ReceiptEvidenceCoverageData {
+    sourceStatus: ReceiptSourceStatusData;
+    validationStatus: ReceiptValidationStatusData;
+    observedFrom: string | null;
+    asOf: string;
+    retentionPolicyDays: number;
+    reasonCode?: string;
+    nextActionCode?: string;
 }
 declare function fetchPrincipleReceipts(principleId: string): Promise<ApiResponse<PrincipleReceiptsData>>;
 declare function fetchReceiptCounts(): Promise<ApiResponse<ReceiptCountsData>>;
@@ -84,6 +98,9 @@ declare function fetchConfigSummary(): Promise<ApiResponse<ConfigSummaryData>>;
 declare function fetchConfigCatalog(): Promise<ApiResponse<ConfigCatalogData>>;
 declare function updateAgentBinding(agentName: string, runtimeProfile: string, enabled: boolean): Promise<ApiResponse<AgentBindingUpdateData>>;
 declare function updateDefaultRuntime(defaultRuntime: string): Promise<ApiResponse<DefaultRuntimeUpdateData>>;
+export declare function fetchOwnerIdentity(): Promise<ApiResponse<OwnerIdentityViewData>>;
+export declare function registerOwnerIdentity(ownerId: string, credentialId: string): Promise<ApiResponse<OwnerIdentityRegisterData>>;
+export declare function unregisterOwnerIdentity(): Promise<ApiResponse<OwnerIdentityUnregisterData>>;
 /**
  * Create a new runtime profile.
  *
@@ -129,7 +146,8 @@ declare function patchFeatureFlag(featureName: string, enabled: boolean): Promis
 declare function fetchOutputLanguage(): Promise<ApiResponse<OutputLanguageData>>;
 declare function updateOutputLanguage(outputLanguage: string): Promise<ApiResponse<OutputLanguageData>>;
 declare function fetchGovernanceQueue(): Promise<ApiResponse<GovernanceQueueData>>;
-declare function recoverFailedTask(taskId: string, reason?: string): Promise<ApiResponse<RecoveryResultData>>;
+declare function fetchGovernanceExperience(): Promise<ApiResponse<GovernanceExperienceSnapshot>>;
+declare function recoverFailedTask(taskId: string, reason?: string, force?: boolean): Promise<ApiResponse<RecoveryResultData>>;
 declare function fetchApprovalsGrouped(): Promise<ApiResponse<ApprovalsGroupedData>>;
 declare function fetchAllActivations(): Promise<ApiResponse<ActivationsData>>;
 declare function disableActivation(activationId: string): Promise<ApiResponse<DisableActivationData>>;
@@ -196,7 +214,7 @@ export interface FollowUpPayload {
     candidateId?: string;
 }
 declare function dispatchFollowUp(decisionId: string, payload: FollowUpPayload): Promise<ApiResponse<FollowUpResponseData>>;
-export { request, listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+export { request, listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchGovernanceExperience, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
 export type { FeedbackReportData, FeedbackDraftSummaryData, FeedbackDraftEnvelopeData, FeedbackChannelsData, FeedbackSubmitResultData, DeleteEnvelopeData, WorkspaceEntryData, RemovedEnvelopeData, SyncResultData, ConfigSummaryData, ConfigCatalogData, AgentBindingUpdateData, DefaultRuntimeUpdateData, RuntimeProfileMutationData, ReadinessCheckData, FeatureFlagUpdateData, OutputLanguageData, GovernanceQueueData, RecoveryResultData, ActivationsData, DisableActivationData, RuleCodeOwnerReviewData, RuleCodeMutationData, LifecycleMetricsData, UpdateStatusData, UpdateHistoryData, ApplyUpdateResultData, RollbackResultData, ApprovalRecordData, PrinciplesListData, ApprovalsGroupedData, EvidenceChainData, EvidenceChainRecordData, EvidenceChainStateData, TrajectoryData, TrajectoryStageData, IntentSummaryData, IntentSectionsData, IntentDocWarningData, IntentDecisionRecordData, IntentDecisionResultData, IntentDecisionSummaryData, FollowUpResponseData, LinkCandidateFollowUpData, GuideRulehostFollowUpData, GeneratePatchProposalFollowUpData, IntentVersionEntry, IntentVersionData, } from "./utils/validators.js";
