audit-tools 0.51.1 → 0.51.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/audit/cli/confirmIntentStep.d.ts +1 -1
- package/dist/audit/cli/confirmIntentStep.d.ts.map +1 -1
- package/dist/audit/cli/confirmIntentStep.js +9 -7
- package/dist/audit/cli/confirmIntentStep.js.map +1 -1
- package/dist/shared/submission/submissionClassifier.d.ts.map +1 -1
- package/dist/shared/submission/submissionClassifier.js +6 -1
- package/dist/shared/submission/submissionClassifier.js.map +1 -1
- package/package.json +5 -2
- package/scripts/postinstall.mjs +42 -0
|
@@ -4,7 +4,7 @@ import type { ScopePreDigest } from "../orchestrator/intentCheckpointExecutor.js
|
|
|
4
4
|
* bounded/cheap requests stay shallow. This is a proposal only: confirmation
|
|
5
5
|
* remains the authority and may choose either option on every run.
|
|
6
6
|
*/
|
|
7
|
-
export declare function proposeConceptualDepth(intentSummary?: string, freeFormIntent?: string): "shallow" | "deep";
|
|
7
|
+
export declare function proposeConceptualDepth(intentSummary?: string, freeFormIntent?: string, scopeMode?: ScopePreDigest["mode"]): "shallow" | "deep";
|
|
8
8
|
/**
|
|
9
9
|
* Render the host-facing prompt for the `confirm_intent` step. Shows the
|
|
10
10
|
* deterministically-computed scope picture and asks the host to write (or
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"confirmIntentStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/confirmIntentStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,6CAA6C,CAAC;AAYzG;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,CAAC,EAAE,MAAM,EACtB,cAAc,CAAC,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"confirmIntentStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/confirmIntentStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAyB,MAAM,6CAA6C,CAAC;AAYzG;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,CAAC,EAAE,MAAM,EACtB,cAAc,CAAC,EAAE,MAAM,EACvB,SAAS,GAAE,cAAc,CAAC,MAAM,CAAU,GACzC,SAAS,GAAG,MAAM,CAUpB;AA0BD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,cAAc,EACzB,IAAI,EAAE;IACJ,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,MAAM,CA4PR"}
|
|
@@ -14,14 +14,16 @@ const RENDERED_EXCERPT_CHARS = 500;
|
|
|
14
14
|
* bounded/cheap requests stay shallow. This is a proposal only: confirmation
|
|
15
15
|
* remains the authority and may choose either option on every run.
|
|
16
16
|
*/
|
|
17
|
-
export function proposeConceptualDepth(intentSummary, freeFormIntent) {
|
|
17
|
+
export function proposeConceptualDepth(intentSummary, freeFormIntent, scopeMode = "full") {
|
|
18
18
|
const text = `${intentSummary ?? ""} ${freeFormIntent ?? ""}`.toLowerCase();
|
|
19
19
|
if (/\b(?:src|lib|test|tests|app|packages?)\/[\w./-]+\b|\bnamed files?\b|\btightly scoped\b|\b(?:the )?(?:api layer|authentication module|subsystem|module)\b/.test(text))
|
|
20
20
|
return "shallow";
|
|
21
21
|
if (/\b(quick|brief|low[- ]?cost|cheap|named[- ]file|specific file|tightly scoped|single file|targeted)\b/.test(text)) {
|
|
22
22
|
return "shallow";
|
|
23
23
|
}
|
|
24
|
-
|
|
24
|
+
if (scopeMode === "full" && text.trim().length === 0)
|
|
25
|
+
return "deep";
|
|
26
|
+
