audit-tools 0.34.41 → 0.35.0

package/dist/audit/orchestrator/intakeExecutors.js

@@ -1,33 +1,12 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { isGitRepo, writeJsonFile, buildSharedProviderConfirmation, writeSharedProviderConfirmation, readSharedProviderConfirmation, readProviderConfirmationInput, carryForwardConfirmationInput, retainAutoExclusions, detectDiscardedCapabilityReorder, capabilityOrderNonAnchors, advanceCapabilityOrderLlmRanked, unlinkProviderConfirmationInput, gatherDispatchableSources, resolveFreshSessionProviderName, resolveSessionConfig, ambientAuditorDescriptor, captureNewlyReachableBackendFriction, PROVIDER_CONFIRMATION_FRICTION_RUN_KEY, captureUnrankedCapabilityPromotionFriction, unmatchedExclusionPatterns, } from "audit-tools/shared";
-import { confirmProviders } from "./providerConfirmation.js";
-import { loadSessionConfig } from "../supervisor/sessionConfig.js";
+import { isGitRepo, writeJsonFile } from "audit-tools/shared";
 import { buildFileDisposition, isAuditExcludedStatus, } from "../extractors/disposition.js";
 import { buildRepoManifestFromFs } from "../extractors/fsIntake.js";
 import { loadIgnoreFile } from "../extractors/ignore.js";
-/**
- * Synthetic run key for Gate-0 friction. The confirmation gate runs BEFORE any run
- * id exists, and the capture chokepoint keys de-dup on {eventType, runId,
- * discriminator} — a stable constant here means the real discriminator (the backend
- * key) does the distinguishing, so a re-derive never double-logs the same backend.
- */
-/**
- * Detect signals that the resolved audit root may be the *wrong* directory.
- * Two heuristics, returned as zero or more human-readable warnings:
- *
- *  a. No-git-but-ancestor-is-repo — `root` is not a git repo but some ancestor
- *     directory is (you probably targeted a subdirectory instead of the repo
- *     root).
- *  b. Workspace-member — `root` has a `package.json` with a `name`, and its
- *     parent has a `package.json` declaring `workspaces` (you probably want to
- *     audit from the monorepo root).
- *
- * Returns an empty array when the scope looks correct. Never throws.
- */
+/** Detect signals that the resolved audit root may be the wrong directory. */
 export function detectMisScopeSmells(root) {
     const smells = [];
-    // (a) No .git here, but an ancestor is a git repository.
     if (!isGitRepo(root)) {
         let current = dirname(root);
         let previous = root;
@@ -40,12 +19,6 @@ export function detectMisScopeSmells(root) {
             current = dirname(current);
         }
     }
-    // (b) Workspace member of a parent monorepo.
-    // Walk up ancestor directories (up to 3 levels) looking for a package.json
-    // that declares a `workspaces` field. This handles standard nested monorepo
-    // layouts like `monorepo-root/packages/my-pkg` where the direct parent
-    // (`packages/`) has no package.json of its own. Stop early if a .git
-    // boundary is found (we already checked that case under heuristic (a)).
     const rootPkg = readPackageJson(root);
     if (rootPkg && rootPkg.name !== undefined) {
         let current = dirname(root);
@@ -58,10 +31,8 @@ export function detectMisScopeSmells(root) {
                 smells.push(`root appears to be a workspace member of a parent monorepo at '${current}' — consider auditing from the monorepo root instead`);
                 break;
             }
-            // Stop at a .git boundary — the repo root won't be a workspaces ancestor.
-            if (existsSync(join(current, ".git"))) {
+            if (existsSync(join(current, ".git")))
                 break;
-            }
             previous = current;
             current = dirname(current);
             levelsChecked++;
@@ -80,399 +51,9 @@ function readPackageJson(dir) {
             : undefined;
     }
     catch {
-        // Missing or malformed package.json — treat as absent for smell purposes.
         return undefined;
     }
 }
-/**
- * Headless deterministic fallback for the provider confirmation gate — mirrors
- * the `runIntentCheckpointAutoComplete` pattern. The conversation-first flow
- * emits a `provider_confirmation` host step; this runs only when `advanceAudit`
- * is driven headlessly with no host to confirm the provider pool, writing a
- * default provider_confirmation artifact so the pipeline can proceed.
- *
- * DC-2: audit is the single WRITER of the shared session-level confirmation at
- * `<root>/.audit-tools/provider-confirmation.json`. When `root` is known we also
- * write that shared artifact (atomic temp-then-rename under a file lock — CE-003)
- * so a subsequent remediate run can read + honor the same pool. The per-tool
- * `provider_confirmation` bundle field (the N-X06 seam contract) is unchanged;
- * the shared artifact carries the operator's reach-free route DECISION.
- *
- * G3 — the write half of the reconciliation gate. **This executor never silently
- * honors a newly-reachable backend.** If it is asked to promote while the gate
- * carries a delta and there is NO operator submission, it fails CLOSED (persists an
- * exclusion) and records a `newly_reachable_backend` friction event.
- *
- * That rule is deliberately NOT keyed on `autonomous` ALONE, and the asymmetry
- * matters: `autonomous` decides who gets ASKED — the CLI emits the delta prompt on
- * an attended run and folds straight to this executor on an unattended one — but it
- * can never make silently including an unconfirmed backend correct. This function is
- * exported and reachable from `advanceAudit` directly, so the no-silent-honor
- * property is enforced HERE rather than resting on a caller's branch being right (a
- * caller that promotes an attended delta without asking IS the bug the gate exists
- * to catch). Enforce in the tool, never in a caller remembering.
- *
- * R3-3 sharpens the edge rather than replacing it: on an autonomous run, a
- * submission CAN now exist (the host LLM answering the capability-ranker prompt),
- * but it is never an operator's reach decision — so `authoredByLlm` (derived below)
- * fails closed on reach exactly like `input === null` does. An LLM may rank
- * capability; it may never confirm a newly-reachable backend.
- *
- * A first-ever confirmation is unaffected: with no confirmation on disk there is no
- * decision to reconcile against, so the delta is empty and nothing fails closed.
