audit-tools 0.28.0

package/dist/audit/orchestrator/intentInterpreter.js

@@ -0,0 +1,110 @@
+/**
+ * audit-code free_form_intent interpreter consumer.
+ *
+ * Bridges the audit-tools/shared clause interpreter to the pinned
+ * FreeFormIntentInterpretation seam contract (N-X06).
+ *
+ * INV-S04: the verbatim free_form_intent string MUST NOT appear in any output
+ * field. All fields are derived signals only.
+ */
+import { interpretIntent, FREE_FORM_INTENT_INTERPRETATION_VERSION, } from "audit-tools/shared";
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+const LENS_DETAIL_RE = /Matches lens\(es\): ([^,]+(?:, [^,]+)*)/;
+/** Extract the first lens name from a "Matches lens(es): ..." detail string. */
+function extractLens(detail) {
+    const m = LENS_DETAIL_RE.exec(detail);
+    if (!m || !m[1])
+        return undefined;
+    // Only take the first lens if multiple are listed; callers iterate encoded_clauses.
+    const first = m[1].split(",")[0]?.trim();
+    return first;
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Interpret a free-form intent string into the versioned seam contract shape.
+ *
+ * Delegates to interpretIntent (clause-aware) from audit-tools/shared and
+ * maps the output onto FreeFormIntentInterpretation.
+ *
+ * @param freeFormIntent - Raw free_form_intent from IntentCheckpoint (may be empty).
+ */
+export function interpretFreeFormIntentForAudit(freeFormIntent) {
+    const result = interpretIntent(freeFormIntent);
+    const encoded_clauses = [];
+    for (const clause of result.clauses) {
+        if (!clause.encodable || !clause.encoded_as)
+            continue;
+        const entry = {
+            text: clause.text,
+            kind: clause.encoded_as.kind,
+            detail: clause.encoded_as.detail,
+        };
+        if (entry.kind === "lens_weight") {
+            const lens = extractLens(entry.detail);
+            if (lens)
+                entry.lens = lens;
+        }
+        encoded_clauses.push(entry);
+    }
+    return {
+        schema_version: FREE_FORM_INTENT_INTERPRETATION_VERSION,
+        encoded_clauses,
+        checkpoint_questions: result.checkpoint_questions,
+        has_unencodable: result.has_unencodable,
+    };
+}
+/**
+ * Compute the blocking checkpoint questions raised by an intent checkpoint's
+ * `free_form_intent` that the host has NOT yet resolved.
+ *
+ * An unencodable clause is "resolved" only when the checkpoint carries a
+ * `constraint_clauses` entry for it (matched by checkpoint_question text) whose
+ * `host_answer` is a non-empty string. Until then the clause is an unanswered
+ * blocking question — returned here so the orchestrator can keep the
+ * `intent_checkpoint_current` obligation unsatisfied (re-firing `confirm_intent`)
+ * rather than silently dropping the directive at planning time.
+ *
+ * Deterministic — delegates encodability to the single shared authority
+ * (`interpretFreeFormIntentForAudit` → shared `interpretIntent`).
+ */
+export function unresolvedConstraintClauses(checkpoint) {
+    const freeForm = checkpoint?.free_form_intent ?? "";
+    if (!freeForm.trim())
+        return [];
+    // Delegate clause decomposition + encodability to the single shared authority.
+    const result = interpretIntent(freeForm);
+    if (!result.has_unencodable)
+        return [];
+    const answered = new Set();
+    for (const c of checkpoint?.constraint_clauses ?? []) {
+        if (typeof c.host_answer === "string" && c.host_answer.trim().length > 0) {
+            answered.add(c.checkpoint_question);
+        }
+    }
+    const unresolved = [];
+    for (const clause of result.clauses) {
+        if (clause.encodable || !clause.checkpoint_question)
+            continue;
+        if (answered.has(clause.checkpoint_question))
+            continue;
+        unresolved.push({
+            text: clause.text,
+            checkpoint_question: clause.checkpoint_question,
+        });
+    }
+    return unresolved;
+}
+/**
+ * True when the intent checkpoint has at least one unencodable free_form_intent
+ * clause the host has not yet answered. The orchestrator treats this as a
+ * not-yet-satisfied `intent_checkpoint_current` obligation so the blocking
+ * `confirm_intent` step re-fires (no clause silently dropped).
+ */
+export function hasUnresolvedConstraintClauses(checkpoint) {
+    return unresolvedConstraintClauses(checkpoint).length > 0;
+}
+//# sourceMappingURL=intentInterpreter.js.map

