audit-tools 0.28.0

package/dist/audit/cli/quotaCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotaCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/quotaCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,8BAA8B,EAC9B,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,mBAAmB,EAEnB,yBAAyB,EACzB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,aAA4B,CAAC;IACjC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mEAAmE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAClH,CAAC;QACF,aAAa,GAAG,EAAmB,CAAC;IACtC,CAAC;IACD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,+BAA+B,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACtF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAExE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IAEjG,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC,KAAK,CAAC,GAAmD,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;IACrE,MAAM,aAAa,GACjB,aAAa,CAAC,KAAK,EAAE,yBAAyB;QAC9C,iCAAiC,CAAC;IACpC,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;QAC1D,aAAa,EAAE,yBAAyB,CAAC,IAAI,CAAC;QAC9C,aAAa;KACd,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACxD,MAAM,mBAAmB,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpG,MAAM,qBAAqB,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAE/F,MAAM,YAAY,GAAG,YAAY,CAAC;QAChC,YAAY;QACZ,aAAa;QACb,SAAS;QACT,oBAAoB,EAAE,aAAa,CAAC,gBAAgB,IAAI,CAAC;QACzD,eAAe;QACf,oBAAoB;QACpB,mBAAmB;QACnB,gBAAgB,EAAE,qBAAqB;KACxC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,SAAS;QAChB,kBAAkB,EAAE,gBAAgB;QACpC,eAAe,EAAE,MAAM;QACvB,UAAU;QACV,MAAM;QACN,sBAAsB,EAAE,oBAAoB;QAC5C,YAAY,EAAE,eAAe;YAC3B,CAAC,CAAC;gBACE,oBAAoB,EAAE,yBAAyB,CAAC,eAAe,EAAE,aAAa,CAAC;gBAC/E,cAAc,EAAE,eAAe,CAAC,cAAc;gBAC9C,WAAW,EAAE,eAAe,CAAC,WAAW;aACzC;YACH,CAAC,CAAC,IAAI;QACR,qBAAqB,EAAE,mBAAmB;QAC1C,iBAAiB,EAAE,qBAAqB;QACxC,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,iBAAiB,EAAE;KACtC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/requeueCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdRequeue(argv: string[]): Promise<void>;
+//# sourceMappingURL=requeueCommand.d.ts.map

package/dist/audit/cli/requeueCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requeueCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/requeueCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAa9D"}

package/dist/audit/cli/requeueCommand.js

@@ -0,0 +1,11 @@
+import { loadArtifactBundle } from "../io/artifacts.js";
+import { getArtifactsDir } from "./args.js";
+export async function cmdRequeue(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const bundle = await loadArtifactBundle(artifactsDir);
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        task_count: bundle.requeue_tasks?.length ?? 0,
+    }, null, 2));
+}
+//# sourceMappingURL=requeueCommand.js.map

package/dist/audit/cli/requeueCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requeueCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/requeueCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC;KAC9C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/resynthesizeCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdResynthesize(argv: string[]): Promise<void>;
+//# sourceMappingURL=resynthesizeCommand.d.ts.map

package/dist/audit/cli/resynthesizeCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resynthesizeCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/resynthesizeCommand.ts"],"names":[],"mappings":"AAmBA,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8DnE"}

