audit-tools 0.28.0

package/dist/audit/io/runArtifacts.js

@@ -0,0 +1,254 @@
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { writeJsonFile } from "audit-tools/shared";
+import { CURRENT_TASK_FILENAME, CURRENT_PROMPT_FILENAME, CURRENT_TASKS_FILENAME, } from "../supervisor/operatorHandoff.js";
+const moduleDir = dirname(fileURLToPath(import.meta.url));
+// src/audit/io/ (source) or dist/audit/io/ (built) → three levels up is the
+// package root, which holds the packaged schemas/ asset dir.
+const packageRoot = resolve(moduleDir, "..", "..", "..");
+const auditResultSchemaPath = join(packageRoot, "schemas", "audit_result.schema.json");
+const auditResultsSchemaPath = join(packageRoot, "schemas", "audit_results.schema.json");
+const findingSchemaPath = join(packageRoot, "schemas", "finding.schema.json");
+/**
+ * Schema files copied into a dispatch run's `task-results/` directory so packet
+ * workers can optionally self-validate before submit. `audit_result.schema.json`
+ * `$ref`s the other two by relative filename, so all three must sit side-by-side
+ * for a validator to resolve them. Exported so merge-and-ingest can recognize
+ * them as legitimate (not stray) files in `task-results/`.
+ */
+export const PACKET_SCHEMA_FILENAMES = [
+    "audit_result.schema.json",
+    "finding.schema.json",
+    "audit_task.schema.json",
+];
+async function copySchemaFiles(targetDir, entries) {
+    await mkdir(targetDir, { recursive: true });
+    for (const entry of entries) {
+        await writeFile(join(targetDir, entry.name), await readFile(entry.srcPath, "utf8"), "utf8");
+    }
+}
+/**
+ * Copy {@link PACKET_SCHEMA_FILENAMES} into `targetDir` under their canonical
+ * filenames, making the AuditResult schema reachable from a dispatch run's
+ * `task-results/` directory.
+ */
+export async function writePacketSchemaFiles(targetDir, pkgRoot) {
+    await copySchemaFiles(targetDir, PACKET_SCHEMA_FILENAMES.map(name => ({ srcPath: join(pkgRoot, "schemas", name), name })));
+}
+// CURRENT_TASK_FILENAME, CURRENT_PROMPT_FILENAME, CURRENT_TASKS_FILENAME
+// imported from operatorHandoff.ts (shared canonical filenames).
+const CURRENT_SINGLE_TASK_FILENAME = "current-single-task.json";
+const CURRENT_SINGLE_TASK_PROMPT_FILENAME = "current-single-task-prompt.md";
+const CURRENT_SCHEMA_FILENAME = "audit-result.schema.json";
+const CURRENT_RESULTS_SCHEMA_FILENAME = "audit-results.schema.json";
+const CURRENT_FINDING_SCHEMA_FILENAME = "finding.schema.json";
+// Section labels for the single-task fallback prompt.
+const FALLBACK_PROMPT_TITLE = "# audit-code single-task fallback";
+const FALLBACK_SECTION_FILES = "Assigned files and line counts:";
+const FALLBACK_SECTION_INSTRUCTIONS = "Instructions:";
+function pad(value, size = 2) {
+    return String(value).padStart(size, "0");
+}
+function formatRunTimestamp(value) {
+    return [
+        pad(value.getUTCFullYear(), 4),
+        pad(value.getUTCMonth() + 1),
+        pad(value.getUTCDate()),
+        "T",
+        pad(value.getUTCHours()),
+        pad(value.getUTCMinutes()),
+        pad(value.getUTCSeconds()),
+        pad(value.getUTCMilliseconds(), 3),
+        "Z",
+    ].join("");
+}
+function normalizeRunIdSegment(value) {
+    const normalized = (value ?? "terminal")
+        .trim()
+        .replace(/[^a-zA-Z0-9_-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return normalized.length > 0 ? normalized : "terminal";
+}
+export function buildRunId(obligationId, index, now = new Date()) {
+    const timestamp = formatRunTimestamp(now);
+    const obligation = normalizeRunIdSegment(obligationId);
+    return `${timestamp}_${obligation}_${String(index).padStart(3, "0")}`;
+}
+export function getRunPaths(artifactsDir, runId) {
+    const runDir = join(artifactsDir, "runs", runId);
+    return {
+        runDir,
+        taskPath: join(runDir, "task.json"),