 export type { SignalKeyword, PendingSignalTerm } from "./utils/signal-keywords-types.js";
 export type { ActivationRecordData as ActivationRecord } from "./utils/validators.js";
@@ -213,6 +231,7 @@ export type { RedactedFeatureSummaryData as RedactedFeatureSummary } from "./uti
 export type { RedactedAgentSummaryData as RedactedAgentSummary } from "./utils/validators.js";
 export type { UpdateHistoryEntryData as UpdateHistoryEntry } from "./utils/validators.js";
 export type { ReadinessStatus } from "./utils/validators.js";
+export type { OwnerIdentityViewData, OwnerIdentityRegisterData, OwnerIdentityUnregisterData } from "./utils/validators.js";
 export type { ConfigSource } from "./utils/validators.js";
 export interface PrincipleDetail {
     id: string;

package/console/dist/ui/api.js

@@ -1,5 +1,5 @@
 import { listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendingTerms, updateKeywordStore, admitPendingTerm, rejectPendingTerm, } from "./utils/signal-keywords-api.js";
-import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateRuleCodeOwnerReview, validateRuleCodeMutation, } from "./utils/validators.js";
+import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateRollbackResult, validateApprovalRecordDirect, validatePrinciplesList, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateGovernanceExperienceSnapshot, validateRuleCodeOwnerReview, validateRuleCodeMutation, validateOwnerIdentityView, validateOwnerIdentityRegister, validateOwnerIdentityUnregister, } from "./utils/validators.js";
 // ── Auth ──────────────────────────────────────────────────────────────────────
 function getToken() {
     return sessionStorage.getItem("pd_token");
@@ -136,6 +136,32 @@ async function unarchivePrinciple(principleId) {
 async function fetchPrincipleTrajectory(principleId) {
     return request(`/api/principles/${encodeURIComponent(principleId)}/trajectory`, undefined, validateTrajectoryData);
 }
+const RECEIPT_SOURCE_STATUSES = new Set(["available", "disabled", "unavailable"]);
+const RECEIPT_VALIDATION_STATUSES = new Set(["valid", "partial", "malformed"]);
+function validateReceiptCoverage(value) {
+    if (typeof value !== "object" || value === null)
+        return null;
+    const rec = value;
+    if (typeof rec.sourceStatus !== "string" || !RECEIPT_SOURCE_STATUSES.has(rec.sourceStatus))
+        return null;
+    if (typeof rec.validationStatus !== "string" || !RECEIPT_VALIDATION_STATUSES.has(rec.validationStatus))
+        return null;
+    if (rec.observedFrom !== null && typeof rec.observedFrom !== "string")
+        return null;
+    if (typeof rec.asOf !== "string")
+        return null;
+    if (typeof rec.retentionPolicyDays !== "number")
+        return null;
+    return {
+        sourceStatus: rec.sourceStatus,
+        validationStatus: rec.validationStatus,
+        observedFrom: rec.observedFrom,
+        asOf: rec.asOf,
+        retentionPolicyDays: rec.retentionPolicyDays,
+        ...(typeof rec.reasonCode === "string" ? { reasonCode: rec.reasonCode } : {}),
+        ...(typeof rec.nextActionCode === "string" ? { nextActionCode: rec.nextActionCode } : {}),
+    };
+}
 const RECEIPT_KINDS = new Set(["rule_blocked", "auto_correct_applied", "self_reported", "prompt_injected"]);
 function validateReceiptEvent(value) {
     if (typeof value !== "object" || value === null)
@@ -164,6 +190,11 @@ function validatePrincipleReceipts(data) {
     const rec = data;
     if (typeof rec.principleId !== "string")
         return null;
+    // PRI-590: coverage is a required field of the receipt contract — a missing
+    // or malformed block means server/client contract skew; reject loudly.
