@wildorder/nightshift 0.6.0 → 0.7.1

package/dist/decider-review.d.ts

@@ -1,6 +1,7 @@
 import { type AgentRunner } from "./agent-runner.js";
 import type { AgentConfig } from "./config.js";
-import { type DecisionBlock } from "./decision.js";
+import { type DecisionBlock, type DecisionOption } from "./decision.js";
+import { type LedgerEvent } from "./decision-ledger.js";
 import type { ProgramManifest } from "./manifest.js";
 import type { GitOps } from "./run-program.js";
 export interface ReviewDecisionsOptions {
@@ -14,8 +15,74 @@ export interface ReviewDecisionsOptions {
     agentRunner: AgentRunner;
     git: GitOps;
     isRepository: boolean;
+    /**
+     * Subject ids already sent to the decider this run, shared across the
+     * authoring and build stages and across both the decision and finding
+     * paths. Consulted, then added, immediately before each invocation, so a
+     * subject that re-surfaces in the same run is never reviewed twice while a
+     * later run still reviews it correctly (SC-10). This is a "sent" set, not
+     * a "ruled on" set — see `triaged`.
+     */
+    reviewed: Set<string>;
+    /**
+     * Subject ids the decider actually ruled on this run — added only after a
+     * successful invocation produced a valid verdict that was appended to the
+     * ledger. Distinct from `reviewed` (which marks a subject as sent, even
+     * when the invocation fails or the decider returns no parseable verdict):
+     * this is the run-local basis the report's triage ratio (SC-07) needs, so
+     * a failed or protocol-invalid decider run is never counted as having
+     * triaged the subject.
+     */
+    triaged: Set<string>;
     now: () => Date;
     log: (line: string) => void;
 }
 export declare function reviewDecisions(options: ReviewDecisionsOptions): Promise<void>;
+export type FindingRecordedEvent = Extract<LedgerEvent, {
+    kind: "finding-recorded";
+}>;
+export type TriageVerdict = {
+    disposition: "fix-now" | "accept";
+    rationale: string;
+} | {
+    disposition: "escalate";
+    rationale: string;
+    question: string;
+    alternatives: DecisionOption[];
+};
+/**
+ * Parses the finding-triage verdict block, last-block-wins, fail-closed to
+ * `undefined` — mirroring `extractVerdict`. An `escalate` verdict missing a
+ * real, non-blank question or a non-empty array of well-formed alternatives
+ * is rejected here rather than written: the invariant that a ledgered
+ * `escalate` always carries both holds at this boundary (SC-12).
+ */
+export declare function extractTriageVerdict(output: string): TriageVerdict | undefined;
+export interface TriageFindingsOptions {
+    root: string;
+    programId: string;
+    manifest: ProgramManifest;
+    workstreamId: string;
+    /** The routed `finding-recorded` events for this workstream — already appended to the ledger. */
+    findings: FindingRecordedEvent[];
+    /** The pre-workstream diff base, same as `reviewDecisions` uses. */
+    baseCommit: string | undefined;
+    decider: AgentConfig | undefined;
+    agentRunner: AgentRunner;
+    git: GitOps;
+    isRepository: boolean;
+    /** Shared with `reviewDecisions` — see that option's doc comment. */
+    reviewed: Set<string>;
+    /** Shared with `reviewDecisions` — see that option's doc comment. */
+    triaged: Set<string>;
+    now: () => Date;
+    log: (line: string) => void;
+}
+/**
+ * Triages each routed finding with the charter's three dispositions. This
+ * only records a `fix-now` triage — WS-06 acts on it. Fails open throughout:
+ * no decider, a non-zero exit, an unparseable verdict, or a hollow
+ * escalation leaves the finding `open` and never blocks the run.
