audit-tools 0.28.0

package/dist/audit/cli/updateRuntimeValidationCommand.js

@@ -0,0 +1,17 @@
+import { runAuditStep } from "./auditStep.js";
+import { getArtifactsDir, getFlag, getRootDir } from "./args.js";
+export async function cmdUpdateRuntimeValidation(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const result = await runAuditStep({
+        root: getRootDir(argv),
+        artifactsDir,
+        preferredExecutor: "runtime_validation_update_executor",
+        runtimeUpdatesPath: getFlag(argv, "--updates"),
+    });
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        selected_executor: result.selected_executor,
+        progress_summary: result.progress_summary,
+    }, null, 2));
+}
+//# sourceMappingURL=updateRuntimeValidationCommand.js.map

package/dist/audit/cli/updateRuntimeValidationCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateRuntimeValidationCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/updateRuntimeValidationCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAc;IAC7D,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,YAAY;QACZ,iBAAiB,EAAE,oCAAoC;QACvD,kBAAkB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/validateCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdValidate(argv: string[]): Promise<void>;
+//# sourceMappingURL=validateCommand.d.ts.map

package/dist/audit/cli/validateCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/validateCommand.ts"],"names":[],"mappings":"AAkBA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoD/D"}

package/dist/audit/cli/validateCommand.js

@@ -0,0 +1,42 @@
+import { loadArtifactBundle } from "../io/artifacts.js";
+import { prefixValidationIssues } from "audit-tools/shared";
+import { validateArtifactBundle } from "../validation/artifacts.js";
+import { validateConfiguredProviderEnvironment, validateSessionConfig, } from "../validation/sessionConfig.js";
+import { resolveFreshSessionProviderName, } from "../providers/index.js";
+import { getSessionConfigPath, readSessionConfigFile, } from "../supervisor/sessionConfig.js";
+import { getArtifactsDir } from "./args.js";
+export async function cmdValidate(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const bundle = await loadArtifactBundle(artifactsDir);
+    const sessionConfigPath = getSessionConfigPath(artifactsDir);
+    const rawSessionConfig = await readSessionConfigFile(artifactsDir);
+    const artifactIssues = validateArtifactBundle(bundle);
+    const sessionConfigIssues = rawSessionConfig === undefined
+        ? []
+        : prefixValidationIssues("session_config", validateSessionConfig(rawSessionConfig));
+    const providerIssues = rawSessionConfig === undefined || sessionConfigIssues.length > 0
+        ? []
+        : prefixValidationIssues("session_config", await validateConfiguredProviderEnvironment(rawSessionConfig));
+    const issues = [
+        ...artifactIssues,
+        ...sessionConfigIssues,
+        ...providerIssues,
+    ];
+    const resolvedProvider = rawSessionConfig === undefined
+        ? "local-subprocess"
+        : sessionConfigIssues.length > 0
+            ? null
+            : resolveFreshSessionProviderName(undefined, rawSessionConfig);
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        session_config_path: sessionConfigPath,
+        session_config_present: rawSessionConfig !== undefined,
+        resolved_provider: resolvedProvider,
+        artifact_issue_count: artifactIssues.length,
+        session_config_issue_count: sessionConfigIssues.length + providerIssues.length,
+        issue_count: issues.length,
+        issues,
+    }, null, 2));
+    process.exitCode = issues.length > 0 ? 1 : 0;
+}
+//# sourceMappingURL=validateCommand.js.map

