audit-tools 0.32.44 → 0.32.46

package/dist/shared/countBy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countBy.d.ts","sourceRoot":"","sources":["../../src/shared/countBy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,OAAO,CAAC,CAAC,EACvB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAClB,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,GACzC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUxB"}

package/dist/shared/countBy.js

@@ -0,0 +1,29 @@
+/**
+ * Generic "count items by a derived key" reducer. Four independent
+ * reimplementations of this existed before the extraction: the audit
+ * synthesis summary breakdowns (severity/lens/grounding-status/runtime-status
+ * — src/audit/reporting/synthesis.ts, 4 call sites sharing one local
+ * `countBy`), the shared audit-deliverable renderer's severity/lens
+ * breakdowns (src/shared/reporting/auditDeliverable.ts), remediate's
+ * outcomes-report close-out (src/remediate/phases/close.ts), and remediate's
+ * findings digest (src/remediate/intake.ts). Single-sourced here so a future
+ * fifth breakdown doesn't reimplement it a fifth time.
+ *
+ * A `selectKey` returning `undefined` or `""` skips the item — it is never
+ * counted under an empty-string bucket. This matches the original
+ * synthesis.ts behavior (its `if (!key) continue;` guard), which some
+ * consumers rely on (e.g. the grounding-status breakdown, where most findings
+ * have no grounding verdict at all).
+ */
+export function countBy(items, selectKey) {
+    const breakdown = {};
+    for (const item of items) {
+        const key = selectKey(item);
+        if (!key) {
+            continue;
+        }
+        breakdown[key] = (breakdown[key] ?? 0) + 1;
+    }
+    return breakdown;
+}
+//# sourceMappingURL=countBy.js.map

package/dist/shared/countBy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"countBy.js","sourceRoot":"","sources":["../../src/shared/countBy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,OAAO,CACrB,KAAkB,EAClB,SAA0C;IAE1C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/shared/engine/obligationEngine.d.ts

@@ -31,11 +31,11 @@ export declare const ObligationSchema: z.ZodObject<{
     reason: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     id: string;
-    state: "blocked" | "satisfied" | "missing" | "present" | "stale";
+    state: "blocked" | "missing" | "satisfied" | "present" | "stale";
     reason?: string | undefined;
 }, {
     id: string;
-    state: "blocked" | "satisfied" | "missing" | "present" | "stale";
+    state: "blocked" | "missing" | "satisfied" | "present" | "stale";
     reason?: string | undefined;
 }>;
 export type Obligation = z.infer<typeof ObligationSchema>;

package/dist/shared/fileIntegrity.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Generic file-integrity check loop — the common core of audit-code's
+ * `checkFileIntegrity` (flat repo-manifest scope) and remediate-code's
+ * `checkAffectedFileIntegrity` (finding-affected-files scope). Both iterate a
+ * list of records carrying a stored/expected hash, resolve each to an absolute
+ * path, classify it as unchanged / changed / missing / an I/O error, and derive
+ * `is_clean` from the three buckets. What genuinely differs per side — the
+ * record shape, path resolution, how a file/directory is actually hashed, and
+ * the I/O-error reporting format — stays with the caller via the injected
+ * `resolveAbsolute` / `exists` / `hash` hooks; this module owns only the shared
+ * classify-and-bucket loop.
+ */
+export interface FileIntegrityBuckets {
+    changed: string[];
+    missing: string[];
+    ioErrors: string[];
+    isClean: boolean;
+}
+/**
+ * Outcome of hashing one record's resolved path, reported back to the loop:
+ * - `ok` — the file was read; compare `hash` against the record's expected hash.
+ * - `missing` — the path turned out to be absent (e.g. a race between the
+ *   caller's `exists` pre-check and the actual read).
+ * - `io_error` — a real read failure (not "absent"). The caller is responsible
+ *   for reporting/logging it in its own format before returning this outcome.
+ */
+export type FileIntegrityHashOutcome = {
+    kind: "ok";
+    hash: string;
+} | {
+    kind: "missing";
+} | {
+    kind: "io_error";
+};
+export interface FileIntegrityCheckOptions<T> {
+    /** Records to check (already scoped/deduped by the caller). */
+    records: Iterable<T>;
+    /** Display path recorded into the changed/missing/io_errors buckets. */
+    getPath: (record: T) => string;
+    /** The record's stored/expected hash. Records without one are skipped entirely. */
+    getExpectedHash: (record: T) => string | undefined;
+    /** Resolve the record's display path to an absolute filesystem path. */
+    resolveAbsolute: (path: string) => string;
+    /** Synchronous existence check, run before attempting to hash. */
+    exists: (absolutePath: string) => boolean;
+    /** Hash the resolved path, classifying any failure per {@link FileIntegrityHashOutcome}. */
+    hash: (absolutePath: string, record: T) => Promise<FileIntegrityHashOutcome>;
+}
+/**
+ * Iterate `records`, classify each into changed / missing / io_errors against
+ * its expected hash, and derive `isClean`. Ordering follows iteration order of
+ * `records` (callers are responsible for any stable pre-sort/dedup).
+ */
+export declare function checkFileIntegrityRecords<T>(options: FileIntegrityCheckOptions<T>): Promise<FileIntegrityBuckets>;
+//# sourceMappingURL=fileIntegrity.d.ts.map

