audit-tools 0.51.7 → 0.51.9

package/dist/remediate/contractPipeline/semanticProjection.js

@@ -24,6 +24,7 @@
  * each owns the projection table for its own artifact set.
  */
 import { isRecord, stableStringifyProjection } from "audit-tools/shared";
+import { DERIVABLE_MODULE_CONTRACT_FIELDS } from "./finalizedContractFields.js";
 export { stableStringifyProjection };
 /**
  * Non-semantic top-level fields stripped from EVERY artifact before projecting.
@@ -48,15 +49,11 @@ const UNIVERSAL_NON_SEMANTIC_FIELDS = ["created_at", "generated_at"];
  * whole obligation-bearing chain fresh, while a changed interface, a new
  * invariant, or a changed side effect correctly re-stales it.
  */
-const DERIVABLE_MODULE_CONTRACT_FIELDS = [
-    "name",
-    "inputs",
-    "outputs",
-    "invariants",
-    "failure_modes",
-    "side_effects",
-    "validation_boundary",
-];
+// The projection's field list is the COPIED half of the ONE module-contract
+// vocabulary (`finalizedContractFields.ts`) — see that module for why
+// `seam_adjustments` (DERIVED at finalization, read by no deterministic
+// consumer) is excluded: a re-agreed seam must not re-stale the ledger.
+export { DERIVABLE_MODULE_CONTRACT_FIELDS };
 function stripFields(record, fields) {
     const drop = new Set(fields);
     return Object.fromEntries(Object.entries(record).filter(([key]) => !drop.has(key)));

package/dist/remediate/contractPipeline/semanticProjection.js.map

@@ -1 +1 @@
-{"version":3,"file":"semanticProjection.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACH,MAAM,gCAAgC,GAAsB;IAC1D,MAAM;IACN,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,eAAe;IACf,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF,SAAS,WAAW,CAClB,MAA+B,EAC/B,MAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,MAAyB;IAEzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,SAAS;QAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAkC,EAClC,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAErE,gFAAgF;IAChF,iFAAiF;IACjF,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO,uBAAuB,CAAC;gBAC7B,GAAG,QAAQ;gBACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACxD,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAC/D;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG"}
+{"version":3,"file":"semanticProjection.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAsB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAExF;;;;;;;;;;;;;;GAcG;AACH,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAE5C,SAAS,WAAW,CAClB,MAA+B,EAC/B,MAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,MAAyB;IAEzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,SAAS;QAC1C,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACpF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAkC,EAClC,OAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAErE,gFAAgF;IAChF,iFAAiF;IACjF,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO,uBAAuB,CAAC;gBAC7B,GAAG,QAAQ;gBACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACxD,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAC/D;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG"}

