audit-tools 0.51.7 → 0.51.9

package/dist/remediate/state/store.js

@@ -1,19 +1,44 @@
 import { mkdir } from "node:fs/promises";
 import { join } from "node:path";
-import { createLockedJsonStore, LOCKED_JSON_STORE_TIMEOUT_MS, assertNotNodeWorktreeCwd, } from "audit-tools/shared";
+import { createLockedJsonStore, LOCKED_JSON_STORE_TIMEOUT_MS, SchemaVersionMismatchError, SKIP_WRITE, assertNotNodeWorktreeCwd, } from "audit-tools/shared";
 import { RemediationHostHandoffRecordSchema, } from "./types.js";
 import { validateRemediationBlock } from "../validation/remediationState.js";
-/** Known status values for RemediationState — used for schema validation on load. */
-const KNOWN_STATUSES = new Set([
-    "pending",
-    "planning",
-    "waiting_for_clarification",
-    "implementing",
-    "triage",
-    "waiting_for_triage",
-    "closing",
-    "complete",
-]);
+import { REMEDIATION_RUN_STATUSES, isRemediationRunStatus, } from "./runStatus.js";
+/**
+ * The schema version stamped on every persisted `state.json`.
+ *
+ * The VALUE is unchanged from the literal three modules already spelled out
+ * (the host-handoff parser, the state-shaping helper in `nextStep.ts`, and the
+ * test fixtures). What changes is that it is now ONE declaration that the store
+ * actually writes and reads back, rather than a constant a reader FABRICATED
+ * onto the loaded value to satisfy its own parser — see `parseCurrentState`'s
+ * call site in `steps/dispatch/hostHandoff.ts`. An identity that the reader
+ * supplies itself is not a check; it is the check's answer written in advance.
+ *
+ * A run's state is COSTLY / AUTHORED state in the sense
+ * `audit-tools/shared/io/schemaVersion.ts` names: it records work an operator
+ * or a host has already done, and it cannot be rebuilt from anything else on
+ * disk. That module's policy is therefore THROW on a mismatch — silently
+ * discarding a state would read as "this run never started" and destroy the
+ * plan, the item ledger and every recorded acceptance with it.
+ *
+ * ABSENT IS NOT A MISMATCH, and the distinction is deliberate here rather than
+ * inherited. Every run already in flight when this field was introduced has a
+ * `state.json` with no `contract_version`; treating its absence as a mismatch
+ * would refuse to load exactly the runs this field exists to protect. An
+ * unstamped state is read under the CURRENT version's semantics (it was written
+ * by a release whose shape this one still admits — that is what makes the field
+ * safe to add), and the next write stamps it. A stamped-but-DIFFERENT version
+ * is the case that throws, because at that point the file positively claims
+ * another release's semantics rather than merely predating the field.
+ *
+ * Same asymmetry as `intent_checkpoint` (absent ⇒ nothing to check; present
+ * and different ⇒ refuse loudly), inverted for a version that is newly added
+ * rather than newly REQUIRED.
+ */
+export const REMEDIATION_STATE_CONTRACT_VERSION = "remediate-code-state/v1alpha1";
+/** The file this store owns, named once so the version error can name it too. */
+const STATE_FILENAME = "state.json";
 /**
  * Statuses whose derived step decisions READ the plan/items — a state in one of
  * these with those fields missing is unusable (the state machine would crash or,
@@ -35,15 +60,30 @@ function validateState(value) {
         return errors;
     }
     const obj = value;
+    // The contract version, checked BEFORE anything is read off the state: a file
+    // that positively claims another release's semantics must not have its fields
+    // interpreted under this one's. ABSENT is admitted (see
+    // REMEDIATION_STATE_CONTRACT_VERSION) — this is the stamped-and-different case
+    // only, which throws rather than degrading because the state is authored,
+    // unrebuildable work.
+    if (obj["contract_version"] !== undefined &&
+        obj["contract_version"] !== REMEDIATION_STATE_CONTRACT_VERSION) {
+        throw new SchemaVersionMismatchError(STATE_FILENAME, REMEDIATION_STATE_CONTRACT_VERSION, String(obj["contract_version"]));
+    }
     if (!("status" in obj)) {
         errors.push("Missing required field: status");
         return errors;
     }
-    const status = obj["status"];
-    if (!KNOWN_STATUSES.has(status)) {
-        errors.push(`Unknown status "${String(obj["status"])}"; expected one of: ${[...KNOWN_STATUSES].join(", ")}`);
+    // The ONE membership test, derived from the same array the `status` type is —
+    // so the gate and the type cannot drift apart with no red build. This used to
+    // be a module-private `Set` hand-mirroring the inline union (DAT-017d52ff):
+    // adding a status to the union without updating the set compiled cleanly and
+    // then made the load gate reject every persisted state carrying it.
