audit-tools 0.45.0 → 0.46.0

package/dist/audit/orchestrator/executors.js

@@ -1,3 +1,33 @@
+/**
+ * Artifacts no executor produces. `advanceAudit` writes the supervisor pair on
+ * every fold, the environment probe writes the tooling manifest, and workers
+ * append their own reflections — so these carry an explicit declaration rather
+ * than an empty producer cell in the rendered table.
+ *
+ * Ordered by artifact fileName (content-derived stable key).
+ */
+export const LIFECYCLE_PRODUCTIONS = [
+    {
+        artifact: "agent-feedback.jsonl",
+        writer: "audit workers (append-only)",
+        reason: "opt-in meta-audit reflections appended by whoever ran the task; treated as always-updated when metadata is computed",
+    },
+    {
+        artifact: "artifact_metadata.json",
+        writer: "advanceAudit (src/audit/orchestrator/advance.ts)",
+        reason: "the staleness bookkeeping the fold itself recomputes from every run's write-set",
+    },
+    {
+        artifact: "audit_state.json",
+        writer: "advanceAudit (src/audit/orchestrator/advance.ts)",
+        reason: "the derived obligation state the fold persists after each executor run",
+    },
+    {
+        artifact: "tooling_manifest.json",
+        writer: "the environment probe (src/audit/orchestrator/advance.ts)",
+        reason: "probed from the host environment, not derived from any upstream artifact",
+    },
+];
 /**
  * Returns true when the executor identified by `id` is a host-delegation point
  * (i.e. it pauses the deterministic pipeline and asks the active LLM agent to
@@ -11,11 +41,33 @@ export const EXECUTOR_REGISTRY = [
         id: "intake_executor",
         kind: "deterministic",
         obligation_ids: ["repo_manifest", "file_disposition"],
+        produces: [
+            {
+                artifact: "file_disposition.json",
+                role: "primary",
+            },
+            {
+                artifact: "repo_manifest.json",
+                role: "primary",
+            },
+            {
+                artifact: "scope_summary.json",
+                role: "side_channel",
+                note: "host-facing scope digest; the in-process channel is ExecutorRunResult.scope_summary, so it is deliberately outside ARTIFACT_DEFINITIONS and the staleness DAG",
+            },
+        ],
     },
     {
         id: "intent_checkpoint_executor",
         kind: "host_delegation",
         obligation_ids: ["intent_checkpoint_current"],
+        produces: [
+            {
+                artifact: "intent_checkpoint.json",
+                role: "primary",
+                note: "written by the host at the confirm-intent pause, at the path the CLI binds",
+            },
+        ],
     },
     {
         // DD-9 intent-equivalence gate. host_delegation: a prose-only delta emits
@@ -25,6 +77,7 @@ export const EXECUTOR_REGISTRY = [
         id: "intent_equivalence_executor",
         kind: "host_delegation",
         obligation_ids: ["intent_equivalence_current"],
+        produces: [],
     },
     {
         // Item B consent surfacing is a FOLD-LEVEL pause on this executor (see
@@ -34,11 +87,53 @@ export const EXECUTOR_REGISTRY = [
         id: "external_analyzer_acquisition_executor",
         kind: "deterministic",
         obligation_ids: ["external_analyzers_current"],
+        produces: [
+            {
+                artifact: "external_analyzer_acquisition.json",
+                role: "primary",
+            },
+            {
+                artifact: "external_analyzer_results.json",
+                role: "refresh",
+                note: "upserts each tool's normalized findings, and declares the artifact ONLY when a tool actually contributed, so an unchanged results array never churns its downstreams",
+            },
+        ],
     },
     {
         id: "structure_executor",
         kind: "deterministic",
         obligation_ids: ["structure_artifacts"],
+        produces: [
+            {
+                artifact: "critical_flows.json",
+                role: "primary",
+                note: "merges the persisted critical-flow-fallback.json when one exists",
+            },
+            {
+                artifact: "file_disposition.json",
+                role: "refresh",
+            },
+            {
+                artifact: "git_history.json",
+                role: "primary",
+            },
+            {
+                artifact: "graph_bundle.json",
+                role: "primary",
+            },
+            {
