audit-tools 0.51.0 → 0.51.2

package/dist/shared/types/charterPacket.d.ts

@@ -33,14 +33,18 @@ export declare const EVIDENCE_CLASSES: readonly EvidenceClass[];
  * top-level declarations used to appear in neither the delivered nor the omitted
  * list, so `delivered + omitted === named` could not be reconciled at all.
  *
- * EVERY value here has a producer, and a contract test pins that. There is no
- * `per_file_cap`: `PER_FILE_CHARS` is a delivery CLAMP, not an omission cause —
- * a candidate it truncates is DELIVERED with `truncated: true`, and one the
- * clamp leaves below `MIN_EXCERPT_CHARS` is omitted as `total_budget`. A
- * vocabulary value with no producer is a claim the data can never make, so it
- * would only ever mislead a reader of the coverage record.
+ * There are exactly TWO reasons, because the packet carries no character limit
+ * (owner, 2026-09-04): a file is either read and delivered WHOLE, or it is named
+ * here. `unreadable_or_oversized` is the read-safety guard — a file too large to
+ * read at all, recorded with its byte count — and never a budget verdict; the
+ * `total_budget` reason died with the ceiling, the per-file clamp and the
+ * allocator that produced it.
+ *
+ * EVERY value here has a producer, and a contract test pins that: a vocabulary
+ * value with no producer is a claim the data can never make, so it would only
+ * ever mislead a reader of the coverage record.
  */
-export type OmissionReason = "total_budget" | "unreadable_or_oversized" | "no_content";
+export type OmissionReason = "unreadable_or_oversized" | "no_content";
 /** One delivered source line, carrying its TRUE 1-based number in its own file. */
 export interface PacketExcerptLine {
     line: number;
@@ -69,8 +73,6 @@ export interface PacketExcerpt {
     source_path: string;
     line_runs: PacketLineRun[];
     lines: PacketExcerptLine[];
-    /** True when content existed beyond what is delivered. */
-    truncated: boolean;
     prefix_width: number;
 }
 /** Per-class delivery figures. `delivered + omitted.length === named` is an invariant. */
@@ -78,14 +80,17 @@ export interface CharterPacketCoverageClass {
     evidence_class: EvidenceClass;
     /** Every candidate file considered for this class. */
     named: number;
-    /** Excerpts delivered with at least one line. */
+    /** Excerpts delivered — in full, which is the only way they are delivered. */
     delivered: number;
-    /** Delivered but incomplete. */
-    truncated: number;
-    /** Path-sorted; every named candidate that did not make it, with its reason. */
+    /**
+     * Path-sorted; every named candidate that did not make it, with its reason.
+     * `bytes` is the file's size, stated on the read-safety omission so the record
+     * says WHY rather than leaving a reader to guess between missing and huge.
+     */
     omitted: {
         path: string;
         reason: OmissionReason;
+        bytes?: number;
     }[];
 }
 /**
@@ -99,9 +104,6 @@ export interface CharterPacketCoverage {
     kind: CharterKind;
     /** One entry per class this kind emits, sorted by canonical class order. */
     classes: CharterPacketCoverageClass[];
-    /** The content budget after packet metadata was charged against the ceiling. */
-    budget_chars: number;
-    spent_chars: number;
 }
 export declare const CHARTER_PACKET_MANIFEST_SCHEMA_VERSION = "charter-packet-manifest/v1";
 /** A manifest row: an excerpt's coordinates without its text. */
@@ -111,7 +113,6 @@ export interface CharterPacketManifestExcerpt {
     evidence_class: EvidenceClass;
     line_runs: PacketLineRun[];
     line_count: number;
-    truncated: boolean;
     prefix_width: number;
 }
 /**

