audit-tools 0.28.0

package/dist/audit/orchestrator/selectiveDeepening/shared.js

@@ -0,0 +1,121 @@
+import { createHash } from "node:crypto";
+import { SEVERITIES, CONFIDENCES, severityRank, confidenceRank, } from "audit-tools/shared";
+// Shared primitives for the selective-deepening strategies. Each strategy
+// module under this directory builds one kind of follow-up task; they all draw
+// the ranks, id/hash helpers, path utilities, and tag/limit constants from
+// here. The public entry (`buildSelectiveDeepeningTasks`) lives in `index.ts`.
+export const DEEPENING_TAG = "selective_deepening";
+export const LENS_VERIFICATION_TAG = "lens_verification";
+export const LENS_VERIFICATION_FOLLOWUP_TAG = "lens_verification_followup";
+export const MAX_LENS_VERIFICATION_FILES = 12;
+export const MAX_LENS_VERIFICATION_RESULT_SUMMARIES = 12;
+export const MAX_VERIFICATION_FOLLOWUP_TASKS_PER_RESULT = 4;
+export const IMPORTANT_LENS_VERIFICATION_LENSES = new Set([
+    "security",
+    "data_integrity",
+    "reliability",
+]);
+// Derived from the shared single-source rank functions (no hand-copied table).
+// Kept as Record lookups because consumers index by severity/confidence AND
+// reference named levels (e.g. SEVERITY_RANK.high) as a priority threshold.
+export const SEVERITY_RANK = Object.fromEntries(SEVERITIES.map((s) => [s, severityRank(s)]));
+export const CONFIDENCE_RANK = Object.fromEntries(CONFIDENCES.map((c) => [c, confidenceRank(c)]));
+export function priorityRank(priority) {
+    switch (priority) {
+        case "high":
+            return 3;
+        case "medium":
+            return 2;
+        case "low":
+        default:
+            return 1;
+    }
+}
+export function isDeepeningTask(task) {
+    return task?.tags?.includes(DEEPENING_TAG) ?? false;
+}
+export function isLensVerificationTask(task) {
+    return task?.tags?.includes(LENS_VERIFICATION_TAG) ?? false;
+}
+export function sanitizeSegment(value) {
+    const sanitized = value
+        .replace(/[^a-zA-Z0-9_-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return sanitized.length > 0 ? sanitized : "followup";
+}
+export function shortHash(value) {
+    return createHash("sha1").update(value).digest("hex").slice(0, 10);
+}
+function resultLineIndex(result) {
+    return Object.fromEntries(result.file_coverage.map((coverage) => [
+        coverage.path,
+        coverage.total_lines,
+    ]));
+}
+export function lineCountForPath(path, task, result, lineIndex) {
+    return (task?.file_line_counts?.[path] ??
+        resultLineIndex(result)[path] ??
+        lineIndex?.[path] ??
+        0);
+}
+export function uniqueSorted(values) {
+    return [...new Set(values)].sort((a, b) => a.localeCompare(b));
+}
+export function intersects(left, right) {
+    const rightSet = new Set(right);
+    return left.some((value) => rightSet.has(value));
+}
+export function pathsForFinding(finding, result, task) {
+    const assignedPaths = new Set([
+        ...(task?.file_paths ?? []),
+        ...result.file_coverage.map((coverage) => coverage.path),
+    ]);
+    const affected = finding.affected_files
+        .map((file) => file.path)
+        .filter((path) => assignedPaths.size === 0 || assignedPaths.has(path));
+    return uniqueSorted(affected.length > 0
+        ? affected
+        : result.file_coverage.map((coverage) => coverage.path));
+}
+export function taskIdFor(prefix, values) {
+    return `deepening:${prefix}:${shortHash(values.join("\0"))}`;
+}
+export function lineCountFromSources(path, tasks, results, lineIndex) {
+    for (const task of tasks) {
+        const count = task.file_line_counts?.[path];
+        if (count !== undefined) {
+            return count;
+        }
+    }
+    for (const result of results) {
+        const coverage = result.file_coverage.find((item) => item.path === path);
+        if (coverage) {
+            return coverage.total_lines;
+        }
+    }
+    return lineIndex?.[path] ?? 0;
+}
+export function formatList(values, maxItems) {
+    const visible = values.slice(0, maxItems);
+    const suffix = values.length > maxItems ? `, ... (+${values.length - maxItems} more)` : "";
+    return `${visible.join(", ")}${suffix}`;
+}
+export function priorityLabel(priority) {
+    return priority ?? "low";
+}
+export function getExternalAnalyzerPaths(externalAnalyzerResults) {
+    return new Set((externalAnalyzerResults?.results ?? [])
+        .map((result) => result && typeof result.path === "string" && result.path.length > 0
+        ? result.path
+        : null)
+        .filter((path) => path !== null));
+}
+export function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+export function normalizedSuggestedPriority(value, fallback = "medium") {
+    return value === "high" || value === "medium" || value === "low"
+        ? value
+        : fallback;
+}
+//# sourceMappingURL=shared.js.map

