audit-tools 0.28.0

package/dist/audit/cli/statusCommand.js

@@ -0,0 +1,133 @@
+import { readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { isFileMissingError, readJsonFile } from "audit-tools/shared";
+import { loadRunLedger } from "../supervisor/runLedger.js";
+import { getArtifactsDir } from "./args.js";
+export async function cmdStatus(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const auditStatePath = join(artifactsDir, "audit_state.json");
+    // 1. Read audit_state.json
+    let auditState = null;
+    try {
+        auditState = await readJsonFile(auditStatePath);
+    }
+    catch (error) {
+        if (!isFileMissingError(error)) {
+            throw error;
+        }
+    }
+    if (!auditState) {
+        console.log(JSON.stringify({ status: 'no_active_audit', error: 'No audit_state.json found; no active audit in this artifacts directory.' }, null, 2));
+        process.exitCode = 1;
+        return;
+    }
+    // Build obligations summary: count by state
+    const obligationStates = {
+        missing: 0,
+        present: 0,
+        stale: 0,
+        blocked: 0,
+        satisfied: 0,
+    };
+    for (const obligation of auditState.obligations ?? []) {
+        const state = obligation.state;
+        if (state in obligationStates) {
+            obligationStates[state]++;
+        }
+    }
+    // 2. Read run ledger for last N entries
+    const ledger = await loadRunLedger(artifactsDir);
+    const RECENT_RUN_LIMIT = 5;
+    const recentRuns = ledger.runs
+        .slice(-RECENT_RUN_LIMIT)
+        .reverse()
+        .map((entry) => {
+        const startMs = Date.parse(entry.started_at);
+        const endMs = Date.parse(entry.ended_at);
+        const duration_ms = Number.isFinite(startMs) && Number.isFinite(endMs) ? endMs - startMs : undefined;
+        return {
+            run_id: entry.run_id,
+            obligation_id: entry.obligation_id,
+            status: entry.status,
+            started_at: entry.started_at,
+            ended_at: entry.ended_at,
+            ...(duration_ms !== undefined ? { duration_ms } : {}),
+        };
+    });
+    // 3. Find the most recent run directory and read pending-audit-tasks.json
+    let pendingTasksSummary = null;
+    const runsDir = join(artifactsDir, "runs");
+    let runDirs = [];
+    try {
+        const entries = await readdir(runsDir, { withFileTypes: true });
+        runDirs = entries
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name)
+            .sort()
+            .reverse();
+    }
+    catch {
+        // runs directory may not exist yet
+    }
+    for (const runDirName of runDirs) {
+        const runDir = join(runsDir, runDirName);
+        const tasksPath = join(runDir, "pending-audit-tasks.json");
+        let tasks = null;
+        try {
+            tasks = await readJsonFile(tasksPath);
+        }
+        catch {
+            continue; // no pending-audit-tasks.json in this run dir — try previous
+        }
+        if (!Array.isArray(tasks))
+            continue;
+        // Count remaining: tasks without status "complete"
+        const total = tasks.length;
+        const remaining = tasks.filter((t) => t.status !== "complete").length;
+        pendingTasksSummary = {
+            run_id: runDirName,
+            total,
+            remaining,
+        };
+        break;
+    }
+    // 4. Surface failed-tasks.json from the most recent run that has one
+    let failedTasks = null;
+    for (const runDirName of runDirs) {
+        const failedTasksPath = join(runsDir, runDirName, "failed-tasks.json");
+        try {
+            const raw = await readJsonFile(failedTasksPath);
+            if (Array.isArray(raw) && raw.length > 0) {
+                failedTasks = raw;
+                break;
+            }
+        }
+        catch {
+            // Not present in this run dir — keep looking
+        }
+    }
+    // Derive the started_at and elapsed time for the current last_obligation from
+    // the most recent ledger entry that matches it, so operators can tell whether
+    // the audit is stuck or merely running.
+    const lastObligationEntry = auditState.last_obligation
+        ? [...ledger.runs].reverse().find((r) => r.obligation_id === auditState.last_obligation)
+        : undefined;
+    const lastObligationStartedAt = lastObligationEntry?.started_at ?? null;
+    const lastObligationElapsedMs = lastObligationStartedAt
+        ? Date.now() - Date.parse(lastObligationStartedAt)
+        : null;
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        status: auditState.status,
+        last_obligation: auditState.last_obligation ?? null,
+        last_obligation_started_at: lastObligationStartedAt,
+        last_obligation_elapsed_ms: lastObligationElapsedMs,
+        last_executor: auditState.last_executor ?? null,
+        blockers: auditState.blockers ?? [],
+        obligations_summary: obligationStates,
+        recent_runs: recentRuns,
+        pending_tasks: pendingTasksSummary,
+        failed_tasks: failedTasks,
+    }, null, 2));
+}
+//# sourceMappingURL=statusCommand.js.map