+        promptPath: join(runDir, "prompt.md"),
+        resultPath: join(runDir, "result.json"),
+        stdoutPath: join(runDir, "stdout.log"),
+        stderrPath: join(runDir, "stderr.log"),
+        statusPath: join(runDir, "status.json"),
+    };
+}
+export async function ensureSupervisorDirs(artifactsDir) {
+    await mkdir(join(artifactsDir, "dispatch"), { recursive: true });
+    await mkdir(join(artifactsDir, "runs"), { recursive: true });
+}
+async function writeDispatchSchemaFiles(artifactsDir) {
+    const dispatchDir = join(artifactsDir, "dispatch");
+    // Ensure the dispatch dir exists: this is now written before the pointer
+    // files (which formerly created it), and parallel-slot dispatch may reach
+    // here before the canonical dispatch has run.
+    await copySchemaFiles(dispatchDir, [
+        { srcPath: auditResultSchemaPath, name: CURRENT_SCHEMA_FILENAME },
+        { srcPath: auditResultsSchemaPath, name: CURRENT_RESULTS_SCHEMA_FILENAME },
+        { srcPath: findingSchemaPath, name: CURRENT_FINDING_SCHEMA_FILENAME },
+    ]);
+}
+function renderSingleTaskFallbackPrompt(task, auditTask) {
+    const commandArgv = JSON.stringify(task.worker_command);
+    const lineCounts = auditTask.file_paths
+        .map((path) => `- ${path}: ${auditTask.file_line_counts?.[path] ?? 0} lines`)
+        .join("\n");
+    return [
+        FALLBACK_PROMPT_TITLE,
+        "",
+        "Use this file only when the conversation host cannot dispatch subagents.",
+        "This prompt is generated deterministically from the first pending task.",
+        "",
+        `run_id: ${task.run_id}`,
+        `task_id: ${auditTask.task_id}`,
+        `unit_id: ${auditTask.unit_id}`,
+        `pass_id: ${auditTask.pass_id}`,
+        `lens: ${auditTask.lens}`,
+        `rationale: ${auditTask.rationale}`,
+        "",
+        FALLBACK_SECTION_FILES,
+        lineCounts,
+        "",
+        FALLBACK_SECTION_INSTRUCTIONS,
+        "1. Read only the assigned files above.",
+        "2. Produce exactly one AuditResult object for task_id above, wrapped in a JSON array.",
+        "3. Write that JSON array to audit_results_path.",
+        "4. Run worker_command exactly, then stop without checking audit state or reading a report.",
+        "",
+        `audit_results_path: ${task.audit_results_path}`,
+        `worker_command: ${commandArgv}`,
+        "",
+    ].join("\n");
+}
+async function writeSingleTaskFallbackFiles(artifactsDir, task, currentTasks) {
+    if (task.preferred_executor !== "agent" ||
+        !task.audit_results_path ||
+        !currentTasks ||
+        currentTasks.length === 0) {
+        return;
+    }
+    const firstTask = currentTasks[0];
+    await writeJsonFile(join(artifactsDir, "dispatch", CURRENT_SINGLE_TASK_FILENAME), firstTask);
+    await writeFile(join(artifactsDir, "dispatch", CURRENT_SINGLE_TASK_PROMPT_FILENAME), renderSingleTaskFallbackPrompt(task, firstTask), "utf8");
+}
+export async function writeWorkerTaskFiles(task, prompt, paths, artifactsDir, currentTasks, options = {}, log) {
+    try {
+        await mkdir(paths.runDir, { recursive: true });
+        await writeJsonFile(paths.taskPath, task);
+        await writeFile(paths.promptPath, prompt, "utf8");
+        await writeJsonFile(paths.statusPath, {
+            run_id: task.run_id,
+            status: "dispatched",
+        });
+        // The result schema files are always required by the worker, regardless of
+        // whether this run owns the shared "current dispatch" pointer files.
+        await writeDispatchSchemaFiles(artifactsDir);
+        // Parallel-slot dispatch passes updateDispatch:false so each slot does NOT
+        // clobber the shared current-task / current-prompt / current-tasks pointers
+        // (only the single canonical dispatch should own them). The default path