package/dist/remediate/contractPipeline/sketchSource.d.ts

@@ -0,0 +1,183 @@
+/**
+ * The value vocabularies a step prompt's schema sketch and its VALIDATOR both
+ * read — declared once, here, so they cannot disagree.
+ *
+ * Why this module exists. A step prompt hands the worker a JSON shape to write,
+ * and a validator in `src/remediate/validation/` decides whether what came back
+ * is admissible. Those were two independent statements of the same fact: the
+ * prompt carried a hand-written sketch (`contractPipelinePrompts.ts`, plus two
+ * extra sketches in `contractPipeline.ts`) and the validator carried its own
+ * literal list. Measured drifts at HEAD before this module existed:
+ *
+ *   - `cyclic_seam_resolution.status` — sketch offered 2 values, the validator
+ *     admits 4 (`user_decision_required` and `blocked` were unrenderable but
+ *     required by the refusal path);
+ *   - `judge_report.repair_directive.target` — sketch offered 3, the validator 4
+ *     (the fourth, `counterexample`, could never be asked for);
+ *   - `verification_report.finding.traces[].kind` — sketch offered 5, the
+ *     validator 6;
+ *   - `implementation_dag.node.status` — sketch showed exactly 1 of the 4 the
+ *     validator admits.
+ *
+ * Every one is the same failure: a worker reads the sketch, emits a value the
+ * sketch allowed, and the tool refuses it — or, worse in the opposite
+ * direction, never learns a legal value exists. A drift test made of "remember
+ * to update the other one" is exactly the class of guarantee this repo bans
+ * (enforce in tooling, never host — or author — discretion), so the fix is not
+ * a test that watches two lists. It is ONE declaration, with the validator and
+ * the sketch both deriving from it.
+ *
+ * What is MINED vs DECLARED. The values are declared here; they are NOT read out
+ * of the validator module, because a validator states its values as inline
+ * `requireOneOf(...)` literals inside a function body — a declaration a test can
+ * only reach by parsing source text, which is the brittle thing this replaces.
+ * Instead the exported constants are the single declaration and the VALIDATOR
+ * imports them, so the drift is impossible by construction rather than detected
+ * after the fact. The test in
+ * `tests/remediate/step-prompt-sketch-drift.test.ts` then re-derives each
+ * vocabulary from what each validator actually REFUSES (by feeding it values),
+ * and compares that to the sketch the prompt renders — so a value added to a
+ * validator without the sketch still reds, without depending on how the
+ * validator happens to spell its list.
+ *
+ * NOT A LIST. Every value vocabulary that the CONTRACT-PIPELINE role sketches
+ * render as an alternation is declared here — the four drifted ones above, the
+ * obligation/test-plan pairs, and the nine that were still hand-written literals
+ * in `contractPipelinePrompts.ts` (goal `source_type`; context-entry `kind`; the
+ * critique item `kind` and `severity`; the critique `verdict`; the assessment
+ * finding `status` and report `verdict`; the judge `verdict`; and the judge's
+ * counterexample `classification`). That is the whole point: a vocabulary kept
+ * as a literal is only safe while someone remembers, and the drift test below
+ * sweeps every rendered alternation of those sketches rather than a hand-kept
+ * field list, so the next literal to appear reds immediately instead of waiting
+ * to be noticed.
+ *
+ * The scope is those sketches, NOT every sketch in the repository, and the
+ * difference is recorded rather than implied: the sweep reaches the modules in
+ * `SKETCH_SOURCE_MODULES`, and the clarification-resolution sketch in
+ * `steps/prompts.ts` is outside them — a declared-gap row in
+ * `tests/shared/promptContractRegistry.ts`. So this module claims nothing about
+ * that one, and widening the sweep is its own change.
+ */
+/**
+ * `cyclic_seam_resolution.status`. Four values: two describe a resolution the
+ * worker authored, two describe a resolution the tool must escalate or refuse.
+ */
+export declare const CYCLIC_SEAM_RESOLUTION_STATUSES: readonly ["no_cycles", "resolved", "user_decision_required", "blocked"];
+/** `cyclic_seam_resolution.cycles[].break_strategy`. */
+export declare const CYCLIC_SEAM_BREAK_STRATEGIES: readonly ["mediator", "single_authority"];
+/**
+ * `judge_report.repair_directive.target`, its legacy aliases, and the offered
+ * subset — DECLARED in `src/shared/types/contractPipeline/obligations.ts`,
+ * beside the `JudgeRepairTarget` type that derives from them, and re-exported
+ * here so the validator and the prompt sketches keep reading them from this
+ * module.
+ *
+ * Why they moved. `src/shared` is the base layer; this module lives in
+ * `src/remediate`. A value import from the base layer into an orchestrator is
+ * the dependency direction inverted, and the declaration had to live on the
+ * side the TYPE could reach.
+ */
+export { CONTRACT_REPAIR_TARGETS, CONTRACT_REPAIR_TARGETS_LEGACY, CONTRACT_REPAIR_TARGETS_OFFERED, } from "audit-tools/shared";
+/** `verification_report` trace `kind`. */
+export declare const VERIFICATION_TRACE_KINDS: readonly ["requirement", "invariant", "counterexample", "task", "file", "command"];
+/** `verification_report` finding-level `overall_status` (report level excludes `skipped`). */
+export declare const VERIFICATION_FINDING_STATUSES: readonly ["passed", "failed", "skipped"];
+/** `verification_report` report-level `overall_status`. */
+export declare const VERIFICATION_REPORT_STATUSES: readonly ["passed", "failed"];
+/** `verification_report` trace `status`. */
+export declare const VERIFICATION_TRACE_STATUSES: readonly ["passed", "failed"];
+/** `implementation_dag.nodes[].status`. */
+export declare const IMPLEMENTATION_NODE_STATUSES: readonly ["pending", "in_progress", "resolved", "blocked"];
+/** `implementation_dag.edges[].kind`. */
+export declare const IMPLEMENTATION_EDGE_KINDS: readonly ["dependency", "verification"];
+/**
+ * `obligation_ledger.obligations[].status`. `satisfied` is reachable only
+ * through the tool's own derivation (`contractPipeline/derive.ts`) — a worker
+ * emits `pending` and the tool advances it — but the value is part of the
+ * contract the prompt describes, so it is declared here rather than implied.
+ */
+export declare const OBLIGATION_STATUSES: readonly ["pending", "satisfied", "failed"];
+/** `obligation_ledger.obligations[].kind`. */
+export declare const OBLIGATION_KINDS: readonly ["invariant", "behavioral", "structural", "test"];
+/** `test_validator_plan.test_specs[].kind`. */
+export declare const TEST_SPEC_KINDS: readonly ["unit", "integration", "schema", "invariant", "e2e"];
+/** `goal_spec.source_type`. */
+export declare const GOAL_SOURCE_TYPES: readonly ["conversation", "document", "structured_audit", "mixed"];
+/** `context_bundle.entries[].kind`. */
+export declare const CONTEXT_ENTRY_KINDS: readonly ["source", "test", "config", "doc"];
+/** `conceptual_design_critique.items[].kind`. */
+export declare const CRITIQUE_ITEM_KINDS: readonly ["concern", "alternative", "suggestion"];
+/** `conceptual_design_critique.items[].severity`. */
+export declare const CRITIQUE_ITEM_SEVERITIES: readonly ["blocking", "advisory"];
+/** `conceptual_design_critique.verdict`. */
+export declare const CRITIQUE_VERDICTS: readonly ["approved", "approved_with_concerns", "rejected"];
+/** `contract_assessment_report.findings[].status`. */
+export declare const ASSESSMENT_FINDING_STATUSES: readonly ["satisfied", "violated", "uncertain"];
+/** `contract_assessment_report.verdict`. */
+export declare const ASSESSMENT_VERDICTS: readonly ["passed", "failed", "partial"];
+/** `judge_report.verdict`. */
+export declare const JUDGE_VERDICTS: readonly ["approved", "needs_repair"];
+/**
+ * `judge_report.classifications[].classification` — what the judge may decide
+ * about one counterexample.
+ *
+ * Declared here rather than in the validator that reads it, because the judge
+ * role's prompt sketch states the same five values and a sketch that renders a
+ * hand-written copy of a validator's list is the drift this module bans. The
+ * validator imports THIS declaration (it was a local `as const` beside
+ * `validateJudgeReport`), so the two are one fact.
+ */
+export declare const COUNTEREXAMPLE_CLASSIFICATIONS: readonly ["accepted", "out_of_scope", "duplicate", "invalid", "residual_risk"];
+/**
+ * `seam_reconciliation_report.mismatches[].resolution.decision` — which side of
+ * a seam adjusts. Declared here beside the rest for ONE reason: the alternative
+ * would be to exclude it from the drift test by hand, and an exclusion list is
+ * the drift this module exists to make impossible (see the test's alternation
+ * sweep, which matches EVERY rendered alternation to a validator probe).
+ */
+export declare const SEAM_RESOLUTION_DECISIONS: readonly ["A", "B", "both"];
+/**
+ * The vocabularies that carry a `created_at`, and the ones that do not.
+ *
+ * `created_at` asymmetry, resolved in one place. Every contract-pipeline
+ * validator ends with `requireString(v.created_at, ...)`, and NO sketch
+ * declares the field — the reconciliation is `stampToolCreatedAt`
+ * (`contractPipeline/artifactStore.ts`), which the tool calls on the payload at
+ * ingest and at the `validate-artifact` self-check. The host has no clock, so
+ * asking it for a timestamp is asking it to invent one; the tool owns the field
+ * and stamps it.
+ *
+ * The decision, stated once rather than left implicit: THE VALIDATORS KEEP
+ * REQUIRING IT AND THE SKETCHES KEEP OMITTING IT — because the requirement is
+ * enforced on the POST-STAMP payload, not on what the worker wrote. The
+ * asymmetry is not a drift to be closed in either direction: declaring
+ * `created_at` in the sketches would tell the worker to supply a value the tool
+ * then overrides (the stamp is `created_at`-wins-if-present, but a host-invented
+ * clock reading is still worse than the tool's), and dropping the requirement
+ * from the validators would let an artifact that never passed the stamp path —
+ * a hand-written file validated directly — carry no timestamp at all.
+ *
+ * This is a DECISION, not a drift (see the drift test's `created_at` block):
+ * the validators keep requiring it and the sketches keep omitting it, because
+ * the requirement is enforced on the POST-STAMP payload rather than on what the
+ * worker wrote. Closing the asymmetry in either direction is worse — declaring
+ * it in the sketches asks the host for a clock reading the tool then overrides,
+ * and dropping it from the validators lets a directly-validated hand-written
+ * file carry no timestamp at all.
+ */
+export declare const CREATED_AT_OWNER: "stampToolCreatedAt";
+/**
+ * Whether `value` is one of {@link CYCLIC_SEAM_BREAK_STRATEGIES} — the ONE
+ * membership test for the vocabulary, so the tool's post-hoc cycle-break check
+ * and the prompt's sketch read the same declaration.
+ */
+export declare function isCyclicSeamBreakStrategy(value: unknown): value is (typeof CYCLIC_SEAM_BREAK_STRATEGIES)[number];
+/**
+ * Render a sketch fragment for a value vocabulary: `"a | b | c"`.
+ *
+ * The ONE renderer for every `requireOneOf`-style vocabulary in the sketches,
+ * so the separators and quoting in a prompt cannot drift from each other either.
+ */
+export declare function sketchValues(values: readonly string[]): string;
+//# sourceMappingURL=sketchSource.d.ts.map