- *
- * The persist is MANDATORY, not incidental: `provider_confirmation` is `PRIORITY[0]`,
- * so a delta that never clears is a drain LIVELOCK, not a no-op. On a successful
- * promotion the gate is CLEARED — the rebuild folds every reachable backend into
- * `provider_pool` (an excluded entry stays IN the pool), so all of REACH-NOW is now
- * CONFIRMED and the delta is empty by construction.
- */
-export async function runProviderConfirmationAutoComplete(bundle, root, artifactsDir, effectiveConfig, gate) {
-    // G2: prefer the EFFECTIVE dispatch config threaded from the next-step drain (the
-    // per-auditor descriptor resolved over the repo INTENT). The confirmed pool this
-    // executor builds + persists is what routes for the whole session, so it MUST reflect
-    // the current auditor's descriptor, not a re-read of the repo config
-    // (spec/unified-dispatch-worker-model.md). Fall back to the repo INTENT resolved against
-    // the AMBIENT descriptor when no effective config was threaded — e.g. the legacy headless
-    // advance-audit entrypoint, which carries no handshake but still HAS an environment, so
-    // its reachable lanes must appear in the confirmed roster (what the operator confirms is
-    // what routes). A `null` descriptor here would hide a declared+reachable backend from
-    // Gate-0 entirely. Degrade to the empty permissive default when the config is
-    // absent/unreadable — pricing is best-effort and must never block confirmation.
-    const sessionConfig = effectiveConfig ??
-        (artifactsDir
-            ? resolveSessionConfig(await loadSessionConfig(artifactsDir).catch(() => ({})), ambientAuditorDescriptor())
-            : {});
-    // Interactive Gate-0: the host may have submitted an operator ordering + host
-    // roster to `provider-confirmation.input.json` (spec/dispatch-quota.md).
-    // Absent ⇒ the tool's price-ascending suggestion (headless / no-operator path).
-    const rawInput = artifactsDir
-        ? await readProviderConfirmationInput(artifactsDir)
-        : null;
-    // The confirmation as it stands BEFORE this promotion — read once, used for the
-    // carry-forward merge below. Absent on a first-time confirmation.
-    const priorConfirmation = root ? await readSharedProviderConfirmation(root) : null;
-    /**
-     * R3-3 authorship, tool-derived — never host-supplied, so the host cannot mislabel
-     * it. On an autonomous run nobody is present to submit input, so a submission that
-     * exists there was written by the host LLM answering the ranker prompt
-     * (`nextStepHelpers.ts`'s `provider_confirmation` emission branch), never an
-     * operator. An attended submission is always the operator's, regardless of who
-     * technically typed it. This one boolean decides the reach fail-closed keying
-     * below, which side of the `capability_order_llm_ranked` provenance split
-     * (rule 1 vs rule 2) this promotion falls on, and the sanitize step next.
-     */
-    const authoredByLlm = gate?.autonomous === true && rawInput != null;
-    /**
-     * R3-3 sanitize — the LLM was asked exactly ONE question, so `capability_order` is
-     * the only field an LLM-authored submission may carry into the promotion. Every
-     * other field (`exclude` / `include` / `cost_order` / `host_models` /
-     * `dispatch_bias`) is an OPERATOR decision: the carry-forward branches and
-     * `retainAutoExclusions` are authorship-blind, so an un-stripped LLM `include`
-     * (or an `exclude` addressing a fail-closed pattern) would drop a prior
-     * auto-exclusion and silently re-admit a backend no human ever confirmed — the
-     * exact negation of the G3 gate, reachable one round after a fail-closed write.
-     * Stripped HERE, at the single point every consumer reads from, so the guarantee
-     * never depends on the prompt having asked nicely — and stripped LOUDLY: the
-     * dropped field names go to the progress summary rather than vanishing.
-     */
-    const droppedLlmFields = [];
-    let input = rawInput;
-    if (authoredByLlm && rawInput) {
-        for (const [key, value] of Object.entries(rawInput)) {
-            if (key !== "schema_version" && key !== "capability_order" && value !== undefined) {
-                droppedLlmFields.push(key);
-            }
-        }
-        if (droppedLlmFields.length > 0) {
-            droppedLlmFields.sort();
-            input = {
-                schema_version: rawInput.schema_version,
-                ...(rawInput.capability_order !== undefined
-                    ? { capability_order: rawInput.capability_order }
-                    : {}),
-            };
-        }
-    }
-    /**
-     * Which previously-ranked ids this submission may freely reposition (R3-3 rule 2)
-     * rather than treat as fixed anchors (rule 1) — see `capabilityOrderNonAnchors`.
-     * Threaded into BOTH the discard-detector below and the merge inside
-     * `carryForwardConfirmationInput`, so the two can never disagree about what an
-     * "anchor" is for this submission.
-     */
-    const capabilityNonAnchors = capabilityOrderNonAnchors(priorConfirmation?.policy?.capability_order_llm_ranked ?? [], authoredByLlm);
-    /** Models the capability gate flagged that this promotion clears WITHOUT ranking. */
-    let unrankedOnPromotion = [];
-    /**
-     * Operator `exclude` rules that matched NOTHING in the reach this gate gathered.
-     *
-     * ADVISORY, never a refusal — a zero-match rule is legitimate (the tool authors
-     * them itself, and an operator may pre-declare an exclusion for a backend that is
-     * not reachable yet). It is reported because it is the only available signal for
-     * the grammatically-VALID typo the authorship validator cannot catch:
-     * `openai-compatible:model-typo` has a real provider head and an open model
-     * segment, so it parses fine and excludes nothing.
-     *
-     * Computed inside `if (root)` below, which is the only place the gathered sources
-     * exist; empty everywhere else, which reports nothing rather than guessing.
-     */
-    let unmatchedExclusions = [];
-    /**
-     * Anchor ids whose reorder this promotion is about to DISCARD. Computed before the
-     * merge, from the RAW submission — `effectiveInput` already carries the merged (i.e.
-     * reorder-free) order, so asking it afterwards can never reveal what was dropped.
-     *
-     * Reported rather than honored: repositioning an already-ranked model without
-     * restating the whole roster needs the anchor-provenance split in `docs/backlog.md`.
-     * What is NOT acceptable is doing it silently — an accepted-then-discarded operator
-     * decision is the same "the operator had to notice" failure the reach delta and the
-     * capability fail-open are both reported for. An LLM-authored submission is held to
-     * the identical honesty rule: reordering an anchor it must not move is discarded
-     * AND reported exactly like an operator's would be.