package/dist/audit/cli/resynthesizeCommand.js

@@ -0,0 +1,57 @@
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { getFlag, getRootDir } from "./args.js";
+import { normalizeExistingFindingsReport, renderAuditReportMarkdown, } from "../reporting/synthesis.js";
+import { AGENT_FEEDBACK_FILENAME, parseReflectionsNdjson, readOptionalTextFile, } from "audit-tools/shared";
+const AUDIT_TOOLS_DIR = ".audit-tools";
+const FINDINGS_FILENAME = "audit-findings.json";
+const REPORT_FILENAME = "audit-report.md";
+export async function cmdResynthesize(argv) {
+    const root = getRootDir(argv);
+    const auditToolsDir = join(root, AUDIT_TOOLS_DIR);
+    const defaultInput = join(auditToolsDir, FINDINGS_FILENAME);
+    // Use the shared flag parser, which rejects a flag-shaped next token so an
+    // invocation like `--input --root foo` falls back to the default instead of
+    // mis-resolving the input path to "--root" (COR-bc35a171).
+    const inputPath = getFlag(argv, "--input") ?? defaultInput;
+    if (!existsSync(inputPath)) {
+        console.error(`resynthesize: ${FINDINGS_FILENAME} not found at ${inputPath}. ` +
+            `Run the full audit first, or supply --input <path>.`);
+        process.exitCode = 1;
+        return;
+    }
+    const raw = await readFile(inputPath, "utf8");
+    let report;
+    try {
+        report = JSON.parse(raw);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        console.error(`resynthesize: could not parse ${inputPath}: ${msg}`);
+        process.exitCode = 1;
+        return;
+    }
+    const normalized = normalizeExistingFindingsReport(report);
+    // Best-effort: if the working artifacts dir (and its worker-appended
+    // feedback) still exists — e.g. an interrupted run being compiled by hand —
+    // carry the Process Feedback section into the re-rendered report.
+    const feedbackText = await readOptionalTextFile(join(auditToolsDir, "audit", AGENT_FEEDBACK_FILENAME));
+    const markdown = renderAuditReportMarkdown(normalized, {
+        reflections: feedbackText ? parseReflectionsNdjson(feedbackText) : undefined,
+    });
+    await mkdir(auditToolsDir, { recursive: true });
+    const outputFindingsPath = join(auditToolsDir, FINDINGS_FILENAME);
+    const outputReportPath = join(auditToolsDir, REPORT_FILENAME);
+    await writeFile(outputFindingsPath, JSON.stringify(normalized, null, 2), "utf8");
+    await writeFile(outputReportPath, markdown, "utf8");
+    console.log(JSON.stringify({
+        source: inputPath,
+        findings_output: outputFindingsPath,
+        report_output: outputReportPath,
+        finding_count: normalized.summary.finding_count,
+        work_block_count: normalized.summary.work_block_count,
+        contract_version: normalized.contract_version,
+    }, null, 2));
+}
+//# sourceMappingURL=resynthesizeCommand.js.map

package/dist/audit/cli/resynthesizeCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resynthesizeCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/resynthesizeCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,eAAe,GAAG,cAAc,CAAC;AACvC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC5D,2EAA2E;IAC3E,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,YAAY,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CACX,iBAAiB,iBAAiB,iBAAiB,SAAS,IAAI;YAC9D,qDAAqD,CACxD,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,CAAC,KAAK,CAAC,iCAAiC,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAC3D,qEAAqE;IACrE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAC7C,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,uBAAuB,CAAC,CACtD,CAAC;IACF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,UAAU,EAAE;QACrD,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAE9D,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,SAAS,CAAC,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEpD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,MAAM,EAAE,SAAS;QACjB,eAAe,EAAE,kBAAkB;QACnC,aAAa,EAAE,gBAAgB;QAC/B,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa;QAC/C,gBAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,gBAAgB;QACrD,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/reviewRun.d.ts

