instar 1.3.489 → 1.3.491

package/dist/core/topicProfileIngress.js

@@ -0,0 +1,249 @@
+/**
+ * topicProfileIngress — the §10.1 SERVER-SIDE conversational ingress for
+ * Topic Profile writes (TOPIC-PROFILE-SPEC §10.1, §8 'switch now', §10.4
+ * cooldown confirm).
+ *
+ * Two pieces, both pure logic (no I/O — the write surface owns side effects):
+ *
+ *  1. The deterministic TRIGGER GRAMMAR (`parseProfileTrigger`). The parse
+ *     runs in the message-ingress pipeline where the authenticated sender uid
+ *     is first-party — the uid reaches the store through code, never through
+ *     a body the agent composed. The grammar is a CLOSED set (Tier 0, §14):
+ *     no fuzzy matcher ever holds write authority. Out-of-grammar phrasings
+ *     ride the propose-then-confirm lane instead.
+ *
+ *  2. The ARMED-CONFIRM slot manager (`ProfileConfirmSlots`). ALL THREE
+ *     confirm surfaces — §10.1 propose-confirm, §8 switch-now, §10.4
+ *     re-apply-cooldown — share ONE armed slot per topic (round-7: a bare
+ *     "yes" must never be ambiguous about which confirm it fires). The slot
+ *     enforces:
+ *      - TTL (`switchNowConfirmTtlMs`),
+ *      - event-based ordering on PLATFORM MESSAGE IDS (the confirm's id must
+ *        be > the latest echo's platform-returned id; ties refused toward
+ *        re-echo — never a cross-clock timestamp compare, round-7),
+ *      - supersession (a re-proposal invalidates any in-flight confirm; the
+ *        confirm must answer the LATEST echo),
+ *      - a re-proposal rate bound per topic (churn is a suspicion signal —
+ *        past the bound the slot refuses re-proposals for a cooldown and
+ *        tears down, round-7),
+ *      - forwarded-content rejection (a message carrying platform forward
+ *        metadata never matches ANY ingress recognition, round-5).
+ */
+const FRAMEWORK_WORDS = {
+    codex: 'codex-cli',
+    'codex-cli': 'codex-cli',
+    claude: 'claude-code',
+    'claude-code': 'claude-code',
+    gemini: 'gemini-cli',
+    'gemini-cli': 'gemini-cli',
+    pi: 'pi-cli',
+    'pi-cli': 'pi-cli',
+};
+const THINKING_WORDS = ['off', 'low', 'medium', 'high', 'max'];
+/**
+ * Parse a first-party operator turn against the closed trigger set.
+ * Returns null for anything outside the grammar — the message then routes
+ * to the session normally (the agent may propose via the §10.1
+ * propose-confirm lane). Deterministic and anchored: a trigger is the WHOLE
+ * message (trailing punctuation tolerated), never a substring match inside
+ * prose — quoting someone else's "use codex here" mid-paragraph must not
+ * fire a write.
+ */
+export function parseProfileTrigger(text) {
+    const t = text.trim().replace(/[.!]+$/, '').trim().toLowerCase();
+    if (t.length === 0 || t.length > 120)
+        return null;
+    // framework switch: "use codex here" / "use codex for this topic" /
+    // "switch this topic to codex" / "switch to codex here"
+    let m = t.match(/^use (codex|codex-cli|claude|claude-code|gemini|gemini-cli|pi|pi-cli) (?:here|for this topic|in this topic)$/);
+    if (!m)
+        m = t.match(/^switch this topic to (codex|codex-cli|claude|claude-code|gemini|gemini-cli|pi|pi-cli)$/);
+    if (!m)
+        m = t.match(/^switch to (codex|codex-cli|claude|claude-code|gemini|gemini-cli|pi|pi-cli) (?:here|for this topic)$/);
+    if (m)
+        return { kind: 'write', patch: { framework: FRAMEWORK_WORDS[m[1]] ?? m[1] } };
+    // model pin: "pin this topic to <id>" / "use model <id> here".
+    // <id> is the literal id charset only — names ("Fable") are out-of-grammar
+    // by design and ride propose-confirm (Tier 0: no alias resolution here).
