audit-tools 0.28.0

package/dist/audit/cli/dispatchStatusCommand.js

@@ -0,0 +1,81 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { readJsonFile, isFileMissingError, RunLogger } from "audit-tools/shared";
+import { ACTIVE_DISPATCH_FILENAME, loadDispatchResultMap } from "./dispatch.js";
+import { getArtifactsDir } from "./args.js";
+export async function cmdDispatchStatus(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const activeDispatchPath = join(artifactsDir, ACTIVE_DISPATCH_FILENAME);
+    let activeDispatch = null;
+    try {
+        activeDispatch = await readJsonFile(activeDispatchPath);
+    }
+    catch (e) {
+        if (!isFileMissingError(e))
+            throw e;
+    }
+    if (!activeDispatch) {
+        console.log(JSON.stringify({ status: "no_active_dispatch" }, null, 2));
+        return;
+    }
+    const runDir = join(artifactsDir, "runs", activeDispatch.run_id);
+    const resultMap = await loadDispatchResultMap(runDir);
+    if (!resultMap) {
+        console.log(JSON.stringify({
+            status: "missing_result_map",
+            run_id: activeDispatch.run_id,
+        }, null, 2));
+        return;
+    }
+    const packetIds = [...new Set(resultMap.entries.map((e) => e.packet_id))];
+    const packetStatus = [];
+    for (const pid of packetIds) {
+        if (pid === "__prior_dispatch__")
+            continue;
+        const entries = resultMap.entries.filter((e) => e.packet_id === pid);
+        let completed = 0;
+        const missing = [];
+        for (const entry of entries) {
+            try {
+                await readFile(entry.result_path, "utf8");
+                completed++;
+            }
+            catch (e) {
+                // Re-throw permission / IO errors so they surface as real failures rather
+                // than silently appearing as "missing results" (COR-6e84f23c).
+                if (!isFileMissingError(e))
+                    throw e;
+                missing.push(entry.task_id);
+            }
+        }
+        packetStatus.push({
+            packet_id: pid,
+            task_count: entries.length,
+            completed_count: completed,
+            missing_task_ids: missing,
+        });
+    }
+    const totalTasks = packetStatus.reduce((s, p) => s + p.task_count, 0);
+    const completedTasks = packetStatus.reduce((s, p) => s + p.completed_count, 0);
+    const completedPackets = packetStatus.filter((p) => p.missing_task_ids.length === 0).length;
+    // FND-OBS-6e84f23c: record dispatch-status checks in run log so operators have
+    // a history of polling events for long-running dispatch sessions.
+    const runLogger = new RunLogger(join(artifactsDir, "run.log.jsonl"));
+    runLogger.event({
+        kind: "step",
+        obligation: "dispatch_status_check",
+        note: `run_id=${activeDispatch.run_id} completed=${completedTasks}/${totalTasks} packets=${completedPackets}/${packetStatus.length}`,
+    });
+    console.log(JSON.stringify({
+        run_id: activeDispatch.run_id,
+        dispatch_status: activeDispatch.status,
+        created_at: activeDispatch.created_at,
+        total_packets: packetStatus.length,
+        completed_packets: completedPackets,
+        total_tasks: totalTasks,
+        completed_tasks: completedTasks,
+        missing_tasks: totalTasks - completedTasks,
+        packets: packetStatus,
+    }, null, 2));
+}
+//# sourceMappingURL=dispatchStatusCommand.js.map