package/dist/audit/orchestrator/selectiveDeepening/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../src/audit/orchestrator/selectiveDeepening/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,cAAc,GACf,MAAM,oBAAoB,CAAC;AAI5B,0EAA0E;AAC1E,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAC3E,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAO;IAC9D,UAAU;IACV,gBAAgB;IAChB,aAAa;CACd,CAAC,CAAC;AAEH,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GACxB,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAG7D,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAC1B,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAGhE,CAAC;AAEJ,MAAM,UAAU,YAAY,CAAC,QAA+B;IAC1D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC;QACX,KAAK,KAAK,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAkBD,MAAM,UAAU,eAAe,CAAC,IAA2B;IACzD,OAAO,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,OAAO,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,SAAS,GAAG,KAAK;SACpB,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB;IAC1C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI;QACb,QAAQ,CAAC,WAAW;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,IAA2B,EAC3B,MAAmB,EACnB,SAAkC;IAElC,OAAO,CACL,IAAI,EAAE,gBAAgB,EAAE,CAAC,IAAI,CAAC;QAC9B,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QAC7B,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,KAAe;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAgB,EAChB,MAAmB,EACnB,IAA2B;IAE3B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QAC3B,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc;SACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,YAAY,CACjB,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,MAAgB;IACxD,OAAO,aAAa,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAAkB,EAClB,OAAsB,EACtB,SAAkC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAgB,EAAE,QAAgB;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAA+B;IAE/B,OAAO,QAAQ,IAAI,KAAK,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,uBAAiD;IAEjD,OAAO,IAAI,GAAG,CACZ,CAAC,uBAAuB,EAAE,OAAO,IAAI,EAAE,CAAC;SACrC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,IAAI,CACT;SACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,WAA+C,QAAQ;IAEvD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK;QAC9D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC"}

package/dist/audit/orchestrator/selectiveDeepening/stewardFollowup.d.ts

@@ -0,0 +1,7 @@
+import type { AuditResult, AuditTask } from "../../types.js";
+export declare function buildVerificationFollowupTasks(params: {
+    result: AuditResult;
+    task?: AuditTask;
+    lineIndex?: Record<string, number>;
+}): AuditTask[];
+//# sourceMappingURL=stewardFollowup.d.ts.map

package/dist/audit/orchestrator/selectiveDeepening/stewardFollowup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stewardFollowup.d.ts","sourceRoot":"","sources":["../../../../src/audit/orchestrator/selectiveDeepening/stewardFollowup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa7D,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,GAAG,SAAS,EAAE,CAuFd"}

