create-principles-disciple 1.85.0 → 1.87.0

package/core/dist/runtime-v2/internalization/rule-host-evaluator.js

@@ -12,6 +12,7 @@
  * No filesystem, no VM, no side effects.
  */
 import { validateCorrectionProposal } from './correction-proposal.js';
+import { validateRuleHostResult } from './rule-host-validator.js';
 /**
  * Merge decisions from multiple loaded implementations.
  *
@@ -35,6 +36,17 @@ export function mergeDecisions(implementations, input, logger) {
         for (const impl of implementations) {
             try {
                 const result = impl.evaluate(input);
+                // PRI-437: Defense-in-depth — validate result before accessing fields.
+                // The primary validation is in rule-host.ts at the VM trust boundary,
+                // but this guard protects against any implementation provider that
+                // bypasses the production RuleHost validation path.
+                const validation = validateRuleHostResult(result);
+                if (!validation.valid) {
+                    const reason = `invalid RuleHostResult: ${validation.errors.join('; ')}`;
+                    logger?.warn?.(`[RuleHost] Implementation ${impl.implId} returned ${reason}`);
+                    logger?.onImplementationUnhealthy?.(impl, reason);
+                    continue;
+                }
                 if (!result.matched) {
                     continue;
                 }
@@ -51,7 +63,9 @@ export function mergeDecisions(implementations, input, logger) {
                 // 'allow' is implicit �?no action needed
             }
             catch (evalError) {
-                logger?.warn?.(`[RuleHost] Implementation ${impl.implId} evaluation failed: ${String(evalError)}`);
+                const reason = `evaluation failed: ${String(evalError)}`;
+                logger?.warn?.(`[RuleHost] Implementation ${impl.implId} ${reason}`);
+                logger?.onImplementationUnhealthy?.(impl, reason);
             }
         }
         if (blocked) {