package/dist/shared/types/charterPacket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"charterPacket.d.ts","sourceRoot":"","sources":["../../../src/shared/types/charterPacket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB,KAAK,GACL,SAAS,GACT,aAAa,GACb,iBAAiB,CAAC;AAEtB,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAKpD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,yBAAyB,GACzB,YAAY,CAAC;AAEjB,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,aAAa,CAAC;IAC9B,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,aAAa,CAAC;IAC9B,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,EAAE,CAAC;CACrD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,4EAA4E;IAC5E,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACtC,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,sCAAsC,+BACrB,CAAC;AAE/B,iEAAiE;AACjE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,aAAa,CAAC;IAC9B,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACzC,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;IAC/C,4BAA4B;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;CACrC"}
+{"version":3,"file":"charterPacket.d.ts","sourceRoot":"","sources":["../../../src/shared/types/charterPacket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB,KAAK,GACL,SAAS,GACT,aAAa,GACb,iBAAiB,CAAC;AAEtB,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAKpD,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,YAAY,CAAC;AAEtE,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,aAAa,CAAC;IAC9B,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,aAAa,CAAC;IAC9B,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,4EAA4E;IAC5E,OAAO,EAAE,0BAA0B,EAAE,CAAC;CACvC;AAED,eAAO,MAAM,sCAAsC,+BACrB,CAAC;AAE/B,iEAAiE;AACjE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,aAAa,CAAC;IAC9B,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,4BAA4B,EAAE,CAAC;IACzC,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;IAC/C,4BAA4B;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;CACrC"}

package/dist/shared/types/charterPacket.js.map

@@ -1 +1 @@
-{"version":3,"file":"charterPacket.js","sourceRoot":"","sources":["../../../src/shared/types/charterPacket.ts"],"names":[],"mappings":"AAiCA,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,SAAS;IACT,aAAa;IACb,KAAK;IACL,iBAAiB;CAClB,CAAC;AAoFF,MAAM,CAAC,MAAM,sCAAsC,GACjD,4BAA4B,CAAC"}
+{"version":3,"file":"charterPacket.js","sourceRoot":"","sources":["../../../src/shared/types/charterPacket.ts"],"names":[],"mappings":"AAiCA,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,SAAS;IACT,aAAa;IACb,KAAK;IACL,iBAAiB;CAClB,CAAC;AAkFF,MAAM,CAAC,MAAM,sCAAsC,GACjD,4BAA4B,CAAC"}

package/dist/shared/types/closingActions.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The closing-action vocabulary shared by the remediation plan
+ * (`candidate_closing_actions`), the closing plan (`action`), and the intent
+ * checkpoint the host confirms (`closing_action`). It lives in `src/shared`
+ * because the checkpoint schema is shared by both orchestrators and the base
+ * layer never imports an orchestrator (dependency-cruiser
+ * `shared-imports-no-orchestrator`).
+ *
+ * Order is canonical: candidate lists are emitted in this order so a rendered
+ * choice never churns.
+ */
+export declare const CLOSING_ACTIONS: readonly ["commit", "push", "open-pr", "publish", "tag", "none", "custom"];
+export type ClosingAction = (typeof CLOSING_ACTIONS)[number];
+/** True when `value` is one of the closing actions the tool knows. */
+export declare function isClosingAction(value: unknown): value is ClosingAction;
+//# sourceMappingURL=closingActions.d.ts.map

package/dist/shared/types/closingActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"closingActions.d.ts","sourceRoot":"","sources":["../../../src/shared/types/closingActions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,4EAQlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE"}

package/dist/shared/types/closingActions.js

@@ -0,0 +1,25 @@
+/**
+ * The closing-action vocabulary shared by the remediation plan
+ * (`candidate_closing_actions`), the closing plan (`action`), and the intent
+ * checkpoint the host confirms (`closing_action`). It lives in `src/shared`
+ * because the checkpoint schema is shared by both orchestrators and the base
+ * layer never imports an orchestrator (dependency-cruiser
+ * `shared-imports-no-orchestrator`).
+ *
+ * Order is canonical: candidate lists are emitted in this order so a rendered
+ * choice never churns.
+ */
+export const CLOSING_ACTIONS = [
+    "commit",
+    "push",
+    "open-pr",
+    "publish",
+    "tag",
+    "none",
+    "custom",
+];
+/** True when `value` is one of the closing actions the tool knows. */
+export function isClosingAction(value) {
+    return typeof value === "string" && CLOSING_ACTIONS.includes(value);
+}
+//# sourceMappingURL=closingActions.js.map

