audit-tools 0.34.42 → 0.35.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (396) hide show
  1. package/dist/audit/cli/args.d.ts +6 -0
  2. package/dist/audit/cli/args.d.ts.map +1 -1
  3. package/dist/audit/cli/args.js +21 -4
  4. package/dist/audit/cli/args.js.map +1 -1
  5. package/dist/audit/cli/auditStep.d.ts +6 -15
  6. package/dist/audit/cli/auditStep.d.ts.map +1 -1
  7. package/dist/audit/cli/auditStep.js +1 -1
  8. package/dist/audit/cli/auditStep.js.map +1 -1
  9. package/dist/audit/cli/dispatch/hostFanoutGate.d.ts +21 -61
  10. package/dist/audit/cli/dispatch/hostFanoutGate.d.ts.map +1 -1
  11. package/dist/audit/cli/dispatch/hostFanoutGate.js +18 -167
  12. package/dist/audit/cli/dispatch/hostFanoutGate.js.map +1 -1
  13. package/dist/audit/cli/dispatch/packetFilter.d.ts +2 -2
  14. package/dist/audit/cli/dispatch/packetFilter.d.ts.map +1 -1
  15. package/dist/audit/cli/dispatch/packetFilter.js +3 -1
  16. package/dist/audit/cli/dispatch/packetFilter.js.map +1 -1
  17. package/dist/audit/cli/dispatch/quotaPool.d.ts +2 -14
  18. package/dist/audit/cli/dispatch/quotaPool.d.ts.map +1 -1
  19. package/dist/audit/cli/dispatch/quotaPool.js +16 -6
  20. package/dist/audit/cli/dispatch/quotaPool.js.map +1 -1
  21. package/dist/audit/cli/dispatch/tierRouting.d.ts +2 -2
  22. package/dist/audit/cli/dispatch/tokenUsageObservation.d.ts.map +1 -1
  23. package/dist/audit/cli/dispatch/tokenUsageObservation.js +10 -2
  24. package/dist/audit/cli/dispatch/tokenUsageObservation.js.map +1 -1
  25. package/dist/audit/cli/dispatch.d.ts +14 -3
  26. package/dist/audit/cli/dispatch.d.ts.map +1 -1
  27. package/dist/audit/cli/dispatch.js +87 -65
  28. package/dist/audit/cli/dispatch.js.map +1 -1
  29. package/dist/audit/cli/forceSynthesisCommand.d.ts.map +1 -1
  30. package/dist/audit/cli/forceSynthesisCommand.js +9 -1
  31. package/dist/audit/cli/forceSynthesisCommand.js.map +1 -1
  32. package/dist/audit/cli/hybridDispatch.d.ts +4 -9
  33. package/dist/audit/cli/hybridDispatch.d.ts.map +1 -1
  34. package/dist/audit/cli/hybridDispatch.js +1 -1
  35. package/dist/audit/cli/hybridDispatch.js.map +1 -1
  36. package/dist/audit/cli/lineIndex.d.ts +2 -0
  37. package/dist/audit/cli/lineIndex.d.ts.map +1 -1
  38. package/dist/audit/cli/lineIndex.js +4 -0
  39. package/dist/audit/cli/lineIndex.js.map +1 -1
  40. package/dist/audit/cli/nextStepCommand.d.ts +0 -26
  41. package/dist/audit/cli/nextStepCommand.d.ts.map +1 -1
  42. package/dist/audit/cli/nextStepCommand.js +18 -360
  43. package/dist/audit/cli/nextStepCommand.js.map +1 -1
  44. package/dist/audit/cli/nextStepHelpers.d.ts +5 -16
  45. package/dist/audit/cli/nextStepHelpers.d.ts.map +1 -1
  46. package/dist/audit/cli/nextStepHelpers.js +27 -157
  47. package/dist/audit/cli/nextStepHelpers.js.map +1 -1
  48. package/dist/audit/cli/quotaCommand.d.ts.map +1 -1
  49. package/dist/audit/cli/quotaCommand.js +1 -5
  50. package/dist/audit/cli/quotaCommand.js.map +1 -1
  51. package/dist/audit/cli/reviewRun.d.ts.map +1 -1
  52. package/dist/audit/cli/reviewRun.js +58 -23
  53. package/dist/audit/cli/reviewRun.js.map +1 -1
  54. package/dist/audit/cli/rollingAuditDispatch.d.ts +1 -1
  55. package/dist/audit/cli/semanticReviewStep.d.ts.map +1 -1
  56. package/dist/audit/cli/semanticReviewStep.js +35 -54
  57. package/dist/audit/cli/semanticReviewStep.js.map +1 -1
  58. package/dist/audit/cli/steps.d.ts +4 -4
  59. package/dist/audit/cli/steps.d.ts.map +1 -1
  60. package/dist/audit/cli/steps.js +0 -1
  61. package/dist/audit/cli/steps.js.map +1 -1
  62. package/dist/audit/cli/workPartitionRuntime.d.ts +11 -0
  63. package/dist/audit/cli/workPartitionRuntime.d.ts.map +1 -0
  64. package/dist/audit/cli/workPartitionRuntime.js +39 -0
  65. package/dist/audit/cli/workPartitionRuntime.js.map +1 -0
  66. package/dist/audit/contracts/wrapperResponse.d.ts +6 -6
  67. package/dist/audit/extractors/analyzers/candidates.d.ts.map +1 -1
  68. package/dist/audit/extractors/analyzers/candidates.js +45 -54
  69. package/dist/audit/extractors/analyzers/candidates.js.map +1 -1
  70. package/dist/audit/io/artifacts.d.ts +1 -3
  71. package/dist/audit/io/artifacts.d.ts.map +1 -1
  72. package/dist/audit/io/artifacts.js +0 -3
  73. package/dist/audit/io/artifacts.js.map +1 -1
  74. package/dist/audit/orchestrator/advance.d.ts.map +1 -1
  75. package/dist/audit/orchestrator/advance.js +0 -35
  76. package/dist/audit/orchestrator/advance.js.map +1 -1
  77. package/dist/audit/orchestrator/advanceTypes.d.ts +4 -63
  78. package/dist/audit/orchestrator/advanceTypes.d.ts.map +1 -1
  79. package/dist/audit/orchestrator/executorRunners.d.ts.map +1 -1
  80. package/dist/audit/orchestrator/executorRunners.js +9 -12
  81. package/dist/audit/orchestrator/executorRunners.js.map +1 -1
  82. package/dist/audit/orchestrator/executors.d.ts +2 -0
  83. package/dist/audit/orchestrator/executors.d.ts.map +1 -1
  84. package/dist/audit/orchestrator/executors.js +8 -7
  85. package/dist/audit/orchestrator/executors.js.map +1 -1
  86. package/dist/audit/orchestrator/hostInputPause.d.ts +1 -1
  87. package/dist/audit/orchestrator/hostInputPause.js +1 -1
  88. package/dist/audit/orchestrator/ingestionExecutors.d.ts.map +1 -1
