audit-tools 0.50.13 → 0.50.15

package/dist/audit/orchestrator.js

@@ -1,60 +0,0 @@
-import { coerceJsonObjectArg, isRecord } from "audit-tools/shared";
-function assertStringArray(value, label) {
-    if (!Array.isArray(value) || value.some((item) => typeof item !== "string")) {
-        throw new TypeError(`${label} must be an array of strings.`);
-    }
-}
-function assertUnitManifest(value) {
-    if (!isRecord(value) || !Array.isArray(value.units)) {
-        throw new TypeError("buildAuditTasks requires unitManifest.units to be an array.");
-    }
-    value.units.forEach((unit, index) => {
-        const label = `unitManifest.units[${index}]`;
-        if (!isRecord(unit)) {
-            throw new TypeError(`${label} must be an object.`);
-        }
-        if (typeof unit.unit_id !== "string" || unit.unit_id.length === 0) {
-            throw new TypeError(`${label}.unit_id must be a non-empty string.`);
-        }
-        if (typeof unit.name !== "string" || unit.name.length === 0) {
-            throw new TypeError(`${label}.name must be a non-empty string.`);
-        }
-        assertStringArray(unit.files, `${label}.files`);
-        assertStringArray(unit.required_lenses, `${label}.required_lenses`);
-    });
-}
-function normalizedOptions(rawOptions) {
-    const options = coerceJsonObjectArg(rawOptions, "buildAuditTasks options");
-    if (options.pass_prefix !== undefined && typeof options.pass_prefix !== "string") {
-        throw new TypeError("buildAuditTasks options.pass_prefix must be a string.");
-    }
-    if (options.limit_lenses !== undefined) {
-        assertStringArray(options.limit_lenses, "buildAuditTasks options.limit_lenses");
-    }
-    return {
-        passPrefix: options.pass_prefix ?? "pass",
-        allowed: options.limit_lenses ? new Set(options.limit_lenses) : null,
-    };
-}
-export function buildAuditTasks(unitManifest, options = {}) {
-    assertUnitManifest(unitManifest);
-    const { allowed, passPrefix } = normalizedOptions(options);
-    const tasks = [];
-    for (const unit of unitManifest.units) {
-        for (const lens of unit.required_lenses) {
-            if (allowed && !allowed.has(lens)) {
-                continue;
-            }
-            tasks.push({
-                task_id: `${unit.unit_id}:${lens}`,
-                unit_id: unit.unit_id,
-                pass_id: `${passPrefix}:${lens}`,
-                lens,
-                file_paths: unit.files,
-                rationale: `Audit ${unit.name} under the ${lens} lens.`,
-            });
-        }
-    }
-    return tasks;
-}
-//# sourceMappingURL=orchestrator.js.map

package/dist/audit/orchestrator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/audit/orchestrator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAWnE,SAAS,iBAAiB,CACxB,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,sBAAsB,KAAK,GAAG,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;QACnE,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QAChD,iBAAiB,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,KAAK,kBAAkB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAmB;IAI5C,MAAM,OAAO,GAAG,mBAAmB,CACjC,UAA0D,EAC1D,yBAAyB,CAC1B,CAAC;IAEF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,sCAAsC,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM;QACzC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAwB,CAAC,CAAC,CAAC,CAAC,IAAI;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAA0B,EAC1B,UAAqC,EAAE;IAEvC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE;gBAClC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,GAAG,UAAU,IAAI,IAAI,EAAE;gBAChC,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,KAAK;gBACtB,SAAS,EAAE,SAAS,IAAI,CAAC,IAAI,cAAc,IAAI,QAAQ;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/reporting/findingRanks.d.ts

@@ -1,2 +0,0 @@
-export { severityRank, confidenceRank, severityCompare } from "audit-tools/shared";
-//# sourceMappingURL=findingRanks.d.ts.map

package/dist/audit/reporting/findingRanks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"findingRanks.d.ts","sourceRoot":"","sources":["../../../src/audit/reporting/findingRanks.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/audit/reporting/findingRanks.js

@@ -1,7 +0,0 @@
-// Severity / confidence ranking is single-sourced in audit-tools/shared
-// (derived from the canonical SEVERITIES/CONFIDENCES tuples so it can never
-// drift). This module re-exports the shared functions under the existing import
-// path so the auditor's reporting code (workBlocks, mergeFindings) keeps working
-// without each package hand-copying a rank table.
-export { severityRank, confidenceRank, severityCompare } from "audit-tools/shared";
-//# sourceMappingURL=findingRanks.js.map

package/dist/audit/reporting/findingRanks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"findingRanks.js","sourceRoot":"","sources":["../../../src/audit/reporting/findingRanks.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,kDAAkD;AAClD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/audit/types/workerResult.d.ts

