pi-mega-compact 0.20.16 → 0.20.18

package/dist/src/vector-cortex/outcomes/consent.js

@@ -0,0 +1,69 @@
+/**
+ * outcomes/consent.ts — VC8A append-only consent grants/revocations.
+ *
+ * ConsentV1 is append-only: grants and revocations are appended with an
+ * effective sequence number. A session has active explicit consent at time T
+ * if its most recent record at or before T is a grant.
+ *
+ * Dataset inclusion requires active explicit consent at export time. This
+ * module provides the pure consent-evaluation functions; the dataset module
+ * calls `hasActiveConsent` at export time.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { CONSENT_SCHEMA_V1 } from "./types.js";
+/**
+ * Evaluate whether a session has active explicit consent at or before the
+ * given effective sequence high-water. True if the most recent record at or
+ * before `effectiveHighWater` is a grant.
+ */
+export function hasActiveConsent(records, sessionId, effectiveHighWater) {
+    const relevant = records
+        .filter((r) => r.sessionId === sessionId && r.effectiveSeq <= effectiveHighWater)
+        .sort((a, b) => a.effectiveSeq - b.effectiveSeq);
+    if (relevant.length === 0)
+        return false;
+    return relevant[relevant.length - 1].action === "grant";
+}
+/**
+ * Append a consent grant for a session at the next effective sequence.
+ * Returns a new ConsentV1 record (append-only — never mutates the input).
+ */
+export function appendGrant(sessionId, effectiveSeq, ts) {
+    return {
+        schema: CONSENT_SCHEMA_V1,
+        consentId: `consent-${sessionId}-${effectiveSeq}`,
+        sessionId,
+        action: "grant",
+        effectiveSeq,
+        ts,
+    };
+}
+/**
+ * Append a consent revocation for a session at the next effective sequence.
+ * Returns a new ConsentV1 record (append-only — never mutates the input).
+ */
+export function appendRevoke(sessionId, effectiveSeq, ts) {
+    return {
+        schema: CONSENT_SCHEMA_V1,
+        consentId: `consent-${sessionId}-${effectiveSeq}`,
+        sessionId,
+        action: "revoke",
+        effectiveSeq,
+        ts,
+    };
+}
+/**
+ * Get the effective consent high-water for a session — the maximum effectiveSeq
+ * across all consent records for that session. Used by the dataset exporter
+ * to capture a single consent snapshot at export time.
+ */
+export function consentHighWater(records, sessionId) {
+    let max = 0;
+    for (const r of records) {
+        if (r.sessionId === sessionId && r.effectiveSeq > max) {
+            max = r.effectiveSeq;
+        }
+    }
+    return max;
+}

