audit-tools 0.28.0

package/dist/audit/validation/designFindingGrounding.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Grounding for design-review findings (S8 = S7 applied to the reviewer).
+ *
+ * Conceptual/contract findings are architectural — they rarely cite a single
+ * quotable line, so quote-and-verify (tier-1) does not fit. But they must still
+ * point at something real: every finding has to cite at least one **component**
+ * (an `affected_files` path that exists in the repository). A finding that cites
+ * no component, or only paths not in the repo, is `ungrounded` — it points at
+ * nothing checkable — and is surfaced/quarantined like any other ungrounded
+ * finding (the same tier-3 machinery), never silently admitted as confirmed.
+ *
+ * Before this, design findings were ingested on `Array.isArray()` alone, with no
+ * evidence requirement — unlike the schema-gated AuditResult path.
+ */
+import type { Finding, FindingGrounding } from "audit-tools/shared";
+/**
+ * Ground a single design finding against the set of real repository paths. The
+ * verdict is the tool's check, never the model's word: a finding survives as
+ * `grounded` only if at least one cited `affected_files` path exists in the repo.
+ */
+export declare function groundDesignFinding(finding: Finding, knownPaths: ReadonlySet<string>): FindingGrounding;
+/**
+ * Annotate each design finding with its grounding verdict. When no repo manifest
+ * is available the findings cannot be grounded against a known file set, so they
+ * are returned unchanged — better than false-quarantining everything on a missing
+ * input.
+ */
+export declare function groundDesignFindings(findings: Finding[], repoManifest: {
+    files?: Array<{
+        path: string;
+    }>;
+} | undefined): Finding[];
+//# sourceMappingURL=designFindingGrounding.d.ts.map

package/dist/audit/validation/designFindingGrounding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"designFindingGrounding.d.ts","sourceRoot":"","sources":["../../../src/audit/validation/designFindingGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAIpE;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,gBAAgB,CAkBlB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,SAAS,GAC5D,OAAO,EAAE,CAQX"}

package/dist/audit/validation/designFindingGrounding.js

@@ -0,0 +1,43 @@
+// Repo-relative path normalizer is single-sourced in shared (drift-plan P7).
+import { normalizeRepoPath } from "audit-tools/shared";
+/**
+ * Ground a single design finding against the set of real repository paths. The
+ * verdict is the tool's check, never the model's word: a finding survives as
+ * `grounded` only if at least one cited `affected_files` path exists in the repo.
+ */
+export function groundDesignFinding(finding, knownPaths) {
+    const cited = (finding.affected_files ?? [])
+        .map((f) => normalizeRepoPath(f?.path ?? ""))
+        .filter((p) => p.length > 0);
+    if (cited.length === 0) {
+        return {
+            status: "ungrounded",
+            reason: "cites no component (affected_files is empty)",
+        };
+    }
+    const real = cited.filter((p) => knownPaths.has(p));
+    if (real.length === 0) {
+        return {
+            status: "ungrounded",
+            reason: `cited component(s) not found in the repository: ${cited.slice(0, 3).join(", ")}`,
+        };
+    }
+    return { status: "grounded" };
+}
+/**
+ * Annotate each design finding with its grounding verdict. When no repo manifest
+ * is available the findings cannot be grounded against a known file set, so they
+ * are returned unchanged — better than false-quarantining everything on a missing
+ * input.
+ */
+export function groundDesignFindings(findings, repoManifest) {
+    const files = repoManifest?.files ?? [];
+    if (files.length === 0)
+        return findings;
+    const known = new Set(files.map((f) => normalizeRepoPath(f.path)));
+    return findings.map((finding) => ({
+        ...finding,
+        grounding: groundDesignFinding(finding, known),
+    }));
+}
+//# sourceMappingURL=designFindingGrounding.js.map