package/dist/audit/orchestrator/selectiveDeepening/stewardFollowup.js

@@ -0,0 +1,73 @@
+import { DEEPENING_TAG, LENS_VERIFICATION_FOLLOWUP_TAG, MAX_VERIFICATION_FOLLOWUP_TASKS_PER_RESULT, isLensVerificationTask, isRecord, normalizedSuggestedPriority, sanitizeSegment, taskIdFor, uniqueSorted, } from "./shared.js";
+export function buildVerificationFollowupTasks(params) {
+    if (!params.result.verification?.needs_followup ||
+        !Array.isArray(params.result.verification.followup_tasks) ||
+        !isLensVerificationTask(params.task)) {
+        return [];
+    }
+    const coverageByPath = new Map(params.result.file_coverage.map((coverage) => [
+        coverage.path,
+        coverage.total_lines,
+    ]));
+    const concerns = [
+        ...(params.result.verification.concerns ?? []),
+        ...(params.result.verification.coverage_concerns ?? []),
+        ...(params.result.verification.confidence_concerns ?? []),
+    ];
+    const tasks = [];
+    for (let index = 0; index < params.result.verification.followup_tasks.length; index++) {
+        if (tasks.length >= MAX_VERIFICATION_FOLLOWUP_TASKS_PER_RESULT) {
+            break;
+        }
+        const suggestion = params.result.verification.followup_tasks[index];
+        if (!isRecord(suggestion)) {
+            continue;
+        }
+        if (suggestion.lens !== params.result.lens) {
+            continue;
+        }
+        const suggestedPaths = Array.isArray(suggestion.file_paths)
+            ? suggestion.file_paths.filter((path) => typeof path === "string" && coverageByPath.has(path))
+            : [];
+        const paths = uniqueSorted(suggestedPaths);
+        if (paths.length === 0) {
+            continue;
+        }
+        const suggestedRationale = typeof suggestion.rationale === "string" && suggestion.rationale.trim().length > 0
+            ? suggestion.rationale.trim()
+            : concerns[0] ?? "Lens steward requested bounded follow-up.";
+        const suggestedId = typeof suggestion.task_id === "string" && suggestion.task_id.trim().length > 0
+            ? suggestion.task_id
+            : `suggestion-${index + 1}`;
+        tasks.push({
+            task_id: taskIdFor("steward-followup", [
+                params.result.task_id,
+                String(index),
+                suggestedId,
+                ...paths,
+                suggestedRationale,
+            ]),
+            unit_id: typeof suggestion.unit_id === "string" && suggestion.unit_id.trim().length > 0
+                ? suggestion.unit_id
+                : params.result.unit_id,
+            pass_id: `deepening:${params.result.pass_id}`,
+            lens: params.result.lens,
+            file_paths: paths,
+            file_line_counts: Object.fromEntries(paths.map((path) => [
+                path,
+                coverageByPath.get(path) ?? params.lineIndex?.[path] ?? 0,
+            ])),
+            rationale: `Lens steward follow-up from ${params.result.task_id}. ${suggestedRationale}`,
+            priority: normalizedSuggestedPriority(suggestion.priority, "medium"),
+            tags: [
+                DEEPENING_TAG,
+                LENS_VERIFICATION_FOLLOWUP_TAG,
+                "trigger:lens_verification",
+                `source_task:${sanitizeSegment(params.result.task_id)}`,
+            ],
+            status: "pending",
+        });
+    }
+    return tasks;
+}
+//# sourceMappingURL=stewardFollowup.js.map

package/dist/audit/orchestrator/selectiveDeepening/stewardFollowup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stewardFollowup.js","sourceRoot":"","sources":["../../../../src/audit/orchestrator/selectiveDeepening/stewardFollowup.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,0CAA0C,EAC1C,sBAAsB,EACtB,QAAQ,EACR,2BAA2B,EAC3B,eAAe,EACf,SAAS,EACT,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,8BAA8B,CAAC,MAI9C;IACC,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC;QACzD,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,EACpC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI;QACb,QAAQ,CAAC,WAAW;KACrB,CAAC,CACH,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,IAAI,EAAE,CAAC;KAC1D,CAAC;IACF,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACtF,IAAI,KAAK,CAAC,MAAM,IAAI,0CAA0C,EAAE,CAAC;YAC/D,MAAM;QACR,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAY,CAAC;QAC/E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;YACzD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAkB,EAAE,CACvB,OAAO,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CACvD;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,kBAAkB,GACtB,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAChF,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE;YAC7B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,2CAA2C,CAAC;QACjE,MAAM,WAAW,GACf,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC5E,CAAC,CAAC,UAAU,CAAC,OAAO;YACpB,CAAC,CAAC,cAAc,KAAK,GAAG,CAAC,EAAE,CAAC;QAEhC,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,SAAS,CAAC,kBAAkB,EAAE;gBACrC,MAAM,CAAC,MAAM,CAAC,OAAO;gBACrB,MAAM,CAAC,KAAK,CAAC;gBACb,WAAW;gBACX,GAAG,KAAK;gBACR,kBAAkB;aACnB,CAAC;YACF,OAAO,EACL,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAC5E,CAAC,CAAC,UAAU,CAAC,OAAO;gBACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAC3B,OAAO,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;YAC7C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,IAAI;gBACJ,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1D,CAAC,CACH;YACD,SAAS,EACP,+BAA+B,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,kBAAkB,EAAE;YAC/E,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACpE,IAAI,EAAE;gBACJ,aAAa;gBACb,8BAA8B;gBAC9B,2BAA2B;gBAC3B,eAAe,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;aACxD;YACD,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/orchestrator/selectiveDeepening.d.ts

@@ -0,0 +1,3 @@
+export { buildSelectiveDeepeningTasks, selectiveDeepeningTestUtils, } from "./selectiveDeepening/index.js";
+export type { BuildSelectiveDeepeningTaskOptions } from "./selectiveDeepening/index.js";
+//# sourceMappingURL=selectiveDeepening.d.ts.map

package/dist/audit/orchestrator/selectiveDeepening.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectiveDeepening.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/selectiveDeepening.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/audit/orchestrator/selectiveDeepening.js