  89. package/dist/audit/orchestrator/ingestionExecutors.js +4 -1
  90. package/dist/audit/orchestrator/ingestionExecutors.js.map +1 -1
  91. package/dist/audit/orchestrator/intakeExecutors.d.ts +1 -65
  92. package/dist/audit/orchestrator/intakeExecutors.d.ts.map +1 -1
  93. package/dist/audit/orchestrator/intakeExecutors.js +3 -425
  94. package/dist/audit/orchestrator/intakeExecutors.js.map +1 -1
  95. package/dist/audit/orchestrator/nextStep.d.ts +0 -13
  96. package/dist/audit/orchestrator/nextStep.d.ts.map +1 -1
  97. package/dist/audit/orchestrator/nextStep.js +2 -9
  98. package/dist/audit/orchestrator/nextStep.js.map +1 -1
  99. package/dist/audit/orchestrator/planningExecutors.d.ts.map +1 -1
  100. package/dist/audit/orchestrator/planningExecutors.js +4 -1
  101. package/dist/audit/orchestrator/planningExecutors.js.map +1 -1
  102. package/dist/audit/orchestrator/rollingDispatch.d.ts +1 -1
  103. package/dist/audit/orchestrator/rollingDispatch.d.ts.map +1 -1
  104. package/dist/audit/orchestrator/rollingDispatch.js +5 -4
  105. package/dist/audit/orchestrator/rollingDispatch.js.map +1 -1
  106. package/dist/audit/orchestrator/staleness.d.ts.map +1 -1
  107. package/dist/audit/orchestrator/staleness.js +3 -3
  108. package/dist/audit/orchestrator/staleness.js.map +1 -1
  109. package/dist/audit/orchestrator/state.d.ts +0 -39
  110. package/dist/audit/orchestrator/state.d.ts.map +1 -1
  111. package/dist/audit/orchestrator/state.js +3 -29
  112. package/dist/audit/orchestrator/state.js.map +1 -1
  113. package/dist/audit/orchestrator/synthesisExecutors.d.ts +8 -2
  114. package/dist/audit/orchestrator/synthesisExecutors.d.ts.map +1 -1
  115. package/dist/audit/orchestrator/synthesisExecutors.js +7 -5
  116. package/dist/audit/orchestrator/synthesisExecutors.js.map +1 -1
  117. package/dist/audit/providers/index.d.ts +12 -6
  118. package/dist/audit/providers/index.d.ts.map +1 -1
  119. package/dist/audit/providers/index.js +24 -14
  120. package/dist/audit/providers/index.js.map +1 -1
  121. package/dist/audit/quota/hostLimits.d.ts +4 -6
  122. package/dist/audit/quota/hostLimits.d.ts.map +1 -1
  123. package/dist/audit/quota/hostLimits.js +5 -8
  124. package/dist/audit/quota/hostLimits.js.map +1 -1
  125. package/dist/audit/reporting/findingIdentity.d.ts +2 -2
  126. package/dist/audit/reporting/findingIdentity.js +2 -2
  127. package/dist/audit/reporting/synthesis.d.ts +7 -1
  128. package/dist/audit/reporting/synthesis.d.ts.map +1 -1
  129. package/dist/audit/reporting/synthesis.js +27 -7
  130. package/dist/audit/reporting/synthesis.js.map +1 -1
  131. package/dist/audit/reporting/workBlocks.d.ts +14 -3
  132. package/dist/audit/reporting/workBlocks.d.ts.map +1 -1
  133. package/dist/audit/reporting/workBlocks.js +163 -73
  134. package/dist/audit/reporting/workBlocks.js.map +1 -1
  135. package/dist/audit/types/activeDispatch.d.ts +8 -7
  136. package/dist/audit/types/activeDispatch.d.ts.map +1 -1
  137. package/dist/audit/types/auditState.d.ts +6 -6
  138. package/dist/audit/types/externalAnalyzer.d.ts +6 -6
  139. package/dist/audit/validation/auditResults.d.ts.map +1 -1
  140. package/dist/audit/validation/auditResults.js +6 -1
  141. package/dist/audit/validation/auditResults.js.map +1 -1
  142. package/dist/audit/validation/sessionConfig.d.ts.map +1 -1
  143. package/dist/audit/validation/sessionConfig.js +27 -29
  144. package/dist/audit/validation/sessionConfig.js.map +1 -1
  145. package/dist/remediate/contractPipeline/phaseCut.d.ts +8 -0
  146. package/dist/remediate/contractPipeline/phaseCut.d.ts.map +1 -1
  147. package/dist/remediate/contractPipeline/phaseCut.js +63 -0
  148. package/dist/remediate/contractPipeline/phaseCut.js.map +1 -1
  149. package/dist/remediate/contractPipeline/phaseCutArtifact.d.ts.map +1 -1
  150. package/dist/remediate/contractPipeline/phaseCutArtifact.js +5 -3
  151. package/dist/remediate/contractPipeline/phaseCutArtifact.js.map +1 -1
  152. package/dist/remediate/phases/plan.d.ts.map +1 -1
  153. package/dist/remediate/phases/plan.js +35 -12
  154. package/dist/remediate/phases/plan.js.map +1 -1
  155. package/dist/remediate/providers/index.d.ts +12 -7
  156. package/dist/remediate/providers/index.d.ts.map +1 -1
  157. package/dist/remediate/providers/index.js +24 -15
  158. package/dist/remediate/providers/index.js.map +1 -1
  159. package/dist/remediate/quota/hostLimits.d.ts +4 -6
  160. package/dist/remediate/quota/hostLimits.d.ts.map +1 -1
  161. package/dist/remediate/quota/hostLimits.js +5 -8
  162. package/dist/remediate/quota/hostLimits.js.map +1 -1
  163. package/dist/remediate/steps/contractPipeline.d.ts +6 -2
  164. package/dist/remediate/steps/contractPipeline.d.ts.map +1 -1
  165. package/dist/remediate/steps/contractPipeline.js +90 -6
  166. package/dist/remediate/steps/contractPipeline.js.map +1 -1
  167. package/dist/remediate/steps/contractPipelinePrompts.d.ts.map +1 -1
  168. package/dist/remediate/steps/contractPipelinePrompts.js +4 -2
  169. package/dist/remediate/steps/contractPipelinePrompts.js.map +1 -1
  170. package/dist/remediate/steps/dispatch/marshal.d.ts +6 -0
  171. package/dist/remediate/steps/dispatch/marshal.d.ts.map +1 -1
