audit-tools 0.39.14 → 0.40.1

package/README.md

@@ -34,10 +34,9 @@ human-readable render (markdown):
 - Keep tasks tightly bound and well defined, so the gap between weak and strong models shrinks.
 - Batch work into logical units of reasonable size — rigor balanced against token cost, not 100 agents
   for 100 files.
-- Keep everything IDE-, provider-, model-, OS-, shell- and language-agnostic: discovered at runtime or
-  abstracted behind a contract, never baked in. Detecting a repo's structure and pulling in useful tools
-  for it is how that is honored — their output is normalized into shared contracts, never forked per
-  ecosystem.
+- Keep everything IDE-, provider-, model-, OS-, shell- and language-agnostic: outside the product
+  contract or abstracted, never baked in. The host owns semantic execution; audit-tools detects repo
+  structure and normalizes analyzer output into shared contracts, never forks planning per ecosystem.
 - Auditing and remediating are not two tools — they are two cases of ONE logical core, drawn read-only or
   write-and-apply. The boundary between them is continuously being dissolved, and re-introducing it is the
   most persistent mistake made against this project; a difference between the two is a policy axis of the
@@ -67,10 +66,10 @@ Running `/audit-code` inside a repo then bootstraps any remaining per-repo host
 ## Usage
 
 The tools are meant to be run as slash-commands inside a host agent. Just invoke the
-command - no manual path, provider, or model flags. The agent you're conversing with works
-its way through the whole workflow on its own, dispatching subagents where appropriate, and
-only stops to ask you when it needs a real decision (but it does its best to ask those
-questions at the outset so it can run autonomously for as long as possible).
+command—there are no provider, model, or quota flags. audit-tools plans bounded work and
+emits self-contained host workloads; the host chooses how to execute them, writes the bound
+result records, and returns them for strict validation and ingestion. The agent you're
+conversing with works through the persisted workflow and stops only for a real decision.
 
 **Audit a code base:**
 
@@ -128,22 +127,21 @@ a summary before anything is committed.
   clarifications, and tries to front-load those questions so it can run uninterrupted.
 - **Runs are resumable.** State persists to `.audit-tools/` in the target repo, so an
   interrupted run picks up where it left off.
-- **Work runs in parallel** where it safely can, even allowing for coordination between
-  different IDEs, different providers, CLIs, local models, etc.
+- **The host owns execution.** It can run independent work items in parallel using whatever
+  native subagent or collaboration facilities are available in the current session.
 - **Effort scales to the work.** Trivial work gets light review; risky or complex work
   gets deeper scrutiny.
-- **Quota-aware dispatch.** When work is parallelizable, will dispatch agents according to
-  the resources you have available, and the quota and rate limits it can detect.
+- **Results are untrusted input.** Prompt bindings, file coverage, worktree identity, commit
+  evidence, and test evidence are checked before host-produced work changes persisted state.
 
 ### The pipelines, step by step
 
 **audit-code:**
 
-1. **Confirm providers** — discovers the LLMs available in your session and confirms which to use.
-2. **Understand the repo** — deterministically maps files, public surfaces, the dependency
+1. **Understand the repo** — deterministically maps files, public surfaces, the dependency
    graph, critical flows, and a risk register; runs available static analyzers and auto-fixes.
-3. **Confirm intent** — you review the scope and pick the review lenses.
-4. **Map the subsystems** — deterministically clusters the code into real subsystems by
+2. **Confirm intent** — you review the scope and pick the review lenses.
+3. **Map the subsystems** — deterministically clusters the code into real subsystems by
    overlaying how it actually behaves (call/import, co-change, shared state) against how it's
    declared to be organized (directories, docs, comments), and flags where the two disagree:
    a tightly-coupled cluster no declared boundary owns, or a declared purpose smeared across
@@ -151,14 +149,15 @@ a summary before anything is committed.
    charter — what it's *stated* to do versus what the code *reveals* it does — and surfaces the
    gaps, then triangulates any charter question still worth resolving into a clear yes/no before
    moving on.
-5. **Review the design** — two parallel passes: a contract pass (invariants, boundaries,
+4. **Review the design** — two parallel passes: a contract pass (invariants, boundaries,
    obligations) and a conceptual pass (philosophy, alternatives, better directions). On a deeper
    review it also runs a second-order adversarial pass over the whole codebase asking "is there a
    fundamentally better way to do this?", looping until a round turns up nothing new.
-6. **Plan** — turns the risk register into bounded, prioritized review tasks.
-7. **Review in parallel** — dispatches the review tasks to your LLMs, routing riskier work to
-   more capable models, and deep-dives selectively.
-8. **Synthesize** — consolidates everything into `audit-findings.json` + `audit-report.md`,
+5. **Plan** — turns the risk register into bounded, prioritized review tasks and emits a
+   complete, provider-neutral host workload.
+6. **Review through the host** — the conversation host assigns the bounded items, then
+   audit-tools validates and ingests the bound result records and deep-dives selectively.
+7. **Synthesize** — consolidates everything into `audit-findings.json` + `audit-report.md`,
    then layers on a narrative (themes, executive summary, top risks).
 