+    if (!isRemediationRunStatus(obj["status"])) {
+        errors.push(`Unknown status "${String(obj["status"])}"; expected one of: ${REMEDIATION_RUN_STATUSES.join(", ")}`);
         return errors;
     }
+    const status = obj["status"];
     // Status-conditional completeness (INV-RSM-STATE-COMPLETE): every field the
     // status's decision path reads must be present, or the load fails loudly
     // instead of handing the state machine a partially-persisted state.
@@ -121,7 +161,6 @@ function validateState(value) {
     }
     return errors;
 }
-const STATE_FILENAME = "state.json";
 const LOCK_FILENAME = "state.lock";
 // Acquire timeout for the shared file lock — the STALE_LOCK_MS-minus-margin
 // derivation is single-sourced in the shared locked JSON store (a fresh-but-held
@@ -157,12 +196,35 @@ export class StateStore {
                 if (raw === undefined) {
                     return null;
                 }
+                // `validateState` throws SchemaVersionMismatchError for a state stamped
+                // with another release's contract version; that propagates out of the
+                // read exactly as the policy requires (see the constant's doc).
                 const errors = validateState(raw);
                 if (errors.length > 0) {
                     throw new Error(`state.json failed schema validation: ${errors.join("; ")}`);
                 }
+                // Returned as READ. The version is stamped on the way IN (the write
+                // hook below), so a state that has been through this store carries it
+                // on disk and this read is byte-faithful: what `loadState` returns is
+                // what the file says, with no field conjured at read time. A state
+                // written before the field existed has none until its next write, and
+                // `validateState` admits that (see the constant's doc) — which is the
+                // whole reason the field is optional on the type rather than required.
                 return raw;
             },
+            // The WRITE hook. Without it the store's own `persist` wrote whatever a
+            // caller handed it — the load gate was the only validation on the path,
+            // so a state that was never round-tripped (constructed in memory and
+            // saved, which is every transition) could reach disk carrying fields no
+            // reader would accept. The gate and the writer now share ONE validator.
+            validate: (next) => {
+                if (next === null)
+                    return;
+                const errors = validateState(next);
+                if (errors.length > 0) {
+                    throw new Error(`refusing to write state.json: ${errors.join("; ")}`);
+                }
+            },
         });
     }
     async init() {
@@ -185,18 +247,41 @@ export class StateStore {
      * current state (or null), passes it to `fn`, and writes the returned state
      * before releasing the lock. No other holder can interleave between the load
      * and the save. INV-remediate-state-02 + INV-remediate-state-03.
+     *
+     * Returning the shared `SKIP_WRITE` sentinel from `fn` is the no-op: the write
+     * is skipped and this resolves with the state that was READ. The skip decision
+     * is taken inside the SAME held lock as the write it avoids, so it cannot race
+     * a concurrent writer. Whole-run verbs that routinely change nothing — the
+     * `recover-ingest` retry loop is the live one — otherwise replace `state.json`
+     * with byte-identical content on every pass, which makes "did anything
+     * change?" unanswerable from the file and rewrites an artifact other readers
+     * treat as the run's ground truth.
      */
     async mutate(fn) {
         // Node-worktree guard (defense-in-depth behind the CLI-entry guard): a
         // dispatched worker's process must never transition shared run state,
         // whatever invocation shape reached this writer.
         assertNotNodeWorktreeCwd("a remediation state.json transition");
-        let next;
-        await this.store.mutate(async (current) => {
-            next = await fn(current);
+        let next = SKIP_WRITE;
+        const readValue = await this.store.mutate(async (current) => {
+            const produced = await fn(current);
+            // Same stamp as `saveState`, at the other write door: the version is a
+            // property of the store's writes, so no transition can produce an
+            // unstamped file. The value RESOLVED to the caller is the newly stamped
+            // state (matching what `saveState` put on disk); the SKIP_WRITE arm below
+            // still resolves with what was READ.
+            next = produced === SKIP_WRITE ? SKIP_WRITE : stampedState(produced);
             return next;
         });
-        return next;
+        if (next !== SKIP_WRITE)
+            return next;
+        // The store resolves a skipped write with the value it read. A skipped write
+        // over an ABSENT file has no state to resolve with — the caller asked to
+        // leave nothing there and nothing was there, so there is nothing to return.