package/dist/audit/cli/statusCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statusCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/statusCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAE9D,2BAA2B;IAC3B,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,YAAY,CAAa,cAAc,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,yEAAyE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtJ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,MAAM,gBAAgB,GAA2B;QAC/C,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC;KACb,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC/B,IAAI,KAAK,IAAI,gBAAgB,EAAE,CAAC;YAC9B,gBAAgB,CAAC,KAAK,CAAE,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI;SAC3B,KAAK,CAAC,CAAC,gBAAgB,CAAC;SACxB,OAAO,EAAE;SACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,0EAA0E;IAC1E,IAAI,mBAAmB,GAIZ,IAAI,CAAC;IAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE;aACN,OAAO,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAuB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAc,SAAS,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,6DAA6D;QACzE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAEpC,mDAAmD;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAC/B,CAAC,MAAM,CAAC;QAET,mBAAmB,GAAG;YACpB,MAAM,EAAE,UAAU;YAClB,KAAK;YACL,SAAS;SACV,CAAC;QACF,MAAM;IACR,CAAC;IAED,qEAAqE;IACrE,IAAI,WAAW,GAAwD,IAAI,CAAC;IAC5E,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,eAAe,CAChB,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,WAAW,GAAG,GAAG,CAAC;gBAClB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,mBAAmB,GAAG,UAAU,CAAC,eAAe;QACpD,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,eAAe,CAAC;QACxF,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,uBAAuB,GAAG,mBAAmB,EAAE,UAAU,IAAI,IAAI,CAAC;IACxE,MAAM,uBAAuB,GAC3B,uBAAuB;QACrB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAClD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,IAAI;QACnD,0BAA0B,EAAE,uBAAuB;QACnD,0BAA0B,EAAE,uBAAuB;QACnD,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,IAAI;QAC/C,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;QACnC,mBAAmB,EAAE,gBAAgB;QACrC,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,mBAAmB;QAClC,YAAY,EAAE,WAAW;KAC1B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/steps.d.ts

