audit-tools 0.40.1 → 0.41.1

package/dist/audit/cli/auditStep.d.ts

@@ -31,7 +31,7 @@ export interface RunAuditStepOptions {
     /**
      * Already-validated edge-reasoning rewrites. Parsed + shape-checked by the
      * caller (`handleGraphEnrichmentBranch` tolerant-unwraps or quarantines the
-     * incoming file) — never a raw file path, so no unvalidated cast here.
+     * submission) — never a raw file path, so no unvalidated cast here.
      */
     edgeReasoningResults?: EdgeReasoningResults;
     analyzers?: Record<string, AnalyzerSetting>;

package/dist/audit/cli/conceptualDispatch.d.ts

@@ -1,5 +1,6 @@
 import { type IntentCheckpoint } from "audit-tools/shared";
 import type { ArtifactBundle } from "../io/artifacts.js";
+import { type LaneSubmissionShortfall } from "./laneSubmissions.js";
 export interface ConceptualReviewSettings {
     max_units?: number;
     conceptual_depth: "shallow" | "deep";
@@ -54,6 +55,8 @@ export interface ConceptualDispatch {
     readPaths: string[];
     /** Result files the host's subagents write. */
     writePaths: string[];
+    /** What a previous emission of this pass's lanes is still owed. */
+    shortfall: LaneSubmissionShortfall;
 }
 /**
  * Write the conceptual-review prompt artifacts and return the host workload.

package/dist/audit/cli/conceptualDispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conceptualDispatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASzD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,SAAS,GAAG,MAAM,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,EAC1D,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,aAAa,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,EACjD,aAAa,EAAE,SAAS,GAAG,MAAM,GAChC,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,cAAc,GACrB,wBAAwB,CA+B1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,8CAA8C;IAC9C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkH9B"}
+{"version":3,"file":"conceptualDispatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAUzD,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,SAAS,GAAG,MAAM,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,EAC1D,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,aAAa,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,EACjD,aAAa,EAAE,SAAS,GAAG,MAAM,GAChC,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,cAAc,GACrB,wBAAwB,CA+B1B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,8CAA8C;IAC9C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mEAAmE;IACnE,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoK9B"}

package/dist/audit/cli/conceptualDispatch.js

@@ -1,7 +1,7 @@
-import { mkdir, writeFile } from "node:fs/promises";
-import { join } from "node:path";
 import { charterReviewDisposition, } from "audit-tools/shared";
 import { renderConceptualReviewPrompt, renderConceptualPerspectivePrompt, renderConceptualJudgePrompt, selectPerspectives, } from "../orchestrator/designReviewPrompt.js";
+import { materializeFanoutLanes } from "./fanoutLanes.js";
+import { AUDIT_GATE_SUBMISSION_SCOPE, GATE_LANES, conceptualPerspectiveLane, conceptualRoundToken, laneSubmissionPath, } from "./laneSubmissions.js";
 /**
  * Render the host-visible reuse notice when a prior `intent_checkpoint.design_review`
  * drives this workload. Content-sorted lens list keeps the text stable (no churn),
@@ -63,14 +63,26 @@ export async function prepareConceptualDispatch(opts) {
     const reReviewSuffix = opts.reReviewSection
         ? `\n\n${opts.reReviewSection}`
         : "";
-    const incoming = join(artifactsDir, "incoming");
-    await mkdir(incoming, { recursive: true });
-    const conceptualResultsPath = join(incoming, "design-review-conceptual-findings.json");
+    // The single conceptual submission the orchestrator ingests — written by the
+    // lone reviewer when shallow, by the independent judge when deep. Either way
+    // it is the `design_review_conceptual` LANE, so the gate reads one bound path
+    // and the state machine is unchanged by the depth choice.
+    const conceptualResultsPath = laneSubmissionPath(artifactsDir, GATE_LANES.design_review_conceptual);
     const reviewOptions = { max_units: settings.max_units };
     if (settings.conceptual_depth !== "deep") {
-        const conceptualPromptPath = join(incoming, "design-review-conceptual-prompt.md");
-        const conceptualPromptText = renderConceptualReviewPrompt(bundle, reviewOptions) + reReviewSuffix;
-        await writeFile(conceptualPromptPath, conceptualPromptText, "utf8");
+        const fanout = await materializeFanoutLanes({
+            artifactsDir,
+            runId: AUDIT_GATE_SUBMISSION_SCOPE,
+            lanes: [
+                {
+                    id: GATE_LANES.design_review_conceptual,
+                    label: "Conceptual review (generative)",
+                    promptFilename: "design-review-conceptual-prompt.md",
+                    promptText: renderConceptualReviewPrompt(bundle, reviewOptions) + reReviewSuffix,
+                },
+            ],
+        });
+        const conceptualPromptPath = fanout.lanes[0].promptPath;
         return {
             deep: false,
             conceptualResultsPath,
@@ -84,29 +96,74 @@ export async function prepareConceptualDispatch(opts) {
             },
             readPaths: [conceptualPromptPath],
             writePaths: [conceptualResultsPath],
+            shortfall: fanout.shortfall,
         };
     }
     // Deep: real fan-out — N perspective subagents + an independent judge.
