@nanocollective/sentinel 0.1.0-alpha.0

package/dist/issues/types.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Issue filing types. Like the model runner, the GitHub side is an injectable
+ * interface so the filing logic and the issue-body builder stay unit-testable
+ * without hitting the API. The real client (gh-client.ts) is the only part that
+ * shells out.
+ */
+import type { Finding } from '../findings/types.js';
+/** The rendered content of one issue, before it is filed. */
+export interface IssueContent {
+    title: string;
+    body: string;
+    labels: string[];
+    assignees: string[];
+}
+/** Parameters for creating one issue on a specific repository. */
+export interface CreateIssueParams extends IssueContent {
+    /** The `owner/name` repository to file on. */
+    repo: string;
+}
+/** A created issue, as returned by the client. */
+export interface CreatedIssue {
+    number: number;
+    url: string;
+}
+/** The GitHub operations issue filing needs. */
+export interface GitHubClient {
+    createIssue(params: CreateIssueParams): Promise<CreatedIssue>;
+}
+/** An issue that already exists on the target repo, as read back for dedup. */
+export interface ExistingIssue {
+    number: number;
+    url: string;
+    state: 'open' | 'closed';
+    labels: string[];
+    body: string;
+}
+/** Reading and mutating existing issues, needed by the dedup reconcile step. */
+export interface IssueQueryClient {
+    listIssues(params: {
+        repo: string;
+        label: string;
+    }): Promise<ExistingIssue[]>;
+    updateIssue(params: {
+        repo: string;
+        number: number;
+        body: string;
+    }): Promise<void>;
+    closeIssue(params: {
+        repo: string;
+        number: number;
+        reason?: string;
+        comment?: string;
+    }): Promise<void>;
+}
+/** A client that can both file and reconcile issues. */
+export type ReconcileClient = GitHubClient & IssueQueryClient;
+/** Context threaded into body building and routing. */
+export interface FilingContext {
+    /** The `owner/name` repository being audited. */
+    auditedRepo: string;
+    /** The config repo `owner/name`, for the footer link and aggregate routing. */
+    configRepo?: string;
+    /** The version of the rule pack that produced the finding, for the body. */
+    packVersion?: string;
+}
+/** A finding paired with the issue it was filed as. */
+export interface FiledIssue {
+    finding: Finding;
+    issue: CreatedIssue;
+}
+/** A finding whose filing threw. */
+export interface FilingError {
+    finding: Finding;
+    error: string;
+}
+/** The outcome of filing a batch of findings. */
+export interface FilingResult {
+    /** The repository issues were filed on (audited or config repo). */
+    targetRepo: string;
+    filed: FiledIssue[];
+    /** Findings below the severity threshold; not filed. */
+    skipped: Finding[];
+    errors: FilingError[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/issues/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../source/issues/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,sBAAsB,CAAC;AAElD,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACtD,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;CACb;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC5B,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC9D;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAChC,UAAU,CAAC,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5E,WAAW,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,gBAAgB,CAAC;AAE9D,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC7B,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC5B,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,wDAAwD;IACxD,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,EAAE,CAAC;CACtB"}

package/dist/issues/types.js

@@ -0,0 +1,8 @@
+/**
+ * Issue filing types. Like the model runner, the GitHub side is an injectable
+ * interface so the filing logic and the issue-body builder stay unit-testable
+ * without hitting the API. The real client (gh-client.ts) is the only part that
+ * shells out.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/issues/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../source/issues/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/orchestrator/audit.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Run one audit pass — one rule pack against one repository — by invoking a
+ * {@link ModelRunner}, extracting the findings array from its output, and
+ * validating it. The result carries either validated findings or the structured
+ * errors the auto-fix loop (task #5) will feed back to the model.
+ */
+import type { ModelConfig } from '../config/types.js';
+import type { AuditResult, ModelRunner, RunnerOptions } from './types.js';
+/**
+ * Invoke the model on the prompt and return validated findings, or the reason
+ * the pass did not produce them.
+ */
+export declare function runAudit(prompt: string, model: ModelConfig, runner: ModelRunner, options?: RunnerOptions): Promise<AuditResult>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/orchestrator/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../source/orchestrator/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAGpD,OAAO,KAAK,EAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAC,MAAM,YAAY,CAAC;AAExE;;;GAGG;AACH,wBAAsB,QAAQ,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,WAAW,CAAC,CAoCtB"}