+                artifact: "risk_register.json",
+                role: "primary",
+            },
+            {
+                artifact: "surface_manifest.json",
+                role: "primary",
+            },
+            {
+                artifact: "unit_manifest.json",
+                role: "primary",
+            },
+        ],
     },
     {
         // Critical-flow LLM fallback. host_delegation (NON-DRAINABLE): when the
@@ -49,26 +144,62 @@ export const EXECUTOR_REGISTRY = [
         id: "critical_flow_fallback_executor",
         kind: "host_delegation",
         obligation_ids: ["critical_flow_fallback_current"],
+        produces: [
+            {
+                artifact: "critical-flow-fallback.json",
+                role: "primary",
+                note: "durable host input the structure phase merges on the next fold",
+            },
+        ],
     },
     {
         id: "graph_enrichment_executor",
         kind: "deterministic",
         obligation_ids: ["graph_enrichment_current"],
+        produces: [
+            {
+                artifact: "analyzer_capability.json",
+                role: "primary",
+            },
+            {
+                artifact: "graph_bundle.json",
+                role: "refresh",
+                note: "merges analyzer edges",
+            },
+        ],
     },
     {
         id: "design_assessment_executor",
         kind: "deterministic",
         obligation_ids: ["design_assessment_current"],
+        produces: [
+            {
+                artifact: "design_assessment.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "structure_decomposition_executor",
         kind: "deterministic",
         obligation_ids: ["structure_decomposition_current"],
+        produces: [
+            {
+                artifact: "structure_decomposition.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "docs_digest_executor",
         kind: "deterministic",
         obligation_ids: ["docs_digest_current"],
+        produces: [
+            {
+                artifact: "docs_digest.json",
+                role: "primary",
+            },
+        ],
     },
     {
         // Phase C charter extraction. host_delegation: at a deep+ ceiling it emits an
@@ -78,6 +209,12 @@ export const EXECUTOR_REGISTRY = [
         id: "charter_extraction_executor",
         kind: "host_delegation",
         obligation_ids: ["charter_extraction_current"],
+        produces: [
+            {
+                artifact: "charter_register.json",
+                role: "primary",
+            },
+        ],
     },
     {
         // Phase C.2 delta-mining, mirrors charter_extraction. host_delegation: at a
@@ -88,16 +225,37 @@ export const EXECUTOR_REGISTRY = [
         id: "charter_delta_executor",
         kind: "host_delegation",
         obligation_ids: ["charter_delta_current"],
+        produces: [
+            {
+                artifact: "charter_register.json",
+                role: "refresh",
+                note: "settles the register's pending deltas",
+            },
+        ],
     },
     {
         id: "design_review_contract",
         kind: "host_delegation",
         obligation_ids: ["design_review_contract_completed"],
+        produces: [
+            {
+                artifact: "design_assessment.json",
+                role: "refresh",
+                note: "merges the consumed pass verdict at the CLI ingestion site",
+            },
+        ],
     },
     {
         id: "design_review_conceptual",
         kind: "host_delegation",
         obligation_ids: ["design_review_conceptual_completed"],
+        produces: [
+            {
+                artifact: "design_assessment.json",
+                role: "refresh",
+                note: "merges the consumed pass verdict at the CLI ingestion site",
+            },
+        ],
     },
     {
         // Phase D charter-clarification triangulation loop. host_delegation (NON-
@@ -108,6 +266,12 @@ export const EXECUTOR_REGISTRY = [
         id: "charter_clarification_executor",
         kind: "host_delegation",
         obligation_ids: ["charter_clarification_current"],
+        produces: [
+            {
+                artifact: "charter_clarification.json",
+                role: "primary",
+            },
+        ],
     },
     {
         // Phase E systemic improvement-seeking challenge loop. host_delegation (NON-
@@ -118,21 +282,130 @@ export const EXECUTOR_REGISTRY = [
         id: "systemic_challenge_executor",
         kind: "host_delegation",
