audit-tools 0.34.41 → 0.35.0

package/dist/audit/cli/providerConfirmationStep.d.ts

@@ -1,106 +0,0 @@
-import type { ConfirmedPoolEntry, SourcePoolDisplayEntry, NewlyReachableBackend } from "audit-tools/shared";
-/**
- * Render the host-facing prompt for the interactive `provider_confirmation` step
- * (Gate-0, cost-first routing — spec/dispatch-quota.md). Shows the priced,
- * suggested provider pool (ascending cost) and asks the host to confirm it, or to
- * submit an operator reorder / exclusion / host-model roster by writing
- * `provider-confirmation.input.json`. Writing that file (even to accept the
- * suggestion verbatim) is what lets the run proceed — its presence is the
- * "operator has acted" signal the gate consumes.
- *
- * The tool owns discovery + the cost annotation: the host supplies only ordering
- * intent + its model roster, and the tool promotes that into both canonical
- * artifacts. So this prompt never asks the host to hand-author prices or
- * capability flags.
- */
-export declare function renderProviderConfirmationPrompt(opts: {
-    /** The tool's suggested pool, already annotated with model_id/price/cost_order. */
-    providerPool: ConfirmedPoolEntry[];
-    /**
-     * Every configured `sessionConfig.sources[]` pool (backlog follow-up a) —
-     * display-only, derived by `deriveSourcePoolDisplay`. These are NOT part of
-     * `providerPool` / its `cost_order` sequence, but `collectDispatchableSources`
-     * (apiPool.ts) folds every one of them into dispatch, so they must be visible
-     * here or the operator is confirming an ordering that omits pools that WILL
-     * route. Omit/empty when no `sources[]` are configured.
-     */
-    sourcePools?: SourcePoolDisplayEntry[];
-    /** Absolute path the host writes its operator input to. */
-    inputPath: string;
-    /** The exact command to re-invoke once the input is written. */
-    continueCommand: string;
-    /**
-     * The G3 reconciliation delta: backends reachable now that the operator's prior
-     * confirmation never mentioned. Non-empty ⇒ this is a RE-confirmation and the
-     * prompt leads with the delta, so the operator answers the new question instead
-     * of re-reading a whole table they already approved. Empty/absent ⇒ the ordinary
-     * first-time gate.
-     */
-    newlyReachable?: readonly NewlyReachableBackend[];
-    /**
-     * The capability-evidence delta: dispatchable models with no resolvable capability
-     * rank. Non-empty ⇒ the prompt additionally asks for a most-capable-first ordering
-     * over exactly these models, which persists as `capability_rank` and stops them
-     * fail-opening at the admission capability floor.
-     */
-    unevidencedCapability?: readonly string[];
-    /**
-     * A BOUNDED, spread sample of the already-confirmed capability ordering
-     * (`selectCapabilityAnchors`), most-capable-first — the fixed reference points the
-     * operator ranks the unevidenced models against.
-     *
-     * Without them the capability ask is unanswerable without livelocking: the prompt is
-     * delta-scoped, so an answer over the new models alone used to REPLACE the confirmed
-     * ordering and the models it dropped came straight back as the next delta. Rendering
-     * the whole ordering instead is not an option — the roster may be hundreds of models
-     * and this prompt must stay O(new + constant). Empty on a first-ever ranking.
-     */
-    capabilityAnchors?: readonly string[];
-    /**
-     * True ⇒ a prior confirmation exists on disk, i.e. this is a RE-confirmation.
-     *
-     * Drives the do-not-re-litigate guardrail INDEPENDENTLY of the reach delta. It used to
-     * ride on `newlyReachable`, so a capability-only re-prompt rendered the full table with
-     * no warning at all — while also telling the operator that an omitted field keeps its
-     * confirmed value. An operator transcribing the displayed ordering into `cost_order`
-     * then silently reverted their own confirmed order.
-     */
-    hasPriorConfirmation?: boolean;
-    /**
-     * R3-3: true on an autonomous (no-operator) run. Only changes rendering when
-     * `unevidencedCapability` is non-empty — addresses that section to the HOST LLM
-     * (an autonomous run has no operator to ask, but the CLI's `next-step` prompt is
-     * always executed by a host agent, so THAT is who ranks) instead of an operator,
-     * and OMITS the reach-reconciliation section entirely: reach is never an LLM's
-     * call to make (`intakeExecutors.ts`'s executor fails it closed regardless of
-     * what an LLM-authored submission says), so the prompt must not ask one to answer
-     * a question it must not answer. Absent/false renders the ordinary operator
-     * variant, unchanged.
-     */
-    autonomous?: boolean;
-    /**
-     * R3-3: anchor ids whose current position is LLM-authored rather than
-     * operator-authored (`ConfirmedDispatchPolicy.capability_order_llm_ranked`).
-     * Drives the ATTENDED variant's anchor marker only — an operator sees
-     * "(LLM-ranked — restate it in your order to reposition it)" instead of
-     * "(already ranked)" for these, since (unlike a genuinely operator-ranked
-     * anchor) they may freely reposition one without restating the whole roster.
-     * Has no effect on the autonomous variant (the LLM must not reorder ANY anchor,
-     * regardless of who ranked it) or when the id is not among `capabilityAnchors`.
-     */
-    capabilityOrderLlmRanked?: readonly string[];
-    /**
-     * Declared `sources[]` entries that did NOT resolve this invocation, with the
-     * operator-facing reason each carries (`resolveAmbientSources`' `dropped[]`).
