audit-tools 0.35.0 → 0.35.3

package/dist/remediate/providers/index.js

@@ -1,26 +1,35 @@
-import { createFreshSessionProvider as createSharedFreshSessionProvider, resolveFreshSessionProviderName as resolveSharedFreshSessionProviderName, } from "audit-tools/shared";
-import { createClaudeCodeProvider } from "./claudeCodeProvider.js";
-import { createClaudeWorkerProvider } from "./claudeWorkerProvider.js";
-import { createOpenCodeProvider } from "./opencodeProvider.js";
-import { createAgyProvider } from "./agyProvider.js";
+import { buildOrchestratorProviderBindings, createFreshSessionProvider as createSharedFreshSessionProvider, createOpenCodeProvider, resolveFreshSessionProviderName as resolveSharedFreshSessionProviderName, } from "audit-tools/shared";
 /**
- * Auto-resolution and provider wiring are single-sourced in `audit-tools/shared`.
- * The claude-code / opencode provider classes are shared too; this module only
- * injects remediate-code's bound factories (the sole delta is the claude-code
- * skip-permissions default — on, since the remediator runs unattended — and the
- * nested-session guard message) and attributes the auto-fallback warning to
- * `remediate-code`.
+ * Auto-resolution, the provider classes, AND the per-orchestrator binding
+ * machinery are single-sourced in `audit-tools/shared`; this module declares
+ * remediate-code's descriptor — the ONE home for everything that legitimately
+ * differs from audit-code — and draws its bound factories from it. The
+ * autonomous remediator skips permission prompts by default (it applies changes
+ * unattended and cannot pause mid-run); an explicit
+ * `dangerously_skip_permissions: false` in the config still opts out.
  */
+export const REMEDIATE_CODE_DESCRIPTOR = {
+    orchestratorName: "remediate-code",
+    sessionConfigPath: ".audit-tools/remediation/session-config.json",
+    slashCommand: "/remediate-code",
+    skipPermissionsDefault: true,
+    envPrefix: "REMEDIATE_CODE",
+};
+const bindings = buildOrchestratorProviderBindings(REMEDIATE_CODE_DESCRIPTOR);
+export const createClaudeCodeProvider = bindings.createClaudeCodeProvider;
+// opencode has no per-orchestrator delta; the shared factory is re-exported to
+// keep one import surface for all provider factories.
+export { createOpenCodeProvider };
 export function resolveFreshSessionProviderName(name, sessionConfig = {}, options = {}) {
     return resolveSharedFreshSessionProviderName(name, sessionConfig, options);
 }
 export function createFreshSessionProvider(name, sessionConfig = {}) {
     return createSharedFreshSessionProvider(name, sessionConfig, {
-        orchestratorName: "remediate-code",
-        createClaudeCodeProvider: (config) => createClaudeCodeProvider(config),
-        createClaudeWorkerProvider: (config) => createClaudeWorkerProvider(config),
+        orchestratorName: REMEDIATE_CODE_DESCRIPTOR.orchestratorName,
+        createClaudeCodeProvider: bindings.createClaudeCodeProvider,
+        createClaudeWorkerProvider: bindings.createClaudeWorkerProvider,
         createOpenCodeProvider: (config) => createOpenCodeProvider(config),
-        createAgyProvider: (config) => createAgyProvider(config),
+        createAgyProvider: bindings.createAgyProvider,
     });
 }
 //# sourceMappingURL=index.js.map

package/dist/remediate/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/remediate/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,IAAI,gCAAgC,EAC9D,+BAA+B,IAAI,qCAAqC,GACzE,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;GAOG;AAEH,MAAM,UAAU,+BAA+B,CAC7C,IAAwB,EACxB,gBAA+B,EAAE,EACjC,UAGI,EAAE;IAEN,OAAO,qCAAqC,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAwB,EACxB,gBAA+B,EAAE;IAEjC,OAAO,gCAAgC,CAAC,IAAI,EAAE,aAAa,EAAE;QAC3D,gBAAgB,EAAE,gBAAgB;QAClC,wBAAwB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC;QACtE,0BAA0B,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAC1E,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;QAClE,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/remediate/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,0BAA0B,IAAI,gCAAgC,EAC9D,sBAAsB,EACtB,+BAA+B,IAAI,qCAAqC,GACzE,MAAM,oBAAoB,CAAC;AAQ5B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,gBAAgB,EAAE,gBAAgB;IAClC,iBAAiB,EAAE,8CAA8C;IACjE,YAAY,EAAE,iBAAiB;IAC/B,sBAAsB,EAAE,IAAI;IAC5B,SAAS,EAAE,gBAAgB;CAC5B,CAAC;AAEF,MAAM,QAAQ,GAAG,iCAAiC,CAAC,yBAAyB,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,QAAQ,CAAC,wBAAwB,CAAC;AAC1E,+EAA+E;AAC/E,sDAAsD;AACtD,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAElC,MAAM,UAAU,+BAA+B,CAC7C,IAAwB,EACxB,gBAA+B,EAAE,EACjC,UAGI,EAAE;IAEN,OAAO,qCAAqC,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAwB,EACxB,gBAA+B,EAAE;IAEjC,OAAO,gCAAgC,CAAC,IAAI,EAAE,aAAa,EAAE;QAC3D,gBAAgB,EAAE,yBAAyB,CAAC,gBAAgB;QAC5D,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;QAC/D,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;QAClE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC,CAAC;AACL,CAAC"}

