audit-tools 0.30.3 → 0.30.5

package/dist/audit/orchestrator/ingestionExecutors.js.map

@@ -1 +1 @@
-{"version":3,"file":"ingestionExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/ingestionExecutors.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,SAAS,kBAAkB,CAAC,KAA8B;IACxD,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAItC;IACC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;QAC3D,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS;QACT,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,wBAAwB;QAC9D,uBAAuB,EACrB,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC,MAAM,CAAC,yBAAyB;QAC3E,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,yBAAyB;KACjE,CAAC,CAAC;IAEH,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,uBAAuB,CAAC,CAAC;IAC9E,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM,CAAC,MAAM;YAChB,WAAW,EAAE,UAAU;YACvB,kBAAkB,EAAE,qBAAqB,CAAC,UAAU,EAAE;gBACpD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY;gBACvC,SAAS;gBACT,SAAS;aACV,CAAC;SACH;QACD,SAAS,EAAE,uBAAuB,CAAC,MAAM;QACzC,SAAS,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAAC,MAKhC;IACC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;QACvD,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;KACxD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,kBAAkB,CAAC,MAAM;QACjC,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAC5C,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrC;QACD,aAAa,EACX,kBAAkB,CAAC,SAAS,GAAG,CAAC;YAC9B,CAAC,CAAC,UAAU,kBAAkB,CAAC,SAAS,+BAA+B;YACvE,CAAC,CAAC,EAAE;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,OAAsB;IAEtB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc;QACxC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IACzB,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,EAAE,KAAK,CAAC,IAAI,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAClD,EAAE,OAAO,CAAC;IACX,MAAM,sBAAsB,GAC1B,MAAM,CAAC,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,2BAA2B,CAAC;YAC1B,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,YAAY;YACZ,OAAO,EAAE,cAAc;SACxB,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC;IACtC,MAAM,uBAAuB,GAAG,sBAAsB;QACpD,CAAC,CAAC,4BAA4B,CAC1B,sBAAsB,EACtB,MAAM,CAAC,yBAAyB,CACjC;QACH,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC;IACrC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;IACpE,MAAM,mBAAmB,GAAG,uBAAuB,CACjD,MAAM,CAAC,WAAW,EAClB,aAAa,CACd,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,eAAe,EAAE,qBAAqB;QACtC,aAAa,EAAE,YAAY;QAC3B,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,aAAa;QACtB,uBAAuB;QACvB,gBAAgB,EAAE,CAAC,kBAAkB,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,mBAAmB,CACxC,qBAAqB,EACrB,kBAAkB,CAAC,MAAM,CAAC,cAAc,EACxC,kBAAkB,CAAC,MAAM,CAAC,aAAa,EACvC,kBAAkB,CAAC,MAAM,CAAC,yBAAyB,CACpD,CAAC;IACF,sEAAsE;IACtE,wEAAwE;IACxE,sDAAsD;IACtD,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,GAAG,CAAC;QACJ,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,CAAC,CAAC,UAAU;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CACjC;KACF,CAAC,CAAC,CAAC;IACN,MAAM,gBAAgB,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,mBAAmB,CAAC,CAAC;IACpE,MAAM,WAAW,GAAmB;QAClC,GAAG,kBAAkB,CAAC,MAAM;QAC5B,aAAa,EAAE,cAAc,CAAC,KAAK;QACnC,kBAAkB,EAAE,qBAAqB,CAAC,gBAAgB,EAAE;YAC1D,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC,YAAY;YACnD,SAAS;YACT,SAAS;SACV,CAAC;KACH,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,iBAAiB,EAAE;YACjB,sBAAsB;YACtB,oBAAoB;YACpB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,qBAAqB;YACrB,kBAAkB;YAClB,yBAAyB;YACzB,oBAAoB;SACrB;QACD,gBAAgB,EACd,YAAY,OAAO,CAAC,MAAM,0DAA0D;YACpF,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAsB,EACtB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,yBAAyB,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC5E,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IACE,KAAK;YACL,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CACrE,KAAK,CAAC,MAAM,CACb,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;gBACpB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,sDAAsD,IAAI,CAAC,EAAE,GAAG;gBACzE,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,mDAAmD,CAAC;aAC7D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,gBAAgB,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,iBAAiB,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GACX,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,CAAC,iBAAiB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,uBAAuB,GAA4B;QACvD,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KACnF,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,yBAAyB,EAAE,uBAAuB;QAClD,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QACnC,uBAAuB;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,MAAM;QAClC,iBAAiB,EAAE;YACjB,gCAAgC;YAChC,GAAG,kBAAkB,CAAC,SAAS;SAChC;QACD,gBAAgB,EACd,iDAAiD,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,aAAa,iBAAiB,2BAA2B,gBAAgB,oCAAoC;YAC1M,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAsB,EACtB,OAAgC;IAEhC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,CAAC,yBAAyB,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,6BAA6B,CAChD,MAAM,CAAC,wBAAwB,EAC/B,cAAc,EACd,OAAO,CACR,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,yBAAyB,EAAE,YAAY;QACvC,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QACnC,uBAAuB,EAAE,YAAY;KACtC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,MAAM;QAClC,iBAAiB,EAAE;YACjB,gCAAgC;YAChC,GAAG,kBAAkB,CAAC,SAAS;SAChC;QACD,gBAAgB,EACd,UAAU,OAAO,CAAC,OAAO,CAAC,MAAM,8BAA8B;YAC9D,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,MAAsB,EACtB,eAAwC;IAExC,MAAM,OAAO,GAAG,YAAY,eAAe,CAAC,OAAO,CAAC,MAAM,6BAA6B,eAAe,CAAC,IAAI,GAAG,CAAC;IAC/G,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,yBAAyB,EAAE,eAAe;YAC1C,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,SAAS;YACxB,wBAAwB,EAAE,SAAS;YACnC,yBAAyB,EAAE,SAAS;YACpC,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,SAAS;YAC7B,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,SAAS;SACxB;QACD,iBAAiB,EAAE,CAAC,gCAAgC,CAAC;QACrD,gBAAgB,EAAE,OAAO;KAC1B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ingestionExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/ingestionExecutors.