return /\b(?:full|complete)[- ](?:audit|review|repository|codebase|repo|project)\b|\bcomprehensive\b|\b(?:repository|codebase)[- ]wide audit\b|\bwhole[- ](?:repository|codebase|repo)\b|\bentire (?:repository|codebase|project)\b/.test(text)
|
|
25
27
|
? "deep"
|
|
26
28
|
: "shallow";
|
|
27
29
|
}
|
|
@@ -92,7 +94,7 @@ export function renderConfirmIntentPrompt(preDigest, opts) {
|
|
|
92
94
|
const mandatoryLensList = MANDATORY_LENSES.join(", ");
|
|
93
95
|
const unresolvedClauses = opts.unresolvedConstraintClauses ?? [];
|
|
94
96
|
const hasBlockingClauses = unresolvedClauses.length > 0;
|
|
95
|
-
const proposedDepth = proposeConceptualDepth(opts.intentSummary, opts.freeFormIntent);
|
|
97
|
+
const proposedDepth = proposeConceptualDepth(opts.intentSummary, opts.freeFormIntent, preDigest.mode);
|
|
96
98
|
return [
|
|
97
99
|
`# Confirm Audit Scope and Intent\n\nConceptual review depth proposed for this intent: **${proposedDepth}**. Confirm or change it; this choice is fresh for each run.`,
|
|
98
100
|
"",
|
|
@@ -211,7 +213,7 @@ export function renderConfirmIntentPrompt(preDigest, opts) {
|
|
|
211
213
|
"The audit runs a conceptual design-review pass (philosophy / alternatives /",
|
|
212
214
|
"better directions, distinct from the contract pass). Choose its depth:",
|
|
213
215
|
"",
|
|
214
|
-
"- **shallow**
|
|
216
|
+
"- **shallow** — a single conceptual reviewer. Faster, cheaper.",
|
|
215
217
|
`- **deep** — fan out ${DEFAULT_CONCEPTUAL_PERSPECTIVES} independent reviewers, each with a maximally`,
|
|
216
218
|
" dissimilar value system, then compile via an independent judge. Surfaces more,",
|
|
217
219
|
" costs more. The default perspectives are:",
|
|
@@ -233,7 +235,7 @@ export function renderConfirmIntentPrompt(preDigest, opts) {
|
|
|
233
235
|
" recommend-include / recommend-exclude). Do NOT re-confirm or even mention the",
|
|
234
236
|
" mandatory lenses — they are always on. The user may add **any number** of",
|
|
235
237
|
" additional custom lenses (freeform names).",
|
|
236
|
-
|
|
238
|
+
`3. Ask the conceptual design-review depth (proposed **${proposedDepth}** for this intent). The choice is fresh each run and remains the user's confirmation.`,
|
|
237
239
|
"4. Wait for the user to confirm before proceeding.",
|
|
238
240
|
"",
|
|
239
241
|
"Record the result in `lens_selection`: optional + custom lenses the user wants",
|
|
@@ -280,12 +282,12 @@ export function renderConfirmIntentPrompt(preDigest, opts) {
|
|
|
280
282
|
"- `lens_selection.include` and `lens_selection.exclude` accept both canonical",
|
|
281
283
|
" and custom lens names. Custom lenses generate tasks using the unit's files",
|
|
282
284
|
" with context derived from the lens name and `free_form_intent`.",
|
|
283
|
-
"- `design_review.conceptual_depth` is `shallow` (default) or `deep`; on `deep`,",
|
|
285
|
+
"- `design_review.conceptual_depth` is `shallow` (schema default) or `deep`; on `deep`,",
|
|
284
286
|
" `perspectives` bounds the parallel-reviewer fan-out. Omit for shallow.",
|
|
285
287
|
"- Leave the optional fields out to audit the full discovered scope.",
|
|
286
288
|
"",
|
|
287
289
|
`Then run: ${opts.continueCommand}`,