package/dist/audit/orchestrator/intentInterpreter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intentInterpreter.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/intentInterpreter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,eAAe,EACf,uCAAuC,GACxC,MAAM,oBAAoB,CAAC;AAQ5B,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,cAAc,GAAG,yCAAyC,CAAC;AAEjE,gFAAgF;AAChF,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,oFAAoF;IACpF,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO,KAAyB,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,+BAA+B,CAC7C,cAAsB;IAEtB,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAE/C,MAAM,eAAe,GAAoB,EAAE,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,SAAS;QACtD,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;YAC5B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;SACjC,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,cAAc,EAAE,uCAAuC;QACvD,eAAe;QACf,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAwC;IAExC,MAAM,QAAQ,GAAG,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAEhC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAiC,EAAE,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,SAAS;QAC9D,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACvD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAwC;IAExC,OAAO,2BAA2B,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5D,CAAC"}

package/dist/audit/orchestrator/lensSelection.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Lens selection resolver for operator-selected audit lenses.
+ *
+ * Accepts the `lenses.selected` array from session-config, validates it,
+ * de-duplicates, sorts with the canonical LENSES registry order, and always
+ * unions in the mandatory base set required for cross-perspective coverage.
+ */
+import { type Lens } from "audit-tools/shared";
+import type { ValidationIssue } from "audit-tools/shared";
+/**
+ * The mandatory base lenses that are always included regardless of the
+ * operator's selection. These are required for cross-perspective obligations
+ * that every audit must satisfy.
+ */
+export declare const MANDATORY_LENSES: readonly Lens[];
+/**
+ * Validate the `lenses.selected` session-config value and return any issues.
+ * Returns an empty array when the value is undefined (meaning "all lenses").
+ * Unknown lens names produce warnings (not errors) so custom lenses are accepted.
+ */
+export declare function validateLensSelection(value: unknown, path?: string): ValidationIssue[];
+/**
+ * Resolve the effective lens set from the operator-selected lenses.
+ *
+ * - When `selected` is undefined/null, returns all canonical lenses.
+ * - When `selected` is an array of lens names, unions in the mandatory base
+ *   lenses, de-duplicates, sorts canonical lenses to registry order, and
+ *   appends any custom (non-canonical) lenses at the end.
+ */
+export declare function resolveEffectiveLenses(selected: string[] | undefined | null): string[];
+/** Returns true when the given lens is in the effective set. */
+export declare function isLensEffective(lens: string, effectiveLenses: string[]): boolean;
+/** Returns true when the given lens is in the mandatory base set. */
+export declare function isMandatoryLens(lens: string): boolean;
+//# sourceMappingURL=lensSelection.d.ts.map

package/dist/audit/orchestrator/lensSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lensSelection.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/lensSelection.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAwB,KAAK,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,IAAI,EAKlC,CAAC;AAIX;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,IAAI,SAAoB,GACvB,eAAe,EAAE,CA0BnB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAoBtF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAEhF;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD"}