@@ -0,0 +1,57 @@
+import { type ArtifactBundle } from "../io/artifacts.js";
+import type { AuditState } from "../types/auditState.js";
+import type { WorkerTask } from "../types/workerSession.js";
+import { type ActiveReviewRun } from "../supervisor/operatorHandoff.js";
+export declare function activeReviewRunFromTask(artifactsDir: string, task: WorkerTask): ActiveReviewRun | null;
+export declare function loadCurrentActiveReviewRun(artifactsDir: string): Promise<ActiveReviewRun | null>;
+export declare function writeHandoffOnly(params: {
+    root: string;
+    artifactsDir: string;
+    bundle: ArtifactBundle;
+    audit_state: AuditState;
+    progress_summary: string;
+    providerName?: string | null;
+    isConfigError?: boolean;
+    activeReviewRun?: ActiveReviewRun;
+}): Promise<void>;
+/** Inputs needed to materialize a semantic-review run's on-disk artifacts. */
+export interface MaterializeReviewRunParams {
+    root: string;
+    artifactsDir: string;
+    bundle: ArtifactBundle;
+    obligationId: string | null;
+    selfCliPath: string;
+    timeoutMs: number;
+}
+/**
+ * Materialize a semantic-review run's on-disk artifacts — the deterministic run id
+ * (`buildRunId(obligationId, 1)`), pending-audit-tasks.json, task.json, and the
+ * worker prompt — and return the active review run. This is the pure run-setup the
+ * host-subagent path (`ensureSemanticReviewRun`) and the in-process rolling path
+ * (`driveRollingAuditDispatch`) share; it writes NO blocked state and NO handoff,
+ * so the in-process driver doesn't have to first stamp a misleading "manual review"
+ * block it immediately drives past.
+ */
+export declare function materializeReviewRun(params: MaterializeReviewRunParams): Promise<{
+    task: WorkerTask;
+    activeReviewRun: ActiveReviewRun;
+}>;
+export declare function ensureSemanticReviewRun(params: {
+    root: string;
+    artifactsDir: string;
+    bundle: ArtifactBundle;
+    state: AuditState;
+    obligationId: string | null;
+    selfCliPath: string;
+    timeoutMs: number;
+}): Promise<{
+    state: AuditState;
+    bundle: ArtifactBundle;
+    activeReviewRun: ActiveReviewRun;
+}>;
+export declare function persistConfigErrorHandoff(params: {
+    root: string;
+    artifactsDir: string;
+    progressSummary: string;
+}): Promise<void>;
+//# sourceMappingURL=reviewRun.d.ts.map

package/dist/audit/cli/reviewRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewRun.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/reviewRun.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAO5D,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAM1C,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,UAAU,GACf,eAAe,GAAG,IAAI,CAaxB;AAED,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAYjC;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED,8EAA8E;AAC9E,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,eAAe,EAAE,eAAe,CAAA;CAAE,CAAC,CAoDjE;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,eAAe,CAAA;CAAE,CAAC,CAwD3F;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB"}

