audit-tools 0.32.19 → 0.32.22

package/dist/shared/types/intentCheckpoint.js

@@ -132,6 +132,17 @@ export const IntentCheckpointSchema = z
         goal_graph: GoalGraphSchema.optional(),
         charters: z.array(CharterSchema).optional(),
         ceiling: CeilingSchema.optional(),
+        /**
+         * The ATTENTION dial (Phase D control surface, currency #3) — how much the
+         * user will converse to align the charters: how many VOI-ranked
+         * charter-clarification questions they answer this round. `0` is the
+         * autonomous mode (every charter-delta becomes a written finding, nothing
+         * interactive); a finite N takes the top-N of the VOI queue; `"all"` takes
+         * every interactive question. Attended and unattended are two settings of
+         * ONE dial, not a forked path. Optional + additive; defaults to `0`
+         * (conversation-first: no human loop unless the user opts in).
+         */
+        attention: z.union([z.number().int().min(0), z.literal("all")]).optional(),
     })
         .strict()
         .optional(),

package/dist/shared/types/intentCheckpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;;WAWG;QACH,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;;OAWG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;;WAWG;QACH,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC;;;;;;;;;WASG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/shared/validation/charterGate.d.ts

@@ -1,4 +1,4 @@
-import type { Charter, CharterDelta } from "../types/charter.js";
+import type { Charter, CharterDelta, CharterClarificationRequest } from "../types/charter.js";
 /**
  * The True-charter gate: a `true` charter is nominatable-never-assertable and
  * falsifiable-or-drop. It survives ONLY if it names BOTH a concrete alternative and
@@ -35,4 +35,23 @@ export declare function charterReviewDisposition(charter: Charter): "opine" | "f
  * of those kinds; a low-confidence charter of a referenced kind trips the downgrade.
  */
 export declare function gateCharterDelta(delta: CharterDelta, charters: Charter[]): CharterDelta;
+/**
+ * The blast-radius RISK GATE (Phase D; design §"Blast radius — the ranking and the
+ * risk gate"). Blast radius is simultaneously priority (high-blast = high-value)
+ * AND risk: acting on a WRONG high-blast finding is catastrophic, so it must clear
+ * a MUCH higher bar of independent adversarial refutation before it is actionable.
+ * This gate is the deterministic side of that bar: a question whose blast radius is
+ * at/above `highBlastThreshold` may only reach the interactive human channel if it
+ * has cleared `requiredRefutations` rounds of independent refutation; otherwise it
+ * is downgraded to `finding_only` (written as a lead, never asked interactively).
+ * Below the threshold, a question is interactive without the extra bar.
+ *
+ * Pure + deterministic: same request + same observed refutation count always
+ * yields the same disposition. `observedRefutations` is supplied by the caller (the
+ * intensity dial's adversarial rounds); the gate never runs the refutation itself.
+ */
+export declare function riskGateClarification(request: CharterClarificationRequest, observedRefutations: number, opts: {
+    highBlastThreshold: number;
+    requiredRefutations: number;
+}): CharterClarificationRequest["disposition"];
 //# sourceMappingURL=charterGate.d.ts.map

package/dist/shared/validation/charterGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"charterGate.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/charterGate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG;IACzD,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD,CA0BA;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,GAAG,gBAAgB,CAE5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,OAAO,EAAE,GAClB,YAAY,CAWd"}
+{"version":3,"file":"charterGate.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/charterGate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,2BAA2B,EAC5B,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG;IACzD,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD,CA0BA;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,GAAG,gBAAgB,CAE5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,OAAO,EAAE,GAClB,YAAY,CAWd;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,2BAA2B,EACpC,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAChE,2BAA2B,CAAC,aAAa,CAAC,CAM5C"}

