audit-tools 0.28.0

package/dist/audit/cli/auditStep.js

@@ -0,0 +1,162 @@
+import { rename } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+import { readJsonFile, RunLogger, withFsRetry } from "audit-tools/shared";
+import { loadArtifactBundle, writeCoreArtifacts, } from "../io/artifacts.js";
+import { advanceAudit } from "../orchestrator/advance.js";
+import { deriveAuditState } from "../orchestrator/state.js";
+import { decideNextStep } from "../orchestrator/nextStep.js";
+import { sizeIndexFromManifest } from "../orchestrator/reviewPackets.js";
+import { partitionOrphanedAuditResults } from "../orchestrator/resultIngestion.js";
+import { validateAuditResults, formatAuditResultIssues, } from "../validation/auditResults.js";
+import { formatAuditResultValidationError } from "./workerResult.js";
+import { looksLikeCliFlag, listBatchResultFiles } from "./args.js";
+import { buildLineIndex } from "./lineIndex.js";
+async function maybeArchiveLegacyPendingResults(auditResultsPath) {
+    if (!auditResultsPath || basename(auditResultsPath) !== "worker_results_pending.json") {
+        return undefined;
+    }
+    const archivedPath = join(dirname(auditResultsPath), `worker_results_submitted_${new Date().toISOString().replace(/[:.]/g, "-")}.json`);
+    try {
+        await withFsRetry(() => rename(auditResultsPath, archivedPath));
+        return archivedPath;
+    }
+    catch (error) {
+        process.stderr.write(`[audit-results cleanup] failed to archive ${auditResultsPath}: ${error instanceof Error ? error.message : String(error)}\n`);
+        return undefined;
+    }
+}
+export async function runAuditStep(options) {
+    const bundle = await loadArtifactBundle(options.artifactsDir);
+    const runLogger = new RunLogger(join(options.artifactsDir, "run.log.jsonl"), {
+        enabled: options.runLog ?? true,
+    });
+    const lineIndex = bundle.repo_manifest
+        ? await buildLineIndex(options.root, bundle.repo_manifest)
+        : undefined;
+    const sizeIndex = bundle.repo_manifest
+        ? sizeIndexFromManifest(bundle.repo_manifest)
+        : undefined;
+    if (looksLikeCliFlag(options.auditResultsPath)) {
+        throw new Error(`Invalid audit results path '${options.auditResultsPath}'. This looks like a CLI flag rather than a file path.`);
+    }
+    let auditResults = options.auditResultsPath
+        ? await readJsonFile(options.auditResultsPath)
+        : undefined;
+    if (auditResults !== undefined) {
+        // Drop results whose task_id is no longer in the active manifest — e.g.
+        // selective-deepening tasks pruned by a later re-plan, whose orphaned answers
+        // would otherwise abort the whole batch at the validation gate below and
+        // strand every valid result. They cannot be ingested (coverage is keyed by
+        // the active task set), so skip-and-warn instead of throwing; results for
+        // KNOWN tasks with real errors still abort. The filtered array is what flows
+        // to advanceAudit, so orphans are neither validated nor ingested.
+        const partition = partitionOrphanedAuditResults(auditResults, new Set((bundle.audit_tasks ?? []).map((task) => task.task_id)));
+        if (partition && partition.orphanedTaskIds.length > 0) {
+            process.stderr.write(`audit-results ingestion: skipped ${partition.orphanedTaskIds.length} result(s) whose task_id ` +
+                `is not in the active manifest (orphaned by re-planning): ${partition.orphanedTaskIds.join(", ")}\n`);
+            auditResults = partition.retained;
+        }
+        const issues = validateAuditResults(auditResults, bundle.audit_tasks ?? [], {
+            lineIndex,
+        });
+        const errors = issues.filter((issue) => issue.severity === "error");
+        const warnings = issues.filter((issue) => issue.severity === "warning");
+        if (warnings.length > 0) {
+            // Cap the per-warning detail so a run with many out-of-scope-evidence
+            // warnings (each listing the task's full assigned-file set) doesn't bury
+            // the rest of the output. The count is exact; the detail is a sample.
+            const WARNING_DETAIL_CAP = 10;
