audit-tools 0.28.11 → 0.29.3

package/README.audit.md

@@ -1,4 +1,4 @@
-# auditor-lambda
+# audit-code
 
 Skill-first audit orchestration backend for the `/audit-code` product surface.
 
@@ -25,7 +25,7 @@ Packaged installs and repository checkouts both ship that prompt asset.
 The intended user install is one global tool install:
 
 ```bash
-npm install -g auditor-lambda
+npm install -g audit-tools
 ```
 
 That makes `audit-code` available on `PATH`. During package install, the package
@@ -105,7 +105,7 @@ audit-code next-step
 Repository-local equivalent:
 
 ```bash
-node /path/to/auditor-lambda/audit-code.mjs next-step
+node /path/to/audit-tools/audit-code.mjs next-step
 ```
 
 This advances deterministic audit state one bounded step, writes
@@ -148,7 +148,7 @@ For task-to-coverage inspection without reverse-engineering multiple artifacts:
 audit-code explain-task <task_id>
 ```
 
-To remove a leftover `.audit-artifacts/` directory from an interrupted or
+To remove a leftover `.audit-tools/audit/` directory from an interrupted or
 crashed audit:
 
 ```bash
@@ -183,12 +183,12 @@ If you want best-effort cross-editor or provider routing, opt into:
 
 Optional backend config:
 
-`.audit-artifacts/session-config.json`
+`.audit-tools/audit/session-config.json`
 
 ## Practical Guidance
 
 - use `/audit-code` in conversation as the canonical product surface
-- install once with `npm install -g auditor-lambda`, then let `/audit-code` run `audit-code ensure --quiet` in each repository
+- install once with `npm install -g audit-tools`, then let `/audit-code` run `audit-code ensure --quiet` in each repository
 - use `audit-code install` when you want to repair or force-refresh repo-local host assets
 - use `audit-code prompt-path` to locate the packaged prompt asset
 - use `audit-code` from the repository root only when you need the repo-local backend fallback
@@ -200,24 +200,23 @@ Optional backend config:
 
 ```bash
 npm install
-npm run test:single -- tests/next-step.test.mjs
+npm run test:single -- tests/audit/next-step.test.mjs
 npm run verify:release
 npm run release:patch
 npm run release:patch:publish
 ```
 
 When developing from a fresh clone or git worktree, run repo-root `npm install`
-before package checks. Missing workspace links can look like stale
-`@audit-tools/shared` export or type errors.
+before package checks. Missing `node_modules` can cause misleading type errors.
 
-For GitHub Actions publication and npm Trusted Publishing setup, see `docs/release.md`.
+For GitHub Actions publication and npm Trusted Publishing setup, see `docs/audit-pkg/release.md`.
 
 ## Key Docs
 
-- `docs/product.md`
-- `docs/operator-guide.md`
-- `docs/contracts.md`
-- `docs/release.md`
-- `docs/development.md`
+- `docs/audit-pkg/product.md`
+- `docs/audit-pkg/operator-guide.md`
+- `docs/audit-pkg/contracts.md`
+- `docs/audit-pkg/release.md`
+- `docs/audit-pkg/development.md`
 - `docs/history.md`
 - `skills/audit-code/SKILL.md`

package/README.remediate.md

@@ -1,15 +1,15 @@
-# remediator-lambda
+# remediate-code
 
 Conversation-first remediation orchestrator for arbitrary repositories. It
 accepts the auditor's `audit-findings.json` (the deterministic machine contract)
-from [auditor-lambda](https://github.com/OhOkThisIsFine/auditor-lambda), an
+from [audit-code](https://github.com/OhOkThisIsFine/audit-tools), an
 `audit-report.md` or other feedback document (LLM-extracted), or conversational
 feedback — then advances through one backend-rendered step prompt at a time.
 
 ## Primary Usage
 
 ```bash
-npm install -g remediator-lambda
+npm install -g audit-tools
 ```
 
 Then start from a conversation:
@@ -37,25 +37,24 @@ after that brief is clear enough to convert into bounded findings.
 
 ## Runtime Artifacts
 
-Active runs use `.remediation-artifacts/` in the target repository. The current
-state is `.remediation-artifacts/state.json`, and the current step contract is
+Active runs use `.audit-tools/remediation/` in the target repository. The current
+state is `.audit-tools/remediation/state.json`, and the current step contract is
 written to:
 
-- `.remediation-artifacts/steps/current-step.json`
-- `.remediation-artifacts/steps/current-prompt.md`
+- `.audit-tools/remediation/steps/current-step.json`
+- `.audit-tools/remediation/steps/current-prompt.md`
 
-After close, the durable outputs are written at the repo root:
+After close, the durable outputs are written to `.audit-tools/`:
 
 - `remediation-report.md`
-- `remediation-report.json`
+- `remediation-outcomes.json`
 - `remediation-closing-result.json`
 
 ## Development From Source
 
-The global `npm install -g remediator-lambda` path is for users. For repository
+The global `npm install -g audit-tools` path is for users. For repository
 development in a fresh clone or git worktree, run `npm install` at the repo root
-before build, check, test, or package-scoped workflows so workspace links point
-at the current `@audit-tools/shared` sources instead of stale compiled output.
+before build, check, or test workflows.
 
 ## CLI
 
@@ -80,7 +79,7 @@ no LLM involved. A Markdown `audit-report.md` (or any other free-form or partial
 document) is instead routed through intake synthesis and bounded LLM finding
 extraction, so it cannot silently produce a zero-finding plan. The deterministic
 contract is locked by `tests/fixtures/auditor-contract-audit-findings.json`,
-regenerated with `npm run fixtures:auditor-contract` from auditor-lambda's
+regenerated with `npm run fixtures:auditor-contract` from audit-code's
 findings renderer.
 
