audit-tools 0.44.0 → 0.46.0

package/dist/audit/cli/sampleRunCommand.js

@@ -1,4 +1,6 @@
+import { existsSync } from "node:fs";
 import { mkdir } from "node:fs/promises";
+import { join } from "node:path";
 import { buildRepoManifest } from "../extractors/fileInventory.js";
 import { buildFileDisposition } from "../extractors/disposition.js";
 import { buildCriticalFlowManifest } from "../extractors/flows.js";
@@ -10,7 +12,7 @@ import { initializeCoverageFromPlan } from "../orchestrator/planning.js";
 import { writeCoreArtifacts } from "../io/artifacts.js";
 import { buildAuditReportModel, renderAuditReportMarkdown, } from "../reporting/synthesis.js";
 import { deriveAuditState } from "../orchestrator/state.js";
-import { getArtifactsDir } from "./args.js";
+import { getArtifactsDir, hasFlag } from "./args.js";
 import { outputJson } from "./cliHelpers.js";
 const SAMPLE_REPO_FILES = [
     { path: "src/api/auth.ts", size_bytes: 1240, hash: "abc123" },
@@ -87,6 +89,15 @@ export async function runSample(argv = process.argv) {
         audit_report: auditReport,
     });
     const artifactsDir = getArtifactsDir(argv);
+    // A live bundle (audit_state.json present) is real run state — fabricated
+    // sample artifacts must never overwrite it. `--force` is the explicit
+    // disposable-target override, mirroring the cleanup verb.
+    if (existsSync(join(artifactsDir, "audit_state.json")) &&
+        !hasFlag(argv, "--force")) {
+        console.error(`Refusing to write sample artifacts into '${artifactsDir}': an audit state file is present. Pass --force to overwrite a disposable target.`);
+        process.exitCode = 1;
+        return;
+    }
     await mkdir(artifactsDir, { recursive: true });
     await writeCoreArtifacts(artifactsDir, {
         repo_manifest: repoManifest,

package/dist/audit/cli/sampleRunCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"sampleRunCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/sampleRunCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/D,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC3D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAiB,OAAO,CAAC,IAAI;IAC3D,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,oBAAoB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,YAAY,EACZ,eAAe,EACf,WAAW,CACZ,CAAC;IACF,MAAM,QAAQ,GAAG,0BAA0B,CACzC,YAAY,EACZ,YAAY,EACZ,WAAW,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,aAAa,CAAC;IACrE,MAAM,UAAU,GAAG,UAAU,CAAC;IAC9B,4EAA4E;IAC5E,4DAA4D;IAC5D,MAAM,YAAY,GAAG,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;IACrD,MAAM,aAAa,GAAkB;QACnC;YACE,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,QAAQ,UAAU,EAAE;YAC7B,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,kBAAkB;YAC9B,aAAa,EAAE;gBACb;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC;wBACtE,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,CAAC;iBACN;aACF;YACD,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,CAAC,+BAA+B,CAAC;YACxC,iBAAiB,EAAE,KAAK;SACzB;KACF,CAAC;IACF,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;QACzD,YAAY;QACZ,aAAa;QACb,YAAY;QACZ,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG;QAC9B,OAAO,EAAE,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,WAAoB;YAC5B,OAAO,EAAE,sCAAsC;YAC/C,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;KACJ,CAAC;IACF,MAAM,WAAW,GAAG,yBAAyB,CAC3C,qBAAqB,CAAC;QACpB,OAAO,EAAE,aAAa;QACtB,YAAY;QACZ,aAAa;QACb,cAAc,EAAE,QAAQ;QACxB,uBAAuB;KACxB,CAAC,CACH,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,WAAW;QAC7B,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,QAAQ;QACzB,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,kBAAkB,CAAC,YAAY,EAAE;QACrC,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,WAAW;QAC7B,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,QAAQ;QACzB,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"sampleRunCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/sampleRunCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/D,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC3D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAiB,OAAO,CAAC,IAAI;IAC3D,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,oBAAoB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,YAAY,EACZ,eAAe,EACf,WAAW,CACZ,CAAC;IACF,MAAM,QAAQ,GAAG,0BAA0B,CACzC,YAAY,EACZ,YAAY,EACZ,WAAW,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,aAAa,CAAC;IACrE,MAAM,UAAU,GAAG,UAAU,CAAC;IAC9B,4EAA4E;IAC5E,4DAA4D;IAC5D,MAAM,YAAY,GAAG,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;IACrD,MAAM,aAAa,GAAkB;QACnC;YACE,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,QAAQ,UAAU,EAAE;YAC7B,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,kBAAkB;YAC9B,aAAa,EAAE;gBACb;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC;wBACtE,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,CAAC;iBACN;aACF;YACD,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,CAAC,+BAA+B,CAAC;YACxC,iBAAiB,EAAE,KAAK;SACzB;KACF,CAAC;IACF,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;QACzD,YAAY;QACZ,aAAa;QACb,YAAY;QACZ,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG;QAC9B,OAAO,EAAE,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,MAAM,EAAE,WAAoB;YAC5B,OAAO,EAAE,sCAAsC;YAC/C,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;KACJ,CAAC;IACF,MAAM,WAAW,GAAG,yBAAyB,CAC3C,qBAAqB,CAAC;QACpB,OAAO,EAAE,aAAa;QACtB,YAAY;QACZ,aAAa;QACb,cAAc,EAAE,QAAQ;QACxB,uBAAuB;KACxB,CAAC,CACH,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,WAAW;QAC7B,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,QAAQ;QACzB,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,sEAAsE;IACtE,0DAA0D;IAC1D,IACE,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,EACzB,CAAC;QACD,OAAO,CAAC,KAAK,CACX,4CAA4C,YAAY,mFAAmF,CAC5I,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,kBAAkB,CAAC,YAAY,EAAE;QACrC,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,WAAW;QAC7B,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;QAC7B,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,QAAQ;QACzB,wBAAwB,EAAE,sBAAsB;QAChD,yBAAyB,EAAE,uBAAuB;QAClD,aAAa,EAAE,aAAa;QAC5B,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;KACxB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/audit/cli/semanticReviewStep.d.ts