+            const moreSuffix = warnings.length > WARNING_DETAIL_CAP
+                ? `\n  ... (+${warnings.length - WARNING_DETAIL_CAP} more warning(s) suppressed)`
+                : "";
+            process.stderr.write(`[${new Date().toISOString()}] audit-results validation (artifacts: ${options.artifactsDir}): ${warnings.length} warning(s):\n` +
+                formatAuditResultIssues(warnings.slice(0, WARNING_DETAIL_CAP)) +
+                moreSuffix +
+                "\n");
+        }
+        if (errors.length > 0) {
+            throw new Error(formatAuditResultValidationError(errors));
+        }
+    }
+    const runtimeValidationUpdates = options.runtimeUpdatesPath
+        ? await readJsonFile(options.runtimeUpdatesPath)
+        : undefined;
+    const externalAnalyzerResults = options.externalAnalyzerData ??
+        (options.externalAnalyzerPath
+            ? await readJsonFile(options.externalAnalyzerPath)
+            : undefined);
+    const narrativeResults = options.narrativeResultsPath
+        ? await readJsonFile(options.narrativeResultsPath)
+        : undefined;
+    const edgeReasoningResults = options.edgeReasoningResultsPath
+        ? await readJsonFile(options.edgeReasoningResultsPath)
+        : undefined;
+    const result = await advanceAudit(bundle, {
+        root: options.root,
+        lineIndex,
+        sizeIndex,
+        auditResults: auditResults,
+        runtimeValidationUpdates,
+        externalAnalyzerResults,
+        narrativeResults,
+        edgeReasoningResults,
+        analyzers: options.analyzers,
+        graphLlmEdgeReasoning: options.graphLlmEdgeReasoning,
+        since: options.since,
+        preferredExecutor: options.preferredExecutor,
+        runLogger,
+    });
+    // Prune: result.updated_bundle is the full accumulated bundle, so an artifact
+    // an executor cleared to `undefined` must be removed from disk (not left to
+    // reload as a stale "present" artifact). Safe only because this is the
+    // authoritative per-step persist.
+    await writeCoreArtifacts(options.artifactsDir, result.updated_bundle, {
+        prune: true,
+    });
+    const archivedPendingResults = await maybeArchiveLegacyPendingResults(options.auditResultsPath);
+    if (archivedPendingResults) {
+        result.progress_summary +=
+            ` Archived legacy staging file to ${archivedPendingResults}.`;
+    }
+    return result;
+}
+export async function ingestBatchAuditResults(options) {
+    const batchFiles = await listBatchResultFiles(options.batchDir);
+    const artifactsWritten = new Set();
+    const progressSummaries = [];
+    let lastStep = null;
+    let anyProgress = false;
+    for (const batchFile of batchFiles) {
+        const step = await runAuditStep({
+            root: options.root,
+            artifactsDir: options.artifactsDir,
+            preferredExecutor: "result_ingestion_executor",
+            auditResultsPath: batchFile,
+        });
+        lastStep = step;
+        anyProgress ||= step.progress_made;
+        for (const artifact of step.artifacts_written) {
+            artifactsWritten.add(artifact);
+        }
+        progressSummaries.push(`${basename(batchFile)}: ${step.progress_summary}`);
+    }
+    const bundle = lastStep?.updated_bundle ??
+        (await loadArtifactBundle(options.artifactsDir));
+    const state = deriveAuditState(bundle);
+    const decision = decideNextStep(bundle);
+    return {
+        batchFiles,
+        bundle,
+        audit_state: state,
+        selected_obligation: lastStep?.selected_obligation ?? decision.selected_obligation,
+        selected_executor: lastStep?.selected_executor ?? "result_ingestion_executor",
+        progress_made: anyProgress,
+        artifacts_written: Array.from(artifactsWritten),
+        progress_summary: `Imported ${batchFiles.length} batch result file${batchFiles.length === 1 ? "" : "s"} from ${options.batchDir}.` +
+            (progressSummaries.length > 0
+                ? `\n${progressSummaries.join("\n")}`
+                : ""),
+        next_likely_step: state.status === "complete" ? null : decision.selected_obligation,
+    };
+}
+//# sourceMappingURL=auditStep.js.map

