audit-tools 0.32.6 → 0.32.8

package/dist/shared/types/sessionConfig.d.ts

@@ -72,6 +72,18 @@ export interface OpenAiCompatibleConfig {
      * provider retries once without it, so leaving it on is safe for any endpoint.
      */
     response_format_json?: boolean;
+    /**
+     * Plumb the worker's canonical JSON Schema into the request as a per-field
+     * emit-time constraint (`response_format: {type:"json_schema"}` for OpenAI /
+     * vLLM structured outputs, plus `guided_json` / `nvext.guided_json` for NIM /
+     * vLLM guided decoding) whenever the dispatch site supplies a schema (CE-004
+     * build lever). ON by default (nullish: enabled unless explicitly `false`) — it
+     * is ADDITIVE and degrades cleanly: if the endpoint rejects the schema form
+     * (HTTP 400/422) the provider retries with a plain `json_object`, then without
+     * any `response_format`, so leaving it on is safe for any endpoint. Set `false`
+     * to force the weaker `json_object`-only behavior.
+     */
+    guided_json?: boolean;
     /** Inline current contents of prompt-referenced files so edits are grounded. Default true. */
     include_referenced_files?: boolean;
 }

package/dist/shared/types/sessionConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,eAAO,MAAM,cAAc,qJAUjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,gBAAgB,kCAAmC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACtE,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,eAAO,MAAM,qBAAqB;;;;;;;;CAQxB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gGAMhC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,0BAA0B,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uEAAuE;IACvE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,6DAMpB,CAAC;AACX,eAAO,MAAM,qBAAqB,+DAA4B,CAAC;AAC/D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,kEAAkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mEAAmE;IACnE,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,wBAAwB,CAAC;CACpD"}
+{"version":3,"file":"sessionConfig.d.ts","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,eAAO,MAAM,cAAc,qJAUjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,gBAAgB,kCAAmC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IACtE,sJAAsJ;IACtJ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,eAAO,MAAM,qBAAqB;;;;;;;;CAQxB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,gGAMhC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,0BAA0B,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uEAAuE;IACvE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,6DAMpB,CAAC;AACX,eAAO,MAAM,qBAAqB,+DAA4B,CAAC;AAC/D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,kEAAkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mEAAmE;IACnE,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,wBAAwB,CAAC;CACpD"}

package/dist/shared/types/sessionConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,aAAa;IACb,aAAa;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AA6FjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qBAAqB,EAAE,qBAAqB;IAC5C,aAAa,EAAE,aAAa;IAC5B,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,mBAAmB;IACnB,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuLX;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,WAAW;IACX,WAAW;IACX,MAAM;IACN,MAAM;CACE,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/types/sessionConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM;IACN,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;IACb,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,aAAa;IACb,aAAa;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,CAAU,CAAC;AAyGjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qBAAqB,EAAE,qBAAqB;IAC5C,aAAa,EAAE,aAAa;IAC5B,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,mBAAmB,EAAE,mBAAmB;IACxC,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,mBAAmB;IACnB,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAuLX;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,WAAW;IACX,WAAW;IACX,MAAM;IACN,MAAM;CACE,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC"}

package/docs/audit-pkg/contracts.md

@@ -56,7 +56,9 @@ audit-code validate-results --results /path/to/results.json
 
 ## Artifact bundle
 
-The backend stores resumable artifacts under `.audit-tools/audit/`, including:
+The backend stores resumable artifacts under `.audit-tools/audit/`. A
+non-exhaustive sample; the complete registry-backed list (all 32 entries) lives
+in [`spec/audit/artifact-contract.md`](../../spec/audit/artifact-contract.md):
 