+        // (updateDispatch unset/true) refreshes those pointers and the single-task
+        // fallback.
+        const updateDispatch = options.updateDispatch !== false;
+        if (!updateDispatch) {
+            return;
+        }
+        await writeJsonFile(join(artifactsDir, "dispatch", CURRENT_TASK_FILENAME), task);
+        await writeFile(join(artifactsDir, "dispatch", CURRENT_PROMPT_FILENAME), prompt, "utf8");
+        await writeJsonFile(join(artifactsDir, "dispatch", CURRENT_TASKS_FILENAME), currentTasks ?? []);
+        await writeSingleTaskFallbackFiles(artifactsDir, task, currentTasks);
+    }
+    catch (err) {
+        log?.event("dispatch_io_error", {
+            run_id: task.run_id ?? null,
+            function: "writeWorkerTaskFiles",
+            error: String(err),
+        });
+        throw err;
+    }
+}
+export async function writeDispatchBatchFiles(artifactsDir, runs, currentTasks, log) {
+    try {
+        const summary = {
+            contract_version: "audit-code-dispatch/v1alpha1",
+            mode: "parallel-batch",
+            run_count: runs.length,
+            current_tasks_path: join(artifactsDir, "dispatch", CURRENT_TASKS_FILENAME),
+            runs,
+        };
+        const promptLines = [
+            "# audit-code parallel dispatch",
+            "",
+            `This batch launched ${runs.length} deferred review run(s).`,
+            "Each run keeps its own task.json, prompt.md, result.json, and status.json under .audit-tools/audit/runs/<run_id>/.",
+            "Use current-tasks.json for the combined task list. The per-run files below are operational references for launched workers; do not read per-run prompt or schema files unless debugging a failed dispatch.",
+            "",
+            "Runs:",
+            ...runs.flatMap((run) => [
+                `- ${run.run_id}`,
+                `  task: ${run.task_path}`,
+                `  prompt (worker-owned; do not read during normal orchestration): ${run.prompt_path}`,
+                `  result: ${run.result_path}`,
+                `  status: ${run.status_path}`,
+                ...(run.audit_results_path
+                    ? [`  audit results: ${run.audit_results_path}`]
+                    : []),
+                ...(run.pending_audit_tasks_path
+                    ? [`  pending tasks: ${run.pending_audit_tasks_path}`]
+                    : []),
+            ]),
+            "",
+        ];
+        await writeJsonFile(join(artifactsDir, "dispatch", CURRENT_TASK_FILENAME), summary);
+        await writeFile(join(artifactsDir, "dispatch", CURRENT_PROMPT_FILENAME), promptLines.join("\n"), "utf8");
+        await writeJsonFile(join(artifactsDir, "dispatch", CURRENT_TASKS_FILENAME), currentTasks);
+        await writeDispatchSchemaFiles(artifactsDir);
+    }
+    catch (err) {
+        log?.event("dispatch_io_error", {
+            run_id: "batch",
+            function: "writeDispatchBatchFiles",
+            error: String(err),
+        });
+        throw err;
+    }
+}
+export async function clearDispatchFiles(artifactsDir, log) {
+    const targets = [
+        CURRENT_TASK_FILENAME,
+        CURRENT_PROMPT_FILENAME,
+        CURRENT_TASKS_FILENAME,
+        CURRENT_SINGLE_TASK_FILENAME,
+        CURRENT_SINGLE_TASK_PROMPT_FILENAME,
+        CURRENT_SCHEMA_FILENAME,
+        CURRENT_RESULTS_SCHEMA_FILENAME,
+        CURRENT_FINDING_SCHEMA_FILENAME,
+    ];
+    try {
+        for (const name of targets) {
+            await rm(join(artifactsDir, "dispatch", name), { force: true });
+        }
+    }
+    catch (err) {
+        log?.event("dispatch_io_error", {
+            run_id: "clear",
+            function: "clearDispatchFiles",
+            error: String(err),
+        });
+        throw err;
+    }
+}
+//# sourceMappingURL=runArtifacts.js.map

