audit-tools 0.28.0

package/dist/remediate/intake.js

@@ -0,0 +1,340 @@
+import { existsSync } from "node:fs";
+import { readdir } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { hashContent, readOptionalJsonFile, readOptionalTextFile, writeJsonFile, isRecord, severityCompare, } from "audit-tools/shared";
+export const INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION = "remediate-code-intake-source-manifest/v1alpha1";
+export const INTAKE_SUMMARY_SCHEMA_VERSION = "remediate-code-intake-summary/v1alpha1";
+export const INTAKE_CLARIFICATION_SCHEMA_VERSION = "remediate-code-intake-clarifications/v1alpha1";
+export function intakePaths(artifactsDir) {
+    const dir = join(artifactsDir, "intake");
+    return {
+        dir,
+        sourceManifest: join(dir, "source-manifest.json"),
+        conversationStart: join(dir, "conversation-start.md"),
+        summary: join(dir, "intake-summary.json"),
+        clarificationResolution: join(dir, "intake-clarifications.json"),
+        brief: join(dir, "remediation-brief.md"),
+        extractedPlan: join(artifactsDir, "extracted-plan.json"),
+        intentCheckpoint: join(artifactsDir, "intent_checkpoint.json"),
+        findingsDigest: join(dir, "findings-digest.json"),
+        findingEnumeration: join(dir, "finding-enumeration.json"),
+    };
+}
+export function buildDocumentSourceManifest(paths, createdFrom) {
+    return {
+        schema_version: INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION,
+        created_from: createdFrom,
+        sources: paths.map((path, index) => ({
+            type: "document",
+            path,
+            label: `input-${String(index + 1).padStart(2, "0")}`,
+        })),
+    };
+}
+export function buildStructuredAuditSourceManifest(path, createdFrom) {
+    return {
+        schema_version: INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION,
+        created_from: createdFrom,
+        sources: [
+            {
+                type: "structured_audit",
+                path,
+                label: "audit-findings",
+            },
+        ],
+    };
+}
+export function buildConversationSourceManifest(conversationPath) {
+    return {
+        schema_version: INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION,
+        created_from: "conversation",
+        sources: [
+            {
+                type: "conversation",
+                path: conversationPath,
+                label: "conversation-start",
+            },
+        ],
+    };
+}
+// ── Content hashing ───────────────────────────────────────────────────────────
+/**
+ * Compute a short SHA-256 hex digest for the given content string.
+ * Used as the content-hash key for idempotent source registration (INV-ID-04).
+ */
+export function computeContentHash(content) {
+    return hashContent(content, { length: 16 });
+}
+/**
+ * Scan `<intakeDir>` for `conversation-start.md` and any other `*.md` files,
+ * then return IntakeSource entries for any that are not already registered
+ * (keyed by path + content-hash, INV-ID-04).
+ *
+ * REGISTRATION-ONLY: this function reads file contents only to compute hashes;
+ * it never writes or creates the .md files (INV-ID-07).
+ *
+ * Returns the new sources to add. Callers must merge them into the manifest and
+ * persist; this function does not mutate any persisted state.
+ */
+export async function scanConversationSources(intakeDir, existingRecords) {
+    const { readFile } = await import("node:fs/promises");
+    const candidates = [];
+    // Always check conversation-start.md first.
+    const conversationStart = join(intakeDir, "conversation-start.md");
+    if (existsSync(conversationStart)) {
+        candidates.push(conversationStart);
+    }
+    // Scan for other *.md files in the intake dir.
+    if (existsSync(intakeDir)) {
+        try {
+            const entries = await readdir(intakeDir);
+            for (const entry of entries) {
+                if (entry.endsWith(".md") &&
+                    entry !== "conversation-start.md" &&
+                    entry !== "remediation-brief.md") {
+                    candidates.push(join(intakeDir, entry));
+                }
+            }
+        }
+        catch {
+            // directory unreadable — skip
+        }
+    }
+    const existingByPath = new Map(existingRecords.map((r) => [r.path, r.content_hash]));
+    const newSources = [];
+    const newRecords = [];
+    for (const candidatePath of candidates) {
+        let content;
+        try {
+            content = await readFile(candidatePath, "utf8");
+        }
+        catch {
+            continue;
+        }
+        const hash = computeContentHash(content);
+        const existing = existingByPath.get(candidatePath);
