create-principles-disciple 1.146.4 → 1.146.6

package/console/dist/ui/api.js

@@ -1,1094 +0,0 @@
-import { validateApprovalReview } from './utils/approval-review.js';
-import { clearStoredToken, loadStoredToken, storeToken } from "./utils/token-storage.js";
-import { validateApprovedRuleRevisionPreview, validateApprovedRuleRevisionResult } from '../shared/approved-rule-revision-contract.js';
-import { validateBindingReview, validateBindingQueue, validateBindingMutation, validateBindingRevise } from './utils/rule-binding-validators.js';
-import { validateErrorResponse, validateHeaders, validateFeedbackReport, validateFeedbackDraftsList, validateFeedbackDraftEnvelope, validateFeedbackChannels, validateFeedbackSubmitResult, validateDeleteEnvelope, validateWorkspaceEntry, validateWorkspaceList, validateRemovedEnvelope, validateSyncResult, validateConfigSummary, validateConfigCatalog, validateAgentBindingUpdate, validateDefaultRuntimeUpdate, validateRuntimeProfileMutation, validateReadinessCheck, validateFeatureFlagUpdate, validateOutputLanguage, validateGovernanceQueue, validateRecoveryResult, validateFailedTaskDetail, validateOwnerDecisionsData, validateOwnerResolutionResult, validateActivations, validateDisableActivation, validateLifecycleMetrics, validateUpdateStatus, validateUpdateHistory, validateApplyUpdateResult, validateUpdateRecovery, validateUpdateTransaction, validateApprovalRecordDirect, validatePrinciplesList, validateCorePrinciples, validateApprovalsGrouped, validateEvidenceChain, validateTrajectoryData, validateIntentSummary, validateIntentDecisionList, validateIntentDecisionResult, validateIntentDecisionSummary, validateFollowUpResponse, validateIntentInitResult, validateIntentSaveResult, validateIntentRawContent, validateIntentVersions, validateOwnerGovernanceView, validateOwnerDecisionViewCore, validateOwnerDecisionInbox, validateOwnerDecisionLibrary, validateGovernanceExperienceSnapshot, validateRuleCodeOwnerReview, validateRuleCodeMutation, validateOwnerIdentityView, validateOwnerIdentityRegister, validateOwnerIdentityUnregister, } from "./utils/validators.js";
-// ── Auth ──────────────────────────────────────────────────────────────────────
-function getToken() {
-    // PRI-793: localStorage-backed (with one-time migration from the legacy
-    // sessionStorage copy) so the token survives browser restarts.
-    return loadStoredToken();
-}
-function setToken(token) {
-    storeToken(token);
-}
-function clearToken() {
-    clearStoredToken();
-}
-/**
- * True when an unauthorized response should route the UI to the login route.
- *
- * The only registered login route is exactly "/login" (App.tsx); a hash like
- * "#/login-help" is a different (unmatched) route and must still redirect.
- * Already on the login route → false, so a failed login attempt cannot
- * redirect-loop. The redirect target itself is the hardcoded
- * "#/login?session_expired=true" literal at the assignment site — never
- * derived from request data.
- */
-export function shouldRedirectToLoginOnUnauthorized(currentHash) {
-    return !(currentHash === "#/login" || currentHash.startsWith("#/login?"));
-}
-/**
- * Staleness guard for 401 responses (PR #1635 review race fix): a 401 may
- * arrive AFTER the login form's restore flow set a newer token while this
- * request was in flight. The stale response must neither erase the newer
- * token nor trigger the login redirect. Pure on the two token snapshots, so
- * the policy is unit-testable without a browser.
- */
-export function shouldInvalidateSessionTokenOn401(requestToken, storedTokenNow) {
-    return storedTokenNow === requestToken;
-}
-async function request(path, options, validate) {
-    const token = getToken();
-    const headers = {
-        "Content-Type": "application/json",
-    };
-    if (token) {
-        headers.Authorization = `Bearer ${token}`;
-    }
-    try {
-        const response = await fetch(path, {
-            ...options,
-            headers: {
-                ...headers,
-                ...(validateHeaders(options?.headers) ?? {}),
-            },
-        });
-        if (!response.ok) {
-            if (response.status === 401) {
-                // Any 401 invalidates the session: clear the token even when none was
-                // attached (page loaded before the server switched to token mode —
-                // PRI-643) and route to login so a token can be entered.
-                // Staleness guard (PR #1635 review): the login form's restore flow may
-                // have set a NEWER token while this request was in flight — a late 401
-                // from the earlier tokenless probe must not erase it and bounce the
-                // just-restored session back to login.
-                if (shouldInvalidateSessionTokenOn401(token, getToken())) {
-                    clearToken();
-                    // eslint-disable-next-line no-undef
-                    if (shouldRedirectToLoginOnUnauthorized(window.location.hash)) {
-                        // eslint-disable-next-line no-undef
-                        window.location.hash = "#/login?session_expired=true";
-                    }
-                }
-            }
-            let errorMessage = `HTTP ${response.status}`;
-            let nextAction;
-            let reason;
-            try {
-                const raw = await response.json();
-                const parsed = validateErrorResponse(raw);
-                if (parsed) {
-                    if (parsed.message) {
-                        errorMessage = parsed.message;
-                    }
-                    else if (parsed.error) {
-                        errorMessage = parsed.error;
-                    }
-                    if (parsed.reason) {
-                        ({ reason } = parsed);
-                    }
-                    if (parsed.nextAction) {
-                        ({ nextAction } = parsed);
-                    }
-                }
-            }
-            catch {
-                // ignore parse errors
-            }
-            return { success: false, error: errorMessage, reason, nextAction, status: response.status };
-        }
-        const raw = await response.json();
-        const apiData = (raw && typeof raw === "object" && Object.hasOwn(raw, "success") && Object.hasOwn(raw, "data"))
-            ? raw.data
-            : raw;
-        if (validate) {
-            const validated = validate(apiData);
-            if (validated !== null) {
-                return { success: true, data: validated };
-            }
-            return {
-                success: false,
-                error: "Response validation failed: unexpected data shape from server",
-                nextAction: "Try refreshing the page. If the problem persists, report it.",
-            };
-        }
-        // No validator provided — returns ApiResponse<unknown>.
-        // The caller must not assume a specific data shape.