|
|
288
290
|
"",
|
|
289
|
-
].join("\n").replace(
|
|
291
|
+
].join("\n").replace('"design_review": { "conceptual_depth": "shallow", "perspectives": 5 }', `"design_review": { "conceptual_depth": "${proposedDepth}", "perspectives": 5 }`);
|
|
290
292
|
}
|
|
291
293
|
//# sourceMappingURL=confirmIntentStep.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"confirmIntentStep.js","sourceRoot":"","sources":["../../../src/audit/cli/confirmIntentStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAG/C,SAAS,eAAe,CAAC,GAAuC;IAC9D,OAAO,QAAQ,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;AACrD,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAAsB,EACtB,cAAuB;
|
|
1
|
+
{"version":3,"file":"confirmIntentStep.js","sourceRoot":"","sources":["../../../src/audit/cli/confirmIntentStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAG/C,SAAS,eAAe,CAAC,GAAuC;IAC9D,OAAO,QAAQ,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;AACrD,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAAsB,EACtB,cAAuB,EACvB,YAAoC,MAAM;IAE1C,MAAM,IAAI,GAAG,GAAG,aAAa,IAAI,EAAE,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5E,IAAI,0JAA0J,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5L,IAAI,sGAAsG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpE,OAAO,6NAA6N,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7O,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,oBAAoB,CAAC,OAAe;IAC3C,IAAI,OAAO,CAAC,MAAM,IAAI,sBAAsB;QAAE,OAAO,OAAO,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;AAC3E,CAAC;AAED,kFAAkF;AAClF,4EAA4E;AAC5E,MAAM,iBAAiB,GAA2B;IAChD,WAAW,EAAE,wEAAwE;IACrF,YAAY,EAAE,kEAAkE;IAChF,eAAe,EAAE,uEAAuE;IACxF,QAAQ,EAAE,8EAA8E;IACxF,WAAW,EAAE,mEAAmE;IAChF,WAAW,EAAE,wEAAwE;IACrF,cAAc,EAAE,uFAAuF;IACvG,KAAK,EAAE,iFAAiF;IACxF,WAAW,EAAE,0EAA0E;IACvF,iBAAiB,EAAE,kEAAkE;IACrF,aAAa,EAAE,wEAAwE;CACxF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAyB,EACzB,IAaC;IAED,MAAM,QAAQ,GACZ,SAAS,CAAC,UAAU;SACjB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,UAAU,CAAC;SACjD,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;IAE9B,0CAA0C;IAC1C,MAAM,aAAa,GACjB,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC,gBAAgB;aACvB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,eAAe,CAAC,GAAG,CAAC;YAClB,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAC1G,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC9E;aACA,IAAI,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,UAAU,CAAC;IAEjB,wCAAwC;IACxC,MAAM,qBAAqB,GACzB,SAAS,CAAC,8BAA8B,CAAC,MAAM,GAAG,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC,8BAA8B;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,eAAe,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;aACtE,IAAI,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,UAAU,CAAC;IAEjB,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,eAAe,GAA2B;QAC9C,SAAS,EAAE,aAAa;QACxB,iBAAiB,EAAE,qBAAqB;QACxC,iBAAiB,EAAE,qBAAqB;KACzC,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAAC,iBAAiB;SAC9C,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,CAC7G;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,oBAAoB,GAAG,SAAS,CAAC,8BAA8B,CAAC,MAAM,GAAG,CAAC,CAAC;IACjF,0EAA0E;IAC1E