package/dist/audit/cli/reviewRun.js

@@ -0,0 +1,180 @@
+import { join } from "node:path";
+import { isFileMissingError, readJsonFile, writeJsonFile } from "audit-tools/shared";
+import { loadArtifactBundle, writeCoreArtifacts, } from "../io/artifacts.js";
+import { deriveAuditState } from "../orchestrator/state.js";
+import { buildRunId, getRunPaths, writeWorkerTaskFiles, } from "../io/runArtifacts.js";
+import { renderWorkerPrompt } from "../prompts/renderWorkerPrompt.js";
+import { buildAuditCodeHandoff, writeAuditCodeHandoffArtifacts, } from "../supervisor/operatorHandoff.js";
+import { LOCAL_SUBPROCESS_PROVIDER_NAME } from "../providers/constants.js";
+import { addFileLineCountHints } from "./lineIndex.js";
+import { buildPendingAuditTasks } from "./dispatch.js";
+import { buildBlockedAuditState, buildManualReviewBlocker } from "./envelope.js";
+export function activeReviewRunFromTask(artifactsDir, task) {
+    if (task.preferred_executor !== "agent" || !task.audit_results_path) {
+        return null;
+    }
+    const paths = getRunPaths(artifactsDir, task.run_id);
+    return {
+        run_id: task.run_id,
+        task_path: paths.taskPath,
+        prompt_path: paths.promptPath,
+        pending_audit_tasks_path: task.pending_audit_tasks_path,
+        audit_results_path: task.audit_results_path,
+        worker_command: task.worker_command,
+    };
+}
+export async function loadCurrentActiveReviewRun(artifactsDir) {
+    try {
+        const task = await readJsonFile(join(artifactsDir, "dispatch", "current-task.json"));
+        return activeReviewRunFromTask(artifactsDir, task);
+    }
+    catch (error) {
+        if (isFileMissingError(error)) {
+            return null;
+        }
+        throw error;
+    }
+}
+export async function writeHandoffOnly(params) {
+    const handoff = buildAuditCodeHandoff({
+        root: params.root,
+        artifactsDir: params.artifactsDir,
+        state: params.audit_state,
+        bundle: params.bundle,
+        providerName: params.providerName,
+        progressSummary: params.progress_summary,
+        isConfigError: params.isConfigError,
+        activeReviewRun: params.activeReviewRun,
+    });
+    await writeAuditCodeHandoffArtifacts(handoff);
+}
+/**
+ * Materialize a semantic-review run's on-disk artifacts — the deterministic run id
+ * (`buildRunId(obligationId, 1)`), pending-audit-tasks.json, task.json, and the
+ * worker prompt — and return the active review run. This is the pure run-setup the
+ * host-subagent path (`ensureSemanticReviewRun`) and the in-process rolling path
+ * (`driveRollingAuditDispatch`) share; it writes NO blocked state and NO handoff,
+ * so the in-process driver doesn't have to first stamp a misleading "manual review"
+ * block it immediately drives past.
+ */
+export async function materializeReviewRun(params) {
+    const runId = buildRunId(params.obligationId, 1);
+    const paths = getRunPaths(params.artifactsDir, runId);
+    const pendingTasks = await addFileLineCountHints(params.root, buildPendingAuditTasks(params.bundle));
+    const pendingTasksPath = join(paths.runDir, "pending-audit-tasks.json");
+    const auditResultsPath = join(paths.runDir, "run-results.json");
+    const taskReadPaths = new Set();
+    for (const pt of pendingTasks) {
+        for (const fp of pt.file_paths)
+            taskReadPaths.add(fp);
+    }
+    const task = {
+        contract_version: "audit-code-worker/v1alpha1",
+        run_id: runId,
+        repo_root: params.root,
+        artifacts_dir: params.artifactsDir,
+        obligation_id: params.obligationId,
+        preferred_executor: "agent",
+        result_path: paths.resultPath,
+        worker_command: [
+            process.execPath,
+            params.selfCliPath,
+            "worker-run",
+            "--task",
