audit-tools 0.51.7 → 0.51.9

package/dist/shared/types/intentCheckpoint.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { FileDispositionStatusSchema } from "./disposition.js";
 import { CeilingSchema } from "./charter.js";
 import { CLOSING_ACTIONS } from "./closingActions.js";
+import { readOptionalJsonFile } from "../io/json.js";
 /**
  * The accepted scope and intent for a run, confirmed by the host before
  * planning. Single-sourced so both orchestrators share one shape: audit-code
@@ -145,6 +146,29 @@ export const IntentCheckpointSchema = z
      */
     design_review: z
         .object({
+        /**
+         * The `confirmed_at` of the confirmation that ANSWERED this block —
+         * the run the depth was chosen for.
+         *
+         * These dials are PER-RUN choices (owner, 2026-08-21: "a user may not
+         * want the same settings every audit"), and the checkpoint is the only
+         * durable record between the confirm-intent answer and the design-review
+         * emission. Recording WHICH confirmation answered them is what lets the
+         * reader tell this run's answer from a prior run's block copied forward
+         * with a fresh `confirmed_at`; without it the two are byte-identical and
+         * the tool announces `Reusing intent … conceptual depth deep` to an
+         * operator who never chose it.
+         *
+         * ABSENT MEANS UNANSWERED — a missing `answered_at` is never
+         * back-filled from `confirmed_at`, because the only value that proves
+         * this confirmation answered the block is one this confirmation's write
+         * supplied. Treating absence as agreement would let a checkpoint
+         * carrying a PRIOR run's block (a host that copied the file forward and
+         * rewrote `confirmed_at` but not this field) read as freshly answered,
+         * which is precisely the announcement the owner directive forbids. See
+         * `resolveDesignReviewBinding` for how a PRESENT value is compared.
+         */
+        answered_at: z.string().optional(),
         conceptual_depth: z.enum(["shallow", "deep"]).optional(),
         perspectives: z.number().int().min(1).optional(),
         /**
@@ -175,4 +199,253 @@ export const IntentCheckpointSchema = z
         .optional(),
 })
     .strict();
+/**
+ * The keys INSIDE the `design_review` block that are PROVENANCE rather than
+ * meaning: they record WHICH confirmation answered the block, they are not the
+ * answer. `answered_at` is the whole list today.
+ *
+ * SINGLE-SOURCED because two independent surfaces must both exclude it, for the
+ * same reason and with the same consequence if either forgets:
+ *
+ *  - the O2 semantic gate's structured projection (`DEFAULT_NORMALIZE_CONFIG`);
+ *  - the canonical artifact content hash (`NON_SEMANTIC_FIELDS_BY_ARTIFACT`).
+ *
+ * A re-confirm of the SAME depth stamps a fresh `answered_at` (it must — see
+ * `resolveRunBoundDesignReview`, which binds the block to the run that answered
+ * it). Left inside either surface, that provenance-only edit reads as a
+ * `structured_changed` delta and re-stales the entire planning cascade — the
+ * exact churn both strip lists exist to prevent.
+ */
+export const DESIGN_REVIEW_PROVENANCE_FIELDS = ["answered_at"];
+/**
+ * Parse one recorded instant to epoch milliseconds, or `undefined` when it is
+ * not a readable instant. THE normalization the binding compare runs through:
+ * a host authoring `2026-04-22T00:00:00Z` and the same moment as
+ * `2026-04-22T00:00:00.000Z` is one instant written two ways, and a comparison
+ * on the raw strings reads that as "a different run".
+ */
+function parseInstant(value) {
+    if (value === undefined || value.trim().length === 0)
+        return undefined;
+    const ms = Date.parse(value);
+    return Number.isNaN(ms) ? undefined : ms;
+}
+/**
+ * Resolve how the checkpoint's `design_review` block relates to THIS run.
+ *
+ * These dials are per-run (owner, 2026-08-21). The checkpoint is the one durable
+ * record between the confirm-intent answer and the design-review emission, so
+ * the block must carry its own provenance: `answered_at` names this
+ * confirmation exactly when this confirmation supplied the block.
+ *
+ * The comparison is on the two instants, NORMALIZED to epoch milliseconds —
+ * never on the raw strings, and never on their order. Not the raw strings,
+ * because the value is host-authored free text and a formatting difference
+ * (`…00Z` vs `…00.000Z`, a prompt placeholder left in) would otherwise read as
+ * "a different run" and silently downgrade `deep` to `shallow`. Not an
+ * ordering ("is this block newer than that confirmation?"), because host clocks
+ * are not a trust anchor and an ordering would silently accept a block from a
+ * LATER write than the confirmation it is being attributed to. An instant that
+ * does not parse is UNBOUND — never a match.
+ *
+ * ONE home for the question, because more than one consumer asks it — the
+ * conceptual dispatch resolves its depth here, the charter extraction resolves
+ * the ceiling, the clarification loop resolves its attention — and the failure
+ * mode of a second, weaker copy is an operator-facing announcement of a setting
+ * nobody chose.