package/dist/audit/cli/validateCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/validateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EACL,qCAAqC,EACrC,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EAEpB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,mBAAmB,GACvB,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,sBAAsB,CACpB,gBAAgB,EAChB,qBAAqB,CAAC,gBAAgB,CAAC,CACxC,CAAC;IACR,MAAM,cAAc,GAClB,gBAAgB,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC;QAC9D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,sBAAsB,CACpB,gBAAgB,EAChB,MAAM,qCAAqC,CAAC,gBAAiC,CAAC,CAC/E,CAAC;IACR,MAAM,MAAM,GAAG;QACb,GAAG,cAAc;QACjB,GAAG,mBAAmB;QACtB,GAAG,cAAc;KAClB,CAAC;IACF,MAAM,gBAAgB,GACpB,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,+BAA+B,CAC7B,SAAS,EACT,gBAAiC,CAClC,CAAC;IACV,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,mBAAmB,EAAE,iBAAiB;QACtC,sBAAsB,EAAE,gBAAgB,KAAK,SAAS;QACtD,iBAAiB,EAAE,gBAAgB;QACnC,oBAAoB,EAAE,cAAc,CAAC,MAAM;QAC3C,0BAA0B,EACxB,mBAAmB,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM;QACpD,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM;KACP,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/audit/cli/validateResultCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdValidateResult(argv: string[]): Promise<void>;
+//# sourceMappingURL=validateResultCommand.d.ts.map

package/dist/audit/cli/validateResultCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateResultCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/validateResultCommand.ts"],"names":[],"mappings":"AAcA,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgGrE"}

package/dist/audit/cli/validateResultCommand.js

@@ -0,0 +1,92 @@
+import { readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { mapWithConcurrency, readJsonFile } from "audit-tools/shared";
+import { validateAuditResults } from "../validation/auditResults.js";
+import { verifyFindingGrounding } from "../validation/quoteGrounding.js";
+import { ANCHOR_GROUNDING_CONCURRENCY, combineGroundingWithAnchor, verifyFindingAnchor, } from "../validation/anchorGrounding.js";
+import { loadDispatchResultMap } from "./dispatch.js";
+import { fromBase64Url, getArtifactsDir, getFlag, taskResultPath } from "./args.js";
+export async function cmdValidateResult(argv) {
+    const rawRunId = getFlag(argv, "--run-id");
+    const runIdB64 = getFlag(argv, "--run-id-b64");
+    const rawTaskId = getFlag(argv, "--task-id");
+    const artifactsDirB64 = getFlag(argv, "--artifacts-dir-b64");
+    const runId = rawRunId ?? (runIdB64 ? fromBase64Url(runIdB64) : undefined);
+    const taskIdB64 = getFlag(argv, "--task-id-b64");
+    const taskId = rawTaskId ?? (taskIdB64 ? fromBase64Url(taskIdB64) : undefined);
+    const artifactsDir = artifactsDirB64
+        ? resolve(fromBase64Url(artifactsDirB64))
+        : getArtifactsDir(argv);
+    if (!runId || !taskId) {
+        throw new Error("validate-result requires --run-id and --task-id (or --run-id-b64/--task-id-b64)");
+    }
+    const runDir = join(artifactsDir, "runs", runId);
+    const taskResultsDir = join(runDir, "task-results");
+    const resultMap = await loadDispatchResultMap(runDir);
+    const resultPath = resultMap?.entries.find((entry) => entry.task_id === taskId)?.result_path ??
+        taskResultPath(taskResultsDir, taskId);
+    const tasksPath = join(runDir, "pending-audit-tasks.json");
+    let raw;
+    try {
+        raw = await readFile(resultPath, "utf8");
+    }
+    catch {
+        console.error(`File not found: ${resultPath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let obj;
+    try {
+        obj = JSON.parse(raw);
+    }
+    catch (e) {
+        console.error(`Invalid JSON: ${e.message}`);
+        process.exitCode = 1;
+        return;
+    }
+    let allTasks = [];
+    try {
+        allTasks = await readJsonFile(tasksPath);
+    }
+    catch { /* may not exist */ }
+    const matchingTasks = allTasks.filter(t => t.task_id === taskId);
+    const lineIndex = matchingTasks[0]?.file_line_counts ?? {};
+    const issues = validateAuditResults([obj], matchingTasks, { lineIndex });
+    const errors = issues.filter(i => i.severity === "error");
+    // S7 grounding self-check: re-verify each finding against disk (repo root =
+    // cwd; the worker runs from the repository root) before submitting — re-read
+    // the cited verbatim span (tier-1) and run any executable anchor (tier-2), so
+    // the worker fixes a hallucinated quote or a refuted behavior claim first.
+    // Advisory — it does not change the valid/invalid exit code.
+    const rawFindings = obj.findings;
+    const validFindings = Array.isArray(rawFindings)
+        ? rawFindings.filter((f) => !!f && typeof f === "object" && typeof f.id === "string")
+        : [];
+    // Same bounded-concurrency grounding pass as ingest: anchors spawn child
+    // processes, so a serial pass over a finding-heavy result is slow. Order is
+    // preserved, so the warnings list is stable.
+    const warningsPerFinding = await mapWithConcurrency(validFindings, ANCHOR_GROUNDING_CONCURRENCY, async (finding) => {
+        const tier1 = await verifyFindingGrounding(process.cwd(), finding);
+        const anchor = await verifyFindingAnchor(process.cwd(), finding);
+        const grounding = combineGroundingWithAnchor(tier1, anchor);
+        return grounding.status === "ungrounded"
+            ? `${finding.id}: ${grounding.reason ?? "ungrounded"}`
+            : null;
+    });
+    const groundingWarnings = warningsPerFinding.filter((w) => w !== null);
+    if (errors.length === 0) {
+        console.log(`✓ valid: ${taskId}`);
+    }
+    else {
+        console.error(`✗ invalid: ${taskId}`);
+        for (const e of errors)
+            console.error(`  ${e.path}: ${e.message}`);
+        process.exitCode = 1;
+    }
+    if (groundingWarnings.length > 0) {
+        console.error(`⚠ ${groundingWarnings.length} ungrounded finding(s) — copy a verbatim quoted_text span into affected_files (re-read and content-matched against disk), and ensure any executable_anchor command actually confirms the claim:`);
+        for (const w of groundingWarnings)
+            console.error(`  ${w}`);
+    }
+}
+//# sourceMappingURL=validateResultCommand.js.map