  172. package/dist/remediate/steps/dispatch/marshal.js +16 -17
  173. package/dist/remediate/steps/dispatch/marshal.js.map +1 -1
  174. package/dist/remediate/steps/dispatch/waveScheduling.d.ts +7 -15
  175. package/dist/remediate/steps/dispatch/waveScheduling.d.ts.map +1 -1
  176. package/dist/remediate/steps/dispatch/waveScheduling.js +26 -19
  177. package/dist/remediate/steps/dispatch/waveScheduling.js.map +1 -1
  178. package/dist/remediate/steps/nextStep.d.ts +6 -8
  179. package/dist/remediate/steps/nextStep.d.ts.map +1 -1
  180. package/dist/remediate/steps/nextStep.js +264 -219
  181. package/dist/remediate/steps/nextStep.js.map +1 -1
  182. package/dist/remediate/steps/rollingSession.d.ts +2 -1
  183. package/dist/remediate/steps/rollingSession.d.ts.map +1 -1
  184. package/dist/remediate/steps/rollingSession.js +14 -8
  185. package/dist/remediate/steps/rollingSession.js.map +1 -1
  186. package/dist/remediate/steps/sessionConfigLoad.d.ts +3 -2
  187. package/dist/remediate/steps/sessionConfigLoad.d.ts.map +1 -1
  188. package/dist/remediate/steps/sessionConfigLoad.js +16 -13
  189. package/dist/remediate/steps/sessionConfigLoad.js.map +1 -1
  190. package/dist/remediate/validation/contractPipeline.d.ts +1 -1
  191. package/dist/remediate/validation/contractPipeline.d.ts.map +1 -1
  192. package/dist/remediate/validation/contractPipeline.js +7 -1
  193. package/dist/remediate/validation/contractPipeline.js.map +1 -1
  194. package/dist/remediate/validation/contractPipelineGates.d.ts +8 -0
  195. package/dist/remediate/validation/contractPipelineGates.d.ts.map +1 -1
  196. package/dist/remediate/validation/contractPipelineGates.js +92 -8
  197. package/dist/remediate/validation/contractPipelineGates.js.map +1 -1
  198. package/dist/shared/config/resolveSessionConfig.d.ts.map +1 -1
  199. package/dist/shared/config/resolveSessionConfig.js +6 -5
  200. package/dist/shared/config/resolveSessionConfig.js.map +1 -1
  201. package/dist/shared/decompose/workPartition.d.ts +66 -0
  202. package/dist/shared/decompose/workPartition.d.ts.map +1 -0
  203. package/dist/shared/decompose/workPartition.js +523 -0
  204. package/dist/shared/decompose/workPartition.js.map +1 -0
  205. package/dist/shared/dispatch/admissionLoop.d.ts +5 -44
  206. package/dist/shared/dispatch/admissionLoop.d.ts.map +1 -1
  207. package/dist/shared/dispatch/admissionLoop.js +20 -82
  208. package/dist/shared/dispatch/admissionLoop.js.map +1 -1
  209. package/dist/shared/dispatch/coordinator.d.ts +5 -5
  210. package/dist/shared/dispatch/coordinator.d.ts.map +1 -1
  211. package/dist/shared/dispatch/coordinator.js +12 -11
  212. package/dist/shared/dispatch/coordinator.js.map +1 -1
  213. package/dist/shared/dispatch/costRank.d.ts +5 -155
  214. package/dist/shared/dispatch/costRank.d.ts.map +1 -1
  215. package/dist/shared/dispatch/costRank.js +2 -179
  216. package/dist/shared/dispatch/costRank.js.map +1 -1
  217. package/dist/shared/dispatch/dispatchQuotaContract.d.ts +37 -38
  218. package/dist/shared/dispatch/dispatchQuotaContract.d.ts.map +1 -1
  219. package/dist/shared/dispatch/dispatchQuotaContract.js +0 -1
  220. package/dist/shared/dispatch/dispatchQuotaContract.js.map +1 -1
  221. package/dist/shared/dispatch/hybridDispatch.d.ts +6 -2
  222. package/dist/shared/dispatch/hybridDispatch.d.ts.map +1 -1
  223. package/dist/shared/dispatch/hybridDispatch.js +1 -1
  224. package/dist/shared/dispatch/hybridDispatch.js.map +1 -1
  225. package/dist/shared/dispatch/rollingDispatch.d.ts +4 -4
  226. package/dist/shared/dispatch/rollingDispatch.d.ts.map +1 -1
  227. package/dist/shared/dispatch/rollingDispatch.js +13 -11
  228. package/dist/shared/dispatch/rollingDispatch.js.map +1 -1
  229. package/dist/shared/dispatch/unifiedRolling.d.ts +2 -2
  230. package/dist/shared/dispatch/unifiedRolling.d.ts.map +1 -1
  231. package/dist/shared/dispatch/unifiedRolling.js +1 -1
  232. package/dist/shared/dispatch/unifiedRolling.js.map +1 -1
  233. package/dist/shared/engine/obligationEngine.d.ts +2 -2
  234. package/dist/shared/friction/stepBoundaryCapture.d.ts +5 -59
  235. package/dist/shared/friction/stepBoundaryCapture.d.ts.map +1 -1
  236. package/dist/shared/friction/stepBoundaryCapture.js +11 -107
  237. package/dist/shared/friction/stepBoundaryCapture.js.map +1 -1
  238. package/dist/shared/index.d.ts +16 -17
  239. package/dist/shared/index.d.ts.map +1 -1
  240. package/dist/shared/index.js +11 -14
  241. package/dist/shared/index.js.map +1 -1
  242. package/dist/shared/io/stateDir.d.ts +2 -2
  243. package/dist/shared/io/stateDir.js +2 -2
  244. package/dist/shared/providers/agyProvider.d.ts.map +1 -1
  245. package/dist/shared/providers/agyProvider.js +12 -26
  246. package/dist/shared/providers/agyProvider.js.map +1 -1
  247. package/dist/shared/providers/auditorSources.d.ts +10 -84
  248. package/dist/shared/providers/auditorSources.d.ts.map +1 -1
  249. package/dist/shared/providers/auditorSources.js +42 -267
  250. package/dist/shared/providers/auditorSources.js.map +1 -1
  251. package/dist/shared/providers/dispatchExclusion.d.ts +22 -0
  252. package/dist/shared/providers/dispatchExclusion.d.ts.map +1 -0
  253. package/dist/shared/providers/dispatchExclusion.js +23 -0