+    m = t.match(/^pin this topic to ([a-z0-9._-]{1,64})$/);
+    if (!m)
+        m = t.match(/^use model ([a-z0-9._-]{1,64}) (?:here|for this topic)$/);
+    if (m) {
+        if (m[1] === 'default' || m[1] === 'escalated') {
+            return { kind: 'write', patch: { modelTier: m[1], model: null } };
+        }
+        return { kind: 'write', patch: { model: m[1], modelTier: null } };
+    }
+    // thinking mode: "set high thinking on this topic" / "set thinking to high
+    // on this topic" / "use high thinking here"
+    m = t.match(/^set (off|low|medium|high|max) thinking (?:on this topic|here)$/);
+    if (!m)
+        m = t.match(/^set thinking to (off|low|medium|high|max)(?: on this topic| here)?$/);
+    if (!m)
+        m = t.match(/^use (off|low|medium|high|max) thinking (?:here|on this topic)$/);
+    if (m && THINKING_WORDS.includes(m[1])) {
+        return { kind: 'write', patch: { thinkingMode: m[1] } };
+    }
+    // escalation override — `suppress` requires an UNAMBIGUOUS explicit
+    // instruction (§9: any ambiguity defaults to inherit; no fuzzy step ever
+    // weakens the mandate). These are the explicit forms only.
+    if (/^(?:don'?t|do not|never) (?:auto-)?escalate this topic$/.test(t)
+        || /^no auto-escalation (?:here|on this topic)$/.test(t)) {
+        return { kind: 'write', patch: { escalationOverride: 'suppress' } };
+    }
+    if (/^(?:re-?enable|resume) (?:auto-)?escalation (?:here|on this topic)$/.test(t)
+        || /^escalate this topic normally$/.test(t)) {
+        return { kind: 'write', patch: { escalationOverride: 'inherit' } };
+    }
+    // readout
+    if (/^what(?:'s| is) this topic (?:pinned to|running on|using)$/.test(t)
+        || /^show (?:this topic'?s? )?(?:topic )?profile$/.test(t)) {
+        return { kind: 'readout' };
+    }
+    // undo — profile-scoped phrasings only (a bare "undo" is normal
+    // conversation and must reach the session untouched), plus the §10.1
+    // detection-loop phrase verbatim.
+    if (/^undo (?:that|the last|this) (?:topic |profile )?(?:profile |topic )?change$/.test(t)
+        || /^undo the (?:topic )?profile change$/.test(t)
+        || /^that wasn'?t me[\s,—–-]+undo$/.test(t)) {
+        return { kind: 'undo' };
+    }
+    // clear
+    if (/^(?:clear|reset) (?:this topic'?s? profile|the profile (?:on|for) this topic)$/.test(t)) {
+        return { kind: 'clear' };
+    }
+    // re-apply (the §10.4 revert notice promises exactly "say re-apply")
+    if (/^re-?apply(?: (?:the|that|my) (?:parked )?(?:pin|profile))?$/.test(t)) {
+        return { kind: 'reapply' };
+    }
+    // switch now (§8 — overrides busy/autonomous deferral, never protection)
+    if (/^switch now$/.test(t))
+        return { kind: 'switch-now' };
+    // bare affirmative — consumed ONLY when an armed confirm slot matches;
+    // otherwise the caller routes it to the session as normal conversation.
+    if (/^(?:yes|yep|yeah|confirm|confirmed|do it|go ahead)$/.test(t)) {
+        return { kind: 'confirm' };
+    }
+    return null;
+}
+const DEFAULT_TTL_MS = 300_000;
+const DEFAULT_MAX_PROPOSALS = 5;
+const DEFAULT_PROPOSAL_WINDOW_MS = 600_000;
+export class ProfileConfirmSlots {
+    slots = new Map();
+    /** Re-proposal timestamps per topic (rate bound, round-7). */
+    proposalTimes = new Map();
+    /** Topics cooling down after a proposal-churn trip. */
+    churnCooldownUntil = new Map();
+    opts;
+    now;
+    constructor(opts = {}) {
+        this.opts = {
+            maxProposalsPerWindow: opts.maxProposalsPerWindow ?? DEFAULT_MAX_PROPOSALS,
+            proposalWindowMs: opts.proposalWindowMs ?? DEFAULT_PROPOSAL_WINDOW_MS,
+            ...opts,
+        };
+        this.now = opts.now ?? (() => Date.now());
+    }
+    ttl() {
+        return this.opts.ttlMs?.() ?? DEFAULT_TTL_MS;
+    }
+    /**
+     * Arm (or supersede) the topic's ONE confirm slot. Returns ok:false when
+     * the topic is rate-bounded on re-proposals (the armed proposal is torn
+     * down and the operator re-states fresh — round-7).