package/dist/audit/validation/designFindingGrounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"designFindingGrounding.js","sourceRoot":"","sources":["../../../src/audit/validation/designFindingGrounding.ts"],"names":[],"mappings":"AAeA,6EAA6E;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAgB,EAChB,UAA+B;IAE/B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;SAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,mDAAmD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAmB,EACnB,YAA6D;IAE7D,MAAM,KAAK,GAAG,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,OAAO;QACV,SAAS,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC;KAC/C,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/audit/validation/quoteGrounding.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Quote-and-verify grounding for audit findings (S7 anti-hallucination).
+ *
+ * The primitives now live in `audit-tools/shared`
+ * (`shared/src/validation/findingGrounding.ts`) so the auditor, the conceptual-
+ * review grounding, and the remediator all consume ONE implementation rather
+ * than each carrying a copy (drift-plan E3 + P7). This module re-exports them so
+ * the existing `../validation/quoteGrounding.js` import sites are unchanged.
+ *
+ * The safeguard is attached to the *claim*: every finding cites a verbatim span
+ * (`affected_files[].quoted_text`); the tool re-reads that span from disk and
+ * content-matches it (whitespace/CRLF-normalized, matched on content not line
+ * numbers). The confirmed bit is the tool's re-check, never the model's word; a
+ * finding whose quote does not re-verify (or that carries no quote) is
+ * `ungrounded` — surfaced, never silently admitted as a confirmed finding.
+ */
+export { normalizeForMatch, quoteMatches, verifyFindingGrounding, type SourceReader, } from "audit-tools/shared";
+//# sourceMappingURL=quoteGrounding.d.ts.map

package/dist/audit/validation/quoteGrounding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quoteGrounding.d.ts","sourceRoot":"","sources":["../../../src/audit/validation/quoteGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC"}

package/dist/audit/validation/quoteGrounding.js

@@ -0,0 +1,18 @@
+/**
+ * Quote-and-verify grounding for audit findings (S7 anti-hallucination).
+ *
+ * The primitives now live in `audit-tools/shared`
+ * (`shared/src/validation/findingGrounding.ts`) so the auditor, the conceptual-
+ * review grounding, and the remediator all consume ONE implementation rather
+ * than each carrying a copy (drift-plan E3 + P7). This module re-exports them so
+ * the existing `../validation/quoteGrounding.js` import sites are unchanged.
+ *
+ * The safeguard is attached to the *claim*: every finding cites a verbatim span
+ * (`affected_files[].quoted_text`); the tool re-reads that span from disk and
+ * content-matches it (whitespace/CRLF-normalized, matched on content not line
+ * numbers). The confirmed bit is the tool's re-check, never the model's word; a
+ * finding whose quote does not re-verify (or that carries no quote) is
+ * `ungrounded` — surfaced, never silently admitted as a confirmed finding.
+ */
+export { normalizeForMatch, quoteMatches, verifyFindingGrounding, } from "audit-tools/shared";
+//# sourceMappingURL=quoteGrounding.js.map

package/dist/audit/validation/quoteGrounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quoteGrounding.js","sourceRoot":"","sources":["../../../src/audit/validation/quoteGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC"}

package/dist/audit/validation/sessionConfig.d.ts

@@ -0,0 +1,8 @@
+import { type SessionConfig, type ValidationIssue } from "audit-tools/shared";
+export declare function validateSessionConfig(value: unknown): ValidationIssue[];
+export declare function validateConfiguredProviderEnvironment(sessionConfig: SessionConfig, options?: {
+    commandExists?: (command: string) => Promise<boolean>;
+    pathExists?: (commandPath: string) => boolean;
+}): Promise<ValidationIssue[]>;
+export { formatValidationIssues } from "audit-tools/shared";
+//# sourceMappingURL=sessionConfig.d.ts.map

package/dist/audit/validation/sessionConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionConfig.d.ts","sourceRoot":"","sources":["../../../src/audit/validation/sessionConfig.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,aAAa,EAElB,KAAK,eAAe,EAGrB,MAAM,oBAAoB,CAAC;AAsV5B,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,EAAE,CA6JvE;AAED,wBAAsB,qCAAqC,CACzD,aAAa,EAAE,aAAa,EAC5B,OAAO,GAAE;IACP,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C,GACL,OAAO,CAAC,eAAe,EAAE,CAAC,CA4E5B;AAED,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/audit/validation/sessionConfig.js