  254. package/dist/shared/providers/dispatchExclusion.js.map +1 -0
  255. package/dist/shared/providers/identity.d.ts +2 -66
  256. package/dist/shared/providers/identity.d.ts.map +1 -1
  257. package/dist/shared/providers/identity.js +2 -72
  258. package/dist/shared/providers/identity.js.map +1 -1
  259. package/dist/shared/providers/orchestratorBindings.d.ts +42 -0
  260. package/dist/shared/providers/orchestratorBindings.d.ts.map +1 -0
  261. package/dist/shared/providers/orchestratorBindings.js +30 -0
  262. package/dist/shared/providers/orchestratorBindings.js.map +1 -0
  263. package/dist/shared/providers/providerFactory.d.ts +0 -3
  264. package/dist/shared/providers/providerFactory.d.ts.map +1 -1
  265. package/dist/shared/providers/providerFactory.js +8 -37
  266. package/dist/shared/providers/providerFactory.js.map +1 -1
  267. package/dist/shared/providers/providerPathGuard.d.ts +3 -3
  268. package/dist/shared/providers/providerPathGuard.d.ts.map +1 -1
  269. package/dist/shared/providers/providerPathGuard.js +24 -27
  270. package/dist/shared/providers/providerPathGuard.js.map +1 -1
  271. package/dist/shared/quota/apiPool.d.ts +19 -22
  272. package/dist/shared/quota/apiPool.d.ts.map +1 -1
  273. package/dist/shared/quota/apiPool.js +66 -47
  274. package/dist/shared/quota/apiPool.js.map +1 -1
  275. package/dist/shared/quota/capacity.d.ts +29 -24
  276. package/dist/shared/quota/capacity.d.ts.map +1 -1
  277. package/dist/shared/quota/capacity.js +30 -4
  278. package/dist/shared/quota/capacity.js.map +1 -1
  279. package/dist/shared/quota/codexHostConfig.d.ts +6 -13
  280. package/dist/shared/quota/codexHostConfig.d.ts.map +1 -1
  281. package/dist/shared/quota/codexHostConfig.js +8 -14
  282. package/dist/shared/quota/codexHostConfig.js.map +1 -1
  283. package/dist/shared/quota/fileLock.d.ts +7 -0
  284. package/dist/shared/quota/fileLock.d.ts.map +1 -1
  285. package/dist/shared/quota/fileLock.js +32 -4
  286. package/dist/shared/quota/fileLock.js.map +1 -1
  287. package/dist/shared/quota/hostLimits.d.ts +19 -1
  288. package/dist/shared/quota/hostLimits.d.ts.map +1 -1
  289. package/dist/shared/quota/hostLimits.js +21 -11
  290. package/dist/shared/quota/hostLimits.js.map +1 -1
  291. package/dist/shared/quota/hostPool.d.ts +1 -1
  292. package/dist/shared/quota/hostPool.js +2 -2
  293. package/dist/shared/quota/hostPool.js.map +1 -1
  294. package/dist/shared/quota/limits.d.ts +6 -9
  295. package/dist/shared/quota/limits.d.ts.map +1 -1
  296. package/dist/shared/quota/limits.js +67 -50
  297. package/dist/shared/quota/limits.js.map +1 -1
  298. package/dist/shared/quota/scheduler.d.ts +2 -3
  299. package/dist/shared/quota/scheduler.d.ts.map +1 -1
  300. package/dist/shared/quota/scheduler.js +3 -12
  301. package/dist/shared/quota/scheduler.js.map +1 -1
  302. package/dist/shared/quota/types.d.ts +10 -10
  303. package/dist/shared/quota/types.d.ts.map +1 -1
  304. package/dist/shared/quota/types.js +4 -7
  305. package/dist/shared/quota/types.js.map +1 -1
  306. package/dist/shared/repair/brokeredDispatch.d.ts.map +1 -1
  307. package/dist/shared/repair/brokeredDispatch.js +3 -0
  308. package/dist/shared/repair/brokeredDispatch.js.map +1 -1
  309. package/dist/shared/reporting/auditDeliverable.d.ts.map +1 -1
  310. package/dist/shared/reporting/auditDeliverable.js +1 -0
  311. package/dist/shared/reporting/auditDeliverable.js.map +1 -1
  312. package/dist/shared/rolling/pausedState.d.ts +7 -7
  313. package/dist/shared/rolling/pausedState.js +3 -3
  314. package/dist/shared/tokens.d.ts +2 -5
  315. package/dist/shared/tokens.d.ts.map +1 -1
  316. package/dist/shared/tokens.js +15 -15
  317. package/dist/shared/tokens.js.map +1 -1
  318. package/dist/shared/types/auditorDescriptor.d.ts +3 -2
  319. package/dist/shared/types/auditorDescriptor.d.ts.map +1 -1
  320. package/dist/shared/types/auditorDescriptor.js +3 -2
  321. package/dist/shared/types/auditorDescriptor.js.map +1 -1
  322. package/dist/shared/types/finding.d.ts +80 -0
  323. package/dist/shared/types/finding.d.ts.map +1 -1
  324. package/dist/shared/types/finding.js +17 -0
  325. package/dist/shared/types/finding.js.map +1 -1
  326. package/dist/shared/types/sessionConfig.d.ts +8 -8
  327. package/dist/shared/types/sessionConfig.d.ts.map +1 -1
  328. package/dist/shared/types/sessionConfig.js +1 -1
  329. package/dist/shared/validation/findingsReport.d.ts.map +1 -1
  330. package/dist/shared/validation/findingsReport.js +3 -0
  331. package/dist/shared/validation/findingsReport.js.map +1 -1
  332. package/docs/audit-pkg/development.md +3 -2
  333. package/docs/audit-pkg/operator-guide.md +13 -106
  334. package/docs/audit-pkg/product.md +8 -7
  335. package/docs/audit-pkg/release.md +38 -29
  336. package/opencode.json +2 -2
  337. package/package.json +6 -4
  338. package/skills/audit-code/SKILL.md +2 -1
  339. package/skills/audit-code/audit-code.prompt.md +4 -3
  340. package/skills/remediate-code/remediate-code.prompt.md +2 -1
  341. package/dist/audit/cli/providerConfirmationStep.d.ts +0 -106
  342. package/dist/audit/cli/providerConfirmationStep.d.ts.map +0 -1
  343. package/dist/audit/cli/providerConfirmationStep.js +0 -396