@@ -0,0 +1,204 @@
+import { z } from "zod";
+import type { StepStatus } from "audit-tools/shared";
+import type { AccessDeclaration } from "../types/workerSession.js";
+export declare const STEP_CONTRACT_VERSION = "audit-code-step/v1alpha1";
+export declare const StepKindSchema: z.ZodEnum<["dispatch_review", "single_task_fallback", "design_review", "design_review_parallel", "design_review_contract", "design_review_conceptual", "confirm_intent", "analyzer_install", "edge_reasoning", "edge_reasoning_dispatch", "synthesis_narrative", "present_report", "blocked"]>;
+export type StepKind = z.infer<typeof StepKindSchema>;
+/**
+ * Lightweight run-level orientation surfaced in the step contract so a host
+ * resuming an in-flight audit knows where it stands without reading artifacts.
+ */
+export declare const StepProgressSchema: z.ZodObject<{
+    /** One-line, human-readable summary safe to show a resuming host. */
+    summary: z.ZodString;
+    /** Pending review packets in the active dispatch run, when applicable. */
+    pending_packets: z.ZodOptional<z.ZodNumber>;
+    /** Audit tasks covered by the pending packets. */
+    pending_tasks: z.ZodOptional<z.ZodNumber>;
+    /** Audit tasks already completed before this run (skipped as done). */
+    completed_tasks: z.ZodOptional<z.ZodNumber>;
+    /** Max subagents running simultaneously (rolling dispatch). */
+    max_concurrent_agents: z.ZodOptional<z.ZodNumber>;
+    /** Total agents (packets) that will be launched this run. */
+    agent_count: z.ZodOptional<z.ZodNumber>;
+    /**
+     * True when `agent_count` exceeds the configured confirm threshold and the
+     * loader should pause for user confirmation before fan-out (FINDING-012).
+     */
+    confirmation_recommended: z.ZodOptional<z.ZodBoolean>;
+    /** Human-readable fan-out summary, e.g. "12 agents, max 4 concurrent (rolling)". */
+    dispatch_summary: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    summary: string;
+    max_concurrent_agents?: number | undefined;
+    agent_count?: number | undefined;
+    confirmation_recommended?: boolean | undefined;
+    dispatch_summary?: string | undefined;
+    pending_packets?: number | undefined;
+    pending_tasks?: number | undefined;
+    completed_tasks?: number | undefined;
+}, {
+    summary: string;
+    max_concurrent_agents?: number | undefined;
+    agent_count?: number | undefined;
+    confirmation_recommended?: boolean | undefined;
+    dispatch_summary?: string | undefined;
+    pending_packets?: number | undefined;
+    pending_tasks?: number | undefined;
+    completed_tasks?: number | undefined;
+}>;
+export type StepProgress = z.infer<typeof StepProgressSchema>;
+export declare const StepArtifactSchema: z.ZodObject<{
+    contract_version: z.ZodLiteral<"audit-code-step/v1alpha1">;
+    step_kind: z.ZodEnum<["dispatch_review", "single_task_fallback", "design_review", "design_review_parallel", "design_review_contract", "design_review_conceptual", "confirm_intent", "analyzer_install", "edge_reasoning", "edge_reasoning_dispatch", "synthesis_narrative", "present_report", "blocked"]>;
+    prompt_path: z.ZodString;
+    status: z.ZodEnum<["ready", "blocked", "complete"]>;
+    run_id: z.ZodNullable<z.ZodString>;
+    /** Run-level orientation; omitted for steps that have no meaningful summary. */
+    progress: z.ZodOptional<z.ZodObject<{
+        /** One-line, human-readable summary safe to show a resuming host. */
+        summary: z.ZodString;
+        /** Pending review packets in the active dispatch run, when applicable. */
+        pending_packets: z.ZodOptional<z.ZodNumber>;
+        /** Audit tasks covered by the pending packets. */
+        pending_tasks: z.ZodOptional<z.ZodNumber>;
+        /** Audit tasks already completed before this run (skipped as done). */
+        completed_tasks: z.ZodOptional<z.ZodNumber>;
+        /** Max subagents running simultaneously (rolling dispatch). */
+        max_concurrent_agents: z.ZodOptional<z.ZodNumber>;
+        /** Total agents (packets) that will be launched this run. */
+        agent_count: z.ZodOptional<z.ZodNumber>;
+        /**
+         * True when `agent_count` exceeds the configured confirm threshold and the
+         * loader should pause for user confirmation before fan-out (FINDING-012).
+         */
+        confirmation_recommended: z.ZodOptional<z.ZodBoolean>;
+        /** Human-readable fan-out summary, e.g. "12 agents, max 4 concurrent (rolling)". */
+        dispatch_summary: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        summary: string;
+        max_concurrent_agents?: number | undefined;
+        agent_count?: number | undefined;
+        confirmation_recommended?: boolean | undefined;
+        dispatch_summary?: string | undefined;
+        pending_packets?: number | undefined;
+        pending_tasks?: number | undefined;
+        completed_tasks?: number | undefined;
+    }, {
+        summary: string;
+        max_concurrent_agents?: number | undefined;
+        agent_count?: number | undefined;
