create-principles-disciple 1.146.4 → 1.146.6

package/console/dist/ui/utils/validators.js

@@ -1,3297 +0,0 @@
-// PRI-613: feedback submit-ladder data shapes derive from the canonical shared
-// schema contract via `import type` ONLY — a runtime import would bundle
-// @sinclair/typebox into the browser (~850KB, measured; SPEC §10.5 stop
-// condition). The runtime const FEEDBACK_CHANNEL_IDS lives in a separate
-// dependency-free module so browser code can check channel IDs safely.
-import { FEEDBACK_CHANNEL_IDS } from '../../shared/feedback-channel-ids.js';
-// ── Primitive guards ──────────────────────────────────────────────────────────
-function isString(v) {
-    return typeof v === 'string';
-}
-function isNumber(v) {
-    return typeof v === 'number' && !Number.isNaN(v);
-}
-function isBoolean(v) {
-    return typeof v === 'boolean';
-}
-function isObject(v) {
-    return typeof v === 'object' && v !== null && !Array.isArray(v);
-}
-/** Read a nullable string field from an untrusted object. */
-function readNullableString(v, key) {
-    if (!Object.hasOwn(v, key))
-        return { valid: true, value: null };
-    const val = v[key];
-    if (val === null || typeof val === 'string')
-        return { valid: true, value: val };
-    return { valid: false };
-}
-/** Read a nullable number field from an untrusted object. */
-function readNullableNumber(v, key) {
-    if (!Object.hasOwn(v, key))
-        return { valid: true, value: null };
-    const val = v[key];
-    if (val === null || (typeof val === 'number' && !Number.isNaN(val)))
-        return { valid: true, value: val };
-    return { valid: false };
-}
-// ── Generic array element validator ───────────────────────────────────────────
-function validateArray(v, validateElement) {
-    if (!Array.isArray(v))
-        return null;
-    const result = [];
-    for (const el of v) {
-        const validated = validateElement(el);
-        if (validated === null)
-            return null;
-        result.push(validated);
-    }
-    return result;
-}
-const governanceSourceTypes = new Set(['principle', 'artifact', 'task', 'run', 'approval', 'activation', 'trajectory']);
-const governanceChannels = new Set(['prompt', 'code_tool_hook', 'defer_archive']);
-const governanceHeadlineCodes = new Set(['governance.headline.owner_decision', 'governance.headline.recovery', 'governance.headline.revision', 'governance.headline.processing', 'governance.headline.active', 'governance.headline.unavailable', 'governance.headline.recorded']);
-const governanceReasonCodes = new Set(['governance.reason.approval_pending', 'governance.reason.recovery_required', 'governance.reason.automatic_revision', 'governance.reason.processing', 'governance.reason.activation_active', 'governance.reason.data_incomplete', 'governance.reason.no_current_process']);
-const governanceNextActionCodes = new Set(['governance.next.review', 'governance.next.inspect_recovery', 'governance.next.wait', 'governance.next.monitor', 'governance.next.inspect_data', 'governance.next.none']);
-const lineageConfidences = new Set(['strong', 'weak', 'unknown']);
-const timestampPattern = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
-function isGovernanceTimestamp(value) {
-    if (typeof value !== 'string' || !timestampPattern.test(value))
-        return false;
-    const parsed = new Date(value);
-    if (!Number.isFinite(parsed.getTime()))
-        return false;
-    return parsed.toISOString() === (value.includes('.') ? value : value.replace('Z', '.000Z'));
-}
-function hasOwnFields(value, fields) {
-    return fields.every(field => Object.hasOwn(value, field));
-}
-const PROMPT_BUDGET_FALLBACK_REASONS = new Set([
-    'host_capacity_absent',
-    'host_capacity_source_untrusted',
-    'host_capacity_invalid_value',
-    'catalog_unavailable',
-    'model_identity_absent',
-    'catalog_no_exact_match',
-    'catalog_no_match_for_model_id',
-    'catalog_ambiguous_model_id',
-    'catalog_provider_absent',
-    'catalog_metadata_invalid',
-    // PRI-1017: console-side bounded code — a runtime observation exists but
-    // is too old to be presented as the current budget.
-    'runtime_budget_observation_stale',
-]);
-function isPromptBudgetFallbackReason(value) {
-    return isString(value) && PROMPT_BUDGET_FALLBACK_REASONS.has(value);
-}
-function isPromptBudgetCapacitySource(value) {
-    return value === 'operator_declared' || value === 'host_effective_window' || value === 'pi_catalog_exact' || value === 'legacy_fallback';
-}
-function isPromptBudgetCapacityStatus(value) {
-    return value === 'confirmed' || value === 'unknown';
-}
-function isStringEnum(value, allowed) {
-    return typeof value === 'string' && allowed.has(value);
-}
-function isGovernanceSourceRef(value) {
-    return isObject(value) && hasOwnFields(value, ['type', 'id'])
-        && isStringEnum(value.type, governanceSourceTypes) && typeof value.id === 'string' && value.id.length > 0;
-}
-function isGovernanceSourceRefs(value) {
-    return Array.isArray(value) && value.every(isGovernanceSourceRef);
-}
-function isDataQualityIssue(value) {
-    return isObject(value) && hasOwnFields(value, ['source', 'reasonCode', 'nextActionCode'])
-        && isStringEnum(value.source, new Set(['ledger', 'artifact', 'task', 'approval', 'activation', 'trajectory', 'lineage']))
-        && typeof value.reasonCode === 'string' && value.reasonCode.length > 0
-        && typeof value.nextActionCode === 'string' && value.nextActionCode.length > 0
-        && (!Object.hasOwn(value, 'sourceRef') || isGovernanceSourceRef(value.sourceRef));
-}
-function isTimelineEvent(value) {
-    return isObject(value) && hasOwnFields(value, ['code', 'recordedAt', 'summaryCode', 'sourceRef', 'lineageConfidence'])
-        && isStringEnum(value.code, new Set(['pain_created', 'candidate_generated', 'review_started', 'revision_requested', 'revision_reopened', 'approved', 'rejected', 'activated', 'deactivated', 'failed', 'human_review']))
-        && isGovernanceTimestamp(value.recordedAt)
-        && (!Object.hasOwn(value, 'occurredAt') || isGovernanceTimestamp(value.occurredAt))
-        && typeof value.summaryCode === 'string' && value.summaryCode.length > 0
-        && isGovernanceSourceRef(value.sourceRef) && isStringEnum(value.lineageConfidence, lineageConfidences);
-}
-function isOwnerGovernanceView(value) {
-    if (!isObject(value) || !hasOwnFields(value, ['schemaVersion', 'principleId', 'asOf', 'summary', 'principleState', 'process', 'automation', 'attention', 'activationSummary', 'timeline', 'sourceRefs', 'dataQuality']))
-        return false;
-    if (value.schemaVersion !== '1' || typeof value.principleId !== 'string' || value.principleId.length === 0 || !isGovernanceTimestamp(value.asOf))
-        return false;
-    const { summary, principleState: principle, process, automation, attention, activationSummary: activation, dataQuality: quality, } = value;
-    if (!isObject(summary) || !hasOwnFields(summary, ['headlineCode', 'reasonCode', 'nextActionCode', 'ownerActionRequired', 'sourceRefs'])
-        || !isStringEnum(summary.headlineCode, governanceHeadlineCodes) || !isStringEnum(summary.reasonCode, governanceReasonCodes) || !isStringEnum(summary.nextActionCode, governanceNextActionCodes)
-        || typeof summary.ownerActionRequired !== 'boolean' || !isGovernanceSourceRefs(summary.sourceRefs)
-        || (Object.hasOwn(summary, 'safeReasonSummary') && (typeof summary.safeReasonSummary !== 'string' || summary.safeReasonSummary.length === 0)))
-        return false;
-    if (!isObject(principle) || !hasOwnFields(principle, ['value', 'sourceRefs'])
-        || !isStringEnum(principle.value, new Set(['candidate', 'active', 'archived', 'deprecated', 'probation'])) || !isGovernanceSourceRefs(principle.sourceRefs))
-        return false;
-    if (!isObject(process) || !hasOwnFields(process, ['sourceRefs']) || !isGovernanceSourceRefs(process.sourceRefs)
-        || (Object.hasOwn(process, 'stage') && !isStringEnum(process.stage, new Set(['generating', 'reviewing', 'revising', 'approval', 'activation'])))
-        || (Object.hasOwn(process, 'currentTaskKind') && !isStringEnum(process.currentTaskKind, new Set(['dreamer', 'philosopher', 'scribe', 'artificer', 'evaluator', 'rollout_reviewer']))))
-        return false;
-    if (!isObject(automation) || !hasOwnFields(automation, ['state', 'sourceRefs'])
-        || !isStringEnum(automation.state, new Set(['idle', 'queued', 'running', 'retry_scheduled', 'stalled'])) || !isGovernanceSourceRefs(automation.sourceRefs))
-        return false;
-    if (!isObject(attention) || !hasOwnFields(attention, ['primary', 'items'])
-        || !isStringEnum(attention.primary, new Set(['none', 'owner_required', 'recovery_required'])) || !Array.isArray(attention.items)
-        || !attention.items.every(item => isObject(item) && hasOwnFields(item, ['kind', 'reasonCode', 'sourceRef'])
-            && isStringEnum(item.kind, new Set(['owner_decision', 'recovery'])) && typeof item.reasonCode === 'string' && item.reasonCode.length > 0 && isGovernanceSourceRef(item.sourceRef)))
-        return false;
-    if (!isObject(activation) || !hasOwnFields(activation, ['state', 'channels', 'observedChannels', 'sourceRefs'])
-        || !isStringEnum(activation.state, new Set(['none', 'active', 'partially_active', 'deactivated']))
-        || !Array.isArray(activation.channels) || !activation.channels.every(channel => isStringEnum(channel, governanceChannels))
-        || !Array.isArray(activation.observedChannels) || !activation.observedChannels.every(channel => isStringEnum(channel, governanceChannels))
-        || !isGovernanceSourceRefs(activation.sourceRefs))
-        return false;
-    return Array.isArray(value.timeline) && value.timeline.every(isTimelineEvent) && isGovernanceSourceRefs(value.sourceRefs)
-        && isObject(quality) && hasOwnFields(quality, ['degraded', 'issues']) && typeof quality.degraded === 'boolean'
-        && Array.isArray(quality.issues) && quality.issues.every(isDataQualityIssue);
-}
-export function validateOwnerGovernanceView(value) {
-    return isOwnerGovernanceView(value) ? value : null;
-}
-// ── Owner Decision Experience v1 — browser-local structural validator ───────
-//
-// Mirrors the authoritative TypeBox contract in principles-core
-// (owner-decision-view-contract.ts). Type-only import keeps the browser bundle
-// free of the Node-oriented core barrel (same reason as the governance
-// validator above, ERR-100).
-const ownerDecisionStates = new Set(['needs_owner_decision', 'processing', 'blocked', 'recovery_needed', 'decided', 'no_action']);
-const ownerInboxGroups = new Set(['decision', 'blocked', 'recovery', 'none']);
-const ownerInboxAttention = new Set(['individual', 'aggregate', 'none']);
-function isOwnerInboxItem(value) {
-    // Codex review P2 fix: the page dereferences item.inbox.attention,
-    // item.principleId and item.nextAction.ownerText on every entry — a
-    // malformed entry (e.g. `[null]` from a version-skewed server) must be
-    // rejected here instead of crashing the render.
-    if (!isObject(value) || !hasOwnFields(value, ['principleId', 'decisionState', 'learnedPrinciple', 'inbox', 'blockerCodes', 'nextAction']))
-        return false;
-    if (!isString(value.principleId) || value.principleId.length === 0)
-        return false;
-    if (!isString(value.decisionState) || !ownerDecisionStates.has(value.decisionState))
-        return false;
-    const principle = value.learnedPrinciple;
-    if (!isObject(principle))
-        return false;
-    if (principle.status === 'known') {
-        if (!hasOwnFields(principle, ['text', 'sourceTier'])
-            || !isString(principle.text) || principle.text.length === 0
-            || !isString(principle.sourceTier))
-            return false;
-    }
-    else if (principle.status === 'unknown') {
-        if (!hasOwnFields(principle, ['reasonText']) || !isString(principle.reasonText))
-            return false;
-    }
-    else
-        return false;
-    if (!isObject(value.inbox) || !hasOwnFields(value.inbox, ['group', 'attention'])
-        || !isStringEnum(value.inbox.group, ownerInboxGroups)
-        || !isStringEnum(value.inbox.attention, ownerInboxAttention))
-        return false;
-    if (!Array.isArray(value.blockerCodes) || !value.blockerCodes.every(isString))
-        return false;
-    return isObject(value.nextAction) && hasOwnFields(value.nextAction, ['ownerText'])
-        && isString(value.nextAction.ownerText);
-}
-function isOwnerReason(value) {
-    if (!isObject(value) || !hasOwnFields(value, ['code', 'ownerText', 'sourceRefs']))
-        return false;
-    if (!isString(value.code) || value.code.length === 0)
-        return false;
-    if (!isString(value.ownerText) || value.ownerText.length === 0)
-        return false;
-    if (!Array.isArray(value.sourceRefs))
-        return false;
-    // PRI-875 (CodeRabbit P2): `count` is optional, but when present it must be
-    // an integer ≥ 1 — a malformed value from a version-skewed server would
-    // otherwise reach the UI and be interpolated into the `{{n}}` template.
-    if (!hasOwnFields(value, ['count']))
-        return true;
-    return typeof value.count === 'number' && Number.isInteger(value.count) && value.count >= 1;
-}
-function isOwnerAction(value) {
-    return isObject(value) && hasOwnFields(value, ['key', 'semantic', 'label', 'channel', 'confirmation', 'expectedConsequence'])
-        && isString(value.key) && value.key.length > 0
-        && isString(value.semantic) && value.semantic.length > 0
-        && isString(value.label)
-        && isObject(value.confirmation) && typeof value.confirmation.required === 'boolean' && isString(value.confirmation.text);
-}
-export function isOwnerDecisionViewCore(value) {
-    if (!isObject(value) || !hasOwnFields(value, ['schemaVersion', 'principleId', 'asOf', 'sourceReadStatus', 'sourceReads',
-        'incidentSummary', 'learnedPrinciple', 'rationale', 'applicability', 'nonApplicabilityOrUnknown', 'expectedBehavior',
-        'currentEnforcement', 'evidenceSummary', 'uncertainty', 'risk', 'rollback', 'decisionState', 'decisionSubjects',
-        'availableActions', 'blockers', 'nextAction', 'inbox', 'technicalDetails']))
-        return false;
-    if (value.schemaVersion !== '1' || !isString(value.principleId) || !isString(value.asOf))
-        return false;
-    if (value.sourceReadStatus !== 'complete' && value.sourceReadStatus !== 'partial')
-        return false;
-    if (!isStringEnum(value.decisionState, ownerDecisionStates))
-        return false;
-    if (!Array.isArray(value.availableActions) || !value.availableActions.every(isOwnerAction))
-        return false;
-    if (!Array.isArray(value.blockers) || !value.blockers.every(item => isObject(item) && hasOwnFields(item, ['subjectKey', 'kind', 'reason']) && isOwnerReason(item.reason)))
-        return false;
-    return isObject(value.nextAction) && hasOwnFields(value.nextAction, ['code', 'ownerText'])
-        && isString(value.nextAction.ownerText)
-        && isObject(value.inbox) && hasOwnFields(value.inbox, ['group', 'attention', 'reason']) && isOwnerReason(value.inbox.reason);
-}
-export function validateOwnerDecisionViewCore(value) {
-    return isOwnerDecisionViewCore(value) ? value : null;
-}
-export function isOwnerDecisionInbox(value) {
-    return isObject(value)
-        && hasOwnFields(value, ['schemaVersion', 'generatedAt', 'totalPrinciples', 'groups', 'historicalUnknown'])
-        && value.schemaVersion === '1'
-        && isString(value.generatedAt)
-        && typeof value.totalPrinciples === 'number'
-        && isObject(value.groups) && hasOwnFields(value.groups, ['decision', 'blocked', 'recovery'])
-        && ['decision', 'blocked', 'recovery'].every((key) => {
-            const group = value.groups[key];
-            return Array.isArray(group) && group.every(isOwnerInboxItem);
-        })
-        && isObject(value.historicalUnknown) && typeof (value.historicalUnknown).count === 'number';
-}
-export function validateOwnerDecisionInbox(value) {
-    return isOwnerDecisionInbox(value) ? value : null;
-}
-function isOwnerDecisionLibraryEntry(value) {
-    return isObject(value) && hasOwnFields(value, ['decisionState', 'learnedPrinciple'])
-        && isString(value.decisionState)
-        && isObject(value.learnedPrinciple)
-        && (value.learnedPrinciple.status === 'known'
-            ? isString(value.learnedPrinciple.text) && isString(value.learnedPrinciple.sourceTier)
-            : value.learnedPrinciple.status === 'unknown' && isString(value.learnedPrinciple.reasonText));
-}
-export function isOwnerDecisionLibrary(value) {
-    return isObject(value)
-        && hasOwnFields(value, ['schemaVersion', 'generatedAt', 'entries'])
-        && value.schemaVersion === '1'
-        && isString(value.generatedAt)
-        && isObject(value.entries)
-        && Object.values(value.entries).every(isOwnerDecisionLibraryEntry);
-}
-export function validateOwnerDecisionLibrary(value) {
-    return isOwnerDecisionLibrary(value) ? value : null;
-}
-// ── PRI-586: Governance Experience Snapshot v1.5.1 (browser-local validator) ──
-// Mirrors the authoritative TypeBox contract in principles-core
-// (governance-experience-contract.ts). Type-only import above keeps the client
-// bundle free of the Node-oriented core barrel (ERR-100).