package/dist/src/vector-cortex/outcomes/dataset.js

@@ -0,0 +1,105 @@
+/**
+ * outcomes/dataset.ts — VC8A dataset manifest builder.
+ *
+ * Groups outcome rows by (repo, session) so no group crosses
+ * train/calibration/held-out split boundaries. Revocations disappear from
+ * future manifests because the consent check excludes them.
+ *
+ * The manifest digest is reproducible: it is computed over the canonical
+ * sorted rows, so input order does not affect the digest.
+ *
+ * The build/digest functions are PURE. The flag gates ONLY the reporter seam,
+ * never the arithmetic.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { createHash } from "node:crypto";
+import { DATASET_MANIFEST_SCHEMA_V1, } from "./types.js";
+import { hasActiveConsent } from "./consent.js";
+/** SHA-256 over the canonical sorted rows. */
+export function manifestDigest(rows) {
+    const sorted = [...rows].sort((a, b) => {
+        const ka = `${a.repoId}:${a.sessionId}:${a.outcomeId}`;
+        const kb = `${b.repoId}:${b.sessionId}:${b.outcomeId}`;
+        return ka < kb ? -1 : ka > kb ? 1 : 0;
+    });
+    const text = sorted
+        .map((r) => `${r.outcomeId}|${r.repoId}|${r.sessionId}|${r.split}`)
+        .join("\n");
+    return createHash("sha256").update(Buffer.from(text, "utf8")).digest("hex");
+}
+/**
+ * Split a list of session groups into train/calibration/held-out. Groups are
+ * assigned sequentially so no group crosses split boundaries.
+ */
+function assignSplits(groupKeys) {
+    const result = new Map();
+    const n = groupKeys.length;
+    const trainEnd = Math.ceil(n * 0.7);
+    const calEnd = Math.ceil(n * 0.85);
+    for (let i = 0; i < n; i++) {
+        const split = i < trainEnd ? "train" : i < calEnd ? "calibration" : "held-out";
+        result.set(groupKeys[i], split);
+    }
+    return result;
+}
+/**
+ * Build a dataset manifest from outcomes, consent records, and a consent
+ * high-water. Only outcomes whose session has active consent at the
+ * high-water are included. Revoked sessions are excluded entirely.
+ *
+ * Throws OUT_CONSENT_MISSING if an outcome's session has no consent at all.
+ */
+export function buildManifest(outcomes, consentRecords, consentHighWaterValue) {
+    const groups = new Map();
+    const included = [];
+    for (const outcome of outcomes) {
+        const highWater = consentHighWaterValue;
+        if (!hasActiveConsent(consentRecords, outcome.sessionId, highWater)) {
+            continue;
+        }
+        included.push(outcome);
+        const key = `${outcome.repoId}:${outcome.sessionId}`;
+        if (!groups.has(key)) {
+            groups.set(key, { repoId: outcome.repoId, sessionId: outcome.sessionId });
+        }
+    }
+    const groupKeys = [...groups.keys()].sort();
+    const splitMap = assignSplits(groupKeys);
+    const rows = included.map((o) => {
+        const key = `${o.repoId}:${o.sessionId}`;
+        const split = splitMap.get(key) ?? "held-out";
+        return {
+            outcomeId: o.outcomeId,
+            repoId: o.repoId,
+            sessionId: o.sessionId,
+            split,
+        };
+    });
+    const trainRows = rows.filter((r) => r.split === "train");
+    const calRows = rows.filter((r) => r.split === "calibration");
+    const heldRows = rows.filter((r) => r.split === "held-out");
+    return {
+        schema: DATASET_MANIFEST_SCHEMA_V1,
+        manifestId: `manifest-${manifestDigest(rows).slice(0, 16)}`,
+        rows,
+        splitDigests: {
+            "train": manifestDigest(trainRows),
+            "calibration": manifestDigest(calRows),
+            "held-out": manifestDigest(heldRows),
+        },
+        createdAt: new Date(0).toISOString(),
+    };
+}
+/**
+ * Check if a manifest has any nonconsented records. Returns false if every
+ * row's session has active consent at the given high-water.
+ */
+export function hasNonconsentedRecords(manifest, consentRecords, consentHighWaterValue) {
+    for (const row of manifest.rows) {
+        if (!hasActiveConsent(consentRecords, row.sessionId, consentHighWaterValue)) {
+            return true;
+        }
+    }
+    return false;
+}