@@ -0,0 +1,7 @@
+// Public entry for selective deepening. The implementation was split by
+// task-building strategy into ./selectiveDeepening/ (finding-followup, conflict,
+// high-risk-clean, runtime-validation, lens-verification, steward-followup) with
+// the shared primitives in ./selectiveDeepening/shared.ts. This barrel preserves
+// the original module path so importers and tests are unaffected.
+export { buildSelectiveDeepeningTasks, selectiveDeepeningTestUtils, } from "./selectiveDeepening/index.js";
+//# sourceMappingURL=selectiveDeepening.js.map

package/dist/audit/orchestrator/selectiveDeepening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectiveDeepening.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/selectiveDeepening.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,kEAAkE;AAClE,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC"}

package/dist/audit/orchestrator/staleness.d.ts

@@ -0,0 +1,3 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+export declare function computeStaleArtifacts(bundle: ArtifactBundle): Set<string>;
+//# sourceMappingURL=staleness.d.ts.map

package/dist/audit/orchestrator/staleness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staleness.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA0BzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAqGzE"}

package/dist/audit/orchestrator/staleness.js

@@ -0,0 +1,102 @@
+import { getArtifactValue } from "../io/artifacts.js";
+import { ARTIFACT_DEPENDENTS_MAP, ARTIFACT_DEPENDS_ON_MAP, } from "./dependencyMap.js";
+import { present } from "./artifactMetadata.js";
+import { hashArtifactValue, stableStringify, } from "./artifactFreshness.js";
+function computeContentHash(artifactName, bundle) {
+    const value = getArtifactValue(bundle, artifactName);
+    if (value === undefined || value === null)
+        return undefined;
+    return hashArtifactValue(artifactName, value);
+}
+// The canonical "X depends on Y" table (ARC-cebe3421) — same single source of
+// truth computeArtifactMetadata records against.
+const ARTIFACT_DEPENDENCIES_MAP = ARTIFACT_DEPENDS_ON_MAP;
+export function computeStaleArtifacts(bundle) {
+    const stale = new Set();
+    const metadata = bundle.artifact_metadata;
+    if (metadata) {
+        for (const [artifactName, entry] of Object.entries(metadata.artifacts)) {
+            if (!present(bundle, artifactName))
+                continue;
+            const expectedDependencies = [...(ARTIFACT_DEPENDENCIES_MAP[artifactName] ?? [])]
+                .filter((dependencyName) => dependencyName !== "artifact_metadata.json")
+                .sort();
+            const recordedDependencies = Object.keys(entry.dependency_revisions).sort();
+            if (stableStringify(expectedDependencies) !==
+                stableStringify(recordedDependencies)) {
+                stale.add(artifactName);
+                continue;
+            }
+            let isStale = false;
+            for (const [dependencyName, recordedRevision] of Object.entries(entry.dependency_revisions)) {
+                if (!present(bundle, dependencyName)) {
+                    if (recordedRevision > 0) {
+                        isStale = true;
+                        break;
+                    }
+                    continue;
+                }
+                const dependencyEntry = metadata.artifacts[dependencyName];
+                if (!dependencyEntry) {
+                    if (present(bundle, dependencyName) || recordedRevision > 0) {
+                        isStale = true;
+                        break;
+                    }
+                    continue;
+                }
+                const currentHash = computeContentHash(dependencyName, bundle);
+                if (!currentHash ||
+                    dependencyEntry.content_hash !== currentHash ||
+                    dependencyEntry.revision !== recordedRevision) {
+                    isStale = true;
+                    break;
+                }
+            }
+            if (isStale)
+                stale.add(artifactName);
+        }
+    }
+    if (metadata) {
+        for (const [upstream, downstreamList] of Object.entries(ARTIFACT_DEPENDENTS_MAP)) {
+            if (!downstreamList)
+                continue;
+            if (upstream === "tooling_manifest.json" && !present(bundle, upstream)) {
+                continue;
+            }
+            if (!present(bundle, upstream)) {
+                for (const downstream of downstreamList) {
+                    const hasMetadataEntry = Boolean(metadata.artifacts[downstream]);
+                    if (present(bundle, downstream) && !hasMetadataEntry) {
+                        stale.add(downstream);
+                    }
+                }
+            }
+        }
+    }
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const [upstream, downstreamList] of Object.entries(ARTIFACT_DEPENDENTS_MAP)) {
+            if (!downstreamList)
+                continue;
+            if (!stale.has(upstream)) {
+                continue;
+            }
+            for (const downstream of downstreamList) {
+                if (present(bundle, downstream) && !stale.has(downstream)) {
+                    stale.add(downstream);
+                    changed = true;
+                }
+            }
+        }
+    }
+    if (stale.size > 0) {
+        process.stderr.write(JSON.stringify({
+            kind: "staleness",
+            stale_artifacts: [...stale].sort(),
+            ts: new Date().toISOString(),
+        }) + "\n");
+    }
+    return stale;
+}
+//# sourceMappingURL=staleness.js.map