package/dist/audit/cli/auditStep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditStep.js","sourceRoot":"","sources":["../../../src/audit/cli/auditStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMhD,KAAK,UAAU,gCAAgC,CAC7C,gBAAoC;IAEpC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB,CAAC,KAAK,6BAA6B,EAAE,CAAC;QACtF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,4BAA4B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAClF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,gBAAgB,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC7H,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAelC;IACC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE;QAC3E,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;KAChC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,gBAAgB,wDAAwD,CAChH,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,GAAG,OAAO,CAAC,gBAAgB;QACzC,CAAC,CAAC,MAAM,YAAY,CAAU,OAAO,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,wEAAwE;QACxE,8EAA8E;QAC9E,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,6EAA6E;QAC7E,kEAAkE;QAClE,MAAM,SAAS,GAAG,6BAA6B,CAC7C,YAAY,EACZ,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAChE,CAAC;QACF,IAAI,SAAS,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,SAAS,CAAC,eAAe,CAAC,MAAM,2BAA2B;gBAC7F,4DAA4D,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACvG,CAAC;YACF,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE;YAC1E,SAAS;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAExE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,sEAAsE;YACtE,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,kBAAkB,GAAG,EAAE,CAAC;YAC9B,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,GAAG,kBAAkB;gBAClC,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,kBAAkB,8BAA8B;gBACjF,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,0CAA0C,OAAO,CAAC,YAAY,MAAM,QAAQ,CAAC,MAAM,gBAAgB;gBAC7H,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC9D,UAAU;gBACV,IAAI,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,wBAAwB,GAAG,OAAO,CAAC,kBAAkB;QACzD,CAAC,CAAC,MAAM,YAAY,CAA0B,OAAO,CAAC,kBAAkB,CAAC;QACzE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,uBAAuB,GAC3B,OAAO,CAAC,oBAAoB;QAC5B,CAAC,OAAO,CAAC,oBAAoB;YAC3B,CAAC,CAAC,MAAM,YAAY,CAA0B,OAAO,CAAC,oBAAoB,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB;QACnD,CAAC,CAAC,MAAM,YAAY,CAAqB,OAAO,CAAC,oBAAoB,CAAC;QACtE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,oBAAoB,GAAG,OAAO,CAAC,wBAAwB;QAC3D,CAAC,CAAC,MAAM,YAAY,CAAuB,OAAO,CAAC,wBAAwB,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE;QACxC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS;QACT,SAAS;QACT,YAAY,EAAE,YAAyC;QACvD,wBAAwB;QACxB,uBAAuB;QACvB,gBAAgB;QAChB,oBAAoB;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS;KACV,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,uEAAuE;IACvE,kCAAkC;IAClC,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE;QACpE,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,MAAM,gCAAgC,CACnE,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,CAAC,gBAAgB;YACrB,oCAAoC,sBAAsB,GAAG,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAI7C;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,QAAQ,GAED,IAAI,CAAC;IAChB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC;YAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,iBAAiB,EAAE,2BAA2B;YAC9C,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC;QAChB,WAAW,KAAK,IAAI,CAAC,aAAa,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9C,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GACV,QAAQ,EAAE,cAAc;QACxB,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAExC,OAAO;QACL,UAAU;QACV,MAAM;QACN,WAAW,EAAE,KAAK;QAClB,mBAAmB,EACjB,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,CAAC,mBAAmB;QAC/D,iBAAiB,EACf,QAAQ,EAAE,iBAAiB,IAAI,2BAA2B;QAC5D,aAAa,EAAE,WAAW;QAC1B,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC/C,gBAAgB,EACd,YAAY,UAAU,CAAC,MAAM,qBAAqB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,QAAQ,GAAG;YAChH,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;gBAC3B,CAAC,CAAC,KAAK,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;QACT,gBAAgB,EACd,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB;KACpE,CAAC;AACJ,CAAC"}

