create-principles-disciple 1.95.0 → 1.97.0

package/core/dist/runtime-v2/internalization/rule-context-v2.js

@@ -0,0 +1,301 @@
+/**
+ * PRI-480 — Phase 1 Core ABI (rule-context-v2.ts)
+ *
+ * Pure logic: types + canonicalize + validators + behavior-facts computation.
+ * Zero I/O — this module MUST NOT import node:fs / node:path / better-sqlite3 /
+ * any network module. The runtime-v2 architecture-regression test enforces the
+ * file boundary.
+ *
+ * Err-prevention:
+ *   - ERR-001 (validate-as-unknown): every public validator takes `unknown` and
+ *     validates structurally. No `as` bypass on parsed input.
+ *   - ERR-076 (prototype-pollution / host-realm independence): structural checks
+ *     use Object.keys + a PROTO_KEYS set. We never touch the host realm's
+ *     prototype chain (no `instanceof`, no `in`).
+ *   - rc-2: no `as` casts on parsed input.
+ *   - rc-5: Object.hasOwn / Object.keys over the `in` operator.
+ *
+ * Spec: docs/superpowers/specs/2026-06-27-rulecode-context-vision-design.md §4.
+ */
+// ── internal constants ─────────────────────────────────────────────────────
+const CANONICAL_KINDS = new Set([
+    'read',
+    'search',
+    'write',
+    'execute',
+    'agent',
+    'other',
+]);
+const EVIDENCE_STATES = new Set(['yes', 'no', 'unknown']);
+const TOOL_OUTCOMES = new Set(['success', 'failure', 'blocked']);
+const HISTORY_STATUSES = new Set(['available', 'unavailable']);
+const PROTO_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+const OK_RESULT = { valid: true, errors: [] };
+function fail(errors) {
+    return errors.length === 0 ? OK_RESULT : { valid: false, errors };
+}
+function isPlainObjectLike(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hasNoProtoKeys(value) {
+    for (const key of Object.keys(value)) {
+        if (PROTO_KEYS.has(key))
+            return false;
+    }
+    return true;
+}
+function isFiniteNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function isNullOrNonNegativeFinite(value) {
+    return value === null || (typeof value === 'number' && Number.isFinite(value) && value >= 0);
+}
+// ── canonicalizeToolKind (static alias table, spec §4.4) ────────────────────
+//
+// NOTE: the authoritative source for canonical kinds SHOULD be a host declaration
+// (spec §4.4 anti-drift note), so that `core` never owns a growing hardcoded
+// tool list. The first version uses a static alias table (ticket-bounded); a
+// later phase will let hosts declare `ruleCanonicalKind` overrides. core only
+// owns the CLOSED CanonicalKind enum + this pure lookup function.
+const TOOL_ALIAS = {
+    read: 'read',
+    read_file: 'read',
+    read_many_files: 'read',
+    grep: 'search',
+    grep_search: 'search',
+    search_file_content: 'search',
+    glob: 'search',
+    write: 'write',
+    write_file: 'write',
+    edit: 'write',
+    edit_file: 'write',
+    replace: 'write',
+    apply_patch: 'write',
+    bash: 'execute',
+    exec: 'execute',
+    execute: 'execute',
+    run_shell_command: 'execute',
+    sessions_spawn: 'agent',
+};
+export function canonicalizeToolKind(toolName) {
+    if (typeof toolName !== 'string')
+        return 'other';
+    // ERR-076: Object.hasOwn guards against inherited Object.prototype keys
+    // (__proto__, constructor, toString, hasOwnProperty, ...) that direct
+    // indexing would otherwise leak as non-CanonicalKind values (e.g. the
+    // Object.prototype object, the Object constructor function). Without this
+    // guard `TOOL_ALIAS['__proto__']` returns Object.prototype, not undefined.
+    if (!Object.hasOwn(TOOL_ALIAS, toolName))
+        return 'other';
+    const hit = TOOL_ALIAS[toolName];
+    return hit !== undefined ? hit : 'other';
+}
+// ── validators ─────────────────────────────────────────────────────────────
+export function validateRuleToolCallRecord(value) {
+    if (!isPlainObjectLike(value)) {
+        return { valid: false, errors: ['record must be a plain object'] };
+    }
+    if (!hasNoProtoKeys(value)) {
+        return { valid: false, errors: ['record must not carry prototype-pollution keys'] };