package/dist/remediate/quota/hostLimits.d.ts

@@ -1,9 +1,7 @@
-import type { SessionConfig, HostConcurrencyLimit, ReadCodexMaxThreads } from "audit-tools/shared";
-export declare function detectHostActiveSubagentLimit(env?: NodeJS.ProcessEnv, readCodexMaxThreads?: ReadCodexMaxThreads): HostConcurrencyLimit | null;
-export declare function resolveHostActiveSubagentLimit(options: {
+export declare const detectHostActiveSubagentLimit: (env?: NodeJS.ProcessEnv, readCodexMaxThreads?: import("audit-tools/shared").ReadCodexMaxThreads) => import("audit-tools/shared").HostConcurrencyLimit | null, resolveHostActiveSubagentLimit: (options: {
     explicitLimit?: number | null;
-    sessionConfig: SessionConfig;
+    sessionConfig: import("audit-tools/shared").SessionConfig;
     env?: NodeJS.ProcessEnv;
-    readCodexMaxThreads?: ReadCodexMaxThreads;
-}): HostConcurrencyLimit | null;
+    readCodexMaxThreads?: import("audit-tools/shared").ReadCodexMaxThreads;
+}) => import("audit-tools/shared").HostConcurrencyLimit | null;
 //# sourceMappingURL=hostLimits.d.ts.map

package/dist/remediate/quota/hostLimits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/remediate/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAQ5B,wBAAgB,6BAA6B,CAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,mBAAmB,CAAC,EAAE,mBAAmB,GACxC,oBAAoB,GAAG,IAAI,CAE7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,oBAAoB,GAAG,IAAI,CAE9B"}
+{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/remediate/quota/hostLimits.ts"],"names":[],"mappings":"AAKA,eAAO,MAAQ,6BAA6B,iKAAE,8BAA8B;iBAE0mG,CAAC;;OAA0D,CAAC;uBAA4C,CAAC;8DAD5uG,CAAC"}

package/dist/remediate/quota/hostLimits.js

@@ -1,9 +1,6 @@
-import { detectHostActiveSubagentLimit as detectShared, resolveHostActiveSubagentLimit as resolveShared, } from "audit-tools/shared";
-const ENV_PREFIX = "REMEDIATE_CODE";
-export function detectHostActiveSubagentLimit(env = process.env, readCodexMaxThreads) {
-    return detectShared(ENV_PREFIX, env, readCodexMaxThreads);
-}
-export function resolveHostActiveSubagentLimit(options) {
-    return resolveShared({ envPrefix: ENV_PREFIX, ...options });
-}
+import { buildHostLimitBindings } from "audit-tools/shared";
+import { REMEDIATE_CODE_DESCRIPTOR } from "../providers/index.js";
+// The quota half of the per-orchestrator draw: the env prefix is declared once,
+// on the descriptor, and the shared binding builder does the rest.
+export const { detectHostActiveSubagentLimit, resolveHostActiveSubagentLimit } = buildHostLimitBindings(REMEDIATE_CODE_DESCRIPTOR);
 //# sourceMappingURL=hostLimits.js.map

package/dist/remediate/quota/hostLimits.js.map

@@ -1 +1 @@
-{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/remediate/quota/hostLimits.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,6BAA6B,IAAI,YAAY,EAC7C,8BAA8B,IAAI,aAAa,GAChD,MAAM,oBAAoB,CAAC;AAE5B,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,UAAU,6BAA6B,CAC3C,MAAyB,OAAO,CAAC,GAAG,EACpC,mBAAyC;IAEzC,OAAO,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAK9C;IACC,OAAO,aAAa,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/remediate/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,gFAAgF;AAChF,mEAAmE;AACnE,MAAM,CAAC,MAAM,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,GAC5E,sBAAsB,CAAC,yBAAyB,CAAC,CAAC"}

package/dist/remediate/steps/nextStep.d.ts

@@ -1,6 +1,6 @@
 import { type RemediationState, type HostCapabilities } from "../state/store.js";
 import type { RemediationBlock } from "../state/types.js";
-import { type FrictionTriageDecision, type InterpretedIntent, type SessionConfig, type HostModelRosterEntry, type CapacityPool, type PartialCompletionTerminal, type RollingDispatchResult, type ProviderSlot, HostSessionQuotaSource, type EngineDecisionSink, type ProviderName, type DispatchModelTier } from "audit-tools/shared";
+import { HostSessionQuotaSource, type FrictionTriageDecision, type InterpretedIntent, type SessionConfig, type HostModelRosterEntry, type CapacityPool, type PartialCompletionTerminal, type RollingDispatchResult, type ProviderSlot, type EngineDecisionSink, type ProviderName, type DispatchModelTier } from "audit-tools/shared";
 import type { RemediationStep, RemediationDispatchPlan } from "./types.js";
 import { isTerminalStatus, isVerifiedCompleteStatus } from "../state/itemStatus.js";
 import { type GateRunner } from "./finalGate.js";

