audit-tools 0.28.0

package/dist/shared/types/lens.js

@@ -0,0 +1,80 @@
+// Canonical audit-lens vocabulary and the runtime validation Sets derived from
+// it. Single source of truth so the auditor's validators, the remediator, and
+// any future consumer all agree on the valid lens / severity / confidence
+// values — previously each package hand-copied these lists, which drifted (a
+// copy omitting "observability" once caused it to be wrongly rejected).
+//
+// The `Lens` type, `LENSES` array, and `VALID_LENSES` Set are all derived from
+// the same literal tuple, so adding a lens in one place updates all three.
+import { z } from "zod";
+import { FindingSeveritySchema, FindingConfidenceSchema } from "./finding.js";
+/** The canonical zod enum every other lens artifact derives from. */
+export const LensSchema = z.enum([
+    "correctness",
+    "architecture",
+    "maintainability",
+    "security",
+    "reliability",
+    "performance",
+    "data_integrity",
+    "tests",
+    "operability",
+    "config_deployment",
+    "observability",
+]);
+/** The canonical ordered tuple of lenses. */
+export const LENSES = LensSchema.options;
+/** Runtime membership test set for {@link Lens}. */
+export const VALID_LENSES = new Set(LENSES);
+export function isLens(value) {
+    return typeof value === "string" && VALID_LENSES.has(value);
+}
+/** The canonical ordered tuple of finding severities. */
+export const SEVERITIES = FindingSeveritySchema.options;
+/** Runtime membership test set for {@link FindingSeverity}. */
+export const VALID_SEVERITIES = new Set(SEVERITIES);
+/** The canonical ordered tuple of finding confidence levels. */
+export const CONFIDENCES = FindingConfidenceSchema.options;
+/** Runtime membership test set for {@link FindingConfidence}. */
+export const VALID_CONFIDENCES = new Set(CONFIDENCES);
+// ── Severity / confidence ranking ─────────────────────────────────────────────
+// Single source of truth for "how severe / how confident is this, numerically".
+// Both orchestrators previously hand-copied a `SEVERITY_RANK`/`CONFIDENCE_RANK`
+// table (audit findingRanks.ts, selectiveDeepening, dispatch, crossLensDedup,
+// intake, agentReflections), and the copies drifted: some were 0-based, some
+// 1-based, and intake's ordering was inverted. These functions are DERIVED from
+// the canonical ordered tuples above so a new severity/confidence level updates
+// every consumer at once and the scale can never diverge.
+//
+// Convention: higher rank == more severe / more confident. The most-severe
+// level (`critical`) gets the largest rank (= SEVERITIES.length, i.e. 5) and the
+// least-severe (`info`) gets 1; confidence ranks high=3, medium=2, low=1. The
+// 1-based scale is load-bearing — e.g. remediate dispatch tiering compares the
+// rank against literal thresholds (critical === 5, low <= 2).
+/**
+ * Numeric severity rank: `critical`=5, `high`=4, `medium`=3, `low`=2, `info`=1.
+ * Higher == more severe. Derived from {@link SEVERITIES} so it never drifts.
+ */
+export function severityRank(severity) {
+    // SEVERITIES is ordered most-severe-first, so invert the index to a 1-based
+    // "higher is worse" scale.
+    return SEVERITIES.length - SEVERITIES.indexOf(severity);
+}
+/**
+ * Numeric confidence rank: `high`=3, `medium`=2, `low`=1. Higher == more
+ * confident. Derived from {@link CONFIDENCES} so it never drifts.
+ */
+export function confidenceRank(confidence) {
+    return CONFIDENCES.length - CONFIDENCES.indexOf(confidence);
+}
+/**
+ * Comparator that orders severities **most-severe-first** (`critical` before
+ * `info`). Returns a negative number when `a` is more severe than `b`, so
+ * `findings.sort((x, y) => severityCompare(x.severity, y.severity))` puts the
+ * most-severe finding first. Single-sources the "critical-first" sort direction
+ * that intake previously open-coded with an inverted ad-hoc table.
+ */
+export function severityCompare(a, b) {
+    return severityRank(b) - severityRank(a);
+}
+//# sourceMappingURL=lens.js.map