+     */
+    arm(topicKey, kind, patch, echoText, origin) {
+        const key = String(topicKey);
+        const now = this.now();
+        const coolUntil = this.churnCooldownUntil.get(key);
+        if (coolUntil !== undefined && now < coolUntil) {
+            return { ok: false, reason: 'proposal-churn-cooldown' };
+        }
+        const times = (this.proposalTimes.get(key) ?? []).filter((t) => now - t < this.opts.proposalWindowMs);
+        times.push(now);
+        this.proposalTimes.set(key, times);
+        if (times.length > this.opts.maxProposalsPerWindow) {
+            // Churn trip: tear the slot down + refuse further re-proposals for a
+            // cooldown. Audited as a suspicion signal.
+            this.slots.delete(key);
+            this.churnCooldownUntil.set(key, now + this.opts.proposalWindowMs);
+            this.opts.audit?.({ type: 'proposal-churn-trip', topic: key, count: times.length });
+            return { ok: false, reason: 'proposal-churn-cooldown' };
+        }
+        const superseded = this.slots.has(key);
+        this.slots.set(key, {
+            kind,
+            topicKey: key,
+            patch,
+            echoText,
+            echoPlatformMessageId: null,
+            armedAt: now,
+            origin,
+        });
+        this.opts.audit?.({
+            type: 'confirm-armed',
+            topic: key,
+            kind,
+            origin,
+            superseded,
+        });
+        return { ok: true, superseded };
+    }
+    /** Record the platform-returned id of the echo we just sent (ordering anchor). */
+    recordEchoMessageId(topicKey, platformMessageId) {
+        const slot = this.slots.get(String(topicKey));
+        if (slot)
+            slot.echoPlatformMessageId = platformMessageId;
+    }
+    /** The armed slot, if any (readout / switch-now no-op reply). */
+    peek(topicKey) {
+        return this.slots.get(String(topicKey)) ?? null;
+    }
+    disarm(topicKey) {
+        this.slots.delete(String(topicKey));
+    }
+    /**
+     * Match an inbound affirmative against the armed slot. On ok:true the slot
+     * is CONSUMED (one confirm per echo). Refusals leave the slot armed except
+     * 'expired' (torn down).
+     */
+    matchConfirm(topicKey, ctx) {
+        const key = String(topicKey);
+        // Forwarded content never matches ANY ingress recognition (round-5).
+        if (ctx.forwarded)
+            return { ok: false, reason: 'forwarded' };
+        const slot = this.slots.get(key);
+        if (!slot)
+            return { ok: false, reason: 'none-armed' };
+        if (this.now() - slot.armedAt > this.ttl()) {
+            this.slots.delete(key);
+            this.opts.audit?.({ type: 'confirm-expired', topic: key, kind: slot.kind });
+            return { ok: false, reason: 'expired' };
+        }
+        // Event-based ordering on platform message ids (round-7): the confirm
+        // must postdate the LATEST echo in the same conversation. An unknown
+        // echo id refuses toward re-echo (we cannot prove the operator saw the
+        // latest version); ties refuse the same way.
+        if (slot.echoPlatformMessageId === null) {
+            return { ok: false, reason: 'no-echo-id' };
+        }
+        if (ctx.platformMessageId === null || ctx.platformMessageId <= slot.echoPlatformMessageId) {
+            return { ok: false, reason: 'stale-order' };
+        }
+        this.slots.delete(key);
+        this.opts.audit?.({ type: 'confirm-fired', topic: key, kind: slot.kind, origin: slot.origin });
+        return { ok: true, armed: slot };
+    }
+}
+/** Parse the numeric platform message id from a Message.id like `tg-12345`. */
+export function platformMessageIdFrom(messageId) {
+    if (!messageId)
+        return null;
+    const m = /^tg-(\d+)$/.exec(messageId);
+    if (!m)
+        return null;
+    const n = Number(m[1]);
+    return Number.isSafeInteger(n) ? n : null;
+}
+//# sourceMappingURL=topicProfileIngress.js.map

package/dist/core/topicProfileIngress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topicProfileIngress.js","sourceRoot":"","sources":["../../src/core/topicProfileIngress.