  344. package/dist/audit/cli/providerConfirmationStep.js.map +0 -1
  345. package/dist/audit/orchestrator/providerConfirmation.d.ts +0 -25
  346. package/dist/audit/orchestrator/providerConfirmation.d.ts.map +0 -1
  347. package/dist/audit/orchestrator/providerConfirmation.js +0 -60
  348. package/dist/audit/orchestrator/providerConfirmation.js.map +0 -1
  349. package/dist/audit/providers/agyProvider.d.ts +0 -11
  350. package/dist/audit/providers/agyProvider.d.ts.map +0 -1
  351. package/dist/audit/providers/agyProvider.js +0 -18
  352. package/dist/audit/providers/agyProvider.js.map +0 -1
  353. package/dist/audit/providers/claudeCodeProvider.d.ts +0 -11
  354. package/dist/audit/providers/claudeCodeProvider.d.ts.map +0 -1
  355. package/dist/audit/providers/claudeCodeProvider.js +0 -23
  356. package/dist/audit/providers/claudeCodeProvider.js.map +0 -1
  357. package/dist/audit/providers/claudeWorkerProvider.d.ts +0 -10
  358. package/dist/audit/providers/claudeWorkerProvider.d.ts.map +0 -1
  359. package/dist/audit/providers/claudeWorkerProvider.js +0 -15
  360. package/dist/audit/providers/claudeWorkerProvider.js.map +0 -1
  361. package/dist/audit/providers/opencodeProvider.d.ts +0 -2
  362. package/dist/audit/providers/opencodeProvider.d.ts.map +0 -1
  363. package/dist/audit/providers/opencodeProvider.js +0 -7
  364. package/dist/audit/providers/opencodeProvider.js.map +0 -1
  365. package/dist/remediate/providers/agyProvider.d.ts +0 -12
  366. package/dist/remediate/providers/agyProvider.d.ts.map +0 -1
  367. package/dist/remediate/providers/agyProvider.js +0 -19
  368. package/dist/remediate/providers/agyProvider.js.map +0 -1
  369. package/dist/remediate/providers/claudeCodeProvider.d.ts +0 -12
  370. package/dist/remediate/providers/claudeCodeProvider.d.ts.map +0 -1
  371. package/dist/remediate/providers/claudeCodeProvider.js +0 -24
  372. package/dist/remediate/providers/claudeCodeProvider.js.map +0 -1
  373. package/dist/remediate/providers/claudeWorkerProvider.d.ts +0 -11
  374. package/dist/remediate/providers/claudeWorkerProvider.d.ts.map +0 -1
  375. package/dist/remediate/providers/claudeWorkerProvider.js +0 -16
  376. package/dist/remediate/providers/claudeWorkerProvider.js.map +0 -1
  377. package/dist/remediate/providers/opencodeProvider.d.ts +0 -2
  378. package/dist/remediate/providers/opencodeProvider.d.ts.map +0 -1
  379. package/dist/remediate/providers/opencodeProvider.js +0 -7
  380. package/dist/remediate/providers/opencodeProvider.js.map +0 -1
  381. package/dist/shared/providers/providerConfirmation.d.ts +0 -141
  382. package/dist/shared/providers/providerConfirmation.d.ts.map +0 -1
  383. package/dist/shared/providers/providerConfirmation.js +0 -420
  384. package/dist/shared/providers/providerConfirmation.js.map +0 -1
  385. package/dist/shared/providers/proxyCatalog.d.ts +0 -158
  386. package/dist/shared/providers/proxyCatalog.d.ts.map +0 -1
  387. package/dist/shared/providers/proxyCatalog.js +0 -658
  388. package/dist/shared/providers/proxyCatalog.js.map +0 -1
  389. package/dist/shared/providers/sharedProviderConfirmation.d.ts +0 -802
  390. package/dist/shared/providers/sharedProviderConfirmation.d.ts.map +0 -1
  391. package/dist/shared/providers/sharedProviderConfirmation.js +0 -1865
  392. package/dist/shared/providers/sharedProviderConfirmation.js.map +0 -1
  393. package/dist/shared/types/providerConfirmation.d.ts +0 -334
  394. package/dist/shared/types/providerConfirmation.d.ts.map +0 -1
  395. package/dist/shared/types/providerConfirmation.js +0 -35
  396. package/dist/shared/types/providerConfirmation.js.map +0 -1
@@ -1,2 +0,0 @@
1
- export { createOpenCodeProvider, OpenCodeProvider } from "audit-tools/shared";
2
- //# sourceMappingURL=opencodeProvider.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"opencodeProvider.d.ts","sourceRoot":"","sources":["../../../src/audit/providers/opencodeProvider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,7 +0,0 @@
1
- // The opencode provider class AND its construction factory are single-sourced
2
- // in audit-tools/shared (drift-plan E4). opencode has no skip-permissions
3
- // flag, so there is no per-orchestrator delta — this module is a pure
4
- // re-export preserving the import surface `./providers/index.ts` and tests
5
- // rely on.
6
- export { createOpenCodeProvider, OpenCodeProvider } from "audit-tools/shared";
7
- //# sourceMappingURL=opencodeProvider.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"opencodeProvider.js","sourceRoot":"","sources":["../../../src/audit/providers/opencodeProvider.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,sEAAsE;AACtE,2EAA2E;AAC3E,WAAW;AACX,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,12 +0,0 @@
1
- import type { AgyConfig, spawnLoggedCommand } from "audit-tools/shared";
2
- import { AgyProvider } from "audit-tools/shared";
3
- export declare const ACTIVE_AGY_SESSION_MESSAGE: string;
4
- /**
5
- * Construct the shared AgyProvider with remediate-code's options. The
6
- * autonomous remediator skips permission prompts by default (it applies changes
7
- * unattended and cannot pause mid-run); an explicit
8
- * `dangerously_skip_permissions: false` in the config still opts out.
