@allocator-one/rcl 4.4.19

package/dist/evidence/event-receipts.js

@@ -0,0 +1,41 @@
+import { isEventReceiptScope, isStoredEventReceipt, } from './claim-recovery/validation/receipts.js';
+import { object, uuidSchema } from './claim-recovery/validation/primitives.js';
+export { matchesPreparedEventReceipt } from './claim-recovery/validation/receipts.js';
+export { isStoredEventReceipt } from './claim-recovery/validation/receipts.js';
+export const MAX_SELECTED_EVENT_RECEIPTS = 50;
+export { isEventReceipt } from './claim-recovery/validation/receipts.js';
+/**
+ * Read only explicitly selected receipts. A successful empty result proves
+ * none of these IDs were returned; a failed read makes no absence claim.
+ */
+export async function readEventReceipts(sink, scope, ids) {
+    if (!Array.isArray(ids))
+        throw new Error('invalid_event_receipt_selection');
+    const selectedScope = structuredClone(scope);
+    const selectedIds = [...ids];
+    if (!isEventReceiptScope(selectedScope) || selectedIds.length < 1 || selectedIds.length > MAX_SELECTED_EVENT_RECEIPTS ||
+        !selectedIds.every(id => uuidSchema.safeParse(id).success) || new Set(selectedIds).size !== selectedIds.length)
+        throw new Error('invalid_event_receipt_selection');
+    if (sink.credentialSource === 'attest')
+        throw new Error('unsupported_attested_recovery');
+    if (sink.baseUrl !== selectedScope.base_url)
+        throw new Error('event_receipt_destination_conflict');
+    const selected = new Set(selectedIds);
+    const query = new URLSearchParams({ ids: selectedIds.join(',') });
+    return sink.getJson(`/api/v1/reviews/runs/${selectedScope.run_id}/events?${query}`, (data, meta) => {
+        if (!object(meta) || meta.org_id !== selectedScope.org_id || meta.run_id !== selectedScope.run_id ||
+            Object.keys(meta).some(key => !['org_id', 'run_id', 'claim_recovery_version'].includes(key)) ||
+            meta.claim_recovery_version !== 1 || !Array.isArray(data) || data.length > selectedIds.length)
+            return null;
+        const receipts = [];
+        const seen = new Set();
+        for (const raw of data) {
+            if (!isStoredEventReceipt(raw, selectedScope) || !selected.has(raw.id) || seen.has(raw.id))
+                return null;
+            seen.add(raw.id);
+            receipts.push(raw);
+        }
+        return { receipts, missing: selectedIds.filter(id => !seen.has(id)) };
+    }, { requireCompleteRead: true });
+}
+//# sourceMappingURL=event-receipts.js.map

package/dist/evidence/event-receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-receipts.js","sourceRoot":"","sources":["../../src/evidence/event-receipts.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAGrB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAC;AAE/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAQ/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEzE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAiB,EAAE,KAAwB,EAAE,GAAsB;IAEnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,2BAA2B;QACjH,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvK,IAAI,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,aAAa,CAAC,MAAM,WAAW,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACjG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;YAC7F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5F,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/G,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/dist/evidence/finding-recovery.d.ts

@@ -0,0 +1,23 @@
+import type { ConvergeRunState } from '../converge/run-state.js';
+import { type WireEvent } from '../telemetry/events.js';
+import type { RunDetail } from './types.js';
+export interface FindingRecoveryInput {
+    state: ConvergeRunState;
+    /** Digest of the exact bytes from which state was read, not a re-encoding. */
+    stateSha256: string;
+    run: RunDetail;
+    target: string;
+    runId: string;
+    reportSha256: string;
+    findingRef: string;
+    identity: string;
+    repository: string;
+    prNumber: number;
+}
+/**
+ * An attributed assertion from retained native state, not a reconstructed
+ * classification or proof of report artifact retrieval. No state is written and
+ * no verdict is created. Harness validates the corresponding stored verdict at
+ * submission. Exact spans deliberately refuse state changed by later sightings.
+ */
+export declare function prepareFindingRecovery(input: FindingRecoveryInput): WireEvent;