@@ -1,5 +1,6 @@
-import { type SubmissionIssue } from "audit-tools/shared";
 import type { ActiveReviewRun } from "../supervisor/operatorHandoff.js";
+import type { AuditHostIngestIssue } from "../validation/ingestIssueCodes.js";
+import { type AuditHostValidationWarning } from "./dispatch/hostHandoff.js";
 import { writeCurrentStep } from "./steps.js";
 /**
  * Publish the complete provider-neutral semantic-review workload. The host owns
@@ -13,6 +14,8 @@ export declare function renderSemanticReviewStep(params: {
     selectedExecutor?: string | null;
     inProcessMadeProgress?: boolean;
     /** Failures the ingest that preceded this emission classified. */
-    ingestIssues?: readonly SubmissionIssue[];
+    ingestIssues?: readonly AuditHostIngestIssue[];
+    /** Advisory validation findings on results the SAME ingest accepted. */
+    validationWarnings?: readonly AuditHostValidationWarning[];
 }): Promise<Awaited<ReturnType<typeof writeCurrentStep>>>;
 //# sourceMappingURL=semanticReviewStep.d.ts.map

package/dist/audit/cli/semanticReviewStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semanticReviewStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAOxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuD9C;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC3C,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAuExD"}
+{"version":3,"file":"semanticReviewStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA6E9C;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,YAAY,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC/C,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAqFxD"}

package/dist/audit/cli/semanticReviewStep.js

@@ -1,5 +1,6 @@
 import { resolve } from "node:path";
-import { readJsonFile } from "audit-tools/shared";
+import { linkFrictionRunIds, readJsonFile } from "audit-tools/shared";
+import { AUDIT_FRICTION_RUN_ID } from "../orchestrator/nextStep.js";
 import { prepareAuditHostHandoff, } from "./dispatch/hostHandoff.js";
 import { nextStepCommand } from "./prompts.js";
 import { writeCurrentStep } from "./steps.js";
@@ -51,6 +52,23 @@ function renderIngestIssueLines(issues) {
         "",
     ];
 }
+/**
+ * The ADVISORY half of the ingest report: validation warnings on results that
+ * WERE accepted. Deliberately a separate renderer from {@link renderIngestIssueLines}
+ * — these need no repair, so they must not share a section (or a count) with
+ * items that could not be accepted, or an accepted-with-warning result reads as
+ * a refusal that never happened.
+ */
+function renderValidationWarningLines(warnings) {
+    if (warnings.length === 0)
+        return [];
+    return [
+        "## Advisory notes on accepted results",
+        "",
+        ...warnings.map((warning) => `- \`${warning.work_item_id}\` was ACCEPTED; advisory: ${warning.message}`),
+        "",
+    ];
+}
 /**
  * Publish the complete provider-neutral semantic-review workload. The host owns
  * every execution choice; audit-tools only binds prompts/results and ingests
@@ -68,9 +86,17 @@ export async function renderSemanticReviewStep(params) {
         runId: activeReviewRun.run_id,
         tasks: tasks.map(toHostTask),
     });
+    // Name this round's runs on the audit friction record, which is keyed by a fixed
+    // literal and so on its own names no run at all (semantics: `FrictionRunLinks`). Each
+    // reference is sourced from the envelope that owns it, never synthesized.
+    await linkFrictionRunIds(artifactsDir, AUDIT_FRICTION_RUN_ID, {
+        step_run_id: activeReviewRun.run_id,
+        dispatch_run_id: handoff.workload.run_id,
+    }, "audit-code");
     const continueCommand = nextStepCommand(root, artifactsDir);
     const resultPaths = handoff.workload.work_items.map((item) => resolve(root, item.result_path));
     const issues = params.ingestIssues ?? [];
+    const validationWarnings = params.validationWarnings ?? [];
     return writeCurrentStep({
         artifactsDir,
         stepKind: "dispatch_review",
@@ -99,6 +125,7 @@ export async function renderSemanticReviewStep(params) {
             "# audit-code semantic review",
             "",
             ...renderIngestIssueLines(issues),
+            ...renderValidationWarningLines(validationWarnings),
             `Read the complete provider-neutral workload at: ${handoff.workload_path}`,
             "",
             "Execute every work item using the host facilities available in this conversation.",