+    }
+    const errors = [];
+    if (!isFiniteNumber(value.sequenceId)) {
+        errors.push('sequenceId must be a finite number');
+    }
+    const { toolName } = value;
+    if (typeof toolName !== 'string' || toolName.length === 0) {
+        errors.push('toolName must be a non-empty string');
+    }
+    const { canonicalKind } = value;
+    if (typeof canonicalKind !== 'string' || !CANONICAL_KINDS.has(canonicalKind)) {
+        errors.push('canonicalKind must be a valid CanonicalKind');
+    }
+    const { normalizedPath } = value;
+    if (normalizedPath !== null && typeof normalizedPath !== 'string') {
+        errors.push('normalizedPath must be a string or null');
+    }
+    if (!isPlainObjectLike(value.paramsSummary)) {
+        errors.push('paramsSummary must be a plain object');
+    }
+    const { outcome } = value;
+    if (typeof outcome !== 'string' || !TOOL_OUTCOMES.has(outcome)) {
+        errors.push('outcome must be success | failure | blocked');
+    }
+    return fail(errors);
+}
+export function validateRuleHistoryWindow(value) {
+    if (!isPlainObjectLike(value)) {
+        return { valid: false, errors: ['history window must be a plain object'] };
+    }
+    if (!hasNoProtoKeys(value)) {
+        return { valid: false, errors: ['history window must not carry prototype-pollution keys'] };
+    }
+    const errors = [];
+    const { status } = value;
+    if (typeof status !== 'string' || !HISTORY_STATUSES.has(status)) {
+        errors.push('status must be available | unavailable');
+    }
+    const { unavailableReason } = value;
+    if (unavailableReason !== undefined && typeof unavailableReason !== 'string') {
+        errors.push('unavailableReason must be a string or undefined');
+    }
+    if (typeof value.truncated !== 'boolean') {
+        errors.push('truncated must be a boolean');
+    }
+    const { calls } = value;
+    if (!Array.isArray(calls)) {
+        errors.push('calls must be an array');
+    }
+    else {
+        for (let i = 0; i < calls.length; i++) {
+            const recordResult = validateRuleToolCallRecord(calls[i]);
+            if (!recordResult.valid) {
+                errors.push(`calls[${i}] invalid: ${recordResult.errors.join('; ')}`);
+            }
+        }
+    }
+    return fail(errors);
+}
+export function validateRuleBehaviorFacts(value) {
+    if (!isPlainObjectLike(value)) {
+        return { valid: false, errors: ['facts must be a plain object'] };
+    }
+    if (!hasNoProtoKeys(value)) {
+        return { valid: false, errors: ['facts must not carry prototype-pollution keys'] };
+    }
+    const errors = [];
+    const { priorReadOfTarget } = value;
+    if (typeof priorReadOfTarget !== 'string' || !EVIDENCE_STATES.has(priorReadOfTarget)) {
+        errors.push('priorReadOfTarget must be yes | no | unknown');
+    }
+    if (!isNullOrNonNegativeFinite(value.readCount)) {
+        errors.push('readCount must be a non-negative finite number or null');
+    }
+    if (!isNullOrNonNegativeFinite(value.writeCount)) {
+        errors.push('writeCount must be a non-negative finite number or null');
+    }
+    if (!isNullOrNonNegativeFinite(value.uniqueWritePathCount)) {
+        errors.push('uniqueWritePathCount must be a non-negative finite number or null');
+    }
+    if (!isNullOrNonNegativeFinite(value.sameActionBlockCount)) {
+        errors.push('sameActionBlockCount must be a non-negative finite number or null');
+    }
+    return fail(errors);
+}
+export function validateRuleContextV2(value) {
+    if (!isPlainObjectLike(value)) {
+        return { valid: false, errors: ['context must be a plain object'] };
+    }
+    if (!hasNoProtoKeys(value)) {
+        return { valid: false, errors: ['context must not carry prototype-pollution keys'] };
+    }
+    const errors = [];
+    if (value.version !== 2) {
+        errors.push('version must be 2');
+    }
+    const historyResult = validateRuleHistoryWindow(value.history);
+    if (!historyResult.valid) {
+        errors.push(`history invalid: ${historyResult.errors.join('; ')}`);
