audit-tools 0.41.0 → 0.42.0

package/dist/remediate/steps/dispatch/verifyCommands.js

@@ -1,331 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { gitEditedFilesForBranch } from "./common.js";
-// ---------------------------------------------------------------------------
-// Build-free per-node verification commands (residual CE-001)
-// ---------------------------------------------------------------------------
-/**
- * The host manages the build centrally; a per-node verify command that runs
- * `npm run build` (or a `npm test` whose package script prepends a build) races
- * the central build's dist/ and is therefore forbidden. A command is build-free
- * only when it neither builds nor invokes a build-prepending test script.
- *
- * Forbidden (return false):
- *  - `npm run build` / `npm run build -w ...` / `tsc` emit (`tsc -b`, `tsc --build`)
- *  - bare `npm test` / `npm t` / `npm run test` (the package script prepends build)
- *
- * Allowed (return true):
- *  - `npm run check` (no emit)
- *  - `npx vitest run <path>` / `vitest run <path>`
- *  - `node --test <path>`
- */
-export function isBuildFreeVerifyCommand(cmd) {
-    if (cmd.trim().length === 0)
-        return false;
-    // INV-RSM-VERIFY-01 (COR-8c497987): judge each shell-chained INVOCATION on its
-    // own flags, never the whole string — `tsc --noEmit && tsc -p build` must not
-    // pass because a `--noEmit` appears SOMEWHERE in the command. Split on the
-    // shell chain separators (&&, ||, ;, |, newline) first, then validate every
-    // segment independently; one emitting segment forbids the whole command.
-    const segments = cmd
-        .replace(/\r\n/g, "\n")
-        .split(/&&|\|\||[;|\n]/)
-        .map((s) => s.trim().toLowerCase().replace(/\s+/g, " "))
-        .filter((s) => s.length > 0);
-    if (segments.length === 0)
-        return false;
-    for (const c of segments) {
-        // Any explicit build step is forbidden.
-        if (/\bnpm\s+run\s+build\b/.test(c))
-            return false;
-        if (/\btsc\b.*(-b\b|--build\b)/.test(c))
-            return false;
-        if (/(^|\s)tsc(\s|$)/.test(c) && !/--noemit\b/.test(c)) {
-            // A bare `tsc` (or `tsc -p ...`) emits unless --noEmit is set — judged
-            // per invocation, so a sibling segment's --noEmit cannot vouch for it.
-            return false;
-        }
-        // A build-prepending `npm test` / `npm t` / `npm run test` is forbidden; the
-        // build-free runner (vitest run / node --test) must be invoked directly.
-        if (/\bnpm\s+(test|t)\b/.test(c))
-            return false;
-        if (/\bnpm\s+run\s+test\b/.test(c))
-            return false;
-    }
-    return true;
-}
-/**
- * Inject the tsx ESM loader into a bare `node --test <file>` command so the `.mjs`
- * node:test suites (which import `audit-tools/shared` via tsconfig `paths`, honored
- * only by tsx) resolve in a per-node worktree with no built `dist/`. A host- or
- * DAG-authored `node --test tests/audit/x.test.mjs` would otherwise fail module
- * resolution; the tool normalizes it so correctness can't depend on the host
- * remembering to add the loader. Idempotent: a command already carrying
- * `--import tsx/esm` or a `--loader` is left untouched. Mirrors the runner the
- * derived verify uses ({@link verifyCommandsForEdits}), so the displayed per-node
- * command and the in-process verify match.
- */
-export function normalizeNodeTestCommand(cmd) {
-    const trimmed = cmd.trim();
-    if (!/^node\b/.test(trimmed))
-        return cmd;
-    if (!/\s--test\b/.test(trimmed))
-        return cmd;
-    if (/--import\s+tsx\/esm\b/.test(trimmed) || /--loader\b/.test(trimmed))
-        return cmd;
-    return trimmed.replace(/^node\b/, "node --import tsx/esm");
-}
-/**
- * True when `cmd` is a test-runner invocation whose target is a whole directory
- * or the entire suite rather than specific test files — e.g. `npx vitest run
- * tests/remediate`, `vitest run` (no path), `node --test tests/audit/`. Such a
- * command, run as an *additional* per-node verify alongside the scoped derive,
- * re-enters the FULL suite inside a per-node worktree. That is the structural
- * deadlock proven 2026-06-30: a source node's whole-suite verify fails on a
- * stale test owned by a DIFFERENT node, and concurrent worktrees race shared
- * test temp dirs. The derived verify already runs this node's OWN touched
- * tests, so a host/DAG-authored whole-suite command adds only risk — the tool
- * drops it rather than relying on the author to scope it (enforce-in-tooling,
- * never host discretion). A command naming at least one concrete `.test.<ext>`
- * file is scoped and kept.
- */
-export function isWholeSuiteTestCommand(cmd) {
-    const c = cmd.trim();
-    const isVitest = /\bvitest\b\s+run\b/.test(c) || /\bvitest\b(?!\s+run)/.test(c);
-    const isNodeTest = /^node\b/.test(c) && /\s--test\b/.test(c);
-    if (!isVitest && !isNodeTest)
-        return false;
-    // Tokenise; a concrete test file makes it scoped. Anything that is a runner
-    // with no concrete test-file target (bare runner, or a directory/glob target)
-    // is whole-suite.
-    const namesConcreteTestFile = /(^|\s)[^\s]*\.test\.(ts|tsx|mjs|cjs|js)(\s|$)/.test(c);
-    return !namesConcreteTestFile;