package/dist/audit/orchestrator/lensSelection.js

@@ -0,0 +1,81 @@
+/**
+ * Lens selection resolver for operator-selected audit lenses.
+ *
+ * Accepts the `lenses.selected` array from session-config, validates it,
+ * de-duplicates, sorts with the canonical LENSES registry order, and always
+ * unions in the mandatory base set required for cross-perspective coverage.
+ */
+import { LENSES, VALID_LENSES } from "audit-tools/shared";
+import { pushValidationIssue } from "audit-tools/shared";
+/**
+ * The mandatory base lenses that are always included regardless of the
+ * operator's selection. These are required for cross-perspective obligations
+ * that every audit must satisfy.
+ */
+export const MANDATORY_LENSES = [
+    "security",
+    "correctness",
+    "reliability",
+    "data_integrity",
+];
+const MANDATORY_LENS_SET = new Set(MANDATORY_LENSES);
+/**
+ * Validate the `lenses.selected` session-config value and return any issues.
+ * Returns an empty array when the value is undefined (meaning "all lenses").
+ * Unknown lens names produce warnings (not errors) so custom lenses are accepted.
+ */
+export function validateLensSelection(value, path = "lenses.selected") {
+    const issues = [];
+    if (value === undefined || value === null) {
+        return issues;
+    }
+    if (!Array.isArray(value)) {
+        pushValidationIssue(issues, path, `${path} must be an array of lens names.`);
+        return issues;
+    }
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== "string") {
+            pushValidationIssue(issues, `${path}[${index}]`, `${path}[${index}] must be a string.`);
+        }
+        else if (!VALID_LENSES.has(item)) {
+            pushValidationIssue(issues, `${path}[${index}]`, `${path}[${index}] "${item}" is not a canonical lens (custom lens accepted). Canonical: ${[...LENSES].join(", ")}.`, "warning");
+        }
+    }
+    return issues;
+}
+/**
+ * Resolve the effective lens set from the operator-selected lenses.
+ *
+ * - When `selected` is undefined/null, returns all canonical lenses.
+ * - When `selected` is an array of lens names, unions in the mandatory base
+ *   lenses, de-duplicates, sorts canonical lenses to registry order, and
+ *   appends any custom (non-canonical) lenses at the end.
+ */
+export function resolveEffectiveLenses(selected) {
+    if (selected === undefined || selected === null) {
+        return [...LENSES];
+    }
+    const canonicalSelected = selected.filter((s) => VALID_LENSES.has(s));
+    const customSelected = selected.filter((s) => !VALID_LENSES.has(s));
+    // Union canonical with mandatory base lenses.
+    const combined = new Set([...canonicalSelected, ...MANDATORY_LENSES]);
+    // Canonical in registry order, then custom appended (preserving input order).
+    const canonical = LENSES.filter((lens) => combined.has(lens));
+    const seenCustom = new Set();
+    const dedupedCustom = customSelected.filter((s) => {
+        if (seenCustom.has(s))
+            return false;
+        seenCustom.add(s);
+        return true;
+    });
+    return [...canonical, ...dedupedCustom];
+}
+/** Returns true when the given lens is in the effective set. */
+export function isLensEffective(lens, effectiveLenses) {
+    return effectiveLenses.includes(lens);
+}
+/** Returns true when the given lens is in the mandatory base set. */
+export function isMandatoryLens(lens) {
+    return MANDATORY_LENS_SET.has(lens);
+}
+//# sourceMappingURL=lensSelection.js.map

package/dist/audit/orchestrator/lensSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lensSelection.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/lensSelection.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAa,MAAM,oBAAoB,CAAC;AAErE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,UAAU;IACV,aAAa;IACb,aAAa;IACb,gBAAgB;CACR,CAAC;AAEX,MAAM,kBAAkB,GAAsB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,IAAI,GAAG,iBAAiB;IAExB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,kCAAkC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,mBAAmB,CACjB,MAAM,EACN,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,GAAG,IAAI,IAAI,KAAK,qBAAqB,CACtC,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,mBAAmB,CACjB,MAAM,EACN,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,gEAAgE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACnH,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAqC;IAC1E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAa,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAO,CAAC,GAAG,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;IAE5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChD,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,eAAyB;IACrE,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;AAC9C,CAAC"}

package/dist/audit/orchestrator/localCommands.d.ts

@@ -0,0 +1,16 @@
+export interface LocalCommandCandidate {
+    command: string;
+    args: string[];
+    display?: string;
+}
+export interface LocalCommandResult {
+    candidate: LocalCommandCandidate;
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+}
+export declare function __resolveFromPathForTests(command: string): string | null;
+export declare function runFirstAvailableCommand(root: string, candidates: LocalCommandCandidate[]): LocalCommandResult | null;
+export declare function resolveNodeTool(root: string, relativePath: string, args: string[], display: string): LocalCommandCandidate[];
+//# sourceMappingURL=localCommands.d.ts.map

package/dist/audit/orchestrator/localCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localCommands.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/localCommands.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAaD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAExE;AA4ED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,qBAAqB,EAAE,GAClC,kBAAkB,GAAG,IAAI,CAgC3B;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,MAAM,GACd,qBAAqB,EAAE,CAWzB"}