 The numbering is a conceptual grouping, not the literal execution sequence — the authoritative
@@ -167,21 +166,21 @@ steps (e.g. deterministic subsystem clustering runs before the intent checkpoint
 
 **remediate-code:**
 
-1. **Confirm providers** — same session-level provider check as audit-code.
-2. **Intake** — reads the findings and/or free-form intent, validates the input, and drafts a
+1. **Intake** — reads the findings and/or free-form intent, validates the input, and drafts a
    summary with any open questions.
-3. **Confirm intent** — you confirm scope, answer open questions, and set the closing action
+2. **Confirm intent** — you confirm scope, answer open questions, and set the closing action
    (commit, push, open PR, publish, or halt).
-4. **Design the change** — decomposes the work into modules, drafts a contract per module in
+3. **Design the change** — decomposes the work into modules, drafts a contract per module in
    parallel, detects and reconciles seams (where one module's output must match another's
    input), then derives obligations and a test plan. Riskier changes get an independent
    critic-and-judge pass.
-5. **Review the findings** — presents every finding bucketed by how much of your judgment it
+4. **Review the findings** — presents every finding bucketed by how much of your judgment it
    needs (strategic / concrete / mechanical); you approve or decline each before anything
    proceeds to implementation.
-6. **Implement in parallel** — executes the changes in isolated worktrees, running tests and
-   verifying each unit; failures are triaged and retried or blocked.
-7. **Close** — previews the file list and commit message for your confirmation (unless
+5. **Implement through the host** — emits all eligible provider-neutral work items. The host
+   performs the edits and returns prompt-bound commit and test evidence; audit-tools validates
+   that evidence before accepting completion.
+6. **Close** — previews the file list and commit message for your confirmation (unless
    pre-authorized), then runs the closing action and writes `remediation-outcomes.json` +
    `remediation-report.md`.
 