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC;IACjE,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtG,OAAO;QACL,2FAA2F,aAAa,8DAA8D;QACtK,EAAE;QACF,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE,2CAA2C;gBAC3C,EAAE;gBACF,yEAAyE;gBACzE,oEAAoE;gBACpE,qEAAqE;gBACrE,uEAAuE;gBACvE,yEAAyE;gBACzE,8DAA8D;gBAC9D,yEAAyE;gBACzE,wEAAwE;gBACxE,sDAAsD;gBACtD,EAAE;gBACF,GAAG,iBAAiB,CAAC,GAAG,CACtB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,uBAAuB,CAAC,CAAC,SAAS,oBAAoB,CAAC,CAAC,mBAAmB,EAAE,CAC7G;gBACD,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,4EAA4E;QAC5E,8EAA8E;QAC9E,8EAA8E;QAC9E,yEAAyE;QACzE,EAAE;QACF,aAAa,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpF,uBAAuB,SAAS,CAAC,cAAc,EAAE;QACjD,EAAE;QACF,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC;gBACE,yBAAyB;gBACzB,EAAE;gBACF,yEAAyE;gBACzE,iFAAiF;gBACjF,EAAE;gBACF,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1D,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC;gBACE,uCAAuC;gBACvC,EAAE;gBACF,2EAA2E;gBAC3E,qEAAqE;gBACrE,8BAA8B;gBAC9B,EAAE;gBACF,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;oBACpE,SAAS,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,KAAK,EAAE;oBACpC,EAAE;oBACF,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;oBACjC,EAAE;iBACH,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,iBAAiB;oBAClD,CAAC,CAAC;wBACE,2DAA2D,SAAS,CAAC,WAAW;6BAC7E,KAAK,CAAC,iBAAiB,CAAC;6BACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC;6BAC/B,IAAI,CAAC,IAAI,CAAC,GAAG;wBAChB,EAAE;qBACH;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;YACH,CAAC,CAAC,EAAE,CAAC;QACP,mCAAmC;QACnC,EAAE;QACF,QAAQ;QACR,EAAE;QACF,iDAAiD;QACjD,EAAE;QACF,aAAa;QACb,EAAE;QACF,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,+CAA+C;gBAC/C,EAAE;gBACF,2EAA2E;gBAC3E,qFAAqF;gBACrF,EAAE;gBACF,qBAAqB;gBACrB,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,qBAAqB;QACrB,EAAE;QACF,4EAA4E;QAC5E,oEAAoE;QACpE,EAAE;QACF,sDAAsD;QACtD,sDAAsD;QACtD,aAAa;QACb,EAAE;QACF,qEAAqE;QACrE,EAAE;QACF,wEAAwE;QACxE,6BAA6B;QAC7B,gFAAgF;QAChF,gBAAgB;QAChB,4EAA4E;QAC5E,6EAA6E;QAC7E,0CAA0C;QAC1C,+DAA+D,iBAAiB,GAAG;QACnF,0FAA0F;QAC1F,yEAAyE;QACzE,EAAE;QACF,iFAAiF;QACjF,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpD,CAAC,CAAC;QACF,EAAE;QACF,mCAAmC;QACnC,EAAE;QACF,6EAA6E;QAC7E,wEAAwE;QACxE,EAAE;QACF,gEAAgE;QAChE,wBAAwB,+BAA+B,+CAA+C;QACtG,kFAAkF;QAClF,6CAA6C;QAC7C,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,GAAG,CACtE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CACzC;QACD,oEAAoE;QACpE,EAAE;QACF,2EAA2E;QAC3E,2DAA2D;QAC3D,EAAE;QACF,gCAAgC;QAChC,EAAE;QACF,8EAA8E;QAC9E,gFAAgF;QAChF,sBAAsB;QACtB,EAAE;QACF,qCAAqC;QACrC,+EAA+E;QAC/E,6EAA6E;QAC7E,kFAAkF;QAClF,8EAA8E;QAC9E,+CAA+C;QAC/C,yDAAyD,aAAa,wFAAwF;QAC9J,oDAAoD;QACpD,EAAE;QACF,gFAAgF;QAChF,2EAA2E;QAC3E,+DAA+D;QAC/D,EAAE;QACF,eAAe;QACf,EAAE;QACF,6DAA6D;QAC7D,EAAE;QACF,KAAK,IAAI,CAAC,oBAAoB,EAAE;QAChC,EAAE;QACF,6EAA6E;QAC7E,4CAA4C;QAC5C,EAAE;QACF,SAAS;QACT,GAAG;QACH,6CAA6C;QAC7C,2CAA2C;QAC3C,2BAA2B;QAC3B,0CAA0C;QAC1C,uEAAuE;QACvE,wJAAwJ;QACxJ,wLAAwL;QACxL,0EAA0E;QAC1E,iCAAiC;QACjC,oHAAoH;QACpH,uEAAuE;QACvE,yEAAyE;QACzE,GAAG;QACH,KAAK;QACL,EAAE;QACF,8EAA8E;QAC9E,4EAA4E;QAC5E,gFAAgF;