@nimiplatform/nimi-coding 0.2.8 → 0.3.0

package/cli/lib/audit-sweep-runtime/closeout.mjs

@@ -1,144 +0,0 @@
-import {
-  appendRunEvent,
-  auditCloseoutRef,
-  ensureIsoTimestamp,
-  inputError,
-  loadFindings,
-  loadLatestLedger,
-  loadYamlRef,
-  remediationMapRef,
-  safeSweepId,
-  writeYamlRef,
-} from "./common.mjs";
-import {
-  COVERAGE_SCOPE_LABEL,
-  FILE_INVENTORY_SCOPE_LABEL,
-  deriveCoverageCloseoutPosture,
-  deriveCoverageStatus,
-  withFullScopeWarning,
-} from "./coverage-quality.mjs";
-import { validateAuditSweepArtifacts } from "./validators.mjs";
-
-export async function buildAuditSweepCloseoutImport(projectRoot, options) {
-  const sweepId = safeSweepId(options.sweepId);
-  if (!sweepId) {
-    return inputError("nimicoding sweep audit refused: --sweep-id is required.\n");
-  }
-  const timestampError = ensureIsoTimestamp(options.verifiedAt);
-  if (timestampError) {
-    return timestampError;
-  }
-
-  const ledgerResult = await loadLatestLedger(projectRoot, sweepId);
-  if (!ledgerResult.ok) {
-    return inputError(ledgerResult.error);
-  }
-  const ledger = ledgerResult.ledger;
-  const preflightValidation = await validateAuditSweepArtifacts(projectRoot, { sweepId, scope: "remediation" });
-  if (!preflightValidation.ok) {
-    const failed = preflightValidation.checks.find((entry) => !entry.ok);
-    return inputError(`nimicoding sweep audit refused: sweep audit closeout preflight failed: ${failed?.reason ?? "artifact validation failed"}.\n`);
-  }
-  if (ledger.status === "blocked") {
-    return inputError("nimicoding sweep audit refused: blocked ledger cannot produce completed closeout summary.\n");
-  }
-  if (ledger.status === "blocked_evidence_incomplete" || ledger.status === "partial_authority_only") {
-    return inputError("nimicoding sweep audit refused: incomplete spec authority/evidence coverage cannot produce completed closeout summary.\n");
-  }
-  if (ledger.coverage.active_chunks > 0) {
-    return inputError("nimicoding sweep audit refused: closeout summary requires no active chunks.\n");
-  }
-
-  const mapRef = remediationMapRef(sweepId, ledger.snapshot_id);
-  const remediationMap = await loadYamlRef(projectRoot, mapRef);
-  const { store } = await loadFindings(projectRoot, sweepId);
-  const openFindingIds = store.findings.filter((finding) => finding.disposition === "open").map((finding) => finding.id);
-  const mappedFindingIds = new Set(Array.isArray(remediationMap?.waves)
-    ? remediationMap.waves.flatMap((wave) => Array.isArray(wave.finding_ids) ? wave.finding_ids : [])
-    : []);
-  const unmappedOpenFindings = openFindingIds.filter((findingId) => !mappedFindingIds.has(findingId));
-  if (openFindingIds.length > 0 && (!remediationMap || unmappedOpenFindings.length > 0)) {
-    return inputError("nimicoding sweep audit refused: open findings require remediation map coverage before closeout summary.\n");
-  }
-  const closedWithoutResolutionEvidence = store.findings
-    .filter((finding) => finding.disposition !== "open")
-    .filter((finding) => !finding.resolution?.evidence_ref || !finding.resolution?.rerun);
-  if (closedWithoutResolutionEvidence.length > 0) {
-    return inputError("nimicoding sweep audit refused: closed findings require resolution and rerun evidence before closeout summary.\n");
-  }
-
-  const coverageStatus = deriveCoverageStatus(ledger.status);
-  const coverageQuality = coverageStatus === "full"
-    ? withFullScopeWarning(ledger.coverage_quality)