package/dist/audit/io/runArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runArtifacts.js","sourceRoot":"","sources":["../../../src/audit/io/runArtifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kCAAkC,CAAC;AAI1C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACzD,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;AACvF,MAAM,sBAAsB,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;AACzF,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,0BAA0B;IAC1B,qBAAqB;IACrB,wBAAwB;CAChB,CAAC;AAEX,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,OAAiD;IAEjD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,OAAe;IAEf,MAAM,eAAe,CAAC,SAAS,EAAE,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7H,CAAC;AACD,yEAAyE;AACzE,iEAAiE;AACjE,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAChE,MAAM,mCAAmC,GAAG,+BAA+B,CAAC;AAC5E,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAC3D,MAAM,+BAA+B,GAAG,2BAA2B,CAAC;AACpE,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AAE9D,sDAAsD;AACtD,MAAM,qBAAqB,GAAG,mCAAmC,CAAC;AAClE,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AACjE,MAAM,6BAA6B,GAAG,eAAe,CAAC;AAEtD,SAAS,GAAG,CAAC,KAAa,EAAE,IAAI,GAAG,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAW;IACrC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC9B,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACvB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG;KACJ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAoB;IACjD,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;SACrC,IAAI,EAAE;SACN,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,YAA2B,EAC3B,KAAa,EACb,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,KAAa;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACnC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QACrC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QACtC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;QACtC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB;IAEpB,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,YAAoB;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACnD,yEAAyE;IACzE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,eAAe,CAAC,WAAW,EAAE;QACjC,EAAE,OAAO,EAAE,qBAAqB,EAAG,IAAI,EAAE,uBAAuB,EAAE;QAClE,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,+BAA+B,EAAE;QAC1E,EAAE,OAAO,EAAE,iBAAiB,EAAO,IAAI,EAAE,+BAA+B,EAAE;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,8BAA8B,CAAC,IAAgB,EAAE,SAAoB;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU;SACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;SAC5E,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,qBAAqB;QACrB,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,EAAE;QACF,WAAW,IAAI,CAAC,MAAM,EAAE;QACxB,YAAY,SAAS,CAAC,OAAO,EAAE;QAC/B,YAAY,SAAS,CAAC,OAAO,EAAE;QAC/B,YAAY,SAAS,CAAC,OAAO,EAAE;QAC/B,SAAS,SAAS,CAAC,IAAI,EAAE;QACzB,cAAc,SAAS,CAAC,SAAS,EAAE;QACnC,EAAE;QACF,sBAAsB;QACtB,UAAU;QACV,EAAE;QACF,6BAA6B;QAC7B,wCAAwC;QACxC,uFAAuF;QACvF,iDAAiD;QACjD,4FAA4F;QAC5F,EAAE;QACF,uBAAuB,IAAI,CAAC,kBAAkB,EAAE;QAChD,mBAAmB,WAAW,EAAE;QAChC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,YAAoB,EACpB,IAAgB,EAChB,YAA0B;IAE1B,IACE,IAAI,CAAC,kBAAkB,KAAK,OAAO;QACnC,CAAC,IAAI,CAAC,kBAAkB;QACxB,CAAC,YAAY;QACb,YAAY,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;IACnC,MAAM,aAAa,CACjB,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,4BAA4B,CAAC,EAC5D,SAAS,CACV,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,mCAAmC,CAAC,EACnE,8BAA8B,CAAC,IAAI,EAAE,SAAS,CAAC,EAC/C,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgB,EAChB,MAAc,EACd,KAAe,EACf,YAAoB,EACpB,YAA0B,EAC1B,UAAwC,EAAE,EAC1C,GAAsE;IAEtE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAE7C,2EAA2E;QAC3E,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,YAAY;QACZ,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC;QACxD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,aAAa,CACjB,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,EACrD,IAAI,CACL,CAAC;QACF,MAAM,SAAS,CACb,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,uBAAuB,CAAC,EACvD,MAAM,EACN,MAAM,CACP,CAAC;QACF,MAAM,aAAa,CACjB,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,sBAAsB,CAAC,EACtD,YAAY,IAAI,EAAE,CACnB,CAAC;QACF,MAAM,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,KAAK,CAAC,mBAAmB,EAAE;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,QAAQ,EAAE,sBAAsB;YAChC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,IAAwB,EACxB,YAAyB,EACzB,GAAsE;IAEtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG;YACd,gBAAgB,EAAE,8BAA8B;YAChD,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,kBAAkB,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,sBAAsB,CAAC;YAC1E,IAAI;SACL,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,gCAAgC;YAChC,EAAE;YACF,uBAAuB,IAAI,CAAC,MAAM,0BAA0B;YAC5D,oHAAoH;YACpH,4MAA4M;YAC5M,EAAE;YACF,OAAO;YACP,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvB,KAAK,GAAG,CAAC,MAAM,EAAE;gBACjB,WAAW,GAAG,CAAC,SAAS,EAAE;gBAC1B,qEAAqE,GAAG,CAAC,WAAW,EAAE;gBACtF,aAAa,GAAG,CAAC,WAAW,EAAE;gBAC9B,aAAa,GAAG,CAAC,WAAW,EAAE;gBAC9B,GAAG,CAAC,GAAG,CAAC,kBAAkB;oBACxB,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,kBAAkB,EAAE,CAAC;oBAChD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,GAAG,CAAC,wBAAwB;oBAC9B,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,wBAAwB,EAAE,CAAC;oBACtD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,EAAE;SACH,CAAC;QAEF,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,SAAS,CACb,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,uBAAuB,CAAC,EACvD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EACtB,MAAM,CACP,CAAC;QACF,MAAM,aAAa,CACjB,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,sBAAsB,CAAC,EACtD,YAAY,CACb,CAAC;QACF,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,KAAK,CAAC,mBAAmB,EAAE;YAC9B,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,yBAAyB;YACnC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,GAAsE;IAEtE,MAAM,OAAO,GAAG;QACd,qBAAqB;QACrB,uBAAuB;QACvB,sBAAsB;QACtB,4BAA4B;QAC5B,mCAAmC;QACnC,uBAAuB;QACvB,+BAA+B;QAC/B,+BAA+B;KAChC,CAAC;IACF,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,KAAK,CAAC,mBAAmB,EAAE;YAC9B,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,oBAAoB;YAC9B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/audit/io/toolingManifest.d.ts