package/dist/shared/types/closingActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closingActions.js","sourceRoot":"","sources":["../../../src/shared/types/closingActions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,KAAK;IACL,MAAM;IACN,QAAQ;CACA,CAAC;AAIX,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,eAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7F,CAAC"}

package/dist/shared/types/intentCheckpoint.d.ts

@@ -56,6 +56,40 @@ export declare const IntentCheckpointSchema: z.ZodObject<{
         themes?: string[] | undefined;
         packages?: string[] | undefined;
     }>>;
+    /**
+     * Remediate-only: the closing action the HOST chose at confirmation, from
+     * the candidates the tool detected and presented (owner decision
+     * 92b0e2dd7cfdc06d — the tool never selects one). Absent means `none`:
+     * no closing side effect is ever inferred. audit-code ignores it.
+     */
+    closing_action: z.ZodOptional<z.ZodEnum<["commit", "push", "open-pr", "publish", "tag", "none", "custom"]>>;
+    /**
+     * Remediate-only: the argv the close phase runs when `closing_action` is
+     * `custom`. Required with `custom` (the confirm step refuses a `custom`
+     * without it) and meaningless otherwise. Host-authored: writing it is the
+     * authorization, so `custom` needs no second preview at close.
+     */
+    closing_custom_command: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * Remediate-only, draft checkpoints: the intake worker's open questions,
+     * carried into the confirmation prompt. `blocking: true` alone blocks
+     * (INV-remediate-state-06).
+     */
+    pre_draft_questions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        question: z.ZodString;
+        blocking: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        question: string;
+        blocking?: boolean | undefined;
+    }, {
+        id: string;
+        question: string;
+        blocking?: boolean | undefined;
+    }>, "many">>;
+    /** Remediate-only, draft checkpoints: how free-form intent was read. */
+    intent_interpretation: z.ZodOptional<z.ZodString>;
     /**
      * Clauses from free_form_intent that could not be encoded as lens-weight,
      * priority, or scope signals. Each entry carries the original clause text,
@@ -206,6 +240,14 @@ export declare const IntentCheckpointSchema: z.ZodObject<{
         themes?: string[] | undefined;
         packages?: string[] | undefined;
     } | undefined;
+    closing_action?: "push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none" | undefined;
+    closing_custom_command?: string[] | undefined;
+    pre_draft_questions?: {
+        id: string;
+        question: string;
+        blocking?: boolean | undefined;
+    }[] | undefined;
+    intent_interpretation?: string | undefined;
     constraint_clauses?: {
         text: string;
         checkpoint_question: string;
@@ -248,6 +290,14 @@ export declare const IntentCheckpointSchema: z.ZodObject<{
         themes?: string[] | undefined;
         packages?: string[] | undefined;
     } | undefined;
+    closing_action?: "push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none" | undefined;
+    closing_custom_command?: string[] | undefined;
+    pre_draft_questions?: {
+        id: string;
+        question: string;
+        blocking?: boolean | undefined;
+    }[] | undefined;
+    intent_interpretation?: string | undefined;
     constraint_clauses?: {
         text: string;
         checkpoint_question: string;