package/dist/audit/cli/validateResultCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateResultCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/validateResultCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAgB,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAc;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,UAAU,GACd,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,WAAW;QACzE,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAE3D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,iBAAkB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,GAAgB,EAAE,CAAC;IAC/B,IAAI,CAAC;QAAC,QAAQ,GAAG,MAAM,YAAY,CAAc,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAE5F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAE1D,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,WAAW,GAAI,GAA8B,CAAC,QAAQ,CAAC;IAC7D,MAAM,aAAa,GAAc,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QACzD,CAAC,CAAC,WAAW,CAAC,MAAM,CAChB,CAAC,CAAC,EAAgB,EAAE,CAClB,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAa,CAAC,EAAE,KAAK,QAAQ,CACxE;QACH,CAAC,CAAC,EAAE,CAAC;IACP,yEAAyE;IACzE,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CACjD,aAAa,EACb,4BAA4B,EAC5B,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC,MAAM,KAAK,YAAY;YACtC,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,IAAI,YAAY,EAAE;YACtD,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CACF,CAAC;IACF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,CACjD,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAC/B,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CACX,KAAK,iBAAiB,CAAC,MAAM,iMAAiM,CAC/N,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,iBAAiB;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/audit/cli/validateResultsCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdValidateResults(argv: string[]): Promise<void>;
+//# sourceMappingURL=validateResultsCommand.d.ts.map

package/dist/audit/cli/validateResultsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateResultsCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/validateResultsCommand.ts"],"names":[],"mappings":"AAOA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtE"}

package/dist/audit/cli/validateResultsCommand.js

@@ -0,0 +1,32 @@
+import { readJsonFile } from "audit-tools/shared";
+import { resolve } from "node:path";
+import { loadArtifactBundle } from "../io/artifacts.js";
+import { validateAuditResults } from "../validation/auditResults.js";
+import { buildLineIndex } from "./lineIndex.js";
+import { getArtifactsDir, getFlag, getRootDir } from "./args.js";
+export async function cmdValidateResults(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const resultsPath = getFlag(argv, "--results");
+    if (!resultsPath) {
+        throw new Error("validate-results requires --results <file>");
+    }
+    const bundle = await loadArtifactBundle(artifactsDir);
+    const lineIndex = bundle.repo_manifest
+        ? await buildLineIndex(getRootDir(argv), bundle.repo_manifest)
+        : undefined;
+    const auditResults = await readJsonFile(resultsPath);
+    const issues = validateAuditResults(auditResults, bundle.audit_tasks ?? [], {
+        lineIndex,
+    });
+    const errors = issues.filter((issue) => issue.severity === "error");
+    const warnings = issues.filter((issue) => issue.severity === "warning");
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        results_path: resolve(resultsPath),
+        warning_count: warnings.length,
+        error_count: errors.length,
+        issues,
+    }, null, 2));
+    process.exitCode = errors.length > 0 ? 1 : 0;
+}
+//# sourceMappingURL=validateResultsCommand.js.map

