audit-tools 0.51.7 → 0.51.9

package/dist/audit/cli/reviewRun.js

@@ -1,14 +1,21 @@
+import { access, mkdir, readdir } from "node:fs/promises";
 import { join } from "node:path";
-import { isFileMissingError, readJsonFile } from "audit-tools/shared";
+import { assertSubmissionRunId, isFileMissingError, readJsonFile, writeJsonFile, } from "audit-tools/shared";
 import { withArtifactTreeHold } from "./auditStep.js";
 import { loadArtifactBundle, writeCoreArtifacts, } from "../io/artifacts.js";
 import { deriveAuditState } from "../orchestrator/state.js";
-import { buildRunId, getRunPaths, writeReviewRunFiles, } from "../io/runArtifacts.js";
+import { deriveReviewRunId, getRunPaths, isLegacyClockRunId, openReviewWavePath, reviewWaveClosedPath, reviewWaveDigest, writeReviewRunFiles, } from "../io/runArtifacts.js";
 import { buildAuditCodeHandoff, writeAuditCodeHandoffArtifacts, CURRENT_TASK_FILENAME, } from "../supervisor/operatorHandoff.js";
 import { ActiveReviewRunSchema } from "../contracts/wrapperResponse.js";
 import { addFileLineCountHints } from "./lineIndex.js";
 import { buildPendingAuditTasks } from "./dispatch/packetFilter.js";
 import { buildBlockedAuditState, buildManualReviewBlocker } from "./envelope.js";
+/**
+ * The persisted wave counter's contract. The file sits BESIDE the runs it counts
+ * (under `runs/`) rather than inside `dispatch/`, so an artifacts dir's identity
+ * bookkeeping travels with the thing it is bookkeeping for.
+ */
+const OPEN_REVIEW_WAVE_CONTRACT_VERSION = "audit-open-review-wave/v1alpha1";
 function isActiveReviewRun(value) {
     return ActiveReviewRunSchema.safeParse(value).success;
 }
@@ -38,10 +45,179 @@ export async function writeHandoffOnly(params) {
         activeReviewRun: params.activeReviewRun,
     }));
 }
+/**
+ * Read the persisted wave generation.
+ *
+ * A counter file that is absent means no wave has been opened yet, and a file
+ * that is present but unreadable or mis-shaped is treated as ABSENT too — the
+ * value it carries is always PROMOTED (never served as-is), so a corrupt counter
+ * costs at most one extra promotion and never a run identity that moves
+ * underneath a worker. This read is on the fold's hot path, so it degrades
+ * rather than throwing.
+ */
+async function readWaveGenerationFile(artifactsDir) {
+    try {
+        const value = await readJsonFile(openReviewWavePath(artifactsDir));
+        return parseWaveGeneration(value);
+    }
+    catch {
+        return null;
+    }
+}
+function parseWaveGeneration(value) {
+    if (typeof value !== "object" || value === null)
+        return null;
+    const generation = value.generation;
+    return typeof generation === "number" &&
+        Number.isInteger(generation) &&
+        generation >= 0
+        ? generation
+        : null;
+}
+/**
+ * How many `runs/<id>/review-run.json` manifests the artifacts dir holds. Read
+ * from the run DIRECTORIES, which are always present and never pruned, rather
+ * than from a record that could have been lost.
+ */
+async function countOpenedReviewRuns(artifactsDir) {
+    let entries;
+    try {
+        entries = await readdir(join(artifactsDir, "runs"), {
+            withFileTypes: true,
+        });
+    }
+    catch (error) {
+        if (isFileMissingError(error))
+            return 0;
+        return null;
+    }
+    const present = await Promise.all(entries
+        .filter((entry) => entry.isDirectory())
+        .map(async (entry) => (await fileExists(join(artifactsDir, "runs", entry.name, "review-run.json")))
+        ? 1
+        : 0));
+    return present.reduce((total, value) => total + value, 0);
+}
+/** Existence without a throw, for a scan that must never abort the fold. */
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The generation the OPEN wave's run is derived from.
+ *
+ * The counter names a generation, in the same units `deriveReviewRunId`
+ * consumes, so the run directory it names is reachable from it
+ * (`getRunPaths(artifactsDir, deriveReviewRunId(...))`). That directory's own
+ * manifest is what proves the counter still names the open wave: present means
+ * this artifacts dir has already opened the wave the counter names, and every
+ * pause of that wave derives from it. Absent means the derivation under that
+ * counter would land on a directory that is not this wave's, and the two states
+ * that reach it are exactly the two ways the counter and the runs can disagree —
+ * an artifacts dir whose `runs/` was removed wholesale (the counter outlived the
+ * runs it named) and a `runs/` directory carried across an artifacts-dir RESET
+ * (a new audit reusing the directory: the runs outlived the counter). Both
+ * answer `runsOpen`, which is one more than the run directories on disk and
+ * therefore a directory this wave has not taken.