package/dist/audit/cli/cleanup.d.ts

@@ -0,0 +1,12 @@
+import type { AuditState } from "../types/auditState.js";
+export type CleanupOptions = {
+    force?: boolean;
+    dryRun?: boolean;
+};
+export type CleanupResult = {
+    action: "deleted" | "skipped" | "dry-run";
+    status: AuditState["status"] | "unknown";
+    reason?: string;
+};
+export declare function cleanupStaleArtifactsDir(artifactsDir: string, options?: CleanupOptions): Promise<CleanupResult>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/audit/cli/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/cleanup.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAWF,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAoCxB"}

package/dist/audit/cli/cleanup.js

@@ -0,0 +1,44 @@
+import { rm } from "node:fs/promises";
+import { join } from "node:path";
+import { isFileMissingError, readJsonFile } from "audit-tools/shared";
+// Remove a stale artifacts directory before starting a fresh run: if the prior
+// run completed or never started, its artifacts are safe to clear. A missing
+// state file means there is nothing to clean. Shared by advance-audit (clears
+// before a fresh debug advance) and the cleanup command.
+//
+// With options:
+//   force=true  — delete even when status is active/blocked or state file is missing.
+//   dryRun=true — skip the actual rm call and return action='dry-run'.
+// Both default to false; the no-args call from advance-audit is unchanged.
+export async function cleanupStaleArtifactsDir(artifactsDir, options = {}) {
+    const { force = false, dryRun = false } = options;
+    let status = "unknown";
+    try {
+        const state = await readJsonFile(join(artifactsDir, "audit_state.json"));
+        status = state.status;
+    }
+    catch (error) {
+        if (!isFileMissingError(error)) {
+            throw error;
+        }
+        // State file missing — status stays "unknown".
+    }
+    const eligibleWithoutForce = status === "complete" || status === "not_started";
+    const resumable = status === "active" || status === "blocked";
+    if (!eligibleWithoutForce && !force) {
+        // active/blocked — caller may want to resume; skip unless forced
+        if (resumable) {
+            const reason = `audit is ${status} and may be resumed — use --force to delete anyway`;
+            return { action: "skipped", status, reason };
+        }
+        // unknown (missing state file) — no-op by default; caller decides how to
+        // surface this (advance-audit ignores it; cleanup command sets exitCode=1)
+        return { action: "skipped", status: "unknown" };
+    }
+    if (dryRun) {
+        return { action: "dry-run", status };
+    }
+    await rm(artifactsDir, { recursive: true, force: true });
+    return { action: "deleted", status };
+}
+//# sourceMappingURL=cleanup.js.map

package/dist/audit/cli/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../../src/audit/cli/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AActE,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,yDAAyD;AACzD,EAAE;AACF,gBAAgB;AAChB,sFAAsF;AACtF,uEAAuE;AACvE,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,UAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAElD,IAAI,MAAM,GAAqC,SAAS,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CACvC,CAAC;QACF,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,+CAA+C;IACjD,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,aAAa,CAAC;IAC/E,MAAM,SAAS,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;IAE9D,IAAI,CAAC,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,iEAAiE;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,YAAY,MAAM,oDAAoD,CAAC;YACtF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC;QACD,yEAAyE;QACzE,2EAA2E;QAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC"}

package/dist/audit/cli/cleanupCommand.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdCleanup(argv: string[]): Promise<void>;
+//# sourceMappingURL=cleanupCommand.d.ts.map

package/dist/audit/cli/cleanupCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanupCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/cleanupCommand.ts"],"names":[],"mappings":"AAGA,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC9D"}

package/dist/audit/cli/cleanupCommand.js

@@ -0,0 +1,25 @@
+import { getArtifactsDir, hasFlag } from "./args.js";
+import { cleanupStaleArtifactsDir } from "./cleanup.js";
+export async function cmdCleanup(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const dryRun = hasFlag(argv, "--dry-run");
+    const force = hasFlag(argv, "--force");
+    const result = await cleanupStaleArtifactsDir(artifactsDir, { force, dryRun });
+    if (result.action === "skipped") {
+        console.log(JSON.stringify({
+            artifacts_dir: artifactsDir,
+            action: "skipped",
+            reason: result.reason ?? "no audit_state.json found; artifacts may be from a crashed audit — use --force to delete anyway",
+            dry_run: dryRun,
+        }, null, 2));
+        process.exitCode = 1;
+        return;
+    }
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        action: result.action,
+        status: result.status,
+        dry_run: dryRun,
+    }, null, 2));
+}
+//# sourceMappingURL=cleanupCommand.js.map

package/dist/audit/cli/cleanupCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanupCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/cleanupCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,aAAa,EAAE,YAAY;YAC3B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,iGAAiG;YAC1H,OAAO,EAAE,MAAM;SAChB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM;KAChB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli/conceptualDispatch.d.ts