@@ -1,14 +0,0 @@
-export type WorkerResultStatus = "completed" | "blocked" | "failed" | "no_progress";
-export interface WorkerResult {
-    contract_version: "audit-code-worker-result/v1alpha1";
-    run_id: string;
-    obligation_id: string | null;
-    status: WorkerResultStatus;
-    progress_made: boolean;
-    selected_executor: string | null;
-    artifacts_written: string[];
-    summary: string;
-    next_likely_step: string | null;
-    errors: string[];
-}
-//# sourceMappingURL=workerResult.d.ts.map

package/dist/audit/types/workerResult.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workerResult.d.ts","sourceRoot":"","sources":["../../../src/audit/types/workerResult.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,SAAS,GACT,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,mCAAmC,CAAC;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}

package/dist/audit/types/workerResult.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=workerResult.js.map

package/dist/audit/types/workerResult.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workerResult.js","sourceRoot":"","sources":["../../../src/audit/types/workerResult.ts"],"names":[],"mappings":""}

package/dist/audit/validation/anchorGrounding.d.ts

@@ -1,59 +0,0 @@
-/**
- * Executable-anchor grounding for behavior claims (S7 tier-2).
- *
- * Tier-1 (quoteGrounding) proves a finding *cites code that exists*. It cannot
- * prove a *behavior* claim — "there is a cycle", "this symbol is unused", "this
- * throws". Those are exactly the claims that shipped as **not real** in the
- * 452-self-audit (a hallucinated cycle, two const-compare mistakes), caught only
- * by deterministically re-running `madge`/`grep`. Tier-2 attaches a read-only
- * command to such a claim, the tool runs it, and the confirmed bit is the tool's
- * run — never the model's word. A refuting run quarantines the finding.
- *
- * SAFETY. The command is model-authored, so it runs only when both its
- * executable AND its arguments pass the shared **default-deny allowlist**
- * (`isAllowedAnchorCommand` — CRIT ARC-a06a3945: validates args, not just the
- * executable, so `rg --pre`, `ast-grep --rewrite`, non-read-only git, etc. are
- * refused). It runs under a timeout, with the host-signalling env stripped, and
- * never via a shell — all owned by the shared `runAllowlistedReadOnlyCommand`
- * runner. Anything off the allowlist is *skipped* (recorded, not run) and the
- * finding falls back to tier-1 grounding. The whole pass can be disabled with
- * `AUDIT_CODE_DISABLE_ANCHORS=1`; the per-anchor timeout (60s default) can be
- * raised with `AUDIT_CODE_ANCHOR_TIMEOUT_MS` for slow checks on large repos.
- */
-import { ANCHOR_ALLOWLIST, GIT_READONLY_SUBCOMMANDS, isAllowedAnchorCommand } from "audit-tools/shared";
-import type { AllowlistedExecRunner, Finding, FindingGrounding } from "audit-tools/shared";
-export { isAllowedAnchorCommand, ANCHOR_ALLOWLIST, GIT_READONLY_SUBCOMMANDS };
-/** Default per-anchor wall-clock budget; a slower command is killed and inconclusive. */
-export declare const ANCHOR_TIMEOUT_MS = 60000;
-/**
- * The effective per-anchor timeout. The 60s default suits the common anchors
- * (madge/grep/rg/git) but a legitimately slow check on a large repo would be
- * silently killed → `inconclusive`; `AUDIT_CODE_ANCHOR_TIMEOUT_MS` (a positive
- * integer in ms) lets an operator raise it per run without code changes. Read
- * per-call to mirror `AUDIT_CODE_DISABLE_ANCHORS` (no import-time capture).
- */
-export declare function resolveAnchorTimeoutMs(env?: NodeJS.ProcessEnv): number;
-export type AnchorRunner = AllowlistedExecRunner;
-/** Verdict of an anchor run, folded into the finding's grounding by the caller. */
-export interface AnchorResult {
-    status: "confirmed" | "refuted" | "inconclusive" | "skipped";
-    summary: string;
-    /** Last lines of the command output, for display. */
-    evidence?: string[];
-}
-/**
- * Run a finding's executable anchor (if any) and return the verdict. Pure of any
- * finding mutation — the caller folds the result into `grounding` via
- * {@link combineGroundingWithAnchor}. Returns `undefined` when the finding has
- * no anchor (nothing to run).
- */
-export declare function verifyFindingAnchor(repoRoot: string, finding: Finding, run?: AnchorRunner): Promise<AnchorResult | undefined>;
-/**
- * Fold an anchor verdict into the quote-and-verify (tier-1) grounding. A
- * confirming run grounds the finding (a verified behavior claim outranks a
- * missing quote); a refuting run quarantines it (the cited code may exist, but
- * the behavior claim is false); an inconclusive/skipped/absent anchor leaves the
- * tier-1 verdict in place.
- */
-export declare function combineGroundingWithAnchor(tier1: FindingGrounding, anchor: AnchorResult | undefined): FindingGrounding;
-//# sourceMappingURL=anchorGrounding.d.ts.map