package/dist/audit/cli/dispatchStatusCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchStatusCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/dispatchStatusCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAA4B,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAc;IACpD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACxE,IAAI,cAAc,GAA+B,IAAI,CAAC;IACtD,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,YAAY,CAAsB,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAKb,EAAE,CAAC;IAER,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,oBAAoB;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;QACrE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC1C,SAAS,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,0EAA0E;gBAC1E,+DAA+D;gBAC/D,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,YAAY,CAAC,IAAI,CAAC;YAChB,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,eAAe,EAAE,SAAS;YAC1B,gBAAgB,EAAE,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAE5F,+EAA+E;IAC/E,kEAAkE;IAClE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;IACrE,SAAS,CAAC,KAAK,CAAC;QACd,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,UAAU,cAAc,CAAC,MAAM,cAAc,cAAc,IAAI,UAAU,YAAY,gBAAgB,IAAI,YAAY,CAAC,MAAM,EAAE;KACrI,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,eAAe,EAAE,cAAc,CAAC,MAAM;QACtC,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,aAAa,EAAE,YAAY,CAAC,MAAM;QAClC,iBAAiB,EAAE,gBAAgB;QACnC,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,cAAc;QAC/B,aAAa,EAAE,UAAU,GAAG,cAAc;QAC1C,OAAO,EAAE,YAAY;KACtB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACf,CAAC"}

package/dist/audit/cli/envelope.d.ts

@@ -0,0 +1,50 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AuditState } from "../types/auditState.js";
+import { type AuditCodeHandoff, type ActiveReviewRun } from "../supervisor/operatorHandoff.js";
+export declare const ADVANCE_AUDIT_CONTRACT_VERSION = "audit-code/v1alpha1";
+export declare function buildEnvelope(params: {
+    audit_state: unknown;
+    selected_obligation: string | null;
+    selected_executor: string | null;
+    progress_made: boolean;
+    artifacts_written: string[];
+    progress_summary: string;
+    next_likely_step: string | null;
+    handoff: AuditCodeHandoff;
+}): {
+    contract_version: string;
+    audit_state: unknown;
+    selected_obligation: string | null;
+    selected_executor: string | null;
+    progress_made: boolean;
+    artifacts_written: string[];
+    progress_summary: string;
+    next_likely_step: string | null;
+    handoff: AuditCodeHandoff;
+};
+export declare function emitEnvelope(params: {
+    root: string;
+    artifactsDir: string;
+    bundle: ArtifactBundle;
+    audit_state: AuditState;
+    selected_obligation: string | null;
+    selected_executor: string | null;
+    progress_made: boolean;
+    artifacts_written: string[];
+    progress_summary: string;
+    next_likely_step: string | null;
+    providerName?: string | null;
+    isConfigError?: boolean;
+    activeReviewRun?: ActiveReviewRun;
+}): Promise<void>;
+export declare function buildManualReviewBlocker(providerName: string): string;
+/** Executors that require the LLM host agent to dispatch sub-agents; must NOT be run inline. */
+export declare function isLlmDispatchExecutor(id: string | null): boolean;
+export declare function shouldRunInlineExecutor(selectedExecutor: string | null): boolean;
+export declare function buildBlockedAuditState(params: {
+    state: AuditState;
+    obligationId: string | null;
+    executor: string | null;
+    blocker: string;
+}): AuditState;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/audit/cli/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAE1C,eAAO,MAAM,8BAA8B,wBAAwB,CAAC;AAEpE,wBAAgB,aAAa,CAAC,MAAM,EAAE;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,gBAAgB,CAAC;CAC3B;;;;;;;;;;EAYA;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BhB;AAED,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKrE;AAED,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAEhE;AAED,wBAAgB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,UAAU,CAiBb"}