-     *
-     * Rendered so the drop reaches the operator in the GATE-0 PROMPT, which is the
-     * artifact they actually read. Its only other channel is a stderr line, which
-     * conversation-first use never surfaces — leaving a declared lane silently
-     * missing from the table with no stated cause.
-     */
-    droppedSources?: readonly {
-        id: string;
-        reason: string;
-    }[];
-}): string;
-//# sourceMappingURL=providerConfirmationStep.d.ts.map

package/dist/audit/cli/providerConfirmationStep.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"providerConfirmationStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/providerConfirmationStep.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAG5B;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,mFAAmF;IACnF,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACvC,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;OASG;IACH,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5D,GAAG,MAAM,CA8YT"}

package/dist/audit/cli/providerConfirmationStep.js

@@ -1,396 +0,0 @@
-import { PROVIDER_CONFIRMATION_INPUT_VERSION } from "audit-tools/shared";
-/**
- * Render the host-facing prompt for the interactive `provider_confirmation` step
- * (Gate-0, cost-first routing — spec/dispatch-quota.md). Shows the priced,
- * suggested provider pool (ascending cost) and asks the host to confirm it, or to
- * submit an operator reorder / exclusion / host-model roster by writing
- * `provider-confirmation.input.json`. Writing that file (even to accept the
- * suggestion verbatim) is what lets the run proceed — its presence is the
- * "operator has acted" signal the gate consumes.
- *
- * The tool owns discovery + the cost annotation: the host supplies only ordering
- * intent + its model roster, and the tool promotes that into both canonical
- * artifacts. So this prompt never asks the host to hand-author prices or
- * capability flags.
- */
-export function renderProviderConfirmationPrompt(opts) {
-    const sorted = [...opts.providerPool].sort((a, b) => (a.cost_order ?? Number.MAX_SAFE_INTEGER) - (b.cost_order ?? Number.MAX_SAFE_INTEGER));
-    const sourcePools = opts.sourcePools ?? [];
-    const droppedSources = opts.droppedSources ?? [];
-    const priceCell = (entry) => {
-        if (entry.blended_price_usd_per_mtok == null) {
-            return entry.model_id ? "price unknown" : "resolved at dispatch";
-        }
-        return `$${entry.blended_price_usd_per_mtok.toFixed(2)}`;
-    };
-    const statusCell = (entry) => {
-        if (entry.self_spawn_blocked)
-            return "excluded (self-spawn blocked)";
-        if (entry.excluded)
-            return "excluded";
-        return "included";
-    };
-    const rows = sorted.map((entry) => {
-        const order = entry.cost_order ?? "—";
-        const model = entry.model_id ?? "—";
-        return `| ${order} | ${entry.name} | ${model} | ${priceCell(entry)} | ${entry.capability_tier} | ${statusCell(entry)} |`;
-    });
-    const sourcePriceCell = (entry) => {
-        if (entry.declared_cost_per_mtok !== undefined) {
-            return `$${entry.declared_cost_per_mtok.toFixed(2)} (declared)`;
-        }
-        if (entry.blended_price_usd_per_mtok == null) {
-            return entry.model ? "price unknown" : "resolved at dispatch";
-        }
-        return `$${entry.blended_price_usd_per_mtok.toFixed(2)}`;
-    };
-    const sourceRows = sourcePools.map((entry) => `| ${entry.id} | ${entry.transport} | ${entry.model ?? "—"} | ${sourcePriceCell(entry)} |`);
-    const hasLegacyOpenAiCompatible = sorted.some((e) => e.name === "openai-compatible");
-    const hasCodex = sorted.some((e) => e.name === "codex");
-    const newlyReachable = opts.newlyReachable ?? [];
-    const unevidencedCapability = opts.unevidencedCapability ?? [];
-    const autonomous = opts.autonomous === true;
-    const llmRankedAnchors = new Set(opts.capabilityOrderLlmRanked ?? []);
-    // Anchors must be disjoint from the models under question — one cannot be both a
-    // settled reference point and the thing being ranked.
-    const unevidencedSet = new Set(unevidencedCapability);
-    const capabilityAnchors = (opts.capabilityAnchors ?? []).filter((model) => !unevidencedSet.has(model));
-    // The combined set the operator returns ONE ordering over. Anchors first, in their
-    // confirmed order, with the new models appended: a complete, acceptable file that a
-    // host may copy verbatim, defaulting the unranked models to LEAST capable — the
-    // conservative direction if the host does not move them.
-    const capabilityAnswerExample = [...capabilityAnchors, ...unevidencedCapability];
-    // R3-3: the ATTENDED variant marks an LLM-ranked anchor distinctly — an operator
-    // may freely reposition one without restating the whole roster, unlike a
-    // genuinely operator-ranked anchor. The autonomous variant never marks it: the
-    // LLM must not reorder ANY anchor, regardless of who ranked it.
-    const anchorLine = (model) => !autonomous && llmRankedAnchors.has(model)
-        ? `  - \`${model}\`  (LLM-ranked — restate it in your order to reposition it)`
-        : `  - \`${model}\`  (already ranked)`;
-    // The capability block is ADDITIVE to whatever gate section follows — a run can owe
-    // both a reach reconciliation and a capability ordering, and folding them into one
-    // prompt is what keeps this a single operator round-trip.