+    // Every one of them is a LANE through the same materializer the rest of the
+    // audit uses; this pass used to mint its own filenames, which is precisely how
+    // a second naming convention (and a second way for a host to mistype one)
+    // came to exist.
     const perspectives = selectPerspectives(settings.perspectives);
     const total = perspectives.length;
-    const perspectiveFiles = [];
-    for (let i = 0; i < total; i++) {
-        const p = perspectives[i];
-        const promptPath = join(incoming, `design-review-conceptual-p${i + 1}-prompt.md`);
-        const resultsPath = join(incoming, `design-review-conceptual-p${i + 1}-findings.json`);
-        const promptText = renderConceptualPerspectivePrompt(bundle, p, i, total, reviewOptions);
-        await writeFile(promptPath, promptText, "utf8");
-        perspectiveFiles.push({ name: p.name, promptPath, resultsPath });
-    }
-    const judgePromptPath = join(incoming, "design-review-conceptual-judge-prompt.md");
+    const perspectiveTexts = perspectives.map((p, i) => renderConceptualPerspectivePrompt(bundle, p, i, total, reviewOptions));
+    // The round the perspectives are being asked about: the prompts themselves
+    // (the whole upstream projection each perspective reads) plus the judge's
+    // re-review section, which is present exactly when this is a re-review after
+    // staleness. A fresh round therefore mints fresh lane ids and fresh prompts;
+    // an unchanged one re-declares the identical bound paths.
+    const roundToken = conceptualRoundToken([
+        ...perspectiveTexts,
+        opts.reReviewSection ?? "",
+    ]);
+    const perspectiveFiles = perspectives.map((p, i) => {
+        const lane = conceptualPerspectiveLane(i + 1, roundToken);
+        return {
+            name: p.name,
+            lane,
+            promptFilename: `design-review-conceptual-p${i + 1}-prompt.md`,
+            promptText: perspectiveTexts[i],
+            resultsPath: laneSubmissionPath(artifactsDir, lane, AUDIT_GATE_SUBMISSION_SCOPE),
+        };
+    });
     const judgePromptText = renderConceptualJudgePrompt(perspectiveFiles.map((f) => ({ name: f.name, path: f.resultsPath }))) + reReviewSuffix;
-    await writeFile(judgePromptPath, judgePromptText, "utf8");
-    const perspectiveLines = perspectiveFiles.map((f, i) => `   - Perspective ${i + 1} (${f.name}): prompt \`${f.promptPath}\` → findings \`${f.resultsPath}\``);
+    const laneSpecs = [
+        ...perspectiveFiles.map((f) => ({
+            id: f.lane,
+            label: `Conceptual perspective — ${f.name}`,
+            promptFilename: f.promptFilename,
+            promptText: f.promptText,
+            // A perspective's findings are read by the JUDGE, never by this tool —
+            // so the tool is owed nothing here and must not record an expectation it
+            // will never satisfy. The bound path is still minted and declared below.
+            expected: false,
+        })),
+        {
+            // The judge PRODUCES the conceptual submission, so it is that lane — a
+            // separate judge lane id would mint a bound path nothing reads.
+            id: GATE_LANES.design_review_conceptual,
+            label: "Conceptual review judge (independent merge)",
+            promptFilename: "design-review-conceptual-judge-prompt.md",
+            promptText: judgePromptText,
+        },
+    ];
+    const fanout = await materializeFanoutLanes({
+        artifactsDir,
+        runId: AUDIT_GATE_SUBMISSION_SCOPE,
+        lanes: laneSpecs,
+    });
+    const promptPathFor = (laneId) => fanout.lanes.find((lane) => lane.id === laneId).promptPath;
+    const judgePromptPath = promptPathFor(GATE_LANES.design_review_conceptual);
+    const perspectivePrompts = perspectiveFiles.map((f) => ({
+        ...f,
+        promptPath: promptPathFor(f.lane),
+    }));
+    const perspectiveLines = perspectivePrompts.map((f, i) => `   - Perspective ${i + 1} (${f.name}): prompt \`${f.promptPath}\` → findings \`${f.resultsPath}\``);
     const artifactPaths = {
         conceptual_results: conceptualResultsPath,
         conceptual_judge_prompt: judgePromptPath,
     };
-    perspectiveFiles.forEach((f, i) => {
+    perspectivePrompts.forEach((f, i) => {
         artifactPaths[`conceptual_perspective_${i + 1}_prompt`] = f.promptPath;
         artifactPaths[`conceptual_perspective_${i + 1}_results`] = f.resultsPath;
     });
@@ -125,14 +182,15 @@ export async function prepareConceptualDispatch(opts) {
         // Perspective result files must be in readPaths: the judge subagent reads
         // them to merge and synthesise the final output (COR-60ca1f72).