package/dist/audit/cli/args.d.ts

@@ -1,4 +1,4 @@
-import { artifactNameForId, isCanonicalResultFilename, toPromptPathToken, quotePromptCommandArg, type HostProviderName, type SessionConfig, type AuditorDescriptor } from "audit-tools/shared";
+import { artifactNameForId, isCanonicalResultFilename, quotePromptCommandArg, toPromptPathToken } from "audit-tools/shared";
 export declare const DIRECT_CLI_DEFAULTS: {
     rootDir: string;
     artifactsDir: string;
@@ -7,73 +7,18 @@ export declare const DIRECT_CLI_DEFAULTS: {
 export declare function getFlag(argv: string[], name: string, fallback?: string): string | undefined;
 export declare function hasFlag(argv: string[], name: string): boolean;
 export declare function optionalBooleanEnv(value: string | undefined): boolean | undefined;
-export declare function resolveHostDispatchCapability(options: {
-    explicit?: boolean;
-    sessionConfig: SessionConfig;
-    env?: NodeJS.ProcessEnv;
-}): boolean;
-export declare function fromBase64Url(value: string): string;
 export { digestId, safeArtifactStem } from "audit-tools/shared";
 export { artifactNameForId, isCanonicalResultFilename };
 export declare const quoteCommandArg: typeof quotePromptCommandArg;
-/**
- * Normalize a generated command token to POSIX path separators. These command
- * strings are embedded in step prompts and `allowed_commands` and run by the
- * host — often through a bash-like shell, which treats `\` as an escape and
- * silently corrupts Windows absolute paths (`node C:\a\b.mjs` collapses to
- * `node C:ab.mjs`). Node accepts forward slashes on Windows, and `/` survives
- * bash, PowerShell, and cmd alike. Only tokens that actually carry a backslash
- * are touched, and no non-path argument in this CLI contains one, so this is a
- * targeted normalization rather than a blanket rewrite.
- */
 export declare const toPosixCommandToken: typeof toPromptPathToken;
 export declare function renderCommand(argv: string[]): string;
-export declare function taskResultPath(taskResultsDir: string, taskId: string): string;
-export declare function packetPromptPath(taskResultsDir: string, packetId: string): string;
-export declare function readStdinText(): Promise<string>;
 export declare function normalizePositiveInteger(value: unknown): number | undefined;
 export declare function parsePositiveIntegerFlag(argv: string[], name: string): number | undefined;
 export declare function getRootDir(argv: string[]): string;
-/**
- * Resolve the artifacts dir. An explicit `--artifacts-dir` is honored verbatim
- * (resolved against CWD). With NO `--artifacts-dir`, the default rebases onto
- * `--root` via the shared `auditArtifactsDir()` helper — so `--root <X>` lands
- * the default under `<X>/.audit-tools/audit`. Previously the default resolved
- * the `.audit-tools/audit` literal against CWD independently of `--root`, so a
- * bare `--root <X>` silently ignored `<X>` (the latent bug fixed here).
- */
 export declare function getArtifactsDir(argv: string[]): string;
 export declare function warnIfNotGitRepo(root: string): void;
 export declare function getBatchResultsDir(argv: string[]): string | undefined;
-export declare function getTimeoutMs(argv: string[], sessionConfig: SessionConfig): number;
-export declare function getExplicitProvider(argv: string[]): string | undefined;
-/**
- * B1: explicit conversation-host provider override (`--host-provider`). Names the
- * auditor actually DRIVING this run, whose account meter the dispatch fan-out is
- * charged to — a quota-ATTRIBUTION key, distinct from `--provider` (which may name
- * a headless in-process backend that is only the per-packet worker). Normally left
- * unset: the host is auto-detected from the run's own session env. Constrained to
- * a known ProviderName so a typo fails LOUDLY here rather than silently mis-keying.
- */
-export declare function getHostProvider(argv: string[]): HostProviderName | null;
-export declare function getHostModel(argv: string[]): string | null;
-/**
- * Parse the current driver's dispatch-capability handshake, carried as ONE
- * `--auditor <json>` flag (G1 collapsed the former N `--host-*` scalar flags onto
- * `descriptor.self`; G2 folded the driver's provider identity + own host/IDE launch
- * blocks onto `self` and resliced the per-backend dispatch blocks to a top-level
- * `sources[]`). Malformed JSON or a non-object throws loudly so a mistyped handshake
- * fails here rather than silently downgrading. `null` when the flag is absent.
- *
- * `--auditor @<path>` reads the JSON from a file instead. Inline JSON through a
- * Windows `.cmd` shim is a known quoting trap (cmd's batch `%*` re-expansion
- * mangles embedded quotes — the same class the submit-packet flow solved with a
- * file), so a host on a hostile shell writes the handshake to a file and passes
- * the `@` form.
- * [[capability-is-per-auditor-not-per-audit]] [[unified-dispatch-worker-model]]
- */
-export declare function getAuditorDescriptor(argv: string[]): AuditorDescriptor | null;
-export declare function resolveRunProviderName(argv: string[], sessionConfig: SessionConfig): string;
+export declare function getTimeoutMs(argv: string[]): number;
 export declare function looksLikeCliFlag(value: string | undefined): boolean;
 export declare function countLines(path: string): Promise<number>;
 export declare function listBatchResultFiles(batchDir: string): Promise<string[]>;

package/dist/audit/cli/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/args.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EAEzB,iBAAiB,EACjB,qBAAqB,EAQrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EAEvB,MAAM,oBAAoB,CAAC;AAG5B,eAAO,MAAM,mBAAmB;;;;CAQ/B,CAAC;AAMF,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAIjF;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,OAAO,CASV;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAKD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAExD,eAAO,MAAM,eAAe,8BAAwB,CAAC;AAErD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,0BAAoB,CAAC;AAErD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpD;AAED,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAarD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAKjD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAMtD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOnD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAGrE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,aAAa,GAAG,MAAM,CAMjF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAKvE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAE1D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,GAAG,IAAI,CA2H7E;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EAAE,EACd,aAAa,EAAE,aAAa,GAC3B,MAAM,CAKR;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEnE;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB9D;AAED,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwB9E"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/args.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,iBAAiB,EAEjB,yBAAyB,EACzB,qBAAqB,EAGrB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,mBAAmB;;;;CAI/B,CAAC;AAMF,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,GAAG,SAAS,CAIrB;AAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAExD,eAAO,MAAM,eAAe,8BAAwB,CAAC;AACrD,eAAO,MAAM,mBAAmB,0BAAoB,CAAC;AAErD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK3E;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAIjD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAKtD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMnD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAGrE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAKnD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEnE;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB9D;AAED,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAkB9E"}