package/dist/audit/cli/validateResultsCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateResultsCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/validateResultsCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,MAAM,YAAY,CAAU,WAAW,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE;QAC1E,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC;QAClC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM;KACP,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/audit/cli/waveManifest.d.ts

@@ -0,0 +1,41 @@
+import type { AuditTask } from "../types.js";
+declare const WAVE_MANIFEST_CONTRACT = "audit-code-wave/v1alpha1";
+export interface WaveSlotEntry {
+    run_id: string;
+    task_path: string;
+    prompt_path: string;
+    result_path: string;
+    stdout_path: string;
+    stderr_path: string;
+    status_path: string;
+    audit_results_path: string;
+    pending_tasks_path: string;
+    task_ids: string[];
+}
+export interface WaveManifest {
+    contract_version: typeof WAVE_MANIFEST_CONTRACT;
+    obligation_id: string;
+    started_at: string;
+    pid: number;
+    slots: WaveSlotEntry[];
+}
+export declare function waveManifestPath(artifactsDir: string): string;
+export declare function writeWaveManifest(artifactsDir: string, manifest: Omit<WaveManifest, "contract_version">): Promise<void>;
+export declare function readWaveManifest(artifactsDir: string): Promise<WaveManifest | null>;
+export declare function removeWaveManifest(artifactsDir: string): Promise<void>;
+export declare function buildWaveSlotEntry(slot: {
+    runId: string;
+    paths: {
+        taskPath: string;
+        promptPath: string;
+        resultPath: string;
+        stdoutPath: string;
+        stderrPath: string;
+        statusPath: string;
+    };
+    auditResultsPath: string;
+    pendingTasksPath: string;
+    group: AuditTask[];
+}): WaveSlotEntry;
+export {};
+//# sourceMappingURL=waveManifest.d.ts.map

package/dist/audit/cli/waveManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waveManifest.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/waveManifest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,QAAA,MAAM,sBAAsB,6BAA6B,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,OAAO,sBAAsB,CAAC;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,GAC/C,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE;IACJ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB,GACA,aAAa,CAaf"}

package/dist/audit/cli/waveManifest.js

@@ -0,0 +1,42 @@
+import { rm } from "node:fs/promises";
+import { join } from "node:path";
+import { isFileMissingError, readJsonFile, writeJsonFile } from "audit-tools/shared";
+const WAVE_MANIFEST_FILENAME = "wave-manifest.json";
+const WAVE_MANIFEST_CONTRACT = "audit-code-wave/v1alpha1";
+export function waveManifestPath(artifactsDir) {
+    return join(artifactsDir, "dispatch", WAVE_MANIFEST_FILENAME);
+}
+export async function writeWaveManifest(artifactsDir, manifest) {
+    await writeJsonFile(waveManifestPath(artifactsDir), {
+        contract_version: WAVE_MANIFEST_CONTRACT,
+        ...manifest,
+    });
+}
+export async function readWaveManifest(artifactsDir) {
+    try {
+        return await readJsonFile(waveManifestPath(artifactsDir));
+    }
+    catch (error) {
+        if (isFileMissingError(error))
+            return null;
+        throw error;
+    }
+}
+export async function removeWaveManifest(artifactsDir) {
+    await rm(waveManifestPath(artifactsDir), { force: true });
+}
+export function buildWaveSlotEntry(slot) {
+    return {
+        run_id: slot.runId,
+        task_path: slot.paths.taskPath,
+        prompt_path: slot.paths.promptPath,
+        result_path: slot.paths.resultPath,
+        stdout_path: slot.paths.stdoutPath,
+        stderr_path: slot.paths.stderrPath,
+        status_path: slot.paths.statusPath,
+        audit_results_path: slot.auditResultsPath,
+        pending_tasks_path: slot.pendingTasksPath,
+        task_ids: slot.group.map((t) => t.task_id),
+    };
+}
+//# sourceMappingURL=waveManifest.js.map