+        confirmation_recommended?: boolean | undefined;
+        dispatch_summary?: string | undefined;
+        pending_packets?: number | undefined;
+        pending_tasks?: number | undefined;
+        completed_tasks?: number | undefined;
+    }>>;
+    /** Shell commands the host may run for this step. */
+    allowed_commands: z.ZodArray<z.ZodString, "many">;
+    /**
+     * MCP tool names equivalent to `allowed_commands`, for hosts driving the
+     * backend through the MCP adapter. Omitted when the step has no MCP
+     * equivalents, so a shell host never has to guess which list entries are
+     * tool names versus runnable commands.
+     */
+    allowed_mcp_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    stop_condition: z.ZodString;
+    repo_root: z.ZodString;
+    artifacts_dir: z.ZodString;
+    artifact_paths: z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>;
+    access: z.ZodOptional<z.ZodObject<{
+        read_paths: z.ZodArray<z.ZodString, "many">;
+        write_paths: z.ZodArray<z.ZodString, "many">;
+        forbidden_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        read_paths: string[];
+        write_paths: string[];
+        forbidden_patterns?: string[] | undefined;
+    }, {
+        read_paths: string[];
+        write_paths: string[];
+        forbidden_patterns?: string[] | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    status: "blocked" | "ready" | "complete";
+    contract_version: "audit-code-step/v1alpha1";
+    run_id: string | null;
+    repo_root: string;
+    artifacts_dir: string;
+    prompt_path: string;
+    step_kind: "blocked" | "synthesis_narrative" | "design_review" | "dispatch_review" | "single_task_fallback" | "design_review_parallel" | "design_review_contract" | "design_review_conceptual" | "confirm_intent" | "analyzer_install" | "edge_reasoning" | "edge_reasoning_dispatch" | "present_report";
+    allowed_commands: string[];
+    stop_condition: string;
+    artifact_paths: Record<string, string | null>;
+    access?: {
+        read_paths: string[];
+        write_paths: string[];
+        forbidden_patterns?: string[] | undefined;
+    } | undefined;
+    progress?: {
+        summary: string;
+        max_concurrent_agents?: number | undefined;
+        agent_count?: number | undefined;
+        confirmation_recommended?: boolean | undefined;
+        dispatch_summary?: string | undefined;
+        pending_packets?: number | undefined;
+        pending_tasks?: number | undefined;
+        completed_tasks?: number | undefined;
+    } | undefined;
+    allowed_mcp_tools?: string[] | undefined;
+}, {
+    status: "blocked" | "ready" | "complete";
+    contract_version: "audit-code-step/v1alpha1";
+    run_id: string | null;
+    repo_root: string;
+    artifacts_dir: string;
+    prompt_path: string;
+    step_kind: "blocked" | "synthesis_narrative" | "design_review" | "dispatch_review" | "single_task_fallback" | "design_review_parallel" | "design_review_contract" | "design_review_conceptual" | "confirm_intent" | "analyzer_install" | "edge_reasoning" | "edge_reasoning_dispatch" | "present_report";
+    allowed_commands: string[];
+    stop_condition: string;
+    artifact_paths: Record<string, string | null>;
+    access?: {
+        read_paths: string[];
+        write_paths: string[];
+        forbidden_patterns?: string[] | undefined;
+    } | undefined;
+    progress?: {
+        summary: string;
+        max_concurrent_agents?: number | undefined;
+        agent_count?: number | undefined;
+        confirmation_recommended?: boolean | undefined;
+        dispatch_summary?: string | undefined;
+        pending_packets?: number | undefined;
+        pending_tasks?: number | undefined;
+        completed_tasks?: number | undefined;
+    } | undefined;
+    allowed_mcp_tools?: string[] | undefined;
+}>;
+export type StepArtifact = z.infer<typeof StepArtifactSchema>;
+/**
+ * Write the audit step contract. Delegates to the shared `writeStepContract`
+ * (drift-plan R3) — the single source for the steps/ filenames, mkdir, prompt
+ * write, atomic current-step.json write, the forward-slash normalization of ALL
+ * host-facing path fields, and the canonical-paths-win merge. Promoting the
+ * writer to shared is what fixed audit-code's Windows path-separator drift: it
+ * previously wrote `prompt_path` / `repo_root` / `artifacts_dir` /
+ * `artifact_paths` with raw backslashes, while remediate-code normalized them.
+ * Audit's optional fields (progress, allowed_mcp_tools, access) ride through
+ * `extraFields` with the same conditional-omission semantics as before.
+ */
+export declare function writeCurrentStep(params: {
+    artifactsDir: string;
+    stepKind: StepKind;
+    status: StepStatus;
+    runId: string | null;
+    allowedCommands: string[];
+    allowedMcpTools?: string[];
+    progress?: StepProgress;
+    stopCondition: string;
+    repoRoot: string;
+    artifactPaths: Record<string, string | null>;
+    prompt: string;
+    access?: AccessDeclaration;
+}): Promise<StepArtifact>;
+//# sourceMappingURL=steps.d.ts.map