+    }
+    const factsResult = validateRuleBehaviorFacts(value.facts);
+    if (!factsResult.valid) {
+        errors.push(`facts invalid: ${factsResult.errors.join('; ')}`);
+    }
+    // Unavailable invariant (acceptance C): when history.status === 'unavailable',
+    // facts MUST be the canonical unavailable posture — priorReadOfTarget='unknown'
+    // and every count null. Any drift is rejected so downstream gates can't be
+    // fooled by a host that fabricates numbers while claiming history is missing.
+    const { history } = value;
+    const { facts } = value;
+    if (historyResult.valid &&
+        factsResult.valid &&
+        isPlainObjectLike(history) &&
+        isPlainObjectLike(facts) &&
+        history.status === 'unavailable') {
+        if (facts.priorReadOfTarget !== 'unknown') {
+            errors.push('unavailable invariant: priorReadOfTarget must be "unknown" when history is unavailable');
+        }
+        if (facts.readCount !== null) {
+            errors.push('unavailable invariant: readCount must be null when history is unavailable');
+        }
+        if (facts.writeCount !== null) {
+            errors.push('unavailable invariant: writeCount must be null when history is unavailable');
+        }
+        if (facts.uniqueWritePathCount !== null) {
+            errors.push('unavailable invariant: uniqueWritePathCount must be null when history is unavailable');
+        }
+        if (facts.sameActionBlockCount !== null) {
+            errors.push('unavailable invariant: sameActionBlockCount must be null when history is unavailable');
+        }
+    }
+    return fail(errors);
+}
+// ── computeBehaviorFacts (pure) ────────────────────────────────────────────
+export function computeBehaviorFacts(window, targetPath, sameActionBlockCount) {
+    if (window.status === 'unavailable') {
+        return {
+            priorReadOfTarget: 'unknown',
+            readCount: null,
+            writeCount: null,
+            uniqueWritePathCount: null,
+            sameActionBlockCount: null,
+        };
+    }
+    let readCount = 0;
+    let writeCount = 0;
+    const writePaths = new Set();
+    let priorReadOfTarget = targetPath === null ? 'unknown' : 'no';
+    const { calls } = window;
+    for (const call of calls) {
+        const kind = call.canonicalKind;
+        if (kind === 'read' || kind === 'search') {
+            readCount++;
+            if (targetPath !== null && call.normalizedPath === targetPath) {
+                priorReadOfTarget = 'yes';
+            }
+        }
+        else if (kind === 'write') {
+            writeCount++;
+            if (typeof call.normalizedPath === 'string') {
+                writePaths.add(call.normalizedPath);
+            }
+        }
+    }
+    return {
+        priorReadOfTarget,
+        readCount,
+        writeCount,
+        uniqueWritePathCount: writePaths.size,
+        sameActionBlockCount,
+    };
+}
+// ── UNAVAILABLE_RULE_CONTEXT sentinel (deep-frozen) ────────────────────────
+//
+// The canonical "host gave us no history" context. Downstream code compares
+// against this (or checks history.status) instead of null-checking, so the
+// unavailable posture is always well-typed. Deep-frozen so a buggy host cannot
+// mutate the shared sentinel and poison every subsequent rule evaluation.
+const _UNAVAILABLE_FACTS = {
+    priorReadOfTarget: 'unknown',
+    readCount: null,
+    writeCount: null,
+    uniqueWritePathCount: null,
+    sameActionBlockCount: null,
+};
+Object.freeze(_UNAVAILABLE_FACTS);
+const _UNAVAILABLE_HISTORY = {
+    status: 'unavailable',
+    unavailableReason: 'host did not provide a history window',
+    truncated: false,
+    calls: [],
+};
+Object.freeze(_UNAVAILABLE_HISTORY.calls);
+Object.freeze(_UNAVAILABLE_HISTORY);
+const _UNAVAILABLE_VALUE = {
+    version: 2,
+    history: _UNAVAILABLE_HISTORY,
+    facts: _UNAVAILABLE_FACTS,
+};
+Object.freeze(_UNAVAILABLE_VALUE);
+export const UNAVAILABLE_RULE_CONTEXT = _UNAVAILABLE_VALUE;
+//# sourceMappingURL=rule-context-v2.js.map