-    const capabilitySection = unevidencedCapability.length > 0
-        ? [
-            "## Rank these models by capability",
-            "",
-            ...(autonomous
-                ? [
-                    "**You (the host agent) must rank these models by capability for agentic",
-                    "code-audit work** — an autonomous run has no operator to ask. This is LLM",
-                    "judgment, recorded as provenance; a later operator confirmation can",
-                    "reorder anything you rank. Rank on what you know of each model's",
-                    "demonstrated coding/agentic capability; if you genuinely do not know a",
-                    "model, place it conservatively LOW and note that in the ordering (an",
-                    "explicit recorded judgment, never a silent guess).",
-                    "",
-                ]
-                : [
-                    "No rank source covers these dispatchable models, so the admission",
-                    "capability floor currently **fails open** on them — they are eligible for",
-                    "`deep` work they may be entirely unfit for:",
-                    "",
-                ]),
-            ...unevidencedCapability.map((model) => `  - \`${model}\``),
-            "",
-            ...(capabilityAnchors.length > 0
-                ? [
-                    "These models are **already ranked** — they are FIXED REFERENCE POINTS,",
-                    "shown in their confirmed order (most capable first) so you can place the",
-                    "models above relative to them. They are a bounded sample spread across the",
-                    "full ranking, not the whole ranking:",
-                    "",
-                    ...capabilityAnchors.map(anchorLine),
-                    "",
-                    "Answer with `capability_order`: **one ordering over the combined set**,",
-                    "most capable first — the unranked models interleaved among the reference",
-                    "points wherever they belong.",
-                    "",
-                    "> Reordering the reference points against each other has no effect: they",
-                    "> anchor a ranking you are only seeing a sample of, so a swap between two",
-                    "> of them carries no information about the models in between. Move the",
-                    "> **unranked** models; leave the anchors where they are.",
-                    "",
-                    "> Models you do not mention keep the rank they already have — you never",
-                    "> need to restate the whole ranking, and omitting one never clears it.",
-                    "",
-                ]
-                : [
-                    "Answer with `capability_order`: these model ids, **most capable first**.",
-                    "",
-                ]),
-            // `schema_version` is NOT optional here even though every other field is:
-            // `parseProviderConfirmationInput` rejects the whole file without it, the
-            // rejection is indistinguishable from "no submission", and this same prompt
-            // then re-emits — the infinite-re-prompt livelock, reintroduced by a host
-            // that did exactly what the prompt showed it. A fragment a host may copy
-            // verbatim must be a COMPLETE, acceptable file.
-            "```json",
-            "{",
-            `  "schema_version": "${PROVIDER_CONFIRMATION_INPUT_VERSION}",`,
-            `  "capability_order": [${capabilityAnswerExample
-                .map((m) => JSON.stringify(m))
-                .join(", ")}]`,
-            "}",
-            "```",
-            "",
-            "Write it to the same file as the ordering below — one submission answers",
-            "both. Any field you omit keeps the value you confirmed previously; it is",
-            "not reset.",
-            "",
-            "This is a **relative ordering only** — rank them against each other. Do not",
-            "invent an absolute score or a tier; there is no field for one. If you",
-            "genuinely cannot rank a model, still place it (a considered guess beats a",
-            "fail-open) and say so to the user.",
-            "",
-            "> Ordering is not inclusion. To keep a model OUT of the pool entirely, use",
-            "> `exclude` — `capability_order` only decides what it is trusted with.",
-            "",
-        ]
-        : [];
-    return [
-        ...capabilitySection,
-        // R3-3: OMITTED entirely on the autonomous variant, regardless of the reach
-        // delta's actual content — reach is never an LLM's call to make (see
-        // `intakeExecutors.ts`'s executor, which fails it closed no matter what an
-        // LLM-authored submission says), so the prompt must not invite an answer to a
-        // question it must not answer. It is not deferred or summarized here; the
-        // reach delta simply waits for a later ATTENDED re-confirmation.
-        ...(newlyReachable.length > 0 && !autonomous
-            ? [
-                "# Reconcile Newly-Reachable Backends (Gate-0)",
-                "",
-                "**This is a re-confirmation, not a fresh gate.** You already confirmed a",
-                "route decision for this session. Since then, these backends became",
-                "reachable and your decision says nothing about them — so they are NOT",
-                "dispatchable until you decide:",
-                "",
-                // The exclusion RULE is rendered beside each backend, not left for the
-                // operator to compose: the grammar is model-granular, so a hand-written
-                // rule is exactly where an operator (or a host relaying for them) drops
-                // the model and rules out the whole provider by accident.
-                ...newlyReachable.map((b) => `  - **${b.key}**  (provider: ${b.provider}` +
-                    ` — to keep it out: \`"exclude": ["${b.exclusion_pattern}"]\`)`),
-                "",
-                "Ask the user about **just these** — do not re-litigate the ordering they",
-                "already approved. To accept them into the pool at their suggested",
-                "positions, accept verbatim (write just the `schema_version`). To keep one",
-                "out, name its **exclusion rule** (shown beside it) in `exclude` — that",
-                "rules out exactly that backend, not its siblings.",
-                "",
-                "> Note: any submission clears this delta — the tool rebuilds the whole",
-                "> confirmation from your input. The list above tells you what changed; it",
-                "> is not a per-backend checklist the tool enforces.",
-                "",
-                "The full pool follows for reference.",
-                "",
-                "---",
-                "",
-            ]
-            : []),
-        // The SAME guardrail, on the branch that used to go without one. It rode on
-        // `newlyReachable`, so a capability-only re-prompt rendered the full table with no
-        // warning — while the capability block newly promises that an omitted field keeps
-        // its confirmed value. An operator transcribing the displayed ordering back into
-        // `cost_order` then reverted their own confirmed order, silently. Enforced here in
-        // the tool rather than left to the operator noticing.