package/core/dist/runtime-v2/internalization/rule-host-evaluator.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule-host-evaluator.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAYtE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,eAAgD,EAChD,KAAoB,EACpB,MAA4B;IAE5B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QAEH,IAAI,OAAO,GAA+B,SAAS,CAAC;QACpD,MAAM,YAAY,GAAqB,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAqB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAEpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChC,OAAO,GAAG,MAAM,CAAC;oBACjB,MAAM;gBACR,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;oBACvC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBACjD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;gBACD,yCAAyC;YAC3C,CAAC;YAAC,OAAO,SAAkB,EAAE,CAAC;gBAC5B,MAAM,EAAE,IAAI,EAAE,CACZ,6BAA6B,IAAI,CAAC,MAAM,uBAAuB,MAAM,CAAC,SAAS,CAAC,EAAE,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,qDAAqD;QACrD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;gBAC9B,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;wBACrE,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;4BACrB,OAAO,EAAE,CAAC;wBACZ,CAAC;wBACD,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,uBAAuB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrH,CAAC;oBACJ,CAAC;oBAAC,OAAO,eAAwB,EAAE,CAAC;wBAClC,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,2CAA2C,MAAM,CAAC,eAAe,CAAC,EAAE,CACpI,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,6BAA6B,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,uEAAuE;QACzE,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjD,WAAW,EAAE,SAAS,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;oBACZ,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,CAAC;oBAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;oBACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;wBAC7B,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAC5B,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC,EACD,EAAE,CACH;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,SAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,CACZ,gEAAgE,MAAM,CAAC,SAAS,CAAC,EAAE,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"rule-host-evaluator.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAalE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,eAAgD,EAChD,KAAoB,EACpB,MAA4B;IAE5B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QAEH,IAAI,OAAO,GAA+B,SAAS,CAAC;QACpD,MAAM,YAAY,GAAqB,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAqB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAEpC,uEAAuE;gBACvE,sEAAsE;gBACtE,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,2BAA2B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzE,MAAM,EAAE,IAAI,EAAE,CACZ,6BAA6B,IAAI,CAAC,MAAM,aAAa,MAAM,EAAE,CAC9D,CAAC;oBACF,MAAM,EAAE,yBAAyB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAClD,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,SAAS;gBACX,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChC,OAAO,GAAG,MAAM,CAAC;oBACjB,MAAM;gBACR,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;oBACvC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBACjD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;gBACD,yCAAyC;YAC3C,CAAC;YAAC,OAAO,SAAkB,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,sBAAsB,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzD,MAAM,EAAE,IAAI,EAAE,CACZ,6BAA6B,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CACrD,CAAC;gBACF,MAAM,EAAE,yBAAyB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,qDAAqD;QACrD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;gBAC9B,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;wBACrE,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;4BACrB,OAAO,EAAE,CAAC;wBACZ,CAAC;wBACD,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,uBAAuB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrH,CAAC;oBACJ,CAAC;oBAAC,OAAO,eAAwB,EAAE,CAAC;wBAClC,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,2CAA2C,MAAM,CAAC,eAAe,CAAC,EAAE,CACpI,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,IAAI,EAAE,CACZ,yCAAyC,EAAE,CAAC,MAAM,IAAI,SAAS,6BAA6B,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,uEAAuE;QACzE,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjD,WAAW,EAAE,SAAS,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;oBACZ,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,CAAC;oBAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;oBACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;wBAC7B,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAC5B,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC,EACD,EAAE,CACH;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,SAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,CACZ,gEAAgE,MAAM,CAAC,SAAS,CAAC,EAAE,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/core/dist/runtime-v2/internalization/rule-host-input-builder.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Rule Host Input Builder — Pure action snapshot construction (PRI-439 Phase 3)
+ *
+ * PURPOSE: Provide a single pure function that both Golden Trace replay and
+ * the production OpenClaw Gate use to construct the `action` field of
+ * RuleHostInput. This eliminates the divergence where Golden Trace produced
+ * `normalizedPath: null` while production produced a non-null string.
+ *
+ * ARCHITECTURE: Pure logic — no node:path, no node:fs, no platform-dependent
+ * APIs. Path normalization is implemented via manual string operations,
+ * following the pattern established in correction-proposal.ts.
+ *
+ * The 6 path types handled:
+ *   1. Absolute POSIX  (/project/src/index.ts, /project)
+ *   2. Absolute Windows (D:\project\src\index.ts, D:\project)
+ *   3. Relative bare    (src/index.ts, /project)
+ *   4. Relative ./      (./src/index.ts, /project)
+ *   5. Relative ../     (../src/index.ts, /project) — escapes project
+ *   6. Empty/null       (null / '' / undefined, /project)
+ */
+import type { RuleHostInput } from './rule-host-contracts.js';
+/**
+ * Normalize a file path to a project-relative POSIX-style path.
+ *
+ * Returns '' for empty/null/undefined input.
+ * Returns the original path (with separators normalized to /) if the path
+ * escapes the project directory (starts with ../ after relativization).
+ *
+ * This function is deterministic — the same inputs produce the same output
+ * regardless of the host platform.
+ */
+export declare function normalizePathPure(filePath: string | null | undefined, projectDir: string): string;
+export interface ExtractFilePathOptions {
+    /** Whether the tool is a write/edit tool (triggers synthetic <tool:...> path). */
+    isWriteTool?: boolean;
+    /** Whether the tool is a bash tool (triggers command mutation regex). */
+    isBashTool?: boolean;
+    /** The tool name (used for synthetic path generation). */
+    toolName?: string;
+}
+/**
+ * Extract the file path from tool call params, using the same heuristic
+ * as the production OpenClaw Gate (gate.ts).
+ *
+ * Extraction order:
+ *   1. params.file_path || params.path || params.file || params.target
+ *   2. Bash command mutation regex (for bash tools without a file_path)
+ *   3. Synthetic <tool:${toolName}> (for write tools without any path)
+ *
+ * Returns null if no path can be extracted.
+ */
+export declare function extractFilePathFromParams(params: Record<string, unknown>, options?: ExtractFilePathOptions): string | null;
+export type BuildRuleHostActionOptions = ExtractFilePathOptions;
+/**
+ * Build the `action` field of RuleHostInput — the unified snapshot used by
+ * both Golden Trace replay and the production OpenClaw Gate.
+ *
+ * This function combines file path extraction + path normalization into a
+ * single pure call, ensuring both paths produce the same `normalizedPath`.
+ */
+export declare function buildRuleHostAction(toolName: string, params: Record<string, unknown>, projectDir: string, options?: BuildRuleHostActionOptions): RuleHostInput['action'];
+//# sourceMappingURL=rule-host-input-builder.d.ts.map

package/core/dist/runtime-v2/internalization/rule-host-input-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-host-input-builder.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI9D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,UAAU,EAAE,MAAM,GACjB,MAAM,CAqDR;AA8DD,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yEAAyE;IACzE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,GAAE,sBAA2B,GACnC,MAAM,GAAG,IAAI,CA4Bf;AAID,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAEhE;;;;;;GAMG;AAEH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,0BAA+B,GACvC,aAAa,CAAC,QAAQ,CAAC,CAQzB"}