-}
-/**
- * True when a verify command DEPENDS ON A BUILT `dist/` — either the command
- * string itself references a dist path (spawning the built CLI), or, when
- * `treeRoot` is supplied, a test FILE the command names imports/spawns dist in
- * its content. A per-node worktree has NO dist at all (`dist/` is gitignored
- * and only `node_modules` is junction-linked), so such a command false-reds
- * DETERMINISTICALLY under the by-design build-free accept gate — three accepts
- * in a row failed exactly this way (2026-07-23 dogfood, backlog "build-free
- * accept verify false-reds dist-importing targeted commands"). A central build
- * cannot fix it (it materializes MAIN's dist, not the worktree's), so the
- * remedy is the same as the whole-suite / cross-node families: drop from
- * per-node verify and defer to the central close gate, which runs on the
- * merged tree with a fresh build.
- *
- * Detection is deliberately conservative-toward-deferral: a false positive
- * (e.g. a comment mentioning `dist/`) only moves that command to the close
- * gate — never a lost signal, never a false-red.
- */
-export function isDistDependentVerifyCommand(cmd, treeRoot) {
-    if (/\bdist[\/\\]/.test(cmd))
-        return true;
-    if (treeRoot === undefined)
-        return false;
-    for (const token of pathTokensInCommand(cmd)) {
-        if (!/\.test\.(mjs|cjs|js|ts|tsx)$/.test(token))
-            continue;
-        const p = join(treeRoot, token);
-        if (!existsSync(p))
-            continue;
-        let content;
-        try {
-            content = readFileSync(p, "utf8");
-        }
-        catch {
-            continue;
-        }
-        // `dist/`-style path (import/spawn) or a `"dist"` path-segment argument
-        // (join(root, "dist", ...) — how the wrapper e2es locate the built entry).
-        if (/\bdist[\/\\]/.test(content) || /["']dist["']/.test(content))
-            return true;
-    }
-    return false;
-}
-/**
- * True when a verify command names a test FILE that is WORKTREE-HOSTILE: its
- * content spawns the `audit-code` / `remediate-code` driver CLIs, which the
- * worker-context guard (v0.34.19, cwd-discriminated) mechanically refuses from
- * inside a node worktree — so the test deterministically fails there and the
- * node can NEVER accept (accept/reverify cluster defect 8). Same
- * conservative-toward-deferral contract as the dist probe: a false positive
- * only moves the command to the close gate (root cwd, where it runs fine).
- */
-export function isWorktreeHostileVerifyCommand(cmd, treeRoot) {
-    for (const token of pathTokensInCommand(cmd)) {
-        if (!/\.test\.(mjs|cjs|js|ts|tsx)$/.test(token))
-            continue;
-        const p = join(treeRoot, token);
-        if (!existsSync(p))
-            continue;
-        let content;
-        try {
-            content = readFileSync(p, "utf8");
-        }
-        catch {
-            continue;
-        }
-        // The driver CLI names (bin or wrapper .mjs) appearing in test content —
-        // spawn targets the worker-context guard refuses inside a worktree.
-        if (/\b(?:audit|remediate)-code(?:\.mjs)?\b/.test(content))
-            return true;
-    }
-    return false;
-}
-/**
- * Partition verify commands into the per-node-runnable set and the DEFERRED set
- * (dist-dependent OR worktree-hostile — both deterministically false-red inside
- * a build-free node worktree; the central close gate runs them on the merged
- * tree at the repo root). Content-level detection: `treeRoot` should be the
- * WORKTREE the verify would run in, so the scanned test files are the node's
- * own post-edit versions. The deferred list is DEDUPLICATED — the close gate's
- * replay drains it verbatim, so a doubled entry would run twice there.
- */
-export function partitionDeferredVerifyCommands(commands, treeRoot) {
-    const kept = [];
-    const deferred = new Set();
-    for (const c of commands) {
-        if (isDistDependentVerifyCommand(c, treeRoot) || isWorktreeHostileVerifyCommand(c, treeRoot)) {
-            deferred.add(c);
-        }
-        else {
-            kept.push(c);
-        }
-    }
-    return { kept, deferred: [...deferred] };
-}
-/**
- * cg-1: collapse the per-node DEFERRED verify commands into the close gate's
- * single residual run. Exact-duplicate commands collapse to one (first-seen
- * order); when the close phase's own full-suite leg ran green
- * (`fullSuiteCovers`), any command that leg already covers is SUBSUMED and
- * dropped — a whole-suite runner invocation, or a vitest run whose path tokens
- * are all test files (the full vitest sweep runs every test file). Everything
- * else (e.g. `npm run check`, dist-spawning scripts) survives as the residual
- * the close gate must run exactly once. The 2026-08-06 run drained the raw
- * per-node lists verbatim — duplicate full `tests/audit` passes, a 2h close.
- */
-export function dedupeDeferredVerifyCommands(deferred, opts) {
-    const residual = [];
-    const subsumed = [];
-    const seen = new Set();
-    for (const raw of deferred) {
-        const cmd = raw.trim();
-        if (cmd.length === 0 || seen.has(cmd))
-            continue;
-        seen.add(cmd);
-        if (opts.fullSuiteCovers && isSubsumedByFullSuite(cmd)) {