+ */
+export function resolveDesignReviewBinding(checkpoint) {
+    const block = checkpoint?.design_review;
+    if (!block)
+        return { kind: "unanswered" };
+    const confirmedAt = checkpoint.confirmed_at;
+    const answeredAt = parseInstant(block.answered_at);
+    if (answeredAt === undefined) {
+        return {
+            kind: "unbound",
+            reason: `its \`answered_at\` (${block.answered_at === undefined
+                ? "absent"
+                : `\`${block.answered_at}\``}) is not a readable instant, so nothing records which confirmation answered it`,
+        };
+    }
+    const thisRun = parseInstant(confirmedAt);
+    if (thisRun === undefined) {
+        return {
+            kind: "unbound",
+            reason: `this confirmation's \`confirmed_at\` (\`${confirmedAt}\`) is not a readable ` +
+                "instant, so the block cannot be attributed to it",
+        };
+    }
+    if (answeredAt !== thisRun) {
+        return {
+            kind: "unbound",
+            reason: `it belongs to an earlier confirmation (answered at ` +
+                `\`${block.answered_at}\`; this run's confirmation is \`${confirmedAt}\`)`,
+        };
+    }
+    return { kind: "bound", settings: block };
+}
+/**
+ * The `design_review` block, but ONLY when the confirmation the checkpoint
+ * records is the one that ANSWERED it — the narrowed view of
+ * {@link resolveDesignReviewBinding} for the consumers that only need the
+ * dials. `undefined` for both non-bound outcomes, so every consumer falls back
+ * to the schema default rather than honoring a depth the operator never chose.
+ *
+ * A consumer that must TELL the operator the block was ignored asks
+ * {@link resolveDesignReviewBinding} instead and states its `reason`.
+ */
+export function resolveRunBoundDesignReview(checkpoint) {
+    const binding = resolveDesignReviewBinding(checkpoint);
+    return binding.kind === "bound" ? binding.settings : undefined;
+}
+// ── The validated read ────────────────────────────────────────────────────────
+/**
+ * A checkpoint whose bytes did NOT satisfy {@link IntentCheckpointSchema}, with
+ * the zod issues rendered as paths.
+ *
+ * A refusal is a THROW rather than `undefined` because "the file is not a
+ * checkpoint" and "there is no file" are different facts with different
+ * remedies: absent means the host has not confirmed yet (a normal fresh-run
+ * state), while present-but-unparseable means a write went wrong and the run's
+ * confirmed scope is not what the file appears to say. Returning `undefined`
+ * for both would let a corrupted checkpoint silently re-enter the pre-confirm
+ * path — the run would re-ask, and an operator would never learn that a
+ * confirmation they made had been discarded.
+ */
+export class IntentCheckpointInvalidError extends Error {
+    path;
+    issues;
+    constructor(path, issues) {
+        super(`${path} is not a valid intent checkpoint: ${issues.join("; ")}`);
+        this.name = "IntentCheckpointInvalidError";
+        this.path = path;
+        this.issues = issues;
+    }
+}
+/**
+ * Parse LENIENTLY: the checkpoint as far as it satisfies the schema, with the
+ * offending FIELDS DROPPED rather than failing the whole read, and the raw
+ * rejected values carried beside it.
+ *
+ * Why this is not just `safeParse`-and-undefined. The checkpoint's consumers
+ * split into two kinds. Some act on a field as a VALUE and must see only
+ * validated data (`customCommandOf`, the free-form-intent interpreter). Others
+ * ask a PRESENCE question — "is this checkpoint confirmed by the host?" — whose
+ * answer is a different field entirely, and which must still be answerable when
+ * some OTHER field is out of vocabulary. A whole-file rejection conflates the
+ * two: the gate that exists to report `closing_action: "deploy" is not one of …`
+ * would lose the `confirmed_by` it needs to even reach that branch.
+ *
+ * THE RETURNED `checkpoint` IS SCHEMA-VALID, and a rejected key is ABSENT from
+ * it. The earlier version of this function pruned the offending keys, re-parsed,
+ * then re-attached them VERBATIM — which is unsound the moment the defect is
+ * nested, because `IntentCheckpointSchema` is `.strict()` at every level: a
+ * `filters` object carrying one bad member was deleted as a whole, re-parsed,
+ * and then put back whole, so `{severity: ["high"], bogus: 1}` came back with
+ * `filters.bogus === 1` on a value the schema REJECTS. A consumer reading it as
+ * a value was reading unvalidated data through a function whose contract said
+ * otherwise. The offending raw value travels on {@link
+ * LenientIntentCheckpointRead.rejected} instead, so a caller that needs to
+ * QUOTE a refused value can, and a caller that needs to USE one must still
+ * validate it itself.