-        return { success: true, data: apiData };
-    }
-    catch (err) {
-        return {
-            success: false,
-            error: err instanceof Error ? err.message : "Network error",
-        };
-    }
-}
-async function checkAuth() {
-    const result = await request("/api/health");
-    return result.success;
-}
-// ── Workspaces ────────────────────────────────────────────────────────────────
-export function fetchRuleBindingQueue() {
-    return request('/api/v1/governance/rule-candidate-bindings', undefined, validateBindingQueue);
-}
-export function fetchRuleBindingReview(candidateId, search = '') {
-    return request(`/api/v1/governance/rule-candidate-bindings/${encodeURIComponent(candidateId)}/review?search=${encodeURIComponent(search)}`, undefined, validateBindingReview);
-}
-export function mutateRuleBinding(candidateId, body) {
-    return request(`/api/v1/governance/rule-candidate-bindings/${encodeURIComponent(candidateId)}`, { method: 'POST', body: JSON.stringify(body) }, validateBindingMutation);
-}
-/** PRI-1048: consume the REAL backend revision capability (revise-once route);
- * eligibility was resolved server-side from the production resolver. */
-export function reviseRuleBindingOnce(candidateId, body) {
-    return request(`/api/v1/governance/rule-candidate-bindings/${encodeURIComponent(candidateId)}/revise-once`, { method: 'POST', body: JSON.stringify(body) }, validateBindingRevise);
-}
-/** PRI-1048 R6 #4: the bounded one-shot SOURCE correction (PRI-1047) — the
- * capability that applies when the binding revision budget is spent and the
- * Artificer stopped for a source-material defect. CAS inputs come from the
- * server-computed sourceCorrection preview; the server re-validates all of it. */
-export function correctRuleSource(candidateId, body) {
-    return request(`/api/v1/governance/rule-candidate-bindings/${encodeURIComponent(candidateId)}/source-correct-once`, { method: 'POST', body: JSON.stringify(body) }, validateBindingRevise);
-}
-async function fetchWorkspaces() {
-    return request("/api/workspaces", undefined, validateWorkspaceList);
-}
-async function addWorkspace(name, path) {
-    return request("/api/workspaces", {
-        method: "POST",
-        body: JSON.stringify({ name, path }),
-    }, validateWorkspaceEntry);
-}
-async function removeWorkspace(name) {
-    return request(`/api/workspaces/${encodeURIComponent(name)}`, { method: "DELETE" }, validateRemovedEnvelope);
-}
-async function syncWorkspace(name) {
-    return request(`/api/workspaces/${encodeURIComponent(name)}/sync`, { method: "POST" }, validateSyncResult);
-}
-// ── Principles ────────────────────────────────────────────────────────────────
-async function fetchPrinciples(filter) {
-    const query = filter === undefined ? '' : `?filter=${filter}`;
-    return request(`/api/principles${query}`, undefined, validatePrinciplesList);
-}
-// PRI-641: read-only PD Core Principles reference. Served from the canonical
-// registry by the server; validated here for network shape only.
-async function fetchCorePrinciples() {
-    return request("/api/principles/core", undefined, validateCorePrinciples);
-}
-// Principle detail is deeply nested; for now we accept unvalidated until a
-// dedicated validator is added (the page already handles missing fields gracefully).
-// This endpoint is marked legacy/deferred for full validation.
-async function fetchPrincipleDetail(principleId) {
-    return request(`/api/principles/${encodeURIComponent(principleId)}`);
-}
-async function fetchPrincipleGovernance(principleId) {
-    return request(`/api/v1/principles/${encodeURIComponent(principleId)}/governance`, undefined, validateOwnerGovernanceView);
-}
-// Owner Decision Experience v1 (SPEC §15): canonical Owner-facing decision
-// projection for the Detail first layer + compact Inbox. Read-only.
-async function fetchOwnerDecisionView(principleId) {
-    return request(`/api/v1/principles/${encodeURIComponent(principleId)}/owner-decision-view`, undefined, validateOwnerDecisionViewCore);
-}
-async function fetchOwnerDecisionInbox() {
-    return request('/api/v1/principles/owner-decision-inbox', undefined, validateOwnerDecisionInbox);
-}
-async function fetchOwnerDecisionLibrary() {
-    return request('/api/v1/principles/owner-decision-library', undefined, validateOwnerDecisionLibrary);
-}
-async function archivePrinciple(principleId) {
-    return request(`/api/principles/${encodeURIComponent(principleId)}/archive`, {
-        method: "POST",
-    });
-}
-async function unarchivePrinciple(principleId) {
-    return request(`/api/principles/${encodeURIComponent(principleId)}/unarchive`, {
-        method: "POST",
-    });
-}
-// ── Principle Trajectory ──────────────────────────────────────────────────────
-async function fetchPrincipleTrajectory(principleId) {
-    return request(`/api/principles/${encodeURIComponent(principleId)}/trajectory`, undefined, validateTrajectoryData);
-}
-const RECEIPT_SOURCE_STATUSES = new Set(["available", "disabled", "unavailable"]);
-const RECEIPT_VALIDATION_STATUSES = new Set(["valid", "partial", "malformed"]);
-function validateReceiptCoverage(value) {
-    if (typeof value !== "object" || value === null)
-        return null;
-    const rec = value;
-    if (typeof rec.sourceStatus !== "string" || !RECEIPT_SOURCE_STATUSES.has(rec.sourceStatus))
-        return null;
-    if (typeof rec.validationStatus !== "string" || !RECEIPT_VALIDATION_STATUSES.has(rec.validationStatus))
-        return null;
-    if (rec.observedFrom !== null && typeof rec.observedFrom !== "string")
-        return null;
-    if (typeof rec.asOf !== "string")
-        return null;
-    if (typeof rec.retentionPolicyDays !== "number")
-        return null;
-    return {
-        sourceStatus: rec.sourceStatus,
-        validationStatus: rec.validationStatus,
-        observedFrom: rec.observedFrom,
-        asOf: rec.asOf,
-        retentionPolicyDays: rec.retentionPolicyDays,
-        ...(typeof rec.reasonCode === "string" ? { reasonCode: rec.reasonCode } : {}),
-        ...(typeof rec.nextActionCode === "string" ? { nextActionCode: rec.nextActionCode } : {}),
-    };
-}
-const RECEIPT_KINDS = new Set(["rule_blocked", "auto_correct_applied", "self_reported", "prompt_injected"]);
-function validateReceiptEvent(value) {
-    if (typeof value !== "object" || value === null)
-        return null;
-    const rec = value;
-    if (typeof rec.kind !== "string" || !RECEIPT_KINDS.has(rec.kind))
-        return null;
-    if (rec.level !== "effect" && rec.level !== "presence")
-        return null;
-    if (typeof rec.createdAt !== "string")
-        return null;
-    const asStr = (v) => (typeof v === "string" && v.length > 0 ? v : null);
-    return {
-        kind: rec.kind,
-        level: rec.level,
-        sessionId: asStr(rec.sessionId),
-        toolName: asStr(rec.toolName),
-        filePath: asStr(rec.filePath),
-        digest: asStr(rec.digest),
-        createdAt: rec.createdAt,
-    };
-}
-function validatePrincipleReceipts(data) {
-    if (typeof data !== "object" || data === null)
-        return null;
-    const rec = data;
-    if (typeof rec.principleId !== "string")
-        return null;
-    // PRI-590: coverage is a required field of the receipt contract — a missing
-    // or malformed block means server/client contract skew; reject loudly.