-        ...(opts.hasPriorConfirmation === true && newlyReachable.length === 0
-            ? [
-                "# This is a RE-confirmation",
-                "",
-                "You already confirmed a route decision for this session. The table below",
-                "reflects **what you confirmed** — do not re-litigate it. Answer only the",
-                "question(s) above.",
-                "",
-                "**Every field you omit keeps the value you confirmed previously.** Do not",
-                "transcribe the table back into `cost_order` to \"keep\" it: restating an",
-                "ordering you are not changing is how a confirmed order gets reverted by",
-                "accident. To change nothing but the answer above, write just that field.",
-                "",
-                "---",
-                "",
-            ]
-            : []),
-        "# Confirm Provider Cost Ordering (Gate-0)",
-        "",
-        "Dispatch routes work to the cheapest capable provider first.",
-        "",
-        ...(opts.hasPriorConfirmation === true
-            ? [
-                "Below is the ordering **as you confirmed it** (the table is rendered from your",
-                "persisted decision, not from a fresh suggestion). Leave it alone unless you",
-                "actually want to change it.",
-            ]
-            : [
-                "Below is the tool's **suggested** cost ordering — ascending real price",
-                "(models.dev), with capability as the tiebreak and unpriceable pools last.",
-                "Review it, then confirm, reorder, exclude, or **add a provider that wasn't",
-                "auto-detected**.",
-            ]),
-        "",
-        "| # | Provider | Model | $/Mtok (blended) | Tier | Status |",
-        "|---|----------|-------|------------------|------|--------|",
-        ...rows,
-        "",
-        "- **$/Mtok (blended)** is `input·0.75 + output·0.25` from the vendored",
-        "  models.dev dataset — advisory; the confirmed order is what routes.",
-        '- "resolved at dispatch" = the concrete model is not knowable until dispatch',
-        "  (e.g. a CLI backend); it is ordered by capability tier for now.",
-        "- A host-native provider (the agent you are) has no model row until you report",
-        "  your roster below — do that so your own tiers are priced + ordered here too.",
-        ...(hasLegacyOpenAiCompatible
-            ? [
-                "- **`openai_compatible` has no cost override**: this legacy block has no",
-                "  `cost_per_mtok` field, so it prices at the models.dev list price for its",
-                "  model — a genuinely free/discounted endpoint (e.g. a free NIM deployment)",
-                "  will price WRONG here. To declare its real cost, move it to a `sources[]`",
-                "  entry instead (`{ provider: \"openai-compatible\", base_url, model,",
-                '  cost_per_mtok }` — set `0` for free) — see the table below.',
-            ]
-            : []),
-        ...(hasCodex
-            ? [
-                '- **codex shows "resolved at dispatch"**: its model/effort roster is not',
-                "  enumerable here from the legacy `codex` block (single `model` field, no",
-                "  roster). To pin + price specific codex models/efforts at this gate, add",
-                '  them as `sources[]` entries (`{ provider: "codex", model, parameters:',
-                '  { extra_args: [...] } }`, one per model/effort) — see the table below.',
-            ]
-            : []),
-        "",
-        ...(sourceRows.length > 0
-            ? [
-                "## Configured `sources[]` pools (also route)",
-                "",
-                "Every entry below is folded into dispatch alongside the pool above",
-                "(`collectDispatchableSources`) — this is what actually routes, not just",
-                "the legacy/host/CLI entries in the table above.",
-                "",
-                "| Source id | Provider | Model | $/Mtok |",
-                "|-----------|----------|-------|--------|",
-                ...sourceRows,
-                "",
-                "- **`$/Mtok`** marked `(declared)` is the operator's own `cost_per_mtok`",
-                "  on that source — authoritative over the models.dev catalog price.",
-                "",
-            ]
-            : []),
-        // A declared lane that did NOT resolve must be visible HERE, in the render the
-        // operator actually reads. The reasons have always existed, but the only channel
-        // was `resolveSessionConfig`'s stderr default — and nothing injected
-        // `onDroppedSources`, so in conversation-first use the operator's whole symptom
-        // was "the lane isn't in the table", with the reason reachable only by calling
-        // `resolveAmbientSources` by hand. A reason nobody renders is write-only
-        // ([[write-only-data-looks-authoritative]]); an absence with no explanation reads
-        // as the tool not supporting the lane rather than as a fixable local condition.
-        ...(droppedSources.length > 0
-            ? [
-                "## Declared sources that did NOT resolve (absent from the pool above)",
-                "",
-                "You declared these, and each was dropped for the stated reason. They are",
-                "**not dispatchable this run** — confirming the pool above accepts their",
-                "absence. Most reasons are local and fixable (an unset key env var, a proxy",
-                "that failed its liveness probe); fix and re-run to have the lane admitted.",
-                "",
-                "| Source id | Why it was dropped |",
-                "|-----------|--------------------|",
-                ...droppedSources.map((d) => `| ${d.id} | ${d.reason.replace(/\|/g, "\\|").replace(/\s*\n\s*/g, " ")} |`),
-                "",
-            ]
-            : []),
-        "## What to do",
-        "",
-        // R3-3: the autonomous variant documents ONLY the field the executor will read.