         readPaths: [
-            ...perspectiveFiles.map((f) => f.promptPath),
-            ...perspectiveFiles.map((f) => f.resultsPath),
+            ...perspectivePrompts.map((f) => f.promptPath),
+            ...perspectivePrompts.map((f) => f.resultsPath),
             judgePromptPath,
         ],
         writePaths: [
-            ...perspectiveFiles.map((f) => f.resultsPath),
+            ...perspectivePrompts.map((f) => f.resultsPath),
             conceptualResultsPath,
         ],
+        shortfall: fanout.shortfall,
     };
 }
 //# sourceMappingURL=conceptualDispatch.js.map

package/dist/audit/cli/conceptualDispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"conceptualDispatch.js","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,4BAA4B,EAC5B,iCAAiC,EACjC,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uCAAuC,CAAC;AA2B/C;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA0D,EAC1D,WAA+B,EAC/B,aAAiD,EACjD,aAAiC;IAEjC,MAAM,IAAI,GAAG,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACzE,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,IAAI,aAAa,CAAC;IAC3D,OAAO,wBAAwB,IAAI,KAAK,MAAM,sBAAsB,KAAK,IAAI,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC3D,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,4CAA4C;IAC5C,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CACnE,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,QAAQ,CAAC,IAAI,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,gBAAgB,CACpE,CACJ,CAAC;IACF,MAAM,eAAe,GACnB,UAAU,EAAE,gBAAgB,IAAI,SAAS,CAAC;IAC5C,+EAA+E;IAC/E,yEAAyE;IACzE,kFAAkF;IAClF,MAAM,WAAW,GAAG,UAAU;QAC5B,CAAC,CAAC,iBAAiB,CACf,UAAU,EACV,MAAM,CAAC,iBAAiB,EAAE,YAAY,EACtC,MAAM,CAAC,iBAAiB,EAAE,cAAc,EACxC,eAAe,CAChB;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,gBAAgB,EAAE,eAAe;QACjC,YAAY,EAAE,UAAU,EAAE,YAAY;QACtC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAmBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAa/C;IACC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe;QACzC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE;QAC/B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,qBAAqB,GAAG,IAAI,CAChC,QAAQ,EACR,wCAAwC,CACzC,CAAC;IACF,MAAM,aAAa,GAAwB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAE7E,IAAI,QAAQ,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,oBAAoB,GAAG,IAAI,CAC/B,QAAQ,EACR,oCAAoC,CACrC,CAAC;QACF,MAAM,oBAAoB,GACxB,4BAA4B,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,cAAc,CAAC;QACvE,MAAM,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,KAAK;YACX,qBAAqB;YACrB,gBAAgB,EAAE;gBAChB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,iKAAiK;aAClK;YACD,aAAa,EAAE;gBACb,iBAAiB,EAAE,oBAAoB;gBACvC,kBAAkB,EAAE,qBAAqB;aAC1C;YACD,SAAS,EAAE,CAAC,oBAAoB,CAAC;YACjC,UAAU,EAAE,CAAC,qBAAqB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC;IAClC,MAAM,gBAAgB,GAIjB,EAAE,CAAC;IACR,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,CACrB,QAAQ,EACR,6BAA6B,CAAC,GAAG,CAAC,YAAY,CAC/C,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CACtB,QAAQ,EACR,6BAA6B,CAAC,GAAG,CAAC,gBAAgB,CACnD,CAAC;QACF,MAAM,UAAU,GAAG,iCAAiC,CAClD,MAAM,EACN,CAAC,EACD,CAAC,EACD,KAAK,EACL,aAAa,CACd,CAAC;QACF,MAAM,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAC1B,QAAQ,EACR,0CAA0C,CAC3C,CAAC;IACF,MAAM,eAAe,GACnB,2BAA2B,CACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACrE,GAAG,cAAc,CAAC;IACrB,MAAM,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAC3C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,UAAU,mBAAmB,CAAC,CAAC,WAAW,IAAI,CACtG,CAAC;IAEF,MAAM,aAAa,GAA2B;QAC5C,kBAAkB,EAAE,qBAAqB;QACzC,uBAAuB,EAAE,eAAe;KACzC,CAAC;IACF,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACvE,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,IAAI;QACV,qBAAqB;QACrB,gBAAgB,EAAE;YAChB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,6CAA6C,KAAK,wBAAwB;YAC1E,oBAAoB,KAAK,4NAA4N;YACrP,GAAG,gBAAgB;YACnB,eAAe,KAAK,uVAAuV,eAAe,sCAAsC,qBAAqB,KAAK;YAC1b,gUAAgU;SACjU;QACD,aAAa;QACb,0EAA0E;QAC1E,gEAAgE;QAChE,SAAS,EAAE;YACT,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5C,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC7C,eAAe;SAChB;QACD,UAAU,EAAE;YACV,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC7C,qBAAqB;SACtB;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"conceptualDispatch.js","sourceRoot":"","sources":["../../../src/audit/cli/conceptualDispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,4BAA4B,EAC5B,iCAAiC,EACjC,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AA2B9B;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA0D,EAC1D,WAA+B,EAC/B,aAAiD,EACjD,aAAiC;IAEjC,MAAM,IAAI,GAAG,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACzE,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,IAAI,aAAa,CAAC;IAC3D,OAAO,wBAAwB,IAAI,KAAK,MAAM,sBAAsB,KAAK,IAAI,