-    const coverage = validateReceiptCoverage(rec.coverage);
-    if (coverage === null)
-        return null;
-    const events = [];
-    if (Array.isArray(rec.events)) {
-        for (const item of rec.events) {
-            const event = validateReceiptEvent(item);
-            if (event)
-                events.push(event);
-        }
-    }
-    return {
-        status: rec.status === "ok" ? "ok" : "degraded",
-        reason: typeof rec.reason === "string" ? rec.reason : undefined,
-        nextAction: typeof rec.nextAction === "string" ? rec.nextAction : undefined,
-        principleId: rec.principleId,
-        effectCount: typeof rec.effectCount === "number" ? rec.effectCount : 0,
-        presenceCount: typeof rec.presenceCount === "number" ? rec.presenceCount : 0,
-        lastEffectAt: typeof rec.lastEffectAt === "string" ? rec.lastEffectAt : null,
-        events,
-        coverage,
-    };
-}
-function validateReceiptCounts(data) {
-    if (typeof data !== "object" || data === null)
-        return null;
-    const rec = data;
-    const coverage = validateReceiptCoverage(rec.coverage);
-    if (coverage === null)
-        return null;
-    const counts = [];
-    if (Array.isArray(rec.counts)) {
-        for (const item of rec.counts) {
-            if (typeof item !== "object" || item === null)
-                continue;
-            const entry = item;
-            if (typeof entry.principleId !== "string")
-                continue;
-            counts.push({
-                principleId: entry.principleId,
-                effectCount: typeof entry.effectCount === "number" ? entry.effectCount : 0,
-                presenceCount: typeof entry.presenceCount === "number" ? entry.presenceCount : 0,
-                lastEffectAt: typeof entry.lastEffectAt === "string" ? entry.lastEffectAt : null,
-            });
-        }
-    }
-    return {
-        status: rec.status === "ok" ? "ok" : "degraded",
-        reason: typeof rec.reason === "string" ? rec.reason : undefined,
-        nextAction: typeof rec.nextAction === "string" ? rec.nextAction : undefined,
-        counts,
-        coverage,
-    };
-}
-async function fetchPrincipleReceipts(principleId) {
-    return request(`/api/v1/receipts/principles/${encodeURIComponent(principleId)}`, undefined, validatePrincipleReceipts);
-}
-async function fetchReceiptCounts() {
-    return request("/api/v1/receipts/counts", undefined, validateReceiptCounts);
-}
-const EVIDENCE_RECORD_KINDS = new Set(["delivery", "application", "behavior_episode", "effect", "outcome"]);
-function isValidEvidenceDate(value) {
-    const match = /^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2})(?:\.(\d{1,3}))?Z$/.exec(value);
-    return match !== null && Number.isFinite(Date.parse(value))
-        && new Date(Date.parse(value)).toISOString() === `${match[1]}.${(match[2] ?? '').padEnd(3, '0')}Z`;
-}
-/**
- * Human-readable one-liner per record — derived from the payload union on the
- * client WITHOUT importing the server contract (the wire format is validated
- * field-by-field here, rc-1 style).
- */
-function evidenceRecordSummary(record) {
-    const payload = typeof record.payload === "object" && record.payload !== null
-        ? record.payload
-        : null;
-    if (payload === null)
-        return null;
-    const { kind } = record;
-    if (kind === "delivery") {
-        return {
-            summary: `${String(payload.confirmation ?? "?")} / ${String(payload.outcome ?? "?")}`,
-            detail: `target: ${String(payload.targetKind ?? "?")}${typeof payload.failureReason === "string" ? ` — ${payload.failureReason}` : ""}`,
-        };
-    }
-    if (kind === "application") {
-        return {
-            summary: String(payload.proofMethod ?? "?"),
-            detail: String(payload.action ?? "?") + (typeof payload.claimText === "string" ? ` — ${payload.claimText}` : ""),
-        };
-    }
-    if (kind === "behavior_episode") {
-        return {
-            summary: String(payload.status ?? "?"),
-            detail: String(payload.actionSummary ?? "?") + (typeof payload.resultSummary === "string" ? ` → ${payload.resultSummary}` : ""),
-        };
-    }
-    if (kind === "effect") {
-        return {
-            summary: String(payload.status ?? "?"),
-            detail: String(payload.observationSummary ?? "?"),
-        };
-    }
-    return {
-        summary: String(payload.outcomeSource ?? "?"),
-        detail: String(payload.observationSummary ?? "?"),
-    };
-}
-function validateEvidenceAuditRecord(value) {
-    if (typeof value !== "object" || value === null)
-        return null;
-    const rec = value;
-    if (typeof rec.evidenceId !== "string" || rec.evidenceId.length === 0 || rec.evidenceId.length > 256)
-        return null;
-    if (typeof rec.kind !== "string" || !EVIDENCE_RECORD_KINDS.has(rec.kind))
-        return null;
-    if (typeof rec.observationKey !== "string" || rec.observationKey.length === 0 || rec.observationKey.length > 256
-        || typeof rec.recordedAt !== "string" || !isValidEvidenceDate(rec.recordedAt)
-        || (rec.occurredAt !== undefined && (typeof rec.occurredAt !== "string" || !isValidEvidenceDate(rec.occurredAt)))
-        || (rec.associationStatus !== "linked" && rec.associationStatus !== "pending_association")
-        || (rec.sourceStatus !== undefined && rec.sourceStatus !== "unknown")
-        || (rec.contentRedactedAt !== undefined && (typeof rec.contentRedactedAt !== "string" || !isValidEvidenceDate(rec.contentRedactedAt))))
-        return null;
-    const native = typeof rec.nativeRefs === "object" && rec.nativeRefs !== null ? rec.nativeRefs : null;
-    if (!native || (native.hostKind !== "openclaw" && native.hostKind !== "codex")
-        || ["sessionId", "runId", "turnId", "toolCallId", "toolName", "rolloutIdentity"].some((key) => Object.hasOwn(native, key)
-            && (typeof native[key] !== "string" || native[key].length === 0 || native[key].length > 256)))
-        return null;
-    const hasContentRef = Object.hasOwn(rec, "contentRef");
-    const contentRef = typeof rec.contentRef === "object" && rec.contentRef !== null && !Array.isArray(rec.contentRef) ? rec.contentRef : null;
-    if (hasContentRef && contentRef === null)
-        return null;
-    if (contentRef && (typeof contentRef.principleId !== "string" || contentRef.principleId.length === 0 || contentRef.principleId.length > 256
-        || (contentRef.resolution !== "resolved" && contentRef.resolution !== "revision_reference_unresolved")
-        || (contentRef.payloadDigest !== undefined && (typeof contentRef.payloadDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(contentRef.payloadDigest)))
-        || (contentRef.resolution === "resolved" && typeof contentRef.payloadDigest !== "string")
-        || (typeof rec.principleId === "string" && contentRef.principleId !== rec.principleId)
-        || ["artifactId", "version", "approvalRef"].some((key) => Object.hasOwn(contentRef, key)
-            && (typeof contentRef[key] !== "string" || contentRef[key].length === 0 || contentRef[key].length > 256))))
-        return null;
-    const hasActivationRef = Object.hasOwn(rec, "activationRef");
-    const activationRef = typeof rec.activationRef === "object" && rec.activationRef !== null && !Array.isArray(rec.activationRef) ? rec.activationRef : null;