package/core/dist/runtime-v2/internalization/rule-host-input-builder.js

@@ -0,0 +1,182 @@
+/**
+ * Rule Host Input Builder — Pure action snapshot construction (PRI-439 Phase 3)
+ *
+ * PURPOSE: Provide a single pure function that both Golden Trace replay and
+ * the production OpenClaw Gate use to construct the `action` field of
+ * RuleHostInput. This eliminates the divergence where Golden Trace produced
+ * `normalizedPath: null` while production produced a non-null string.
+ *
+ * ARCHITECTURE: Pure logic — no node:path, no node:fs, no platform-dependent
+ * APIs. Path normalization is implemented via manual string operations,
+ * following the pattern established in correction-proposal.ts.
+ *
+ * The 6 path types handled:
+ *   1. Absolute POSIX  (/project/src/index.ts, /project)
+ *   2. Absolute Windows (D:\project\src\index.ts, D:\project)
+ *   3. Relative bare    (src/index.ts, /project)
+ *   4. Relative ./      (./src/index.ts, /project)
+ *   5. Relative ../     (../src/index.ts, /project) — escapes project
+ *   6. Empty/null       (null / '' / undefined, /project)
+ */
+// ── Path normalization (pure, no node:path) ─────────────────────────────────
+/**
+ * Normalize a file path to a project-relative POSIX-style path.
+ *
+ * Returns '' for empty/null/undefined input.
+ * Returns the original path (with separators normalized to /) if the path
+ * escapes the project directory (starts with ../ after relativization).
+ *
+ * This function is deterministic — the same inputs produce the same output
+ * regardless of the host platform.
+ */
+export function normalizePathPure(filePath, projectDir) {
+    if (!filePath || typeof filePath !== 'string')
+        return '';
+    // Normalize separators to POSIX
+    const file = filePath.replace(/\\/g, '/');
+    const project = projectDir.replace(/\\/g, '/');
+    // Detect Windows drive letters (e.g. D:/path)
+    const fileHasDrive = file.length >= 2 && file[1] === ':';
+    const projectHasDrive = project.length >= 2 && project[1] === ':';
+    // If file has drive but project doesn't, convert file to WSL-style path
+    // (D:/path -> /mnt/d/path) so both are in the same coordinate system.
+    let fileNormalized = file;
+    if (fileHasDrive && !projectHasDrive) {
+        fileNormalized = `/mnt/${file.charAt(0).toLowerCase()}${file.slice(2)}`;
+    }
+    // Strip drive letter prefix for segment-based comparison
+    const fileBody = fileHasDrive && projectHasDrive
+        ? fileNormalized.slice(2)
+        : fileNormalized;
+    const projectBody = projectHasDrive
+        ? project.slice(2)
+        : project;
+    const fileIsAbsolute = fileBody.startsWith('/');
+    const projectIsAbsolute = projectBody.startsWith('/');
+    if (fileIsAbsolute && projectIsAbsolute) {
+        // Both absolute — compute relative path
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define
+        const rel = posixRelative(projectBody, fileBody);
+        if (rel.startsWith('../')) {
+            return fileNormalized;
+        }
+        return rel;
+    }
+    if (!fileIsAbsolute) {
+        // File is relative — join with project body, then compute relative
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define
+        const joined = posixJoin(projectBody, fileBody);
+        // eslint-disable-next-line @typescript-eslint/no-use-before-define
+        const rel = posixRelative(projectBody, joined);
+        if (rel.startsWith('../')) {
+            return fileNormalized;
+        }
+        return rel;
+    }
+    // File is absolute but project is not (or vice versa) — can't relativize
+    return fileNormalized;
+}
+/**
+ * Compute the relative path from `from` to `to` using POSIX semantics.