@@ -0,0 +1,74 @@
+import type { DispatchModelHint, DispatchModelTier, SessionConfig } from "audit-tools/shared";
+import type { ArtifactBundle } from "../io/artifacts.js";
+export interface ConceptualReviewSettings {
+    max_units?: number;
+    conceptual_depth: "shallow" | "deep";
+    perspectives?: number;
+    /**
+     * Relative rank for perspective subagents (divergent ideation). Defaults to
+     * `"standard"`; the judge always routes `"deep"`.
+     */
+    perspective_tier?: DispatchModelTier;
+}
+/**
+ * Resolve the conceptual-review depth + fan-out count just before dispatch.
+ * The user-confirmed `intent_checkpoint.design_review` is the source of truth;
+ * `sessionConfig.design_review` is the host/session override consulted when the
+ * checkpoint is silent; absent both, the default is shallow.
+ */
+export declare function resolveConceptualReviewSettings(bundle: ArtifactBundle, sessionConfig: SessionConfig): ConceptualReviewSettings;
+export interface ConceptualDispatch {
+    deep: boolean;
+    /**
+     * The single conceptual-review result file the orchestrator ingests — the
+     * judge's merged output when deep, the lone reviewer's output when shallow.
+     */
+    conceptualResultsPath: string;
+    /** Host-facing lines describing how to run the conceptual pass. */
+    instructionLines: string[];
+    /** Contributions to the step's `artifactPaths`. */
+    artifactPaths: Record<string, string>;
+    /** Prompt files the host's subagents read. */
+    readPaths: string[];
+    /** Result files the host's subagents write. */
+    writePaths: string[];
+    /**
+     * Relative model ranks for the deep fan-out: perspectives route `"standard"`
+     * by default (divergent ideation), the judge routes `"deep"` (it merges,
+     * dedups, and ranks across every perspective output). Absent when shallow.
+     */
+    modelHints?: {
+        perspectives: DispatchModelHint;
+        judge: DispatchModelHint;
+    };
+}
+/**
+ * Write the conceptual-review prompt artifacts and return the dispatch pieces.
+ *
+ * Shallow: one conceptual prompt file dispatched to a single subagent.
+ * Deep: N independent perspective prompt files (real fan-out, one value system
+ * each) plus an independent judge prompt that merges them — the judge writes the
+ * single `conceptualResultsPath` the orchestrator ingests, so the state machine
+ * is unchanged. The perspectives' intermediate result files are never ingested.
+ */
+export declare function prepareConceptualDispatch(opts: {
+    artifactsDir: string;
+    bundle: ArtifactBundle;
+    settings: ConceptualReviewSettings;
+    /**
+     * Render each subagent's `model_hint.tier` into the instruction lines. Only
+     * set when the host reported it can act on model hints — otherwise the tiers
+     * stay inert metadata on `modelHints`, mirroring the packet-dispatch path.
+     */
+    hostCanSelectSubagentModel?: boolean;
+    /**
+     * Diff-based re-review section (B2 parity port). Present only when the
+     * conceptual pass is being re-emitted after staleness. Appended to the single
+     * reviewer's prompt when shallow, and to the JUDGE's prompt when deep — the
+     * judge holds the prior merged verdict and produces the ingested result, so
+     * the merge becomes diff-aware while the perspectives stay independent (each
+     * still reviews fresh through its own lens, never seeing the prior verdict).
+     */
+    reReviewSection?: string;
+}): Promise<ConceptualDispatch>;
+//# sourceMappingURL=conceptualDispatch.d.ts.map

package/dist/audit/cli/conceptualDispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conceptualDispatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASzD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,SAAS,GAAG,MAAM,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,cAAc,EACtB,aAAa,EAAE,aAAa,GAC3B,wBAAwB,CAU1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,8CAA8C;IAC9C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,YAAY,EAAE,iBAAiB,CAAC;QAAC,KAAK,EAAE,iBAAiB,CAAA;KAAE,CAAC;CAC5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmI9B"}