 - `repo_manifest.json`
 - `file_disposition.json`
@@ -116,7 +118,7 @@ artifacts are shaped by:
 Normal packet flow:
 
 ```text
-audit-code next-step --host-can-dispatch-subagents true
+audit-code next-step --host-can-dispatch-subagents
 backend prepares dispatch-plan.json
 conversation launches one worker per dispatch-plan entry
 worker reads entry.prompt_path

package/docs/audit-pkg/development.md

@@ -7,8 +7,9 @@
 - `examples/`: validated artifact examples
 - `skills/audit-code/`: canonical prompt and skill-facing instructions
 - `dispatch/`: packet-dispatch support data
-- `tests/`: Node test suite and regression coverage
-- `dist/`: checked-in compiled runtime used by packaged installs
+- `tests/`: vitest-based test suite and regression coverage
+- `dist/`: build output (gitignored, not checked in) produced by `npm run build` / the `prepack` script;
+  shipped only in the packed npm tarball
 
 ## Agent handoff
 
@@ -102,10 +103,12 @@ ecosystem-specific parser.
 
 Before treating a build as production-ready, verify the full review loop in one
 real host (`prepare-dispatch` → worker reviews each packet → `submit-packet` →
-`merge-and-ingest` → `validate`), then run `npm run verify:release` from a clean
-checkout. On Windows, runtime validation runs package-manager shims (`npm`,
-`npx`, `pnpm`, `yarn`) through the command shell so `.cmd` wrappers execute
-reliably — keep that covered when changing runtime command execution. If the
-final `audit-report.md` cannot be copied into the target repo due to local
-permissions, completion still succeeds and the artifact copy is authoritative.
+`merge-and-ingest` → `validate`), then run the release gate from a clean
+checkout (see [`release.md`](release.md) for what `npm run verify:release`
+covers and when to run it). Keep runtime command execution covered when
+changing it — including the Windows package-manager-shim path (see the Windows
+notes in [`operator-guide.md`](operator-guide.md)). If the
+final `audit-report.md` cannot be promoted from `.audit-tools/audit/` to
+`.audit-tools/audit-report.md` due to local permissions, completion still succeeds and the
+pre-promotion copy under `.audit-tools/audit/` is authoritative.
 </content>

package/docs/audit-pkg/operator-guide.md

@@ -199,9 +199,9 @@ and `yarn` through the Windows command shell automatically. A runtime
 `not_confirmed` result can still be environmental when the target repo command
 starts but cannot write its own build output.
 
-If final report promotion to `<repo-root>/audit-report.md` is blocked by local
-permissions, the audit can still complete. Use the artifact-bundle copy of
-`audit-report.md` and run `audit-code validate`.
+If final report promotion to `.audit-tools/audit-report.md` is blocked by local
+permissions, the audit can still complete. Use the copy at `.audit-tools/audit/audit-report.md`
+and run `audit-code validate`.
 
 Run `audit-code validate` after editing session config so command-template
 issues fail before a long audit run.

package/docs/audit-pkg/product.md

@@ -30,7 +30,7 @@ The supported user-facing surfaces are:
 5. `audit-code install` for explicit repair or force refresh
 6. `audit-code` as the repo-local backend fallback
 
-Anything below `dist/index.js` is backend or development interface.
+Anything below `dist/` is backend or development interface.
 
 ## Product model
 

package/docs/audit-pkg/release.md

@@ -11,12 +11,15 @@ npm run verify:release
 
 `verify:release` covers:
 
-- TypeScript typecheck
-- full automated test suite
-- linked-install `audit-code` smoke coverage
-- packaged-install `audit-code` smoke coverage
-- tarball contract verification for shipped assets and runtime entrypoints
-- packaged and linked verification of bootstrap install behavior
+- TypeScript typecheck (`check`)
+- dead-code export gate (`check:deadcode`)
+- doc-manifest reconciliation gate (`check:doc-manifest`)
+- full automated test suite (`test`)
+- host-install verification for both bins (`verify:hosts`, `verify:remediate-hosts`)
+- packaged-install smoke coverage for both bins (`smoke:packaged-audit-code`, `smoke:packaged-remediate-code`)
+
+Linked-install smoke coverage (`smoke:linked-audit-code`, `smoke:linked-remediate-code`) is available as a
+standalone command but is not part of the `verify:release` chain.
 
 For live child-process output while debugging smoke tests:
 
@@ -42,8 +45,7 @@ Workflow:
 The workflow:
 
 - requests `id-token: write` for npm OIDC exchange
-- pins Node `22.14.0`
-- pins npm to `11.5.1`
+- pins the Node and npm versions declared in `.github/workflows/publish-package.yml`
 - runs `npm run verify:release`
 - previews the packed tarball with `npm pack --dry-run`
 - publishes with public access and provenance
@@ -51,7 +53,7 @@ The workflow:
 - verifies that the published version resolves from the registry
 - uploads `*-npm-logs` artifacts on failure
 
-Routine CI exercises Node `20` and Node `22`.
+Routine CI exercises the Node majors matrixed in `.github/workflows/*.yml` (currently Node `20` and Node `22`).
 
 ## Version bump helpers
 
@@ -75,9 +77,10 @@ Full maintainer flow:
 npm run release:patch:publish
 ```
 