 ## Intake
@@ -92,7 +91,7 @@ The remediator can start from any of these inputs:
 - conversational feedback typed directly after `/remediate-code`
 - a mix of documents and conversation
 
-Runtime intake artifacts live under `.remediation-artifacts/intake/`:
+Runtime intake artifacts live under `.audit-tools/remediation/intake/`:
 
 - `source-manifest.json`
 - `conversation-start.md`

package/audit-code-wrapper-build.mjs

@@ -38,7 +38,7 @@ function runBuild(command, args) {
     const child = spawn(resolved.command, resolved.args, {
       cwd: repoRoot,
       // Auto-rebuild output is diagnostic — route both child streams to the
-      // parent's stderr (fd 2) so npm's `> auditor-lambda@… build` banner can
+      // parent's stderr (fd 2) so npm's `> audit-tools@… build` banner can
       // never pollute the wrapper's stdout JSON channel when a caller captures it.
       stdio: ['ignore', 2, 2],
       env: process.env,

package/audit-code-wrapper-install-hosts.mjs

@@ -155,7 +155,7 @@ export const INSTALL_HOST_DEFINITIONS = {
     ],
     steps: [
       'Open this repository in Codex.',
-      'Use the global `/audit-code` skill installed by `npm install -g auditor-lambda`.',
+      'Use the global `/audit-code` skill installed by `npm install -g audit-tools`.',
       'If the global skill is unavailable, follow the AGENTS fallback instructions that point at the repo-local prompt asset.',
     ],
     profile: {
@@ -187,7 +187,7 @@ export const INSTALL_HOST_DEFINITIONS = {
     ],
     steps: [
       'Open this repository in OpenCode.',
-      'Use the global `/audit-code` command installed by `npm install -g auditor-lambda`.',
+      'Use the global `/audit-code` command installed by `npm install -g audit-tools`.',
       'Let OpenCode load the generated `opencode.json` for project permissions; the global command drives `audit-code next-step` directly.',
     ],
     profile: {

package/audit-code-wrapper-opencode.mjs

@@ -58,7 +58,6 @@ function buildAuditBashPermissions() {
   for (const sub of AUDIT_CODE_WRAPPER_EXTRA_SUBCOMMANDS) {
     perm[`*audit-code.mjs* ${sub}`] = 'allow';
   }
-  perm['*node* *auditor-lambda*dist*index.js* worker-run*'] = 'allow';
   perm['git status*'] = 'allow';
   perm['git diff*'] = 'allow';
   perm['grep *'] = 'allow';
@@ -158,7 +157,6 @@ export function assertOpenCodeAuditPermissionConfig(permissionConfig, label) {
     '*audit-code.mjs* submit-packet*',
     '*audit-code.mjs* merge-and-ingest*',
     '*audit-code.mjs* worker-run*',
-    '*node* *auditor-lambda*dist*index.js* worker-run*',
   ]) {
     if (bash[pattern] !== 'allow') {
       throw new Error(`OpenCode ${label}.bash must allow ${pattern}. Run "audit-code install --host opencode".`);
@@ -213,7 +211,7 @@ function mergePermissionBlock(existingPermission, generatedPermission) {
 export function buildMergedOpenCodeProjectConfig(existing, root) {
   if (!sharedOpenCodePermissions) {
     throw new Error(
-      'audit-tools/shared is not available. Run "npm run build -w audit-tools/shared" before deploying OpenCode config.',
+      'audit-tools/shared is not available. Run "npm run build" before deploying OpenCode config.',
     );
   }
   const generated = renderOpenCodeProjectConfig(root);

package/dist/audit/extractors/designAssessment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"designAssessment.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAa,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAkUrE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;CAC5B,GAAG,gBAAgB,CAgBnB"}
+{"version":3,"file":"designAssessment.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AA8MrE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;CAC5B,GAAG,gBAAgB,CAmBnB"}