package/dist/shared/types/lens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lens.js","sourceRoot":"","sources":["../../../src/shared/types/lens.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE9E,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,UAAU;IACV,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,OAAO;IACP,aAAa;IACb,mBAAmB;IACnB,eAAe;CAChB,CAAC,CAAC;AAEH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;AAKzC,oDAAoD;AACpD,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;AAEjE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAA+B,qBAAqB,CAAC,OAAO,CAAC;AAEpF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;AAEzE,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAiC,uBAAuB,CAAC,OAAO,CAAC;AAEzF,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;AAE3E,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,8EAA8E;AAC9E,+EAA+E;AAC/E,8DAA8D;AAE9D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAyB;IACpD,4EAA4E;IAC5E,2BAA2B;IAC3B,OAAO,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,UAA6B;IAC1D,OAAO,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,CAAkB,EAAE,CAAkB;IACpE,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/shared/types/obligationLedger.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Obligation ledger construction utilities with cycle detection.
+ *
+ * INV-shared-core-07: ObligationEntry.depends_on must be cycle-checked at
+ * construction time — not deferred to scheduling. This module provides
+ * `buildObligationLedger()` which validates the DAG and throws immediately
+ * if a dependency cycle is present.
+ */
+import type { ObligationEntry, ObligationLedger } from "./contractPipeline.js";
+/**
+ * Detect cycles in an obligation dependency graph using DFS with three-color
+ * marking (white/gray/black). Returns the IDs of obligations forming the first
+ * cycle detected, or null when the graph is acyclic.
+ *
+ * INV-shared-core-07: called at construction time so a cycle is caught early
+ * rather than causing an infinite loop or confusing error at scheduling time.
+ */
+export declare function detectObligationCycle(obligations: readonly ObligationEntry[]): string[] | null;
+export interface BuildObligationLedgerOptions {
+    goal_id: string;
+    obligations: ObligationEntry[];
+    created_at?: string;
+}
+/**
+ * Build a validated ObligationLedger.
+ *
+ * Validates the dependency graph for cycles at construction time and throws
+ * a descriptive error if any cycle is detected. This enforces
+ * INV-shared-core-07: callers cannot produce a ledger with a cyclic
+ * depends_on graph — the error is immediate, not deferred to scheduling.
+ *
+ * @throws {Error} when a depends_on cycle is detected among the obligations.
+ */
+export declare function buildObligationLedger(options: BuildObligationLedgerOptions): ObligationLedger;
+//# sourceMappingURL=obligationLedger.d.ts.map

package/dist/shared/types/obligationLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obligationLedger.d.ts","sourceRoot":"","sources":["../../../src/shared/types/obligationLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAK/B;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,SAAS,eAAe,EAAE,GACtC,MAAM,EAAE,GAAG,IAAI,CAmCjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,gBAAgB,CAgBlB"}

package/dist/shared/types/obligationLedger.js

@@ -0,0 +1,77 @@
+/**
+ * Obligation ledger construction utilities with cycle detection.
+ *
+ * INV-shared-core-07: ObligationEntry.depends_on must be cycle-checked at
+ * construction time — not deferred to scheduling. This module provides
+ * `buildObligationLedger()` which validates the DAG and throws immediately
+ * if a dependency cycle is present.
+ */
+import { CONTRACT_PIPELINE_OBLIGATION_LEDGER_VERSION, } from "./contractPipeline.js";
+/**
+ * Detect cycles in an obligation dependency graph using DFS with three-color
+ * marking (white/gray/black). Returns the IDs of obligations forming the first
+ * cycle detected, or null when the graph is acyclic.
+ *
+ * INV-shared-core-07: called at construction time so a cycle is caught early
+ * rather than causing an infinite loop or confusing error at scheduling time.
+ */
+export function detectObligationCycle(obligations) {
+    const idSet = new Set(obligations.map((o) => o.id));
+    const depMap = new Map();
+    for (const o of obligations) {
+        depMap.set(o.id, o.depends_on.filter((dep) => idSet.has(dep)));
+    }
+    // Three-color DFS: 0 = unvisited, 1 = in-stack (gray), 2 = done (black).
+    const color = new Map();
+    const path = [];
+    function dfs(id) {
+        const c = color.get(id) ?? 0;
+        if (c === 2)
+            return null; // already done
+        if (c === 1) {
+            // Cycle detected: return the cycle slice.
+            const cycleStart = path.indexOf(id);
+            return path.slice(cycleStart).concat(id);
+        }
+        color.set(id, 1);
+        path.push(id);
+        for (const dep of depMap.get(id) ?? []) {
+            const cycle = dfs(dep);
+            if (cycle)
+                return cycle;
+        }
+        path.pop();
+        color.set(id, 2);
+        return null;
+    }
+    for (const o of obligations) {
+        const cycle = dfs(o.id);
+        if (cycle)
+            return cycle;
+    }
+    return null;
+}
+/**
+ * Build a validated ObligationLedger.
+ *
+ * Validates the dependency graph for cycles at construction time and throws
+ * a descriptive error if any cycle is detected. This enforces
+ * INV-shared-core-07: callers cannot produce a ledger with a cyclic
+ * depends_on graph — the error is immediate, not deferred to scheduling.
+ *
+ * @throws {Error} when a depends_on cycle is detected among the obligations.
+ */
+export function buildObligationLedger(options) {
+    const { goal_id, obligations, created_at } = options;
+    const cycle = detectObligationCycle(obligations);
+    if (cycle) {
+        throw new Error(`ObligationLedger construction rejected: dependency cycle detected among obligations: ${cycle.join(" → ")}`);
+    }
+    return {
+        contract_version: CONTRACT_PIPELINE_OBLIGATION_LEDGER_VERSION,
+        goal_id,
+        obligations,
+        created_at: created_at ?? new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=obligationLedger.js.map