package/dist/evidence/finding-recovery.js

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+import { buildEvent } from '../telemetry/events.js';
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const nativeKey = z.string().regex(/^[a-f0-9]{16}$/);
+const round = z.number().int().positive().max(2_147_483_647);
+const severity = z.enum(['critical', 'important', 'minor', 'nitpick']);
+const entrySchema = z.object({
+    key: nativeKey,
+    file: z.string().min(1).max(20_000),
+    category: z.string().min(1).max(64),
+    startLine: z.number().int().nonnegative().max(2_147_483_647),
+    endLine: z.number().int().nonnegative().max(2_147_483_647),
+    firstRound: round,
+    lastRound: round,
+    verdict: z.enum(['dismissed', 'fixed']),
+    verdictRound: round,
+    severity,
+    verdictSeverity: severity.optional(),
+});
+/**
+ * An attributed assertion from retained native state, not a reconstructed
+ * classification or proof of report artifact retrieval. No state is written and
+ * no verdict is created. Harness validates the corresponding stored verdict at
+ * submission. Exact spans deliberately refuse state changed by later sightings.
+ */
+export function prepareFindingRecovery(input) {
+    const { run, state } = input;
+    const require = (ok, message) => { if (!ok)
+        throw new Error(message); };
+    require(z.uuid().safeParse(input.runId).success && run.id.toLowerCase() === input.runId.toLowerCase(), 'Recovery run ID does not match server evidence.');
+    require(run.target.kind === 'pr' || run.target.kind === 'patch', 'Recovery requires a PR-bound review.');
+    require(run.target.repo?.toLowerCase() === input.repository.toLowerCase() && run.target.pr_number === input.prNumber, 'Recovery repository/PR does not match server evidence.');
+    require(digest.safeParse(input.reportSha256).success, 'Recovery report digest must be a lower-case SHA-256.');
+    const reports = run.artifacts?.filter((a) => a.kind === 'report_json') ?? [];
+    require(reports.length === 1 && reports[0].declared_sha256 === input.reportSha256, 'Recovery report digest does not match server evidence.');
+    require(digest.safeParse(input.stateSha256).success, 'Recovery state digest must be a lower-case SHA-256.');
+    require(state.version === 1 && state.target === input.target && run.converge?.target === input.target, 'Recovery target does not match native and server evidence.');
+    const runRound = run.converge?.round;
+    require(round.safeParse(runRound).success, 'Recovery requires a recorded round.');
+    const rounds = state.rounds.filter((r) => r.round === runRound);
+    require(rounds.length === 1 && rounds[0].runId?.toLowerCase() === input.runId.toLowerCase(), 'Native round is not bound to the selected run.');
+    require(input.findingRef.length > 0 && input.findingRef.length <= 32, 'Recovery finding ref is invalid.');
+    const findings = run.findings.filter((f) => f.ref === input.findingRef);
+    require(findings.length === 1, 'Recovery requires one exact finding ref.');
+    const finding = findings[0];
+    require(typeof finding.identity_key === 'string' && finding.identity_key.length > 0 && finding.identity_key.length <= 64, 'Recovery finding has no valid original report key.');
+    require(nativeKey.safeParse(input.identity).success, 'Recovery requires an explicit native identity.');
+    const parsed = entrySchema.safeParse(state.findings[input.identity]);
+    require(parsed.success, 'Recovery requires a retained native identity with a verdict.');
+    const entry = parsed.data;
+    require(entry.key === input.identity, 'Native identity key does not match its entry.');
+    require(entry.firstRound <= runRound && entry.lastRound === runRound, 'Native identity no longer describes this round.');
+    require(entry.verdictRound === runRound, 'Recovery requires a native verdict from this round.');
+    require(entry.file === finding.file && entry.category === finding.category && entry.startLine === finding.start_line &&
+        entry.endLine === finding.end_line && entry.endLine >= entry.startLine, 'Native identity location does not match the selected finding.');
+    const payload = {
+        report_json_sha256: input.reportSha256, finding_ref: input.findingRef,
+        identity_key: finding.identity_key, matched_identity: input.identity,
+        native_evidence: {
+            source: 'rcl_converge_state', state_version: state.version, state_sha256: input.stateSha256,
+            identity_key: entry.key, file: entry.file, category: entry.category,
+            start_line: entry.startLine, end_line: entry.endLine, first_round: entry.firstRound, last_round: entry.lastRound,
+            verdict: entry.verdict, verdict_round: entry.verdictRound, verdict_severity: entry.verdictSeverity ?? entry.severity,
+        },
+    };
+    const event = buildEvent({
+        kind: 'finding_identity_corrected', runId: run.id, convergeTarget: input.target, round: runRound, payload,
+    });
+    // Normal transport scrubbing still applies. Exact evidence must not be
+    // silently rebound to a redacted/truncated identifier, including in preview.
+    require(event.converge_target === input.target && JSON.stringify(event.payload) === JSON.stringify(payload), 'Recovery refused: transport scrubbing would change an exact binding.');
+    return event;
+}
+//# sourceMappingURL=finding-recovery.js.map