+        if (readValue === null) {
+            throw new Error("StateStore.mutate returned SKIP_WRITE but no state.json exists to resolve with");
+        }
+        return readValue;
     }
     /**
      * Save state.json unconditionally (no TOCTOU protection, no read — so a
@@ -208,7 +293,25 @@ export class StateStore {
         // Same node-worktree guard as `mutate` — the unconditional-write recovery
         // path must not be the one door a worker-context write can still use.
         assertNotNodeWorktreeCwd("a remediation state.json write");
-        await this.store.replace(state);
+        await this.store.replace(stampedState(state));
     }
 }
+/**
+ * The state as it goes to disk: its own `contract_version` when it has one,
+ * else the current constant.
+ *
+ * Stamping here — at the two write doors, not in the read path — is what keeps
+ * `loadState` byte-faithful. A version conjured at READ time would make
+ * `loadState()` return a key the file does not contain, so the round trip
+ * `saveState(x)` → `loadState()` would not equal `x`, and a caller comparing
+ * states (the ingress's `state_changed`, the tests) would see a change that
+ * never happened. A state that already carries a DIFFERENT version is left
+ * alone: the write hook's validator refuses it loudly rather than this helper
+ * silently overwriting the caller's claim.
+ */
+function stampedState(state) {
+    return state.contract_version === undefined
+        ? { ...state, contract_version: REMEDIATION_STATE_CONTRACT_VERSION }
+        : state;
+}
 //# sourceMappingURL=store.js.map

package/dist/remediate/state/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/remediate/state/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAOL,kCAAkC,GACnC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAqE7E,qFAAqF;AACrF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;IACrC,SAAS;IACT,UAAU;IACV,2BAA2B;IAC3B,cAAc;IACd,QAAQ;IACR,oBAAoB;IACpB,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS;IAC7C,cAAc;IACd,QAAQ;IACR,oBAAoB;IACpB,SAAS;CACV,CAAC,CAAC;AAEH,sEAAsE;AACtE,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAW,CAAC;IACvC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CACT,mBAAmB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,uBAAuB,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChG,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,6BAA6B,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,yBAAyB,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,0BAA0B,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,wBAAwB,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,sEAAsE;gBACtE,yEAAyE;gBACzE,yEAAyE;gBACzE,kEAAkE;gBAClE,wEAAwE;gBACxE,wEAAwE;gBACxE,8EAA8E;gBAC9E,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAK,CAAC,CAAC,QAAQ,CAAe,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC9D,KAAK,MAAM,KAAK,IAAI,wBAAwB,CAC1C,KAAK,EACL,eAAe,CAAC,GAAG,CACpB,EAAE,CAAC;wBACF,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,4BAA4B,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,CAAC;oBACjD,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,GAAG,IAA+B,CAAC;gBAC3C,oEAAoE;gBACpE,IAAI,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1E,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,6CAA6C,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtE,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,2CAA2C,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CACzD,GAAG,CAAC,cAAc,CAAC,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,0CAA0C,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC1D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBAC7E,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,aAAa,GAAG,YAAY,CAAC;AACnC,4EAA4E;AAC5E,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAE5D,SAAS,SAAS,CAAC,YAAoB;IACrC,OAAO,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,YAAoB;IACpC,OAAO,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,UAAU;IAWX;IAES;IAZnB;;;;;;OAMG;IACc,KAAK,CAA2C;IAEjE,YACU,YAAoB;IAC5B,4EAA4E;IAC3D,cAAuB;QAFhC,iBAAY,GAAZ,YAAY,CAAQ;QAEX,mBAAc,GAAd,cAAc,CAAS;QAExC,IAAI,CAAC,KAAK,GAAG,qBAAqB,CAA0B;YAC1D,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC;YAC7B,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC;YAChC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAuB,CAAC;YACjC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,EAAmE;QAEnE,uEAAuE;QACvE,sEAAsE;QACtE,iDAAiD;QACjD,wBAAwB,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,IAAuB,CAAC;QAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACxC,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAuB;QACrC,0EAA0E;QAC1E,sEAAsE;QACtE,wBAAwB,CAAC,gCAAgC,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;CACF"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/remediate/state/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,UAAU,EACV,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAOL,kCAAkC,GACnC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAEvB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,+BAAwC,CAAC;AAE3C,iFAAiF;AACjF,MAAM,cAAc,GAAG,YAAY,CAAC;AAmEpC;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS;IAC7C,cAAc;IACd,QAAQ;IACR,oBAAoB;IACpB,SAAS;CACV,CAAC,CAAC;AAEH,sEAAsE;AACtE,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,8EAA8E;IAC9E,8EAA8E;IAC9E,wDAAwD;IACxD,+EAA+E;IAC/E,0EAA0E;IAC1E,sBAAsB;IACtB,IACE,GAAG,CAAC,kBAAkB,CAAC,KAAK,SAAS;QACrC,GAAG,CAAC,kBAAkB,CAAC,KAAK,kCAAkC,EAC9D,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,cAAc,EACd,kCAAkC,EAClC