audit-tools 0.28.2 → 0.28.3

package/dist/audit/types/auditState.js

@@ -1,2 +1,25 @@
-export {};
+import { z } from "zod";
+import { ObligationSchema } from "audit-tools/shared";
+export const AuditTopLevelStatusSchema = z.enum([
+    "not_started",
+    "active",
+    "blocked",
+    "complete",
+]);
+export const AuditObligationSchema = ObligationSchema;
+export const AuditStateSchema = z
+    .object({
+    status: AuditTopLevelStatusSchema,
+    last_executor: z.string().optional(),
+    last_obligation: z.string().optional(),
+    blockers: z.array(z.string()).optional(),
+    obligations: z.array(AuditObligationSchema),
+    /**
+     * Set when the rolling dispatch engine fires a partial-completion terminal
+     * (empty pool or livelock). Allows synthesis to proceed on partial coverage
+     * without hard-gating on `audit_tasks_completed`.
+     */
+    partial_coverage_terminal: z.boolean().optional(),
+})
+    .strict();
 //# sourceMappingURL=auditState.js.map

package/dist/audit/types/auditState.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditState.js","sourceRoot":"","sources":["../../../src/audit/types/auditState.ts"],"names":[],"mappings":""}
+{"version":3,"file":"auditState.js","sourceRoot":"","sources":["../../../src/audit/types/auditState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,aAAa;IACb,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAGtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,MAAM,EAAE,yBAAyB;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3C;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/audit/types/flowCoverage.d.ts

@@ -1,16 +1,73 @@
+import { z } from "zod";
 export declare const FLOW_COVERAGE_STATUSES: readonly ["pending", "partial", "complete"];
-export type FlowCoverageStatus = (typeof FLOW_COVERAGE_STATUSES)[number];
+export declare const FlowCoverageStatusSchema: z.ZodEnum<["pending", "partial", "complete"]>;
+export type FlowCoverageStatus = z.infer<typeof FlowCoverageStatusSchema>;
 /** Coverage for one critical flow across the lenses the audit expects to see. */
-export interface FlowCoverageRecord {
+export declare const FlowCoverageRecordSchema: z.ZodObject<{
+    flow_id: z.ZodString;
+    paths: z.ZodArray<z.ZodString, "many">;
+    required_lenses: z.ZodArray<z.ZodString, "many">;
+    completed_lenses: z.ZodArray<z.ZodString, "many">;
+    status: z.ZodEnum<["pending", "partial", "complete"]>;
+    notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    status: "partial" | "complete" | "pending";
+    paths: string[];
+    required_lenses: string[];
+    completed_lenses: string[];
     flow_id: string;
+    notes?: string[] | undefined;
+}, {
+    status: "partial" | "complete" | "pending";
     paths: string[];
     required_lenses: string[];
     completed_lenses: string[];
-    status: FlowCoverageStatus;
-    notes?: string[];
-}
+    flow_id: string;
+    notes?: string[] | undefined;
+}>;
+export type FlowCoverageRecord = z.infer<typeof FlowCoverageRecordSchema>;
 /** Aggregated flow coverage written beside the critical flow manifest. */
-export interface FlowCoverageManifest {
-    flows: FlowCoverageRecord[];
-}
+export declare const FlowCoverageManifestSchema: z.ZodObject<{
+    flows: z.ZodArray<z.ZodObject<{
+        flow_id: z.ZodString;
+        paths: z.ZodArray<z.ZodString, "many">;
+        required_lenses: z.ZodArray<z.ZodString, "many">;
+        completed_lenses: z.ZodArray<z.ZodString, "many">;
+        status: z.ZodEnum<["pending", "partial", "complete"]>;
+        notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        status: "partial" | "complete" | "pending";
+        paths: string[];
+        required_lenses: string[];
+        completed_lenses: string[];
+        flow_id: string;
+        notes?: string[] | undefined;
+    }, {
+        status: "partial" | "complete" | "pending";
+        paths: string[];
+        required_lenses: string[];
+        completed_lenses: string[];
+        flow_id: string;
+        notes?: string[] | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    flows: {
+        status: "partial" | "complete" | "pending";
+        paths: string[];
+        required_lenses: string[];
+        completed_lenses: string[];
+        flow_id: string;
+        notes?: string[] | undefined;
+    }[];
+}, {
+    flows: {
+        status: "partial" | "complete" | "pending";
+        paths: string[];
+        required_lenses: string[];
+        completed_lenses: string[];
+        flow_id: string;
+        notes?: string[] | undefined;
+    }[];
+}>;
+export type FlowCoverageManifest = z.infer<typeof FlowCoverageManifestSchema>;
 //# sourceMappingURL=flowCoverage.d.ts.map