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC3D,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,4CAA4C;IAC5C,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CACnE,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,QAAQ,CAAC,IAAI,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,KAAK,gBAAgB,CACpE,CACJ,CAAC;IACF,MAAM,eAAe,GACnB,UAAU,EAAE,gBAAgB,IAAI,SAAS,CAAC;IAC5C,+EAA+E;IAC/E,yEAAyE;IACzE,kFAAkF;IAClF,MAAM,WAAW,GAAG,UAAU;QAC5B,CAAC,CAAC,iBAAiB,CACf,UAAU,EACV,MAAM,CAAC,iBAAiB,EAAE,YAAY,EACtC,MAAM,CAAC,iBAAiB,EAAE,cAAc,EACxC,eAAe,CAChB;QACH,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,gBAAgB,EAAE,eAAe;QACjC,YAAY,EAAE,UAAU,EAAE,YAAY;QACtC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAa/C;IACC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe;QACzC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE;QAC/B,CAAC,CAAC,EAAE,CAAC;IACP,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,0DAA0D;IAC1D,MAAM,qBAAqB,GAAG,kBAAkB,CAC9C,YAAY,EACZ,UAAU,CAAC,wBAAwB,CACpC,CAAC;IACF,MAAM,aAAa,GAAwB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAE7E,IAAI,QAAQ,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;YAC1C,YAAY;YACZ,KAAK,EAAE,2BAA2B;YAClC,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,UAAU,CAAC,wBAAwB;oBACvC,KAAK,EAAE,gCAAgC;oBACvC,cAAc,EAAE,oCAAoC;oBACpD,UAAU,EACR,4BAA4B,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,cAAc;iBACvE;aACF;SACF,CAAC,CAAC;QACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,qBAAqB;YACrB,gBAAgB,EAAE;gBAChB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,iKAAiK;aAClK;YACD,aAAa,EAAE;gBACb,iBAAiB,EAAE,oBAAoB;gBACvC,kBAAkB,EAAE,qBAAqB;aAC1C;YACD,SAAS,EAAE,CAAC,oBAAoB,CAAC;YACjC,UAAU,EAAE,CAAC,qBAAqB,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,iBAAiB;IACjB,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC;IAClC,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjD,iCAAiC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CACtE,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACtC,GAAG,gBAAgB;QACnB,IAAI,CAAC,eAAe,IAAI,EAAE;KAC3B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAMjB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,yBAAyB,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI;YACJ,cAAc,EAAE,6BAA6B,CAAC,GAAG,CAAC,YAAY;YAC9D,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAE;YAChC,WAAW,EAAE,kBAAkB,CAC7B,YAAY,EACZ,IAAI,EACJ,2BAA2B,CAC5B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GACnB,2BAA2B,CACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACrE,GAAG,cAAc,CAAC;IAErB,MAAM,SAAS,GAAqB;QAClC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,EAAE,EAAE,CAAC,CAAC,IAAI;YACV,KAAK,EAAE,4BAA4B,CAAC,CAAC,IAAI,EAAE;YAC3C,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH;YACE,uEAAuE;YACvE,gEAAgE;YAChE,EAAE,EAAE,UAAU,CAAC,wBAAwB;YACvC,KAAK,EAAE,6CAA6C;YACpD,cAAc,EAAE,0CAA0C;YAC1D,UAAU,EAAE,eAAe;SAC5B;KACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,YAAY;QACZ,KAAK,EAAE,2BAA2B;QAClC,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE,CAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAE,CAAC,UAAU,CAAC;IAC9D,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC3E,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC;QACJ,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC,CAAC;IAEJ,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,CAC7C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,UAAU,mBAAmB,CAAC,CAAC,WAAW,IAAI,CACtG,CAAC;IAEF,MAAM,aAAa,GAA2B;QAC5C,kBAAkB,EAAE,qBAAqB;QACzC,uBAAuB,EAAE,eAAe;KACzC,CAAC;IACF,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;QACvE,aAAa,CAAC,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,IAAI;QACV,qBAAqB;QACrB,gBAAgB,EAAE;YAChB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,6CAA6C,KAAK,wBAAwB;YAC1E,oBAAoB,KAAK,4NAA4N;YACrP,GAAG,gBAAgB;YACnB,eAAe,KAAK,uVAAuV,eAAe,sCAAsC,qBAAqB,KAAK;YAC1b,gUAAgU;SACjU;QACD,aAAa;QACb,0EAA0E;QAC1E,gEAAgE;QAChE,SAAS,EAAE;YACT,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YAC9C,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,eAAe;SAChB;QACD,UAAU,EAAE;YACV,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,qBAAqB;SACtB;QACD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/audit/cli/dispatch/hostHandoff.d.ts

@@ -1,3 +1,4 @@
+import { type SubmissionIssue } from "audit-tools/shared";
 import { type AuditResult } from "../../types.js";
 declare const WORKLOAD_CONTRACT_VERSION: "audit-host-workload/v1alpha1";
 declare const RESULT_MAP_CONTRACT_VERSION: "audit-host-result-map/v1alpha1";
@@ -58,6 +59,17 @@ export interface AuditHostIngestSummary {
     readonly accepted_results: readonly AuditResult[];
     readonly accepted_results_path: string;
     readonly completed_work_item_ids: readonly string[];
+    /**
+     * Every submission this ingest could not accept, classified.