package/dist/audit/cli/waveManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"waveManifest.js","sourceRoot":"","sources":["../../../src/audit/cli/waveManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGrF,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AACpD,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAuB1D,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,QAAgD;IAEhD,MAAM,aAAa,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE;QAClD,gBAAgB,EAAE,sBAAsB;QACxC,GAAG,QAAQ;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAe,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,YAAoB;IAC3D,MAAM,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAaC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;QAC9B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAClC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAClC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAClC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAClC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAClC,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;QACzC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/audit/cli/workerResult.d.ts

@@ -0,0 +1,19 @@
+import type { WorkerResult } from "../types/workerResult.js";
+import type { RunPaths } from "../io/runArtifactTypes.js";
+export declare const WORKER_RESULT_CONTRACT_VERSION = "audit-code-worker-result/v1alpha1";
+export declare function buildWorkerResult(params: {
+    runId: string;
+    obligationId: string | null;
+    status: WorkerResult["status"];
+    progressMade: boolean;
+    selectedExecutor: string | null;
+    artifactsWritten: string[];
+    summary: string;
+    nextLikelyStep: string | null;
+    errors: string[];
+}): WorkerResult;
+export declare function persistWorkerRunArtifacts(paths: RunPaths, workerResult: WorkerResult, executionMode: string): Promise<void>;
+export declare function isWorkerResult(value: unknown): value is WorkerResult;
+export declare function buildWorkerFailureBlocker(workerResult: WorkerResult): string;
+export declare function formatAuditResultValidationError(issues: ReturnType<typeof import("../validation/auditResults.js").validateAuditResults>): string;
+//# sourceMappingURL=workerResult.d.ts.map

package/dist/audit/cli/workerResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerResult.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/workerResult.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAG1D,eAAO,MAAM,8BAA8B,sCAAsC,CAAC;AAElF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,GAAG,YAAY,CAaf;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,QAAQ,EACf,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAOpE;AAED,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAK5E;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,UAAU,CAAC,cAAc,+BAA+B,EAAE,oBAAoB,CAAC,GACtF,MAAM,CAKR"}

package/dist/audit/cli/workerResult.js

@@ -0,0 +1,43 @@
+import { writeJsonFile } from "audit-tools/shared";
+import { formatAuditResultIssues } from "../validation/auditResults.js";
+export const WORKER_RESULT_CONTRACT_VERSION = "audit-code-worker-result/v1alpha1";
+export function buildWorkerResult(params) {
+    return {
+        contract_version: WORKER_RESULT_CONTRACT_VERSION,
+        run_id: params.runId,
+        obligation_id: params.obligationId,
+        status: params.status,
+        progress_made: params.progressMade,
+        selected_executor: params.selectedExecutor,
+        artifacts_written: params.artifactsWritten,
+        summary: params.summary,
+        next_likely_step: params.nextLikelyStep,
+        errors: params.errors,
+    };
+}
+export async function persistWorkerRunArtifacts(paths, workerResult, executionMode) {
+    await writeJsonFile(paths.resultPath, workerResult);
+    await writeJsonFile(paths.statusPath, {
+        run_id: workerResult.run_id,
+        status: workerResult.status,
+        execution_mode: executionMode,
+        result_path: paths.resultPath,
+    });
+}
+export function isWorkerResult(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value.contract_version ===
+            WORKER_RESULT_CONTRACT_VERSION);
+}
+export function buildWorkerFailureBlocker(workerResult) {
+    const details = workerResult.errors.filter((error) => error.trim().length > 0);
+    return details.length > 0
+        ? `${workerResult.summary} ${details.join(" ")}`
+        : workerResult.summary;
+}
+export function formatAuditResultValidationError(issues) {
+    return (`audit-results validation failed with ${issues.length} error(s):\n` +
+        formatAuditResultIssues(issues));
+}
+//# sourceMappingURL=workerResult.js.map