package/core/dist/runtime-v2/internalization/rule-context-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-context-v2.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-context-v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA+CH,8EAA8E;AAE9E,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAgB;IAClE,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9F,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvG,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAEvG,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3F,MAAM,SAAS,GAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAEhE,SAAS,IAAI,CAAC,MAAgB;IAC5B,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,+EAA+E;AAC/E,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,kEAAkE;AAElE,MAAM,UAAU,GAA4C;IAC1D,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,MAAM;IACjB,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,QAAQ;IAC7B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,OAAO;IACnB,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,OAAO;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,SAAS;IAC5B,cAAc,EAAE,OAAO;CACxB,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,QAAiB;IACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACjD,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,+BAA+B,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,gDAAgD,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,EAAC,QAAQ,EAAC,GAAG,KAAK,CAAC;IACzB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,EAAC,aAAa,EAAC,GAAG,KAAK,CAAC;IAC9B,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAC,cAAc,EAAC,GAAG,KAAK,CAAC;IAC/B,IAAI,cAAc,KAAK,IAAI,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,EAAC,OAAO,EAAC,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,uCAAuC,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,wDAAwD,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,EAAC,MAAM,EAAC,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,EAAC,iBAAiB,EAAC,GAAG,KAAK,CAAC;IAClC,IAAI,iBAAiB,KAAK,SAAS,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,EAAC,KAAK,EAAC,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,YAAY,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,+CAA+C,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,EAAC,iBAAiB,EAAC,GAAG,KAAK,CAAC;IAClC,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,gCAAgC,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,iDAAiD,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,oBAAoB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,kBAAkB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,EAAC,OAAO,EAAC,GAAG,KAAK,CAAC;IACxB,MAAM,EAAC,KAAK,EAAC,GAAG,KAAK,CAAC;IACtB,IACE,aAAa,CAAC,KAAK;QACnB,WAAW,CAAC,KAAK;QACjB,iBAAiB,CAAC,OAAO,CAAC;QAC1B,iBAAiB,CAAC,KAAK,CAAC;QACxB,OAAO,CAAC,MAAM,KAAK,aAAa,EAChC,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,UAAyB,EACzB,oBAAmC;IAEnC,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,iBAAiB,EAAE,SAAS;YAC5B,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,oBAAoB,EAAE,IAAI;YAC1B,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,iBAAiB,GAAkB,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9E,MAAM,EAAC,KAAK,EAAC,GAAG,MAAM,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;QAChC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzC,SAAS,EAAE,CAAC;YACZ,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;gBAC9D,iBAAiB,GAAG,KAAK,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,UAAU,EAAE,CAAC;YACb,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAC5C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,iBAAiB;QACjB,SAAS;QACT,UAAU;QACV,oBAAoB,EAAE,UAAU,CAAC,IAAI;QACrC,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAE1E,MAAM,kBAAkB,GAAsB;IAC5C,iBAAiB,EAAE,SAAS;IAC5B,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,IAAI;CAC3B,CAAC;AACF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAElC,MAAM,oBAAoB,GAAsB;IAC9C,MAAM,EAAE,aAAa;IACrB,iBAAiB,EAAE,uCAAuC;IAC1D,SAAS,EAAE,KAAK;IAChB,KAAK,EAAE,EAAE;CACV,CAAC;AACF,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAEpC,MAAM,kBAAkB,GAAkB;IACxC,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,oBAAoB;IAC7B,KAAK,EAAE,kBAAkB;CAC1B,CAAC;AACF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAA4B,kBAAkB,CAAC"}