+ *
+ * `runsOpen` is monotone because `runs/` is never pruned and every transition
+ * here either keeps it or raises it by one — so a wave that has taken its
+ * directory keeps it for its whole life, and the counter may be rewritten at any
+ * point in that life without moving the identity underneath a worker.
+ */
+async function resolveWaveGeneration(artifactsDir) {
+    const runsOpen = await countOpenedReviewRuns(artifactsDir);
+    if (runsOpen === null)
+        return null;
+    const persisted = await readWaveGenerationFile(artifactsDir);
+    if (persisted === null)
+        return runsOpen;
+    const openRunId = await openedRunIdForGeneration(artifactsDir, persisted);
+    if (openRunId === null)
+        return runsOpen;
+    // The wave the counter names is on disk. It is still the OPEN wave unless its
+    // own run directory says it drained — and when it does, this pause is the next
+    // wave and must take a directory of its own.
+    return (await isWaveClosed(artifactsDir, openRunId)) ? runsOpen : persisted;
+}
+/**
+ * Is the wave this run belongs to fully accepted? Asked of the run's own dir.
+ *
+ * A marker that is absent, unreadable, mis-shaped, or names a different run is
+ * NOT a closure: the question is asked from the run's own directory, where the
+ * only writer is the publish of that run, so every other state means "no
+ * statement has been made" and the wave stays open. Degrading that way is the
+ * safe direction — an unread closure leaves the run where it is (a wave that
+ * publishes again is still correct), while an invented one moves the identity
+ * out from under every worker still writing.
+ */
+async function isWaveClosed(artifactsDir, runId) {
+    try {
+        const value = await readJsonFile(reviewWaveClosedPath(artifactsDir, runId));
+        if (typeof value !== "object" || value === null)
+            return false;
+        const record = value;
+        return record.closed === true && record.run_id === runId;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The run directory the wave named by `generation` already opened, if any.
+ *
+ * Asked by SUBSTITUTION, not by a second marker: a derived id is
+ * `<slug>-<digest>` where only the digest depends on the generation, so the
+ * digest is matched against the directories' own trailing segments. The slug
+ * half is deliberately not fixed — the wave a generation names may have been
+ * opened by a different obligation than the one asking now.
+ */
+async function openedRunIdForGeneration(artifactsDir, generation) {
+    const digest = reviewWaveDigest(generation);
+    const openedIds = await listOpenedReviewRunIds(artifactsDir);
+    return openedIds.find((runId) => runId.endsWith(`-${digest}`)) ?? null;
+}
+/** Every run directory id present under `runs/`, straight from `readdir`. */
+async function listOpenedReviewRunIds(artifactsDir) {
+    try {
+        const entries = await readdir(join(artifactsDir, "runs"), {
+            withFileTypes: true,
+        });
+        return entries.filter((entry) => entry.isDirectory()).map((e) => e.name);
+    }
+    catch (error) {
+        if (isFileMissingError(error))
+            return [];
+        throw error;
+    }
+}
+/** Advance the persisted generation to name the wave this run belongs to. */
+async function openReviewWave(artifactsDir, generation) {
+    await mkdir(join(artifactsDir, "runs"), { recursive: true });
+    await writeJsonFile(openReviewWavePath(artifactsDir), {
+        contract_version: OPEN_REVIEW_WAVE_CONTRACT_VERSION,
+        generation,
+    });
+}
 export async function materializeReviewRun(params) {
-    const runId = buildRunId(params.obligationId, 1);
-    const paths = getRunPaths(params.artifactsDir, runId);
+    // Derived AFTER the pending set is computed, deliberately: the id no longer
+    // depends on it, and the ordering is what makes that visible — a partial
+    // ingest shrinks the pending set, and must not move the run identity.
     const pendingTasks = await addFileLineCountHints(params.root, params.tasksOverride ?? buildPendingAuditTasks(params.bundle));
+    const generation = params.waveGeneration !== undefined
+        ? params.waveGeneration
+        : await resolveWaveGeneration(params.artifactsDir);
+    const runId = params.runIdOverride ??
+        deriveReviewRunId({
+            obligationId: params.obligationId,
+            waveGeneration: generation,
+        });
+    const paths = getRunPaths(params.artifactsDir, runId);
     const activeReviewRun = {
         contract_version: "audit-review-run/v1alpha1",
         run_id: runId,
@@ -50,38 +226,75 @@ export async function materializeReviewRun(params) {
         host_workload_path: paths.hostWorkloadPath,
         host_result_map_path: paths.hostResultMapPath,
     };
+    // The counter and the run directory are written together and the RESULT is
+    // what makes the two agree: the derivation above is only ever read back
+    // through `resolveWaveGeneration`, which checks the directory the counter
+    // names. Whichever of these two lands first, the pair resolves to the same
+    // generation — a counter ahead of its directory is corrected back to the
+    // directory state, and a directory ahead of the counter is found by the
+    // promotion. That is also what makes the NEXT wave open: once this wave's
+    // pending set is fully accepted the obligation re-opens, the pause re-enters
+    // here, the counter is proven stale (this wave is closed, but a new wave still
+    // needs a directory of its OWN), and `runsOpen` is one more than this run.