-const governancePrimaryAttentions = new Set(['setup_required', 'owner_decision_required', 'recovery_required', 'degraded', 'background_processing', 'all_clear']);
-const governanceExperienceReasonCodes = new Set([
-    'governance.exp.reason.owner_identity_missing', 'governance.exp.reason.owner_identity_invalid',
-    'governance.exp.reason.owner_authentication_missing', 'governance.exp.reason.approval_pending',
-    'governance.exp.reason.rulecode_owner_decision', 'governance.exp.reason.no_pending_decision',
-    'governance.exp.reason.owner_decision_available', 'governance.exp.reason.break_glass_entry',
-    'governance.exp.reason.recovery_required', 'governance.exp.reason.source_unavailable',
-    'governance.exp.reason.config_invalid', 'governance.exp.reason.processing',
-    'governance.exp.reason.workspace_clear', 'governance.exp.reason.workspace_empty',
-]);
-const governanceExperienceNextActionCodes = new Set([
-    'governance.exp.next.configure_owner', 'governance.exp.next.authenticate_console', 'governance.exp.next.review_approvals',
-    'governance.exp.next.inspect_recovery', 'governance.exp.next.inspect_sources',
-    'governance.exp.next.fix_config', 'governance.exp.next.monitor', 'governance.exp.next.none',
-]);
-const governanceObservedAuthorities = new Set(['operator_legacy', 'configured_owner', 'break_glass']);
-const governanceActionKinds = new Set(['principle_approval', 'rulecode_owner_decision', 'emergency_pause']);
-const governanceActivityCategories = new Set(['blocked', 'needs_recovery', 'needs_decision', 'processing']);
-const governanceEnvironmentValues = new Set(['production', 'development', 'demo', 'test', 'unknown']);
-const governanceEnvironmentSources = new Set(['workspace_config', 'missing']);
-const governanceIssueGroupSources = new Set(['ledger', 'artifact', 'task', 'approval', 'activation', 'trajectory', 'lineage', 'workspace']);
-function isGovernanceActivityItem(value) {
-    return isObject(value) && hasOwnFields(value, ['category', 'reasonCode', 'sourceRefs'])
-        && isStringEnum(value.category, governanceActivityCategories)
-        && typeof value.reasonCode === 'string' && value.reasonCode.length > 0
-        && isGovernanceSourceRefs(value.sourceRefs)
-        && (!Object.hasOwn(value, 'principleId') || (typeof value.principleId === 'string' && value.principleId.length > 0));
-}
-function isGovernanceActionReadiness(value) {
-    return isObject(value) && hasOwnFields(value, ['kind', 'observedAuthority', 'status', 'reasonCode', 'nextActionCode'])
-        && isStringEnum(value.kind, governanceActionKinds)
-        && isStringEnum(value.observedAuthority, governanceObservedAuthorities)
-        && isStringEnum(value.status, new Set(['entry_conditions_met', 'blocked']))
-        && isStringEnum(value.reasonCode, governanceExperienceReasonCodes)
-        && isStringEnum(value.nextActionCode, governanceExperienceNextActionCodes);
-}
-function isEnvironmentContext(value) {
-    return isObject(value) && hasOwnFields(value, ['environment', 'source'])
-        && isStringEnum(value.environment, governanceEnvironmentValues)
-        && isStringEnum(value.source, governanceEnvironmentSources)
-        && (!Object.hasOwn(value, 'configIssue') || (typeof value.configIssue === 'string' && value.configIssue.length > 0));
-}
-function isGovernanceExperienceSnapshot(value) {
-    if (!isObject(value) || !hasOwnFields(value, ['schemaVersion', 'snapshotId', 'asOf', 'summary', 'readiness', 'activity', 'trustContext', 'dataQuality']))
-        return false;
-    if (value.schemaVersion !== '1' || typeof value.snapshotId !== 'string' || value.snapshotId.length === 0 || !isGovernanceTimestamp(value.asOf))
-        return false;
-    const { summary, readiness, activity, trustContext, dataQuality } = value;
-    if (!isObject(summary) || !hasOwnFields(summary, ['primaryAttention', 'headlineCode', 'reasonCode', 'nextActionCode'])
-        || !isStringEnum(summary.primaryAttention, governancePrimaryAttentions)
-        || typeof summary.headlineCode !== 'string' || summary.headlineCode.length === 0
-        || !isStringEnum(summary.reasonCode, governanceExperienceReasonCodes)
-        || !isStringEnum(summary.nextActionCode, governanceExperienceNextActionCodes))
-        return false;
-    if (!isObject(readiness) || !hasOwnFields(readiness, ['authenticationMode', 'ownerIdentityConfiguration', 'governanceActions'])
-        || !isStringEnum(readiness.authenticationMode, new Set(['authenticated', 'no_auth']))
-        || !isStringEnum(readiness.ownerIdentityConfiguration, new Set(['configured', 'missing', 'invalid']))
-        || !Array.isArray(readiness.governanceActions) || readiness.governanceActions.length !== 3
-        || !readiness.governanceActions.every(isGovernanceActionReadiness))
-        return false;
-    if (!isObject(activity) || !hasOwnFields(activity, ['primaryAttention', 'categories'])
-        || !isStringEnum(activity.primaryAttention, governancePrimaryAttentions)
-        || !Array.isArray(activity.categories)
-        || !activity.categories.every((category) => isObject(category)
-            && hasOwnFields(category, ['category', 'count', 'items', 'hasMore'])
-            && isStringEnum(category.category, governanceActivityCategories)
-            && typeof category.count === 'number' && Number.isInteger(category.count) && category.count >= 0
-            && Array.isArray(category.items) && category.items.length <= 10 && category.items.every(isGovernanceActivityItem)
-            && typeof category.hasMore === 'boolean'))
-        return false;
-    if (!isObject(trustContext) || !hasOwnFields(trustContext, ['environmentContext', 'lineageTransparency'])
-        || !isEnvironmentContext(trustContext.environmentContext)
-        || !isObject(trustContext.lineageTransparency)
-        || !hasOwnFields(trustContext.lineageTransparency, ['confidence', 'strongViewCount', 'weakViewCount', 'unknownViewCount'])
-        || !isStringEnum(trustContext.lineageTransparency.confidence, lineageConfidences)
-        || [trustContext.lineageTransparency.strongViewCount, trustContext.lineageTransparency.weakViewCount, trustContext.lineageTransparency.unknownViewCount]
-            .some(count => typeof count !== 'number' || !Number.isInteger(count) || count < 0))
-        return false;
-    return isObject(dataQuality) && hasOwnFields(dataQuality, ['degraded', 'issueGroups', 'hasMore'])
-        && typeof dataQuality.degraded === 'boolean' && typeof dataQuality.hasMore === 'boolean'
-        && Array.isArray(dataQuality.issueGroups) && dataQuality.issueGroups.length <= 10
-        && dataQuality.issueGroups.every((group) => isObject(group)
-            && hasOwnFields(group, ['source', 'reasonCode', 'nextActionCode', 'count', 'sampleRefs'])
-            && isStringEnum(group.source, governanceIssueGroupSources)
-            && typeof group.reasonCode === 'string' && group.reasonCode.length > 0
-            && typeof group.nextActionCode === 'string' && group.nextActionCode.length > 0
-            && typeof group.count === 'number' && Number.isInteger(group.count) && group.count >= 1
-            && isGovernanceSourceRefs(group.sampleRefs));
-}
-export function validateGovernanceExperienceSnapshot(value) {
-    return isGovernanceExperienceSnapshot(value) ? value : null;
-}
-export function validateErrorResponse(v) {
-    if (!isObject(v))
-        return null;
-    const result = {};
-    if (Object.hasOwn(v, 'message') && isString(v.message)) {
-        result.message = v.message;
-    }
-    if (Object.hasOwn(v, 'error') && isString(v.error)) {
-        result.error = v.error;
-    }
-    // N4 (PR-1083 review): surfacing the machine-readable `reason` field lets
-    // the UI branch on structured error codes instead of parsing natural
-    // language out of nextAction. Previously `nextAction.includes("32KB")`
-    // would silently regress to "saveFailed" the moment the backend phrased
-    // the cap differently or returned localized text.
-    if (Object.hasOwn(v, 'reason') && isString(v.reason)) {
-        result.reason = v.reason;
-    }
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction)) {
-        result.nextAction = v.nextAction;
-    }
-    return result;
-}
-// ── Request headers validator ─────────────────────────────────────────────────
-/**
- * Validates that `options.headers` is a plain object with string values.
- * Returns null if the value is not a valid headers object.
- * Used instead of `as Record<string, string>` on untrusted RequestInit.headers.
- */
-export function validateHeaders(v) {
-    if (v === undefined || v === null)
-        return null;
-    if (!isObject(v))
-        return null;
-    const result = {};
-    for (const key of Object.keys(v)) {
-        const value = v[key];
-        if (!isString(value))
-            return null;
-        result[key] = value;
-    }
-    return result;
-}
-export function validateFeedbackReport(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'createdAt') || !isString(v.createdAt))
-        return null;
-    if (!Object.hasOwn(v, 'report') || !isObject(v.report))
-        return null;
-    return { id: v.id, createdAt: v.createdAt, report: v.report };
-}
-export function validateFeedbackDraftsList(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'drafts') || !Array.isArray(v.drafts))
-        return null;
-    return validateArray(v.drafts, (item) => {
-        if (!isObject(item))
-            return null;
-        if (!Object.hasOwn(item, 'id') || !isString(item.id))
-            return null;
-        if (!Object.hasOwn(item, 'createdAt') || !isString(item.createdAt))
-            return null;
-        if (!Object.hasOwn(item, 'type') || !isString(item.type))
-            return null;
-        if (!Object.hasOwn(item, 'title') || !isString(item.title))
-            return null;
-        return { id: item.id, createdAt: item.createdAt, type: item.type, title: item.title };
-    });
-}
-export function validateFeedbackDraftEnvelope(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'report') || !isObject(v.report))
-        return null;
-    return { report: v.report };
-}
-export function validateDeleteEnvelope(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'deleted') || !isBoolean(v.deleted))
-        return null;
-    return { deleted: v.deleted };
-}
-function isValidChannelStatus(item) {
-    if (!Object.hasOwn(item, 'id') || !isString(item.id) || !FEEDBACK_CHANNEL_IDS.includes(item.id))
-        return null;
-    if (!Object.hasOwn(item, 'available') || !isBoolean(item.available))
-        return null;
-    const reason = readNullableString(item, 'reason');
-    const nextAction = readNullableString(item, 'nextAction');
-    if (!reason.valid || !nextAction.valid)
-        return null;
-    const status = { id: item.id, available: item.available };
-    if (reason.value !== null)
-        status.reason = reason.value;
-    if (nextAction.value !== null)
-        status.nextAction = nextAction.value;
-    return status;
-}
-export function validateFeedbackChannels(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'channels') || !Array.isArray(v.channels))
-        return null;
-    // Per-item leniency preserved: invalid channel entries are skipped, the
-    // envelope is not rejected (legacy behavior — a bad single probe must not
-    // hide the other channels).
-    const channels = [];
-    for (const item of v.channels) {
-        if (!isObject(item))
-            continue;
-        const status = isValidChannelStatus(item);
-        if (status !== null)
-            channels.push(status);
-    }
-    return { channels };
-}
-export function validateFeedbackSubmitResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'ok') || !isBoolean(v.ok))
-        return null;
-    if (!Object.hasOwn(v, 'alreadySubmitted') || !isBoolean(v.alreadySubmitted))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    const result = {
-        ok: v.ok,
-        alreadySubmitted: v.alreadySubmitted,
-        status: v.status,
-    };
-    const submittedVia = readNullableString(v, 'submittedVia');
-    const trackingId = readNullableString(v, 'trackingId');
-    const externalUrl = readNullableString(v, 'externalUrl');
-    const nextAction = readNullableString(v, 'nextAction');
-    if (!submittedVia.valid || !trackingId.valid || !externalUrl.valid || !nextAction.valid)
-        return null;
-    if (submittedVia.value !== null)
-        result.submittedVia = submittedVia.value;
-    if (trackingId.value !== null)
-        result.trackingId = trackingId.value;
-    if (externalUrl.value !== null)
-        result.externalUrl = externalUrl.value;
-    if (nextAction.value !== null)
-        result.nextAction = nextAction.value;
-    if (Object.hasOwn(v, 'writeBackFailed') && !isBoolean(v.writeBackFailed))
-        return null;
-    if (isBoolean(v.writeBackFailed))
-        result.writeBackFailed = v.writeBackFailed;
-    return result;
-}
-function validateWorkspaceConfig(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'workspaceName') || !isString(v.workspaceName))
-        return null;
-    if (!Object.hasOwn(v, 'enabled') || !isBoolean(v.enabled))
-        return null;
-    const displayName = readNullableString(v, 'displayName');
-    if (!displayName.valid)
-        return null;
-    if (!Object.hasOwn(v, 'syncEnabled') || !isBoolean(v.syncEnabled))
-        return null;
-    return {
-        workspaceName: v.workspaceName,
-        enabled: v.enabled,
-        displayName: displayName.value,
-        syncEnabled: v.syncEnabled,
-    };
-}
-export function validateWorkspaceEntry(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'name') || !isString(v.name))
-        return null;
-    if (!Object.hasOwn(v, 'path') || !isString(v.path))
-        return null;
-    const lastSync = readNullableString(v, 'lastSync');
-    if (!lastSync.valid)
-        return null;
-    let config = null;
-    if (Object.hasOwn(v, 'config') && v.config !== null) {
-        config = validateWorkspaceConfig(v.config);
-        if (config === null)
-            return null;
-    }
-    return {
-        name: v.name,
-        path: v.path,
-        lastSync: lastSync.value,
-        config,
-    };
-}
-export function validateWorkspaceList(v) {
-    return validateArray(v, validateWorkspaceEntry);
-}
-export function validateRemovedEnvelope(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'removed') || !isString(v.removed))
-        return null;
-    return { removed: v.removed };
-}
-export function validateSyncResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'success') || !isBoolean(v.success))
-        return null;
-    if (!Object.hasOwn(v, 'syncedAt') || !isString(v.syncedAt))
-        return null;
-    return { success: v.success, syncedAt: v.syncedAt };
-}
-function validateReadinessStatus(v) {
-    switch (v) {
-        case 'ready':
-        case 'not_ready':
-        case 'needs_setup':
-        case 'disabled':
-        case 'unknown':
-            return v;
-        default:
-            return null;
-    }
-}
-function validateRuntimeProfileSummary(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'type') || !isString(v.type))
-        return null;
-    if (!Object.hasOwn(v, 'label') || !isString(v.label))
-        return null;
-    if (Object.hasOwn(v, 'apiKeyEnv') && !isString(v.apiKeyEnv))
-        return null;
-    if (Object.hasOwn(v, 'provider') && !isString(v.provider))
-        return null;
-    if (Object.hasOwn(v, 'model') && !isString(v.model))
-        return null;
-    if (!Object.hasOwn(v, 'readiness'))
-        return null;
-    const readiness = validateReadinessStatus(v.readiness);
-    if (readiness === null)
-        return null;
-    return {
-        id: v.id, type: v.type, label: v.label,
-        ...(Object.hasOwn(v, 'apiKeyEnv') && isString(v.apiKeyEnv) ? { apiKeyEnv: v.apiKeyEnv } : {}),
-        ...(Object.hasOwn(v, 'provider') && isString(v.provider) ? { provider: v.provider } : {}),
-        ...(Object.hasOwn(v, 'model') && isString(v.model) ? { model: v.model } : {}),
-        readiness,
-    };
-}
-function validateFeatureSummary(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'category') || !isString(v.category))
-        return null;
-    if (!Object.hasOwn(v, 'enabled') || !isBoolean(v.enabled))
-        return null;
-    return { id: v.id, category: v.category, enabled: v.enabled };
-}
-function validateAgentSummary(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'name') || !isString(v.name))
-        return null;
-    if (!Object.hasOwn(v, 'enabled') || !isBoolean(v.enabled))
-        return null;
-    if (!Object.hasOwn(v, 'runtimeProfileId') || !isString(v.runtimeProfileId))
-        return null;
-    if (!Object.hasOwn(v, 'runtimeProfileLabel') || !isString(v.runtimeProfileLabel))
-        return null;
-    if (!Object.hasOwn(v, 'readiness'))
-        return null;
-    const readiness = validateReadinessStatus(v.readiness);
-    if (readiness === null)
-        return null;
-    return { name: v.name, enabled: v.enabled, runtimeProfileId: v.runtimeProfileId, runtimeProfileLabel: v.runtimeProfileLabel, readiness };
-}
-function validateConfigError(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'path') || !isString(v.path))
-        return null;
-    if (!Object.hasOwn(v, 'reason') || !isString(v.reason))
-        return null;
-    if (!Object.hasOwn(v, 'nextAction') || !isString(v.nextAction))
-        return null;
-    return { path: v.path, reason: v.reason, nextAction: v.nextAction };
-}
-function validateConfigSource(v) {
-    switch (v) {
-        case 'defaults':
-        case 'user_config':
-            return v;
-        default:
-            return null;
-    }
-}
-export function validateConfigSummary(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'version') || !isNumber(v.version))
-        return null;
-    if (!Object.hasOwn(v, 'source'))
-        return null;
-    const source = validateConfigSource(v.source);
-    if (source === null)
-        return null;
-    if (!Object.hasOwn(v, 'features') || !Array.isArray(v.features))
-        return null;
-    if (!Object.hasOwn(v, 'runtimeProfiles') || !Array.isArray(v.runtimeProfiles))
-        return null;
-    if (!Object.hasOwn(v, 'defaultRuntime') || !isString(v.defaultRuntime))
-        return null;
-    if (!Object.hasOwn(v, 'agents') || !Array.isArray(v.agents))
-        return null;
-    if (!Object.hasOwn(v, 'ui') || !isObject(v.ui))
-        return null;
-    if (!Object.hasOwn(v, 'warnings') || !Array.isArray(v.warnings))
-        return null;
-    const features = validateArray(v.features, validateFeatureSummary);
-    if (features === null)
-        return null;
-    const runtimeProfiles = validateArray(v.runtimeProfiles, validateRuntimeProfileSummary);
-    if (runtimeProfiles === null)
-        return null;
-    const agents = validateArray(v.agents, validateAgentSummary);
-    if (agents === null)
-        return null;
-    const warnings = validateArray(v.warnings, (el) => isString(el) ? el : null);
-    if (warnings === null)
-        return null;
-    // ui.diagnostics.mode
-    const { ui } = v;
-    if (!Object.hasOwn(ui, 'diagnostics') || !isObject(ui.diagnostics))
-        return null;
-    if (!Object.hasOwn(ui.diagnostics, 'mode') || !isString(ui.diagnostics.mode))
-        return null;
-    let errors;
-    if (Object.hasOwn(v, 'errors') && Array.isArray(v.errors)) {
-        errors = validateArray(v.errors, validateConfigError) ?? undefined;
-    }
-    return {
-        version: v.version, source, features, runtimeProfiles,
-        defaultRuntime: v.defaultRuntime, agents,
-        ui: { diagnostics: { mode: ui.diagnostics.mode } },
-        warnings, errors,
-    };
-}
-export function validateConfigCatalog(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'profiles') || !Array.isArray(v.profiles))
-        return null;
-    const profiles = validateArray(v.profiles, validateRuntimeProfileSummary);
-    if (profiles === null)
-        return null;
-    let errors;
-    if (Object.hasOwn(v, 'errors') && Array.isArray(v.errors)) {
-        errors = validateArray(v.errors, validateConfigError) ?? undefined;
-    }
-    return { profiles, errors };
-}
-export function validateAgentBindingUpdate(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'agent') || !isString(v.agent))
-        return null;
-    if (!Object.hasOwn(v, 'runtimeProfile') || !isString(v.runtimeProfile))
-        return null;
-    if (!Object.hasOwn(v, 'enabled') || !isBoolean(v.enabled))
-        return null;
-    return { agent: v.agent, runtimeProfile: v.runtimeProfile, enabled: v.enabled };
-}
-export function validateFeatureFlagUpdate(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'feature') || !isString(v.feature))
-        return null;
-    if (!Object.hasOwn(v, 'enabled') || !isBoolean(v.enabled))
-        return null;
-    return { feature: v.feature, enabled: v.enabled };
-}
-export function validateReadinessCheck(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'agent') || !isString(v.agent))
-        return null;
-    if (!Object.hasOwn(v, 'readiness'))
-        return null;
-    const readiness = validateReadinessStatus(v.readiness);
-    if (readiness === null)
-        return null;
-    if (!Object.hasOwn(v, 'profileId') || !isString(v.profileId))
-        return null;
-    if (!Object.hasOwn(v, 'profileLabel') || !isString(v.profileLabel))
-        return null;
-    const result = { agent: v.agent, readiness, profileId: v.profileId, profileLabel: v.profileLabel };
-    if (Object.hasOwn(v, 'reason') && isString(v.reason))
-        result.reason = v.reason;
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction))
-        result.nextAction = v.nextAction;
-    return result;
-}
-export function validateDefaultRuntimeUpdate(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'defaultRuntime') || !isString(v.defaultRuntime))
-        return null;
-    return { defaultRuntime: v.defaultRuntime };
-}
-export function validateRuntimeProfileMutation(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'profileId') || !isString(v.profileId))
-        return null;
-    if (!Object.hasOwn(v, 'profile') || !isObject(v.profile))
-        return null;
-    const { profile } = v;
-    if (!Object.hasOwn(profile, 'type') || !isString(profile.type))
-        return null;
-    // Bind narrowed string to a local so the return literal keeps `type: string`
-    // (spreading a Record<string, unknown> alone would widen `type` back to unknown).