9
- */
10
- export declare function createAgyProvider(config?: AgyConfig, launchCommand?: typeof spawnLoggedCommand): AgyProvider;
11
- export { AgyProvider } from "audit-tools/shared";
12
- //# sourceMappingURL=agyProvider.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"agyProvider.d.ts","sourceRoot":"","sources":["../../../src/remediate/providers/agyProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,WAAW,EAEZ,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,0BAA0B,QAInC,CAAC;AAEL;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,GAAE,SAAc,EACtB,aAAa,CAAC,EAAE,OAAO,kBAAkB,GACxC,WAAW,CASb;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,19 +0,0 @@
1
- import { AgyProvider, buildActiveAgySessionMessage, } from "audit-tools/shared";
2
- export const ACTIVE_AGY_SESSION_MESSAGE = buildActiveAgySessionMessage({
3
- sessionConfigPath: ".audit-tools/remediation/session-config.json",
4
- slashCommand: "/remediate-code",
5
- });
6
- /**
7
- * Construct the shared AgyProvider with remediate-code's options. The
8
- * autonomous remediator skips permission prompts by default (it applies changes
9
- * unattended and cannot pause mid-run); an explicit
10
- * `dangerously_skip_permissions: false` in the config still opts out.
11
- */
12
- export function createAgyProvider(config = {}, launchCommand) {
13
- return new AgyProvider(config, {
14
- skipPermissionsDefault: true,
15
- activeSessionMessage: ACTIVE_AGY_SESSION_MESSAGE,
16
- }, launchCommand);
17
- }
18
- export { AgyProvider } from "audit-tools/shared";
19
- //# sourceMappingURL=agyProvider.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"agyProvider.js","sourceRoot":"","sources":["../../../src/remediate/providers/agyProvider.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,0BAA0B,GACrC,4BAA4B,CAAC;IAC3B,iBAAiB,EAAE,8CAA8C;IACjE,YAAY,EAAE,iBAAiB;CAChC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAoB,EAAE,EACtB,aAAyC;IAEzC,OAAO,IAAI,WAAW,CACpB,MAAM,EACN;QACE,sBAAsB,EAAE,IAAI;QAC5B,oBAAoB,EAAE,0BAA0B;KACjD,EACD,aAAa,CACd,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,12 +0,0 @@
1
- import type { ClaudeCodeConfig, spawnLoggedCommand } from "audit-tools/shared";
2
- import { ClaudeCodeProvider } from "audit-tools/shared";
3
- export declare const ACTIVE_CLAUDE_CODE_SESSION_MESSAGE: string;
4
- /**
5
- * Construct the shared ClaudeCodeProvider with remediate-code's options. The
6
- * autonomous remediator skips permission prompts by default (it applies changes
7
- * unattended and cannot pause mid-run); an explicit
8
- * `dangerously_skip_permissions: false` in the config still opts out.
9
- */
10
- export declare function createClaudeCodeProvider(config?: ClaudeCodeConfig, launchCommand?: typeof spawnLoggedCommand): ClaudeCodeProvider;
11
- export { ClaudeCodeProvider } from "audit-tools/shared";
12
- //# sourceMappingURL=claudeCodeProvider.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"claudeCodeProvider.d.ts","sourceRoot":"","sources":["../../../src/remediate/providers/claudeCodeProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAEnB,MAAM,oBAAoB,CAAC;AAQ5B,eAAO,MAAM,kCAAkC,QAI3C,CAAC;AAEL;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,gBAAqB,EAC7B,aAAa,CAAC,EAAE,OAAO,kBAAkB,GACxC,kBAAkB,CASpB;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,24 +0,0 @@
1
- import { ClaudeCodeProvider, buildActiveClaudeCodeSessionMessage, } from "audit-tools/shared";
2
- // The claude-code provider class is single-sourced in audit-tools/shared
3
- // (drift-plan E4). This module only carries remediate-code's two intended
4
- // deltas — the skip-permissions default and the session-config path quoted in
5
- // the nested-session guard message — and binds them via a factory; it defines
6
- // no provider class body of its own.
7
- export const ACTIVE_CLAUDE_CODE_SESSION_MESSAGE = buildActiveClaudeCodeSessionMessage({
8
- sessionConfigPath: ".audit-tools/remediation/session-config.json",
9
- slashCommand: "/remediate-code",
10
- });
11
- /**
12
- * Construct the shared ClaudeCodeProvider with remediate-code's options. The
13
- * autonomous remediator skips permission prompts by default (it applies changes
14
- * unattended and cannot pause mid-run); an explicit
15
- * `dangerously_skip_permissions: false` in the config still opts out.
16
- */
17
- export function createClaudeCodeProvider(config = {}, launchCommand) {
18
- return new ClaudeCodeProvider(config, {
19
- skipPermissionsDefault: true,
20
- activeSessionMessage: ACTIVE_CLAUDE_CODE_SESSION_MESSAGE,
21
- }, launchCommand);
22
- }
23
- export { ClaudeCodeProvider } from "audit-tools/shared";
24
- //# sourceMappingURL=claudeCodeProvider.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"claudeCodeProvider.js","sourceRoot":"","sources":["../../../src/remediate/providers/claudeCodeProvider.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,mCAAmC,GACpC,MAAM,oBAAoB,CAAC;AAE5B,yEAAyE;AACzE,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,qCAAqC;AAErC,MAAM,CAAC,MAAM,kCAAkC,GAC7C,mCAAmC,CAAC;IAClC,iBAAiB,EAAE,8CAA8C;IACjE,YAAY,EAAE,iBAAiB;CAChC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAA2B,EAAE,EAC7B,aAAyC;IAEzC,OAAO,IAAI,kBAAkB,CAC3B,MAAM,EACN;QACE,sBAAsB,EAAE,IAAI;QAC5B,oBAAoB,EAAE,kCAAkC;KACzD,EACD,aAAa,CACd,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,11 +0,0 @@
1
- import type { ClaudeWorkerConfig, spawnLoggedCommand } from "audit-tools/shared";
2
- import { ClaudeWorkerProvider } from "audit-tools/shared";
3
- /**
4
- * Construct the shared ClaudeWorkerProvider with remediate-code's options. The
5
- * autonomous remediator skips permission prompts by default (it applies changes
6
- * unattended and cannot pause mid-run); an explicit
7
- * `dangerously_skip_permissions: false` in the config still opts out.