package/dist/audit/extractors/designAssessment.js

@@ -1,3 +1,4 @@
+import { deriveGraphSignals } from "./graphSignals.js";
 // ID generation is instance-scoped per build (no shared mutable module state),
 // so repeated/concurrent buildDesignAssessment calls produce independent,
 // non-colliding DA-### sequences.
@@ -5,90 +6,8 @@ function createFindingIdGenerator() {
     let n = 1;
     return () => `DA-${String(n++).padStart(3, "0")}`;
 }
-function allEdges(graphBundle) {
-    const edges = [];
-    for (const [key, value] of Object.entries(graphBundle.graphs)) {
-        if (key === "routes" || !Array.isArray(value))
-            continue;
-        for (const edge of value) {
-            if (edge && typeof edge.from === "string" && typeof edge.to === "string") {
-                edges.push(edge);
-            }
-        }
-    }
-    return edges;
-}
-function dfsVisit(node, path, adjacency, visited, stack, cycles) {
-    if (stack.has(node)) {
-        const cycleStart = path.indexOf(node);
-        if (cycleStart >= 0) {
-            cycles.push(path.slice(cycleStart));
-        }
-        return;
-    }
-    if (visited.has(node))
-        return;
-    visited.add(node);
-    stack.add(node);
-    path.push(node);
-    for (const neighbor of adjacency.get(node) ?? []) {
-        dfsVisit(neighbor, path, adjacency, visited, stack, cycles);
-    }
-    path.pop();
-    stack.delete(node);
-}
-function detectCycles(edges) {
-    const adjacency = new Map();
-    for (const edge of edges) {
-        if (!adjacency.has(edge.from))
-            adjacency.set(edge.from, new Set());
-        adjacency.get(edge.from).add(edge.to);
-    }
-    const cycles = [];
-    // Each DFS root gets a fresh per-DFS visited set so that nodes already fully
-    // explored via one root are re-entered from a new root. This is required
-    // because a shared visited set across DFS starts prevents detection of cycles
-    // that are reachable from a later root only through an already-visited node
-    // (the "diamond reachability" case). The stack (current DFS path) is still
-    // per-path-bookkeeping and correctly identifies back-edges within each DFS.
-    for (const node of adjacency.keys()) {
-        const visited = new Set();
-        const stack = new Set();
-        dfsVisit(node, [], adjacency, visited, stack, cycles);
-    }
-    return cycles;
-}
-// Canonicalize a directed cycle by rotating it so the lexicographically
-// smallest node leads, preserving order/direction. Rotation (not sort) keeps
-// distinct directed cycles over the same node set apart (A→B→C→A vs A→C→B→A)
-// while still deduping the same cycle discovered from different DFS start nodes
-// (which differ only by rotation).
-function canonicalCycleKey(cycle) {
-    if (cycle.length === 0)
-        return "";
-    let minIdx = 0;
-    for (let i = 1; i < cycle.length; i++) {
-        if (cycle[i] < cycle[minIdx])
-            minIdx = i;
-    }
-    const rotated = [...cycle.slice(minIdx), ...cycle.slice(0, minIdx)];
-    return rotated.join("\0");
-}
-function deduplicateCycles(cycles) {
-    const seen = new Set();
-    const unique = [];
-    for (const cycle of cycles) {
-        const normalized = canonicalCycleKey(cycle);
-        if (!seen.has(normalized)) {
-            seen.add(normalized);
-            unique.push(cycle);
-        }
-    }
-    return unique;
-}
-function detectCycleFindings(graphBundle, nextId) {
-    const edges = allEdges(graphBundle);
-    const cycles = deduplicateCycles(detectCycles(edges));
+function detectCycleFindings(signals, nextId) {
+    const cycles = signals.cycles;
     if (cycles.length === 0)
         return [];
     return cycles.slice(0, 10).map((cycle) => ({
@@ -103,43 +22,29 @@ function detectCycleFindings(graphBundle, nextId) {
         systemic: true,
     }));
 }
-function detectHubModules(graphBundle, nextId) {
-    const edges = allEdges(graphBundle);
-    const fanIn = new Map();
-    const fanOut = new Map();
-    for (const edge of edges) {
-        fanOut.set(edge.from, (fanOut.get(edge.from) ?? 0) + 1);
-        fanIn.set(edge.to, (fanIn.get(edge.to) ?? 0) + 1);
-    }
-    const allNodes = new Set([...fanIn.keys(), ...fanOut.keys()]);
-    const hubThreshold = Math.max(8, Math.ceil(allNodes.size * 0.15));
+function detectHubModules(signals, nextId) {
     const findings = [];
-    for (const node of allNodes) {
-        const inCount = fanIn.get(node) ?? 0;
-        const outCount = fanOut.get(node) ?? 0;
-        if (inCount >= hubThreshold && outCount >= hubThreshold) {
-            findings.push({
-                id: nextId(),
-                title: `Hub module: ${node}`,
-                category: "hub_module",
-                severity: "medium",
-                confidence: "high",
-                lens: "architecture",
-                summary: `${node} has ${inCount} incoming and ${outCount} outgoing dependencies. Hub modules become change bottlenecks and make the dependency graph fragile.`,
-                affected_files: [{ path: node }],
-                systemic: true,
-            });
-        }
+    // Deterministic order: `hubs` derives from the connected set's iteration order
+    // (edge insertion order), so the DA-### ids assigned here are reproducible.
+    for (const node of signals.hubs) {
+        const inCount = signals.fanIn.get(node) ?? 0;
+        const outCount = signals.fanOut.get(node) ?? 0;
+        findings.push({
+            id: nextId(),
+            title: `Hub module: ${node}`,
+            category: "hub_module",
+            severity: "medium",
+            confidence: "high",
+            lens: "architecture",
+            summary: `${node} has ${inCount} incoming and ${outCount} outgoing dependencies. Hub modules become change bottlenecks and make the dependency graph fragile.`,
+            affected_files: [{ path: node }],
+            systemic: true,
+        });
     }
     return findings;
 }
-function detectOrphanUnits(unitManifest, graphBundle, nextId) {
-    const edges = allEdges(graphBundle);
-    const connected = new Set();
-    for (const edge of edges) {
-        connected.add(edge.from);
-        connected.add(edge.to);
-    }
+function detectOrphanUnits(unitManifest, signals, nextId) {
+    const connected = signals.connected;
     if (connected.size === 0)
         return [];
     const orphans = [];
@@ -235,13 +140,8 @@ function detectUnitSprawl(unitManifest, nextId) {
     }
     return findings;
 }
-function detectFlowGaps(criticalFlows, graphBundle, nextId) {
-    const edges = allEdges(graphBundle);
-    const connected = new Set();
-    for (const edge of edges) {
-        connected.add(edge.from);
-        connected.add(edge.to);
-    }
+function detectFlowGaps(criticalFlows, signals, nextId) {
+    const connected = signals.connected;
     const findings = [];
     for (const flow of criticalFlows.flows) {
         const disconnected = flow.paths.filter((path) => !connected.has(path));
@@ -264,13 +164,16 @@ function detectFlowGaps(criticalFlows, graphBundle, nextId) {
 }
 export function buildDesignAssessment(params) {
     const nextId = createFindingIdGenerator();
+    // Single source of truth for the whole-graph signals — the same module the
+    // risk register reads, so cycle/hub/orphan derivation cannot drift between them.
+    const signals = deriveGraphSignals(params.graphBundle);
     const findings = [
-        ...detectCycleFindings(params.graphBundle, nextId),
-        ...detectHubModules(params.graphBundle, nextId),
-        ...detectOrphanUnits(params.unitManifest, params.graphBundle, nextId),
+        ...detectCycleFindings(signals, nextId),
+        ...detectHubModules(signals, nextId),
+        ...detectOrphanUnits(params.unitManifest, signals, nextId),
         ...detectRiskConcentration(params.riskRegister, params.unitManifest, nextId),
         ...detectUnitSprawl(params.unitManifest, nextId),
-        ...detectFlowGaps(params.criticalFlows, params.graphBundle, nextId),
+        ...detectFlowGaps(params.criticalFlows, signals, nextId),
     ];
     return {
         generated_at: new Date().toISOString(),

