instar 1.3.730 → 1.3.731

package/dist/core/ResponseReviewDecisionLog.d.ts

@@ -0,0 +1,45 @@
+/**
+ * ResponseReviewDecisionLog — the durable would-block decision log
+ * (context-aware-outbound-review spec §D8, the flip-evidence store).
+ *
+ * The in-memory `CoherenceGate.reviewHistory` is pruned to 1000 entries and
+ * erased by every server restart — a data-gated enforcement-flip criterion
+ * ("a clean day on real traffic") cannot rest on a store any restart wipes.
+ * This append-only JSONL (`logs/response-review-decisions.jsonl`) is the
+ * restart-surviving record: one line per `_evaluate` verdict (ALL outcomes,
+ * not just would-blocks — the §D9.3 denominator matters), written at the same
+ * seam as `logAudit`, plus the two additive soak row types (counterfactual
+ * rows, §D9.4; canary/battery rows, §D9.4b — written through this SAME
+ * writer so there is exactly one file and one rotation policy).
+ *
+ * At-rest honesty (§D8): rows persist 200 credential-scrubbed chars of every
+ * reviewed turn plus topicId, as a plaintext machine-local file under
+ * filesystem permissions — the same posture as sibling JSONLs, NOT the
+ * encrypted vault. That is the trade for restart-surviving flip evidence.
+ *
+ * Failure direction: write failures are swallowed — telemetry must never
+ * affect a verdict or delivery (§D5: the D8 write is one of the individually
+ * contained context code paths; the HTTP seam above fails OPEN so nothing
+ * here may throw into `_evaluate`).
+ */
+export declare class ResponseReviewDecisionLog {
+    private readonly logPath;
+    private readonly maxBytes;
+    constructor(logPath: string, options?: {
+        maxBytes?: number;
+    });
+    /** The absolute path of the JSONL file (for tests + observability). */
+    getPath(): string;
+    /**
+     * Append one row. Swallows every failure — the decision log is telemetry;
+     * a full disk or unwritable path must never affect a review verdict.
+     */
+    append(row: Record<string, unknown>): void;
+    /**
+     * Size rotation: when the file exceeds maxBytes, rename it to `<path>.1`
+     * (replacing the previous archive) and start fresh — the same bounded
+     * single-archive policy sibling JSONLs use. Contained; never throws.
+     */
+    private rotateIfNeeded;
+}
+//# sourceMappingURL=ResponseReviewDecisionLog.d.ts.map

package/dist/core/ResponseReviewDecisionLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseReviewDecisionLog.d.ts","sourceRoot":"","sources":["../../src/core/ResponseReviewDecisionLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAQH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAK5D,uEAAuE;IACvE,OAAO,IAAI,MAAM;IAIjB;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAW1C;;;;OAIG;IACH,OAAO,CAAC,cAAc;CAqBvB"}