-     */
-    const discardedReorder = detectDiscardedCapabilityReorder(priorConfirmation?.policy?.capability_order ?? [], input?.capability_order ?? [], capabilityNonAnchors, authoredByLlm);
-    // G3 fail-closed reconciliation: a backend the operator never confirmed must not
-    // become dispatchable merely because it is reachable. Excluding it is the
-    // conservative direction — the run proceeds on the confirmed backends.
-    //
-    // Keyed on `input === null` OR `authoredByLlm`: a submission IS the operator's
-    // decision and supersedes ONLY on an attended run (the gate prompts the delta and
-    // this promotes their answer) — with NO submission, or one an autonomous run's LLM
-    // wrote, there is no OPERATOR decision to honor, and including the backend would be
-    // the silent dispatch the gate exists to prevent. R3-3 draws this line explicitly:
-    // an LLM may rank capability (that judgment IS recorded, see `capability_order`
-    // below); it may never confirm a newly-reachable backend on the operator's behalf.
-    // See the header for why this is enforced here rather than in the caller's branch.
-    //
-    // A″: each backend carries the `DispatchExclusionPattern` that rules out EXACTLY
-    // it — `provider:model` where the model is knowable, else the coarse `provider`
-    // tier for a CLI whose model only arrives at the dispatch handshake. So excluding
-    // one new model of a multi-model backend no longer drops that backend's other
-    // sources. The pattern is built by the gate beside the key it compared, never
-    // re-derived here, so the rule persisted cannot drift from the delta detected.
-    // Stage 5: the autonomous fail-closed write emits the `service:` axis, because that
-    // is the axis that does not decay and closes multi-transport residue durably.
-    // R3-3 (SHIPPED): a headless run with a non-empty capability-evidence delta no
-    // longer wedges here — `nextStepHelpers.ts`'s emission branch routes it to the
-    // host LLM instead of folding to this executor, addressing the same ranker prompt
-    // an operator would answer. The LLM's `capability_order` submission is promoted
-    // through this exact seam on the NEXT invocation (the generic `if (input)` fold in
-    // `nextStepHelpers.ts` applies regardless of attended/autonomous), tagged
-    // LLM-authored via `authoredByLlm` above rather than fabricated locally — never a
-    // locally-derived proxy (context window, price, name), which would manufacture
-    // evidence where the design says there is none. See
-    // `docs/reviews/capability-evidence-salvage-2026-07-20.md` → Landing gate for the
-    // wedge this replaces.
-    const effectiveInput = carryForwardConfirmationInput(input, priorConfirmation, authoredByLlm);
-    const failClosed = input === null || authoredByLlm ? [...(gate?.newlyReachable ?? [])] : [];
-    // Read the CARRIED input, not the raw submission: the operator's prior exclusions are
-    // a durable rule, and rebuilding this list from `input.exclude` alone is what let a
-    // capability-only submission silently lift them — a fail-OPEN, the worst direction.
-    //
-    // Kept SEPARATE from the gate's own fail-closed patterns below. Merging them was the
-    // mirror-image bug: the carry-forward could not tell the two apart, so a tool guess
-    // became permanent operator policy and the operator's next submission no longer
-    // superseded it (with no signal — by then the backend is a confirmed key, so the
-    // reconciliation delta never re-surfaces it either).
-    const exclude = [...new Set(effectiveInput?.exclude ?? [])];
-    // Gate-authored. The NEW fail-closed patterns from this promotion, UNIONED with the
-    // prior ones that this submission did not address ({@link retainAutoExclusions}).
-    //
-    // Rebuilding from `failClosed` alone was a fail-OPEN: an excluded entry still counts
-    // as a confirmed key, so the reach delta goes empty after the first promotion and the
-    // next one dropped the exclusion entirely — re-admitting a backend the operator never
-    // confirmed. Carrying is therefore mandatory; what a submission supersedes is only the
-    // patterns it actually speaks to.
-    const autoExclude = [
-        ...new Set([
-            ...retainAutoExclusions(priorConfirmation?.policy?.auto_exclude ?? [], input),
-            ...failClosed.map((b) => b.service_exclusion_pattern ?? b.exclusion_pattern),
-        ]),
-    ];
-    const confirmation = confirmProviders(sessionConfig, process.env, 
-    // The per-tool seam carries no policy provenance — it is a pool SNAPSHOT, so what
-    // matters here is only which entries are excluded. Union, deliberately.
-    [...exclude, ...autoExclude], effectiveInput ?? undefined);
-    const artifactsWritten = ["provider_confirmation.json"];
-    if (root) {
-        // Gate-0 source fold: expand every dispatchable source pool (the explicit
-        // `sources[]`) so the confirmed cost ordering the operator approves is exactly
-        // what routes.
-        const primaryProviderName = resolveFreshSessionProviderName(undefined, sessionConfig, {
-            env: process.env,
-        });
-        const { sources } = await gatherDispatchableSources(sessionConfig, primaryProviderName);
-        // The zero-match advisory's operand: the reach this gate is actually confirming.
-        // Both halves are needed — `sources` carries the endpoints a `host:` rule keys on,
-        // and the provider pool carries the CLI/host entries that have no source row at all
-        // (a `transport:codex` rule would otherwise read as matching nothing).
-        //
-        // Honest limit: a pool entry carries no endpoint, so a `host:` rule naming a
-        // launcher COMMAND path can still be reported unmatched. Advisory-only, so the
-        // cost of that residue is one line of noise, never a blocked run.
-        const gatheredBackends = [
-            ...sources.map((source) => ({
-                transport: source.transport,
-                ...(source.service !== undefined ? { service: source.service } : {}),
-                ...(source.model !== undefined ? { model: source.model } : {}),
-                ...(source.endpoint !== undefined ? { endpoint: source.endpoint } : {}),
-            })),
-            ...confirmation.provider_pool.map((entry) => ({
-                transport: entry.name,
-                ...(entry.model_id !== undefined ? { model: entry.model_id } : {}),
-            })),
-        ];
-        // The OPERATOR's rules only — never `autoExclude`. The tool authors zero-match
-        // rules by design (a fail-closed exclusion outlives the reach that prompted it),
-        // so folding them in would make this advisory fire on the tool's own correct
-        // behavior every run — the fastest way to train an operator to read past it.