package/dist/remediate/contractPipeline/sketchSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sketchSource.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/sketchSource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH;;;GAGG;AACH,eAAO,MAAM,+BAA+B,yEAKlC,CAAC;AAEX,wDAAwD;AACxD,eAAO,MAAM,4BAA4B,2CAG/B,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,0CAA0C;AAC1C,eAAO,MAAM,wBAAwB,oFAO3B,CAAC;AAEX,8FAA8F;AAC9F,eAAO,MAAM,6BAA6B,0CAIhC,CAAC;AAEX,2DAA2D;AAC3D,eAAO,MAAM,4BAA4B,+BAAgC,CAAC;AAE1E,4CAA4C;AAC5C,eAAO,MAAM,2BAA2B,+BAAgC,CAAC;AAEzE,2CAA2C;AAC3C,eAAO,MAAM,4BAA4B,4DAK/B,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,yBAAyB,yCAA0C,CAAC;AAEjF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,6CAItB,CAAC;AAEX,8CAA8C;AAC9C,eAAO,MAAM,gBAAgB,4DAKnB,CAAC;AAEX,+CAA+C;AAC/C,eAAO,MAAM,eAAe,gEAMlB,CAAC;AAEX,+BAA+B;AAC/B,eAAO,MAAM,iBAAiB,oEAKpB,CAAC;AAEX,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,8CAKtB,CAAC;AAEX,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,mDAItB,CAAC;AAEX,qDAAqD;AACrD,eAAO,MAAM,wBAAwB,mCAAoC,CAAC;AAE1E,4CAA4C;AAC5C,eAAO,MAAM,iBAAiB,6DAIpB,CAAC;AAEX,sDAAsD;AACtD,eAAO,MAAM,2BAA2B,iDAI9B,CAAC;AAEX,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,0CAA2C,CAAC;AAE5E,8BAA8B;AAC9B,eAAO,MAAM,cAAc,uCAAwC,CAAC;AAEpE;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,gFAMjC,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,6BAA8B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,gBAAgB,EAAG,oBAA6B,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAKxD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAE9D"}