+ * Both inputs must use / as separator.
+ */
+function posixRelative(from, to) {
+    const fromSegs = from.split('/').filter((s) => s.length > 0);
+    const toSegs = to.split('/').filter((s) => s.length > 0);
+    // Find common prefix length
+    let commonLen = 0;
+    while (commonLen < fromSegs.length &&
+        commonLen < toSegs.length &&
+        fromSegs[commonLen] === toSegs[commonLen]) {
+        commonLen++;
+    }
+    const upCount = fromSegs.length - commonLen;
+    const downSegs = toSegs.slice(commonLen);
+    const parts = [];
+    for (let i = 0; i < upCount; i++) {
+        parts.push('..');
+    }
+    parts.push(...downSegs);
+    return parts.length === 0 ? '.' : parts.join('/');
+}
+/**
+ * Join a base path and a relative path using POSIX semantics.
+ * Resolves . and .. segments. The result always starts with /.
+ */
+function posixJoin(base, rel) {
+    const baseSegs = base.split('/').filter((s) => s.length > 0);
+    const relSegs = rel.split('/').filter((s) => s.length > 0);
+    const result = [];
+    for (const seg of baseSegs) {
+        if (seg === '..') {
+            if (result.length > 0)
+                result.pop();
+        }
+        else if (seg !== '.') {
+            result.push(seg);
+        }
+    }
+    for (const seg of relSegs) {
+        if (seg === '..') {
+            if (result.length > 0)
+                result.pop();
+        }
+        else if (seg !== '.') {
+            result.push(seg);
+        }
+    }
+    return '/' + result.join('/');
+}
+/**
+ * Extract the file path from tool call params, using the same heuristic
+ * as the production OpenClaw Gate (gate.ts).
+ *
+ * Extraction order:
+ *   1. params.file_path || params.path || params.file || params.target
+ *   2. Bash command mutation regex (for bash tools without a file_path)
+ *   3. Synthetic <tool:${toolName}> (for write tools without any path)
+ *
+ * Returns null if no path can be extracted.
+ */
+export function extractFilePathFromParams(params, options = {}) {
+    // 1. Direct path-like params
+    const directPath = params.file_path || params.path || params.file || params.target;
+    if (typeof directPath === 'string' && directPath.length > 0) {
+        return directPath;
+    }
+    // 2. Bash command mutation regex
+    if (options.isBashTool) {
+        const command = String(params.command || params.args || '');
+        if (command) {
+            const mutationMatch = /(?:>|>>|sed\s+-i|rm|mv|mkdir|touch|cp)\s+(?:-[a-zA-Z]+\s+)*([^\s;&|<>]+)/.exec(command);
+            if (mutationMatch && mutationMatch[1]) {
+                return mutationMatch[1];
+            }
+            // Bash command without a clear file target — return the full command
+            return command;
+        }
+    }
+    // 3. Synthetic path for pathless write tools
+    if (options.isWriteTool && options.toolName) {
+        return `<tool:${options.toolName}>`;
+    }
+    return null;
+}
+/**
+ * Build the `action` field of RuleHostInput — the unified snapshot used by
+ * both Golden Trace replay and the production OpenClaw Gate.
+ *
+ * This function combines file path extraction + path normalization into a
+ * single pure call, ensuring both paths produce the same `normalizedPath`.
+ */
+// eslint-disable-next-line @typescript-eslint/max-params
+export function buildRuleHostAction(toolName, params, projectDir, options = {}) {
+    const filePath = extractFilePathFromParams(params, { ...options, toolName });
+    const normalizedPath = normalizePathPure(filePath, projectDir);
+    return {
+        toolName,
+        normalizedPath,
+        paramsSummary: { ...params },
+    };
+}
+//# sourceMappingURL=rule-host-input-builder.js.map