package/dist/shared/types/intentCheckpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intentCheckpoint.d.ts","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;IAI/B;;;;OAIG;;IAEH,yDAAyD;;IAEzD,wEAAwE;;IAExE;;;;OAIG;;IAEH,qEAAqE;;;;;;;;;;;IAIrE,gDAAgD;;IAEhD,gEAAgE;;;;;;;;;;;;;;;;;IAUhE;;;;;;OAMG;;QAKK;;;;;;;;WAQG;;QAEH,4CAA4C;;QAE5C,kEAAkE;;QAElE,kEAAkE;;;;;;;;;;;;;IAM1E;;;;;OAKG;;;;;;;;;;;;;;IAYH;;;;OAIG;;;;;;;;;;;IAQH;;;;;;;;;;OAUG;;;;QAKC;;;;;;;;;;WAUG;;;;;;;;;;;QAEH;;;;;;;;;WASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMA,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"intentCheckpoint.d.ts","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;IAI/B;;;;OAIG;;IAEH,yDAAyD;;IAEzD,wEAAwE;;IAExE;;;;OAIG;;IAEH,qEAAqE;;;;;;;;;;;IAIrE,gDAAgD;;IAEhD,gEAAgE;;;;;;;;;;;;;;;;;IAUhE;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;OAIG;;;;;;;;;;;;;;IAYH,wEAAwE;;IAExE;;;;;;OAMG;;QAKK;;;;;;;;WAQG;;QAEH,4CAA4C;;QAE5C,kEAAkE;;QAElE,kEAAkE;;;;;;;;;;;;;IAM1E;;;;;OAKG;;;;;;;;;;;;;;IAYH;;;;OAIG;;;;;;;;;;;IAQH;;;;;;;;;;OAUG;;;;QAKC;;;;;;;;;;WAUG;;;;;;;;;;;QAEH;;;;;;;;;WASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMA,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/shared/types/intentCheckpoint.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { FileDispositionStatusSchema } from "./disposition.js";
 import { CeilingSchema } from "./charter.js";
+import { CLOSING_ACTIONS } from "./closingActions.js";
 /**
  * The accepted scope and intent for a run, confirmed by the host before
  * planning. Single-sourced so both orchestrators share one shape: audit-code
@@ -45,6 +46,36 @@ export const IntentCheckpointSchema = z
     })
         .strict()
         .optional(),
+    /**
+     * Remediate-only: the closing action the HOST chose at confirmation, from
+     * the candidates the tool detected and presented (owner decision
+     * 92b0e2dd7cfdc06d — the tool never selects one). Absent means `none`:
+     * no closing side effect is ever inferred. audit-code ignores it.
+     */
+    closing_action: z.enum(CLOSING_ACTIONS).optional(),
+    /**
+     * Remediate-only: the argv the close phase runs when `closing_action` is
+     * `custom`. Required with `custom` (the confirm step refuses a `custom`
+     * without it) and meaningless otherwise. Host-authored: writing it is the
+     * authorization, so `custom` needs no second preview at close.
+     */
+    closing_custom_command: z.array(z.string().min(1)).min(1).optional(),
+    /**
+     * Remediate-only, draft checkpoints: the intake worker's open questions,
+     * carried into the confirmation prompt. `blocking: true` alone blocks
+     * (INV-remediate-state-06).
+     */
+    pre_draft_questions: z
+        .array(z
+        .object({
+        id: z.string(),
+        question: z.string(),
+        blocking: z.boolean().optional(),
+    })
+        .strict())
+        .optional(),
+    /** Remediate-only, draft checkpoints: how free-form intent was read. */
+    intent_interpretation: z.string().optional(),
     /**
      * Clauses from free_form_intent that could not be encoded as lens-weight,
      * priority, or scope signals. Each entry carries the original clause text,

package/dist/shared/types/intentCheckpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;WAUG;QACH,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC;;;;;;;;;WASG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;OAKG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAClD;;;;;OAKG;IACH,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC;SACnB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb,wEAAwE;IACxE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;WAUG;QACH,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC;;;;;;;;;WASG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}

package/docs/audit-pkg/contracts.md

@@ -18,7 +18,7 @@ The JSON contract is authoritative; Markdown is its render.
 