package/dist/audit/validation/anchorGrounding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anchorGrounding.d.ts","sourceRoot":"","sources":["../../../src/audit/validation/anchorGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAEL,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EAGvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,qBAAqB,EAGrB,OAAO,EACP,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;AAE9E,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,QAA8B,CAAC;AAE7D;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAED,MAAM,MAAM,YAAY,GAAG,qBAAqB,CAAC;AASjD,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,cAAc,GAAG,SAAS,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAsDD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,GAAE,YAAkC,GACtC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA6EnC;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,gBAAgB,CAalB"}

package/dist/audit/validation/anchorGrounding.js

@@ -1,187 +0,0 @@
-/**
- * Executable-anchor grounding for behavior claims (S7 tier-2).
- *
- * Tier-1 (quoteGrounding) proves a finding *cites code that exists*. It cannot
- * prove a *behavior* claim — "there is a cycle", "this symbol is unused", "this
- * throws". Those are exactly the claims that shipped as **not real** in the
- * 452-self-audit (a hallucinated cycle, two const-compare mistakes), caught only
- * by deterministically re-running `madge`/`grep`. Tier-2 attaches a read-only
- * command to such a claim, the tool runs it, and the confirmed bit is the tool's
- * run — never the model's word. A refuting run quarantines the finding.
- *
- * SAFETY. The command is model-authored, so it runs only when both its
- * executable AND its arguments pass the shared **default-deny allowlist**
- * (`isAllowedAnchorCommand` — CRIT ARC-a06a3945: validates args, not just the
- * executable, so `rg --pre`, `ast-grep --rewrite`, non-read-only git, etc. are
- * refused). It runs under a timeout, with the host-signalling env stripped, and
- * never via a shell — all owned by the shared `runAllowlistedReadOnlyCommand`
- * runner. Anything off the allowlist is *skipped* (recorded, not run) and the
- * finding falls back to tier-1 grounding. The whole pass can be disabled with
- * `AUDIT_CODE_DISABLE_ANCHORS=1`; the per-anchor timeout (60s default) can be
- * raised with `AUDIT_CODE_ANCHOR_TIMEOUT_MS` for slow checks on large repos.
- */
-import { ALLOWLISTED_EXEC_TIMEOUT_MS, ANCHOR_ALLOWLIST, GIT_READONLY_SUBCOMMANDS, isAllowedAnchorCommand, normalizeForMatch, runAllowlistedReadOnlyCommand, } from "audit-tools/shared";
-// Re-export the allowlist authority so existing audit-code import sites
-// (`../validation/anchorGrounding.js`) keep working — the implementation is now
-// single-sourced in shared (drift-plan E2; CRIT arg-validation).
-export { isAllowedAnchorCommand, ANCHOR_ALLOWLIST, GIT_READONLY_SUBCOMMANDS };
-/** Default per-anchor wall-clock budget; a slower command is killed and inconclusive. */
-export const ANCHOR_TIMEOUT_MS = ALLOWLISTED_EXEC_TIMEOUT_MS;
-/**
- * The effective per-anchor timeout. The 60s default suits the common anchors
- * (madge/grep/rg/git) but a legitimately slow check on a large repo would be
- * silently killed → `inconclusive`; `AUDIT_CODE_ANCHOR_TIMEOUT_MS` (a positive
- * integer in ms) lets an operator raise it per run without code changes. Read
- * per-call to mirror `AUDIT_CODE_DISABLE_ANCHORS` (no import-time capture).
- */
-export function resolveAnchorTimeoutMs(env = process.env) {
-    const override = Number(env.AUDIT_CODE_ANCHOR_TIMEOUT_MS);
-    return Number.isFinite(override) && override > 0 ? override : ANCHOR_TIMEOUT_MS;
-}
-/**
- * The single read-only command runner for anchor verification — the shared
- * allowlisted runner (argv-only, env-stripped, timeout-killed). Exposed under
- * the local name so injected test runners and callers are unchanged.
- */
-const defaultAnchorRunner = runAllowlistedReadOnlyCommand;
-function tailEvidence(output) {
-    const lines = output.trim().length > 0 ? output.trim().split(/\r?\n/) : [];
-    if (lines.length <= 10)
-        return lines;
-    return [
-        `[... truncated: showing last 10 of ${lines.length} lines ...]`,
-        ...lines.slice(-10),
-    ];
-}
-function truncate(text, max = 80) {
-    return text.length > max ? `${text.slice(0, max)}…` : text;
-}
-/**
- * Evaluate whether the run satisfies the declared confirm_if condition. Returns
- * `null` when the condition is malformed (output_* with no text), so the caller
- * records the anchor inconclusive rather than guessing a polarity.
- */
-function evaluateExpectation(expectation, exitCode, output) {
-    switch (expectation.kind) {
-        case "exit_zero":
-            return {
-                confirmed: exitCode === 0,
-                detail: `command exited ${exitCode} (confirmed iff exit 0)`,
-            };
-        case "exit_nonzero":
-            return {
-                confirmed: exitCode !== null && exitCode !== 0,
-                detail: `command exited ${exitCode} (confirmed iff non-zero exit)`,