package/dist/audit/types/flowCoverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flowCoverage.d.ts","sourceRoot":"","sources":["../../../src/audit/types/flowCoverage.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,6CAIzB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B"}
+{"version":3,"file":"flowCoverage.d.ts","sourceRoot":"","sources":["../../../src/audit/types/flowCoverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB,6CAIzB,CAAC;AACX,eAAO,MAAM,wBAAwB,+CAAiC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,iFAAiF;AACjF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;EAW1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/audit/types/flowCoverage.js

@@ -1,6 +1,27 @@
+import { z } from "zod";
 export const FLOW_COVERAGE_STATUSES = [
     "pending",
     "partial",
     "complete",
 ];
+export const FlowCoverageStatusSchema = z.enum(FLOW_COVERAGE_STATUSES);
+/** Coverage for one critical flow across the lenses the audit expects to see. */
+export const FlowCoverageRecordSchema = z
+    .object({
+    flow_id: z.string(),
+    paths: z.array(z.string()),
+    // Producer emits custom lens names too, so these stay free strings (the old
+    // JSON schema's canonical-lens $ref was over-strict).
+    required_lenses: z.array(z.string()),
+    completed_lenses: z.array(z.string()),
+    status: FlowCoverageStatusSchema,
+    notes: z.array(z.string()).optional(),
+})
+    .strict();
+/** Aggregated flow coverage written beside the critical flow manifest. */
+export const FlowCoverageManifestSchema = z
+    .object({
+    flows: z.array(FlowCoverageRecordSchema),
+})
+    .strict();
 //# sourceMappingURL=flowCoverage.js.map

package/dist/audit/types/flowCoverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"flowCoverage.js","sourceRoot":"","sources":["../../../src/audit/types/flowCoverage.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS;IACT,SAAS;IACT,UAAU;CACF,CAAC"}
+{"version":3,"file":"flowCoverage.js","sourceRoot":"","sources":["../../../src/audit/types/flowCoverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS;IACT,SAAS;IACT,UAAU;CACF,CAAC;AACX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAGvE,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,sDAAsD;IACtD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,MAAM,EAAE,wBAAwB;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/audit/types/reviewPlanning.d.ts

@@ -127,6 +127,7 @@ export declare const ReviewPacketSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     unit_ids: string[];
     rationale: string;
+    lenses: string[];
     file_paths: string[];
     file_line_counts: Record<string, number>;
     priority: "high" | "low" | "medium";
@@ -134,7 +135,6 @@ export declare const ReviewPacketSchema: z.ZodObject<{
     packet_id: string;
     task_ids: string[];
     pass_ids: string[];
-    lenses: string[];
     quality: {
         cohesion_score: number;
         internal_edge_count: number;
@@ -156,6 +156,7 @@ export declare const ReviewPacketSchema: z.ZodObject<{
 }, {
     unit_ids: string[];
     rationale: string;
+    lenses: string[];
     file_paths: string[];
     file_line_counts: Record<string, number>;
     priority: "high" | "low" | "medium";
@@ -163,7 +164,6 @@ export declare const ReviewPacketSchema: z.ZodObject<{
     packet_id: string;
     task_ids: string[];
     pass_ids: string[];
-    lenses: string[];
     quality: {
         cohesion_score: number;
         internal_edge_count: number;