package/dist/shared/validation/charterGate.js

@@ -70,4 +70,27 @@ export function gateCharterDelta(delta, charters) {
     }
     return delta;
 }
+/**
+ * The blast-radius RISK GATE (Phase D; design §"Blast radius — the ranking and the
+ * risk gate"). Blast radius is simultaneously priority (high-blast = high-value)
+ * AND risk: acting on a WRONG high-blast finding is catastrophic, so it must clear
+ * a MUCH higher bar of independent adversarial refutation before it is actionable.
+ * This gate is the deterministic side of that bar: a question whose blast radius is
+ * at/above `highBlastThreshold` may only reach the interactive human channel if it
+ * has cleared `requiredRefutations` rounds of independent refutation; otherwise it
+ * is downgraded to `finding_only` (written as a lead, never asked interactively).
+ * Below the threshold, a question is interactive without the extra bar.
+ *
+ * Pure + deterministic: same request + same observed refutation count always
+ * yields the same disposition. `observedRefutations` is supplied by the caller (the
+ * intensity dial's adversarial rounds); the gate never runs the refutation itself.
+ */
+export function riskGateClarification(request, observedRefutations, opts) {
+    const isHighBlast = request.value.blast_radius >= opts.highBlastThreshold;
+    if (!isHighBlast)
+        return "interactive";
+    return observedRefutations >= opts.requiredRefutations
+        ? "interactive"
+        : "finding_only";
+}
 //# sourceMappingURL=charterGate.js.map

package/dist/shared/validation/charterGate.js.map

@@ -1 +1 @@
-{"version":3,"file":"charterGate.js","sourceRoot":"","sources":["../../../src/shared/validation/charterGate.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mFAAmF;AACnF,mFAAmF;AACnF,oFAAoF;AACpF,gFAAgF;AAIhF;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmB;IAItD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAkD,EAAE,CAAC;IAClE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG;gBACd,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;gBAC/C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;aAClC;iBACE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;iBACtC,IAAI,CAAC,KAAK,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,6CAA6C,OAAO,yDAAyD;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgB;IAEhB,OAAO,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAmB,EACnB,QAAmB;IAEnB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CACV,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,wBAAwB,CAAC,OAAO,CAAC,KAAK,gBAAgB,CACzD,CAAC;IACF,IAAI,gBAAgB,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"charterGate.js","sourceRoot":"","sources":["../../../src/shared/validation/charterGate.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mFAAmF;AACnF,mFAAmF;AACnF,oFAAoF;AACpF,gFAAgF;AAQhF;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmB;IAItD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAkD,EAAE,CAAC;IAClE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG;gBACd,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;gBAC/C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;aAClC;iBACE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;iBACtC,IAAI,CAAC,KAAK,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,6CAA6C,OAAO,yDAAyD;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgB;IAEhB,OAAO,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;AACnE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAmB,EACnB,QAAmB;IAEnB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CACV,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,wBAAwB,CAAC,OAAO,CAAC,KAAK,gBAAgB,CACzD,CAAC;IACF,IAAI,gBAAgB,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAoC,EACpC,mBAA2B,EAC3B,IAAiE;IAEjE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,kBAAkB,CAAC;IAC1E,IAAI,CAAC,WAAW;QAAE,OAAO,aAAa,CAAC;IACvC,OAAO,mBAAmB,IAAI,IAAI,CAAC,mBAAmB;QACpD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,cAAc,CAAC;AACrB,CAAC"}

package/docs/audit-pkg/contracts.md

@@ -57,7 +57,7 @@ audit-code validate-results --results /path/to/results.json
 ## Artifact bundle
 
 The backend stores resumable artifacts under `.audit-tools/audit/`. A
-non-exhaustive sample; the complete registry-backed list (all 32 entries) lives
+non-exhaustive sample; the complete registry-backed list lives
 in [`spec/audit/artifact-contract.md`](../../spec/audit/artifact-contract.md):
 
 - `repo_manifest.json`

package/docs/audit-pkg/development.md

@@ -40,13 +40,14 @@ workflow semantics.
 
 The system separates deterministic extraction from bounded LLM judgment:
 
-1. intake and file disposition
-2. surface, flow, graph, unit, risk, and coverage artifacts
-3. audit task planning
-4. review packet construction
-5. semantic review through the active conversation or fallback provider bridge
-6. result ingestion, selective deepening, runtime validation, and synthesis
-7. final `audit-report.md`
+1. a one-time provider-confirmation gate (discover, cost-order, and confirm the provider pool)
+2. intake and file disposition
+3. surface, flow, graph, unit, risk, and coverage artifacts
+4. audit task planning
+5. review packet construction
+6. semantic review through the active conversation or fallback provider bridge
+7. result ingestion, selective deepening, runtime validation, and synthesis
+8. final `audit-report.md`
 
 Portability rules:
 

package/docs/audit-pkg/product.md

@@ -38,12 +38,15 @@ The intended workflow is:
 
 1. The user invokes `/audit-code`.
 2. The prompt runs `audit-code ensure --quiet`.
-3. Deterministic backend steps build or refresh artifacts.
-4. The active conversation dispatches bounded review packets when semantic
+3. The conversation confirms (or accepts by default) the discovered provider
+   pool and cost ordering (`provider_confirmation`) — the pipeline's first
+   gated step.
+4. Deterministic backend steps build or refresh artifacts.
+5. The active conversation dispatches bounded review packets when semantic
    judgment is required.
-5. Packet workers submit validated `AuditResult` objects through backend-owned
+6. Packet workers submit validated `AuditResult` objects through backend-owned
    commands.
-6. The backend ingests results, performs selective deepening and runtime
+7. The backend ingests results, performs selective deepening and runtime
    validation when needed, and writes the final `audit-report.md`.
 