package/dist/remediate/contractPipeline/sketchSource.js

@@ -0,0 +1,255 @@
+/**
+ * The value vocabularies a step prompt's schema sketch and its VALIDATOR both
+ * read — declared once, here, so they cannot disagree.
+ *
+ * Why this module exists. A step prompt hands the worker a JSON shape to write,
+ * and a validator in `src/remediate/validation/` decides whether what came back
+ * is admissible. Those were two independent statements of the same fact: the
+ * prompt carried a hand-written sketch (`contractPipelinePrompts.ts`, plus two
+ * extra sketches in `contractPipeline.ts`) and the validator carried its own
+ * literal list. Measured drifts at HEAD before this module existed:
+ *
+ *   - `cyclic_seam_resolution.status` — sketch offered 2 values, the validator
+ *     admits 4 (`user_decision_required` and `blocked` were unrenderable but
+ *     required by the refusal path);
+ *   - `judge_report.repair_directive.target` — sketch offered 3, the validator 4
+ *     (the fourth, `counterexample`, could never be asked for);
+ *   - `verification_report.finding.traces[].kind` — sketch offered 5, the
+ *     validator 6;
+ *   - `implementation_dag.node.status` — sketch showed exactly 1 of the 4 the
+ *     validator admits.
+ *
+ * Every one is the same failure: a worker reads the sketch, emits a value the
+ * sketch allowed, and the tool refuses it — or, worse in the opposite
+ * direction, never learns a legal value exists. A drift test made of "remember
+ * to update the other one" is exactly the class of guarantee this repo bans
+ * (enforce in tooling, never host — or author — discretion), so the fix is not
+ * a test that watches two lists. It is ONE declaration, with the validator and
+ * the sketch both deriving from it.
+ *
+ * What is MINED vs DECLARED. The values are declared here; they are NOT read out
+ * of the validator module, because a validator states its values as inline
+ * `requireOneOf(...)` literals inside a function body — a declaration a test can
+ * only reach by parsing source text, which is the brittle thing this replaces.
+ * Instead the exported constants are the single declaration and the VALIDATOR
+ * imports them, so the drift is impossible by construction rather than detected
+ * after the fact. The test in
+ * `tests/remediate/step-prompt-sketch-drift.test.ts` then re-derives each
+ * vocabulary from what each validator actually REFUSES (by feeding it values),
+ * and compares that to the sketch the prompt renders — so a value added to a
+ * validator without the sketch still reds, without depending on how the
+ * validator happens to spell its list.
+ *
+ * NOT A LIST. Every value vocabulary that the CONTRACT-PIPELINE role sketches
+ * render as an alternation is declared here — the four drifted ones above, the
+ * obligation/test-plan pairs, and the nine that were still hand-written literals
+ * in `contractPipelinePrompts.ts` (goal `source_type`; context-entry `kind`; the
+ * critique item `kind` and `severity`; the critique `verdict`; the assessment
+ * finding `status` and report `verdict`; the judge `verdict`; and the judge's
+ * counterexample `classification`). That is the whole point: a vocabulary kept
+ * as a literal is only safe while someone remembers, and the drift test below
+ * sweeps every rendered alternation of those sketches rather than a hand-kept
+ * field list, so the next literal to appear reds immediately instead of waiting
+ * to be noticed.
+ *
+ * The scope is those sketches, NOT every sketch in the repository, and the
+ * difference is recorded rather than implied: the sweep reaches the modules in
+ * `SKETCH_SOURCE_MODULES`, and the clarification-resolution sketch in
+ * `steps/prompts.ts` is outside them — a declared-gap row in
+ * `tests/shared/promptContractRegistry.ts`. So this module claims nothing about
+ * that one, and widening the sweep is its own change.
+ */
+/**
+ * `cyclic_seam_resolution.status`. Four values: two describe a resolution the
+ * worker authored, two describe a resolution the tool must escalate or refuse.
+ */
+export const CYCLIC_SEAM_RESOLUTION_STATUSES = [
+    "no_cycles",
+    "resolved",
+    "user_decision_required",
+    "blocked",
+];
+/** `cyclic_seam_resolution.cycles[].break_strategy`. */
+export const CYCLIC_SEAM_BREAK_STRATEGIES = [
+    "mediator",
+    "single_authority",
+];
+/**
+ * `judge_report.repair_directive.target`, its legacy aliases, and the offered
+ * subset — DECLARED in `src/shared/types/contractPipeline/obligations.ts`,
+ * beside the `JudgeRepairTarget` type that derives from them, and re-exported
+ * here so the validator and the prompt sketches keep reading them from this
+ * module.
+ *
+ * Why they moved. `src/shared` is the base layer; this module lives in
+ * `src/remediate`. A value import from the base layer into an orchestrator is
+ * the dependency direction inverted, and the declaration had to live on the
+ * side the TYPE could reach.
+ */
+export { CONTRACT_REPAIR_TARGETS, CONTRACT_REPAIR_TARGETS_LEGACY, CONTRACT_REPAIR_TARGETS_OFFERED, } from "audit-tools/shared";
+/** `verification_report` trace `kind`. */
+export const VERIFICATION_TRACE_KINDS = [
+    "requirement",
+    "invariant",
+    "counterexample",
+    "task",
+    "file",
+    "command",
+];
+/** `verification_report` finding-level `overall_status` (report level excludes `skipped`). */
+export const VERIFICATION_FINDING_STATUSES = [
+    "passed",
+    "failed",
+    "skipped",
+];
+/** `verification_report` report-level `overall_status`. */
+export const VERIFICATION_REPORT_STATUSES = ["passed", "failed"];
+/** `verification_report` trace `status`. */
+export const VERIFICATION_TRACE_STATUSES = ["passed", "failed"];
+/** `implementation_dag.nodes[].status`. */