package/dist/audit/cli/semanticReviewStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"semanticReviewStep.js","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAwB,MAAM,oBAAoB,CAAC;AAIxE,OAAO,EACL,uBAAuB,GAExB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,SAAS,cAAc,CAAC,IAAe;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;QAChC,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,MAAkC;IAElC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,sCAAsC;QACtC,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CACX,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE;YAC7F,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E;QACD,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,yPAAyP;QACzP,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAQ9C;IACC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,CAAC,MAAM,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,eAAe,CAAC,wBAAwB,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,IAAI;QACJ,YAAY;QACZ,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAChC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAEzC,OAAO,gBAAgB,CAAC;QACtB,YAAY;QACZ,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,eAAe,EAAE,CAAC,eAAe,CAAC;QAClC,eAAe,EAAE,CAAC,wBAAwB,CAAC;QAC3C,QAAQ,EAAE;YACR,OAAO,EACL,aAAa,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,2BAA2B;gBAC1E,kCAAkC;gBAClC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAChB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,uFAAuF;oBAC1G,CAAC,CAAC,EAAE,CAAC;YACT,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;YACjD,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;SACnE;QACD,aAAa,EACX,mFAAmF;QACrF,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,mBAAmB,EAAE,eAAe,CAAC,wBAAwB;SAC9D;QACD,MAAM,EAAE;YACN,8BAA8B;YAC9B,EAAE;YACF,GAAG,sBAAsB,CAAC,MAAM,CAAC;YACjC,mDAAmD,OAAO,CAAC,aAAa,EAAE;YAC1E,EAAE;YACF,mFAAmF;YACnF,gGAAgG;YAChG,2FAA2F;YAC3F,EAAE;YACF,gDAAgD,eAAe,EAAE;YACjE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,eAAe;gBACvB,eAAe,CAAC,wBAAwB;aACzC;YACD,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"semanticReviewStep.js","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKpE,OAAO,EACL,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,SAAS,cAAc,CAAC,IAAe;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;QAChC,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,MAAuC;IAEvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,sCAAsC;QACtC,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CACX,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE;YAC7F,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E;QACD,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,yPAAyP;QACzP,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CACnC,QAA+C;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO;QACL,uCAAuC;QACvC,EAAE;QACF,GAAG,QAAQ,CAAC,GAAG,CACb,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,OAAO,CAAC,YAAY,8BAA8B,OAAO,CAAC,OAAO,EAAE,CAC7E;QACD,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAU9C;IACC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,CAAC,MAAM,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,eAAe,CAAC,wBAAwB,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,IAAI;QACJ,YAAY;QACZ,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC7B,CAAC,CAAC;IACH,iFAAiF;IACjF,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,kBAAkB,CACtB,YAAY,EACZ,qBAAqB,EACrB;QACE,WAAW,EAAE,eAAe,CAAC,MAAM;QACnC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;KACzC,EACD,YAAY,CACb,CAAC;IACF,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAChC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE3D,OAAO,gBAAgB,CAAC;QACtB,YAAY;QACZ,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,eAAe,EAAE,CAAC,eAAe,CAAC;QAClC,eAAe,EAAE,CAAC,wBAAwB,CAAC;QAC3C,QAAQ,EAAE;YACR,OAAO,EACL,aAAa,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,2BAA2B;gBAC1E,kCAAkC;gBAClC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAChB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,uFAAuF;oBAC1G,CAAC,CAAC,EAAE,CAAC;YACT,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;YACjD,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;SACnE;QACD,aAAa,EACX,mFAAmF;QACrF,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,mBAAmB,EAAE,eAAe,CAAC,wBAAwB;SAC9D;QACD,MAAM,EAAE;YACN,8BAA8B;YAC9B,EAAE;YACF,GAAG,sBAAsB,CAAC,MAAM,CAAC;YACjC,GAAG,4BAA4B,CAAC,kBAAkB,CAAC;YACnD,mDAAmD,OAAO,CAAC,aAAa,EAAE;YAC1E,EAAE;YACF,mFAAmF;YACnF,gGAAgG;YAChG,2FAA2F;YAC3F,EAAE;YACF,gDAAgD,eAAe,EAAE;YACjE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,eAAe;gBACvB,eAAe,CAAC,wBAAwB;aACzC;YACD,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/cli/steps.d.ts