-    const profileType = profile.type;
-    return { profileId: v.profileId, profile: { ...profile, type: profileType } };
-}
-function validateHealthCheckItem(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'name') || !isString(v.name))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    if (!Object.hasOwn(v, 'message') || !isString(v.message))
-        return null;
-    if (!Object.hasOwn(v, 'lastCheck') || !isString(v.lastCheck))
-        return null;
-    return { id: v.id, name: v.name, status: v.status, message: v.message, lastCheck: v.lastCheck };
-}
-export function validateConfigReadiness(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'checks') || !Array.isArray(v.checks))
-        return null;
-    if (!Object.hasOwn(v, 'generatedAt') || !isString(v.generatedAt))
-        return null;
-    const checks = validateArray(v.checks, validateHealthCheckItem);
-    if (checks === null)
-        return null;
-    return { checks, generatedAt: v.generatedAt };
-}
-function validateStagnationSignal(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'type') || !isString(v.type))
-        return null;
-    if (!Object.hasOwn(v, 'principleId') || !isString(v.principleId))
-        return null;
-    if (!Object.hasOwn(v, 'daysSince') || !isNumber(v.daysSince))
-        return null;
-    return { type: v.type, principleId: v.principleId, daysSince: v.daysSince };
-}
-const VALID_GOVERNANCE_STATES = new Set(['none', 'in_progress', 'owner_review_ready', 'degraded']);
-const VALID_STATE_REASON_CODES = new Set([
-    'state_db_missing', 'no_pipeline_activity', 'pending_approvals',
-    'tasks_need_human_review',
-    'pipeline_active', 'consumed_candidates', 'degraded_state',
-]);
-const VALID_NEXT_ACTION_CODES = new Set([
-    'run_config_doctor', 'wait_for_pipeline', 'review_approvals',
-    'review_failed_tasks',
-    'check_degraded_signals', 'check_pipeline_status',
-]);
-const VALID_DEGRADED_REASON_CODES = new Set(['task_retry_wait', 'task_failed', 'approval_table_missing', 'trajectory_db_unavailable']);
-const VALID_DEGRADED_NEXT_ACTION_CODES = new Set(['check_task_status', 'fix_and_retry', 'run_integrity_check', 'check_trajectory_db']);
-function validateDegradedSignal(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'reasonCode') || !isString(v.reasonCode))
-        return null;
-    if (!VALID_DEGRADED_REASON_CODES.has(v.reasonCode))
-        return null;
-    if (!Object.hasOwn(v, 'nextActionCode') || !isString(v.nextActionCode))
-        return null;
-    if (!VALID_DEGRADED_NEXT_ACTION_CODES.has(v.nextActionCode))
-        return null;
-    if (!Object.hasOwn(v, 'reason') || !isString(v.reason))
-        return null;
-    if (!Object.hasOwn(v, 'nextAction') || !isString(v.nextAction))
-        return null;
-    if (!Object.hasOwn(v, 'source') || !isString(v.source))
-        return null;
-    return {
-        reasonCode: v.reasonCode,
-        nextActionCode: v.nextActionCode,
-        reason: v.reason,
-        nextAction: v.nextAction,
-        source: v.source,
-    };
-}
-function validateFailedTaskDetailRun(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'runId') || !isString(v.runId))
-        return null;
-    // Required by the RunRecord contract and by the lineage check in
-    // validateFailedTaskDetail (rc-6): a run must name the task it belongs to.
-    if (!Object.hasOwn(v, 'taskId') || !isString(v.taskId))
-        return null;
-    if (!Object.hasOwn(v, 'attemptNumber') || !isNumber(v.attemptNumber))
-        return null;
-    if (!Object.hasOwn(v, 'executionStatus') || !isString(v.executionStatus))
-        return null;
-    if (!Object.hasOwn(v, 'startedAt') || !isString(v.startedAt))
-        return null;
-    const endedAt = readNullableString(v, 'endedAt');
-    if (!endedAt.valid)
-        return null;
-    const reason = readNullableString(v, 'reason');
-    if (!reason.valid)
-        return null;
-    const errorCategory = readNullableString(v, 'errorCategory');
-    if (!errorCategory.valid)
-        return null;
-    return {
-        runId: v.runId,
-        taskId: v.taskId,
-        attemptNumber: v.attemptNumber,
-        executionStatus: v.executionStatus,
-        startedAt: v.startedAt,
-        endedAt: endedAt.value,
-        reason: reason.value,
-        errorCategory: errorCategory.value,
-    };
-}
-export function validateFailedTaskDetail(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'task') || !isObject(v.task))
-        return null;
-    if (!Object.hasOwn(v, 'runs') || !Array.isArray(v.runs))
-        return null;
-    const t = v.task;
-    if (!Object.hasOwn(t, 'taskId') || !isString(t.taskId))
-        return null;
-    if (!Object.hasOwn(t, 'taskKind') || !isString(t.taskKind))
-        return null;
-    if (!Object.hasOwn(t, 'status') || !isString(t.status))
-        return null;
-    if (!Object.hasOwn(t, 'createdAt') || !isString(t.createdAt))
-        return null;
-    // updatedAt is required on the server's TaskRecord (typebox: no .optional())
-    // — required here too, so contract drift reaches the validation-error state
-    // instead of a silently partial record (rc-3).
-    if (!Object.hasOwn(t, 'updatedAt') || !isString(t.updatedAt))
-        return null;
-    if (!Object.hasOwn(t, 'attemptCount') || !isNumber(t.attemptCount))
-        return null;
-    if (!Object.hasOwn(t, 'maxAttempts') || !isNumber(t.maxAttempts))
-        return null;
-    const taskLastError = readNullableString(t, 'lastError');
-    if (!taskLastError.valid)
-        return null;
-    const topLastError = readNullableString(v, 'lastError');
-    if (!topLastError.valid)
-        return null;
-    const runs = validateArray(v.runs, validateFailedTaskDetailRun);
-    if (runs === null)
-        return null;
-    // rc-6-lineage-consistency: every run must belong to THIS task — a detail
-    // response mixing another task's runs would display foreign failure reasons.
-    for (const run of runs) {
-        if (run.taskId !== t.taskId)
-            return null;
-    }
-    return {
-        taskId: t.taskId,
-        taskKind: t.taskKind,
-        status: t.status,
-        createdAt: t.createdAt,
-        updatedAt: t.updatedAt,
-        attemptCount: t.attemptCount,
-        maxAttempts: t.maxAttempts,
-        lastError: topLastError.value ?? taskLastError.value,
-        runs,
-    };
-}
-export function validateRecoveryResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'taskId') || !isString(v.taskId))
-        return null;
-    if (!Object.hasOwn(v, 'previousStatus') || !isString(v.previousStatus))
-        return null;
-    if (!Object.hasOwn(v, 'newStatus') || !isString(v.newStatus))
-        return null;
-    if (!Object.hasOwn(v, 'result') || !isString(v.result))
-        return null;
-    const result = {
-        taskId: v.taskId,
-        previousStatus: v.previousStatus,
-        newStatus: v.newStatus,
-        result: v.result,
-    };
-    if (Object.hasOwn(v, 'forceApplied')) {
-        if (!isBoolean(v.forceApplied))
-            return null;
-        result.forceApplied = v.forceApplied;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    return result;
-}
-export function validateGovernanceQueue(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'pendingReviewCount') || !isNumber(v.pendingReviewCount))
-        return null;
-    if (!Object.hasOwn(v, 'behaviorDeviationCount') || !isNumber(v.behaviorDeviationCount))
-        return null;
-    if (!Object.hasOwn(v, 'stagnationSignals') || !Array.isArray(v.stagnationSignals))
-        return null;
-    if (!Object.hasOwn(v, 'governanceState') || !isString(v.governanceState))
-        return null;
-    if (!VALID_GOVERNANCE_STATES.has(v.governanceState))
-        return null;
-    if (!Object.hasOwn(v, 'stateReasonCode') || !isString(v.stateReasonCode))
-        return null;
-    if (!VALID_STATE_REASON_CODES.has(v.stateReasonCode))
-        return null;
-    if (!Object.hasOwn(v, 'nextActionCode') || !isString(v.nextActionCode))
-        return null;
-    if (!VALID_NEXT_ACTION_CODES.has(v.nextActionCode))
-        return null;
-    if (!Object.hasOwn(v, 'stateReason') || !isString(v.stateReason))
-        return null;
-    if (!Object.hasOwn(v, 'nextAction') || !isString(v.nextAction))
-        return null;
-    const signals = validateArray(v.stagnationSignals, validateStagnationSignal);
-    if (signals === null)
-        return null;
-    const result = {
-        pendingReviewCount: v.pendingReviewCount,
-        behaviorDeviationCount: v.behaviorDeviationCount,
-        stagnationSignals: signals,
-        governanceState: VALID_GOVERNANCE_STATES.has(v.governanceState)
-            ? v.governanceState
-            : 'none',
-        stateReasonCode: v.stateReasonCode,
-        nextActionCode: v.nextActionCode,
-        stateReason: v.stateReason,
-        nextAction: v.nextAction,
-    };
-    // Optional fields — fail loud when present but wrong type (ERR-009)
-    if (Object.hasOwn(v, 'inProgressSummary')) {
-        if (!isString(v.inProgressSummary))
-            return null;
-        result.inProgressSummary = v.inProgressSummary;
-    }
-    if (Object.hasOwn(v, 'degradedSignals')) {
-        if (!Array.isArray(v.degradedSignals))
-            return null;
-        const ds = validateArray(v.degradedSignals, validateDegradedSignal);
-        if (ds === null)
-            return null;
-        result.degradedSignals = ds;
-    }
-    if (Object.hasOwn(v, 'note')) {
-        if (!isString(v.note))
-            return null;
-        result.note = v.note;
-    }
-    if (Object.hasOwn(v, 'generatedAt')) {
-        if (!isString(v.generatedAt))
-            return null;
-        result.generatedAt = v.generatedAt;
-    }
-    // PRI-380: evidence in progress count
-    if (Object.hasOwn(v, 'evidenceInProgressCount')) {
-        if (!isNumber(v.evidenceInProgressCount))
-            return null;
-        result.evidenceInProgressCount = v.evidenceInProgressCount;
-    }
-    // Governance Recovery Actions v1: needs_human_review task count
-    if (Object.hasOwn(v, 'pendingHumanReviewCount')) {
-        if (!isNumber(v.pendingHumanReviewCount))
-            return null;
-        result.pendingHumanReviewCount = v.pendingHumanReviewCount;
-    }
-    // Wave 4: gate blocks today (seconds-level auto-blocks)
-    if (Object.hasOwn(v, 'gateBlocksToday')) {
-        if (!isNumber(v.gateBlocksToday))
-            return null;
-        result.gateBlocksToday = v.gateBlocksToday;
-    }
-    return result;
-}
-const PROMPT_INJECTION_STATUS_KINDS = new Set([
-    'injectable', 'oversized', 'model_dependent', 'window_excluded', 'resolution_failed', 'route_unconfirmed',
-]);
-/** rc-1..rc-4: validate the per-activation injection status as untrusted input. */
-function validatePromptActivationInjectionStatus(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'activationId') || !isString(v.activationId))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status) || !PROMPT_INJECTION_STATUS_KINDS.has(v.status))
-        return null;
-    const result = { activationId: v.activationId, status: v.status };
-    if (Object.hasOwn(v, 'inCurrentWindow') && typeof v.inCurrentWindow === 'boolean')
-        result.inCurrentWindow = v.inCurrentWindow;
-    if (Object.hasOwn(v, 'costChars') && typeof v.costChars === 'number' && Number.isInteger(v.costChars) && v.costChars >= 0)
-        result.costChars = v.costChars;
-    if (Object.hasOwn(v, 'budget') && typeof v.budget === 'number' && Number.isInteger(v.budget) && v.budget > 0)
-        result.budget = v.budget;
-    if (Object.hasOwn(v, 'budgetScope') && (v.budgetScope === 'selected_lines' || v.budgetScope === 'full_directive_context'))
-        result.budgetScope = v.budgetScope;
-    if (Object.hasOwn(v, 'route') && (v.route === 'legacy_trim' || v.route === 'shared_render'))
-        result.route = v.route;
-    if (Object.hasOwn(v, 'reason') && isString(v.reason))
-        result.reason = v.reason;
-    if (Object.hasOwn(v, 'perHostFits') && Array.isArray(v.perHostFits)) {
-        const perHostFits = [];
-        for (const entry of v.perHostFits) {
-            if (!isObject(entry))
-                return null;
-            if ((entry.hostKind !== 'openclaw' && entry.hostKind !== 'codex' && entry.hostKind !== 'workbuddy')
-                || (entry.tierFit !== 'fits_all_tiers' && entry.tierFit !== 'model_dependent' && entry.tierFit !== 'exceeds_max_tier'))
-                return null;
-            perHostFits.push({ hostKind: entry.hostKind, tierFit: entry.tierFit });
-        }
-        result.perHostFits = perHostFits;
-    }
-    return result;
-}
-function validateActivationRecord(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'activationId') || !isString(v.activationId))
-        return null;
-    if (!Object.hasOwn(v, 'artifactId') || !isString(v.artifactId))
-        return null;
-    if (!Object.hasOwn(v, 'principleId') || !isString(v.principleId))
-        return null;
-    if (!Object.hasOwn(v, 'channel') || !isString(v.channel))
-        return null;
-    if (!Object.hasOwn(v, 'action') || !isString(v.action))
-        return null;
-    if (!Object.hasOwn(v, 'targetRef') || !isString(v.targetRef))
-        return null;
-    const activatedAt = readNullableString(v, 'activatedAt');
-    if (!activatedAt.valid)
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    const enforcement = Object.hasOwn(v, 'enforcement') && (v.enforcement === 'eligible' || v.enforcement === 'safety_isolated')
-        ? v.enforcement
-        : undefined;
-    return {
-        activationId: v.activationId, artifactId: v.artifactId, principleId: v.principleId,
-        channel: v.channel, action: v.action, targetRef: v.targetRef,
-        activatedAt: activatedAt.value,
-        status: v.status,
-        ...(enforcement ? { enforcement } : {}),
-        ...(Object.hasOwn(v, 'legacyDecisionUnknown') && v.legacyDecisionUnknown === true ? { legacyDecisionUnknown: true } : {}),
-        ...(Object.hasOwn(v, 'ownerReviewDueAt') && isString(v.ownerReviewDueAt) ? { ownerReviewDueAt: v.ownerReviewDueAt } : {}),
-        ...(Object.hasOwn(v, 'promptInjection')
-            ? (() => { const s = validatePromptActivationInjectionStatus(v.promptInjection); return s !== null ? { promptInjection: s } : {}; })()
-            : {}),
-    };
-}
-export function validateActivations(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'activations') || !Array.isArray(v.activations))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    const activations = validateArray(v.activations, validateActivationRecord);
-    if (activations === null)
-        return null;
-    const result = { activations, status: v.status };
-    if (Object.hasOwn(v, 'reason') && isString(v.reason))
-        result.reason = v.reason;
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction))
-        result.nextAction = v.nextAction;
-    if (Object.hasOwn(v, 'promptInjectionRoute') && isObject(v.promptInjectionRoute)) {
-        const route = v.promptInjectionRoute;
-        if ((route.status === 'confirmed' || route.status === 'unconfirmed') && typeof route.flagEnabled === 'boolean') {
-            const summary = { status: route.status, flagEnabled: route.flagEnabled };
-            if (Object.hasOwn(route, 'hostKind') && (route.hostKind === 'openclaw' || route.hostKind === 'codex' || route.hostKind === 'workbuddy'))
-                summary.hostKind = route.hostKind;
-            if (Object.hasOwn(route, 'route') && (route.route === 'legacy_trim' || route.route === 'shared_render'))
-                summary.route = route.route;
-            if (Object.hasOwn(route, 'unconfirmedReason') && isString(route.unconfirmedReason))
-                summary.unconfirmedReason = route.unconfirmedReason;
-            if (Object.hasOwn(route, 'nextAction') && isString(route.nextAction))
-                summary.nextAction = route.nextAction;
-            if (Object.hasOwn(route, 'globalReason') && isString(route.globalReason))
-                summary.globalReason = route.globalReason;
-            // PRI-1017: runtime budget observation timestamp the per-row budget
-            // figures were computed under (additive, drop-on-invalid).