package/dist/core/ResponseReviewDecisionLog.js

@@ -0,0 +1,85 @@
+/**
+ * ResponseReviewDecisionLog — the durable would-block decision log
+ * (context-aware-outbound-review spec §D8, the flip-evidence store).
+ *
+ * The in-memory `CoherenceGate.reviewHistory` is pruned to 1000 entries and
+ * erased by every server restart — a data-gated enforcement-flip criterion
+ * ("a clean day on real traffic") cannot rest on a store any restart wipes.
+ * This append-only JSONL (`logs/response-review-decisions.jsonl`) is the
+ * restart-surviving record: one line per `_evaluate` verdict (ALL outcomes,
+ * not just would-blocks — the §D9.3 denominator matters), written at the same
+ * seam as `logAudit`, plus the two additive soak row types (counterfactual
+ * rows, §D9.4; canary/battery rows, §D9.4b — written through this SAME
+ * writer so there is exactly one file and one rotation policy).
+ *
+ * At-rest honesty (§D8): rows persist 200 credential-scrubbed chars of every
+ * reviewed turn plus topicId, as a plaintext machine-local file under
+ * filesystem permissions — the same posture as sibling JSONLs, NOT the
+ * encrypted vault. That is the trade for restart-surviving flip evidence.
+ *
+ * Failure direction: write failures are swallowed — telemetry must never
+ * affect a verdict or delivery (§D5: the D8 write is one of the individually
+ * contained context code paths; the HTTP seam above fails OPEN so nothing
+ * here may throw into `_evaluate`).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { SafeFsExecutor } from './SafeFsExecutor.js';
+const DEFAULT_MAX_BYTES = 10 * 1024 * 1024; // 10MB, size-rotated like sibling JSONLs
+export class ResponseReviewDecisionLog {
+    logPath;
+    maxBytes;
+    constructor(logPath, options) {
+        this.logPath = logPath;
+        this.maxBytes = options?.maxBytes ?? DEFAULT_MAX_BYTES;
+    }
+    /** The absolute path of the JSONL file (for tests + observability). */
+    getPath() {
+        return this.logPath;
+    }
+    /**
+     * Append one row. Swallows every failure — the decision log is telemetry;
+     * a full disk or unwritable path must never affect a review verdict.
+     */
+    append(row) {
+        try {
+            fs.mkdirSync(path.dirname(this.logPath), { recursive: true });
+            this.rotateIfNeeded();
+            fs.appendFileSync(this.logPath, JSON.stringify(row) + '\n', 'utf8');
+        }
+        catch {
+            // @silent-fallback-ok — §D8: decision-log write failures are swallowed;
+            // the verdict and delivery are unaffected (telemetry never gates).
+        }
+    }
+    /**
+     * Size rotation: when the file exceeds maxBytes, rename it to `<path>.1`
+     * (replacing the previous archive) and start fresh — the same bounded
+     * single-archive policy sibling JSONLs use. Contained; never throws.
+     */
+    rotateIfNeeded() {
+        try {
+            const stat = fs.statSync(this.logPath);
+            if (stat.size < this.maxBytes)
+                return;
+            const archive = `${this.logPath}.1`;
+            try {
+                SafeFsExecutor.safeRmSync(archive, {
+                    force: true,
+                    operation: 'ResponseReviewDecisionLog.rotate (drop the previous single archive)',
+                });
+            }
+            catch {
+                // @silent-fallback-ok — a stale archive that cannot be removed only
+                // means renameSync below may fail; that failure is caught too.
+            }
+            fs.renameSync(this.logPath, archive);
+        }
+        catch {
+            // @silent-fallback-ok — a missing file (ENOENT on first write) or a
+            // failed rotation both degrade to "keep appending"; telemetry never
+            // gates and the append itself is separately contained.
+        }
+    }
+}
+//# sourceMappingURL=ResponseReviewDecisionLog.js.map

package/dist/core/ResponseReviewDecisionLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseReviewDecisionLog.js","sourceRoot":"","sources":["../../src/core/ResponseReviewDecisionLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,yCAAyC;AAErF,MAAM,OAAO,yBAAyB;IACnB,OAAO,CAAS;IAChB,QAAQ,CAAS;IAElC,YAAY,OAAe,EAAE,OAA+B;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAC;IACzD,CAAC;IAED,uEAAuE;IACvE,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAA4B;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,mEAAmE;QACrE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,cAAc;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC;gBACH,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE;oBACjC,KAAK,EAAE,IAAI;oBACX,SAAS,EAAE,qEAAqE;iBACjF,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,+DAA+D;YACjE,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,oEAAoE;YACpE,uDAAuD;QACzD,CAAC;IACH,CAAC;CACF"}

package/dist/core/WriteDomainRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WriteDomainRegistry.d.ts","sourceRoot":"","sources":["../../src/core/WriteDomainRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEjG,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,uBAAuB,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAEpE,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,OAAO,EAAE,uBAAuB,CAAC;IACjC;iEAC6D;IAC7D,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gEAAgE;IAChE,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB;8EAC0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,IAAI,CAAC;IACX,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,IAAI,CAAC;IACX,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;mCAE+B;IAC/B,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,QAAQ,CAAC;AAatD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGtF;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8B;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,CAAM;IAE9D;;2DAEuD;IACvD,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAsBlC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,IAAI;IAO9D,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAAA;KAAE;IAK/F;8BAC0B;IAC1B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQnE,qEAAqE;IACrE,YAAY,IAAI,SAAS,UAAU,EAAE;IAIrC,MAAM,IAAI,MAAM,EAAE;IAIlB,OAAO,IAAI,MAAM,EAAE;CAGpB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,mBAAmB,CAoDhG"}
+{"version":3,"file":"WriteDomainRegistry.d.ts","sourceRoot":"","sources":["../../src/core/WriteDomainRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEjG,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,uBAAuB,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;AAEpE,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,OAAO,EAAE,uBAAuB,CAAC;IACjC;iEAC6D;IAC7D,qBAAqB,EAAE,OAAO,CAAC;IAC/B,gEAAgE;IAChE,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB;8EAC0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,IAAI,CAAC;IACX,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,IAAI,CAAC;IACX,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;mCAE+B;IAC/B,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,QAAQ,CAAC;AAatD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGtF;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8B;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,CAAM;IAE9D;;2DAEuD;IACvD,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAsBlC;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,IAAI;IAO9D,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAAA;KAAE;IAK/F;8BAC0B;IAC1B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQnE,qEAAqE;IACrE,YAAY,IAAI,SAAS,UAAU,EAAE;IAIrC,MAAM,IAAI,MAAM,EAAE;IAIlB,OAAO,IAAI,MAAM,EAAE;CAGpB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,mBAAmB,CA0EhG"}