+ */
+export declare function triageFindings(options: TriageFindingsOptions): Promise<void>;
 //# sourceMappingURL=decider-review.d.ts.map

package/dist/decider-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decider-review.d.ts","sourceRoot":"","sources":["../src/decider-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAkF/C,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA2Cf"}
+{"version":3,"file":"decider-review.d.ts","sourceRoot":"","sources":["../src/decider-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAuB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA4F/C,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB;;;;;;;;OAQG;IACH,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgDf;AAMD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAAC;AAkHtF,MAAM,MAAM,aAAa,GACrB;IAAE,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,WAAW,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,cAAc,EAAE,CAAC;CAChC,CAAC;AAEN;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAyC9E;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,oEAAoE;IACpE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,qEAAqE;IACrE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2DlF"}

package/dist/decider-review.js

@@ -7,12 +7,22 @@ import { appendLedgerEvents } from "./decision-ledger.js";
  * decision, one invocation, one verdict — a judgment, not a dialogue. No
  * decider configured means defaults stand unratified, which the run report
  * says plainly.
+ *
+ * A routed finding is a different kind of subject — raised by an
+ * independent reviewer, not a judgment call an agent stands behind — and
+ * gets its own triage path (`triageFindings`) with its own three-disposition
+ * vocabulary. The two paths are kept physically separate on purpose: an
+ * agent's own decision must stay on its untouched `ratify`/`escalate`
+ * contract.
  */
 const DIFF_LIMIT = 20_000;
-function deciderBrief(manifest, record, diff) {
-    const clippedDiff = diff.length > DIFF_LIMIT
+function clipDiff(diff) {
+    return diff.length > DIFF_LIMIT
         ? `${diff.slice(0, DIFF_LIMIT)}\n… (diff clipped at ${DIFF_LIMIT} characters)`
         : diff;
+}
+function deciderBrief(manifest, record, diff) {
+    const clippedDiff = clipDiff(diff);
     return [
         "# Review one decision",
         "",
@@ -66,7 +76,7 @@ function extractVerdict(output) {
     return undefined;
 }
 export async function reviewDecisions(options) {
-    const { root, programId, manifest, workstreamId, decisions, baseCommit, decider, agentRunner, git, isRepository, now, log, } = options;
+    const { root, programId, manifest, workstreamId, decisions, baseCommit, decider, agentRunner, git, isRepository, reviewed, triaged, now, log, } = options;
     if (!decider || decisions.length === 0)
         return;
     const diff = isRepository && baseCommit !== undefined
@@ -74,6 +84,9 @@ export async function reviewDecisions(options) {
         : "";
     for (const decision of decisions) {
         const id = decisionFingerprint(workstreamId, decision);
+        if (reviewed.has(id))
+            continue;
+        reviewed.add(id);
         const brief = deciderBrief(manifest, { workstream: workstreamId, decision }, diff);
         const invocation = await invokeAgent(agentRunner, decider, brief, root);
         const verdict = extractVerdict(invocation.output);
@@ -92,7 +105,202 @@ export async function reviewDecisions(options) {
             reviewedBy: "decider",
         };
         await appendLedgerEvents(root, programId, [event]);
+        triaged.add(id);
         log(`${workstreamId} decision ${id}: ${verdict.verdict}`);
     }
 }
+function findingEvidenceLines(evidence) {
+    return evidence.map((item) => {
+        if (item.kind === "location") {
+            const range = item.endLine === undefined ? `${item.startLine}` : `${item.startLine}-${item.endLine}`;
+            const location = `${item.file}:${range}${item.unverifiable ? " (unverifiable path)" : ""}`;
+            return item.excerpt ? `- ${location} — ${item.excerpt}` : `- ${location}`;
+        }
+        if (item.kind === "concern") {
+            return item.detail ? `- ${item.named} — ${item.detail}` : `- ${item.named}`;
+        }
+        return `- ${item.metric}: ${item.value}`;
+    });
+}
+/**
+ * The origin-aware finding brief (SC-11): states plainly that the subject is
+ * a finding routed from a review pass, never framed as an agent's own
+ * judgment call, renders the finding as the structured data it is, offers
+ * the three dispositions with honest definitions, and — for a finding the
+ * reviewer itself declined to rate a blocker — states in prose (never a
+ * numeric cap) that escalation is reserved for the genuinely unsettleable.