-            };
-        case "output_includes":
-        case "output_excludes": {
-            if (typeof expectation.text !== "string" || expectation.text.trim() === "") {
-                return null;
-            }
-            const present = normalizeForMatch(output).includes(normalizeForMatch(expectation.text));
-            const confirmed = expectation.kind === "output_includes" ? present : !present;
-            return {
-                confirmed,
-                detail: `output ${present ? "contains" : "does not contain"} "${truncate(expectation.text)}"`,
-            };
-        }
-    }
-}
-/**
- * Run a finding's executable anchor (if any) and return the verdict. Pure of any
- * finding mutation — the caller folds the result into `grounding` via
- * {@link combineGroundingWithAnchor}. Returns `undefined` when the finding has
- * no anchor (nothing to run).
- */
-export async function verifyFindingAnchor(repoRoot, finding, run = defaultAnchorRunner) {
-    const anchor = finding.executable_anchor;
-    if (!anchor ||
-        !Array.isArray(anchor.command) ||
-        anchor.command.length === 0 ||
-        !anchor.confirm_if) {
-        return undefined;
-    }
-    if (process.env.AUDIT_CODE_DISABLE_ANCHORS === "1") {
-        return {
-            status: "skipped",
-            summary: "executable-anchor verification disabled (AUDIT_CODE_DISABLE_ANCHORS=1)",
-        };
-    }
-    if (!isAllowedAnchorCommand(anchor.command)) {
-        return {
-            status: "skipped",
-            summary: `\`${anchor.command.join(" ")}\` is not on the inspection-only anchor allowlist (executable or arguments refused); not auto-run`,
-        };
-    }
-    const timeoutMs = resolveAnchorTimeoutMs();
-    const outcome = await run(anchor.command, repoRoot, timeoutMs);
-    const display = anchor.command.join(" ");
-    if (outcome.spawn_error) {
-        return {
-            status: "inconclusive",
-            summary: `could not run anchor \`${display}\`: ${outcome.spawn_error}`,
-            evidence: tailEvidence(outcome.output),
-        };
-    }
-    if (outcome.timed_out) {
-        return {
-            status: "inconclusive",
-            summary: `anchor \`${display}\` timed out after ${timeoutMs}ms`,
-            evidence: tailEvidence(outcome.output),
-        };
-    }
-    // Truncated output is checked BEFORE evaluateExpectation, and only matters
-    // for the two output-matching kinds — exit_zero/exit_nonzero read exitCode,
-    // never `output`, so a chatty-but-truncated run cannot corrupt an exit-code
-    // verdict. For output_includes/output_excludes, a truncated capture must
-    // never let absence-in-the-captured-prefix decide the verdict in EITHER
-    // direction (a missing "includes" match may be sitting in the dropped tail;
-    // a missing "excludes" match may be too) — so the outcome is inconclusive
-    // regardless of what the truncated prefix happened to contain.
-    if (outcome.truncated &&
-        (anchor.confirm_if.kind === "output_includes" ||
-            anchor.confirm_if.kind === "output_excludes")) {
-        return {
-            status: "inconclusive",
-            summary: `anchor \`${display}\` output was truncated at the capture cap before ${anchor.confirm_if.kind} could be evaluated — cannot confirm or refute from a partial capture`,
-            evidence: tailEvidence(outcome.output),
-        };
-    }
-    const verdict = evaluateExpectation(anchor.confirm_if, outcome.exit_code, outcome.output);
-    if (verdict === null) {
-        return {
-            status: "inconclusive",
-            summary: `malformed anchor: ${anchor.confirm_if.kind} requires a non-empty \`text\``,
-            evidence: tailEvidence(outcome.output),
-        };
-    }
-    return {
-        status: verdict.confirmed ? "confirmed" : "refuted",
-        summary: `${verdict.confirmed ? "confirmed" : "REFUTED"} by \`${display}\` — ${verdict.detail}`,
-        evidence: tailEvidence(outcome.output),
-    };
-}
-/**
- * Fold an anchor verdict into the quote-and-verify (tier-1) grounding. A
- * confirming run grounds the finding (a verified behavior claim outranks a
- * missing quote); a refuting run quarantines it (the cited code may exist, but
- * the behavior claim is false); an inconclusive/skipped/absent anchor leaves the
- * tier-1 verdict in place.
- */
-export function combineGroundingWithAnchor(tier1, anchor) {
-    if (!anchor)
-        return tier1;
-    if (anchor.status === "confirmed")
-        return { status: "grounded" };
-    if (anchor.status === "refuted") {
-        // A refuting run DISPROVED the claim — distinct from tier-1 `ungrounded`
-        // ("couldn't verify"). It is quarantined-EXCLUDED at synthesis, not merely
-        // surfaced, so it can never merge as actionable fact.
-        return {
-            status: "refuted",
-            reason: `executable anchor refuted the claim: ${anchor.summary}`,
-        };
-    }
-    return tier1;
-}
-//# sourceMappingURL=anchorGrounding.js.map