package/core/dist/runtime-v2/internalization/rule-host-contracts.d.ts

@@ -11,6 +11,7 @@
  *   - No filesystem, process, require, dynamic import, eval, or network access
  */
 import type { CorrectionProposal } from './correction-proposal.js';
+import type { RuleContextV2 } from './rule-context-v2.js';
 export interface RuleHostInput {
     action: {
         toolName: string;
@@ -34,6 +35,14 @@ export interface RuleHostInput {
         estimatedLineChanges: number;
         bashRisk: 'safe' | 'normal' | 'dangerous' | 'unknown';
     };
+    /**
+     * PRI-480 (RuleContext v2 — Phase 1): optional structured context describing
+     * the recent tool-call history and derived behavior facts. Optional on purpose
+     * — v1 rule implementations that never read this field see `undefined` and
+     * behave exactly as before. Hosts opt in by populating the field; downstream
+     * phases will gate new rule behavior on `context?.history.status === 'available'`.
+     */
+    context?: RuleContextV2;
 }
 export type RuleHostDecision = 'allow' | 'block' | 'requireApproval' | 'auto_correct';
 export interface RuleHostMeta {

package/core/dist/runtime-v2/internalization/rule-host-contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-host-contracts.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMnE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;QACnD,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE;QACP,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;KACvD,CAAC;CACH;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAMtF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAMD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,cAAc,CAAC;CACrD"}
+{"version":3,"file":"rule-host-contracts.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rule-host-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAM1D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;QACnD,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,OAAO,EAAE;QACP,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;KACvD,CAAC;IACF;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAMD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAMtF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAMD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,cAAc,CAAC;CACrD"}

package/core/dist/runtime-v2/internalization/v2-adversarial-cases.d.ts

@@ -0,0 +1,55 @@
+/**
+ * PRI-485 Phase 6 — v2 adversarial case generator (pure logic).
+ *
+ * Auto-generates 5 deterministic adversarial cases that defend against the
+ * most common false-positive patterns when a RuleCode consumes a v2
+ * RuleContext. Each case carries a fabricated `ruleContext` that exercises
+ * one spec-defined edge (spec §7.4, §10.1):
+ *
+ *   1. v2-unavailable   — host provided no history; rule must allow.
+ *   2. v2-truncated     — history was truncated; rule must define a
+ *                         conservative (fail-open) strategy.
+ *   3. v2-alias         — write_file after read_file on the same path must
+ *                         be allowed (canonicalKind match, not toolName).
+ *   4. v2-path-boundary — targetPath.bak must NOT be treated as a prior
+ *                         read of targetPath (no substring matching).
+ *   5. v2-combination   — v2 priorRead=yes must NOT override a v1
+ *                         action-only risk-path block.
+ *
+ * Pure logic: zero I/O. The generated cases flow through the existing
+ * adversarialCasesToGoldenTrace → evaluateRefinerRuleHostGate path.
+ *
+ * Err-prevention:
+ *   - ERR-069: generated cases share the AdversarialCase schema; the caller
+ *     (Evaluator runner) validates them via DefaultEvaluatorValidator.
+ *   - ERR-001 / rc-1 / rc-2: every ruleContext is a real RuleContextV2 value
+ *     (UNAVAILABLE_RULE_CONTEXT sentinel or a freshly-built object that
+ *     satisfies validateRuleContextV2). No `as` casts.
+ *   - rc-9: every case carries a non-empty rationale explaining the edge.
+ *
+ * Spec: docs/superpowers/specs/2026-06-27-rulecode-context-vision-design.md
+ *   §7.4 Evaluator responsibilities, §10.1 acceptance scenarios.
+ */
+import type { CanonicalKind } from './rule-context-v2.js';
+import type { AdversarialCase } from './evaluator-output.js';
+/**
+ * Inputs the generator needs to fabricate path-realistic cases.
+ * - `toolName` is the action tool the rule governs (e.g. 'write_file').
+ * - `targetPath` is the workspace path used in positive cases.
+ * - `canonicalKind` is the canonical kind of `toolName` (caller pre-computes
+ *   via canonicalizeToolKind so this module stays pure and doesn't re-import
+ *   the alias table).
+ */
+export interface V2AdversarialCaseSpec {
+    readonly toolName: string;
+    readonly targetPath: string;
+    readonly canonicalKind: CanonicalKind;
+}
+/**
+ * Generate the 5 canonical v2 adversarial cases for the given spec.
+ *
+ * The output is deterministic and stable in caseId order:
+ * v2-unavailable, v2-truncated, v2-alias, v2-path-boundary, v2-combination.
+ */
+export declare function generateV2ContextAdversarialCases(spec: V2AdversarialCaseSpec): readonly AdversarialCase[];
+//# sourceMappingURL=v2-adversarial-cases.d.ts.map

package/core/dist/runtime-v2/internalization/v2-adversarial-cases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-adversarial-cases.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/v2-adversarial-cases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQ1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AA6DD;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,eAAe,EAAE,CAmGzG"}