+export const IMPLEMENTATION_NODE_STATUSES = [
+    "pending",
+    "in_progress",
+    "resolved",
+    "blocked",
+];
+/** `implementation_dag.edges[].kind`. */
+export const IMPLEMENTATION_EDGE_KINDS = ["dependency", "verification"];
+/**
+ * `obligation_ledger.obligations[].status`. `satisfied` is reachable only
+ * through the tool's own derivation (`contractPipeline/derive.ts`) — a worker
+ * emits `pending` and the tool advances it — but the value is part of the
+ * contract the prompt describes, so it is declared here rather than implied.
+ */
+export const OBLIGATION_STATUSES = [
+    "pending",
+    "satisfied",
+    "failed",
+];
+/** `obligation_ledger.obligations[].kind`. */
+export const OBLIGATION_KINDS = [
+    "invariant",
+    "behavioral",
+    "structural",
+    "test",
+];
+/** `test_validator_plan.test_specs[].kind`. */
+export const TEST_SPEC_KINDS = [
+    "unit",
+    "integration",
+    "schema",
+    "invariant",
+    "e2e",
+];
+/** `goal_spec.source_type`. */
+export const GOAL_SOURCE_TYPES = [
+    "conversation",
+    "document",
+    "structured_audit",
+    "mixed",
+];
+/** `context_bundle.entries[].kind`. */
+export const CONTEXT_ENTRY_KINDS = [
+    "source",
+    "test",
+    "config",
+    "doc",
+];
+/** `conceptual_design_critique.items[].kind`. */
+export const CRITIQUE_ITEM_KINDS = [
+    "concern",
+    "alternative",
+    "suggestion",
+];
+/** `conceptual_design_critique.items[].severity`. */
+export const CRITIQUE_ITEM_SEVERITIES = ["blocking", "advisory"];
+/** `conceptual_design_critique.verdict`. */
+export const CRITIQUE_VERDICTS = [
+    "approved",
+    "approved_with_concerns",
+    "rejected",
+];
+/** `contract_assessment_report.findings[].status`. */
+export const ASSESSMENT_FINDING_STATUSES = [
+    "satisfied",
+    "violated",
+    "uncertain",
+];
+/** `contract_assessment_report.verdict`. */
+export const ASSESSMENT_VERDICTS = ["passed", "failed", "partial"];
+/** `judge_report.verdict`. */
+export const JUDGE_VERDICTS = ["approved", "needs_repair"];
+/**
+ * `judge_report.classifications[].classification` — what the judge may decide
+ * about one counterexample.
+ *
+ * Declared here rather than in the validator that reads it, because the judge
+ * role's prompt sketch states the same five values and a sketch that renders a
+ * hand-written copy of a validator's list is the drift this module bans. The
+ * validator imports THIS declaration (it was a local `as const` beside
+ * `validateJudgeReport`), so the two are one fact.
+ */
+export const COUNTEREXAMPLE_CLASSIFICATIONS = [
+    "accepted",
+    "out_of_scope",
+    "duplicate",
+    "invalid",
+    "residual_risk",
+];
+/**
+ * `seam_reconciliation_report.mismatches[].resolution.decision` — which side of
+ * a seam adjusts. Declared here beside the rest for ONE reason: the alternative
+ * would be to exclude it from the drift test by hand, and an exclusion list is
+ * the drift this module exists to make impossible (see the test's alternation
+ * sweep, which matches EVERY rendered alternation to a validator probe).
+ */
+export const SEAM_RESOLUTION_DECISIONS = ["A", "B", "both"];
+/**
+ * The vocabularies that carry a `created_at`, and the ones that do not.
+ *
+ * `created_at` asymmetry, resolved in one place. Every contract-pipeline
+ * validator ends with `requireString(v.created_at, ...)`, and NO sketch
+ * declares the field — the reconciliation is `stampToolCreatedAt`
+ * (`contractPipeline/artifactStore.ts`), which the tool calls on the payload at
+ * ingest and at the `validate-artifact` self-check. The host has no clock, so
+ * asking it for a timestamp is asking it to invent one; the tool owns the field
+ * and stamps it.
+ *
+ * The decision, stated once rather than left implicit: THE VALIDATORS KEEP
+ * REQUIRING IT AND THE SKETCHES KEEP OMITTING IT — because the requirement is
+ * enforced on the POST-STAMP payload, not on what the worker wrote. The
+ * asymmetry is not a drift to be closed in either direction: declaring
+ * `created_at` in the sketches would tell the worker to supply a value the tool
+ * then overrides (the stamp is `created_at`-wins-if-present, but a host-invented
+ * clock reading is still worse than the tool's), and dropping the requirement
+ * from the validators would let an artifact that never passed the stamp path —
+ * a hand-written file validated directly — carry no timestamp at all.
+ *
+ * This is a DECISION, not a drift (see the drift test's `created_at` block):
+ * the validators keep requiring it and the sketches keep omitting it, because
+ * the requirement is enforced on the POST-STAMP payload rather than on what the
+ * worker wrote. Closing the asymmetry in either direction is worse — declaring
+ * it in the sketches asks the host for a clock reading the tool then overrides,
+ * and dropping it from the validators lets a directly-validated hand-written
+ * file carry no timestamp at all.
+ */
+export const CREATED_AT_OWNER = "stampToolCreatedAt";
+/**
+ * Whether `value` is one of {@link CYCLIC_SEAM_BREAK_STRATEGIES} — the ONE
+ * membership test for the vocabulary, so the tool's post-hoc cycle-break check
+ * and the prompt's sketch read the same declaration.
+ */
+export function isCyclicSeamBreakStrategy(value) {
+    return (typeof value === "string" &&
+        CYCLIC_SEAM_BREAK_STRATEGIES.includes(value));
+}
+/**
+ * Render a sketch fragment for a value vocabulary: `"a | b | c"`.
+ *
+ * The ONE renderer for every `requireOneOf`-style vocabulary in the sketches,
+ * so the separators and quoting in a prompt cannot drift from each other either.
+ */
+export function sketchValues(values) {
+    return values.join(" | ");
+}
+//# sourceMappingURL=sketchSource.js.map