package/dist/audit/orchestrator/localCommands.js

@@ -0,0 +1,113 @@
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { delimiter, extname, isAbsolute, join } from "node:path";
+import { resolveExecArgv } from "audit-tools/shared";
+function toSpawnTuple(candidate) {
+    // Shared resolver applies the single Windows `.cmd`/`.bat` wrapping impl.
+    // The candidate command is already PATH-resolved (absolute path or
+    // process.execPath), so package-manager shim mapping is a no-op here.
+    const resolved = resolveExecArgv([candidate.command, ...candidate.args]);
+    return { command: resolved[0], args: resolved.slice(1) };
+}
+export function __resolveFromPathForTests(command) {
+    return resolveFromPath(command);
+}
+function resolveFromPath(command) {
+    if (command.trim().length === 0) {
+        return null;
+    }
+    if (command.includes("\\") ||
+        command.includes("/") ||
+        isAbsolute(command)) {
+        return existsSync(command) ? command : null;
+    }
+    const pathValue = process.env.PATH ?? "";
+    const pathEntries = pathValue
+        .split(delimiter)
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    const extensions = process.platform === "win32"
+        ? (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD")
+            .split(";")
+            .map((ext) => ext.trim().toLowerCase())
+            .filter((ext) => ext.length > 0)
+            .map((ext) => (ext.startsWith(".") ? ext : `.${ext}`))
+        : [""];
+    // On Win32 without an extension: probe PATHEXT extensions first, then the
+    // bare name (empty-string suffix). On Win32 with an extension, or non-Win32:
+    // use only the bare name (extensions is already [''] on non-Win32).
+    const effectiveExtensions = process.platform === "win32" && extname(command).length === 0
+        ? [...extensions, ""]
+        : [""];
+    for (const dir of pathEntries) {
+        for (const ext of effectiveExtensions) {
+            const candidatePath = join(dir, `${command}${ext}`);
+            if (existsSync(candidatePath)) {
+                return candidatePath;
+            }
+        }
+    }
+    return null;
+}
+function resolveCandidate(root, candidate) {
+    if (candidate.command === process.execPath) {
+        return candidate;
+    }
+    const resolvedPath = resolveFromPath(candidate.command);
+    if (resolvedPath) {
+        return {
+            ...candidate,
+            command: resolvedPath,
+        };
+    }
+    const repoLocalPath = join(root, candidate.command);
+    if (existsSync(repoLocalPath)) {
+        return {
+            ...candidate,
+            command: repoLocalPath,
+        };
+    }
+    return null;
+}
+export function runFirstAvailableCommand(root, candidates) {
+    for (const candidate of candidates) {
+        const resolved = resolveCandidate(root, candidate);
+        if (!resolved) {
+            continue;
+        }
+        const spawnTarget = toSpawnTuple(resolved);
+        const result = spawnSync(spawnTarget.command, spawnTarget.args, {
+            cwd: root,
+            env: process.env,
+            encoding: "utf8",
+            windowsHide: true,
+            stdio: "pipe",
+        });
+        return {
+            candidate: {
+                ...resolved,
+                display: candidate.display ?? [candidate.command, ...candidate.args].join(" "),
+            },
+            exitCode: result.status,
+            stdout: result.stdout ?? "",
+            stderr: result.stderr ?? "",
+            error: result.error
+                ? new Error(result.error.message, { cause: result.error })
+                : undefined,
+        };
+    }
+    return null;
+}
+export function resolveNodeTool(root, relativePath, args, display) {
+    const localToolPath = join(root, relativePath);
+    const candidates = [];
+    if (existsSync(localToolPath)) {
+        candidates.push({
+            command: process.execPath,
+            args: [localToolPath, ...args],
+            display,
+        });
+    }
+    return candidates;
+}
+//# sourceMappingURL=localCommands.js.map

package/dist/audit/orchestrator/localCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localCommands.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/localCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAgBrD,SAAS,YAAY,CAAC,SAAgC;IAIpD,0EAA0E;IAC1E,mEAAmE;IACnE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,UAAU,CAAC,OAAO,CAAC,EACnB,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,SAAS;SAC1B,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;aAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEX,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,mBAAmB,GACvB,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAC3D,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEX,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;YACpD,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9B,OAAO,aAAa,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,SAAgC;IAEhC,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,GAAG,SAAS;YACZ,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,GAAG,SAAS;YACZ,OAAO,EAAE,aAAa;SACvB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,UAAmC;IAEnC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;YAC9D,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE;gBACT,GAAG,QAAQ;gBACX,OAAO,EACL,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACxE;YACD,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACjB,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC1D,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAoB,EACpB,IAAc,EACd,OAAe;IAEf,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC;YAC9B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/audit/orchestrator/nextStep.d.ts