package/dist/audit/extractors/designAssessment.js.map

@@ -1 +1 @@
-{"version":3,"file":"designAssessment.js","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAIA,+EAA+E;AAC/E,0EAA0E;AAC1E,kCAAkC;AAClC,SAAS,wBAAwB;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,WAAwB;IACxC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,IAAc,EACd,SAAmC,EACnC,OAAoB,EACpB,KAAkB,EAClB,MAAkB;IAElB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAChF,mCAAmC;AACnC,SAAS,iBAAiB,CAAC,KAAe;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,MAAM,CAAE;YAAE,MAAM,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,EAAE,EAAE,MAAM,EAAE;QACZ,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,UAAU;QAClD,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC9C,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,cAAuB;QAC7B,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,0FAA0F;QAC/J,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,YAAY,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,eAAe,IAAI,EAAE;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,IAAI,QAAQ,OAAO,iBAAiB,QAAQ,sGAAsG;gBAC9J,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAChC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,YAA0B,EAC1B,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEhE,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,2CAA2C;YACnE,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8IAA8I;YACnL,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,YAA0B,EAC1B,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAE5E,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAE1C,IAAI,aAAa,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,4CAA4C;YACnD,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACjD,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,oDAAoD,eAAe,OAAO,MAAM,CAAC,MAAM,WAAW,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE;YACjQ,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CACnC,CAAC;IACF,IAAI,YAAY,IAAI,QAAQ,GAAG,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,kBAAkB,YAAY,CAAC,OAAO,EAAE;YAC/C,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,QAAQ,YAAY,CAAC,OAAO,aAAa,QAAQ,OAAO,UAAU,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,mEAAmE;YAClM,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,6BAA6B;gBACpC,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,2JAA2J;gBACxN,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,aAAmC,EACnC,WAAwB,EACxB,MAAoB;IAEpB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;YACvB,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAC7C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,IAAI,2BAA2B;gBAC7D,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,IAAI,qHAAqH;gBACxM,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;IAE1C,MAAM,QAAQ,GAAc;QAC1B,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QAClD,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;QACrE,GAAG,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5E,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAChD,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;KACpE,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"designAssessment.js","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAqB,MAAM,mBAAmB,CAAC;AAE1E,+EAA+E;AAC/E,0EAA0E;AAC1E,kCAAkC;AAClC,SAAS,wBAAwB;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAqB,EACrB,MAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,EAAE,EAAE,MAAM,EAAE;QACZ,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,UAAU;QAClD,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC9C,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,cAAuB;QAC7B,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,0FAA0F;QAC/J,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAqB,EACrB,MAAoB;IAEpB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,+EAA+E;IAC/E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,eAAe,IAAI,EAAE;YAC5B,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,GAAG,IAAI,QAAQ,OAAO,iBAAiB,QAAQ,sGAAsG;YAC9J,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,YAA0B,EAC1B,OAAqB,EACrB,MAAoB;IAEpB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEhE,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,2CAA2C;YACnE,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8IAA8I;YACnL,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,YAA0B,EAC1B,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAE5E,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAE1C,IAAI,aAAa,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAEnC,OAAO,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,4CAA4C;YACnD,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACjD,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,oDAAoD,eAAe,OAAO,MAAM,CAAC,MAAM,WAAW,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE;YACjQ,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC;YACF,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,YAA0B,EAC1B,MAAoB;IAEpB,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CACnC,CAAC;IACF,IAAI,YAAY,IAAI,QAAQ,GAAG,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,MAAM,EAAE;YACZ,KAAK,EAAE,kBAAkB,YAAY,CAAC,OAAO,EAAE;YAC/C,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,QAAQ,YAAY,CAAC,OAAO,aAAa,QAAQ,OAAO,UAAU,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,mEAAmE;YAClM,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,6BAA6B;gBACpC,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,2JAA2J;gBACxN,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,aAAmC,EACnC,OAAqB,EACrB,MAAoB;IAEpB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAEpC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;YACvB,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAC7C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,MAAM,EAAE;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,IAAI,2BAA2B;gBAC7D,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,IAAI,qHAAqH;gBACxM,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;IAC1C,2EAA2E;IAC3E,iFAAiF;IACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAc;QAC1B,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC;QACvC,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1D,GAAG,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5E,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAChD,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC;KACzD,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/graphSignals.d.ts

@@ -0,0 +1,63 @@
+import type { GraphBundle, GraphEdge } from "audit-tools/shared";
+/**
+ * Whole-graph derived signals, single-sourced.
+ *
+ * The audit graph is built per-file by the language analyzers (compiler-fidelity
+ * import/call/reference edges) and the regex floor. Several architectural
+ * heuristics are not edges but *queries over the merged edge set* — cycles, hub
+ * concentration, orphans, and the "deletion test" (low-in-degree leaves). These
+ * were previously recomputed ad-hoc inside the design assessment; they live here
+ * now so BOTH the design assessment and the risk register read one source of
+ * truth, and so the risk register can finally weight graph-structural risk.
+ *
+ * Language-neutral by construction: it consumes only `from`/`to` node ids (repo
+ * paths), so every analyzer that contributes import/call edges — TS, Python, … —
+ * feeds these signals identically. No new dependency, no per-ecosystem fork.
+ */
+export interface GraphSignals {
+    /**
+     * Deduplicated directed cycles. Each entry is the node sequence of one cycle
+     * (the cycle closes from the last node back to the first); rotations of the
+     * same directed cycle are collapsed, distinct directed cycles over the same
+     * node set are kept apart.
+     */
+    cycles: string[][];
+    /** Per-node incoming edge count (number of edges whose `to` is the node). */
+    fanIn: Map<string, number>;
+    /** Per-node outgoing edge count (number of edges whose `from` is the node). */
+    fanOut: Map<string, number>;
+    /** Every node that participates in at least one cycle. */
+    nodesInCycles: Set<string>;
+    /** Hub nodes: `fanIn >= hubThreshold && fanOut >= hubThreshold`. */
+    hubs: Set<string>;
+    /** The fan-in/fan-out threshold a node must meet on both sides to be a hub. */
+    hubThreshold: number;
+    /**
+     * Deletion-test candidates (the ralph-architecture-sweep heuristic): nodes that
+     * nothing imports (`fanIn === 0`) yet which import others (`fanOut > 0`). A
+     * low-in-degree leaf is an easy deletion/refactor target — though it may also be
+     * a legitimate entrypoint (CLI main, test root), so this is an advisory signal
+     * the LLM lenses adjudicate, not a verdict. Pure orphans (`fanIn === 0 &&
+     * fanOut === 0`) are deliberately NOT here — those are the separate zero-edge
+     * orphan signal ({@link connected}-based) and would otherwise double-report.
+     */
+    deletionCandidates: Set<string>;
+    /** Every node touched by any edge (as `from` or `to`) — the connected set. */
+    connected: Set<string>;
+}
+/**
+ * Flatten every edge bucket of a graph bundle into one edge list. `routes` is
+ * excluded (it is a `{path,handler,method}` shape, not a `from`/`to` edge);
+ * malformed entries (missing string endpoints) are dropped so a bad analyzer
+ * output can never throw here.
+ */
+export declare function allGraphEdges(graphBundle: GraphBundle): GraphEdge[];
+/**
+ * Derive every whole-graph signal from a graph bundle in one pass. Pure: no IO,
+ * no mutation of the input — a deterministic function of the edge set, so the
+ * structure executor (which has the live bundle) and the design-assessment
+ * executor (which re-reads the persisted bundle) compute identical signals
+ * without a new persisted artifact.
+ */
+export declare function deriveGraphSignals(graphBundle: GraphBundle): GraphSignals;
+//# sourceMappingURL=graphSignals.d.ts.map