package/core/dist/runtime-v2/internalization/rule-host-input-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-host-input-builder.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-input-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAmC,EACnC,UAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzD,gCAAgC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE/C,8CAA8C;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAElE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,cAAc,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,YAAY,IAAI,eAAe;QAC9C,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,WAAW,GAAG,eAAe;QACjC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,CAAC;IAEZ,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACxC,wCAAwC;QACxC,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAChD,mEAAmE;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,EAAU;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEzD,4BAA4B;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OACE,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC3B,SAAS,GAAG,MAAM,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,EACzC,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAExB,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAaD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,UAAkC,EAAE;IAEpC,6BAA6B;IAC7B,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;IAClE,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GACjB,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3F,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,qEAAqE;YACrE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,OAAO,CAAC,QAAQ,GAAG,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAMD;;;;;;GAMG;AACH,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAA+B,EAC/B,UAAkB,EAClB,UAAsC,EAAE;IAExC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/D,OAAO;QACL,QAAQ;QACR,cAAc;QACd,aAAa,EAAE,EAAE,GAAG,MAAM,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/core/dist/runtime-v2/internalization/rule-host-validator.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Rule Host Result Validator — Runtime validation for untrusted VM output
+ *
+ * PURPOSE: Validate that a value returned by a VM-executed evaluate() function
+ * conforms to the RuleHostResult contract before it reaches merge/mutation.
+ *
+ * TRUST BOUNDARY:
+ *   - All VM output is treated as `unknown` (ERR-001: no `as` bypass)
+ *   - Uses Object.hasOwn for untrusted key checks (ERR-013)
+ *   - Fail-closed: invalid results are rejected, never enforced (ERR-002)
+ *
+ * PRI-437: Extracted from demo-rule-compiler.ts isRuleHostResult() and
+ * productionized as the shared validator for both production RuleHost
+ * and demo/test compilers (ERR-024: validator wired into production).
+ */
+export interface RuleHostResultValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+/**
+ * Validate that an untrusted value conforms to the RuleHostResult contract.
+ *
+ * Checks:
+ *   - Value is a plain object (not null, array, or non-object)
+ *   - No prototype pollution keys (__proto__, constructor, prototype)
+ *   - decision: required, one of allow|block|requireApproval|auto_correct
+ *   - matched: required, boolean
+ *   - reason: required, string
+ *   - diagnostics: optional, plain object if present
+ *   - ruleId: optional, string if present
+ *   - principleId: optional, string if present
+ *   - correctionProposal: required when decision is auto_correct, must pass validateCorrectionProposal
+ *
+ * @returns { valid: boolean, errors: string[] }
+ */
+export declare function validateRuleHostResult(value: unknown): RuleHostResultValidationResult;
+//# sourceMappingURL=rule-host-validator.d.ts.map