package/dist/audit/cli/args.js

@@ -1,17 +1,12 @@
-import { existsSync, createReadStream, readFileSync } from "node:fs";
+import { createReadStream, existsSync } from "node:fs";
 import { readdir } from "node:fs/promises";
 import { Buffer } from "node:buffer";
 import { join, resolve } from "node:path";
-import { artifactNameForId, isCanonicalResultFilename, renderPromptCommand, toPromptPathToken, quotePromptCommandArg, parseHostModelRoster, auditArtifactsDir, resolveRepoRoot, resolveHostDispatchCapability as sharedResolveHostDispatchCapability, assertHostProviderName, validateSessionConfig, formatValidationIssues, } from "audit-tools/shared";
-import { resolveFreshSessionProviderName } from "../providers/index.js";
+import { artifactNameForId, auditArtifactsDir, isCanonicalResultFilename, quotePromptCommandArg, renderPromptCommand, resolveRepoRoot, toPromptPathToken, } from "audit-tools/shared";
 export const DIRECT_CLI_DEFAULTS = {
     rootDir: ".",
-    // Sentinel marking "no explicit --artifacts-dir". When this is the resolved
-    // value, getArtifactsDir rebases the default onto --root via the shared
-    // auditArtifactsDir() helper rather than resolving the literal against CWD —
-    // so `--root <X>` with no --artifacts-dir lands under <X>/.audit-tools/audit.
     artifactsDir: ".audit-tools/audit",
-    timeoutMs: 30 * 60 * 1000, // 30 minutes
+    timeoutMs: 30 * 60 * 1000,
 };
 function isLongFlagToken(value) {
     return typeof value === "string" && value.startsWith("--");
@@ -35,59 +30,13 @@ export function optionalBooleanEnv(value) {
         return false;
     return undefined;
 }
-export function resolveHostDispatchCapability(options) {
-    // Single-sourced in shared so audit and remediate can't drift; audit supplies its
-    // own env var name.
-    return sharedResolveHostDispatchCapability({
-        explicit: options.explicit,
-        sessionConfig: options.sessionConfig,
-        envVarName: "AUDIT_CODE_HOST_CAN_DISPATCH",
-        env: options.env,
-    });
-}
-export function fromBase64Url(value) {
-    return Buffer.from(value, "base64url").toString("utf8");
-}
-// Artifact naming moved to `audit-tools/shared` — remediate names its per-node run
-// artifacts from the same primitive and must not import from audit. Re-exported
-// here so this module's existing consumers are unchanged.
 export { digestId, safeArtifactStem } from "audit-tools/shared";
 export { artifactNameForId, isCanonicalResultFilename };
 export const quoteCommandArg = quotePromptCommandArg;
-/**
- * Normalize a generated command token to POSIX path separators. These command
- * strings are embedded in step prompts and `allowed_commands` and run by the
- * host — often through a bash-like shell, which treats `\` as an escape and
- * silently corrupts Windows absolute paths (`node C:\a\b.mjs` collapses to
- * `node C:ab.mjs`). Node accepts forward slashes on Windows, and `/` survives
- * bash, PowerShell, and cmd alike. Only tokens that actually carry a backslash
- * are touched, and no non-path argument in this CLI contains one, so this is a
- * targeted normalization rather than a blanket rewrite.
- */
 export const toPosixCommandToken = toPromptPathToken;
 export function renderCommand(argv) {
     return renderPromptCommand(argv);
 }
-export function taskResultPath(taskResultsDir, taskId) {
-    return join(taskResultsDir, artifactNameForId(taskId, "json"));
-}
-export function packetPromptPath(taskResultsDir, packetId) {
-    return join(taskResultsDir, artifactNameForId(packetId, "prompt.md"));
-}
-export async function readStdinText() {
-    if (process.stdin.isTTY) {
-        return "";
-    }
-    return await new Promise((resolveInput, reject) => {
-        let input = "";
-        process.stdin.setEncoding("utf8");
-        process.stdin.on("data", (chunk) => {
-            input += chunk;
-        });
-        process.stdin.on("end", () => resolveInput(input));
-        process.stdin.on("error", reject);
-    });
-}
 export function normalizePositiveInteger(value) {
     if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
         return undefined;
@@ -96,35 +45,19 @@ export function normalizePositiveInteger(value) {
 }
 export function parsePositiveIntegerFlag(argv, name) {
     const raw = getFlag(argv, name);
-    if (raw === undefined) {
-        return undefined;
-    }
-    return normalizePositiveInteger(Number(raw));
+    return raw === undefined ? undefined : normalizePositiveInteger(Number(raw));
 }
 export function getRootDir(argv) {
-    // Anchor the repo root away from a drifted cwd (never trust bare `--root .`):
-    // resolveRepoRoot climbs out of any `.audit-tools/` and re-anchors to the
-    // existing run's root / git toplevel. See src/shared/io/repoRoot.ts.
     return resolveRepoRoot(getFlag(argv, "--root", DIRECT_CLI_DEFAULTS.rootDir));
 }
-/**
- * Resolve the artifacts dir. An explicit `--artifacts-dir` is honored verbatim
- * (resolved against CWD). With NO `--artifacts-dir`, the default rebases onto
- * `--root` via the shared `auditArtifactsDir()` helper — so `--root <X>` lands
- * the default under `<X>/.audit-tools/audit`. Previously the default resolved
- * the `.audit-tools/audit` literal against CWD independently of `--root`, so a
- * bare `--root <X>` silently ignored `<X>` (the latent bug fixed here).
- */
 export function getArtifactsDir(argv) {
     const explicit = getFlag(argv, "--artifacts-dir");
-    if (explicit !== undefined) {
-        return resolve(explicit);
-    }
-    return auditArtifactsDir(getRootDir(argv));