+    if (generation !== null) {
+        await openReviewWave(params.artifactsDir, generation);
+    }
     await writeReviewRunFiles(params.artifactsDir, activeReviewRun, pendingTasks);
     return { activeReviewRun, pendingTasks };
 }
-function sortedTaskIds(tasks) {
-    return tasks.map((task) => task.task_id).sort();
-}
-function sameTaskIds(left, right) {
-    const leftIds = sortedTaskIds(left);
-    const rightIds = sortedTaskIds(right);
-    return (leftIds.length === rightIds.length &&
-        leftIds.every((taskId, index) => taskId === rightIds[index]));
-}
 /**
- * Reuse the active run while its pending manifest still names the same tasks;
- * otherwise mint a fresh one. Shared by both entry points below so the reuse
- * rule cannot differ between the locked and lock-free halves.
+ * The active run, created or refreshed. Shared by both entry points below so the
+ * resolution cannot differ between the locked and lock-free halves.
+ *
+ * The id is derived from (review obligation × wave generation), and the
+ * generation moves at exactly one moment — when a wave OPENS. So the normal path
+ * here is a single manifest read and a re-materialization: within one open wave
+ * the derived id cannot move, however much a partial ingest shrinks the pending
+ * set, and a run that is still owed work is by construction still the active
+ * one. The branch that asked whether the persisted pending set still matched was
+ * a decision with no distinguishable behaviour behind it — and it was the
+ * mechanism that re-minted the whole wave on every ingest.
+ *
+ * The first branch is ADOPTION, and it is scoped to the transition itself. On an
+ * artifacts dir the tool has never opened a wave for (no counter file), a run
+ * minted by an EARLIER build may be in flight: its published workload, every
+ * bound `result_path`, its accepted pair and its own `run_id` all hang off the
+ * OLD id, and workers are holding bindings derived from it. Serving it under its
+ * own id — refreshed in place at the current pending set — lets that wave drain
+ * exactly as published, and the generation the promotion hands back is the one
+ * that makes the NEXT wave derive a new id. The alternative strands those
+ * workers or needs a cross-run copy of the accepted pair, which is a second
+ * durable store for a fact the run directory already holds.
+ *
+ * Adoption is decided from the persisted id's FORMAT (`isLegacyClockRunId`) and
+ * the absence of the counter, never from an instruction to the host.
  */
 async function resolveReviewRun(params) {
-    const currentPending = buildPendingAuditTasks(params.bundle);
-    const existingRun = await loadCurrentActiveReviewRun(params.artifactsDir);
-    if (existingRun) {
-        try {
-            const existingPending = await readJsonFile(existingRun.pending_audit_tasks_path);
-            if (sameTaskIds(existingPending, currentPending))
-                return existingRun;
-        }
-        catch (error) {
-            if (!isFileMissingError(error))
-                throw error;
-        }
+    const active = await loadCurrentActiveReviewRun(params.artifactsDir);
+    const persisted = await readWaveGenerationFile(params.artifactsDir);
+    const adopted = persisted === null &&
+        active !== null &&
+        isLegacyClockRunId(active.run_id)
+        ? active.run_id
+        : null;
+    if (adopted !== null) {
+        // The active manifest is tool-owned and never host-supplied, but the adopted
+        // id becomes a directory segment — so it clears the SAME grammar as any
+        // other run id before it is used to build a path, exactly as the
+        // host-handoff boundary does.