package/dist/orchestrator/audit.js

@@ -0,0 +1,47 @@
+/**
+ * Run one audit pass — one rule pack against one repository — by invoking a
+ * {@link ModelRunner}, extracting the findings array from its output, and
+ * validating it. The result carries either validated findings or the structured
+ * errors the auto-fix loop (task #5) will feed back to the model.
+ */
+import { validateFindings } from '../findings/validate.js';
+import { extractJsonArray } from './extract.js';
+/**
+ * Invoke the model on the prompt and return validated findings, or the reason
+ * the pass did not produce them.
+ */
+export async function runAudit(prompt, model, runner, options) {
+    const run = await runner.run(prompt, model, options);
+    if (!run.ok) {
+        return {
+            ok: false,
+            findings: [],
+            errors: [],
+            raw: run.output,
+            runError: run.error ?? 'model run failed',
+        };
+    }
+    const extracted = extractJsonArray(run.output);
+    if (extracted === null) {
+        return {
+            ok: false,
+            findings: [],
+            errors: [
+                {
+                    index: -1,
+                    field: 'document',
+                    message: 'no JSON array of findings was found in the model output',
+                },
+            ],
+            raw: run.output,
+        };
+    }
+    const result = validateFindings(extracted);
+    return {
+        ok: result.valid,
+        findings: result.findings,
+        errors: result.errors,
+        raw: run.output,
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/orchestrator/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../source/orchestrator/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAG9C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,MAAc,EACd,KAAkB,EAClB,MAAmB,EACnB,OAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,GAAG,CAAC,MAAM;YACf,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,kBAAkB;SACzC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE;gBACP;oBACC,KAAK,EAAE,CAAC,CAAC;oBACT,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,yDAAyD;iBAClE;aACD;YACD,GAAG,EAAE,GAAG,CAAC,MAAM;SACf,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,KAAK;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,GAAG,CAAC,MAAM;KACf,CAAC;AACH,CAAC"}

package/dist/orchestrator/auto-fix.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The auto-fix loop. When an audit pass produces output that fails validation,
+ * re-run the model with the structured error report appended, up to a bounded
+ * number of attempts (see docs/workflow/index.md#validation). Only validation
+ * failures are retried — a process-level failure (nanocoder missing, timeout)
+ * will not be fixed by feeding back an error report, so the loop stops there.
+ */
+import type { ModelConfig } from '../config/types.js';
+import type { AuditResult, ModelRunner, RunnerOptions } from './types.js';
+/** Options for the auto-fix loop. */
+export interface AutoFixOptions extends RunnerOptions {
+    /** Total attempts, including the first. Clamped to at least 1. Default 2. */
+    maxAttempts?: number;
+}
+/** An audit result annotated with how many attempts it took. */
+export interface AutoFixResult extends AuditResult {
+    /** Number of model runs performed (1 = succeeded or failed on first try). */
+    attempts: number;
+}
+/**
+ * Build the follow-up prompt: the original audit prompt plus a correction
+ * section listing every validation problem and, when available, the malformed
+ * array the model returned.
+ */
+export declare function buildAutoFixPrompt(originalPrompt: string, previous: AuditResult): string;
+/**
+ * Run an audit pass with the auto-fix retry loop. Returns the first valid
+ * result, or the last failed result once attempts are exhausted.
+ */
+export declare function runAuditWithAutoFix(prompt: string, model: ModelConfig, runner: ModelRunner, options?: AutoFixOptions): Promise<AutoFixResult>;
+//# sourceMappingURL=auto-fix.d.ts.map