package/dist/audit/validation/anchorGrounding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anchorGrounding.js","sourceRoot":"","sources":["../../../src/audit/validation/anchorGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAS5B,wEAAwE;AACxE,gFAAgF;AAChF,iEAAiE;AACjE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;AAE9E,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAClF,CAAC;AAID;;;;GAIG;AACH,MAAM,mBAAmB,GAAiB,6BAA6B,CAAC;AAUxE,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO;QACL,sCAAsC,KAAK,CAAC,MAAM,aAAa;QAC/D,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAG,GAAG,EAAE;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,WAA8B,EAC9B,QAAuB,EACvB,MAAc;IAEd,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,WAAW;YACd,OAAO;gBACL,SAAS,EAAE,QAAQ,KAAK,CAAC;gBACzB,MAAM,EAAE,kBAAkB,QAAQ,yBAAyB;aAC5D,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,SAAS,EAAE,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAC;gBAC9C,MAAM,EAAE,kBAAkB,QAAQ,gCAAgC;aACnE,CAAC;QACJ,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAChD,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,CACpC,CAAC;YACF,MAAM,SAAS,GACb,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO;gBACL,SAAS;gBACT,MAAM,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,KAAK,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG;aAC9F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAAgB,EAChB,MAAoB,mBAAmB;IAEvC,MAAM,MAAM,GAAiC,OAAO,CAAC,iBAAiB,CAAC;IACvE,IACE,CAAC,MAAM;QACP,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,MAAM,CAAC,UAAU,EAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wEAAwE;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,mGAAmG;SAC1I,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,0BAA0B,OAAO,OAAO,OAAO,CAAC,WAAW,EAAE;YACtE,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,YAAY,OAAO,sBAAsB,SAAS,IAAI;YAC/D,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;SACvC,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,+DAA+D;IAC/D,IACE,OAAO,CAAC,SAAS;QACjB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,iBAAiB;YAC3C,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAC/C,CAAC;QACD,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,YAAY,OAAO,qDAAqD,MAAM,CAAC,UAAU,CAAC,IAAI,uEAAuE;YAC9K,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CACjC,MAAM,CAAC,UAAU,EACjB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,CACf,CAAC;IACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,qBAAqB,MAAM,CAAC,UAAU,CAAC,IAAI,gCAAgC;YACpF,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;SACvC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnD,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,SAAS,OAAO,QAAQ,OAAO,CAAC,MAAM,EAAE;QAC/F,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAuB,EACvB,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,yEAAyE;QACzE,2EAA2E;QAC3E,sDAAsD;QACtD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,wCAAwC,MAAM,CAAC,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/validation/quoteGrounding.d.ts