+ */
+function findingTriageBrief(manifest, workstreamId, event, diff) {
+    const clippedDiff = clipDiff(diff);
+    const evidenceLines = findingEvidenceLines(event.evidence);
+    const higherBar = event.severity === "major"
+        ? [
+            "This finding's severity is **major** — the reviewer itself",
+            "declined to rate it a blocker. That is itself evidence: reserve",
+            "`escalate` for what is genuinely unsettleable here, and lean on",
+            "`fix-now` or `accept` — a reviewer that stopped short of blocker",
+            "is usually right that the crew can settle this on its own.",
+            "",
+        ]
+        : [];
+    return [
+        "# Triage a finding",
+        "",
+        `Program: ${manifest.program.id} — ${manifest.program.name}`,
+        `Workstream: ${workstreamId}`,
+        "",
+        "This is a **finding routed from a review pass** — raised by an",
+        "independent reviewer, not a judgment call an implementing agent made",
+        "and stands behind. Your job is to triage it: fix it now, accept it as",
+        "a known limitation, or escalate it to the human. You never edit",
+        "anything.",
+        "",
+        `- **Severity:** ${event.severity}`,
+        `- **Category:** ${event.category}`,
+        `- **Subject:** ${event.subject}`,
+        `- **Message:** ${event.message}`,
+        ...(evidenceLines.length > 0 ? ["- **Evidence:**", ...evidenceLines] : []),
+        "",
+        ...higherBar,
+        "The work this finding concerns:",
+        "",
+        "```diff",
+        clippedDiff.trim() === "" ? "(no diff available)" : clippedDiff,
+        "```",
+        "",
+        "Reply with exactly one verdict block:",
+        "",
+        "```verdict",
+        "{",
+        '  "disposition": "fix-now" | "accept" | "escalate",',
+        '  "rationale": "One or two sentences, written for the human who reads the run report.",',
+        '  "question": "…",',
+        '  "alternatives": [',
+        '    { "label": "…", "description": "…" }',
+        "  ]",
+        "}",
+        "```",
+        "",
+        "`question` and `alternatives` apply only to `escalate` — omit them for",
+        "`fix-now` or `accept`.",
+        "",
+        "`fix-now`: the finding is worth one bounded fix attempt in this run",
+        "before proceeding. `accept`: a real but tolerable limitation, recorded",
+        "for the human and not worth stopping for. `escalate`: the crew cannot",
+        "settle this and the human should rule — compose the question and the",
+        "real alternatives yourself, in your own words. One triage, one",
+        "verdict: this is a judgment, not a dialogue.",
+    ].join("\n");
+}
+/**
+ * A well-formed escalation alternative, per SC-12 and the verdict contract:
+ * a *real* `{ label, description }` composed by the decider, not a bare
+ * label. Unlike `DecisionOption` (where `description` is optional for an
+ * agent's own decision options), an escalation alternative requires a
+ * non-blank description — a hollow `{ "label": "fix" }` is not an
+ * alternative the human can rule on.
+ */
+function isWellFormedAlternative(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    if (typeof candidate.label !== "string" || candidate.label.trim() === "")
+        return false;
+    if (typeof candidate.description !== "string" || candidate.description.trim() === "") {
+        return false;
+    }
+    return true;
+}
+/**
+ * Parses the finding-triage verdict block, last-block-wins, fail-closed to
+ * `undefined` — mirroring `extractVerdict`. An `escalate` verdict missing a
+ * real, non-blank question or a non-empty array of well-formed alternatives
+ * is rejected here rather than written: the invariant that a ledgered
+ * `escalate` always carries both holds at this boundary (SC-12).
+ */
+export function extractTriageVerdict(output) {
+    const matches = [...output.matchAll(/```verdict[^\S\r\n]*\r?\n([\s\S]*?)```/gu)];
+    for (const match of matches.reverse()) {
+        try {
+            const parsed = JSON.parse(match[1] ?? "");
+            if (typeof parsed.rationale !== "string")
+                continue;
+            if (parsed.disposition === "fix-now" || parsed.disposition === "accept") {
+                return { disposition: parsed.disposition, rationale: parsed.rationale };
+            }
+            if (parsed.disposition === "escalate") {
+                const question = parsed.question;
+                const alternatives = parsed.alternatives;
+                if (typeof question === "string" &&
+                    question.trim() !== "" &&
+                    Array.isArray(alternatives) &&
+                    alternatives.length > 0 &&
+                    alternatives.every(isWellFormedAlternative)) {
+                    return {
+                        disposition: "escalate",
+                        rationale: parsed.rationale,
+                        question,
+                        alternatives,
+                    };
+                }
+                // A hollow escalation (missing question/alternatives) is rejected at
+                // this boundary — try an earlier block rather than writing it.