package/dist/core/WriteDomainRegistry.js

@@ -181,6 +181,27 @@ export function buildWriteDomainRegistry(opts) {
     reg.add({ kind: 'route', method: 'PATCH', pathPrefix: '/evolution/', domain: 'machine-local', story: evolutionStory });
     reg.add({ kind: 'route', method: 'POST', pathPrefix: '/attention', domain: 'machine-local', story: attentionStory });
     reg.add({ kind: 'route', method: 'PATCH', pathPrefix: '/attention', domain: 'machine-local', story: attentionStory });
+    // ── Review canary battery trigger (context-aware-outbound-review §D9.4b) ──
+    // Machine-local by construction: the Bearer-gated soak trigger runs THIS
+    // machine's review pipeline against booby-trapped fixtures. Its only writes
+    // are (a) transient fixture rows in the per-machine topic-memory SQLite,
+    // scoped to reserved NEGATIVE topic ids and removed in a finally (plus the
+    // next run's pre-clean, R4-m4), and (b) append-only batterySummary /
+    // decision rows in logs/response-review-decisions.jsonl — per-machine soak
+    // EVIDENCE, never authority, never converged across machines. Re-running
+    // the battery regenerates everything the route ever writes.
+    reg.add({
+        kind: 'route',
+        method: 'POST',
+        pathPrefix: '/review/canary-battery/run',
+        domain: 'machine-local',
+        story: {
+            logical: 'ephemeral-rebuildable',
+            onSharedGitSyncedPath: true,
+            fileLevel: 'git-sync-excluded',
+            note: 'canary fixtures are finally-cleaned rows in the per-machine topic-memory SQLite (reserved negative topic ids); the D8 decision log is per-machine soak evidence; file-level arm shipped in FileClassifier sync exclusions (.instar/topic-memory.db + logs/response-review-decisions.jsonl)',
+        },
+    });
     return reg;
 }
 //# sourceMappingURL=WriteDomainRegistry.js.map