package/dist/audit/extractors/graphSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphSignals.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/graphSignals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,6EAA6E;IAC7E,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,+EAA+E;IAC/E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,0DAA0D;IAC1D,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,oEAAoE;IACpE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,8EAA8E;IAC9E,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,EAAE,CAWnE;AA2ED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,WAAW,GAAG,YAAY,CA+CzE"}

package/dist/audit/extractors/graphSignals.js

@@ -0,0 +1,134 @@
+/**
+ * Flatten every edge bucket of a graph bundle into one edge list. `routes` is
+ * excluded (it is a `{path,handler,method}` shape, not a `from`/`to` edge);
+ * malformed entries (missing string endpoints) are dropped so a bad analyzer
+ * output can never throw here.
+ */
+export function allGraphEdges(graphBundle) {
+    const edges = [];
+    for (const [key, value] of Object.entries(graphBundle.graphs)) {
+        if (key === "routes" || !Array.isArray(value))
+            continue;
+        for (const edge of value) {
+            if (edge && typeof edge.from === "string" && typeof edge.to === "string") {
+                edges.push(edge);
+            }
+        }
+    }
+    return edges;
+}
+function dfsVisit(node, path, adjacency, visited, stack, cycles) {
+    if (stack.has(node)) {
+        const cycleStart = path.indexOf(node);
+        if (cycleStart >= 0) {
+            cycles.push(path.slice(cycleStart));
+        }
+        return;
+    }
+    if (visited.has(node))
+        return;
+    visited.add(node);
+    stack.add(node);
+    path.push(node);
+    for (const neighbor of adjacency.get(node) ?? []) {
+        dfsVisit(neighbor, path, adjacency, visited, stack, cycles);
+    }
+    path.pop();
+    stack.delete(node);
+}
+function detectCycles(adjacency) {
+    const cycles = [];
+    // Each DFS root gets a fresh per-DFS visited set so that nodes already fully
+    // explored via one root are re-entered from a new root. This is required
+    // because a shared visited set across DFS starts prevents detection of cycles
+    // that are reachable from a later root only through an already-visited node
+    // (the "diamond reachability" case). The stack (current DFS path) is still
+    // per-path-bookkeeping and correctly identifies back-edges within each DFS.
+    for (const node of adjacency.keys()) {
+        const visited = new Set();
+        const stack = new Set();
+        dfsVisit(node, [], adjacency, visited, stack, cycles);
+    }
+    return cycles;
+}
+// Canonicalize a directed cycle by rotating it so the lexicographically
+// smallest node leads, preserving order/direction. Rotation (not sort) keeps
+// distinct directed cycles over the same node set apart (A→B→C→A vs A→C→B→A)
+// while still deduping the same cycle discovered from different DFS start nodes
+// (which differ only by rotation).
+function canonicalCycleKey(cycle) {
+    if (cycle.length === 0)
+        return "";
+    let minIdx = 0;
+    for (let i = 1; i < cycle.length; i++) {
+        if (cycle[i] < cycle[minIdx])
+            minIdx = i;
+    }
+    const rotated = [...cycle.slice(minIdx), ...cycle.slice(0, minIdx)];
+    return rotated.join("\0");
+}
+function deduplicateCycles(cycles) {
+    const seen = new Set();
+    const unique = [];
+    for (const cycle of cycles) {
+        const normalized = canonicalCycleKey(cycle);
+        if (!seen.has(normalized)) {
+            seen.add(normalized);
+            unique.push(cycle);
+        }
+    }
+    return unique;
+}
+/**
+ * Derive every whole-graph signal from a graph bundle in one pass. Pure: no IO,
+ * no mutation of the input — a deterministic function of the edge set, so the
+ * structure executor (which has the live bundle) and the design-assessment
+ * executor (which re-reads the persisted bundle) compute identical signals
+ * without a new persisted artifact.
+ */
+export function deriveGraphSignals(graphBundle) {
+    const edges = allGraphEdges(graphBundle);
+    const adjacency = new Map();
+    const fanIn = new Map();
+    const fanOut = new Map();
+    const connected = new Set();
+    for (const edge of edges) {
+        if (!adjacency.has(edge.from))
+            adjacency.set(edge.from, new Set());
+        adjacency.get(edge.from).add(edge.to);
+        fanOut.set(edge.from, (fanOut.get(edge.from) ?? 0) + 1);
+        fanIn.set(edge.to, (fanIn.get(edge.to) ?? 0) + 1);
+        connected.add(edge.from);
+        connected.add(edge.to);
+    }
+    const cycles = deduplicateCycles(detectCycles(adjacency));
+    const nodesInCycles = new Set();
+    for (const cycle of cycles) {
+        for (const node of cycle)
+            nodesInCycles.add(node);
+    }
+    const hubThreshold = Math.max(8, Math.ceil(connected.size * 0.15));
+    const hubs = new Set();
+    const deletionCandidates = new Set();
+    for (const node of connected) {
+        const inCount = fanIn.get(node) ?? 0;
+        const outCount = fanOut.get(node) ?? 0;
+        if (inCount >= hubThreshold && outCount >= hubThreshold) {
+            hubs.add(node);
+        }
+        if (inCount === 0 && outCount > 0) {
+            deletionCandidates.add(node);
+        }
+    }
+    return {
+        cycles,
+        fanIn,
+        fanOut,
+        nodesInCycles,
+        hubs,
+        hubThreshold,
+        deletionCandidates,
+        connected,
+    };
+}
+//# sourceMappingURL=graphSignals.js.map

package/dist/audit/extractors/graphSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphSignals.js","sourceRoot":"","sources":["../../../src/audit/extractors/graphSignals.ts"],"names":[],"mappings":"AAiDA;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAwB;IACpD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,IAAc,EACd,SAAmC,EACnC,OAAoB,EACpB,KAAkB,EAClB,MAAkB;IAElB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,SAAmC;IACvD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAChF,mCAAmC;AACnC,SAAS,iBAAiB,CAAC,KAAe;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,MAAM,CAAE;YAAE,MAAM,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAwB;IACzD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,YAAY,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YAClC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM;QACN,aAAa;QACb,IAAI;QACJ,YAAY;QACZ,kBAAkB;QAClB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/risk.d.ts