@@ -0,0 +1,4 @@
+import type { ToolingManifest } from "../types/toolingManifest.js";
+export declare const TOOLING_INPUTS: readonly ["audit-code.mjs", "audit-code-wrapper-lib.mjs", "package.json", "dist", "schemas", "skills/audit-code"];
+export declare function buildToolingManifest(): Promise<ToolingManifest>;
+//# sourceMappingURL=toolingManifest.d.ts.map

package/dist/audit/io/toolingManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolingManifest.d.ts","sourceRoot":"","sources":["../../../src/audit/io/toolingManifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAWnE,eAAO,MAAM,cAAc,mHAOjB,CAAC;AA+CX,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,eAAe,CAAC,CA0BrE"}

package/dist/audit/io/toolingManifest.js

@@ -0,0 +1,79 @@
+import { createHash } from "node:crypto";
+import { readdir, readFile, stat } from "node:fs/promises";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+// dist/audit/io/toolingManifest.js → repo root is three levels up
+// (io → audit → dist → repo root).
+const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..", "..", "..");
+export const TOOLING_INPUTS = [
+    "audit-code.mjs",
+    "audit-code-wrapper-lib.mjs",
+    "package.json",
+    "dist",
+    "schemas",
+    "skills/audit-code",
+];
+async function pathExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function collectFiles(path) {
+    const info = await stat(path);
+    if (info.isFile()) {
+        return [path];
+    }
+    if (!info.isDirectory()) {
+        return [];
+    }
+    const entries = await readdir(path, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+        files.push(...(await collectFiles(join(path, entry.name))));
+    }
+    return files;
+}
+async function readPackageVersion() {
+    const packageJsonPath = join(PACKAGE_ROOT, "package.json");
+    if (!(await pathExists(packageJsonPath))) {
+        return null;
+    }
+    try {
+        const packageJson = JSON.parse(await readFile(packageJsonPath, "utf8"));
+        return typeof packageJson.version === "string" ? packageJson.version : null;
+    }
+    catch (error) {
+        process.stderr.write(`[audit-code] readPackageVersion: failed to read/parse ${packageJsonPath}: ${error instanceof Error ? error.message : String(error)}\n`);
+        return null;
+    }
+}
+export async function buildToolingManifest() {
+    const hash = createHash("sha256");
+    const existingInputs = [];
+    for (const input of TOOLING_INPUTS) {
+        const absolute = join(PACKAGE_ROOT, input);
+        if (!(await pathExists(absolute))) {
+            continue;
+        }
+        existingInputs.push(input);
+        const files = await collectFiles(absolute);
+        for (const file of files.sort((a, b) => a.localeCompare(b))) {
+            hash.update(relative(PACKAGE_ROOT, file).replace(/\\/g, "/"));
+            hash.update("\n");
+            hash.update(await readFile(file));
+            hash.update("\n");
+        }
+    }
+    return {
+        generated_at: new Date().toISOString(),
+        package_root: PACKAGE_ROOT,
+        package_version: await readPackageVersion(),
+        implementation_hash: hash.digest("hex"),
+        inputs: existingInputs,
+    };
+}
+//# sourceMappingURL=toolingManifest.js.map

package/dist/audit/io/toolingManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolingManifest.js","sourceRoot":"","sources":["../../../src/audit/io/toolingManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,kEAAkE;AAClE,mCAAmC;AACnC,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,IAAI,EACJ,IAAI,EACJ,IAAI,CACL,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,gBAAgB;IAChB,4BAA4B;IAC5B,cAAc;IACd,MAAM;IACN,SAAS;IACT,mBAAmB;CACX,CAAC;AAEX,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAErE,CAAC;QACF,OAAO,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,eAAe,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACxI,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,YAAY,EAAE,YAAY;QAC1B,eAAe,EAAE,MAAM,kBAAkB,EAAE;QAC3C,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACvC,MAAM,EAAE,cAAc;KACvB,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/advance.d.ts

@@ -0,0 +1,5 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AdvanceAuditOptions, AdvanceAuditResult } from "./advanceTypes.js";
+export type { AdvanceAuditOptions, AdvanceAuditResult } from "./advanceTypes.js";
+export declare function advanceAudit(bundle: ArtifactBundle, options?: AdvanceAuditOptions): Promise<AdvanceAuditResult>;
+//# sourceMappingURL=advance.d.ts.map

package/dist/audit/orchestrator/advance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advance.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/advance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AA6BjF,wBAAsB,YAAY,CAChC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CA+J7B"}