+     *
+     * The four ways a submission used to fail — absent file, unparseable bytes, a
+     * body that violates the result contract, and a conversion that yields
+     * nothing — all collapsed into the same bare `null` and the same silent
+     * `continue`. A host that never wrote its result and a host that wrote
+     * garbage were indistinguishable to every caller, which is exactly the
+     * measured drift P25 exists to make visible.
+     */
+    readonly issues: readonly SubmissionIssue[];
 }
 export declare function prepareAuditHostHandoff(params: {
     readonly root: string;

package/dist/audit/cli/dispatch/hostHandoff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostHandoff.d.ts","sourceRoot":"","sources":["../../../../src/audit/cli/dispatch/hostHandoff.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAErE,QAAA,MAAM,yBAAyB,EAAG,8BAAuC,CAAC;AAC1E,QAAA,MAAM,2BAA2B,EAAG,gCAAyC,CAAC;AAO9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,yBAAyB,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,2BAA2B,CAAC;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrD;AAoXD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;CAC1C,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAmFpC;AAoRD,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsFlC"}
+{"version":3,"file":"hostHandoff.d.ts","sourceRoot":"","sources":["../../../../src/audit/cli/dispatch/hostHandoff.ts"],"names":[],"mappings":"AAGA,OAAO,EAaL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAErE,QAAA,MAAM,yBAAyB,EAAG,8BAAuC,CAAC;AAC1E,QAAA,MAAM,2BAA2B,EAAG,gCAAyC,CAAC;AAO9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,yBAAyB,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,2BAA2B,CAAC;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,WAAW,EAAE,CAAC;IAClD,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C;AAuVD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;CAC1C,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAmFpC;AAyZD,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkHlC"}

package/dist/audit/cli/dispatch/hostHandoff.js

@@ -1,7 +1,6 @@
-import { createHash } from "node:crypto";
 import { mkdir } from "node:fs/promises";
-import { isAbsolute, join, relative, resolve } from "node:path";
-import { FindingSchema, isFileMissingError, isJsonParseError, readJsonFile, stableStringify, writeJsonFile, } from "audit-tools/shared";
+import { join, resolve } from "node:path";
+import { FindingSchema, findingContractPromptLines, assertSubmissionRunId, hashContent, isFileMissingError, readJsonFile, readSubmissionDocument, repoRelativePath, resolveContainedPath, stableStringify, submissionPathFor, writeJsonFile, } from "audit-tools/shared";
 import { AuditResultSchema } from "../../types.js";
 const WORKLOAD_CONTRACT_VERSION = "audit-host-workload/v1alpha1";
 const RESULT_MAP_CONTRACT_VERSION = "audit-host-result-map/v1alpha1";
@@ -11,9 +10,6 @@ const ACCEPTED_RESULTS_CONTRACT_VERSION = "audit-host-accepted-results/v1alpha1"
 function compareCodeUnits(left, right) {
     return left < right ? -1 : left > right ? 1 : 0;
 }
-function sha256(value) {
-    return createHash("sha256").update(value, "utf8").digest("hex");
-}
 function isRecord(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -25,38 +21,11 @@ function hasExactKeys(value, expected) {
 function isSha256(value) {
     return typeof value === "string" && /^[0-9a-f]{64}$/u.test(value);
 }
-function assertRunId(runId) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(runId) ||
-        runId === "." ||
-        runId === "..") {
-        throw new Error(`Invalid audit host run id: ${JSON.stringify(runId)}`);
-    }
-}
-function resolveContained(base, candidate, label) {
-    const absoluteBase = resolve(base);
-    const absoluteCandidate = isAbsolute(candidate)
-        ? resolve(candidate)
-        : resolve(absoluteBase, candidate);
-    const rel = relative(absoluteBase, absoluteCandidate);
-    const firstSegment = rel.split(/[\\/]/u)[0];
-    if (isAbsolute(rel) || firstSegment === "..") {
-        throw new Error(`${label} must remain beneath ${absoluteBase}`);
-    }
-    return absoluteCandidate;
-}
-function repoRelative(root, absolutePath, label) {
-    const contained = resolveContained(root, absolutePath, label);
-    const rel = relative(resolve(root), contained).replaceAll("\\", "/");
-    if (rel.length === 0) {
-        throw new Error(`${label} must identify a path beneath the repository root`);
-    }
-    return rel;
-}
 function resolveBoundaryPaths(params) {
-    assertRunId(params.runId);
+    assertSubmissionRunId(params.runId, "audit host run id");
     const root = resolve(params.root);
-    const artifactsDir = resolveContained(root, params.artifactsDir, "artifactsDir");
-    const runDir = resolveContained(artifactsDir, join("runs", params.runId), "audit host run directory");
+    const artifactsDir = resolveContainedPath(root, params.artifactsDir, "artifactsDir");
+    const runDir = resolveContainedPath(artifactsDir, join("runs", params.runId), "audit host run directory");
     return {
         root,
         artifactsDir,
@@ -69,9 +38,14 @@ function resolveBoundaryPaths(params) {
         acceptedResultsPath: join(runDir, "host-accepted-results.json"),
     };
 }
+/**
+ * The bound path for one work item's submission — the SHARED rule, not a local
+ * copy of it. The audit and remediate handoffs both derived
+ * `<resultDir>/<sha256(id)>.json` in their own private helpers; a divergence
+ * between the two would have been silent on both sides.