+            }
+        }
+        catch {
+            // Try an earlier block.
+        }
+    }
+    return undefined;
+}
+/**
+ * Triages each routed finding with the charter's three dispositions. This
+ * only records a `fix-now` triage — WS-06 acts on it. Fails open throughout:
+ * no decider, a non-zero exit, an unparseable verdict, or a hollow
+ * escalation leaves the finding `open` and never blocks the run.
+ */
+export async function triageFindings(options) {
+    const { root, programId, manifest, workstreamId, findings, baseCommit, decider, agentRunner, git, isRepository, reviewed, triaged, now, log, } = options;
+    if (!decider || findings.length === 0)
+        return;
+    const diff = isRepository && baseCommit !== undefined
+        ? await git.diffSince(root, baseCommit)
+        : "";
+    for (const event of findings) {
+        if (reviewed.has(event.id))
+            continue;
+        reviewed.add(event.id);
+        const brief = findingTriageBrief(manifest, workstreamId, event, diff);
+        const invocation = await invokeAgent(agentRunner, decider, brief, root);
+        const verdict = extractTriageVerdict(invocation.output);
+        if (invocation.exitCode !== 0 || verdict === undefined) {
+            // Fail open: an untriaged finding stays open and the report says so;
+            // it never blocks the run.
+            log(`${workstreamId} finding ${event.id}: decider produced no verdict; left untriaged`);
+            continue;
+        }
+        const triageEvent = verdict.disposition === "escalate"
+            ? {
+                kind: "finding-triaged",
+                at: now().toISOString(),
+                id: event.id,
+                disposition: "escalate",
+                rationale: verdict.rationale,
+                question: verdict.question,
+                alternatives: verdict.alternatives,
+                reviewedBy: "decider",
+            }
+            : {
+                kind: "finding-triaged",
+                at: now().toISOString(),
+                id: event.id,
+                disposition: verdict.disposition,
+                rationale: verdict.rationale,
+                reviewedBy: "decider",
+            };
+        await appendLedgerEvents(root, programId, [triageEvent]);
+        triaged.add(event.id);
+        log(`${workstreamId} finding ${event.id}: ${verdict.disposition}`);
+    }
+}
 //# sourceMappingURL=decider-review.js.map

package/dist/decider-review.js.map

@@ -1 +1 @@
-{"version":3,"file":"decider-review.js","sourceRoot":"","sources":["../src/decider-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAoB,MAAM,sBAAsB,CAAC;AAI5E;;;;;;GAMG;AAEH,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,SAAS,YAAY,CACnB,QAAyB,EACzB,MAAuD,EACvD,IAAY;IAEZ,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,GAAG,UAAU;QACtB,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,wBAAwB,UAAU,cAAc;QAC9E,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO;QACL,uBAAuB;QACvB,EAAE;QACF,YAAY,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5D,eAAe,MAAM,CAAC,UAAU,EAAE;QAClC,EAAE;QACF,qEAAqE;QACrE,qEAAqE;QACrE,4DAA4D;QAC5D,EAAE;QACF,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,EAAE;QACF,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QAC/D,KAAK;QACL,EAAE;QACF,uCAAuC;QACvC,EAAE;QACF,YAAY;QACZ,GAAG;QACH,qCAAqC;QACrC,wFAAwF;QACxF,GAAG;QACH,KAAK;QACL,EAAE;QACF,uEAAuE;QACvE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAAc;IAEd,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAGvC,CAAC;YACF,IACE,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC;gBAC9D,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+B;IAE/B,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,WAAW,EACX,GAAG,EACH,YAAY,EACZ,GAAG,EACH,GAAG,GACJ,GAAG,OAAO,CAAC;IACZ,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/C,MAAM,IAAI,GACR,YAAY,IAAI,UAAU,KAAK,SAAS;QACtC,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACvD,sEAAsE;YACtE,oCAAoC;YACpC,GAAG,CAAC,GAAG,YAAY,aAAa,EAAE,gDAAgD,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YACvB,EAAE;YACF,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,YAAY,aAAa,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}