-            if (Object.hasOwn(route, 'budgetObservedAt') && isString(route.budgetObservedAt) && route.budgetObservedAt.length > 0 && Number.isFinite(Date.parse(route.budgetObservedAt))) {
-                summary.budgetObservedAt = route.budgetObservedAt;
-            }
-            if (Object.hasOwn(route, 'budgetCapacitySource') && isPromptBudgetCapacitySource(route.budgetCapacitySource)) {
-                summary.budgetCapacitySource = route.budgetCapacitySource;
-            }
-            if (Object.hasOwn(route, 'budgetCapacityStatus') && isPromptBudgetCapacityStatus(route.budgetCapacityStatus)) {
-                summary.budgetCapacityStatus = route.budgetCapacityStatus;
-            }
-            if (Object.hasOwn(route, 'budgetContextWindowTokens') && typeof route.budgetContextWindowTokens === 'number'
-                && Number.isInteger(route.budgetContextWindowTokens) && route.budgetContextWindowTokens > 0) {
-                summary.budgetContextWindowTokens = route.budgetContextWindowTokens;
-            }
-            if (Object.hasOwn(route, 'budgetFallbackReason') && isPromptBudgetFallbackReason(route.budgetFallbackReason)) {
-                summary.budgetFallbackReason = route.budgetFallbackReason;
-            }
-            result.promptInjectionRoute = summary;
-        }
-    }
-    return result;
-}
-function validateTelemetryWindow(value) {
-    if (!isObject(value))
-        return null;
-    const keys = ['eligible', 'matched', 'blocked', 'unhealthy'];
-    if (!keys.every(key => value[key] === null || isNumber(value[key])) || !isNumber(value.circuitTrips))
-        return null;
-    if (value.toolDistribution !== null && (!isObject(value.toolDistribution) || !Object.values(value.toolDistribution).every(isNumber)))
-        return null;
-    return { eligible: typeof value.eligible === 'number' ? value.eligible : null, matched: typeof value.matched === 'number' ? value.matched : null, blocked: typeof value.blocked === 'number' ? value.blocked : null, unhealthy: typeof value.unhealthy === 'number' ? value.unhealthy : null, circuitTrips: value.circuitTrips, toolDistribution: isObject(value.toolDistribution) ? Object.fromEntries(Object.entries(value.toolDistribution).filter((entry) => typeof entry[1] === 'number')) : null };
-}
-function validateRuleCodeDecision(value) {
-    if (!isObject(value) || !isString(value.decisionId) || !isString(value.decision)
-        || !isObject(value.principal) || !isString(value.principal.kind)
-        || !isObject(value.authentication) || !isString(value.authentication.method)
-        || !isString(value.reasonCode) || (value.note !== null && !isString(value.note))
-        || !isString(value.decidedAt))
-        return null;
-    const actorId = typeof value.principal.ownerId === 'string'
-        ? value.principal.ownerId
-        : typeof value.principal.policyVersion === 'string'
-            ? value.principal.policyVersion
-            : typeof value.principal.reason === 'string' ? value.principal.reason : value.principal.kind;
-    return {
-        decisionId: value.decisionId,
-        decision: value.decision,
-        principalKind: value.principal.kind,
-        actorId,
-        authenticationMethod: value.authentication.method,
-        reasonCode: value.reasonCode,
-        note: typeof value.note === 'string' ? value.note : null,
-        decidedAt: value.decidedAt,
-    };
-}
-export function validateRuleCodeOwnerReview(v) {
-    if (!isObject(v) || !isObject(v.activation) || !isObject(v.artifact) || !isObject(v.readiness))
-        return null;
-    const { activation, artifact, readiness } = v;
-    if (!isString(activation.activationId) || !isString(activation.artifactId) || !isString(activation.action)
-        || !isString(artifact.artifactId) || !isString(artifact.digest)
-        || (artifact.content !== null && !isObject(artifact.content))
-        || !isString(readiness.status) || !['ready', 'evidence_insufficient', 'blocked', 'unavailable'].includes(readiness.status)
-        || !isString(readiness.evaluationId) || !Array.isArray(readiness.failedChecks)
-        || !readiness.failedChecks.every(item => isObject(item) && isString(item.checkId) && isString(item.reasonCode))
-        || !isObject(readiness.evidenceSnapshot) || !isString(readiness.evidenceSnapshot.snapshotDigest)
-        || !isObject(readiness.evidenceSnapshot.shadowSummary) || !Array.isArray(readiness.evidenceSnapshot.safetyGateResults)
-        || !readiness.evidenceSnapshot.safetyGateResults.every(item => isObject(item) && isString(item.checkId) && (item.status === 'passed' || item.status === 'failed') && (!Object.hasOwn(item, 'reasonCode') || isString(item.reasonCode))))
-        return null;
-    const summary = readiness.evidenceSnapshot.shadowSummary;
-    const summaryCounts = ['observed', 'matched', 'wouldBlock', 'wouldAllow', 'requireApproval', 'autoCorrect', 'errors', 'neutralControl'];
-    if (!summaryCounts.every(key => summary[key] === null || isNumber(summary[key])))
-        return null;
-    if (![summary.firstObservedAt, summary.lastObservedAt].every(value => value === null || isString(value)))
-        return null;
-    let controlState = null;
-    if (v.controlState !== null) {
-        if (!isObject(v.controlState) || (v.controlState.enforcement !== 'eligible' && v.controlState.enforcement !== 'safety_isolated') || !isNumber(v.controlState.version))
-            return null;
-        controlState = { enforcement: v.controlState.enforcement, version: v.controlState.version };
-    }
-    let globalPause = null;
-    if (v.globalPause !== null) {
-        if (!isObject(v.globalPause) || !isString(v.globalPause.pauseId) || (v.globalPause.status !== 'paused' && v.globalPause.status !== 'released') || !isNumber(v.globalPause.version))
-            return null;
-        globalPause = { pauseId: v.globalPause.pauseId, status: v.globalPause.status, version: v.globalPause.version };
-    }
-    if (!isBoolean(v.ownerDecisionEnabled))
-        return null;
-    if (!Array.isArray(v.decisions) || !isObject(v.runtimeCapability) || !isString(v.runtimeCapability.hostRuntimeVersion) || !isBoolean(v.runtimeCapability.shadowEvidence) || !isObject(v.liveMetrics) || !Array.isArray(v.liveMetrics.representativeSamples) || !v.liveMetrics.representativeSamples.every(sample => isObject(sample) && isString(sample.toolName) && isString(sample.decision) && isString(sample.pathCategory)) || !isObject(v.behaviorDrift))
-        return null;
-    const { behaviorDrift } = v;
-    const decisions = v.decisions.map(validateRuleCodeDecision);
-    if (decisions.some(decision => decision === null))
-        return null;
-    const driftKeys = ['approvedBlockRate', 'liveBlockRate', 'delta'];
-    if (!driftKeys.every(key => behaviorDrift[key] === null || isNumber(behaviorDrift[key])))
-        return null;
-    const last24Hours = validateTelemetryWindow(v.liveMetrics.last24Hours);
-    const last7Days = validateTelemetryWindow(v.liveMetrics.last7Days);
-    if (!last24Hours || !last7Days)
-        return null;
-    const readinessStatus = readiness.status === 'ready' || readiness.status === 'evidence_insufficient' || readiness.status === 'blocked' || readiness.status === 'unavailable' ? readiness.status : null;
-    const shadowSummary = {
-        observed: typeof summary.observed === 'number' ? summary.observed : null,
-        matched: typeof summary.matched === 'number' ? summary.matched : null,
-        wouldBlock: typeof summary.wouldBlock === 'number' ? summary.wouldBlock : null,
-        wouldAllow: typeof summary.wouldAllow === 'number' ? summary.wouldAllow : null,
-        requireApproval: typeof summary.requireApproval === 'number' ? summary.requireApproval : null,
-        autoCorrect: typeof summary.autoCorrect === 'number' ? summary.autoCorrect : null,
-        errors: typeof summary.errors === 'number' ? summary.errors : null,
-        neutralControl: typeof summary.neutralControl === 'number' ? summary.neutralControl : null,
-        firstObservedAt: typeof summary.firstObservedAt === 'string' ? summary.firstObservedAt : null,
-        lastObservedAt: typeof summary.lastObservedAt === 'string' ? summary.lastObservedAt : null,
-    };
-    if (readinessStatus === null)
-        return null;
-    return {
-        activation: { activationId: activation.activationId, artifactId: activation.artifactId, action: activation.action },
-        artifact: { artifactId: artifact.artifactId, digest: artifact.digest, content: artifact.content },
-        readiness: { status: readinessStatus, evaluationId: readiness.evaluationId, failedChecks: readiness.failedChecks.map(item => ({ checkId: item.checkId, reasonCode: item.reasonCode })), evidenceSnapshot: { snapshotDigest: readiness.evidenceSnapshot.snapshotDigest, shadowSummary, safetyGateResults: readiness.evidenceSnapshot.safetyGateResults.map(item => ({ checkId: item.checkId, status: item.status, ...(typeof item.reasonCode === 'string' ? { reasonCode: item.reasonCode } : {}) })) } },
-        controlState, globalPause, decisions: decisions.filter((decision) => decision !== null), ownerDecisionEnabled: v.ownerDecisionEnabled,
-        runtimeCapability: { hostRuntimeVersion: v.runtimeCapability.hostRuntimeVersion, shadowEvidence: v.runtimeCapability.shadowEvidence },
-        liveMetrics: { last24Hours, last7Days, representativeSamples: v.liveMetrics.representativeSamples.map(sample => ({ toolName: sample.toolName, decision: sample.decision, pathCategory: sample.pathCategory })) },
-        behaviorDrift: {
-            approvedBlockRate: typeof behaviorDrift.approvedBlockRate === 'number' ? behaviorDrift.approvedBlockRate : null,
-            liveBlockRate: typeof behaviorDrift.liveBlockRate === 'number' ? behaviorDrift.liveBlockRate : null,
-            delta: typeof behaviorDrift.delta === 'number' ? behaviorDrift.delta : null,
-        },
-    };
-}
-export function validateRuleCodeMutation(v) {
-    if (!isObject(v))
-        return null;
-    const result = {};
-    for (const key of ['decisionId', 'activationId', 'status', 'pauseId']) {
-        if (Object.hasOwn(v, key)) {
-            if (!isString(v[key]))
-                return null;
-            result[key] = v[key];
-        }
-    }
-    if (Object.hasOwn(v, 'version')) {
-        if (!isNumber(v.version))
-            return null;
-        result.version = v.version;
-    }
-    return result;
-}
-export function validateDisableActivation(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'activationId') || !isString(v.activationId))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    return { activationId: v.activationId, status: v.status };
-}
-function validateLifecycleAdherence(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'insufficientData') || !isBoolean(v.insufficientData))
-        return null;
-    const rate = readNullableNumber(v, 'rate');
-    if (!rate.valid)
-        return null;
-    if (!Object.hasOwn(v, 'note') || !isString(v.note))
-        return null;
-    return {
-        insufficientData: v.insufficientData,
-        rate: rate.value,
-        note: v.note,
-    };
-}
-function validateLifecycleRuleMetric(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'ruleId') || !isString(v.ruleId))
-        return null;
-    if (!Object.hasOwn(v, 'triggered') || !isNumber(v.triggered))
-        return null;
-    const lastTriggeredAt = readNullableString(v, 'lastTriggeredAt');
-    if (!lastTriggeredAt.valid)
-        return null;
-    return {
-        ruleId: v.ruleId, triggered: v.triggered,
-        lastTriggeredAt: lastTriggeredAt.value,
-    };
-}
-export function validateLifecycleMetrics(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'principleId') || !isString(v.principleId))
-        return null;
-    if (!Object.hasOwn(v, 'adherence'))
-        return null;
-    const adherence = validateLifecycleAdherence(v.adherence);
-    if (adherence === null)
-        return null;
-    if (!Object.hasOwn(v, 'ruleMetrics') || !Array.isArray(v.ruleMetrics))
-        return null;
-    const ruleMetrics = validateArray(v.ruleMetrics, validateLifecycleRuleMetric);
-    if (ruleMetrics === null)
-        return null;
-    return { principleId: v.principleId, adherence, ruleMetrics };
-}
-const UPDATE_STATES = ['up_to_date', 'update_available', 'update_blocked', 'check_failed'];
-export function validateUpdateStatus(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'currentVersion') || !isString(v.currentVersion))
-        return null;
-    if (!Object.hasOwn(v, 'latestVersion') || !isString(v.latestVersion))
-        return null;
-    if (!Object.hasOwn(v, 'hasUpdate') || !isBoolean(v.hasUpdate))
-        return null;
-    const result = {
-        currentVersion: v.currentVersion,
-        latestVersion: v.latestVersion,
-        hasUpdate: v.hasUpdate,
-    };
-    if (Object.hasOwn(v, 'state') && isString(v.state) && UPDATE_STATES.includes(v.state)) {
-        result.state = v.state;
-    }
-    if (Object.hasOwn(v, 'error') && isString(v.error)) {
-        result.error = v.error;
-    }
-    if (Object.hasOwn(v, 'message') && isString(v.message))
-        result.message = v.message;
-    if (Object.hasOwn(v, 'reason') && isString(v.reason))
-        result.reason = v.reason;
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction))
-        result.nextAction = v.nextAction;
-    if (Object.hasOwn(v, 'versionSource') && (v.versionSource === 'active-release' || v.versionSource === 'plugin-package')) {
-        result.versionSource = v.versionSource;
-    }
-    if (Object.hasOwn(v, 'identityDivergence') && isObject(v.identityDivergence)) {
-        const divergence = v.identityDivergence;
-        if (Object.hasOwn(divergence, 'activeVersion') && isString(divergence.activeVersion)
-            && Object.hasOwn(divergence, 'pluginVersion') && isString(divergence.pluginVersion)
-            && Object.hasOwn(divergence, 'releaseId') && isString(divergence.releaseId)
-            && Object.hasOwn(divergence, 'generation') && typeof divergence.generation === 'number') {
-            result.identityDivergence = {
-                activeVersion: divergence.activeVersion,
-                pluginVersion: divergence.pluginVersion,
-                releaseId: divergence.releaseId,
-                generation: divergence.generation,
-            };
-        }
-    }
-    return result;
-}
-export const UPDATE_HISTORY_KINDS = [
-    'update',
-    'reinstall',
-    'legacy_migration',
-    'rollback',
-    'refusal',
-    'failure',
-    'recovery',
-    'unknown',
-];
-function isUpdateHistoryKind(value) {
-    return typeof value === 'string' && UPDATE_HISTORY_KINDS.includes(value);
-}
-export function validateUpdateHistoryEntry(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'timestamp') || !isString(v.timestamp))
-        return null;
-    if (!Object.hasOwn(v, 'fromVersion') || !isString(v.fromVersion))
-        return null;
-    if (!Object.hasOwn(v, 'toVersion') || !isString(v.toVersion))
-        return null;
-    if (!Object.hasOwn(v, 'success') || !isBoolean(v.success))
-        return null;
-    if (!Object.hasOwn(v, 'kind') || !isUpdateHistoryKind(v.kind))
-        return null;
-    const entry = {
-        id: v.id,
-        timestamp: v.timestamp,
-        fromVersion: v.fromVersion,
-        toVersion: v.toVersion,
-        success: v.success,
-        kind: v.kind,
-    };
-    if (Object.hasOwn(v, 'backupPath') && isString(v.backupPath)) {
-        entry.backupPath = v.backupPath;
-    }
-    if (Object.hasOwn(v, 'reason') && isString(v.reason)) {
-        entry.reason = v.reason;
-    }
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction)) {
-        entry.nextAction = v.nextAction;
-    }
-    return entry;
-}
-export function validateUpdateHistory(v) {
-    // Backend returns a bare array; wrap it into { updates: [...] }.
-    if (Array.isArray(v)) {
-        const updates = validateArray(v, validateUpdateHistoryEntry);
-        if (updates === null)
-            return null;
-        return { updates };
-    }
-    // Also accept { updates: [...] } shape for forward-compat.