@@ -1,5 +1,6 @@
 import type { UnitManifest } from "../types.js";
 import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
 import type { CriticalFlowManifest, RiskRegister } from "audit-tools/shared";
-export declare function buildRiskRegister(unitManifest: UnitManifest, criticalFlows?: CriticalFlowManifest, externalAnalyzerResults?: ExternalAnalyzerResults): RiskRegister;
+import type { GraphSignals } from "./graphSignals.js";
+export declare function buildRiskRegister(unitManifest: UnitManifest, criticalFlows?: CriticalFlowManifest, externalAnalyzerResults?: ExternalAnalyzerResults, graphSignals?: GraphSignals): RiskRegister;
 //# sourceMappingURL=risk.d.ts.map

package/dist/audit/extractors/risk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAY,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIvF,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,EACpC,uBAAuB,CAAC,EAAE,uBAAuB,GAChD,YAAY,CAoEd"}
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAY,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAItD,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,EACpC,uBAAuB,CAAC,EAAE,uBAAuB,EACjD,YAAY,CAAC,EAAE,YAAY,GAC1B,YAAY,CAwFd"}

package/dist/audit/extractors/risk.js

@@ -1,5 +1,5 @@
 const MAX_RISK_SCORE = 10;
-export function buildRiskRegister(unitManifest, criticalFlows, externalAnalyzerResults) {
+export function buildRiskRegister(unitManifest, criticalFlows, externalAnalyzerResults, graphSignals) {
     const flowMap = new Map();
     for (const flow of criticalFlows?.flows ?? []) {
         for (const path of flow.paths) {
@@ -31,10 +31,29 @@ export function buildRiskRegister(unitManifest, criticalFlows, externalAnalyzerR
         if (externalHits > 0) {
             signals.push("external_analyzer_signal");
         }
+        // Whole-graph structural signals (single-sourced in graphSignals). A unit
+        // inherits a signal when ANY of its files is so flagged in the dependency
+        // graph. `member_of_cycle` and `is_hub` raise structural-fragility risk;
+        // `deletion_candidate` (low-in-degree dead-code suspect) is informational —
+        // it flags cleanup scope without inflating the risk score.
+        const inCycle = graphSignals != null &&
+            unit.files.some((path) => graphSignals.nodesInCycles.has(path));
+        if (inCycle)
+            signals.push("member_of_cycle");
+        const isHub = graphSignals != null &&
+            unit.files.some((path) => graphSignals.hubs.has(path));
+        if (isHub)
+            signals.push("is_hub");
+        const deletionCandidate = graphSignals != null &&
+            unit.files.some((path) => graphSignals.deletionCandidates.has(path));
+        if (deletionCandidate)
+            signals.push("deletion_candidate");
         const riskScore = (unit.risk_score ?? 0) +
             flowHits +
             externalHits +
-            (signals.includes("path_level_stateful_behavior") ? 1 : 0);
+            (signals.includes("path_level_stateful_behavior") ? 1 : 0) +
+            (inCycle ? 1 : 0) +
+            (isHub ? 1 : 0);
         return {
             unit_id: unit.unit_id,
             risk_score: Math.min(MAX_RISK_SCORE, riskScore),

package/dist/audit/extractors/risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/audit/extractors/risk.ts"],"names":[],"mappings":"AAIA,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAC/B,YAA0B,EAC1B,aAAoC,EACpC,uBAAiD;IAEjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC1D,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAe,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtC,IACE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,CACtE,EACD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAChC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7C,CAAC,CACF,CAAC;QACF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACpD,CAAC,CACF,CAAC;QACF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACtB,QAAQ;YACR,YAAY;YACZ,CAAC,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC;YAC/C,OAAO;YACP,KAAK,EAAE;gBACL,iCAAiC;gBACjC,GAAG,CAAC,YAAY,GAAG,CAAC;oBAClB,CAAC,CAAC;wBACE,uCAAuC,YAAY,kBAAkB;qBACtE;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/audit/extractors/risk.ts"],"names":[],"mappings":"AAKA,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAC/B,YAA0B,EAC1B,aAAoC,EACpC,uBAAiD,EACjD,YAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC1D,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAe,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtC,IACE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,CACtE,EACD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAChC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7C,CAAC,CACF,CAAC;QACF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACpD,CAAC,CACF,CAAC;QACF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC3C,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM,OAAO,GACX,YAAY,IAAI,IAAI;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,KAAK,GACT,YAAY,IAAI,IAAI;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,iBAAiB,GACrB,YAAY,IAAI,IAAI;YACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,iBAAiB;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAE1D,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACtB,QAAQ;YACR,YAAY;YACZ,CAAC,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAElB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC;YAC/C,OAAO;YACP,KAAK,EAAE;gBACL,iCAAiC;gBACjC,GAAG,CAAC,YAAY,GAAG,CAAC;oBAClB,CAAC,CAAC;wBACE,uCAAuC,YAAY,kBAAkB;qBACtE;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/audit/orchestrator/structureExecutors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"structureExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/structureExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAWzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAyD5B;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,GACrB,iBAAiB,CA6CnB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,UAAU,GAAG,YAAY,GAAG,MAAe,GAChD,iBAAiB,CAiCnB"}
+{"version":3,"file":"structureExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/structureExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAYzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CA2D5B;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,GACrB,iBAAiB,CA6CnB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,UAAU,GAAG,YAAY,GAAG,MAAe,GAChD,iBAAiB,CAiCnB"}

package/dist/audit/orchestrator/structureExecutors.js

@@ -5,6 +5,7 @@ import { buildRiskRegister } from "../extractors/risk.js";
 import { buildSurfaceManifest } from "../extractors/surfaces.js";
 import { buildUnitManifest } from "./unitBuilder.js";
 import { buildDesignAssessment } from "../extractors/designAssessment.js";
+import { deriveGraphSignals } from "../extractors/graphSignals.js";
 export async function runStructureExecutor(bundle, root) {
     if (!bundle.repo_manifest) {
         throw new Error("Cannot run structure executor without repo_manifest");
@@ -22,7 +23,8 @@ export async function runStructureExecutor(bundle, root) {
         });
     const surfaceManifest = buildSurfaceManifest(bundle.repo_manifest, disposition, { graphBundle });
     const criticalFlows = buildCriticalFlowManifest(bundle.repo_manifest, surfaceManifest, disposition);
-    const riskRegister = buildRiskRegister(unitManifest, criticalFlows, externalAnalyzerResults);
+    const graphSignals = deriveGraphSignals(graphBundle);
+    const riskRegister = buildRiskRegister(unitManifest, criticalFlows, externalAnalyzerResults, graphSignals);
     return {
         updated: {
             ...bundle,