package/dist/audit/orchestrator/advance.js

@@ -0,0 +1,172 @@
+import { randomUUID } from "node:crypto";
+import { decideNextStep, findObligation } from "./nextStep.js";
+import { deriveAuditState } from "./state.js";
+import { computeArtifactMetadata } from "./artifactMetadata.js";
+import { EXECUTOR_RUNNERS } from "./executorRunners.js";
+import { AGENT_FEEDBACK_FILENAME, RunLogger } from "audit-tools/shared";
+function cloneState(state) {
+    return {
+        ...state,
+        blockers: [...(state.blockers ?? [])],
+        obligations: state.obligations.map((obligation) => ({ ...obligation })),
+    };
+}
+function formatExecutorFailure(selectedExecutor, selectedObligation, error) {
+    const detail = error instanceof Error ? error.message : String(error ?? "unknown error");
+    return new Error(`advanceAudit ${selectedExecutor} failed while resolving ${selectedObligation ?? "the current obligation"}: ${detail}`, {
+        cause: error instanceof Error ? error : undefined,
+    });
+}
+function createCorrelationId() {
+    return randomUUID().replace(/-/g, "").slice(0, 8);
+}
+export async function advanceAudit(bundle, options = {}) {
+    const log = options.runLogger ?? RunLogger.disabled();
+    const correlationId = createCorrelationId();
+    const decision = decideNextStep(bundle);
+    const forcedExecutor = options.preferredExecutor ?? null;
+    const selectedExecutor = forcedExecutor ?? decision.selected_executor;
+    const selectedObligation = forcedExecutor
+        ? `forced:${forcedExecutor}`
+        : decision.selected_obligation;
+    log.event({
+        phase: "advance",
+        kind: "obligation",
+        correlationId,
+        obligation: selectedObligation ?? undefined,
+        note: decision.reason,
+    });
+    if (!selectedExecutor) {
+        const state = cloneState(decision.state);
+        state.last_executor = bundle.audit_state?.last_executor ?? state.last_executor;
+        state.last_obligation =
+            selectedObligation ??
+                bundle.audit_state?.last_obligation ??
+                state.last_obligation;
+        return {
+            audit_state: state,
+            selected_obligation: selectedObligation,
+            selected_executor: selectedExecutor,
+            progress_made: false,
+            artifacts_written: ["audit_state.json"],
+            progress_summary: decision.reason,
+            next_likely_step: null,
+            updated_bundle: { ...bundle, audit_state: state },
+        };
+    }
+    const executorStartedAt = Date.now();
+    log.event({
+        phase: "advance",
+        kind: "executor_start",
+        correlationId,
+        obligation: selectedObligation ?? undefined,
+        note: selectedExecutor,
+    });
+    const runner = EXECUTOR_RUNNERS[selectedExecutor];
+    if (!runner) {
+        // No deterministic runner. The host-delegation dispatch executors (`agent`,
+        // `rolling_dispatch_executor`) are routed through host delegation before
+        // reaching advanceAudit; dispatched directly they return a no-progress
+        // "selected but not yet dispatched" handoff rather than throwing — the
+        // absence of a runner is the single source of truth for "not deterministically
+        // dispatchable" (replaces the old default-branch + registry⇄switch invariant).
+        log.event({
+            phase: "advance",
+            kind: "error",
+            correlationId,
+            obligation: selectedObligation ?? undefined,
+            note: `Unrecognized executor: ${selectedExecutor}`,
+        });
+        log.event({
+            phase: "advance",
+            kind: "executor_end",
+            correlationId,
+            obligation: selectedObligation ?? undefined,
+            note: selectedExecutor,
+            duration_ms: Date.now() - executorStartedAt,
+        });
+        const state = deriveAuditState(bundle);
+        state.last_executor = selectedExecutor;
+        state.last_obligation = selectedObligation ?? undefined;
+        return {
+            audit_state: state,
+            selected_obligation: selectedObligation,
+            selected_executor: selectedExecutor,
+            progress_made: false,
+            artifacts_written: ["audit_state.json"],
+            progress_summary: `Executor ${selectedExecutor} is selected but not yet dispatched through advance-audit.`,
+            next_likely_step: selectedObligation,
+            updated_bundle: { ...bundle, audit_state: state },
+        };
+    }
+    let run;
+    try {
+        run = await runner(bundle, {
+            options,
+            log,
+            correlationId,
+            obligation: selectedObligation,
+        });
+    }
+    catch (error) {
+        log.event({
+            phase: "advance",
+            kind: "error",
+            correlationId,
+            obligation: selectedObligation ?? undefined,
+            note: `Executor ${selectedExecutor} threw: ${error instanceof Error ? error.message : String(error ?? "unknown error")}`,
+        });
+        throw formatExecutorFailure(selectedExecutor, selectedObligation, error);
+    }
+    log.event({
+        phase: "advance",
+        kind: "executor_end",
+        correlationId,
+        obligation: selectedObligation ?? undefined,
+        note: selectedExecutor,
+        duration_ms: Date.now() - executorStartedAt,
+    });
+    for (const artifact of run.artifacts_written) {
+        log.event({
+            phase: "advance",
+            kind: "artifact_write",
+            correlationId,
+            obligation: selectedObligation ?? undefined,
+            artifact,
+        });
+    }
+    // tooling_manifest.json and agent-feedback.jsonl are produced outside the
+    // executor loop (environment probe / worker appends), so no executor ever
+    // lists them in artifacts_written. Treat both as always-updated: their
+    // metadata entries are recomputed from live content each advance — unchanged
+    // content keeps its revision (no churn), changed content bumps it so
+    // dependents re-stale exactly once instead of perpetually mismatching a
+    // carried-forward stale hash.
+    const metadata = computeArtifactMetadata(run.updated, bundle.artifact_metadata, [...run.artifacts_written, "tooling_manifest.json", AGENT_FEEDBACK_FILENAME]);
+    const metadataBundle = {
+        ...run.updated,
+        tooling_manifest: bundle.tooling_manifest,
+        agent_reflections: bundle.agent_reflections,
+        artifact_metadata: metadata,
+    };
+    const updatedState = deriveAuditState(metadataBundle);
+    updatedState.last_executor = selectedExecutor;
+    updatedState.last_obligation = selectedObligation ?? undefined;
+    const finalizedBundle = { ...metadataBundle, audit_state: updatedState };
+    const nextObligation = findObligation(updatedState.obligations);
+    return {
+        audit_state: updatedState,
+        selected_obligation: selectedObligation,
+        selected_executor: selectedExecutor,
+        progress_made: true,
+        artifacts_written: [
+            ...run.artifacts_written,
+            "artifact_metadata.json",
+            "audit_state.json",
+        ],
+        progress_summary: run.progress_summary,
+        next_likely_step: nextObligation?.id ?? null,
+        updated_bundle: finalizedBundle,
+    };
+}
+//# sourceMappingURL=advance.js.map