+        assertSubmissionRunId(adopted, "audit review run id");
+        const { activeReviewRun } = await materializeReviewRun({
+            ...params,
+            runIdOverride: adopted,
+            waveGeneration: await resolveWaveGeneration(params.artifactsDir),
+        });
+        return activeReviewRun;
     }
-    const { activeReviewRun } = await materializeReviewRun(params);
+    const generation = await resolveWaveGeneration(params.artifactsDir);
+    const { activeReviewRun } = await materializeReviewRun({
+        ...params,
+        waveGeneration: generation,
+    });
     return activeReviewRun;
 }
 /** The blocked state and bundle a review pause hands back. Writes NOTHING. */

package/dist/audit/cli/reviewRun.js.map

@@ -1 +1 @@
-{"version":3,"file":"reviewRun.js","sourceRoot":"","sources":["../../../src/audit/cli/reviewRun.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAEL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EACL,UAAU,EACV,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAwB,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEjF,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAU,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAQtC;IACC,MAAM,8BAA8B,CAClC,qBAAqB,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,eAAe,EAAE,MAAM,CAAC,gBAAgB;QACxC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CACH,CAAC;AACJ,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAC9C,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAC9D,CAAC;IACF,MAAM,eAAe,GAAoB;QACvC,gBAAgB,EAAE,2BAA2B;QAC7C,MAAM,EAAE,KAAK;QACb,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,wBAAwB,EAAE,KAAK,CAAC,gBAAgB;QAChD,kBAAkB,EAAE,KAAK,CAAC,gBAAgB;QAC1C,oBAAoB,EAAE,KAAK,CAAC,iBAAiB;KAC9C,CAAC;IACF,MAAM,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IAC9E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAA2B;IAChD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,IAA0B,EAAE,KAA2B;IAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAClC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAkBD;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAyB;IAEzB,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1E,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,YAAY,CACxC,WAAW,CAAC,wBAAwB,CACrC,CAAC;YACF,IAAI,WAAW,CAAC,eAAe,EAAE,cAAc,CAAC;gBAAE,OAAO,WAAW,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CACvB,MAAyB,EACzB,eAAgC;IAEhC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAChB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS;QAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QAC3B,CAAC,CAAC,sBAAsB,CAAC;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,0BAA0B;YACpC,OAAO;SACR,CAAC,CAAC;IACT,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;QACvD,eAAe;QACf,OAAO;KACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,uBAAuB,CACpC,MAAyB,EACzB,KAAwC;IAExC,MAAM,gBAAgB,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,KAAK;QACxB,gBAAgB,EAAE,KAAK,CAAC,OAAO;QAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAyB;IAEzB,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAI/C;IACC,MAAM,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC;YAC1C,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC;YACrD,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC/D,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,8BAA8B,CAClC,qBAAqB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,aAAa;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"reviewRun.js","sourceRoot":"","sources":["../../../src/audit/cli/reviewRun.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAEL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAwB,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAEjF;;;;GAIG;AACH,MAAM,iCAAiC,GAAG,iCAAiC,CAAC;AAE5E,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAU,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAQtC;IACC,MAAM,8BAA8B,CAClC,qBAAqB,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,eAAe,EAAE,MAAM,CAAC,gBAAgB;QACxC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CACH,CAAC;AACJ,CAAC;AA0BD;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CACnC,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAU,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,UAAU,GAAI,KAAkC,CAAC,UAAU,CAAC;IAClE,OAAO,OAAO,UAAU,KAAK,QAAQ;QACnC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC5B,UAAU,IAAI,CAAC;QACf,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,YAAoB;IAEpB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YAClD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO;SACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACnB,CAAC,MAAM,UAAU,CACf,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAC1D,CAAC;QACA,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,CAAC,CACN,CACJ,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,qBAAqB,CAClC,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1E,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACxC,8EAA8E;IAC9E,+EAA+E;IAC/E,6CAA6C;IAC7C,OAAO,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,YAAY,CACzB,YAAoB,EACpB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,oBAAoB,CAAC,YAAY,EAAE,KAAK,CAAC,CAC1C,CAAC;QACF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,MAAM,GAAG,KAA+C,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,wBAAwB,CACrC,YAAoB,EACpB,UAAkB;IAElB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;AACzE,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,sBAAsB,CACnC,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YACxD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,cAAc,CAC3B,YAAoB,EACpB,UAAkB;IAElB,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE;QACpD,gBAAgB,EAAE,iCAAiC;QACnD,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,4EAA4E;IAC5E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAC9C,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAC9D,CAAC;IACF,MAAM,UAAU,GACd,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,MAAM,CAAC,cAAc;QACvB,CAAC,CAAC,MAAM,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,KAAK,GACT,MAAM,CAAC,aAAa;QACpB,iBAAiB,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;IACL,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,eAAe,GAAoB;QACvC,gBAAgB,EAAE,2BAA2B;QAC7C,MAAM,EAAE,KAAK;QACb,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,wBAAwB,EAAE,KAAK,CAAC,gBAAgB;QAChD,kBAAkB,EAAE,KAAK,CAAC,gBAAgB;QAC1C,oBAAoB,EAAE,KAAK,CAAC,iBAAiB;KAC9C,CAAC;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IAC9E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,OAAO,GACX,SAAS,KAAK,IAAI;QAClB,MAAM,KAAK,IAAI;QACf,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,6EAA6E;QAC7E,wEAAwE;QACxE,iEAAiE;QACjE,8BAA8B;QAC9B,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACtD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACrD,GAAG,MAAM;YACT,aAAa,EAAE,OAAO;YACtB,cAAc,EAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;SACjE,CAAC,CAAC;QACH,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,oBAAoB,CAAC;QACrD,GAAG,MAAM;QACT,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IACH,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CACvB,MAAyB,EACzB,eAAgC;IAEhC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAChB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS;QAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;QAC3B,CAAC,CAAC,sBAAsB,CAAC;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,0BAA0B;YACpC,OAAO;SACR,CAAC,CAAC;IACT,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;QACvD,eAAe;QACf,OAAO;KACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,uBAAuB,CACpC,MAAyB,EACzB,KAAwC;IAExC,MAAM,gBAAgB,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,KAAK;QACxB,gBAAgB,EAAE,KAAK,CAAC,OAAO;QAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAyB;IAEzB,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAI/C;IACC,MAAM,oBAAoB,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC;YAC1C,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC;YACrD,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,MAAM,CAAC,eAAe;SAChC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC/D,MAAM,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,8BAA8B,CAClC,qBAAqB,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,aAAa;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/cli/sampleRunCommand.d.ts

@@ -29,6 +29,7 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
             root?: string | undefined;
             default_branch?: string | undefined;
         };
+        scope_index_key?: string | undefined;
     };
     disposition: import("../extractors/disposition.js").FileDispositionWithScopeRules;
     unitManifest: {
@@ -123,6 +124,7 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
                 quoted_text?: string | undefined;
                 hash_at_plan_time?: string | undefined;
             }[];
+            severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
             impact?: string | undefined;
             likelihood?: string | undefined;
             evidence?: string[] | undefined;
@@ -136,6 +138,7 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
                 status: "grounded" | "ungrounded" | "refuted";
                 reason?: string | undefined;
             } | undefined;
+            evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
             verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
             executable_anchor?: {
                 command: string[];
@@ -162,6 +165,11 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
                 snippet_hash: string;
                 rule?: string | undefined;
             } | undefined;
+            lead_lineage?: {
+                producer: string;
+                source_hash: string;
+                confirmation: "lead";
+            } | undefined;
         }[];
         lens: string;
         task_id: string;
@@ -173,6 +181,10 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
         notes?: string[] | undefined;
         run_id?: string | undefined;
         attempt?: number | undefined;
+        followup_tasks?: string[] | undefined;
+        agent_role?: string | undefined;
+        reviewed_clean?: boolean | undefined;
+        requires_followup?: boolean | undefined;
         verification?: {
             verified: boolean;
             needs_followup: boolean;
@@ -202,10 +214,6 @@ export declare function buildSampleAuditBundle(findings?: Finding[]): Promise<{
                 completion_reason?: string | undefined;
             }[] | undefined;
         } | undefined;
-        followup_tasks?: string[] | undefined;
-        agent_role?: string | undefined;
-        reviewed_clean?: boolean | undefined;
-        requires_followup?: boolean | undefined;
         submitted_at?: string | undefined;
         instance_id?: string | undefined;
         identity_key?: string | undefined;

package/dist/audit/cli/sampleRunCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sampleRunCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/sampleRunCommand.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAW7D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAiBnC,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,GAAE,OAAO,EAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EpE;AAED,wBAAsB,SAAS,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD5E"}
+{"version":3,"file":"sampleRunCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/sampleRunCommand.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAW7D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,OAiBnC,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,GAAE,OAAO,EAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EpE;AAED,wBAAsB,SAAS,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD5E"}

package/dist/audit/cli/semanticReviewStep.d.ts

@@ -1,3 +1,4 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
 import type { ActiveReviewRun } from "../supervisor/operatorHandoff.js";
 import type { AuditHostIngestIssue } from "../validation/ingestIssueCodes.js";
 import { type AuditHostValidationWarning } from "./dispatch/hostHandoff.js";
@@ -11,6 +12,14 @@ export declare function renderSemanticReviewStep(params: {
     root: string;
     artifactsDir: string;
     activeReviewRun: ActiveReviewRun;
+    /**
+     * The bundle this draw's review obligation was selected against. REQUIRED:
+     * the completed count has no second derivation — it comes from the ONE
+     * pending-set partition (`derivePendingTaskPartition`), which is the same
+     * source the published workload's task list is built from. A caller that has
+     * no bundle has no review obligation either.