package/core/dist/runtime-v2/internalization/rule-host-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-host-validator.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AA+BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CA2GrF"}

package/core/dist/runtime-v2/internalization/rule-host-validator.js

@@ -0,0 +1,154 @@
+/**
+ * Rule Host Result Validator — Runtime validation for untrusted VM output
+ *
+ * PURPOSE: Validate that a value returned by a VM-executed evaluate() function
+ * conforms to the RuleHostResult contract before it reaches merge/mutation.
+ *
+ * TRUST BOUNDARY:
+ *   - All VM output is treated as `unknown` (ERR-001: no `as` bypass)
+ *   - Uses Object.hasOwn for untrusted key checks (ERR-013)
+ *   - Fail-closed: invalid results are rejected, never enforced (ERR-002)
+ *
+ * PRI-437: Extracted from demo-rule-compiler.ts isRuleHostResult() and
+ * productionized as the shared validator for both production RuleHost
+ * and demo/test compilers (ERR-024: validator wired into production).
+ */
+import { validateCorrectionProposal } from './correction-proposal.js';
+const VALID_DECISIONS = new Set([
+    'allow',
+    'block',
+    'requireApproval',
+    'auto_correct',
+]);
+const PROTOTYPE_POLLUTION_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Check that a value is a record-like object (non-null, non-array, typeof object).
+ *
+ * Note: We intentionally do NOT check Object.getPrototypeOf() here because
+ * VM-executed code creates objects whose prototype belongs to the VM context's
+ * realm, not the host realm. The prototype pollution check is handled
+ * separately via Object.hasOwn for __proto__/constructor/prototype keys.
+ */
+function isRecordLike(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Type guard for RuleHostDecision (ERR-001: no `as` bypass).
+ * Checks typeof string + membership in VALID_DECISIONS without a cast.
+ */
+function isRuleHostDecision(value) {
+    return typeof value === 'string' && VALID_DECISIONS.has(value);
+}
+/**
+ * Validate that an untrusted value conforms to the RuleHostResult contract.
+ *
+ * Checks:
+ *   - Value is a plain object (not null, array, or non-object)
+ *   - No prototype pollution keys (__proto__, constructor, prototype)
+ *   - decision: required, one of allow|block|requireApproval|auto_correct
+ *   - matched: required, boolean
+ *   - reason: required, string
+ *   - diagnostics: optional, plain object if present
+ *   - ruleId: optional, string if present
+ *   - principleId: optional, string if present
+ *   - correctionProposal: required when decision is auto_correct, must pass validateCorrectionProposal
+ *
+ * @returns { valid: boolean, errors: string[] }
+ */
+export function validateRuleHostResult(value) {
+    const errors = [];
+    if (!isRecordLike(value)) {
+        const type = value === null ? 'null'
+            : Array.isArray(value) ? 'array'
+                : typeof value;
+        errors.push(`result must be a plain object, got ${type}`);
+        return { valid: false, errors };
+    }
+    // Prototype pollution check (ERR-013: Object.hasOwn for untrusted keys)
+    for (const ppKey of PROTOTYPE_POLLUTION_KEYS) {
+        if (Object.hasOwn(value, ppKey)) {
+            errors.push(`result must not contain prototype pollution key "${ppKey}"`);
+        }
+    }
+    // decision — required, must be one of the four valid values
+    if (!Object.hasOwn(value, 'decision')) {
+        errors.push('decision is required');
+    }
+    else {
+        const { decision } = value;
+        if (typeof decision !== 'string' || !isRuleHostDecision(decision)) {
+            errors.push(`decision must be one of allow|block|requireApproval|auto_correct, got ${String(decision)}`);
+        }
+    }
+    // matched — required, must be boolean
+    if (!Object.hasOwn(value, 'matched')) {
+        errors.push('matched is required');
+    }
+    else if (typeof value.matched !== 'boolean') {
+        errors.push(`matched must be a boolean, got ${typeof value.matched}`);
+    }
+    // PRI-439 Phase 2: when matched=false, decision must be 'allow'.
+    // A `matched=false, decision='block'` result is contradictory —
+    // "the rule did not match, but I want to block" makes no sense.
+    // This is checked AFTER both matched and decision are individually validated
+    // so we only run the cross-field check when both fields are present and valid.
+    if (Object.hasOwn(value, 'matched') &&
+        typeof value.matched === 'boolean' &&
+        value.matched === false &&
+        Object.hasOwn(value, 'decision') &&
+        typeof value.decision === 'string' &&
+        isRuleHostDecision(value.decision) &&
+        value.decision !== 'allow') {
+        errors.push(`matched=false requires decision 'allow', got '${value.decision}'`);
+    }
+    // reason — required, must be string
+    if (!Object.hasOwn(value, 'reason')) {
+        errors.push('reason is required');
+    }
+    else if (typeof value.reason !== 'string') {
+        errors.push(`reason must be a string, got ${typeof value.reason}`);
+    }
+    // diagnostics — optional, must be plain object if present
+    if (Object.hasOwn(value, 'diagnostics') && value.diagnostics !== undefined) {
+        const diag = value.diagnostics;
+        if (!isRecordLike(diag)) {
+            errors.push('diagnostics must be a plain object if present');
+        }
+        else {
+            // PRI-437 Slice 5: Adversarial RuleCode may inject __proto__/constructor
+            // as own properties on diagnostics. Reject these to prevent prototype
+            // pollution from leaking into downstream consumers (ERR-013).
+            for (const ppKey of PROTOTYPE_POLLUTION_KEYS) {
+                if (Object.hasOwn(diag, ppKey)) {
+                    errors.push(`diagnostics must not contain prototype pollution key "${ppKey}"`);
+                }
+            }
+        }
+    }
+    // ruleId — optional, must be string if present
+    if (Object.hasOwn(value, 'ruleId') && value.ruleId !== undefined) {
+        if (typeof value.ruleId !== 'string') {
+            errors.push(`ruleId must be a string if present, got ${typeof value.ruleId}`);
+        }
+    }
+    // principleId — optional, must be string if present
+    if (Object.hasOwn(value, 'principleId') && value.principleId !== undefined) {
+        if (typeof value.principleId !== 'string') {
+            errors.push(`principleId must be a string if present, got ${typeof value.principleId}`);
+        }
+    }
+    // correctionProposal — required when decision is 'auto_correct'
+    if (value.decision === 'auto_correct') {
+        if (!Object.hasOwn(value, 'correctionProposal') || value.correctionProposal === undefined) {
+            errors.push('correctionProposal is required when decision is auto_correct');
+        }
+        else {
+            const proposalValidation = validateCorrectionProposal(value.correctionProposal);
+            if (!proposalValidation.valid) {
+                errors.push(`correctionProposal invalid: ${proposalValidation.errors.join('; ')}`);
+            }
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+//# sourceMappingURL=rule-host-validator.js.map