package/dist/evidence/finding-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-recovery.js","sourceRoot":"","sources":["../../src/evidence/finding-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAGpE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACrD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACvE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1D,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;IAChB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,EAAE,KAAK;IACnB,QAAQ;IACR,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAgBH;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IAChE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,CAAC,EAAW,EAAE,OAAe,EAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,iDAAiD,CAAC,CAAC;IAC1J,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,sCAAsC,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,EAClH,wDAAwD,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,sDAAsD,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,eAAe,KAAK,KAAK,CAAC,YAAY,EAAE,wDAAwD,CAAC,CAAC;IAC9I,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IAC5G,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM,EACnG,4DAA4D,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAC1F,gDAAgD,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,kCAAkC,CAAC,CAAC;IAC1G,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC7B,OAAO,CAAC,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,EACtH,oDAAoD,CAAC,CAAC;IACxD,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,8DAA8D,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAK,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;IACvF,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,QAAS,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,iDAAiD,CAAC,CAAC;IAC1H,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,qDAAqD,CAAC,CAAC;IAChG,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,UAAU;QAClH,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,+DAA+D,CAAC,CAAC;IAE3I,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU;QACrE,YAAY,EAAE,OAAO,CAAC,YAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,QAAQ;QACrE,eAAe,EAAE;YACf,MAAM,EAAE,oBAAoB,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW;YAC3F,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACnE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS;YAChH,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,QAAQ;SACrH;KACF,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC;QACvB,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,QAAS,EAAE,OAAO;KAC3G,CAAC,CAAC;IACH,uEAAuE;IACvE,6EAA6E;IAC7E,OAAO,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACzG,sEAAsE,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/evidence/finding-retriage.d.ts

@@ -0,0 +1,14 @@
+import { type WireEvent } from '../telemetry/events.js';
+import type { RunDetail } from './types.js';
+export interface FindingRetriageInput {
+    run: RunDetail;
+    target: string;
+    runId: string;
+    reportSha256: string;
+    findingRef: string;
+    repository: string;
+    prNumber: number;
+    reason: string;
+}
+/** A new explicit judgment under the original report key, never a native-state repair. */
+export declare function prepareFindingRetriage(input: FindingRetriageInput): WireEvent;