-        // The executor strips everything else from an LLM-authored submission (see
-        // `runProviderConfirmationAutoComplete`'s sanitize step) — documenting the full
-        // operator field set here would invite answers to questions the LLM was not
-        // asked (an `include` "fixing" an exclusion whose reach-section rationale this
-        // variant deliberately omits), which the tool would then have to loudly drop.
-        ...(autonomous
-            ? [
-                "Write your capability ranking to:",
-                "",
-                `  ${opts.inputPath}`,
-                "",
-                "```json",
-                "{",
-                `  "schema_version": "${PROVIDER_CONFIRMATION_INPUT_VERSION}",`,
-                '  "capability_order": ["<model-id, most capable first>", "..."]',
-                "}",
-                "```",
-                "",
-                "`capability_order` is the ONLY field read from an autonomous submission —",
-                "exclude/include/cost_order/host_models/dispatch_bias are operator decisions",
-                "and are stripped (and reported) if present.",
-                "",
-                `Then run: ${opts.continueCommand}`,
-                "",
-            ]
-            : [
-                "Ask the user whether the suggested ordering is right (a single, brief round).",
-                "Then write the operator's decision to:",
-                "",
-                `  ${opts.inputPath}`,
-                "",
-                "Use this shape — **every field is optional beyond `schema_version`**. To accept",
-                "the suggestion verbatim, write just the version:",
-                "",
-                "```json",
-                "{",
-                `  "schema_version": "${PROVIDER_CONFIRMATION_INPUT_VERSION}",`,
-                '  "cost_order": ["<provider-or-model-key>", "..."],',
-                '  "capability_order": ["<model-id>", "..."],',
-                '  "exclude": ["transport:<provider>/<model>", "service:<vendor>", "host:<address>"],',
-                '  "include": ["<self-spawn-blocked provider to opt back in>"],',
-                '  "host_models": [{ "model_id": "<your model id>" }],',
-                '  "dispatch_bias": 0',
-                "}",
-                "```",
-                "",
-                "- `cost_order` is the confirmed ordering, cheapest first, as a list of keys —",
-                "  a **provider name** (as shown above) and/or a **host `model_id`** you report",
-                "  in `host_models`. Its index becomes each pool's `cost_order`. Keys you omit",
-                "  keep their suggested relative order, appended after the ones you name; keys",
-                "  the tool doesn't recognize are ignored. Omit `cost_order` to accept the",
-                "  suggestion.",
-                "- `host_models` reports YOUR (the host agent's) model roster so those tiers are",
-                "  priced from models.dev and confirmable here — otherwise they are priced only",
-                "  at dispatch. Each reported `model_id` can appear in `cost_order`.",
-                "- `exclude` drops backends from the dispatchable pool. **Write every entry with",
-                "  its axis as a prefix.** A rule naming an axis that does not exist is REJECTED",
-                "  when you submit it — in particular there is deliberately **no `model:` axis**,",
-                "  so `model:some-model` is refused rather than quietly excluding nothing. Pick",
-                "  the granularity you mean:",
-                "",
-                "  | Rule | Rules out |",
-                "  |---|---|",
-                "  | `transport:openai-compatible/gpt-oss-120b` | that **model** on that adapter — prefer this, you are confirming model choices |",
-                "  | `transport:codex` | every model on that **adapter** |",
-                "  | `service:nim/glm-5.2` | that **model** from that vendor, however it is reached |",
-                "  | `service:nim` | every model from that **vendor**, however it is reached |",
-                "  | `host:integrate.api.nvidia.com` | every source at that **endpoint host** (any port) |",
-                "  | `host:localhost:8000` | every source at that **host:port** |",
-                "",