@@ -181,13 +181,13 @@ export declare const StepArtifactSchema: z.ZodObject<{
     status: "blocked" | "ready" | "complete";
     contract_version: "audit-code-step/v1alpha1";
     run_id: string | null;
+    repo_root: string;
+    artifacts_dir: string;
+    artifact_paths: Record<string, string | null>;
     step_kind: "blocked" | "design_review" | "charter_clarification" | "analyzer_consent" | "systemic_challenge" | "critical_flow_fallback" | "synthesis_narrative" | "design_review_contract" | "design_review_conceptual" | "intent_equivalence" | "charter_delta" | "dispatch_review" | "design_review_parallel" | "charter_extraction" | "confirm_intent" | "analyzer_install" | "edge_reasoning_dispatch" | "present_report";
     prompt_path: string;
     allowed_commands: string[];
     stop_condition: string;
-    repo_root: string;
-    artifacts_dir: string;
-    artifact_paths: Record<string, string | null>;
     progress?: {
         summary: string;
         pending_packets?: number | undefined;
@@ -220,13 +220,13 @@ export declare const StepArtifactSchema: z.ZodObject<{
     status: "blocked" | "ready" | "complete";
     contract_version: "audit-code-step/v1alpha1";
     run_id: string | null;
+    repo_root: string;
+    artifacts_dir: string;
+    artifact_paths: Record<string, string | null>;
     step_kind: "blocked" | "design_review" | "charter_clarification" | "analyzer_consent" | "systemic_challenge" | "critical_flow_fallback" | "synthesis_narrative" | "design_review_contract" | "design_review_conceptual" | "intent_equivalence" | "charter_delta" | "dispatch_review" | "design_review_parallel" | "charter_extraction" | "confirm_intent" | "analyzer_install" | "edge_reasoning_dispatch" | "present_report";
     prompt_path: string;
     allowed_commands: string[];
     stop_condition: string;
-    repo_root: string;
-    artifacts_dir: string;
-    artifact_paths: Record<string, string | null>;
     progress?: {
         summary: string;
         pending_packets?: number | undefined;

package/dist/audit/cli/unacceptResultsCommand.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `audit-code unaccept-results --work-item <id> [--work-item <id> …] | --all`
+ *
+ * Remove entries from the run's accepted host-results pair — the supported path
+ * back out of an acceptance, per the recovery-verb doctrine: operator-facing,
+ * refusing what it cannot validate (the strict accepted-ledger loader throws on
+ * a corrupt pair), recording the removal so a repaired run stays
+ * distinguishable from a clean one, and invalidating the persisted step
+ * contract. After dropping, the next fold re-reads the bound result files.
+ *
+ * Argument validation lives in {@link dropAcceptedResults} — the ONE copy of
+ * the "requires --work-item or --all" refusal; this command parses argv only.
+ *
+ * The run id resolves from the persisted review-run manifest, not an argv flag:
+ * the operator names WHAT to drop, never WHERE the state lives.
+ */
+export declare function cmdUnacceptResults(argv: string[]): Promise<void>;
+//# sourceMappingURL=unacceptResultsCommand.d.ts.map

package/dist/audit/cli/unacceptResultsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unacceptResultsCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/unacceptResultsCommand.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CtE"}