+    return explicit === undefined
+        ? auditArtifactsDir(getRootDir(argv))
+        : resolve(explicit);
 }
 export function warnIfNotGitRepo(root) {
-    const gitEntry = join(root, ".git");
-    if (!existsSync(gitEntry)) {
+    if (!existsSync(join(root, ".git"))) {
         console.warn(`Warning: target directory '${root}' does not appear to be a git repository. Diff-based signals will be unavailable.`);
     }
 }
@@ -132,175 +65,15 @@ export function getBatchResultsDir(argv) {
     const value = getFlag(argv, "--batch-results");
     return value ? resolve(value) : undefined;
 }
-export function getTimeoutMs(argv, sessionConfig) {
+export function getTimeoutMs(argv) {
     return (parsePositiveIntegerFlag(argv, "--timeout") ??
-        normalizePositiveInteger(sessionConfig.timeout_ms) ??
         DIRECT_CLI_DEFAULTS.timeoutMs);
 }
-export function getExplicitProvider(argv) {
-    return getFlag(argv, "--provider");
-}
-/**
- * B1: explicit conversation-host provider override (`--host-provider`). Names the
- * auditor actually DRIVING this run, whose account meter the dispatch fan-out is
- * charged to — a quota-ATTRIBUTION key, distinct from `--provider` (which may name
- * a headless in-process backend that is only the per-packet worker). Normally left
- * unset: the host is auto-detected from the run's own session env. Constrained to
- * a known ProviderName so a typo fails LOUDLY here rather than silently mis-keying.
- */
-export function getHostProvider(argv) {
-    const value = getFlag(argv, "--host-provider");
-    if (value === undefined)
-        return null;
-    assertHostProviderName(value);
-    return value;
-}
-export function getHostModel(argv) {
-    return getFlag(argv, "--host-model") ?? null;
-}
-/**
- * Parse the current driver's dispatch-capability handshake, carried as ONE
- * `--auditor <json>` flag (G1 collapsed the former N `--host-*` scalar flags onto
- * `descriptor.self`; G2 folded the driver's provider identity + own host/IDE launch
- * blocks onto `self` and resliced the per-backend dispatch blocks to a top-level
- * `sources[]`). Malformed JSON or a non-object throws loudly so a mistyped handshake
- * fails here rather than silently downgrading. `null` when the flag is absent.
- *
- * `--auditor @<path>` reads the JSON from a file instead. Inline JSON through a
- * Windows `.cmd` shim is a known quoting trap (cmd's batch `%*` re-expansion
- * mangles embedded quotes — the same class the submit-packet flow solved with a
- * file), so a host on a hostile shell writes the handshake to a file and passes
- * the `@` form.
- * [[capability-is-per-auditor-not-per-audit]] [[unified-dispatch-worker-model]]
- */
-export function getAuditorDescriptor(argv) {
-    const flagValue = getFlag(argv, "--auditor");
-    if (!flagValue)
-        return null;
-    let raw = flagValue;
-    if (flagValue.startsWith("@")) {
-        const filePath = flagValue.slice(1);
-        try {
-            raw = readFileSync(filePath, "utf8");
-        }
-        catch (err) {
-            throw new Error(`--auditor @${filePath}: cannot read the handshake file: ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        throw new Error(`--auditor must be a JSON object: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new Error("--auditor must be a JSON object.");
-    }
-    const obj = parsed;
-    const rawSelf = obj.self && typeof obj.self === "object" && !Array.isArray(obj.self)
-        ? obj.self
-        : {};
-    // Validate each `self` field to exactly the strictness the retired `--host-*`
-    // parsers enforced, so the `--auditor` transport is a faithful collapse — not a
-    // validation downgrade. The roster is re-validated through the SAME shared
-    // `parseHostModelRoster` the `--host-models` flag used (loud throw on a malformed
-    // roster: a mistyped handshake fails at the CLI boundary, never silently deep in
-    // dispatch budget resolution). Scalars mirror `parsePositiveIntegerFlag`
-    // (silent-drop of a non-positive-int, leaving the value unknown or allowing a
-    // lower-priority authoritative source to resolve it);
-    // booleans/model_id mirror their old parsers (drop a non-boolean / blank id).
-    const self = {};
-    // `self.provider` is the driver's identity + quota-attribution key: a mistyped
-    // value would mis-charge dispatch fan-out to the wrong account, so it throws
-    // loudly here (same strictness as the retired `--host-provider` parser).
-    if (rawSelf.provider !== undefined) {
-        if (typeof rawSelf.provider !== "string") {
-            throw new Error("--auditor `self.provider` must be a string.");
-        }
-        assertHostProviderName(rawSelf.provider);
-        self.provider = rawSelf.provider;
-    }
-    if (typeof rawSelf.model_id === "string" && rawSelf.model_id.trim().length > 0) {
-        self.model_id = rawSelf.model_id.trim();
-    }
-    if (rawSelf.roster !== undefined) {
-        self.roster = parseHostModelRoster(JSON.stringify(rawSelf.roster));
-    }
-    const contextTokens = normalizePositiveInteger(rawSelf.context_tokens);
-    if (contextTokens !== undefined)
-        self.context_tokens = contextTokens;
-    const outputTokens = normalizePositiveInteger(rawSelf.output_tokens);
-    if (outputTokens !== undefined)
-        self.output_tokens = outputTokens;
-    const maxActiveSubagents = normalizePositiveInteger(rawSelf.max_active_subagents);
-    if (maxActiveSubagents !== undefined)
-        self.max_active_subagents = maxActiveSubagents;