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAeH,MAAM,eAAe,GAA2B;IAC9C,KAAK,EAAE,WAAW;IAClB,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,aAAa;IACrB,aAAa,EAAE,aAAa;IAC5B,MAAM,EAAE,YAAY;IACpB,YAAY,EAAE,YAAY;IAC1B,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAElD,oEAAoE;IACpE,wDAAwD;IACxD,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,8GAA8G,CAAC,CAAC;IAChI,IAAI,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC/G,IAAI,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC5H,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAErF,+DAA+D;IAC/D,2EAA2E;IAC3E,yEAAyE;IACzE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC;QACN,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,2EAA2E;IAC3E,4CAA4C;IAC5C,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACvF,IAAI,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,oEAAoE;IACpE,yEAAyE;IACzE,2DAA2D;IAC3D,IAAI,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC;WAChE,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,qEAAqE,CAAC,IAAI,CAAC,CAAC,CAAC;WAC5E,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,CAAC;IACrE,CAAC;IAED,UAAU;IACV,IAAI,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC;WACnE,+CAA+C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,gEAAgE;IAChE,qEAAqE;IACrE,kCAAkC;IAClC,IAAI,8EAA8E,CAAC,IAAI,CAAC,CAAC,CAAC;WACrF,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC;WAC9C,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,QAAQ;IACR,IAAI,gFAAgF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,qEAAqE;IACrE,IAAI,8DAA8D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,yEAAyE;IACzE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAE1D,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AA0CD,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAE3C,MAAM,OAAO,mBAAmB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAChD,8DAA8D;IACtD,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;IACpD,uDAAuD;IAC/C,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,CAAwH;IAC5H,GAAG,CAAe;IAEnC,YAAY,OAAmC,EAAE;QAC/C,IAAI,CAAC,IAAI,GAAG;YACV,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,IAAI,qBAAqB;YAC1E,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,0BAA0B;YACrE,GAAG,IAAI;SACR,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,cAAc,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,GAAG,CACD,QAAgB,EAChB,IAAsB,EACtB,KAAwB,EACxB,QAAgB,EAChB,MAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAC5C,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnD,qEAAqE;YACrE,2CAA2C;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,IAAI;YACJ,QAAQ,EAAE,GAAG;YACb,KAAK;YACL,QAAQ;YACR,qBAAqB,EAAE,IAAI;YAC3B,OAAO,EAAE,GAAG;YACZ,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,GAAG;YACV,IAAI;YACJ,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;IAED,kFAAkF;IAClF,mBAAmB,CAAC,QAAgB,EAAE,iBAAyB;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI;YAAE,IAAI,CAAC,qBAAqB,GAAG,iBAAiB,CAAC;IAC3D,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC,QAAgB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,YAAY,CACV,QAAgB,EAChB,GAA6D;QAE7D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,qEAAqE;QACrE,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAE7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAEtD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1C,CAAC;QAED,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,SAA6B;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}

package/dist/core/topicProfileValidation.d.ts

@@ -0,0 +1,109 @@
+/**
+ * topicProfileValidation — closed-enum clamps for every Topic Profile field.
+ *
+ * TOPIC-PROFILE-SPEC §10.2: EVERY profile field is clamped to its closed enum
+ * server-side BEFORE persist and before it can reach a launch arg — not just
+ * the model arm. The pin write is a NEW untrusted entry point that FABLE's
+ * config-sourced resolver did not cover, and `thinkingMode` becomes a launch
+ * arg (`-c model_reasoning_effort=…`), so it is an injection surface symmetric
+ * to the model one.
+ *
+ * The clamp runs at the RESOLUTION boundary for every source (store pin,
+ * config default, transferred entry) — `validateProfileFields` is pure and
+ * callable from all three. Pure logic, no I/O.
+ */
+import type { IntelligenceFramework } from './intelligenceProviderFactory.js';
+export declare const THINKING_MODES: readonly ["off", "low", "medium", "high", "max"];
+export type ThinkingMode = (typeof THINKING_MODES)[number];
+export declare const ESCALATION_OVERRIDES: readonly ["inherit", "suppress"];
+export type EscalationOverride = (typeof ESCALATION_OVERRIDES)[number];
+export declare const MODEL_TIERS: readonly ["default", "escalated"];
+export type ProfileModelTier = (typeof MODEL_TIERS)[number];
+/** Failure classes for the §10.3 audit — never the raw value verbatim. */
+export type ProfileFieldFailure = 'off-enum' | 'regex' | 'length' | 'cross-framework-id' | 'model-and-tier-both-set' | 'per-token-lane' | 'unknown-field';
+/**
+ * §10.2 billing lane — model ids whose lane would be PER-TOKEN (API-billed,
+ * outside the subscription envelope), refused at validation. `knownModelIds`
+ * membership proves an id is *recognized*, not that it is inside the
+ * subscription envelope; a pin can never introduce a per-token API path
+ * (§10.3 — the cost gate's write-time arm).