@@ -0,0 +1,334 @@
+import { execFile } from "node:child_process";
+import { accessSync, constants } from "node:fs";
+import { promisify } from "node:util";
+import { ANALYZER_SETTINGS, PROVIDER_NAMES, SESSION_UI_MODES, isRecord, pushValidationIssue, } from "audit-tools/shared";
+const execFileAsync = promisify(execFile);
+const VALID_PROVIDERS = new Set(PROVIDER_NAMES);
+const VALID_UI_MODES = new Set(SESSION_UI_MODES);
+const VALID_ANALYZER_SETTINGS = new Set(ANALYZER_SETTINGS);
+function pushIssue(issues, path, message) {
+    pushValidationIssue(issues, path, message);
+}
+function validateStringArray(value, path, label, issues, options = {}) {
+    if (!Array.isArray(value)) {
+        pushIssue(issues, path, `${label} must be an array of strings.`);
+        return;
+    }
+    if (!options.allowEmptyArray && value.length === 0) {
+        pushIssue(issues, path, `${label} must not be empty.`);
+    }
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== "string" || item.trim().length === 0) {
+            pushIssue(issues, `${path}[${index}]`, `${label} entries must be non-empty strings.`);
+        }
+    }
+}
+function validateEnvOverlay(value, path, issues) {
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "env must be an object of string values.");
+        return;
+    }
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== "string") {
+            pushIssue(issues, `${path}.${key}`, "Environment override values must be strings.");
+        }
+    }
+}
+function validateTemplateProviderSection(value, path, issues, required) {
+    if (value === undefined) {
+        if (required) {
+            pushIssue(issues, path, "Provider requires this config section with a non-empty command_template.");
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    if (value.command_template === undefined) {
+        if (required) {
+            pushIssue(issues, `${path}.command_template`, "command_template is required for this provider.");
+        }
+    }
+    else {
+        validateStringArray(value.command_template, `${path}.command_template`, "command_template", issues);
+    }
+    if (value.env !== undefined) {
+        validateEnvOverlay(value.env, `${path}.env`, issues);
+    }
+}
+function validateAgentProviderSection(value, path, issues) {
+    if (value === undefined) {
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    if (value.command !== undefined) {
+        if (typeof value.command !== "string" || value.command.trim().length === 0) {
+            pushIssue(issues, `${path}.command`, "command must be a non-empty string when provided.");
+        }
+        else if (!isSupportedConfiguredCommand(value.command)) {
+            pushIssue(issues, `${path}.command`, "command must be a bare executable name or direct executable path. Put CLI flags in extra_args.");
+        }
+    }
+    if (value.extra_args !== undefined) {
+        validateStringArray(value.extra_args, `${path}.extra_args`, "extra_args", issues, { allowEmptyArray: true });
+    }
+    if (path === "claude_code" &&
+        value.dangerously_skip_permissions !== undefined &&
+        typeof value.dangerously_skip_permissions !== "boolean") {
+        pushIssue(issues, `${path}.dangerously_skip_permissions`, "dangerously_skip_permissions must be a boolean when provided.");
+    }
+}
+/**
+ * Validate the `openai_compatible` provider section. Unlike the agentic CLI
+ * sections, this one has no `command`/PATH semantics — it is an HTTP endpoint, so
+ * we type-check the URL/model/key/tuning fields and, when this provider is the
+ * selected one, require the endpoint + model (the API key is resolved from the
+ * environment at launch, so its presence is not validated here).
+ */
+function validateOpenAiCompatibleSection(value, path, issues, required) {
+    if (value === undefined) {
+        if (required) {
+            pushIssue(issues, path, "Provider requires this config section with base_url and model.");
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    for (const key of ["base_url", "model", "api_key_env", "api_key"]) {
+        const entry = value[key];
+        if (entry !== undefined &&
+            (typeof entry !== "string" || entry.trim().length === 0)) {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a non-empty string when provided.`);
+        }
+    }
+    if (required) {
+        for (const key of ["base_url", "model"]) {
+            if (value[key] === undefined) {
+                pushIssue(issues, `${path}.${key}`, `${key} is required for the openai-compatible provider.`);
+            }
+        }
+    }
+    if (value.headers !== undefined) {
+        validateEnvOverlay(value.headers, `${path}.headers`, issues);
+    }
+    for (const key of ["temperature", "max_output_tokens"]) {
+        const entry = value[key];
+        if (entry !== undefined && (typeof entry !== "number" || !Number.isFinite(entry))) {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a finite number when provided.`);