QAChF,iFAAiF;QACjF,6EAA6E;QAC7E,kCAAkC;QAClC,6EAA6E;QAC7E,qEAAqE;QACrE,8BAA8B;QAC9B,wEAAwE;QACxE,kEAAkE;QAClE,+EAA+E;QAC/E,8EAA8E;QAC9E,mEAAmE;QACnE,wFAAwF;QACxF,0EAA0E;QAC1E,qEAAqE;QACrE,EAAE;QACF,aAAa,IAAI,CAAC,eAAe,EAAE;QACnC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAClB,uEAAuE,EACvE,2CAA2C,aAAa,wBAAwB,CACjF,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"submissionClassifier.d.ts","sourceRoot":"","sources":["../../../src/shared/submission/submissionClassifier.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,eAAO,MAAM,sBAAsB,0IAWzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,MAAM,GAAG,mBAAmB;IACzE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAExD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,qBAAqB,CAAC,
|
|
1
|
+
{"version":3,"file":"submissionClassifier.d.ts","sourceRoot":"","sources":["../../../src/shared/submission/submissionClassifier.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,eAAO,MAAM,sBAAsB,0IAWzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,MAAM,GAAG,mBAAmB;IACzE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAExD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,qBAAqB,GAC7B,eAAe,GAAG,IAAI,CAkBxB"}
|
|
@@ -47,7 +47,12 @@ export async function readSubmissionDocument(absolutePath) {
|
|
|
47
47
|
};
|
|
48
48
|
}
|
|
49
49
|
try {
|
|
50
|
-
|
|
50
|
+
// Some editors write one UTF-8 byte-order mark before an otherwise valid
|
|
51
|
+
// JSON document. Accept that encoding marker at the parser boundary only;
|
|
52
|
+
// never strip more than one or normalize the source used by callers for
|
|
53
|
+
// any byte-sensitive binding/digest work.
|
|
54
|
+
const parseSource = source.startsWith("\uFEFF") ? source.slice(1) : source;
|
|
55
|
+
return { kind: "value", value: JSON.parse(parseSource) };
|
|
51
56
|
}
|
|
52
57
|
catch (error) {
|
|
53
58
|
return {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"submissionClassifier.js","sourceRoot":"","sources":["../../../src/shared/submission/submissionClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,wCAAwC;IACxC,oBAAoB;IACpB,0DAA0D;IAC1D,sBAAsB;IACtB,kEAAkE;IAClE,6BAA6B;IAC7B,8DAA8D;IAC9D,qBAAqB;IACrB,yEAAyE;IACzE,yBAAyB;CACjB,CAAC;AAsCX;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB;IAEpB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,
|
|
1
|
+
{"version":3,"file":"submissionClassifier.js","sourceRoot":"","sources":["../../../src/shared/submission/submissionClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,wCAAwC;IACxC,oBAAoB;IACpB,0DAA0D;IAC1D,sBAAsB;IACtB,kEAAkE;IAClE,6BAA6B;IAC7B,8DAA8D;IAC9D,qBAAqB;IACrB,yEAAyE;IACzE,yBAAyB;CACjB,CAAC;AAsCX;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB;IAEpB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAA8B,EAC9B,OAA8B;IAE9B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,eAAe,EAAE,OAAO,CAAC,cAAc;KAC/B,CAAC;IACX,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,SAAS,OAAO,CAAC,IAAI,uCAAuC;YACrE,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,SAAS,OAAO,CAAC,IAAI,wCAAwC,OAAO,CAAC,MAAM,EAAE;QACtF,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "audit-tools",
|
|
3
|
-
"version": "0.51.