         obligation_ids: ["systemic_challenge_current"],
+        produces: [
+            {
+                artifact: "systemic_challenge.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "planning_executor",
         kind: "deterministic",
         obligation_ids: ["planning_artifacts"],
+        produces: [
+            {
+                artifact: "audit_plan_metrics.json",
+                role: "primary",
+            },
+            {
+                artifact: "audit_tasks.json",
+                role: "primary",
+            },
+            {
+                artifact: "coverage_matrix.json",
+                role: "primary",
+            },
+            {
+                artifact: "flow_coverage.json",
+                role: "primary",
+            },
+            {
+                artifact: "requeue_tasks.json",
+                role: "primary",
+            },
+            {
+                artifact: "runtime_validation_report.json",
+                role: "refresh",
+                note: "when runtime-validation tasks exist",
+            },
+            {
+                artifact: "runtime_validation_tasks.json",
+                role: "primary",
+            },
+            {
+                artifact: "scope.json",
+                role: "primary",
+            },
+            {
+                artifact: "task_affinity_graph.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "result_ingestion_executor",
         kind: "deterministic",
         obligation_ids: ["audit_results_ingested"],
+        produces: [
+            {
+                artifact: "access_memory.json",
+                role: "primary",
+            },
+            {
+                artifact: "audit_plan_metrics.json",
+                role: "refresh",
+            },
+            {
+                artifact: "audit_results.jsonl",
+                role: "primary",
+                note: "appends validated results returned through semantic_review_executor",
+            },
+            {
+                artifact: "audit_tasks.json",
+                role: "refresh",
+            },
+            {
+                artifact: "coverage_matrix.json",
+                role: "refresh",
+            },
+            {
+                artifact: "flow_coverage.json",
+                role: "refresh",
+            },
+            {
+                artifact: "requeue_tasks.json",
+                role: "refresh",
+            },
+            {
+                artifact: "runtime_validation_report.json",
+                role: "refresh",
+            },
+            {
+                artifact: "runtime_validation_tasks.json",
+                role: "refresh",
+            },
+            {
+                artifact: "task_affinity_graph.json",
+                role: "refresh",
+            },
+        ],
     },
     {
         id: "runtime_validation_executor",
         kind: "deterministic",
         obligation_ids: ["runtime_validation_current"],
+        produces: [
+            {
+                artifact: "audit_plan_metrics.json",
+                role: "refresh",
+                note: "selective deepening",
+            },
+            {
+                artifact: "audit_tasks.json",
+                role: "refresh",
+                note: "selective deepening",
+            },
+            {
+                artifact: "runtime_validation_report.json",
+                role: "primary",
+            },
+            {
+                artifact: "task_affinity_graph.json",
+                role: "refresh",
+                note: "selective deepening",
+            },
+        ],
     },
     {
         // No obligation_ids: dispatched only via an explicit preferredExecutor
@@ -140,16 +413,64 @@ export const EXECUTOR_REGISTRY = [
         id: "runtime_validation_update_executor",
         kind: "deterministic",
         obligation_ids: [],
+        produces: [
+            {
+                artifact: "audit_plan_metrics.json",
+                role: "refresh",
+                note: "selective deepening; preferredExecutor only",
+            },
+            {
+                artifact: "audit_tasks.json",
+                role: "refresh",
+                note: "selective deepening; preferredExecutor only",
+            },
+            {
+                artifact: "runtime_validation_report.json",
+                role: "refresh",
+                note: "preferredExecutor only",
+            },
+            {
+                artifact: "task_affinity_graph.json",