package/dist/audit/cli/envelope.js

@@ -0,0 +1,69 @@
+import { LOCAL_SUBPROCESS_PROVIDER_NAME } from "../providers/constants.js";
+import { buildAuditCodeHandoff, writeAuditCodeHandoffArtifacts, } from "../supervisor/operatorHandoff.js";
+export const ADVANCE_AUDIT_CONTRACT_VERSION = "audit-code/v1alpha1";
+export function buildEnvelope(params) {
+    return {
+        contract_version: ADVANCE_AUDIT_CONTRACT_VERSION,
+        audit_state: params.audit_state,
+        selected_obligation: params.selected_obligation,
+        selected_executor: params.selected_executor,
+        progress_made: params.progress_made,
+        artifacts_written: params.artifacts_written,
+        progress_summary: params.progress_summary,
+        next_likely_step: params.next_likely_step,
+        handoff: params.handoff,
+    };
+}
+export async function emitEnvelope(params) {
+    const handoff = buildAuditCodeHandoff({
+        root: params.root,
+        artifactsDir: params.artifactsDir,
+        state: params.audit_state,
+        bundle: params.bundle,
+        providerName: params.providerName,
+        progressSummary: params.progress_summary,
+        isConfigError: params.isConfigError,
+        activeReviewRun: params.activeReviewRun,
+    });
+    await writeAuditCodeHandoffArtifacts(handoff);
+    console.log(JSON.stringify(buildEnvelope({
+        audit_state: params.audit_state,
+        selected_obligation: params.selected_obligation,
+        selected_executor: params.selected_executor,
+        progress_made: params.progress_made,
+        artifacts_written: params.artifacts_written,
+        progress_summary: params.progress_summary,
+        next_likely_step: params.next_likely_step,
+        handoff,
+    }), null, 2));
+}
+export function buildManualReviewBlocker(providerName) {
+    return providerName === LOCAL_SUBPROCESS_PROVIDER_NAME
+        ? "Audit blocked: waiting for manual audit results or interactive provider configuration."
+        : "Ready for LLM semantic review. If the host exposes a callable subagent tool, prepare dispatch and fan out packets. " +
+            "If not, use single-task fallback: review only the first pending task, write one AuditResult to the run audit-results path, execute worker_command, then stop.";
+}
+/** Executors that require the LLM host agent to dispatch sub-agents; must NOT be run inline. */
+export function isLlmDispatchExecutor(id) {
+    return id === "agent" || id === "rolling_dispatch_executor";
+}
+export function shouldRunInlineExecutor(selectedExecutor) {
+    return selectedExecutor !== null && !isLlmDispatchExecutor(selectedExecutor);
+}
+export function buildBlockedAuditState(params) {
+    return {
+        ...params.state,
+        status: "blocked",
+        last_executor: params.executor ?? params.state.last_executor,
+        last_obligation: params.obligationId ?? params.state.last_obligation,
+        blockers: [...new Set([...(params.state.blockers ?? []), params.blocker])],
+        obligations: params.state.obligations.map((item) => item.id === params.obligationId
+            ? {
+                ...item,
+                state: "blocked",
+                reason: params.blocker,
+            }
+            : item),
+    };
+}
+//# sourceMappingURL=envelope.js.map

package/dist/audit/cli/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../src/audit/cli/envelope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,8BAA8B,GAG/B,MAAM,kCAAkC,CAAC;AAE1C,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE,MAAM,UAAU,aAAa,CAAC,MAS7B;IACC,OAAO;QACL,gBAAgB,EAAE,8BAA8B;QAChD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAclC;IACC,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,gBAAgB;QACxC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,aAAa,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,OAAO;KACR,CAAC,EACF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,OAAO,YAAY,KAAK,8BAA8B;QACpD,CAAC,CAAC,wFAAwF;QAC1F,CAAC,CAAC,qHAAqH;YACrH,+JAA+J,CAAC;AACtK,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,EAAiB;IACrD,OAAO,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,2BAA2B,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,gBAA+B;IACrE,OAAO,gBAAgB,KAAK,IAAI,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAKtC;IACC,OAAO;QACL,GAAG,MAAM,CAAC,KAAK;QACf,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa;QAC5D,eAAe,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe;QACpE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjD,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY;YAC7B,CAAC,CAAC;gBACE,GAAG,IAAI;gBACP,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,MAAM,CAAC,OAAO;aACvB;YACH,CAAC,CAAC,IAAI,CACT;KACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/explainTaskCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdExplainTask(argv: string[]): Promise<void>;
+//# sourceMappingURL=explainTaskCommand.d.ts.map

package/dist/audit/cli/explainTaskCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explainTaskCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/explainTaskCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgDlE"}