package/dist/shared/fileIntegrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileIntegrity.d.ts","sourceRoot":"","sources":["../../src/shared/fileIntegrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEzB,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC1C,+DAA+D;IAC/D,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,wEAAwE;IACxE,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,CAAC;IAC/B,mFAAmF;IACnF,eAAe,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD,wEAAwE;IACxE,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1C,kEAAkE;IAClE,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C,4FAA4F;IAC5F,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC9E;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAC/C,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAgC/B"}

package/dist/shared/fileIntegrity.js

@@ -0,0 +1,50 @@
+/**
+ * Generic file-integrity check loop — the common core of audit-code's
+ * `checkFileIntegrity` (flat repo-manifest scope) and remediate-code's
+ * `checkAffectedFileIntegrity` (finding-affected-files scope). Both iterate a
+ * list of records carrying a stored/expected hash, resolve each to an absolute
+ * path, classify it as unchanged / changed / missing / an I/O error, and derive
+ * `is_clean` from the three buckets. What genuinely differs per side — the
+ * record shape, path resolution, how a file/directory is actually hashed, and
+ * the I/O-error reporting format — stays with the caller via the injected
+ * `resolveAbsolute` / `exists` / `hash` hooks; this module owns only the shared
+ * classify-and-bucket loop.
+ */
+/**
+ * Iterate `records`, classify each into changed / missing / io_errors against
+ * its expected hash, and derive `isClean`. Ordering follows iteration order of
+ * `records` (callers are responsible for any stable pre-sort/dedup).
+ */
+export async function checkFileIntegrityRecords(options) {
+    const changed = [];
+    const missing = [];
+    const ioErrors = [];
+    for (const record of options.records) {
+        const expectedHash = options.getExpectedHash(record);
+        if (!expectedHash)
+            continue;
+        const path = options.getPath(record);
+        const absolute = options.resolveAbsolute(path);
+        if (!options.exists(absolute)) {
+            missing.push(path);
+            continue;
+        }
+        const outcome = await options.hash(absolute, record);
+        if (outcome.kind === "missing") {
+            missing.push(path);
+        }
+        else if (outcome.kind === "io_error") {
+            ioErrors.push(path);
+        }
+        else if (outcome.hash !== expectedHash) {
+            changed.push(path);
+        }
+    }
+    return {
+        changed,
+        missing,
+        ioErrors,
+        isClean: changed.length === 0 && missing.length === 0 && ioErrors.length === 0,
+    };
+}
+//# sourceMappingURL=fileIntegrity.js.map

package/dist/shared/fileIntegrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileIntegrity.js","sourceRoot":"","sources":["../../src/shared/fileIntegrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAqCH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAqC;IAErC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/shared/findingSimilarity.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Text/file-similarity primitives for the fuzzy ("similar enough to merge")
+ * dedup tier. Byte-identical copies of these four helpers lived in both
+ * halves of the pipeline — the auditor's same-lens/cross-lens merge passes
+ * (src/audit/reporting/mergeFindings.ts) and the remediator's cross-lens
+ * dedup (src/remediate/dedup/crossLensDedup.ts) — sitting right alongside
+ * the severityRank/confidenceRank/findingIdentityKey imports both already
+ * pulled from `audit-tools/shared`. Single-sourced here so the two fuzzy
+ * layers can never silently drift on what "similar enough" means.
+ *
+ * Deliberately separate from findingIdentitySignature.ts: that module owns
+ * the deterministic EXACT-match identity ladder; this one is the fuzzy layer
+ * consulted only when the exact-match signature does not already collapse
+ * two findings.
+ */
+import type { Finding } from "./types/finding.js";
+/**
+ * Jaccard similarity (0..1) of the whitespace-tokenized, case-folded,
+ * punctuation-stripped word sets of `a` and `b`.
+ */
+export declare function wordJaccard(a: string, b: string): number;
+/** Jaccard overlap (0..1) of two findings' affected-file path sets. */
+export declare function filePathOverlap(a: Finding, b: Finding): number;
+/** A finding's primary (first-listed) affected-file path, or "" when none. */
+export declare function primaryPath(finding: Finding): string;
+//# sourceMappingURL=findingSimilarity.d.ts.map