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,mBAAmB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,uBAAuB,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE7B,4EAA4E;IAC5E,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,6BAA6B,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,yBAAyB,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,0BAA0B,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,wBAAwB,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,sEAAsE;gBACtE,yEAAyE;gBACzE,yEAAyE;gBACzE,kEAAkE;gBAClE,wEAAwE;gBACxE,wEAAwE;gBACxE,8EAA8E;gBAC9E,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAK,CAAC,CAAC,QAAQ,CAAe,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC9D,KAAK,MAAM,KAAK,IAAI,wBAAwB,CAC1C,KAAK,EACL,eAAe,CAAC,GAAG,CACpB,EAAE,CAAC;wBACF,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,4BAA4B,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,CAAC;oBACjD,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,GAAG,IAA+B,CAAC;gBAC3C,oEAAoE;gBACpE,IAAI,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1E,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,6CAA6C,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtE,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,2CAA2C,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CACzD,GAAG,CAAC,cAAc,CAAC,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,0CAA0C,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC1D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBAC7E,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,aAAa,GAAG,YAAY,CAAC;AACnC,4EAA4E;AAC5E,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAE5D,SAAS,SAAS,CAAC,YAAoB;IACrC,OAAO,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,YAAoB;IACpC,OAAO,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,UAAU;IAWX;IAES;IAZnB;;;;;;OAMG;IACc,KAAK,CAA2C;IAEjE,YACU,YAAoB;IAC5B,4EAA4E;IAC3D,cAAuB;QAFhC,iBAAY,GAAZ,YAAY,CAAQ;QAEX,mBAAc,GAAd,cAAc,CAAS;QAExC,IAAI,CAAC,KAAK,GAAG,qBAAqB,CAA0B;YAC1D,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC;YAC7B,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC;YAChC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,wEAAwE;gBACxE,sEAAsE;gBACtE,gEAAgE;gBAChE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;gBACJ,CAAC;gBACD,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,mEAAmE;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE;gBACvE,OAAO,GAAuB,CAAC;YACjC,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO;gBAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,MAAM,CACV,EAEkD;QAElD,uEAAuE;QACvE,sEAAsE;QACtE,iDAAiD;QACjD,wBAAwB,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,IAAI,GAAyC,UAAU,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YACnC,uEAAuE;YACvE,kEAAkE;YAClE,wEAAwE;YACxE,0EAA0E;YAC1E,qCAAqC;YACrC,IAAI,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACrC,6EAA6E;QAC7E,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAuB;QACrC,0EAA0E;QAC1E,sEAAsE;QACtE,wBAAwB,CAAC,gCAAgC,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,KAAuB;IAC3C,OAAO,KAAK,CAAC,gBAAgB,KAAK,SAAS;QACzC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,kCAAkC,EAAE;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC"}

package/dist/remediate/state/types.d.ts

@@ -114,6 +114,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
         title: z.ZodString;
         category: z.ZodString;
         severity: z.ZodEnum<["critical", "high", "medium", "low", "info"]>;
+        severity_downgraded_from: z.ZodOptional<z.ZodEnum<["critical", "high", "medium", "low", "info"]>>;
         confidence: z.ZodEnum<["high", "medium", "low"]>;
         lens: z.ZodString;
         summary: z.ZodString;
@@ -172,6 +173,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         }>>;
+        evidence_lane: z.ZodOptional<z.ZodEnum<["per-file-lane", "design-review-lane"]>>;
         verification_status: z.ZodOptional<z.ZodEnum<["judge_confirmed", "asserted", "refuted_at_head"]>>;
         executable_anchor: z.ZodOptional<z.ZodObject<{
             command: z.ZodArray<z.ZodString, "many">;
@@ -256,6 +258,19 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         }>>;
+        lead_lineage: z.ZodOptional<z.ZodObject<{
+            producer: z.ZodString;
+            source_hash: z.ZodString;
+            confirmation: z.ZodLiteral<"lead">;
+        }, "strict", z.ZodTypeAny, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }, {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        }>>;
     }, "strip", z.ZodTypeAny, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -272,6 +287,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -285,6 +301,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -311,6 +328,11 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }, {
         id: string;
         confidence: "high" | "low" | "medium";
@@ -327,6 +349,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -340,6 +363,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -366,6 +390,11 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }>, "many">;
     blocks: z.ZodArray<z.ZodObject<{
         block_id: z.ZodString;
@@ -511,6 +540,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -524,6 +554,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -550,8 +581,13 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
-    candidate_closing_actions: ("push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none")[];
+    candidate_closing_actions: ("push" | "custom" | "none" | "commit" | "open-pr" | "publish" | "tag")[];
     project_type: string;