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAGvE,SAAS,kBAAkB,CAAC,KAA8B;IACxD,OAAO,MAAM,CAAC,WAAW,CACvB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAItC;IACC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;QAC3D,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS;QACT,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,wBAAwB;QAC9D,uBAAuB,EACrB,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC,MAAM,CAAC,yBAAyB;QAC3E,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,yBAAyB;KACjE,CAAC,CAAC;IAEH,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,uBAAuB,CAAC,CAAC;IAC9E,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM,CAAC,MAAM;YAChB,WAAW,EAAE,UAAU;YACvB,kBAAkB,EAAE,qBAAqB,CAAC,UAAU,EAAE;gBACpD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY;gBACvC,SAAS;gBACT,SAAS;aACV,CAAC;SACH;QACD,SAAS,EAAE,uBAAuB,CAAC,MAAM;QACzC,SAAS,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,uBAAuB,CAAC,MAKhC;IACC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;QACvD,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;KACxD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,kBAAkB,CAAC,MAAM;QACjC,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAC5C,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrC;QACD,aAAa,EACX,kBAAkB,CAAC,SAAS,GAAG,CAAC;YAC9B,CAAC,CAAC,UAAU,kBAAkB,CAAC,SAAS,+BAA+B;YACvE,CAAC,CAAC,EAAE;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,OAAsB;IAEtB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc;QACxC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IACzB,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,EAAE,KAAK,CAAC,IAAI,CAChE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAClD,EAAE,OAAO,CAAC;IACX,MAAM,sBAAsB,GAC1B,MAAM,CAAC,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,2BAA2B,CAAC;YAC1B,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,YAAY;YACZ,OAAO,EAAE,cAAc;SACxB,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC;IACtC,MAAM,uBAAuB,GAAG,sBAAsB;QACpD,CAAC,CAAC,4BAA4B,CAC1B,sBAAsB,EACtB,MAAM,CAAC,yBAAyB,CACjC;QACH,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC;IACrC,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,mBAAmB,GAAG,uBAAuB,CACjD,MAAM,CAAC,WAAW,EAClB,aAAa,CACd,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,eAAe,EAAE,qBAAqB;QACtC,aAAa,EAAE,YAAY;QAC3B,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,aAAa;QACtB,uBAAuB;QACvB,gBAAgB,EAAE,CAAC,kBAAkB,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,mBAAmB,CACxC,qBAAqB,EACrB,kBAAkB,CAAC,MAAM,CAAC,cAAc,EACxC,kBAAkB,CAAC,MAAM,CAAC,aAAa,EACvC,kBAAkB,CAAC,MAAM,CAAC,yBAAyB,CACpD,CAAC;IACF,sEAAsE;IACtE,wEAAwE;IACxE,sDAAsD;IACtD,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,GAAG,CAAC;QACJ,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAClC,CAAC,CAAC,UAAU;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CACjC;KACF,CAAC,CAAC,CAAC;IACN,MAAM,gBAAgB,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,mBAAmB,CAAC,CAAC;IACpE,MAAM,WAAW,GAAmB;QAClC,GAAG,kBAAkB,CAAC,MAAM;QAC5B,aAAa,EAAE,cAAc,CAAC,KAAK;QACnC,kBAAkB,EAAE,qBAAqB,CAAC,gBAAgB,EAAE;YAC1D,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC,YAAY;YACnD,SAAS;YACT,SAAS;SACV,CAAC;KACH,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,iBAAiB,EAAE;YACjB,sBAAsB;YACtB,oBAAoB;YACpB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,qBAAqB;YACrB,kBAAkB;YAClB,yBAAyB;YACzB,oBAAoB;SACrB;QACD,gBAAgB,EACd,YAAY,OAAO,CAAC,MAAM,0DAA0D;YACpF,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAsB,EACtB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,yBAAyB,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC5E,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IACE,KAAK;YACL,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CACrE,KAAK,CAAC,MAAM,CACb,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;gBACpB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,sDAAsD,IAAI,CAAC,EAAE,GAAG;gBACzE,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC,mDAAmD,CAAC;aAC7D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,gBAAgB,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,iBAAiB,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GACX,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,CAAC,iBAAiB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,uBAAuB,GAA4B;QACvD,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KACnF,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,yBAAyB,EAAE,uBAAuB;QAClD,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QACnC,uBAAuB;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,MAAM;QAClC,iBAAiB,EAAE;YACjB,gCAAgC;YAChC,GAAG,kBAAkB,CAAC,SAAS;SAChC;QACD,gBAAgB,EACd,iDAAiD,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,aAAa,iBAAiB,2BAA2B,gBAAgB,oCAAoC;YAC1M,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAsB,EACtB,OAAgC;IAEhC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,CAAC,yBAAyB,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