-                "  Use `/` (not `:`) as the model delimiter — a model id may itself contain a",
-                "  colon. A rule that matches nothing is kept and is inert; if that was not what",
-                "  you meant, the summary after you submit says which rules matched nothing.",
-                "  `include` opts a self-spawn-blocked provider back in (advanced — normally",
-                "  leave it excluded).",
-                "- `dispatch_bias` (λ ∈ [0,1]) is the cost↔speed operating point: **0 (default) =",
-                "  cheapest-first**; **1 = fastest-first** (route to the highest-throughput capable",
-                "  pool regardless of price); values between blend the two. Capability is always a",
-                "  hard floor. Omit to keep cheapest-first.",
-                "- **Missing a provider you use?** If it isn't listed, it wasn't auto-detected.",
-                "  Add its config to session config and it joins the pool: an OpenAI-compatible",
-                "  endpoint via `openai_compatible.{base_url,model,api_key_env}`, or a CLI",
-                "  backend via its `<name>.command`. A provider detected but self-spawn-blocked",
-                "  can be re-included with `include`. Then re-run this step.",
-                "- The tool owns pricing, discovery, and the capability flags — you",
-                "  supply only ordering intent + your model roster.",
-                "",
-                `Then run: ${opts.continueCommand}`,
-                "",
-            ]),
-    ].join("\n");
-}
-//# sourceMappingURL=providerConfirmationStep.js.map

package/dist/audit/cli/providerConfirmationStep.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"providerConfirmationStep.js","sourceRoot":"","sources":["../../../src/audit/cli/providerConfirmationStep.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAsFhD;IACC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAChG,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IAEjD,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAU,EAAE;QACtD,IAAI,KAAK,CAAC,0BAA0B,IAAI,IAAI,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAU,EAAE;QACvD,IAAI,KAAK,CAAC,kBAAkB;YAAE,OAAO,+BAA+B,CAAC;QACrE,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QACtC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC;QACpC,OAAO,KAAK,KAAK,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,eAAe,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,CAAC,KAA6B,EAAU,EAAE;QAChE,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,IAAI,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,CAAC,0BAA0B,IAAI,IAAI,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAChC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,KAAK,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,CAC7F,CAAC;IAEF,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACtE,iFAAiF;IACjF,sDAAsD;IACtD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7D,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CACtC,CAAC;IACF,mFAAmF;IACnF,oFAAoF;IACpF,gFAAgF;IAChF,yDAAyD;IACzD,MAAM,uBAAuB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,qBAAqB,CAAC,CAAC;IACjF,iFAAiF;IACjF,yEAAyE;IACzE,+EAA+E;IAC/E,gEAAgE;IAChE,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,CAAC,UAAU,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QACxC,CAAC,CAAC,SAAS,KAAK,8DAA8D;QAC9E,CAAC,CAAC,SAAS,KAAK,sBAAsB,CAAC;IAE3C,oFAAoF;IACpF,mFAAmF;IACnF,0DAA0D;IAC1D,MAAM,iBAAiB,GACrB,qBAAqB,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC;YACE,oCAAoC;YACpC,EAAE;YACF,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACE,yEAAyE;oBACzE,2EAA2E;oBAC3E,qEAAqE;oBACrE,kEAAkE;oBAClE,wEAAwE;oBACxE,sEAAsE;oBACtE,oDAAoD;oBACpD,EAAE;iBACH;gBACH,CAAC,CAAC;oBACE,mEAAmE;oBACnE,2EAA2E;oBAC3E,6CAA6C;oBAC7C,EAAE;iBACH,CAAC;YACN,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;YAC3D,EAAE;YACF,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;gBAC9B,CAAC,CAAC;oBACE,wEAAwE;oBACxE,0EAA0E;oBAC1E,4EAA4E;oBAC5E,sCAAsC;oBACtC,EAAE;oBACF,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpC,EAAE;oBACF,yEAAyE;oBACzE,0EAA0E;oBAC1E,8BAA8B;oBAC9B,EAAE;oBACF,0EAA0E;oBAC1E,2EAA2E;oBAC3E,wEAAwE;oBACxE,0DAA0D;oBAC1D,EAAE;oBACF,yEAAyE;oBACzE,wEAAwE;oBACxE,EAAE;iBACH;gBACH,CAAC,CAAC;oBACE,0EAA0E;oBAC1E,EAAE;iBACH,CAAC;YACN,0EAA0E;YAC1E,0EAA0E;YAC1E,4EAA4E;YAC5E,0EAA0E;YAC1E,yEAAyE;YACzE,gDAAgD;YAChD,SAAS;YACT,GAAG;YACH,wBAAwB,mCAAmC,IAAI;YAC/D,0BAA0B,uBAAuB;iBAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;iBAC7B,IAAI,CAAC,IAAI,CAAC,GAAG;YAChB,GAAG;YACH,KAAK;YACL,EAAE;YACF,0EAA0E;YAC1E,0EAA0E;YAC1E,YAAY;YACZ,EAAE;YACF,6EAA6E;YAC7E,uEAAuE;YACvE,2EAA2E;YAC3E,oCAAoC;YACpC,EAAE;YACF,4EAA4E;YAC5E,wEAAwE;YACxE,EAAE;SACH;QACH,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,GAAG,iBAAiB;QACpB,4EAA4E;QAC5E,qEAAqE;QACrE,2EAA2E;QAC3E,8EAA8E;QAC9E,0EAA0E;QAC1E,iEAAiE;QACjE,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU;YAC1C,CAAC,CAAC;gBACE,+CAA+C;gBAC/C,EAAE;gBACF,0EAA0E;gBAC1E,oEAAoE;gBACpE,uEAAuE;gBACvE,gCAAgC;gBAChC,EAAE;gBACF,uEAAuE;gBACvE,wEAAwE;gBACxE,wEAAwE;gBACxE,0DAA0D;gBAC1D,GAAG,cAAc,CAAC,GAAG,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,SAAS,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,QAAQ,EAAE;oBAC5C,qCAAqC,CAAC,CAAC,iBAAiB,OAAO,CAClE;gBACD,EAAE;gBACF,0EAA0E;gBAC1E,mEAAmE;gBACnE,2EAA2E;gBAC3E,wEAAwE;gBACxE,mDAAmD;gBACnD,EAAE;gBACF,wEAAwE;gBACxE,2EAA2E;gBAC3E,qDAAqD;gBACrD,EAAE;gBACF,sCAAsC;gBACtC,EAAE;gBACF,KAAK;gBACL,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,4EAA4E;QAC5E,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,mFAAmF;QACnF,sDAAsD;QACtD,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YACnE,CAAC,CAAC;gBACE,6BAA6B;gBAC7B,EAAE;gBACF,0EAA0E;gBAC1E,0EAA0E;gBAC1E,oBAAoB;gBACpB,EAAE;gBACF,2EAA2E;gBAC3E,0EAA0E;gBAC1E,yEAAyE;gBACzE,0EAA0E;gBAC1E,EAAE;gBACF,KAAK;gBACL,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,2CAA2C;QAC3C,EAAE;QACF,8DAA8D;QAC9D,EAAE;QACF,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,IAAI;YACpC,CAAC,CAAC;gBACE,gFAAgF;gBAChF,6EAA6E;gBAC7E,6BAA6B;aAC9B;YACH,CAAC,CAAC;gBACE,wEAAwE;gBACxE,2EAA2E;gBAC3E,4EAA4E;gBAC5E,kBAAkB;aACnB,CAAC;QACN,EAAE;QACF,6DAA6D;QAC7D,6DAA6D;QAC7D,GAAG,IAAI;QACP,EAAE;QACF,wEAAwE;QACxE,sEAAsE;QACtE,8EAA8E;QAC9E,mEAAmE;QACnE,gFAAgF;QAChF,gFAAgF;QAChF,GAAG,CAAC,yBAAyB;YAC3B,CAAC,CAAC;gBACE,0EAA0E;gBAC1E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,uEAAuE;gBACvE,+DAA+D;aAChE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ;YACV,CAAC,CAAC;gBACE,0EAA0E;gBAC1E,2EAA2E;gBAC3E,2EAA2E;gBAC3E,yEAAyE;gBACzE,0EAA0E;aAC3E;YACH,CAAC,CAAC,EAAE,CAAC;QACP,EAAE;QACF,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC;gBACE,8CAA8C;gBAC9C,EAAE;gBACF,oEAAoE;gBACpE,yEAAyE;gBACzE,iDAAiD;gBACjD,EAAE;gBACF,2CAA2C;gBAC3C,2CAA2C;gBAC3C,GAAG,UAAU;gBACb,EAAE;gBACF,0EAA0E;gBAC1E,qEAAqE;gBACrE,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,+EAA+E;QAC/E,iFAAiF;QACjF,qEAAqE;QACrE,gFAAgF;QAChF,+EAA+E;QAC/E,yEAAyE;QACzE,kFAAkF;QAClF,gFAAgF;QAChF,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC;gBACE,uEAAuE;gBACvE,EAAE;gBACF,0EAA0E;gBAC1E,yEAAyE;gBACzE,4EAA4E;gBAC5E,4EAA4E;gBAC5E,EAAE;gBACF,oCAAoC;gBACpC,oCAAoC;gBACpC,GAAG,cAAc,CAAC,GAAG,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CACnF;gBACD,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,eAAe;QACf,EAAE;QACF,gFAAgF;QAChF,2EAA2E;QAC3E,gFAAgF;QAChF,4EAA4E;QAC5E,+EAA+E;QAC/E,8EAA8E;QAC9E,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC;gBACE,mCAAmC;gBACnC,EAAE;gBACF,KAAK,IAAI,CAAC,SAAS,EAAE;gBACrB,EAAE;gBACF,SAAS;gBACT,GAAG;gBACH,wBAAwB,mCAAmC,IAAI;gBAC/D,iEAAiE;gBACjE,GAAG;gBACH,KAAK;gBACL,EAAE;gBACF,2EAA2E;gBAC3E,6EAA6E;gBAC7E,6CAA6C;gBAC7C,EAAE;gBACF,aAAa,IAAI,CAAC,eAAe,EAAE;gBACnC,EAAE;aACH;YACH,CAAC,CAAC;gBACJ,+EAA+E;gBAC/E,wCAAwC;gBACxC,EAAE;gBACF,KAAK,IAAI,CAAC,SAAS,EAAE;gBACrB,EAAE;gBACF,iFAAiF;gBACjF,kDAAkD;gBAClD,EAAE;gBACF,SAAS;gBACT,GAAG;gBACH,wBAAwB,mCAAmC,IAAI;gBAC/D,qDAAqD;gBACrD,8CAA8C;gBAC9C,sFAAsF;gBACtF,gEAAgE;gBAChE,uDAAuD;gBACvD,sBAAsB;gBACtB,GAAG;gBACH,KAAK;gBACL,EAAE;gBACF,+EAA+E;gBAC/E,gFAAgF;gBAChF,+EAA+E;gBAC/E,+EAA+E;gBAC/E,2EAA2E;gBAC3E,eAAe;gBACf,iFAAiF;gBACjF,gFAAgF;gBAChF,qEAAqE;gBACrE,iFAAiF;gBACjF,iFAAiF;gBACjF,kFAAkF;gBAClF,gFAAgF;gBAChF,6BAA6B;gBAC7B,EAAE;gBACF,wBAAwB;gBACxB,aAAa;gBACb,mIAAmI;gBACnI,2DAA2D;gBAC3D,sFAAsF;gBACtF,+EAA+E;gBAC/E,2FAA2F;gBAC3F,kEAAkE;gBAClE,EAAE;gBACF,8EAA8E;gBAC9E,iFAAiF;gBACjF,6EAA6E;gBAC7E,6EAA6E;gBAC7E,uBAAuB;gBACvB,kFAAkF;gBAClF,oFAAoF;gBACpF,mFAAmF;gBACnF,4CAA4C;gBAC5C,gFAAgF;gBAChF,gFAAgF;gBAChF,2EAA2E;gBAC3E,gFAAgF;gBAChF,6DAA6D;gBAC7D,oEAAoE;gBACpE,oDAAoD;gBACpD,EAAE;gBACF,aAAa,IAAI,CAAC,eAAe,EAAE;gBACnC,EAAE;aACG,CAAC;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/audit/orchestrator/providerConfirmation.d.ts

@@ -1,25 +0,0 @@
-/**
- * audit-code Gate-0 provider confirmation consumer.