 ## Step artifacts
 
-`audit-code next-step` advances one bounded transition and writes:
+`audit-code next-step` advances one bounded, fold-aware drain of the deterministic frontier and writes:
 
 ```text
 <artifacts_dir>/steps/current-step.json
@@ -45,18 +45,40 @@ A companion `audit-host-result-map/v1alpha1` binds each work-item id, prompt
 digest, and result path. No backend, model, routing, quota, transport, launch
 command, or worker identity is part of either contract.
 
-The host writes `audit-host-result/v1alpha1` records. Ingestion requires exact
-top-level fields and verifies:
-
-- run id, work-item id, prompt digest, and result path against tool-owned
-  bindings
-- assigned file coverage only, with current total-line counts
-- finding and lens consistency through the normal `AuditResult` schema
-- repository containment for every artifact path
-- append-time idempotency through the accepted-results ledger
-
+The host writes `audit-host-result/v1alpha1` records. Ingestion verifies every
+result before it accepts it; the check set below is the one list, rendered from
+the registry both the audit and the remediation ingest cite on every refusal.
 Malformed, fabricated, stale, or replayed-with-different-bytes records do not
-advance the run. A byte-identical accepted replay is a no-op.
+advance the run.
+
+<!-- BEGIN GENERATED INGESTION CHECKS — scripts/shared/generate-ingestion-checks.mjs — DO NOT EDIT BY HAND -->
+
+> Rendered from `src/shared/submission/ingestionChecks.ts` — the registry both host-handoff twins cite on every
+> refusal they emit. Add a check there and this table follows; the drift test refuses a
+> row nothing cites.
+
+| Check | What must hold for the result to be accepted | Draws |
+|---|---|---|
+| `result_path` | The submission is read only from the tool-derived bound path (`<run dir>/<sha256(work item id)>.json`) inside the run's artifacts directory; a result written anywhere else is never consulted. | `audit`, `remediate` |
+| `result_json` | The bytes at the bound path parse as JSON. | `audit`, `remediate` |
+| `result_envelope` | The top-level key set is exactly the draw's result contract and `contract_version` is the version the workload was issued under. | `audit`, `remediate` |
+| `identity_binding` | `run_id` is the run that emitted the workload, `work_item_id` is the work item the result was read for, and `prompt_sha256` is the digest of the prompt that work item was issued with — an answer to another run, item or a stale prompt is refused. | `audit`, `remediate` |
+| `workload_binding` | The persisted workload, result map and task bindings still derive from this run (versions, bound paths, prompt digests, scopes); a result cannot be accepted against a binding the tool cannot re-derive. | `audit`, `remediate` |
+| `file_coverage` | `file_coverage` names exactly the assigned files, each fully reviewed, with `total_lines` equal to the line count bound at dispatch. | `audit` |
+| `findings_contract` | Every finding satisfies the audit finding contract (lens, ids, evidence shape). | `audit` |
+| `result_schema` | The bound result converts to the persisted `AuditResult` schema (`schemas/audit_result.schema.json`). | `audit` |
+| `result_validation` | The per-result content rules hold before acceptance (evidence present, line spans inside the file, line counts matching disk); warnings ride an advisory channel and never refuse. | `audit` |
+| `outcome_shape` | A decision result's `outcome` carries exactly the fields its status requires (`resolved_no_change` evidence, `blocked` failure reason, `needs_clarification` question). | `remediate` |
+| `write_scope` | `changed_files` is non-empty, sorted, unique and normalized, lies within the prompt-bound `allowed_files`, and equals the files the landed commit actually changed. | `remediate` |
+| `commit_evidence` | `commit_evidence` binds the workload baseline to a distinct landed commit; both exist, the baseline is an ancestor of the landed commit (waived only under a genuinely orphaned baseline in recovery), and the landed commit is reachable from HEAD. | `remediate` |
+| `test_evidence` | `test_evidence` carries exactly one passed entry per required test echoing the bound command, and the tool's own mechanical rerun of those tests passes. | `remediate` |
+| `obligation_evidence` | `obligation_evidence` cites non-empty evidence for every prompt-bound obligation, none twice, and none the work item does not bind. | `remediate` |
+| `worktree_evidence` | `worktree_evidence` binds the workload baseline and the same changed-file list, and no landed file overlaps dirt that pre-dated the run. | `remediate` |
+| `landing_attestation` | `acceptance` and `merge` both attest a completed landing. | `remediate` |
+| `no_change_corroboration` | A `resolved_no_change` claim is corroborated against git and the persisted write-scope binding; attestation-only acceptance is refused. | `remediate` |
+| `duplicate_result` | `result_id` has not already been accepted this run: a byte-identical replay is a no-op, a different body under an accepted id is refused. | `audit`, `remediate` |
+
+<!-- END GENERATED INGESTION CHECKS -->
 
 Per-result audit-results validation runs at acceptance, before the accepted
 pair is written: a failing result is classified-rejected (warnings ride a

package/docs/audit-pkg/operator-guide.md

@@ -42,10 +42,10 @@ Each `next-step` invocation writes:
 ```
 