-            subsumed.push(cmd);
-            continue;
-        }
-        residual.push(cmd);
-    }
-    return { residual, subsumed };
-}
-/** A green full-suite leg covers whole-suite runs and test-file-only vitest runs. */
-function isSubsumedByFullSuite(cmd) {
-    if (isWholeSuiteTestCommand(cmd))
-        return true;
-    if (!/\bvitest\b/.test(cmd))
-        return false;
-    const tokens = pathTokensInCommand(cmd);
-    return (tokens.length > 0 &&
-        tokens.every((t) => /\.test\.(ts|tsx|mts|cts|js|mjs|cjs)$/.test(t)));
-}
-/**
- * Repo-relative path-like tokens in a shell command — tokens containing a `/` and a
- * file extension (e.g. `scripts/remediate/verify-hosts.mjs`, `tests/x.test.ts`).
- * Used to decide whether a targeted verify command is self-contained.
- */
-export function pathTokensInCommand(cmd) {
-    const tokens = cmd.match(/(?:[\w.@-]+[\/\\])+[\w.@-]+\.\w+/g) ?? [];
-    return [...new Set(tokens.map((t) => t.replace(/\\/g, "/")))];
-}
-/**
- * Keep only the targeted verify commands that are SELF-CONTAINED for this node:
- * every path-like token they reference is either one of the node's own paths (its
- * declared write set ∪ the files it actually edited on its branch) or already
- * present in the tree. A command referencing a path this node doesn't own and that
- * isn't in the tree depends on a SIBLING node's not-yet-created deliverable —
- * running it in per-node verify is a guaranteed-fail deadlock (proven 2026-07-03: a
- * node's `targeted_command` was `node scripts/remediate/verify-hosts.mjs`, another
- * node's pending output). Per-node verify must be self-contained; such a cross-node
- * command is dropped here and deferred to the integration/close gate. A command with
- * no path tokens (e.g. `npm run check`) is always kept.
- */
-export function selfContainedVerifyCommands(commands, ownPaths, treeRoot) {
-    const owned = new Set([...ownPaths].map((p) => p.replace(/\\/g, "/")));
-    return commands.filter((cmd) => {
-        for (const token of pathTokensInCommand(cmd)) {
-            if (owned.has(token))
-                continue;
-            if (existsSync(join(treeRoot, token)))
-                continue;
-            return false;
-        }
-        return true;
-    });
-}
-/** A repo-relative test path → the runner that executes that file directly. */
-function verifyRunnerForTestFile(repoRelPath) {
-    // ONE vitest runner across all suites (audit / shared / remediate). The node:test
-    // split was retired 2026-07-02, so every tracked `.test.mjs` / `.test.ts` file is a
-    // vitest file — running a `.mjs` vitest suite under `node --test` throws "Vitest
-    // failed to access its internal state". vitest resolves `audit-tools/shared` via its
-    // config alias, so a per-node worktree needs no prior build (`npx vitest run <file>`).
-    if (/^tests\/.+\.test\.(mjs|ts|tsx)$/.test(repoRelPath))
-        return "vitest";
-    return undefined;
-}
-/**
- * Derive a node's per-node verify commands from the test files it ACTUALLY touched
- * on its worktree branch (the git ground truth), instead of trusting host-authored
- * `targeted_commands` whose paths/runner can drift from where the worker put the
- * test. Always typechecks (`npm run check`, no emit), then runs ONLY this node's
- * own touched test files with the repo's runners — never the whole suite (which
- * would re-enter worktree-spawning tests inside a nested worktree). Build-free: the
- * host owns the central build; a node's own test imports the source it changed via
- * the tsx loader. Returns `[]` when there is no git ground truth so the caller can
- * skip the gate rather than fabricate a command.
- */
-/** Pure assembly (git-free) of the verify commands for a set of edited paths —
- *  the testable core of {@link deriveVerifyCommandsFromBranch}. */
-export function verifyCommandsForEdits(editedFiles) {
-    const vitestTests = [];
-    for (const f of editedFiles) {
-        const rel = f.replace(/\\/g, "/");
-        if (verifyRunnerForTestFile(rel) === "vitest")
-            vitestTests.push(rel);
-    }
-    const cmds = ["npm run check"];
-    if (vitestTests.length > 0) {
-        cmds.push(`npx vitest run ${vitestTests.sort().join(" ")}`);
-    }
-    return cmds;
-}
-export function deriveVerifyCommandsFromBranch(root, branch) {
-    const edited = gitEditedFilesForBranch(root, branch);
-    if (!edited.available)
-        return [];
-    return verifyCommandsForEdits(edited.files);
-}
-/**
- * A node's own `targeted_commands` for the per-node verify (task_7d35176d) — the union
- * of the block's `targeted_commands` and its findings' `targeted_commands` (the
- * auditor-specified, fix-specific verification) bound into the host workload.
- */
-export function targetedCommandsForBlock(state, blockId) {
-    const block = state.plan?.blocks?.find((b) => b.block_id === blockId);
-    if (!block)
-        return [];
-    const out = [...(block.targeted_commands ?? [])];
-    for (const fid of block.items) {
-        const finding = state.plan?.findings?.find((f) => f.id === fid);
-        for (const c of finding?.targeted_commands ?? [])
-            out.push(c);
-    }
-    return [...new Set(out)];
-}
-//# sourceMappingURL=verifyCommands.js.map