+        }
+    }
+    for (const key of ["response_format_json", "include_referenced_files"]) {
+        if (value[key] !== undefined && typeof value[key] !== "boolean") {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a boolean when provided.`);
+        }
+    }
+}
+// Maximum wall-clock time for a PATH probe (where/which). 5 s is generous
+// even on slow NFS mounts; prevents validation from hanging indefinitely on
+// broken PATH entries or stalled DNS lookups.
+const COMMAND_EXISTS_TIMEOUT_MS = 5_000;
+async function commandExists(command) {
+    const lookupCommand = process.platform === "win32" ? "where" : "which";
+    try {
+        // execFile (no shell) passes `command` as a literal argv entry, so shell
+        // metacharacters in a config-supplied command cannot be interpreted or
+        // executed during environment validation.
+        await execFileAsync(lookupCommand, [command], {
+            timeout: COMMAND_EXISTS_TIMEOUT_MS,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function configuredPathExists(commandPath) {
+    try {
+        accessSync(commandPath, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function startsWithPathPrefix(command) {
+    return (command.startsWith(".") ||
+        command.startsWith("/") ||
+        command.startsWith("\\\\") ||
+        /^[A-Za-z]:[\\/]/.test(command));
+}
+function containsForbiddenCommandSyntax(command) {
+    return /[\r\n"'`|&;<>]/.test(command);
+}
+function isBareExecutableName(command) {
+    return (command.length > 0 &&
+        !/\s/.test(command) &&
+        !containsForbiddenCommandSyntax(command) &&
+        !/[\\/]/.test(command) &&
+        !/^[A-Za-z]:/.test(command));
+}
+function isDirectExecutablePath(command) {
+    return (command.length > 0 &&
+        !containsForbiddenCommandSyntax(command) &&
+        startsWithPathPrefix(command));
+}
+function isSupportedConfiguredCommand(command) {
+    const trimmed = command.trim();
+    if (trimmed.length === 0 || trimmed !== command) {
+        return false;
+    }
+    return isBareExecutableName(trimmed) || isDirectExecutablePath(trimmed);
+}
+function validateRoutingTiers(value, issues) {
+    if (!isRecord(value)) {
+        pushIssue(issues, "dispatch.routing_tiers", "dispatch.routing_tiers must be a JSON object.");
+        return;
+    }
+    for (const key of ["deep_at", "standard_at"]) {
+        const cut = value[key];
+        if (cut !== undefined &&
+            (typeof cut !== "number" || !Number.isFinite(cut) || cut < 0 || cut > 1)) {
+            pushIssue(issues, `dispatch.routing_tiers.${key}`, `dispatch.routing_tiers.${key} must be a number in [0, 1] when provided.`);
+        }
+    }
+    if (typeof value.deep_at === "number" &&
+        typeof value.standard_at === "number" &&
+        value.deep_at < value.standard_at) {
+        pushIssue(issues, "dispatch.routing_tiers", "dispatch.routing_tiers.deep_at must be >= standard_at.");
+    }
+}
+export function validateSessionConfig(value) {
+    const issues = [];
+    if (value === undefined) {
+        return issues;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, "session_config", "Session config must be a JSON object.");
+        return issues;
+    }
+    const provider = value.provider;
+    if (provider !== undefined) {
+        if (typeof provider !== "string") {
+            pushIssue(issues, "provider", "provider must be a string.");
+        }
+        else if (!VALID_PROVIDERS.has(provider)) {
+            pushIssue(issues, "provider", `Unsupported provider "${provider}". Expected one of: ${Array.from(VALID_PROVIDERS).join(", ")}.`);
+        }
+    }
+    const timeoutMs = value.timeout_ms;
+    if (timeoutMs !== undefined &&
+        (!Number.isInteger(timeoutMs) || Number(timeoutMs) <= 0)) {
+        pushIssue(issues, "timeout_ms", "timeout_ms must be a positive integer number of milliseconds.");
+    }
+    const uiMode = value.ui_mode;
+    if (uiMode !== undefined) {
+        if (typeof uiMode !== "string" || !VALID_UI_MODES.has(uiMode)) {
+            pushIssue(issues, "ui_mode", `ui_mode must be one of: ${Array.from(VALID_UI_MODES).join(", ")}.`);
+        }
+    }
+    if (value.host_can_dispatch_subagents !== undefined &&
+        typeof value.host_can_dispatch_subagents !== "boolean") {
+        pushIssue(issues, "host_can_dispatch_subagents", "host_can_dispatch_subagents must be a boolean when provided.");
+    }
+    validateTemplateProviderSection(value.subprocess_template, "subprocess_template", issues, provider === "subprocess-template");
+    validateTemplateProviderSection(value.vscode_task, "vscode_task", issues, provider === "vscode-task");
+    validateTemplateProviderSection(value.antigravity, "antigravity", issues, provider === "antigravity");
+    validateAgentProviderSection(value.claude_code, "claude_code", issues);
+    validateAgentProviderSection(value.codex, "codex", issues);
+    validateAgentProviderSection(value.opencode, "opencode", issues);