package/dist/remediate/steps/nextStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/nextStep.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,KAAK,EAGV,gBAAgB,EAGjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAupB,KAAK,sBAAsB,EAA8C,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,YAAY,EAAE,KAAK,yBAAyB,EAAE,KAAK,qBAAqB,EAAE,KAAK,YAAY,EAAsN,sBAAsB,EAAkQ,KAAK,kBAAkB,EAAkO,KAAK,YAAY,EAAoD,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmC7uD,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAK3E,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EAEzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,gBAAgB,CAAC;AAuCxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAoB3D,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IAC3C,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CAYV;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CAOV;AAED,iFAAiF;AACjF,MAAM,WAAW,wBAAwB;IACvC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,wBAAwB,GAAG,SAAS,EAC9C,SAAS,EAAE,gBAAgB,GAAG,SAAS,GACtC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,CAmC7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG;IAC5D,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAmBA;AA4KD,YAAY,EACV,eAAe,EACf,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;AAkFtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,gBAAgB,GACtB,gBAAgB,EAAE,EAAE,CAoFtB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAa1E;AAED,0EAA0E;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC1C,kFAAkF;IAClF,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,mFAAmF;IACnF,YAAY,EAAE,qBAAqB,CAAC;IACpC;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,CAAC;IACpD;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,iBAAiB,GAAG,SAAS,CAAC;IAC1E,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,EAAE,CAAC;IACtD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,IAAI,CAAC;IACX;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IAChF;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACvE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IACjF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IACjG;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,kDAAkD;IAClD,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,qBAAqB,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC;;;;;;;OAOG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAC5B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CA8FrC;AAyBD,0GAA0G;AAC1G,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE;IAC9C,KAAK,EAAE,gBAAgB,CAAC;IACxB,IAAI,EAAE,YAAY,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,OAAO,CAAC,qBAAqB,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3D,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,qFAAqF;IACrF,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,sEAAsE;IACtE,WAAW,CAAC,EAAE;QACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,UAAU,CAAC,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;QAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,mCAAmC;IAClD,0DAA0D;IAC1D,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,qBAAqB,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAChE,aAAa,EAAE,OAAO,CAAC;QACvB,MAAM,EAAE,OAAO,CAAC;QAChB,uFAAuF;QACvF,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAyXrD;AAcD,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AA2nCxB;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CACnD,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAEjC;AAqrDD,wBAAsB,cAAc,CAClC,OAAO,GAAE,eAAe,GAAG,MAAW,GACrC,OAAO,CAAC,eAAe,CAAC,CAyC1B;AA8OD,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAC3E,eAAO,MAAM,oCAAoC,kDACA,CAAC;AAElD,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,6EAA6E;IAC7E,WAAW,EAAE,iBAAiB,CAAC;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAsB,kCAAkC,CACtD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CA6B/C"}
+{"version":3,"file":"nextStep.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/nextStep.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,KAAK,EAGV,gBAAgB,EAGjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EA4BL,sBAAsB,EAmCtB,KAAK,sBAAsB,EAG3B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAEjB,KAAK,kBAAkB,EAEvB,KAAK,YAAY,EAGjB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAmC5B,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAK3E,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EAEzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,gBAAgB,CAAC;AAuCxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAoB3D,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IAC3C,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CAYV;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CAOV;AAED,iFAAiF;AACjF,MAAM,WAAW,wBAAwB;IACvC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,wBAAwB,GAAG,SAAS,EAC9C,SAAS,EAAE,gBAAgB,GAAG,SAAS,GACtC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,CAmC7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG;IAC5D,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAmBA;AA4KD,YAAY,EACV,eAAe,EACf,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;AAkFtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,gBAAgB,GACtB,gBAAgB,EAAE,EAAE,CAoFtB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAa1E;AAED,0EAA0E;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,qBAAqB,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC1C,kFAAkF;IAClF,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,mFAAmF;IACnF,YAAY,EAAE,qBAAqB,CAAC;IACpC;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,CAAC;IACpD;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,iBAAiB,GAAG,SAAS,CAAC;IAC1E,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,EAAE,CAAC;IACtD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,KAAK,IAAI,CAAC;IACX;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IAChF;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACvE;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IACjF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;IACjG;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,kDAAkD;IAClD,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,qBAAqB,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC;;;;;;;OAOG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAC5B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CA8FrC;AAyBD,0GAA0G;AAC1G,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE;IAC9C,KAAK,EAAE,gBAAgB,CAAC;IACxB,IAAI,EAAE,YAAY,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,OAAO,CAAC,qBAAqB,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3D,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,qFAAqF;IACrF,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,sEAAsE;IACtE,WAAW,CAAC,EAAE;QACZ,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,UAAU,CAAC,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;QAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,mCAAmC;IAClD,0DAA0D;IAC1D,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,qBAAqB,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAChE,aAAa,EAAE,OAAO,CAAC;QACvB,MAAM,EAAE,OAAO,CAAC;QAChB,uFAAuF;QACvF,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAyXrD;AAcD,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAgoCxB;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CACnD,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAEjC;AA0rDD,wBAAsB,cAAc,CAClC,OAAO,GAAE,eAAe,GAAG,MAAW,GACrC,OAAO,CAAC,eAAe,CAAC,CAyC1B;AA8OD,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAC3E,eAAO,MAAM,oCAAoC,kDACA,CAAC;AAElD,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,6EAA6E;IAC7E,WAAW,EAAE,iBAAiB,CAAC;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAsB,kCAAkC,CACtD,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CA6B/C"}