package/dist/remediate/steps/dispatch/verifyCommands.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyCommands.js","sourceRoot":"","sources":["../../../../src/remediate/steps/dispatch/verifyCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SACtB,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SACvD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,wCAAwC;QACxC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,uEAAuE;YACvE,uEAAuE;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5C,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC;IACpF,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC3C,4EAA4E;IAC5E,8EAA8E;IAC9E,kBAAkB;IAClB,MAAM,qBAAqB,GAAG,+CAA+C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,qBAAqB,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW,EAAE,QAAiB;IACzE,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,GAAW,EAAE,QAAgB;IAC1E,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,QAAkB,EAClB,QAAgB;IAEhB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,4BAA4B,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7F,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAA0B,EAC1B,IAAkC;IAElC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,eAAe,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,CACL,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,mCAAmC,CAAC,IAAI,EAAE,CAAC;IACpE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAkB,EAClB,QAA0B,EAC1B,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAAE,SAAS;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,uBAAuB,CAAC,WAAmB;IAClD,kFAAkF;IAClF,oFAAoF;IACpF,iFAAiF;IACjF,qFAAqF;IACrF,uFAAuF;IACvF,IAAI,iCAAiC,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH;mEACmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,WAA6B;IAClE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAY,EAAE,MAAc;IACzE,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAuB,EAAE,OAAe;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,iBAAiB,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/remediate/steps/dispatch/writeScope.d.ts