+    validateOpenAiCompatibleSection(value.openai_compatible, "openai_compatible", issues, provider === "openai-compatible");
+    if (value.synthesis !== undefined) {
+        if (!isRecord(value.synthesis)) {
+            pushIssue(issues, "synthesis", "synthesis must be a JSON object.");
+        }
+        else if (value.synthesis.narrative !== undefined &&
+            typeof value.synthesis.narrative !== "boolean") {
+            pushIssue(issues, "synthesis.narrative", "synthesis.narrative must be a boolean when provided.");
+        }
+    }
+    if (value.dispatch !== undefined) {
+        if (!isRecord(value.dispatch)) {
+            pushIssue(issues, "dispatch", "dispatch must be a JSON object.");
+        }
+        else {
+            if (value.dispatch.confirm_threshold !== undefined &&
+                (!Number.isInteger(value.dispatch.confirm_threshold) ||
+                    Number(value.dispatch.confirm_threshold) < 0)) {
+                pushIssue(issues, "dispatch.confirm_threshold", "dispatch.confirm_threshold must be a non-negative integer when provided.");
+            }
+            if (value.dispatch.max_packets !== undefined &&
+                (!Number.isInteger(value.dispatch.max_packets) ||
+                    Number(value.dispatch.max_packets) < 0)) {
+                pushIssue(issues, "dispatch.max_packets", "dispatch.max_packets must be a non-negative integer when provided.");
+            }
+            if (value.dispatch.routing_tiers !== undefined) {
+                validateRoutingTiers(value.dispatch.routing_tiers, issues);
+            }
+        }
+    }
+    if (value.analyzers !== undefined) {
+        if (!isRecord(value.analyzers)) {
+            pushIssue(issues, "analyzers", "analyzers must be a JSON object mapping analyzer id to a setting.");
+        }
+        else {
+            for (const [id, setting] of Object.entries(value.analyzers)) {
+                if (typeof setting !== "string" ||
+                    !VALID_ANALYZER_SETTINGS.has(setting)) {
+                    pushIssue(issues, `analyzers.${id}`, `analyzers.${id} must be one of: ${Array.from(VALID_ANALYZER_SETTINGS).join(", ")}.`);
+                }
+            }
+        }
+    }
+    return issues;
+}
+export async function validateConfiguredProviderEnvironment(sessionConfig, options = {}) {
+    const issues = [];
+    const lookupCommand = options.commandExists ?? commandExists;
+    const lookupPath = options.pathExists ?? configuredPathExists;
+    const provider = sessionConfig.provider ?? "local-subprocess";
+    if (provider === "claude-code") {
+        const command = sessionConfig.claude_code?.command ?? "claude";
+        if (isBareExecutableName(command) && !(await lookupCommand(command))) {
+            pushIssue(issues, "claude_code.command", `Configured claude-code executable was not found on PATH: ${command}.`);
+        }
+        else if (isDirectExecutablePath(command) && !lookupPath(command)) {
+            pushIssue(issues, "claude_code.command", `Configured claude-code executable path does not exist: ${command}.`);
+        }
+        else if (!isSupportedConfiguredCommand(command)) {
+            pushIssue(issues, "claude_code.command", "Configured claude-code command must be a bare executable name or direct path. Put CLI flags in extra_args.");
+        }
+    }
+    if (provider === "opencode") {
+        const command = sessionConfig.opencode?.command ?? "opencode";
+        if (isBareExecutableName(command) && !(await lookupCommand(command))) {
+            pushIssue(issues, "opencode.command", `Configured opencode executable was not found on PATH: ${command}.`);
+        }
+        else if (isDirectExecutablePath(command) && !lookupPath(command)) {
+            pushIssue(issues, "opencode.command", `Configured opencode executable path does not exist: ${command}.`);
+        }
+        else if (!isSupportedConfiguredCommand(command)) {
+            pushIssue(issues, "opencode.command", "Configured opencode command must be a bare executable name or direct path. Put CLI flags in extra_args.");
+        }
+    }
+    if (provider === "codex") {
+        const command = sessionConfig.codex?.command ?? "codex";
+        if (isBareExecutableName(command) && !(await lookupCommand(command))) {
+            pushIssue(issues, "codex.command", `Configured codex executable was not found on PATH: ${command}.`);
+        }
+        else if (isDirectExecutablePath(command) && !lookupPath(command)) {
+            pushIssue(issues, "codex.command", `Configured codex executable path does not exist: ${command}.`);
+        }
+        else if (!isSupportedConfiguredCommand(command)) {
+            pushIssue(issues, "codex.command", "Configured codex command must be a bare executable name or direct path. Put CLI flags in extra_args.");
+        }
+    }
+    return issues;
+}
+export { formatValidationIssues } from "audit-tools/shared";
+//# sourceMappingURL=sessionConfig.js.map