package/dist/remediate/steps/nextStep.js

@@ -3,7 +3,18 @@ import { existsSync, statSync } from "node:fs";
 import { mkdir, readFile, rename } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { StateStore } from "../state/store.js";
-import { discardOnSchemaVersionMismatch, buildSelfSpawnExclusion, readOptionalJsonFile, readValidatedRepoSessionIntent, stagedAndUntracked, writeJsonFile, writeTextFile, buildAuditDeliverablePair, formatValidationIssues, isRecord, withFsRetry, RunLogger, DISPATCH_PROMPT_HANDOFF_NOTE, renderHostScratchNote, hostScratchDir, renderQuotaCoverageNudge, renderTokenBudgetView, coerceJsonObjectArg, driveRolling, resolveLedgerBudgets, setQuotaStateDir, detectHostDispatchWall, admissionBlockedOnBudget, classifyEmptyGrantCause, reconcileAdmissionLeasesFromQuotaFile, buildQuotaPausedTerminal, interpretFreeFormIntent, advance, decideFrictionTriage, buildFrictionTriageBlock, planHybridDispatch, readSettledPools, addSettledPool, isPoolSettlingOutcome, isInProcessWorkerProvider, sourceByPoolId, classifyProvider, selectDispatchDriver, renderDispatchDriverInstruction, HostSessionQuotaSource, quotaPoolKey, captureStepBoundaryFriction, captureZeroCapacityFriction, captureCostDriftFriction, captureCreditExhaustionFriction, captureQuotaUnclassifiedFriction, captureModelUnavailableFriction, capturePacketTooLargeFriction, createDispatchDecisionLog, LENSES, SEVERITIES, resolveHostProviderName, resolveHostDispatchProviderName, resolveHostDispatchCapability as sharedResolveHostDispatchCapability, resolveAutonomousMode, resolveRollingEngineFlag } from "audit-tools/shared";
+// IO / validation / rendering helpers
+import { discardOnSchemaVersionMismatch, buildSelfSpawnExclusion, readOptionalJsonFile, readValidatedRepoSessionIntent, stagedAndUntracked, writeJsonFile, writeTextFile, buildAuditDeliverablePair, formatValidationIssues, isRecord, withFsRetry, RunLogger, DISPATCH_PROMPT_HANDOFF_NOTE, renderHostScratchNote, hostScratchDir, renderQuotaCoverageNudge, renderTokenBudgetView, coerceJsonObjectArg, 
+// rolling engine + quota
+driveRolling, resolveLedgerBudgets, setQuotaStateDir, detectHostDispatchWall, admissionBlockedOnBudget, classifyEmptyGrantCause, reconcileAdmissionLeasesFromQuotaFile, buildQuotaPausedTerminal, HostSessionQuotaSource, quotaPoolKey, 
+// obligation engine + intent
+interpretFreeFormIntent, advance, decideFrictionTriage, buildFrictionTriageBlock, 
+// dispatch planning / provider classification
+planHybridDispatch, readSettledPools, addSettledPool, isPoolSettlingOutcome, isInProcessWorkerProvider, sourceByPoolId, classifyProvider, selectDispatchDriver, renderDispatchDriverInstruction, resolveHostProviderName, resolveHostDispatchProviderName, resolveHostDispatchCapability as sharedResolveHostDispatchCapability, resolveAutonomousMode, resolveRollingEngineFlag, 
+// friction capture
+captureStepBoundaryFriction, captureZeroCapacityFriction, captureCostDriftFriction, captureCreditExhaustionFriction, captureQuotaUnclassifiedFriction, captureModelUnavailableFriction, capturePacketTooLargeFriction, createDispatchDecisionLog, 
+// domain constants
+LENSES, SEVERITIES, } from "audit-tools/shared";
 import { readRemediationAccessMemory, computeBlockContinuityScores } from "../state/accessMemory.js";
 import { applyPlanPipeline, buildCoverageLedger } from "../phases/plan.js";
 import { groundExtractedFindings } from "../phases/grounding.js";
@@ -1019,12 +1030,12 @@ function normalizeExtractedPlan(value) {
 }
 async function saveStateForPlan(artifactsDir, existing, plan, planCoverage) {
     const items = {};
+    const blockIds = blockIdsByFinding(plan);
     for (const finding of plan.findings) {
-        const block = plan.blocks.find((candidate) => candidate.items.includes(finding.id));
         items[finding.id] = {
             finding_id: finding.id,
             status: "pending",
-            block_id: block?.block_id ?? "UNKNOWN",
+            block_id: blockIds.get(finding.id) ?? "UNKNOWN",
         };
     }
     const state = {
@@ -1063,11 +1074,18 @@ function stripPlanTimeBookkeeping(value) {
 function findingCarryForwardKey(finding) {
     return JSON.stringify(stripPlanTimeBookkeeping(finding));
 }
+// Single-block membership is enforced by `fixupBlocksAfterDedup` (each finding
+// id appears in exactly one block's items after fixup), so this scan is a plain
+// projection. First-wins in block order is kept as the tie-break for defense in
+// depth — it is the same order fixup resolves ownership in, so the two can
+// never disagree even on a malformed plan.
 function blockIdsByFinding(plan) {
     const byFinding = new Map();
     for (const block of plan.blocks) {
         for (const id of block.items) {
-            byFinding.set(id, block.block_id);
+            if (!byFinding.has(id)) {
+                byFinding.set(id, block.block_id);
+            }
         }
     }
     return byFinding;
@@ -1989,6 +2007,7 @@ async function handlePendingExtractedPlan(root, artifactsDir, existing, extracte
         // way declined findings are recorded; their payloads recover at close from the
         // unfiltered intake source.
         const filterDisp = await readOptionalJsonFile(reviewFilterDispositionsPath(artifactsDir));