package/dist/audit/cli/unacceptResultsCommand.js

@@ -0,0 +1,49 @@
+import { dropAcceptedResults } from "./dispatch/hostHandoff.js";
+import { getArtifactsDir, getFlag, getRootDir, hasFlag, } from "./args.js";
+import { loadCurrentActiveReviewRun } from "./reviewRun.js";
+/**
+ * `audit-code unaccept-results --work-item <id> [--work-item <id> …] | --all`
+ *
+ * Remove entries from the run's accepted host-results pair — the supported path
+ * back out of an acceptance, per the recovery-verb doctrine: operator-facing,
+ * refusing what it cannot validate (the strict accepted-ledger loader throws on
+ * a corrupt pair), recording the removal so a repaired run stays
+ * distinguishable from a clean one, and invalidating the persisted step
+ * contract. After dropping, the next fold re-reads the bound result files.
+ *
+ * Argument validation lives in {@link dropAcceptedResults} — the ONE copy of
+ * the "requires --work-item or --all" refusal; this command parses argv only.
+ *
+ * The run id resolves from the persisted review-run manifest, not an argv flag:
+ * the operator names WHAT to drop, never WHERE the state lives.
+ */
+export async function cmdUnacceptResults(argv) {
+    const root = getRootDir(argv);
+    const artifactsDir = getArtifactsDir(argv);
+    const all = hasFlag(argv, "--all");
+    const workItemIds = argv
+        .flatMap((token, index) => token === "--work-item" ? [argv[index + 1]] : [])
+        .filter((value) => typeof value === "string");
+    // Canonical run resolution: the same manifest `next-step`'s ingest fold reads.
+    // A hand-supplied run id would be a second way to be wrong about which state
+    // is being mutated.
+    const overrideRunId = getFlag(argv, "--run-id");
+    const runId = overrideRunId ?? (await loadCurrentActiveReviewRun(artifactsDir))?.run_id;
+    if (runId === undefined) {
+        throw new Error(`unaccept-results could not resolve the active review run under ${artifactsDir} ` +
+            "(no dispatch manifest); pass --run-id <id> only if the manifest was removed");
+    }
+    const outcome = await dropAcceptedResults({
+        root,
+        artifactsDir,
+        runId,
+        ...(all ? { all: true } : { workItemIds }),
+    });
+    console.log(JSON.stringify({
+        status: "unaccepted",
+        run_id: runId,
+        dropped_work_item_ids: outcome.dropped_work_item_ids,
+        next: "audit-code next-step re-reads the bound result files for the dropped items",
+    }, null, 2));
+}
+//# sourceMappingURL=unacceptResultsCommand.js.map

package/dist/audit/cli/unacceptResultsCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unacceptResultsCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/unacceptResultsCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EACL,eAAe,EACf,OAAO,EACP,UAAU,EACV,OAAO,GACR,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI;SACrB,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACxB,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CACjD;SACA,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAEjE,+EAA+E;IAC/E,6EAA6E;IAC7E,oBAAoB;IACpB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,GACT,aAAa,IAAI,CAAC,MAAM,0BAA0B,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC5E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,kEAAkE,YAAY,GAAG;YAC/E,6EAA6E,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,IAAI;QACJ,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KAC3C,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,KAAK;QACb,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,IAAI,EAAE,4EAA4E;KACnF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/audit/cli.d.ts

@@ -17,5 +17,11 @@ export declare const cliTestUtils: {
     countLines: typeof countLines;
     warnIfNotGitRepo: typeof warnIfNotGitRepo;
 };
+/**
+ * The ONE route table for the audit CLI. Each row is [verb, handler]; the
+ * dispatch below walks it and the unknown-command listing is DERIVED from it —
+ * never a second hand-maintained copy that drifts when a verb is added.
+ */
+export declare const COMMAND_ROUTES: ReadonlyArray<readonly [string, (argv: string[]) => Promise<void>]>;
 export declare function runCli(argv: string[]): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/audit/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/audit/cli.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAiBtD,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAWxB,CAAC;AA0FF,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/audit/cli.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAkBtD,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;CAWxB,CAAC;AAgBF;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,aAAa,CACxC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAqBrD,CAAC;AAwBF,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1D"}