|
|
3
|
+
"version": "0.51.3",
|
|
4
4
|
"private": false,
|
|
5
5
|
"license": "ISC",
|
|
6
6
|
"description": "Provider-neutral code auditing and remediation workflows for arbitrary repositories.",
|
|
@@ -51,11 +51,14 @@
|
|
|
51
51
|
"test": "npm run build && node scripts/shared/run-vitest-gate.mjs",
|
|
52
52
|
"test:single": "npm run build && node scripts/shared/run-vitest-gate.mjs",
|
|
53
53
|
"verify:guards": "node scripts/shared/run-vitest-gate.mjs --retry=2 --exclude \"**/audit-code-completion-*.test.ts\" --exclude \"**/audit-code-wrapper-*.test.ts\" --exclude \"**/audit/next-step-core-*.test.ts\" --exclude \"**/seam-host-only-next-step.test.ts\" --exclude \"**/*-e2e.test.*\" --exclude \"**/next-step-implement-dispatch.test.ts\" --exclude \"**/next-step-pipeline-dispatch.test.ts\"",
|
|
54
|
-
"verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:control-bytes check:shared-primitives check:version-gates check:guard-reach check:ci-trigger-paths check:loop-core-patterns check:loop-core-closure check:constitutional-doc-paths check:runtime-artifact-names check:friction-categories check:executor-producers check:spec-mirrors check:cli-surface check:ingestion-checks check:deadcode check:orphan-modules check:lint check:dup check:depgraph check:doc-manifest check:doc-links check:doc-code-citations check:gate-enumeration check:philosophy-brief check:readme-sample-report check:proposal-red-at check:handoff-roadmap check:backlog-index check:memory-citations check:backlog-budget check:backlog-status check:backlog-line-numbers check:tests build check:scripts verify:hosts verify:remediate-hosts pack:smoke smoke:packaged-audit-code smoke:packaged-remediate-code",
|
|
54
|
+
"verify:checks": "node scripts/shared/profile-run.mjs verify-checks check:control-bytes check:shared-primitives check:version-gates check:guard-reach check:generated-artifacts check:invariant-glossary check:nightly-inbox check:ci-trigger-paths check:loop-core-patterns check:loop-core-closure check:constitutional-doc-paths check:runtime-artifact-names check:friction-categories check:executor-producers check:spec-mirrors check:cli-surface check:ingestion-checks check:deadcode check:orphan-modules check:lint check:dup check:depgraph check:doc-manifest check:doc-links check:doc-code-citations check:gate-enumeration check:philosophy-brief check:readme-sample-report check:proposal-red-at check:handoff-roadmap check:backlog-index check:memory-citations check:backlog-budget check:backlog-status check:backlog-line-numbers check:tests build check:scripts verify:hosts verify:remediate-hosts pack:smoke smoke:packaged-audit-code smoke:packaged-remediate-code",
|
|
55
55
|
"verify:release": "npm run verify:checks && node scripts/shared/run-vitest-gate.mjs && npm run smoke:linked-audit-code && npm run smoke:linked-remediate-code",
|
|
56
56
|
"check:control-bytes": "node scripts/check-control-bytes.mjs",
|
|
57
57
|
"check:shared-primitives": "node scripts/check-shared-primitives.mjs",
|
|
58
58
|
"check:guard-reach": "node scripts/check-guard-reach.mjs",
|
|
59
|
+
"check:generated-artifacts": "node scripts/check-generated-artifacts.mjs",
|
|
60
|
+
"check:invariant-glossary": "node scripts/check-invariant-glossary.mjs",
|
|
61
|
+
"check:nightly-inbox": "node scripts/nightly/render-inbox.mjs --check",
|
|
59
62
|
"closeout": "node scripts/render-closeout.mjs",
|
|
60
63
|
"check:ci-trigger-paths": "node scripts/shared/generate-ci-trigger-paths.mjs --check",
|
|
61
64
|
"check:deadcode": "knip --no-config-hints",
|
package/scripts/postinstall.mjs
CHANGED
|
@@ -8,9 +8,20 @@
|
|
|
8
8
|
// corrupts the other's, and surface a non-zero exit if EITHER reports a failure
|
|
9
9
|
// (INV-remediate-infra-08: a partial deploy must not report success).