package/dist/core/WriteDomainRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"WriteDomainRegistry.js","sourceRoot":"","sources":["../../src/core/WriteDomainRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAkEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,SAAS,UAAU,CAAC,KAAmC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8HAA8H;SACvI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAoC;IAC5E,MAAM,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,OAAO,yBAAyB,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACjC,EAAE,GAAG,IAAI,GAAG,EAAmB,CAAC;IAChC,MAAM,GAAiB,EAAE,CAAC;IAC3C,+EAA+E;IACtE,sBAAsB,GAA4B,EAAE,CAAC;IAE9D;;2DAEuD;IACvD,GAAG,CAAC,KAAuB;QACzB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,CAAC,CAAC;gBAC/D,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAsB,CAAC;YACzE,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChG,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAsB,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;aAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,EAAU,EAAE,GAAY;QACjC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,QAAQ,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAClC,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,GAAY;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED;8BAC0B;IAC1B,aAAa,CAAC,MAAc,EAAE,SAAiB;QAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAkC;IACzE,MAAM,GAAG,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEtC,0EAA0E;IAC1E,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,oFAAoF;IACpF,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACrE,2EAA2E;IAC3E,mEAAmE;IAEnE,6EAA6E;IAC7E,yEAAyE;IACzE,gEAAgE;IAChE,oEAAoE;IACpE,2EAA2E;IAC3E,WAAW;IACX,GAAG,CAAC,GAAG,CAAC;QACN,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE;YACL,OAAO,EAAE,kBAAkB;YAC3B,qBAAqB,EAAE,IAAI;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,iGAAiG;SACxG;KACF,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,0DAA0D;IAC1D,MAAM,cAAc,GAAqB;QACvC,OAAO,EAAE,iBAAiB;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,iOAAiO;KACxO,CAAC;IACF,MAAM,cAAc,GAAqB;QACvC,OAAO,EAAE,uBAAuB;QAChC,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,+HAA+H;KACtI,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACtH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACvH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACrH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"WriteDomainRegistry.js","sourceRoot":"","sources":["../../src/core/WriteDomainRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAkEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,SAAS,UAAU,CAAC,KAAmC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8HAA8H;SACvI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAoC;IAC5E,MAAM,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,OAAO,yBAAyB,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACjC,EAAE,GAAG,IAAI,GAAG,EAAmB,CAAC;IAChC,MAAM,GAAiB,EAAE,CAAC;IAC3C,+EAA+E;IACtE,sBAAsB,GAA4B,EAAE,CAAC;IAE9D;;2DAEuD;IACvD,GAAG,CAAC,KAAuB;QACzB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,CAAC,CAAC;gBAC/D,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAsB,CAAC;YACzE,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChG,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAsB,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;aAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,EAAU,EAAE,GAAY;QACjC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,QAAQ,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAClC,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,GAAY;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED;8BAC0B;IAC1B,aAAa,CAAC,MAAc,EAAE,SAAiB;QAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAkC;IACzE,MAAM,GAAG,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEtC,0EAA0E;IAC1E,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,oFAAoF;IACpF,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACrE,2EAA2E;IAC3E,mEAAmE;IAEnE,6EAA6E;IAC7E,yEAAyE;IACzE,gEAAgE;IAChE,oEAAoE;IACpE,2EAA2E;IAC3E,WAAW;IACX,GAAG,CAAC,GAAG,CAAC;QACN,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE;YACL,OAAO,EAAE,kBAAkB;YAC3B,qBAAqB,EAAE,IAAI;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,iGAAiG;SACxG;KACF,CAAC,CAAC;IAEH,0EAA0E;IAC1E,wEAAwE;IACxE,0DAA0D;IAC1D,MAAM,cAAc,GAAqB;QACvC,OAAO,EAAE,iBAAiB;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,iOAAiO;KACxO,CAAC;IACF,MAAM,cAAc,GAAqB;QACvC,OAAO,EAAE,uBAAuB;QAChC,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,+HAA+H;KACtI,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACtH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACvH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACrH,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtH,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,yEAAyE;IACzE,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC;QACN,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,4BAA4B;QACxC,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE;YACL,OAAO,EAAE,uBAAuB;YAChC,qBAAqB,EAAE,IAAI;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,IAAI,EAAE,4RAA4R;SACnS;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/conversationContextWiring.d.ts

@@ -0,0 +1,51 @@
+/**
+ * conversationContextWiring — the WIRING-layer principal computation for the
+ * context-aware outbound review feature (spec §D1/§D4, Know Your Principal).
+ *
+ * The CoherenceGate stays decoupled from src/users/ and src/memory/: it sees
+ * only the injected `conversationContextProvider` function. THIS module is
+ * what the server wires that provider to — it converts raw TopicMemory rows
+ * plus the topic's verified-operator binding into the provider's return shape:
+ * role-labeled rows with per-row `verifiedOperator` tags AND the window's
+ * structural `askLicenseMode` (R4-m1: the provider RETURNS the wiring-computed
+ * values — the gate copies the mode into `conversationContextMeta` and NEVER
+ * computes or infers it).
+ *
+ * Principal rules (§D4, all computed from AUTHENTICATED uids — never content):
+ *  - Role comes from the store's `fromUser` column, never message text.
+ *  - BOUND topic (TopicOperatorStore binding present): mode =
+ *    'verified-operator'; each user row whose authenticated `telegramUserId`
+ *    matches the binding uid is tagged `verifiedOperator: true` (rendered
+ *    `USER(verified-operator):`); non-matching and uid-less rows render plain
+ *    `USER:` (weak corroboration by the prompt contract).
+ *  - UNBOUND topic: 'single-sender' ONLY when EVERY user-role row in the
+ *    window carries an authenticated uid AND exactly ONE distinct uid appears
+ *    (R4-L1: "at most one" would misread a zero-uid window as licensed).
+ *    A window containing ANY uid-less user-role row — or 2+ distinct uids, or
+ *    zero user rows — computes 'weak-corroboration-only' (R3-M2: an
+ *    unverifiable sender can never help LICENSE; fail-closed).
+ *
+ * A throw anywhere in here is a PROVIDER throw, caught at acquisition inside
+ * CoherenceGate._evaluate per §D5 (degrades to no context section).
+ */
+import type { AskLicenseMode, ConversationContextMessage } from './untrustedConversationContext.js';
+/** The subset of a TopicMemory row this computation reads. */
+export interface ConversationSourceRow {
+    text: string;
+    fromUser: boolean;
+    /** Telegram numeric user ID — the authoritative authenticated identity. */
+    telegramUserId?: number | null;
+}
+/** The provider return shape (CoherenceGateOptions.conversationContextProvider). */
+export interface ConversationContextProviderResult {
+    messages: ConversationContextMessage[];
+    askLicenseMode: AskLicenseMode;
+}
+/**
+ * Compute the provider result from raw rows + the topic's verified-operator
+ * binding (null when the topic is unbound). Pure and synchronous.
+ */
+export declare function buildConversationContext(rows: ConversationSourceRow[], operator: {
+    uid: string;
+} | null): ConversationContextProviderResult;
+//# sourceMappingURL=conversationContextWiring.d.ts.map