package/dist/audit/cli/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,eAAO,MAAM,cAAc,gSAczB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAE3B,qEAAqE;;IAErE,0EAA0E;;IAE1E,kDAAkD;;IAElD,uEAAuE;;IAEvE,+DAA+D;;IAE/D,6DAA6D;;IAE7D;;;OAGG;;IAEH,oFAAoF;;;;;;;;;;;;;;;;;;;;EAG7E,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;IAO3B,gFAAgF;;QA9BhF,qEAAqE;;QAErE,0EAA0E;;QAE1E,kDAAkD;;QAElD,uEAAuE;;QAEvE,+DAA+D;;QAE/D,6DAA6D;;QAE7D;;;WAGG;;QAEH,oFAAoF;;;;;;;;;;;;;;;;;;;;;IAepF,qDAAqD;;IAErD;;;;;OAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQI,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B,GAAG,OAAO,CAAC,YAAY,CAAC,CAsBxB"}

package/dist/audit/cli/steps.js

@@ -0,0 +1,105 @@
+import { z } from "zod";
+import { writeStepContract, StepStatusSchema, AccessDeclarationSchema, } from "audit-tools/shared";
+export const STEP_CONTRACT_VERSION = "audit-code-step/v1alpha1";
+export const StepKindSchema = z.enum([
+    "dispatch_review",
+    "single_task_fallback",
+    "design_review",
+    "design_review_parallel",
+    "design_review_contract",
+    "design_review_conceptual",
+    "confirm_intent",
+    "analyzer_install",
+    "edge_reasoning",
+    "edge_reasoning_dispatch",
+    "synthesis_narrative",
+    "present_report",
+    "blocked",
+]);
+/**
+ * Lightweight run-level orientation surfaced in the step contract so a host
+ * resuming an in-flight audit knows where it stands without reading artifacts.
+ */
+export const StepProgressSchema = z
+    .object({
+    /** One-line, human-readable summary safe to show a resuming host. */
+    summary: z.string(),
+    /** Pending review packets in the active dispatch run, when applicable. */
+    pending_packets: z.number().int().optional(),
+    /** Audit tasks covered by the pending packets. */
+    pending_tasks: z.number().int().optional(),
+    /** Audit tasks already completed before this run (skipped as done). */
+    completed_tasks: z.number().int().optional(),
+    /** Max subagents running simultaneously (rolling dispatch). */
+    max_concurrent_agents: z.number().int().optional(),
+    /** Total agents (packets) that will be launched this run. */
+    agent_count: z.number().int().optional(),
+    /**
+     * True when `agent_count` exceeds the configured confirm threshold and the
+     * loader should pause for user confirmation before fan-out (FINDING-012).
+     */
+    confirmation_recommended: z.boolean().optional(),
+    /** Human-readable fan-out summary, e.g. "12 agents, max 4 concurrent (rolling)". */
+    dispatch_summary: z.string().optional(),
+})
+    .strict();
+export const StepArtifactSchema = z
+    .object({
+    contract_version: z.literal(STEP_CONTRACT_VERSION),
+    step_kind: StepKindSchema,
+    prompt_path: z.string(),
+    status: StepStatusSchema,
+    run_id: z.string().nullable(),
+    /** Run-level orientation; omitted for steps that have no meaningful summary. */
+    progress: StepProgressSchema.optional(),
+    /** Shell commands the host may run for this step. */
+    allowed_commands: z.array(z.string()),
+    /**
+     * MCP tool names equivalent to `allowed_commands`, for hosts driving the
+     * backend through the MCP adapter. Omitted when the step has no MCP
+     * equivalents, so a shell host never has to guess which list entries are
+     * tool names versus runnable commands.
+     */
+    allowed_mcp_tools: z.array(z.string()).optional(),
+    stop_condition: z.string(),
+    repo_root: z.string(),
+    artifacts_dir: z.string(),
+    artifact_paths: z.record(z.string(), z.string().nullable()),
+    access: AccessDeclarationSchema.optional(),
+})
+    .strict();
+/**
+ * Write the audit step contract. Delegates to the shared `writeStepContract`
+ * (drift-plan R3) — the single source for the steps/ filenames, mkdir, prompt
+ * write, atomic current-step.json write, the forward-slash normalization of ALL
+ * host-facing path fields, and the canonical-paths-win merge. Promoting the
+ * writer to shared is what fixed audit-code's Windows path-separator drift: it
+ * previously wrote `prompt_path` / `repo_root` / `artifacts_dir` /
+ * `artifact_paths` with raw backslashes, while remediate-code normalized them.
+ * Audit's optional fields (progress, allowed_mcp_tools, access) ride through
+ * `extraFields` with the same conditional-omission semantics as before.
+ */
+export async function writeCurrentStep(params) {
+    return writeStepContract({
+        contractVersion: STEP_CONTRACT_VERSION,
+        stepKind: params.stepKind,
+        status: params.status,
+        runId: params.runId,
+        allowedCommands: params.allowedCommands,
+        stopCondition: params.stopCondition,
+        repoRoot: params.repoRoot,
+        artifactsDir: params.artifactsDir,
+        prompt: params.prompt,
+        artifactPaths: params.artifactPaths,
+        extraFields: {
+            // Optional audit fields keep their conditional-omission semantics; they
+            // ride before the canonical path fields so they can never clobber them.
+            ...(params.progress ? { progress: params.progress } : {}),
+            ...(params.allowedMcpTools && params.allowedMcpTools.length > 0
+                ? { allowed_mcp_tools: params.allowedMcpTools }
+                : {}),
+            ...(params.access ? { access: params.access } : {}),
+        },
+    });
+}
+//# sourceMappingURL=steps.js.map