@@ -1,18 +0,0 @@
-/**
- * Quote-and-verify grounding for audit findings (S7 anti-hallucination).
- *
- * The primitives now live in `audit-tools/shared`
- * (`shared/src/validation/findingGrounding.ts`) so the auditor, the conceptual-
- * review grounding, and the remediator all consume ONE implementation rather
- * than each carrying a copy (drift-plan E3 + P7). This module re-exports them so
- * the existing `../validation/quoteGrounding.js` import sites are unchanged.
- *
- * The safeguard is attached to the *claim*: every finding cites a verbatim span
- * (`affected_files[].quoted_text`); the tool re-reads that span from disk and
- * content-matches it (whitespace/CRLF-normalized, matched on content not line
- * numbers). The confirmed bit is the tool's re-check, never the model's word; a
- * finding whose quote does not re-verify (or that carries no quote) is
- * `ungrounded` — surfaced, never silently admitted as a confirmed finding.
- */
-export { normalizeForMatch, quoteMatches, verifyFindingGrounding, type SourceReader, } from "audit-tools/shared";
-//# sourceMappingURL=quoteGrounding.d.ts.map

package/dist/audit/validation/quoteGrounding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"quoteGrounding.d.ts","sourceRoot":"","sources":["../../../src/audit/validation/quoteGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC"}

package/dist/audit/validation/quoteGrounding.js

@@ -1,18 +0,0 @@
-/**
- * Quote-and-verify grounding for audit findings (S7 anti-hallucination).
- *
- * The primitives now live in `audit-tools/shared`
- * (`shared/src/validation/findingGrounding.ts`) so the auditor, the conceptual-
- * review grounding, and the remediator all consume ONE implementation rather
- * than each carrying a copy (drift-plan E3 + P7). This module re-exports them so
- * the existing `../validation/quoteGrounding.js` import sites are unchanged.
- *
- * The safeguard is attached to the *claim*: every finding cites a verbatim span
- * (`affected_files[].quoted_text`); the tool re-reads that span from disk and
- * content-matches it (whitespace/CRLF-normalized, matched on content not line
- * numbers). The confirmed bit is the tool's re-check, never the model's word; a
- * finding whose quote does not re-verify (or that carries no quote) is
- * `ungrounded` — surfaced, never silently admitted as a confirmed finding.
- */
-export { normalizeForMatch, quoteMatches, verifyFindingGrounding, } from "audit-tools/shared";
-//# sourceMappingURL=quoteGrounding.js.map

package/dist/audit/validation/quoteGrounding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"quoteGrounding.js","sourceRoot":"","sources":["../../../src/audit/validation/quoteGrounding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,GAEvB,MAAM,oBAAoB,CAAC"}

package/dist/remediate/state/accessMemory.d.ts

@@ -1,53 +0,0 @@
-import type { AccessMemory } from "audit-tools/shared";
-import type { RemediationState } from "./store.js";
-import type { RemediationBlock } from "./types.js";
-/**
- * Remediate-side parity of the audit access-memory harvest (context-efficiency
- * track, increment 2c): populate `access_memory.edited_count` from the files
- * remediation landed edits on, so continuity works in both orchestrators.
- *
- * Attribution is per-ITEM and restricted to `resolved` items — the only status
- * that lands an actual diff. `resolved_no_change` (verified but zero diff), skips
- * (`ignored`/`deemed_inappropriate`) and `blocked` items edit nothing and are
- * excluded. Each resolved item's edited surface is its block's `touched_files`.
- * This is the
- * DECLARED edit surface, not a live git diff: it's the only CUMULATIVE,
- * git-independent source (worktree branches for earlier waves are already
- * merged/gone), and the ownership-disjoint scheduler + post-merge attribution hold
- * an item to that surface, so declared ≈ actual by construction. Re-derived fresh
- * from state each merge (no read-modify-write, no double-count, idempotent).
- *
- * Recency lives in STEP-ORDINAL space, never wall-clock: blocks are ordered
- * deterministically by `(phase_ordinal, block_id)` — the foundations→consumers
- * execution order — and an item's ordinal is its block's index in that order.
- * `total_ordinals` is the full block count, so recency (`last_ordinal /
- * total_ordinals`) is stable as more blocks complete. Pure + deterministic: same
- * state → byte-identical record.
- */
-export declare function deriveRemediationAccessMemory(state: RemediationState): AccessMemory;
-/**
- * Read the remediation `access_memory.json` (written at the artifacts root by the
- * merge — see {@link deriveRemediationAccessMemory}) back for the continuity
- * consumer. Absent (first dispatch pass, before any merge) OR malformed ⇒
- * `undefined` = no bias, matching the scorer's empty-map contract. Never throws —
- * a bad record degrades silently rather than failing dispatch (enforce-in-tooling,
- * crash-safe like the graph/extractor read path).
- */
-export declare function readRemediationAccessMemory(artifactsDir: string): Promise<AccessMemory | undefined>;
-/**
- * Remediate-side continuity CONSUMER (context-efficiency track, increment 2d) —
- * the mirror of audit's `orderReviewPackets` bias. Turns the harvested
- * `access_memory` into a per-BLOCK continuity mass that biases file-ownership
- * sub-wave admission (`ownershipSubWaves`, via `OwnershipSchedulerNode.continuity`)
- * toward blocks whose files earlier waves already touched.
- *
- * Remediate has NO dependency graph at dispatch, so the shared scorer runs in its
- * seed-only mode (`graphBundle: undefined`) — a pure recency×frequency ordering
- * (edited-weighted), which is the valid weaker signal for a graphless consumer.
- * Each block's mass is the single-sourced {@link continuityMassForPaths} reducer
- * over its declared file surface, keyed by `block_id`. Returns an empty map when
- * there is no signal yet (no/empty access-memory) ⇒ the scheduler falls back to
- * its pure `block_id` ordering, byte-identical to pre-2d.
- */
-export declare function computeBlockContinuityScores(accessMemory: AccessMemory | undefined, blocks: readonly RemediationBlock[], scopeForBlock: (block: RemediationBlock) => readonly string[]): Map<string, number>;
-//# sourceMappingURL=accessMemory.d.ts.map