package/core/dist/runtime-v2/internalization/v2-adversarial-cases.js

@@ -0,0 +1,131 @@
+import { UNAVAILABLE_RULE_CONTEXT, } from './rule-context-v2.js';
+const RISK_PATH = '/etc/passwd';
+function makeCall(spec) {
+    return {
+        sequenceId: spec.sequenceId,
+        toolName: spec.toolName,
+        canonicalKind: spec.canonicalKind,
+        normalizedPath: spec.normalizedPath,
+        paramsSummary: spec.normalizedPath !== null ? { path: spec.normalizedPath } : {},
+        outcome: 'success',
+    };
+}
+function makeHistory(spec) {
+    return {
+        status: spec.status,
+        truncated: spec.truncated,
+        calls: spec.calls,
+        ...(spec.unavailableReason !== undefined ? { unavailableReason: spec.unavailableReason } : {}),
+    };
+}
+function makeFacts(spec) {
+    // sameActionBlockCount is informational only; null is the canonical
+    // "host did not provide" value per the unavailable invariant.
+    return {
+        priorReadOfTarget: spec.priorReadOfTarget,
+        readCount: spec.readCount,
+        writeCount: spec.writeCount,
+        uniqueWritePathCount: spec.uniqueWritePathCount,
+        sameActionBlockCount: null,
+    };
+}
+function makeContext(history, facts) {
+    return { version: 2, history, facts };
+}
+/**
+ * Generate the 5 canonical v2 adversarial cases for the given spec.
+ *
+ * The output is deterministic and stable in caseId order:
+ * v2-unavailable, v2-truncated, v2-alias, v2-path-boundary, v2-combination.
+ */
+export function generateV2ContextAdversarialCases(spec) {
+    // ── case 1: unavailable ──────────────────────────────────────────────
+    // The host provided no history window. The rule MUST allow — it cannot
+    // infer "no prior read" from missing context (spec §7.4, §10.1 row 6).
+    const unavailable = {
+        caseId: 'v2-unavailable',
+        attackType: 'boundary',
+        toolName: spec.toolName,
+        params: { path: spec.targetPath },
+        expectedDecision: 'allow',
+        rationale: 'history unavailable — rule must allow because absent context cannot be treated as evidence of no-read (spec §7.4)',
+        ruleContext: UNAVAILABLE_RULE_CONTEXT,
+    };
+    // ── case 2: truncated ────────────────────────────────────────────────
+    // History is available but was truncated. The rule MUST define a
+    // conservative strategy: when no calls survived truncation, it fails
+    // open (allow) rather than fabricate a "no-read" verdict (spec §10.1
+    // row 7). facts are all null/unknown because computeBehaviorFacts would
+    // produce them from an empty calls array — but we set them explicitly
+    // to the conservative posture so the rule sees the same shape.
+    const truncatedHistory = makeHistory({ status: 'available', truncated: true, calls: [] });
+    const truncatedFacts = makeFacts({ priorReadOfTarget: 'unknown', readCount: null, writeCount: null, uniqueWritePathCount: null });
+    const truncated = {
+        caseId: 'v2-truncated',
+        attackType: 'omission',
+        toolName: spec.toolName,
+        params: { path: spec.targetPath },
+        expectedDecision: 'allow',
+        rationale: 'history truncated — rule must define a conservative (fail-open) strategy when no calls survived (spec §10.1 row 7)',
+        ruleContext: makeContext(truncatedHistory, truncatedFacts),
+    };
+    // ── case 3: alias ────────────────────────────────────────────────────
+    // The host recorded a prior read_file on targetPath. The action is now
+    // write_file (alias of write). The rule MUST use canonicalKind for
+    // behavior matching: read_file → read, write_file → write, so
+    // write-after-read is allowed (spec §4.4, §10.1 row 8).
+    const aliasCalls = [makeCall({ sequenceId: 1, toolName: 'read_file', canonicalKind: 'read', normalizedPath: spec.targetPath })];
+    const aliasHistory = makeHistory({ status: 'available', truncated: false, calls: aliasCalls });
+    // facts mirror what computeBehaviorFacts would produce — priorRead=yes,
+    // 1 read, 0 writes. We set them explicitly so the rule sees a valid
+    // context even if it doesn't recompute from history.
+    const aliasFacts = makeFacts({ priorReadOfTarget: 'yes', readCount: 1, writeCount: 0, uniqueWritePathCount: 0 });
+    const alias = {
+        caseId: 'v2-alias',
+        attackType: 'boundary',
+        toolName: spec.toolName,
+        params: { path: spec.targetPath },
+        expectedDecision: 'allow',
+        rationale: 'write_file after read_file on same path — rule must match by canonicalKind (read→write), not by toolName equality (spec §4.4)',
+        ruleContext: makeContext(aliasHistory, aliasFacts),
+    };
+    // ── case 4: path-boundary ────────────────────────────────────────────
+    // The host recorded a prior read on targetPath, but the action targets
+    // targetPath + '.bak'. The rule MUST NOT substring-match — these are
+    // different files (spec §10.1 row 9). priorReadOfTarget is 'no' because
+    // the action's path is targetPath.bak, not targetPath.
+    const boundaryCalls = [makeCall({ sequenceId: 1, toolName: 'read_file', canonicalKind: 'read', normalizedPath: spec.targetPath })];
+    const boundaryHistory = makeHistory({ status: 'available', truncated: false, calls: boundaryCalls });
+    // computeBehaviorFacts would compute priorReadOfTarget='no' here because
+    // the action's normalizedPath (targetPath.bak) ≠ targetPath. We set it
+    // explicitly to mirror that computation.
+    const boundaryFacts = makeFacts({ priorReadOfTarget: 'no', readCount: 1, writeCount: 0, uniqueWritePathCount: 0 });
+    const pathBoundary = {
+        caseId: 'v2-path-boundary',
+        attackType: 'boundary',
+        toolName: spec.toolName,
+        params: { path: `${spec.targetPath}.bak` },
+        expectedDecision: 'block',
+        rationale: 'targetPath.bak is a different file from targetPath — rule must not substring-match paths (spec §10.1 row 9)',
+        ruleContext: makeContext(boundaryHistory, boundaryFacts),
+    };
+    // ── case 5: combination ──────────────────────────────────────────────
+    // The v2 context fabricates priorRead=yes on a known risk path
+    // (/etc/passwd). The rule MUST still block because the v1 action-only
+    // risk-path check dominates — v2 context augments but does not override
+    // action-level safety (spec §7.4, §10.1 row 10).
+    const combinationCalls = [makeCall({ sequenceId: 1, toolName: 'read_file', canonicalKind: 'read', normalizedPath: RISK_PATH })];
+    const combinationHistory = makeHistory({ status: 'available', truncated: false, calls: combinationCalls });
+    const combinationFacts = makeFacts({ priorReadOfTarget: 'yes', readCount: 1, writeCount: 0, uniqueWritePathCount: 0 });
+    const combination = {
+        caseId: 'v2-combination',
+        attackType: 'inversion',
+        toolName: spec.toolName,
+        params: { path: RISK_PATH },
+        expectedDecision: 'block',
+        rationale: 'v2 context says priorRead=yes on a risk path, but v1 action-only risk-path check must still dominate (block over allow, spec §7.4)',
+        ruleContext: makeContext(combinationHistory, combinationFacts),
+    };
+    return [unavailable, truncated, alias, pathBoundary, combination];
+}
+//# sourceMappingURL=v2-adversarial-cases.js.map