package/dist/orchestrator/auto-fix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.d.ts","sourceRoot":"","sources":["../../source/orchestrator/auto-fix.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAIpD,OAAO,KAAK,EAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAC,MAAM,YAAY,CAAC;AAExE,qCAAqC;AACrC,MAAM,WAAW,cAAe,SAAQ,aAAa;IACpD,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gEAAgE;AAChE,MAAM,WAAW,aAAc,SAAQ,WAAW;IACjD,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;CACjB;AAcD;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,WAAW,GACnB,MAAM,CAuBR;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAaxB"}

package/dist/orchestrator/auto-fix.js

@@ -0,0 +1,59 @@
+/**
+ * The auto-fix loop. When an audit pass produces output that fails validation,
+ * re-run the model with the structured error report appended, up to a bounded
+ * number of attempts (see docs/workflow/index.md#validation). Only validation
+ * failures are retried — a process-level failure (nanocoder missing, timeout)
+ * will not be fixed by feeding back an error report, so the loop stops there.
+ */
+import { runAudit } from './audit.js';
+import { extractJsonArray } from './extract.js';
+function formatErrors(errors) {
+    return errors
+        .map(error => {
+        const where = error.index >= 0
+            ? `finding[${error.index}].${error.field}`
+            : error.field;
+        return `- ${where}: ${error.message}`;
+    })
+        .join('\n');
+}
+/**
+ * Build the follow-up prompt: the original audit prompt plus a correction
+ * section listing every validation problem and, when available, the malformed
+ * array the model returned.
+ */
+export function buildAutoFixPrompt(originalPrompt, previous) {
+    const parts = [
+        originalPrompt,
+        '',
+        '---',
+        '',
+        '## Correction required',
+        '',
+        'Your previous response did not produce a valid findings array. Fix these problems:',
+        '',
+        formatErrors(previous.errors),
+    ];
+    const previousArray = extractJsonArray(previous.raw);
+    if (previousArray !== null) {
+        parts.push('', 'Your previous JSON array was:', previousArray);
+    }
+    parts.push('', 'Return ONLY a corrected JSON array that resolves every problem above.');
+    return parts.join('\n');
+}
+/**
+ * Run an audit pass with the auto-fix retry loop. Returns the first valid
+ * result, or the last failed result once attempts are exhausted.
+ */
+export async function runAuditWithAutoFix(prompt, model, runner, options = {}) {
+    const maxAttempts = Math.max(1, options.maxAttempts ?? 2);
+    let result = await runAudit(prompt, model, runner, options);
+    let attempts = 1;
+    while (!result.ok && !result.runError && attempts < maxAttempts) {
+        const fixPrompt = buildAutoFixPrompt(prompt, result);
+        result = await runAudit(fixPrompt, model, runner, options);
+        attempts++;
+    }
+    return { ...result, attempts };
+}
+//# sourceMappingURL=auto-fix.js.map

package/dist/orchestrator/auto-fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.js","sourceRoot":"","sources":["../../source/orchestrator/auto-fix.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,YAAY,CAAC;AACpC,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAe9C,SAAS,YAAY,CAAC,MAAyB;IAC9C,OAAO,MAAM;SACX,GAAG,CAAC,KAAK,CAAC,EAAE;QACZ,MAAM,KAAK,GACV,KAAK,CAAC,KAAK,IAAI,CAAC;YACf,CAAC,CAAC,WAAW,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE;YAC1C,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CACjC,cAAsB,EACtB,QAAqB;IAErB,MAAM,KAAK,GAAG;QACb,cAAc;QACd,EAAE;QACF,KAAK;QACL,EAAE;QACF,wBAAwB;QACxB,EAAE;QACF,oFAAoF;QACpF,EAAE;QACF,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC7B,CAAC;IAEF,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,+BAA+B,EAAE,aAAa,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CACT,EAAE,EACF,uEAAuE,CACvE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAAc,EACd,KAAkB,EAClB,MAAmB,EACnB,UAA0B,EAAE;IAE5B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAE1D,IAAI,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,QAAQ,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAC,GAAG,MAAM,EAAE,QAAQ,EAAC,CAAC;AAC9B,CAAC"}