-        unmatchedExclusions = unmatchedExclusionPatterns(exclude, gatheredBackends);
-        // R3-3: advance the LLM-ranked authorship set across this promotion (rule 1/2 —
-        // see `advanceCapabilityOrderLlmRanked`), from the RAW submission (never
-        // `effectiveInput.capability_order`, which is already the merged ordering and
-        // no longer distinguishes "named by this submission" from "carried forward").
-        const capabilityOrderLlmRanked = advanceCapabilityOrderLlmRanked(priorConfirmation?.policy?.capability_order_llm_ranked ?? [], priorConfirmation?.policy?.capability_order ?? [], input?.capability_order, authoredByLlm);
-        await writeSharedProviderConfirmation(root, buildSharedProviderConfirmation(sessionConfig, process.env, exclude, 
-        // `effectiveInput`, never the raw submission — the sixth face of the same
-        // defect class, and the last one: reading `input.include` here destroys a
-        // prior `policy.include` on any submission that does not restate it. Unlike
-        // the `exclude` case this fails CLOSED (a self-spawn-blocked provider the
-        // operator deliberately opted back in silently drops out of the pool again),
-        // so it is not a routing-safety hole — but it is still an operator decision
-        // deleted without a signal.
-        effectiveInput?.include ?? [], undefined, effectiveInput ?? undefined, sources, autoExclude, capabilityOrderLlmRanked));
-        artifactsWritten.push("provider-confirmation.json");
-        // G3: the shared confirmation — the ONLY artifact dispatch reads, and the gate's
-        // CONFIRMED operand — now folds every reachable backend into `provider_pool`. So
-        // the delta is empty by construction and the gate must say so: leaving it set
-        // re-selects this `PRIORITY[0]` obligation on the very next fold (autonomous →
-        // re-promote until `advance` throws; attended → re-prompt a delta that is now a
-        // lie). Cleared HERE, inside `if (root)`, because that is exactly where CONFIRMED
-        // actually changed.
-        if (gate)
-            gate.newlyReachable = [];
-        // Same clearing rule, same reason: the promotion just wrote `capability_rank` for
-        // everything the operator/LLM ordered, so the capability delta is empty by
-        // construction and a stale non-empty value re-selects this `PRIORITY[0]`
-        // obligation forever. Cleared HERE because this is where the ranks actually
-        // changed. (Any model still genuinely unranked is re-detected next invocation by
-        // `resolveUnevidencedCapabilityPools` — the delta is recomputed, never inherited.)
-        //
-        // What the submission did NOT rank is captured first: on the autonomous path there
-        // is no input file at all and this executor is deterministic, so the delta clears
-        // with nothing recorded. That promotion is legitimate (refusing would livelock,
-        // and fail-closed-excluding an unranked pool would silently shrink the dispatch
-        // set) but it must not be SILENT — it is reported in the progress summary.
-        unrankedOnPromotion = (gate?.unevidencedCapability ?? []).filter((model) => !(effectiveInput?.capability_order ?? []).includes(model));
-        if (gate)
-            gate.unevidencedCapability = [];
-    }
-    // G3 consume-and-INVALIDATE. The input has now been promoted, so it is spent — and
-    // leaving it on disk is what would make the gate never fire at all: a LATER delta
-    // re-opens this obligation, the CLI finds the old submission still sitting there,
-    // routes to this executor instead of emitting the prompt, and folds the
-    // newly-reachable backend into the confirmed pool with `excluded: false` — silently
-    // dispatching a backend the operator never confirmed, the exact negation of the
-    // gate. Unlinking makes a stale submission unable to answer a question it was never
-    // asked.
-    //
-    // Guarded on `root`: without it the shared artifact — the only one dispatch reads —
-    // was never written, so the submission has NOT been promoted anywhere durable.
-    // Deleting it would destroy the operator's decision unrecoverably.
-    if (input && artifactsDir && root) {
-        await unlinkProviderConfirmationInput(artifactsDir);
-    }
-    if (failClosed.length > 0 && artifactsDir) {
-        // Loud, not silent: the operator learns (out of band) that autonomy ruled a
-        // backend out on their behalf, and can re-include it at the next attended gate.
-        // Gate-0 predates any run id, so the facts are discriminated by backend key under
-        // a stable synthetic run key — enough for the de-dup this capture needs.
-        await captureNewlyReachableBackendFriction(artifactsDir, PROVIDER_CONFIRMATION_FRICTION_RUN_KEY, failClosed.map((b) => b.key), "audit-code");
-    }
-    if (unrankedOnPromotion.length > 0 && artifactsDir) {
-        // Parity with the reach delta above, and for the same reason: the progress summary
-        // states this, but a drain can fold that summary away — the friction record is what
-        // survives to the close-out walk. Same synthetic run key: Gate-0 predates any run id.
-        await captureUnrankedCapabilityPromotionFriction(artifactsDir, PROVIDER_CONFIRMATION_FRICTION_RUN_KEY, unrankedOnPromotion, "audit-code");
-    }
-    return {
-        updated: { ...bundle, provider_confirmation: confirmation },
-        artifacts_written: artifactsWritten,
-        progress_summary: renderConfirmationSummary(input, failClosed, unrankedOnPromotion, discardedReorder, droppedLlmFields, unmatchedExclusions),
-    };
-}
-function renderConfirmationSummary(input, newlyReachable, unrankedOnPromotion = [], discardedReorder = [], droppedLlmFields = [], unmatchedExclusions = []) {
-    // ACCUMULATE, never early-return. These outcomes CO-OCCUR: a submission can reorder
-    // anchors (discarded) while the same promotion clears a capability delta it did not
-    // rank (`unrankedOnPromotion`). An if/return chain reported only the first, so the
-    // second cleared SILENTLY — the very thing each of these lines exists to prevent.
-    // Ordering within the list is significance, not exclusivity.
-    const parts = [];
-    // R3-3 sanitize report — like the discarded reorder below, this states what the
-    // tool DECLINED to do: an LLM-authored submission carried operator-only fields and
-    // they were stripped, not honored. Silent stripping would leave the host believing
-    // its exclude/include took effect.