package/dist/audit/cli/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/audit/cli/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,iBAAiB;IACjB,sBAAsB;IACtB,eAAe;IACf,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,qBAAqB;IACrB,gBAAgB;IAChB,SAAS;CACV,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,0EAA0E;IAC1E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,kDAAkD;IAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,uEAAuE;IACvE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,+DAA+D;IAC/D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClD,6DAA6D;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC;;;OAGG;IACH,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,oFAAoF;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAClD,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,gFAAgF;IAChF,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC,qDAAqD;IACrD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC3D,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAatC;IACC,OAAO,iBAAiB,CAAwC;QAC9D,eAAe,EAAE,qBAAqB;QACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE;YACX,wEAAwE;YACxE,wEAAwE;YACxE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;gBAC7D,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,eAAe,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/cli/submitPacketCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdSubmitPacket(argv: string[]): Promise<void>;
+//# sourceMappingURL=submitPacketCommand.d.ts.map

package/dist/audit/cli/submitPacketCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submitPacketCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/submitPacketCommand.ts"],"names":[],"mappings":"AAYA,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkKnE"}

package/dist/audit/cli/submitPacketCommand.js

@@ -0,0 +1,126 @@
+import { join, resolve } from "node:path";
+import { readJsonFile, writeJsonFile } from "audit-tools/shared";
+import { validateAuditResults, formatAuditResultIssues } from "../validation/auditResults.js";
+import { DISPATCH_RESULT_MAP_FILENAME, resolveRunScopedArg, loadDispatchResultMap, entriesByTaskId, } from "./dispatch.js";
+import { fromBase64Url, getArtifactsDir, getFlag, readStdinText } from "./args.js";
+export async function cmdSubmitPacket(argv) {
+    const runId = resolveRunScopedArg(argv, "--run-id", "--run-id-b64");
+    const packetId = resolveRunScopedArg(argv, "--packet-id", "--packet-id-b64");
+    const artifactsDirB64 = getFlag(argv, "--artifacts-dir-b64");
+    const artifactsDir = artifactsDirB64
+        ? resolve(fromBase64Url(artifactsDirB64))
+        : getArtifactsDir(argv);
+    if (!runId || !packetId) {
+        throw new Error("submit-packet requires --run-id and --packet-id (or --run-id-b64/--packet-id-b64)");
+    }
+    const runDir = join(artifactsDir, "runs", runId);
+    const tasksPath = join(runDir, "pending-audit-tasks.json");
+    const resultMap = await loadDispatchResultMap(runDir);
+    if (!resultMap) {
+        throw new Error(`No ${DISPATCH_RESULT_MAP_FILENAME} found for run ${runId}; run prepare-dispatch first.`);
+    }
+    let packetEntries = resultMap.entries.filter((entry) => entry.packet_id === packetId);
+    let resolvedPacketId = packetId;
+    if (packetEntries.length === 0) {
+        const trimmed = packetId.trim();
+        packetEntries = resultMap.entries.filter((entry) => entry.packet_id.trim().toLowerCase() === trimmed.toLowerCase());
+        if (packetEntries.length > 0) {
+            resolvedPacketId = packetEntries[0].packet_id;
+            process.stderr.write(`[submit-packet] Resolved packet_id '${packetId}' → '${resolvedPacketId}' (case/whitespace normalization)\n`);
+        }
+    }
+    if (packetEntries.length === 0) {
+        const knownIds = [...new Set(resultMap.entries.map((e) => e.packet_id))];
+        throw new Error(`Unknown packet_id '${packetId}' for run ${runId}.\n` +
+            `Valid packet IDs: ${knownIds.join(", ")}`);
+    }
+    if (entriesByTaskId(packetEntries).size !== packetEntries.length) {