,6BAA6B,CAChD,MAAM,CAAC,wBAAwB,EAC/B,cAAc,EACd,OAAO,CACR,CAAC;IACF,MAAM,iBAAiB,GAAmB;QACxC,GAAG,MAAM;QACT,yBAAyB,EAAE,YAAY;QACvC,YAAY,EAAE,SAAS;KACxB,CAAC;IACF,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;QACjD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QACnC,uBAAuB,EAAE,YAAY;KACtC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,MAAM;QAClC,iBAAiB,EAAE;YACjB,gCAAgC;YAChC,GAAG,kBAAkB,CAAC,SAAS;SAChC;QACD,gBAAgB,EACd,UAAU,OAAO,CAAC,OAAO,CAAC,MAAM,8BAA8B;YAC9D,kBAAkB,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,MAAsB,EACtB,eAAwC;IAExC,MAAM,OAAO,GAAG,YAAY,eAAe,CAAC,OAAO,CAAC,MAAM,6BAA6B,eAAe,CAAC,IAAI,GAAG,CAAC;IAC/G,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,yBAAyB,EAAE,eAAe;YAC1C,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,SAAS;YACxB,wBAAwB,EAAE,SAAS;YACnC,yBAAyB,EAAE,SAAS;YACpC,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,SAAS;YAC7B,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,SAAS;SACxB;QACD,iBAAiB,EAAE,CAAC,gCAAgC,CAAC;QACrD,gBAAgB,EAAE,OAAO;KAC1B,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/intentCheckpointGate.d.ts

@@ -0,0 +1,129 @@
+import type { IntentCheckpoint } from 'audit-tools/shared';
+/** A gate verdict over a (prior, new) intent_checkpoint pair. */
+export type IntentCheckpointVerdict = 'unchanged' | 'changed';
+/**
+ * The bounded LLM judge. Returns `true` iff the two normalized intent values are
+ * semantically EQUIVALENT. A judge that is uncertain, errors, or returns a
+ * non-boolean is treated as `changed` by the caller (fail-safe) — the judge
+ * itself need not encode that policy. Provider-agnostic: the host supplies the
+ * actual LLM call; the gate never reaches for a specific backend.
+ */
+export type SemanticEquivalenceJudge = (input: {
+    priorNormalized: string;
+    newNormalized: string;
+}) => Promise<boolean> | boolean;
+/**
+ * Deterministic normalization config. Bumping any field bumps `gate_version` and
+ * invalidates every cached verdict. Kept as data (not code) so the version hash
+ * captures the active policy, not the module's source text.
+ */
+export interface NormalizeConfig {
+    /** Schema/recipe version of the normalization itself. Bump on any change. */
+    readonly version: string;
+    /**
+     * Checkpoint fields that carry SEMANTIC intent and participate in the normal
+     * form. Volatile/provenance fields (timestamps, confirmed_by, schema_version)
+     * are excluded so a benign re-confirm normalizes identically.
+     */
+    readonly semanticFields: readonly (keyof IntentCheckpoint)[];
+}
+/** The single active normalization config (INV-O2-inv-5 input). */
+export declare const DEFAULT_NORMALIZE_CONFIG: NormalizeConfig;
+/** Static prompt-template version — bump on any judge-prompt change. */
+export declare const INTENT_GATE_PROMPT_TEMPLATE_VERSION = "intent-checkpoint-judge-prompt/v1";
+/**
+ * Deterministically normalize an intent_checkpoint value to its semantic normal
+ * form. Only `config.semanticFields` participate; values are canonically
+ * serialized (stable key order) so reordering/whitespace is invisible. An absent
+ * checkpoint normalizes to a stable empty marker so present-vs-absent is a real
+ * difference, not a crash.
+ */
+export declare function normalizeCheckpointValue(checkpoint: IntentCheckpoint | undefined, config?: NormalizeConfig): string;
+/**
+ * Compute the LOCALLY-resolved `gate_version` cache key component:
+ * `hash(normalizeConfig) + judge-id token + prompt-template version`.
+ *
+ * NO network/API probe (INV-O2-inv-6): the judge id is a caller-supplied LOCAL
+ * token (e.g. a configured model id string already known to the host, or a
+ * sentinel like `'host'`), never a live capability query. Bumping the normalize
+ * config, the judge id, or the prompt template deterministically invalidates the
+ * verdict cache.
+ */
+export declare function computeGateVersion(input: {
+    normalizeConfig?: NormalizeConfig;
+    /** Locally-resolved judge id token. No probe; supplied by the host. */
+    judgeId: string;
+    promptTemplateVersion?: string;
+}): string;
+/** A cached verdict keyed on (priorNormalized, newNormalized, gate_version). */
+export interface VerdictCache {
+    get(key: string): IntentCheckpointVerdict | undefined;
+    set(key: string, verdict: IntentCheckpointVerdict): void;
+}
+/** Build the deterministic verdict-cache key from the version-keyed trio. */
+export declare function verdictCacheKey(priorNormalized: string, newNormalized: string, gateVersion: string): string;
+/**
+ * The normalize-then-bounded-LLM-judge equivalence gate.
+ *
+ * 1. Normalize both values; equal normal forms ⟹ `unchanged`, no judge call.
+ * 2. Cache hit on (priorNormalized, newNormalized, gate_version) ⟹ cached verdict.
+ * 3. Otherwise run the bounded judge; FAIL-SAFE — uncertain/errored/non-boolean
+ *    ⟹ `'changed'`. Cache and return.
+ *
+ * Pure decision: holds no lock and does no artifact IO. The lock-interleave
+ * discipline lives in `runIntentCheckpointGate`.
+ */
+export declare function intentCheckpointEquivalenceGate(input: {
+    prior: IntentCheckpoint | undefined;
+    next: IntentCheckpoint | undefined;
+    judge: SemanticEquivalenceJudge;
+    judgeId: string;
+    normalizeConfig?: NormalizeConfig;
+    promptTemplateVersion?: string;
+    cache?: VerdictCache;
+}): Promise<{
+    verdict: IntentCheckpointVerdict;
+    gateVersion: string;
+    judged: boolean;
+}>;
+/**
+ * A monotonic ledger/version token capturing the artifact-tree state at read.