@@ -0,0 +1,12 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AuditObligation, AuditState } from "../types/auditState.js";
+export interface NextStepDecision {
+    state: AuditState;
+    selected_obligation: string | null;
+    selected_executor: string | null;
+    reason: string;
+}
+export declare const PRIORITY: string[];
+export declare function findObligation(obligations: AuditObligation[]): AuditObligation | undefined;
+export declare function decideNextStep(bundle: ArtifactBundle): NextStepDecision;
+//# sourceMappingURL=nextStep.d.ts.map

package/dist/audit/orchestrator/nextStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,QAAQ,EAAE,MAAM,EAkB5B,CAAC;AAMF,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAAE,GAC7B,eAAe,GAAG,SAAS,CAE7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAqCvE"}

package/dist/audit/orchestrator/nextStep.js

@@ -0,0 +1,63 @@
+import { findFirstActionableObligation } from "audit-tools/shared";
+import { EXECUTOR_REGISTRY } from "./executors.js";
+import { deriveAuditState } from "./state.js";
+export const PRIORITY = [
+    "provider_confirmation",
+    "repo_manifest",
+    "file_disposition",
+    "auto_fixes_applied",
+    "syntax_resolved",
+    "structure_artifacts",
+    "graph_enrichment_current",
+    "design_assessment_current",
+    "intent_checkpoint_current",
+    "design_review_contract_completed",
+    "design_review_conceptual_completed",
+    "planning_artifacts",
+    "audit_tasks_completed",
+    "audit_results_ingested",
+    "runtime_validation_current",
+    "synthesis_current",
+    "synthesis_narrative_current",
+];
+// audit-code binds its PRIORITY ordering to the shared scan; the selection
+// mechanism is single-sourced in `audit-tools/shared` (A3) so it cannot drift
+// from remediate-code's. The domain signature (PRIORITY-bound) is kept for the
+// existing call sites in advance.ts + decideNextStep.
+export function findObligation(obligations) {
+    return findFirstActionableObligation(PRIORITY, obligations);
+}
+export function decideNextStep(bundle) {
+    // After intermediate artifacts are cleaned up, trust the persisted complete
+    // state so re-runs don't attempt to rebuild from an empty bundle.
+    if (bundle.audit_state?.status === "complete") {
+        return {
+            state: bundle.audit_state,
+            selected_obligation: null,
+            selected_executor: null,
+            reason: "All known obligations are currently satisfied.",
+        };
+    }
+    const state = deriveAuditState(bundle);
+    const next = findObligation(state.obligations);
+    if (!next) {
+        return {
+            state,
+            selected_obligation: null,
+            selected_executor: null,
+            reason: state.status === "complete"
+                ? "All known obligations are currently satisfied."
+                : "No actionable missing obligation was found.",
+        };
+    }
+    const executor = EXECUTOR_REGISTRY.find((item) => item.obligation_ids.includes(next.id));
+    return {
+        state,
+        selected_obligation: next.id,
+        selected_executor: executor?.id ?? null,
+        reason: executor
+            ? `Selected highest-priority actionable obligation ${next.id}.`
+            : `No executor found for obligation ${next.id}; EXECUTOR_REGISTRY has no entry for this obligation ID. This is a configuration gap — the obligation was selected but cannot be dispatched.`,
+    };
+}
+//# sourceMappingURL=nextStep.js.map

package/dist/audit/orchestrator/nextStep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextStep.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAGnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAS9C,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,uBAAuB;IACvB,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,kCAAkC;IAClC,oCAAoC;IACpC,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,mBAAmB;IACnB,6BAA6B;CAC9B,CAAC;AAEF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAC5B,WAA8B;IAE9B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK;YACL,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,UAAU;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,OAAO;QACL,KAAK;QACL,mBAAmB,EAAE,IAAI,CAAC,EAAE;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;QACvC,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG;YAC/D,CAAC,CAAC,oCAAoC,IAAI,CAAC,EAAE,8IAA8I;KAC9L,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/partitionTaskGraph.d.ts