+                role: "refresh",
+                note: "selective deepening; preferredExecutor only",
+            },
+        ],
     },
     {
         id: "synthesis_executor",
         kind: "deterministic",
         obligation_ids: ["synthesis_current"],
+        produces: [
+            {
+                artifact: "audit-findings.json",
+                role: "primary",
+            },
+            {
+                artifact: "audit-report.md",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "synthesis_narrative_executor",
         kind: "host_delegation",
         obligation_ids: ["synthesis_narrative_current"],
+        produces: [
+            {
+                artifact: "audit-findings.json",
+                role: "refresh",
+                note: "re-render with the narrative",
+            },
+            {
+                artifact: "audit-report.md",
+                role: "refresh",
+                note: "re-render with the narrative",
+            },
+            {
+                artifact: "synthesis-narrative.json",
+                role: "primary",
+            },
+        ],
     },
     {
         // No obligation_ids: dispatched only via an explicit preferredExecutor
@@ -157,26 +478,57 @@ export const EXECUTOR_REGISTRY = [
         id: "external_analyzer_import_executor",
         kind: "deterministic",
         obligation_ids: [],
+        produces: [
+            {
+                artifact: "external_analyzer_results.json",
+                role: "refresh",
+                note: "preferredExecutor only",
+            },
+        ],
     },
     {
         id: "auto_fix_executor",
         kind: "deterministic",
         obligation_ids: ["auto_fixes_applied"],
+        produces: [
+            {
+                artifact: "auto_fixes_applied.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "syntax_resolution_executor",
         kind: "deterministic",
         obligation_ids: ["syntax_resolved"],
+        produces: [
+            {
+                artifact: "external_analyzer_results.json",
+                role: "primary",
+            },
+            {
+                artifact: "syntax_resolution_status.json",
+                role: "primary",
+            },
+        ],
     },
     {
         id: "semantic_review_executor",
         kind: "host_delegation",
         obligation_ids: ["audit_tasks_completed"],
+        produces: [],
     },
     {
         id: "friction_capture_executor",
         kind: "deterministic",
         obligation_ids: ["friction_capture_current"],
+        produces: [
+            {
+                artifact: "friction/run.json",
+                role: "side_channel",
+                note: "run-scoped friction ledger under the run directory rather than a bundle artifact; it has no DAG dependents",
+            },
+        ],
     },
 ];
 // O(1) lookup indexes over the registry, built once at module load. Uniqueness

package/dist/audit/orchestrator/executors.js.map

@@ -1 +1 @@
-{"version":3,"file":"executors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/executors.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,OAAO,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,iBAAiB,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;KACtD;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,2BAA2B,CAAC;KAC9C;IACD;QACE,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;KAC/C;IACD;QACE,uEAAuE;QACvE,4EAA4E;QAC5E,6EAA6E;QAC7E,sCAAsC;QACtC,EAAE,EAAE,wCAAwC;QAC5C,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,4BAA4B,CAAC;KAC/C;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,qBAAqB,CAAC;KACxC;IACD;QACE,wEAAwE;QACxE,+EAA+E;QAC/E,8EAA8E;QAC9E,wEAAwE;QACxE,gFAAgF;QAChF,EAAE,EAAE,iCAAiC;QACrC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,gCAAgC,CAAC;KACnD;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,0BAA0B,CAAC;KAC7C;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,2BAA2B,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,iCAAiC,CAAC;KACpD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,qBAAqB,CAAC;KACxC;IACD;QACE,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,kCAAkC;QAClC,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;KAC/C;IACD;QACE,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,8CAA8C;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,uBAAuB,CAAC;KAC1C;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,kCAAkC,CAAC;KACrD;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,oCAAoC,CAAC;KACvD;IACD;QACE,0EAA