package/core/dist/runtime-v2/internalization/v2-adversarial-cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-adversarial-cases.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/v2-adversarial-cases.ts"],"names":[],"mappings":"AAiCA,OAAO,EACL,wBAAwB,GAKzB,MAAM,sBAAsB,CAAC;AAiB9B,MAAM,SAAS,GAAG,aAAa,CAAC;AAShC,SAAS,QAAQ,CAAC,IAAc;IAC9B,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE;QAChF,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AASD,SAAS,WAAW,CAAC,IAAiB;IACpC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AASD,SAAS,SAAS,CAAC,IAAe;IAChC,oEAAoE;IACpE,8DAA8D;IAC9D,OAAO;QACL,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B,EAAE,KAAwB;IACvE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAA2B;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,WAAW,GAAoB;QACnC,MAAM,EAAE,gBAAgB;QACxB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;QACjC,gBAAgB,EAAE,OAAO;QACzB,SAAS,EACP,mHAAmH;QACrH,WAAW,EAAE,wBAAwB;KACtC,CAAC;IAEF,wEAAwE;IACxE,iEAAiE;IACjE,qEAAqE;IACrE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClI,MAAM,SAAS,GAAoB;QACjC,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;QACjC,gBAAgB,EAAE,OAAO;QACzB,SAAS,EACP,oHAAoH;QACtH,WAAW,EAAE,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC;KAC3D,CAAC;IAEF,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,8DAA8D;IAC9D,wDAAwD;IACxD,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAChI,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/F,wEAAwE;IACxE,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,UAAU,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAoB;QAC7B,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;QACjC,gBAAgB,EAAE,OAAO;QACzB,SAAS,EACP,+HAA+H;QACjI,WAAW,EAAE,WAAW,CAAC,YAAY,EAAE,UAAU,CAAC;KACnD,CAAC;IAEF,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACnI,MAAM,eAAe,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACrG,yEAAyE;IACzE,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,aAAa,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACnH,MAAM,YAAY,GAAoB;QACpC,MAAM,EAAE,kBAAkB;QAC1B,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,MAAM,EAAE;QAC1C,gBAAgB,EAAE,OAAO;QACzB,SAAS,EACP,6GAA6G;QAC/G,WAAW,EAAE,WAAW,CAAC,eAAe,EAAE,aAAa,CAAC;KACzD,CAAC;IAEF,wEAAwE;IACxE,+DAA+D;IAC/D,sEAAsE;IACtE,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAChI,MAAM,kBAAkB,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3G,MAAM,gBAAgB,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACvH,MAAM,WAAW,GAAoB;QACnC,MAAM,EAAE,gBAAgB;QACxB,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,gBAAgB,EAAE,OAAO;QACzB,SAAS,EACP,oIAAoI;QACtI,WAAW,EAAE,WAAW,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;KAC/D,CAAC;IAEF,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC"}