package/dist/audit/types.d.ts

@@ -323,6 +323,7 @@ export declare const AuditTaskSchema: z.ZodObject<{
     pass_id: string;
     file_paths: string[];
     status?: "complete" | "pending" | undefined;
+    completed_at?: string | undefined;
     file_line_counts?: Record<string, number> | undefined;
     line_ranges?: {
         path: string;
@@ -334,7 +335,6 @@ export declare const AuditTaskSchema: z.ZodObject<{
     token_estimate?: number | undefined;
     risk_estimate?: number | undefined;
     tags?: string[] | undefined;
-    completed_at?: string | undefined;
     completion_reason?: string | undefined;
 }, {
     unit_id: string;
@@ -344,6 +344,7 @@ export declare const AuditTaskSchema: z.ZodObject<{
     pass_id: string;
     file_paths: string[];
     status?: "complete" | "pending" | undefined;
+    completed_at?: string | undefined;
     file_line_counts?: Record<string, number> | undefined;
     line_ranges?: {
         path: string;
@@ -355,7 +356,6 @@ export declare const AuditTaskSchema: z.ZodObject<{
     token_estimate?: number | undefined;
     risk_estimate?: number | undefined;
     tags?: string[] | undefined;
-    completed_at?: string | undefined;
     completion_reason?: string | undefined;
 }>;
 export type AuditTask = z.infer<typeof AuditTaskSchema>;
@@ -416,6 +416,7 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         pass_id: string;
         file_paths: string[];
         status?: "complete" | "pending" | undefined;
+        completed_at?: string | undefined;
         file_line_counts?: Record<string, number> | undefined;
         line_ranges?: {
             path: string;
@@ -427,7 +428,6 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         token_estimate?: number | undefined;
         risk_estimate?: number | undefined;
         tags?: string[] | undefined;
-        completed_at?: string | undefined;
         completion_reason?: string | undefined;
     }, {
         unit_id: string;
@@ -437,6 +437,7 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         pass_id: string;
         file_paths: string[];
         status?: "complete" | "pending" | undefined;
+        completed_at?: string | undefined;
         file_line_counts?: Record<string, number> | undefined;
         line_ranges?: {
             path: string;
@@ -448,7 +449,6 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         token_estimate?: number | undefined;
         risk_estimate?: number | undefined;
         tags?: string[] | undefined;
-        completed_at?: string | undefined;
         completion_reason?: string | undefined;
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
@@ -465,6 +465,7 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         pass_id: string;
         file_paths: string[];
         status?: "complete" | "pending" | undefined;
+        completed_at?: string | undefined;
         file_line_counts?: Record<string, number> | undefined;
         line_ranges?: {
             path: string;
@@ -476,7 +477,6 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         token_estimate?: number | undefined;
         risk_estimate?: number | undefined;
         tags?: string[] | undefined;
-        completed_at?: string | undefined;
         completion_reason?: string | undefined;
     }[] | undefined;
 }, {
@@ -493,6 +493,7 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         pass_id: string;
         file_paths: string[];
         status?: "complete" | "pending" | undefined;
+        completed_at?: string | undefined;
         file_line_counts?: Record<string, number> | undefined;
         line_ranges?: {
             path: string;
@@ -504,7 +505,6 @@ export declare const AuditVerificationSchema: z.ZodObject<{
         token_estimate?: number | undefined;
         risk_estimate?: number | undefined;
         tags?: string[] | undefined;
-        completed_at?: string | undefined;
         completion_reason?: string | undefined;
     }[] | undefined;
 }>;
@@ -794,6 +794,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -805,7 +806,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }, {
             unit_id: string;
@@ -815,6 +815,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -826,7 +827,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
@@ -843,6 +843,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -854,7 +855,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }[] | undefined;
     }, {
@@ -871,6 +871,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -882,7 +883,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }[] | undefined;
     }>>;
@@ -960,6 +960,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -971,7 +972,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }[] | undefined;
     } | undefined;
@@ -1052,6 +1052,7 @@ export declare const AuditResultSchema: z.ZodObject<{
             pass_id: string;
             file_paths: string[];
             status?: "complete" | "pending" | undefined;
+            completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
             line_ranges?: {
                 path: string;
@@ -1063,7 +1064,6 @@ export declare const AuditResultSchema: z.ZodObject<{
             token_estimate?: number | undefined;
             risk_estimate?: number | undefined;
             tags?: string[] | undefined;
-            completed_at?: string | undefined;
             completion_reason?: string | undefined;
         }[] | undefined;
     } | undefined;