package/dist/audit/orchestrator/staleness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staleness.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/staleness.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,kBAAkB,CACzB,YAAoB,EACpB,MAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,MAAM,yBAAyB,GAC7B,uBAAuB,CAAC;AAE1B,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE1C,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;gBAAE,SAAS;YAC7C,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;iBAC9E,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,KAAK,wBAAwB,CAAC;iBACvE,IAAI,EAAE,CAAC;YACV,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,IACE,eAAe,CAAC,oBAAoB,CAAC;gBACrC,eAAe,CAAC,oBAAoB,CAAC,EACrC,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7D,KAAK,CAAC,oBAAoB,CAC3B,EAAE,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;oBACrC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBACzB,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,IAAI,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;wBAC5D,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC/D,IACE,CAAC,WAAW;oBACZ,eAAe,CAAC,YAAY,KAAK,WAAW;oBAC5C,eAAe,CAAC,QAAQ,KAAK,gBAAgB,EAC7C,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,QAAQ,KAAK,uBAAuB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;oBACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjE,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACrD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,uBAAuB,CACxB,EAAE,CAAC;YACF,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,WAAW;YACjB,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;YAClC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/orchestrator/state.d.ts

@@ -0,0 +1,4 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AuditState } from "../types/auditState.js";
+export declare function deriveAuditState(bundle: ArtifactBundle): AuditState;
+//# sourceMappingURL=state.d.ts.map

package/dist/audit/orchestrator/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAEV,UAAU,EAGX,MAAM,wBAAwB,CAAC;AAkDhC,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,UAAU,CAoSnE"}