+ * Any interleaved append moves it; comparing the read-time token to the
+ * post-judge token detects an interleave that must force a re-derive.
+ */
+export type LedgerVersionToken = string;
+/**
+ * Run the intent_checkpoint gate under the O2 lock-interleave discipline.
+ *
+ * The judge is SLOW and runs OUTSIDE the held lock. Sequence per attempt:
+ *  1. Acquire the lock; read the current ledger/version token; release.
+ *  2. Run the bounded equivalence gate (judge) UNLOCKED.
+ *  3. Re-acquire the lock; read the token again. If unchanged, COMMIT the verdict
+ *     under the lock and return. If an interleaved append moved the token,
+ *     release and re-derive (bounded to `maxAttempts`).
+ *  4. On attempt exhaustion, take the lock ACROSS the judge for one final
+ *     guaranteed-committing derivation, recording the fallback firing through the
+ *     best-effort friction sink (CE-010 residual — never blocks the commit).
+ *
+ * `withLock` is the artifact-tree lock wrapper (e.g. `withFileLock` bound to the
+ * artifact-tree lock path); `commit` persists the decided verdict under the held
+ * lock and is the single mutation point.
+ */
+export declare function runIntentCheckpointGate<T>(deps: {
+    withLock: <R>(fn: () => Promise<R>) => Promise<R>;
+    readLedgerToken: () => Promise<LedgerVersionToken>;
+    gate: () => Promise<{
+        verdict: IntentCheckpointVerdict;
+        gateVersion: string;
+    }>;
+    commit: (verdict: IntentCheckpointVerdict) => Promise<T>;
+    /** Best-effort friction recording of the lock-across-judge fallback firing. */
+    artifactsDir?: string;
+    runId?: string;
+    maxAttempts?: number;
+}): Promise<{
+    verdict: IntentCheckpointVerdict;
+    committed: T;
+    usedFallback: boolean;
+}>;
+//# sourceMappingURL=intentCheckpointGate.d.ts.map

package/dist/audit/orchestrator/intentCheckpointGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intentCheckpointGate.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/intentCheckpointGate.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEjC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC;CAC9D;AAED,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,EAAE,eAGtC,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,mCAAmC,sCAAsC,CAAC;AAEvF;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,gBAAgB,GAAG,SAAS,EACxC,MAAM,GAAE,eAA0C,GACjD,MAAM,CAaR;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,MAAM,CAMT;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAC;IACtD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC1D;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,GAClB,MAAM,CAIR;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,KAAK,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACnC,KAAK,EAAE,wBAAwB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,uBAAuB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAgCtF;AAMD;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,IAAI,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,eAAe,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,MAAM,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,CAAC,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC,CAsDrF"}

package/dist/audit/orchestrator/intentCheckpointGate.js

@@ -0,0 +1,193 @@
+/**
+ * O2 — the intent_checkpoint semantic-equivalence gate.
+ *
+ * The ONE place that decides whether a re-confirmed intent_checkpoint value is
+ * semantically EQUIVALENT to the prior one (so dependents need not re-stale) or
+ * CHANGED (so the `intent_checkpoint_current` obligation must re-fire and
+ * downstream artifacts re-derive). A raw byte/JSON compare over-stales: a host
+ * re-confirming the same intent with reordered keys, whitespace, or a benign
+ * rephrase would needlessly invalidate the whole planning tree. A pure structural
+ * compare under-stales: a genuine intent change phrased to hash-collide on the
+ * normalized form would be silently dropped. So the gate is
+ * normalize-then-bounded-LLM-judge:
+ *
+ *  1. NORMALIZE both values deterministically (`normalizeCheckpointValue`). Equal
+ *     normal forms ⟹ `unchanged` with no judge call (the common, free case).
+ *  2. Otherwise a BOUNDED LLM judge decides semantic equivalence. The judge is
+ *     FAIL-SAFE: any uncertain / errored / malformed verdict resolves to
+ *     `'changed'` (INV-O2-fail-3) — the gate never silently treats an
+ *     unverified pair as equivalent.
+ *
+ * VERSION-KEYED VERDICT CACHE (INV-O2-inv-5): a judge verdict is cached on
+ * `(priorValue, newValue, gate_version)`. `gate_version` is a LOCALLY-resolved
+ * token — `hash(normalizeConfig) + judge-id token + prompt-template version` —
+ * computed with NO network/API probe (INV-O2-inv-6). Bumping the normalize
+ * config, swapping the locally-resolved judge, or revising the prompt template
+ * invalidates every cached verdict deterministically; an unchanged trio is a
+ * cache hit so a re-confirm never re-pays the judge.
+ *
+ * LOCK INTERLEAVE DISCIPLINE (INV-O2-inv-7 / inv-8, the O2 lock contract): the
+ * judge is SLOW and MUST run OUTSIDE the artifact-tree lock. `runIntentCheckpointGate`
+ * therefore: reads a ledger/version token under the lock, releases, runs the
+ * judge unlocked, then RE-ACQUIRES the lock and compares the token captured at
+ * read against the token now. Any interleaved append (token moved) forces a
+ * re-derive — bounded to N attempts. On exhaustion it falls back to taking the
+ * lock ACROSS the judge for one final guaranteed-committing derivation, and
+ * records that fallback firing through the best-effort friction sink (CE-010
+ * residual: a contended friction append under the held non-reentrant lock is
+ * swallowed best-effort, never blocking the commit).