package/dist/audit/validation/sessionConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/audit/validation/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAMhB,QAAQ,EACR,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,cAAc,CAAC,CAAC;AAC9D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAgB,gBAAgB,CAAC,CAAC;AAChE,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAkB,iBAAiB,CAAC,CAAC;AAE5E,SAAS,SAAS,CAChB,MAAyB,EACzB,IAAY,EACZ,OAAe;IAEf,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,IAAY,EACZ,KAAa,EACb,MAAyB,EACzB,UAAyC,EAAE;IAE3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,GAAG,KAAK,qCAAqC,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,yCAAyC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,QAAiB;IAEjB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,IAAI,EACJ,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,GAAG,IAAI,mBAAmB,EAC1B,iDAAiD,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mBAAmB,CACjB,KAAK,CAAC,gBAAgB,EACtB,GAAG,IAAI,mBAAmB,EAC1B,kBAAkB,EAClB,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,SAAS,CACP,MAAM,EACN,GAAG,IAAI,UAAU,EACjB,mDAAmD,CACpD,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,UAAU,EACjB,gGAAgG,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,mBAAmB,CACjB,KAAK,CAAC,UAAU,EAChB,GAAG,IAAI,aAAa,EACpB,YAAY,EACZ,MAAM,EACN,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,IACE,IAAI,KAAK,aAAa;QACtB,KAAK,CAAC,4BAA4B,KAAK,SAAS;QAChD,OAAO,KAAK,CAAC,4BAA4B,KAAK,SAAS,EACvD,CAAC;QACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,+BAA+B,EACtC,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,+BAA+B,CACtC,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,QAAiB;IAEjB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,IAAI,EACJ,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAU,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EACxD,CAAC;YACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,4CAA4C,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAU,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7B,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,kDAAkD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClF,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,yCAAyC,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,0BAA0B,CAAU,EAAE,CAAC;QAChF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAChE,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,mCAAmC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,8CAA8C;AAC9C,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,KAAK,UAAU,aAAa,CAAC,OAAe;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,IAAI,CAAC;QACH,yEAAyE;QACzE,uEAAuE;QACvE,0CAA0C;QAC1C,MAAM,aAAa,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE;YAC5C,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,IAAI,CAAC;QACH,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAe;IACrD,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACnB,CAAC,8BAA8B,CAAC,OAAO,CAAC;QACxC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,8BAA8B,CAAC,OAAO,CAAC;QACxC,oBAAoB,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CACP,MAAM,EACN,wBAAwB,EACxB,+CAA+C,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IACE,GAAG,KAAK,SAAS;YACjB,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EACxE,CAAC;YACD,SAAS,CACP,MAAM,EACN,0BAA0B,GAAG,EAAE,EAC/B,0BAA0B,GAAG,4CAA4C,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,EACjC,CAAC;QACD,SAAS,CACP,MAAM,EACN,wBAAwB,EACxB,wDAAwD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,4BAA4B,