8
- */
9
- export declare function createClaudeWorkerProvider(config?: ClaudeWorkerConfig, launchCommand?: typeof spawnLoggedCommand): ClaudeWorkerProvider;
10
- export { ClaudeWorkerProvider } from "audit-tools/shared";
11
- //# sourceMappingURL=claudeWorkerProvider.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"claudeWorkerProvider.d.ts","sourceRoot":"","sources":["../../../src/remediate/providers/claudeWorkerProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAO1D;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,GAAE,kBAAuB,EAC/B,aAAa,CAAC,EAAE,OAAO,kBAAkB,GACxC,oBAAoB,CAMtB;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,16 +0,0 @@
1
- import { ClaudeWorkerProvider } from "audit-tools/shared";
2
- // The claude-worker provider class is single-sourced in audit-tools/shared
3
- // (mirrors the claude-code shim pattern, drift-plan E4). This module only
4
- // carries remediate-code's intended delta — the skip-permissions default —
5
- // and binds it via a factory; it defines no provider class body of its own.
6
- /**
7
- * Construct the shared ClaudeWorkerProvider with remediate-code's options. The
8
- * autonomous remediator skips permission prompts by default (it applies changes
9
- * unattended and cannot pause mid-run); an explicit
10
- * `dangerously_skip_permissions: false` in the config still opts out.
11
- */
12
- export function createClaudeWorkerProvider(config = {}, launchCommand) {
13
- return new ClaudeWorkerProvider(config, { skipPermissionsDefault: true }, launchCommand);
14
- }
15
- export { ClaudeWorkerProvider } from "audit-tools/shared";
16
- //# sourceMappingURL=claudeWorkerProvider.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"claudeWorkerProvider.js","sourceRoot":"","sources":["../../../src/remediate/providers/claudeWorkerProvider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAA6B,EAAE,EAC/B,aAAyC;IAEzC,OAAO,IAAI,oBAAoB,CAC7B,MAAM,EACN,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAChC,aAAa,CACd,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,2 +0,0 @@
1
- export { createOpenCodeProvider, OpenCodeProvider } from "audit-tools/shared";
2
- //# sourceMappingURL=opencodeProvider.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"opencodeProvider.d.ts","sourceRoot":"","sources":["../../../src/remediate/providers/opencodeProvider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,7 +0,0 @@
1
- // The opencode provider class AND its construction factory are single-sourced
2
- // in audit-tools/shared (drift-plan E4). opencode has no skip-permissions
3
- // flag, so there is no per-orchestrator delta — this module is a pure
4
- // re-export preserving the import surface `./providers/index.ts` and tests
5
- // rely on.
6
- export { createOpenCodeProvider, OpenCodeProvider } from "audit-tools/shared";
7
- //# sourceMappingURL=opencodeProvider.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"opencodeProvider.js","sourceRoot":"","sources":["../../../src/remediate/providers/opencodeProvider.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAC1E,sEAAsE;AACtE,2EAA2E;AAC3E,WAAW;AACX,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC"}
@@ -1,141 +0,0 @@
1
- import type { DispatchableSource, ResolvedProviderName, SessionConfig } from "../types/sessionConfig.js";
2
- import type { FreshSessionProvider, ProviderRateLimits } from "./types.js";
3
- import type { ConfirmedPoolEntry, HostModelCostEntry, SourcePoolCostEntry, ProviderConfirmationInput } from "../types/providerConfirmation.js";
4
- export type CapabilityTier = "frontier" | "capable" | "fast" | "unknown";
5
- export interface DiscoveredProvider {
6
- name: ResolvedProviderName;
7
- command?: string;
8
- capabilityTier: CapabilityTier;
9
- quotaState?: ProviderRateLimits | null;
10
- detected: boolean;
11
- /**
12
- * Machine-readable self-spawn-blocked flag. True when the provider is detected
13
- * on PATH but cannot be launched as a fresh subprocess because the host is
14
- * already inside an active session of that same agent (claude-code while
15
- * `CLAUDECODE` is set, codex while `CODEX` is set). The Gate-0 confirmation
16
- * EXCLUDES a self-spawn-blocked provider from the dispatchable pool unless the
17
- * operator explicitly includes it. This FLAG is the security signal — a
18
- * downstream consumer must never parse free text to make that decision.
19
- */
20
- selfSpawnBlocked?: boolean;
21
- }
22
- /**
23
- * Probe PATH for each known CLI and return a DiscoveredProvider entry for each
24
- * detected tool. Session-config `command` overrides decide which binary is probed.
25
- *
26
- * @param sessionConfig - Current session config (may be empty `{}`).
27
- * @param env - Process env snapshot; defaults to `process.env`.
28
- * @param detectCommand - Injectable PATH-detection hook (defaults to the
29
- * single-sourced `commandExists`). Lets tests drive discovery deterministically
30
- * without a real CLI on PATH, so the self-spawn-blocked security obligations are
31
- * testable red-before-green regardless of what is installed in CI.
32
- */
33
- export declare function discoverProviders(sessionConfig: SessionConfig, env?: NodeJS.ProcessEnv, detectCommand?: (command: string) => boolean): DiscoveredProvider[];
34
- /**
35
- * Query the rate-limit state from a live provider if the `queryLimits` method
36
- * is available. Returns `null` on timeout/error — never throws.
37
- *
38
- * OBS-9a9091ad: a `queryLimits` rejection was previously swallowed with no
39
- * signal, so a provider whose rate-limit query consistently fails was invisible
40
- * to operators (the sibling CompositeQuotaSource logs the same swallow). Accept
41
- * an optional injectable `log` (mirroring analyzerDeps' injectable-log pattern)
42
- * that is invoked with the provider name + error on the swallowed-error path.
43
- * The contract is unchanged — `log` is optional, the function still never throws
44
- * and still returns null — so existing callers need no change while a caller
45
- * that cares can route the diagnostic into its RunLogger.
46
- */
47
- export declare function queryProviderQuota(provider: DiscoveredProvider, freshSessionProvider: FreshSessionProvider, log?: (providerName: string, error: unknown) => void): Promise<ProviderRateLimits | null>;
48
- /**
49
- * The representative model id a provider is priced/ordered by at Gate-0 (cost-first
50
- * routing; spec/dispatch-quota.md). Only the providers that carry a configured
51
- * model in session config are knowable here — a host-native model roster and a CLI
52
- * backend's model arrive only at the dispatch handshake, so those return `undefined`
53
- * and are priced deterministically at dispatch instead. Never hardcodes a model
54
- * name; reads only operator-supplied config.