package/dist/shared/findingSimilarity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findingSimilarity.d.ts","sourceRoot":"","sources":["../../src/shared/findingSimilarity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAYlD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CASxD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,MAAM,CAS9D;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEpD"}

package/dist/shared/findingSimilarity.js

@@ -0,0 +1,54 @@
+/**
+ * Text/file-similarity primitives for the fuzzy ("similar enough to merge")
+ * dedup tier. Byte-identical copies of these four helpers lived in both
+ * halves of the pipeline — the auditor's same-lens/cross-lens merge passes
+ * (src/audit/reporting/mergeFindings.ts) and the remediator's cross-lens
+ * dedup (src/remediate/dedup/crossLensDedup.ts) — sitting right alongside
+ * the severityRank/confidenceRank/findingIdentityKey imports both already
+ * pulled from `audit-tools/shared`. Single-sourced here so the two fuzzy
+ * layers can never silently drift on what "similar enough" means.
+ *
+ * Deliberately separate from findingIdentitySignature.ts: that module owns
+ * the deterministic EXACT-match identity ladder; this one is the fuzzy layer
+ * consulted only when the exact-match signature does not already collapse
+ * two findings.
+ */
+function wordSet(text) {
+    return new Set(text
+        .toLowerCase()
+        .replace(/[^a-z0-9\s]/g, " ")
+        .split(/\s+/)
+        .filter(Boolean));
+}
+/**
+ * Jaccard similarity (0..1) of the whitespace-tokenized, case-folded,
+ * punctuation-stripped word sets of `a` and `b`.
+ */
+export function wordJaccard(a, b) {
+    const sa = wordSet(a);
+    const sb = wordSet(b);
+    let intersection = 0;
+    for (const w of sa) {
+        if (sb.has(w))
+            intersection++;
+    }
+    const union = sa.size + sb.size - intersection;
+    return union === 0 ? 0 : intersection / union;
+}
+/** Jaccard overlap (0..1) of two findings' affected-file path sets. */
+export function filePathOverlap(a, b) {
+    const setA = new Set(a.affected_files.map((f) => f.path));
+    const setB = new Set(b.affected_files.map((f) => f.path));
+    let intersection = 0;
+    for (const path of setA) {
+        if (setB.has(path))
+            intersection++;
+    }
+    const union = setA.size + setB.size - intersection;
+    return union === 0 ? 0 : intersection / union;
+}
+/** A finding's primary (first-listed) affected-file path, or "" when none. */
+export function primaryPath(finding) {
+    return finding.affected_files[0]?.path ?? "";
+}
+//# sourceMappingURL=findingSimilarity.js.map

package/dist/shared/findingSimilarity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findingSimilarity.js","sourceRoot":"","sources":["../../src/shared/findingSimilarity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,YAAY,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,YAAY,CAAC;IAC/C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;AAChD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,CAAU,EAAE,CAAU;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,YAAY,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IACnD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;AAC/C,CAAC"}

package/dist/shared/friction/stepBoundaryCapture.d.ts

@@ -99,4 +99,21 @@ export interface StepBoundaryFriction {
  * retry, re-derive) never double-count the same fact (INV-O1-6).
  */
 export declare function captureStepBoundaryFriction(artifactsDir: string, runId: string, fact: StepBoundaryFriction, tool: FrictionCaptureArtifact["tool"]): Promise<void>;
+/** Reactive cost-drift facts routed through {@link captureCostDriftFriction}. */
+export interface CostDriftInfo {
+    poolId: string;
+    observedCostUsd: number;
+    declaredCostPerMtok: number;
+}
+/**
+ * Route a reactive cost-drift demotion (a dispatch pool declared free —
+ * `cost_per_mtok:0` — that started reporting a positive cost, so the rolling
+ * engine demoted it out of free-first ordering) through the step-boundary
+ * chokepoint as a `declared_cost_drift` fact. Both orchestrators' rolling
+ * dispatch wiring (`onCostDrift`) is byte-identical apart from the trailing
+ * `source` tool tag; this single-sources the eventType/note/severity/area
+ * template so they cannot drift. Fire-and-forget, like the call sites it
+ * replaces — never awaited by the caller.
+ */
+export declare function captureCostDriftFriction(artifactsDir: string, runId: string, info: CostDriftInfo, source: FrictionCaptureArtifact["tool"]): void;
 //# sourceMappingURL=stepBoundaryCapture.d.ts.map