+            paths.taskPath,
+        ],
+        audit_results_path: auditResultsPath,
+        pending_audit_tasks_path: pendingTasksPath,
+        timeout_ms: params.timeoutMs,
+        max_retries: 0,
+        access: {
+            read_paths: [...taskReadPaths],
+            write_paths: [auditResultsPath, paths.resultPath],
+        },
+    };
+    const prompt = renderWorkerPrompt(task);
+    await writeWorkerTaskFiles(task, prompt, paths, params.artifactsDir, pendingTasks);
+    await writeJsonFile(pendingTasksPath, pendingTasks);
+    const activeReviewRun = activeReviewRunFromTask(params.artifactsDir, task);
+    if (!activeReviewRun) {
+        throw new Error("Internal error: failed to materialize active review run.");
+    }
+    return { task, activeReviewRun };
+}
+export async function ensureSemanticReviewRun(params) {
+    const existingRun = await loadCurrentActiveReviewRun(params.artifactsDir);
+    if (existingRun) {
+        const blockedState = params.bundle.audit_state?.status === "blocked"
+            ? params.bundle.audit_state
+            : buildBlockedAuditState({
+                state: params.state,
+                obligationId: params.obligationId,
+                executor: "agent",
+                blocker: buildManualReviewBlocker(LOCAL_SUBPROCESS_PROVIDER_NAME),
+            });
+        const blockedBundle = { ...params.bundle, audit_state: blockedState };
+        await writeCoreArtifacts(params.artifactsDir, blockedBundle);
+        await writeHandoffOnly({
+            root: params.root,
+            artifactsDir: params.artifactsDir,
+            bundle: blockedBundle,
+            audit_state: blockedState,
+            progress_summary: buildManualReviewBlocker(LOCAL_SUBPROCESS_PROVIDER_NAME),
+            providerName: LOCAL_SUBPROCESS_PROVIDER_NAME,
+            activeReviewRun: existingRun,
+        });
+        return {
+            state: blockedState,
+            bundle: blockedBundle,
+            activeReviewRun: existingRun,
+        };
+    }
+    const blockedState = buildBlockedAuditState({
+        state: params.state,
+        obligationId: params.obligationId,
+        executor: "agent",
+        blocker: buildManualReviewBlocker(LOCAL_SUBPROCESS_PROVIDER_NAME),
+    });
+    await writeCoreArtifacts(params.artifactsDir, {
+        ...params.bundle,
+        audit_state: blockedState,
+    });
+    const { activeReviewRun } = await materializeReviewRun(params);
+    const blockedBundle = {
+        ...params.bundle,
+        audit_state: blockedState,
+    };
+    await writeHandoffOnly({
+        root: params.root,
+        artifactsDir: params.artifactsDir,
+        bundle: blockedBundle,
+        audit_state: blockedState,
+        progress_summary: buildManualReviewBlocker(LOCAL_SUBPROCESS_PROVIDER_NAME),
+        providerName: LOCAL_SUBPROCESS_PROVIDER_NAME,
+        activeReviewRun,
+    });
+    return { state: blockedState, bundle: blockedBundle, activeReviewRun };
+}
+export async function persistConfigErrorHandoff(params) {
+    const bundle = await loadArtifactBundle(params.artifactsDir);
+    const blockedState = buildBlockedAuditState({
+        state: bundle.audit_state ?? deriveAuditState(bundle),
+        obligationId: null,
+        executor: null,
+        blocker: params.progressSummary,
+    });
+    await writeCoreArtifacts(params.artifactsDir, {
+        ...bundle,
+        audit_state: blockedState,
+    });
+    const handoff = buildAuditCodeHandoff({
+        root: params.root,
+        artifactsDir: params.artifactsDir,
+        state: blockedState,
+        bundle: { ...bundle, audit_state: blockedState },
+        progressSummary: params.progressSummary,
+        isConfigError: true,
+    });
+    await writeAuditCodeHandoffArtifacts(handoff);
+}
+//# sourceMappingURL=reviewRun.js.map