package/dist/evidence/finding-retriage.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { buildEvent } from '../telemetry/events.js';
+import { MAX_FREE_TEXT } from '../telemetry/scrub.js';
+const STANDALONE_ATTESTED_EVENT_ROUND = 1;
+/** A new explicit judgment under the original report key, never a native-state repair. */
+export function prepareFindingRetriage(input) {
+    const { run } = input;
+    const require = (ok, message) => { if (!ok)
+        throw new Error(message); };
+    require(z.uuid().safeParse(input.runId).success && run.id.toLowerCase() === input.runId.toLowerCase(), 'Retriage run ID does not match server evidence.');
+    require(run.target.kind === 'pr' || run.target.kind === 'patch', 'Retriage requires a PR-bound review.');
+    require(run.target.repo?.toLowerCase() === input.repository.toLowerCase() && run.target.pr_number === input.prNumber, 'Retriage repository/PR does not match server evidence.');
+    require(typeof run.target.head_sha === 'string' && /^[a-f0-9]{40}$/i.test(run.target.head_sha), 'Retriage requires a recorded review head.');
+    require(/^[a-f0-9]{64}$/.test(input.reportSha256), 'Retriage report digest must be a lower-case SHA-256.');
+    const reports = run.artifacts?.filter((a) => a.kind === 'report_json') ?? [];
+    require(reports.length === 1 && reports[0].stored && reports[0].declared_sha256 === input.reportSha256, 'Retriage requires one stored report with the selected digest.');
+    require(input.target.length > 0 && input.target.length <= 200, 'Retriage target is invalid.');
+    const standaloneAttested = run.converge == null;
+    if (standaloneAttested) {
+        require(isVerifiedAttestedGateReview(run), 'Retriage without convergence metadata requires an attested, verified same-repository CI review.');
+    }
+    else {
+        require(run.converge.target === input.target, 'Retriage target does not match server evidence.');
+    }
+    // Harness requires a positive round on verdict events. A standalone attested
+    // gate review has no convergence round, so 1 is a transport value only and
+    // does not claim that the review participated in native convergence.
+    const round = standaloneAttested ? STANDALONE_ATTESTED_EVENT_ROUND : run.converge.round;
+    require(z.number().int().positive().max(2_147_483_647).safeParse(round).success, standaloneAttested ? 'Retriage attested transport round is invalid.' : 'Retriage requires a recorded round.');
+    require(input.findingRef.length > 0 && input.findingRef.length <= 32, 'Retriage finding ref is invalid.');
+    const findings = run.findings.filter((f) => f.ref === input.findingRef);
+    require(findings.length === 1, 'Retriage requires one exact finding ref.');
+    const finding = findings[0];
+    const key = finding.identity_key;
+    // A legacy key can stand for unrelated sightings. Only this run's qualified
+    // report key can carry a new judgment without guessing a canonical mapping.
+    const prefix = `report:${run.id.toLowerCase()}:`;
+    require(typeof key === 'string' && key.startsWith(prefix) && /^[a-f0-9]{16}$/.test(key.slice(prefix.length)), 'Retriage requires a run-scoped report key; legacy or unqualified identities are not supported.');
+    require(run.findings.filter((f) => f.identity_key === key).length === 1, 'Retriage refuses a colliding report key.');
+    require(z.enum(['critical', 'important', 'minor', 'nitpick']).safeParse(finding.severity).success, 'Retriage finding severity is invalid.');
+    const reason = input.reason.trim();
+    require(reason.length > 0 && reason.length <= MAX_FREE_TEXT, 'Retriage requires an explicit reason of 1 to 2000 characters.');
+    const payload = {
+        report_json_sha256: input.reportSha256,
+        finding_ref: input.findingRef,
+        verdicts: [{ identity_key: key, verdict: 'dismissed', severity: finding.severity, reason }],
+    };
+    const event = buildEvent({ kind: 'verdicts_recorded', runId: run.id, convergeTarget: input.target, round: round, payload });
+    require(event.converge_target === input.target && JSON.stringify(event.payload) === JSON.stringify(payload), 'Retriage refused: transport scrubbing would change the selected evidence or reason.');
+    return event;
+}
+function isVerifiedAttestedGateReview(run) {
+    return run.command === 'review' && run.credential_kind === 'attested' && run.tier === 'attested' &&
+        run.head_verified === 'current' && run.repo_verified === true && run.is_cross_repository === false &&
+        run.provenance === 'live' && run.runner?.kind === 'ci' && run.target.kind === 'pr';
+}
+//# sourceMappingURL=finding-retriage.js.map