package/dist/audit/orchestrator/advance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advance.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/advance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAKxE,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO;QACL,GAAG,KAAK;QACR,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,gBAAwB,EACxB,kBAAiC,EACjC,KAAc;IAEd,MAAM,MAAM,GACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;IAC5E,OAAO,IAAI,KAAK,CACd,gBAAgB,gBAAgB,2BAA2B,kBAAkB,IAAI,wBAAwB,KAAK,MAAM,EAAE,EACtH;QACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAClD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAsB,EACtB,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;IACtD,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,MAAM,gBAAgB,GAAG,cAAc,IAAI,QAAQ,CAAC,iBAAiB,CAAC;IACtE,MAAM,kBAAkB,GAAG,cAAc;QACvC,CAAC,CAAC,UAAU,cAAc,EAAE;QAC5B,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAEjC,GAAG,CAAC,KAAK,CAAC;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,YAAY;QAClB,aAAa;QACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;QAC3C,IAAI,EAAE,QAAQ,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,WAAW,EAAE,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC;QAC/E,KAAK,CAAC,eAAe;YACnB,kBAAkB;gBAClB,MAAM,CAAC,WAAW,EAAE,eAAe;gBACnC,KAAK,CAAC,eAAe,CAAC;QACxB,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,kBAAkB;YACvC,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;YACvC,gBAAgB,EAAE,QAAQ,CAAC,MAAM;YACjC,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACrC,GAAG,CAAC,KAAK,CAAC;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,gBAAgB;QACtB,aAAa;QACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;QAC3C,IAAI,EAAE,gBAAgB;KACvB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,+EAA+E;QAC/E,+EAA+E;QAC/E,GAAG,CAAC,KAAK,CAAC;YACR,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,OAAO;YACb,aAAa;YACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;YAC3C,IAAI,EAAE,0BAA0B,gBAAgB,EAAE;SACnD,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC;YACR,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,cAAc;YACpB,aAAa;YACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;YAC3C,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;SAC5C,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,CAAC,aAAa,GAAG,gBAAgB,CAAC;QACvC,KAAK,CAAC,eAAe,GAAG,kBAAkB,IAAI,SAAS,CAAC;QACxD,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,kBAAkB;YACvC,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;YACvC,gBAAgB,EAAE,YAAY,gBAAgB,4DAA4D;YAC1G,gBAAgB,EAAE,kBAAkB;YACpC,cAAc,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE;YACzB,OAAO;YACP,GAAG;YACH,aAAa;YACb,UAAU,EAAE,kBAAkB;SAC/B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC;YACR,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,OAAO;YACb,aAAa;YACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;YAC3C,IAAI,EAAE,YAAY,gBAAgB,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE;SACzH,CAAC,CAAC;QACH,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,GAAG,CAAC,KAAK,CAAC;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,cAAc;QACpB,aAAa;QACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;QAC3C,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;KAC5C,CAAC,CAAC;IACH,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC;YACR,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,gBAAgB;YACtB,aAAa;YACb,UAAU,EAAE,kBAAkB,IAAI,SAAS;YAC3C,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,6EAA6E;IAC7E,qEAAqE;IACrE,wEAAwE;IACxE,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CACtC,GAAG,CAAC,OAAO,EACX,MAAM,CAAC,iBAAiB,EACxB,CAAC,GAAG,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAC7E,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,GAAG,GAAG,CAAC,OAAO;QACd,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,MAAM,YAAY,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACtD,YAAY,CAAC,aAAa,GAAG,gBAAgB,CAAC;IAC9C,YAAY,CAAC,eAAe,GAAG,kBAAkB,IAAI,SAAS,CAAC;IAC/D,MAAM,eAAe,GAAG,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACzE,MAAM,cAAc,GAAG,cAAc,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAEhE,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,kBAAkB;QACvC,iBAAiB,EAAE,gBAAgB;QACnC,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE;YACjB,GAAG,GAAG,CAAC,iBAAiB;YACxB,wBAAwB;YACxB,kBAAkB;SACnB;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,gBAAgB,EAAE,cAAc,EAAE,EAAE,IAAI,IAAI;QAC5C,cAAc,EAAE,eAAe;KAChC,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/advanceTypes.d.ts