package/dist/audit/cli.js

@@ -20,6 +20,7 @@ import { cmdResynthesize } from "./cli/resynthesizeCommand.js";
 import { cmdCleanup } from "./cli/cleanupCommand.js";
 import { cmdScoreAudit } from "./cli/scoreAuditCommand.js";
 import { cmdRecoverSubmission } from "./cli/recoverSubmissionCommand.js";
+import { cmdUnacceptResults } from "./cli/unacceptResultsCommand.js";
 export { runSample };
 export const cliTestUtils = {
     defaults: DIRECT_CLI_DEFAULTS,
@@ -46,6 +47,32 @@ export const cliTestUtils = {
  * wrapper, scrubbed from provider spawns).
  */
 const WORKER_SAFE_COMMANDS = new Set();
+/**
+ * The ONE route table for the audit CLI. Each row is [verb, handler]; the
+ * dispatch below walks it and the unknown-command listing is DERIVED from it —
+ * never a second hand-maintained copy that drifts when a verb is added.
+ */
+export const COMMAND_ROUTES = [
+    ["sample-run", runSample],
+    ["next-step", cmdNextStep],
+    ["import-external-analyzer", cmdImportExternalAnalyzer],
+    ["intake", cmdIntake],
+    ["plan", cmdPlan],
+    ["ingest-results", cmdIngestResults],
+    ["explain-task", cmdExplainTask],
+    ["update-runtime-validation", cmdUpdateRuntimeValidation],
+    ["validate", cmdValidate],
+    ["validate-results", cmdValidateResults],
+    ["requeue", cmdRequeue],
+    ["synthesize", cmdSynthesize],
+    ["force-synthesis", cmdForceSynthesis],
+    ["resynthesize", cmdResynthesize],
+    ["cleanup", cmdCleanup],
+    ["status", cmdStatus],
+    ["score-audit", cmdScoreAudit],
+    ["recover-submission", cmdRecoverSubmission],
+    ["unaccept-results", cmdUnacceptResults],
+];
 async function main(argv) {
     const command = argv[2] ?? "sample-run";
     assertCliCommandAllowedFromCwd({
@@ -56,66 +83,14 @@ async function main(argv) {
         // worktree evidence, so the guard must see the unanchored value.
         rawRoot: getFlag(argv, "--root"),
     });
-    switch (command) {
-        case "sample-run":
-            await runSample(argv);
-            return;
-        case "next-step":
-            await cmdNextStep(argv);
-            return;
-        case "import-external-analyzer":
-            await cmdImportExternalAnalyzer(argv);
-            return;
-        case "intake":
-            await cmdIntake(argv);
-            return;
-        case "plan":
-            await cmdPlan(argv);
-            return;
-        case "ingest-results":
-            await cmdIngestResults(argv);
-            return;
-        case "explain-task":
-            await cmdExplainTask(argv);
-            return;
-        case "update-runtime-validation":
-            await cmdUpdateRuntimeValidation(argv);
-            return;
-        case "validate":
-            await cmdValidate(argv);
-            return;
-        case "validate-results":
-            await cmdValidateResults(argv);
-            return;
-        case "requeue":
-            await cmdRequeue(argv);
-            return;
-        case "synthesize":
-            await cmdSynthesize(argv);
-            return;
-        case "force-synthesis":
-            await cmdForceSynthesis(argv);
-            return;
-        case "resynthesize":
-            await cmdResynthesize(argv);
-            return;
-        case "cleanup":
-            await cmdCleanup(argv);
-            return;
-        case "status":
-            await cmdStatus(argv);
-            return;
-        case "score-audit":
-            await cmdScoreAudit(argv);
-            return;
-        case "recover-submission":
-            await cmdRecoverSubmission(argv);
-            return;
-        default:
-            console.error(`Unknown command: ${command}`);
-            console.error("Available commands: sample-run, next-step, import-external-analyzer, intake, plan, ingest-results, explain-task, update-runtime-validation, validate, validate-results, requeue, synthesize, force-synthesis, resynthesize, cleanup, status, score-audit, recover-submission");
-            process.exitCode = 1;
+    const route = COMMAND_ROUTES.find(([verb]) => verb === command);
+    if (!route) {
+        console.error(`Unknown command: ${command}`);
+        console.error(`Available commands: ${COMMAND_ROUTES.map(([verb]) => verb).join(", ")}`);
+        process.exitCode = 1;
+        return;
     }
+    await route[1](argv);
 }
 export async function runCli(argv) {
     await main(argv).catch((error) => {

package/dist/audit/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/audit/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,mBAAmB;IAC7B,OAAO;IACP,OAAO;IACP,eAAe;IACf,UAAU;IACV,kBAAkB;IAClB,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,gBAAgB;CACjB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,EAAE,CAAC;AAE5D,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IACxC,8BAA8B,CAAC;QAC7B,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAAE,oBAAoB;QACxC,kEAAkE;QAClE,iEAAiE;QACjE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACjC,CAAC,CAAC;IACH,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY;YACf,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACT,KAAK,WAAW;YACd,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO;QACT,KAAK,0BAA0B;YAC7B,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACT,KAAK,MAAM;YACT,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO;QACT,KAAK,gBAAgB;YACnB,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO;QACT,KAAK,cAAc;YACjB,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,KAAK,2BAA2B;YAC9B,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO;QACT,KAAK,UAAU;YACb,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO;QACT,KAAK,kBAAkB;YACrB,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO;QACT,KAAK,SAAS;YACZ,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,KAAK,YAAY;YACf,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO;QACT,KAAK,iBAAiB;YACpB,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO;QACT,KAAK,cAAc;YACjB,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO;QACT,KAAK,SAAS;YACZ,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACT,KAAK,aAAa;YAChB,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO;QACT,KAAK,oBAAoB;YACvB,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO;QACT;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CACX,8QAA8Q,CAC/Q,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/audit/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,mBAAmB;IAC7B,OAAO;IACP,OAAO;IACP,eAAe;IACf,UAAU;IACV,kBAAkB;IAClB,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,gBAAgB;CACjB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,EAAE,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAEvB;IACF,CAAC,YAAY,EAAE,SAAS,CAAC;IACzB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,0BAA0B,EAAE,yBAAyB,CAAC;IACvD,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrB,CAAC,MAAM,EAAE,OAAO,CAAC;IACjB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpC,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,2BAA2B,EAAE,0BAA0B,CAAC;IACzD,CAAC,UAAU,EAAE,WAAW,CAAC;IACzB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IACxC,CAAC,SAAS,EAAE,UAAU,CAAC;IACvB,CAAC,YAAY,EAAE,aAAa,CAAC;IAC7B,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACtC,CAAC,cAAc,EAAE,eAAe,CAAC;IACjC,CAAC,SAAS,EAAE,UAAU,CAAC;IACvB,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrB,CAAC,aAAa,EAAE,aAAa,CAAC;IAC9B,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CACzC,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IACxC,8BAA8B,CAAC;QAC7B,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAAE,oBAAoB;QACxC,kEAAkE;QAClE,iEAAiE;QACjE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,uBAAuB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/audit/contracts/findingContractPrompt.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The finding contract as prompt lines: required fields (with their shapes),
+ * min-length facts, the closed vocabularies, the optional fields with their own
+ * `.describe()` text, and every non-schema rule statement verbatim.
+ *
+ * Memoized: the derivation is pure and the result is embedded in every
+ * work-item prompt (and therefore in every prompt hash), so it must be both
+ * cheap and byte-stable across a run.
+ */
+export declare function findingContractPromptLines(): readonly string[];
+//# sourceMappingURL=findingContractPrompt.d.ts.map