package/dist/evidence/finding-retriage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-retriage.js","sourceRoot":"","sources":["../../src/evidence/finding-retriage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAa1C,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IAChE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,EAAW,EAAE,OAAe,EAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EACnG,iDAAiD,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,sCAAsC,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,EAClH,wDAAwD,CAAC,CAAC;IAC5D,OAAO,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC5F,2CAA2C,CAAC,CAAC;IAC/C,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,sDAAsD,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,eAAe,KAAK,KAAK,CAAC,YAAY,EACtG,+DAA+D,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAC9F,MAAM,kBAAkB,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;IAChD,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,CAAC,4BAA4B,CAAC,GAAG,CAAC,EACvC,iGAAiG,CAAC,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,QAAS,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;IACpG,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,QAAS,CAAC,KAAK,CAAC;IACzF,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAC7E,kBAAkB,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;IAChH,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,kCAAkC,CAAC,CAAC;IAC1G,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;IACjC,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC;IACjD,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC1G,gGAAgG,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,0CAA0C,CAAC,CAAC;IACrH,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAC/F,uCAAuC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,+DAA+D,CAAC,CAAC;IAE9H,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE,KAAK,CAAC,YAAY;QACtC,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,GAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;KAC7F,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7H,OAAO,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACzG,qFAAqF,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,GAAc;IAClD,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;QAC9F,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,mBAAmB,KAAK,KAAK;QAClG,GAAG,CAAC,UAAU,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;AACvF,CAAC"}

package/dist/evidence/format.d.ts

@@ -0,0 +1,18 @@
+import type { GateStatus, RunDetail } from './types.js';
+/**
+ * Terminal rendering of what Harness holds; one line per entry, no colour,
+ * safe to grep. Every server-supplied string can trace back to reviewed code
+ * or model output. Headers use `text()`; evidence uses bounded, indented
+ * multiline text and model identifiers use their dedicated scrubber. All
+ * paths remove terminal control characters and scrub credential-shaped text.
+ */
+export declare function text(value: unknown, limit?: number): string;
+/**
+ * `JSON.stringify` escapes C0 controls but writes DEL and the C1 range
+ * (U+007F–U+009F — 8-bit CSI and OSC introducers) literally; a title carrying
+ * one would reach the terminal or a CI log intact. They become `\\u00xx`
+ * escapes, which parse back to the same string.
+ */
+export declare function safeJson(value: unknown): string;
+export declare function formatGateStatus(status: GateStatus, judged: 'advisory' | 'enforced'): string[];
+export declare function formatRun(run: RunDetail): string[];