package/dist/shared/friction/stepBoundaryCapture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stepBoundaryCapture.d.ts","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,+BAA+B,GAC/B,iBAAiB,GACjB,qBAAqB,GACrB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAmClB;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,qBAAqB,GAC/B,gBAAgB,CAElB;AAgBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,MAAM,CAIR;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,qBAAqB,CAAC;IACjC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf"}
+{"version":3,"file":"stepBoundaryCapture.d.ts","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,+BAA+B,GAC/B,iBAAiB,GACjB,qBAAqB,GACrB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAmClB;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,qBAAqB,GAC/B,gBAAgB,CAElB;AAgBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,qBAAqB,EAChC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,MAAM,CAIR;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,SAAS,EAAE,qBAAqB,CAAC;IACjC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,GACtC,IAAI,CAgBN"}

package/dist/shared/friction/stepBoundaryCapture.js

@@ -88,4 +88,25 @@ export async function captureStepBoundaryFriction(artifactsDir, runId, fact, too
     };
     await captureFrictionEvent(artifactsDir, runId, event, tool);
 }
+/**
+ * Route a reactive cost-drift demotion (a dispatch pool declared free —
+ * `cost_per_mtok:0` — that started reporting a positive cost, so the rolling
+ * engine demoted it out of free-first ordering) through the step-boundary
+ * chokepoint as a `declared_cost_drift` fact. Both orchestrators' rolling
+ * dispatch wiring (`onCostDrift`) is byte-identical apart from the trailing
+ * `source` tool tag; this single-sources the eventType/note/severity/area
+ * template so they cannot drift. Fire-and-forget, like the call sites it
+ * replaces — never awaited by the caller.
+ */
+export function captureCostDriftFriction(artifactsDir, runId, info, source) {
+    void captureStepBoundaryFriction(artifactsDir, runId, {
+        eventType: "declared_cost_drift",
+        discriminator: info.poolId,
+        note: `pool "${info.poolId}" was declared free (cost_per_mtok=${info.declaredCostPerMtok}) ` +
+            `but reported cost=${info.observedCostUsd} — demoted out of free-first ordering; ` +
+            `reconcile the source's declared cost.`,
+        severity: "medium",
+        area: "dispatch/cost",
+    }, source);
+}
 //# sourceMappingURL=stepBoundaryCapture.js.map

package/dist/shared/friction/stepBoundaryCapture.js.map

@@ -1 +1 @@
-{"version":3,"file":"stepBoundaryCapture.js","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAsB,MAAM,2BAA2B,CAAC;AAqErF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,sBAAsB,GAAqC;IAC/D,YAAY,EAAE,qBAAqB;IACnC,YAAY,EAAE,qBAAqB;IACnC,oBAAoB,EAAE,qBAAqB;IAC3C,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,6BAA6B,EAAE,qBAAqB;IACpD,iBAAiB,EAAE,oBAAoB;IACvC,oBAAoB,EAAE,oBAAoB;IAC1C,eAAe,EAAE,oBAAoB;IACrC,iFAAiF;IACjF,+EAA+E;IAC/E,mBAAmB,EAAE,oBAAoB;CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAgC;IAEhC,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,OAAO,EACP,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAgC,EAChC,KAAa,EACb,aAAqB;IAErB,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,IAAqC;IAErC,MAAM,KAAK,GAAkB;QAC3B,EAAE,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC;QAClE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,gBAAgB,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9D,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,MAAM,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"stepBoundaryCapture.js","sourceRoot":"","sources":["../../../src/shared/friction/stepBoundaryCapture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAsB,MAAM,2BAA2B,CAAC;AAqErF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,sBAAsB,GAAqC;IAC/D,YAAY,EAAE,qBAAqB;IACnC,YAAY,EAAE,qBAAqB;IACnC,oBAAoB,EAAE,qBAAqB;IAC3C,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,6BAA6B,EAAE,qBAAqB;IACpD,iBAAiB,EAAE,oBAAoB;IACvC,oBAAoB,EAAE,oBAAoB;IAC1C,eAAe,EAAE,oBAAoB;IACrC,iFAAiF;IACjF,+EAA+E;IAC/E,mBAAmB,EAAE,oBAAoB;CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAgC;IAEhC,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,OAAO,EACP,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CACxD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAgC,EAChC,KAAa,EACb,aAAqB;IAErB,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa,EACb,IAA0B,EAC1B,IAAqC;IAErC,MAAM,KAAK,GAAkB;QAC3B,EAAE,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC;QAClE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,gBAAgB,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9D,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,MAAM,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,KAAa,EACb,IAAmB,EACnB,MAAuC;IAEvC,KAAK,2BAA2B,CAC9B,YAAY,EACZ,KAAK,EACL;QACE,SAAS,EAAE,qBAAqB;QAChC,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,IAAI,EACF,SAAS,IAAI,CAAC,MAAM,sCAAsC,IAAI,CAAC,mBAAmB,IAAI;YACtF,qBAAqB,IAAI,CAAC,eAAe,yCAAyC;YAClF,uCAAuC;QACzC,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,eAAe;KACtB,EACD,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/shared/git.d.ts