package/dist/remediate/contractPipeline/semanticProjection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semanticProjection.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAY,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAiDrC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAmBT;AAED;;;;;GAKG"}
+{"version":3,"file":"semanticProjection.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAY,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAmErC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAsBT;AAED;;;;;GAKG"}

package/dist/remediate/contractPipeline/semanticProjection.js

@@ -63,6 +63,26 @@ function projectModuleContract(value) {
     }
     return out;
 }
+/**
+ * Collapse cosmetic whitespace in every projected string (trim + runs → single
+ * space), recursively. A reflow / trailing-space / indentation edit to a contract
+ * field is not a semantic change, but without this it churns the projection hash
+ * and re-stales the downstream chain. Safe: the downstream gates/derivers match on
+ * word boundaries and substrings, which whitespace normalization never alters.
+ */
+function normalizeWhitespaceDeep(value) {
+    if (typeof value === "string")
+        return value.replace(/\s+/g, " ").trim();
+    if (Array.isArray(value))
+        return value.map(normalizeWhitespaceDeep);
+    if (isRecord(value)) {
+        const out = {};
+        for (const [key, v] of Object.entries(value))
+            out[key] = normalizeWhitespaceDeep(v);
+        return out;
+    }
+    return value;
+}
 /**
  * Project a contract-pipeline artifact payload to only its load-bearing
  * structure for downstream-staleness purposes. The universal provenance strip
@@ -77,21 +97,23 @@ export function semanticProjection(name, payload) {
     if (!isRecord(payload))
         return payload;
     const stripped = stripFields(payload, UNIVERSAL_NON_SEMANTIC_FIELDS);
-    if (name === "finalized_module_contracts") {
-        // Keep every top-level field (contract_version, goal_id, …) but narrow each
-        // module entry to its derivable fields, so a reworded per-module rationale /
-        // seam-prose edit projects identically while a changed interface / new
-        // invariant does not. Narrowing entries (not the whole artifact) keeps the
-        // projection conservative: any top-level field a downstream might read still
-        // participates in staleness.
-        if (!Array.isArray(stripped.module_contracts))
-            return stripped;
-        return {
-            ...stripped,
-            module_contracts: stripped.module_contracts.map(projectModuleContract),
-        };
+    // Both the intermediate `module_contracts` and the `finalized_module_contracts`
+    // carry the same module-entry shape; narrow each entry to its derivable fields for
+    // BOTH so a reworded per-module rationale / a tweaked non-derivable array
+    // (side_effects / seam_adjustments / neighbor_needs) projects identically while a
+    // changed interface / new invariant does not. Keep every top-level field
+    // (contract_version, goal_id, …): the narrowing is per-entry, so any top-level
+    // field a downstream might read still participates in staleness.
+    if (name === "finalized_module_contracts" || name === "module_contracts") {
+        if (Array.isArray(stripped.module_contracts)) {
+            return normalizeWhitespaceDeep({
+                ...stripped,
+                module_contracts: stripped.module_contracts.map(projectModuleContract),
+            });
+        }
+        return normalizeWhitespaceDeep(stripped);
     }
-    return stripped;
+    return normalizeWhitespaceDeep(stripped);
 }
 /**
  * The order-independent stable serialization used to hash a projection is the