package/dist/core/conversationContextWiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversationContextWiring.d.ts","sourceRoot":"","sources":["../../src/core/conversationContextWiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAE3C,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,oFAAoF;AACpF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,qBAAqB,EAAE,EAC7B,QAAQ,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAC/B,iCAAiC,CA6CnC"}

package/dist/core/conversationContextWiring.js

@@ -0,0 +1,78 @@
+/**
+ * conversationContextWiring — the WIRING-layer principal computation for the
+ * context-aware outbound review feature (spec §D1/§D4, Know Your Principal).
+ *
+ * The CoherenceGate stays decoupled from src/users/ and src/memory/: it sees
+ * only the injected `conversationContextProvider` function. THIS module is
+ * what the server wires that provider to — it converts raw TopicMemory rows
+ * plus the topic's verified-operator binding into the provider's return shape:
+ * role-labeled rows with per-row `verifiedOperator` tags AND the window's
+ * structural `askLicenseMode` (R4-m1: the provider RETURNS the wiring-computed
+ * values — the gate copies the mode into `conversationContextMeta` and NEVER
+ * computes or infers it).
+ *
+ * Principal rules (§D4, all computed from AUTHENTICATED uids — never content):
+ *  - Role comes from the store's `fromUser` column, never message text.
+ *  - BOUND topic (TopicOperatorStore binding present): mode =
+ *    'verified-operator'; each user row whose authenticated `telegramUserId`
+ *    matches the binding uid is tagged `verifiedOperator: true` (rendered
+ *    `USER(verified-operator):`); non-matching and uid-less rows render plain
+ *    `USER:` (weak corroboration by the prompt contract).
+ *  - UNBOUND topic: 'single-sender' ONLY when EVERY user-role row in the
+ *    window carries an authenticated uid AND exactly ONE distinct uid appears
+ *    (R4-L1: "at most one" would misread a zero-uid window as licensed).
+ *    A window containing ANY uid-less user-role row — or 2+ distinct uids, or
+ *    zero user rows — computes 'weak-corroboration-only' (R3-M2: an
+ *    unverifiable sender can never help LICENSE; fail-closed).
+ *
+ * A throw anywhere in here is a PROVIDER throw, caught at acquisition inside
+ * CoherenceGate._evaluate per §D5 (degrades to no context section).
+ */
+/**
+ * Compute the provider result from raw rows + the topic's verified-operator
+ * binding (null when the topic is unbound). Pure and synchronous.
+ */
+export function buildConversationContext(rows, operator) {
+    const boundUid = operator && typeof operator.uid === 'string' && operator.uid.length > 0
+        ? operator.uid
+        : null;
+    const messages = rows.map((r) => {
+        const role = r.fromUser ? 'user' : 'agent';
+        const msg = {
+            role,
+            text: typeof r.text === 'string' ? r.text : String(r.text ?? ''),
+        };
+        if (boundUid !== null &&
+            role === 'user' &&
+            r.telegramUserId !== null &&
+            r.telegramUserId !== undefined &&
+            String(r.telegramUserId) === boundUid) {
+            msg.verifiedOperator = true;
+        }
+        return msg;
+    });
+    let askLicenseMode;
+    if (boundUid !== null) {
+        // Bound topic: the binding IS the license authority. Uid-less rows are
+        // already rendered plain USER: (weak corroboration) by the tag rule above.
+        askLicenseMode = 'verified-operator';
+    }
+    else {
+        const userRows = rows.filter((r) => r.fromUser);
+        const uids = new Set();
+        let anyUidless = userRows.length === 0; // zero user rows can never license
+        for (const r of userRows) {
+            if (r.telegramUserId === null || r.telegramUserId === undefined) {
+                anyUidless = true;
+            }
+            else {
+                uids.add(String(r.telegramUserId));
+            }
+        }
+        askLicenseMode = !anyUidless && uids.size === 1
+            ? 'single-sender'
+            : 'weak-corroboration-only';
+    }
+    return { messages, askLicenseMode };
+}
+//# sourceMappingURL=conversationContextWiring.js.map