+     */
+    bundle: ArtifactBundle;
     selectedExecutor?: string | null;
     inProcessMadeProgress?: boolean;
     /** Failures the ingest that preceded this emission classified. */

package/dist/audit/cli/semanticReviewStep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semanticReviewStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA6E9C;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,YAAY,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC/C,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAqFxD"}
+{"version":3,"file":"semanticReviewStep.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAkH9C;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,MAAM,EAAE,cAAc,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,YAAY,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC/C,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC5D,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CA6FxD"}

package/dist/audit/cli/semanticReviewStep.js

@@ -1,19 +1,31 @@
+// sites-pinned: tests/audit/host-handoff.test.ts
+// (the steward-lane verification
+// contract — `toHostTask` is where the lane tags were being dropped, so this is
+// the site whose revert makes the prompt branch unreachable)
 import { resolve } from "node:path";
-import { linkFrictionRunIds, readJsonFile } from "audit-tools/shared";
+import { deriveLaneDemand, isMissingObservation, linkFrictionRunIds, readJsonFile, } from "audit-tools/shared";
 import { AUDIT_FRICTION_RUN_ID } from "../orchestrator/nextStep.js";
+import { derivePendingTaskPartition } from "../orchestrator/pendingTasks.js";
 import { prepareAuditHostHandoff, } from "./dispatch/hostHandoff.js";
 import { nextStepCommand } from "./prompts.js";
 import { writeCurrentStep } from "./steps.js";
-function taskComplexity(task) {
-    const estimate = task.token_estimate ?? 0;
-    if (estimate >= 8_000)
-        return "deep";
-    if (estimate >= 2_000)
-        return "standard";
-    return "focused";
-}
+/**
+ * The audit draw's lane demand.
+ *
+ * The bounding rules are the SHARED ones ({@link deriveLaneDemand}); the draw
+ * supplies only the genuinely per-mode input — its frozen, content-derived
+ * `risk_estimate`. The banding helpers that used to live here read the task's
+ * `priority` enum as if it were a risk score, which is what put a coarsely
+ * bucketed dispatch PRIORITY where a likelihood×stakes estimate belongs.
+ */
 function toHostTask(task) {
-    const risk = task.priority ?? "low";
+    const tokenEstimate = Math.max(0, Math.floor(task.token_estimate ?? 0));
+    const demand = deriveLaneDemand({
+        tokenEstimate,
+        fileCount: task.file_paths.length,
+        riskScore: task.risk_estimate ?? 0,
+    });
+    // construction-site: AuditTask (the host-facing work item; `demand` is handoff metadata, the rest is the contract)
     return {
         task_id: task.task_id,
         unit_id: task.unit_id,
@@ -22,10 +34,14 @@ function toHostTask(task) {
         file_paths: task.file_paths,
         file_line_counts: task.file_line_counts ?? {},
         rationale: task.rationale,
-        priority: risk,
-        complexity: taskComplexity(task),
-        risk,
-        token_estimate: Math.max(0, Math.floor(task.token_estimate ?? 0)),
+        priority: task.priority ?? "low",
+        demand,
+        token_estimate: tokenEstimate,
+        // The lane tags ride the harness so the boundary can tell the steward lane
+        // (whose contract asks for `verification` metadata) from the base one. A
+        // boundary that cannot see the lane cannot render a lane-aware contract, and
+        // this mapper is where that signal was being dropped.
+        ...(Array.isArray(task.tags) ? { tags: task.tags } : {}),
     };
 }
 /**
@@ -36,22 +52,39 @@ function toHostTask(task) {
  * in an identical workload.
  */
 function renderIngestIssueLines(issues) {
-    if (issues.length === 0)
-        return [];
+    // MISSING and REJECTED are stated under their OWN headings. They shared one
+    // before, which forced a host parser to special-case the message text — the
+    // measured friction — and told the reader the same thing about two situations
+    // whose remedies are opposite: one is patience, the other is a repair. The
+    // split is on the CODE, so rewording a message cannot move an item between
+    // the two.
+    const missing = issues.filter(isMissingObservation);
+    const rejected = issues.filter((issue) => !isMissingObservation(issue));
+    const section = (heading, lines) => lines.length === 0 ? [] : [heading, "", ...lines, ""];
     return [
-        "## Result status requiring attention",
-        "",
-        ...issues.map((issue) => `- ${issue.work_item_id ? `\`${issue.work_item_id}\` (${issue.code}): ` : `${issue.code}: `}` +
-            `${issue.message}${issue.result_path ? ` (\`${issue.result_path}\`)` : ""}`),
-        "",
-        // NOT "the bindings are unchanged": ingesting anything changes the pending
-        // task set, and a changed pending set re-mints the review run — new run id,
-        // new run directory, new bound result paths. The paths quoted above are the
-        // ones the ingest READ; the workload published below is always the authority.
-        "Each named work item is still pending and is republished in the workload below. Write its repaired result at that workload's bound `result_path` — a path quoted above belongs to the ingest just consumed and is stale whenever the run was re-minted.",
-        "",
+        ...section("## Results not yet written", missing.map((issue) => `- ${describeIssue(issue)}`)),
+        ...section("## Result status requiring attention", rejected.map((issue) => `- ${describeIssue(issue)}`)),
+        ...(issues.length === 0
+            ? []
+            : [
+                // NOT "the bindings are unchanged": the run id is derived from the review
+                // obligation, so a partial ingest does NOT re-mint the run and the bound
+                // paths of carried-over items are stable. What still moves is the ASK — a
+                // re-planned task's prompt digest, and therefore its bound path, is
+                // different, and a result written against the old ask is correctly refused.