+        const pipelinedBlockIds = blockIdsByFinding(pipelined);
         const coverage = filterDisp
             ? buildCoverageLedger({
                 planId: pipelined.plan_id,
@@ -2015,8 +2034,7 @@ async function handlePendingExtractedPlan(root, artifactsDir, existing, extracte
                     {
                         finding_id: finding.id,
                         status: "pending",
-                        block_id: pipelined.blocks.find((b) => b.items.includes(finding.id))
-                            ?.block_id ?? "UNKNOWN",
+                        block_id: pipelinedBlockIds.get(finding.id) ?? "UNKNOWN",
                     },
                 ])),
             });
@@ -2370,31 +2388,49 @@ async function handleReadyIntakeContractPipeline(root, artifactsDir, options) {
     if (!intake.summary || !isIntakeReady(intake.summary)) {
         return null;
     }
+    // Resolve the manifest sources ONCE for the whole step (risk signal, Path A,
+    // and the pipeline source inputs all consume the same snapshot), and read the
+    // structured-audit source file at most once via a memoized reader (an
+    // unreadable source memoizes `undefined`; extractAuditFindings on undefined
+    // yields the empty set, so consumers degrade exactly as before).
+    const manifestSources = intake.manifest
+        ? resolveManifestSources(root, intake.manifest).resolved
+        : [];
+    const auditSource = intake.summary.source_type === "structured_audit"
+        ? manifestSources.find((s) => s.type === "structured_audit")
+        : undefined;
+    let auditFindingsCache;
+    const readAuditFindingsOnce = async () => {
+        if (!auditSource) {
+            return undefined;
+        }
+        if (!auditFindingsCache) {
+            let value;
+            try {
+                value = JSON.parse(await readFile(auditSource.path, "utf8"));
+            }
+            catch {
+                value = undefined;
+            }
+            auditFindingsCache = { value };
+        }
+        return auditFindingsCache.value;
+    };
     // Slice 2 — compute & persist the shared intake risk/complexity signal the
     // self-scaling dials (Slices 3/4) will read. Idempotent: recorded once from
     // intake-available data only (affected_files + goals + path-risk patterns), so
-    // a later escalate-on-evidence raise is never clobbered. The input is gathered
-    // lazily (only on the run that actually computes), and for structured_audit —
-    // where the top-level summary.affected_files is legitimately empty (paths live
-    // per-finding) — it unions the per-finding affected files so the path-risk
-    // patterns actually fire (fail-closed: a risky-subsystem audit must not land
-    // `low`). No behavior keys on it yet — this establishes the source of truth.
+    // a later escalate-on-evidence raise is never clobbered. The audit-source read
+    // happens only on the run that actually computes (memoized above), and for
+    // structured_audit — where the top-level summary.affected_files is
+    // legitimately empty (paths live per-finding) — it unions the per-finding
+    // affected files so the path-risk patterns actually fire (fail-closed: a
+    // risky-subsystem audit must not land `low`). No behavior keys on it yet —
+    // this establishes the source of truth.
     await ensureIntakeRiskSignal(artifactsDir, async () => {
         const summary = intake.summary;
         const affectedFiles = summary.affected_files.map((f) => f.path);
-        if (summary.source_type === "structured_audit" && intake.manifest) {
-            const auditSource = resolveManifestSources(root, intake.manifest).resolved.find((s) => s.type === "structured_audit");
-            if (auditSource) {
-                try {
-                    const parsed = JSON.parse(await readFile(auditSource.path, "utf8"));
-                    affectedFiles.push(...distinctAffectedFiles(extractAuditFindings(parsed)));
-                }
-                catch {
-                    // Unreadable audit source — leave the summary-derived list; an empty
-                    // list with non-empty goals still rates conservatively via intent.
-                }
-            }
-        }
+        const parsed = await readAuditFindingsOnce();
+        affectedFiles.push(...distinctAffectedFiles(extractAuditFindings(parsed)));
         return { affectedFiles, goals: summary.goals };
     });
     const pipeline = shouldEnterContractPipeline(artifactsDir, intake.summary.source_type);
@@ -2419,118 +2455,109 @@ async function handleReadyIntakeContractPipeline(root, artifactsDir, options) {
     // ledger is built over the originals (every audit finding → exactly one
     // disposition). The gate may halt to collect the user's decision.
     let reviewSourceSwap;
-    if (intake.summary.source_type === "structured_audit" && intake.manifest) {
-        const auditSource = resolveManifestSources(root, intake.manifest).resolved.find((s) => s.type === "structured_audit");
-        if (auditSource) {
-            let auditFindings;
-            try {
-                auditFindings = JSON.parse(await readFile(auditSource.path, "utf8"));