package/dist/audit/orchestrator/state.js

@@ -0,0 +1,158 @@
+import { computeStaleArtifacts } from "./staleness.js";
+import { unresolvedConstraintClauses, } from "./intentInterpreter.js";
+import { isDesignReviewStale, } from "./designReviewSnapshot.js";
+function has(value) {
+    return value !== undefined && value !== null;
+}
+function obligation(id, state, reason) {
+    return { id, state, reason };
+}
+function staleOrSatisfied(staleArtifacts, deps, present) {
+    if (!present)
+        return "missing";
+    return deps.some((dep) => staleArtifacts.has(dep)) ? "stale" : "satisfied";
+}
+/**
+ * Satisfaction state of a design-review pass (B2 parity port). A pass that has
+ * not completed is `missing`. A completed pass is `stale` when a snapshot exists
+ * and the semantic projection of any structural input it reviewed has changed —
+ * which triggers a *diff-based* re-review, not a blind full re-run — otherwise
+ * `satisfied`. The legacy path (only the old `reviewed` flag, no snapshot) has no
+ * snapshot, so it stays `satisfied` (never spuriously re-fires).
+ */
+function designReviewPassState(bundle, pass, completed) {
+    if (!completed)
+        return "missing";
+    const snapshot = bundle.design_review_snapshots?.[pass];
+    if (snapshot && isDesignReviewStale(snapshot, bundle))
+        return "stale";
+    return "satisfied";
+}
+export function deriveAuditState(bundle) {
+    const obligations = [];
+    const staleArtifacts = computeStaleArtifacts(bundle);
+    obligations.push(obligation("provider_confirmation", has(bundle.provider_confirmation) ? "satisfied" : "missing"));
+    obligations.push(obligation("repo_manifest", has(bundle.repo_manifest) ? "satisfied" : "missing"));
+    obligations.push(obligation("file_disposition", staleOrSatisfied(staleArtifacts, ["file_disposition.json"], has(bundle.file_disposition))));
+    obligations.push(obligation("auto_fixes_applied", staleOrSatisfied(staleArtifacts, ["file_disposition.json"], has(bundle.auto_fixes_applied))));
+    obligations.push(obligation("syntax_resolved", staleOrSatisfied(staleArtifacts, ["auto_fixes_applied.json", "syntax_resolution_status.json"], has(bundle.syntax_resolution_status))));
+    const structureReady = has(bundle.unit_manifest) &&
+        has(bundle.surface_manifest) &&
+        has(bundle.graph_bundle) &&
+        has(bundle.critical_flows) &&
+        has(bundle.risk_register);
+    obligations.push(obligation("structure_artifacts", staleOrSatisfied(staleArtifacts, [
+        "unit_manifest.json",
+        "surface_manifest.json",
+        "graph_bundle.json",
+        "critical_flows.json",
+        "risk_register.json",
+    ], structureReady)));
+    obligations.push(obligation("graph_enrichment_current", staleOrSatisfied(staleArtifacts, ["analyzer_capability.json"], has(bundle.analyzer_capability))));
+    obligations.push(obligation("design_assessment_current", staleOrSatisfied(staleArtifacts, ["design_assessment.json"], has(bundle.design_assessment))));
+    // The checkpoint is "current" only when it both exists/fresh AND every
+    // unencodable free_form_intent clause has been escalated to a host-answered
+    // constraint. An unanswered unencodable clause keeps this obligation unmet so
+    // the blocking `confirm_intent` step re-fires — the directive is never
+    // silently dropped at planning time (the single shared interpreter is the
+    // encodability authority; see intentInterpreter.unresolvedConstraintClauses).
+    const intentCheckpointBase = staleOrSatisfied(staleArtifacts, ["intent_checkpoint.json"], has(bundle.intent_checkpoint));
+    const unresolvedClauses = intentCheckpointBase === "satisfied"
+        ? unresolvedConstraintClauses(bundle.intent_checkpoint)
+        : [];
+    obligations.push(obligation("intent_checkpoint_current", unresolvedClauses.length > 0 ? "missing" : intentCheckpointBase, unresolvedClauses.length > 0
+        ? `${unresolvedClauses.length} free_form_intent clause(s) could not be encoded as planning signals and need a host answer in constraint_clauses before planning proceeds.`
+        : undefined));
+    // Backward-compat: old artifacts only have `reviewed`; new artifacts have
+    // contract_reviewed and conceptual_reviewed. Treat both as satisfied when
+    // the legacy flag is set and neither new flag is present.
+    // Guard: a stale design_assessment.json must NOT activate the legacy path —
+    // the artifact was written by an old executor before the split; once stale it
+    // triggers design_assessment_current and the executor will write a fresh
+    // artifact with the new fields. Letting a stale legacy artifact permanently
+    // satisfy both obligations bypasses the split-review passes (ARC-14c59af5-2).