@@ -0,0 +1,32 @@
+import type { TaskAffinityGraph } from "./taskAffinityGraph.js";
+export interface GraphPacket {
+    packet_id: string;
+    task_ids: string[];
+    /** Sum of member content-token estimates (excludes prompt overhead). */
+    token_estimate: number;
+    /** Aggregate risk (sum of member risk estimates). */
+    risk_mass: number;
+    /** Max member risk — the tier this packet routes to. */
+    routing_risk: number;
+    /** True when a single atomic task alone exceeds the token ceiling. */
+    over_budget?: boolean;
+}
+export interface PartitionOptions {
+    /** Context-token ceiling for one packet (the dispatching model's window). */
+    contextTokenBudget: number;
+    /** Risk-mass ceiling — max aggregate risk one agent should hold at once. */
+    riskMassBudget: number;
+    /** Per-packet prompt overhead reserved against the context ceiling. */
+    promptOverheadTokens?: number;
+}
+/**
+ * Provisional risk-mass ceiling used until N5 supplies real per-model values.
+ * Node risk is in [0,1] (high-risk task ≈ 0.7–1.0), so ~4 lets a single agent
+ * hold a handful of high-risk tasks (a coherent critical flow) before the cap
+ * forces a split along the weakest internal edge. Tunable from real outcomes;
+ * a stronger model warrants a higher ceiling. Exposed as the `risk_mass_budget`
+ * dispatch knob.
+ */
+export declare const DEFAULT_RISK_MASS_BUDGET = 4;
+export declare function partitionTaskGraph(graph: TaskAffinityGraph, options: PartitionOptions): GraphPacket[];
+//# sourceMappingURL=partitionTaskGraph.d.ts.map

package/dist/audit/orchestrator/partitionTaskGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partitionTaskGraph.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/partitionTaskGraph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,wBAAwB,CAAC;AAkBhC,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wEAAwE;IACxE,cAAc,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAqB1C,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,gBAAgB,GACxB,WAAW,EAAE,CA0Ef"}