+                // So the workload published below is the authority for what to write, and a
+                // path quoted above is only guaranteed current for an item whose ask the
+                // ingest did not change.
+                "Each named work item is still pending and is republished in the workload below. Write its repaired result at that workload's bound `result_path` — that workload is always the authority for where a result is read.",
+                "",
+            ]),
     ];
 }
+/** One issue as a bullet, with its locators. Shared by both sections above. */
+function describeIssue(issue) {
+    return (`${issue.work_item_id ? `\`${issue.work_item_id}\` (${issue.code}): ` : `${issue.code}: `}` +
+        `${issue.message}${issue.result_path ? ` (\`${issue.result_path}\`)` : ""}`);
+}
 /**
  * The ADVISORY half of the ingest report: validation warnings on results that
  * WERE accepted. Deliberately a separate renderer from {@link renderIngestIssueLines}
@@ -80,6 +113,14 @@ export async function renderSemanticReviewStep(params) {
         throw new Error(`Semantic review run ${activeReviewRun.run_id} has no pending-task manifest.`);
     }
     const tasks = await readJsonFile(activeReviewRun.pending_audit_tasks_path);
+    // The completed half of this pause's count comes from the ONE pending-set
+    // partition — the same derivation `buildPendingAuditTasks` projects the
+    // published tasks from — never from `tasks.length - work_items.length`. That
+    // subtraction only ever measured how many items the handoff boundary HID, so
+    // it read zero for every run whose publish was exhaustive (which is every
+    // run: the boundary suppresses nothing), and it would misreport the moment a
+    // task left the pending set for any reason other than acceptance.
+    const { completedTaskIds } = derivePendingTaskPartition(params.bundle);
     const handoff = await prepareAuditHostHandoff({
         root,
         artifactsDir,
@@ -103,15 +144,15 @@ export async function renderSemanticReviewStep(params) {
         status: "ready",
         runId: activeReviewRun.run_id,
         allowedCommands: [continueCommand],
-        allowedMcpTools: ["auditor_continue_audit"],
         progress: {
             summary: `Published ${handoff.workload.work_items.length} pending semantic-review ` +
                 `work item(s) for host execution.` +
                 (issues.length > 0
-                    ? ` ${issues.length} prior submission(s) could not be accepted — see "Result status requiring attention".`
+                    ? ` ${issues.length} prior submission(s) were not accepted — see "Result status requiring attention"` +
+                        ` and "Results not yet written".`
                     : ""),
             pending_tasks: handoff.workload.work_items.length,
-            completed_tasks: tasks.length - handoff.workload.work_items.length,
+            completed_tasks: completedTaskIds.size,
         },
         stopCondition: "Execute the published host workload, write each bound result, then run next-step.",
         repoRoot: root,

package/dist/audit/cli/semanticReviewStep.js.map

@@ -1 +1 @@
-{"version":3,"file":"semanticReviewStep.js","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKpE,OAAO,EACL,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,SAAS,cAAc,CAAC,IAAe;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAe;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACpC,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;QAChC,IAAI;QACJ,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,MAAuC;IAEvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,sCAAsC;QACtC,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CACX,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE;YAC7F,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E;QACD,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,8EAA8E;QAC9E,yPAAyP;QACzP,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CACnC,QAA+C;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO;QACL,uCAAuC;QACvC,EAAE;QACF,GAAG,QAAQ,CAAC,GAAG,CACb,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,OAAO,CAAC,YAAY,8BAA8B,OAAO,CAAC,OAAO,EAAE,CAC7E;QACD,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAU9C;IACC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,CAAC,MAAM,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,eAAe,CAAC,wBAAwB,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,IAAI;QACJ,YAAY;QACZ,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC7B,CAAC,CAAC;IACH,iFAAiF;IACjF,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,kBAAkB,CACtB,YAAY,EACZ,qBAAqB,EACrB;QACE,WAAW,EAAE,eAAe,CAAC,MAAM;QACnC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;KACzC,EACD,YAAY,CACb,CAAC;IACF,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAChC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE3D,OAAO,gBAAgB,CAAC;QACtB,YAAY;QACZ,