@@ -42,17 +42,40 @@ export interface GitHistory {
     co_change: CoChangePair[];
     churn: ChurnEntry[];
     authorship: AuthorshipEntry[];
+    /**
+     * Count of in-window commits whose file count exceeded
+     * `maxCoChangeFilesPerCommit` and were therefore SKIPPED for co-change pair
+     * expansion (churn/authorship still counted them — only pairing was
+     * skipped). Optional so existing `GitHistory` literals built by other
+     * callers (e.g. the audit extractor's in-scope filter, the no-root
+     * fallback) remain valid without updating — this field is additive.
+     * Absent/`undefined` means "no commit was skipped" (equivalent to `0`).
+     */
+    skipped_cochange_commits?: number;
 }
 export interface MineGitHistoryOptions {
     /** Cap on commits scanned, newest first (bounds cost on large repos). */
     maxCommits?: number;
     /** Minimum shared-commit count for a co-change pair to be reported. */
     minCoChangeCommits?: number;
+    /**
+     * Cap on files touched by a single commit before it is skipped for
+     * co-change pair expansion (bounds the O(files^2) blow-up a single wide
+     * commit — a vendor/format/rename sweep — would otherwise cause). A commit
+     * touching more files than this carries almost no per-pair signal anyway
+     * (any two files it "explains" are also very likely explained by other,
+     * narrower commits), so skipping it loses little while capping cost.
+     */
+    maxCoChangeFilesPerCommit?: number;
 }
 /**
  * Mine deterministic git-history signals from `root`'s commit log:
  *  - **co_change**: file pairs that changed in the same commit, counted across
  *    history (a temporal-coupling signal), filtered by `minCoChangeCommits`.
+ *    A commit touching more than `maxCoChangeFilesPerCommit` files is SKIPPED
+ *    for pair expansion entirely (churn/authorship still see it) — bounds the
+ *    per-commit O(files^2) cost; `skipped_cochange_commits` on the result
+ *    counts how many commits this affected.
  *  - **churn**: per-file commit-touch frequency.
  *  - **authorship**: per-file distinct-author count (a bus-factor signal).
  *

package/dist/shared/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/shared/git.ts"],"names":[],"mappings":"AAmBA,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO/C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAM/D;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAElE;AAED,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAEnE;AA8CD,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,qBAA0B,GAClC,UAAU,CAiFZ;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAazD"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/shared/git.ts"],"names":[],"mappings":"AAmBA,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO/C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAM/D;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAElE;AAED,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAEnE;AA8CD,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAaD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,qBAA0B,GAClC,UAAU,CAgGZ;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAazD"}