package/dist/audit/cli/explainTaskCommand.js

@@ -0,0 +1,34 @@
+import { loadArtifactBundle } from "../io/artifacts.js";
+import { getArtifactsDir, getFlag } from "./args.js";
+export async function cmdExplainTask(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const taskId = getFlag(argv, "--task-id") ?? argv[3];
+    if (!taskId) {
+        throw new Error("explain-task requires <task_id> or --task-id <task_id>");
+    }
+    const bundle = await loadArtifactBundle(artifactsDir);
+    const task = [...(bundle.audit_tasks ?? []), ...(bundle.requeue_tasks ?? [])].find((item) => item.task_id === taskId);
+    if (!task) {
+        throw new Error(`Unknown task_id '${taskId}'.`);
+    }
+    const coverageEntries = (bundle.coverage_matrix?.files ?? [])
+        .filter((file) => task.file_paths.includes(file.path))
+        .sort((a, b) => a.path.localeCompare(b.path));
+    const matchingResults = (bundle.audit_results ?? []).filter((result) => result.task_id === task.task_id);
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        task_id: task.task_id,
+        task,
+        file_count: task.file_paths.length,
+        coverage_entries: coverageEntries,
+        pending_coverage: coverageEntries
+            .map((file) => ({
+            path: file.path,
+            missing_lenses: file.required_lenses.filter((lens) => !file.completed_lenses.includes(lens)),
+        }))
+            .filter((file) => file.missing_lenses.length > 0),
+        matching_result_count: matchingResults.length,
+        matching_finding_ids: matchingResults.flatMap((result) => result.findings.map((finding) => finding.id)),
+    }, null, 2));
+}
+//# sourceMappingURL=explainTaskCommand.js.map

package/dist/audit/cli/explainTaskCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explainTaskCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/explainTaskCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,IAAI,GACR,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAClC,CAAC;IACJ,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC;SAC1D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CACzD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAC5C,CAAC;IAEF,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;QAClC,gBAAgB,EAAE,eAAe;QACjC,gBAAgB,EAAE,eAAe;aAC9B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAChD;SACF,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QACnD,qBAAqB,EAAE,eAAe,CAAC,MAAM;QAC7C,oBAAoB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAC7C;KACF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/importExternalAnalyzerCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdImportExternalAnalyzer(argv: string[]): Promise<void>;
+//# sourceMappingURL=importExternalAnalyzerCommand.d.ts.map

package/dist/audit/cli/importExternalAnalyzerCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importExternalAnalyzerCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/importExternalAnalyzerCommand.ts"],"names":[],"mappings":"AAKA,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC7E"}

package/dist/audit/cli/importExternalAnalyzerCommand.js

@@ -0,0 +1,25 @@
+import { readJsonFile } from "audit-tools/shared";
+import { runAuditStep } from "./auditStep.js";
+import { getArtifactsDir, getFlag, getRootDir } from "./args.js";
+export async function cmdImportExternalAnalyzer(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const sourcePath = getFlag(argv, "--external-analyzer-results", `${artifactsDir}/external_analyzer_results.json`);
+    const externalAnalyzerResults = await readJsonFile(sourcePath);
+    if (!Array.isArray(externalAnalyzerResults.results)) {
+        throw new Error(`External analyzer results at '${sourcePath}' must have a 'results' array, but the field is absent or not an array.`);
+    }
+    // Pass the already-parsed data so runAuditStep does not read the file a second time.
+    const result = await runAuditStep({
+        root: getRootDir(argv),
+        artifactsDir,
+        preferredExecutor: "external_analyzer_import_executor",
+        externalAnalyzerData: externalAnalyzerResults,
+    });
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        tool: externalAnalyzerResults.tool,
+        imported_count: externalAnalyzerResults.results.length,
+        selected_executor: result.selected_executor,
+    }, null, 2));
+}
+//# sourceMappingURL=importExternalAnalyzerCommand.js.map