0E;QAC1E,yEAAyE;QACzE,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,EAAE,EAAE,gCAAgC;QACpC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,+BAA+B,CAAC;KAClD;IACD;QACE,6EAA6E;QAC7E,wEAAwE;QACxE,0EAA0E;QAC1E,+EAA+E;QAC/E,sDAAsD;QACtD,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;KAC/C;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,oBAAoB,CAAC;KACvC;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,wBAAwB,CAAC;KAC3C;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,4BAA4B,CAAC;KAC/C;IACD;QACE,uEAAuE;QACvE,+EAA+E;QAC/E,EAAE,EAAE,oCAAoC;QACxC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,EAAE;KACnB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,mBAAmB,CAAC;KACtC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,6BAA6B,CAAC;KAChD;IACD;QACE,uEAAuE;QACvE,+EAA+E;QAC/E,EAAE,EAAE,mCAAmC;QACvC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,EAAE;KACnB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,oBAAoB,CAAC;KACvC;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,iBAAiB,CAAC;KACpC;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,uBAAuB,CAAC;KAC1C;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,0BAA0B,CAAC;KAC7C;CACF,CAAC;AAEF,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAChF,mBAAmB;AACnB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GACjC,IAAI,GAAG,CACL,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAC/C,CACF,CAAC"}
+{"version":3,"file":"executors.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/executors.ts"],"names":[],"mappings":"AAsDA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE;QACE,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,6BAA6B;QACrC,MAAM,EACJ,qHAAqH;KACxH;IACD;QACE,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,kDAAkD;QAC1D,MAAM,EACJ,iFAAiF;KACpF;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,MAAM,EAAE,kDAAkD;QAC1D,MAAM,EAAE,wEAAwE;KACjF;IACD;QACE,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,2DAA2D;QACnE,MAAM,EAAE,0EAA0E;KACnF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,OAAO,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,iBAAiB,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACrD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,uBAAuB;gBACjC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,cAAc;gBACpB,IAAI,EACF,+JAA+J;aAClK;SACF;KACF;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,2BAA2B,CAAC;QAC7C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,wBAAwB;gBAClC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,4EAA4E;aAC/E;SACF;KACF;IACD;QACE,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,QAAQ,EAAE,EAAE;KACb;IACD;QACE,uEAAuE;QACvE,4EAA4E;QAC5E,6EAA6E;QAC7E,sCAAsC;QACtC,EAAE,EAAE,wCAAwC;QAC5C,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,oCAAoC;gBAC9C,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,sKAAsK;aACzK;SACF;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,qBAAqB,CAAC;QACvC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,kEAAkE;aACrE;YACD;gBACE,QAAQ,EAAE,uBAAuB;gBACjC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,mBAAmB;gBAC7B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,uBAAuB;gBACjC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,wEAAwE;QACxE,+EAA+E;QAC/E,8EAA8E;QAC9E,wEAAwE;QACxE,gFAAgF;QAChF,EAAE,EAAE,iCAAiC;QACrC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,gCAAgC,CAAC;QAClD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,6BAA6B;gBACvC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,gEAAgE;aACnE;SACF;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,0BAA0B,CAAC;QAC5C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,mBAAmB;gBAC7B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,uBAAuB;aAC1B;SACF;KACF;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,2BAA2B,CAAC;QAC7C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,wBAAwB;gBAClC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,iCAAiC,CAAC;QACnD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,8BAA8B;gBACxC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,qBAAqB,CAAC;QACvC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,kCAAkC;QAClC,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,uBAAuB;gBACjC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,8CAA8C;QAC9C,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,uBAAuB,CAAC;QACzC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,uBAAuB;gBACjC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,uCAAuC;aAC1C;SACF;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