package/dist/evidence/format.js

@@ -0,0 +1,152 @@
+import { escapeDisplayControls, sanitizePresentation, scrubIdentifier, scrubText } from '../telemetry/scrub.js';
+/**
+ * Terminal rendering of what Harness holds; one line per entry, no colour,
+ * safe to grep. Every server-supplied string can trace back to reviewed code
+ * or model output. Headers use `text()`; evidence uses bounded, indented
+ * multiline text and model identifiers use their dedicated scrubber. All
+ * paths remove terminal control characters and scrub credential-shaped text.
+ */
+export function text(value, limit = 300) {
+    if (value === null || value === undefined)
+        return '—';
+    return scrubText(sanitizePresentation(String(value), { multiline: false }), limit);
+}
+/**
+ * `JSON.stringify` escapes C0 controls but writes DEL and the C1 range
+ * (U+007F–U+009F — 8-bit CSI and OSC introducers) literally; a title carrying
+ * one would reach the terminal or a CI log intact. They become `\\u00xx`
+ * escapes, which parse back to the same string.
+ */
+export function safeJson(value) {
+    return escapeDisplayControls(JSON.stringify(value, null, 2)).replace(/[\u007f-\u009f]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+}
+function short(sha) {
+    return typeof sha === 'string' && sha.length > 0 ? text(sha.slice(0, 10), 10) : '—';
+}
+function where(file, line) {
+    if (!file)
+        return '—';
+    return `${text(file)}${typeof line === 'number' ? `:${line}` : ''}`;
+}
+function projectionLines(name, projection, judged) {
+    const lines = [
+        `${name}: ${text(projection.status, 40)}${projection.conclusive === false ? ' (inconclusive)' : ''}${judged ? ' ← judged' : ''}` +
+            (projection.run_id ? ` — run ${short(projection.run_id)}${projection.run_url ? ` ${text(projection.run_url)}` : ''}` : ''),
+    ];
+    for (const round of projection.rounds) {
+        lines.push(`  round ${typeof round.converge_round === 'number' ? round.converge_round : '·'}: ${short(round.id)} head ${short(round.head_sha)} ${text(round.tier, 40)}` +
+            `${round.received_at ? ` ${text(round.received_at, 40)}` : ''}${round.url ? ` ${text(round.url)}` : ''}`);
+    }
+    for (const finding of projection.actionable) {
+        lines.push(`  actionable ${text(finding.identity_key ?? finding.ref ?? '?', 64)} ${text(finding.severity, 20)}/${text(finding.gating_reason, 20)} ` +
+            `${where(finding.file, finding.start_line)} ${text(finding.title, 200)}`);
+    }
+    return lines;
+}
+export function formatGateStatus(status, judged) {
+    const head = status.head;
+    const name = `${text(status.repo, 200)}#${text(status.pr_number, 20)}`;
+    const headLine = !head
+        ? `${name} — no head known to Harness`
+        : `${name} — head ${short(head.sha)}${head.source ? ` (${text(head.source, 40)})` : ''}` +
+            `${head.merged ? ` — merged${head.merge_commit_sha ? ` as ${short(head.merge_commit_sha)}` : ''}` : ''}` +
+            `${head.is_cross_repository ? ' — fork' : ''}`;
+    const decision = status.decision;
+    return [
+        headLine,
+        ...projectionLines('advisory', status.advisory, judged === 'advisory'),
+        ...projectionLines('enforced', status.enforced, judged === 'enforced'),
+        decision
+            ? `decision: ${text(decision.decision, 40)} at ${short(decision.reviewed_head_sha)} (${text(decision.source, 40)}` +
+                `${decision.merged_at ? `, merged ${text(decision.merged_at, 40)}` : ''})`
+            : 'decision: —',
+    ];
+}
+function reviewerHealth(run) {
+    const stats = run.stats ?? {};
+    const total = stats['totalReviews'];
+    const ok = stats['successfulReviews'];
+    if (typeof total === 'number' && typeof ok === 'number')
+        return `${ok}/${total}`;
+    return `${run.calls.filter((call) => call.status === 'success').length}/${run.calls.length}`;
+}
+/** Preserve prose/code line breaks while keeping each output entry terminal-safe. */
+function explanationLines(value, limit) {
+    return scrubText(sanitizePresentation(value, { multiline: true }), limit)
+        .split('\n').map((line) => `      ${line}`);
+}
+function findingEvidence(finding) {
+    const lines = [];
+    if (finding.verification_verdict?.trim()) {
+        lines.push(`    Verification: ${text(finding.verification_verdict, 80)}`);
+        if (finding.verification_model?.trim()) {
+            const model = scrubIdentifier(sanitizePresentation(finding.verification_model, { multiline: false }), 500);
+            lines.push(`      Model: ${model}`);
+        }
+        lines.push(...(finding.verification_note?.trim()
+            ? explanationLines(finding.verification_note, 2_000)
+            : ['      Explanation not recorded']));
+        const provenance = finding.verification_provenance;
+        if (provenance?.source === 'report_json') {
+            lines.push('      Recovered from the original report');
+            if (provenance.report_sha256)
+                lines.push(`      Report SHA-256: ${text(provenance.report_sha256, 64)}`);
+            if (provenance.recovered_at)
+                lines.push(`      Recovered at: ${text(provenance.recovered_at, 80)}`);
+        }
+        else if (provenance) {
+            lines.push(`      Source: ${provenance.source === 'envelope' ? 'recorded in the run envelope' : text(provenance.source, 80)}`);
+        }
+    }
+    const verdict = finding.verdict;
+    if (verdict) {
+        lines.push(`    Triage: ${text(verdict.verdict, 40)}${typeof verdict.round === 'number' ? ` (round ${verdict.round})` : ''}`);
+        const actor = verdict.actor;
+        lines.push(actor
+            ? `      Actor: ${text(actor.name || actor.id)}${actor.email ? ` <${text(actor.email)}>` : ''}`
+            : '      Actor: not recorded');
+        if (verdict.recorded_at)
+            lines.push(`      Recorded at: ${text(verdict.recorded_at, 80)}`);
+        lines.push(...(verdict.reason?.trim()
+            ? explanationLines(verdict.reason, 20_000)
+            : ['      Reason not recorded']));
+    }
+    return lines;
+}
+export function formatRun(run) {
+    const runner = run.runner ?? {};
+    const runnerKind = typeof runner['kind'] === 'string' ? text(runner['kind'], 40) : '—';
+    const ciRunId = typeof runner['ci_run_id'] === 'string' ? ` ${text(runner['ci_run_id'], 40)}` : '';
+    const target = run.target;
+    const named = target.repo && target.pr_number ? `${text(target.repo, 200)}#${text(target.pr_number, 20)}` : text(target.kind, 40);
+    const converge = run.converge;
+    const lines = [
+        `run ${text(run.id, 64)}${run.url ? ` ${text(run.url)}` : ''}`,
+        `target ${named} @ ${short(target.head_sha)} (head ${text(run.head_verified ?? 'unknown', 20)}${run.repo_verified ? ', repo verified' : ''}` +
+            `${run.is_cross_repository ? ', fork' : ''})`,
+        `credential ${text(run.credential_kind, 40)} (${text(run.tier ?? 'asserted', 40)}) — runner ${runnerKind}${ciRunId} — rcl ${text(run.rcl_version, 40)}` +
+            (run.provenance && run.provenance !== 'live' ? ` — ${text(run.provenance, 40)}` : ''),
+        `reviewers ${reviewerHealth(run)} ok` +
+            (converge ? ` — converge ${text(converge.target, 200)}${typeof converge.round === 'number' ? ` round ${converge.round}` : ''}` : '') +
+            (run.received_at ? ` — received ${text(run.received_at, 40)}` : ''),
+    ];
+    for (const artifact of run.artifacts ?? []) {
+        lines.push(`artifact ${text(artifact.kind, 40)} ${artifact.stored ? 'stored' : 'missing'}${artifact.url ? ` ${text(artifact.url)}` : ''}`);
+    }
+    lines.push(`findings (${run.findings.length}): identity severity gating file:line title — verdict`);
+    for (const finding of run.findings) {
+        const verdict = finding.verdict
+            ? `${text(finding.verdict.verdict, 40)}${typeof finding.verdict.round === 'number' ? ` (round ${finding.verdict.round})` : ''}`
+            : '—';
+        lines.push(`  ${text(finding.identity_key ?? finding.ref ?? '?', 64)} ${text(finding.severity, 20)} ${text(finding.gating_reason ?? 'none', 20)} ` +
+            `${where(finding.file, finding.start_line)} ${text(finding.title, 200)} — ${verdict}`);
+        lines.push(...findingEvidence(finding));
+    }
+    lines.push(`calls (${run.calls.length}):`);
+    for (const call of run.calls) {
+        const duration = typeof call.duration_ms === 'number' ? ` ${call.duration_ms}ms` : '';
+        lines.push(`  call ${text(call.model, 80)}${call.role ? ` ${text(call.role, 40)}` : ''} ${text(call.status, 20)}${duration}${call.error ? ` — ${text(call.error, 200)}` : ''}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=format.js.map