package/dist/shared/types/obligationLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obligationLedger.js","sourceRoot":"","sources":["../../../src/shared/types/obligationLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EACL,2CAA2C,GAC5C,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,yEAAyE;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,SAAS,GAAG,CAAC,EAAU;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,eAAe;QACzC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,0CAA0C;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAqC;IAErC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAErD,MAAM,KAAK,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,wFAAwF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC5G,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,2CAA2C;QAC7D,OAAO;QACP,WAAW;QACX,UAAU,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnD,CAAC;AACJ,CAAC"}

package/dist/shared/types/providerConfirmation.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Versioned seam contract for Gate-0/Gate-1 Provider Confirmation (N-X06).
+ *
+ * Pins the output shape of the provider confirmation step so that
+ * consumers (audit-code, remediate-code) can be validated against a single,
+ * version-stamped result interface.
+ *
+ * The implementing functions live in src/providers/providerConfirmation.ts.
+ * This file ONLY declares the contract types and the version constant.
+ */
+import type { ResolvedProviderName } from "./sessionConfig.js";
+import type { CapabilityTier } from "../providers/providerConfirmation.js";
+/**
+ * Version string for the ProviderConfirmationResult contract.
+ * Increment when any breaking interface change lands.
+ */
+export declare const PROVIDER_CONFIRMATION_RESULT_VERSION: "1.0.0";
+/** One entry in the confirmed provider pool. */
+export interface ConfirmedPoolEntry {
+    /** Canonical provider name. */
+    name: ResolvedProviderName;
+    /** Capability tier assessed at discovery time. */
+    capability_tier: CapabilityTier;
+    /**
+     * Whether this provider was explicitly excluded from the pool by the user
+     * (or by self-spawn guard). Excluded entries are recorded but not dispatched.
+     */
+    excluded: boolean;
+    /** Optional reason for exclusion or detection restriction. */
+    reason?: string;
+}
+/**
+ * Output of Gate-0 / Gate-1 provider confirmation.
+ *
+ * session_level: true because the pool applies to the entire audit run,
+ * not to individual dispatch waves.
+ */
+export interface ProviderConfirmationResult {
+    /** Schema version — must equal PROVIDER_CONFIRMATION_RESULT_VERSION. */
+    schema_version: typeof PROVIDER_CONFIRMATION_RESULT_VERSION;
+    /** ISO-8601 timestamp of when the pool was confirmed. */
+    confirmed_at: string;
+    /** All discovered (and any manually added) providers, with exclusion flag. */
+    provider_pool: ConfirmedPoolEntry[];
+    /**
+     * True: the confirmation is session-level and applies to the whole run.
+     * False would mean per-step confirmation (not currently used).
+     */
+    session_level: boolean;
+}
+//# sourceMappingURL=providerConfirmation.d.ts.map