-    const parallelWorkers = normalizePositiveInteger(rawSelf.parallel_workers);
-    if (parallelWorkers !== undefined)
-        self.parallel_workers = parallelWorkers;
-    if (typeof rawSelf.can_dispatch_subagents === "boolean") {
-        self.can_dispatch_subagents = rawSelf.can_dispatch_subagents;
-    }
-    if (typeof rawSelf.can_restrict_subagent_tools === "boolean") {
-        self.can_restrict_subagent_tools = rawSelf.can_restrict_subagent_tools;
-    }
-    if (typeof rawSelf.can_select_subagent_model === "boolean") {
-        self.can_select_subagent_model = rawSelf.can_select_subagent_model;
-    }
-    // The driver's OWN launch transport (only the host/IDE providers that are NOT
-    // generic dispatchable sources). Passed through structurally like the retired
-    // inventory blocks; deep-validated downstream by the session-config validator when
-    // resolved. A non-object is dropped rather than throwing (mirrors the old
-    // pass-through), since these are optional operator tuning, not identity keys.
-    for (const key of ["claude_code", "vscode_task", "antigravity"]) {
-        const block = rawSelf[key];
-        if (block && typeof block === "object" && !Array.isArray(block)) {
-            self[key] = block;
-        }
-    }
-    const rawSources = obj.sources;
-    if (rawSources !== undefined &&
-        rawSources !== null &&
-        !Array.isArray(rawSources)) {
-        throw new Error("--auditor `sources` must be a JSON array.");
-    }
-    const sources = Array.isArray(rawSources)
-        ? rawSources
-        : undefined;
-    // Validate the descriptor's DISPATCH content through the SAME shape/injection checks
-    // the disk-load boundary applies (`validateSessionConfig`): descriptor `sources` +
-    // launch blocks are host-supplied and must be mechanically validated, never trusted
-    // (auditor-agnostic robustness — the descriptor is now the channel that carries what
-    // the repo config used to). A malformed source `quota` (the C1 over-sizing guard) or a
-    // command-injection-shaped launch command fails HERE at the parse boundary, not deep in
-    // dispatch. `provider` is left unset for this check so a launch-block source does not
-    // trip the "required section" validation. Errors throw; warnings are not surfaced here
-    // (a descriptor cannot be persisted, so there is nothing durable to flag).
-    const descriptorDispatchErrors = validateSessionConfig({
-        ...(sources !== undefined ? { sources } : {}),
-        ...(self.claude_code ? { claude_code: self.claude_code } : {}),
-        ...(self.vscode_task ? { vscode_task: self.vscode_task } : {}),
-        ...(self.antigravity ? { antigravity: self.antigravity } : {}),
-    }).filter((issue) => issue.severity === "error");
-    if (descriptorDispatchErrors.length > 0) {
-        throw new Error(`--auditor descriptor is invalid:\n${formatValidationIssues(descriptorDispatchErrors).replace(/^ {2}/gm, "- ")}`);
-    }
-    return {
-        ...(typeof obj.auditor_id === "string" ? { auditor_id: obj.auditor_id } : {}),
-        ...(typeof obj.resolved_at === "number" ? { resolved_at: obj.resolved_at } : {}),
-        self,
-        ...(sources !== undefined ? { sources } : {}),
-    };
-}
-export function resolveRunProviderName(argv, sessionConfig) {
-    return resolveFreshSessionProviderName(getExplicitProvider(argv), sessionConfig);
-}
 export function looksLikeCliFlag(value) {
     return isLongFlagToken(value);
 }
 export async function countLines(path) {
-    return new Promise((resolve, reject) => {
+    return await new Promise((resolveCount, reject) => {
         let lines = 0;
         let byteCount = 0;
         let lastByte = -1;
@@ -308,33 +81,26 @@ export async function countLines(path) {
         stream.on("data", (chunk) => {
             const buffer = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
             byteCount += buffer.length;
-            for (let i = 0; i < buffer.length; ++i) {
-                if (buffer[i] === 10)
-                    lines++;
-                lastByte = buffer[i];
+            for (const byte of buffer) {
+                if (byte === 10)
+                    lines += 1;
+                lastByte = byte;
             }
         });
         stream.on("end", () => {
-            if (byteCount === 0)
-                return resolve(0);
-            resolve(lastByte !== 10 ? lines + 1 : lines);
+            resolveCount(byteCount === 0 ? 0 : lastByte === 10 ? lines : lines + 1);
         });
         stream.on("error", reject);
     });
 }
 export async function listBatchResultFiles(batchDir) {
     const entries = await readdir(batchDir, { withFileTypes: true });
-    // Admit ONLY canonical result filenames (<stem>_<digest>[.suffix].json). A
-    // bare `*.json` filter would ingest any stray JSON co-located in the dir — a
-    // session-config, a schema pointer, an editor scratch file — as if it were an
-    // audit result. The canonical-name gate is the same one merge-and-ingest uses
-    // to tell real result files apart from spurious ones.
     const files = entries
         .filter((entry) => entry.isFile() &&
         entry.name.toLowerCase().endsWith(".json") &&
         isCanonicalResultFilename(entry.name))
         .map((entry) => join(batchDir, entry.name))
-        .sort((a, b) => a.localeCompare(b));
+        .sort();
     if (files.length === 0) {
         throw new Error(`No canonical audit result files (<stem>_<digest>.json) found in ${batchDir}.`);
     }