,kCAAkC,CAAC;QACpD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,wBAAwB;gBAClC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,4DAA4D;aAC/D;SACF;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,oCAAoC,CAAC;QACtD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,wBAAwB;gBAClC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,4DAA4D;aAC/D;SACF;KACF;IACD;QACE,0EAA0E;QAC1E,yEAAyE;QACzE,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,EAAE,EAAE,gCAAgC;QACpC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,+BAA+B,CAAC;QACjD,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,4BAA4B;gBACtC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,6EAA6E;QAC7E,wEAAwE;QACxE,0EAA0E;QAC1E,+EAA+E;QAC/E,sDAAsD;QACtD,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,oBAAoB,CAAC;QACtC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,sBAAsB;gBAChC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,qCAAqC;aACxC;YACD;gBACE,QAAQ,EAAE,+BAA+B;gBACzC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,wBAAwB,CAAC;QAC1C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,qEAAqE;aACxE;YACD;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,sBAAsB;gBAChC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,oBAAoB;gBAC9B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,+BAA+B;gBACzC,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,qBAAqB;aACxB;YACD;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,qBAAqB;aACxB;YACD;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,qBAAqB;aACxB;SACF;KACF;IACD;QACE,uEAAuE;QACvE,+EAA+E;QAC/E,EAAE,EAAE,oCAAoC;QACxC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,6CAA6C;aAChD;YACD;gBACE,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,6CAA6C;aAChD;YACD;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,wBAAwB;aAC3B;YACD;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,6CAA6C;aAChD;SACF;KACF;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,mBAAmB,CAAC;QACrC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,iBAAiB;gBAC3B,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,6BAA6B,CAAC;QAC/C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,8BAA8B;aACjC;YACD;gBACE,QAAQ,EAAE,iBAAiB;gBAC3B,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,8BAA8B;aACjC;YACD;gBACE,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,uEAAuE;QACvE,+EAA+E;QAC/E,EAAE,EAAE,mCAAmC;QACvC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;gBACf,IAAI,EACF,wBAAwB;aAC3B;SACF;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,oBAAoB,CAAC;QACtC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,gCAAgC;gBAC1C,IAAI,EAAE,SAAS;aAChB;YACD;gBACE,QAAQ,EAAE,+BAA+B;gBACzC,IAAI,EAAE,SAAS;aAChB;SACF;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,iBAAiB;QACvB,cAAc,EAAE,CAAC,uBAAuB,CAAC;QACzC,QAAQ,EAAE,EAAE;KACb;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,eAAe;QACrB,cAAc,EAAE,CAAC,0BAA0B,CAAC;QAC5C,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,mBAAmB;gBAC7B,IAAI,EAAE,cAAc;gBACpB,IAAI,EACF,4GAA4G;aAC/G;SACF;KACF;CACF,CAAC;AAEF,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAChF,mBAAmB;AACnB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GACjC,IAAI,GAAG,CACL,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAC/C,CACF,CAAC"}

package/dist/audit/orchestrator/hostInputPause.d.ts

@@ -1,5 +1,5 @@
 import type { ArtifactBundle } from "../io/artifacts.js";
-import type { AnalyzerSetting, GraphEdge } from "audit-tools/shared";
+import type { AnalyzerConsentTokenGrant, AnalyzerSetting, GraphEdge } from "audit-tools/shared";
 import type { AnalyzerPlanEntry } from "../extractors/analyzers/types.js";
 import { EXTERNAL_ANALYZER_CANDIDATES } from "audit-tools/shared";
 /**
@@ -20,8 +20,15 @@ export interface HostInputPauseInputs {
     externalAcquisitionEnabled?: boolean;
     /** Item B: recorded per-candidate consent decisions (session config). */
     analyzerConsent?: Record<string, "granted" | "declined">;
-    /** Item B: a per-run token admits everything this run — nothing is owed an offer. */
-    acquisitionConsentToken?: string;
+    /**
+     * Item B: a per-run, tool-SCOPED consent grant. Typed as the
+     * {@link AnalyzerConsentTokenGrant} shape — never a bare string — so the
+     * scoped consent-fold below can ask exactly which candidates the grant names:
+     * a candidate outside the grant's `tools` is still owed its offer. A bare
+     * string would read as "admits everything", which is precisely the unscoped
+     * path this type retires.