package/dist/remediate/contractPipeline/sketchSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sketchSource.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/sketchSource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,WAAW;IACX,UAAU;IACV,wBAAwB;IACxB,SAAS;CACD,CAAC;AAEX,wDAAwD;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,UAAU;IACV,kBAAkB;CACV,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,0CAA0C;AAC1C,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,MAAM;IACN,MAAM;IACN,SAAS;CACD,CAAC;AAEX,8FAA8F;AAC9F,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ;IACR,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,2DAA2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAE1E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEzE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS;IACT,aAAa;IACb,UAAU;IACV,SAAS;CACD,CAAC;AAEX,yCAAyC;AACzC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,SAAS;IACT,WAAW;IACX,QAAQ;CACA,CAAC;AAEX,8CAA8C;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,MAAM;CACE,CAAC;AAEX,+CAA+C;AAC/C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM;IACN,aAAa;IACb,QAAQ;IACR,WAAW;IACX,KAAK;CACG,CAAC;AAEX,+BAA+B;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,UAAU;IACV,kBAAkB;IAClB,OAAO;CACC,CAAC;AAEX,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;CACG,CAAC;AAEX,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,SAAS;IACT,aAAa;IACb,YAAY;CACJ,CAAC;AAEX,qDAAqD;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAE1E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU;IACV,wBAAwB;IACxB,UAAU;CACF,CAAC;AAEX,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,WAAW;IACX,UAAU;IACV,WAAW;CACH,CAAC;AAEX,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAE5E,8BAA8B;AAC9B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,cAAc,CAAU,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,cAAc;IACd,WAAW;IACX,SAAS;IACT,eAAe;CACP,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAU,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAA6B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,4BAAkD,CAAC,QAAQ,CAAC,KAAK,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/remediate/findingFilter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"findingFilter.d.ts","sourceRoot":"","sources":["../../src/remediate/findingFilter.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,uBAAuB,CAAC;AAG/B,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,8BAA8B,CAAC,wBAAwB,CAAC,CAAC;CACnF;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAsC9B"}
+{"version":3,"file":"findingFilter.d.ts","sourceRoot":"","sources":["../../src/remediate/findingFilter.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,uBAAuB,CAAC;AAG/B,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gFAAgF;IAChF,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,uEAAuE;IACvE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,8BAA8B,CAAC,wBAAwB,CAAC,CAAC;CACnF;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAsC9B"}