package/dist/shared/git.js

@@ -99,10 +99,22 @@ function parseCommitRecords(stdout) {
 }
 const DEFAULT_MAX_COMMITS = 1000;
 const DEFAULT_MIN_CO_CHANGE_COMMITS = 2;
+/**
+ * See `MineGitHistoryOptions.maxCoChangeFilesPerCommit` for rationale. 100 is
+ * generous for ordinary commits (which touch a handful of files) while
+ * cutting off the O(n^2) pair count (100^2 = 10_000 pairs) well before a
+ * repo-wide reformat/vendor-drop commit (which can touch thousands of files,
+ * i.e. millions of pairs) turns co-change mining into a memory/CPU cliff.
+ */
+const DEFAULT_MAX_COCHANGE_FILES_PER_COMMIT = 100;
 /**
  * Mine deterministic git-history signals from `root`'s commit log:
  *  - **co_change**: file pairs that changed in the same commit, counted across
  *    history (a temporal-coupling signal), filtered by `minCoChangeCommits`.
+ *    A commit touching more than `maxCoChangeFilesPerCommit` files is SKIPPED
+ *    for pair expansion entirely (churn/authorship still see it) — bounds the
+ *    per-commit O(files^2) cost; `skipped_cochange_commits` on the result
+ *    counts how many commits this affected.
  *  - **churn**: per-file commit-touch frequency.
  *  - **authorship**: per-file distinct-author count (a bus-factor signal).
  *
@@ -117,6 +129,7 @@ export function mineGitHistory(root, options = {}) {
         return empty;
     const maxCommits = options.maxCommits ?? DEFAULT_MAX_COMMITS;
     const minCoChange = options.minCoChangeCommits ?? DEFAULT_MIN_CO_CHANGE_COMMITS;
+    const maxCoChangeFiles = options.maxCoChangeFilesPerCommit ?? DEFAULT_MAX_COCHANGE_FILES_PER_COMMIT;
     const result = runTracked([
         "git",
         "log",
@@ -139,6 +152,7 @@ export function mineGitHistory(root, options = {}) {
     const churn = new Map();
     const authors = new Map();
     const coChange = new Map();
+    let skippedCoChangeCommits = 0;
     for (const record of records) {
         // Dedup files within a commit so a rename/edit pair cannot double-count.
         const files = [...new Set(record.files)].sort();
@@ -152,6 +166,15 @@ export function mineGitHistory(root, options = {}) {
             if (record.author.length > 0)
                 authorSet.add(record.author);
         }
+        // Pair expansion is O(files^2); a commit touching more than
+        // maxCoChangeFiles is SKIPPED ENTIRELY for pairing (never a truncated
+        // subset — a biased subset of an oversized commit's files would produce
+        // arbitrary, order-dependent pairs, which is worse than reporting none).
+        // Churn/authorship above are unaffected: every touched file still counts.
+        if (files.length > maxCoChangeFiles) {
+            skippedCoChangeCommits += 1;
+            continue;
+        }
         for (let i = 0; i < files.length; i += 1) {
             for (let j = i + 1; j < files.length; j += 1) {
                 // a < b guaranteed by the sort above, so the pair key is canonical.
@@ -179,6 +202,9 @@ export function mineGitHistory(root, options = {}) {
         co_change: coChangeList,
         churn: churnList,
         authorship: authorshipList,
+        ...(skippedCoChangeCommits > 0
+            ? { skipped_cochange_commits: skippedCoChangeCommits }
+            : {}),
     };
 }
 /** Working-tree changes vs HEAD plus untracked (non-ignored) files. */

package/dist/shared/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/shared/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,8DAA8D;AAE9D,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE;QACvE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,MAAM,GAAG,UAAU,CACvB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAC9D,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAChC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;QACtD,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa;IACtD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAaD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,OAAO,GAA2B,IAAI,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,kCAAkC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAmCD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAe,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,WAAW,GACf,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,CACvB;QACE,KAAK;QACL,KAAK;QACL,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,eAAe;QACf,eAAe,UAAU,EAAE;QAC3B,aAAa;QACb,aAAa;QACb,oBAAoB;KACrB,EACD,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAChC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,yEAAyE;QACzE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,oEAAoE;gBACpE,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzE,MAAM,cAAc,GAAsB,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAmB,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;SACzD,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,WAAW,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE;QACtB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC,CAAC;SACD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;QACrB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CACzB,CAAC;IAEJ,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,cAAc;KAC3B,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;QAChC,UAAU;QACV,UAAU;QACV,oBAAoB;KACrB,CAAC,EAAE,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/shared/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,8DAA8D;AAE9D,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAc;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE;QACvE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,MAAM,GAAG,UAAU,CACvB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAC9D,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAChC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;QACtD,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa;IACtD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAaD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,OAAO,GAA2B,IAAI,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,kCAAkC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAsDD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC;;;;;;GAMG;AACH,MAAM,qCAAqC,GAAG,GAAG,CAAC;AAElD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAe,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,WAAW,GACf,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IAC9D,MAAM,gBAAgB,GACpB,OAAO,CAAC,yBAAyB,IAAI,qCAAqC,CAAC;IAE7E,MAAM,MAAM,GAAG,UAAU,CACvB;QACE,KAAK;QACL,KAAK;QACL,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,eAAe;QACf,eAAe,UAAU,EAAE;QAC3B,aAAa;QACb,aAAa;QACb,oBAAoB;KACrB,EACD,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAChC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,yEAAyE;QACzE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,4DAA4D;QAC5D,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACpC,sBAAsB,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,oEAAoE;gBACpE,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiB,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzE,MAAM,cAAc,GAAsB,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzE,MAAM,YAAY,GAAmB,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;SACzD,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,WAAW,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE;QACtB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC,CAAC;SACD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;QACrB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CACzB,CAAC;IAEJ,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,cAAc;QAC1B,GAAG,CAAC,sBAAsB,GAAG,CAAC;YAC5B,CAAC,CAAC,EAAE,wBAAwB,EAAE,sBAAsB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;QAChC,UAAU;QACV,UAAU;QACV,oBAAoB;KACrB,CAAC,EAAE,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/shared/index.d.ts