+     */
+    acquisitionConsentToken?: AnalyzerConsentTokenGrant;
 }
 /**
  * The undecided analyzer-install entries the graph-enrichment step still owes the
@@ -34,14 +41,16 @@ export interface HostInputPauseInputs {
 export declare function graphEnrichmentUnresolvedAnalyzers(bundle: ArtifactBundle, inputs: HostInputPauseInputs): AnalyzerPlanEntry[];
 /**
  * Item B (consent surfacing): the consent-gated analyzer candidates that are
- * APPLICABLE to this repo and have NO recorded decision — the set the operator
- * is still owed a batched offer on. The SINGLE source of the analyzer-consent
- * fold, consumed by BOTH the `next-step` fold (which relays the list as the
- * offer step) and the drain stop predicate (which halts before the acquisition
- * executor would silently skip them — the silent-fail-closed defect the
- * mechanical-analyzer-layer program exists to fix). Nothing is owed when
- * acquisition is off, a per-run token admits everything, or a candidate has a
- * recorded decision (declined is never re-offered) / `skip` setting.
+ * APPLICABLE to this repo and have NO recorded decision AND are not admitted by
+ * this run's consent grant — the set the operator is still owed a batched offer
+ * on. The SINGLE source of the analyzer-consent fold, consumed by BOTH the
+ * `next-step` fold (which relays the list as the offer step) and the drain stop
+ * predicate (which halts before the acquisition executor would silently skip
+ * them — the silent-fail-closed defect the mechanical-analyzer-layer program
+ * exists to fix). Nothing is owed when acquisition is off, the candidate has a
+ * recorded decision (declined is never re-offered), the setting is `skip`, or
+ * THIS RUN's grant names the candidate. A grant that does not name a candidate
+ * leaves it owed — scope is honored per candidate, never widened to the run.
  */
 export declare function pendingAnalyzerConsent(inputs: HostInputPauseInputs): typeof EXTERNAL_ANALYZER_CANDIDATES;
 /**

package/dist/audit/orchestrator/hostInputPause.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostInputPause.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/hostInputPause.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAU1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uFAAuF;IACvF,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACzD,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,oBAAoB,GAC3B,iBAAiB,EAAE,CAarB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,4BAA4B,CAgBrC;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,oBAAoB,GAC3B,SAAS,EAAE,CAGb;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,MAAM,GAAE,oBAAyB,GAChC,OAAO,CAgBT;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EACxC,MAAM,GAAE,oBAAyB,GAChC,OAAO,CAMT"}
+{"version":3,"file":"hostInputPause.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/hostInputPause.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EACV,yBAAyB,EACzB,eAAe,EACf,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAU1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uFAAuF;IACvF,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,oBAAoB,GAC3B,iBAAiB,EAAE,CAarB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,4BAA4B,CAoBrC;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,oBAAoB,GAC3B,SAAS,EAAE,CAGb;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,MAAM,GAAE,oBAAyB,GAChC,OAAO,CAgBT;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EACxC,MAAM,GAAE,oBAAyB,GAChC,OAAO,CAMT"}

package/dist/audit/orchestrator/hostInputPause.js

@@ -23,21 +23,24 @@ export function graphEnrichmentUnresolvedAnalyzers(bundle, inputs) {
 }
 /**
  * Item B (consent surfacing): the consent-gated analyzer candidates that are
- * APPLICABLE to this repo and have NO recorded decision — the set the operator
- * is still owed a batched offer on. The SINGLE source of the analyzer-consent
- * fold, consumed by BOTH the `next-step` fold (which relays the list as the
- * offer step) and the drain stop predicate (which halts before the acquisition
- * executor would silently skip them — the silent-fail-closed defect the
- * mechanical-analyzer-layer program exists to fix). Nothing is owed when
- * acquisition is off, a per-run token admits everything, or a candidate has a
- * recorded decision (declined is never re-offered) / `skip` setting.