+    if (auditSource) {
+        const auditFindings = await readAuditFindingsOnce();
+        const originals = extractAuditFindings(auditFindings);
+        if (originals.length > 0) {
+            const checkpoint = await readOptionalJsonFile(join(artifactsDir, "intent_checkpoint.json"));
+            const filter = await runFindingFilterPass(originals, {
+                root,
+                checkpoint: checkpoint ?? undefined,
+                evidenceGrounding: true,
+            });
+            const gate = await runReviewApprovalGate(root, artifactsDir, filter.survivors, 
+            // Autonomy resolves from the PERSISTED session config (hoisted load
+            // above) → env → attended default, never from the bare CLI options.
+            resolveAutonomousMode({ sessionConfig: sessionConfigForDispatch }));
+            if (gate.kind === "halt") {
+                return gate.step;
             }
-            catch {
-                auditFindings = undefined;
+            // Persist the filter dispositions so coverage is built over the originals.
+            await persistReviewFilterDispositions(artifactsDir, originals, filter);
+            // Lean path = the `low` risk tier's realization (D-68 — the standalone lean
+            // fast-path folded into the self-scaling dial; its two mechanisms now live in
+            // `riskSignal.ts` (light-review) + `contractPipeline.ts` (lean plan builder)).
+            // A run skips the heavy contract DESIGN loop and
+            // synthesizes the extracted plan directly IFF its effective risk tier is `low`;
+            // the plan→implement→close machinery (per-node verify-before-merge + the final
+            // whole-repo gate) is the retained safety net. Runs only here — on Path A
+            // (structured_audit), the only intake with a pre-existing finding set to judge.
+            //
+            // First fold the APPROVED set's finding-level risk (grounding / confidence /
+            // coupling / systemic / architecture / count — the finding-QUALITY dimension the
+            // intake path/breadth/intent signal doesn't see) INTO the shared risk signal as
+            // escalate-on-evidence. This makes the tier the SINGLE classifier: there is no
+            // separate fast-path boolean that can DISAGREE with it (a grounded handful
+            // touching a risk subsystem stays `high` and takes the full pipeline, instead of
+            // bypassing it as the old parallel `evaluateFastPath` allowed).
+            const findingEvidence = findingRiskEvidence(gate.approved);
+            let riskSignal = await readIntakeRiskSignal(artifactsDir);
+            if (findingEvidence && riskSignal) {
+                const raised = escalateRiskSignal(riskSignal, findingEvidence);
+                // escalateRiskSignal returns the SAME reference when the evidence does not
+                // raise the tier — only persist on an actual change (no byte-identical rewrite).
+                if (raised !== riskSignal) {
+                    riskSignal = raised;
+                    await writeIntakeRiskSignal(artifactsDir, riskSignal);
+                }
             }
-            const originals = extractAuditFindings(auditFindings);
-            if (originals.length > 0) {
-                const checkpoint = await readOptionalJsonFile(join(artifactsDir, "intent_checkpoint.json"));
-                const filter = await runFindingFilterPass(originals, {
-                    root,
-                    checkpoint: checkpoint ?? undefined,
-                    evidenceGrounding: true,
-                });
-                const gate = await runReviewApprovalGate(root, artifactsDir, filter.survivors, 
-                // Autonomy resolves from the PERSISTED session config (hoisted load
-                // above) → env → attended default, never from the bare CLI options.
-                resolveAutonomousMode({ sessionConfig: sessionConfigForDispatch }));
-                if (gate.kind === "halt") {
-                    return gate.step;
+            // T1 slice 3b — the lean tier is NOT zero-scrutiny: a `low`-tier run first runs
+            // a bounded LIGHT adversarial review over the approved findings (the floor,
+            // never off — `adversarialDepthForTier("low") === "light"`). A clear verdict
+            // proceeds to the lean plan; a verdict that surfaces a real concern escalates
+            // the risk signal and routes to the full pipeline below.
+            if (gate.approved.length > 0 && riskSignal?.tier === "low") {
+                const review = await runLeanLightReviewGate(root, artifactsDir, gate.approved);
+                if (review.kind === "halt") {
+                    return review.step;
                 }
-                // Persist the filter dispositions so coverage is built over the originals.
-                await persistReviewFilterDispositions(artifactsDir, originals, filter);
-                // Lean path = the `low` risk tier's realization (D-68 — the standalone lean
-                // fast-path folded into the self-scaling dial; its two mechanisms now live in
-                // `riskSignal.ts` (light-review) + `contractPipeline.ts` (lean plan builder)).