+        throw new Error(`Dispatch result map has duplicate task entries for packet '${resolvedPacketId}'.`);
+    }
+    const allTasks = await readJsonFile(tasksPath);
+    const taskById = new Map(allTasks.map((task) => [task.task_id, task]));
+    const packetTasks = packetEntries.map((entry) => taskById.get(entry.task_id));
+    const missingTask = packetEntries.find((entry, index) => !packetTasks[index]);
+    if (missingTask) {
+        throw new Error(`Dispatch result map references unknown task '${missingTask.task_id}'.`);
+    }
+    const tasks = packetTasks;
+    const expectedTaskIds = new Set(tasks.map((task) => task.task_id));
+    const lineIndex = Object.fromEntries(tasks.flatMap((task) => Object.entries(task.file_line_counts ?? {})));
+    const encodedResults = getFlag(argv, "--results-b64");
+    const raw = encodedResults ? fromBase64Url(encodedResults) : await readStdinText();
+    if (raw.trim().length === 0) {
+        throw new Error("submit-packet requires an AuditResult[] JSON payload on stdin or --results-b64.");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new Error(`Invalid submit-packet JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const resultErrors = [];
+    const issues = validateAuditResults(payload, tasks, { lineIndex });
+    const validationErrors = issues.filter((issue) => issue.severity === "error");
+    const validationWarnings = issues.filter((issue) => issue.severity === "warning");
+    if (validationWarnings.length > 0) {
+        process.stderr.write(`audit-results validation: ${validationWarnings.length} warning(s):\n` +
+            formatAuditResultIssues(validationWarnings) +
+            "\n");
+    }
+    if (validationErrors.length > 0) {
+        resultErrors.push(formatAuditResultIssues(validationErrors));
+    }
+    if (Array.isArray(payload)) {
+        const seen = new Set();
+        for (const [index, result] of payload.entries()) {
+            if (!result || typeof result !== "object" || Array.isArray(result)) {
+                continue;
+            }
+            const taskId = result.task_id;
+            if (typeof taskId !== "string" || taskId.trim().length === 0) {
+                continue;
+            }
+            if (seen.has(taskId)) {
+                resultErrors.push(`Duplicate audit result for assigned task '${taskId}'.`);
+            }
+            seen.add(taskId);
+            if (!expectedTaskIds.has(taskId)) {
+                resultErrors.push(`Result at index ${index} uses task_id '${taskId}', which is not assigned to packet '${resolvedPacketId}'.`);
+            }
+        }
+        for (const task of tasks) {
+            if (!seen.has(task.task_id)) {
+                resultErrors.push(`Missing audit result for assigned task '${task.task_id}'.`);
+            }
+        }
+    }
+    if (resultErrors.length > 0) {
+        throw new Error(`submit-packet rejected ${resolvedPacketId}:\n${resultErrors.join("\n")}`);
+    }
+    // Cross-packet finding deduplication is handled at merge-and-ingest time,
+    // where all results are available in memory. submit-packet only validates
+    // that this packet's own results are internally consistent and match the
+    // assigned task list.
+    const entryByTaskId = entriesByTaskId(packetEntries);
+    const submittedAt = new Date().toISOString();
+    for (const result of payload) {
+        const entry = entryByTaskId.get(result.task_id);
+        if (!entry) {
+            throw new Error(`Internal error: no result path for accepted task '${result.task_id}'.`);
+        }
+        await writeJsonFile(entry.result_path, {
+            ...result,
+            run_id: runId,
+            submitted_at: submittedAt,
+        });
+    }
+    const findingCount = payload.reduce((sum, result) => sum + result.findings.length, 0);
+    console.log(JSON.stringify({
+        run_id: runId,
+        packet_id: resolvedPacketId,
+        accepted_count: payload.length,
+        finding_count: findingCount,
+    }, null, 2));
+}
+//# sourceMappingURL=submitPacketCommand.js.map