+ */
 function resultPathFor(paths, workItemId) {
-    const absolute = join(paths.resultDir, `${sha256(workItemId)}.json`);
-    return repoRelative(paths.root, absolute, `result path for ${workItemId}`);
+    return submissionPathFor({ root: paths.root, submissionDir: paths.resultDir }, workItemId);
 }
 function requireNonEmptyString(value, label) {
     if (typeof value !== "string" || value.length === 0) {
@@ -102,13 +76,13 @@ function normalizeTask(task, root) {
     const files = [
         ...new Set(task.file_paths.map((path) => {
             const raw = requireNonEmptyString(path, `${taskId}.file_paths[]`);
-            const absolute = resolveContained(root, raw, `${taskId} file path`);
-            return repoRelative(root, absolute, `${taskId} file path`);
+            const absolute = resolveContainedPath(root, raw, `${taskId} file path`);
+            return repoRelativePath(root, absolute, `${taskId} file path`);
         })),
     ].sort(compareCodeUnits);
     const normalizedLineCounts = {};
     for (const [path, count] of Object.entries(task.file_line_counts)) {
-        const normalizedPath = repoRelative(root, resolveContained(root, path, `${taskId} line-count path`), `${taskId} line-count path`);
+        const normalizedPath = repoRelativePath(root, resolveContainedPath(root, path, `${taskId} line-count path`), `${taskId} line-count path`);
         if (!Number.isInteger(count) || count < 0) {
             throw new Error(`${taskId} has an invalid line count for ${path}`);
         }
@@ -153,7 +127,10 @@ function buildPrompt(task, resultPath) {
         "Review every listed file and return one JSON object at the bound result path.",
         `Assignment: ${assignment}`,
         "Result contract: audit-host-result/v1alpha1 with exactly result_id, run_id, work_item_id, prompt_sha256, file_coverage, and findings in addition to contract_version.",
-        "Each file_coverage entry must contain exactly path, reviewed_lines, and total_lines; findings must satisfy the audit finding contract.",
+        "Each file_coverage entry must contain exactly path, reviewed_lines, and total_lines.",
+        // The finding contract is CARRIED, not referenced: it is rendered from the
+        // very schema ingestion enforces, so a host never has to remember or fetch it.
+        ...findingContractPromptLines(),
     ].join("\n");
 }
 function buildWorkItem(paths, task) {
@@ -168,7 +145,7 @@ function buildWorkItem(paths, task) {
             token_estimate: task.token_estimate,
         },
         prompt: {
-            sha256: sha256(promptText),
+            sha256: hashContent(promptText),
             text: promptText,
         },
         scope: {
@@ -197,7 +174,7 @@ function validateAcceptedEntry(value) {
         typeof value.result_id === "string" &&
         isSha256(value.result_sha256) &&
         isRecord(value.result) &&
-        value.result_sha256 === sha256(stableStringify(value.result)) &&
+        value.result_sha256 === hashContent(stableStringify(value.result)) &&
         value.result.work_item_id === value.work_item_id &&
         value.result.prompt_sha256 === value.prompt_sha256 &&
         value.result.result_id === value.result_id &&
@@ -332,7 +309,7 @@ function parseWorkItem(value) {
         !hasExactKeys(value.prompt, ["sha256", "text"]) ||
         !isSha256(value.prompt.sha256) ||
         typeof value.prompt.text !== "string" ||
-        sha256(value.prompt.text) !== value.prompt.sha256 ||
+        hashContent(value.prompt.text) !== value.prompt.sha256 ||
         !isRecord(value.scope) ||
         !hasExactKeys(value.scope, ["files", "unit_ids"]) ||
         !Array.isArray(value.scope.files) ||
@@ -455,6 +432,27 @@ function validateHandoffBinding(paths, workload, resultMap, taskBindings) {
     }
     return items;
 }
+function refuse(detail) {
+    return { ok: false, detail };
+}
+/** `findings[2].affected_files.0.path` — a zod issue path, host-readable. */
+function issueLocation(prefix, path) {
+    return [prefix, ...path.map((segment) => String(segment))].join(".");
+}
+function parseFindings(findings) {
+    for (const [index, finding] of findings.entries()) {
+        const parsed = FindingSchema.safeParse(finding);
+        if (parsed.success)
+            continue;
+        const issue = parsed.error.issues[0];
+        const location = issue === undefined
+            ? `findings[${index}]`
+            : issueLocation(`findings[${index}]`, issue.path);
+        const reason = issue === undefined ? "invalid" : issue.message;
+        return refuse(`findings failed the audit finding contract at ${location}: ${reason}`);
+    }
+    return null;
+}
 function parseHostResult(value, runId, item, binding) {
     if (!isRecord(value) ||
         !hasExactKeys(value, [
@@ -468,35 +466,63 @@ function parseHostResult(value, runId, item, binding) {
         ]) ||