package/dist/orchestrator/extract.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Pull the findings JSON array out of a model's raw output. Even when the
+ * prompt asks for "only a JSON array", a Nanocoder run emits a full agent
+ * transcript, so the array is usually surrounded by reasoning and may be
+ * wrapped in a code fence. This scans for balanced, top-level `[...]` spans
+ * (ignoring brackets inside strings) and returns the last one that parses as
+ * an array — the model's final answer.
+ */
+/**
+ * Return the last top-level JSON array in the output that parses to an array,
+ * as a string, or null if there is none.
+ */
+export declare function extractJsonArray(output: string): string | null;
+//# sourceMappingURL=extract.d.ts.map

package/dist/orchestrator/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../source/orchestrator/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6CH;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa9D"}

package/dist/orchestrator/extract.js

@@ -0,0 +1,70 @@
+/**
+ * Pull the findings JSON array out of a model's raw output. Even when the
+ * prompt asks for "only a JSON array", a Nanocoder run emits a full agent
+ * transcript, so the array is usually surrounded by reasoning and may be
+ * wrapped in a code fence. This scans for balanced, top-level `[...]` spans
+ * (ignoring brackets inside strings) and returns the last one that parses as
+ * an array — the model's final answer.
+ */
+/** Collect every balanced, top-level `[...]` substring, in order. */
+function topLevelArraySpans(text) {
+    const spans = [];
+    let depth = 0;
+    let start = -1;
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < text.length; i++) {
+        const char = text[i];
+        if (inString) {
+            if (escaped) {
+                escaped = false;
+            }
+            else if (char === '\\') {
+                escaped = true;
+            }
+            else if (char === '"') {
+                inString = false;
+            }
+            continue;
+        }
+        if (char === '"') {
+            inString = true;
+        }
+        else if (char === '[') {
+            if (depth === 0) {
+                start = i;
+            }
+            depth++;
+        }
+        else if (char === ']') {
+            if (depth > 0) {
+                depth--;
+                if (depth === 0 && start !== -1) {
+                    spans.push(text.slice(start, i + 1));
+                    start = -1;
+                }
+            }
+        }
+    }
+    return spans;
+}
+/**
+ * Return the last top-level JSON array in the output that parses to an array,
+ * as a string, or null if there is none.
+ */
+export function extractJsonArray(output) {
+    const spans = topLevelArraySpans(output);
+    for (let i = spans.length - 1; i >= 0; i--) {
+        const span = spans[i];
+        try {
+            if (Array.isArray(JSON.parse(span))) {
+                return span;
+            }
+        }
+        catch {
+            // Not valid JSON on its own; try the next candidate.
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=extract.js.map

package/dist/orchestrator/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../source/orchestrator/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,SAAS,kBAAkB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAErB,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACzB,QAAQ,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,KAAK,GAAG,CAAC,CAAC;YACX,CAAC;YACD,KAAK,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACf,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACrC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACZ,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC9C,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;QAChC,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,qDAAqD;QACtD,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/orchestrator/nanocoder-runner.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The real {@link ModelRunner}: spawns Nanocoder non-interactively and captures
+ * its output. Matches the collective's invocation
+ * (`nanocoder run "<prompt>" --mode yolo --model <model> --trust-directory`);
+ * Nanocoder auto-enables its Ink-free `--plain` runtime off a TTY, so a single
+ * direct spawn works locally and on GitHub Actions runners.
+ *
+ * Unlike ContentForest, Sentinel captures stdout (the agent transcript) so the
+ * findings array can be extracted, rather than inheriting stdio.
+ */
+import type { ModelConfig } from '../config/types.js';
+import type { ModelRunner, ModelRunResult, RunnerOptions } from './types.js';
+/** Resolve the model id to pass to Nanocoder, honouring the fallback flag. */
+export declare function resolveModelId(model: ModelConfig, useFallback: boolean): string;
+/**
+ * Build the Nanocoder argv for a run. Pure and tested; the spawn itself is not.
+ */
+export declare function buildNanocoderArgs(prompt: string, model: ModelConfig, options?: RunnerOptions): string[];
+/**
+ * Parse Nanocoder's `--json` report from stdout into a ModelRunResult. The
+ * report is `{kind, exitCode, finalText, ...}`; on a non-success kind the
+ * message is surfaced as the error. Non-JSON stdout is handed through as-is so
+ * the extractor can still try.
+ */
+export declare function parseNanocoderReport(stdout: string): ModelRunResult;
+/**
+ * The environment for the Nanocoder spawn. When a config dir is given, point
+ * Nanocoder at it via NANOCODER_CONFIG_DIR so it loads the config repo's
+ * `agents.config.json` regardless of the audited-repo working directory.
+ */
+export declare function buildNanocoderEnv(base: NodeJS.ProcessEnv, configDir?: string): NodeJS.ProcessEnv;
+export declare const nanocoderRunner: ModelRunner;
+//# sourceMappingURL=nanocoder-runner.d.ts.map