 Follow only the returned prompt. A review handoff also writes a versioned host
-workload and result-map path under `.audit-tools/audit/`. Result ingestion checks
-the run id, work-item id, prompt digest, expected file coverage, and strict
-result schema before state advances. Replaying an already accepted result is a
-no-op.
+workload and result-map path under `.audit-tools/audit/`. Result ingestion binds
+every result to its run, work item and prompt and verifies it before state
+advances; the full check set is the generated block in
+[`contracts.md`](contracts.md). Replaying an already accepted result is a no-op.
 
 There are no provider, model, routing, quota, context-window, worker-command, or
 headless-launch settings in audit-tools. Parallelism and concrete execution
@@ -86,9 +86,12 @@ pair it cannot validate, records each removal so a repaired run stays
 distinguishable from a clean one, invalidates the persisted step contract, and
 the next `next-step` re-reads the bound result files for the dropped items.
 
-`audit-code cleanup` removes `.audit-tools/audit/` only when the persisted run
-is complete or not started. Active or blocked runs are refused unless the
-operator explicitly supplies `--force`. A directory with no `audit_state.json`
+`audit-code cleanup` removes `.audit-tools/audit/` only when nothing in the
+directory is still owed to the host: the persisted run is `not_started`, or it
+is `complete` and every artifact promotion archives is already one level up.
+Active or blocked runs are refused, and so is a complete run whose report is not
+fully promoted — that directory holds the only copy. All three refusals are
+waived by `--force`. A directory with no `audit_state.json`
 marker is refused whether or not `--force` is supplied: `--force` waives the
 evidence about a run's STATUS, never the evidence about its IDENTITY, and the
 verb will not delete a directory it cannot prove is an audit run. `--dry-run`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.51.0",
+  "version": "0.51.2",
   "private": false,
   "license": "ISC",
   "description": "Provider-neutral code auditing and remediation workflows for arbitrary repositories.",
@@ -51,11 +51,14 @@
     "test": "npm run build && node scripts/shared/run-vitest-gate.mjs",
     "test:single": "npm run build && node scripts/shared/run-vitest-gate.mjs",
     "verify:guards": "node scripts/shared/run-vitest-gate.mjs --retry=2 --exclude \"**/audit-code-completion-*.test.ts\" --exclude \"**/audit-code-wrapper-*.test.ts\" --exclude \"**/audit/next-step-core-*.test.ts\" --exclude \"**/seam-host-only-next-step.test.ts\" --exclude \"**/*-e2e.test.*\" --exclude \"**/next-step-implement-dispatch.test.ts\" --exclude \"**/next-step-pipeline-dispatch.test.ts\"",
-    "verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:control-bytes check:shared-primitives check:version-gates check:guard-reach check:ci-trigger-paths check:loop-core-patterns check:loop-core-closure check:constitutional-doc-paths check:runtime-artifact-names check:friction-categories check:executor-producers check:spec-mirrors check:cli-surface check:deadcode check:orphan-modules check:lint check:dup check:depgraph check:doc-manifest check:doc-links check:doc-code-citations check:gate-enumeration check:philosophy-brief check:readme-sample-report check:proposal-red-at check:handoff-roadmap check:backlog-index check:memory-citations check:backlog-budget check:backlog-status check:backlog-line-numbers check:tests build check:scripts verify:hosts verify:remediate-hosts pack:smoke smoke:packaged-audit-code smoke:packaged-remediate-code",