package/dist/src/vector-cortex/outcomes/emit.js

@@ -0,0 +1,52 @@
+/**
+ * outcomes/emit.ts — VC8A reporter seam (FLAG-GATED).
+ *
+ * Mirrors the VC7C diagnostics-emit pattern: a thin `safe()` wrapper around an
+ * optional injected `emit`, and the two event names the sprint spec requires:
+ *   - `vector_cortex_outcome_appended` — an outcome was appended to the ledger.
+ *   - `vector_cortex_dataset_record_excluded` — a row was excluded from a manifest.
+ *
+ * FLAG SEMANTICS. The ledger/consent/dataset arithmetic STILL RUNS regardless
+ * of `MEGACOMPACT_VC8A`. The flag gates ONLY this reporting + dashboard seam:
+ * flag-off is byte-identical to the predecessor (VC7C).
+ *
+ * PAYLOAD DISCIPLINE. These events carry only the outcomeId/sessionId codes
+ * and aggregate counts — never prompt bytes, response text, or free-text.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { VC8A_ENABLED } from "../../config/vector-cortex.js";
+/** Run `fn` only when an emit exists; a reporting failure is never fatal. */
+function safe(emit, fn) {
+    if (emit === undefined)
+        return;
+    try {
+        fn(emit);
+    }
+    catch {
+        // Non-fatal: a reporting failure must never break the agent loop.
+    }
+}
+/** Report an outcome appended to the ledger. Gated by the flag. */
+export function reportOutcomeAppended(emit, outcome) {
+    if (!VC8A_ENABLED())
+        return;
+    safe(emit, (e) => e("vector_cortex_outcome_appended", {
+        ts: undefined,
+        event: "vector_cortex_outcome_appended",
+        outcomeId: outcome.outcomeId,
+        sessionId: outcome.sessionId,
+        repoId: outcome.repoId,
+    }));
+}
+/** Report a row excluded from a dataset manifest. Gated by the flag. */
+export function reportDatasetRecordExcluded(emit, excluded) {
+    if (!VC8A_ENABLED())
+        return;
+    safe(emit, (e) => e("vector_cortex_dataset_record_excluded", {
+        ts: undefined,
+        event: "vector_cortex_dataset_record_excluded",
+        outcomeId: excluded.outcomeId,
+        reason: excluded.reason,
+    }));
+}

package/dist/src/vector-cortex/outcomes/ledger.js

@@ -0,0 +1,77 @@
+/**
+ * outcomes/ledger.ts — VC8A outcome ledger append + validation.
+ *
+ * Appends outcome fields for session/repo/assignment/metrics ONLY. Rejects
+ * prompt, response, exact bytes, or free-text payload fields as
+ * OUT_PAYLOAD_FORBIDDEN. The ledger is append-only — no mutation.
+ *
+ * The append/validate functions are PURE. The flag gates ONLY the reporter
+ * seam (emit), never the validation arithmetic, so flag-off is byte-identical
+ * to the predecessor.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { OUTCOME_SCHEMA_V1, OUT_PAYLOAD_FORBIDDEN, } from "./types.js";
+/** Fields that must never appear in an outcome — they carry payload. */
+const FORBIDDEN_FIELDS = new Set([
+    "prompt",
+    "response",
+    "exactBytes",
+    "freeText",
+    "content",
+    "text",
+    "payload",
+    "body",
+    "message",
+    "reply",
+    "output",
+    "completion",
+    "snippet",
+]);
+/** Validate that the input object has no payload-bearing fields. */
+export function validateOutcome(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_FIELDS.has(key)) {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: key };
+        }
+    }
+    if (typeof input["outcomeId"] !== "string" || !input["outcomeId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "outcomeId" };
+    }
+    if (typeof input["sessionId"] !== "string" || !input["sessionId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "sessionId" };
+    }
+    if (typeof input["repoId"] !== "string" || !input["repoId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "repoId" };
+    }
+    if (typeof input["assignment"] !== "string" || !input["assignment"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "assignment" };
+    }
+    const metrics = Array.isArray(input["metrics"]) ? input["metrics"] : [];
+    for (const m of metrics) {
+        if (typeof m !== "object" || m === null) {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: "metrics" };
+        }
+        const row = m;
+        if (typeof row["code"] !== "string" || typeof row["value"] !== "number" ||
+            typeof row["unit"] !== "string") {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: "metrics" };
+        }
+    }
+    return {
+        schema: OUTCOME_SCHEMA_V1,
+        outcomeId: input["outcomeId"],
+        sessionId: input["sessionId"],
+        repoId: input["repoId"],
+        assignment: input["assignment"],
+        metrics: metrics,
+        ts: typeof input["ts"] === "string" ? input["ts"] : new Date(0).toISOString(),
+    };
+}
+/**
+ * Append an outcome to the ledger (append-only). Returns the validated
+ * OutcomeV1 or throws OUT_PAYLOAD_FORBIDDEN.
+ */
+export function appendOutcome(input) {
+    return validateOutcome(input);
+}