     blocks: {
         items: string[];
@@ -582,7 +618,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
     e2e_command?: string | undefined;
     test_command_source?: "project_facts" | "explicit" | undefined;
     e2e_command_source?: "project_facts" | "explicit" | undefined;
-    block_strategy?: "manual" | "test_graph" | "git_cocommit" | "file_overlap" | undefined;
+    block_strategy?: "file_overlap" | "manual" | "test_graph" | "git_cocommit" | undefined;
 }, {
     findings: {
         id: string;
@@ -600,6 +636,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             quoted_text?: string | undefined;
             hash_at_plan_time?: string | undefined;
         }[];
+        severity_downgraded_from?: "high" | "low" | "critical" | "medium" | "info" | undefined;
         impact?: string | undefined;
         likelihood?: string | undefined;
         evidence?: string[] | undefined;
@@ -613,6 +650,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             status: "grounded" | "ungrounded" | "refuted";
             reason?: string | undefined;
         } | undefined;
+        evidence_lane?: "per-file-lane" | "design-review-lane" | undefined;
         verification_status?: "judge_confirmed" | "asserted" | "refuted_at_head" | undefined;
         executable_anchor?: {
             command: string[];
@@ -639,8 +677,13 @@ export declare const RemediationPlanSchema: z.ZodObject<{
             snippet_hash: string;
             rule?: string | undefined;
         } | undefined;
+        lead_lineage?: {
+            producer: string;
+            source_hash: string;
+            confirmation: "lead";
+        } | undefined;
     }[];
-    candidate_closing_actions: ("push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none")[];
+    candidate_closing_actions: ("push" | "custom" | "none" | "commit" | "open-pr" | "publish" | "tag")[];
     project_type: string;
     blocks: {
         items: string[];
@@ -671,7 +714,7 @@ export declare const RemediationPlanSchema: z.ZodObject<{
     e2e_command?: string | undefined;
     test_command_source?: "project_facts" | "explicit" | undefined;
     e2e_command_source?: "project_facts" | "explicit" | undefined;
-    block_strategy?: "manual" | "test_graph" | "git_cocommit" | "file_overlap" | undefined;
+    block_strategy?: "file_overlap" | "manual" | "test_graph" | "git_cocommit" | undefined;
 }>;
 export type RemediationPlan = z.infer<typeof RemediationPlanSchema>;
 /**
@@ -690,14 +733,14 @@ export declare const RemediationHostHandoffRecordSchema: z.ZodDiscriminatedUnion
     work_item_ids: z.ZodArray<z.ZodString, "many">;
     contract_version: z.ZodLiteral<"remediation-host-handoff-record/v1alpha1">;
 }, "strict", z.ZodTypeAny, {
-    contract_version: "remediation-host-handoff-record/v1alpha1";
     run_id: string;
+    contract_version: "remediation-host-handoff-record/v1alpha1";
     baseline_commit: string;
     workload_sha256: string;
     work_item_ids: string[];
 }, {
-    contract_version: "remediation-host-handoff-record/v1alpha1";
     run_id: string;
+    contract_version: "remediation-host-handoff-record/v1alpha1";
     baseline_commit: string;
     workload_sha256: string;
     work_item_ids: string[];
@@ -709,15 +752,15 @@ export declare const RemediationHostHandoffRecordSchema: z.ZodDiscriminatedUnion
     contract_version: z.ZodLiteral<"remediation-host-handoff-record/v1alpha2">;
     scope_semantics: z.ZodLiteral<"explicit-directory-markers/v1">;
 }, "strict", z.ZodTypeAny, {
-    contract_version: "remediation-host-handoff-record/v1alpha2";
     run_id: string;
+    contract_version: "remediation-host-handoff-record/v1alpha2";
     baseline_commit: string;
     workload_sha256: string;
     work_item_ids: string[];
     scope_semantics: "explicit-directory-markers/v1";
 }, {
-    contract_version: "remediation-host-handoff-record/v1alpha2";
     run_id: string;
+    contract_version: "remediation-host-handoff-record/v1alpha2";
     baseline_commit: string;
     workload_sha256: string;
     work_item_ids: string[];
@@ -805,7 +848,7 @@ export declare const ClosingPlanSchema: z.ZodObject<{
         leftover_files?: string[] | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    action: "push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none";
+    action: "push" | "custom" | "none" | "commit" | "open-pr" | "publish" | "tag";
     custom_command?: string[] | undefined;
     pre_authorized?: boolean | undefined;
     closing_action_preview?: {
@@ -814,7 +857,7 @@ export declare const ClosingPlanSchema: z.ZodObject<{
         leftover_files?: string[] | undefined;
     } | undefined;
 }, {
-    action: "push" | "custom" | "commit" | "open-pr" | "publish" | "tag" | "none";
+    action: "push" | "custom" | "none" | "commit" | "open-pr" | "publish" | "tag";
     custom_command?: string[] | undefined;
     pre_authorized?: boolean | undefined;
     closing_action_preview?: {
@@ -921,6 +964,29 @@ export interface RemediationItemState {
     failure_reason?: string;
     /** Prompt-bound evidence supplied for a verified no-change host outcome. */
     host_result_evidence?: string[];
+    /**
+     * WHAT LANDED for this item, persisted at acceptance — the corroborated
+     * worktree outcome, not the host's claim. `commit_evidence.after` was verified
+     * reachable from HEAD and its diff-tree was verified to equal
+     * {@link host_landed_files} and to lie inside the item's prompt-bound write
+     * scope, so this is ground truth by the time it is written.