+ *
+ * The table is a closed allow/deny classification per framework. TODAY every
+ * member of the closed enums rides the subscription envelope (the codex enum
+ * mirrors CODEX_MODELS_SUBSCRIPTION by construction; the claude enum is the
+ * CLI's subscription-login surface), so the deny sets ship empty — the seam
+ * exists so the moment a per-token id joins a known-ids enum it is named here
+ * and refused, instead of slipping into a launch arg as billable API spend.
+ * If this table and a framework's enum ever disagree, the REFUSAL wins.
+ */
+export declare const PER_TOKEN_LANE_MODEL_IDS: Partial<Record<IntelligenceFramework, readonly string[]>>;
+/**
+ * §10.2 — refuse a model id whose billing lane would be per-token. Returns
+ * null when the id rides the subscription envelope. `perTokenIds` is
+ * injectable for tests (both sides of the boundary stay coverable while the
+ * shipped deny sets are empty).
+ */
+export declare function billingLaneError(id: string, framework: IntelligenceFramework, perTokenIds?: readonly string[]): ProfileValidationError | null;
+export interface ProfileValidationError {
+    field: string;
+    failure: ProfileFieldFailure;
+    /** Human-readable named reason (operator-facing refusal text). */
+    reason: string;
+    /** Hard-truncated, charset-clamped prefix of the rejected value (§10.3). */
+    rejectedPrefix?: string;
+    /** Length of the rejected raw value (§10.3 audit field). */
+    rejectedLength?: number;
+}
+export interface ProfilePatchInput {
+    framework?: string | null;
+    model?: string | null;
+    modelTier?: string | null;
+    escalationOverride?: string | null;
+    thinkingMode?: string | null;
+}
+export interface ValidatedProfilePatch {
+    framework?: IntelligenceFramework | null;
+    model?: string | null;
+    modelTier?: ProfileModelTier | null;
+    escalationOverride?: EscalationOverride | null;
+    thinkingMode?: ThinkingMode | null;
+}
+/** §10.3 — a rejected value is arbitrary text; store only a clamped prefix. */
+export declare function clampRejectedValue(value: unknown): {
+    prefix: string;
+    length: number;
+};
+/**
+ * Validate a profile patch's fields against the closed enums.
+ *
+ * `effectiveFramework` is the framework the model id will be validated
+ * against — the patch's own framework when it sets one, otherwise the
+ * topic's currently-resolved framework (caller supplies it).
+ *
+ * Returns either the validated (narrowed) patch or the FIRST error — a
+ * refusal leaves the profile unchanged (§4), so one named reason suffices.
+ * `null` field values are CLEAR requests and always valid; `undefined`
+ * fields are absent from the patch.
+ */
+export declare function validateProfileFields(patch: ProfilePatchInput, effectiveFramework: IntelligenceFramework): {
+    ok: true;
+    patch: ValidatedProfilePatch;
+} | {
+    ok: false;
+    error: ProfileValidationError;
+};
+/**
+ * §10.2 model-id clamp: regex shape + membership in the framework's closed
+ * `knownModelIds` enumeration. Returns null when valid.
+ */
+export declare function validateModelId(id: string, framework: IntelligenceFramework): ProfileValidationError | null;
+/**
+ * §4 — model and modelTier are mutually exclusive; setting both (or a patch
+ * whose merge RESULT would hold both) is a HARD refusal, never a silent
+ * winner. Checked against the post-merge shape by the store.
+ */
+export declare function modelTierMutualExclusionError(merged: {
+    model?: string | null;
+    modelTier?: string | null;
+}): ProfileValidationError | null;
+//# sourceMappingURL=topicProfileValidation.d.ts.map

package/dist/core/topicProfileValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topicProfileValidation.d.ts","sourceRoot":"","sources":["../../src/core/topicProfileValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAI9E,eAAO,MAAM,cAAc,kDAAmD,CAAC;AAC/E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,eAAO,MAAM,oBAAoB,kCAAmC,CAAC;AACrE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,eAAO,MAAM,WAAW,mCAAoC,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,OAAO,GACP,QAAQ,GACR,oBAAoB,GACpB,yBAAyB,GACzB,gBAAgB,GAChB,eAAe,CAAC;AAEpB;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC,CAS9F,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,qBAAqB,EAChC,WAAW,GAAE,SAAS,MAAM,EAA8C,GACzE,sBAAsB,GAAG,IAAI,CAa/B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,mBAAmB,CAAC;IAC7B,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC/C,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAIrF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,kBAAkB,EAAE,qBAAqB,GACxC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,sBAAsB,CAAA;CAAE,CA8F3F;AAaD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,qBAAqB,GAC/B,sBAAsB,GAAG,IAAI,CAuC/B;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG,sBAAsB,GAAG,IAAI,CAShC"}

package/dist/core/topicProfileValidation.js

@@ -0,0 +1,247 @@
+/**
+ * topicProfileValidation — closed-enum clamps for every Topic Profile field.