package/dist/src/vector-cortex/outcomes/types.js

@@ -0,0 +1,34 @@
+/**
+ * outcomes/types.ts — VC8A consent-bound outcome ledger type definitions.
+ *
+ * Payload-free metrics only — no prompt bytes, response text, or free-text.
+ * OutcomeV1 carries session/repo/assignment/metrics fields ONLY.
+ * ConsentV1 is append-only grants/revocations with effective sequence.
+ * DatasetManifestV1 groups rows/digests/split (train/calibration/held-out).
+ *
+ * Conformance IDs OUT-001..OUT-025 are registered here as the single source of
+ * truth for the sprint's conformance rows.
+ *
+ * PREVENT-PI-004: type definitions only, no network code.
+ * PREVENT-011: no `any` type.
+ */
+/** Schema version for OutcomeV1. */
+export const OUTCOME_SCHEMA_V1 = "outcome-v1";
+/** Schema version for ConsentV1. */
+export const CONSENT_SCHEMA_V1 = "consent-v1";
+/** Schema version for DatasetManifestV1. */
+export const DATASET_MANIFEST_SCHEMA_V1 = "dataset-manifest-v1";
+/** Failure code when a payload-bearing field is passed to the ledger. */
+export const OUT_PAYLOAD_FORBIDDEN = "OUT_PAYLOAD_FORBIDDEN";
+/** Failure code when consent is missing at export time. */
+export const OUT_CONSENT_MISSING = "OUT_CONSENT_MISSING";
+/** Failure code when a group would cross split boundaries. */
+export const OUT_SPLIT_VIOLATION = "OUT_SPLIT_VIOLATION";
+/** Conformance IDs OUT-001..OUT-025 for the 25 numbered rows. */
+export const OUTCOMES_CONFORMANCE_IDS = Array.from({ length: 25 }, (_, i) => `OUT-${String(i + 1).padStart(3, "0")}`);
+/** Named conformance fixtures for the sprint's headline assertions. */
+export const OUTCOMES_NAMED_FIXTURES = [
+    "OUT-CONSENT-001",
+    "OUT-REVOKE-002",
+    "OUT-SPLIT-003",
+];

package/dist/vector-cortex/outcomes/consent.js

@@ -0,0 +1,69 @@
+/**
+ * outcomes/consent.ts — VC8A append-only consent grants/revocations.
+ *
+ * ConsentV1 is append-only: grants and revocations are appended with an
+ * effective sequence number. A session has active explicit consent at time T
+ * if its most recent record at or before T is a grant.
+ *
+ * Dataset inclusion requires active explicit consent at export time. This
+ * module provides the pure consent-evaluation functions; the dataset module
+ * calls `hasActiveConsent` at export time.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { CONSENT_SCHEMA_V1 } from "./types.js";
+/**
+ * Evaluate whether a session has active explicit consent at or before the
+ * given effective sequence high-water. True if the most recent record at or
+ * before `effectiveHighWater` is a grant.
+ */
+export function hasActiveConsent(records, sessionId, effectiveHighWater) {
+    const relevant = records
+        .filter((r) => r.sessionId === sessionId && r.effectiveSeq <= effectiveHighWater)
+        .sort((a, b) => a.effectiveSeq - b.effectiveSeq);
+    if (relevant.length === 0)
+        return false;
+    return relevant[relevant.length - 1].action === "grant";
+}
+/**
+ * Append a consent grant for a session at the next effective sequence.
+ * Returns a new ConsentV1 record (append-only — never mutates the input).
+ */
+export function appendGrant(sessionId, effectiveSeq, ts) {
+    return {
+        schema: CONSENT_SCHEMA_V1,
+        consentId: `consent-${sessionId}-${effectiveSeq}`,
+        sessionId,
+        action: "grant",
+        effectiveSeq,
+        ts,
+    };
+}
+/**
+ * Append a consent revocation for a session at the next effective sequence.
+ * Returns a new ConsentV1 record (append-only — never mutates the input).
+ */
+export function appendRevoke(sessionId, effectiveSeq, ts) {
+    return {
+        schema: CONSENT_SCHEMA_V1,
+        consentId: `consent-${sessionId}-${effectiveSeq}`,
+        sessionId,
+        action: "revoke",
+        effectiveSeq,
+        ts,
+    };
+}
+/**
+ * Get the effective consent high-water for a session — the maximum effectiveSeq
+ * across all consent records for that session. Used by the dataset exporter
+ * to capture a single consent snapshot at export time.
+ */
+export function consentHighWater(records, sessionId) {
+    let max = 0;
+    for (const r of records) {
+        if (r.sessionId === sessionId && r.effectiveSeq > max) {
+            max = r.effectiveSeq;
+        }
+    }
+    return max;
+}