+     *
+     * It is persisted PER ITEM so a later boundary — the outcomes contract, the
+     * report — can attribute the landing to this item without re-running the
+     * ingest's git probes. `applied_edit_surface` is the run-wide union of
+     * {@link host_landed_files}; this is the per-item attribution that union
+     * cannot express.
+     *
+     * ITS READER IS `hasLandedCommitFor` (`steps/dispatch/hostHandoff.ts`), which
+     * asks whether ANY finding of a work item carries one. The ingest uses that
+     * answer to tell PARTIAL PROGRESS from unfinished work: a refusal that is
+     * "nothing is at the bound path" splits on it, so an item whose edits landed
+     * but whose result file is missing is reported to the host rather than
+     * disappearing as a bare missing-result line.
+     */
+    host_landed_commit?: string;
+    /** Repo-relative, path-sorted files the landed commit changed (see above). */
+    host_landed_files?: string[];
     /**
      * Item C — close-gate mechanical re-verify verdict for an analyzer-born
      * finding (set by `verifyAnalyzerLeads`; copied into the outcomes contract).
@@ -951,9 +1017,13 @@ export interface RemediationItemState {
      * CDC-25/CDC-26 — SOURCE-SIDE SHAPE. The per-finding verification-evidence
      * triple (file/line/mechanism) a producing module RECORDS onto this item at
      * its OWN phase (INV-COVERAGE's "evidence producer" half) before the single
-     * run-terminal `runClosePhase` PERSISTS it (INV-ISC-EVIDENCE-EMITTED). A
-     * runtime data flow through this already-existing state item, not a
-     * build-phase dependency: no cross-phase artifact token is minted for it.
+     * run-terminal `runClosePhase` PERSISTS it (INV-ISC-EVIDENCE-EMITTED). The
+     * producer is `verifyHeadEvidenceAgainstFindings`
+     * (`src/remediate/phases/closeVerifyHeadEvidence.ts`), whose own reads of the
+     * finding's cited location — at the audit's commit and at HEAD — are what the
+     * triple names. A runtime data flow through this already-existing state item,
+     * not a build-phase dependency: no cross-phase artifact token is minted for
+     * it.