+ */
+import { captureFrictionEvent, hashContent, stableStringify } from 'audit-tools/shared';
+/** The single active normalization config (INV-O2-inv-5 input). */
+export const DEFAULT_NORMALIZE_CONFIG = {
+    version: 'intent-checkpoint-normalize/v1',
+    semanticFields: ['scope_summary', 'intent_summary', 'free_form_intent', 'constraint_clauses'],
+};
+/** Static prompt-template version — bump on any judge-prompt change. */
+export const INTENT_GATE_PROMPT_TEMPLATE_VERSION = 'intent-checkpoint-judge-prompt/v1';
+/**
+ * Deterministically normalize an intent_checkpoint value to its semantic normal
+ * form. Only `config.semanticFields` participate; values are canonically
+ * serialized (stable key order) so reordering/whitespace is invisible. An absent
+ * checkpoint normalizes to a stable empty marker so present-vs-absent is a real
+ * difference, not a crash.
+ */
+export function normalizeCheckpointValue(checkpoint, config = DEFAULT_NORMALIZE_CONFIG) {
+    if (!checkpoint)
+        return stableStringify({ __absent: true });
+    const projection = {};
+    for (const field of config.semanticFields) {
+        const value = checkpoint[field];
+        if (value !== undefined) {
+            // free_form_intent is whitespace-insensitive at the edges; clauses/objects
+            // are compared structurally via the stable serializer.
+            projection[field] =
+                typeof value === 'string' ? value.trim() : value;
+        }
+    }
+    return stableStringify(projection);
+}
+/**
+ * Compute the LOCALLY-resolved `gate_version` cache key component:
+ * `hash(normalizeConfig) + judge-id token + prompt-template version`.
+ *
+ * NO network/API probe (INV-O2-inv-6): the judge id is a caller-supplied LOCAL
+ * token (e.g. a configured model id string already known to the host, or a
+ * sentinel like `'host'`), never a live capability query. Bumping the normalize
+ * config, the judge id, or the prompt template deterministically invalidates the
+ * verdict cache.
+ */
+export function computeGateVersion(input) {
+    const normalizeConfig = input.normalizeConfig ?? DEFAULT_NORMALIZE_CONFIG;
+    const promptTemplateVersion = input.promptTemplateVersion ?? INTENT_GATE_PROMPT_TEMPLATE_VERSION;
+    const configHash = hashContent(stableStringify(normalizeConfig), { length: 16 });
+    return `${configHash}:${input.judgeId}:${promptTemplateVersion}`;
+}
+/** Build the deterministic verdict-cache key from the version-keyed trio. */
+export function verdictCacheKey(priorNormalized, newNormalized, gateVersion) {
+    return hashContent(stableStringify([priorNormalized, newNormalized, gateVersion]));
+}
+/**
+ * The normalize-then-bounded-LLM-judge equivalence gate.
+ *
+ * 1. Normalize both values; equal normal forms ⟹ `unchanged`, no judge call.
+ * 2. Cache hit on (priorNormalized, newNormalized, gate_version) ⟹ cached verdict.
+ * 3. Otherwise run the bounded judge; FAIL-SAFE — uncertain/errored/non-boolean
+ *    ⟹ `'changed'`. Cache and return.
+ *
+ * Pure decision: holds no lock and does no artifact IO. The lock-interleave
+ * discipline lives in `runIntentCheckpointGate`.
+ */
+export async function intentCheckpointEquivalenceGate(input) {
+    const config = input.normalizeConfig ?? DEFAULT_NORMALIZE_CONFIG;
+    const priorNormalized = normalizeCheckpointValue(input.prior, config);
+    const newNormalized = normalizeCheckpointValue(input.next, config);
+    const gateVersion = computeGateVersion({
+        normalizeConfig: config,
+        judgeId: input.judgeId,
+        promptTemplateVersion: input.promptTemplateVersion,
+    });
+    if (priorNormalized === newNormalized) {
+        return { verdict: 'unchanged', gateVersion, judged: false };
+    }
+    const cacheKey = verdictCacheKey(priorNormalized, newNormalized, gateVersion);
+    const cached = input.cache?.get(cacheKey);
+    if (cached !== undefined) {
+        return { verdict: cached, gateVersion, judged: false };
+    }
+    let verdict;
+    try {
+        const equivalent = await input.judge({ priorNormalized, newNormalized });
+        // FAIL-SAFE: only an explicit `true` resolves to unchanged; anything else
+        // (false, non-boolean, undefined) is treated as changed.
+        verdict = equivalent === true ? 'unchanged' : 'changed';
+    }
+    catch {
+        // FAIL-SAFE: a judge error never silently passes as equivalent.
+        verdict = 'changed';
+    }
+    input.cache?.set(cacheKey, verdict);
+    return { verdict, gateVersion, judged: true };
+}
+/**
+ * Run the intent_checkpoint gate under the O2 lock-interleave discipline.
+ *
+ * The judge is SLOW and runs OUTSIDE the held lock. Sequence per attempt:
+ *  1. Acquire the lock; read the current ledger/version token; release.
+ *  2. Run the bounded equivalence gate (judge) UNLOCKED.
+ *  3. Re-acquire the lock; read the token again. If unchanged, COMMIT the verdict
+ *     under the lock and return. If an interleaved append moved the token,
+ *     release and re-derive (bounded to `maxAttempts`).
+ *  4. On attempt exhaustion, take the lock ACROSS the judge for one final
+ *     guaranteed-committing derivation, recording the fallback firing through the
+ *     best-effort friction sink (CE-010 residual — never blocks the commit).