package/dist/audit/cli/workerResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerResult.js","sourceRoot":"","sources":["../../../src/audit/cli/workerResult.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,MAAM,CAAC,MAAM,8BAA8B,GAAG,mCAAmC,CAAC;AAElF,MAAM,UAAU,iBAAiB,CAAC,MAUjC;IACC,OAAO;QACL,gBAAgB,EAAE,8BAA8B;QAChD,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;QAC1C,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAe,EACf,YAA0B,EAC1B,aAAqB;IAErB,MAAM,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,KAAK,CAAC,UAAU;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAwC,CAAC,gBAAgB;YACxD,8BAA8B,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,YAA0B;IAClE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,GAAG,YAAY,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAChD,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAuF;IAEvF,OAAO,CACL,wCAAwC,MAAM,CAAC,MAAM,cAAc;QACnE,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/dist/audit/cli/workerRunCommand.d.ts

@@ -0,0 +1,16 @@
+import { readJsonFile, writeJsonFile } from "audit-tools/shared";
+import { runAuditStep } from "./auditStep.js";
+/**
+ * Injectable IO + step seam for cmdWorkerRun. Production uses the real
+ * audit-tools/shared helpers and runAuditStep; tests override individual
+ * members to drive failure paths (e.g. a writeJsonFile that throws on the
+ * first call and succeeds on the fallback) without module-level mocking,
+ * which the project's `node --import tsx/esm --test` runner cannot do.
+ */
+export interface WorkerRunDeps {
+    readJsonFile: typeof readJsonFile;
+    writeJsonFile: typeof writeJsonFile;
+    runAuditStep: typeof runAuditStep;
+}
+export declare function cmdWorkerRun(argv: string[], deps?: WorkerRunDeps): Promise<void>;
+//# sourceMappingURL=workerRunCommand.d.ts.map

package/dist/audit/cli/workerRunCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerRunCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/workerRunCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKjE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9C;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,YAAY,EAAE,OAAO,YAAY,CAAC;CACnC;AAQD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,aAAoC,GACzC,OAAO,CAAC,IAAI,CAAC,CA2If"}