      * This field lives here — inside item-status-partition-and-close's own
      * file_scope — and is therefore owned BY SCOPE, not by a clause 1(c)
      * declaration (that channel is only for a file outside every module's

package/dist/remediate/state/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/remediate/state/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM7D,OAAO,KAAK,EACV,OAAO,EACP,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,OAAO,EAAE,CAAC;AAWxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAIzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;IAI/B;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;OAMG;;IAEH;;;OAGG;;IAEH;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYI,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAxE9B;;;WAGG;;QAEH;;;;WAIG;;QAEH;;;;WAIG;;QAEH;;;;;;;;WAQG;;QAEH;;;;;;;WAOG;;QAEH;;;;;;WAMG;;QAEH;;;WAGG;;QAEH;;;;;;;;WAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+BH,+EAA+E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGxE,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACnD,0CAAmD,CAAC;AACtD,eAAO,MAAM,wCAAwC,EACnD,0CAAmD,CAAC;AACtD,eAAO,MAAM,gCAAgC,EAC3C,+BAAwC,CAAC;AAwB3C,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM9C,CAAC;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAe5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,8JACc,CAAC;AACpD,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAErE,uEAAuE;AACvE,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAKhC;AAED,eAAO,MAAM,0BAA0B;IAEnC,+DAA+D;;IAE/D,6EAA6E;;IAE7E;;;;;;OAMG;;;;;;;;;;EAGI,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;IAI1B;;;;OAIG;;IAEH;;;;OAIG;;QA7BH,+DAA+D;;QAE/D,6EAA6E;;QAE7E;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBI,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EACP,SAAS,GACT,aAAa,GACb,qBAAqB,GACrB,uBAAuB,GACvB,uBAAuB,GACvB,oBAAoB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,kCAAkC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,wBAAwB,EAAE,MAAM,CAAC;IACjC,wFAAwF;IACxF,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GACrC,OAAO,GACP,QAAQ,GACR,SAAS,GACT,SAAS,CAAC;AAEd;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,2EAA2E;IAC3E,OAAO,EAAE,OAAO,CAAC;IACjB,qDAAqD;IACrD,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,yEAAyE;IACzE,YAAY,EAAE,6BAA6B,CAAC;IAC5C;;;OAGG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;CACjD;AAED,0EAA0E;AAC1E,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,eAAe,GACf,aAAa,CAAC;AAElB;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,0FAA0F;IAC1F,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;IAC5E,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAKD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,uBAAuB,CAAC,EAAE,sBAAsB,CAAC;IACjD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wGAAwG;IACxG,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;CAC9C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/remediate/state/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAM7D,OAAO,KAAK,EACV,OAAO,EACP,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,OAAO,EAAE,CAAC;AAWxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAIzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;IAI/B;;;OAGG;;IAEH;;;;OAIG;;IAEH;;;;OAIG;;IAEH;;;;;;;;OAQG;;IAEH;;;;;;;OAOG;;IAEH;;;;;;OAMG;;IAEH;;;OAGG;;IAEH;;;;;;;;OAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYI,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAxE9B;;;WAGG;;QAEH;;;;WAIG;;QAEH;;;;WAIG;;QAEH;;;;;;;;WAQG;;QAEH;;;;;;;WAOG;;QAEH;;;;;;WAMG;;QAEH;;;WAGG;;QAEH;;;;;;;;WAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+BH,+EAA+E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGxE,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,EACnD,0CAAmD,CAAC;AACtD,eAAO,MAAM,wCAAwC,EACnD,0CAAmD,CAAC;AACtD,eAAO,MAAM,gCAAgC,EAC3C,+BAAwC,CAAC;AAwB3C,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM9C,CAAC;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAe5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,8JACc,CAAC;AACpD,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAErE,uEAAuE;AACvE,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAKhC;AAED,eAAO,MAAM,0BAA0B;IAEnC,+DAA+D;;IAE/D,6EAA6E;;IAE7E;;;;;;OAMG;;;;;;;;;;EAGI,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;IAI1B;;;;OAIG;;IAEH;;;;OAIG;;QA7BH,+DAA+D;;QAE/D,6EAA6E;;QAE7E;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBI,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EACP,SAAS,GACT,aAAa,GACb,qBAAqB,GACrB,uBAAuB,GACvB,uBAAuB,GACvB,oBAAoB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,kCAAkC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,wBAAwB,EAAE,MAAM,CAAC;IACjC,wFAAwF;IACxF,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GACrC,OAAO,GACP,QAAQ,GACR,SAAS,GACT,SAAS,CAAC;AAEd;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,2EAA2E;IAC3E,OAAO,EAAE,OAAO,CAAC;IACjB,qDAAqD;IACrD,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,yEAAyE;IACzE,YAAY,EAAE,6BAA6B,CAAC;IAC5C;;;OAGG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;CACjD;AAED,0EAA0E;AAC1E,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,eAAe,GACf,aAAa,CAAC;AAElB;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,0FAA0F;IAC1F,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC;IAC5E,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAKD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,sBAAsB,CAAC;IACjD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wGAAwG;IACxG,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;CAC9C"}

package/dist/remediate/steps/contractPipeline.d.ts

@@ -1,6 +1,7 @@
 import { type ValidationIssue, type JudgeReport, type WorkBlock, type WorkBlockSeam } from "audit-tools/shared";
 import { OBLIGATION_KIND_PRIORITY, type ObligationKind } from "../contractPipeline/obligationKinds.js";
 import { readIntakeRiskSignal, type AdversarialDepth } from "../riskSignal.js";
+import type { JudgeRepairTarget } from "audit-tools/shared";
 import { type ContractPipelineCrossGateInputs, type GateOutcome } from "../validation/contractPipelineGates.js";
 import type { ContractPipelineArtifactName } from "../contractPipeline/artifactStore.js";
 import type { RemediationStep } from "./types.js";
@@ -187,6 +188,65 @@ export interface SeedSourceDigestMismatch {
     /** The path's current sha256, or `null` when it is no longer readable. */
     actual: string | null;
 }
+/**
+ * The tool-named accept lane for seed-source drift — the file an OPERATOR writes
+ * to record "this drift is reviewed and does not invalidate the findings".