+{"version":3,"file":"decider-review.js","sourceRoot":"","sources":["../src/decider-review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAE,mBAAmB,EAA2C,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAoB,MAAM,sBAAsB,CAAC;AAK5E;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,UAAU;QAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,wBAAwB,UAAU,cAAc;QAC9E,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CACnB,QAAyB,EACzB,MAAuD,EACvD,IAAY;IAEZ,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEnC,OAAO;QACL,uBAAuB;QACvB,EAAE;QACF,YAAY,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5D,eAAe,MAAM,CAAC,UAAU,EAAE;QAClC,EAAE;QACF,qEAAqE;QACrE,qEAAqE;QACrE,4DAA4D;QAC5D,EAAE;QACF,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,EAAE;QACF,yBAAyB;QACzB,EAAE;QACF,SAAS;QACT,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QAC/D,KAAK;QACL,EAAE;QACF,uCAAuC;QACvC,EAAE;QACF,YAAY;QACZ,GAAG;QACH,qCAAqC;QACrC,wFAAwF;QACxF,GAAG;QACH,KAAK;QACL,EAAE;QACF,uEAAuE;QACvE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAAc;IAEd,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAGvC,CAAC;YACF,IACE,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC;gBAC9D,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAoCD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+B;IAE/B,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,WAAW,EACX,GAAG,EACH,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,GAAG,EACH,GAAG,GACJ,GAAG,OAAO,CAAC;IACZ,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/C,MAAM,IAAI,GACR,YAAY,IAAI,UAAU,KAAK,SAAS;QACtC,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACvD,sEAAsE;YACtE,oCAAoC;YACpC,GAAG,CAAC,GAAG,YAAY,aAAa,EAAE,gDAAgD,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;YACvB,EAAE;YACF,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,YAAY,aAAa,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAQD,SAAS,oBAAoB,CAAC,QAA6B;IACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzF,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,QAAyB,EACzB,YAAoB,EACpB,KAA2B,EAC3B,IAAY;IAEZ,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3D,MAAM,SAAS,GACb,KAAK,CAAC,QAAQ,KAAK,OAAO;QACxB,CAAC,CAAC;YACE,4DAA4D;YAC5D,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,4DAA4D;YAC5D,EAAE;SACH;QACH,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,oBAAoB;QACpB,EAAE;QACF,YAAY,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5D,eAAe,YAAY,EAAE;QAC7B,EAAE;QACF,gEAAgE;QAChE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,WAAW;QACX,EAAE;QACF,mBAAmB,KAAK,CAAC,QAAQ,EAAE;QACnC,mBAAmB,KAAK,CAAC,QAAQ,EAAE;QACnC,kBAAkB,KAAK,CAAC,OAAO,EAAE;QACjC,kBAAkB,KAAK,CAAC,OAAO,EAAE;QACjC,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,EAAE;QACF,GAAG,SAAS;QACZ,iCAAiC;QACjC,EAAE;QACF,SAAS;QACT,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QAC/D,KAAK;QACL,EAAE;QACF,uCAAuC;QACvC,EAAE;QACF,YAAY;QACZ,GAAG;QACH,qDAAqD;QACrD,yFAAyF;QACzF,oBAAoB;QACpB,qBAAqB;QACrB,0CAA0C;QAC1C,KAAK;QACL,GAAG;QACH,KAAK;QACL,EAAE;QACF,wEAAwE;QACxE,wBAAwB;QACxB,EAAE;QACF,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,gEAAgE;QAChE,8CAA8C;KAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAKvC,CAAC;YACF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAAE,SAAS;YAEnD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACxE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1E,CAAC;YAED,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACjC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBACzC,IACE,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;oBACtB,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;oBAC3B,YAAY,CAAC,MAAM,GAAG,CAAC;oBACvB,YAAY,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC3C,CAAC;oBACD,OAAO;wBACL,WAAW,EAAE,UAAU;wBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,QAAQ;wBACR,YAAY;qBACb,CAAC;gBACJ,CAAC;gBACD,qEAAqE;gBACrE,+DAA+D;YACjE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAuBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,OAAO,EACP,WAAW,EACX,GAAG,EACH,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,GAAG,EACH,GAAG,GACJ,GAAG,OAAO,CAAC;IACZ,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9C,MAAM,IAAI,GACR,YAAY,IAAI,UAAU,KAAK,SAAS;QACtC,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