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAwB,CAAC,EAAE,CAAC;YAC1D,SAAS,CACP,MAAM,EACN,UAAU,EACV,yBAAyB,QAAQ,uBAAuB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IACnC,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EACxD,CAAC;QACD,SAAS,CACP,MAAM,EACN,YAAY,EACZ,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAuB,CAAC,EAAE,CAAC;YAC/E,SAAS,CACP,MAAM,EACN,SAAS,EACT,2BAA2B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IACE,KAAK,CAAC,2BAA2B,KAAK,SAAS;QAC/C,OAAO,KAAK,CAAC,2BAA2B,KAAK,SAAS,EACtD,CAAC;QACD,SAAS,CACP,MAAM,EACN,6BAA6B,EAC7B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,+BAA+B,CAC7B,KAAK,CAAC,mBAAmB,EACzB,qBAAqB,EACrB,MAAM,EACN,QAAQ,KAAK,qBAAqB,CACnC,CAAC;IACF,+BAA+B,CAC7B,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,MAAM,EACN,QAAQ,KAAK,aAAa,CAC3B,CAAC;IACF,+BAA+B,CAC7B,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,MAAM,EACN,QAAQ,KAAK,aAAa,CAC3B,CAAC;IACF,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACvE,4BAA4B,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,4BAA4B,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,+BAA+B,CAC7B,KAAK,CAAC,iBAAiB,EACvB,mBAAmB,EACnB,MAAM,EACN,QAAQ,KAAK,mBAAmB,CACjC,CAAC;IAEF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;QACrE,CAAC;aAAM,IACL,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;YACvC,OAAO,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,EAC9C,CAAC;YACD,SAAS,CACP,MAAM,EACN,qBAAqB,EACrB,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IACE,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS;gBAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAC/C,CAAC;gBACD,SAAS,CACP,MAAM,EACN,4BAA4B,EAC5B,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IACE,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;gBACxC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EACzC,CAAC;gBACD,SAAS,CACP,MAAM,EACN,sBAAsB,EACtB,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC/C,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,SAAS,CACP,MAAM,EACN,WAAW,EACX,mEAAmE,CACpE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5D,IACE,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAA0B,CAAC,EACxD,CAAC;oBACD,SAAS,CACP,MAAM,EACN,aAAa,EAAE,EAAE,EACjB,aAAa,EAAE,oBAAoB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,aAA4B,EAC5B,UAGI,EAAE;IAEN,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IAE9D,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC;QAC/D,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,SAAS,CACP,MAAM,EACN,qBAAqB,EACrB,4DAA4D,OAAO,GAAG,CACvE,CAAC;QACJ,CAAC;aAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CACP,MAAM,EACN,qBAAqB,EACrB,0DAA0D,OAAO,GAAG,CACrE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,SAAS,CACP,MAAM,EACN,qBAAqB,EACrB,4GAA4G,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,IAAI,UAAU,CAAC;QAC9D,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,yDAAyD,OAAO,GAAG,CACpE,CAAC;QACJ,CAAC;aAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,uDAAuD,OAAO,GAAG,CAClE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,SAAS,CACP,MAAM,EACN,kBAAkB,EAClB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,IAAI,OAAO,CAAC;QACxD,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrE,SAAS,CACP,MAAM,EACN,eAAe,EACf,sDAAsD,OAAO,GAAG,CACjE,CAAC;QACJ,CAAC;aAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CACP,MAAM,EACN,eAAe,EACf,oDAAoD,OAAO,GAAG,CAC/D,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,SAAS,CACP,MAAM,EACN,eAAe,EACf,sGAAsG,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/remediate/contractPipeline/artifactStore.d.ts