package/dist/remediate/contractPipeline/semanticProjection.js.map

@@ -1 +1 @@
-{"version":3,"file":"semanticProjection.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAExF;;;;;;;;;GASG;AACH,MAAM,gCAAgC,GAAsB;IAC1D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,eAAe;IACf,qBAAqB;CACtB,CAAC;AAEF,SAAS,WAAW,CAClB,MAA+B,EAC/B,MAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,gCAAgC,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAkC,EAClC,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAErE,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,4EAA4E;QAC5E,6EAA6E;QAC7E,uEAAuE;QACvE,2EAA2E;QAC3E,6EAA6E;QAC7E,6BAA6B;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC/D,OAAO;YACL,GAAG,QAAQ;YACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG"}
+{"version":3,"file":"semanticProjection.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAExF;;;;;;;;;GASG;AACH,MAAM,gCAAgC,GAAsB;IAC1D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,eAAe;IACf,qBAAqB;CACtB,CAAC;AAEF,SAAS,WAAW,CAClB,MAA+B,EAC/B,MAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,gCAAgC,EAAE,CAAC;QACrD,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAkC,EAClC,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAErE,gFAAgF;IAChF,mFAAmF;IACnF,0EAA0E;IAC1E,kFAAkF;IAClF,yEAAyE;IACzE,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO,uBAAuB,CAAC;gBAC7B,GAAG,QAAQ;gBACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC;aACvE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG"}

package/dist/remediate/phases/close.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/remediate/phases/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAa1D,OAAO,KAAK,EAIV,yBAAyB,EACzB,SAAS,EAIV,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAOV,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAmF3B,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,aAAa,GAC3B,yBAAyB,CAoI3B;AAsDD;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CA6B5C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,wCAAwC,CAAC;IAC3D,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAyCD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAI1D;AAkDD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,aAAa,CAuDf;AAunBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,EAC5B,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAsK3B"}
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/remediate/phases/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAe1D,OAAO,KAAK,EAIV,yBAAyB,EACzB,SAAS,EAIV,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAOV,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAiF3B,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,aAAa,GAC3B,yBAAyB,CAoI3B;AAsDD;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CA6B5C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,wCAAwC,CAAC;IAC3D,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAyCD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAI1D;AAkDD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,GAC3B,aAAa,CAuDf;AAwoBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,mBAAmB,EAC5B,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO,CAAC,gBAAgB,CAAC,CA6K3B"}