@@ -1,43 +0,0 @@
-import { type GitEditedFiles } from "./common.js";
-/** The decision a write-scope gate makes given the resolved edit set. */
-export interface WriteScopeDecision {
-    blocked: boolean;
-    reason?: string;
-}
-/**
- * Pure write-scope gate decision (OBL-DS-06). Given the block's declared write
- * paths and the resolved git edit set:
- *  - `not_a_repo`   → no ground truth (no worktree workflow) → not blocked.
- *  - `probe_failed` → git is a repo but the diff failed → FAIL CLOSED (blocked).
- *  - available      → block iff any edited file is outside declared scope.
- * The worker's self-reported `amended_files` is never an input here.
- */
-export declare function enforceWriteScope(declaredWritePaths: string[], edited: GitEditedFiles, root: string): WriteScopeDecision;
-/**
- * Pure write-scope adjudication (OBL-DS-06) — git-free so it is unit-testable with
- * a synthetic edit set. It normalizes the complete declared-scope snapshot and
- * checks the node's ACTUAL edits — git ground truth, never a self-report:
- *  - an edit to a file no sibling block owns widens this node's effective scope;
- *    effective scope (a too-narrow — or empty — declared scope no longer blocks a
- *    correct fix; this is the sanctioned "extend into unowned files" path);
- *  - an edit to a file in another block's declared scope is a seam conflict that
- *    blocks until the host re-scopes or serializes the work.
- */
-export declare function adjudicateWriteScope(allBlockScopes: Array<{
-    block_id: string;
-    write_paths: string[];
-}>, blockId: string, edited: GitEditedFiles, root: string): WriteScopeDecision;
-/**
- * Git-backed write-scope gate. Thin wrapper around
- * {@link adjudicateWriteScope}: resolves the branch's actual edits and adjudicates.
- */
-export declare function enforceAcceptWriteScope(params: {
-    root: string;
-    branch: string;
-    blockId: string;
-    allBlockScopes: Array<{
-        block_id: string;
-        write_paths: string[];
-    }>;
-}): WriteScopeDecision;
-//# sourceMappingURL=writeScope.d.ts.map

package/dist/remediate/steps/dispatch/writeScope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"writeScope.d.ts","sourceRoot":"","sources":["../../../../src/remediate/steps/dispatch/writeScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,MAAM,EAAE,EAC5B,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,GACX,kBAAkB,CAsBpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,EAClE,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,GACX,kBAAkB,CAkCpB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACpE,GAAG,kBAAkB,CAQrB"}