+    const legacyReviewed = bundle.design_assessment?.reviewed === true &&
+        bundle.design_assessment?.contract_reviewed !== true &&
+        bundle.design_assessment?.conceptual_reviewed !== true &&
+        !staleArtifacts.has("design_assessment.json");
+    obligations.push(obligation("design_review_contract_completed", designReviewPassState(bundle, "contract", bundle.design_assessment?.contract_reviewed === true || legacyReviewed)));
+    obligations.push(obligation("design_review_conceptual_completed", designReviewPassState(bundle, "conceptual", bundle.design_assessment?.conceptual_reviewed === true || legacyReviewed)));
+    const planningReady = has(bundle.coverage_matrix) &&
+        has(bundle.flow_coverage) &&
+        has(bundle.runtime_validation_tasks) &&
+        has(bundle.audit_tasks) &&
+        has(bundle.requeue_tasks);
+    obligations.push(obligation("planning_artifacts", staleOrSatisfied(staleArtifacts, [
+        "external_analyzer_results.json",
+        "coverage_matrix.json",
+        "flow_coverage.json",
+        "runtime_validation_tasks.json",
+        "audit_tasks.json",
+        "requeue_tasks.json",
+    ], planningReady)));
+    const completedTaskIds = new Set((bundle.audit_results ?? []).map((result) => result.task_id));
+    // Tasks deferred by a budget cap (FINDING-013) will never have results, so
+    // they must be excluded from the completion check — otherwise the obligation
+    // loops forever under a budget. Absent active_dispatch => empty set => the
+    // logic is unchanged (all tasks must be complete).
+    const deferredTaskIds = new Set(bundle.active_dispatch?.deferred_task_ids ?? []);
+    // Tasks stranded by a partial-completion terminal (OBL-A06): when the dispatch
+    // engine fires an empty-pool or livelock terminal and records it on
+    // active_dispatch, those tasks will never be dispatched. Treat them as
+    // uncovered so the pipeline can proceed to synthesis on partial coverage
+    // rather than stalling forever. This shortcut fires ONLY when the terminal
+    // was deliberately written — gate on its presence, not on the deferred list.
+    const partialTerminal = bundle.active_dispatch?.partial_completion_terminal;
+    const strandedTaskIds = new Set(partialTerminal?.stranded_ids ?? []);
+    const hasPendingAuditTasks = bundle.audit_tasks?.some((task) => task.status !== "complete" &&
+        !completedTaskIds.has(task.task_id) &&
+        !deferredTaskIds.has(task.task_id) &&
+        !strandedTaskIds.has(task.task_id)) ?? false;
+    if (hasPendingAuditTasks) {
+        obligations.push(obligation("audit_tasks_completed", "missing"));
+    }
+    else if (has(bundle.audit_tasks)) {
+        obligations.push(obligation("audit_tasks_completed", "satisfied"));
+    }
+    obligations.push(obligation("audit_results_ingested", (bundle.audit_tasks?.length ?? 0) === 0 || has(bundle.audit_results)
+        ? "satisfied"
+        : "missing"));
+    const runtimeTasks = bundle.runtime_validation_tasks?.tasks ?? [];
+    const runtimeResults = bundle.runtime_validation_report?.results ?? [];
+    const runtimeReady = runtimeTasks.length === 0 ||
+        (runtimeTasks.length > 0 &&
+            runtimeTasks.every((task) => runtimeResults.some((result) => result.task_id === task.id &&
+                result.status !== "pending")));
+    obligations.push(obligation("runtime_validation_current", runtimeReady
+        ? "satisfied"
+        : has(bundle.runtime_validation_report)
+            ? "stale"
+            : "missing", runtimeTasks.length === 0
+        ? "No deterministic runtime validation tasks were planned."
+        : undefined));
+    obligations.push(obligation("synthesis_current", staleOrSatisfied(staleArtifacts, ["audit-report.md"], has(bundle.audit_report))));
+    obligations.push(obligation("synthesis_narrative_current", staleOrSatisfied(staleArtifacts, ["synthesis-narrative.json"], has(bundle.synthesis_narrative))));
+    // A run is "not_started" only when neither the session gate (provider_confirmation)
+    // nor the first intake artifact (repo_manifest) has been produced. Once the provider
+    // gate fires, the run is live and must not be cleaned up as stale.
+    let status = "not_started";
+    if (!has(bundle.provider_confirmation) && !has(bundle.repo_manifest)) {
+        status = "not_started";
+    }
+    else if (obligations.some((o) => o.state === "blocked")) {
+        status = "blocked";
+    }
+    else {
+        status = "active";
+    }
+    const incomplete = obligations.some((o) => o.state === "missing" || o.state === "stale");
+    if (!incomplete && has(bundle.audit_report)) {
+        status = "complete";
+    }
+    return {
+        status,
+        blockers: [],
+        obligations,
+    };
+}
+//# sourceMappingURL=state.js.map