         value.contract_version !== RESULT_CONTRACT_VERSION ||
         typeof value.result_id !== "string" ||
-        value.result_id.length === 0 ||
-        value.run_id !== runId ||
-        value.work_item_id !== item.id ||
-        value.prompt_sha256 !== item.prompt.sha256 ||
-        !Array.isArray(value.file_coverage) ||
-        !Array.isArray(value.findings) ||
-        !value.findings.every((finding) => FindingSchema.safeParse(finding).success)) {
-        return null;
+        value.result_id.length === 0) {
+        return refuse(`result envelope is not ${RESULT_CONTRACT_VERSION} with exactly contract_version, ` +
+            `result_id, run_id, work_item_id, prompt_sha256, file_coverage and findings`);
+    }
+    if (value.run_id !== runId) {
+        return refuse(`identity binding: run_id is not this run's '${runId}'`);
+    }
+    if (value.work_item_id !== item.id) {
+        return refuse(`identity binding: work_item_id is not '${item.id}'`);
     }
+    if (value.prompt_sha256 !== item.prompt.sha256) {
+        return refuse("prompt binding: prompt_sha256 is not the sha256 of this work item's prompt");
+    }
+    if (!Array.isArray(value.file_coverage)) {
+        return refuse("file coverage: file_coverage must be an array");
+    }
+    if (!Array.isArray(value.findings)) {
+        return refuse("findings failed the audit finding contract: findings must be an array");
+    }
+    const findingRefusal = parseFindings(value.findings);
+    if (findingRefusal !== null)
+        return findingRefusal;
     const coveragePaths = new Set();
     for (const coverage of value.file_coverage) {
         if (!isRecord(coverage) ||
             !hasExactKeys(coverage, ["path", "reviewed_lines", "total_lines"]) ||
-            typeof coverage.path !== "string" ||
-            coveragePaths.has(coverage.path) ||
-            !Number.isInteger(coverage.reviewed_lines) ||
+            typeof coverage.path !== "string") {
+            return refuse("file coverage: every entry must contain exactly path, reviewed_lines and total_lines");
+        }
+        if (coveragePaths.has(coverage.path)) {
+            return refuse(`file coverage: '${coverage.path}' is covered twice`);
+        }
+        if (!Number.isInteger(coverage.reviewed_lines) ||
             !Number.isInteger(coverage.total_lines) ||
             coverage.reviewed_lines < 0 ||
-            coverage.reviewed_lines !== coverage.total_lines ||
-            coverage.total_lines !== binding.file_line_counts[coverage.path]) {
-            return null;
+            coverage.reviewed_lines !== coverage.total_lines) {
+            return refuse(`file coverage: '${coverage.path}' must report reviewed_lines equal to total_lines`);
+        }
+        const boundLines = binding.file_line_counts[coverage.path];
+        if (coverage.total_lines !== boundLines) {
+            return refuse(boundLines === undefined
+                ? `file coverage: '${coverage.path}' is not one of this work item's bound files`
+                : `file coverage: '${coverage.path}' reports ${String(coverage.total_lines)} ` +
+                    `total_lines, not the bound ${String(boundLines)}`);
         }
         coveragePaths.add(coverage.path);
     }
-    if (coveragePaths.size !== item.scope.files.length ||
-        item.scope.files.some((path) => !coveragePaths.has(path))) {
-        return null;
+    const uncovered = item.scope.files.filter((path) => !coveragePaths.has(path));
+    if (uncovered.length > 0 || coveragePaths.size !== item.scope.files.length) {
+        return refuse(uncovered.length > 0
+            ? `file coverage: the assigned scope is not fully covered (missing ${uncovered.join(", ")})`
+            : "file coverage: entries do not match the assigned scope exactly");
     }
-    return JSON.parse(stableStringify(value));
+    return {
+        ok: true,
+        result: JSON.parse(stableStringify(value)),
+    };
 }
 function toAuditResult(result, binding) {
     const parsed = AuditResultSchema.safeParse({
@@ -514,17 +540,59 @@ function toAuditResult(result, binding) {
         reviewed_clean: result.findings.length === 0,
         run_id: result.run_id,
     });
-    return parsed.success ? parsed.data : null;
+    if (parsed.success)
+        return { ok: true, auditResult: parsed.data };
+    const issue = parsed.error.issues[0];
+    return {
+        ok: false,
+        detail: issue === undefined
+            ? "the converted AuditResult is invalid"
+            : `${issueLocation("audit_result", issue.path)}: ${issue.message}`,
+    };
 }
-async function readSubmittedResult(absolutePath, runId, item, binding) {
-    try {
-        return parseHostResult(await readJsonFile(absolutePath), runId, item, binding);
+/**
+ * Read one bound submission and CLASSIFY the outcome. Every failure names
+ * itself and the bound path it looked at; nothing collapses to `null`.