 Semantic review belongs to the active host conversation by default. Backend

package/docs/audit-pkg/release.md

@@ -42,11 +42,13 @@ Workflow:
 .github/workflows/publish-package.yml
 ```
 
-The workflow:
+The release gate is split into two parallel jobs — `gate` (`npm run verify:checks`) and `test` (the
+vitest suite, sharded 4 ways) — so publish latency is bounded by the slowest gate job rather than their
+sum. The `publish` job needs both, then:
 
 - requests `id-token: write` for npm OIDC exchange
 - pins the Node and npm versions declared in `.github/workflows/publish-package.yml`
-- runs `npm run verify:release`
+- rebuilds `dist/` for packing (the `gate`/`test` jobs already ran the full verify chain)
 - previews the packed tarball with `npm pack --dry-run`
 - publishes with public access and provenance
 - defaults semver prerelease versions to the `next` dist-tag unless overridden

package/opencode.json

@@ -25,37 +25,53 @@
     },
     "bash": {
       "*": "allow",
-      "audit-code synthesize*": "deny",
-      "*dist*index.js* synthesize*": "deny",
-      "*audit-code.mjs* synthesize*": "deny",
-      "audit-code cleanup*": "deny",
-      "*dist*index.js* cleanup*": "deny",
+      "*audit-code.mjs": "allow",
       "*audit-code.mjs* cleanup*": "deny",
-      "audit-code requeue*": "deny",
-      "*dist*index.js* requeue*": "deny",
+      "*audit-code.mjs* ensure*": "allow",
+      "*audit-code.mjs* ingest-results*": "deny",
+      "*audit-code.mjs* merge-and-ingest*": "allow",
+      "*audit-code.mjs* next-step*": "allow",
+      "*audit-code.mjs* prepare-dispatch*": "allow",
       "*audit-code.mjs* requeue*": "deny",
-      "audit-code ingest-results*": "deny",
+      "*audit-code.mjs* submit-packet*": "allow",
+      "*audit-code.mjs* synthesize*": "deny",
+      "*audit-code.mjs* validate*": "allow",
+      "*audit-code.mjs* worker-run*": "allow",
+      "*dist*index.js* cleanup*": "deny",
       "*dist*index.js* ingest-results*": "deny",
-      "*audit-code.mjs* ingest-results*": "deny",
+      "*dist*index.js* requeue*": "deny",
+      "*dist*index.js* synthesize*": "deny",
+      "*remediate-code.mjs": "allow",
+      "*remediate-code.mjs* ensure*": "allow",
+      "*remediate-code.mjs* merge-document-results*": "allow",
+      "*remediate-code.mjs* merge-implement-results*": "allow",
+      "*remediate-code.mjs* next-step*": "allow",
+      "*remediate-code.mjs* prepare-document-dispatch*": "allow",
+      "*remediate-code.mjs* prepare-implement-dispatch*": "allow",
+      "*remediate-code.mjs* validate-artifacts*": "allow",
+      "Select-String *": "allow",
       "audit-code": "allow",
+      "audit-code cleanup*": "deny",
       "audit-code ensure*": "allow",
-      "*audit-code.mjs* ensure*": "allow",
+      "audit-code ingest-results*": "deny",
+      "audit-code merge-and-ingest*": "allow",
       "audit-code next-step*": "allow",
-      "*audit-code.mjs* next-step*": "allow",
       "audit-code prepare-dispatch*": "allow",
-      "*audit-code.mjs* prepare-dispatch*": "allow",
+      "audit-code requeue*": "deny",
       "audit-code submit-packet*": "allow",
-      "*audit-code.mjs* submit-packet*": "allow",
-      "audit-code merge-and-ingest*": "allow",
-      "*audit-code.mjs* merge-and-ingest*": "allow",
+      "audit-code synthesize*": "deny",
       "audit-code validate*": "allow",
-      "*audit-code.mjs* validate*": "allow",
-      "*audit-code.mjs": "allow",
-      "*audit-code.mjs* worker-run*": "allow",
-      "git status*": "allow",
       "git diff*": "allow",
+      "git status*": "allow",
       "grep *": "allow",
-      "Select-String *": "allow",
+      "remediate-code": "allow",
+      "remediate-code ensure*": "allow",
+      "remediate-code merge-document-results*": "allow",
+      "remediate-code merge-implement-results*": "allow",
+      "remediate-code next-step*": "allow",
+      "remediate-code prepare-document-dispatch*": "allow",
+      "remediate-code prepare-implement-dispatch*": "allow",