package/dist/shared/types/providerConfirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerConfirmation.d.ts","sourceRoot":"","sources":["../../../src/shared/types/providerConfirmation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAM3E;;;GAGG;AACH,eAAO,MAAM,oCAAoC,EAAG,OAAgB,CAAC;AAMrE,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,kDAAkD;IAClD,eAAe,EAAE,cAAc,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,wEAAwE;IACxE,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB"}

package/dist/shared/types/providerConfirmation.js

@@ -0,0 +1,19 @@
+/**
+ * Versioned seam contract for Gate-0/Gate-1 Provider Confirmation (N-X06).
+ *
+ * Pins the output shape of the provider confirmation step so that
+ * consumers (audit-code, remediate-code) can be validated against a single,
+ * version-stamped result interface.
+ *
+ * The implementing functions live in src/providers/providerConfirmation.ts.
+ * This file ONLY declares the contract types and the version constant.
+ */
+// ---------------------------------------------------------------------------
+// Version constant
+// ---------------------------------------------------------------------------
+/**
+ * Version string for the ProviderConfirmationResult contract.
+ * Increment when any breaking interface change lands.
+ */
+export const PROVIDER_CONFIRMATION_RESULT_VERSION = "1.0.0";
+//# sourceMappingURL=providerConfirmation.js.map

package/dist/shared/types/providerConfirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerConfirmation.js","sourceRoot":"","sources":["../../../src/shared/types/providerConfirmation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,OAAgB,CAAC"}

package/dist/shared/types/remediationOutcome.d.ts

@@ -0,0 +1,41 @@
+export type RemediationOutcomeStatus = "resolved" | "verified_no_change" | "inappropriate" | "ignored" | "blocked";
+export interface RemediationOutcome {
+    finding_id: string;
+    /** Audit lens the finding came from (free string in the wire contract). */
+    lens: string;
+    /** Distinct file extensions of the finding's affected files (e.g. [".ts"]). */
+    file_exts: string[];
+    outcome: RemediationOutcomeStatus;
+    /** How many times the item was sent back for rework before this outcome. */
+    rework_count: number;
+    /** The run's closing-action status (e.g. "success", "failed"). */
+    closing_status: string;
+    /** Human-readable explanation for non-success closing statuses. */
+    closing_status_reason?: string;
+    /**
+     * For non-resolved outcomes: the failure or rationale text (e.g. why a
+     * finding was deemed inappropriate, ignored, or blocked). Absent for
+     * `resolved` and `verified_no_change` outcomes.
+     */
+    reason?: string;
+    /** ISO-8601 timestamp when work on this item first left pending. */
+    started_at?: string;
+    /** ISO-8601 timestamp when the item reached its terminal status. */
+    completed_at?: string;
+    /** Milliseconds between completed_at and started_at when both are present. */
+    duration_ms?: number;
+}
+export interface RemediationOutcomesReport {
+    contract_version: string;
+    total: number;
+    by_outcome: Record<RemediationOutcomeStatus, number>;
+    by_lens: Record<string, Partial<Record<RemediationOutcomeStatus, number>>>;
+    /** Earliest item started_at across all outcomes. */
+    started_at?: string;
+    /** Latest item completed_at across all outcomes. */
+    completed_at?: string;
+    /** Milliseconds between aggregate completed_at and started_at. */
+    duration_ms?: number;
+    outcomes: RemediationOutcome[];
+}
+//# sourceMappingURL=remediationOutcome.d.ts.map

package/dist/shared/types/remediationOutcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediationOutcome.d.ts","sourceRoot":"","sources":["../../../src/shared/types/remediationOutcome.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,wBAAwB,GAChC,UAAU,GACV,oBAAoB,GACpB,eAAe,GACf,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,wBAAwB,CAAC;IAClC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC"}

package/dist/shared/types/remediationOutcome.js

@@ -0,0 +1,7 @@
+// Phase 7B — per-finding remediation outcome capture. The remediator emits one
+// of these per finding into `remediation-outcomes.json` at close time. This is
+// capture/surface only: it records what happened so a human (or a later
+// calibration pass) can see how findings of each lens / file type fared. The
+// auditor does not consume it automatically.
+export {};
+//# sourceMappingURL=remediationOutcome.js.map

package/dist/shared/types/remediationOutcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediationOutcome.js","sourceRoot":"","sources":["../../../src/shared/types/remediationOutcome.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,6EAA6E;AAC7E,6CAA6C"}