+        if (existing === hash) {
+            // Already registered with same content — skip (INV-ID-04 idempotency).
+            continue;
+        }
+        // New or content-changed: register (replace keyed on path).
+        const isConvStart = candidatePath.endsWith("conversation-start.md");
+        newSources.push({
+            type: "conversation",
+            path: candidatePath,
+            label: isConvStart ? "conversation-start" : `intake-${candidatePath.split(/[\\/]/).pop()?.replace(/\.md$/, "") ?? "doc"}`,
+        });
+        newRecords.push({ path: candidatePath, content_hash: hash });
+    }
+    return { sources: newSources, records: newRecords };
+}
+// ── Findings digest + enumeration ─────────────────────────────────────────────
+export const FINDINGS_DIGEST_SCHEMA_VERSION = "remediate-code-intake-findings-digest/v1alpha1";
+export const FINDING_ENUMERATION_SCHEMA_VERSION = "remediate-code-intake-finding-enumeration/v1alpha1";
+/** Maximum number of findings surfaced verbatim in the bounded digest. */
+const DIGEST_TOP_N = 20;
+/**
+ * Build the bounded `FindingsDigest` from an AuditFindingsReport.
+ *
+ * The digest is bounded (top-N + omitted_count) so it fits cleanly in prompt
+ * context; the complete enumeration is in `finding-enumeration.json`.
+ */
+export function buildFindingsDigest(report) {
+    const findings = report.findings ?? [];
+    const workBlocks = report.work_blocks ?? [];
+    const severity_counts = {};
+    const lens_counts = {};
+    const package_counts = {};
+    for (const f of findings) {
+        severity_counts[f.severity] = (severity_counts[f.severity] ?? 0) + 1;
+        lens_counts[f.lens] = (lens_counts[f.lens] ?? 0) + 1;
+        const firstFile = f.affected_files?.[0]?.path ?? "";
+        const pkg = firstFile.split(/[\\/]/)[0] ?? "(root)";
+        package_counts[pkg] = (package_counts[pkg] ?? 0) + 1;
+    }
+    // Sort by severity priority (most-severe-first) for top-N selection, using the
+    // shared single-source comparator instead of a local inverted rank table.
+    const sorted = [...findings].sort((a, b) => severityCompare(a.severity, b.severity));
+    const top_findings = sorted.slice(0, DIGEST_TOP_N).map((f) => ({
+        id: f.id,
+        title: f.title,
+        severity: f.severity,
+        lens: f.lens,
+        file: f.affected_files?.[0]?.path,
+    }));
+    const work_block_map = {};
+    for (const wb of workBlocks) {
+        work_block_map[wb.id] = wb.finding_ids ?? [];
+    }
+    return {
+        schema_version: FINDINGS_DIGEST_SCHEMA_VERSION,
+        total_count: findings.length,
+        severity_counts,
+        lens_counts,
+        package_counts,
+        work_block_map,
+        top_findings,
+        omitted_count: Math.max(0, findings.length - DIGEST_TOP_N),
+    };
+}
+/**
+ * Build the complete `FindingEnumeration` from an AuditFindingsReport.
+ * Every finding id and compact descriptor is included — no omission.
+ */
+export function buildFindingEnumeration(report) {
+    const findings = report.findings ?? [];
+    return {
+        schema_version: FINDING_ENUMERATION_SCHEMA_VERSION,
+        total_count: findings.length,
+        findings: findings.map((f) => ({
+            id: f.id,
+            title: f.title,
+            severity: f.severity,
+            lens: f.lens,
+            file: f.affected_files?.[0]?.path,
+            summary: f.summary,
+        })),
+    };
+}
+/**
+ * Persist `findings-digest.json` + `finding-enumeration.json` for an
+ * enumerable (structured_audit) source, or `{ is_enumerable: false }` for a
+ * document source (INV-ID-08).
+ *
+ * Content-hash keyed idempotency: if the digest already exists with the same
+ * total_count and the same content_hash of the source report, skips the write.
+ */
+export async function writeIntakeDigestArtifacts(paths, report) {
+    if (report === null) {
+        // Document / non-enumerable source.
+        const marker = {
+            is_enumerable: false,
+            reason: "source is a document or conversation, not a structured audit report",
+        };
+        await writeJsonFile(paths.findingsDigest, marker);
+        await writeJsonFile(paths.findingEnumeration, marker);
+        return;
+    }
+    const digest = buildFindingsDigest(report);
+    const enumeration = buildFindingEnumeration(report);
+    await writeJsonFile(paths.findingsDigest, digest);
+    await writeJsonFile(paths.findingEnumeration, enumeration);
+}
+export function sourceManifestsEquivalent(a, b) {
+    if (!a || !b)
+        return false;
+    if (a.sources.length !== b.sources.length)
+        return false;
+    return a.sources.every((source, index) => {
+        const other = b.sources[index];