|
|
10
10
|
import { spawnSync } from "node:child_process";
|
|
11
|
+
import { existsSync } from "node:fs";
|
|
11
12
|
import { fileURLToPath } from "node:url";
|
|
12
13
|
|
|
14
|
+
const packageRoot = fileURLToPath(new URL("..", import.meta.url));
|
|
13
15
|
let failed = false;
|
|
16
|
+
|
|
17
|
+
// A published tarball already carries dist/. A source checkout does not, and
|
|
18
|
+
// npm's postinstall runs only after dependencies are present, so this is the
|
|
19
|
+
// first reliable point at which it can build the shared export. Without this
|
|
20
|
+
// bootstrap a fresh checkout partially deployed host assets and skipped both
|
|
21
|
+
// OpenCode config and artifact .gitignore management until a human happened to
|
|
22
|
+
// rerun postinstall after the first build.
|
|
23
|
+
if (!ensureSourceCheckoutBuilt()) failed = true;
|
|
24
|
+
|
|
14
25
|
for (const script of ["./audit/postinstall.mjs", "./remediate/postinstall.mjs"]) {
|
|
15
26
|
const scriptPath = fileURLToPath(new URL(script, import.meta.url));
|
|
16
27
|
const result = spawnSync(process.execPath, [scriptPath], { stdio: "inherit", windowsHide: true });
|
|
@@ -32,6 +43,37 @@ await manageArtifactGitignore();
|
|
|
32
43
|
|
|
33
44
|
process.exit(failed ? 1 : 0);
|
|
34
45
|
|
|
46
|
+
function ensureSourceCheckoutBuilt() {
|
|
47
|
+
const sharedEntry = fileURLToPath(new URL("../dist/shared/index.js", import.meta.url));
|
|
48
|
+
if (existsSync(sharedEntry)) return true;
|
|
49
|
+
|
|
50
|
+
const sourceTree = fileURLToPath(new URL("../src", import.meta.url));
|
|
51
|
+
const tsconfig = fileURLToPath(new URL("../tsconfig.json", import.meta.url));
|
|
52
|
+
if (!existsSync(sourceTree) || !existsSync(tsconfig)) return true;
|
|
53
|
+
|
|
54
|
+
const npmCli = process.env.npm_execpath;
|
|
55
|
+
if (!npmCli) {
|
|
56
|
+
console.warn(
|
|
57
|
+
"[audit-tools] postinstall: source checkout needs a shared build, but npm_execpath is unavailable.",
|
|
58
|
+
);
|
|
59
|
+
return false;
|
|
60
|
+
}
|
|
61
|
+
|
|
62
|
+
console.log("[audit-tools] postinstall: building shared output for this source checkout...");
|
|
63
|
+
const result = spawnSync(process.execPath, [npmCli, "run", "build"], {
|
|
64
|
+
cwd: packageRoot,
|
|
65
|
+
stdio: "inherit",
|
|
66
|
+
windowsHide: true,
|
|
67
|
+
});
|
|
68
|
+
if (result.error || (result.status ?? 0) !== 0 || result.signal) {
|
|
69
|
+
console.warn(
|
|
70
|
+
`[audit-tools] postinstall: source-checkout build failed (${result.error?.message ?? result.signal ?? `exit ${result.status}`}).`,
|
|
71
|
+
);
|
|
72
|
+
return false;
|
|
73
|
+
}
|
|
74
|
+
return existsSync(sharedEntry);
|
|
75
|
+
}
|
|
76
|
+
|
|
35
77
|
async function manageArtifactGitignore() {
|
|
36
78
|
try {
|
|
37
79
|
const shared = await import("audit-tools/shared");
|