-    if (droppedLlmFields.length > 0) {
-        parts.push(`Dropped operator-only field(s) from the LLM-authored submission ` +
-            `(${droppedLlmFields.join(", ")}) — an autonomous ranking answer may carry ` +
-            `only capability_order; exclude/include/cost_order/host_models/dispatch_bias ` +
-            `are operator decisions and require an attended confirmation.`);
-    }
-    // First: the operator submitted a decision and this promotion did not apply it.
-    // Every other line reports what the tool DID; this reports what it DECLINED to do,
-    // which the operator would otherwise have to notice by diffing the artifact.
-    if (discardedReorder.length > 0) {
-        const message = `Your capability_order REORDERED already-ranked model(s) ` +
-            `(${discardedReorder.join(", ")}), and that reorder was NOT applied — ` +
-            `previously-ranked models keep their confirmed positions, and only NEW models ` +
-            `are placed by this answer. To change the relative order of models you already ` +
-            `ranked, restate the FULL ordering (every previously-ranked model) in one ` +
-            `capability_order. Any new models in this submission were still placed.`;
-        // Also to stderr: a progress summary can be folded away by a drain, and a
-        // discarded operator decision must not vanish with it.
-        process.stderr.write(`WARNING: ${message}\n`);
-        parts.push(message);
-    }
-    // Say the true thing when the capability delta is cleared with nothing recorded.
-    // The autonomous path folds here with NO input file, and this executor is purely
-    // deterministic — there is no LLM on it to synthesize an ordering. Clearing the
-    // delta silently would be the "silently routed around" the obligation exists to
-    // prevent, so the no-evidence promotion is stated rather than implied.
-    if (unrankedOnPromotion.length > 0) {
-        parts.push(`Promoted the provider confirmation with NO capability evidence for ` +
-            `${unrankedOnPromotion.length} model(s) (${unrankedOnPromotion.join(", ")}) — ` +
-            `they stay unranked and will fail OPEN at the admission capability floor. ` +
-            `Supply a ranker, or answer capability_order on an attended run.`);
-    }
-    if (newlyReachable.length > 0) {
-        parts.push(`No operator decision covers ${newlyReachable.length} newly-reachable ` +
-            `backend(s), so they were fail-closed-excluded rather than dispatched ` +
-            `unconfirmed (${newlyReachable.map((b) => b.key).join(", ")}).`);
-    }
-    // LAST, and ADVISORY — the only line here that reports a suspicion rather than an
-    // outcome. It exists for the typo the authorship validator provably cannot catch:
-    // `openai-compatible:model-typo` is grammatical (real provider head, open model
-    // segment), so it parses, persists, and rules out nothing. A zero-match rule is NOT
-    // an error and is never refused — the tool authors zero-match rules itself, and an
-    // operator may pre-declare an exclusion for a backend they have not configured yet
-    // — so this states the fact and stops. Phrased to stand alone, since it may be the
-    // only part.
-    if (unmatchedExclusions.length > 0) {
-        parts.push(`Note: ${unmatchedExclusions.length} of your \`exclude\` rule(s) matched no ` +
-            `backend in the pool just confirmed ` +
-            `(${unmatchedExclusions.map((p) => `\`${p}\``).join(", ")}) — they are kept ` +
-            `as policy (a rule may legitimately name a backend that is not reachable ` +
-            `yet), but if one was meant to rule something out, it is not doing so. ` +
-            `Check the model/provider/host segment against the table above. Advisory ` +
-            `only — nothing was blocked.`);
-    }
-    if (parts.length > 0)
-        return parts.join(" ");
-    return input
-        ? "Applied operator provider confirmation (cost ordering + host roster)."
-        : "Auto-completed provider confirmation gate (headless).";
-}
 export async function runIntakeExecutor(bundle, root, artifactsDir) {
     const ignore = await loadIgnoreFile(root);
     const repoManifest = await buildRepoManifestFromFs({
@@ -492,9 +73,6 @@ export async function runIntakeExecutor(bundle, root, artifactsDir) {
         mis_scope_smells: detectMisScopeSmells(root),
     };
     const artifactsWritten = ["repo_manifest.json", "file_disposition.json"];
-    // Persist the scope summary alongside the other intake artifacts when we know
-    // where the artifacts directory is. Hosts read scope_summary.json directly;
-    // the typed `scope_summary` field on ExecutorRunResult is the in-process channel.
     if (artifactsDir) {
         await writeJsonFile(join(artifactsDir, "scope_summary.json"), scopeSummary);
         artifactsWritten.push("scope_summary.json");

package/dist/audit/orchestrator/intakeExecutors.js.map

@@ -1 +1 @@