+        return source.type === other.type && source.path === other.path;
+    });
+}
+export function resolveManifestSources(root, manifest) {
+    const resolved = [];
+    const missing = [];
+    for (const source of manifest.sources) {
+        const absolutePath = resolve(root, source.path);
+        const normalized = { ...source, path: absolutePath };
+        if (existsSync(absolutePath)) {
+            resolved.push(normalized);
+        }
+        else {
+            missing.push(normalized);
+        }
+    }
+    return { resolved, missing };
+}
+export function blockingIntakeQuestions(summary) {
+    // INV-remediate-state-06: a question is blocking only when blocking===true.
+    // The old `!== false` treated undefined as blocking; this pins the intended
+    // semantics so a question with no explicit blocking field is NON-blocking.
+    return (summary?.open_questions ?? []).filter((question) => question.blocking === true);
+}
+export function intakeSummaryContentErrors(summary) {
+    if (!summary.ready)
+        return [];
+    const errors = [];
+    if (summary.goals.length === 0)
+        errors.push("goals must be non-empty");
+    // structured_audit sources carry affected_files per finding, so an empty top-level
+    // affected_files list is valid for that source type. Only require it for document-based intake.
+    if (summary.source_type !== "structured_audit" && summary.affected_files.length === 0) {
+        errors.push("affected_files must be non-empty");
+    }
+    return errors;
+}
+export function isIntakeReady(summary) {
+    return (Boolean(summary?.ready) &&
+        blockingIntakeQuestions(summary).length === 0 &&
+        (summary ? intakeSummaryContentErrors(summary).length === 0 : true));
+}
+/**
+ * Validate the `intake-clarifications.json` file against the IntakeClarifications
+ * schema. Returns valid=true when the file is well-formed and addresses at least
+ * one blocking question (if blocking questions exist). Returns valid=false with
+ * error details when the resolution is malformed or fails to address blocking
+ * questions.
+ */
+export function validateClarificationResolution(resolution, blockingQuestions) {
+    const errors = [];
+    if (!isRecord(resolution)) {
+        errors.push("clarification resolution must be a JSON object");
+        return { valid: false, errors };
+    }
+    if (!Array.isArray(resolution.answers)) {
+        errors.push("clarification resolution must have an 'answers' array");
+        return { valid: false, errors };
+    }
+    const answers = resolution.answers;
+    for (let i = 0; i < answers.length; i++) {
+        const answer = answers[i];
+        if (!isRecord(answer)) {
+            errors.push(`answers[${i}] must be an object`);
+            continue;
+        }
+        if (typeof answer.question_id !== "string" || !answer.question_id) {
+            errors.push(`answers[${i}] is missing required field 'question_id'`);
+        }
+        if (typeof answer.answer !== "string") {
+            errors.push(`answers[${i}] is missing required field 'answer'`);
+        }
+    }
+    if (errors.length > 0) {
+        return { valid: false, errors };
+    }
+    // Check that at least one blocking question is addressed
+    if (blockingQuestions.length > 0) {
+        const answeredIds = new Set(answers
+            .filter(isRecord)
+            .map((a) => a.question_id)
+            .filter((id) => typeof id === "string"));
+        const blockingIds = blockingQuestions.map((q) => q.id);
+        const addressedBlocking = blockingIds.filter((id) => answeredIds.has(id));
+        if (addressedBlocking.length === 0) {
+            errors.push(`answers address none of the blocking question ids: ${blockingIds.join(", ")}`);
+            return { valid: false, errors };
+        }
+    }
+    return { valid: true, errors: [] };
+}
+export async function readIntakeArtifacts(artifactsDir) {
+    const paths = intakePaths(artifactsDir);
+    return {
+        manifest: await readOptionalJsonFile(paths.sourceManifest),
+        conversationStart: await readOptionalTextFile(paths.conversationStart),
+        summary: await readOptionalJsonFile(paths.summary),
+        clarificationResolution: await (async () => {
+            try {
+                return await readOptionalJsonFile(paths.clarificationResolution);
+            }
+            catch {
+                // Malformed JSON in the clarification file is treated as absent;
+                // validation in resolveIntakeStep will re-emit collect_intake_clarifications.
+                return undefined;
+            }
+        })(),
+        brief: await readOptionalTextFile(paths.brief),
+    };
+}
+//# sourceMappingURL=intake.js.map