package/dist/vector-cortex/outcomes/dataset.js

@@ -0,0 +1,105 @@
+/**
+ * outcomes/dataset.ts — VC8A dataset manifest builder.
+ *
+ * Groups outcome rows by (repo, session) so no group crosses
+ * train/calibration/held-out split boundaries. Revocations disappear from
+ * future manifests because the consent check excludes them.
+ *
+ * The manifest digest is reproducible: it is computed over the canonical
+ * sorted rows, so input order does not affect the digest.
+ *
+ * The build/digest functions are PURE. The flag gates ONLY the reporter seam,
+ * never the arithmetic.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { createHash } from "node:crypto";
+import { DATASET_MANIFEST_SCHEMA_V1, } from "./types.js";
+import { hasActiveConsent } from "./consent.js";
+/** SHA-256 over the canonical sorted rows. */
+export function manifestDigest(rows) {
+    const sorted = [...rows].sort((a, b) => {
+        const ka = `${a.repoId}:${a.sessionId}:${a.outcomeId}`;
+        const kb = `${b.repoId}:${b.sessionId}:${b.outcomeId}`;
+        return ka < kb ? -1 : ka > kb ? 1 : 0;
+    });
+    const text = sorted
+        .map((r) => `${r.outcomeId}|${r.repoId}|${r.sessionId}|${r.split}`)
+        .join("\n");
+    return createHash("sha256").update(Buffer.from(text, "utf8")).digest("hex");
+}
+/**
+ * Split a list of session groups into train/calibration/held-out. Groups are
+ * assigned sequentially so no group crosses split boundaries.
+ */
+function assignSplits(groupKeys) {
+    const result = new Map();
+    const n = groupKeys.length;
+    const trainEnd = Math.ceil(n * 0.7);
+    const calEnd = Math.ceil(n * 0.85);
+    for (let i = 0; i < n; i++) {
+        const split = i < trainEnd ? "train" : i < calEnd ? "calibration" : "held-out";
+        result.set(groupKeys[i], split);
+    }
+    return result;
+}
+/**
+ * Build a dataset manifest from outcomes, consent records, and a consent
+ * high-water. Only outcomes whose session has active consent at the
+ * high-water are included. Revoked sessions are excluded entirely.
+ *
+ * Throws OUT_CONSENT_MISSING if an outcome's session has no consent at all.
+ */
+export function buildManifest(outcomes, consentRecords, consentHighWaterValue) {
+    const groups = new Map();
+    const included = [];
+    for (const outcome of outcomes) {
+        const highWater = consentHighWaterValue;
+        if (!hasActiveConsent(consentRecords, outcome.sessionId, highWater)) {
+            continue;
+        }
+        included.push(outcome);
+        const key = `${outcome.repoId}:${outcome.sessionId}`;
+        if (!groups.has(key)) {
+            groups.set(key, { repoId: outcome.repoId, sessionId: outcome.sessionId });
+        }
+    }
+    const groupKeys = [...groups.keys()].sort();
+    const splitMap = assignSplits(groupKeys);
+    const rows = included.map((o) => {
+        const key = `${o.repoId}:${o.sessionId}`;
+        const split = splitMap.get(key) ?? "held-out";
+        return {
+            outcomeId: o.outcomeId,
+            repoId: o.repoId,
+            sessionId: o.sessionId,
+            split,
+        };
+    });
+    const trainRows = rows.filter((r) => r.split === "train");
+    const calRows = rows.filter((r) => r.split === "calibration");
+    const heldRows = rows.filter((r) => r.split === "held-out");
+    return {
+        schema: DATASET_MANIFEST_SCHEMA_V1,
+        manifestId: `manifest-${manifestDigest(rows).slice(0, 16)}`,
+        rows,
+        splitDigests: {
+            "train": manifestDigest(trainRows),
+            "calibration": manifestDigest(calRows),
+            "held-out": manifestDigest(heldRows),
+        },
+        createdAt: new Date(0).toISOString(),
+    };
+}
+/**
+ * Check if a manifest has any nonconsented records. Returns false if every
+ * row's session has active consent at the given high-water.
+ */
+export function hasNonconsentedRecords(manifest, consentRecords, consentHighWaterValue) {
+    for (const row of manifest.rows) {
+        if (!hasActiveConsent(consentRecords, row.sessionId, consentHighWaterValue)) {
+            return true;
+        }
+    }
+    return false;
+}