package/dist/audit/cli/submitPacketCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submitPacketCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/submitPacketCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc;IAClD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,MAAM,4BAA4B,kBAAkB,KAAK,+BAA+B,CACzF,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CACxC,CAAC;IACF,IAAI,gBAAgB,GAAG,QAAQ,CAAC;IAChC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAC1E,CAAC;QACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,gBAAgB,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,QAAQ,QAAQ,gBAAgB,qCAAqC,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,sBAAsB,QAAQ,aAAa,KAAK,KAAK;YACrD,qBAAqB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,8DAA8D,gBAAgB,IAAI,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAc,SAAS,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,gDAAgD,WAAW,CAAC,OAAO,IAAI,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,WAA0B,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;IACnF,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,kBAAkB,CAAC,MAAM,gBAAgB;YACpE,uBAAuB,CAAC,kBAAkB,CAAC;YAC3C,IAAI,CACP,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAI,MAAkC,CAAC,OAAO,CAAC;YAC3D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,YAAY,CAAC,IAAI,CAAC,6CAA6C,MAAM,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,YAAY,CAAC,IAAI,CACf,mBAAmB,KAAK,kBAAkB,MAAM,uCAAuC,gBAAgB,IAAI,CAC5G,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,YAAY,CAAC,IAAI,CAAC,2CAA2C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,gBAAgB,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,sBAAsB;IACtB,MAAM,aAAa,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,MAAM,IAAI,OAAwB,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,CAAC,OAAO,IAAI,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,GAAG,MAAM;YACT,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAI,OAAyB,CAAC,MAAM,CACpD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAC7C,CAAC,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,gBAAgB;QAC3B,cAAc,EAAG,OAAyB,CAAC,MAAM;QACjD,aAAa,EAAE,YAAY;KAC5B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/synthesizeCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdSynthesize(argv: string[]): Promise<void>;
+//# sourceMappingURL=synthesizeCommand.d.ts.map

package/dist/audit/cli/synthesizeCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthesizeCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/synthesizeCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBjE"}

package/dist/audit/cli/synthesizeCommand.js

@@ -0,0 +1,16 @@
+import { runAuditStep } from "./auditStep.js";
+import { getArtifactsDir, getRootDir } from "./args.js";
+export async function cmdSynthesize(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const result = await runAuditStep({
+        root: getRootDir(argv),
+        artifactsDir,
+        preferredExecutor: "synthesis_executor",
+    });
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        selected_executor: result.selected_executor,
+        progress_summary: result.progress_summary,
+    }, null, 2));
+}
+//# sourceMappingURL=synthesizeCommand.js.map

package/dist/audit/cli/synthesizeCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthesizeCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/synthesizeCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,YAAY;QACZ,iBAAiB,EAAE,oBAAoB;KACxC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/updateRuntimeValidationCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdUpdateRuntimeValidation(argv: string[]): Promise<void>;
+//# sourceMappingURL=updateRuntimeValidationCommand.d.ts.map

package/dist/audit/cli/updateRuntimeValidationCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateRuntimeValidationCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/updateRuntimeValidationCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB9E"}