package/dist/orchestrator/nanocoder-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nanocoder-runner.d.ts","sourceRoot":"","sources":["../../source/orchestrator/nanocoder-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAC,WAAW,EAAE,cAAc,EAAE,aAAa,EAAC,MAAM,YAAY,CAAC;AAI3E,8EAA8E;AAC9E,wBAAgB,cAAc,CAC7B,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,OAAO,GAClB,MAAM,CAKR;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE,aAAkB,GACzB,MAAM,EAAE,CAaV;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CA4BnE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,SAAS,CAAC,EAAE,MAAM,GAChB,MAAM,CAAC,UAAU,CAKnB;AAGD,eAAO,MAAM,eAAe,EAAE,WAyD7B,CAAC"}

package/dist/orchestrator/nanocoder-runner.js

@@ -0,0 +1,125 @@
+/**
+ * The real {@link ModelRunner}: spawns Nanocoder non-interactively and captures
+ * its output. Matches the collective's invocation
+ * (`nanocoder run "<prompt>" --mode yolo --model <model> --trust-directory`);
+ * Nanocoder auto-enables its Ink-free `--plain` runtime off a TTY, so a single
+ * direct spawn works locally and on GitHub Actions runners.
+ *
+ * Unlike ContentForest, Sentinel captures stdout (the agent transcript) so the
+ * findings array can be extracted, rather than inheriting stdio.
+ */
+import { spawnSync } from 'node:child_process';
+const DEFAULT_TIMEOUT_MS = 600_000;
+/** Resolve the model id to pass to Nanocoder, honouring the fallback flag. */
+export function resolveModelId(model, useFallback) {
+    if (useFallback && model.fallback) {
+        return model.fallback.model;
+    }
+    return model.model;
+}
+/**
+ * Build the Nanocoder argv for a run. Pure and tested; the spawn itself is not.
+ */
+export function buildNanocoderArgs(prompt, model, options = {}) {
+    return [
+        'run',
+        prompt,
+        '--mode',
+        'yolo',
+        '--model',
+        resolveModelId(model, options.useFallback ?? false),
+        '--trust-directory',
+        // Emit one complete JSON report to stdout instead of a streamed,
+        // last-token-lossy human transcript.
+        '--json',
+    ];
+}
+/**
+ * Parse Nanocoder's `--json` report from stdout into a ModelRunResult. The
+ * report is `{kind, exitCode, finalText, ...}`; on a non-success kind the
+ * message is surfaced as the error. Non-JSON stdout is handed through as-is so
+ * the extractor can still try.
+ */
+export function parseNanocoderReport(stdout) {
+    let report;
+    try {
+        report = JSON.parse(stdout);
+    }
+    catch {
+        return { ok: true, output: stdout };
+    }
+    if (typeof report !== 'object' || report === null) {
+        return { ok: true, output: stdout };
+    }
+    const { kind, finalText, message } = report;
+    const output = typeof finalText === 'string' ? finalText : '';
+    if (kind === 'success') {
+        return { ok: true, output };
+    }
+    return {
+        ok: false,
+        output,
+        error: typeof message === 'string'
+            ? message
+            : `nanocoder: ${kind ?? 'unknown result'}`,
+    };
+}
+/**
+ * The environment for the Nanocoder spawn. When a config dir is given, point
+ * Nanocoder at it via NANOCODER_CONFIG_DIR so it loads the config repo's
+ * `agents.config.json` regardless of the audited-repo working directory.
+ */
+export function buildNanocoderEnv(base, configDir) {
+    if (!configDir) {
+        return base;
+    }
+    return { ...base, NANOCODER_CONFIG_DIR: configDir };
+}
+/* c8 ignore start -- spawns a real process; not exercised in unit tests. */
+export const nanocoderRunner = {
+    async run(prompt, model, options = {}) {
+        const result = spawnSync('nanocoder', buildNanocoderArgs(prompt, model, options), {
+            cwd: options.cwd,
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            env: buildNanocoderEnv(process.env, options.configDir),
+            maxBuffer: 64 * 1024 * 1024,
+        });
+        if (result.error) {
+            const code = result.error.code;
+            if (code === 'ENOENT') {
+                return {
+                    ok: false,
+                    output: '',
+                    error: '`nanocoder` is not on PATH. Install it (npm i -g @nanocollective/nanocoder).',
+                };
+            }
+            if (code === 'ETIMEDOUT') {
+                return {
+                    ok: false,
+                    output: result.stdout ?? '',
+                    error: 'nanocoder timed out',
+                };
+            }
+            return {
+                ok: false,
+                output: result.stdout ?? '',
+                error: String(result.error),
+            };
+        }
+        const stdout = result.stdout ?? '';
+        if (stdout.trim().length === 0) {
+            return {
+                ok: false,
+                output: '',
+                error: `nanocoder produced no output (status ${result.status}): ${result.stderr ?? ''}`.trim(),
+            };
+        }
+        // nanocoder may exit non-zero for an error kind but still emit the JSON
+        // report, so parse regardless of status.
+        return parseNanocoderReport(stdout);
+    },
+};
+/* c8 ignore stop */
+//# sourceMappingURL=nanocoder-runner.js.map