+ *
+ * TOPIC-PROFILE-SPEC §10.2: EVERY profile field is clamped to its closed enum
+ * server-side BEFORE persist and before it can reach a launch arg — not just
+ * the model arm. The pin write is a NEW untrusted entry point that FABLE's
+ * config-sourced resolver did not cover, and `thinkingMode` becomes a launch
+ * arg (`-c model_reasoning_effort=…`), so it is an injection surface symmetric
+ * to the model one.
+ *
+ * The clamp runs at the RESOLUTION boundary for every source (store pin,
+ * config default, transferred entry) — `validateProfileFields` is pure and
+ * callable from all three. Pure logic, no I/O.
+ */
+import { KNOWN_MODEL_IDS, MODEL_ID_RE, escapeIdForAudit } from './ModelTierEscalation.js';
+import { SUPPORTED_FRAMEWORKS } from './TopicFrameworksStore.js';
+export const THINKING_MODES = ['off', 'low', 'medium', 'high', 'max'];
+export const ESCALATION_OVERRIDES = ['inherit', 'suppress'];
+export const MODEL_TIERS = ['default', 'escalated'];
+/**
+ * §10.2 billing lane — model ids whose lane would be PER-TOKEN (API-billed,
+ * outside the subscription envelope), refused at validation. `knownModelIds`
+ * membership proves an id is *recognized*, not that it is inside the
+ * subscription envelope; a pin can never introduce a per-token API path
+ * (§10.3 — the cost gate's write-time arm).
+ *
+ * The table is a closed allow/deny classification per framework. TODAY every
+ * member of the closed enums rides the subscription envelope (the codex enum
+ * mirrors CODEX_MODELS_SUBSCRIPTION by construction; the claude enum is the
+ * CLI's subscription-login surface), so the deny sets ship empty — the seam
+ * exists so the moment a per-token id joins a known-ids enum it is named here
+ * and refused, instead of slipping into a launch arg as billable API spend.
+ * If this table and a framework's enum ever disagree, the REFUSAL wins.
+ */
+export const PER_TOKEN_LANE_MODEL_IDS = {
+    // All KNOWN_CLAUDE_MODEL_IDS launch via the subscription-authed CLI today.
+    'claude-code': [],
+    // KNOWN_CODEX_MODEL_IDS mirrors the CODEX_MODELS_SUBSCRIPTION allowlist.
+    'codex-cli': [],
+    // gemini-cli runs the OAuth (code-assist) lane, not an API key, today.
+    'gemini-cli': [],
+    // pi-cli's enum is closed-empty — nothing to classify.
+    'pi-cli': [],
+};
+/**
+ * §10.2 — refuse a model id whose billing lane would be per-token. Returns
+ * null when the id rides the subscription envelope. `perTokenIds` is
+ * injectable for tests (both sides of the boundary stay coverable while the
+ * shipped deny sets are empty).
+ */
+export function billingLaneError(id, framework, perTokenIds = PER_TOKEN_LANE_MODEL_IDS[framework] ?? []) {
+    if (perTokenIds.includes(id)) {
+        return {
+            field: 'model',
+            failure: 'per-token-lane',
+            reason: `'${escapeIdForAudit(id)}' bills per-token (outside the subscription envelope) — ` +
+                `a topic pin can't introduce an API-billed path`,
+            rejectedPrefix: escapeIdForAudit(id).slice(0, 32),
+            rejectedLength: id.length,
+        };
+    }
+    return null;
+}
+/** §10.3 — a rejected value is arbitrary text; store only a clamped prefix. */
+export function clampRejectedValue(value) {
+    const raw = typeof value === 'string' ? value : JSON.stringify(value) ?? '';
+    const safe = raw.replace(/[^A-Za-z0-9._\- ]/g, '?');
+    return { prefix: safe.slice(0, 32), length: raw.length };
+}
+/**
+ * Validate a profile patch's fields against the closed enums.