package/dist/audit/cli/importExternalAnalyzerCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"importExternalAnalyzerCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/importExternalAnalyzerCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAc;IAC5D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CACxB,IAAI,EACJ,6BAA6B,EAC7B,GAAG,YAAY,iCAAiC,CACvC,CAAC;IACZ,MAAM,uBAAuB,GAC3B,MAAM,YAAY,CAA0B,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,iCAAiC,UAAU,yEAAyE,CACrH,CAAC;IACJ,CAAC;IACD,qFAAqF;IACrF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,YAAY;QACZ,iBAAiB,EAAE,mCAAmC;QACtD,oBAAoB,EAAE,uBAAuB;KAC9C,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,IAAI,EAAE,uBAAuB,CAAC,IAAI;QAClC,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,MAAM;QACtD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/ingestResultsCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdIngestResults(argv: string[]): Promise<void>;
+//# sourceMappingURL=ingestResultsCommand.d.ts.map

package/dist/audit/cli/ingestResultsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingestResultsCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/ingestResultsCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDpE"}

package/dist/audit/cli/ingestResultsCommand.js

@@ -0,0 +1,42 @@
+import { runAuditStep, ingestBatchAuditResults } from "./auditStep.js";
+import { getArtifactsDir, getBatchResultsDir, getFlag, getRootDir, hasFlag } from "./args.js";
+export async function cmdIngestResults(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const batchResultsDir = getBatchResultsDir(argv);
+    // Explicitly check both directions of the mutual-exclusion so the guard does
+    // not silently short-circuit when --batch-results is absent (COR-d40e2710).
+    // Detect --results by TOKEN presence (hasFlag) rather than a resolved value,
+    // so a value-less `--batch-results <dir> --results` still trips the guard
+    // instead of silently running the batch path (COR-79283e3b).
+    const hasBatchResults = batchResultsDir !== undefined;
+    const hasSingleResults = hasFlag(argv, "--results");
+    if (hasBatchResults && hasSingleResults) {
+        throw new Error("Use either --results <file> or --batch-results <dir>, not both.");
+    }
+    if (batchResultsDir) {
+        const result = await ingestBatchAuditResults({
+            root: getRootDir(argv),
+            artifactsDir,
+            batchDir: batchResultsDir,
+        });
+        console.log(JSON.stringify({
+            artifacts_dir: artifactsDir,
+            imported_files: result.batchFiles,
+            selected_executor: result.selected_executor,
+            progress_summary: result.progress_summary,
+        }, null, 2));
+        return;
+    }
+    const result = await runAuditStep({
+        root: getRootDir(argv),
+        artifactsDir,
+        preferredExecutor: "result_ingestion_executor",
+        auditResultsPath: getFlag(argv, "--results"),
+    });
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        selected_executor: result.selected_executor,
+        progress_summary: result.progress_summary,
+    }, null, 2));
+}
+//# sourceMappingURL=ingestResultsCommand.js.map

package/dist/audit/cli/ingestResultsCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingestResultsCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/ingestResultsCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc;IACnD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACjD,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,eAAe,GAAG,eAAe,KAAK,SAAS,CAAC;IACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,eAAe,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;YAC3C,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;YACtB,YAAY;YACZ,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,aAAa,EAAE,YAAY;YAC3B,cAAc,EAAE,MAAM,CAAC,UAAU;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,YAAY;QACZ,iBAAiB,EAAE,2BAA2B;QAC9C,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/intakeCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdIntake(argv: string[]): Promise<void>;
+//# sourceMappingURL=intakeCommand.d.ts.map

package/dist/audit/cli/intakeCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intakeCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/intakeCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB7D"}

package/dist/audit/cli/intakeCommand.js

@@ -0,0 +1,18 @@
+import { runAuditStep } from "./auditStep.js";
+import { getArtifactsDir, getRootDir, warnIfNotGitRepo } from "./args.js";
+export async function cmdIntake(argv) {
+    const root = getRootDir(argv);
+    warnIfNotGitRepo(root);
+    const artifactsDir = getArtifactsDir(argv);
+    const result = await runAuditStep({
+        root,
+        artifactsDir,
+        preferredExecutor: "intake_executor",
+    });
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        selected_executor: result.selected_executor,
+        progress_summary: result.progress_summary,
+    }, null, 2));
+}
+//# sourceMappingURL=intakeCommand.js.map

package/dist/audit/cli/intakeCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intakeCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/intakeCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI;QACJ,YAAY;QACZ,iBAAiB,EAAE,iBAAiB;KACrC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/lineIndex.d.ts