@@ -49,7 +49,7 @@ export { detectRepoConventions, formatRepoConventions, } from "./tooling/repoCon
 export type { StepStatus, DispatchModelTier, DispatchModelHint, } from "./types/stepContract.js";
 export { StepStatusSchema, DispatchModelTierSchema, } from "./types/stepContract.js";
 export type { ProviderName, ResolvedProviderName, SessionUiMode, SubprocessTemplateConfig, ClaudeCodeConfig, CodexConfig, OpenCodeConfig, OpenAiCompatibleConfig, DispatchableSource, DispatchableSourceProvider, VSCodeTaskConfig, AntigravityConfig, BlockQuotaConfig, QuotaModelLimits, QuotaConfig, ObservabilityConfig, SynthesisConfig, GraphConfig, DispatchRoutingTiers, DispatchConfig, DesignReviewConfig, AnalyzerSetting, SessionConfig, } from "./types/sessionConfig.js";
-export { PROVIDER_NAMES, SESSION_UI_MODES, PROVIDER_SECTION_KEYS, DISPATCHABLE_SOURCE_PROVIDERS, ANALYZER_SETTINGS, AnalyzerSettingSchema, resolveHostDispatchCapability, } from "./types/sessionConfig.js";
+export { PROVIDER_NAMES, SESSION_UI_MODES, PROVIDER_SECTION_KEYS, DISPATCHABLE_SOURCE_PROVIDERS, ANALYZER_SETTINGS, AnalyzerSettingSchema, resolveHostDispatchCapability, resolveRollingEngineFlag, assertHostProviderName, } from "./types/sessionConfig.js";
 export { AUDITOR_REPORT_MARKER } from "./contracts.js";
 export { OPENCODE_MANAGED_BROAD_VALUE, withoutOpenCodeWildcard, mergeOpenCodeAgentPermissionRule, mergeOpenCodeGlobalPermissionRule, migrateOpenCodeGlobalExternalDirectory, unionOpenCodeBashCeiling, composeOpenCodeBashCeiling, verifyOpenCodeBashCeiling, } from "./opencodePermissions.js";
 export type { OpenCodeCeilingViolation } from "./opencodePermissions.js";
@@ -60,12 +60,17 @@ export type { AuditDeliverablePair } from "./reporting/auditDeliverable.js";
 export { buildAuditFindingsDeliverable, renderAuditDeliverableMarkdown, buildAuditDeliverablePair, } from "./reporting/auditDeliverable.js";
 export { AGENT_FEEDBACK_FILENAME, parseReflectionsNdjson, aggregateReflections, renderProcessFeedbackSection, ReflectionClaritySchema, ReflectionSeveritySchema, AgentReflectionSchema, } from "./agentReflections.js";
 export { DEFAULT_CONTEXT_TOKENS, DEFAULT_OUTPUT_TOKENS, BLOCK_SAFETY_MARGIN, BYTES_PER_TOKEN, ESTIMATED_TOKENS_PER_LINE, ESTIMATED_PROMPT_OVERHEAD_TOKENS, ESTIMATED_ITEM_OVERHEAD_TOKENS, estimateTokensFromBytes, resolveContextBudget, } from "./tokens.js";
+export { countBy } from "./countBy.js";
+export { chunkByBudget } from "./chunkByBudget.js";
 export { mapWithConcurrency } from "./concurrency.js";
 export { mintUniqueId } from "./ids.js";
 export type { FindingIdentityFields } from "./findingIdentitySignature.js";
 export { normalizeAnchorPath, normalizeTitle, findingIdentitySignature, findingIdentityFields, findingIdentityKey, } from "./findingIdentitySignature.js";
+export { wordJaccard, filePathOverlap, primaryPath, } from "./findingSimilarity.js";
 export type { HashContentOptions } from "./hash.js";
 export { hashContent } from "./hash.js";
+export type { FileIntegrityBuckets, FileIntegrityHashOutcome, FileIntegrityCheckOptions, } from "./fileIntegrity.js";
+export { checkFileIntegrityRecords } from "./fileIntegrity.js";
 export { stableStringify } from "./stableStringify.js";
 export type { IdentityKeyInput, TaskContentSignatureInput, ResultEmitSource, ResultContentDiscriminatorInput, IdempotencyKeyInput, ContentKeyInput, } from "./contentKey.js";
 export { buildTaskContentSignature, buildResultContentDiscriminator, resultDiscriminatorForEmit, canonicalSplitDiscriminator, splitDiscriminatorFromTaskId, identityKey, idempotencyKey, contentKey, newInstanceId, } from "./contentKey.js";
@@ -84,14 +89,16 @@ export type { GitHistory, CoChangePair, ChurnEntry, AuthorshipEntry, MineGitHist
 export type { RunLogEvent, RunLoggerOptions } from "./observability/runLog.js";