+ *
+ * `effectiveFramework` is the framework the model id will be validated
+ * against — the patch's own framework when it sets one, otherwise the
+ * topic's currently-resolved framework (caller supplies it).
+ *
+ * Returns either the validated (narrowed) patch or the FIRST error — a
+ * refusal leaves the profile unchanged (§4), so one named reason suffices.
+ * `null` field values are CLEAR requests and always valid; `undefined`
+ * fields are absent from the patch.
+ */
+export function validateProfileFields(patch, effectiveFramework) {
+    const out = {};
+    if (patch.framework !== undefined) {
+        if (patch.framework === null) {
+            out.framework = null;
+        }
+        else if (SUPPORTED_FRAMEWORKS.includes(patch.framework)) {
+            out.framework = patch.framework;
+        }
+        else {
+            const { prefix, length } = clampRejectedValue(patch.framework);
+            return {
+                ok: false,
+                error: {
+                    field: 'framework',
+                    failure: 'off-enum',
+                    reason: `framework must be one of: ${SUPPORTED_FRAMEWORKS.join(', ')}`,
+                    rejectedPrefix: prefix,
+                    rejectedLength: length,
+                },
+            };
+        }
+    }
+    if (patch.modelTier !== undefined) {
+        if (patch.modelTier === null) {
+            out.modelTier = null;
+        }
+        else if (MODEL_TIERS.includes(patch.modelTier)) {
+            out.modelTier = patch.modelTier;
+        }
+        else {
+            const { prefix, length } = clampRejectedValue(patch.modelTier);
+            return {
+                ok: false,
+                error: {
+                    field: 'modelTier',
+                    failure: 'off-enum',
+                    reason: `modelTier must be 'default' or 'escalated'`,
+                    rejectedPrefix: prefix,
+                    rejectedLength: length,
+                },
+            };
+        }
+    }
+    if (patch.model !== undefined) {
+        if (patch.model === null) {
+            out.model = null;
+        }
+        else {
+            const modelError = validateModelId(patch.model, modelFramework(patch, effectiveFramework));
+            if (modelError)
+                return { ok: false, error: modelError };
+            out.model = patch.model;
+        }
+    }
+    if (patch.thinkingMode !== undefined) {
+        if (patch.thinkingMode === null) {
+            out.thinkingMode = null;
+        }
+        else if (THINKING_MODES.includes(patch.thinkingMode)) {
+            out.thinkingMode = patch.thinkingMode;
+        }
+        else {
+            const { prefix, length } = clampRejectedValue(patch.thinkingMode);
+            return {
+                ok: false,
+                error: {
+                    field: 'thinkingMode',
+                    failure: 'off-enum',
+                    reason: `thinkingMode must be one of: ${THINKING_MODES.join(', ')}`,
+                    rejectedPrefix: prefix,
+                    rejectedLength: length,
+                },
+            };
+        }
+    }
+    if (patch.escalationOverride !== undefined) {
+        if (patch.escalationOverride === null) {
+            out.escalationOverride = null;
+        }
+        else if (ESCALATION_OVERRIDES.includes(patch.escalationOverride)) {
+            out.escalationOverride = patch.escalationOverride;
+        }
+        else {
+            const { prefix, length } = clampRejectedValue(patch.escalationOverride);
+            return {
+                ok: false,
+                error: {
+                    field: 'escalationOverride',
+                    failure: 'off-enum',
+                    reason: `escalationOverride must be 'inherit' or 'suppress'`,
+                    rejectedPrefix: prefix,
+                    rejectedLength: length,
+                },
+            };
+        }
+    }
+    return { ok: true, patch: out };
+}
+/** The framework a model id in this patch should validate against. */
+function modelFramework(patch, effectiveFramework) {
+    if (patch.framework && SUPPORTED_FRAMEWORKS.includes(patch.framework)) {
+        return patch.framework;
+    }
+    return effectiveFramework;
+}
+/**
+ * §10.2 model-id clamp: regex shape + membership in the framework's closed
+ * `knownModelIds` enumeration. Returns null when valid.