package/dist/audit/cli/conceptualDispatch.js

@@ -0,0 +1,118 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { renderConceptualReviewPrompt, renderConceptualPerspectivePrompt, renderConceptualJudgePrompt, selectPerspectives, } from "../orchestrator/designReviewPrompt.js";
+/**
+ * Resolve the conceptual-review depth + fan-out count just before dispatch.
+ * The user-confirmed `intent_checkpoint.design_review` is the source of truth;
+ * `sessionConfig.design_review` is the host/session override consulted when the
+ * checkpoint is silent; absent both, the default is shallow.
+ */
+export function resolveConceptualReviewSettings(bundle, sessionConfig) {
+    const checkpoint = bundle.intent_checkpoint?.design_review;
+    const cfg = sessionConfig.design_review;
+    return {
+        max_units: cfg?.max_units,
+        conceptual_depth: checkpoint?.conceptual_depth ?? cfg?.conceptual_depth ?? "shallow",
+        perspectives: checkpoint?.perspectives ?? cfg?.perspectives,
+        perspective_tier: cfg?.perspective_tier,
+    };
+}
+/**
+ * Write the conceptual-review prompt artifacts and return the dispatch pieces.
+ *
+ * Shallow: one conceptual prompt file dispatched to a single subagent.
+ * Deep: N independent perspective prompt files (real fan-out, one value system
+ * each) plus an independent judge prompt that merges them — the judge writes the
+ * single `conceptualResultsPath` the orchestrator ingests, so the state machine
+ * is unchanged. The perspectives' intermediate result files are never ingested.
+ */
+export async function prepareConceptualDispatch(opts) {
+    const { artifactsDir, bundle, settings } = opts;
+    const reReviewSuffix = opts.reReviewSection
+        ? `\n\n${opts.reReviewSection}`
+        : "";
+    const incoming = join(artifactsDir, "incoming");
+    await mkdir(incoming, { recursive: true });
+    const conceptualResultsPath = join(incoming, "design-review-conceptual-findings.json");
+    const reviewOptions = { max_units: settings.max_units };
+    if (settings.conceptual_depth !== "deep") {
+        const conceptualPromptPath = join(incoming, "design-review-conceptual-prompt.md");
+        await writeFile(conceptualPromptPath, renderConceptualReviewPrompt(bundle, reviewOptions) + reReviewSuffix, "utf8");
+        return {
+            deep: false,
+            conceptualResultsPath,
+            instructionLines: [
+                "**Conceptual review** (generative): dispatch a subagent that reads the prompt at the conceptual prompt path and writes findings to the conceptual results path.",
+            ],
+            artifactPaths: {
+                conceptual_prompt: conceptualPromptPath,
+                conceptual_results: conceptualResultsPath,
+            },
+            readPaths: [conceptualPromptPath],
+            writePaths: [conceptualResultsPath],
+        };
+    }
+    // Deep: real fan-out — N perspective subagents + an independent judge.
+    const modelHints = {
+        perspectives: {
+            tier: settings.perspective_tier ?? "standard",
+            reasons: ["conceptual_perspective_ideation"],
+        },
+        judge: {
+            tier: "deep",
+            reasons: ["conceptual_judge_synthesis"],
+        },
+    };
+    const renderTier = (hint) => opts.hostCanSelectSubagentModel ? ` [model_hint.tier: ${hint.tier}]` : "";
+    const perspectives = selectPerspectives(settings.perspectives);
+    const total = perspectives.length;
+    const perspectiveFiles = [];
+    for (let i = 0; i < total; i++) {
+        const p = perspectives[i];
+        const promptPath = join(incoming, `design-review-conceptual-p${i + 1}-prompt.md`);
+        const resultsPath = join(incoming, `design-review-conceptual-p${i + 1}-findings.json`);
+        await writeFile(promptPath, renderConceptualPerspectivePrompt(bundle, p, i, total, reviewOptions), "utf8");
+        perspectiveFiles.push({ name: p.name, promptPath, resultsPath });
+    }
+    const judgePromptPath = join(incoming, "design-review-conceptual-judge-prompt.md");
+    await writeFile(judgePromptPath, renderConceptualJudgePrompt(perspectiveFiles.map((f) => ({ name: f.name, path: f.resultsPath }))) + reReviewSuffix, "utf8");
+    const perspectiveLines = perspectiveFiles.map((f, i) => `   - Perspective ${i + 1} (${f.name}): prompt \`${f.promptPath}\` → findings \`${f.resultsPath}\`${renderTier(modelHints.perspectives)}`);
+    const artifactPaths = {
+        conceptual_results: conceptualResultsPath,
+        conceptual_judge_prompt: judgePromptPath,
+    };
+    perspectiveFiles.forEach((f, i) => {
+        artifactPaths[`conceptual_perspective_${i + 1}_prompt`] = f.promptPath;
+        artifactPaths[`conceptual_perspective_${i + 1}_results`] = f.resultsPath;
+    });
+    return {
+        deep: true,
+        conceptualResultsPath,
+        instructionLines: [
+            `**Conceptual review** (generative, deep — ${total}-perspective fan-out):`,
+            `1. Dispatch these ${total} independent perspective subagents **in parallel**. Each reviews only through its own value system and must NOT see the others' output:`,
+            ...perspectiveLines,
+            `2. When all ${total} perspectives have written their findings, dispatch ONE **independent judge** subagent — it must be a different agent than any of the perspectives: read the prompt at \`${judgePromptPath}\`, write the merged findings to \`${conceptualResultsPath}\`.${renderTier(modelHints.judge)}`,
+            "Each prompt file above is self-contained — it already defines the reviewer's persona, scope, file grants, and output schema. Pass the `prompt_path` to the subagent as its instruction verbatim; do NOT restate the persona or re-describe the task in your dispatch message (the parenthesised name is only a label for you).",
+            ...(opts.hostCanSelectSubagentModel
+                ? [
+                    "Map each `model_hint.tier` (`small`, `standard`, `deep`) to an available host model without asking the user for model names.",
+                ]
+                : []),
+        ],
+        artifactPaths,
+        // Perspective result files must be in readPaths: the judge subagent reads
+        // them to merge and synthesise the final output (COR-60ca1f72).
+        readPaths: [
+            ...perspectiveFiles.map((f) => f.promptPath),
+            ...perspectiveFiles.map((f) => f.resultsPath),
+            judgePromptPath,
+        ],
+        writePaths: [
+            ...perspectiveFiles.map((f) => f.resultsPath),
+            conceptualResultsPath,
+        ],
+        modelHints,
+    };
+}
+//# sourceMappingURL=conceptualDispatch.js.map