+      "remediate-code validate-artifacts*": "allow",
       "rm *": "deny"
     }
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.32.19",
+  "version": "0.32.22",
   "private": false,
   "license": "ISC",
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",

package/scripts/postinstall.mjs

@@ -13,7 +13,7 @@ import { fileURLToPath } from "node:url";
 let failed = false;
 for (const script of ["./audit/postinstall.mjs", "./remediate/postinstall.mjs"]) {
   const scriptPath = fileURLToPath(new URL(script, import.meta.url));
-  const result = spawnSync(process.execPath, [scriptPath], { stdio: "inherit" });
+  const result = spawnSync(process.execPath, [scriptPath], { stdio: "inherit", windowsHide: true });
   if (result.error) {
     console.warn(`[audit-tools] postinstall: ${script} could not run (${result.error.message}).`);
     failed = true;
@@ -85,6 +85,7 @@ function runGhRepoVisibility(repoRoot) {
       cwd: repoRoot,
       encoding: "utf8",
       shell: process.platform === "win32",
+      windowsHide: true,
     });
     if (result.error || (result.status ?? 0) !== 0) return null;
     return typeof result.stdout === "string" ? result.stdout : null;

package/wrapper/audit-code-wrapper-opencode.mjs

@@ -4,6 +4,7 @@
 let mergeOpenCodeAgentPermissionRule;
 let withoutOpenCodeWildcard;
 let migrateOpenCodeGlobalExternalDirectory;
+let composeOpenCodeBashCeiling;
 export let sharedOpenCodePermissions = false;
 
 try {
@@ -11,6 +12,7 @@ try {
   mergeOpenCodeAgentPermissionRule = shared.mergeOpenCodeAgentPermissionRule;
   withoutOpenCodeWildcard = shared.withoutOpenCodeWildcard;
   migrateOpenCodeGlobalExternalDirectory = shared.migrateOpenCodeGlobalExternalDirectory;
+  composeOpenCodeBashCeiling = shared.composeOpenCodeBashCeiling;
   sharedOpenCodePermissions = true;
 } catch {
   // shared not yet built — callers that need merge logic will throw below
@@ -208,6 +210,19 @@ function mergePermissionBlock(existingPermission, generatedPermission) {
   };
 }
 
+// Collect every agent's bash rule set from a merged agent map (in stable,
+// key-sorted order) so the top-level ceiling is a deterministic union over all
+// present agents — auditor, remediator, or any future agent — not just the one
+// this installer owns. This is what makes the two installers mutually
+// key-aware: whichever one runs unions the block the other already wrote.
+function collectAgentBashRuleSets(agentMap) {
+  const agents = objectValue(agentMap);
+  return Object.keys(agents)
+    .sort()
+    .map((name) => objectValue(objectValue(agents[name]).permission).bash)
+    .filter((bash) => bash && typeof bash === 'object' && !Array.isArray(bash));
+}
+
 export function buildMergedOpenCodeProjectConfig(existing, root) {
   if (!sharedOpenCodePermissions) {
     throw new Error(
@@ -218,22 +233,33 @@ export function buildMergedOpenCodeProjectConfig(existing, root) {
   const mergedMcp = objectValue(existing.mcp);
   delete mergedMcp.auditor;
   const existingAuditor = objectValue(objectValue(existing.agent).auditor);
+  const mergedAgent = {
+    ...objectValue(existing.agent),
+    auditor: {
+      ...existingAuditor,
+      ...generated.agent.auditor,
+      permission: mergePermissionBlock(
+        existingAuditor.permission,
+        generated.agent.auditor.permission,
+      ),
+    },
+  };
+  // Top-level permission: non-bash rules keep the agent-scope merge. The
+  // top-level bash is the union ceiling of EVERY final agent's bash block — a
+  // true global privilege ceiling, order-stable and idempotent regardless of
+  // which installer regenerates the file. User-authored top-level bash keys the
+  // union does not manage are preserved (non-clobber).
+  const topPermission = mergePermissionBlock(existing.permission, generated.permission);
+  topPermission.bash = composeOpenCodeBashCeiling(
+    objectValue(existing.permission).bash,
+    collectAgentBashRuleSets(mergedAgent),
+  );
   return {