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'updates') || !Array.isArray(v.updates))
-        return null;
-    const updates = validateArray(v.updates, validateUpdateHistoryEntry);
-    if (updates === null)
-        return null;
-    return { updates };
-}
-function validateApprovalRecord(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'approvalId') || !isString(v.approvalId))
-        return null;
-    if (!Object.hasOwn(v, 'artifactId') || !isString(v.artifactId))
-        return null;
-    if (!Object.hasOwn(v, 'channel') || !isString(v.channel))
-        return null;
-    if (!Object.hasOwn(v, 'riskLevel') || !isString(v.riskLevel))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    if (Object.hasOwn(v, 'confidence') && !isNumber(v.confidence))
-        return null;
-    if (!Object.hasOwn(v, 'requestedAt') || !isString(v.requestedAt))
-        return null;
-    const result = {
-        approvalId: v.approvalId, artifactId: v.artifactId, channel: v.channel,
-        riskLevel: v.riskLevel, status: v.status,
-        confidence: Object.hasOwn(v, 'confidence') && isNumber(v.confidence) ? v.confidence : undefined,
-        requestedAt: v.requestedAt,
-        decidedAt: Object.hasOwn(v, 'decidedAt') && isString(v.decidedAt) ? v.decidedAt : undefined,
-        decidedBy: Object.hasOwn(v, 'decidedBy') && isString(v.decidedBy) ? v.decidedBy : undefined,
-        decisionNote: Object.hasOwn(v, 'decisionNote') && isString(v.decisionNote) ? v.decisionNote : undefined,
-        rejectionReason: Object.hasOwn(v, 'rejectionReason') && isString(v.rejectionReason) ? v.rejectionReason : undefined,
-        summary: Object.hasOwn(v, 'summary') && isString(v.summary) ? v.summary : undefined,
-        triggerReason: Object.hasOwn(v, 'triggerReason') && isString(v.triggerReason) ? v.triggerReason : undefined,
-        confidenceLabel: Object.hasOwn(v, 'confidenceLabel') && isString(v.confidenceLabel) ? v.confidenceLabel : undefined,
-        confidenceExplanation: Object.hasOwn(v, 'confidenceExplanation') && isString(v.confidenceExplanation) ? v.confidenceExplanation : undefined,
-        effectDescription: Object.hasOwn(v, 'effectDescription') && isString(v.effectDescription) ? v.effectDescription : undefined,
-        rejectionEffect: Object.hasOwn(v, 'rejectionEffect') && isString(v.rejectionEffect) ? v.rejectionEffect : undefined,
-    };
-    if (Object.hasOwn(v, 'isMvpProven') && isBoolean(v.isMvpProven))
-        result.isMvpProven = v.isMvpProven;
-    if (Object.hasOwn(v, 'warning') && isString(v.warning))
-        result.warning = v.warning;
-    return result;
-}
-export function validateApprovalListResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'items') || !Array.isArray(v.items))
-        return null;
-    if (!Object.hasOwn(v, 'total') || !isNumber(v.total))
-        return null;
-    if (!Object.hasOwn(v, 'stats') || !isObject(v.stats))
-        return null;
-    const { stats } = v;
-    if (!Object.hasOwn(stats, 'pending') || !isNumber(stats.pending))
-        return null;
-    if (!Object.hasOwn(stats, 'approved') || !isNumber(stats.approved))
-        return null;
-    if (!Object.hasOwn(stats, 'rejected') || !isNumber(stats.rejected))
-        return null;
-    if (!Object.hasOwn(stats, 'cancelled') || !isNumber(stats.cancelled))
-        return null;
-    const items = validateArray(v.items, validateApprovalRecord);
-    if (items === null)
-        return null;
-    return { items, total: v.total, stats: { pending: stats.pending, approved: stats.approved, rejected: stats.rejected, cancelled: stats.cancelled } };
-}
-// Re-export the private validateApprovalRecord for direct use
-export { validateApprovalRecord as validateApprovalRecordDirect };
-const VALID_WARNING_CODES = ['technical_pattern', 'diagnostic_residue', 'title_too_long'];
-function isReadabilityWarningCode(value) {
-    return isString(value) && VALID_WARNING_CODES.includes(value);
-}
-function validatePrincipleListItem(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'text') || !isString(v.text))
-        return null;
-    if (!Object.hasOwn(v, 'triggerPattern') || !isString(v.triggerPattern))
-        return null;
-    if (!Object.hasOwn(v, 'action') || !isString(v.action))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    if (!Object.hasOwn(v, 'priority') || !isString(v.priority))
-        return null;
-    if (!Object.hasOwn(v, 'scope') || !isString(v.scope))
-        return null;
-    const domain = readNullableString(v, 'domain');
-    if (!domain.valid)
-        return null;
-    if (!Object.hasOwn(v, 'evaluability') || !isString(v.evaluability))
-        return null;
-    if (!Object.hasOwn(v, 'valueScore') || !isNumber(v.valueScore))
-        return null;
-    if (!Object.hasOwn(v, 'adherenceRate') || !isNumber(v.adherenceRate))
-        return null;
-    if (!Object.hasOwn(v, 'painPreventedCount') || !isNumber(v.painPreventedCount))
-        return null;
-    if (!Object.hasOwn(v, 'ruleCount') || !isNumber(v.ruleCount))
-        return null;
-    if (!Object.hasOwn(v, 'conflictsWithCount') || !isNumber(v.conflictsWithCount))
-        return null;
-    if (!Object.hasOwn(v, 'createdAt') || !isString(v.createdAt))
-        return null;
-    if (!Object.hasOwn(v, 'updatedAt') || !isString(v.updatedAt))
-        return null;
-    const result = {
-        id: v.id, text: v.text, triggerPattern: v.triggerPattern, action: v.action,
-        status: v.status, priority: v.priority, scope: v.scope,
-        domain: domain.value,
-        evaluability: v.evaluability, valueScore: v.valueScore, adherenceRate: v.adherenceRate,
-        painPreventedCount: v.painPreventedCount, ruleCount: v.ruleCount,
-        conflictsWithCount: v.conflictsWithCount, createdAt: v.createdAt, updatedAt: v.updatedAt,
-        // PRI-332: detectedLanguage — absent defaults to 'unknown'; present but malformed → fail loud (ERR-009)
-        detectedLanguage: 'unknown',
-    };
-    if (Object.hasOwn(v, 'detectedLanguage')) {
-        if (!isString(v.detectedLanguage))
-            return null;
-        result.detectedLanguage = v.detectedLanguage;
-    }
-    // PRI-332 P1-5: readabilityWarningCode is optional — fail loud when present but invalid (ERR-009)
-    if (Object.hasOwn(v, 'readabilityWarningCode')) {
-        if (!isReadabilityWarningCode(v.readabilityWarningCode))
-            return null;
-        result.readabilityWarningCode = v.readabilityWarningCode;
-    }
-    // PRI-956 (F15): optional runtime-revocation disclosure — present only when
-    // the activations table reports a deactivated prompt activation.
-    if (Object.hasOwn(v, 'runtimeDeactivated')) {
-        if (v.runtimeDeactivated !== true)
-            return null;
-        result.runtimeDeactivated = true;
-    }
-    return result;
-}
-function validateCorePrinciple(v) {
-    if (!isObject(v))
-        return null;
-    if (!isString(v.id) || v.id.length === 0)
-        return null;
-    if (v.layer !== 'foundational' && v.layer !== 'operating')
-        return null;
-    if (!isString(v.name) || v.name.length === 0)
-        return null;
-    if (!isString(v.nameZh) || v.nameZh.length === 0)
-        return null;
-    if (!isString(v.statement) || v.statement.length === 0)
-        return null;
-    if (!isString(v.statementZh) || v.statementZh.length === 0)
-        return null;
-    return {
-        id: v.id,
-        layer: v.layer,
-        name: v.name,
-        nameZh: v.nameZh,
-        statement: v.statement,
-        statementZh: v.statementZh,
-    };
-}
-export function validateCorePrinciples(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'principles') || !Array.isArray(v.principles))
-        return null;
-    const principles = validateArray(v.principles, validateCorePrinciple);
-    if (principles === null)
-        return null;
-    return { principles };
-}
-export function validatePrinciplesList(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'principles') || !Array.isArray(v.principles))
-        return null;
-    if (!Object.hasOwn(v, 'summary') || !isObject(v.summary))
-        return null;
-    const s = v.summary;
-    const { candidate, probation, active, deprecated, archived, total } = s;
-    if (!isNumber(candidate) || !isNumber(probation) || !isNumber(active) || !isNumber(deprecated) || !isNumber(archived) || !isNumber(total))
-        return null;
-    const principles = validateArray(v.principles, validatePrincipleListItem);
-    if (principles === null)
-        return null;
-    // categories is optional (PRI-330) — EP-01: runtime validate, no `as` bypass
-    // When present but invalid, fail loud (ERR-009: required-ish fields fail loud)
-    let categories;
-    if (Object.hasOwn(v, 'categories')) {
-        if (!isObject(v.categories))
-            return null; // categories exists but is not an object → reject
-        const raw = v.categories;
-        const validated = {};
-        for (const [key, val] of Object.entries(raw)) {
-            if (!isNumber(val))
-                return null; // categories value is not a number → reject
-            validated[key] = val;
-        }
-        if (Object.keys(validated).length > 0) {
-            categories = validated;
-        }
-    }
-    // approvalCrossCheckUnavailable — optional string, fail loud if wrong type
-    // (ERR-009: required-ish fields fail loud; ERR-002: no silent degradation)
-    if (Object.hasOwn(v, 'approvalCrossCheckUnavailable') && !isString(v.approvalCrossCheckUnavailable)) {
-        return null;
-    }
-    const approvalCrossCheckUnavailable = isString(v.approvalCrossCheckUnavailable)
-        ? v.approvalCrossCheckUnavailable
-        : undefined;
-    // PRI-956 (F15, D3): revocationCheckUnavailable — optional string
-    if (Object.hasOwn(v, 'revocationCheckUnavailable') && !isString(v.revocationCheckUnavailable)) {
-        return null;
-    }
-    const revocationCheckUnavailable = isString(v.revocationCheckUnavailable)
-        ? v.revocationCheckUnavailable
-        : undefined;
-    return {
-        principles,
-        summary: { candidate, probation, active, deprecated, archived, total },
-        ...(categories !== undefined ? { categories } : {}),
-        ...(approvalCrossCheckUnavailable !== undefined ? { approvalCrossCheckUnavailable } : {}),
-        ...(revocationCheckUnavailable !== undefined ? { revocationCheckUnavailable } : {}),
-    };
-}
-function validateApprovalGroupRecord(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'artifactId') || !isString(v.artifactId))
-        return null;
-    if (!Object.hasOwn(v, 'channel') || !isString(v.channel))
-        return null;
-    if (!Object.hasOwn(v, 'createdAt') || !isString(v.createdAt))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    const record = { id: v.id, artifactId: v.artifactId, channel: v.channel, createdAt: v.createdAt, status: v.status };
-    if (Object.hasOwn(v, 'revisionReviewUnavailable')) {
-        if (typeof v.revisionReviewUnavailable !== 'boolean')
-            return null;
-        record.revisionReviewUnavailable = v.revisionReviewUnavailable;
-    }
-    return record;
-}
-function validateApprovalGroup(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'principleId') || !isString(v.principleId))
-        return null;
-    if (!Object.hasOwn(v, 'principleTitle') || !isString(v.principleTitle))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isString(v.status))
-        return null;
-    if (!Object.hasOwn(v, 'records') || !Array.isArray(v.records))
-        return null;
-    const records = validateArray(v.records, validateApprovalGroupRecord);
-    if (records === null)
-        return null;
-    const result = { principleId: v.principleId, principleTitle: v.principleTitle, status: v.status, records };
-    if (Object.hasOwn(v, 'revisionReviewUnavailable')) {
-        if (typeof v.revisionReviewUnavailable !== 'boolean')
-            return null;
-        result.revisionReviewUnavailable = v.revisionReviewUnavailable;
-    }
-    if (Object.hasOwn(v, 'revisionReview')) {
-        const review = v.revisionReview;
-        if (!isObject(review) || typeof review.oldStatement !== 'string' || typeof review.newStatement !== 'string' || !isObject(review.intentFields))
-            return null;
-        const intentFields = {};
-        for (const key of ['ownerIntent', 'targetBehavior', 'forbiddenBehavior', 'evidenceSource', 'validationExpectation']) {
-            const value = review.intentFields[key];
-            if (value !== undefined && typeof value !== 'string')
-                return null;
-            if (typeof value === 'string')
-                intentFields[key] = value;
-        }
-        result.revisionReview = { oldStatement: review.oldStatement, newStatement: review.newStatement, intentFields,
-            ...(typeof review.artifactId === 'string' ? { artifactId: review.artifactId } : {}),
-            ...(typeof review.artifactDigest === 'string' && /^sha256:[a-f0-9]{64}$/.test(review.artifactDigest) ? { artifactDigest: review.artifactDigest } : {}) };
-    }
-    // Wave 7: optional candidateDescription from artifact contentJson
-    if (Object.hasOwn(v, 'candidateDescription') && isString(v.candidateDescription) && v.candidateDescription.length > 0) {
-        result.candidateDescription = v.candidateDescription;
-    }
-    // PR-1894: optional fitsPromptBudget. Only a real boolean is propagated; a
-    // present-but-wrong value is dropped (rc-1/rc-2) so the badge falls back to
-    // copy that promises nothing rather than rendering an unverified claim.
-    if (Object.hasOwn(v, 'fitsPromptBudget') && typeof v.fitsPromptBudget === 'boolean') {
-        result.fitsPromptBudget = v.fitsPromptBudget;
-    }
-    // SPEC-PD-MODEL-AWARE-PROMPT-BUDGET-001: optional tier fit, whitelist +
-    // drop-on-invalid (same rule). Absent keeps the boolean-only behavior.
-    if (Object.hasOwn(v, 'promptBudgetTierFit')
-        && (v.promptBudgetTierFit === 'fits_all_tiers' || v.promptBudgetTierFit === 'model_dependent'
-            || v.promptBudgetTierFit === 'exceeds_max_tier' || v.promptBudgetTierFit === 'unconfirmed')) {
-        result.promptBudgetTierFit = v.promptBudgetTierFit;
-    }
-    // PRI-940: optional artifactUnavailable. Only a real boolean is propagated; a
-    // present-but-wrong value is dropped so the card keeps its plain untitled
-    // fallback rather than rendering an unverified claim.
-    if (Object.hasOwn(v, 'artifactUnavailable') && typeof v.artifactUnavailable === 'boolean') {
-        result.artifactUnavailable = v.artifactUnavailable;
-    }
-    return result;
-}
-export function validatePromptInjectionBudgetStatus(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'budget') || !Object.hasOwn(v, 'usedChars') || !Object.hasOwn(v, 'truncated'))
-        return null;
-    const { budget, usedChars, truncated } = v;
-    if (typeof budget !== 'number' || !Number.isInteger(budget) || budget <= 0 ||
-        typeof usedChars !== 'number' || !Number.isInteger(usedChars) || usedChars < 0 ||
-        typeof truncated !== 'boolean') {
-        return null;
-    }
-    const result = { budget, usedChars, truncated };
-    // PR-1894: these are optional so a pre-PR-1894 server payload still
-    // validates (backward compatibility). A present-but-invalid value is
-    // DROPPED, never propagated (rc-1/rc-2): the UI then falls back to
-    // policy-agnostic copy rather than rendering an unverified policy claim.
-    if (Object.hasOwn(v, 'productionRotates') && typeof v.productionRotates === 'boolean') {
-        result.productionRotates = v.productionRotates;
-    }
-    if (Object.hasOwn(v, 'eligibleCount') && typeof v.eligibleCount === 'number' && Number.isInteger(v.eligibleCount) && v.eligibleCount >= 0) {
-        result.eligibleCount = v.eligibleCount;
-    }
-    // PD_PROMPT_CAPACITY_V1 (R-A1/R-A2/R-A3): additive optional fields, same
-    // drop-on-invalid rule. capacityStatus drives the 未确认 badge; without it
-    // the payload behaves as 'confirmed' (pre-SPEC server compat).
-    if (Object.hasOwn(v, 'capacityStatus') && (v.capacityStatus === 'confirmed' || v.capacityStatus === 'unconfirmed')) {
-        result.capacityStatus = v.capacityStatus;
-    }
-    if (Object.hasOwn(v, 'hostKind') && (v.hostKind === 'openclaw' || v.hostKind === 'codex' || v.hostKind === 'workbuddy')) {
-        result.hostKind = v.hostKind;
-    }
-    if (Object.hasOwn(v, 'route') && (v.route === 'legacy_trim' || v.route === 'shared_render')) {
-        result.route = v.route;
-    }
-    if (Object.hasOwn(v, 'unit') && v.unit === 'utf16_code_units') {
-        result.unit = v.unit;
-    }
-    if (Object.hasOwn(v, 'budgetScope') && (v.budgetScope === 'selected_lines' || v.budgetScope === 'full_directive_context')) {
-        result.budgetScope = v.budgetScope;
-    }
-    if (Object.hasOwn(v, 'fullRenderChars') && typeof v.fullRenderChars === 'number' && Number.isInteger(v.fullRenderChars) && v.fullRenderChars >= 0) {
-        result.fullRenderChars = v.fullRenderChars;
-    }
-    if (Object.hasOwn(v, 'oversizedActivationIds') && Array.isArray(v.oversizedActivationIds) && v.oversizedActivationIds.every(isString)) {
-        result.oversizedActivationIds = v.oversizedActivationIds;
-    }
-    if (Object.hasOwn(v, 'oversizedDiagnosticTruncated') && typeof v.oversizedDiagnosticTruncated === 'boolean') {
-        result.oversizedDiagnosticTruncated = v.oversizedDiagnosticTruncated;
-    }
-    if (Object.hasOwn(v, 'unconfirmedReason') && isString(v.unconfirmedReason)) {
-        result.unconfirmedReason = v.unconfirmedReason;
-    }
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction)) {
-        result.nextAction = v.nextAction;
-    }
-    // SPEC-PD-MODEL-AWARE-PROMPT-BUDGET-001 §7: budget provenance, additive +
-    // drop-on-invalid. Absent behaves as the legacy fixed-budget view
-    // (pre-SPEC server compat).
-    if (Object.hasOwn(v, 'budgetCapacitySource') && isPromptBudgetCapacitySource(v.budgetCapacitySource)) {
-        result.budgetCapacitySource = v.budgetCapacitySource;
-    }
-    if (Object.hasOwn(v, 'budgetFallbackReason') && isPromptBudgetFallbackReason(v.budgetFallbackReason)) {
-        result.budgetFallbackReason = v.budgetFallbackReason;
-    }
-    if (Object.hasOwn(v, 'budgetCapacityStatus') && isPromptBudgetCapacityStatus(v.budgetCapacityStatus)) {
-        result.budgetCapacityStatus = v.budgetCapacityStatus;
-    }
-    if (Object.hasOwn(v, 'budgetContextWindowTokens') && typeof v.budgetContextWindowTokens === 'number' && Number.isInteger(v.budgetContextWindowTokens) && v.budgetContextWindowTokens > 0) {
-        result.budgetContextWindowTokens = v.budgetContextWindowTokens;
-    }
-    // PRI-1017: observation timestamp — a PAST runtime fact, never a live
-    // claim. Present-but-invalid drops (rc-1/rc-2), never propagated.
-    if (Object.hasOwn(v, 'budgetObservedAt') && isString(v.budgetObservedAt) && v.budgetObservedAt.length > 0 && Number.isFinite(Date.parse(v.budgetObservedAt))) {
-        result.budgetObservedAt = v.budgetObservedAt;
-    }
-    if (Object.hasOwn(v, 'perHost') && Array.isArray(v.perHost)) {
-        // rc-4: validate every element, not just "is array".
-        const perHost = [];
-        for (const entry of v.perHost) {
-            if (!isObject(entry))
-                return null;
-            const { hostKind, route, usedChars: hostUsed, truncated: hostTruncated } = entry;
-            if ((hostKind !== 'openclaw' && hostKind !== 'codex' && hostKind !== 'workbuddy')
-                || (route !== 'legacy_trim' && route !== 'shared_render')
-                || typeof hostUsed !== 'number' || !Number.isInteger(hostUsed) || hostUsed < 0
-                || typeof hostTruncated !== 'boolean') {
-                return null;
-            }
-            const forecast = { hostKind, route, usedChars: hostUsed, truncated: hostTruncated };
-            // PRI-1017: per-host budget basis (additive, drop-on-invalid). Absent
-            // behaves as the pre-PRI-1017 payload where the headline budget was
-            // shared — the UI must not present one host's window as another's.