package/dist/audit/cli/reviewRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewRun.js","sourceRoot":"","sources":["../../../src/audit/cli/reviewRun.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAEL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EACL,UAAU,EACV,WAAW,EACX,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,8BAA8B,GAE/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEjF,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,IAAgB;IAEhB,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,mBAAmB,CAAC,CACpD,CAAC;QACF,OAAO,uBAAuB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAStC;IACC,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,gBAAgB;QACxC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAYD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAC9C,MAAM,CAAC,IAAI,EACX,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CACtC,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,UAAU;YAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAe;QACvB,gBAAgB,EAAE,4BAA4B;QAC9C,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,kBAAkB,EAAE,OAAO;QAC3B,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,cAAc,EAAE;YACd,OAAO,CAAC,QAAQ;YAChB,MAAM,CAAC,WAAW;YAClB,YAAY;YACZ,QAAQ;YACR,KAAK,CAAC,QAAQ;SACf;QACD,kBAAkB,EAAE,gBAAgB;QACpC,wBAAwB,EAAE,gBAAgB;QAC1C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,CAAC;QACd,MAAM,EAAE;YACN,UAAU,EAAE,CAAC,GAAG,aAAa,CAAC;YAC9B,WAAW,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,UAAU,CAAC;SAClD;KACF,CAAC;IACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,oBAAoB,CACxB,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,CAAC,YAAY,EACnB,YAAY,CACb,CAAC;IACF,MAAM,aAAa,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IAEpD,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAQ7C;IACC,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1E,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAChB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS;YAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;YAC3B,CAAC,CAAC,sBAAsB,CAAC;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,wBAAwB,CAAC,8BAA8B,CAAC;aAClE,CAAC,CAAC;QACT,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QACtE,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,gBAAgB,CAAC;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,YAAY;YACzB,gBAAgB,EAAE,wBAAwB,CAAC,8BAA8B,CAAC;YAC1E,YAAY,EAAE,8BAA8B;YAC5C,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,aAAa;YACrB,eAAe,EAAE,WAAW;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,sBAAsB,CAAC;QAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,wBAAwB,CAAC,8BAA8B,CAAC;KAClE,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE;QAC5C,GAAG,MAAM,CAAC,MAAM;QAChB,WAAW,EAAE,YAAY;KAC1B,CAAC,CAAC;IAEH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM,CAAC,MAAM;QAChB,WAAW,EAAE,YAAY;KAC1B,CAAC;IACF,MAAM,gBAAgB,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,YAAY;QACzB,gBAAgB,EAAE,wBAAwB,CAAC,8BAA8B,CAAC;QAC1E,YAAY,EAAE,8BAA8B;QAC5C,eAAe;KAChB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAI/C;IACC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC;QAC1C,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACrD,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,MAAM,CAAC,eAAe;KAChC,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE;QAC5C,GAAG,MAAM;QACT,WAAW,EAAE,YAAY;KAC1B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;QAChD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/audit/cli/rollingAuditDispatch.d.ts