package/dist/remediate/state/accessMemory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"accessMemory.d.ts","sourceRoot":"","sources":["../../../src/remediate/state/accessMemory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AASzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,gBAAgB,GACtB,YAAY,CA8Bd;AAKD;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAUnC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,aAAa,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,SAAS,MAAM,EAAE,GAC5D,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CASrB"}

package/dist/remediate/state/accessMemory.js

@@ -1,105 +0,0 @@
-import { join } from "node:path";
-import { compareCodeUnits, deriveAccessMemoryFromEvents, readOptionalJsonFile, AccessMemorySchema, computeContinuityScores, continuityMassForPaths, } from "audit-tools/shared";
-/**
- * Remediate-side parity of the audit access-memory harvest (context-efficiency
- * track, increment 2c): populate `access_memory.edited_count` from the files
- * remediation landed edits on, so continuity works in both orchestrators.
- *
- * Attribution is per-ITEM and restricted to `resolved` items — the only status
- * that lands an actual diff. `resolved_no_change` (verified but zero diff), skips
- * (`ignored`/`deemed_inappropriate`) and `blocked` items edit nothing and are
- * excluded. Each resolved item's edited surface is its block's `touched_files`.
- * This is the
- * DECLARED edit surface, not a live git diff: it's the only CUMULATIVE,
- * git-independent source (worktree branches for earlier waves are already
- * merged/gone), and the ownership-disjoint scheduler + post-merge attribution hold
- * an item to that surface, so declared ≈ actual by construction. Re-derived fresh
- * from state each merge (no read-modify-write, no double-count, idempotent).
- *
- * Recency lives in STEP-ORDINAL space, never wall-clock: blocks are ordered
- * deterministically by `(phase_ordinal, block_id)` — the foundations→consumers
- * execution order — and an item's ordinal is its block's index in that order.
- * `total_ordinals` is the full block count, so recency (`last_ordinal /
- * total_ordinals`) is stable as more blocks complete. Pure + deterministic: same
- * state → byte-identical record.
- */
-export function deriveRemediationAccessMemory(state) {
-    const blocks = [...(state.plan?.blocks ?? [])].sort((a, b) => {
-        const phaseDelta = (a.phase_ordinal ?? 0) - (b.phase_ordinal ?? 0);
-        if (phaseDelta !== 0)
-            return phaseDelta;
-        return compareCodeUnits(a.block_id, b.block_id);
-    });
-    const ordinalByBlock = new Map(blocks.map((block, index) => [block.block_id, index]));
-    const blockById = new Map(blocks.map((block) => [block.block_id, block]));
-    // Sort items by finding_id so the (already path-sorted) core sees a stable
-    // stream regardless of state.items key insertion order.
-    const items = Object.values(state.items ?? {}).sort((a, b) => compareCodeUnits(a.finding_id, b.finding_id));
-    const events = [];
-    for (const item of items) {
-        if (item.status !== "resolved")
-            continue; // only an actual diff counts as an edit
-        const ordinal = ordinalByBlock.get(item.block_id) ?? 0;
-        const surface = blockById.get(item.block_id)?.touched_files ?? [];
-        for (const path of new Set(surface)) {
-            if (!path)
-                continue;
-            events.push({ path, edited: true, ordinal });
-        }
-    }
-    return deriveAccessMemoryFromEvents(events, {
-        totalOrdinals: blocks.length,
-        runId: state.plan?.plan_id,
-    });
-}
-/** Canonical on-disk name of the per-run access-memory record (both orchestrators). */
-const ACCESS_MEMORY_FILENAME = "access_memory.json";
-/**
- * Read the remediation `access_memory.json` (written at the artifacts root by the
- * merge — see {@link deriveRemediationAccessMemory}) back for the continuity
- * consumer. Absent (first dispatch pass, before any merge) OR malformed ⇒
- * `undefined` = no bias, matching the scorer's empty-map contract. Never throws —
- * a bad record degrades silently rather than failing dispatch (enforce-in-tooling,
- * crash-safe like the graph/extractor read path).
- */
-export async function readRemediationAccessMemory(artifactsDir) {
-    let raw;
-    try {
-        raw = await readOptionalJsonFile(join(artifactsDir, ACCESS_MEMORY_FILENAME));
-    }
-    catch {
-        return undefined; // unreadable / invalid JSON → no bias
-    }
-    if (raw === undefined)
-        return undefined;
-    const parsed = AccessMemorySchema.safeParse(raw);
-    return parsed.success ? parsed.data : undefined;
-}
-/**
- * Remediate-side continuity CONSUMER (context-efficiency track, increment 2d) —
- * the mirror of audit's `orderReviewPackets` bias. Turns the harvested
- * `access_memory` into a per-BLOCK continuity mass that biases file-ownership
- * sub-wave admission (`ownershipSubWaves`, via `OwnershipSchedulerNode.continuity`)
- * toward blocks whose files earlier waves already touched.
- *
- * Remediate has NO dependency graph at dispatch, so the shared scorer runs in its
- * seed-only mode (`graphBundle: undefined`) — a pure recency×frequency ordering
- * (edited-weighted), which is the valid weaker signal for a graphless consumer.
- * Each block's mass is the single-sourced {@link continuityMassForPaths} reducer
- * over its declared file surface, keyed by `block_id`. Returns an empty map when
- * there is no signal yet (no/empty access-memory) ⇒ the scheduler falls back to
- * its pure `block_id` ordering, byte-identical to pre-2d.
- */
-export function computeBlockContinuityScores(accessMemory, blocks, scopeForBlock) {
-    const scores = computeContinuityScores(accessMemory, undefined);
-    if (scores.size === 0)
-        return new Map();
-    const byBlock = new Map();
-    for (const block of blocks) {
-        const mass = continuityMassForPaths(scopeForBlock(block), scores);
-        if (mass > 0)
-            byBlock.set(block.block_id, mass);
-    }
-    return byBlock;
-}
-//# sourceMappingURL=accessMemory.js.map