@@ -0,0 +1,58 @@
+export declare const CP_ARTIFACT_NAMES: readonly ["goal_spec", "context_bundle", "module_decomposition", "module_contracts", "seam_reconciliation_report", "finalized_module_contracts", "conceptual_design_critique", "obligation_ledger", "cyclic_seam_resolution", "test_validator_plan", "contract_assessment_report", "counterexample", "judge_report", "implementation_dag", "verification_report"];
+export type ContractPipelineArtifactName = (typeof CP_ARTIFACT_NAMES)[number];
+export declare const DEPENDENCY_MAP: Record<ContractPipelineArtifactName, ContractPipelineArtifactName[]>;
+export interface ContractPipelineArtifactEnvelope {
+    artifact_name: ContractPipelineArtifactName;
+    /** SHA-256 of the raw payload bytes — byte identity of this exact emission. */
+    content_hash: string;
+    /**
+     * SHA-256 of the artifact's SEMANTIC PROJECTION (load-bearing structure only;
+     * see `semanticProjection`). This — not `content_hash` — is what staleness
+     * records and compares, so a cosmetic upstream edit does not re-stale
+     * downstreams (B3). Optional for forward-compat with envelopes written before
+     * this field existed; `envelopeSemanticHash` recomputes it on read when absent.
+     */
+    semantic_hash?: string;
+    /** Semantic-projection hashes of upstream dependency artifacts at write time. */
+    dependency_hashes: Partial<Record<ContractPipelineArtifactName, string>>;
+    payload: unknown;
+}
+export declare function contractPipelineDir(artifactsDir: string): string;
+/**
+ * Path to the optional Path-A seed file. Present only when the intake source
+ * is a structured audit-findings report; absent for document/conversation runs.
+ */
+export declare function pathASeedFilePath(artifactsDir: string): string;
+export declare function contractArtifactFilePath(artifactsDir: string, name: ContractPipelineArtifactName): string;
+/**
+ * The semantic hash to compare a dependency against. Prefers the envelope's
+ * recorded `semantic_hash`; recomputes from the payload for envelopes written
+ * before the field existed (no migration needed — staleness stays correct on the
+ * first read of a legacy envelope).
+ */
+export declare function envelopeSemanticHash(envelope: ContractPipelineArtifactEnvelope): string;
+/** Write an artifact envelope. Creates parent directories as needed. */
+export declare function writeContractArtifact(artifactsDir: string, name: ContractPipelineArtifactName, payload: unknown): Promise<ContractPipelineArtifactEnvelope>;
+/** Read a stored artifact envelope, or null if absent. */
+export declare function readContractArtifact(artifactsDir: string, name: ContractPipelineArtifactName): Promise<ContractPipelineArtifactEnvelope | null>;
+export interface StalenessResult {
+    /** Names of artifacts that are stale (upstream changed) or missing (never written). */
+    stale: ContractPipelineArtifactName[];
+    /** Names of artifacts that are absent (file does not exist). */
+    absent: ContractPipelineArtifactName[];
+}
+/**
+ * Detect stale artifacts by walking the dependency DAG transitively.
+ * An artifact is stale when:
+ * - A dependency artifact is absent/missing.
+ * - A dependency artifact's current SEMANTIC-projection hash differs from what
+ *   was recorded at write time in this artifact's envelope. Cosmetic upstream
+ *   edits (reworded prose, regenerated timestamps, reordered keys) project to
+ *   the same hash and do NOT mark downstreams stale (B3).
+ *
+ * Absent artifacts (never written) are reported under `absent`, not `stale`.
+ */
+export declare function detectStaleArtifacts(artifactsDir: string): Promise<StalenessResult>;
+/** Returns true when the artifact file is present on disk. */
+export declare function contractArtifactExists(artifactsDir: string, name: ContractPipelineArtifactName): boolean;
+//# sourceMappingURL=artifactStore.d.ts.map

package/dist/remediate/contractPipeline/artifactStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactStore.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/artifactStore.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,iBAAiB,mWAgBpB,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM9E,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,4BAA4B,EAAE,4BAA4B,EAAE,CAiC/F,CAAC;AAIF,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,4BAA4B,CAAC;IAC5C,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,OAAO,CAAC;CAClB;AAID,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,GACjC,MAAM,CAER;AAiBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,gCAAgC,GACzC,MAAM,CAKR;AAID,wEAAwE;AACxE,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gCAAgC,CAAC,CAyB3C;AAED,0DAA0D;AAC1D,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,gCAAgC,GAAG,IAAI,CAAC,CAMlD;AAED,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACtC,gEAAgE;IAChE,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,eAAe,CAAC,CAqD1B;AAED,8DAA8D;AAC9D,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAET"}