package/dist/remediate/steps/dispatch/writeScope.js

@@ -1,81 +0,0 @@
-import { toRepoRelative, writeScopeViolations, gitEditedFilesForBranch, } from "./common.js";
-/**
- * Pure write-scope gate decision (OBL-DS-06). Given the block's declared write
- * paths and the resolved git edit set:
- *  - `not_a_repo`   → no ground truth (no worktree workflow) → not blocked.
- *  - `probe_failed` → git is a repo but the diff failed → FAIL CLOSED (blocked).
- *  - available      → block iff any edited file is outside declared scope.
- * The worker's self-reported `amended_files` is never an input here.
- */
-export function enforceWriteScope(declaredWritePaths, edited, root) {
-    if (!edited.available) {
-        if (edited.reason === "not_a_repo") {
-            return { blocked: false };
-        }
-        // probe_failed: git is present but could not be queried → fail closed.
-        return {
-            blocked: true,
-            reason: `Write-scope could not be verified: git probe failed (${edited.error}). ` +
-                `Failing closed rather than trusting self-reported edits.`,
-        };
-    }
-    const violations = writeScopeViolations(declaredWritePaths, edited.files, root);
-    if (violations.length === 0)
-        return { blocked: false };
-    return {
-        blocked: true,
-        reason: `Worker edited files outside its declared write scope: ${violations.join(", ")}. ` +
-            `Declared scope must be amended through the seam protocol; the self-reported ` +
-            `amended_files set is not trusted for this gate.`,
-    };
-}
-/**
- * Pure write-scope adjudication (OBL-DS-06) — git-free so it is unit-testable with
- * a synthetic edit set. It normalizes the complete declared-scope snapshot and
- * checks the node's ACTUAL edits — git ground truth, never a self-report:
- *  - an edit to a file no sibling block owns widens this node's effective scope;
- *    effective scope (a too-narrow — or empty — declared scope no longer blocks a
- *    correct fix; this is the sanctioned "extend into unowned files" path);
- *  - an edit to a file in another block's declared scope is a seam conflict that
- *    blocks until the host re-scopes or serializes the work.
- */
-export function adjudicateWriteScope(allBlockScopes, blockId, edited, root) {
-    const normalizedScopes = allBlockScopes.map((scope) => ({
-        blockId: scope.block_id,
-        paths: scope.write_paths.map((path) => toRepoRelative(path, root)),
-    }));
-    const effectiveScope = new Set(normalizedScopes.find((scope) => scope.blockId === blockId)?.paths ?? []);
-    if (!edited.available)
-        return enforceWriteScope([...effectiveScope], edited, root);
-    const candidates = writeScopeViolations([...effectiveScope], edited.files, root);
-    const conflicts = [];
-    for (const candidate of candidates) {
-        const owners = normalizedScopes
-            .filter((scope) => scope.blockId !== blockId && scope.paths.includes(candidate))
-            .map((scope) => scope.blockId)
-            .sort();
-        if (owners.length > 0) {
-            conflicts.push(`${candidate} owned by ${owners.join(", ")}`);
-        }
-        else {
-            effectiveScope.add(candidate);
-        }
-    }
-    if (conflicts.length > 0) {
-        return {
-            blocked: true,
-            reason: `Node edited files owned by another block (seam conflict): ${conflicts.join("; ")}. ` +
-                `Re-scope or serialize the work before this result can be accepted.`,
-        };
-    }
-    return enforceWriteScope([...effectiveScope], edited, root);
-}
-/**
- * Git-backed write-scope gate. Thin wrapper around
- * {@link adjudicateWriteScope}: resolves the branch's actual edits and adjudicates.
- */
-export function enforceAcceptWriteScope(params) {
-    const { root, branch, blockId, allBlockScopes } = params;
-    return adjudicateWriteScope(allBlockScopes, blockId, gitEditedFilesForBranch(root, branch), root);
-}
-//# sourceMappingURL=writeScope.js.map