package/dist/core/conversationContextWiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversationContextWiring.js","sourceRoot":"","sources":["../../src/core/conversationContextWiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAqBH;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6B,EAC7B,QAAgC;IAEhC,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,QAAQ,GAAiC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAqB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7D,MAAM,GAAG,GAA+B;YACtC,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SACjE,CAAC;QACF,IACE,QAAQ,KAAK,IAAI;YACjB,IAAI,KAAK,MAAM;YACf,CAAC,CAAC,cAAc,KAAK,IAAI;YACzB,CAAC,CAAC,cAAc,KAAK,SAAS;YAC9B,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,EACrC,CAAC;YACD,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,IAAI,cAA8B,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,uEAAuE;QACvE,2EAA2E;QAC3E,cAAc,GAAG,mBAAmB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,UAAU,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,mCAAmC;QAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBAChE,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,cAAc,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAC7C,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,yBAAyB,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACtC,CAAC"}

package/dist/core/reviewers/conversational-tone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversational-tone.d.ts","sourceRoot":"","sources":["../../../src/core/reviewers/conversational-tone.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,qBAAa,0BAA2B,SAAQ,iBAAiB;gBACnD,OAAO,CAAC,EAAE,eAAe;IAIrC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM;CA4CtD"}
+{"version":3,"file":"conversational-tone.d.ts","sourceRoot":"","sources":["../../../src/core/reviewers/conversational-tone.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG9E,qBAAa,0BAA2B,SAAQ,iBAAiB;gBACnD,OAAO,CAAC,EAAE,eAAe;IAIrC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM;CA+DtD"}

package/dist/core/reviewers/conversational-tone.js

@@ -5,6 +5,7 @@
  * technical implementation details that should not be exposed to users.
  */
 import { CoherenceReviewer } from '../CoherenceReviewer.js';
+import { renderUntrustedConversation } from '../untrustedConversationContext.js';
 export class ConversationalToneReviewer extends CoherenceReviewer {
     constructor(options) {
         super('conversational-tone', options);
@@ -22,6 +23,19 @@ export class ConversationalToneReviewer extends CoherenceReviewer {
                 relationshipHint += `\nRelationship formality: ${rc.formality}`;
             }
         }
+        // Context-aware carve-out (context-aware-outbound-review §D3): render the
+        // ONE ATOMIC block (context section + prompt contract) ONLY when the gate
+        // handed this reviewer the augmented ctx (opt-in set + primary-user
+        // recipient — structural scoping). Absent fields ⇒ conversationSection is
+        // '' and the prompt is BYTE-IDENTICAL to feature-dark: the pre-existing
+        // static "Code the user explicitly asked to see" exception stands exactly
+        // as today. The renderer never throws (total containment, §D5).
+        let conversationSection = '';
+        if (context.recentConversation &&
+            context.recentConversation.length > 0 &&
+            context.conversationContextMeta) {
+            conversationSection = renderUntrustedConversation(context.recentConversation, context.conversationContextMeta);
+        }
         return `${preamble}
 
 You are a communication quality reviewer. Your job: ensure agent messages to users contain NO technical implementation details.
@@ -42,7 +56,7 @@ EXCEPTIONS (these ARE allowed):
 - Code the user explicitly asked to see
 
 This message will be sent via ${context.channel}. Consider channel-appropriateness.
-${relationshipHint}
+${relationshipHint}${conversationSection}
 