+    const coverage = validateReceiptCoverage(rec.coverage);
+    if (coverage === null)
+        return null;
     const events = [];
     if (Array.isArray(rec.events)) {
         for (const item of rec.events) {
@@ -181,12 +212,16 @@ function validatePrincipleReceipts(data) {
         presenceCount: typeof rec.presenceCount === "number" ? rec.presenceCount : 0,
         lastEffectAt: typeof rec.lastEffectAt === "string" ? rec.lastEffectAt : null,
         events,
+        coverage,
     };
 }
 function validateReceiptCounts(data) {
     if (typeof data !== "object" || data === null)
         return null;
     const rec = data;
+    const coverage = validateReceiptCoverage(rec.coverage);
+    if (coverage === null)
+        return null;
     const counts = [];
     if (Array.isArray(rec.counts)) {
         for (const item of rec.counts) {
@@ -208,6 +243,7 @@ function validateReceiptCounts(data) {
         reason: typeof rec.reason === "string" ? rec.reason : undefined,
         nextAction: typeof rec.nextAction === "string" ? rec.nextAction : undefined,
         counts,
+        coverage,
     };
 }
 async function fetchPrincipleReceipts(principleId) {
@@ -305,6 +341,19 @@ async function updateDefaultRuntime(defaultRuntime) {
         body: JSON.stringify({ defaultRuntime }),
     }, validateDefaultRuntimeUpdate);
 }
+// ── Owner identity (ADR-0022 / PRI-578) ──────────────────────────────────────
+export async function fetchOwnerIdentity() {
+    return request('/api/v1/owner-identity', undefined, validateOwnerIdentityView);
+}
+export async function registerOwnerIdentity(ownerId, credentialId) {
+    return request('/api/v1/owner-identity', {
+        method: 'POST',
+        body: JSON.stringify({ ownerId, credentialId }),
+    }, validateOwnerIdentityRegister);
+}
+export async function unregisterOwnerIdentity() {
+    return request('/api/v1/owner-identity', { method: 'DELETE' }, validateOwnerIdentityUnregister);
+}
 // ── Runtime Profile CRUD (POST/PATCH/DELETE /api/v1/config/profiles) ──────────
 /**
  * Create a new runtime profile.
@@ -382,13 +431,24 @@ async function updateOutputLanguage(outputLanguage) {
 async function fetchGovernanceQueue() {
     return request('/api/v1/governance/queue', undefined, validateGovernanceQueue);
 }
+// PRI-586: read-only governance experience snapshot. Only called when the
+// governance_experience_v1 flag is enabled — flag-off the endpoint 403s and
+// the Console keeps the legacy Focus experience (ERR-102: disabled ≠ unavailable).
+async function fetchGovernanceExperience() {
+    return request('/api/v1/governance/experience', undefined, validateGovernanceExperienceSnapshot);
+}
 // Governance Recovery Actions v1: Owner-triggered recovery of a failed /
 // needs_human_review internalization task (failed→pending | needs_human_review→pending).
-async function recoverFailedTask(taskId, reason) {
+// force=true recovers a task whose attempt budget is exhausted (core raises
+// its maxAttempts); it only affects the failed path.
+async function recoverFailedTask(taskId, reason, force) {
     const body = {};
     if (reason !== undefined && reason.length > 0) {
         body.reason = reason;
     }
+    if (force === true) {
+        body.force = true;
+    }
     return request('/api/v1/failed-tasks/' + encodeURIComponent(taskId) + '/recover', {
         method: 'POST',
         body: JSON.stringify(body),
@@ -510,4 +570,4 @@ listActiveSignalKeywords, listPendingSignalTerms, fetchKeywordStore, fetchPendin
 // auth
 getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, 
 // Feedback submit ladder (Slice 3, spec §8)
-fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };
+fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchGovernanceExperience, recoverFailedTask, fetchApprovalsGrouped, fetchAllActivations, disableActivation, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyUpdate, applyFullUpdate, rollbackUpdate, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, };

package/console/dist/ui/components/receipts/ReceiptCoverageDisclosure.d.ts

@@ -0,0 +1,6 @@
+import type { ReceiptEvidenceCoverageData, ReceiptSourceStatusData } from "../../api.js";
+/** Localized label key for a source status — shared by the degraded notes. */
+export declare function getReceiptSourceStatusLabelKey(status: ReceiptSourceStatusData): string;
+export declare function ReceiptCoverageDisclosure({ coverage }: {
+    coverage: ReceiptEvidenceCoverageData;
+}): import("react").JSX.Element;

package/console/dist/ui/components/receipts/ReceiptCoverageDisclosure.js

@@ -0,0 +1,66 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Receipt evidence coverage disclosure — PRI-590.
+ *
+ * Shared block that explains what receipt numbers MEAN: source status,
+ * observed range, retention policy, and the "observed evidence, not full
+ * history" limitation. Used by the PrincipleDetail receipt section and the
+ * Activation page counts context.
+ *
+ * Never displays file paths, digests, raw payloads, or tool arguments.
+ *
+ * Keys use full paths ("pages.principles.…") because this component binds
+ * useTranslation() to the default `common` namespace, which carries the
+ * whole locale tree — usable from pages that pick other namespaces.