+ */
+export function validateModelId(id, framework) {
+    if (typeof id !== 'string' || id.length === 0 || id.length > 64) {
+        const { prefix, length } = clampRejectedValue(id);
+        return {
+            field: 'model',
+            failure: 'length',
+            reason: 'model id must be a non-empty string of at most 64 characters',
+            rejectedPrefix: prefix,
+            rejectedLength: length,
+        };
+    }
+    if (!MODEL_ID_RE.test(id)) {
+        const { prefix, length } = clampRejectedValue(id);
+        return {
+            field: 'model',
+            failure: 'regex',
+            reason: 'model id contains characters outside the safe id charset',
+            rejectedPrefix: prefix,
+            rejectedLength: length,
+        };
+    }
+    const known = KNOWN_MODEL_IDS[framework] ?? [];
+    if (!known.includes(id)) {
+        return {
+            field: 'model',
+            failure: known.length === 0 ? 'cross-framework-id' : 'off-enum',
+            reason: known.length === 0
+                ? `framework '${framework}' has no pinnable model ids`
+                : `'${escapeIdForAudit(id)}' is not a known ${framework} model id`,
+            rejectedPrefix: escapeIdForAudit(id).slice(0, 32),
+            rejectedLength: id.length,
+        };
+    }
+    // §10.2 billing lane: enum membership proves the id is recognized, not that
+    // it is inside the subscription envelope — a per-token id is refused here.
+    const lane = billingLaneError(id, framework);
+    if (lane)
+        return lane;
+    return null;
+}
+/**
+ * §4 — model and modelTier are mutually exclusive; setting both (or a patch
+ * whose merge RESULT would hold both) is a HARD refusal, never a silent
+ * winner. Checked against the post-merge shape by the store.
+ */
+export function modelTierMutualExclusionError(merged) {
+    if (merged.model != null && merged.modelTier != null) {
+        return {
+            field: 'model',
+            failure: 'model-and-tier-both-set',
+            reason: 'pick one: an explicit model or a tier — a profile cannot hold both',
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=topicProfileValidation.js.map

package/dist/core/topicProfileValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topicProfileValidation.js","sourceRoot":"","sources":["../../src/core/topicProfileValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAG/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AAGrE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,WAAW,CAAU,CAAC;AAa7D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA8D;IACjG,2EAA2E;IAC3E,aAAa,EAAE,EAAE;IACjB,yEAAyE;IACzE,WAAW,EAAE,EAAE;IACf,uEAAuE;IACvE,YAAY,EAAE,EAAE;IAChB,uDAAuD;IACvD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAU,EACV,SAAgC,EAChC,cAAiC,wBAAwB,CAAC,SAAS,CAAC,IAAI,EAAE;IAE1E,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,gBAAgB;YACzB,MAAM,EACJ,IAAI,gBAAgB,CAAC,EAAE,CAAC,0DAA0D;gBAClF,gDAAgD;YAClD,cAAc,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACjD,cAAc,EAAE,EAAE,CAAC,MAAM;SAC1B,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6BD,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,kBAAyC;IAEzC,MAAM,GAAG,GAA0B,EAAE,CAAC;IAEtC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAkC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,6BAA6B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACtE,cAAc,EAAE,MAAM;oBACtB,cAAc,EAAE,MAAM;iBACvB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAA6B,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,4CAA4C;oBACpD,cAAc,EAAE,MAAM;oBACtB,cAAc,EAAE,MAAM;iBACvB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC3F,IAAI,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAK,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,YAA4B,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,gCAAgC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACnE,cAAc,EAAE,MAAM;oBACtB,cAAc,EAAE,MAAM;iBACvB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAwC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,oDAAoD;oBAC5D,cAAc,EAAE,MAAM;oBACtB,cAAc,EAAE,MAAM;iBACvB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CACrB,KAAwB,EACxB,kBAAyC;IAEzC,IAAI,KAAK,CAAC,SAAS,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC,SAAkC,CAAC;IAClD,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAU,EACV,SAAgC;IAEhC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,8DAA8D;YACtE,cAAc,EAAE,MAAM;YACtB,cAAc,EAAE,MAAM;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,0DAA0D;YAClE,cAAc,EAAE,MAAM;YACtB,cAAc,EAAE,MAAM;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU;YAC/D,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,CAAC;gBAChB,CAAC,CAAC,cAAc,SAAS,6BAA6B;gBACtD,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC,oBAAoB,SAAS,WAAW;YACtE,cAAc,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACjD,cAAc,EAAE,EAAE,CAAC,MAAM;SAC1B,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAG7C;IACC,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,oEAAoE;SAC7E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}