-    if (hasActivationRef && activationRef === null)
-        return null;
-    if (activationRef && (typeof activationRef.activationId !== "string"
-        || activationRef.activationId.length === 0 || activationRef.activationId.length > 256
-        || typeof activationRef.sourceSnapshotDigest !== "string"
-        || !/^sha256:[a-f0-9]{64}$/.test(activationRef.sourceSnapshotDigest)
-        || activationRef.activationId !== rec.activationId
-        || (activationRef.activatedAt !== undefined && (typeof activationRef.activatedAt !== "string" || !isValidEvidenceDate(activationRef.activatedAt)))
-        || ["idempotencyKey", "artifactId", "channel"].some((key) => Object.hasOwn(activationRef, key)
-            && (typeof activationRef[key] !== "string" || activationRef[key].length === 0 || activationRef[key].length > 256))))
-        return null;
-    if (contentRef && activationRef && typeof contentRef.artifactId === "string" && typeof activationRef.artifactId === "string"
-        && contentRef.artifactId !== activationRef.artifactId)
-        return null;
-    if (contentRef && activationRef && typeof rec.occurredAt === "string" && typeof activationRef.activatedAt === "string"
-        && Date.parse(activationRef.activatedAt) > Date.parse(rec.occurredAt))
-        return null;
-    const summaryPair = evidenceRecordSummary(rec);
-    if (summaryPair === null)
-        return null;
-    return {
-        evidenceId: rec.evidenceId,
-        kind: rec.kind,
-        observationKey: rec.observationKey,
-        recordedAt: rec.recordedAt,
-        occurredAt: typeof rec.occurredAt === "string" ? rec.occurredAt : undefined,
-        principleId: typeof rec.principleId === "string" ? rec.principleId : undefined,
-        activationId: typeof rec.activationId === "string" ? rec.activationId : undefined,
-        episodeKey: typeof rec.episodeKey === "string" ? rec.episodeKey : undefined,
-        effectKey: typeof rec.effectKey === "string" ? rec.effectKey : undefined,
-        associationStatus: rec.associationStatus,
-        ...(rec.sourceStatus === "unknown" ? { sourceStatus: "unknown" } : {}),
-        ...(typeof rec.contentRedactedAt === "string" ? { contentRedactedAt: rec.contentRedactedAt } : {}),
-        ...(contentRef ? { contentReference: {
-                principleId: String(contentRef.principleId), resolution: contentRef.resolution,
-                ...(typeof contentRef.payloadDigest === "string" ? { payloadDigest: contentRef.payloadDigest } : {}),
-                ...(typeof contentRef.artifactId === "string" ? { artifactId: contentRef.artifactId } : {}),
-                ...(typeof contentRef.version === "string" ? { version: contentRef.version } : {}),
-                ...(typeof contentRef.approvalRef === "string" ? { approvalRef: contentRef.approvalRef } : {}),
-            } } : {}),
-        ...(activationRef ? { activationReference: {
-                activationId: String(activationRef.activationId), sourceSnapshotDigest: String(activationRef.sourceSnapshotDigest),
-                ...(typeof activationRef.activatedAt === "string" ? { activatedAt: activationRef.activatedAt } : {}),
-                ...(typeof activationRef.idempotencyKey === "string" ? { idempotencyKey: activationRef.idempotencyKey } : {}),
-                ...(typeof activationRef.artifactId === "string" ? { artifactId: activationRef.artifactId } : {}),
-                ...(typeof activationRef.channel === "string" ? { channel: activationRef.channel } : {}),
-            } } : {}),
-        nativeLineage: [`hostKind=${native.hostKind}`, ...Object.entries(native).filter(([key, entry]) => key !== "hostKind" && typeof entry === "string").map(([key, entry]) => `${key}=${String(entry)}`)].slice(0, 7),
-        summary: summaryPair.summary,
-        detail: summaryPair.detail,
-    };
-}
-function validateEvidenceAudit(data) {
-    if (typeof data !== "object" || data === null)
-        return null;
-    const rec = data;
-    const coverage = validateReceiptCoverage(rec.coverage);
-    if (coverage === null)
-        return null;
-    const pageKinds = ["delivery", "application", "behavior_episode", "effect", "outcome"];
-    const pages = {};
-    if (typeof rec.pages !== "object" || rec.pages === null)
-        return null;
-    const rawPages = rec.pages;
-    for (const kind of pageKinds) {
-        const raw = rawPages[kind];
-        if (typeof raw !== "object" || raw === null)
-            return null;
-        const page = raw;
-        if (typeof page.hasMore !== "boolean")
-            return null;
-        let nextCursor = null;
-        if (page.nextCursor !== null) {
-            if (typeof page.nextCursor !== "object" || page.nextCursor === null)
-                return null;
-            const cursor = page.nextCursor;
-            if (typeof cursor.recordedAt !== "string" || typeof cursor.evidenceId !== "string")
-                return null;
-            nextCursor = { recordedAt: cursor.recordedAt, evidenceId: cursor.evidenceId };
-        }
-        pages[kind] = { hasMore: page.hasMore, nextCursor };
-    }
-    const sections = {};
-    for (const field of ["deliveries", "applications", "episodes", "effects", "outcomes"]) {
-        const list = [];
-        if (!Array.isArray(rec[field]))
-            return null;
-        for (const item of rec[field]) {
-            const record = validateEvidenceAuditRecord(item);
-            if (!record)
-                return null;
-            list.push(record);
-        }
-        sections[field] = list;
-    }
-    const unresolved = [];
-    if (Array.isArray(rec.unresolvedReferences)) {
-        for (const item of rec.unresolvedReferences) {
-            if (typeof item !== "object" || item === null)
-                continue;
-            const entry = item;
-            if (typeof entry.evidenceId === "string" && typeof entry.missingKey === "string" && typeof entry.field === "string") {
-                unresolved.push({ evidenceId: entry.evidenceId, missingKey: entry.missingKey, field: entry.field });
-            }
-        }
-    }
-    const capabilities = [];
-    if (Array.isArray(rec.capabilityDeclarations)) {
-        for (const item of rec.capabilityDeclarations) {
-            if (typeof item !== "object" || item === null)
-                continue;
-            const cap = item;
-            if (cap.hostKind !== "openclaw" && cap.hostKind !== "codex")
-                continue;
-            if (cap.status !== "supported" && cap.status !== "unsupported" && cap.status !== "unknown")
-                continue;
-            if (typeof cap.capability !== "string" || typeof cap.adapterVersion !== "string" || typeof cap.channel !== "string")
-                continue;
-            capabilities.push({
-                hostKind: cap.hostKind,
-                capability: cap.capability,
-                status: cap.status,
-                adapterVersion: cap.adapterVersion,
-                channel: cap.channel,
-                ...(typeof cap.note === "string" ? { note: cap.note } : {}),
-            });
-        }
-    }
-    return {
-        status: rec.status === "ok" ? "ok" : "degraded",
-        reason: typeof rec.reason === "string" ? rec.reason : undefined,
