audit-tools 0.32.58 → 0.32.59

package/dist/remediate/steps/leanFastPath.d.ts

@@ -1,32 +0,0 @@
-import type { Finding } from "audit-tools/shared";
-/** Source tag stamped on a lean-fast-path extracted plan (distinguishes it from `contract_pipeline`). */
-export declare const LEAN_FAST_PATH_SOURCE = "lean_fast_path";
-export declare const LEAN_LIGHT_REVIEW_SCHEMA_VERSION: "remediate-code-lean-light-review/v1alpha1";
-export type LeanLightReviewDisposition = "clear" | "escalate";
-/**
- * Interpret a host-written light-review verdict, fail-safe toward escalation:
- * any malformed / ambiguous verdict, or an `escalate` with no stated concern,
- * routes to the full pipeline. The floor must never silently pass — when in
- * doubt, escalate (a wrong call costs extra pipeline work, never skipped review).
- */
-export declare function interpretLeanLightReviewVerdict(raw: unknown): {
-    disposition: LeanLightReviewDisposition;
-    concerns: string[];
-};
-/** The minimal `extracted-plan.json` shape the lean path emits. */
-export interface LeanExtractedPlan {
-    plan_id: string;
-    findings: Finding[];
-    project_type: string;
-    source: typeof LEAN_FAST_PATH_SOURCE;
-    candidate_closing_actions: string[];
-}
-/**
- * Build the lean extracted plan from the approved findings. Blocks are
- * intentionally omitted: `normalizeExtractedPlan` synthesizes one block per
- * finding and `applyPlanPipeline` then merges blocks sharing a file + splits by
- * context budget — the same deterministic block derivation the contract pipeline
- * feeds into, single-sourced rather than reimplemented here.
- */
-export declare function buildLeanExtractedPlan(findings: Finding[], planId: string): LeanExtractedPlan;
-//# sourceMappingURL=leanFastPath.d.ts.map

package/dist/remediate/steps/leanFastPath.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"leanFastPath.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/leanFastPath.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAGlD,yGAAyG;AACzG,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAatD,eAAO,MAAM,gCAAgC,EAC3C,2CAAoD,CAAC;AAEvD,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG;IAC7D,WAAW,EAAE,0BAA0B,CAAC;IACxC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAmCA;AAED,mEAAmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,qBAAqB,CAAC;IACrC,yBAAyB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,MAAM,GACb,iBAAiB,CAQnB"}