package/dist/audit/cli/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/audit/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,6BAA6B,IAAI,mCAAmC,EACpE,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GAMvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,OAAO,EAAE,GAAG;IACZ,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;CACzC,CAAC;AAEF,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAc,EACd,IAAY,EACZ,QAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAc,EAAE,IAAY;IAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAI7C;IACC,kFAAkF;IAClF,oBAAoB;IACpB,OAAO,mCAAmC,CAAC;QACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,8BAA8B;QAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,mFAAmF;AACnF,gFAAgF;AAChF,0DAA0D;AAC1D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAExD,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,cAAsB,EAAE,MAAc;IACnE,OAAO,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,cAAsB,EAAE,QAAgB;IACvE,OAAO,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;QAChD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAc,EACd,IAAY;IAEZ,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,8EAA8E;IAC9E,0EAA0E;IAC1E,qEAAqE;IACrE,OAAO,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAW,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CACV,8BAA8B,IAAI,mFAAmF,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,aAA4B;IACvE,OAAO,CACL,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3C,wBAAwB,CAAC,aAAa,CAAC,UAAU,CAAC;QAClD,mBAAmB,CAAC,SAAS,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,OAAO,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,OAAO,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,IAAI,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,cAAc,QAAQ,qCACpB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,OAAO,GACX,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAClE,CAAC,CAAE,GAAG,CAAC,IAAgC;QACvC,CAAC,CAAC,EAAE,CAAC;IACT,8EAA8E;IAC9E,gFAAgF;IAChF,2EAA2E;IAC3E,kFAAkF;IAClF,iFAAiF;IACjF,yEAAyE;IACzE,8EAA8E;IAC9E,sDAAsD;IACtD,8EAA8E;IAC9E,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACrE,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IAClE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClF,IAAI,kBAAkB,KAAK,SAAS;QAAE,IAAI,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;IACrF,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3E,IAAI,eAAe,KAAK,SAAS;QAAE,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;IAC3E,IAAI,OAAO,OAAO,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACxD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;QAC7D,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;QAC3D,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IACrE,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,mFAAmF;IACnF,0EAA0E;IAC1E,8EAA8E;IAC9E,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAU,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,IAAgC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjD,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;IAC/B,IACE,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,IAAI;QACnB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAqC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACzE,CAAC,CAAE,UAAmC;QACtC,CAAC,CAAC,SAAS,CAAC;IACd,qFAAqF;IACrF,mFAAmF;IACnF,oFAAoF;IACpF,qFAAqF;IACrF,uFAAuF;IACvF,wFAAwF;IACxF,sFAAsF;IACtF,uFAAuF;IACvF,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;QACrD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACjD,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,qCAAqC,sBAAsB,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CACjH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI;QACJ,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAc,EACd,aAA4B;IAE5B,OAAO,+BAA+B,CACpC,mBAAmB,CAAC,IAAI,CAAC,EACzB,aAAa,CACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACtE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;gBACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE;oBAAE,KAAK,EAAE,CAAC;gBAC9B,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,EAAE;QACd,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC1C,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CACxC;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mEAAmE,QAAQ,GAAG,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/audit/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,OAAO,EAAE,GAAG;IACZ,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;CAC1B,CAAC;AAEF,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAc,EACd,IAAY,EACZ,QAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAc,EAAE,IAAY;IAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAyB;IAEzB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;AAExD,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AACrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAc,EACd,IAAY;IAEZ,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,OAAO,eAAe,CACpB,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAW,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CACV,8BAA8B,IAAI,mFAAmF,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,OAAO,CACL,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3C,mBAAmB,CAAC,SAAS,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE;QAChD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACtE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,EAAE;oBAAE,KAAK,IAAI,CAAC,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,YAAY,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO;SAClB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,EAAE;QACd,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC1C,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CACxC;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1C,IAAI,EAAE,CAAC;IAEV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mEAAmE,QAAQ,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/cli/auditStep.d.ts