-        nextAction: typeof rec.nextAction === "string" ? rec.nextAction : undefined,
-        deliveries: sections.deliveries ?? [],
-        applications: sections.applications ?? [],
-        episodes: sections.episodes ?? [],
-        effects: sections.effects ?? [],
-        outcomes: sections.outcomes ?? [],
-        pages,
-        unresolvedReferences: unresolved,
-        capabilityDeclarations: capabilities,
-        coverage,
-    };
-}
-async function fetchEvidenceAudit(selectorType, id, cursor) {
-    const query = new URLSearchParams({ type: selectorType, id });
-    if (cursor) {
-        query.set("afterKind", cursor.kind);
-        query.set("afterRecordedAt", cursor.after.recordedAt);
-        query.set("afterEvidenceId", cursor.after.evidenceId);
-    }
-    return request(`/api/v1/receipts/evidence-audit?${query.toString()}`, undefined, validateEvidenceAudit);
-}
-export function fetchApprovalReview(approvalId) {
-    return request('/api/v1/approvals/' + encodeURIComponent(approvalId), undefined, validateApprovalReview);
-}
-// ── Approvals ─────────────────────────────────────────────────────────────────
-async function approveApproval(approvalId, note, options) {
-    return request('/api/v1/approvals/' + encodeURIComponent(approvalId) + '/approve', {
-        method: 'POST',
-        body: JSON.stringify({ note, ...(options?.expectedReview === undefined ? {} : { expectedReview: options.expectedReview }), ...(options?.targetHost !== undefined ? { host: options.targetHost } : {}), ...(options?.intentReviewed !== undefined ? { intentReviewed: options.intentReviewed, reviewedArtifactId: options.reviewedArtifactId } : {}) }),
-    }, validateApprovalRecordDirect);
-}
-async function rejectApproval(approvalId, reason, expectedReview) {
-    return request('/api/v1/approvals/' + encodeURIComponent(approvalId) + '/reject', {
-        method: 'POST',
-        body: JSON.stringify({ reason, ...(expectedReview === undefined ? {} : { expectedReview }) }),
-    }, validateApprovalRecordDirect);
-}
-async function editApproval(approvalId, newArtifactId, editReason) {
-    return request('/api/v1/approvals/' + encodeURIComponent(approvalId) + '/edit', {
-        method: 'POST',
-        body: JSON.stringify({ newArtifactId, editReason: typeof editReason === 'string' ? editReason : editReason.reason, ...(typeof editReason === 'string' ? {} : { expectedReview: editReason.expectedReview }) }),
-    }, validateApprovalRecordDirect);
-}
-// ── MVP seed feedback report drafts (PRI-285) ────────────────────────────────
-async function createFeedbackReport(input, diagnostics) {
-    // Ensure diagnostics is always present in the serialized body — when
-    // undefined, JSON.stringify drops the field entirely, leaving the server
-    // with `{ input }` and no diagnostics. Coerce to `{}` so the server's
-    // `obj.diagnostics ?? {}` fallback still receives an explicit object.
-    // rc-9: the empty object is the explicit "no diagnostics collected" shape;
-    // the server's collectDiagnostics records `unavailableReason` for each field.
-    return request('/api/feedback/reports', {
-        method: 'POST',
-        body: JSON.stringify({ input, diagnostics: diagnostics ?? {} }),
-    }, validateFeedbackReport);
-}
-async function listFeedbackReports() {
-    // The API returns { drafts: [...] } — validate the drafts array inside
-    return request('/api/feedback/reports', undefined, (v) => {
-        const drafts = validateFeedbackDraftsList(v);
-        if (drafts === null)
-            return null;
-        return { drafts };
-    });
-}
-async function getFeedbackReport(id) {
-    return request('/api/feedback/reports/' + encodeURIComponent(id), undefined, validateFeedbackDraftEnvelope);
-}
-async function deleteFeedbackReport(id) {
-    return request('/api/feedback/reports/' + encodeURIComponent(id), {
-        method: 'DELETE',
-    }, validateDeleteEnvelope);
-}
-// ── Feedback submit ladder (Slice 3, spec §8) ─────────────────────────────────
-async function fetchFeedbackChannels() {
-    return request('/api/feedback/submit/channels', undefined, validateFeedbackChannels);
-}
-async function submitFeedbackReport(id, channel) {
-    return request('/api/feedback/reports/' + encodeURIComponent(id) + '/submit', {
-        method: 'POST',
-        body: JSON.stringify({ channel }),
-    }, validateFeedbackSubmitResult);
-}
-/**
- * Manually mark a draft as sent (mailto/export channels, spec §11.4). The
- * console cannot server-confirm delivery for these channels, so this is an
- * honest user-declared status write-back — never a fake acknowledgement.
- */
-async function markFeedbackReportSent(id, via) {
-    return request('/api/feedback/reports/' + encodeURIComponent(id) + '/mark-sent', {
-        method: 'POST',
-        body: JSON.stringify({ via }),
-    }, validateFeedbackSubmitResult);
-}
-// ── Config / Control Center API (PRI-303, PRI-309) ───────────────────────────
-async function fetchConfigSummary() {
-    return request('/api/v1/config/summary', undefined, validateConfigSummary);
-}
-async function fetchConfigCatalog() {
-    return request('/api/v1/config/catalog', undefined, validateConfigCatalog);
-}
-async function updateAgentBinding(agentName, runtimeProfile, enabled) {
-    return request(`/api/v1/config/agents/${encodeURIComponent(agentName)}/binding`, {
-        method: 'PATCH',
-        body: JSON.stringify({ runtimeProfile, enabled }),
-    }, validateAgentBindingUpdate);
-}
-async function updateDefaultRuntime(defaultRuntime) {
-    return request('/api/v1/config/default-runtime', {
-        method: 'PATCH',
-        body: JSON.stringify({ defaultRuntime }),
-    }, validateDefaultRuntimeUpdate);
-}
-// ── Owner identity (ADR-0022 / PRI-578) ──────────────────────────────────────
-export async function fetchOwnerIdentity() {
-    return request('/api/v1/owner-identity', undefined, validateOwnerIdentityView);
-}
-export async function registerOwnerIdentity(ownerId, credentialId) {
-    return request('/api/v1/owner-identity', {
-        method: 'POST',
-        body: JSON.stringify({ ownerId, credentialId }),
-    }, validateOwnerIdentityRegister);
-}
-export async function unregisterOwnerIdentity() {
-    return request('/api/v1/owner-identity', { method: 'DELETE' }, validateOwnerIdentityUnregister);
-}
-// ── Runtime Profile CRUD (POST/PATCH/DELETE /api/v1/config/profiles) ──────────
-/**
- * Create a new runtime profile.
- *
- * Body shape: `{ id: string, profile: { type, provider?, model?, ... } }`.
- * Server validates per-type requirements (pi-ai needs provider/model/apiKeyEnv)
- * and returns 400 with a message on validation failure. The server response is
- * `{ profileId, profile }`; we validate the contract fields and rely on the
- * caller to re-fetch the catalog for display.
- *
- * rc-9: server-side validation errors surface as `result.error` (no silent
- * fallback) — the request() helper extracts the message from the error envelope.
- */
-async function createRuntimeProfile(id, profile) {
-    return request('/api/v1/config/profiles', {
-        method: 'POST',
-        body: JSON.stringify({ id, profile }),
-    }, validateRuntimeProfileMutation);
-}
-/**
- * Update an existing runtime profile (partial patch).
- *
- * Body shape: a partial profile object (e.g. `{ model: 'new-model' }`).