-    : ledger.coverage_quality ?? null;
-  const closeoutPosture = deriveCoverageCloseoutPosture({
-    coverageStatus,
-    openFindingCount: openFindingIds.length,
-  });
-  const auditValidity = ledger.audit_validity ?? null;
-  const finalCloseoutPosture = auditValidity?.posture === "invalid"
-    ? "audit_invalid_no_finding_evidence"
-    : closeoutPosture;
-  const auditCloseoutRefValue = auditCloseoutRef(sweepId, ledger.snapshot_id);
-  const auditCloseout = {
-    version: 1,
-    kind: "audit-closeout",
-    sweep_id: sweepId,
-    ledger_ref: ledgerResult.ledgerRef,
-    remediation_map_ref: mapRef,
-    audit_closeout_ref: auditCloseoutRefValue,
-    coverage_status: coverageStatus,
-    coverage_scope: ledger.coverage.authority_coverage ? COVERAGE_SCOPE_LABEL : FILE_INVENTORY_SCOPE_LABEL,
-    ...(coverageQuality ? { coverage_quality: coverageQuality } : {}),
-    ...(auditValidity ? { audit_validity: auditValidity } : {}),
-    finding_posture: ledger.finding_posture,
-    closeout_posture: finalCloseoutPosture,
-    verified_at: options.verifiedAt,
-  };
-  await writeYamlRef(projectRoot, auditCloseoutRefValue, auditCloseout);
-  const summary = {
-    plan_ref: ledger.plan_ref,
-    chunk_refs: ledger.chunk_refs,
-    ledger_ref: ledgerResult.ledgerRef,
-    report_ref: ledger.report_ref,
-    remediation_map_ref: mapRef,
-    audit_closeout_ref: auditCloseoutRefValue,
-    evidence_refs: ledger.evidence_refs,
-    finding_count: ledger.finding_count,
-    unresolved_finding_count: ledger.unresolved_finding_count,
-    status: ledger.status,
-    coverage_scope: ledger.coverage.authority_coverage ? COVERAGE_SCOPE_LABEL : FILE_INVENTORY_SCOPE_LABEL,
-    ...(coverageQuality ? { coverage_quality: coverageQuality } : {}),
-    ...(auditValidity ? { audit_validity: auditValidity } : {}),
-    summary: ledger.coverage.authority_coverage
-      ? `Audit sweep ${sweepId} has authority coverage ${ledger.coverage.authority_coverage.audited_files}/${ledger.coverage.authority_coverage.total_files}, evidence coverage ${ledger.coverage.evidence_coverage.audited_files}/${ledger.coverage.evidence_coverage.total_files}, ${ledger.finding_count} findings, and ${ledger.unresolved_finding_count} open findings.`
-      : `Audit sweep ${sweepId} has ${ledger.coverage.audited_files}/${ledger.coverage.included_files} included files audited, ${ledger.finding_count} findings, and ${ledger.unresolved_finding_count} open findings.`,
-    verified_at: options.verifiedAt,
-  };
-  const runRef = await appendRunEvent(projectRoot, sweepId, {
-    event_type: "closeout_summary_projected",
-    ledger_ref: ledgerResult.ledgerRef,
-    remediation_map_ref: mapRef,
-    audit_closeout_ref: auditCloseoutRefValue,
-    closeout_posture: finalCloseoutPosture,
-  });
-  const closeoutValidation = await validateAuditSweepArtifacts(projectRoot, { sweepId, scope: "closeout" });
-  if (!closeoutValidation.ok) {
-    const failed = closeoutValidation.checks.find((entry) => !entry.ok);
-    return inputError(`nimicoding sweep audit refused: sweep audit closeout validation failed: ${failed?.reason ?? "artifact validation failed"}.\n`);
-  }
-
-  return {
-    ok: true,
-    exitCode: 0,
-    projectRoot,
-    skill: { id: "audit_sweep" },
-    outcome: "completed",
-    verifiedAt: options.verifiedAt,
-    localOnly: true,
-    runLedgerRef: runRef,
-    auditCloseoutRef: auditCloseoutRefValue,
-    auditCloseout,
-    summary,
-  };
-}