+ *
+ * `withLock` is the artifact-tree lock wrapper (e.g. `withFileLock` bound to the
+ * artifact-tree lock path); `commit` persists the decided verdict under the held
+ * lock and is the single mutation point.
+ */
+export async function runIntentCheckpointGate(deps) {
+    const maxAttempts = deps.maxAttempts ?? 3;
+    for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+        // (1) Capture the read-time token under the lock, then release.
+        const readToken = await deps.withLock(() => deps.readLedgerToken());
+        // (2) Run the slow judge UNLOCKED.
+        const { verdict } = await deps.gate();
+        // (3) Re-acquire; if no interleave, commit under the lock.
+        const outcome = await deps.withLock(async () => {
+            const nowToken = await deps.readLedgerToken();
+            if (nowToken !== readToken) {
+                // Interleaved append — bail out of this attempt and re-derive.
+                return { committed: undefined, interleaved: true };
+            }
+            const committed = await deps.commit(verdict);
+            return { committed, interleaved: false };
+        });
+        if (!outcome.interleaved) {
+            return { verdict, committed: outcome.committed, usedFallback: false };
+        }
+        // else: token moved during the unlocked judge — loop and re-derive.
+    }
+    // (4) Attempts exhausted under repeated contention: take the lock ACROSS the
+    // judge for one final guaranteed-committing derivation. Record the fallback
+    // firing best-effort (CE-010 residual: a contended friction append under the
+    // held non-reentrant lock is swallowed best-effort, never blocking the commit).
+    return deps.withLock(async () => {
+        if (deps.artifactsDir && deps.runId) {
+            // Fire-and-forget but awaited: captureFrictionEvent is itself best-effort
+            // and never throws, so it can never block the commit below.
+            await captureFrictionEvent(deps.artifactsDir, deps.runId, {
+                id: `intent-gate-lock-across-judge-fallback:${deps.runId}`,
+                category: 'trap',
+                severity: 'low',
+                area: 'intent_checkpoint gate',
+                note: 'intent_checkpoint gate fell back to taking the lock across the LLM judge after ' +
+                    `${maxAttempts} interleaved re-derive attempts; one guaranteed-committing derivation ran under the held lock.`,
+            }, 'audit-code');
+        }
+        const { verdict } = await deps.gate();
+        const committed = await deps.commit(verdict);
+        return { verdict, committed, usedFallback: true };
+    });
+}
+//# sourceMappingURL=intentCheckpointGate.js.map

package/dist/audit/orchestrator/intentCheckpointGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intentCheckpointGate.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/intentCheckpointGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAkCxF,mEAAmE;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,OAAO,EAAE,gCAAgC;IACzC,cAAc,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;CAC9F,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,mCAAmC,GAAG,mCAAmC,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAwC,EACxC,SAA0B,wBAAwB;IAElD,IAAI,CAAC,UAAU;QAAE,OAAO,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,2EAA2E;YAC3E,uDAAuD;YACvD,UAAU,CAAC,KAAe,CAAC;gBACzB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAKlC;IACC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAC1E,MAAM,qBAAqB,GACzB,KAAK,CAAC,qBAAqB,IAAI,mCAAmC,CAAC;IACrE,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,GAAG,UAAU,IAAI,KAAK,CAAC,OAAO,IAAI,qBAAqB,EAAE,CAAC;AACnE,CAAC;AAQD,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,eAAuB,EACvB,aAAqB,EACrB,WAAmB;IAEnB,OAAO,WAAW,CAChB,eAAe,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAQrD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,IAAI,wBAAwB,CAAC;IACjE,MAAM,eAAe,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC;QACrC,eAAe,EAAE,MAAM;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;KACnD,CAAC,CAAC;IAEH,IAAI,eAAe,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,eAAe,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;QACzE,0EAA0E;QAC1E,yDAAyD;QACzD,OAAO,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAaD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAI,IAShD;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IAE1C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC1D,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAEpE,mCAAmC;QACnC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAEtC,2DAA2D;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,+DAA+D;gBAC/D,OAAO,EAAE,SAAS,EAAE,SAA0B,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACtE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,gFAAgF;IAChF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,0EAA0E;YAC1E,4DAA4D;YAC5D,MAAM,oBAAoB,CACxB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,KAAK,EACV;gBACE,EAAE,EAAE,0CAA0C,IAAI,CAAC,KAAK,EAAE;gBAC1D,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EACF,iFAAiF;oBACjF,GAAG,WAAW,gGAAgG;aACjH,EACD,YAAY,CACb,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/orchestrator/ledger.d.ts

@@ -0,0 +1,30 @@
+import type { AuditResult } from "../types.js";
+/**
+ * Stamp a result with its seam-derived ledger keys (instance_id, identity_key,
+ * idempotency_key) when they are not already present. Idempotent: a record that
+ * already carries an idempotency_key keeps its identity/idempotency keys (so a
+ * replay hashes identically), and only re-mints an absent instance_id.
+ */
+export declare function stampLedgerKeys(result: AuditResult): AuditResult;
+/**
+ * Append incoming results to the existing ledger, append-only and IDEMPOTENT on
+ * idempotency_key. Each appended record gets a fresh instance_id; a replay (an
+ * incoming result whose idempotency_key already exists in the ledger OR collides
+ * with an earlier record in the same batch) is a no-op. Distinct idempotency_keys
+ * always both persist — never merged, never last-writer-wins (fail-2).
+ *
+ * The existing ledger is returned by reference-extended copy; existing records
+ * are left untouched (append-only).