package/dist/audit/cli/workerRunCommand.js

@@ -0,0 +1,132 @@
+import { readJsonFile, writeJsonFile } from "audit-tools/shared";
+import { validateAuditResults, formatAuditResultIssues } from "../validation/auditResults.js";
+import { runAuditStep } from "./auditStep.js";
+import { buildLineIndexForPaths } from "./lineIndex.js";
+import { WORKER_RESULT_CONTRACT_VERSION, formatAuditResultValidationError } from "./workerResult.js";
+import { getFlag, looksLikeCliFlag } from "./args.js";
+const defaultWorkerRunDeps = {
+    readJsonFile,
+    writeJsonFile,
+    runAuditStep,
+};
+export async function cmdWorkerRun(argv, deps = defaultWorkerRunDeps) {
+    const { readJsonFile, writeJsonFile, runAuditStep } = deps;
+    const taskPath = getFlag(argv, "--task");
+    if (!taskPath) {
+        throw new Error("worker-run requires --task <path>");
+    }
+    const task = await readJsonFile(taskPath);
+    let workerResult;
+    try {
+        if (looksLikeCliFlag(task.audit_results_path)) {
+            throw new Error(`task.audit_results_path resolved to '${task.audit_results_path}', which looks like a CLI flag instead of a file path.`);
+        }
+        if (task.preferred_executor === "agent" && !task.audit_results_path) {
+            throw new Error("agent worker-run requires audit_results_path so provider-assisted review can be ingested.");
+        }
+        if (task.preferred_executor === "agent" && task.audit_results_path) {
+            const pendingTasks = task.pending_audit_tasks_path
+                ? await readJsonFile(task.pending_audit_tasks_path)
+                : [];
+            const auditResults = await readJsonFile(task.audit_results_path);
+            const pendingTaskIds = new Set(pendingTasks.map((item) => item.task_id));
+            const matchedResultCount = auditResults.filter((result) => pendingTaskIds.has(result.task_id)).length;
+            if (pendingTasks.length > 0 && matchedResultCount === 0) {
+                throw new Error("Provider-assisted review did not emit any audit results for the pending audit tasks.");
+            }
+            const issues = validateAuditResults(auditResults, pendingTasks, {
+                lineIndex: await buildLineIndexForPaths(task.repo_root, pendingTasks.flatMap((item) => item.file_paths)),
+            });
+            const errors = [];
+            const warnings = [];
+            for (const issue of issues) {
+                if (issue.severity === "error") {
+                    errors.push(issue);
+                }
+                else {
+                    warnings.push(issue);
+                }
+            }
+            if (warnings.length > 0) {
+                process.stderr.write(`audit-results validation: ${warnings.length} warning(s):\n` +
+                    formatAuditResultIssues(warnings) +
+                    "\n");
+            }
+            if (errors.length > 0) {
+                throw new Error(formatAuditResultValidationError(errors));
+            }
+        }
+        const preferredExecutor = task.preferred_executor === "agent"
+            ? "result_ingestion_executor"
+            : task.preferred_executor;
+        const result = await runAuditStep({
+            root: task.repo_root,
+            artifactsDir: task.artifacts_dir,
+            preferredExecutor,
+            auditResultsPath: task.audit_results_path,
+            runtimeUpdatesPath: task.runtime_updates_path,
+            externalAnalyzerPath: task.external_analyzer_results_path,
+        });
+        workerResult = {
+            contract_version: WORKER_RESULT_CONTRACT_VERSION,
+            run_id: task.run_id,
+            obligation_id: task.obligation_id,
+            status: result.progress_made ? "completed" : "no_progress",
+            progress_made: result.progress_made,
+            selected_executor: result.selected_executor,
+            artifacts_written: result.artifacts_written,
+            summary: result.progress_summary,
+            next_likely_step: result.next_likely_step,
+            errors: [],
+        };
+    }
+    catch (error) {
+        workerResult = {
+            contract_version: WORKER_RESULT_CONTRACT_VERSION,
+            run_id: task.run_id,
+            obligation_id: task.obligation_id,
+            status: "failed",
+            progress_made: false,
+            selected_executor: task.preferred_executor,
+            artifacts_written: [],
+            summary: `Worker failed for executor ${task.preferred_executor}: ${error instanceof Error ? error.message : String(error)}`,
+            next_likely_step: task.obligation_id,
+            errors: [error instanceof Error ? error.message : String(error)],
+        };
+    }
+    try {
+        await writeJsonFile(task.result_path, workerResult);
+    }
+    catch (writeError) {
+        const writeFailedResult = {
+            contract_version: WORKER_RESULT_CONTRACT_VERSION,
+            run_id: task.run_id,
+            obligation_id: task.obligation_id,
+            status: "failed",
+            progress_made: false,
+            selected_executor: task.preferred_executor,
+            artifacts_written: [],
+            summary: `Worker result could not be persisted to ${task.result_path}: ${writeError instanceof Error ? writeError.message : String(writeError)}`,
+            next_likely_step: task.obligation_id,
+            errors: [writeError instanceof Error ? writeError.message : String(writeError)],
+        };
+        process.stderr.write(`[workerRunCommand] Failed to write result to ${task.result_path}: ${writeError instanceof Error ? writeError.message : String(writeError)}\n`);
+        // Best-effort second attempt with the degraded result. If this also fails,
+        // rethrow so the caller sees a hard failure (COR-5332acdf).
+        try {
+            await writeJsonFile(task.result_path, writeFailedResult);
+        }
+        catch (fallbackError) {
+            process.stderr.write(`[workerRunCommand] Fallback write also failed: ${fallbackError instanceof Error ? fallbackError.message : String(fallbackError)}\n`);
+            throw fallbackError;
+        }
+        console.log(JSON.stringify(writeFailedResult, null, 2));
+        process.exitCode = 1;
+        return;
+    }
+    console.log(JSON.stringify(workerResult, null, 2));
+    if (workerResult.status === "failed") {
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=workerRunCommand.js.map