package/dist/audit/orchestrator/structureExecutors.js.map

@@ -1 +1 @@
-{"version":3,"file":"structureExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/structureExecutors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAG1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAsB,EACtB,IAAa;IAEb,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,uBAAuB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IACjE,MAAM,WAAW,GACf,MAAM,CAAC,gBAAgB;QACvB,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,IAAI;QACtB,CAAC,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE;YACpE,uBAAuB;SACxB,CAAC;QACJ,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE;YAClD,uBAAuB;SACxB,CAAC,CAAC;IACP,MAAM,eAAe,GAAG,oBAAoB,CAC1C,MAAM,CAAC,aAAa,EACpB,WAAW,EACX,EAAE,WAAW,EAAE,CAChB,CAAC;IACF,MAAM,aAAa,GAAG,yBAAyB,CAC7C,MAAM,CAAC,aAAa,EACpB,eAAe,EACf,WAAW,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,iBAAiB,CACpC,YAAY,EACZ,aAAa,EACb,uBAAuB,CACxB,CAAC;IAEF,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,gBAAgB,EAAE,WAAW;YAC7B,aAAa,EAAE,YAAY;YAC3B,gBAAgB,EAAE,eAAe;YACjC,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,YAAY;SAC5B;QACD,iBAAiB,EAAE;YACjB,uBAAuB;YACvB,oBAAoB;YACpB,uBAAuB;YACvB,mBAAmB;YACnB,qBAAqB;YACrB,oBAAoB;SACrB;QACD,gBAAgB,EACd,iCAAiC,YAAY,CAAC,KAAK,CAAC,MAAM,cAAc,aAAa,CAAC,KAAK,CAAC,MAAM,kBAAkB;YACpH,CAAC,aAAa,CAAC,iBAAiB;gBAC9B,CAAC,CAAC,sEAAsE;gBACxE,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAsB;IAEtB,IACE,CAAC,MAAM,CAAC,aAAa;QACrB,CAAC,MAAM,CAAC,YAAY;QACpB,CAAC,MAAM,CAAC,cAAc;QACtB,CAAC,MAAM,CAAC,aAAa,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,YAAY,EAAE,MAAM,CAAC,aAAa;QAClC,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,aAAa,EAAE,MAAM,CAAC,cAAc;QACpC,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAC/B,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC1C,gBAAgB,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjC,gBAAgB,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC5C,gBAAgB,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAC5E,CAAC;QACD,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtF,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;YACjC,gBAAgB,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,iBAAiB,EAAE,gBAAgB;SACpC;QACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;QAC7C,gBAAgB,EAAE,+BAA+B,gBAAgB,CAAC,QAAQ,CAAC,MAAM,yBAAyB;KAC3G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAsB,EACtB,OAA2C,MAAM;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEhC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,8DAA8D;IAC9D,OAAO,OAAO,CAAC,QAAQ,CAAC;IACxB,OAAO,OAAO,CAAC,eAAe,CAAC;IAE/B,MAAM,SAAS,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;IACnE,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,iBAAiB,EAAE,OAAO;SAC3B;QACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;QAC7C,gBAAgB,EACd,iCAAiC,SAAS,+CAA+C;KAC5F,CAAC;AACJ,CAAC"}
+{"version":3,"file":"structureExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/structureExecutors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAsB,EACtB,IAAa;IAEb,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,uBAAuB,GAAG,MAAM,CAAC,yBAAyB,CAAC;IACjE,MAAM,WAAW,GACf,MAAM,CAAC,gBAAgB;QACvB,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,IAAI;QACtB,CAAC,CAAC,MAAM,sBAAsB,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE;YACpE,uBAAuB;SACxB,CAAC;QACJ,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE;YAClD,uBAAuB;SACxB,CAAC,CAAC;IACP,MAAM,eAAe,GAAG,oBAAoB,CAC1C,MAAM,CAAC,aAAa,EACpB,WAAW,EACX,EAAE,WAAW,EAAE,CAChB,CAAC;IACF,MAAM,aAAa,GAAG,yBAAyB,CAC7C,MAAM,CAAC,aAAa,EACpB,eAAe,EACf,WAAW,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,iBAAiB,CACpC,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,YAAY,CACb,CAAC;IAEF,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,gBAAgB,EAAE,WAAW;YAC7B,aAAa,EAAE,YAAY;YAC3B,gBAAgB,EAAE,eAAe;YACjC,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,YAAY;SAC5B;QACD,iBAAiB,EAAE;YACjB,uBAAuB;YACvB,oBAAoB;YACpB,uBAAuB;YACvB,mBAAmB;YACnB,qBAAqB;YACrB,oBAAoB;SACrB;QACD,gBAAgB,EACd,iCAAiC,YAAY,CAAC,KAAK,CAAC,MAAM,cAAc,aAAa,CAAC,KAAK,CAAC,MAAM,kBAAkB;YACpH,CAAC,aAAa,CAAC,iBAAiB;gBAC9B,CAAC,CAAC,sEAAsE;gBACxE,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAsB;IAEtB,IACE,CAAC,MAAM,CAAC,aAAa;QACrB,CAAC,MAAM,CAAC,YAAY;QACpB,CAAC,MAAM,CAAC,cAAc;QACtB,CAAC,MAAM,CAAC,aAAa,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,YAAY,EAAE,MAAM,CAAC,aAAa;QAClC,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,aAAa,EAAE,MAAM,CAAC,cAAc;QACpC,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAC/B,gBAAgB,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC1C,gBAAgB,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACjC,gBAAgB,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC5C,gBAAgB,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAC5E,CAAC;QACD,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtF,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;YACjC,gBAAgB,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,iBAAiB,EAAE,gBAAgB;SACpC;QACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;QAC7C,gBAAgB,EAAE,+BAA+B,gBAAgB,CAAC,QAAQ,CAAC,MAAM,yBAAyB;KAC3G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAsB,EACtB,OAA2C,MAAM;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEhC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,8DAA8D;IAC9D,OAAO,OAAO,CAAC,QAAQ,CAAC;IACxB,OAAO,OAAO,CAAC,eAAe,CAAC;IAE/B,MAAM,SAAS,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;IACnE,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,iBAAiB,EAAE,OAAO;SAC3B;QACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;QAC7C,gBAAgB,EACd,iCAAiC,SAAS,+CAA+C;KAC5F,CAAC;AACJ,CAAC"}

package/docs/audit-pkg/contracts.md

@@ -56,7 +56,7 @@ audit-code validate-results --results /path/to/results.json
 
 ## Artifact bundle
 
-The backend stores resumable artifacts under `.audit-artifacts/`, including:
+The backend stores resumable artifacts under `.audit-tools/audit/`, including:
 