+ */
+export declare function appendResultsToLedger(existing: AuditResult[] | undefined, incoming: AuditResult[]): AuditResult[];
+/**
+ * Re-associate ledger records to tasks. Groups one-to-many by `identity_key`
+ * (multiple distinct results legitimately share a coordinate — base vs. deepening
+ * / steward) and resolves logical identity by `idempotency_key`. Records are
+ * stamped on read if a legacy entry predates the keys, so a ledger written before
+ * O2 still groups correctly. RETAIN-UNASSIGNED: every record appears in exactly
+ * one group keyed by its identity_key — none is dropped because its task is
+ * absent (INV-3); the caller decides what to do with a group whose task is gone.
+ */
+export declare function groupLedgerByIdentity(ledger: AuditResult[]): Map<string, AuditResult[]>;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/audit/orchestrator/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/ledger.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAoB/C;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAwBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,EACnC,QAAQ,EAAE,WAAW,EAAE,GACtB,WAAW,EAAE,CAkBf;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,EAAE,GACpB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAS5B"}

package/dist/audit/orchestrator/ledger.js

@@ -0,0 +1,126 @@
+/**
+ * O2 — the append-only, instance-keyed, idempotent audit-results ledger.
+ *
+ * `audit_results.jsonl` is the cumulative store of every accepted AuditResult.
+ * This module is the SOLE place the ledger grows, so its three invariants hold
+ * by construction (never by a caller remembering them):
+ *
+ *  - APPEND-ONLY, INSTANCE-KEYED (INV-1 / CE-001 / fail-2): every appended record
+ *    carries a fresh per-record `instance_id` minted from the shared seam
+ *    (`newInstanceId`). The ledger keys on this, so identity_key / idempotency_key
+ *    are grouping/idempotency keys, NEVER primary keys — distinct records are never
+ *    merged or last-writer-wins'd.
+ *
+ *  - IDEMPOTENT ON idempotency_key (INV-2 / CE-001b / fail-4): a record is appended
+ *    only when no existing record shares its `idempotency_key`. A replay of the same
+ *    logical result is therefore a no-op. Two genuinely-different same-coordinate
+ *    results (base vs. deepening / steward / re-dispatch) carry distinct
+ *    discriminators → distinct idempotency_keys → both persist (CE-001).
+ *
+ *  - RETAIN-UNASSIGNED (INV-3): re-association groups records to tasks by
+ *    `identity_key` one-to-many and resolves logical identity by `idempotency_key`.
+ *    A result whose owning task is absent from the active manifest is NEVER pruned —
+ *    it stays in the ledger, just un-associated.
+ *
+ * All three keys are imported from the single content-key seam
+ * (`src/shared/contentKey.ts`); this module never re-derives a key.
+ */
+import { buildResultContentDiscriminator, identityKey, idempotencyKey, newInstanceId, } from "audit-tools/shared";
+/**
+ * Deterministic, TOOL-OWNED mapping from a result's coordinate to its emit
+ * source. The discriminator recipe lives in the seam; the SOURCE selection lives
+ * here because it is audit-domain knowledge: selective-deepening / steward tasks
+ * are minted with `deepening:` / `steward:` task-id prefixes (see
+ * `selectiveDeepening/shared.ts#taskIdFor`), so a deepening or steward result
+ * that shares a base result's {unit_id, lens, pass_id} coordinate legitimately
+ * gets a DISTINCT idempotency_key and both persist (CE-001). Anything else is a
+ * base result. (Re-dispatch attempts are not yet stamped on results; when O3
+ * adds an attempt counter it maps to `source: 'redispatch'` here.)
+ */
+function emitSourceFor(result) {
+    const taskId = result.task_id ?? "";
+    if (taskId.startsWith("steward:"))
+        return "steward";
+    if (taskId.startsWith("deepening:"))
+        return "deepening";
+    return "base";
+}
+/**
+ * Stamp a result with its seam-derived ledger keys (instance_id, identity_key,
+ * idempotency_key) when they are not already present. Idempotent: a record that
+ * already carries an idempotency_key keeps its identity/idempotency keys (so a
+ * replay hashes identically), and only re-mints an absent instance_id.
+ */
+export function stampLedgerKeys(result) {
+    const identity_key = result.identity_key ??
+        identityKey({
+            unit_id: result.unit_id,
+            lens: result.lens,
+            pass_id: result.pass_id,
+        });
+    const idempotency_key = result.idempotency_key ??
+        idempotencyKey({
+            unit_id: result.unit_id,
+            lens: result.lens,
+            pass_id: result.pass_id,
+            result_content_discriminator: buildResultContentDiscriminator({
+                source: emitSourceFor(result),
+            }),
+        });
+    return {
+        ...result,
+        instance_id: result.instance_id ?? newInstanceId(),
+        identity_key,
+        idempotency_key,
+    };
+}
+/**
+ * Append incoming results to the existing ledger, append-only and IDEMPOTENT on
+ * idempotency_key. Each appended record gets a fresh instance_id; a replay (an
+ * incoming result whose idempotency_key already exists in the ledger OR collides
+ * with an earlier record in the same batch) is a no-op. Distinct idempotency_keys
+ * always both persist — never merged, never last-writer-wins (fail-2).
+ *
+ * The existing ledger is returned by reference-extended copy; existing records
+ * are left untouched (append-only).
+ */
+export function appendResultsToLedger(existing, incoming) {
+    const ledger = [...(existing ?? [])];
+    const seen = new Set();
+    for (const record of ledger) {
+        const key = record.idempotency_key;
+        if (typeof key === "string")
+            seen.add(key);
+    }
+    for (const raw of incoming) {
+        const stamped = stampLedgerKeys(raw);
+        const key = stamped.idempotency_key;
+        if (seen.has(key)) {
+            // Replay of an already-ingested logical result — no-op (INV-2).