QACrC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACvD,qEAAqE;YACrE,2BAA2B;YAC3B,GAAG,CAAC,GAAG,YAAY,YAAY,KAAK,CAAC,EAAE,+CAA+C,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,KAAK,UAAU;YAChC,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB;gBACvB,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACvB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,UAAU;gBACvB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,SAAS;aACtB;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB;gBACvB,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACvB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,SAAS;aACtB,CAAC;QACR,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,YAAY,YAAY,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/decision-ledger.d.ts

@@ -1,4 +1,5 @@
-import type { DecisionBlock } from "./decision.js";
+import type { DecisionBlock, DecisionOption } from "./decision.js";
+import type { Evidence, FindingCategory, Severity } from "./findings.js";
 /**
  * The decision ledger: an append-only JSONL journal per program, the durable
  * record of every judgment call a run made, who reviewed it, and what a
@@ -34,6 +35,46 @@ export type LedgerEvent = (EventBase & {
     /** The option label the human settled on. */
     chosen: string;
     reason: string;
+}) | (EventBase & {
+    kind: "finding-recorded";
+    workstream: string;
+    severity: Severity;
+    category: FindingCategory;
+    subject: string;
+    message: string;
+    evidence: Evidence[];
+    /** The finding's optional machine code. */
+    code?: string;
+    /** The green pre-critique commit — the anchor. */
+    baseCommit?: string;
+    /** Attribution — never "implementer": a finding is the reviewer's. */
+    foundBy: "reviewer";
+}) | (EventBase & ({
+    kind: "finding-triaged";
+    disposition: "fix-now" | "accept";
+    rationale: string;
+    reviewedBy: "decider";
+} | {
+    kind: "finding-triaged";
+    disposition: "escalate";
+    rationale: string;
+    /** Composed by the decider. */
+    question: string;
+    /** The real alternatives, in the decider's words. */
+    alternatives: DecisionOption[];
+    reviewedBy: "decider";
+})) | (EventBase & {
+    kind: "finding-fix-attempted";
+    /** "kept" only when a fix verified clean AND landed a commit; "failed"
+     *  for a failed verification or a clean attempt that produced no
+     *  commit. */
+    outcome: "kept" | "failed";
+    /** The implementer's verbatim summary, plus (on failure) the
+     *  verification diagnosis or the no-change fact. */
+    note: string;
+    /** The fix commit, present only on a kept fix that landed one. */
+    commit?: string;
+    attemptedBy: "implementer";
 });
 export type DecisionStatus = "unratified" | "ratified" | "escalated" | "human-decided";
 export interface DecisionRecord {
@@ -50,8 +91,45 @@ export interface DecisionRecord {
     /** True when the agent claimed the choice is costly to undo. */
     oneWay: boolean;
 }
+export type FindingStatus = "open" | "fix-now" | "accepted" | "escalated" | "human-decided";
+export interface FindingRecord {
+    id: string;
+    workstream: string;
+    severity: Severity;
+    category: FindingCategory;
+    subject: string;
+    message: string;
+    evidence: Evidence[];
+    code?: string;
+    baseCommit?: string;
+    status: FindingStatus;
+    /** Present when a decider triaged it. */
+    triageRationale?: string;
+    /** Present when the decider escalated; the composed question. */
+    escalationQuestion?: string;
+    escalationAlternatives?: DecisionOption[];
+    /** Present when a human decided; overrides the decider's triage. */
+    humanChosen?: string;
+    humanReason?: string;
+    foundBy: "reviewer";
+    /** Discriminates from a DecisionRecord where a union of both is handled. */
+    origin: "finding";
+    /**
+     * Present once a `fix-now` triage has driven a bounded fix attempt
+     * (WS-06). "kept" leaves `status` at `"fix-now"` — a fix-attempt-and-verify
+     * fact, not a per-finding proof of correction; "failed" moves `status` to
+     * `"escalated"` while `triageRationale` (the decider's original reason)
+     * stays untouched.