@@ -0,0 +1,50 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AuditState } from "../types/auditState.js";
+import type { AuditResult } from "../types.js";
+import type { RuntimeValidationReport } from "../types/runtimeValidation.js";
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+import type { AnalyzerSetting, SynthesisNarrative, RunLogger } from "audit-tools/shared";
+import type { EdgeReasoningResults } from "./edgeReasoning.js";
+/**
+ * Public input/output contract of `advanceAudit`. Lives in this leaf module —
+ * imported by both `advance.ts` and `executorRunners.ts` — so the executor runners
+ * can type their `AuditExecutorCtx.options` on `AdvanceAuditOptions` without a
+ * back-import into `advance.ts`, keeping the orchestrator import graph acyclic
+ * (ARC-1fa005bb: madge counts type-only edges).
+ */
+export interface AdvanceAuditOptions {
+    root?: string;
+    lineIndex?: Record<string, number>;
+    /** Path → size_bytes (from the repo manifest); drives byte-based packet token sizing. */
+    sizeIndex?: Record<string, number>;
+    auditResults?: AuditResult[];
+    runtimeValidationUpdates?: RuntimeValidationReport;
+    externalAnalyzerResults?: ExternalAnalyzerResults;
+    /** Host/provider-supplied synthesis narrative; merged by synthesis_narrative_executor. */
+    narrativeResults?: SynthesisNarrative;
+    /** Per-analyzer resolution policy for the optional graph-enrichment pass. */
+    analyzers?: Record<string, AnalyzerSetting>;
+    /** Phase 4B gate (session-config `graph.llm_edge_reasoning`); default off. */
+    graphLlmEdgeReasoning?: boolean;
+    /** Phase 4B host-supplied reason rewrites for low-confidence graph edges. */
+    edgeReasoningResults?: EdgeReasoningResults;
+    /**
+     * Git ref for Phase 3 delta mode (the `--since` flag). When set and resolvable
+     * against a git repo, planning scopes coverage to the changed files and their
+     * graph neighbours; otherwise the run is a full audit.
+     */
+    since?: string;
+    preferredExecutor?: string;
+    runLogger?: RunLogger;
+}
+export interface AdvanceAuditResult {
+    audit_state: AuditState;
+    selected_obligation: string | null;
+    selected_executor: string | null;
+    progress_made: boolean;
+    artifacts_written: string[];
+    progress_summary: string;
+    next_likely_step: string | null;
+    updated_bundle: ArtifactBundle;
+}
+//# sourceMappingURL=advanceTypes.d.ts.map

package/dist/audit/orchestrator/advanceTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanceTypes.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/advanceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,wBAAwB,CAAC,EAAE,uBAAuB,CAAC;IACnD,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IACtC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,8EAA8E;IAC9E,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,UAAU,CAAC;IACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,cAAc,CAAC;CAChC"}

package/dist/audit/orchestrator/advanceTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=advanceTypes.js.map

package/dist/audit/orchestrator/advanceTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanceTypes.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/advanceTypes.ts"],"names":[],"mappings":""}

package/dist/audit/orchestrator/artifactFreshness.d.ts

@@ -0,0 +1,4 @@
+export declare function stableStringify(value: unknown): string;
+export declare function normalizeForMetadataHash(artifactName: string, value: unknown): unknown;
+export declare function hashArtifactValue(artifactName: string, value: unknown): string;
+//# sourceMappingURL=artifactFreshness.d.ts.map

package/dist/audit/orchestrator/artifactFreshness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactFreshness.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/artifactFreshness.ts"],"names":[],"mappings":"AAEA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CActD;AA8ED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,GACb,OAAO,CAgBT;AAED,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,GACb,MAAM,CAIR"}