+ */
+async function readSubmittedResult(absolutePath, boundPath, runId, item, binding) {
+    const locators = { work_item_id: item.id, result_path: boundPath };
+    const read = await readSubmissionDocument(absolutePath);
+    if (read.kind === "missing") {
+        return {
+            ok: false,
+            issue: {
+                code: "submission_missing",
+                message: `work item '${item.id}' submitted nothing at its bound path`,
+                ...locators,
+            },
+        };
     }
-    catch (error) {
-        if (isFileMissingError(error) || isJsonParseError(error))
-            return null;
-        throw error;
+    if (read.kind === "malformed") {
+        return {
+            ok: false,
+            issue: {
+                code: "submission_malformed",
+                message: `work item '${item.id}' submitted bytes that are not JSON: ${read.detail}`,
+                ...locators,
+            },
+        };
+    }
+    const parsed = parseHostResult(read.value, runId, item, binding);
+    if (!parsed.ok) {
+        return {
+            ok: false,
+            issue: {
+                code: "submission_contract_invalid",
+                // The detail NAMES its own category. The message must never enumerate
+                // categories the submission satisfied — that is how four correct-identity
+                // results read as an identity problem for a whole lap.
+                message: `work item '${item.id}' submitted JSON that does not satisfy the audit host ` +
+                    `result contract: ${parsed.detail}`,
+                ...locators,
+            },
+        };
     }
+    return { ok: true, result: parsed.result };
 }
 export async function ingestAuditHostResults(params) {
     const paths = resolveBoundaryPaths(params);
@@ -536,6 +604,7 @@ export async function ingestAuditHostResults(params) {
     const acceptedBindings = new Set(accepted.entries.map(bindingIdentity));
     const resultIds = new Set(accepted.entries.map((entry) => entry.result_id));
     const additions = [];
+    const issues = [];
     for (const entry of resultMap.entries) {
         if (acceptedBindings.has(bindingIdentity(entry)))
             continue;
@@ -543,22 +612,43 @@ export async function ingestAuditHostResults(params) {
         const binding = taskBindings.get(entry.work_item_id);
         if (item === undefined || binding === undefined)
             continue;
-        const absoluteResultPath = resolveContained(paths.root, entry.result_path, `result path for ${entry.work_item_id}`);
-        const result = await readSubmittedResult(absoluteResultPath, params.runId, item, binding);
-        if (result === null || resultIds.has(result.result_id))
+        const absoluteResultPath = resolveContainedPath(paths.root, entry.result_path, `result path for ${entry.work_item_id}`);
+        const outcome = await readSubmittedResult(absoluteResultPath, entry.result_path, params.runId, item, binding);
+        if (!outcome.ok) {
+            issues.push(outcome.issue);
             continue;
-        const auditResult = toAuditResult(result, binding);
-        if (auditResult === null)
+        }
+        const result = outcome.result;
+        if (resultIds.has(result.result_id)) {
+            issues.push({
+                code: "duplicate_submission_id",
+                message: `work item '${entry.work_item_id}' submitted result id '${result.result_id}', ` +
+                    `which this run has already accepted`,
+                work_item_id: entry.work_item_id,
+                result_path: entry.result_path,
+            });
+            continue;
+        }
+        const converted = toAuditResult(result, binding);
+        if (!converted.ok) {
+            issues.push({
+                code: "submission_contract_invalid",
+                message: `work item '${entry.work_item_id}' submitted a result that does not convert to ` +
+                    `an AuditResult: ${converted.detail}`,
+                work_item_id: entry.work_item_id,
+                result_path: entry.result_path,
+            });
             continue;
+        }
         resultIds.add(result.result_id);
         additions.push({
             work_item_id: entry.work_item_id,
             prompt_sha256: entry.prompt_sha256,
             result_path: entry.result_path,
             result_id: result.result_id,
-            result_sha256: sha256(stableStringify(result)),
+            result_sha256: hashContent(stableStringify(result)),
             result,
-            audit_result: auditResult,
+            audit_result: converted.auditResult,
         });
     }
     let ledger = accepted;
@@ -583,6 +673,7 @@ export async function ingestAuditHostResults(params) {
         completed_work_item_ids: [
             ...new Set(ledger.entries.map((entry) => entry.work_item_id)),
         ].sort(compareCodeUnits),
+        issues,
     };
 }
 //# sourceMappingURL=hostHandoff.js.map