package/core/dist/runtime-v2/internalization/rule-host-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-host-validator.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAOtE,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,OAAO;IACP,OAAO;IACP,iBAAiB;IACjB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpF;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM;YAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO;gBAChC,CAAC,CAAC,OAAO,KAAK,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,wEAAwE;IACxE,KAAK,MAAM,KAAK,IAAI,wBAAwB,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,oDAAoD,KAAK,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CACT,yEAAyE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,kCAAkC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,6EAA6E;IAC7E,+EAA+E;IAC/E,IACE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAClC,KAAK,CAAC,OAAO,KAAK,KAAK;QACvB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;QAChC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CACT,iDAAiD,KAAK,CAAC,QAAQ,GAAG,CACnE,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,0DAA0D;IAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,sEAAsE;YACtE,8DAA8D;YAC9D,KAAK,MAAM,KAAK,IAAI,wBAAwB,EAAE,CAAC;gBAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,yDAAyD,KAAK,GAAG,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,2CAA2C,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC3E,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,gDAAgD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChF,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC"}

package/core/dist/runtime-v2/internalization/scribe-prompt-builder.d.ts

@@ -1,3 +1,4 @@
+import type { CoreAxiomBlockOptions } from '../core-principles/core-axiom-block.js';
 import type { OutputLanguage } from '../language-directive.js';
 export interface ScribePromptBuilderInput {
     taskId: string;
@@ -6,6 +7,8 @@ export interface ScribePromptBuilderInput {
     philosopherArtifact: unknown;
     /** Owner's preferred language for principle generation (PRI-336). */
     outputLanguage?: OutputLanguage;
+    /** Inject core axiom grounding section (default: false). */
+    coreGrounding?: boolean;
 }
 export interface ScribePromptInput {
     taskId: string;
@@ -19,15 +22,26 @@ export interface ScribePromptBuildResult {
     readonly message: string;
     readonly promptInput: ScribePromptInput;
 }
-export declare const SCRIBE_PROTOCOL_INSTRUCTION = "You are a Scribe agent in a principle internalization pipeline. Your role is to distill the Philosopher's analysis into a formal, implementable principle draft.\n\nPROTOCOL:\n1. Review the philosopherArtifact to understand the philosophical thesis and principle candidate\n2. Transform the philosopher's analysis into a formal principle draft with clear statement, rationale, applicability, and anti-patterns\n3. Preserve the lineage trace from dreamer and philosopher artifacts\n4. Identify risks associated with applying this principle\n5. The principle draft should be concrete enough to guide implementation, not just philosophical\n\nOUTPUT FORMAT (pure JSON, no markdown):\n{\n  \"taskId\": \"<from input>\",\n  \"sourcePhilosopherArtifactId\": \"<copy exactly from input.sourcePhilosopherArtifactId>\",\n  \"principleDraft\": {\n    \"title\": \"<concise principle title, <=100 chars>\",\n    \"statement\": \"<formal principle statement describing what should always be done>\",\n    \"rationale\": \"<why this principle addresses the root cause>\",\n    \"applicability\": [\"<context where this principle applies>\"],\n    \"antiPatterns\": [\"<pattern this principle forbids>\"],\n    \"confidence\": 0.8\n  },\n  \"sourceTrace\": {\n    \"dreamerArtifactId\": \"<from philosopher artifact if available, or omit>\",\n    \"philosopherArtifactId\": \"<copy exactly from input.sourcePhilosopherArtifactId>\"\n  },\n  \"risks\": [\"<risk 1>\", \"<risk 2>\"],\n  \"generatedAt\": \"<ISO-8601 timestamp>\"\n}\n\nCONSTRAINTS:\n- Output ONLY valid JSON (no markdown, no explanatory text, no code fences)\n- principleDraft.title MUST be a non-empty string (concise, <=100 chars)\n- principleDraft.statement MUST be a non-empty string describing the principle\n- principleDraft.rationale MUST be a non-empty string\n- principleDraft.applicability MUST be an array of strings (at least one recommended)\n- principleDraft.antiPatterns MUST be an array of strings (can be empty)\n- principleDraft.confidence MUST be a number between 0.0 and 1.0 (NOT a string, NOT a percentage)\n- sourcePhilosopherArtifactId MUST be copied exactly from input.sourcePhilosopherArtifactId (non-empty string)\n- sourceTrace.philosopherArtifactId MUST be copied exactly from input.sourcePhilosopherArtifactId\n- sourceTrace.dreamerArtifactId is optional \u2014 include only if available from philosopher artifact\n- risks MUST be an array of strings (can be empty if no risks identified)\n- generatedAt MUST be an ISO-8601 timestamp string\n";
+/**
+ * Build the Scribe protocol instruction with optional core axiom grounding.
+ *
+ * When `coreGrounding` is true, a CORE AXIOMS section is injected so the
+ * Scribe can ensure the formal principle draft is consistent with the
+ * existing core principle framework.
+ */
+export declare function buildScribeProtocolInstruction(opts?: CoreAxiomBlockOptions & {
+    outputLanguage?: OutputLanguage;
+}): string;
 export declare const SCRIBE_PROMPT_CONTRACT_VERSION = "scribe-output-v1.prompt.v1";
 export declare class ScribePromptBuilder {
+    private readonly coreGrounding;
+    private readonly outputLanguage?;
+    constructor(opts?: {
+        coreGrounding?: boolean;
+        outputLanguage?: OutputLanguage;
+    });
     /**
-     * Build a scribe prompt with optional language directive (PRI-336).
-     *
-     * When `input.outputLanguage` is provided, a language directive is appended
-     * to the scribe instruction telling the LLM to produce human-readable
-     * principle fields in the owner's preferred language.
+     * Build a scribe prompt with optional core axiom grounding and language directive (PRI-336).
      */
     buildPrompt(input: ScribePromptBuilderInput): ScribePromptBuildResult;
 }