-            if (Object.hasOwn(entry, 'budget') && typeof entry.budget === 'number' && Number.isInteger(entry.budget) && entry.budget > 0) {
-                forecast.budget = entry.budget;
-            }
-            if (Object.hasOwn(entry, 'budgetCapacitySource') && isPromptBudgetCapacitySource(entry.budgetCapacitySource)) {
-                forecast.budgetCapacitySource = entry.budgetCapacitySource;
-            }
-            if (Object.hasOwn(entry, 'budgetCapacityStatus') && isPromptBudgetCapacityStatus(entry.budgetCapacityStatus)) {
-                forecast.budgetCapacityStatus = entry.budgetCapacityStatus;
-            }
-            if (Object.hasOwn(entry, 'budgetObservedAt') && isString(entry.budgetObservedAt) && entry.budgetObservedAt.length > 0 && Number.isFinite(Date.parse(entry.budgetObservedAt))) {
-                forecast.budgetObservedAt = entry.budgetObservedAt;
-            }
-            if (Object.hasOwn(entry, 'budgetFallbackReason') && isPromptBudgetFallbackReason(entry.budgetFallbackReason)) {
-                forecast.budgetFallbackReason = entry.budgetFallbackReason;
-            }
-            perHost.push(forecast);
-        }
-        result.perHost = perHost;
-    }
-    return result;
-}
-export function validateApprovalsGrouped(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'groups') || !Array.isArray(v.groups))
-        return null;
-    if (!Object.hasOwn(v, 'generatedAt') || !isString(v.generatedAt))
-        return null;
-    const groups = validateArray(v.groups, validateApprovalGroup);
-    if (groups === null)
-        return null;
-    const result = { groups, generatedAt: v.generatedAt };
-    if (Object.hasOwn(v, 'note') && isString(v.note))
-        result.note = v.note;
-    // PRI-908: additive optional field — malformed/absent forecast degrades to
-    // "no badge" (the approve-time warning from PRI-890 remains the fail-loud
-    // exclusion report), never to a rejected payload.
-    if (Object.hasOwn(v, 'promptInjection')) {
-        const promptInjection = validatePromptInjectionBudgetStatus(v.promptInjection);
-        if (promptInjection !== null)
-            result.promptInjection = promptInjection;
-    }
-    return result;
-}
-// ── Evidence Chain (PRI-331) ──────────────────────────────────────────────────
-const VALID_EVIDENCE_CHAIN_STATES = new Set([
-    'recorded-only',
-    'evidence-only',
-    'diagnosis-queued',
-    'diagnosis-running',
-    'diagnosis-succeeded',
-    'diagnosis-failed',
-    'diagnosis-retry-wait',
-    'candidate-generated',
-    'internalization-missing',
-    'internalization-pending',
-    'internalization-running',
-    'internalization-failed',
-    'internalization-succeeded',
-    'owner-reviewable',
-    'malformed',
-    'degraded',
-]);
-// ── Intent Tension (PRI-469, SPEC §16) ───────────────────────────────────────
-//
-// Frontend mirror of the core IntentTension type. `confidence` is forbidden
-// (SPEC §16.3) — validateIntentTension rejects any object carrying it.
-// This validator is the Console's trust boundary: untrusted JSON from the API
-// is narrowed here before any UI code touches it (ERR-001).
-const VALID_INTENT_TENSION_SOURCES = ['none', 'action_drift', 'intent_suspect', 'healthy_tension'];
-const VALID_EVIDENCE_STRENGTHS = ['weak', 'moderate', 'strong'];
-const VALID_INTENT_RELATED_FIELDS = [
-    'why',
-    'desired_outcome',
-    'non_negotiables',
-    'stop_escalation',
-    'current_strategic_focus',
-];
-const VALID_SUGGESTED_OWNER_ACTIONS = [
-    'confirm_drift',
-    'revise_intent',
-    'observe',
-    'dismiss',
-    'promote_to_principle',
-    'promote_to_rulehost',
-];
-/**
- * Validate an untrusted `intentTension` object from the EvidenceChain API
- * response. Returns `null` when malformed; the caller (validateEvidenceChainRecord)
- * treats a `null` intentTension as "not present" so the record is still usable.
- *
- * SPEC §16.3: `confidence` is forbidden — explicitly rejected here.
- * SPEC §16.4: evidence is capped at 3 items; we accept up to 3 and reject
- * arrays with non-string elements (ERR-005/007).
- */
-export function validateIntentTension(v) {
-    if (!isObject(v))
-        return null;
-    // SPEC §16.3: confidence is forbidden on intentTension.
-    if (Object.hasOwn(v, 'confidence'))
-        return null;
-    // Required fields (ERR-009: fail loud when missing or wrong type)
-    if (!Object.hasOwn(v, 'source') || !isString(v.source))
-        return null;
-    if (!VALID_INTENT_TENSION_SOURCES.includes(v.source))
-        return null;
-    if (!Object.hasOwn(v, 'evidenceStrength') || !isString(v.evidenceStrength))
-        return null;
-    if (!VALID_EVIDENCE_STRENGTHS.includes(v.evidenceStrength))
-        return null;
-    if (!Object.hasOwn(v, 'relatedIntentFields') || !Array.isArray(v.relatedIntentFields))
-        return null;
-    const relatedIntentFields = [];
-    for (const f of v.relatedIntentFields) {
-        if (typeof f !== 'string')
-            return null;
-        if (!VALID_INTENT_RELATED_FIELDS.includes(f))
-            return null;
-        relatedIntentFields.push(f);
-    }
-    if (!Object.hasOwn(v, 'evidence') || !Array.isArray(v.evidence))
-        return null;
-    const evidence = [];
-    for (const e of v.evidence) {
-        if (typeof e !== 'string')
-            return null;
-        evidence.push(e);
-    }
-    // SPEC §16.4: cap at 3. Server-side already truncates, but the frontend
-    // must not trust that — enforce the cap here too (defense in depth).
-    const truncatedEvidence = evidence.slice(0, 3);
-    if (!Object.hasOwn(v, 'explanation') || !isString(v.explanation))
-        return null;
-    if (v.explanation.length === 0)
-        return null;
-    if (!Object.hasOwn(v, 'suggestedOwnerAction') || !isString(v.suggestedOwnerAction))
-        return null;
-    if (!VALID_SUGGESTED_OWNER_ACTIONS.includes(v.suggestedOwnerAction))
-        return null;
-    const result = {
-        source: v.source,
-        evidenceStrength: v.evidenceStrength,
-        relatedIntentFields,
-        evidence: truncatedEvidence,
-        explanation: v.explanation,
-        suggestedOwnerAction: v.suggestedOwnerAction,
-    };
-    // Optional: intentDocHash
-    if (Object.hasOwn(v, 'intentDocHash')) {
-        if (!isString(v.intentDocHash))
-            return null;
-        result.intentDocHash = v.intentDocHash;
-    }
-    return result;
-}
-/**
- * Validate an untrusted IntentDecisionRecord object from the API.
- * Returns null when malformed (Rule 3: fail loud on missing/wrong-type fields).
- *
- * Enum fields (source, evidenceStrength, ownerAction) are validated against
- * the same sets used by validateIntentTension. relatedIntentFields elements
- * are validated against VALID_INTENT_RELATED_FIELDS.
- */
-export function validateIntentDecisionRecord(v) {
-    if (!isObject(v))
-        return null;
-    // Required fields (ERR-009: fail loud when missing or wrong type)
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'source') || !isString(v.source))
-        return null;
-    if (!VALID_INTENT_TENSION_SOURCES.includes(v.source))
-        return null;
-    if (!Object.hasOwn(v, 'evidenceStrength') || !isString(v.evidenceStrength))
-        return null;
-    if (!VALID_EVIDENCE_STRENGTHS.includes(v.evidenceStrength))
-        return null;
-    if (!Object.hasOwn(v, 'relatedIntentFields') || !Array.isArray(v.relatedIntentFields))
-        return null;
-    const relatedIntentFields = [];
-    for (const f of v.relatedIntentFields) {
-        if (typeof f !== 'string')
-            return null;
-        if (!VALID_INTENT_RELATED_FIELDS.includes(f))
-            return null;
-        relatedIntentFields.push(f);
-    }
-    if (!Object.hasOwn(v, 'ownerAction') || !isString(v.ownerAction))
-        return null;
-    if (!VALID_SUGGESTED_OWNER_ACTIONS.includes(v.ownerAction))
-        return null;
-    if (!Object.hasOwn(v, 'evidenceRefs') || !Array.isArray(v.evidenceRefs))
-        return null;
-    const evidenceRefs = [];
-    for (const e of v.evidenceRefs) {
-        if (typeof e !== 'string')
-            return null;
-        evidenceRefs.push(e);
-    }
-    if (!Object.hasOwn(v, 'createdAt') || !isString(v.createdAt))
-        return null;
-    const result = {
-        id: v.id,
-        source: v.source,
-        evidenceStrength: v.evidenceStrength,
-        relatedIntentFields,
-        ownerAction: v.ownerAction,
-        evidenceRefs,
-        createdAt: v.createdAt,
-    };
-    // Optional fields — fail loud when present but wrong type (ERR-009)
-    if (Object.hasOwn(v, 'painId')) {
-        if (!isString(v.painId))
-            return null;
-        result.painId = v.painId;
-    }
-    if (Object.hasOwn(v, 'taskId')) {
-        if (!isString(v.taskId))
-            return null;
-        result.taskId = v.taskId;
-    }
-    if (Object.hasOwn(v, 'runId')) {
-        if (!isString(v.runId))
-            return null;
-        result.runId = v.runId;
-    }
-    if (Object.hasOwn(v, 'intentDocHash')) {
-        if (!isString(v.intentDocHash))
-            return null;
-        result.intentDocHash = v.intentDocHash;
-    }
-    if (Object.hasOwn(v, 'resultingCandidateId')) {
-        if (!isString(v.resultingCandidateId))
-            return null;
-        result.resultingCandidateId = v.resultingCandidateId;
-    }
-    if (Object.hasOwn(v, 'resultingRuleCandidateId')) {
-        if (!isString(v.resultingRuleCandidateId))
-            return null;
-        result.resultingRuleCandidateId = v.resultingRuleCandidateId;
-    }
-    if (Object.hasOwn(v, 'patchProposalId')) {
-        if (!isString(v.patchProposalId))
-            return null;
-        result.patchProposalId = v.patchProposalId;
-    }
-    return result;
-}
-/**
- * Validate a list of IntentDecisionRecord objects. Returns null if any
- * element is malformed (ERR-005/007: validate array element types).
- */
-export function validateIntentDecisionList(v) {
-    return validateArray(v, validateIntentDecisionRecord);
-}
-/**
- * Validate the POST /api/v1/intent-decisions response envelope.
- * Shape: { record: IntentDecisionRecord, created: boolean }
- */
-export function validateIntentDecisionResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'record'))
-        return null;
-    const record = validateIntentDecisionRecord(v.record);
-    if (record === null)
-        return null;
-    if (!Object.hasOwn(v, 'created') || !isBoolean(v.created))
-        return null;
-    return { record, created: v.created };
-}
-/**
- * Validate the GET /api/v1/intent-decisions/summary response.
- * All 6 count keys must be present with non-negative finite numbers.
- * lastDecisionAt: null is valid, string is valid, anything else returns null.
- */
-export function validateIntentDecisionSummary(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'counts') || !isObject(v.counts))
-        return null;
-    const { counts } = v;
-    // Explicit per-key checks so isNumber type guards narrow each property.
-    if (!Object.hasOwn(counts, 'confirm_drift') || !isNumber(counts.confirm_drift) || counts.confirm_drift < 0)
-        return null;
-    if (!Object.hasOwn(counts, 'revise_intent') || !isNumber(counts.revise_intent) || counts.revise_intent < 0)
-        return null;
-    if (!Object.hasOwn(counts, 'observe') || !isNumber(counts.observe) || counts.observe < 0)
-        return null;
-    if (!Object.hasOwn(counts, 'dismiss') || !isNumber(counts.dismiss) || counts.dismiss < 0)
-        return null;
-    if (!Object.hasOwn(counts, 'promote_to_principle') || !isNumber(counts.promote_to_principle) || counts.promote_to_principle < 0)
-        return null;
-    if (!Object.hasOwn(counts, 'promote_to_rulehost') || !isNumber(counts.promote_to_rulehost) || counts.promote_to_rulehost < 0)
-        return null;
-    // lastDecisionAt: null or string
-    if (!Object.hasOwn(v, 'lastDecisionAt'))
-        return null;
-    const { lastDecisionAt } = v;
-    if (lastDecisionAt !== null && !isString(lastDecisionAt))
-        return null;
-    return {
-        counts: {
-            confirm_drift: counts.confirm_drift,
-            revise_intent: counts.revise_intent,
-            observe: counts.observe,
-            dismiss: counts.dismiss,
-            promote_to_principle: counts.promote_to_principle,
-            promote_to_rulehost: counts.promote_to_rulehost,
-        },
-        lastDecisionAt,
-    };
-}
-const FOLLOW_UP_RESPONSE_TYPES = new Set([
-    'link_candidate',
-    'guide_rulehost',
-    'generate_patch_proposal',
-]);
-/**
- * Validate the POST /api/v1/intent-decisions/:id/follow-up response.
- *
- * The response is a discriminated union on the `type` field. Each branch has
- * its own required fields (Rule 3: fail loud on missing required fields).
- *
- * Common required fields: `type`, `decisionId`.
- * - link_candidate: + `record` (IntentDecisionRecordData), `linkedCandidateId`
- * - guide_rulehost: + `cliCommand`, `note`
- * - generate_patch_proposal: + `record`, `patchProposal: { id, markdown }`
- */
-export function validateFollowUpResponse(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'type') || !isString(v.type))
-        return null;
-    if (!FOLLOW_UP_RESPONSE_TYPES.has(v.type))
-        return null;
-    if (!Object.hasOwn(v, 'decisionId') || !isString(v.decisionId))
-        return null;
-    const typedType = v.type;
-    const { decisionId } = v;
-    if (typedType === 'link_candidate') {
-        if (!Object.hasOwn(v, 'record'))
-            return null;
-        const record = validateIntentDecisionRecord(v.record);
-        if (record === null)
-            return null;
-        if (!Object.hasOwn(v, 'linkedCandidateId') || !isString(v.linkedCandidateId))
-            return null;
-        return { type: 'link_candidate', decisionId, record, linkedCandidateId: v.linkedCandidateId };
-    }
-    if (typedType === 'guide_rulehost') {
-        if (!Object.hasOwn(v, 'cliCommand') || !isString(v.cliCommand))
-            return null;
-        if (!Object.hasOwn(v, 'note') || !isString(v.note))
-            return null;
-        return { type: 'guide_rulehost', decisionId, cliCommand: v.cliCommand, note: v.note };
-    }
-    // generate_patch_proposal
-    if (!Object.hasOwn(v, 'record'))
-        return null;
-    const record = validateIntentDecisionRecord(v.record);
-    if (record === null)
-        return null;
-    if (!Object.hasOwn(v, 'patchProposal') || !isObject(v.patchProposal))
-        return null;
-    const pp = v.patchProposal;
-    if (!Object.hasOwn(pp, 'id') || !isString(pp.id))
-        return null;
-    if (!Object.hasOwn(pp, 'markdown') || !isString(pp.markdown))
-        return null;
-    return {
-        type: 'generate_patch_proposal',
-        decisionId,
-        record,
-        patchProposal: { id: pp.id, markdown: pp.markdown },
-    };
-}
-function validateEvidenceChainRecord(v) {
-    if (!isObject(v))
-        return null;
-    // Required fields (ERR-009: fail loud when missing)
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'sourceKind') || !isString(v.sourceKind))
-        return null;
-    if (!Object.hasOwn(v, 'observedAt') || !isString(v.observedAt))
-        return null;
-    if (!Object.hasOwn(v, 'state') || !isString(v.state))
-        return null;
-    if (!VALID_EVIDENCE_CHAIN_STATES.has(v.state))
-        return null;
-    if (!Object.hasOwn(v, 'summary') || !isString(v.summary))
-        return null;
-    const result = {
-        id: v.id,
-        sourceKind: v.sourceKind,
-        observedAt: v.observedAt,
-        state: v.state,
-        summary: v.summary,
-    };
-    // Optional fields — fail loud when present but wrong type (ERR-009)
-    if (Object.hasOwn(v, 'hostKind')) {
-        if (!isString(v.hostKind))
-            return null;
-        if (v.hostKind !== 'openclaw' && v.hostKind !== 'codex' && v.hostKind !== 'unknown')
-            return null;
-        result.hostKind = v.hostKind;
-    }
-    if (Object.hasOwn(v, 'admissionDecision')) {
-        if (!isString(v.admissionDecision))
-            return null;
-        result.admissionDecision = v.admissionDecision;
-    }
-    if (Object.hasOwn(v, 'linkedPainId')) {
-        if (!isString(v.linkedPainId))
-            return null;
-        result.linkedPainId = v.linkedPainId;
-    }
-    if (Object.hasOwn(v, 'linkedTaskId')) {
-        if (!isString(v.linkedTaskId))
-            return null;
-        result.linkedTaskId = v.linkedTaskId;
-    }
-    if (Object.hasOwn(v, 'linkedTaskStatus')) {
-        if (!isString(v.linkedTaskStatus))
-            return null;
-        result.linkedTaskStatus = v.linkedTaskStatus;
-    }
-    if (Object.hasOwn(v, 'linkedCandidateId')) {
-        if (!isString(v.linkedCandidateId))
-            return null;
-        result.linkedCandidateId = v.linkedCandidateId;
-    }
-    if (Object.hasOwn(v, 'linkedPrincipleId')) {
-        if (!isString(v.linkedPrincipleId))
-            return null;
-        result.linkedPrincipleId = v.linkedPrincipleId;
-    }
-    if (Object.hasOwn(v, 'failureReason')) {
-        if (!isString(v.failureReason))
-            return null;
-        result.failureReason = v.failureReason;
-    }
-    if (Object.hasOwn(v, 'degradedReason')) {
-        if (!isString(v.degradedReason))
-            return null;
-        result.degradedReason = v.degradedReason;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    // PRI-340: human-readable evidence fields (all optional)
-    if (Object.hasOwn(v, 'candidateTitle')) {
-        if (!isString(v.candidateTitle))
-            return null;
-        result.candidateTitle = v.candidateTitle;
-    }
-    if (Object.hasOwn(v, 'candidateSummary')) {
-        if (!isString(v.candidateSummary))
-            return null;
-        result.candidateSummary = v.candidateSummary;
-    }
-    if (Object.hasOwn(v, 'rootCauseSummary')) {
-        if (!isString(v.rootCauseSummary))
-            return null;
-        result.rootCauseSummary = v.rootCauseSummary;
-    }
-    if (Object.hasOwn(v, 'confidence')) {
-        if (typeof v.confidence !== 'number' || !Number.isFinite(v.confidence))
-            return null;
-        result.confidence = v.confidence;
-    }
-    if (Object.hasOwn(v, 'recommendationKind')) {
-        if (!isString(v.recommendationKind))
-            return null;
-        result.recommendationKind = v.recommendationKind;
-    }
-    // PRI-380: internalization task linkage (all optional)
-    if (Object.hasOwn(v, 'internalizationTaskId')) {
-        if (!isString(v.internalizationTaskId))
-            return null;
-        result.internalizationTaskId = v.internalizationTaskId;
-    }
-    if (Object.hasOwn(v, 'dreamerTaskStatus')) {
-        if (!isString(v.dreamerTaskStatus))
-            return null;
-        result.dreamerTaskStatus = v.dreamerTaskStatus;
-    }
-    // PRI-469: intentTension (optional). When present but malformed, we DROP
-    // the intentTension field but keep the rest of the record (the Owner still
-    // sees the pain evidence). This matches the core's graceful-degradation
-    // behavior where a malformed intentTension is omitted rather than failing
-    // the entire record. The degradedReason on the record (if any) explains
-    // what happened.