package/dist/remediate/findingFilter.js

@@ -1,3 +1,4 @@
+// <!-- comment-symbol-exempt: names deliberately-retired symbols; this block records that history -->
 // Single finding-filter pass (review-gate convergence, chunk A).
 //
 // The pre-planning filters — no-evidence drop, cross-lens dedup, phantom-path

package/dist/remediate/findingFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"findingFilter.js","sourceRoot":"","sources":["../../src/remediate/findingFilter.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,kFAAkF;AAClF,+EAA+E;AAC/E,qEAAqE;AACrE,EAAE;AACF,kFAAkF;AAClF,2EAA2E;AAC3E,0EAA0E;AAC1E,gFAAgF;AAChF,aAAa;AACb,EAAE;AACF,iFAAiF;AACjF,0EAA0E;AAG1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,uBAAuB,GAExB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAgC1E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAmB,EACnB,OAAoC;IAEpC,uBAAuB;IACvB,MAAM,iBAAiB,GAAG,QAAQ;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,IAAI,GAAG,QAAQ,CAAC,MAAM,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;IAEF,uBAAuB;IACvB,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEtB,6BAA6B;IAC7B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE;QACpD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;QACpD,GAAG,CAAC,OAAO,CAAC,sBAAsB;YAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC;IAE1B,kCAAkC;IAClC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAC7D,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,GAAG,cAAc,CAAC;IAEtB,OAAO;QACL,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB;QACjB,mBAAmB,EAAE,IAAI,GAAG,CAC1B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAC7D;QACD,mBAAmB,EAAE,SAAS,CAAC,qBAAqB;QACpD,mBAAmB;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"findingFilter.js","sourceRoot":"","sources":["../../src/remediate/findingFilter.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,kFAAkF;AAClF,+EAA+E;AAC/E,qEAAqE;AACrE,EAAE;AACF,kFAAkF;AAClF,2EAA2E;AAC3E,0EAA0E;AAC1E,gFAAgF;AAChF,aAAa;AACb,EAAE;AACF,iFAAiF;AACjF,0EAA0E;AAG1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,uBAAuB,GAExB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAgC1E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAmB,EACnB,OAAoC;IAEpC,uBAAuB;IACvB,MAAM,iBAAiB,GAAG,QAAQ;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpB,IAAI,IAAI,GAAG,QAAQ,CAAC,MAAM,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;IAEF,uBAAuB;IACvB,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAEtB,6BAA6B;IAC7B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE;QACpD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;QACpD,GAAG,CAAC,OAAO,CAAC,sBAAsB;YAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC;IAE1B,kCAAkC;IAClC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAC7D,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,GAAG,cAAc,CAAC;IAEtB,OAAO;QACL,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB;QACjB,mBAAmB,EAAE,IAAI,GAAG,CAC1B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAC7D;QACD,mBAAmB,EAAE,SAAS,CAAC,qBAAqB;QACpD,mBAAmB;KACpB,CAAC;AACJ,CAAC"}