     ...existing,
     $schema: existing.$schema ?? generated.$schema,
     command: removeManagedOpenCodeCommand(existing.command),
     mcp: mergedMcp,
-    permission: mergePermissionBlock(existing.permission, generated.permission),
-    agent: {
-      ...objectValue(existing.agent),
-      auditor: {
-        ...existingAuditor,
-        ...generated.agent.auditor,
-        permission: mergePermissionBlock(
-          existingAuditor.permission,
-          generated.agent.auditor.permission,
-        ),
-      },
-    },
+    permission: topPermission,
+    agent: mergedAgent,
   };
 }

package/wrapper/remediate-code-wrapper-opencode.mjs

@@ -3,12 +3,14 @@
 // buildMergedOpenCodeProjectConfig throws a clear error in that case.
 let mergeOpenCodeAgentPermissionRule;
 let withoutOpenCodeWildcard;
+let composeOpenCodeBashCeiling;
 export let sharedOpenCodePermissions = false;
 
 try {
   const shared = await import('audit-tools/shared');
   mergeOpenCodeAgentPermissionRule = shared.mergeOpenCodeAgentPermissionRule;
   withoutOpenCodeWildcard = shared.withoutOpenCodeWildcard;
+  composeOpenCodeBashCeiling = shared.composeOpenCodeBashCeiling;
   sharedOpenCodePermissions = true;
 } catch {
   // shared not yet built — callers that need merge logic will throw below
@@ -170,6 +172,19 @@ function mergePermissionBlock(existingPermission, generatedPermission) {
   };
 }
 
+// Collect every agent's bash rule set from a merged agent map (in stable,
+// key-sorted order) so the top-level ceiling is a deterministic union over all
+// present agents — auditor, remediator, or any future agent — not just the one
+// this installer owns. This is what makes the two installers mutually
+// key-aware: whichever one runs unions the block the other already wrote.
+function collectAgentBashRuleSets(agentMap) {
+  const agents = objectValue(agentMap);
+  return Object.keys(agents)
+    .sort()
+    .map((name) => objectValue(objectValue(agents[name]).permission).bash)
+    .filter((bash) => bash && typeof bash === 'object' && !Array.isArray(bash));
+}
+
 export function buildMergedOpenCodeProjectConfig(existing, root) {
   if (!sharedOpenCodePermissions) {
     throw new Error(
@@ -180,22 +195,33 @@ export function buildMergedOpenCodeProjectConfig(existing, root) {
   const mergedMcp = objectValue(existing.mcp);
   delete mergedMcp.remediator;
   const existingRemediator = objectValue(objectValue(existing.agent).remediator);
+  const mergedAgent = {
+    ...objectValue(existing.agent),
+    remediator: {
+      ...existingRemediator,
+      ...generated.agent.remediator,
+      permission: mergePermissionBlock(
+        existingRemediator.permission,
+        generated.agent.remediator.permission,
+      ),
+    },
+  };
+  // Top-level permission: non-bash rules keep the agent-scope merge. The
+  // top-level bash is the union ceiling of EVERY final agent's bash block — a
+  // true global privilege ceiling, order-stable and idempotent regardless of
+  // which installer regenerates the file. User-authored top-level bash keys the
+  // union does not manage are preserved (non-clobber).
+  const topPermission = mergePermissionBlock(existing.permission, generated.permission);
+  topPermission.bash = composeOpenCodeBashCeiling(
+    objectValue(existing.permission).bash,
+    collectAgentBashRuleSets(mergedAgent),
+  );
   return {
     ...existing,
     $schema: existing.$schema ?? generated.$schema,
     command: removeManagedOpenCodeCommand(existing.command),
     mcp: mergedMcp,
-    permission: mergePermissionBlock(existing.permission, generated.permission),
-    agent: {
-      ...objectValue(existing.agent),
-      remediator: {
-        ...existingRemediator,
-        ...generated.agent.remediator,
-        permission: mergePermissionBlock(
-          existingRemediator.permission,
-          generated.agent.remediator.permission,
-        ),
-      },
-    },
+    permission: topPermission,
+    agent: mergedAgent,
   };
 }