package/dist/shared/types/risk.d.ts

@@ -0,0 +1,52 @@
+import { z } from "zod";
+export declare const RiskItemSchema: z.ZodObject<{
+    unit_id: z.ZodString;
+    risk_score: z.ZodNumber;
+    signals: z.ZodArray<z.ZodString, "many">;
+    notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    unit_id: string;
+    risk_score: number;
+    signals: string[];
+    notes?: string[] | undefined;
+}, {
+    unit_id: string;
+    risk_score: number;
+    signals: string[];
+    notes?: string[] | undefined;
+}>;
+export type RiskItem = z.infer<typeof RiskItemSchema>;
+export declare const RiskRegisterSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        unit_id: z.ZodString;
+        risk_score: z.ZodNumber;
+        signals: z.ZodArray<z.ZodString, "many">;
+        notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        unit_id: string;
+        risk_score: number;
+        signals: string[];
+        notes?: string[] | undefined;
+    }, {
+        unit_id: string;
+        risk_score: number;
+        signals: string[];
+        notes?: string[] | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    items: {
+        unit_id: string;
+        risk_score: number;
+        signals: string[];
+        notes?: string[] | undefined;
+    }[];
+}, {
+    items: {
+        unit_id: string;
+        risk_score: number;
+        signals: string[];
+        notes?: string[] | undefined;
+    }[];
+}>;
+export type RiskRegister = z.infer<typeof RiskRegisterSchema>;
+//# sourceMappingURL=risk.d.ts.map

package/dist/shared/types/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/shared/types/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;EAShB,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/shared/types/risk.js

@@ -0,0 +1,17 @@
+import { z } from "zod";
+export const RiskItemSchema = z
+    .object({
+    unit_id: z.string(),
+    // Shared 0..10 audit-risk scale (planner-derived; builders cap additive
+    // scores at 10). The bound lives here so the contract is single-sourced.
+    risk_score: z.number().min(0).max(10),
+    signals: z.array(z.string()),
+    notes: z.array(z.string()).optional(),
+})
+    .strict();
+export const RiskRegisterSchema = z
+    .object({
+    items: z.array(RiskItemSchema),
+})
+    .strict();
+//# sourceMappingURL=risk.js.map

package/dist/shared/types/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/shared/types/risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,wEAAwE;IACxE,yEAAyE;IACzE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/shared/types/rollingDispatch.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Versioned seam contract for the Rolling Dispatch Engine (N-X06).
+ *
+ * This file pins the public interface of the rolling dispatch engine so that
+ * consumers (audit-code, remediate-code) and the shared implementation can be
+ * validated against a single, version-stamped contract.
+ *
+ * The implementing class lives in src/dispatch/rollingDispatch.ts.
+ * This file ONLY declares the contract types and the version constant.
+ */
+/**
+ * Version string for the RollingDispatchEngine contract.
+ * Increment when any breaking interface change lands.
+ */
+export declare const ROLLING_DISPATCH_ENGINE_VERSION: "1.0.0";
+/** A dispatchable unit of work (packet-type-agnostic contract). */
+export interface RollingDispatchEnginePacket<TPacket = unknown> {
+    /** Stable, unique identifier for this packet within a run. */
+    id: string;
+    /** Consumer-defined payload — never inspected by the engine. */
+    payload: TPacket;
+    /**
+     * Estimated token cost (input tokens) for this packet.
+     * Used for quota headroom checks; over-estimates are safe.
+     */
+    estimatedTokens: number;
+    /**
+     * Complexity score in [0, 1].
+     * 1 = highest complexity — routed to the most-capable pool first.
+     */
+    complexity: number;
+}
+/** Outcome returned after each packet completes. */
+export interface RollingDispatchEngineResult<TPacket = unknown> {
+    packet: RollingDispatchEnginePacket<TPacket>;
+    outcome: "success" | "rate_limited" | "timeout" | "error";
+    actualTokens?: number;
+    error?: unknown;
+}
+/**
+ * Core interface for the rolling dispatch engine.
+ *
+ * Fields correspond to the key lifecycle hooks described in the redesign spec
+ * (docs/audit-workflow-design.md §rolling_dispatch):
+ *
+ * - dispatchItems: enqueue packets for processing.
+ * - onResult:      callback invoked synchronously after each result.
+ * - livelockGuard: detects stalled dispatch (no net new capacity after N pauses).
+ * - consumerTerminal: hook called when the engine stops (complete or partial).
+ */
+export interface RollingDispatchEngineContract<TPacket = unknown> {
+    /** Enqueue packets; safe to call while the engine is running. */
+    dispatchItems: (packets: RollingDispatchEnginePacket<TPacket>[]) => void;
+    /** Per-result notification callback (synchronous). */
+    onResult: ((result: RollingDispatchEngineResult<TPacket>) => void) | undefined;
+    /** Livelock guard: max pauses with no net new capacity before the engine terminates. */
+    livelockGuard: number;
+    /** Terminal hook invoked with the final status when the engine stops. */
+    consumerTerminal: ((status: "complete" | "partial", results: RollingDispatchEngineResult<TPacket>[]) => void) | undefined;
+}
+//# sourceMappingURL=rollingDispatch.d.ts.map