- * The server rejects type changes with 400; other fields are merged.
- */
-async function updateRuntimeProfile(profileId, patch) {
-    return request(`/api/v1/config/profiles/${encodeURIComponent(profileId)}`, {
-        method: 'PATCH',
-        body: JSON.stringify(patch),
-    }, validateRuntimeProfileMutation);
-}
-/**
- * Delete a runtime profile.
- *
- * The server rejects deletion with 400 when the profile is the defaultRuntime
- * or is referenced by any agent (error message lists the agent names). The
- * caller must surface this error to the user (rc-9: no silent fallback).
- */
-async function deleteRuntimeProfile(profileId) {
-    return request(`/api/v1/config/profiles/${encodeURIComponent(profileId)}`, { method: 'DELETE' }, validateRuntimeProfileMutation);
-}
-/**
- * Fetch dynamic readiness for a single agent (GET /api/v1/config/readiness/:name).
- *
- * The summary/catalog endpoints return a static, pessimistic readiness that
- * doesn't probe the actual provider. This endpoint performs a live check
- * (e.g. testing whether the API key env var is set and the provider responds).
- *
- * Used by AgentCard when L2 is expanded and the static readiness is 'unknown'
- * — the pessimistic value is replaced with the live result. On failure the
- * caller falls back to the static value (rc-9: the error is surfaced via the
- * ApiResponse error envelope, not silently swallowed).
- */
-async function fetchAgentReadiness(agentName) {
-    return request(`/api/v1/config/readiness/${encodeURIComponent(agentName)}`, undefined, validateReadinessCheck);
-}
-// ── Feature Flag Toggle (spec 2026-06-27 §13.5) ─────────────────────────────
-async function patchFeatureFlag(featureName, enabled) {
-    return request(`/api/v1/config/features/${encodeURIComponent(featureName)}`, {
-        method: 'PATCH',
-        body: JSON.stringify({ enabled }),
-    }, validateFeatureFlagUpdate);
-}
-// ── Principles Output Language (PRI-332 P1-1) ────────────────────────────────
-async function fetchOutputLanguage() {
-    return request('/api/v1/config/principles/output-language', undefined, validateOutputLanguage);
-}
-async function updateOutputLanguage(outputLanguage) {
-    return request('/api/v1/config/principles/output-language', {
-        method: 'PATCH',
-        body: JSON.stringify({ outputLanguage }),
-    }, validateOutputLanguage);
-}
-// ── CR8: Backend Data Contract (G.1) ─────────────────────────────────────────
-async function fetchGovernanceQueue() {
-    return request('/api/v1/governance/queue', undefined, validateGovernanceQueue);
-}
-// PRI-586: read-only governance experience snapshot. Only called when the
-// governance_experience_v1 flag is enabled — flag-off the endpoint 403s and
-// the Console keeps the legacy Focus experience (ERR-102: disabled ≠ unavailable).
-async function fetchGovernanceExperience() {
-    return request('/api/v1/governance/experience', undefined, validateGovernanceExperienceSnapshot);
-}
-// Governance Recovery Actions v1: Owner-triggered recovery of a failed /
-// needs_human_review internalization task (failed→pending | needs_human_review→pending).
-// force=true recovers a task whose attempt budget is exhausted (core raises
-// its maxAttempts); it only affects the failed path.
-async function recoverFailedTask(taskId, reason, force) {
-    const body = {};
-    if (reason !== undefined && reason.length > 0) {
-        body.reason = reason;
-    }
-    if (force === true) {
-        body.force = true;
-    }
-    return request('/api/v1/failed-tasks/' + encodeURIComponent(taskId) + '/recover', {
-        method: 'POST',
-        body: JSON.stringify(body),
-    }, validateRecoveryResult);
-}
-// PRI-747 F22 / PRI-749: consume the existing single-task detail endpoint
-// (task record + run history). The server route and
-// SqliteTaskStore.getFailedTaskDetail already existed; this wrapper is the
-// missing UI-side consumer the Failed Tasks page expands into.
-async function fetchFailedTaskDetail(taskId) {
-    return request('/api/v1/failed-tasks/' + encodeURIComponent(taskId), undefined, validateFailedTaskDetail);
-}
-// PRI-629: unified Owner Decision inbox — read projection + resolution.
-async function fetchOwnerDecisions() {
-    return request('/api/v1/governance/owner-decisions', undefined, validateOwnerDecisionsData);
-}
-async function resolveOwnerDecision(taskId, body) {
-    return request('/api/v1/governance/owner-decisions/' + encodeURIComponent(taskId) + '/resolve', { method: 'POST', body: JSON.stringify(body) }, validateOwnerResolutionResult);
-}
-async function fetchApprovalsGrouped(targetHost) {
-    const query = targetHost !== undefined ? `?host=${targetHost}` : '';
-    return request(`/api/v1/approvals/grouped${query}`, undefined, validateApprovalsGrouped);
-}
-async function fetchAllActivations(targetHost) {
-    const query = targetHost !== undefined ? `?host=${targetHost}` : '';
-    return request(`/api/v1/activations${query}`, undefined, validateActivations);
-}
-async function disableActivation(activationId) {
-    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/disable`, {
-        method: 'POST',
-        body: JSON.stringify({ confirmed: true }),
-    }, validateDisableActivation);
-}
-async function fetchRuleCodeOwnerReview(activationId) {
-    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/owner-review`, undefined, validateRuleCodeOwnerReview);
-}
-export async function fetchApprovedRuleRevisionPreview(activationId) {
-    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/rule-revision-preview`, undefined, validateApprovedRuleRevisionPreview);
-}
-export async function reviseApprovedRuleOnce(activationId, input) {
-    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/revise-rule-once`, {
-        method: 'POST', body: JSON.stringify(input),
-    }, validateApprovedRuleRevisionResult);
-}
-async function proposePromptRevision(activationId, statement, targetHost) {
-    return request(`/api/v1/activations/${encodeURIComponent(activationId)}/propose-revision`, {
-        method: 'POST',
-        body: JSON.stringify({ statement, ...(targetHost !== undefined ? { host: targetHost } : {}) }),
-    }, (v) => {
-        if (typeof v !== 'object' || v === null || Array.isArray(v))
-            return null;
-        const rec = v;
-        if (rec.ok !== true && rec.ok !== false)
-            return null;
-        const result = { ok: rec.ok };
-        if (typeof rec.alreadyPending === 'boolean')
-            result.alreadyPending = rec.alreadyPending;
-        if (typeof rec.newArtifactId === 'string')
-            result.newArtifactId = rec.newArtifactId;
-        if (typeof rec.approvalId === 'string')
-            result.approvalId = rec.approvalId;
-        if (typeof rec.supersededActivationId === 'string')
-            result.supersededActivationId = rec.supersededActivationId;
-        if (typeof rec.oldStatement === 'string')
-            result.oldStatement = rec.oldStatement;
-        if (typeof rec.newStatement === 'string')
-            result.newStatement = rec.newStatement;
-        if (typeof rec.title === 'string')
-            result.title = rec.title;
-        if (typeof rec.reason === 'string')
-            result.reason = rec.reason;
-        if (typeof rec.nextAction === 'string')
-            result.nextAction = rec.nextAction;
-        if (typeof rec.error === 'string')
-            result.error = rec.error;
-        return result;
-    });
-}
-async function mutateRuleCode(path, body) {
-    return request(path, { method: 'POST', body: JSON.stringify(body) }, validateRuleCodeMutation);
-}
-function ruleCodeDecision(activationId, action, body) {
-    return mutateRuleCode(`/api/v1/activations/${encodeURIComponent(activationId)}/${action}`, body);
-}
-function pauseAllRuleCode(body) { return mutateRuleCode('/api/v1/activations/emergency-pause', body); }
-function releaseRuleCodePause(pauseId, body) { return mutateRuleCode(`/api/v1/activations/emergency-pause/${encodeURIComponent(pauseId)}/release`, body); }
-async function fetchLifecycleMetrics(principleId) {
-    return request(`/api/v1/lifecycle/principles/${encodeURIComponent(principleId)}`, undefined, validateLifecycleMetrics);
-}
-// ── Updates (CR9) ─────────────────────────────────────────────────────────────
-async function fetchUpdateStatus() {
-    return request('/api/update/check', undefined, validateUpdateStatus);
-}
-async function fetchUpdateHistory() {
-    return request('/api/update/history', undefined, validateUpdateHistory);
-}
-async function applyFullUpdate() {
-    return request('/api/update/apply-full', {
-        method: 'POST',
-        body: JSON.stringify({}),
-    }, validateApplyUpdateResult);
-}
-// PRI-848 (SPEC §12.1): recovery/continuation surface — the page attaches to an
-// unfinished transaction instead of starting a duplicate update.