package/dist/orchestrator/nanocoder-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nanocoder-runner.js","sourceRoot":"","sources":["../../source/orchestrator/nanocoder-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAC,SAAS,EAAC,MAAM,oBAAoB,CAAC;AAI7C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAC7B,KAAkB,EAClB,WAAoB;IAEpB,IAAI,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAc,EACd,KAAkB,EAClB,UAAyB,EAAE;IAE3B,OAAO;QACN,KAAK;QACL,MAAM;QACN,QAAQ;QACR,MAAM;QACN,SAAS;QACT,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;QACnD,mBAAmB;QACnB,iEAAiE;QACjE,qCAAqC;QACrC,QAAQ;KACR,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACnD,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC;IACnC,CAAC;IAED,MAAM,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAC,GAAG,MAIlC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAC,CAAC;IAC3B,CAAC;IACD,OAAO;QACN,EAAE,EAAE,KAAK;QACT,MAAM;QACN,KAAK,EACJ,OAAO,OAAO,KAAK,QAAQ;YAC1B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,cAAc,IAAI,IAAI,gBAAgB,EAAE;KAC5C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAuB,EACvB,SAAkB;IAElB,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,EAAC,GAAG,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAC,CAAC;AACnD,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAgB;IAC3C,KAAK,CAAC,GAAG,CACR,MAAc,EACd,KAAkB,EAClB,UAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,SAAS,CACvB,WAAW,EACX,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,EAC1C;YACC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;YAChD,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;YACtD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC3B,CACD,CAAC;QAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;YAC1D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE;oBACV,KAAK,EACJ,8EAA8E;iBAC/E,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC1B,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;oBAC3B,KAAK,EAAE,qBAAqB;iBAC5B,CAAC;YACH,CAAC;YACD,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;aAC3B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE;gBACV,KAAK,EACJ,wCAAwC,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;aACxF,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,yCAAyC;QACzC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACD,CAAC;AACF,oBAAoB"}