package/core/dist/runtime-v2/internalization/scribe-prompt-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scribe-prompt-builder.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/scribe-prompt-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED,eAAO,MAAM,2BAA2B,69EA0CvC,CAAC;AAEF,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAE3E,qBAAa,mBAAmB;IAC9B;;;;;;OAMG;IAEH,WAAW,CAAC,KAAK,EAAE,wBAAwB,GAAG,uBAAuB;CAmBtE"}
+{"version":3,"file":"scribe-prompt-builder.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/scribe-prompt-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qEAAqE;IACrE,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,4DAA4D;IAC5D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,GAAE,qBAAqB,GAAG;IAAE,cAAc,CAAC,EAAE,cAAc,CAAA;CAAO,GACrE,MAAM,CAgDR;AAED,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAE3E,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAiB;gBAErC,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,cAAc,CAAA;KAAO;IAKnF;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,wBAAwB,GAAG,uBAAuB;CAsBtE"}

package/core/dist/runtime-v2/internalization/scribe-prompt-builder.js

@@ -1,5 +1,17 @@
+import { buildCoreAxiomBlock } from '../core-principles/core-axiom-block.js';
 import { buildLanguageDirective } from '../language-directive.js';
-export const SCRIBE_PROTOCOL_INSTRUCTION = `You are a Scribe agent in a principle internalization pipeline. Your role is to distill the Philosopher's analysis into a formal, implementable principle draft.
+/**
+ * Build the Scribe protocol instruction with optional core axiom grounding.
+ *
+ * When `coreGrounding` is true, a CORE AXIOMS section is injected so the
+ * Scribe can ensure the formal principle draft is consistent with the
+ * existing core principle framework.
+ */
+export function buildScribeProtocolInstruction(opts = {}) {
+    const { outputLanguage, ...axiomOpts } = opts;
+    const coreAxiomsBlock = buildCoreAxiomBlock({ ...axiomOpts, outputLanguage });
+    const languageDirective = buildLanguageDirective(outputLanguage);
+    return `You are a Scribe agent in a principle internalization pipeline. Your role is to distill the Philosopher's analysis into a formal, implementable principle draft.
 
 PROTOCOL:
 1. Review the philosopherArtifact to understand the philosophical thesis and principle candidate
@@ -7,8 +19,7 @@ PROTOCOL:
 3. Preserve the lineage trace from dreamer and philosopher artifacts
 4. Identify risks associated with applying this principle
 5. The principle draft should be concrete enough to guide implementation, not just philosophical
-
-OUTPUT FORMAT (pure JSON, no markdown):
+${coreAxiomsBlock}OUTPUT FORMAT (pure JSON, no markdown):
 {
   "taskId": "<from input>",
   "sourcePhilosopherArtifactId": "<copy exactly from input.sourcePhilosopherArtifactId>",
@@ -40,23 +51,28 @@ CONSTRAINTS:
 - sourceTrace.philosopherArtifactId MUST be copied exactly from input.sourcePhilosopherArtifactId
 - sourceTrace.dreamerArtifactId is optional — include only if available from philosopher artifact
 - risks MUST be an array of strings (can be empty if no risks identified)
-- generatedAt MUST be an ISO-8601 timestamp string
-`;
+- generatedAt MUST be the current ISO-8601 timestamp (use the actual current time, NOT a placeholder)
+- If the CORE AXIOMS section is provided, ensure the principle draft does not duplicate or contradict any existing core axiom. If overlap exists, note it in risks
+${languageDirective}`;
+}
 export const SCRIBE_PROMPT_CONTRACT_VERSION = 'scribe-output-v1.prompt.v1';
 export class ScribePromptBuilder {
+    coreGrounding;
+    outputLanguage;
+    constructor(opts = {}) {
+        this.coreGrounding = opts.coreGrounding ?? false;
+        this.outputLanguage = opts.outputLanguage;
+    }
     /**
-     * Build a scribe prompt with optional language directive (PRI-336).
-     *
-     * When `input.outputLanguage` is provided, a language directive is appended
-     * to the scribe instruction telling the LLM to produce human-readable
-     * principle fields in the owner's preferred language.
+     * Build a scribe prompt with optional core axiom grounding and language directive (PRI-336).
      */
-    // eslint-disable-next-line @typescript-eslint/class-methods-use-this
     buildPrompt(input) {
-        const languageDirective = buildLanguageDirective(input.outputLanguage);
-        const scribeInstruction = input.outputLanguage
-            ? SCRIBE_PROTOCOL_INSTRUCTION + languageDirective
-            : SCRIBE_PROTOCOL_INSTRUCTION;
+        const coreGrounding = input.coreGrounding ?? this.coreGrounding;
+        const outputLanguage = input.outputLanguage ?? this.outputLanguage;
+        const scribeInstruction = buildScribeProtocolInstruction({
+            coreGrounding,
+            outputLanguage,
+        });
         const promptInput = {
             taskId: input.taskId,
             contextHash: input.contextHash,