+ */
+import { useTranslation } from "react-i18next";
+import { formatDate } from "../../utils/format-date.js";
+// ERR-106: exhaustive Records over the status unions — a binary ternary would
+// fold one member into a default and misrepresent its state.
+const SOURCE_STATUS_LABEL_KEYS = {
+    available: "pages.principles.detail.receipts.coverage.statusAvailable",
+    disabled: "pages.principles.detail.receipts.coverage.statusDisabled",
+    unavailable: "pages.principles.detail.receipts.coverage.statusUnavailable",
+};
+const SOURCE_STATUS_PILL_CLASS = {
+    available: "border-green/35 text-green bg-green/5",
+    disabled: "border-amber/35 text-amber bg-amber/5",
+    unavailable: "border-line text-ink-4 bg-surface/80",
+};
+const VALIDATION_NOTE_KEYS = {
+    valid: null,
+    partial: "pages.principles.detail.receipts.coverage.validationPartial",
+    malformed: "pages.principles.detail.receipts.coverage.validationMalformed",
+};
+/**
+ * reasonCode → localized phrase. Owner-facing copy must not leak snake_case
+ * technical codes (review round 2). A Map (not a plain object) because the
+ * lookup key comes from the API payload — no prototype-chain exposure
+ * (EP-01/ERR-013). Unknown codes fall back to the raw code — fail-visible
+ * rather than blank, so the debug clue survives.
+ */
+const REASON_CODE_LABEL_KEYS = new Map([
+    ["receipt_rows_dropped", "pages.principles.detail.receipts.coverage.reasonCodes.receiptRowsDropped"],
+    ["ledger_level_invalid", "pages.principles.detail.receipts.coverage.reasonCodes.ledgerLevelInvalid"],
+    ["ledger_counts_unreadable", "pages.principles.detail.receipts.coverage.reasonCodes.ledgerCountsUnreadable"],
+]);
+/** Localized label key for a source status — shared by the degraded notes. */
+export function getReceiptSourceStatusLabelKey(status) {
+    return SOURCE_STATUS_LABEL_KEYS[status];
+}
+export function ReceiptCoverageDisclosure({ coverage }) {
+    const { t, i18n } = useTranslation();
+    const validationNoteKey = VALIDATION_NOTE_KEYS[coverage.validationStatus];
+    // Known codes render as a localized phrase; unknown codes fall back to the
+    // raw code in parentheses (fail-visible debug clue, never a blank verdict).
+    let reasonSuffix = null;
+    if (coverage.reasonCode !== undefined) {
+        const labelKey = REASON_CODE_LABEL_KEYS.get(coverage.reasonCode);
+        reasonSuffix = labelKey !== undefined ? ` — ${t(labelKey)}` : ` (${coverage.reasonCode})`;
+    }
+    return (_jsxs("div", { "data-testid": "receipt-coverage", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx("span", { className: "font-mono text-[11px] uppercase tracking-[0.08em] text-ink-4", children: t("pages.principles.detail.receipts.coverage.label") }), _jsx("span", { className: `inline-flex items-center border rounded-[2px] px-[7px] py-0.5 font-mono text-[11px] uppercase ${SOURCE_STATUS_PILL_CLASS[coverage.sourceStatus]}`, children: t(SOURCE_STATUS_LABEL_KEYS[coverage.sourceStatus]) })] }), _jsxs("p", { className: "mt-1.5 text-[11px] leading-relaxed text-ink-4", children: [coverage.observedFrom !== null
+                        ? t("pages.principles.detail.receipts.coverage.observedSince", {
+                            date: formatDate(coverage.observedFrom, i18n.language),
+                        })
+                        : t("pages.principles.detail.receipts.coverage.observedSinceEmpty"), " · ", t("pages.principles.detail.receipts.coverage.asOf", { date: formatDate(coverage.asOf, i18n.language) }), " · ", t("pages.principles.detail.receipts.coverage.retention", { days: coverage.retentionPolicyDays })] }), _jsx("p", { className: "mt-1 text-[11px] leading-relaxed text-ink-4", children: t("pages.principles.detail.receipts.coverage.limitation") }), validationNoteKey !== null && (_jsxs("p", { "data-testid": "receipt-coverage-validation", className: "mt-1 text-[11px] leading-relaxed text-amber", children: [t(validationNoteKey), reasonSuffix] }))] }));
+}