-That command checks the worktree, runs the release gate, bumps the version,
-commits, tags, pushes `main` and the tag, creates the GitHub Release, waits for
-`publish-package.yml`, and confirms the new npm version resolves.
+That command checks the worktree, runs a fast local typecheck gate (`npm run check` — not the full
+`verify:release` suite, which already ran via CI/the `/ship` preflight), bumps the version, commits,
+tags, pushes `main` and the tag, creates the GitHub Release, waits for `publish-package.yml`, and
+confirms the new npm version resolves.
 
 Minor and major publish variants:
 

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "audit-tools",
-  "version": "0.32.6",
+  "version": "0.32.8",
   "private": false,
+  "license": "ISC",
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",
   "type": "module",
   "bin": {
@@ -38,9 +39,11 @@
     "postinstall": "node scripts/postinstall.mjs",
     "build": "tsc -p tsconfig.json",
     "check": "tsc -p tsconfig.json --noEmit",
+    "test:doc-contract": "vitest run tests/audit/release-contract.test.mjs tests/audit/priority-chain-doc-sync.test.mjs tests/audit/file-lock-doc-sync.test.mjs tests/audit/host-asset-renderer-drift.test.mjs",
     "test": "npm run build && vitest run",
     "test:single": "npm run build && vitest run",
-    "verify:release": "npm run check && npm run check:deadcode && npm run check:doc-manifest && npm test && npm run verify:hosts && npm run verify:remediate-hosts && npm run smoke:packaged-audit-code && npm run smoke:packaged-remediate-code",
+    "verify:checks": "npm run check && npm run check:deadcode && npm run check:doc-manifest && npm run build && npm run verify:hosts && npm run verify:remediate-hosts && npm run smoke:packaged-audit-code && npm run smoke:packaged-remediate-code",
+    "verify:release": "npm run verify:checks && vitest run",
     "check:deadcode": "knip --no-config-hints",
     "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
     "verify:hosts": "node scripts/audit/verify-hosts.mjs",
@@ -68,7 +71,8 @@
     "commander": "^13.0.0",
     "smol-toml": "^1.6.1",
     "yaml": "^2.9.0",
-    "zod": "^3.25.76"
+    "zod": "^3.25.76",
+    "zod-to-json-schema": "^3.24.6"
   },
   "devDependencies": {
     "@types/node": "^24.3.0",
@@ -78,8 +82,7 @@
     "tsx": "^4.19.0",
     "typescript": "^5.9.2",
     "vitest": "^3.0.0",
-    "web-tree-sitter": "^0.25.10",
-    "zod-to-json-schema": "^3.24.6"
+    "web-tree-sitter": "^0.25.10"
   },
   "repository": {
     "type": "git",

package/remediate-code.mjs

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 // Thin wrapper: locates the built dist and delegates to it.
-// Supports: run, install, ensure, validate
+// Interprets the installer verbs (install, ensure, verify-install, install-host)
+// locally via the B2 bootstrap; every other verb (e.g. next-step) is forwarded
+// to dist/remediate/index.js.
 