@@ -0,0 +1,119 @@
+/**
+ * In-process, provider-backed rolling audit dispatch (A8(a)).
+ *
+ * The symmetric counterpart of remediate's `driveRollingImplementDispatch`: when
+ * the rolling engine is enabled AND the operator explicitly configured a
+ * programmatic backend provider (openai-compatible / codex / opencode / …), the
+ * orchestrator drives the WHOLE semantic-review dispatch ITSELF — the configured
+ * provider is the per-packet worker — instead of emitting a host-subagent dispatch
+ * step. It reuses the SAME `prepareDispatchArtifacts` packetization + quota pool
+ * the host path uses, the SHARED `runRollingDispatch` engine, and the SAME
+ * deterministic `mergeAndIngest` ingestion, so the in-process and host-subagent
+ * paths stay behaviourally identical apart from who runs the worker.
+ *
+ * KEY DIFFERENCE FROM REMEDIATE: audit dispatch is READ-ONLY review (packet →
+ * AuditResult[]), not worktree edits. So there is NO per-node worktree, NO commit,
+ * NO cherry-pick merge — every worker is launched with `repoRoot` = the actual
+ * repo root and writes only its result file. The merge step is result ingestion,
+ * not a git merge.
+ */
+import { type SessionConfig, type ProviderSlot, type RollingDispatchPacket, type RollingDispatchResult, type FreshSessionProvider, type HostModelRosterEntry } from "audit-tools/shared";
+import type { ActiveReviewRun } from "../supervisor/operatorHandoff.js";
+import { type DispatchPlanEntry } from "./dispatch.js";
+import { type MergeAndIngestResult } from "./mergeAndIngestCommand.js";
+/**
+ * Whether session config names an EXPLICIT backend provider the orchestrator can
+ * drive in-process as the per-packet review worker. The mirror of remediate's
+ * `resolvesToInProcessDispatchProvider`.
+ */
+export declare function resolvesToInProcessDispatchProvider(sessionConfig: SessionConfig | null | undefined): boolean;
+/**
+ * Whether the in-process rolling engine drives audit's semantic-review dispatch.
+ * Mirrors remediate's `resolveRollingEngineEnabled` resolution order: explicit
+ * option → `sessionConfig.dispatch.rolling_engine` → `AUDIT_CODE_ROLLING_ENGINE`
+ * env → default true (the rolling drivers are validated end-to-end and are the
+ * default; the host-subagent dispatch step is the opt-OUT). Honoured only when an
+ * explicit in-process backend provider is also configured (the conversation host,
+ * which fans out its own subagents, keeps using the host-subagent dispatch step).
+ */
+export declare function resolveAuditRollingEngineEnabled(options: {
+    rollingEngine?: boolean;
+    sessionConfig?: SessionConfig | null;
+    env?: NodeJS.ProcessEnv;
+}): boolean;
+/** Per-packet provider dispatcher — packet → launched provider → AuditResult[] file. */
+export type AuditPacketDispatcher = (packet: RollingDispatchPacket<DispatchPlanEntry>, slot: ProviderSlot) => Promise<RollingDispatchResult<DispatchPlanEntry>>;
+/** The deterministic ingestion the driver folds worker results in with. */
+export type AuditResultIngestor = (params: {
+    runId: string;
+    artifactsDir: string;
+}) => Promise<MergeAndIngestResult>;
+/** Outcome of an in-process rolling audit dispatch pass. */
+export interface DriveRollingAuditDispatchResult {
+    /** complete = every packet dispatched; partial = some stranded (empty pool / livelock). */
+    status: "complete" | "partial";
+    /** Number of packets dispatched this pass (0 = nothing eligible). */
+    packet_count: number;
+    /** Packet ids stranded when status === "partial". */
+    stranded_ids: string[];
+    /**
+     * Result of the deterministic ingestion that folds the worker results in, or
+     * null when no packet produced a result (a full strand — there is nothing to
+     * ingest, and the recorded partial-completion terminal lets the pipeline proceed
+     * to synthesis on partial coverage without a spurious "all results missing" block).
+     */
+    ingest: MergeAndIngestResult | null;
+}
+/**
+ * Build the live, provider-backed per-packet dispatcher — the programmatic worker
+ * the rolling engine drives. It resolves the `FreshSessionProvider` the scheduler
+ * SELECTED for the slot (falling back to the configured provider) and launches it
+ * with the packet's self-contained review prompt, `repoRoot` = the actual repo
+ * (read-only review — no worktree), and the packet's result path. The worker reads
+ * the cited files and writes its `AuditResult[]` to the result file; the
+ * deterministic `mergeAndIngest` downstream is the authority on the contents.
+ */
+export declare function makeAuditProviderPacketDispatcher(params: {
+    root: string;
+    artifactsDir: string;
+    runId: string;
+    sessionConfig: SessionConfig;
+    timeoutMs: number;
+    /** Injectable for tests so the engine runs without spawning a real worker. */
+    createProvider?: (name: string | undefined, sessionConfig: SessionConfig) => FreshSessionProvider;
+}): AuditPacketDispatcher;
+/**
+ * Drive the semantic-review phase through the in-process rolling engine. Prepares
+ * the dispatch plan (the SAME quota-sized packetization the host path uses), runs
+ * each packet through the configured provider via the shared `runRollingDispatch`
+ * engine (quota-derived concurrency + transient-429 re-queue + cross-pool spill),
+ * records a partial-completion terminal when packets strand so the audit can still
+ * proceed to synthesis on partial coverage, and finally folds the worker results
+ * in through the deterministic `mergeAndIngest`.
+ *
+ * SAFETY: every worker is launched read-only against the real repo and writes only
+ * its result file; the deterministic ingestion validates each result and leaves
+ * unanswered tasks pending (re-dispatchable next pass) rather than fabricating
+ * coverage.
+ */
+export declare function driveRollingAuditDispatch(params: {
+    root: string;
+    artifactsDir: string;
+    activeReviewRun: ActiveReviewRun;
+    sessionConfig: SessionConfig;
+    timeoutMs: number;
+    hostMaxActiveSubagents?: number | null;
+    hostContextTokens?: number | null;
+    hostOutputTokens?: number | null;
+    hostModelRoster?: HostModelRosterEntry[] | null;
+    hostModelId?: string | null;
+    /** Injectable per-packet dispatcher for tests (defaults to the provider-backed one). */
+    dispatchPacket?: AuditPacketDispatcher;
+    /**
+     * Injectable terminal ingestion (defaults to the deterministic `mergeAndIngest`).
+     * The rolling engine treats ingestion as a consumer-owned terminal hook, so it is
+     * a seam here rather than an inline call.
+     */
+    ingest?: AuditResultIngestor;
+}): Promise<DriveRollingAuditDispatchResult>;
+//# sourceMappingURL=rollingAuditDispatch.d.ts.map

package/dist/audit/cli/rollingAuditDispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollingAuditDispatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/rollingAuditDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAE1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAOxE,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAyBvF;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,aAAa,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAC9C,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE;IACxD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CAQV;AAED,wFAAwF;AACxF,MAAM,MAAM,qBAAqB,GAAG,CAClC,MAAM,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,EAChD,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEvD,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEpC,4DAA4D;AAC5D,MAAM,WAAW,+BAA+B;IAC9C,2FAA2F;IAC3F,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;OAKG;IACH,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACrC;AAmBD;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,CACf,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,aAAa,EAAE,aAAa,KACzB,oBAAoB,CAAC;CAC3B,GAAG,qBAAqB,CAwExB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,CAAC,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IAChD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,wFAAwF;IACxF,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;;OAIG;IACH,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAiF3C"}