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,eAAe,EAAE,CAAC,eAAe,CAAC;QAClC,eAAe,EAAE,CAAC,wBAAwB,CAAC;QAC3C,QAAQ,EAAE;YACR,OAAO,EACL,aAAa,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,2BAA2B;gBAC1E,kCAAkC;gBAClC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAChB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,uFAAuF;oBAC1G,CAAC,CAAC,EAAE,CAAC;YACT,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;YACjD,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;SACnE;QACD,aAAa,EACX,mFAAmF;QACrF,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,mBAAmB,EAAE,eAAe,CAAC,wBAAwB;SAC9D;QACD,MAAM,EAAE;YACN,8BAA8B;YAC9B,EAAE;YACF,GAAG,sBAAsB,CAAC,MAAM,CAAC;YACjC,GAAG,4BAA4B,CAAC,kBAAkB,CAAC;YACnD,mDAAmD,OAAO,CAAC,aAAa,EAAE;YAC1E,EAAE;YACF,mFAAmF;YACnF,gGAAgG;YAChG,2FAA2F;YAC3F,EAAE;YACF,gDAAgD,eAAe,EAAE;YACjE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,eAAe;gBACvB,eAAe,CAAC,wBAAwB;aACzC;YACD,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"semanticReviewStep.js","sourceRoot":"","sources":["../../../src/audit/cli/semanticReviewStep.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,iCAAiC;AACjC,gFAAgF;AAChF,6DAA6D;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAI7E,OAAO,EACL,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAe;IACjC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,aAAa;QACb,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;QACjC,SAAS,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;KACnC,CAAC,CAAC;IACH,mHAAmH;IACnH,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,MAAM;QACN,cAAc,EAAE,aAAa;QAC7B,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,sDAAsD;QACtD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAC7B,MAAuC;IAEvC,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,WAAW;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,KAAwB,EAAY,EAAE,CACtE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,OAAO,CACR,4BAA4B,EAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CACpD;QACD,GAAG,OAAO,CACR,sCAAsC,EACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CACrD;QACD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0EAA0E;gBAC1E,yEAAyE;gBACzE,0EAA0E;gBAC1E,oEAAoE;gBACpE,4EAA4E;gBAC5E,4EAA4E;gBAC5E,yEAAyE;gBACzE,yBAAyB;gBACzB,sNAAsN;gBACtN,EAAE;aACH,CAAC;KACP,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,KAA2B;IAChD,OAAO,CACL,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE;QAC3F,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CACnC,QAA+C;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO;QACL,uCAAuC;QACvC,EAAE;QACF,GAAG,QAAQ,CAAC,GAAG,CACb,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,OAAO,CAAC,YAAY,8BAA8B,OAAO,CAAC,OAAO,EAAE,CAC7E;QACD,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAkB9C;IACC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,wBAAwB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,CAAC,MAAM,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,eAAe,CAAC,wBAAwB,CACzC,CAAC;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,EAAE,gBAAgB,EAAE,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,IAAI;QACJ,YAAY;QACZ,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC7B,CAAC,CAAC;IACH,iFAAiF;IACjF,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,kBAAkB,CACtB,YAAY,EACZ,qBAAqB,EACrB;QACE,WAAW,EAAE,eAAe,CAAC,MAAM;QACnC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;KACzC,EACD,YAAY,CACb,CAAC;IACF,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAChC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE3D,OAAO,gBAAgB,CAAC;QACtB,YAAY;QACZ,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,eAAe,EAAE,CAAC,eAAe,CAAC;QAClC,QAAQ,EAAE;YACR,OAAO,EACL,aAAa,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,2BAA2B;gBAC1E,kCAAkC;gBAClC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAChB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,kFAAkF;wBACnG,iCAAiC;oBACnC,CAAC,CAAC,EAAE,CAAC;YACT,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;YACjD,eAAe,EAAE,gBAAgB,CAAC,IAAI;SACvC;QACD,aAAa,EACX,mFAAmF;QACrF,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,mBAAmB,EAAE,eAAe,CAAC,wBAAwB;SAC9D;QACD,MAAM,EAAE;YACN,8BAA8B;YAC9B,EAAE;YACF,GAAG,sBAAsB,CAAC,MAAM,CAAC;YACjC,GAAG,4BAA4B,CAAC,kBAAkB,CAAC;YACnD,mDAAmD,OAAO,CAAC,aAAa,EAAE;YAC1E,EAAE;YACF,mFAAmF;YACnF,gGAAgG;YAChG,2FAA2F;YAC3F,EAAE;YACF,gDAAgD,eAAe,EAAE;YACjE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,eAAe;gBACvB,eAAe,CAAC,wBAAwB;aACzC;YACD,WAAW,EAAE,WAAW;SACzB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/cli/statusCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"statusCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/statusCommand.ts"],"names":[],"mappings":"AASA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4H7D"}
+{"version":3,"file":"statusCommand.d.ts","sourceRoot":"","sources":["../../../src/audit/cli/statusCommand.ts"],"names":[],"mappings":"AAQA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuF7D"}