- *
- * Wraps the audit-tools/shared provider-discovery helpers and produces a
- * ProviderConfirmationResult conforming to the pinned seam contract (N-X06).
- */
-import type { SessionConfig } from "audit-tools/shared";
-import type { ProviderConfirmationResult, ProviderConfirmationInput } from "audit-tools/shared";
-/**
- * Discover and confirm the provider pool for a new audit run.
- *
- * Uses auto-resolution only — no interactive gate at this layer. The
- * conversation-first flow handles the interactive Gate-0 prompt; this function
- * supplies the deterministic pool it needs as input.
- *
- * @param sessionConfig - Current session config; may be an empty `{}`.
- * @param env           - Process environment snapshot; defaults to `process.env`.
- * @param exclude       - Provider names to pre-exclude (e.g. user-supplied from a prior gate).
- * @param input         - Operator's Gate-0 submission (interactive path): its
- *   `cost_order` overrides the suggested ordering on the per-tool pool so the
- *   seam artifact reflects the operator's ordering. Dispatch reads the SHARED
- *   confirmation, so this only keeps the per-tool file consistent. Omit headless.
- */
-export declare function confirmProviders(sessionConfig: SessionConfig, env?: NodeJS.ProcessEnv, exclude?: string[], input?: ProviderConfirmationInput): ProviderConfirmationResult;
-//# sourceMappingURL=providerConfirmation.d.ts.map

package/dist/audit/orchestrator/providerConfirmation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"providerConfirmation.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/providerConfirmation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,OAAO,KAAK,EACV,0BAA0B,EAE1B,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAM5B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,aAAa,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE,MAAM,EAAO,EACtB,KAAK,CAAC,EAAE,yBAAyB,GAChC,0BAA0B,CAsC5B"}

package/dist/audit/orchestrator/providerConfirmation.js

@@ -1,60 +0,0 @@
-/**
- * audit-code Gate-0 provider confirmation consumer.
- *
- * Wraps the audit-tools/shared provider-discovery helpers and produces a
- * ProviderConfirmationResult conforming to the pinned seam contract (N-X06).
- */
-import { discoverProviders, annotateConfirmedPool, PROVIDER_CONFIRMATION_RESULT_VERSION, } from "audit-tools/shared";
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/**
- * Discover and confirm the provider pool for a new audit run.
- *
- * Uses auto-resolution only — no interactive gate at this layer. The
- * conversation-first flow handles the interactive Gate-0 prompt; this function
- * supplies the deterministic pool it needs as input.
- *
- * @param sessionConfig - Current session config; may be an empty `{}`.
- * @param env           - Process environment snapshot; defaults to `process.env`.
- * @param exclude       - Provider names to pre-exclude (e.g. user-supplied from a prior gate).
- * @param input         - Operator's Gate-0 submission (interactive path): its
- *   `cost_order` overrides the suggested ordering on the per-tool pool so the
- *   seam artifact reflects the operator's ordering. Dispatch reads the SHARED
- *   confirmation, so this only keeps the per-tool file consistent. Omit headless.
- */
-export function confirmProviders(sessionConfig, env = process.env, exclude = [], input) {
-    const discovered = discoverProviders(sessionConfig, env);
-    const excludeSet = new Set(exclude);
-    const pool = [];
-    // Always include worker-command as a fallback — it's always available.
-    const hasWorkerCommand = discovered.some((p) => p.name === "worker-command");
-    if (!hasWorkerCommand) {
-        pool.push({
-            name: "worker-command",
-            capability_tier: "unknown",
-            excluded: excludeSet.has("worker-command"),
-        });
-    }
-    for (const provider of discovered) {
-        pool.push({
-            name: provider.name,
-            capability_tier: provider.capabilityTier,
-            excluded: excludeSet.has(provider.name),
-        });
-    }
-    // COR-108468ae: the dead-code second guard below was removed — worker-command
-    // is unconditionally added before the loop when not discovered, so this check
-    // was always a no-op (the first block already guarantees presence).
-    return {
-        schema_version: PROVIDER_CONFIRMATION_RESULT_VERSION,
-        confirmed_at: new Date().toISOString(),
-        // Cost-first routing: annotate each entry with its representative model price
-        // + cost_order (spec/dispatch-quota.md). Read at dispatch as rung 1 of
-        // costRank. Uses the real sessionConfig so a configured API/CLI model is
-        // priceable here; an operator `input.cost_order` overrides the suggestion.
-        provider_pool: annotateConfirmedPool(pool, sessionConfig, input).provider_pool,
-        session_level: true,
-    };
-}
-//# sourceMappingURL=providerConfirmation.js.map

package/dist/audit/orchestrator/providerConfirmation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"providerConfirmation.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/providerConfirmation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAO5B,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAA4B,EAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAoB,EAAE,EACtB,KAAiC;IAEjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAyB,EAAE,CAAC;IAEtC,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC7E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,gBAAgB;YACtB,eAAe,EAAE,SAAS;YAC1B,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,eAAe,EAAE,QAAQ,CAAC,cAAc;YACxC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,oEAAoE;IAEpE,OAAO;QACL,cAAc,EAAE,oCAAoC;QACpD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,8EAA8E;QAC9E,uEAAuE;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,aAAa,EAAE,qBAAqB,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,aAAa;QAC9E,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC"}