-async function fetchUpdateRecovery() {
-    return request('/api/update/recovery', undefined, validateUpdateRecovery);
-}
-async function fetchUpdateTransaction(transactionId) {
-    return request(`/api/update/transaction/${encodeURIComponent(transactionId)}`, undefined, validateUpdateTransaction);
-}
-// ── Evidence Chain (PRI-331) ──────────────────────────────────────────────────
-async function fetchEvidenceChain() {
-    return request('/api/v1/evidence-chain', undefined, validateEvidenceChain);
-}
-// ── Intent Summary (PRI-466) ─────────────────────────────────────────────────
-async function fetchIntentSummary(lang = 'zh-CN') {
-    return request(`/api/v1/intent?lang=${lang}`, undefined, validateIntentSummary);
-}
-// ── Intent Init / Edit (PRI-477 onboarding) ──────────────────────────────────
-/**
- * Fetch raw INTENT.md content for editing via GET /api/v1/intent/content.
- */
-async function fetchIntentContent(lang = 'zh-CN') {
-    return request(`/api/v1/intent/content?lang=${lang}`, undefined, validateIntentRawContent);
-}
-/**
- * Create INTENT.md from the SPEC §7 template via POST /api/v1/intent/init.
- * Does NOT overwrite an existing file unless force=true.
- */
-async function createIntentTemplate(force = false, lang = 'zh-CN') {
-    return request(`/api/v1/intent/init?lang=${lang}`, {
-        method: 'POST',
-        body: JSON.stringify({ force }),
-    }, validateIntentInitResult);
-}
-/**
- * Save user-edited INTENT.md content via PUT /api/v1/intent/content.
- */
-async function saveIntentContent(content, lang = 'zh-CN') {
-    return request(`/api/v1/intent/content?lang=${lang}`, {
-        method: 'PUT',
-        body: JSON.stringify({ content }),
-    }, validateIntentSaveResult);
-}
-async function fetchIntentVersions(lang = 'zh-CN') {
-    return request(`/api/v1/intent/versions?lang=${lang}`, undefined, validateIntentVersions);
-}
-async function recordIntentDecision(payload) {
-    return request('/api/v1/intent-decisions', {
-        method: 'POST',
-        body: JSON.stringify(payload),
-    }, validateIntentDecisionResult);
-}
-async function listIntentDecisionsByPainId(painId) {
-    return request(`/api/v1/intent-decisions?painId=${encodeURIComponent(painId)}`, undefined, validateIntentDecisionList);
-}
-async function listIntentDecisionsByTaskId(taskId) {
-    return request(`/api/v1/intent-decisions?taskId=${encodeURIComponent(taskId)}`, undefined, validateIntentDecisionList);
-}
-async function fetchIntentDecisionSummary() {
-    return request('/api/v1/intent-decisions/summary', undefined, validateIntentDecisionSummary);
-}
-async function dispatchFollowUp(decisionId, payload) {
-    return request(`/api/v1/intent-decisions/${encodeURIComponent(decisionId)}/follow-up`, {
-        method: 'POST',
-        body: JSON.stringify(payload),
-    }, validateFollowUpResponse);
-}
-function isDesignGateRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function validateDesignGateSessions(value) {
-    if (!isDesignGateRecord(value) || !Array.isArray(value.sessions))
-        return null;
-    const sessions = [];
-    for (const entry of value.sessions) {
-        if (!isDesignGateRecord(entry)
-            || typeof entry.projectWorkspacePath !== "string" || entry.projectWorkspacePath.trim() === ""
-            || typeof entry.hostSessionId !== "string" || entry.hostSessionId.trim() === "")
-            return null;
-        sessions.push({ projectWorkspacePath: entry.projectWorkspacePath, hostSessionId: entry.hostSessionId });
-    }
-    return { sessions };
-}
-function isDesignGateAction(value) {
-    return value === "read" || value === "write" || value === "execute";
-}
-function isDesignGateDecisionValue(value) {
-    return value === "approved" || value === "not_approved" || value === "not_required";
-}
-function isNonEmptyDesignGateString(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
-function isDesignGateStringArray(value) {
-    if (!Array.isArray(value))
-        return false;
-    for (let index = 0; index < value.length; index += 1) {
-        if (!Object.hasOwn(value, index) || !isNonEmptyDesignGateString(value[index]))
-            return false;
-    }
-    return true;
-}
-/**
- * Field-by-field mirror of the server declaration contract (rc-1 style) —
- * the browser bundle never runtime-imports the Node-oriented core barrel, so
- * the wire format is re-validated locally; the server remains the authority.