@@ -0,0 +1,5 @@
+import type { AuditTask, RepoManifest } from "../types.js";
+export declare function buildLineIndex(root: string, repoManifest: RepoManifest): Promise<Record<string, number>>;
+export declare function buildLineIndexForPaths(root: string, paths: string[]): Promise<Record<string, number>>;
+export declare function addFileLineCountHints(root: string, tasks: AuditTask[]): Promise<AuditTask[]>;
+//# sourceMappingURL=lineIndex.d.ts.map

package/dist/audit/cli/lineIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineIndex.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/lineIndex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3D,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgCjC;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA6BjC;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,EAAE,GACjB,OAAO,CAAC,SAAS,EAAE,CAAC,CAWtB"}

package/dist/audit/cli/lineIndex.js

@@ -0,0 +1,70 @@
+import { resolve } from "node:path";
+import { countLines } from "./args.js";
+import { isFileMissingError } from "audit-tools/shared";
+// Line-count helpers extracted from cli.ts. Pure functions over the repo
+// manifest / task file paths — used to annotate audit tasks with per-file line
+// counts and to build line indexes for prompt rendering.
+// How many files to read concurrently when counting lines, bounding open file
+// descriptors so a large repo manifest does not exhaust the fd limit.
+const LINE_COUNT_BATCH_SIZE = 25;
+export async function buildLineIndex(root, repoManifest) {
+    const entries = [];
+    let failureCount = 0;
+    for (let i = 0; i < repoManifest.files.length; i += LINE_COUNT_BATCH_SIZE) {
+        const batch = repoManifest.files.slice(i, i + LINE_COUNT_BATCH_SIZE);
+        const results = await Promise.all(batch.map(async (file) => {
+            try {
+                return [
+                    file.path,
+                    await countLines(resolve(root, file.path)),
+                ];
+            }
+            catch (err) {
+                // Distinguish file-not-found from other IO errors so callers are not
+                // misled into treating a missing file as an empty one (COR-c868f53d).
+                const kind = isFileMissingError(err) ? "file not found" : "IO error";
+                process.stderr.write(`[lineIndex] ${kind} counting lines for '${file.path}': ${err instanceof Error ? err.message : String(err)}\n`);
+                failureCount++;
+                return [file.path, 0];
+            }
+        }));
+        entries.push(...results);
+    }
+    if (failureCount > 0) {
+        process.stderr.write(`[lineIndex] ${failureCount} of ${repoManifest.files.length} file(s) failed line counting; those entries default to 0.\n`);
+    }
+    return Object.fromEntries(entries);
+}
+export async function buildLineIndexForPaths(root, paths) {
+    const uniquePaths = [...new Set(paths)].sort();
+    const entries = [];
+    let failureCount = 0;
+    const batchSize = LINE_COUNT_BATCH_SIZE;
+    for (let i = 0; i < uniquePaths.length; i += batchSize) {
+        const batch = uniquePaths.slice(i, i + batchSize);
+        const results = await Promise.all(batch.map(async (path) => {
+            try {
+                return [path, await countLines(resolve(root, path))];
+            }
+            catch (err) {
+                const kind = isFileMissingError(err) ? "file not found" : "IO error";
+                process.stderr.write(`[lineIndex] ${kind} counting lines for '${path}': ${err instanceof Error ? err.message : String(err)}\n`);
+                failureCount++;
+                return [path, 0];
+            }
+        }));
+        entries.push(...results);
+    }
+    if (failureCount > 0) {
+        process.stderr.write(`[lineIndex] ${failureCount} of ${uniquePaths.length} file(s) failed line counting; those entries default to 0.\n`);
+    }
+    return Object.fromEntries(entries);
+}
+export async function addFileLineCountHints(root, tasks) {
+    const lineIndex = await buildLineIndexForPaths(root, tasks.flatMap((task) => task.file_paths));
+    return tasks.map((task) => ({
+        ...task,
+        file_line_counts: Object.fromEntries(task.file_paths.map((path) => [path, lineIndex[path] ?? 0])),
+    }));
+}
+//# sourceMappingURL=lineIndex.js.map