package/dist/remediate/steps/leanFastPath.js

@@ -1,103 +0,0 @@
-// The `low`-risk tier's realization: the lean plan builder + the light adversarial
-// review floor.
-//
-// Most remediation runs route through the heavy contract pipeline
-// (goal_normalization → … → critic → judge → implementation_dag), which exists to
-// reason about DESIGN correctness for complex/coupled changes. That is the right
-// machinery for a tangled change — and overkill for a handful of concrete, already-
-// grounded fixes.
-//
-// The decision of WHEN to skip that loop is NOT made here anymore: it is the
-// self-scaling risk dial. A run takes the lean path IFF its effective risk tier is
-// `low` (`src/remediate/riskSignal.ts` — the intake path/breadth/intent signal folded
-// with the finding-level `findingRiskEvidence`). This module owns only the low tier's
-// two mechanisms: the light adversarial review floor (`interpretLeanLightReviewVerdict`
-// — `adversarialDepthForTier("low") === "light"`) and the lean `extracted-plan.json`
-// builder. Folding the old standalone `evaluateFastPath` boolean into the tier killed a
-// second classifier that could DISAGREE with the risk signal (a grounded 5-finding batch
-// touching `src/shared/quota` was "fast-path eligible" AND risk-tier `high`, and bypassed
-// the pipeline anyway).
-//
-// What the lean path KEEPS (the retained safety net): the produced plan rejoins the
-// normal plan→implement→close machinery — deterministic grounding re-pass,
-// applyPlanPipeline's block derivation + affected-file hash snapshot (integrity check),
-// the implement-phase per-node verify-before-merge, and the tool-owned final whole-repo
-// gate. A lean-pathed fix that breaks something fails its verify and routes to triage; it
-// never silently lands. What it DROPS: only the adversarial contract DESIGN loop +
-// obligation derivation — the work that earns its cost on the coupled/systemic changes the
-// tier has already routed away.
-//
-// Pure + deterministic: no IO, no clock, no randomness. The caller supplies the plan id
-// so this stays trivially unit-testable.
-import { isRecord } from "audit-tools/shared";
-/** Source tag stamped on a lean-fast-path extracted plan (distinguishes it from `contract_pipeline`). */
-export const LEAN_FAST_PATH_SOURCE = "lean_fast_path";
-// ── T1 slice 3b — lean-path light adversarial review ────────────────────────────
-//
-// The fast path no longer SKIPS adversarial scrutiny — that would be a
-// zero-scrutiny fork, and remediation legitimately catches upstream (audit)
-// errors. Instead an eligible run runs ONE bounded LIGHT adversarial pass over
-// the approved findings (the floor: light, never off) before the lean plan is
-// trusted. A clear verdict proceeds to the lean plan; a verdict that surfaces a
-// real concern escalates the run (evidence the change is harder than assessed)
-// and routes it to the full contract pipeline. The verdict is a mechanical
-// on-disk gate, NOT a "please self-check" instruction the host might ignore.
-export const LEAN_LIGHT_REVIEW_SCHEMA_VERSION = "remediate-code-lean-light-review/v1alpha1";
-/**
- * Interpret a host-written light-review verdict, fail-safe toward escalation:
- * any malformed / ambiguous verdict, or an `escalate` with no stated concern,
- * routes to the full pipeline. The floor must never silently pass — when in
- * doubt, escalate (a wrong call costs extra pipeline work, never skipped review).
- */
-export function interpretLeanLightReviewVerdict(raw) {
-    if (!isRecord(raw)) {
-        return { disposition: "escalate", concerns: ["unreadable light-review verdict"] };
-    }
-    // Schema-version gate: a verdict that does not carry the exact expected
-    // schema_version is not a trustworthy light-review emission (it may be a stale,
-    // mis-shaped, or wrong-contract artifact). Fail safe toward escalation rather
-    // than trusting an unversioned `clear`.
-    if (raw.schema_version !== LEAN_LIGHT_REVIEW_SCHEMA_VERSION) {
-        return {
-            disposition: "escalate",
-            concerns: [
-                `light-review verdict schema_version must be "${LEAN_LIGHT_REVIEW_SCHEMA_VERSION}"`,
-            ],
-        };
-    }
-    const concerns = Array.isArray(raw.concerns)
-        ? raw.concerns.filter((c) => typeof c === "string")
-        : [];
-    if (raw.disposition === "clear") {
-        return { disposition: "clear", concerns: [] };
-    }
-    if (raw.disposition === "escalate") {
-        return {
-            disposition: "escalate",
-            concerns: concerns.length > 0
-                ? concerns
-                : ["light review escalated without a stated concern"],
-        };
-    }
-    return {
-        disposition: "escalate",
-        concerns: ["light-review verdict missing a valid disposition"],
-    };
-}
-/**
- * Build the lean extracted plan from the approved findings. Blocks are
- * intentionally omitted: `normalizeExtractedPlan` synthesizes one block per
- * finding and `applyPlanPipeline` then merges blocks sharing a file + splits by
- * context budget — the same deterministic block derivation the contract pipeline
- * feeds into, single-sourced rather than reimplemented here.
- */
-export function buildLeanExtractedPlan(findings, planId) {
-    return {
-        plan_id: planId,
-        findings,
-        project_type: "unknown",
-        source: LEAN_FAST_PATH_SOURCE,
-        candidate_closing_actions: ["none"],
-    };
-}
-//# sourceMappingURL=leanFastPath.js.map

package/dist/remediate/steps/leanFastPath.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"leanFastPath.js","sourceRoot":"","sources":["../../../src/remediate/steps/leanFastPath.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,gBAAgB;AAChB,EAAE;AACF,kEAAkE;AAClE,kFAAkF;AAClF,iFAAiF;AACjF,oFAAoF;AACpF,kBAAkB;AAClB,EAAE;AACF,6EAA6E;AAC7E,mFAAmF;AACnF,sFAAsF;AACtF,sFAAsF;AACtF,wFAAwF;AACxF,qFAAqF;AACrF,wFAAwF;AACxF,yFAAyF;AACzF,0FAA0F;AAC1F,wBAAwB;AACxB,EAAE;AACF,oFAAoF;AACpF,2EAA2E;AAC3E,wFAAwF;AACxF,wFAAwF;AACxF,0FAA0F;AAC1F,mFAAmF;AACnF,2FAA2F;AAC3F,gCAAgC;AAChC,EAAE;AACF,wFAAwF;AACxF,yCAAyC;AAGzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,yGAAyG;AACzG,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAEtD,mFAAmF;AACnF,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAE7E,MAAM,CAAC,MAAM,gCAAgC,GAC3C,2CAAoD,CAAC;AAIvD;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAI1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,iCAAiC,CAAC,EAAE,CAAC;IACpF,CAAC;IACD,wEAAwE;IACxE,gFAAgF;IAChF,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,GAAG,CAAC,cAAc,KAAK,gCAAgC,EAAE,CAAC;QAC5D,OAAO;YACL,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE;gBACR,gDAAgD,gCAAgC,GAAG;aACpF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnC,OAAO;YACL,WAAW,EAAE,UAAU;YACvB,QAAQ,EACN,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,CAAC,iDAAiD,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,CAAC,kDAAkD,CAAC;KAC/D,CAAC;AACJ,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAmB,EACnB,MAAc;IAEd,OAAO;QACL,OAAO,EAAE,MAAM;QACf,QAAQ;QACR,YAAY,EAAE,SAAS;QACvB,MAAM,EAAE,qBAAqB;QAC7B,yBAAyB,EAAE,CAAC,MAAM,CAAC;KACpC,CAAC;AACJ,CAAC"}