package/dist/audit/orchestrator/partitionTaskGraph.js

@@ -0,0 +1,98 @@
+/**
+ * Provisional risk-mass ceiling used until N5 supplies real per-model values.
+ * Node risk is in [0,1] (high-risk task ≈ 0.7–1.0), so ~4 lets a single agent
+ * hold a handful of high-risk tasks (a coherent critical flow) before the cap
+ * forces a split along the weakest internal edge. Tunable from real outcomes;
+ * a stronger model warrants a higher ceiling. Exposed as the `risk_mass_budget`
+ * dispatch knob.
+ */
+export const DEFAULT_RISK_MASS_BUDGET = 4;
+function find(clusters, i) {
+    let root = i;
+    while (clusters[root].parent !== root)
+        root = clusters[root].parent;
+    // path compression
+    let cur = i;
+    while (clusters[cur].parent !== cur) {
+        const next = clusters[cur].parent;
+        clusters[cur].parent = root;
+        cur = next;
+    }
+    return root;
+}
+export function partitionTaskGraph(graph, options) {
+    const overhead = options.promptOverheadTokens ?? 0;
+    const { contextTokenBudget, riskMassBudget } = options;
+    const nodes = graph.nodes;
+    const indexOf = new Map();
+    nodes.forEach((n, i) => indexOf.set(n.task_id, i));
+    const clusters = nodes.map((n, i) => ({
+        parent: i,
+        tokens: n.token_estimate,
+        risk: n.risk_estimate,
+    }));
+    // Process edges strongest-first; merge two clusters only when the merged
+    // cluster breaches neither ceiling. Deterministic tie-break by endpoints.
+    const sortedEdges = [...graph.edges].sort((a, b) => {
+        if (b.weight !== a.weight)
+            return b.weight - a.weight;
+        if (a.from !== b.from)
+            return a.from < b.from ? -1 : 1;
+        return a.to < b.to ? -1 : a.to > b.to ? 1 : 0;
+    });
+    for (const edge of sortedEdges) {
+        const ui = indexOf.get(edge.from);
+        const vi = indexOf.get(edge.to);
+        if (ui === undefined || vi === undefined)
+            continue;
+        const ru = find(clusters, ui);
+        const rv = find(clusters, vi);
+        if (ru === rv)
+            continue;
+        const combinedTokens = clusters[ru].tokens + clusters[rv].tokens;
+        const combinedRisk = clusters[ru].risk + clusters[rv].risk;
+        if (combinedTokens + overhead > contextTokenBudget)
+            continue;
+        if (combinedRisk > riskMassBudget)
+            continue;
+        // union rv into ru
+        clusters[rv].parent = ru;
+        clusters[ru].tokens = combinedTokens;
+        clusters[ru].risk = combinedRisk;
+    }
+    // Gather members per root.
+    const members = new Map();
+    nodes.forEach((node, i) => {
+        const root = find(clusters, i);
+        const list = members.get(root) ?? [];
+        list.push(node);
+        members.set(root, list);
+    });
+    const packets = [];
+    for (const list of members.values()) {
+        const taskIds = list.map((n) => n.task_id).sort();
+        const tokenEstimate = list.reduce((s, n) => s + n.token_estimate, 0);
+        const riskMass = list.reduce((s, n) => s + n.risk_estimate, 0);
+        const routingRisk = list.reduce((m, n) => Math.max(m, n.risk_estimate), 0);
+        const overBudget = list.length === 1 && tokenEstimate + overhead > contextTokenBudget;
+        packets.push({
+            packet_id: "",
+            task_ids: taskIds,
+            token_estimate: tokenEstimate,
+            risk_mass: Math.round(riskMass * 1000) / 1000,
+            routing_risk: Math.round(routingRisk * 1000) / 1000,
+            ...(overBudget ? { over_budget: true } : {}),
+        });
+    }
+    // Stable ordering: highest-routing-risk first, then by first task id.
+    packets.sort((a, b) => {
+        if (b.routing_risk !== a.routing_risk)
+            return b.routing_risk - a.routing_risk;
+        return a.task_ids[0] < b.task_ids[0] ? -1 : a.task_ids[0] > b.task_ids[0] ? 1 : 0;
+    });
+    packets.forEach((p, i) => {
+        p.packet_id = `packet-${i + 1}`;
+    });
+    return packets;
+}
+//# sourceMappingURL=partitionTaskGraph.js.map

package/dist/audit/orchestrator/partitionTaskGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partitionTaskGraph.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/partitionTaskGraph.ts"],"names":[],"mappings":"AA2CA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAQ1C,SAAS,IAAI,CAAC,QAAmB,EAAE,CAAS;IAC1C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,mBAAmB;IACnB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;QAC5B,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAwB,EACxB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;IACnD,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAc,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC,CAAC,cAAc;QACxB,IAAI,EAAE,CAAC,CAAC,aAAa;KACtB,CAAC,CAAC,CAAC;IAEJ,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACxB,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QAC3D,IAAI,cAAc,GAAG,QAAQ,GAAG,kBAAkB;YAAE,SAAS;QAC7D,IAAI,YAAY,GAAG,cAAc;YAAE,SAAS;QAC5C,mBAAmB;QACnB,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC;QACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,GAAG,QAAQ,GAAG,kBAAkB,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,aAAa;YAC7B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI;YAC7C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI;YACnD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QAC9E,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,CAAC,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/audit/orchestrator/planning.d.ts

@@ -0,0 +1,5 @@
+import type { CoverageMatrix, RepoManifest, UnitManifest } from "../types.js";
+import type { FileDisposition } from "audit-tools/shared";
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+export declare function initializeCoverageFromPlan(repoManifest: RepoManifest, unitManifest: UnitManifest, disposition: FileDisposition, externalAnalyzerResults?: ExternalAnalyzerResults): CoverageMatrix;
+//# sourceMappingURL=planning.d.ts.map

package/dist/audit/orchestrator/planning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planning.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/planning.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,cAAc,EAEd,YAAY,EACZ,YAAY,EACb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAgE5E,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,eAAe,EAC5B,uBAAuB,CAAC,EAAE,uBAAuB,GAChD,cAAc,CAwChB"}