package/dist/evidence/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/evidence/format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGhH;;;;;;GAMG;AAEH,MAAM,UAAU,IAAI,CAAC,KAAc,EAAE,KAAK,GAAG,GAAG;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtD,OAAO,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACzJ,CAAC;AAED,SAAS,KAAK,CAAC,GAA8B;IAC3C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACtF,CAAC;AAED,SAAS,KAAK,CAAC,IAA+B,EAAE,IAA+B;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,UAAsB,EAAE,MAAe;IAC5E,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9H,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7H,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,WAAW,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YAC1J,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,gBAAgB,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG;YACtI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB,EAAE,MAA+B;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,CAAC,IAAI;QACpB,CAAC,CAAC,GAAG,IAAI,6BAA6B;QACtC,CAAC,CAAC,GAAG,IAAI,WAAW,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACtF,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACxG,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,OAAO;QACL,QAAQ;QACR,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC;QACtE,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,CAAC;QACtE,QAAQ;YACN,CAAC,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;gBAChH,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAC5E,CAAC,CAAC,aAAa;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAc;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;IACjF,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AAC/F,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,OAAO,SAAS,CAAC,oBAAoB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;SACtE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,eAAe,CAAC,oBAAoB,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3G,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE;YAC9C,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;YACpD,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC;QACnD,IAAI,UAAU,EAAE,MAAM,KAAK,aAAa,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACvD,IAAI,UAAU,CAAC,aAAa;gBAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACxG,IAAI,UAAU,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9H,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/F,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;YACnC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;YAC1C,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvF,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9D,UAAU,KAAK,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1I,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG;QAC/C,cAAc,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,EAAE,EAAE,CAAC,cAAc,UAAU,GAAG,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE;YACrJ,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,aAAa,cAAc,CAAC,GAAG,CAAC,KAAK;YACnC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7I,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,MAAM,uDAAuD,CAAC,CAAC;IACpG,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/H,CAAC,CAAC,GAAG,CAAC;QACR,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,EAAE,EAAE,CAAC,GAAG;YACrI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,OAAO,EAAE,CACxF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CACR,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpK,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/evidence/original-run/decode.d.ts