package/dist/remediate/intake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intake.js","sourceRoot":"","sources":["../../src/remediate/intake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,QAAQ,EACR,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,qCAAqC,GAChD,gDAAyD,CAAC;AAE5D,MAAM,CAAC,MAAM,6BAA6B,GACxC,wCAAiD,CAAC;AAEpD,MAAM,CAAC,MAAM,mCAAmC,GAC9C,+CAAwD,CAAC;AAkC3D,MAAM,UAAU,WAAW,CAAC,YAAoB;IAY9C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO;QACL,GAAG;QACH,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;QACjD,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACrD,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACzC,uBAAuB,EAAE,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC;QAChE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;QACxC,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC;QACxD,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE,wBAAwB,CAAC;QAC9D,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;QACjD,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAe,EACf,WAAiD;IAEjD,OAAO;QACL,cAAc,EAAE,qCAAqC;QACrD,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,UAAU;YAChB,IAAI;YACJ,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACrD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAAY,EACZ,WAAiD;IAEjD,OAAO;QACL,cAAc,EAAE,qCAAqC;QACrD,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,kBAAkB;gBACxB,IAAI;gBACJ,KAAK,EAAE,gBAAgB;aACxB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,gBAAwB;IAExB,OAAO;QACL,cAAc,EAAE,qCAAqC;QACrD,YAAY,EAAE,cAAc;QAC5B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,oBAAoB;aAC5B;SACF;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAaD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,eAA2C;IAE3C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,4CAA4C;IAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IACE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACrB,KAAK,KAAK,uBAAuB;oBACjC,KAAK,KAAK,sBAAsB,EAChC,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,MAAM,UAAU,GAA+B,EAAE,CAAC;IAElD,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;QACvC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,uEAAuE;YACvE,SAAS;QACX,CAAC;QACD,4DAA4D;QAC5D,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACpE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE;SAC1H,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,MAAM,8BAA8B,GACzC,gDAAyD,CAAC;AAE5D,MAAM,CAAC,MAAM,kCAAkC,GAC7C,oDAA6D,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,YAAY,GAAG,EAAE,CAAC;AA+CxB;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,QAAQ,GAAc,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAClD,MAAM,UAAU,GAAgB,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAEzD,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,cAAc,GAA2B,EAAE,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;QACpD,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErF,MAAM,YAAY,GAAyB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;KAClC,CAAC,CAAC,CAAC;IAEJ,MAAM,cAAc,GAA6B,EAAE,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,cAAc,EAAE,8BAA8B;QAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM;QAC5B,eAAe;QACf,WAAW;QACX,cAAc;QACd,cAAc;QACd,YAAY;QACZ,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA2B;IACjE,MAAM,QAAQ,GAAc,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAClD,OAAO;QACL,cAAc,EAAE,kCAAkC;QAClD,WAAW,EAAE,QAAQ,CAAC,MAAM;QAC5B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;YACjC,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAqC,EACrC,MAAkC;IAElC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,oCAAoC;QACpC,MAAM,MAAM,GAAwB;YAClC,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,qEAAqE;SAC9E,CAAC;QACF,MAAM,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,CAAmC,EACnC,CAAmC;IAEnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,QAA8B;IAK9B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACrD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAkC;IAElC,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAO,CAAC,OAAO,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAsB;IAC/D,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvE,mFAAmF;IACnF,gGAAgG;IAChG,IAAI,OAAO,CAAC,WAAW,KAAK,kBAAkB,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAkC;IAC9D,OAAO,CACL,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;QACvB,uBAAuB,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAC7C,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACpE,CAAC;AACJ,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAmB,EACnB,iBAAuC;IAEvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAoB,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,yDAAyD;IACzD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO;aACJ,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;aACzB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CACxD,CAAC;QACF,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,sDAAsD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB;IAQpB,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO;QACL,QAAQ,EAAE,MAAM,oBAAoB,CAClC,KAAK,CAAC,cAAc,CACrB;QACD,iBAAiB,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtE,OAAO,EAAE,MAAM,oBAAoB,CAAgB,KAAK,CAAC,OAAO,CAAC;QACjE,uBAAuB,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,oBAAoB,CAAU,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,8EAA8E;gBAC9E,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,EAAE;QACJ,KAAK,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;KAC/C,CAAC;AACJ,CAAC"}