-                // A run skips the heavy contract DESIGN loop and
-                // synthesizes the extracted plan directly IFF its effective risk tier is `low`;
-                // the plan→implement→close machinery (per-node verify-before-merge + the final
-                // whole-repo gate) is the retained safety net. Runs only here — on Path A
-                // (structured_audit), the only intake with a pre-existing finding set to judge.
-                //
-                // First fold the APPROVED set's finding-level risk (grounding / confidence /
-                // coupling / systemic / architecture / count — the finding-QUALITY dimension the
-                // intake path/breadth/intent signal doesn't see) INTO the shared risk signal as
-                // escalate-on-evidence. This makes the tier the SINGLE classifier: there is no
-                // separate fast-path boolean that can DISAGREE with it (a grounded handful
-                // touching a risk subsystem stays `high` and takes the full pipeline, instead of
-                // bypassing it as the old parallel `evaluateFastPath` allowed).
-                const findingEvidence = findingRiskEvidence(gate.approved);
-                let riskSignal = await readIntakeRiskSignal(artifactsDir);
-                if (findingEvidence && riskSignal) {
-                    const raised = escalateRiskSignal(riskSignal, findingEvidence);
-                    // escalateRiskSignal returns the SAME reference when the evidence does not
-                    // raise the tier — only persist on an actual change (no byte-identical rewrite).
-                    if (raised !== riskSignal) {
-                        riskSignal = raised;
-                        await writeIntakeRiskSignal(artifactsDir, riskSignal);
-                    }
+                if (review.kind === "escalate") {
+                    // Escalate-on-evidence: raise the signal to at least `medium` so the
+                    // full pipeline's adversarial depth is `full` (see slice 3a), then
+                    // fall through to the full pipeline.
+                    await writeIntakeRiskSignal(artifactsDir, escalateRiskSignal(riskSignal, {
+                        tier: "medium",
+                        reason: `lean light review surfaced a concern: ${review.concerns.join("; ")}`,
+                    }));
+                    process.stderr.write(`[remediate-code] Lean light review escalated (${review.concerns.join("; ")}); routing to the full contract pipeline.\n`);
                 }
-                // T1 slice 3b — the lean tier is NOT zero-scrutiny: a `low`-tier run first runs
-                // a bounded LIGHT adversarial review over the approved findings (the floor,
-                // never off — `adversarialDepthForTier("low") === "light"`). A clear verdict
-                // proceeds to the lean plan; a verdict that surfaces a real concern escalates
-                // the risk signal and routes to the full pipeline below.
-                if (gate.approved.length > 0 && riskSignal?.tier === "low") {
-                    const review = await runLeanLightReviewGate(root, artifactsDir, gate.approved);
-                    if (review.kind === "halt") {
-                        return review.step;
+                else {
+                    // Clear verdict → proceed with the lean plan.
+                    const leanPlan = buildLeanExtractedPlan(gate.approved, randomRunId("LEAN"));
+                    await writeJsonFile(intakePaths(artifactsDir).extractedPlan, leanPlan);
+                    process.stderr.write(`[remediate-code] Lean fast path (risk tier low): ${riskSignal.rationale.join("; ")}; light review clear. Routing to plan→implement.\n`);
+                    const planned = await handlePendingExtractedPlan(root, artifactsDir, { status: "pending" }, leanPlan);
+                    if (planned) {
+                        return planned;
                     }
-                    if (review.kind === "escalate") {
-                        // Escalate-on-evidence: raise the signal to at least `medium` so the
-                        // full pipeline's adversarial depth is `full` (see slice 3a), then
-                        // fall through to the full pipeline.
-                        await writeIntakeRiskSignal(artifactsDir, escalateRiskSignal(riskSignal, {
-                            tier: "medium",
-                            reason: `lean light review surfaced a concern: ${review.concerns.join("; ")}`,
-                        }));
-                        process.stderr.write(`[remediate-code] Lean light review escalated (${review.concerns.join("; ")}); routing to the full contract pipeline.\n`);
-                    }
-                    else {
-                        // Clear verdict → proceed with the lean plan.
-                        const leanPlan = buildLeanExtractedPlan(gate.approved, randomRunId("LEAN"));
-                        await writeJsonFile(intakePaths(artifactsDir).extractedPlan, leanPlan);
-                        process.stderr.write(`[remediate-code] Lean fast path (risk tier low): ${riskSignal.rationale.join("; ")}; light review clear. Routing to plan→implement.\n`);