package/core/dist/runtime-v2/pain-signal-observability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pain-signal-observability.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-signal-observability.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,WAAW,6BAA6B;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA4XD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,oCAAoC,GACzC,6BAA6B,CAiE/B"}
+{"version":3,"file":"pain-signal-observability.d.ts","sourceRoot":"","sources":["../../src/runtime-v2/pain-signal-observability.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,WAAW,6BAA6B;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAmZD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,oCAAoC,GACzC,6BAA6B,CAiE/B"}

package/core/dist/runtime-v2/pain-signal-observability.js

@@ -41,6 +41,13 @@ function getSessionsColumns(db) {
     const cols = db.prepare('PRAGMA table_info(sessions)').all();
     return cols.map((c) => c.name);
 }
+/**
+ * Type guard: narrows `object` to `{ name: unknown }` without `as` casts.
+ * Used for PRAGMA table_info rows (rc-2-no-as-bypass).
+ */
+function hasNameField(row) {
+    return Object.hasOwn(row, 'name');
+}
 /**
  * Ensure trajectory.db has the full schema (all 16 tables + indexes + migrations).
  *
@@ -87,6 +94,8 @@ function ensureTrajectorySchema(db) {
       empathy_signal_json TEXT NOT NULL,
       blob_ref TEXT,
       raw_excerpt TEXT,
+      stop_reason TEXT,
+      thinking_blocks_count INTEGER,
       created_at TEXT NOT NULL
     );
     CREATE TABLE IF NOT EXISTS user_turns (
@@ -113,6 +122,7 @@ function ensureTrajectorySchema(db) {
       gfi_before REAL,
       gfi_after REAL,
       params_json TEXT NOT NULL,
+      result_preview TEXT,
       created_at TEXT NOT NULL
     );
     CREATE TABLE IF NOT EXISTS pain_events (
@@ -125,6 +135,8 @@ function ensureTrajectorySchema(db) {
       origin TEXT,
       confidence REAL,
       text TEXT,
+      canonical_pain_id TEXT,
+      runtime_task_id TEXT,
       created_at TEXT NOT NULL
     );
     CREATE TABLE IF NOT EXISTS gate_blocks (
@@ -203,6 +215,12 @@ function ensureTrajectorySchema(db) {
       started_at TEXT,
       completed_at TEXT,
       resolution TEXT,
+      task_kind TEXT,
+      priority TEXT,
+      retry_count INTEGER,
+      max_retries INTEGER,
+      last_error TEXT,
+      result_ref TEXT,
       created_at TEXT NOT NULL,
       updated_at TEXT NOT NULL
     );
@@ -279,7 +297,12 @@ function ensureTrajectorySchema(db) {
     ];
     for (const col of v2Columns) {
         const exists = db.prepare(`PRAGMA table_info(evolution_tasks)`).all()
-            .some((row) => row.name === col.name);
+            .some((row) => {
+            if (typeof row !== 'object' || row === null)
+                return false;
+            // Use type guard predicate to narrow without `as` (rc-2-no-as-bypass)
+            return hasNameField(row) && row.name === col.name;
+        });
         if (!exists) {
             db.exec(`ALTER TABLE evolution_tasks ADD COLUMN ${col.name} ${col.type}`);
         }