package/dist/remediate/phases/close.js

@@ -1,18 +1,17 @@
+import { remediationBranchName, listQuarantinedCommits } from "../steps/dispatch.js";
 import { dirname, extname, isAbsolute, join } from "node:path";
 import { readFileSync, existsSync } from "node:fs";
-import { AGENT_FEEDBACK_FILENAME, parseReflectionsNdjson, readOptionalJsonFile, readOptionalTextFile, renderProcessFeedbackSection, stagedAndUntracked, writeJsonFile, writeTextFile, } from "audit-tools/shared";
+import { AGENT_FEEDBACK_FILENAME, parseReflectionsNdjson, readOptionalJsonFile, readOptionalTextFile, renderProcessFeedbackSection, stagedAndUntracked, writeJsonFile, writeTextFile, RemediationOutcomeStatusSchema, } from "audit-tools/shared";
 import { CONTRACT_PIPELINE_VERIFICATION_REPORT_VERSION } from "audit-tools/shared";
 import { runCommand, runShellCommand } from "../utils/commands.js";
 import { FAILURE_OUTPUT_TAIL_CHARS } from "./constants.js";
 import { intakePaths } from "../intake.js";
 import { isAuditFindingsReport } from "./plan.js";
 import { dispositionToOutcomeStatus, isInProgressStatus, isSkipStatus, isVerifiedCompleteStatus, statusToDisposition, } from "../state/itemStatus.js";
+// Derived from the single source so the key list can never drift from the
+// RemediationOutcomeStatus contract (A6).
 const OUTCOME_KEYS = [
-    "resolved",
-    "verified_no_change",
-    "inappropriate",
-    "ignored",
-    "blocked",
+    ...RemediationOutcomeStatusSchema.options,
 ];
 /** Retry-oriented final status per outcome (see RemediationOutcomeFinalStatus). */
 const FINAL_STATUS_BY_OUTCOME = {
@@ -554,8 +553,15 @@ function collectReportEntries(state, options) {
  * Render `remediation-report.md` from the partitioned entries, closing action,
  * e2e result, and per-finding outcomes. Pure string builder (no I/O).
  */
-function buildRemediationReportMarkdown(state, entries, closingResult, e2ePassed, outcomesReport, combinedTest, reflections = []) {
+function buildRemediationReportMarkdown(state, entries, closingResult, e2ePassed, outcomesReport, combinedTest, reflections = [], quarantined = []) {
     let reportContent = `# Remediation Report\n\n`;
+    // Code changes land on a dedicated remediation branch (the base branch is never
+    // modified); surface it so the user can review and merge. Only meaningful when a
+    // node actually committed a change — a no-change/skip-only run leaves no commits.
+    if (entries.resolved.length > 0) {
+        const branch = remediationBranchName(state.plan?.plan_id ?? "");
+        reportContent += `## Review\n\nAll code changes were applied on the dedicated branch \`${branch}\` — your base branch was left untouched. Review the diff and merge \`${branch}\` into your base branch.\n\n`;
+    }
     reportContent += `## Resolved — Changed Files\n\n`;
     if (entries.resolved.length === 0) {
         reportContent += `None.\n`;
@@ -640,6 +646,13 @@ function buildRemediationReportMarkdown(state, entries, closingResult, e2ePassed
         if (combinedTest.output)
             reportContent += `\`\`\`\n${combinedTest.output}\n\`\`\`\n`;
     }
+    if (quarantined.length > 0) {
+        reportContent += `\n## Preserved for Recovery\n\n`;
+        reportContent += `${quarantined.length} node(s) committed real edits but failed the tool's verify/scope/merge and were NOT landed. Their work is preserved under durable git refs (it survives worktree cleanup) — review and recover manually if a fix was correct:\n\n`;
+        for (const q of quarantined) {
+            reportContent += `- **${q.block}**: \`git cherry-pick ${q.commit}\`  (ref: \`${q.ref}\`)\n`;
+        }
+    }
     // Opt-in worker reflections, aggregated into the same "Process Feedback"
     // section audit-code renders (parity). Empty → no section.
     const feedbackLines = renderProcessFeedbackSection(reflections);
@@ -928,7 +941,13 @@ export async function runClosePhase(state, options, runLogger) {
     // dispatch; parse leniently (malformed lines skipped) and surface them in the
     // report. Workers own the file — it is read-only here.
     const feedbackText = await readOptionalTextFile(join(options.artifactsDir, AGENT_FEEDBACK_FILENAME));
-    const reportContent = buildRemediationReportMarkdown(state, entries, closingResult, e2eResult.ran ? e2eResult.passed : undefined, outcomesReport, combinedTest, feedbackText ? parseReflectionsNdjson(feedbackText) : []);
+    // Failed-but-committed nodes whose work was preserved under a durable quarantine
+    // ref (a tool-verify false-negative must never destroy a good fix) — surface them
+    // so the user can recover the work manually.
+    const quarantined = options.root
+        ? listQuarantinedCommits(options.root, state.plan?.plan_id ?? "")
+        : [];
+    const reportContent = buildRemediationReportMarkdown(state, entries, closingResult, e2eResult.ran ? e2eResult.passed : undefined, outcomesReport, combinedTest, feedbackText ? parseReflectionsNdjson(feedbackText) : [], quarantined);
     // Enrich the coverage ledger with never-planned payloads NOW, from the live
     // state and intake artifacts — both are deleted at the end of close, so this
     // must happen strictly before cleanup.