-    if (Object.hasOwn(v, 'intentTension')) {
-        const tension = validateIntentTension(v.intentTension);
-        if (tension !== null) {
-            result.intentTension = tension;
-        }
-        // If tension === null, we intentionally do NOT return null here — the
-        // record is still valid, just without intentTension.
-    }
-    return result;
-}
-export function validateEvidenceChain(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'records') || !Array.isArray(v.records))
-        return null;
-    if (!Object.hasOwn(v, 'generatedAt') || !isString(v.generatedAt))
-        return null;
-    const records = validateArray(v.records, validateEvidenceChainRecord);
-    if (records === null)
-        return null;
-    const result = {
-        records,
-        generatedAt: v.generatedAt,
-    };
-    if (Object.hasOwn(v, 'degradedReason')) {
-        if (!isString(v.degradedReason))
-            return null;
-        result.degradedReason = v.degradedReason;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    if (Object.hasOwn(v, 'note')) {
-        if (!isString(v.note))
-            return null;
-        result.note = v.note;
-    }
-    return result;
-}
-const VALID_OUTPUT_LANGUAGE_VALUES = ['zh-CN', 'en'];
-export function validateOutputLanguage(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'outputLanguage') || !isString(v.outputLanguage))
-        return null;
-    if (!VALID_OUTPUT_LANGUAGE_VALUES.includes(v.outputLanguage))
-        return null;
-    if (!Object.hasOwn(v, 'source') || !isString(v.source))
-        return null;
-    return { outputLanguage: v.outputLanguage, source: v.source };
-}
-export function validateApplyUpdateResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'success') || typeof v.success !== 'boolean')
-        return null;
-    if (!Object.hasOwn(v, 'message') || !isString(v.message))
-        return null;
-    const result = {
-        success: v.success,
-        message: v.message,
-    };
-    if (Object.hasOwn(v, 'refusal') && typeof v.refusal === 'boolean') {
-        result.refusal = v.refusal;
-    }
-    if (Object.hasOwn(v, 'state') && isString(v.state)
-        && (v.state === 'update_blocked' || v.state === 'awaiting_restart' || v.state === 'update_in_progress')) {
-        result.state = v.state;
-    }
-    if (Object.hasOwn(v, 'transactionId') && isString(v.transactionId)) {
-        result.transactionId = v.transactionId;
-    }
-    if (Object.hasOwn(v, 'updatedFiles') && Array.isArray(v.updatedFiles)) {
-        result.updatedFiles = v.updatedFiles.filter((f) => typeof f === 'string');
-    }
-    if (Object.hasOwn(v, 'backupPath') && isString(v.backupPath)) {
-        result.backupPath = v.backupPath;
-    }
-    if (Object.hasOwn(v, 'newVersion') && isString(v.newVersion)) {
-        result.newVersion = v.newVersion;
-    }
-    if (Object.hasOwn(v, 'partialUpdate') && typeof v.partialUpdate === 'boolean') {
-        result.partialUpdate = v.partialUpdate;
-    }
-    if (Object.hasOwn(v, 'requiresRestart') && typeof v.requiresRestart === 'boolean') {
-        result.requiresRestart = v.requiresRestart;
-    }
-    if (Object.hasOwn(v, 'reason') && isString(v.reason)) {
-        result.reason = v.reason;
-    }
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction)) {
-        result.nextAction = v.nextAction;
-    }
-    if (Object.hasOwn(v, 'gatewayNotice') && isString(v.gatewayNotice)) {
-        result.gatewayNotice = v.gatewayNotice;
-    }
-    return result;
-}
-export function validateUpdateRecovery(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'needsRecovery') || typeof v.needsRecovery !== 'boolean')
-        return null;
-    const unfinished = [];
-    if (Object.hasOwn(v, 'unfinished') && Array.isArray(v.unfinished)) {
-        for (const item of v.unfinished) {
-            if (!isObject(item) || !Object.hasOwn(item, 'transactionId') || !isString(item.transactionId))
-                continue;
-            unfinished.push({
-                transactionId: item.transactionId,
-                lastState: Object.hasOwn(item, 'lastState') && isString(item.lastState) ? item.lastState : null,
-                lastAt: Object.hasOwn(item, 'lastAt') && isString(item.lastAt) ? item.lastAt : null,
-                productVersion: Object.hasOwn(item, 'productVersion') && isString(item.productVersion) ? item.productVersion : null,
-                tornTailDetected: Object.hasOwn(item, 'tornTailDetected') && typeof item.tornTailDetected === 'boolean' ? item.tornTailDetected : false,
-            });
-        }
-    }
-    const broken = [];
-    if (Object.hasOwn(v, 'broken') && Array.isArray(v.broken)) {
-        for (const item of v.broken) {
-            if (!isObject(item) || !Object.hasOwn(item, 'transactionId') || !isString(item.transactionId))
-                continue;
-            if (!Object.hasOwn(item, 'reason') || !isString(item.reason))
-                continue;
-            broken.push({ transactionId: item.transactionId, reason: item.reason });
-        }
-    }
-    const superseded = [];
-    if (Object.hasOwn(v, 'superseded') && Array.isArray(v.superseded)) {
-        for (const item of v.superseded) {
-            if (!isObject(item) || !Object.hasOwn(item, 'transactionId') || !isString(item.transactionId))
-                continue;
-            if (!Object.hasOwn(item, 'reason') || !isString(item.reason))
-                continue;
-            superseded.push({ transactionId: item.transactionId, reason: item.reason });
-        }
-    }
-    const recoveryRequired = [];
-    if (Object.hasOwn(v, 'recoveryRequired') && Array.isArray(v.recoveryRequired)) {
-        for (const item of v.recoveryRequired) {
-            if (!isObject(item) || !Object.hasOwn(item, 'transactionId') || !isString(item.transactionId))
-                continue;
-            if (!Object.hasOwn(item, 'reason') || !isString(item.reason))
-                continue;
-            recoveryRequired.push({ transactionId: item.transactionId, reason: item.reason });
-        }
-    }
-    const result = { needsRecovery: v.needsRecovery, unfinished, broken, superseded, recoveryRequired };
-    if (Object.hasOwn(v, 'activeRecordUnreadable') && typeof v.activeRecordUnreadable === 'boolean') {
-        result.activeRecordUnreadable = v.activeRecordUnreadable;
-    }
-    if (Object.hasOwn(v, 'nextAction') && isString(v.nextAction))
-        result.nextAction = v.nextAction;
-    return result;
-}
-export function validateUpdateTransaction(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'transactionId') || !isString(v.transactionId))
-        return null;
-    if (!Object.hasOwn(v, 'exists') || typeof v.exists !== 'boolean')
-        return null;
-    const result = {
-        transactionId: v.transactionId,
-        exists: v.exists,
-        lastState: Object.hasOwn(v, 'lastState') && isString(v.lastState) ? v.lastState : null,
-        terminal: Object.hasOwn(v, 'terminal') && typeof v.terminal === 'boolean' ? v.terminal : false,
-        tornTailDetected: Object.hasOwn(v, 'tornTailDetected') && typeof v.tornTailDetected === 'boolean' ? v.tornTailDetected : false,
-        startedAt: Object.hasOwn(v, 'startedAt') && isString(v.startedAt) ? v.startedAt : null,
-        lastAt: Object.hasOwn(v, 'lastAt') && isString(v.lastAt) ? v.lastAt : null,
-        productVersion: Object.hasOwn(v, 'productVersion') && isString(v.productVersion) ? v.productVersion : null,
-        reason: Object.hasOwn(v, 'reason') && isString(v.reason) ? v.reason : undefined,
-    };
-    return result;
-}
-// ── Principle Trajectory validators ─────────────────────────────────────────
-const VALID_STAGE_KEYS = ['evidence', 'diagnosis', 'proposal', 'review', 'deploy', 'behavior'];
-const VALID_STAGE_STATUSES = ['available', 'unavailable', 'not_applicable'];
-function isStageKey(v) {
-    return isString(v) && VALID_STAGE_KEYS.includes(v);
-}
-function isStageStatus(v) {
-    return isString(v) && VALID_STAGE_STATUSES.includes(v);
-}
-function validateTrajectoryStage(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'key') || !isStageKey(v.key))
-        return null;
-    if (!Object.hasOwn(v, 'status') || !isStageStatus(v.status))
-        return null;
-    if (!Object.hasOwn(v, 'summary') || !isString(v.summary))
-        return null;
-    const result = {
-        key: v.key,
-        status: v.status,
-        summary: v.summary,
-    };
-    if (Object.hasOwn(v, 'detail')) {
-        if (!isString(v.detail))
-            return null;
-        result.detail = v.detail;
-    }
-    if (Object.hasOwn(v, 'timestamp')) {
-        if (!isString(v.timestamp))
-            return null;
-        result.timestamp = v.timestamp;
-    }
-    if (Object.hasOwn(v, 'unavailableReason')) {
-        if (!isString(v.unavailableReason))
-            return null;
-        result.unavailableReason = v.unavailableReason;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    // meta is Record<string, unknown> — accept any object (ERR-008: bounded preview)
-    if (Object.hasOwn(v, 'meta')) {
-        if (!isObject(v.meta))
-            return null;
-        result.meta = v.meta;
-    }
-    return result;
-}
-export function validateTrajectoryData(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'principleId') || !isString(v.principleId))
-        return null;
-    if (!Object.hasOwn(v, 'stages') || !Array.isArray(v.stages))
-        return null;
-    const stages = validateArray(v.stages, validateTrajectoryStage);
-    if (stages === null)
-        return null;
-    const result = {
-        principleId: v.principleId,
-        stages,
-    };
-    if (Object.hasOwn(v, 'degraded')) {
-        if (!isObject(v.degraded))
-            return null;
-        const d = v.degraded;
-        if (!Object.hasOwn(d, 'reason') || !isString(d.reason))
-            return null;
-        if (!Object.hasOwn(d, 'nextAction') || !isString(d.nextAction))
-            return null;
-        result.degraded = { reason: d.reason, nextAction: d.nextAction };
-    }
-    return result;
-}
-// ── Intent Page (PRI-466) ────────────────────────────────────────────────────
-const VALID_INTENT_REASONS = ['flag_disabled', 'not_found', 'read_error', 'parse_error', 'oversized'];
-const VALID_INTENT_WARNING_CODES = ['missing_section', 'empty_section', 'too_vague', 'oversized', 'parse_failed'];
-const VALID_INTENT_SECTION_KEYS = ['why', 'desiredOutcome', 'nonNegotiables', 'stopEscalation', 'currentStrategicFocus'];
-export function validateIntentWarning(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'code') || !isString(v.code))
-        return null;
-    if (!VALID_INTENT_WARNING_CODES.includes(v.code))
-        return null;
-    if (!Object.hasOwn(v, 'message') || !isString(v.message))
-        return null;
-    const result = { code: v.code, message: v.message };
-    // Runtime Contract Rule #3: fail loud on wrong-type optional fields,
-    // consistent with validateIntentSummary's optional-field handling.
-    if (Object.hasOwn(v, 'section')) {
-        if (!isString(v.section))
-            return null;
-        result.section = v.section;
-    }
-    return result;
-}
-export function validateIntentSections(v) {
-    if (!isObject(v))
-        return null;
-    const result = {};
-    for (const key of VALID_INTENT_SECTION_KEYS) {
-        if (Object.hasOwn(v, key)) {
-            const val = v[key];
-            if (val !== null && !isString(val))
-                return null;
-            if (isString(val)) {
-                result[key] = val;
-            }
-        }
-    }
-    return result;
-}
-export function validateIntentSummary(v) {
-    if (!isObject(v))
-        return null;
-    // Required fields
-    if (!Object.hasOwn(v, 'ok') || !isBoolean(v.ok))
-        return null;
-    if (!Object.hasOwn(v, 'found') || !isBoolean(v.found))
-        return null;
-    if (!Object.hasOwn(v, 'flagEnabled') || !isBoolean(v.flagEnabled))
-        return null;
-    if (!Object.hasOwn(v, 'warnings') || !Array.isArray(v.warnings))
-        return null;
-    const warnings = validateArray(v.warnings, validateIntentWarning);
-    if (warnings === null)
-        return null;
-    const result = {
-        ok: v.ok,
-        found: v.found,
-        flagEnabled: v.flagEnabled,
-        warnings,
-    };
-    // Optional fields — validate type if present, fail loud on wrong type
-    if (Object.hasOwn(v, 'reason')) {
-        if (!isString(v.reason))
-            return null;
-        if (!VALID_INTENT_REASONS.includes(v.reason))
-            return null;
-        result.reason = v.reason;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    if (Object.hasOwn(v, 'path')) {
-        if (!isString(v.path))
-            return null;
-        result.path = v.path;
-    }
-    if (Object.hasOwn(v, 'contentHash')) {
-        if (!isString(v.contentHash))
-            return null;
-        result.contentHash = v.contentHash;
-    }
-    if (Object.hasOwn(v, 'lastEditedAt')) {
-        if (!isString(v.lastEditedAt))
-            return null;
-        result.lastEditedAt = v.lastEditedAt;
-    }
-    if (Object.hasOwn(v, 'sections')) {
-        const sections = validateIntentSections(v.sections);
-        if (sections === null)
-            return null;
-        result.sections = sections;
-    }
-    return result;
-}
-export function validateIntentRawContent(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'content') || !isString(v.content))
-        return null;
-    if (!Object.hasOwn(v, 'path') || !isString(v.path))
-        return null;
-    return { content: v.content, path: v.path };
-}
-export function validateIntentInitResult(v) {
-    if (!isObject(v))
-        return null;
-    // Required fields
-    if (!Object.hasOwn(v, 'ok') || !isBoolean(v.ok))
-        return null;
-    if (!Object.hasOwn(v, 'created') || !isBoolean(v.created))
-        return null;
-    const result = {
-        ok: v.ok,
-        created: v.created,
-    };
-    // Optional fields
-    const path = readNullableString(v, 'path');
-    if (!path.valid)
-        return null;
-    if (path.value !== null)
-        result.path = path.value;
-    const reason = readNullableString(v, 'reason');
-    if (!reason.valid)
-        return null;
-    if (reason.value !== null)
-        result.reason = reason.value;
-    const nextAction = readNullableString(v, 'nextAction');
-    if (!nextAction.valid)
-        return null;
-    if (nextAction.value !== null)
-        result.nextAction = nextAction.value;
-    return result;
-}
-export function validateIntentSaveResult(v) {
-    if (!isObject(v))
-        return null;
-    // Required fields
-    if (!Object.hasOwn(v, 'ok') || !isBoolean(v.ok))
-        return null;
-    if (!Object.hasOwn(v, 'saved') || !isBoolean(v.saved))
-        return null;
-    const result = {
-        ok: v.ok,
-        saved: v.saved,
-    };
-    // Optional fields
-    const path = readNullableString(v, 'path');
-    if (!path.valid)
-        return null;
-    if (path.value !== null)
-        result.path = path.value;
-    const contentHash = readNullableString(v, 'contentHash');
-    if (!contentHash.valid)
-        return null;
-    if (contentHash.value !== null)
-        result.contentHash = contentHash.value;
-    const lastEditedAt = readNullableString(v, 'lastEditedAt');
-    if (!lastEditedAt.valid)
-        return null;
-    if (lastEditedAt.value !== null)
-        result.lastEditedAt = lastEditedAt.value;
-    const reason = readNullableString(v, 'reason');
-    if (!reason.valid)
-        return null;
-    if (reason.value !== null)
-        result.reason = reason.value;
-    const nextAction = readNullableString(v, 'nextAction');
-    if (!nextAction.valid)
-        return null;
-    if (nextAction.value !== null)
-        result.nextAction = nextAction.value;
-    if (Object.hasOwn(v, 'warnings')) {
-        if (!Array.isArray(v.warnings))
-            return null;
-        const warnings = validateArray(v.warnings, validateIntentWarning);
-        if (warnings === null)
-            return null;
-        result.warnings = warnings;
-    }
-    return result;
-}
-function validateIntentVersionEntry(v) {
-    if (!isObject(v))
-        return null;
-    // Required string fields — fail loud on missing or wrong type (rc-3, rc-4)
-    if (!Object.hasOwn(v, 'id') || !isString(v.id))
-        return null;
-    if (!Object.hasOwn(v, 'lang') || !isString(v.lang))
-        return null;
-    if (!Object.hasOwn(v, 'contentHash') || !isString(v.contentHash))
-        return null;
-    if (!Object.hasOwn(v, 'contentSnapshot') || !isString(v.contentSnapshot))
-        return null;
-    if (!Object.hasOwn(v, 'reason') || !isString(v.reason))
-        return null;
-    if (!Object.hasOwn(v, 'createdAt') || !isString(v.createdAt))
-        return null;
-    return {
-        id: v.id,
-        lang: v.lang,
-        contentHash: v.contentHash,
-        contentSnapshot: v.contentSnapshot,
-        reason: v.reason,
-        createdAt: v.createdAt,
-    };
-}
-export function validateIntentVersions(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'versions') || !Array.isArray(v.versions))
-        return null;
-    const versions = validateArray(v.versions, validateIntentVersionEntry);
-    if (versions === null)
-        return null;
-    return { versions };
-}
-function parseOwnerGovernanceReadiness(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'authenticationMode') || (v.authenticationMode !== 'authenticated' && v.authenticationMode !== 'no_auth'))
-        return null;
-    if (!Object.hasOwn(v, 'ownerIdentityConfiguration') || (v.ownerIdentityConfiguration !== 'configured' && v.ownerIdentityConfiguration !== 'missing' && v.ownerIdentityConfiguration !== 'invalid'))
-        return null;
-    return { authenticationMode: v.authenticationMode, ownerIdentityConfiguration: v.ownerIdentityConfiguration };
-}
-function parseOwnerIdentityRecordData(v) {
-    if (v === undefined || v === null)
-        return null;
-    if (!isObject(v))
-        return null;
-    const rec = v;
-    if (!Object.hasOwn(rec, 'schemaVersion') || !isNumber(rec.schemaVersion))
-        return null;
-    if (!Object.hasOwn(rec, 'ownerId') || !isString(rec.ownerId))
-        return null;
-    if (!Object.hasOwn(rec, 'credentialId') || !isString(rec.credentialId))
-        return null;
-    if (!Object.hasOwn(rec, 'registeredAt') || !isString(rec.registeredAt))
-        return null;
-    return { schemaVersion: rec.schemaVersion, ownerId: rec.ownerId, credentialId: rec.credentialId, registeredAt: rec.registeredAt };
-}
-export function validateOwnerIdentityView(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'resolved') || !isObject(v.resolved))
-        return null;
-    const r = v.resolved;
-    if (!Object.hasOwn(r, 'ownerId') || (r.ownerId !== null && !isString(r.ownerId)))
-        return null;
-    if (!Object.hasOwn(r, 'credentialId') || (r.credentialId !== null && !isString(r.credentialId)))
-        return null;
-    if (!Object.hasOwn(r, 'source') || (r.source !== 'env' && r.source !== 'file' && r.source !== 'none' && r.source !== 'invalid_env'))
-        return null;
-    const governance = parseOwnerGovernanceReadiness(v.governance);
-    if (governance === null)
-        return null;
-    const out = {
-        resolved: {
-            ownerId: r.ownerId,
-            credentialId: r.credentialId,
-            source: r.source,
-            ...(Object.hasOwn(r, 'error') && isString(r.error) ? { error: r.error } : {}),
-        },
-        fileRecord: parseOwnerIdentityRecordData(v.fileRecord),
-        governance,
-    };
-    if (Object.hasOwn(v, 'fileError') && isString(v.fileError))
-        out.fileError = v.fileError;
-    return out;
-}
-export function validateOwnerIdentityRegister(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'source') || v.source !== 'file')
-        return null;
-    if (!Object.hasOwn(v, 'record') || !isObject(v.record))
-        return null;
-    const rec = v.record;
-    if (!Object.hasOwn(rec, 'schemaVersion') || !isNumber(rec.schemaVersion))
-        return null;
-    if (!Object.hasOwn(rec, 'ownerId') || !isString(rec.ownerId))
-        return null;
-    if (!Object.hasOwn(rec, 'credentialId') || !isString(rec.credentialId))
-        return null;
-    if (!Object.hasOwn(rec, 'registeredAt') || !isString(rec.registeredAt))
-        return null;
-    const governance = parseOwnerGovernanceReadiness(v.governance);
-    if (governance === null)
-        return null;
-    return {
-        source: 'file',
-        record: { schemaVersion: rec.schemaVersion, ownerId: rec.ownerId, credentialId: rec.credentialId, registeredAt: rec.registeredAt },
-        governance,
-    };
-}
-export function validateOwnerIdentityUnregister(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'ok') || !isBoolean(v.ok) || v.ok !== true)
-        return null;
-    if (!Object.hasOwn(v, 'source') || v.source !== 'none')
-        return null;
-    const governance = parseOwnerGovernanceReadiness(v.governance);
-    if (governance === null)
-        return null;
-    return { ok: true, source: 'none', governance };
-}
-// ── PRI-629: unified Owner Decision inbox (owner-decisions API) ──────────────
-const OWNER_DECISION_KINDS = new Set(['evaluator_review', 'rollout_review', 'activation_approval', 'rulecode_decision']);
-const OWNER_DECISION_ACTIONS = new Set(['accept_current', 'revise_once', 'reject_current', 'approve', 'reject', 'promote', 'reject_after_shadow']);
-/**
- * PRI-858: strict shape check for the formation evidence block. Anything
- * malformed → the caller omits the whole block (an evidence projection is a
- * review aid; a partial one would misrepresent what the machine actually
- * saw). Deliberately does NOT carry raw artifact payloads or full lineage
- * arrays — only the bounded projection the Owner reads.