package/dist/remediate/intent/checkpointFilter.d.ts

@@ -0,0 +1,14 @@
+import type { Finding, IntentCheckpoint } from "audit-tools/shared";
+/**
+ * Drop findings the intent checkpoint excludes: those that fail the severity /
+ * lens / package / theme filters, or whose files fall under `excluded_scope` /
+ * `must_not_touch`. Returns the kept findings and the ids of the dropped ones
+ * (for the coverage ledger and the final report). A checkpoint with no filters
+ * or exclusions keeps everything. A draft checkpoint (confirmed_by: "draft") is
+ * not yet confirmed — no filtering is applied.
+ */
+export declare function filterFindingsByCheckpoint(findings: Finding[], checkpoint: IntentCheckpoint | undefined): {
+    kept: Finding[];
+    droppedIds: string[];
+};
+//# sourceMappingURL=checkpointFilter.d.ts.map

package/dist/remediate/intent/checkpointFilter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpointFilter.d.ts","sourceRoot":"","sources":["../../../src/remediate/intent/checkpointFilter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAyFpE;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC;IAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAsB3C"}

package/dist/remediate/intent/checkpointFilter.js

@@ -0,0 +1,111 @@
+function normalize(p) {
+    return p.replace(/\\/g, "/");
+}
+/** Exact path or directory-prefix match (e.g. "src/api" matches "src/api/x.ts"). */
+function pathMatchesPrefix(filePath, entryPath) {
+    const f = normalize(filePath);
+    const p = normalize(entryPath).replace(/\/+$/, "");
+    if (!p)
+        return false;
+    return f === p || f.startsWith(`${p}/`);
+}
+/** Minimal glob match supporting `*` (within a segment) and `**` (across segments). */
+function globMatches(filePath, glob) {
+    const f = normalize(filePath);
+    const g = normalize(glob);
+    if (!g.includes("*") && !g.includes("?")) {
+        return pathMatchesPrefix(f, g);
+    }
+    // Translate the glob to a regex char-by-char so `*` / `**` / `?` are handled
+    // and every other character is escaped — no placeholder substitution.
+    let re = "";
+    for (let i = 0; i < g.length; i++) {
+        const c = g[i];
+        if (c === "*") {
+            if (g[i + 1] === "*") {
+                re += ".*";
+                i++;
+            }
+            else {
+                re += "[^/]*";
+            }
+        }
+        else if (c === "?") {
+            re += "[^/]";
+        }
+        else if (/[.+^${}()|[\]\\]/.test(c)) {
+            re += `\\${c}`;
+        }
+        else {
+            re += c;
+        }
+    }
+    return new RegExp(`^${re}$`).test(f);
+}
+function affectedPaths(finding) {
+    return (finding.affected_files ?? []).map((f) => f.path).filter(Boolean);
+}
+function matchesFilters(finding, filters) {
+    if (!filters)
+        return true;
+    if (filters.severity?.length && !filters.severity.includes(finding.severity)) {
+        return false;
+    }
+    if (filters.lenses?.length && !filters.lenses.includes(finding.lens)) {
+        return false;
+    }
+    if (filters.themes?.length) {
+        const themeKeys = [finding.theme_id, finding.category].filter((v) => typeof v === "string");
+        if (!themeKeys.some((k) => filters.themes.includes(k)))
+            return false;
+    }
+    if (filters.packages?.length) {
+        const paths = affectedPaths(finding);
+        const inPackage = paths.some((path) => filters.packages.some((pkg) => pathMatchesPrefix(path, pkg)));
+        if (!inPackage)
+            return false;
+    }
+    return true;
+}
+function isPathExcluded(finding, checkpoint) {
+    const paths = affectedPaths(finding);
+    if (paths.length === 0)
+        return false;
+    const excluded = checkpoint.excluded_scope ?? [];
+    const mustNotTouch = checkpoint.must_not_touch ?? [];
+    // A finding is excluded if ANY of its files falls under an excluded path or a
+    // must-not-touch glob — remediating it would require touching forbidden scope.
+    return paths.some((path) => excluded.some((entry) => pathMatchesPrefix(path, entry.path)) ||
+        mustNotTouch.some((glob) => globMatches(path, glob)));
+}
+/**
+ * Drop findings the intent checkpoint excludes: those that fail the severity /
+ * lens / package / theme filters, or whose files fall under `excluded_scope` /
+ * `must_not_touch`. Returns the kept findings and the ids of the dropped ones
+ * (for the coverage ledger and the final report). A checkpoint with no filters
+ * or exclusions keeps everything. A draft checkpoint (confirmed_by: "draft") is
+ * not yet confirmed — no filtering is applied.
+ */
+export function filterFindingsByCheckpoint(findings, checkpoint) {
+    if (!checkpoint)
+        return { kept: findings, droppedIds: [] };
+    // Draft checkpoints have not been confirmed by the host; treat as absent.
+    if (checkpoint.confirmed_by === "draft")
+        return { kept: findings, droppedIds: [] };
+    const hasConstraints = Boolean(checkpoint.filters) ||
+        (checkpoint.excluded_scope?.length ?? 0) > 0 ||
+        (checkpoint.must_not_touch?.length ?? 0) > 0;
+    if (!hasConstraints)
+        return { kept: findings, droppedIds: [] };
+    const droppedIds = [];
+    const kept = findings.filter((finding) => {
+        if (!matchesFilters(finding, checkpoint.filters) ||
+            isPathExcluded(finding, checkpoint)) {
+            droppedIds.push(finding.id);
+            return false;
+        }
+        return true;
+    });
+    return { kept, droppedIds };
+}
+//# sourceMappingURL=checkpointFilter.js.map