 export { RunLogger } from "./observability/runLog.js";
 export { isFileMissingError, isTransientFsError, withFsRetry, readJsonFile, writeJsonFile, readJsonStringScalar, readJsonStringScalarChunks, appendNdjsonFile, readNdjsonFile, readOptionalJsonFile, readOptionalNdjsonFile, writeNdjsonFile, readOptionalTextFile, writeTextFile, } from "./io/json.js";
+export type { LockedJsonStore, LockedJsonStoreOptions, } from "./io/lockedJsonStore.js";
+export { createLockedJsonStore, SKIP_WRITE, LOCKED_JSON_STORE_TIMEOUT_MS, } from "./io/lockedJsonStore.js";
 export { auditToolsDir, auditArtifactsDir, remediationArtifactsDir, stepsDir, artifactTreeLockPath, nodeClaimsPath, taskClaimsPath, incomingDir, outputDirFor, auditReportPath, auditFindingsPath, promotedAuditReportPath, promotedAuditFindingsPath, AUDIT_REPORT_FILENAME, AUDIT_FINDINGS_FILENAME, REMEDIATION_REPORT_FILENAME, REMEDIATION_OUTCOMES_FILENAME, } from "./io/auditToolsPaths.js";
 export { resolveRepoRoot, climbOutOfAuditTools } from "./io/repoRoot.js";
 export type { FrictionItem, FrictionCaptureArtifact, } from "./io/frictionCapture.js";
 export { FRICTION_CAPTURE_SCHEMA_VERSION, FRICTION_CAPTURE_DIRNAME, frictionCaptureDir, frictionCapturePath, frictionCaptured, persistFrictionCapture, sanitizeRunId, } from "./io/frictionCapture.js";
 export type { FrictionEvent, CapturedFrictionItem, } from "./friction/captureFrictionEvent.js";
 export { captureFrictionEvent } from "./friction/captureFrictionEvent.js";
-export type { StepBoundaryEventType, StepBoundaryFriction, } from "./friction/stepBoundaryCapture.js";
-export { captureStepBoundaryFriction, stepBoundaryEventId, } from "./friction/stepBoundaryCapture.js";
+export type { StepBoundaryEventType, StepBoundaryFriction, CostDriftInfo, } from "./friction/stepBoundaryCapture.js";
+export { captureStepBoundaryFriction, stepBoundaryEventId, captureCostDriftFriction, } from "./friction/stepBoundaryCapture.js";
 export type { FrictionDisposition, FrictionDispositionRecord, TriageSubject, FrictionTriageDecision, FrictionOpenObservation, FrictionCategoryAttestation, FrictionCategory, TriagedFrictionArtifact, } from "./friction/triage.js";
 export { FRICTION_DISPOSITIONS, FRICTION_NAMED_DIMENSIONS, FRICTION_CATEGORIES, FRICTION_CATEGORY_LABELS, isFrictionCategory, isFrictionDisposition, reflectionKey, frictionLockPath, collectTriageSubjects, decideFrictionTriage, buildFrictionTriageBlock, appendFrictionUnderLock, recordFrictionDisposition, } from "./friction/triage.js";
 export type { RepairValidationError, RepairValidationResult, RepairCoercion, RepairCoercionResult, RepairPatcher, RepairContract, RepairStatus, RepairStage, RepairRedispatch, RepairOutcome, RunEmitValidateRepairOptions, } from "./repair/index.js";
@@ -125,7 +132,7 @@ export { OpenAiCompatibleProvider, OPENAI_COMPATIBLE_PROVIDER_NAME, parseJsonLoo
 export type { OpenAiCompatibleProviderDeps } from "./providers/openAiCompatibleProvider.js";
 export type { ClaudeCodeProviderOptions } from "./providers/claudeCodeProvider.js";
 export { ClaudeCodeProvider, CLAUDE_CODE_PROVIDER_NAME, buildActiveClaudeCodeSessionMessage, } from "./providers/claudeCodeProvider.js";
-export { OpenCodeProvider, OPENCODE_PROVIDER_NAME, } from "./providers/opencodeProvider.js";
+export { OpenCodeProvider, OPENCODE_PROVIDER_NAME, createOpenCodeProvider, } from "./providers/opencodeProvider.js";
 export type { AutoProviderContext, FreshSessionProviderDeps, } from "./providers/providerFactory.js";
 export { resolveFreshSessionProviderName, createFreshSessionProvider, hasConfiguredOpenAiCompatible, discoverOutputConstraintCapability, } from "./providers/providerFactory.js";
 export type { CapabilityTier, DiscoveredProvider, ConfirmedProviderPool, } from "./providers/providerConfirmation.js";