package/dist/audit/cli/conceptualDispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conceptualDispatch.js","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAEL,4BAA4B,EAC5B,iCAAiC,EACjC,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uCAAuC,CAAC;AAa/C;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAsB,EACtB,aAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC3D,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC;IACxC,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,SAAS;QACzB,gBAAgB,EACd,UAAU,EAAE,gBAAgB,IAAI,GAAG,EAAE,gBAAgB,IAAI,SAAS;QACpE,YAAY,EAAE,UAAU,EAAE,YAAY,IAAI,GAAG,EAAE,YAAY;QAC3D,gBAAgB,EAAE,GAAG,EAAE,gBAAgB;KACxC,CAAC;AACJ,CAAC;AAyBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAmB/C;IACC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe;QACzC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE;QAC/B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,qBAAqB,GAAG,IAAI,CAChC,QAAQ,EACR,wCAAwC,CACzC,CAAC;IACF,MAAM,aAAa,GAAwB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAE7E,IAAI,QAAQ,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,oBAAoB,GAAG,IAAI,CAC/B,QAAQ,EACR,oCAAoC,CACrC,CAAC;QACF,MAAM,SAAS,CACb,oBAAoB,EACpB,4BAA4B,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,cAAc,EACpE,MAAM,CACP,CAAC;QACF,OAAO;YACL,IAAI,EAAE,KAAK;YACX,qBAAqB;YACrB,gBAAgB,EAAE;gBAChB,iKAAiK;aAClK;YACD,aAAa,EAAE;gBACb,iBAAiB,EAAE,oBAAoB;gBACvC,kBAAkB,EAAE,qBAAqB;aAC1C;YACD,SAAS,EAAE,CAAC,oBAAoB,CAAC;YACjC,UAAU,EAAE,CAAC,qBAAqB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ,CAAC,gBAAgB,IAAI,UAAU;YAC7C,OAAO,EAAE,CAAC,iCAAiC,CAAC;SAC7C;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,4BAA4B,CAAC;SACxC;KACyC,CAAC;IAC7C,MAAM,UAAU,GAAG,CAAC,IAAuB,EAAU,EAAE,CACrD,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC;IAClC,MAAM,gBAAgB,GAIjB,EAAE,CAAC;IACR,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,CACrB,QAAQ,EACR,6BAA6B,CAAC,GAAG,CAAC,YAAY,CAC/C,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CACtB,QAAQ,EACR,6BAA6B,CAAC,GAAG,CAAC,gBAAgB,CACnD,CAAC;QACF,MAAM,SAAS,CACb,UAAU,EACV,iCAAiC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,EACrE,MAAM,CACP,CAAC;QACF,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAC1B,QAAQ,EACR,0CAA0C,CAC3C,CAAC;IACF,MAAM,SAAS,CACb,eAAe,EACf,2BAA2B,CACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACrE,GAAG,cAAc,EAClB,MAAM,CACP,CAAC;IAEF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAC3C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,UAAU,mBAAmB,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAC5I,CAAC;IAEF,MAAM,aAAa,GAA2B;QAC5C,kBAAkB,EAAE,qBAAqB;QACzC,uBAAuB,EAAE,eAAe;KACzC,CAAC;IACF,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACvE,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,IAAI;QACV,qBAAqB;QACrB,gBAAgB,EAAE;YAChB,6CAA6C,KAAK,wBAAwB;YAC1E,qBAAqB,KAAK,yIAAyI;YACnK,GAAG,gBAAgB;YACnB,eAAe,KAAK,4KAA4K,eAAe,sCAAsC,qBAAqB,MAAM,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;YAC9S,gUAAgU;YAChU,GAAG,CAAC,IAAI,CAAC,0BAA0B;gBACjC,CAAC,CAAC;oBACE,8HAA8H;iBAC/H;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,aAAa;QACb,0EAA0E;QAC1E,gEAAgE;QAChE,SAAS,EAAE;YACT,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5C,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC7C,eAAe;SAChB;QACD,UAAU,EAAE;YACV,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC7C,qBAAqB;SACtB;QACD,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/audit/cli/confirmIntentStep.d.ts