+ * APPLICABLE to this repo and have NO recorded decision AND are not admitted by
+ * this run's consent grant — the set the operator is still owed a batched offer
+ * on. The SINGLE source of the analyzer-consent fold, consumed by BOTH the
+ * `next-step` fold (which relays the list as the offer step) and the drain stop
+ * predicate (which halts before the acquisition executor would silently skip
+ * them — the silent-fail-closed defect the mechanical-analyzer-layer program
+ * exists to fix). Nothing is owed when acquisition is off, the candidate has a
+ * recorded decision (declined is never re-offered), the setting is `skip`, or
+ * THIS RUN's grant names the candidate. A grant that does not name a candidate
+ * leaves it owed — scope is honored per candidate, never widened to the run.
  */
 export function pendingAnalyzerConsent(inputs) {
     if (inputs.externalAcquisitionEnabled !== true || !inputs.root)
         return [];
-    if (inputs.acquisitionConsentToken && inputs.acquisitionConsentToken.trim().length > 0) {
-        return [];
-    }
+    const grant = inputs.acquisitionConsentToken;
+    const grantedTools = grant && grant.value.trim().length > 0 && Array.isArray(grant.tools)
+        ? new Set(grant.tools)
+        : undefined;
     const root = inputs.root;
     return EXTERNAL_ANALYZER_CANDIDATES.filter((candidate) => {
         if (candidate.defaultRun)
@@ -46,6 +49,9 @@ export function pendingAnalyzerConsent(inputs) {
             return false;
         if (inputs.analyzerConsent?.[candidate.id] !== undefined)
             return false;
+        // Scoped: only a grant that names THIS candidate suppresses its offer.
+        if (grantedTools?.has(candidate.id))
+            return false;
         try {
             return candidate.detect(root);
         }

package/dist/audit/orchestrator/hostInputPause.js.map

@@ -1 +1 @@
-{"version":3,"file":"hostInputPause.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/hostInputPause.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAwBlE;;;;;;;GAOG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAAsB,EACtB,MAA4B;IAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI,GAAG,CACR,eAAe,CACb,MAAM,CAAC,aAAa,EACpB,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAC7C,CAAC,MAAM,EAAE,CACX;KACF,CAAC;IACF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAC7E,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA4B;IAE5B,IAAI,MAAM,CAAC,0BAA0B,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1E,IAAI,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACvD,IAAI,SAAS,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAAsB,EACtB,MAA4B;IAE5B,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7E,OAAO,yBAAyB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,SAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,wBAAwB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QAC7C,IAAI,kCAAkC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,IAAI,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAChF,CAAC;IACD,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,QAAQ,KAAK,wCAAwC,EAAE,CAAC;QAC1D,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAsB,EACtB,SAAwC,EACxC,SAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"hostInputPause.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/hostInputPause.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AA+BlE;;;;;;;GAOG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAAsB,EACtB,MAA4B;IAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI,GAAG,CACR,eAAe,CACb,MAAM,CAAC,aAAa,EACpB,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAC7C,CAAC,MAAM,EAAE,CACX;KACF,CAAC;IACF,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAC7E,oBAAoB,CACrB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA4B;IAE5B,IAAI,MAAM,CAAC,0BAA0B,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,CAAC;IAC7C,MAAM,YAAY,GAChB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAClE,CAAC,CAAC,IAAI,GAAG,CAAS,KAAK,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACvD,IAAI,SAAS,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvE,uEAAuE;QACvE,IAAI,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAAsB,EACtB,MAA4B;IAE5B,IAAI,MAAM,CAAC,qBAAqB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7E,OAAO,yBAAyB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,SAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,wBAAwB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QAC7C,IAAI,kCAAkC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,IAAI,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAChF,CAAC;IACD,iFAAiF;IACjF,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,QAAQ,KAAK,wCAAwC,EAAE,CAAC;QAC1D,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAsB,EACtB,SAAwC,EACxC,SAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC"}