 import { fileURLToPath } from "url";
 import { pathToFileURL } from "url";

package/skills/audit-code/SKILL.md

@@ -66,19 +66,17 @@ can dispatch to *right now* on every `next-step` call so the backend sizes revie
 packets to your real model instead of a conservative 32k floor.
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Key flags:
 
-- `--host-max-active-subagents` — parallel subagent capacity (via the `Agent`/`task`
-  tool). Without it the backend assumes serial dispatch.
 - `--host-models` — ordered JSON array (lowest rank first) of models you can dispatch
   subagents to *right now*, one entry per relative rank
   (`"small"`, `"standard"`, `"deep"`). Ranks are relative capability labels — never
@@ -87,6 +85,12 @@ Key flags:
 - `--host-context-tokens` / `--host-output-tokens` — single-model shorthand. When
   `--host-models` is also given, the roster wins.
 
+Do **not** report a parallel-subagent count — the backend owns concurrency (its
+token-budget gate plus any hard host cap it can detect, e.g. Codex
+`[agents].max_threads`), and runs uncapped when it detects none. An operator with
+a genuine fixed machine limit may pass `--host-max-active-subagents N` as an
+optional override; it is never a value to guess.
+
 When a step prompt tells you to continue, repeat `audit-code next-step` with the
 same capability flags and follow only the newly returned `prompt_path`. Stop when
 the current step prompt tells you to stop.

package/skills/audit-code/audit-code.prompt.md

@@ -29,9 +29,6 @@ handshake**: report what you can dispatch to *right now* on every `next-step`
 call, so the backend sizes review packets to your real model instead of a
 conservative 32k floor. Report:
 
-- `--host-max-active-subagents` — how many review subagents you can run in
-  parallel (via the `Agent`/`task` tool). Without it the backend assumes serial
-  dispatch and sizes waves to one packet at a time.
 - `--host-models` — an ordered JSON array (lowest rank first) of the models you
   can dispatch subagents to *right now*, one entry per relative rank:
   `{"rank": "small"|"standard"|"deep", "context_tokens": N, "output_tokens": N}`.
@@ -48,25 +45,31 @@ conservative 32k floor. Report:
   model. When `--host-models` is also given, the roster wins. Omit both and
   dispatch falls back to the conservative 32k default (many tiny packets).
 
+Do **not** report a parallel-subagent count. The backend owns concurrency: it
+sizes how many subagents run at once from its own token-budget gate and from any
+hard host cap it can detect (e.g. Codex's `~/.codex/config.toml`
+`[agents].max_threads`). When it detects no hard cap it runs without one — you
+never supply or guess a number. (An operator with a genuine fixed parallel limit
+for this machine may pass `--host-max-active-subagents N` as an optional
+override; it is not part of the handshake and is never something to invent.)
+
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+audit-code next-step --host-models '[{"rank":"small","context_tokens":32000,"output_tokens":8000},{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-audit-code next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+audit-code next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
-`4` is a safe concurrency default for this host; raise it for more parallelism or
-lower it under rate-limit pressure. The backend's learned quota adapts from
-there. The token values should match the window of the model(s) dispatching the
-packets (e.g. 200000 / 32000 for a 200k-context model).
+The token values should match the window of the model(s) dispatching the packets
+(e.g. 200000 / 32000 for a 200k-context model).
 