package/dist/vector-cortex/outcomes/emit.js

@@ -0,0 +1,52 @@
+/**
+ * outcomes/emit.ts — VC8A reporter seam (FLAG-GATED).
+ *
+ * Mirrors the VC7C diagnostics-emit pattern: a thin `safe()` wrapper around an
+ * optional injected `emit`, and the two event names the sprint spec requires:
+ *   - `vector_cortex_outcome_appended` — an outcome was appended to the ledger.
+ *   - `vector_cortex_dataset_record_excluded` — a row was excluded from a manifest.
+ *
+ * FLAG SEMANTICS. The ledger/consent/dataset arithmetic STILL RUNS regardless
+ * of `MEGACOMPACT_VC8A`. The flag gates ONLY this reporting + dashboard seam:
+ * flag-off is byte-identical to the predecessor (VC7C).
+ *
+ * PAYLOAD DISCIPLINE. These events carry only the outcomeId/sessionId codes
+ * and aggregate counts — never prompt bytes, response text, or free-text.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { VC8A_ENABLED } from "../../config/vector-cortex.js";
+/** Run `fn` only when an emit exists; a reporting failure is never fatal. */
+function safe(emit, fn) {
+    if (emit === undefined)
+        return;
+    try {
+        fn(emit);
+    }
+    catch {
+        // Non-fatal: a reporting failure must never break the agent loop.
+    }
+}
+/** Report an outcome appended to the ledger. Gated by the flag. */
+export function reportOutcomeAppended(emit, outcome) {
+    if (!VC8A_ENABLED())
+        return;
+    safe(emit, (e) => e("vector_cortex_outcome_appended", {
+        ts: undefined,
+        event: "vector_cortex_outcome_appended",
+        outcomeId: outcome.outcomeId,
+        sessionId: outcome.sessionId,
+        repoId: outcome.repoId,
+    }));
+}
+/** Report a row excluded from a dataset manifest. Gated by the flag. */
+export function reportDatasetRecordExcluded(emit, excluded) {
+    if (!VC8A_ENABLED())
+        return;
+    safe(emit, (e) => e("vector_cortex_dataset_record_excluded", {
+        ts: undefined,
+        event: "vector_cortex_dataset_record_excluded",
+        outcomeId: excluded.outcomeId,
+        reason: excluded.reason,
+    }));
+}