- */
-function validateOwnerFormationEvidence(value) {
-    if (!isObject(value))
-        return null;
-    const { provenance } = value;
-    if (!isString(value.version))
-        return null;
-    const sourcePainId = readNullableString(value, 'sourcePainId');
-    if (!sourcePainId.valid)
-        return null;
-    if (!Array.isArray(value.notes))
-        return null;
-    const notes = [];
-    for (const note of value.notes) {
-        if (!isString(note))
-            return null;
-        notes.push(note);
-    }
-    if (!isObject(provenance))
-        return null;
-    const dreamerId = readNullableString(provenance, 'sourceDreamerArtifactId');
-    if (!dreamerId.valid || dreamerId.value === null)
-        return null;
-    const diagnosisArtifactId = readNullableString(provenance, 'sourceDiagnosisArtifactId');
-    const diagnosisTaskId = readNullableString(provenance, 'sourceDiagnosisTaskId');
-    if (!diagnosisArtifactId.valid || !diagnosisTaskId.valid)
-        return null;
-    const parsed = {
-        version: value.version,
-        sourcePainId: sourcePainId.value,
-        provenance: {
-            sourceDreamerArtifactId: dreamerId.value,
-            sourceDiagnosisArtifactId: diagnosisArtifactId.value,
-            sourceDiagnosisTaskId: diagnosisTaskId.value,
-        },
-        notes,
-    };
-    if (value.diagnosis !== undefined) {
-        if (!isObject(value.diagnosis))
-            return null;
-        const { diagnosis } = value;
-        const rootCause = readNullableString(diagnosis, 'rootCause');
-        const summary = readNullableString(diagnosis, 'summary');
-        if (!rootCause.valid || !summary.valid)
-            return null;
-        if (!Array.isArray(diagnosis.evidence))
-            return null;
-        const evidenceRows = [];
-        for (const entry of diagnosis.evidence) {
-            if (!isObject(entry))
-                return null;
-            const sourceRef = readNullableString(entry, 'sourceRef');
-            const note = readNullableString(entry, 'note');
-            if (!sourceRef.valid || sourceRef.value === null || !note.valid || note.value === null)
-                return null;
-            evidenceRows.push({ sourceRef: sourceRef.value, note: note.value });
-        }
-        parsed.diagnosis = { rootCause: rootCause.value, summary: summary.value, evidence: evidenceRows };
-    }
-    return parsed;
-}
-function readOwnerStringArray(value) {
-    if (!Array.isArray(value) || value.some(entry => typeof entry !== 'string'))
-        return null;
-    return value;
-}
-function validateOwnerDecisionReview(value) {
-    if (!isObject(value) || !isObject(value.brief) || !isObject(value.evidence) || !isObject(value.capability))
-        return null;
-    const { brief, evidence, capability } = value;
-    if (brief.kind !== 'evaluator' && brief.kind !== 'rollout')
-        return null;
-    const requiredChanges = readOwnerStringArray(brief.requiredChanges);
-    if (requiredChanges === null)
-        return null;
-    const parsedBrief = { kind: brief.kind, requiredChanges };
-    if (brief.kind === 'evaluator') {
-        if (!isObject(brief.principle) || !isObject(brief.implementation))
-            return null;
-        const scope = readOwnerStringArray(brief.principle.scope);
-        const affectedTools = readOwnerStringArray(brief.implementation.affectedTools);
-        const risks = readOwnerStringArray(brief.implementation.risks);
-        const strengths = readOwnerStringArray(brief.strengths);
-        const concerns = readOwnerStringArray(brief.concerns);
-        if (scope === null || affectedTools === null || risks === null || strengths === null || concerns === null)
-            return null;
-        parsedBrief.principle = { scope };
-        for (const key of ['title', 'statement', 'rationale']) {
-            const candidate = brief.principle[key];
-            if (candidate !== undefined && !isString(candidate))
-                return null;
-            if (isString(candidate))
-                parsedBrief.principle[key] = candidate;
-        }
-        parsedBrief.implementation = { affectedTools, risks };
-        if (brief.implementation.summary !== undefined && !isString(brief.implementation.summary))
-            return null;
-        if (isString(brief.implementation.summary))
-            parsedBrief.implementation.summary = brief.implementation.summary;
-        parsedBrief.strengths = strengths;
-        parsedBrief.concerns = concerns;
-        if (brief.score !== undefined && !isNumber(brief.score))
-            return null;
-        if (isNumber(brief.score))
-            parsedBrief.score = brief.score;
-        // PRI-704 / PRI-703 Phase 4 (评审修正): optional quality checklist —
-        // strict five-item contract: schemaVersion must be exactly 1 and the five
-        // known item ids must each appear EXACTLY once (the UI builds i18n keys
-        // from the id; an unknown id would render an untranslated label, a
-        // missing id an incomplete checklist). Anything else → omit the whole
-        // checklist (older snapshots legitimately lack it; a partial one must
-        // not masquerade as a review aid).
-        if (brief.qualityChecklist !== undefined) {
-            const KNOWN_IDS = ['understandability', 'evidence', 'actionability', 'generalization', 'boundary'];
-            const qc = brief.qualityChecklist;
-            if (isObject(qc) && qc.schemaVersion === 1 && Array.isArray(qc.items)) {
-                const validItems = [];
-                let shapeValid = true;
-                const seen = new Set();
-                for (const entry of qc.items) {
-                    if (!isObject(entry) || !isString(entry.id)
-                        || typeof entry.pass !== 'boolean' || !isString(entry.note)) {
-                        shapeValid = false;
-                        break;
-                    }
-                    seen.add(entry.id);
-                    validItems.push({ id: entry.id, pass: entry.pass, note: entry.note });
-                }
-                const allKnownOnce = shapeValid
-                    && validItems.length === KNOWN_IDS.length
-                    && KNOWN_IDS.every((id) => seen.has(id));
-                if (allKnownOnce) {
-                    parsedBrief.qualityChecklist = { schemaVersion: 1, items: validItems };
-                }
-            }
-        }
-        // PRI-858: formation evidence projection (optional, display-only). Absent
-        // on legacy snapshots; malformed → omitted rather than half-rendered.
-        if (brief.formationEvidence !== undefined) {
-            const formationEvidence = validateOwnerFormationEvidence(brief.formationEvidence);
-            if (formationEvidence !== null)
-                parsedBrief.formationEvidence = formationEvidence;
-        }
-    }
-    else {
-        const risks = readOwnerStringArray(brief.risks);
-        if (risks === null)
-            return null;
-        if (brief.summary !== undefined && !isString(brief.summary))
-            return null;
-        if (isString(brief.summary))
-            parsedBrief.summary = brief.summary;
-        parsedBrief.risks = risks;
-    }
-    if (evidence.completeness !== 'complete' && evidence.completeness !== 'partial' && evidence.completeness !== 'insufficient')
-        return null;
-    if (!isString(evidence.digest) || !Array.isArray(evidence.deterministicChecks) || !Array.isArray(evidence.items))
-        return null;
-    const deterministicChecks = [];
-    for (const entry of evidence.deterministicChecks) {
-        if (!isObject(entry) || !isString(entry.check)
-            || (entry.status !== 'passed' && entry.status !== 'failed' && entry.status !== 'not_run' && entry.status !== 'unavailable'))
-            return null;
-        deterministicChecks.push({ check: entry.check, status: entry.status });
-    }
-    const items = [];
-    for (const entry of evidence.items) {
-        if (!isObject(entry) || !isString(entry.evidenceClass) || !isString(entry.label) || !isString(entry.value))
-            return null;
-        items.push({ evidenceClass: entry.evidenceClass, label: entry.label, value: entry.value });
-    }
-    if (!isObject(capability.acceptRequirement))
-        return null;
-    const requirement = capability.acceptRequirement;
-    if (requirement.kind !== 'none' && requirement.kind !== 'acknowledge_partial_evidence' && requirement.kind !== 'forbidden')
-        return null;
-    if (requirement.reasonCode !== undefined && !isString(requirement.reasonCode))
-        return null;
-    return {
-        brief: parsedBrief,
-        evidence: { completeness: evidence.completeness, deterministicChecks, items, digest: evidence.digest },
-        capability: { acceptRequirement: { kind: requirement.kind, ...(isString(requirement.reasonCode) ? { reasonCode: requirement.reasonCode } : {}) } },
-    };
-}
-export function validateOwnerDecisionItem(v) {
-    if (!isObject(v))
-        return null;
-    const { reviewKey } = v;
-    const { kind } = v;
-    const { taskId } = v;
-    const { title } = v;
-    const { summary } = v;
-    const { reasonCode } = v;
-    const { createdAt } = v;
-    if (!isString(reviewKey) || !isString(kind) || !isString(taskId) || !isString(title)
-        || !isString(summary) || !isString(reasonCode) || !isString(createdAt))
-        return null;
-    if (!OWNER_DECISION_KINDS.has(kind))
-        return null;
-    if (!Object.hasOwn(v, 'legacy') || !isBoolean(v.legacy))
-        return null;
-    if (!Object.hasOwn(v, 'allowedActions') || !Array.isArray(v.allowedActions))
-        return null;
-    for (const action of v.allowedActions) {
-        if (typeof action !== 'string' || !OWNER_DECISION_ACTIONS.has(action))
-            return null;
-    }
-    if (!Object.hasOwn(v, 'expectedRevisionEpoch') || !isNumber(v.expectedRevisionEpoch))
-        return null;
-    const { expectedRevisionEpoch } = v;
-    const { expectedSourceRunId } = v;
-    const { expectedSourceArtifactId } = v;
-    const { expectedSourceArtifactHash } = v;
-    if (!isString(expectedSourceRunId) || !isString(expectedSourceArtifactId) || !isString(expectedSourceArtifactHash))
-        return null;
-    const item = {
-        reviewKey,
-        kind,
-        taskId,
-        title,
-        summary,
-        reasonCode,
-        legacy: v.legacy,
-        allowedActions: v.allowedActions,
-        expectedRevisionEpoch,
-        expectedSourceRunId,
-        expectedSourceArtifactId,
-        expectedSourceArtifactHash,
-        createdAt,
-    };
-    if (Object.hasOwn(v, 'expectedEvidenceDigest')) {
-        if (!isString(v.expectedEvidenceDigest))
-            return null;
-        item.expectedEvidenceDigest = v.expectedEvidenceDigest;
-    }
-    if (Object.hasOwn(v, 'review')) {
-        const review = validateOwnerDecisionReview(v.review);
-        if (review === null)
-            return null;
-        if (item.expectedEvidenceDigest !== undefined && item.expectedEvidenceDigest !== review.evidence.digest)
-            return null;
-        item.review = review;
-    }
-    if (Object.hasOwn(v, 'evidenceUnavailableReason')) {
-        if (!isString(v.evidenceUnavailableReason) || v.evidenceUnavailableReason.trim() === '')
-            return null;
-        item.evidenceUnavailableReason = v.evidenceUnavailableReason;
-    }
-    if ((kind === 'evaluator_review' || kind === 'rollout_review')
-        && item.evidenceUnavailableReason === undefined
-        && (item.expectedEvidenceDigest === undefined || item.review === undefined))
-        return null;
-    if (Object.hasOwn(v, 'machineRecommendation')) {
-        if (!isString(v.machineRecommendation))
-            return null;
-        item.machineRecommendation = v.machineRecommendation;
-    }
-    if (Object.hasOwn(v, 'score')) {
-        if (!isNumber(v.score))
-            return null;
-        item.score = v.score;
-    }
-    if (Object.hasOwn(v, 'principleId')) {
-        if (!isString(v.principleId))
-            return null;
-        item.principleId = v.principleId;
-    }
-    return item;
-}
-export function validateOwnerDecisionsData(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'items') || !Array.isArray(v.items))
-        return null;
-    const items = [];
-    for (const entry of v.items) {
-        const item = validateOwnerDecisionItem(entry);
-        if (item === null)
-            return null;
-        items.push(item);
-    }
-    if (!Object.hasOwn(v, 'total') || !isNumber(v.total))
-        return null;
-    if (!Object.hasOwn(v, 'generatedAt') || !isString(v.generatedAt))
-        return null;
-    return { items, total: v.total, generatedAt: v.generatedAt };
-}
-export function validateOwnerResolutionResult(v) {
-    if (!isObject(v))
-        return null;
-    if (!Object.hasOwn(v, 'status') || v.status !== 'resolved')
-        return null;
-    const { resolutionId } = v;
-    const { reviewKey } = v;
-    const { action } = v;
-    if (!isString(resolutionId) || !isString(reviewKey) || !isString(action))
-        return null;
-    if (!Object.hasOwn(v, 'applied') || !isBoolean(v.applied))
-        return null;
-    if (!Object.hasOwn(v, 'runnerWillApply') || !isBoolean(v.runnerWillApply))
-        return null;
-    const result = {
-        status: 'resolved',
-        resolutionId,
-        reviewKey,
-        action,
-        applied: v.applied,
-        runnerWillApply: v.runnerWillApply,
-    };
-    if (Object.hasOwn(v, 'effectiveDecision')) {
-        if (!isString(v.effectiveDecision))
-            return null;
-        result.effectiveDecision = v.effectiveDecision;
-    }
-    if (Object.hasOwn(v, 'targetTaskId')) {
-        if (!isString(v.targetTaskId))
-            return null;
-        result.targetTaskId = v.targetTaskId;
-    }
-    if (Object.hasOwn(v, 'nextAction')) {
-        if (!isString(v.nextAction))
-            return null;
-        result.nextAction = v.nextAction;
-    }
-    return result;
-}