@@ -0,0 +1,25 @@
+import type { ScopePreDigest } from "../orchestrator/intentCheckpointExecutor.js";
+/**
+ * Render the host-facing prompt for the `confirm_intent` step. Shows the
+ * deterministically-computed scope picture and asks the host to write (or
+ * refine) `intent_checkpoint.json` — confirming scope/intent and optionally
+ * adding exclusions the disposition pass missed (the scope-pollution case),
+ * must-not-touch globs, free-form audit intent, disposition overrides for
+ * suspicious inclusions, and lens selection.
+ */
+export declare function renderConfirmIntentPrompt(preDigest: ScopePreDigest, opts: {
+    intentCheckpointPath: string;
+    continueCommand: string;
+    /**
+     * Blocking checkpoint questions raised by unencodable `free_form_intent`
+     * clauses that the host has not yet answered. When non-empty, the audit
+     * cannot proceed past planning until each is answered via
+     * `constraint_clauses` — so the prompt leads with them. Computed
+     * deterministically from the single shared intent interpreter.
+     */
+    unresolvedConstraintClauses?: Array<{
+        text: string;
+        checkpoint_question: string;
+    }>;
+}): string;
+//# sourceMappingURL=confirmIntentStep.d.ts.map

package/dist/audit/cli/confirmIntentStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmIntentStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/confirmIntentStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,6CAA6C,CAAC;AAsBzG;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,cAAc,EACzB,IAAI,EAAE;IACJ,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF,GACA,MAAM,CAmMR"}