package/dist/audit/cli/workerRunCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerRunCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/workerRunCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIjE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAetD,MAAM,oBAAoB,GAAkB;IAC1C,YAAY;IACZ,aAAa;IACb,YAAY;CACb,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAc,EACd,OAAsB,oBAAoB;IAE1C,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAa,QAAQ,CAAC,CAAC;IAEtD,IAAI,YAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,kBAAkB,wDAAwD,CACxH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnE,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB;gBAChD,CAAC,CAAC,MAAM,YAAY,CAAc,IAAI,CAAC,wBAAwB,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,YAAY,GAAG,MAAM,YAAY,CACrC,IAAI,CAAC,kBAAkB,CACxB,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACzE,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACxD,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACnC,CAAC,MAAM,CAAC;YACT,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,YAAY,EAAE;gBAC9D,SAAS,EAAE,MAAM,sBAAsB,CACrC,IAAI,CAAC,SAAS,EACd,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAChD;aACF,CAAC,CAAC;YACH,MAAM,MAAM,GAAkB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAkB,EAAE,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,QAAQ,CAAC,MAAM,gBAAgB;oBAC1D,uBAAuB,CAAC,QAAQ,CAAC;oBACjC,IAAI,CACP,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,MAAM,iBAAiB,GACrB,IAAI,CAAC,kBAAkB,KAAK,OAAO;YACjC,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,iBAAiB;YACjB,gBAAgB,EAAE,IAAI,CAAC,kBAAkB;YACzC,kBAAkB,EAAE,IAAI,CAAC,oBAAoB;YAC7C,oBAAoB,EAAE,IAAI,CAAC,8BAA8B;SAC1D,CAAC,CAAC;QACH,YAAY,GAAG;YACb,gBAAgB,EAAE,8BAA8B;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC1D,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,OAAO,EAAE,MAAM,CAAC,gBAAgB;YAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,GAAG;YACb,gBAAgB,EAAE,8BAA8B;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,iBAAiB,EAAE,EAAE;YACrB,OAAO,EAAE,8BAA8B,IAAI,CAAC,kBAAkB,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC3H,gBAAgB,EAAE,IAAI,CAAC,aAAa;YACpC,MAAM,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,MAAM,iBAAiB,GAAiB;YACtC,gBAAgB,EAAE,8BAA8B;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,iBAAiB,EAAE,EAAE;YACrB,OAAO,EAAE,2CAA2C,IAAI,CAAC,WAAW,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YAChJ,gBAAgB,EAAE,IAAI,CAAC,aAAa;YACpC,MAAM,EAAE,CAAC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SAChF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,WAAW,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAC/I,CAAC;QACF,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CACrI,CAAC;YACF,MAAM,aAAa,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/audit/cli.d.ts

@@ -0,0 +1,21 @@
+import { getFlag, hasFlag, getArtifactsDir, getRootDir, getBatchResultsDir, getTimeoutMs, looksLikeCliFlag, countLines, warnIfNotGitRepo } from "./cli/args.js";
+import { runSample } from "./cli/sampleRunCommand.js";
+export { runSample };
+export declare const cliTestUtils: {
+    defaults: {
+        rootDir: string;
+        artifactsDir: string;
+        timeoutMs: number;
+    };
+    getFlag: typeof getFlag;
+    hasFlag: typeof hasFlag;
+    getArtifactsDir: typeof getArtifactsDir;
+    getRootDir: typeof getRootDir;
+    getBatchResultsDir: typeof getBatchResultsDir;
+    getTimeoutMs: typeof getTimeoutMs;
+    looksLikeCliFlag: typeof looksLikeCliFlag;
+    countLines: typeof countLines;
+    warnIfNotGitRepo: typeof warnIfNotGitRepo;
+};
+export declare function runCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/audit/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/audit/cli.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAmBtD,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAWxB,CAAC;AAoFF,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1D"}