@@ -0,0 +1,30 @@
+/** An interpretation of immutable JSON, never replacement artifact bytes. */
+export interface ProseTransformation {
+    path: string;
+    code_unit_offset: number;
+    source_byte_offset: number;
+    original_unit: string;
+    replacement: string;
+}
+/** Additive record for explicitly selected C0/DEL prose representation. */
+export interface ControlProseTransformation extends ProseTransformation {
+    version: 1;
+    kind: 'control_code_unit';
+}
+export type OriginalProseTransformation = ProseTransformation | ControlProseTransformation;
+export type OriginalProseMode = 'control-code-units-v1';
+export interface DecodeOriginalReportOptions {
+    originalProse?: OriginalProseMode;
+    exactNumbers?: boolean;
+}
+export declare const MAX_JSON_DEPTH = 64;
+export declare const findingProsePath: RegExp;
+/** Strict JSON with duplicate-key detection and explicit prose-only lone-surrogate notation. */
+export declare function decodeOriginalReport(text: string, options?: DecodeOriginalReportOptions): {
+    value: unknown;
+    transformations: OriginalProseTransformation[];
+};
+/** Strict internal JSON, preserving retained strings verbatim. This is not an
+ * original report validator: every embedded original is separately interpreted
+ * under its own source policy before it can establish a recovery binding. */
+export declare function decodeRecoveryDocument(text: string): unknown;