package/dist/audit/cli/lineIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineIndex.js","sourceRoot":"","sources":["../../../src/audit/cli/lineIndex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,yEAAyE;AACzE,+EAA+E;AAC/E,yDAAyD;AAEzD,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,YAA0B;IAE1B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,qBAAqB,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,OAAO;oBACL,IAAI,CAAC,IAAI;oBACT,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAClC,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,sEAAsE;gBACtE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,IAAI,wBAAwB,IAAI,CAAC,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/G,CAAC;gBACF,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,YAAY,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,8DAA8D,CAC1H,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,KAAe;IAEf,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAU,CAAC;YAChE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,IAAI,wBAAwB,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1G,CAAC;gBACF,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,YAAY,OAAO,WAAW,CAAC,MAAM,8DAA8D,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,KAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAC5C,IAAI,EACJ,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CACzC,CAAC;IACF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,IAAI;QACP,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5D;KACF,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/audit/cli/mergeAndIngestCommand.d.ts

@@ -0,0 +1,46 @@
+import type { AuditResult } from "../types.js";
+/**
+ * Grounding pass (S7): re-verify each finding against disk before it is admitted
+ * as fact. Tier-1 (quote-and-verify) re-reads the cited verbatim span and
+ * content-matches it; tier-2 (executable anchor) runs the finding's read-only
+ * behavior-check command. The combined verdict annotates `finding.grounding`: a
+ * finding that does not re-verify is `ungrounded` (surfaced, not confirmed), and
+ * one a tool-anchor actively DISPROVED is `refuted` (a distinct status that
+ * synthesis quarantines-EXCLUDES from the admitted contract — B4). Neither is
+ * silently dropped here nor silently admitted as confirmed. The confirmed bit is always the tool's
+ * re-check, never the model's word. Advisory metadata: this does not fail a
+ * result, so a weaker auditor's confident-but-fake finding is flagged for review
+ * rather than merged as fact. Mutates the findings in place and returns the
+ * ungrounded references.
+ */
+export declare function groundPassingFindings(repoRoot: string, passing: AuditResult[]): Promise<Array<{
+    task_id: string;
+    finding_id: string;
+    path: string;
+}>>;
+/** Outcome of an in-process merge-and-ingest, mirroring the CLI's stdout payload. */
+export interface MergeAndIngestResult {
+    /** The summary object the CLI prints as its sole stdout JSON payload. */
+    summary: Record<string, unknown>;
+    /** True when at least one dispatched task result was missing or invalid. */
+    has_failures: boolean;
+}
+/**
+ * Ingest a dispatched run's per-packet AuditResult files into the cumulative
+ * audit store. The callable core of `cmdMergeAndIngest` (the CLI is a thin argv →
+ * call → stdout/exit-code wrapper). The in-process audit rolling driver
+ * (A8(a) `driveRollingAuditDispatch`) calls this directly once it has driven every
+ * packet through the configured provider, the symmetric counterpart of remediate's
+ * callable `mergeImplementResults`. Resolves with the summary payload + a failure
+ * flag; never writes stdout or mutates `process.exitCode` itself.
+ */
+export declare function mergeAndIngest(params: {
+    runId: string;
+    artifactsDir: string;
+}): Promise<MergeAndIngestResult>;
+/**
+ * CLI wrapper for `merge-and-ingest`: parse argv, run the callable core, emit the
+ * summary as the sole stdout JSON payload, and set the exit code on failure.
+ */
+export declare function cmdMergeAndIngest(argv: string[]): Promise<void>;
+//# sourceMappingURL=mergeAndIngestCommand.d.ts.map

package/dist/audit/cli/mergeAndIngestCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeAndIngestCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/mergeAndIngestCommand.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,aAAa,CAAC;AA6T1D;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,EAAE,GACrB,OAAO,CAAC,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA2CvE;AAED,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4EAA4E;IAC5E,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsOhC;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAUrE"}