package/dist/remediate/intent/checkpointFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpointFilter.js","sourceRoot":"","sources":["../../../src/remediate/intent/checkpointFilter.ts"],"names":[],"mappings":"AAEA,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,oFAAoF;AACpF,SAAS,iBAAiB,CAAC,QAAgB,EAAE,SAAiB;IAC5D,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,uFAAuF;AACvF,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrB,EAAE,IAAI,IAAI,CAAC;gBACX,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CACrB,OAAgB,EAChB,OAAoC;IAEpC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC3D,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACpC,OAAO,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB,EAAE,UAA4B;IACpE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC;IACrD,8EAA8E;IAC9E,+EAA+E;IAC/E,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACP,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAmB,EACnB,UAAwC;IAExC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3D,0EAA0E;IAC1E,IAAI,UAAU,CAAC,YAAY,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACnF,MAAM,cAAc,GAClB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC5C,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACvC,IACE,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,EACnC,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC"}

package/dist/remediate/phases/close.d.ts

@@ -0,0 +1,32 @@
+import { RemediationState } from "../state/store.js";
+import { OrchestratorOptions } from "../types/options.js";
+import type { RemediationOutcomesReport, RunLogger } from "audit-tools/shared";
+import type { ClosingAction } from "../state/closingActions.js";
+import type { OutcomeCoverageLedger } from "../state/types.js";
+export declare function buildRemediationOutcomesReport(state: RemediationState, closingResult: ClosingResult): RemediationOutcomesReport;
+/**
+ * Build the outcomes file's coverage-ledger section: the plan's coverage ledger
+ * with every never-planned entry (cross-lens-deduped, checkpoint-dropped,
+ * no-evidence, phantom-paths) enriched with a `drop_reason` discriminator and
+ * its full `Finding` payload. Payloads resolve from, in order: the ledger entry
+ * itself (when the plan recorded one), the live plan findings, and the
+ * structured-audit intake source. Must run BEFORE close deletes state.json /
+ * the artifacts dir — they are the only payload sources.
+ */
+export declare function buildOutcomeCoverageLedger(state: RemediationState, options: OrchestratorOptions): Promise<OutcomeCoverageLedger | undefined>;
+export interface ClosingCommandResult {
+    command: string[];
+    exit_code: number | null;
+    stdout?: string;
+    stderr?: string;
+}
+export interface ClosingResult {
+    contract_version: "remediate-code-closing-result/v1alpha1";
+    action: ClosingAction;
+    status: "success" | "failed" | "skipped";
+    commands: ClosingCommandResult[];
+}
+export declare function collectStagingFiles(root: string): string[];
+export declare function executeClosingAction(state: RemediationState, options: OrchestratorOptions): ClosingResult;
+export declare function runClosePhase(state: RemediationState, options: OrchestratorOptions, runLogger?: RunLogger): Promise<RemediationState>;
+//# sourceMappingURL=close.d.ts.map

package/dist/remediate/phases/close.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/remediate/phases/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAa1D,OAAO,KAAK,EAIV,yBAAyB,EACzB,SAAS,EAIV,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAOV,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAmF3B,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,aAAa,GAC3B,yBAAyB,CAoI3B;AAsDD;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CA6B5C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,wCAAwC,CAAC;IAC3D,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAyCD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAI1D;AAkDD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,aAAa,CAuDf;AAunBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,EAC5B,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAsK3B"}