package/dist/audit/contracts/findingContractPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findingContractPrompt.d.ts","sourceRoot":"","sources":["../../../src/audit/contracts/findingContractPrompt.ts"],"names":[],"mappings":"AA8DA;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,IAAI,SAAS,MAAM,EAAE,CAoE9D"}

package/dist/audit/contracts/findingContractPrompt.js

@@ -0,0 +1,112 @@
+// The audit draw's finding contract as prompt lines.
+//
+// DERIVED from `WorkerFindingSchema` — the strict projection ingestion parses —
+// plus `AUDIT_RESULT_RULES`, the registry of the rules that are not expressible
+// as per-finding schema refinements and that `validateAuditResults` emits its
+// messages FROM. Prompt, acceptance and validation therefore share ONE source:
+// a field or rule the validators enforce is stated here because it exists in
+// the schema/registry, never because someone remembered to copy it in.
+//
+// A dispatch prompt that says only "findings must satisfy the audit finding
+// contract" leaves the host to remember or fetch the contract; a measured lap
+// lost four complete results exactly that way (findings missing the required
+// per-finding `lens`; `evidence` submitted as a string where an array is
+// required), and the 2026-08-21 lap then lost more to `evidence` being omitted
+// entirely while downstream validation required it.
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { CONFIDENCES, LENSES, SEVERITIES, FINDING_LINE_END_INTEGER_RULE, FINDING_LINE_ORDER_RULE, FINDING_LINE_START_INTEGER_RULE, } from "audit-tools/shared";
+import { AUDIT_RESULT_RULES } from "../validation/auditResults.js";
+import { WorkerFindingSchema } from "./workerSchemas.js";
+function describeField(node) {
+    if (node === undefined)
+        return "value";
+    if (Array.isArray(node.enum)) {
+        return `one of ${node.enum.map((value) => String(value)).join("|")}`;
+    }
+    if (node.type === "array") {
+        const item = node.items;
+        if (item?.type === "object") {
+            const required = [...(item.required ?? [])].sort();
+            return required.length > 0
+                ? `array of objects, each requiring ${required.join(" + ")}`
+                : "array of objects";
+        }
+        return typeof item?.type === "string" ? `array of ${item.type}s` : "array";
+    }
+    return typeof node.type === "string" ? node.type : "value";
+}
+let renderedContract;
+/**
+ * The finding contract as prompt lines: required fields (with their shapes),
+ * min-length facts, the closed vocabularies, the optional fields with their own
+ * `.describe()` text, and every non-schema rule statement verbatim.
+ *
+ * Memoized: the derivation is pure and the result is embedded in every
+ * work-item prompt (and therefore in every prompt hash), so it must be both
+ * cheap and byte-stable across a run.
+ */
+export function findingContractPromptLines() {
+    if (renderedContract !== undefined)
+        return renderedContract;
+    const schema = zodToJsonSchema(WorkerFindingSchema, {
+        $refStrategy: "none",
+        target: "jsonSchema7",
+    });
+    const properties = schema.properties ?? {};
+    const required = [...(schema.required ?? [])].sort();
+    const arrayFields = Object.entries(properties)
+        .filter(([, node]) => node.type === "array")
+        .map(([name]) => name)
+        .sort();
+    const optionalFields = Object.entries(properties)
+        .filter(([name]) => !required.includes(name))
+        .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0));
+    // Every min(1) the schema carries is a contract fact the host must know —
+    // an empty value fails the parse exactly as a missing field does — so it is
+    // detected FROM the schema node (required or optional, array or string),
+    // never from a hand list.
+    const nonEmptyFields = Object.entries(properties)
+        .filter(([, node]) => (node.minItems ?? 0) >= 1 || (node.minLength ?? 0) >= 1)
+        .map(([name]) => name)
+        .sort();
+    const nonEmptyLine = (names) => `Finding contract — ${names.join(", ")} ` +
+        `${names.every((name) => required.includes(name)) ? "must be non-empty" : "must be non-empty when supplied"} ` +
+        "(an empty value rejects the submission).";
+    const lines = [
+        "Finding contract — every entry of `findings` must carry these required fields: " +
+            required
+                .map((name) => `${name} (${describeField(properties[name])})`)
+                .join(", ") +
+            ".",
+        ...[
+            nonEmptyFields.filter((name) => required.includes(name)),
+            nonEmptyFields.filter((name) => !required.includes(name)),
+        ]
+            .filter((names) => names.length > 0)
+            .map((names) => nonEmptyLine(names)),
+        "These fields are JSON arrays whenever present, never a bare string or object: " +
+            arrayFields.join(", ") +
+            ". A finding that fails this contract rejects the whole submission.",
+        // `lens` is an OPTIONAL finding field (the enclosing AuditResult supplies
+        // the default), so its vocabulary clause is scoped to findings that supply
+        // one — stated two lines above as "lens is optional" — while severity and
+        // confidence are required on every finding. Still derived: the value list
+        // comes from LENSES, never a hand-typed copy.
+        `Closed vocabularies — severity must be one of ${SEVERITIES.join("|")}; confidence one of ${CONFIDENCES.join("|")}; lens, when supplied, one of ${LENSES.join("|")}.`,
+        ...optionalFields
+            .filter(([, node]) => typeof node.description === "string")
+            .map(([name, node]) => `${name} is optional${typeof node.description === "string" ? `: ${node.description}` : "."}`),
+        // The line-span rules are enforced by the shared location refinement; the
+        // prompt states the very sentences the refinement emits (the exported
+        // constants), so the check and the statement cannot drift.
+        `Rule: ${FINDING_LINE_START_INTEGER_RULE}`,
+        `Rule: ${FINDING_LINE_END_INTEGER_RULE}`,
+        `Rule: ${FINDING_LINE_ORDER_RULE}`,
+        // Every cross-record rule the downstream validator enforces, verbatim from
+        // the registry the validator itself reads — not a paraphrase.
+        ...AUDIT_RESULT_RULES.map((rule) => `Rule: ${rule.statement}`),
+    ];
+    renderedContract = lines;
+    return renderedContract;
+}
+//# sourceMappingURL=findingContractPrompt.js.map