+    "verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:control-bytes check:shared-primitives check:version-gates check:guard-reach check:generated-artifacts check:invariant-glossary check:nightly-inbox check:ci-trigger-paths check:loop-core-patterns check:loop-core-closure check:constitutional-doc-paths check:runtime-artifact-names check:friction-categories check:executor-producers check:spec-mirrors check:cli-surface check:ingestion-checks check:deadcode check:orphan-modules check:lint check:dup check:depgraph check:doc-manifest check:doc-links check:doc-code-citations check:gate-enumeration check:philosophy-brief check:readme-sample-report check:proposal-red-at check:handoff-roadmap check:backlog-index check:memory-citations check:backlog-budget check:backlog-status check:backlog-line-numbers check:tests build check:scripts verify:hosts verify:remediate-hosts pack:smoke smoke:packaged-audit-code smoke:packaged-remediate-code",
     "verify:release": "npm run verify:checks && node scripts/shared/run-vitest-gate.mjs && npm run smoke:linked-audit-code && npm run smoke:linked-remediate-code",
     "check:control-bytes": "node scripts/check-control-bytes.mjs",
     "check:shared-primitives": "node scripts/check-shared-primitives.mjs",
     "check:guard-reach": "node scripts/check-guard-reach.mjs",
+    "check:generated-artifacts": "node scripts/check-generated-artifacts.mjs",
+    "check:invariant-glossary": "node scripts/check-invariant-glossary.mjs",
+    "check:nightly-inbox": "node scripts/nightly/render-inbox.mjs --check",
     "closeout": "node scripts/render-closeout.mjs",
     "check:ci-trigger-paths": "node scripts/shared/generate-ci-trigger-paths.mjs --check",
     "check:deadcode": "knip --no-config-hints",
@@ -102,6 +105,7 @@
     "check:executor-producers": "node scripts/shared/generate-executor-producers.mjs --check",
     "check:spec-mirrors": "node scripts/shared/generate-spec-mirrors.mjs --check",
     "check:cli-surface": "node scripts/shared/generate-cli-surface.mjs --check",
+    "check:ingestion-checks": "node scripts/shared/generate-ingestion-checks.mjs --check",
     "generate:shard-baseline": "node scripts/shared/generate-vitest-shard-baseline.mjs",
     "check:orphan-modules": "node scripts/check-orphan-modules.mjs",
     "check:loop-core-closure": "node scripts/check-loop-core-closure.mjs"

package/scripts/postinstall.mjs

@@ -8,9 +8,20 @@
 // corrupts the other's, and surface a non-zero exit if EITHER reports a failure
 // (INV-remediate-infra-08: a partial deploy must not report success).
 import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 
+const packageRoot = fileURLToPath(new URL("..", import.meta.url));
 let failed = false;
+
+// A published tarball already carries dist/. A source checkout does not, and
+// npm's postinstall runs only after dependencies are present, so this is the
+// first reliable point at which it can build the shared export. Without this
+// bootstrap a fresh checkout partially deployed host assets and skipped both
+// OpenCode config and artifact .gitignore management until a human happened to
+// rerun postinstall after the first build.
+if (!ensureSourceCheckoutBuilt()) failed = true;
+
 for (const script of ["./audit/postinstall.mjs", "./remediate/postinstall.mjs"]) {
   const scriptPath = fileURLToPath(new URL(script, import.meta.url));
   const result = spawnSync(process.execPath, [scriptPath], { stdio: "inherit", windowsHide: true });
@@ -32,6 +43,37 @@ await manageArtifactGitignore();
 
 process.exit(failed ? 1 : 0);
 