 - `repo_manifest.json`
 - `file_disposition.json`

package/docs/audit-pkg/development.md

@@ -22,7 +22,7 @@ shipped-sprint archive — that history lives in git + project memory.
 npm install
 npm run check
 npm test
-npm run test:single -- tests/next-step.test.mjs
+npm run test:single -- tests/audit/next-step.test.mjs
 npm run verify:release
 ```
 

package/docs/audit-pkg/operator-guide.md

@@ -37,7 +37,7 @@ Shared install files:
 - `.audit-code/install/GETTING-STARTED.md`
 - `.audit-code/install/manifest.json`
 - `.audit-code/install/run-mcp-server.mjs`
-- `.audit-artifacts/session-config.json` when no backend fallback config exists
+- `.audit-tools/audit/session-config.json` when no backend fallback config exists
 
 Host-specific files may include:
 
@@ -111,14 +111,14 @@ audit-code cleanup
 ```
 
 `audit-code next-step` is the backend-rendered step engine used by the
-conversation prompt. It writes `.audit-artifacts/steps/current-step.json` and
-`.audit-artifacts/steps/current-prompt.md`, then the host should follow only
+conversation prompt. It writes `.audit-tools/audit/steps/current-step.json` and
+`.audit-tools/audit/steps/current-prompt.md`, then the host should follow only
 that prompt.
 
 `audit-code validate` checks artifact shape, cross-artifact consistency,
 session config, and explicit provider readiness.
 
-`audit-code cleanup` removes the `.audit-artifacts/` directory when safe to
+`audit-code cleanup` removes the `.audit-tools/audit/` directory when safe to
 do so. It reads `audit_state.json` before acting: `complete` and `not_started`
 states are deleted unconditionally; `active` and `blocked` states are refused
 (the audit is resumable). If `audit_state.json` is missing — typically a
@@ -130,7 +130,7 @@ previews the action without deleting anything.
 Backend fallback configuration lives at:
 
 ```text
-.audit-artifacts/session-config.json
+.audit-tools/audit/session-config.json
 ```
 
 The canonical `/audit-code` conversation route should not require users to

package/docs/audit-pkg/product.md

@@ -1,6 +1,6 @@
 # Product
 
-> Normative definition: [`spec/audit-goals.md`](../spec/audit-goals.md) — product
+> Normative definition: [`spec/audit-goals.md`](../../spec/audit/audit-goals.md) — product
 > identity, invariants, deterministic/LLM boundaries, and completion. This page is
 > the product overview.
 

package/opencode.json

@@ -52,7 +52,6 @@
       "*audit-code.mjs* validate*": "allow",
       "*audit-code.mjs": "allow",
       "*audit-code.mjs* worker-run*": "allow",
-      "*node* *auditor-lambda*dist*index.js* worker-run*": "allow",
       "git status*": "allow",
       "git diff*": "allow",
       "grep *": "allow",
@@ -106,7 +105,6 @@
           "*audit-code.mjs* validate*": "allow",
           "*audit-code.mjs": "allow",
           "*audit-code.mjs* worker-run*": "allow",
-          "*node* *auditor-lambda*dist*index.js* worker-run*": "allow",
           "git status*": "allow",
           "git diff*": "allow",
           "grep *": "allow",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.28.11",
+  "version": "0.29.3",
   "private": false,
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",
   "type": "module",

package/skills/audit-code/SKILL.md

@@ -98,7 +98,7 @@ The prompt payload in `audit-code.prompt.md` remains the canonical instruction a
 The intended user setup is one global package install:
 
 ```bash
-npm install -g auditor-lambda
+npm install -g audit-tools
 ```
 
 That makes `audit-code` available on `PATH` and seeds user-level command/skill
@@ -132,12 +132,11 @@ audit-code
 
 from the target repository root.
 
-When developing `auditor-lambda` itself, prefer the local wrapper at
-`packages/audit-code/audit-code.mjs` (there is no `audit-code.mjs` at the
-monorepo root):
+When developing `audit-tools` itself, prefer the local wrapper at
+`audit-code.mjs` (at the repo root):
 
 ```bash
-node packages/audit-code/audit-code.mjs   # from the monorepo root
+node audit-code.mjs   # from the repo root
 ```
 
 That keeps the run pinned to the local wrapper and local `dist/` output instead

package/skills/audit-code/audit-code.prompt.md

@@ -17,12 +17,11 @@ First, make sure the repository has current local audit assets:
 audit-code ensure --quiet
 ```
 
-When developing `auditor-lambda` itself, the entrypoint lives at
-`packages/audit-code/audit-code.mjs` (there is no `audit-code.mjs` at the
-monorepo root). From the monorepo root use:
+When developing `audit-tools` itself, the entrypoint lives at
+`audit-code.mjs` (at the repo root). From the repo root use:
 
 ```bash
-node packages/audit-code/audit-code.mjs ensure --quiet
+node audit-code.mjs ensure --quiet
 ```
 
 Then ask the backend for exactly one next step. This is also the **capability
@@ -64,10 +63,10 @@ lower it under rate-limit pressure. The backend's learned quota adapts from
 there. The token values should match the window of the model(s) dispatching the
 packets (e.g. 200000 / 32000 for a 200k-context model).
 
-When developing `auditor-lambda` itself, from the monorepo root use:
+When developing `audit-tools` itself, from the repo root use:
 
 ```bash
-node packages/audit-code/audit-code.mjs next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+node audit-code.mjs next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and

package/skills/remediate-code/SKILL.md

@@ -51,7 +51,7 @@ instruction asset.
 The intended user setup is one global package install:
 
 ```bash
-npm install -g remediator-lambda
+npm install -g audit-tools
 ```
 
 That makes `remediate-code` available on `PATH` and seeds user-level
@@ -76,7 +76,7 @@ bootstrap.
 
 ## Repo-local fallback
 
-When developing inside the `remediator-lambda` repository itself, prefer:
+When developing inside the `audit-tools` repository itself, prefer:
 
 ```bash
 node remediate-code.mjs