+            continue;
+        }
+        seen.add(key);
+        ledger.push(stamped);
+    }
+    return ledger;
+}
+/**
+ * Re-associate ledger records to tasks. Groups one-to-many by `identity_key`
+ * (multiple distinct results legitimately share a coordinate — base vs. deepening
+ * / steward) and resolves logical identity by `idempotency_key`. Records are
+ * stamped on read if a legacy entry predates the keys, so a ledger written before
+ * O2 still groups correctly. RETAIN-UNASSIGNED: every record appears in exactly
+ * one group keyed by its identity_key — none is dropped because its task is
+ * absent (INV-3); the caller decides what to do with a group whose task is gone.
+ */
+export function groupLedgerByIdentity(ledger) {
+    const byIdentity = new Map();
+    for (const raw of ledger) {
+        const record = stampLedgerKeys(raw);
+        const group = byIdentity.get(record.identity_key) ?? [];
+        group.push(record);
+        byIdentity.set(record.identity_key, group);
+    }
+    return byIdentity;
+}
+//# sourceMappingURL=ledger.js.map

package/dist/audit/orchestrator/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAEL,+BAA+B,EAC/B,WAAW,EACX,cAAc,EACd,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,MAAM,YAAY,GAChB,MAAM,CAAC,YAAY;QACnB,WAAW,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IACL,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe;QACtB,cAAc,CAAC;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,4BAA4B,EAAE,+BAA+B,CAAC;gBAC5D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC;SACH,CAAC,CAAC;IACL,OAAO;QACL,GAAG,MAAM;QACT,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,aAAa,EAAE;QAClD,YAAY;QACZ,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAmC,EACnC,QAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,eAAgB,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,gEAAgE;YAChE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqB;IAErB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAa,CAAC,IAAI,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,YAAa,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/audit/orchestrator/nextStep.d.ts

@@ -1,3 +1,4 @@
+import { type FrictionTriageDecision } from "audit-tools/shared";
 import type { ArtifactBundle } from "../io/artifacts.js";
 import type { AuditObligation, AuditState } from "../types/auditState.js";
 export interface NextStepDecision {
@@ -15,35 +16,16 @@ export declare const FRICTION_CAPTURE_OBLIGATION_ID = "friction_capture_current"
 export declare const PRIORITY: string[];
 export declare function findObligation(obligations: AuditObligation[]): AuditObligation | undefined;
 export declare function decideNextStep(bundle: ArtifactBundle): NextStepDecision;
-/** The terminal friction-capture close-out decision for the audit half. */
-export interface AuditFrictionCloseoutDecision {
-    /**
-     * "capture" → the close-out must fire this pass (a friction step is emitted and a
-     * degrade-clean record persisted). "captured" → already recorded for this run_id;
-     * the close-out is satisfied and the run proceeds to its complete/present terminal.
-     */
-    action: "capture" | "captured";
-    /** The run_id-keyed friction record path (always set, for the handoff pointer). */
-    recordPath: string;
-}
 /**
- * Resolve (and, on first fire, satisfy) the terminal friction-capture close-out for
- * the audit half. This is the audit analog of remediate-code's friction gate in
- * `handleComplete`:
- *
- *  - DETERMINISTIC: keyed only off the on-disk record at `(artifactsDir, runId)` via
- *    the SINGLE shared helper — never host discretion or a bundle flag.
- *  - DEGRADE-CLEANLY: on first fire it persists a zero-friction record up front, so
- *    the close-out is immediately satisfiable and can NEVER block completion.
- *  - NEVER RE-LOOP: once a record exists, returns "captured" and the run proceeds —
- *    the close-out fires at most once per run.
- *  - PARITY: identical shape + persist helper to the remediate side (single-sourced
- *    in `audit-tools/shared`), so the two halves cannot drift.
- *  - NEVER couples to any repo's backlog doc — the record lives under the run's own
- *    artifacts dir.
- *
- * Returns "capture" the first time (the host should be prompted to optionally enrich
- * the persisted record), "captured" thereafter.
+ * The terminal friction-TRIAGE close-out for the audit half. Thin delegation to the
+ * single-sourced `decideFrictionTriage` (`audit-tools/shared`) so the triage shape,
+ * disposition vocabulary, blocking semantics, and close-out logic cannot drift from
+ * the remediate half. Drops the former false-green (an empty up-front record no
+ * longer satisfies): the close-out blocks ("dispose") until every captured
+ * mechanical event AND every surfaced agent-feedback reflection carries a
+ * disposition; an empty set (zero events AND zero reflections) is trivially
+ * "disposed". Keyed only off `(artifactsDir, runId)`; never coupled to any repo's
+ * backlog doc.
  */
-export declare function decideAuditFrictionCloseout(artifactsDir: string, runId: string): Promise<AuditFrictionCloseoutDecision>;
+export declare function decideAuditFrictionCloseout(artifactsDir: string, runId: string): Promise<FrictionTriageDecision>;
 //# sourceMappingURL=nextStep.d.ts.map

package/dist/audit/orchestrator/nextStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE,eAAO,MAAM,QAAQ,EAAE,MAAM,EAwB5B,CAAC;AAMF,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAAE,GAC7B,eAAe,GAAG,SAAS,CAE7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAqCvE;AAED,2EAA2E;AAC3E,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IAC/B,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,6BAA6B,CAAC,CAYxC"}
+{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE,eAAO,MAAM,QAAQ,EAAE,MAAM,EAwB5B,CAAC;AAMF,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAAE,GAC7B,eAAe,GAAG,SAAS,CAE7B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAqCvE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}