+ *
+ * A digest is a whole-file byte binding, so it moves for changes no finding is
+ * about: a release `version` bump in `package.json` moves the digest of every
+ * finding that cited `package.json` and blocked the run. The alarm was right
+ * that SOMETHING moved and wrong about whether the findings still held — there
+ * was no way to say so, and the run's remaining options were re-auditing or
+ * deleting the seed.
+ *
+ * WHY THE ACCEPT IS AN OPERATOR FILE AND NOT A DERIVED VERDICT. The tempting
+ * mechanical predicate is "do the drifted file's cited locations still exist"
+ * (line N still present). It is unsound in the direction that matters: a finding
+ * asserting "the config parser returns null on malformed input" cites line 42,
+ * and rewriting that line to throw leaves line 42 present, the digest
+ * moved, and the finding FALSE — the predicate accepts and the run designs
+ * against a claim the code no longer makes. That inference cannot be made from
+ * line counts by a language-neutral tool, and a predicate that is right about
+ * version bumps and wrong about behaviour changes is worse than no predicate:
+ * it silently converts "the alarm fired" into "the alarm was satisfied". So the
+ * judgment stays where it can actually be made — with the operator, recorded,
+ * and attributable — and the tool enforces only the shape of the record.
+ */
+export interface SeedSourceAcceptance {
+    /** The seed-recorded source path this decision covers (repo-relative). */
+    path: string;
+    /** Why the drift does not invalidate the findings. Required, non-empty. */
+    rationale: string;
+    /**
+     * Who decided. Attributable identity, like the counterexample waiver and the
+     * loop-core review attestation — no mechanical channel can prove WHO decided,
+     * so the record names the decider rather than pretending to verify them.
+     */
+    accepted_by: string;
+}
+/** The tool-named host lane: the operator's drift acceptances land here. */
+export declare function seedSourceAcceptancesPath(artifactsDir: string): string;
+/**
+ * Read the operator's acceptances, keyed by the same path normalization the
+ * mismatch side uses. A malformed entry is DROPPED, never widened: an acceptance
+ * missing its rationale or its decider records no decision, and treating it as
+ * one would turn a shape defect into a silent bypass of the alarm.
+ */
+export declare function readSeedSourceAcceptances(artifactsDir: string): Promise<Map<string, SeedSourceAcceptance>>;
+/**
+ * The seed paths the operator's acceptance file covers, applied to the drifted
+ * set under the ONE path normalization both sides share; everything else blocks.
+ *
+ * This is the accept path and it is deliberately the ONLY automatic one: the
+ * gate cannot tell a benign drift from a falsifying one, and the one predicate
+ * that claimed to (cited line counts) was unsound — see {@link SeedSourceAcceptance}.
+ */
+export declare function partitionSeedSourceDrift(artifactsDir: string, mismatches: readonly SeedSourceDigestMismatch[]): Promise<{
+    accepted: Array<SeedSourceAcceptance & {
+        mismatch: SeedSourceDigestMismatch;
+    }>;
+    blocking: SeedSourceDigestMismatch[];
+}>;
 /**
  * Seed source-digest binding — re-hash every path the path_a seed recorded and
  * report the ones that moved. Pure over (root, seed): the caller decides what a
@@ -201,7 +261,7 @@ export declare function detectSeedSourceDigestMismatches(root: string, seed: Pat
  * the failing classifications. Post-redesign the default is
  * `finalized_module_contracts` (not `design_spec`).
  */
-type ExtendedRepairTarget = "finalized_module_contracts" | "obligation_ledger" | "contract_assessment_report";
+type ExtendedRepairTarget = Exclude<JudgeRepairTarget, "counterexample" | "design_spec">;
 /**
  * Infer the most appropriate repair target from judge classifications when no
  * explicit repair_directive is provided. Examines only accepted classifications
@@ -501,6 +561,10 @@ export declare function collectDagWriteScopeRefusals(artifactsDir: string, root:
  * an invalid `source_finding_ids` declaration takes the same bounded re-emit as
  * every other promotion rejection, with no gate having executed past it.
  *
+ * The checks themselves are {@link evaluatePathACanonicalGroups} — the ONE body
+ * both this gate and the promoter call, so the gate can never certify a DAG the
+ * promoter then refuses.
+ *
  * Returns one line per violation; empty means the DAG is promotable on this
  * axis (or Path A is not in play at all).
  */