package/dist/audit/contracts/findingContractPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findingContractPrompt.js","sourceRoot":"","sources":["../../../src/audit/contracts/findingContractPrompt.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,+EAA+E;AAC/E,oDAAoD;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,WAAW,EACX,MAAM,EACN,UAAU,EACV,6BAA6B,EAC7B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAgBzD,SAAS,aAAa,CAAC,IAA4B;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACxB,CAAC,CAAC,oCAAoC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC5D,CAAC,CAAC,kBAAkB,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,IAAI,gBAA+C,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,mBAAmB,EAAE;QAClD,YAAY,EAAE,MAAM;QACpB,MAAM,EAAE,aAAa;KACtB,CAAe,CAAC;IACjB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC9C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC5C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,yEAAyE;IACzE,0BAA0B;IAC1B,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC9C,MAAM,CACL,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,CACtE;SACA,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,MAAM,YAAY,GAAG,CAAC,KAAwB,EAAU,EAAE,CACxD,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACzC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iCAAiC,GAAG;QAC9G,0CAA0C,CAAC;IAC7C,MAAM,KAAK,GAAa;QACtB,iFAAiF;YAC/E,QAAQ;iBACL,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;iBAC7D,IAAI,CAAC,IAAI,CAAC;YACb,GAAG;QACL,GAAG;YACD,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC1D;aACE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;aACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtC,gFAAgF;YAC9E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YACtB,oEAAoE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,8CAA8C;QAC9C,iDAAiD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QACrK,GAAG,cAAc;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC;aAC1D,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CACf,GAAG,IAAI,eAAe,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAC/F;QACH,0EAA0E;QAC1E,sEAAsE;QACtE,2DAA2D;QAC3D,SAAS,+BAA+B,EAAE;QAC1C,SAAS,6BAA6B,EAAE;QACxC,SAAS,uBAAuB,EAAE;QAClC,2EAA2E;QAC3E,8DAA8D;QAC9D,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;KAC/D,CAAC;IACF,gBAAgB,GAAG,KAAK,CAAC;IACzB,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}