package/dist/shared/types/rollingDispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollingDispatch.d.ts","sourceRoot":"","sources":["../../../src/shared/types/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAG,OAAgB,CAAC;AAMhE,mEAAmE;AACnE,MAAM,WAAW,2BAA2B,CAAC,OAAO,GAAG,OAAO;IAC5D,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,WAAW,2BAA2B,CAAC,OAAO,GAAG,OAAO;IAC5D,MAAM,EAAE,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,6BAA6B,CAAC,OAAO,GAAG,OAAO;IAC9D,iEAAiE;IACjE,aAAa,EAAE,CAAC,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;IACzE,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,2BAA2B,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC/E,wFAAwF;IACxF,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,gBAAgB,EACZ,CAAC,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,GAC3F,SAAS,CAAC;CACf"}

package/dist/shared/types/rollingDispatch.js

@@ -0,0 +1,19 @@
+/**
+ * Versioned seam contract for the Rolling Dispatch Engine (N-X06).
+ *
+ * This file pins the public interface of the rolling dispatch engine so that
+ * consumers (audit-code, remediate-code) and the shared implementation can be
+ * validated against a single, version-stamped contract.
+ *
+ * The implementing class lives in src/dispatch/rollingDispatch.ts.
+ * This file ONLY declares the contract types and the version constant.
+ */
+// ---------------------------------------------------------------------------
+// Version constant
+// ---------------------------------------------------------------------------
+/**
+ * Version string for the RollingDispatchEngine contract.
+ * Increment when any breaking interface change lands.
+ */
+export const ROLLING_DISPATCH_ENGINE_VERSION = "1.0.0";
+//# sourceMappingURL=rollingDispatch.js.map

package/dist/shared/types/rollingDispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollingDispatch.js","sourceRoot":"","sources":["../../../src/shared/types/rollingDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,OAAgB,CAAC"}

package/dist/shared/types/runLedger.d.ts

@@ -0,0 +1,18 @@
+export declare const RUN_LEDGER_STATUSES: readonly ["completed", "blocked", "failed", "no_progress"];
+export type RunLedgerStatus = (typeof RUN_LEDGER_STATUSES)[number];
+/** One persisted supervisor run entry, including the terminal worker outcome. */
+export interface RunLedgerEntry {
+    run_id: string;
+    provider: string;
+    obligation_id: string | null;
+    selected_executor: string | null;
+    status: RunLedgerStatus;
+    started_at: string;
+    ended_at: string;
+    result_path: string;
+}
+/** Append-only ledger used to explain how the audit advanced over time. */
+export interface RunLedger {
+    runs: RunLedgerEntry[];
+}
+//# sourceMappingURL=runLedger.d.ts.map

package/dist/shared/types/runLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runLedger.d.ts","sourceRoot":"","sources":["../../../src/shared/types/runLedger.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,4DAKtB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB"}

package/dist/shared/types/runLedger.js

@@ -0,0 +1,7 @@
+export const RUN_LEDGER_STATUSES = [
+    "completed",
+    "blocked",
+    "failed",
+    "no_progress",
+];
+//# sourceMappingURL=runLedger.js.map

package/dist/shared/types/runLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runLedger.js","sourceRoot":"","sources":["../../../src/shared/types/runLedger.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW;IACX,SAAS;IACT,QAAQ;IACR,aAAa;CACL,CAAC"}