package/dist/remediate/state/accessMemory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"accessMemory.js","sourceRoot":"","sources":["../../../src/remediate/state/accessMemory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACxC,OAAO,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE1E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC3D,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAC7C,CAAC;IAEF,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS,CAAC,wCAAwC;QAClF,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,4BAA4B,CAAC,MAAM,EAAE;QAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB;IAEpB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,oBAAoB,CAAU,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,sCAAsC;IAC1D,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAsC,EACtC,MAAmC,EACnC,aAA6D;IAE7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,sBAAsB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/remediate/steps/dispatch.d.ts

@@ -1,4 +0,0 @@
-export { readExtractedPlanIfPresent } from "./dispatch/marshal.js";
-export type { CurrentRemediationHostState, PreparedRemediationHostHandoff, RemediationHostIngestSummary, RemediationHostWorkItem, RemediationHostWorkload, UnsupportedRetiredRemediationState, } from "./dispatch/hostHandoff.js";
-export { ingestRemediationHostResults, prepareRemediationHostHandoff, remediationHostResultFilePath, } from "./dispatch/hostHandoff.js";
-//# sourceMappingURL=dispatch.d.ts.map

package/dist/remediate/steps/dispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/dispatch.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGnE,YAAY,EACV,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC"}

package/dist/remediate/steps/dispatch.js

@@ -1,12 +0,0 @@
-// ---------------------------------------------------------------------------
-// dispatch.ts — thin barrel
-//
-// The implementation was split into cohesive sibling modules under
-// `./dispatch/` (CP-NODE-7). This file re-exports the modules' public surface so
-// consumers that import from `steps/dispatch.js` keep working unchanged. New
-// code may import directly from the submodules; the barrel is the aggregate.
-// ---------------------------------------------------------------------------
-// --- planning-pipeline handoff reader ---
-export { readExtractedPlanIfPresent } from "./dispatch/marshal.js";
-export { ingestRemediationHostResults, prepareRemediationHostHandoff, remediationHostResultFilePath, } from "./dispatch/hostHandoff.js";
-//# sourceMappingURL=dispatch.js.map

package/dist/remediate/steps/dispatch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/remediate/steps/dispatch.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,mEAAmE;AACnE,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAE9E,2CAA2C;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAWnE,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC"}