package/dist/remediate/index.d.ts

@@ -83,6 +83,87 @@ export declare function resolveRootOption(rawRoot: string | undefined): string;
  * supplied at all.
  */
 export declare function resolveArtifactsDirOption(root: string, artifactsDir: string): string;
+/**
+ * The outcome of one operator recovery verb, as data: the JSON body to print,
+ * the process exit code, and (for a failure that should read as a reason rather
+ * than as a result) the message to print on stderr. Both recovery verbs return
+ * this so the commander action branches are thin argv→call→print shims and the
+ * real decisions — the recovered-nothing classification, the exit code, the
+ * step-contract invalidation — are callable directly by a test. The branches
+ * used to be testable only by spawning the CLI, which is why the
+ * nothing-recovered path and the two `process.exit(1)` sites were covered by
+ * exactly nothing.
+ */
+export type RecoveryVerbResult = {
+    readonly status: "recovered";
+    readonly body: Record<string, unknown>;
+} | {
+    readonly status: "recovered-with-issues" | "nothing-to-recover" | "pending";
+    readonly body: Record<string, unknown>;
+    readonly exitCode: number;
+}
+/** The verb could not run at all (an exception, or no live binding). */
+ | {
+    readonly status: "unrunnable";
+    readonly message: string;
+};
+/**
+ * `recover-ingest`'s whole decision, minus argv parsing and printing.
+ *
+ * Exit code, not prose, is what an operator scripts on — so the three outcomes
+ * are told apart mechanically, in this precedence:
+ *
+ *   75 the EXPECTED-PENDING outcome, tested FIRST: every issue is
+ *      `submission_missing`, i.e. the run is waiting on results the host simply
+ *      has not written yet. No operator action is implied, so this must not read
+ *      as a fault — not even when a sibling item was accepted in the same pass,
+ *      because the issues are what an operator acts on and none of them asks for
+ *      anything. (`accepted_count` in the body still reports the acceptance.)
+ *   2  ACCEPTED-WITH-ISSUES: something was accepted AND something was really
+ *      refused. Tested before the clean arm, because the clean arm's condition
+ *      ("something was accepted") is a strict superset: without this arm a
+ *      partial recovery reports the same status token as a complete one, and a
+ *      caller scripting on the token cannot see the refusal at all.
+ *   0  otherwise, everything the pass saw was accepted
+ *   1  otherwise (nothing accepted, and not every issue is expected-pending): a
+ *      run that recovered NOTHING is not a recovery, and any REAL issue — a
+ *      partial ingest, a moved tree, a refused payload — is a failure.
+ *
+ * The pending arm is the distinction the entry asks for: "the host hasn't
+ * finished" must not read identically to "the run is wedged", or an operator's
+ * retry loop cannot tell a normal wait from a real fault. `submission_missing`
+ * is the ONLY issue code that means expected-pending — every other code
+ * describes something the operator must act on. (75 = EX_TEMPFAIL, the
+ * conventional "try again" code.)
+ *
+ * The accepted-with-issues arm applies the same rule one level down: a pass that
+ * landed real work AND refused real work is neither a clean success nor a
+ * nothing-to-recover, and it gets its own token so the three are told apart
+ * without reading `issues`.
+ */
+export declare function recoverIngestVerb(options: {
+    root: string;
+    artifactsDir: string;
+    runId: string;
+}): Promise<RecoveryVerbResult>;
+/**
+ * `recover-submission`'s whole decision, minus argv parsing and printing — the
+ * same extraction, so its no-live-binding refusal and its refusal path are
+ * covered by a test instead of by a manual smoke log.
+ *
+ * A successful rescue LANDS a submission, which changes what the run's persisted
+ * step contract is still asking for, so it invalidates that contract exactly as
+ * `recover-ingest` does. The invalidation is best-effort by construction
+ * (`invalidateStepContracts` swallows a missing steps tree), so a rescue can
+ * never be reported as failed because a stale prompt could not be removed.
+ */
+export declare function recoverSubmissionVerb(options: {
+    root: string;
+    artifactsDir: string;
+    runId: string;
+    submissionId: string;
+    from: string;
+}): Promise<RecoveryVerbResult>;
 export declare function runValidateCommand(deps?: {
     run?: typeof runTracked;
     log?: (message: string) => void;

package/dist/remediate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAML,KAAK,4BAA4B,EAClC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EASL,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAiB5B,QAAA,MAAM,OAAO,SAAgB,CAAC;AAiS9B,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,4BAA4B,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyHtE;AAiCD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAEjD;AASD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAU/E;AAYD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,MAAM,CAIR;AAED,wBAAgB,kBAAkB,CAChC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GACL,MAAM,CAiBR"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/remediate/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAML,KAAK,4BAA4B,EAClC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAUL,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAiB5B,QAAA,MAAM,OAAO,SAAgB,CAAC;AAyO9B,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,4BAA4B,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyHtE;AAiCD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAEjD;AASD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAU/E;AAYD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,MAAM,CAIR;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxE;IACE,QAAQ,CAAC,MAAM,EAAE,uBAAuB,GAAG,oBAAoB,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AACH,wEAAwE;GACtE;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqD9B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6C9B;AAED,wBAAgB,kBAAkB,CAChC,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,OAAO,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GACL,MAAM,CAiBR"}