 Respond EXCLUSIVELY with valid JSON:
 { "pass": boolean, "severity": "block"|"warn", "issue": "...", "suggestion": "..." }

package/dist/core/reviewers/conversational-tone.js.map

@@ -1 +1 @@
-{"version":3,"file":"conversational-tone.js","sourceRoot":"","sources":["../../../src/core/reviewers/conversational-tone.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAyB;QACnC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAES,WAAW,CAAC,OAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAEnD,IAAI,gBAAgB,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,gBAAgB,IAAI,uCAAuC,EAAE,CAAC,kBAAkB,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,gBAAgB,IAAI,6BAA6B,EAAE,CAAC,SAAS,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,GAAG,QAAQ;;;;;;;;;;;;;;;;;;;gCAmBU,OAAO,CAAC,OAAO;EAC7C,gBAAgB;;;;;;;EAOhB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC9C,CAAC;CACF"}
+{"version":3,"file":"conversational-tone.js","sourceRoot":"","sources":["../../../src/core/reviewers/conversational-tone.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEjF,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAyB;QACnC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAES,WAAW,CAAC,OAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAEnD,IAAI,gBAAgB,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;YACvC,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,gBAAgB,IAAI,uCAAuC,EAAE,CAAC,kBAAkB,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,gBAAgB,IAAI,6BAA6B,EAAE,CAAC,SAAS,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,mBAAmB,GAAG,EAAE,CAAC;QAC7B,IACE,OAAO,CAAC,kBAAkB;YAC1B,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACrC,OAAO,CAAC,uBAAuB,EAC/B,CAAC;YACD,mBAAmB,GAAG,2BAA2B,CAC/C,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,uBAAuB,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,QAAQ;;;;;;;;;;;;;;;;;;;gCAmBU,OAAO,CAAC,OAAO;EAC7C,gBAAgB,GAAG,mBAAmB;;;;;;;EAOtC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/core/types.d.ts

@@ -4185,6 +4185,45 @@ export interface ResponseReviewConfig {
     promptCaching?: boolean;
     /** Disable the test endpoint */
     testEndpointDisabled?: boolean;
+    /**
+     * Context-aware reviewers (context-aware-outbound-review spec §D10): feed a
+     * bounded, untrusted-data-enveloped slice of recent conversation to the
+     * OPTED-IN reviewers so the "user explicitly asked for this" carve-out has
+     * an input to judge. `enabled` is deliberately OMITTED from config defaults
+     * so the developmentAgent dark gate resolves it (LIVE on a dev agent, DARK
+     * on the fleet; explicit false force-darks, explicit true is the fleet
+     * flip). Resolution happens at the WIRING layer (server.ts liveConfig
+     * getter) — the gate receives a pre-resolved block and reads it LIVE per
+     * evaluate (kill-switch without restart).
+     */
+    conversationalContext?: ConversationalContextConfig;
+}
+/**
+ * Config block for the context-aware reviewer feature
+ * (`responseReview.conversationalContext`). All tunables have in-code
+ * defaults; no migrateConfig entry exists on purpose (the dev-gate convention
+ * REQUIRES `enabled` to be absent — a migration writing `enabled: false`
+ * would recreate the PR #1001 bug the devAgentGate funnel exists to prevent).
+ */
+export interface ConversationalContextConfig {
+    /** OMITTED by default ⇒ resolveDevAgentGate decides (dev LIVE / fleet DARK). */
+    enabled?: boolean;
+    /** Max conversation messages rendered per review (default 6). */
+    maxMessages?: number;
+    /** Per-message char clamp (default 500). */
+    maxCharsPerMessage?: number;
+    /** Total char hard clamp, oldest dropped first (default 4000). */
+    maxTotalChars?: number;
+    /**
+     * Built-in reviewers that receive the context section (default
+     * ['conversational-tone'] — spec §D3, round-1 M1: `information-leakage` is
+     * EXCLUDED by design; widening requires its own principal analysis and a
+     * spec revision, never a config-only addition). Named `injectReviewers`
+     * (not `reviewers`) because the sibling `responseReview.reviewers` key is
+     * an object map — a same-named array one nesting level down invites
+     * mis-merge (spec r2, round-1 m3).
+     */
+    injectReviewers?: string[];
 }
 export interface ReviewerConfig {
     enabled: boolean;