package/dist/audit/orchestrator/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/state.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,GAEpB,MAAM,2BAA2B,CAAC;AAEnC,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CACjB,EAAU,EACV,KAAsB,EACtB,MAAe;IAEf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CACvB,cAA2B,EAC3B,IAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAC5B,MAAsB,EACtB,IAAsB,EACtB,SAAkB;IAElB,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAErD,WAAW,CAAC,IAAI,CACd,UAAU,CACR,uBAAuB,EACvB,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAC5D,CACF,CAAC;IAEF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,eAAe,EACf,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CACpD,CACF,CAAC;IACF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,kBAAkB,EAClB,gBAAgB,CACd,cAAc,EACd,CAAC,uBAAuB,CAAC,EACzB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAC7B,CACF,CACF,CAAC;IACF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,oBAAoB,EACpB,gBAAgB,CACd,cAAc,EACd,CAAC,uBAAuB,CAAC,EACzB,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAC/B,CACF,CACF,CAAC;IACF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,iBAAiB,EACjB,gBAAgB,CACd,cAAc,EACd,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,EAC5D,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CACrC,CACF,CACF,CAAC;IAEF,MAAM,cAAc,GAClB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC5B,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;QACxB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5B,WAAW,CAAC,IAAI,CACd,UAAU,CACR,qBAAqB,EACrB,gBAAgB,CACd,cAAc,EACd;QACE,oBAAoB;QACpB,uBAAuB;QACvB,mBAAmB;QACnB,qBAAqB;QACrB,oBAAoB;KACrB,EACD,cAAc,CACf,CACF,CACF,CAAC;IAEF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,0BAA0B,EAC1B,gBAAgB,CACd,cAAc,EACd,CAAC,0BAA0B,CAAC,EAC5B,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAChC,CACF,CACF,CAAC;IAEF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,2BAA2B,EAC3B,gBAAgB,CACd,cAAc,EACd,CAAC,wBAAwB,CAAC,EAC1B,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC9B,CACF,CACF,CAAC;IAEF,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,oBAAoB,GAAG,gBAAgB,CAC3C,cAAc,EACd,CAAC,wBAAwB,CAAC,EAC1B,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC9B,CAAC;IACF,MAAM,iBAAiB,GACrB,oBAAoB,KAAK,WAAW;QAClC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC;IACT,WAAW,CAAC,IAAI,CACd,UAAU,CACR,2BAA2B,EAC3B,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAC/D,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,6IAA6I;QAC1K,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,0DAA0D;IAC1D,4EAA4E;IAC5E,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,cAAc,GAClB,MAAM,CAAC,iBAAiB,EAAE,QAAQ,KAAK,IAAI;QAC3C,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,KAAK,IAAI;QACpD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,KAAK,IAAI;QACtD,CAAC,cAAc,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAEhD,WAAW,CAAC,IAAI,CACd,UAAU,CACR,kCAAkC,EAClC,qBAAqB,CACnB,MAAM,EACN,UAAU,EACV,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,KAAK,IAAI,IAAI,cAAc,CACvE,CACF,CACF,CAAC;IAEF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,oCAAoC,EACpC,qBAAqB,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,KAAK,IAAI,IAAI,cAAc,CACzE,CACF,CACF,CAAC;IAEF,MAAM,aAAa,GACjB,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5B,WAAW,CAAC,IAAI,CACd,UAAU,CACR,oBAAoB,EACpB,gBAAgB,CACd,cAAc,EACd;QACE,gCAAgC;QAChC,sBAAsB;QACtB,oBAAoB;QACpB,+BAA+B;QAC/B,kBAAkB;QAClB,oBAAoB;KACrB,EACD,aAAa,CACd,CACF,CACF,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7D,CAAC;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,eAAe,EAAE,iBAAiB,IAAI,EAAE,CAChD,CAAC;IACF,+EAA+E;IAC/E,oEAAoE;IACpE,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,eAAe,EAAE,YAAY,IAAI,EAAE,CACpC,CAAC;IAEF,MAAM,oBAAoB,GACxB,MAAM,CAAC,WAAW,EAAE,IAAI,CACtB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,UAAU;QAC1B,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CACrC,IAAI,KAAK,CAAC;IAEb,IAAI,oBAAoB,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,WAAW,CAAC,IAAI,CACd,UAAU,CACR,wBAAwB,EACxB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QAClE,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE,CAAC;IAClE,MAAM,cAAc,GAAG,MAAM,CAAC,yBAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACvE,MAAM,YAAY,GAChB,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1B,cAAc,CAAC,IAAI,CACjB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE;gBAC1B,MAAM,CAAC,MAAM,KAAK,SAAS,CAC9B,CACF,CAAC,CAAC;IACP,WAAW,CAAC,IAAI,CACd,UAAU,CACR,4BAA4B,EAC5B,YAAY;QACV,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC;YACrC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,EACf,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,mBAAmB,EACnB,gBAAgB,CACd,cAAc,EACd,CAAC,iBAAiB,CAAC,EACnB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CACzB,CACF,CACF,CAAC;IACF,WAAW,CAAC,IAAI,CACd,UAAU,CACR,6BAA6B,EAC7B,gBAAgB,CACd,cAAc,EACd,CAAC,0BAA0B,CAAC,EAC5B,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAChC,CACF,CACF,CAAC;IAEF,oFAAoF;IACpF,qFAAqF;IACrF,mEAAmE;IACnE,IAAI,MAAM,GAAwB,aAAa,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACrE,MAAM,GAAG,aAAa,CAAC;IACzB,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CACpD,CAAC;IACF,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,EAAE;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/structureExecutors.d.ts

@@ -0,0 +1,6 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { ExecutorRunResult } from "./executorResult.js";
+export declare function runStructureExecutor(bundle: ArtifactBundle, root?: string): Promise<ExecutorRunResult>;
+export declare function runDesignAssessmentExecutor(bundle: ArtifactBundle): ExecutorRunResult;
+export declare function runDesignReviewAutoComplete(bundle: ArtifactBundle, pass?: "contract" | "conceptual" | "both"): ExecutorRunResult;
+//# sourceMappingURL=structureExecutors.d.ts.map

package/dist/audit/orchestrator/structureExecutors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structureExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/structureExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAWzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAyD5B;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,GACrB,iBAAiB,CA6CnB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,UAAU,GAAG,YAAY,GAAG,MAAe,GAChD,iBAAiB,CAiCnB"}