- */
-function isDesignGateDeclarationValue(value) {
-    if (!isDesignGateRecord(value))
-        return false;
-    if (!Object.hasOwn(value, "sourceRef") || !isNonEmptyDesignGateString(value.sourceRef))
-        return false;
-    if (!isNonEmptyDesignGateString(value.governanceWorkspacePath))
-        return false;
-    if (!isNonEmptyDesignGateString(value.projectWorkspacePath))
-        return false;
-    if (!isNonEmptyDesignGateString(value.hostSessionId))
-        return false;
-    if (!isNonEmptyDesignGateString(value.taskRef))
-        return false;
-    if (!isNonEmptyDesignGateString(value.specPath) || !isNonEmptyDesignGateString(value.specDigest))
-        return false;
-    if (!isDesignGateRecord(value.scope))
-        return false;
-    if (!Object.hasOwn(value.scope, "paths") || !Object.hasOwn(value.scope, "actions"))
-        return false;
-    if (!isDesignGateStringArray(value.scope.paths) || value.scope.paths.length === 0)
-        return false;
-    if (!Array.isArray(value.scope.actions) || value.scope.actions.length === 0)
-        return false;
-    for (let index = 0; index < value.scope.actions.length; index += 1) {
-        if (!Object.hasOwn(value.scope.actions, index) || !isDesignGateAction(value.scope.actions[index]))
-            return false;
-    }
-    if (!isDesignGateDecisionValue(value.decision))
-        return false;
-    if (typeof value.revision !== "number" || !Number.isSafeInteger(value.revision) || value.revision < 1)
-        return false;
-    if (typeof value.revoked !== "boolean")
-        return false;
-    if (!isDesignGateRecord(value.actor)
-        || !Object.hasOwn(value.actor, "ownerId") || !Object.hasOwn(value.actor, "credentialId")
-        || !isNonEmptyDesignGateString(value.actor.ownerId) || !isNonEmptyDesignGateString(value.actor.credentialId))
-        return false;
-    if (!isNonEmptyDesignGateString(value.decidedAt))
-        return false;
-    return true;
-}
-function validateDesignGateDeclarationEnvelope(value) {
-    if (!isDesignGateRecord(value) || !Object.hasOwn(value, "declaration"))
-        return null;
-    if (value.declaration === null)
-        return { declaration: null };
-    return isDesignGateDeclarationValue(value.declaration) ? { declaration: value.declaration } : null;
-}
-const designGateBasePath = "/api/v1/governance/design-gate";
-async function fetchDesignGateSessions() {
-    return request(`${designGateBasePath}/sessions`, undefined, validateDesignGateSessions);
-}
-async function fetchDesignGateDeclaration(projectWorkspacePath, hostSessionId) {
-    const query = new URLSearchParams({ projectWorkspacePath, hostSessionId });
-    return request(`${designGateBasePath}/declaration?${query.toString()}`, undefined, validateDesignGateDeclarationEnvelope);
-}
-async function createDesignGateDeclaration(input) {
-    return request(`${designGateBasePath}/declarations`, { method: "POST", body: JSON.stringify(input) }, validateDesignGateDeclarationEnvelope);
-}
-async function updateDesignGateDecision(sourceRef, expectedRevision, decision) {
-    return request(`${designGateBasePath}/declarations/${encodeURIComponent(sourceRef)}/decision`, { method: "POST", body: JSON.stringify({ expectedRevision, decision }) }, validateDesignGateDeclarationEnvelope);
-}
-async function revokeDesignGateDeclaration(sourceRef, expectedRevision) {
-    return request(`${designGateBasePath}/declarations/${encodeURIComponent(sourceRef)}/revoke`, { method: "POST", body: JSON.stringify({ expectedRevision }) }, validateDesignGateDeclarationEnvelope);
-}
-// ── Exports ───────────────────────────────────────────────────────────────────
-export { request, 
-// auth
-getToken, setToken, clearToken, checkAuth, approveApproval, rejectApproval, editApproval, fetchPrinciples, fetchCorePrinciples, fetchPrincipleDetail, fetchPrincipleGovernance, fetchOwnerDecisionView, fetchOwnerDecisionInbox, fetchOwnerDecisionLibrary, fetchPrincipleTrajectory, fetchPrincipleReceipts, fetchReceiptCounts, fetchEvidenceAudit, archivePrinciple, unarchivePrinciple, createFeedbackReport, listFeedbackReports, getFeedbackReport, deleteFeedbackReport, 
-// Feedback submit ladder (Slice 3, spec §8)
-fetchFeedbackChannels, submitFeedbackReport, markFeedbackReportSent, fetchConfigSummary, fetchConfigCatalog, updateAgentBinding, updateDefaultRuntime, createRuntimeProfile, updateRuntimeProfile, deleteRuntimeProfile, fetchAgentReadiness, patchFeatureFlag, fetchOutputLanguage, updateOutputLanguage, fetchWorkspaces, addWorkspace, removeWorkspace, syncWorkspace, fetchGovernanceQueue, fetchGovernanceExperience, recoverFailedTask, fetchFailedTaskDetail, fetchOwnerDecisions, resolveOwnerDecision, fetchApprovalsGrouped, fetchAllActivations, disableActivation, proposePromptRevision, fetchRuleCodeOwnerReview, ruleCodeDecision, pauseAllRuleCode, releaseRuleCodePause, fetchLifecycleMetrics, fetchUpdateStatus, fetchUpdateHistory, applyFullUpdate, fetchUpdateRecovery, fetchUpdateTransaction, fetchEvidenceChain, fetchIntentSummary, fetchIntentContent, createIntentTemplate, saveIntentContent, fetchIntentVersions, recordIntentDecision, listIntentDecisionsByPainId, listIntentDecisionsByTaskId, fetchIntentDecisionSummary, dispatchFollowUp, fetchDesignGateSessions, fetchDesignGateDeclaration, createDesignGateDeclaration, updateDesignGateDecision, revokeDesignGateDeclaration, };
-export async function fetchExaminerOverview() {
-    return request('/api/v1/examiner/overview', undefined, (v) => {
-        if (v !== null && typeof v === 'object' && Object.hasOwn(v, 'studies'))
-            return v;
-        return null;
-    });
-}
-export async function fetchExaminerPrinciples() {
-    return request('/api/v1/examiner/principles', undefined, (v) => {
-        if (v && typeof v === 'object' && Array.isArray(v.principles))
-            return v;
-        return null;
-    });
-}
-export async function createExaminerStudy(input) {
-    return request('/api/v1/examiner/studies', { method: 'POST', body: JSON.stringify(input) }, (v) => {
-        if (v && typeof v.studyId === 'string')
-            return v;
-        return null;
-    });
-}
-export async function fetchExaminerStudyStatus(studyId) {
-    return request(`/api/v1/examiner/studies/${encodeURIComponent(studyId)}`, undefined, (v) => {
-        if (v && typeof v.studyId === 'string')
-            return v;
-        return null;
-    });
-}
-export async function runExaminerPreflight(studyId) {
-    return request(`/api/v1/examiner/studies/${encodeURIComponent(studyId)}/preflight`, { method: 'POST' }, (v) => {
-        if (v && typeof v.ok === 'boolean')
-            return v;
-        return null;
-    });
-}
-export async function runExaminerStudy(studyId) {
-    return request(`/api/v1/examiner/studies/${encodeURIComponent(studyId)}/run`, { method: 'POST', body: JSON.stringify({ mode: 'offline-stub' }) }, (v) => {
-        if (v && Array.isArray(v.units))
-            return v;
-        return null;
-    });
-}
-export async function generateExaminerReport(studyId) {
-    return request(`/api/v1/examiner/studies/${encodeURIComponent(studyId)}/report`, { method: 'POST' }, (v) => {
-        if (v && typeof v.status === 'string')
-            return v;
-        return null;
-    });
-}
-export async function fetchExaminerReport(studyId) {
-    return request(`/api/v1/examiner/studies/${encodeURIComponent(studyId)}/report`, undefined, (v) => {
-        if (v && v.report)
-            return v;
-        return null;
-    });
-}