+     */
+    fixAttempt?: {
+        outcome: "kept" | "failed";
+        note: string;
+        commit?: string;
+    };
+}
 export interface DecisionLedgerView {
     decisions: DecisionRecord[];
+    findings: FindingRecord[];
     /** Journal lines that could not be read; reported, never fatal. */
     corrupt: number;
 }

package/dist/decision-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision-ledger.d.ts","sourceRoot":"","sources":["../src/decision-ledger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,WAAW,GACnB,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,CAAC;CAC1B,CAAC,GACF,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,CAAC;CACvB,CAAC,GACF,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEP,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,UAAU,GACV,WAAW,GACX,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOlE;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CA8C5E;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC,CA0B7B"}
+{"version":3,"file":"decision-ledger.d.ts","sourceRoot":"","sources":["../src/decision-ledger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,WAAW,GACnB,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,CAAC;CAC1B,CAAC,GACF,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,CAAC;CACvB,CAAC,GACF,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,kBAAkB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,OAAO,EAAE,UAAU,CAAC;CACrB,CAAC,GACF,CAAC,SAAS,GACR,CACI;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,CAAC;CACvB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,UAAU,EAAE,SAAS,CAAC;CACvB,CACJ,CAAC,GACJ,CAAC,SAAS,GAAG;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B;;kBAEc;IACd,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B;wDACoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,CAAC;CAC5B,CAAC,CAAC;AAEP,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,UAAU,GACV,WAAW,GACX,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,SAAS,GACT,UAAU,GACV,WAAW,GACX,eAAe,CAAC;AAEpB,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1C,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,4EAA4E;IAC5E,MAAM,EAAE,SAAS,CAAC;IAClB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5E;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;CACjB;AAWD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOlE;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAqJ5E;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC,CA0B7B"}

package/dist/decision-ledger.js

@@ -13,6 +13,11 @@ import { dirname, join, resolve } from "node:path";
  * blocked run — because the ledger explains work, it does not gate it.
  */
 export const LEDGER_SCHEMA_VERSION = 1;
+const FINDING_STATUS_BY_DISPOSITION = {
+    "fix-now": "fix-now",
+    accept: "accepted",
+    escalate: "escalated",
+};
 export function ledgerPath(root, programId) {
     return join(resolve(root), "docs", "programs", `${programId}-decisions.jsonl`);
 }
@@ -27,13 +32,14 @@ export async function appendLedgerEvents(root, programId, events) {
     await appendFile(path, `${lines}\n`, "utf8");
 }
 export function reduceLedgerEvents(events) {
-    const byId = new Map();
+    const decisionsById = new Map();
+    const findingsById = new Map();
     for (const event of events) {
         if (event.kind === "decision-recorded") {
-            const existing = byId.get(event.id);
+            const existing = decisionsById.get(event.id);
             // A re-recorded decision (retry, resumed run) refreshes the block but
             // keeps any higher-authority outcome already on the record.
-            byId.set(event.id, {
+            decisionsById.set(event.id, {
                 id: event.id,
                 workstream: event.workstream,
                 decision: event.decision,
@@ -54,23 +60,124 @@ export function reduceLedgerEvents(events) {
             });
             continue;
         }
-        const record = byId.get(event.id);
-        if (!record)
+        if (event.kind === "finding-recorded") {
+            const existing = findingsById.get(event.id);
+            // Mirrors the decision-recorded re-record rule: refresh the finding's
+            // own fields, keep any higher-authority outcome already on it.