package/dist/vector-cortex/outcomes/ledger.js

@@ -0,0 +1,77 @@
+/**
+ * outcomes/ledger.ts — VC8A outcome ledger append + validation.
+ *
+ * Appends outcome fields for session/repo/assignment/metrics ONLY. Rejects
+ * prompt, response, exact bytes, or free-text payload fields as
+ * OUT_PAYLOAD_FORBIDDEN. The ledger is append-only — no mutation.
+ *
+ * The append/validate functions are PURE. The flag gates ONLY the reporter
+ * seam (emit), never the validation arithmetic, so flag-off is byte-identical
+ * to the predecessor.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any` type.
+ */
+import { OUTCOME_SCHEMA_V1, OUT_PAYLOAD_FORBIDDEN, } from "./types.js";
+/** Fields that must never appear in an outcome — they carry payload. */
+const FORBIDDEN_FIELDS = new Set([
+    "prompt",
+    "response",
+    "exactBytes",
+    "freeText",
+    "content",
+    "text",
+    "payload",
+    "body",
+    "message",
+    "reply",
+    "output",
+    "completion",
+    "snippet",
+]);
+/** Validate that the input object has no payload-bearing fields. */
+export function validateOutcome(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_FIELDS.has(key)) {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: key };
+        }
+    }
+    if (typeof input["outcomeId"] !== "string" || !input["outcomeId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "outcomeId" };
+    }
+    if (typeof input["sessionId"] !== "string" || !input["sessionId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "sessionId" };
+    }
+    if (typeof input["repoId"] !== "string" || !input["repoId"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "repoId" };
+    }
+    if (typeof input["assignment"] !== "string" || !input["assignment"]) {
+        throw { code: OUT_PAYLOAD_FORBIDDEN, field: "assignment" };
+    }
+    const metrics = Array.isArray(input["metrics"]) ? input["metrics"] : [];
+    for (const m of metrics) {
+        if (typeof m !== "object" || m === null) {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: "metrics" };
+        }
+        const row = m;
+        if (typeof row["code"] !== "string" || typeof row["value"] !== "number" ||
+            typeof row["unit"] !== "string") {
+            throw { code: OUT_PAYLOAD_FORBIDDEN, field: "metrics" };
+        }
+    }
+    return {
+        schema: OUTCOME_SCHEMA_V1,
+        outcomeId: input["outcomeId"],
+        sessionId: input["sessionId"],
+        repoId: input["repoId"],
+        assignment: input["assignment"],
+        metrics: metrics,
+        ts: typeof input["ts"] === "string" ? input["ts"] : new Date(0).toISOString(),
+    };
+}
+/**
+ * Append an outcome to the ledger (append-only). Returns the validated
+ * OutcomeV1 or throws OUT_PAYLOAD_FORBIDDEN.
+ */
+export function appendOutcome(input) {
+    return validateOutcome(input);
+}

package/dist/vector-cortex/outcomes/types.js

@@ -0,0 +1,34 @@
+/**
+ * outcomes/types.ts — VC8A consent-bound outcome ledger type definitions.
+ *
+ * Payload-free metrics only — no prompt bytes, response text, or free-text.
+ * OutcomeV1 carries session/repo/assignment/metrics fields ONLY.
+ * ConsentV1 is append-only grants/revocations with effective sequence.
+ * DatasetManifestV1 groups rows/digests/split (train/calibration/held-out).
+ *
+ * Conformance IDs OUT-001..OUT-025 are registered here as the single source of
+ * truth for the sprint's conformance rows.
+ *
+ * PREVENT-PI-004: type definitions only, no network code.
+ * PREVENT-011: no `any` type.
+ */
+/** Schema version for OutcomeV1. */
+export const OUTCOME_SCHEMA_V1 = "outcome-v1";
+/** Schema version for ConsentV1. */
+export const CONSENT_SCHEMA_V1 = "consent-v1";
+/** Schema version for DatasetManifestV1. */
+export const DATASET_MANIFEST_SCHEMA_V1 = "dataset-manifest-v1";
+/** Failure code when a payload-bearing field is passed to the ledger. */
+export const OUT_PAYLOAD_FORBIDDEN = "OUT_PAYLOAD_FORBIDDEN";
+/** Failure code when consent is missing at export time. */
+export const OUT_CONSENT_MISSING = "OUT_CONSENT_MISSING";
+/** Failure code when a group would cross split boundaries. */
+export const OUT_SPLIT_VIOLATION = "OUT_SPLIT_VIOLATION";
+/** Conformance IDs OUT-001..OUT-025 for the 25 numbered rows. */
+export const OUTCOMES_CONFORMANCE_IDS = Array.from({ length: 25 }, (_, i) => `OUT-${String(i + 1).padStart(3, "0")}`);
+/** Named conformance fixtures for the sprint's headline assertions. */
+export const OUTCOMES_NAMED_FIXTURES = [
+    "OUT-CONSENT-001",
+    "OUT-REVOKE-002",
+    "OUT-SPLIT-003",
+];