+function ensureSourceCheckoutBuilt() {
+  const sharedEntry = fileURLToPath(new URL("../dist/shared/index.js", import.meta.url));
+  if (existsSync(sharedEntry)) return true;
+
+  const sourceTree = fileURLToPath(new URL("../src", import.meta.url));
+  const tsconfig = fileURLToPath(new URL("../tsconfig.json", import.meta.url));
+  if (!existsSync(sourceTree) || !existsSync(tsconfig)) return true;
+
+  const npmCli = process.env.npm_execpath;
+  if (!npmCli) {
+    console.warn(
+      "[audit-tools] postinstall: source checkout needs a shared build, but npm_execpath is unavailable.",
+    );
+    return false;
+  }
+
+  console.log("[audit-tools] postinstall: building shared output for this source checkout...");
+  const result = spawnSync(process.execPath, [npmCli, "run", "build"], {
+    cwd: packageRoot,
+    stdio: "inherit",
+    windowsHide: true,
+  });
+  if (result.error || (result.status ?? 0) !== 0 || result.signal) {
+    console.warn(
+      `[audit-tools] postinstall: source-checkout build failed (${result.error?.message ?? result.signal ?? `exit ${result.status}`}).`,
+    );
+    return false;
+  }
+  return existsSync(sharedEntry);
+}
+
 async function manageArtifactGitignore() {
   try {
     const shared = await import("audit-tools/shared");

package/skills/audit-code/audit-code.prompt.md

@@ -48,9 +48,11 @@ confirm the host can inspect the structural graph/relationships and source
 structure required by the workload. This is a host capability check, not an
 audit-tools MCP/provider or lane-selection step. If capability is degraded but
 you proceed, record one reserved AgentReflection with task_id exactly
-`audit-capability-preflight`; use severity `high` or `critical` when material to
-claimed coverage, with concrete `tool_friction`, `ambiguities`, and `suggestions`
-details. A structurally incapable run must not be labelled comprehensive. Keep
+`audit-capability-preflight`. Every reflection requires all three of `task_id`,
+`instruction_clarity` (one of `clear`, `mostly_clear`, `ambiguous`, `unclear`)
+and `severity`; a line missing any of the three is discarded whole. Use severity
+`high` or `critical` when material to claimed coverage, with concrete
+`tool_friction`, `ambiguities`, and `suggestions` details. A structurally incapable run must not be labelled comprehensive. Keep
 the conversation-first flow and loader contract; do not add provider, routing,
 model, or machine-capability fields to audit-tools. Write the
 prompt-bound result artifacts exactly where requested and let the next backend

package/dist/remediate/state/closingActions.d.ts

@@ -1,3 +0,0 @@
-export declare const CLOSING_ACTIONS: readonly ["commit", "push", "open-pr", "publish", "tag", "none", "custom"];
-export type ClosingAction = (typeof CLOSING_ACTIONS)[number];
-//# sourceMappingURL=closingActions.d.ts.map

package/dist/remediate/state/closingActions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"closingActions.d.ts","sourceRoot":"","sources":["../../../src/remediate/state/closingActions.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,4EAQlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/remediate/state/closingActions.js

@@ -1,10 +0,0 @@
-export const CLOSING_ACTIONS = [
-    "commit",
-    "push",
-    "open-pr",
-    "publish",
-    "tag",
-    "none",
-    "custom",
-];
-//# sourceMappingURL=closingActions.js.map

package/dist/remediate/state/closingActions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"closingActions.js","sourceRoot":"","sources":["../../../src/remediate/state/closingActions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,KAAK;IACL,MAAM;IACN,QAAQ;CACA,CAAC"}