@@ -1,7 +1,7 @@
-import { type SessionConfig, type WorkPartitionPolicy } from "audit-tools/shared";
 import type { AdvanceAuditResult } from "../orchestrator/advanceTypes.js";
 import type { ArtifactBundle } from "../io/artifacts.js";
 import type { EdgeReasoningResults } from "../orchestrator/edgeReasoning.js";
+import type { AuditResult } from "../types.js";
 import type { AnalyzerSetting } from "audit-tools/shared";
 import type { ExternalAnalyzerResults } from "audit-tools/shared";
 import type { ExternalAcquisitionAdvanceOptions } from "../orchestrator/acquisitionExecutor.js";
@@ -10,6 +10,13 @@ export interface RunAuditStepOptions {
     artifactsDir: string;
     preferredExecutor?: string;
     auditResultsPath?: string;
+    /**
+     * Already-validated host-handoff results. This is the in-process counterpart
+     * to `auditResultsPath`: the zero-adapter host boundary validates and binds
+     * each untrusted result before handing the normalized AuditResult objects to
+     * the ordinary result-ingestion executor.
+     */
+    auditResultsData?: AuditResult[];
     runtimeUpdatesPath?: string;
     /** Provide a file path OR an already-parsed object; path is only read when the object is absent. */
     externalAnalyzerPath?: string;
@@ -32,10 +39,6 @@ export interface RunAuditStepOptions {
     externalAcquisition?: ExternalAcquisitionAdvanceOptions;
     since?: string;
     runLog?: boolean;
-    /** Effective per-auditor dispatch inventory for semantic review. */
-    sessionConfig?: SessionConfig;
-    /** Current invocation's resolved partition capacity; transient and never persisted. */
-    workPartition?: Pick<WorkPartitionPolicy, "capacityTokens" | "availableParallelism">;
 }
 export declare function runAuditStep(options: RunAuditStepOptions): Promise<AdvanceAuditResult>;
 export declare function ingestBatchAuditResults(options: {

package/dist/audit/cli/auditStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/auditStep.ts"],"names":[],"mappings":"AAEA,OAAO,EAcL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAKzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAW7E,OAAO,KAAK,EAAE,eAAe,EAAkD,MAAM,oBAAoB,CAAC;AAE1G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAwBhG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,uBAAuB,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,mBAAmB,CAAC,EAAE,iCAAiC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,uFAAuF;IACvF,aAAa,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,GAAG,sBAAsB,CAAC,CAAC;CACtF;AA6DD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAwG7B;AAwKD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;;;;;;;;;;;;;;;;;;;;GAgDA"}
+{"version":3,"file":"auditStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/auditStep.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAU7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAkD,MAAM,oBAAoB,CAAC;AAE1G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAEhG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oGAAoG;IACpG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,uBAAuB,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,mBAAmB,CAAC,EAAE,iCAAiC,CAAC;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAoKD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;;;;;;;;;;;;;;;;;;;;GA6CA"}