package/dist/orchestrator/types.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Orchestration types. The audit logic depends on a {@link ModelRunner}
+ * interface rather than spawning a process directly, so the parse/validate
+ * pipeline stays unit-testable with a fake runner. The real runner
+ * (nanocoder-runner.ts) is the only part that touches a child process.
+ */
+import type { ModelConfig } from '../config/types.js';
+import type { Finding } from '../findings/types.js';
+import type { ValidationError } from '../findings/validate.js';
+/** Per-invocation runner options. */
+export interface RunnerOptions {
+    /** Working directory for the run (the cloned repo). */
+    cwd?: string;
+    /**
+     * Directory holding nanocoder's `agents.config.json` (the Sentinel config
+     * repo). Passed to nanocoder as NANOCODER_CONFIG_DIR so provider/model
+     * wiring lives in the config repo, the way ContentForest keeps it in its own.
+     */
+    configDir?: string;
+    /** Hard timeout for the model process, in milliseconds. */
+    timeoutMs?: number;
+    /** Use the configured cloud fallback model instead of the primary. */
+    useFallback?: boolean;
+}
+/** The raw outcome of invoking a model. */
+export interface ModelRunResult {
+    /** True when the process ran and exited cleanly. */
+    ok: boolean;
+    /** The model's raw text output (a full agent transcript, typically). */
+    output: string;
+    /** A process-level error (spawn failure, non-zero exit, timeout). */
+    error?: string;
+}
+/** Runs a prompt against a model and returns its raw output. */
+export interface ModelRunner {
+    run(prompt: string, model: ModelConfig, options?: RunnerOptions): Promise<ModelRunResult>;
+}
+/** The outcome of one audit pass: one rule pack against one repository. */
+export interface AuditResult {
+    /** True when the runner succeeded and the findings validated. */
+    ok: boolean;
+    /** The validated findings, in the camelCase model. Empty on failure. */
+    findings: Finding[];
+    /** Validation errors, for the auto-fix loop. Empty when ok. */
+    errors: ValidationError[];
+    /** The model's raw output, retained for logging and dry-run previews. */
+    raw: string;
+    /** Set when the model process itself failed (no output to validate). */
+    runError?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/orchestrator/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../source/orchestrator/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,yBAAyB,CAAC;AAE7D,qCAAqC;AACrC,MAAM,WAAW,aAAa;IAC7B,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,EAAE,EAAE,OAAO,CAAC;IACZ,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC3B,GAAG,CACF,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC3B,iEAAiE;IACjE,EAAE,EAAE,OAAO,CAAC;IACZ,wEAAwE;IACxE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,+DAA+D;IAC/D,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/orchestrator/types.js

@@ -0,0 +1,8 @@
+/**
+ * Orchestration types. The audit logic depends on a {@link ModelRunner}
+ * interface rather than spawning a process directly, so the parse/validate
+ * pipeline stays unit-testable with a fake runner. The real runner
+ * (nanocoder-runner.ts) is the only part that touches a child process.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/orchestrator/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../source/orchestrator/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/prompt/build.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Assemble the templated audit prompt for one rule pack against one repository.
+ * The pack's Markdown body is the audit instructions; the source files (scoped
+ * by the pack's applies_to globs) are the material; and a fixed reporting
+ * contract tells the model to emit findings in the snake_case shape the
+ * {@link ../findings/validate.js validator} accepts.
+ */
+import type { PromptInput, PromptResult } from './types.js';
+/**
+ * Build an audit prompt. Files not matching the pack's applies_to scope are
+ * excluded and reported back in {@link PromptResult.skippedFiles}.
+ */
+export declare function buildAuditPrompt(input: PromptInput): PromptResult;
+//# sourceMappingURL=build.d.ts.map

package/dist/prompt/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../source/prompt/build.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAC,WAAW,EAAE,YAAY,EAAa,MAAM,YAAY,CAAC;AAqDtE;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CA2EjE"}