55
- */
56
- export declare function representativeModelId(name: ResolvedProviderName, sessionConfig: SessionConfig): string | undefined;
57
- /** A confirmed pool annotated with cost-first fields, plus any host-model tiers. */
58
- export interface AnnotatedConfirmation {
59
- /** Provider-keyed pool, each entry carrying model_id/price/cost_order. */
60
- provider_pool: ConfirmedPoolEntry[];
61
- /**
62
- * Host self-reported model tiers with their confirmed positions (follow-up c),
63
- * kept separate from `provider_pool` so no pool consumer sees duplicate names.
64
- */
65
- host_model_cost_order: HostModelCostEntry[];
66
- /**
67
- * Dispatchable SOURCE pools (explicit `sources[]` + proxy expansion) with
68
- * their confirmed positions (Gate-0 source fold). Kept separate from `provider_pool`
69
- * because a source is keyed by `(transport, model)`, not a single transport name.
70
- */
71
- source_pool_cost_order: SourcePoolCostEntry[];
72
- }
73
- /**
74
- * Annotate + order a confirmed pool with cost-first-routing fields, optionally
75
- * applying an operator Gate-0 input. Each provider entry gets its representative
76
- * `model_id`, `blended_price_usd_per_mtok` (or `null` when the dataset can't price
77
- * it), and a `cost_order`. When `input` is absent this is the tool's
78
- * price-ascending SUGGESTION (headless / no-operator path). When present, the
79
- * operator's `cost_order` overrides the suggested positions and each
80
- * `host_models` entry becomes a priced, orderable candidate whose confirmed
81
- * position threads to dispatch by `model_id` via `host_model_cost_order`. Read
82
- * back at dispatch (`resolveConfirmedCostPositions`) as rung 1 of `costRank`.
83
- * Single-sourced so every confirmation site annotates identically.
84
- */
85
- export declare function annotateConfirmedPool(pool: ConfirmedPoolEntry[], sessionConfig: SessionConfig, input?: ProviderConfirmationInput, sources?: DispatchableSource[], env?: NodeJS.ProcessEnv): AnnotatedConfirmation;
86
- /**
87
- * The suggestion-only annotation (no operator input, no host models). Preserved
88
- * for the headless / auto-complete callers that just need the provider pool with
89
- * the tool's price-ascending `cost_order`. Delegates to `annotateConfirmedPool`.
90
- */
91
- export declare function annotateConfirmedPoolCost(pool: ConfirmedPoolEntry[], sessionConfig: SessionConfig): ConfirmedPoolEntry[];
92
- /**
93
- * Display-only view of one `sessionConfig.sources[]` pool for the Gate-0 roster.
94
- *
95
- * Backlog gap (a): `discoverProviders`/`buildSharedProviderConfirmation` only ever
96
- * looked at PATH-probed CLIs + the legacy `openai_compatible` block, so an explicit
97
- * `sources[]` pool (e.g. an opencode-free endpoint) never appeared at Gate-0 even
98
- * though `collectDispatchableSources` (apiPool.ts) folds EVERY `sources[]` entry
99
- * into what actually dispatches — the operator was confirming an ordering that
100
- * omitted pools that WILL route. This type/derivation is display-only: it never
101
- * round-trips through `ConfirmedPoolEntry` / the persisted `SharedProviderConfirmation`,
102
- * so it can't perturb the existing cost_order/dispatch contract.
103
- */
104
- export interface SourcePoolDisplayEntry {
105
- /**
106
- * Same id convention the dispatch side uses (explicit `id`, else
107
- * `${transport}:${model ?? endpoint ?? "default"}`) — display-only, not a
108
- * guaranteed exact match of the dispatch-side pool key.
109
- */
110
- id: string;
111
- transport: DispatchableSource["transport"];
112
- model?: string;
113
- /**
114
- * Operator-declared `cost_per_mtok` on this source. Authoritative over the
115
- * models.dev catalog price when present (mirrors the dispatch-side authority
116
- * rule on `DispatchableSource.cost_per_mtok` — see sessionConfig.ts).
117
- */
118
- declared_cost_per_mtok?: number;
119
- /**
120
- * models.dev blended price, computed only when the source has no declared cost
121
- * and a model id is known; `null` when the dataset can't price it.
122
- */
123
- blended_price_usd_per_mtok?: number | null;
124
- }
125
- /**
126
- * Derive the Gate-0 display view of every configured `sessionConfig.sources[]`
127
- * entry (backlog follow-up a). Read-only and additive: mirrors the same
128
- * `sessionConfig.sources` array `collectDispatchableSources` (apiPool.ts) folds
129
- * into dispatch, so what the operator sees at Gate-0 includes every pool that will
130
- * actually route. Order is preserved from the operator-authored config array
131
- * (content-derived, stable — never re-sorted by iteration/readdir order).
132
- */
133
- export declare function deriveSourcePoolDisplay(sessionConfig: SessionConfig): SourcePoolDisplayEntry[];
134
- /**
135
- * Same display derivation as {@link deriveSourcePoolDisplay} but over an EXPLICIT source
136
- * list — used by the Gate-0 confirmation display so the roster includes the async
137
- * proxy catalog expansion (which is not in `sessionConfig.sources`), matching
138
- * exactly what {@link gatherDispatchableSources} folds into dispatch.
139
- */
140
- export declare function deriveSourcePoolDisplayFromSources(sources: DispatchableSource[]): SourcePoolDisplayEntry[];
141
- //# sourceMappingURL=providerConfirmation.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"providerConfirmation.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerConfirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAY3E,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAM1C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,aAAa,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,aAAa,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GAC1D,kBAAkB,EAAE,CAgDtB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,oBAAoB,EAAE,oBAAoB,EAC1C,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,GACnD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,EAC1B,aAAa,EAAE,aAAa,GAC3B,MAAM,GAAG,SAAS,CASpB;AAED,oFAAoF;AACpF,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;OAGG;IACH,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC5C;;;;OAIG;IACH,sBAAsB,EAAE,mBAAmB,EAAE,CAAC;CAC/C;AAiED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,EAC5B,KAAK,CAAC,EAAE,yBAAyB,EACjC,OAAO,GAAE,kBAAkB,EAAO,EAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,CA4IvB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,kBAAkB,EAAE,EAC1B,aAAa,EAAE,aAAa,GAC3B,kBAAkB,EAAE,CAEtB;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,aAAa,GAC3B,sBAAsB,EAAE,CAE1B;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,kBAAkB,EAAE,GAC5B,sBAAsB,EAAE,CAmB1B"}