-{"version":3,"file":"intakeExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/intakeExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,aAAa,EACb,+BAA+B,EAC/B,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,oBAAoB,EACpB,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,oCAAoC,EACpC,sCAAsC,EACtC,0CAA0C,EAC1C,0BAA0B,GAK3B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AASzD;;;;;GAKG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,yDAAyD;IACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,OAAO,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CACT,kCAAkC,OAAO,uFAAuF,CACjI,CAAC;gBACF,MAAM;YACR,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,OAAO,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,aAAa,GAAG,SAAS,EAAE,CAAC;YACpE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,kEAAkE,OAAO,sDAAsD,CAChI,CAAC;gBACF,MAAM;YACR,CAAC;YACD,0EAA0E;YAC1E,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACtC,MAAM;YACR,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YACzC,CAAC,CAAE,MAA2B;YAC9B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAsB,EACtB,IAAa,EACb,YAAqB,EACrB,eAA+B,EAC/B,IAAoC;IAEpC,kFAAkF;IAClF,iFAAiF;IACjF,sFAAsF;IACtF,qEAAqE;IACrE,yFAAyF;IACzF,0FAA0F;IAC1F,wFAAwF;IACxF,yFAAyF;IACzF,sFAAsF;IACtF,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,aAAa,GACjB,eAAe;QACf,CAAC,YAAY;YACX,CAAC,CAAC,oBAAoB,CAClB,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EACvD,wBAAwB,EAAE,CAC3B;YACH,CAAC,CAAC,EAAE,CAAC,CAAC;IACV,8EAA8E;IAC9E,yEAAyE;IACzE,gFAAgF;IAChF,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,MAAM,6BAA6B,CAAC,YAAY,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC;IACT,gFAAgF;IAChF,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF;;;;;;;;;OASG;IACH,MAAM,aAAa,GAAG,IAAI,EAAE,UAAU,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI,CAAC;IACpE;;;;;;;;;;;;OAYG;IACH,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,KAAK,GAAG,QAAQ,CAAC;IACrB,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,kBAAkB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAClF,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,GAAG;gBACN,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;IACH,CAAC;IACD;;;;;;OAMG;IACH,MAAM,oBAAoB,GAAG,yBAAyB,CACpD,iBAAiB,EAAE,MAAM,EAAE,2BAA2B,IAAI,EAAE,EAC5D,aAAa,CACd,CAAC;IACF,qFAAqF;IACrF,IAAI,mBAAmB,GAAa,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,IAAI,mBAAmB,GAAa,EAAE,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,MAAM,gBAAgB,GAAG,gCAAgC,CACvD,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE,EACjD,KAAK,EAAE,gBAAgB,IAAI,EAAE,EAC7B,oBAAoB,EACpB,aAAa,CACd,CAAC;IACF,iFAAiF;IACjF,0EAA0E;IAC1E,uEAAuE;IACvE,EAAE;IACF,+EAA+E;IAC/E,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,mFAAmF;IACnF,gFAAgF;IAChF,mFAAmF;IACnF,mFAAmF;IACnF,EAAE;IACF,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,oFAAoF;IACpF,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,kFAAkF;IAClF,gFAAgF;IAChF,mFAAmF;IACnF,0EAA0E;IAC1E,kFAAkF;IAClF,+EAA+E;IAC/E,oDAAoD;IACpD,kFAAkF;IAClF,uBAAuB;IACvB,MAAM,cAAc,GAAG,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC9F,MAAM,UAAU,GACd,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,sFAAsF;IACtF,oFAAoF;IACpF,oFAAoF;IACpF,EAAE;IACF,qFAAqF;IACrF,oFAAoF;IACpF,gFAAgF;IAChF,iFAAiF;IACjF,qDAAqD;IACrD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,oFAAoF;IACpF,kFAAkF;IAClF,EAAE;IACF,qFAAqF;IACrF,sFAAsF;IACtF,sFAAsF;IACtF,uFAAuF;IACvF,kCAAkC;IAClC,MAAM,WAAW,GAAG;QAClB,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC;YAC7E,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,CAAC,iBAAiB,CAAC;SAC7E,CAAC;KACH,CAAC;IACF,MAAM,YAAY,GAAG,gBAAgB,CACnC,aAAa,EACb,OAAO,CAAC,GAAG;IACX,kFAAkF;IAClF,wEAAwE;IACxE,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,EAC5B,cAAc,IAAI,SAAS,CAC5B,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACxD,IAAI,IAAI,EAAE,CAAC;QACT,0EAA0E;QAC1E,+EAA+E;QAC/E,eAAe;QACf,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,SAAS,EAAE,aAAa,EAAE;YACpF,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACxF,iFAAiF;QACjF,mFAAmF;QACnF,oFAAoF;QACpF,uEAAuE;QACvE,EAAE;QACF,6EAA6E;QAC7E,+EAA+E;QAC/E,kEAAkE;QAClE,MAAM,gBAAgB,GAAwB;YAC5C,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;YACH,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC5C,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,CAAC;SACJ,CAAC;QACF,+EAA+E;QAC/E,iFAAiF;QACjF,6EAA6E;QAC7E,6EAA6E;QAC7E,mBAAmB,GAAG,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC5E,gFAAgF;QAChF,yEAAyE;QACzE,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,wBAAwB,GAAG,+BAA+B,CAC9D,iBAAiB,EAAE,MAAM,EAAE,2BAA2B,IAAI,EAAE,EAC5D,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,IAAI,EAAE,EACjD,KAAK,EAAE,gBAAgB,EACvB,aAAa,CACd,CAAC;QACF,MAAM,+BAA+B,CACnC,IAAI,EACJ,+BAA+B,CAC7B,aAAa,EACb,OAAO,CAAC,GAAG,EACX,OAAO;QACP,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,4BAA4B;QAC5B,cAAc,EAAE,OAAO,IAAI,EAAE,EAC7B,SAAS,EACT,cAAc,IAAI,SAAS,EAC3B,OAAO,EACP,WAAW,EACX,wBAAwB,CACzB,CACF,CAAC;QACF,gBAAgB,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACpD,iFAAiF;QACjF,iFAAiF;QACjF,8EAA8E;QAC9E,+EAA+E;QAC/E,gFAAgF;QAChF,kFAAkF;QAClF,oBAAoB;QACpB,IAAI,IAAI;YAAE,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACnC,kFAAkF;QAClF,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,iFAAiF;QACjF,mFAAmF;QACnF,EAAE;QACF,mFAAmF;QACnF,kFAAkF;QAClF,gFAAgF;QAChF,gFAAgF;QAChF,2EAA2E;QAC3E,mBAAmB,GAAG,CAAC,IAAI,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrE,CAAC;QACF,IAAI,IAAI;YAAE,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;IAC5C,CAAC;IACD,mFAAmF;IACnF,kFAAkF;IAClF,kFAAkF;IAClF,wEAAwE;IACxE,oFAAoF;IACpF,gFAAgF;IAChF,oFAAoF;IACpF,SAAS;IACT,EAAE;IACF,oFAAoF;IACpF,+EAA+E;IAC/E,mEAAmE;IACnE,IAAI,KAAK,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;QAC1C,4EAA4E;QAC5E,gFAAgF;QAChF,kFAAkF;QAClF,yEAAyE;QACzE,MAAM,oCAAoC,CACxC,YAAY,EACZ,sCAAsC,EACtC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAC5B,YAAY,CACb,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;QACnD,mFAAmF;QACnF,oFAAoF;QACpF,sFAAsF;QACtF,MAAM,0CAA0C,CAC9C,YAAY,EACZ,sCAAsC,EACtC,mBAAmB,EACnB,YAAY,CACb,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE;QAC3D,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,yBAAyB,CACzC,KAAK,EACL,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,CACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAuC,EACvC,cAAgD,EAChD,sBAAyC,EAAE,EAC3C,mBAAsC,EAAE,EACxC,mBAAsC,EAAE,EACxC,sBAAyC,EAAE;IAE3C,oFAAoF;IACpF,oFAAoF;IACpF,mFAAmF;IACnF,kFAAkF;IAClF,6DAA6D;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,gFAAgF;IAChF,mFAAmF;IACnF,mFAAmF;IACnF,mCAAmC;IACnC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,kEAAkE;YAChE,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;YAC5E,8EAA8E;YAC9E,8DAA8D,CACjE,CAAC;IACJ,CAAC;IACD,gFAAgF;IAChF,mFAAmF;IACnF,6EAA6E;IAC7E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GACX,0DAA0D;YAC1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;YACvE,+EAA+E;YAC/E,gFAAgF;YAChF,2EAA2E;YAC3E,wEAAwE,CAAC;QAC3E,0EAA0E;QAC1E,uDAAuD;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,gFAAgF;IAChF,uEAAuE;IACvE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,qEAAqE;YACnE,GAAG,mBAAmB,CAAC,MAAM,cAAc,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAC/E,2EAA2E;YAC3E,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CACR,+BAA+B,cAAc,CAAC,MAAM,mBAAmB;YACrE,uEAAuE;YACvE,gBAAgB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAClE,CAAC;IACJ,CAAC;IACD,kFAAkF;IAClF,kFAAkF;IAClF,gFAAgF;IAChF,oFAAoF;IACpF,mFAAmF;IACnF,mFAAmF;IACnF,mFAAmF;IACnF,aAAa;IACb,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,SAAS,mBAAmB,CAAC,MAAM,0CAA0C;YAC3E,qCAAqC;YACrC,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YAC7E,0EAA0E;YAC1E,wEAAwE;YACxE,0EAA0E;YAC1E,6BAA6B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,KAAK;QACV,CAAC,CAAC,uEAAuE;QACzE,CAAC,CAAC,uDAAuD,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,IAAY,EACZ,YAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;QACjD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAC7C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAC9C,CAAC,MAAM,CAAC;IAET,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,mGAAmG,CACvI,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAiB;QACjC,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,cAAc;QACpC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC;QAC9B,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC;KAC7C,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IAEzE,8EAA8E;IAC9E,4EAA4E;IAC5E,kFAAkF;IAClF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,YAAY,CAAC,CAAC;QAC5E,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GACnB,gCAAgC,YAAY,CAAC,KAAK,CAAC,MAAM,SAAS;QAClE,IAAI,cAAc,uBAAuB,IAAI,UAAU,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAClG,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,KAAK,YAAY,CAAC,gBAAgB,CAAC,MAAM,uBAAuB;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC;IAEN,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,aAAa,EAAE,YAAY;YAC3B,gBAAgB,EAAE,WAAW;SAC9B;QACD,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,YAAY;KAC5B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"intakeExecutors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/intakeExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAQzD,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,OAAO,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CACT,kCAAkC,OAAO,uFAAuF,CACjI,CAAC;gBACF,MAAM;YACR,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,OAAO,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,aAAa,GAAG,SAAS,EAAE,CAAC;YACpE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,kEAAkE,OAAO,sDAAsD,CAChI,CAAC;gBACF,MAAM;YACR,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAE,MAAM;YAC7C,QAAQ,GAAG,OAAO,CAAC;YACnB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YACzC,CAAC,CAAE,MAA2B;YAC9B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,IAAY,EACZ,YAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;QACjD,IAAI;QACJ,MAAM;QACN,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAC7C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAC9C,CAAC,MAAM,CAAC;IAET,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,mGAAmG,CACvI,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAiB;QACjC,SAAS,EAAE,IAAI;QACf,oBAAoB,EAAE,cAAc;QACpC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC;QAC9B,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC;KAC7C,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACzE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,EAAE,YAAY,CAAC,CAAC;QAC5E,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GACnB,gCAAgC,YAAY,CAAC,KAAK,CAAC,MAAM,SAAS;QAClE,IAAI,cAAc,uBAAuB,IAAI,UAAU,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAClG,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,KAAK,YAAY,CAAC,gBAAgB,CAAC,MAAM,uBAAuB;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC;IAEN,OAAO;QACL,OAAO,EAAE;YACP,GAAG,MAAM;YACT,aAAa,EAAE,YAAY;YAC3B,gBAAgB,EAAE,WAAW;SAC9B;QACD,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,YAAY;KAC5B,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/nextStep.d.ts

@@ -24,19 +24,6 @@ export interface DecideNextStepOptions {
      * Defaults to `true`.
      */
     emitStaleness?: boolean;
-    /**
-     * Forwarded to `deriveAuditState` — the G3 reconciliation gate's precomputed
-     * delta. MUST be passed anywhere the selection drives an executor: the obligation
-     * engine's `derive` is gate-aware, so a gate-blind `decideNextStep` here would
-     * disagree with it and dispatch the executor for a DIFFERENT obligation.
-     */
-    newlyReachableBackends?: readonly string[];
-    /**
-     * Forwarded to `deriveAuditState` — the capability-evidence gate's precomputed
-     * delta. Same MUST as above: a gate-blind `decideNextStep` would disagree with the
-     * obligation engine's gate-aware `derive` and dispatch the wrong executor.