+            findingsById.set(event.id, {
+                id: event.id,
+                workstream: event.workstream,
+                severity: event.severity,
+                category: event.category,
+                subject: event.subject,
+                message: event.message,
+                evidence: event.evidence,
+                ...(event.code === undefined ? {} : { code: event.code }),
+                ...(event.baseCommit === undefined
+                    ? {}
+                    : { baseCommit: event.baseCommit }),
+                status: existing?.status ?? "open",
+                ...(existing?.triageRationale === undefined
+                    ? {}
+                    : { triageRationale: existing.triageRationale }),
+                ...(existing?.escalationQuestion === undefined
+                    ? {}
+                    : { escalationQuestion: existing.escalationQuestion }),
+                ...(existing?.escalationAlternatives === undefined
+                    ? {}
+                    : { escalationAlternatives: existing.escalationAlternatives }),
+                ...(existing?.humanChosen === undefined
+                    ? {}
+                    : { humanChosen: existing.humanChosen }),
+                ...(existing?.humanReason === undefined
+                    ? {}
+                    : { humanReason: existing.humanReason }),
+                ...(existing?.fixAttempt === undefined
+                    ? {}
+                    : { fixAttempt: existing.fixAttempt }),
+                foundBy: "reviewer",
+                origin: "finding",
+            });
             continue;
+        }
+        if (event.kind === "finding-triaged") {
+            const record = findingsById.get(event.id);
+            if (!record)
+                continue;
+            // Human authority already on the record outranks a decider triage.
+            if (record.status === "human-decided")
+                continue;
+            record.status = FINDING_STATUS_BY_DISPOSITION[event.disposition];
+            record.triageRationale = event.rationale;
+            if (event.disposition === "escalate") {
+                record.escalationQuestion = event.question;
+                record.escalationAlternatives = event.alternatives;
+            }
+            continue;
+        }
+        if (event.kind === "finding-fix-attempted") {
+            const record = findingsById.get(event.id);
+            if (!record)
+                continue;
+            // Human authority already on the record outranks a fix attempt — the
+            // fix-now driver never selects a human-decided finding in the first
+            // place (it reads the same projection), but an older run's ledger can
+            // still contain the event, so the reducer stays harmless either way.
+            if (record.status === "human-decided")
+                continue;
+            record.fixAttempt = {
+                outcome: event.outcome,
+                note: event.note,
+                ...(event.commit === undefined ? {} : { commit: event.commit }),
+            };
+            // A kept fix leaves status at "fix-now" — the presence of a "kept"
+            // fixAttempt is what distinguishes it from a still-pending fix-now
+            // finding. A failed fix — a failed verification or a clean attempt
+            // that landed no commit — is promoted to escalation: this is the
+            // *only* place that promotion happens, a projection, not a re-triage.
+            if (event.outcome === "failed") {
+                record.status = "escalated";
+            }
+            continue;
+        }
         if (event.kind === "decision-reviewed") {
+            const record = decisionsById.get(event.id);
+            if (!record)
+                continue;
             // Human authority already on the record outranks a decider review.
             if (record.status === "human-decided")
                 continue;
             record.status = event.verdict === "ratify" ? "ratified" : "escalated";
             record.reviewRationale = event.rationale;
+            continue;
         }
-        else {
-            record.status = "human-decided";
-            record.humanChosen = event.chosen;
-            record.humanReason = event.reason;
+        if (event.kind === "decision-human") {
+            // A human ruling settles whichever record matches the id — a decision
+            // or a finding — never both, since ids never collide across the two.
+            const decision = decisionsById.get(event.id);
+            if (decision) {
+                decision.status = "human-decided";
+                decision.humanChosen = event.chosen;
+                decision.humanReason = event.reason;
+                continue;
+            }
+            const finding = findingsById.get(event.id);
+            if (finding) {
+                finding.status = "human-decided";
+                finding.humanChosen = event.chosen;
+                finding.humanReason = event.reason;
+            }
+            continue;
         }
+        // A genuinely unknown or future event kind is ignored, never
+        // mis-handled — reads stay fail-open regardless of what a hand-edited
+        // or newer ledger presents.
     }
-    return { decisions: [...byId.values()], corrupt: 0 };
+    return {
+        decisions: [...decisionsById.values()],
+        findings: [...findingsById.values()],
+        corrupt: 0,
+    };
 }
 /**
  * Read and reduce the journal. Fail-open: a missing file is an empty ledger,
@@ -83,7 +190,7 @@ export async function readDecisionLedger(root, programId) {
         raw = await readFile(ledgerPath(root, programId), "utf8");
     }
     catch {
-        return { decisions: [], corrupt: 0 };
+        return { decisions: [], findings: [], corrupt: 0 };
     }
     const events = [];
     let corrupt = 0;