-                        const planned = await handlePendingExtractedPlan(root, artifactsDir, { status: "pending" }, leanPlan);
-                        if (planned) {
-                            return planned;
-                        }
-                        // Defensive: a deterministically-built lean plan should always
-                        // normalize. If it somehow didn't, handlePendingExtractedPlan removed
-                        // the file; fall through to the full pipeline (the safety net) rather
-                        // than stalling the run.
-                        process.stderr.write("[remediate-code] Lean fast-path plan failed to materialize; falling back to the contract pipeline.\n");
-                    }
-                }
-                // Seed the pipeline with the approved survivors only. When that set is
-                // narrower than the originals (anything filtered or declined), route the
-                // seed AND the pipeline's source inputs at a filtered file so a removed
-                // finding can never re-enter via the raw audit-findings.json (tool-enforced).
-                const approvedPayload = isRecord(auditFindings)
-                    ? { ...auditFindings, findings: gate.approved }
-                    : { findings: gate.approved };
-                let seedSourcePath = auditSource.path;
-                if (gate.approved.length < originals.length) {
-                    await mkdir(contractPipelineDir(artifactsDir), { recursive: true });
-                    seedSourcePath = join(contractPipelineDir(artifactsDir), "approved-findings.json");
-                    await writeJsonFile(seedSourcePath, approvedPayload);
-                    reviewSourceSwap = { from: auditSource.path, to: seedSourcePath };
-                }
-                try {
-                    await writePathASeedFromFindings(artifactsDir, seedSourcePath, approvedPayload);
-                }
-                catch {
-                    // If the seed cannot be written, the pipeline still runs; the LLM
-                    // phases use the source files from sourcePaths.
+                    // Defensive: a deterministically-built lean plan should always
+                    // normalize. If it somehow didn't, handlePendingExtractedPlan removed
+                    // the file; fall through to the full pipeline (the safety net) rather
+                    // than stalling the run.
+                    process.stderr.write("[remediate-code] Lean fast-path plan failed to materialize; falling back to the contract pipeline.\n");
                 }
             }
+            // Seed the pipeline with the approved survivors only. When that set is
+            // narrower than the originals (anything filtered or declined), route the
+            // seed AND the pipeline's source inputs at a filtered file so a removed
+            // finding can never re-enter via the raw audit-findings.json (tool-enforced).
+            const approvedPayload = isRecord(auditFindings)
+                ? { ...auditFindings, findings: gate.approved }
+                : { findings: gate.approved };
+            let seedSourcePath = auditSource.path;
+            if (gate.approved.length < originals.length) {
+                await mkdir(contractPipelineDir(artifactsDir), { recursive: true });
+                seedSourcePath = join(contractPipelineDir(artifactsDir), "approved-findings.json");
+                await writeJsonFile(seedSourcePath, approvedPayload);
+                reviewSourceSwap = { from: auditSource.path, to: seedSourcePath };
+            }
+            try {
+                await writePathASeedFromFindings(artifactsDir, seedSourcePath, approvedPayload);
+            }
+            catch {
+                // If the seed cannot be written, the pipeline still runs; the LLM
+                // phases use the source files from sourcePaths.
+            }
         }
     }
     const paths = intakePaths(artifactsDir);
@@ -2538,14 +2565,12 @@ async function handleReadyIntakeContractPipeline(root, artifactsDir, options) {
     if (existsSync(paths.brief)) {
         sourcePaths.add(paths.brief);
     }
-    if (intake.manifest) {
-        for (const source of resolveManifestSources(root, intake.manifest).resolved) {
-            // Swap the raw audit-findings.json for the approved-only filtered file so a
-            // declined finding can never re-enter the pipeline as a source input.
-            sourcePaths.add(reviewSourceSwap && source.path === reviewSourceSwap.from
-                ? reviewSourceSwap.to
-                : source.path);
-        }
+    for (const source of manifestSources) {
+        // Swap the raw audit-findings.json for the approved-only filtered file so a
+        // declined finding can never re-enter the pipeline as a source input.
+        sourcePaths.add(reviewSourceSwap && source.path === reviewSourceSwap.from
+            ? reviewSourceSwap.to
+            : source.path);
     }
     // Resolve the independent-critic dispatch capability from the SAME handshake
     // (`resolveHostDispatchCapability`) implement dispatch uses — never a manual