package/dist/remediate/steps/dispatch/writeScope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"writeScope.js","sourceRoot":"","sources":["../../../../src/remediate/steps/dispatch/writeScope.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,aAAa,CAAC;AAQrB;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,kBAA4B,EAC5B,MAAsB,EACtB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,uEAAuE;QACvE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EACJ,wDAAwD,MAAM,CAAC,KAAK,KAAK;gBACzE,0DAA0D;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EACJ,yDAAyD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClF,8EAA8E;YAC9E,iDAAiD;KACpD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,cAAkE,EAClE,OAAe,EACf,MAAsB,EACtB,IAAY;IAEZ,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KACnE,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CACzE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,iBAAiB,CAAC,CAAC,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAEnF,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,GAAG,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjF,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,gBAAgB;aAC5B,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CACxE;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,EAAE,CAAC;QACV,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EACJ,6DAA6D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACrF,oEAAoE;SACvE,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,CAAC,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAKvC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IACzD,OAAO,oBAAoB,CACzB,cAAc,EACd,OAAO,EACP,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,EACrC,IAAI,CACL,CAAC;AACJ,CAAC"}

package/dist/remediate/utils/hostAssets.d.ts

@@ -1,21 +0,0 @@
-/**
- * Strip YAML frontmatter from a text file, returning only the body.
- * Consumed by `ensureGlobalAssets` (the `remediate-code ensure` CLI command,
- * src/remediate/index.ts). scripts/remediate/postinstall.mjs has its own
- * copy in scripts/shared/install-host-assets.mjs — that script runs before
- * `tsc` has produced dist/, so it cannot import this TS module.
- */
-export declare function splitFrontmatter(text: string): {
-    body: string;
-};
-/**
- * Write a generated file, creating parent directories as needed.
- * Returns "installed" on first write, "updated" on subsequent writes.
- */
-export declare function writeGeneratedFile(path: string, content: Buffer): string;
-/**
- * Coerce an unknown value to a plain object (non-array).
- * Returns {} for primitives, arrays, and null.
- */
-export declare function objectValue(value: unknown): Record<string, unknown>;
-//# sourceMappingURL=hostAssets.d.ts.map

package/dist/remediate/utils/hostAssets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostAssets.d.ts","sourceRoot":"","sources":["../../../src/remediate/utils/hostAssets.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAI/D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAKxE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAInE"}

package/dist/remediate/utils/hostAssets.js

@@ -1,34 +0,0 @@
-import { mkdirSync, existsSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
-/**
- * Strip YAML frontmatter from a text file, returning only the body.
- * Consumed by `ensureGlobalAssets` (the `remediate-code ensure` CLI command,
- * src/remediate/index.ts). scripts/remediate/postinstall.mjs has its own
- * copy in scripts/shared/install-host-assets.mjs — that script runs before
- * `tsc` has produced dist/, so it cannot import this TS module.
- */
-export function splitFrontmatter(text) {
-    const normalized = text.replace(/\r\n/g, "\n");
-    const match = normalized.match(/^---\n[\s\S]*?\n---\n?/u);
-    return { body: match ? normalized.slice(match[0].length) : normalized };
-}
-/**
- * Write a generated file, creating parent directories as needed.
- * Returns "installed" on first write, "updated" on subsequent writes.
- */
-export function writeGeneratedFile(path, content) {
-    const action = existsSync(path) ? "updated" : "installed";
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, content);
-    return action;
-}
-/**
- * Coerce an unknown value to a plain object (non-array).
- * Returns {} for primitives, arrays, and null.
- */
-export function objectValue(value) {
-    return value && typeof value === "object" && !Array.isArray(value)
-        ? value
-        : {};
-}
-//# sourceMappingURL=hostAssets.js.map

package/dist/remediate/utils/hostAssets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostAssets.js","sourceRoot":"","sources":["../../../src/remediate/utils/hostAssets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1D,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}