 When developing `audit-tools` itself, from the repo root use:
 
 ```bash
-node audit-code.mjs next-step --host-max-active-subagents 4 --host-context-tokens 200000 --host-output-tokens 32000
+node audit-code.mjs next-step --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and
@@ -98,14 +101,8 @@ directory. It contains `repo_root`, `auditable_file_count`, `git_available`, and
 - If `mis_scope_smells` is empty, the echo is informational only — continue
   automatically without interrupting the workflow.
 
-Use MCP tools only as a compatibility adapter when direct shell access to
-`audit-code next-step` is unavailable. The MCP `start_audit` and
-`continue_audit` tools return the same one-step contract; they are not a
-separate orchestration path.
-
 When a step prompt tells you to continue, run `audit-code next-step` again with
-the same capability flags (`--host-max-active-subagents`, `--host-models`,
-`--host-context-tokens`, `--host-output-tokens`) and follow only the newly
-returned `prompt_path`.
+the same capability flags (`--host-models`, `--host-context-tokens`,
+`--host-output-tokens`) and follow only the newly returned `prompt_path`.
 
 Stop when the current step prompt tells you to stop.

package/skills/audit-code/opencode-command-template.txt

@@ -3,11 +3,10 @@
 Use `audit-code next-step` as the primary interface to the audit workflow.
 
 1. Run `audit-code next-step` directly when shell access is available.
-2. If MCP is your only available interface, call `start_audit` or `continue_audit`; both return the same one-step contract.
-3. Read `prompt_content` in the response and follow it.
-4. When a step completes (not blocked), run `audit-code next-step` again or call `continue_audit` as the compatibility adapter.
-5. Stop when the step instructions say to stop.
+2. Read `prompt_content` in the response and follow it.
+3. When a step completes (not blocked), run `audit-code next-step` again.
+4. Stop when the step instructions say to stop.
 
 Use the `task` tool or equivalent for subagent dispatch when the step tells you to fan out review work.
 
-If neither shell access nor `start_audit` is available, stop and report that no next-step interface is connected.
+If shell access to `audit-code next-step` is unavailable, stop and report that no next-step interface is connected.

package/skills/remediate-code/remediate-code.prompt.md

@@ -55,9 +55,13 @@ Every `next-step` call is also the **capability handshake**: report what you can
 dispatch to *right now* so the backend sizes remediation waves and per-worker
 context to your real model instead of a conservative 32k floor. Report:
 
-- `--host-can-dispatch-subagents` / `--host-max-concurrent` — whether you can run
-  callable subagents and how many in parallel. Without them the backend assumes
-  serial dispatch.
+- `--host-can-dispatch-subagents` — whether you can run callable subagents at all
+  (via the `Agent`/`task` tool). Without it the backend runs remediation serially.
+  Do **not** report a parallel-worker count: the backend owns concurrency (its
+  token-budget gate plus any hard host cap it can detect, e.g. Codex
+  `[agents].max_threads`) and runs uncapped when it detects none. An operator with
+  a genuine fixed machine limit may pass `--host-max-concurrent N` as an optional
+  override; it is never a value to guess.
 - `--host-models` — an ordered JSON array (lowest rank first) of the models you
   can dispatch workers to *right now*, one entry per relative rank:
   `{"rank": "small"|"standard"|"deep", "context_tokens": N, "output_tokens": N}`.
@@ -74,13 +78,13 @@ context to your real model instead of a conservative 32k floor. Report:
   value.
 
 ```bash
-remediate-code next-step --input <path> --host-max-concurrent 4 --host-models '[{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
+remediate-code next-step --input <path> --host-can-dispatch-subagents --host-models '[{"rank":"standard","context_tokens":200000,"output_tokens":32000},{"rank":"deep","context_tokens":200000,"output_tokens":64000}]'
 ```
 
 Or with a single dispatch model:
 
 ```bash
-remediate-code next-step --input <path> --host-max-concurrent 4 --host-context-tokens 200000 --host-output-tokens 32000
+remediate-code next-step --input <path> --host-can-dispatch-subagents --host-context-tokens 200000 --host-output-tokens 32000
 ```
 
 Read the returned JSON only far enough to find `prompt_path`, then read and

package/wrapper/audit-code-wrapper-install-hosts.mjs

@@ -104,7 +104,7 @@ function toRepoRelativePath(root, targetPath) {
   return value.length > 0 ? value : '.';
 }
 
-function buildInstallDirective(relativePromptPath) {
+export function buildInstallDirective(relativePromptPath) {
   return [
     INSTALL_MARKER_START,
     '## /audit-code',