-     */
-    unevidencedCapabilityPools?: readonly string[];
 }
 export declare function decideNextStep(bundle: ArtifactBundle, options?: DecideNextStepOptions): NextStepDecision;
 /**

package/dist/audit/orchestrator/nextStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE,eAAO,MAAM,QAAQ,EAAE,MAAM,EAmC5B,CAAC;AAkCF,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAAE,GAC7B,eAAe,GAAG,SAAS,CAE7B;AAED,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,qBAA0B,GAClC,gBAAgB,CA6ClB;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}
+{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE,eAAO,MAAM,QAAQ,EAAE,MAAM,EAkC5B,CAAC;AAkCF,wBAAgB,cAAc,CAC5B,WAAW,EAAE,eAAe,EAAE,GAC7B,eAAe,GAAG,SAAS,CAE7B;AAED,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,qBAA0B,GAClC,gBAAgB,CAuClB;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}

package/dist/audit/orchestrator/nextStep.js

@@ -9,7 +9,6 @@ import { deriveAuditState } from "./state.js";
  */
 export const FRICTION_CAPTURE_OBLIGATION_ID = "friction_capture_current";
 export const PRIORITY = [
-    "provider_confirmation",
     "repo_manifest",
     "file_disposition",
     "auto_fixes_applied",
@@ -84,12 +83,6 @@ export function decideNextStep(bundle, options = {}) {
     }
     const state = deriveAuditState(bundle, {
         emitStaleness: options.emitStaleness ?? true,
-        ...(options.newlyReachableBackends
-            ? { newlyReachableBackends: options.newlyReachableBackends }
-            : {}),
-        ...(options.unevidencedCapabilityPools
-            ? { unevidencedCapabilityPools: options.unevidencedCapabilityPools }
-            : {}),
     });
     const next = findObligation(state.obligations);
     if (!next) {

package/dist/audit/orchestrator/nextStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"nextStep.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,uBAAuB;IACvB,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,4BAA4B;IAC5B,qBAAqB;IACrB,gCAAgC;IAChC,0BAA0B;IAC1B,2BAA2B;IAC3B,iCAAiC;IACjC,2BAA2B;IAC3B,4EAA4E;IAC5E,6EAA6E;IAC7E,oEAAoE;IACpE,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IACvB,kCAAkC;IAClC,oCAAoC;IACpC,+BAA+B;IAC/B,4BAA4B;IAC5B,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,mBAAmB;IACnB,6BAA6B;IAC7B,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,yEAAyE;IACzE,mFAAmF;IACnF,8BAA8B;CAC/B,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,oCAAoC;IAC3C,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnD,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC/C,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,6DAA6D,YAAY,4GAA4G,CACtL,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,qDAAqD,YAAY,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CAC/L,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,oCAAoC,EAAE,CAAC;AAEvC,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAC5B,WAA8B;IAE9B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AA0BD,MAAM,UAAU,cAAc,CAC5B,MAAsB,EACtB,UAAiC,EAAE;IAEnC,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,GAAG,CAAC,OAAO,CAAC,sBAAsB;YAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,0BAA0B;YACpC,CAAC,CAAC,EAAE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK;YACL,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,UAAU;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,OAAO;QACL,KAAK;QACL,mBAAmB,EAAE,IAAI,CAAC,EAAE;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;QACvC,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG;YAC/D,CAAC,CAAC,oCAAoC,IAAI,CAAC,EAAE,8IAA8I;KAC9L,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa;IAEb,OAAO,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"nextStep.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/nextStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,4BAA4B;IAC5B,qBAAqB;IACrB,gCAAgC;IAChC,0BAA0B;IAC1B,2BAA2B;IAC3B,iCAAiC;IACjC,2BAA2B;IAC3B,4EAA4E;IAC5E,6EAA6E;IAC7E,oEAAoE;IACpE,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IACvB,kCAAkC;IAClC,oCAAoC;IACpC,+BAA+B;IAC/B,4BAA4B;IAC5B,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,4BAA4B;IAC5B,mBAAmB;IACnB,6BAA6B;IAC7B,gFAAgF;IAChF,kFAAkF;IAClF,+EAA+E;IAC/E,yEAAyE;IACzE,mFAAmF;IACnF,8BAA8B;CAC/B,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,oCAAoC;IAC3C,KAAK,MAAM,YAAY,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnD,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC/C,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,6DAA6D,YAAY,4GAA4G,CACtL,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,qDAAqD,YAAY,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CAC/L,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,oCAAoC,EAAE,CAAC;AAEvC,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAC5B,WAA8B;IAE9B,OAAO,6BAA6B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC9D,CAAC;AAaD,MAAM,UAAU,cAAc,CAC5B,MAAsB,EACtB,UAAiC,EAAE;IAEnC,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE;QACrC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;KAC7C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK;YACL,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EACJ,KAAK,CAAC,MAAM,KAAK,UAAU;gBACzB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,6CAA6C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,OAAO;QACL,KAAK;QACL,mBAAmB,EAAE,IAAI,CAAC,EAAE;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;QACvC,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG;YAC/D,CAAC,CAAC,oCAAoC,IAAI,CAAC,EAAE,8IAA8I;KAC9L,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa;IAEb,OAAO,oBAAoB,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC"}

package/dist/audit/orchestrator/planningExecutors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"planningExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/planningExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAkCjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAMnD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CAU5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,SAAS,EAAE,EACzB,UAAU,EAAE,SAAS,EAAE,EACvB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,SAAS,EAAE,CAkBb;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACtC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,KAAK,CAAC,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAmQ5B"}
+{"version":3,"file":"planningExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/planningExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAmCjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAMnD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CAU5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,SAAS,EAAE,EACzB,UAAU,EAAE,SAAS,EAAE,EACvB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,SAAS,EAAE,CAkBb;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACtC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,KAAK,CAAC,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAqQ5B"}

package/dist/audit/orchestrator/planningExecutors.js

@@ -9,6 +9,7 @@ import { taskContentTokens } from "./reviewPacketSizing.js";
 import { computeRiskEstimate } from "./auditTaskUtils.js";
 import { buildTaskAffinityGraph } from "./taskAffinityGraph.js";
 import { resolveEffectiveLenses } from "./lensSelection.js";
+import { isUnmeasuredLineCount } from "../cli/lineIndex.js";
 import { autoCompleteTrivialCoverage } from "./trivialAudit.js";
 import { applyContentAddressedPreservation, coverageContentSignature, readCoverageElementBaselines, recordCoverageElementBaselines, withCoverageElementBaselines, } from "./coverageElementBaseline.js";
 import { interpretFreeFormIntentForAudit } from "./intentInterpreter.js";
@@ -194,7 +195,9 @@ export async function runPlanningExecutor(bundle, root, lineIndex = {}, sizeInde
     const pendingRequeueTasks = selectUncoveredRequeueTasks(requeuePayload.tasks, taggedAuditTasks, effectiveLenses).map((t) => ({
         ...t,
         file_line_counts: Object.fromEntries(t.file_paths
-            .filter((p) => lineIndex[p] != null)
+            // Exclude the unmeasured sentinel (NaN) alongside absent keys: NaN would
+            // JSON-serialize as null and violate the numeric file_line_counts contract.
+            .filter((p) => lineIndex[p] != null && !isUnmeasuredLineCount(lineIndex[p]))
             .map((p) => [p, lineIndex[p]])),
     }));
     // Freeze provider-neutral estimates on every dispatch task: a byte-based