+ *
+ * A nested defect therefore takes its whole top-level record: the record is
+ * what the schema refused, and re-attaching the record would reintroduce the
+ * same unsoundness one level in. The gate can still quote the offending member
+ * — it reads it from `rejected` — but nothing downstream can mistake it for
+ * validated.
+ */
+function parseIntentCheckpointLenient(raw) {
+    const wholesale = IntentCheckpointSchema.safeParse(raw);
+    if (wholesale.success)
+        return { checkpoint: wholesale.data, rejected: [] };
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        return { checkpoint: undefined, rejected: [] };
+    }
+    const record = raw;
+    // Drop each top-level key the schema complained about, then retry. One pass is
+    // enough: dropping a key cannot make a DIFFERENT key's value valid or invalid,
+    // so the second parse either succeeds or fails on keys that were already
+    // reported. A nested issue names its top-level head here — that is the record
+    // the second parse drops.
+    const offending = new Set();
+    for (const issue of wholesale.error.issues) {
+        const [head] = issue.path;
+        if (typeof head === "string")
+            offending.add(head);
+        else
+            offending.add("<root>");
+    }
+    if (offending.has("<root>"))
+        return { checkpoint: undefined, rejected: [] };
+    const pruned = { ...record };
+    for (const key of offending)
+        delete pruned[key];
+    const second = IntentCheckpointSchema.safeParse(pruned);
+    if (!second.success)
+        return { checkpoint: undefined, rejected: [] };
+    return {
+        checkpoint: second.data,
+        rejected: [...offending]
+            .filter((key) => key in record)
+            .map((key) => ({ key, value: record[key] })),
+    };
+}
+/**
+ * Read and validate an intent checkpoint — the ONE reader for both
+ * orchestrators.
+ *
+ * Why this exists rather than each caller doing
+ * `readOptionalJsonFile<IntentCheckpoint>(path)`. That call's type parameter is
+ * an ASSERTION the compiler erases: it checks nothing, and the value it returns
+ * is whatever JSON happened to be at the path, cast. Every remediate-side read
+ * of `intent_checkpoint.json` was exactly that cast (five sites in
+ * `steps/nextStep.ts`), while the schema that defines the file — this module's
+ * — sat unused outside tests. A shape the reader never checked is a shape no
+ * reader can rely on: `confirmed_by`, `closing_action` and `free_form_intent`
+ * were each read off an unchecked object.
+ *
+ * ABSENT IS `undefined`, not an error (the fresh-run case). PRESENT AND INVALID
+ * THROWS, per {@link IntentCheckpointInvalidError}.
+ *
+ * `lenient: true` does NOT loosen that guarantee: the value returned is always
+ * one {@link IntentCheckpointSchema} accepts, with every offending field
+ * dropped. A caller that must report an offending value reads it from
+ * {@link readIntentCheckpointLenient}, which returns the raw rejections beside
+ * the parsed value.
+ */
+export async function readIntentCheckpoint(path, opts = {}) {
+    const raw = await readOptionalJsonFile(path);
+    if (raw === undefined || raw === null)
+        return undefined;
+    const parsed = IntentCheckpointSchema.safeParse(raw);
+    if (parsed.success)
+        return parsed.data;
+    if (opts.lenient)
+        return parseIntentCheckpointLenient(raw).checkpoint;
+    throw new IntentCheckpointInvalidError(path, parsed.error.issues.map((issue) => `${issue.path.length > 0 ? issue.path.join(".") : "<root>"}: ${issue.message}`));
+}
+/**
+ * Read an intent checkpoint LENIENTLY, keeping the fields the schema refused.
+ *
+ * The one reader for a caller that must NAME an offending value — the
+ * confirm-intent gate renders `closing_action: "deploy" is not one of …`, and it
+ * cannot do that from a value the field was dropped out of. Every other lenient
+ * caller wants only {@link readIntentCheckpoint}'s `checkpoint` and should use
+ * that instead: this function exists for the reporting case, not as a wider
+ * door onto unvalidated data.
+ *
+ * `rejected` carries each refused TOP-LEVEL key with the value as written. A
+ * defect nested inside a record appears under that record's key — the record is
+ * what the schema refused, and the whole record is what stays out of the
+ * returned checkpoint.
+ */
+export async function readIntentCheckpointLenient(path) {
+    const raw = await readOptionalJsonFile(path);
+    if (raw === undefined || raw === null) {
+        return { checkpoint: undefined, rejected: [] };
+    }
+    return parseIntentCheckpointLenient(raw);
+}
 //# sourceMappingURL=intentCheckpoint.js.map

package/dist/shared/types/intentCheckpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;OAKG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAClD;;;;;OAKG;IACH,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC;SACnB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb,wEAAwE;IACxE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;WAUG;QACH,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC;;;;;;;;;WASG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"intentCheckpoint.js","sourceRoot":"","sources":["../../../src/shared/types/intentCheckpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yDAAyD;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qEAAqE;IACrE,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,gDAAgD;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,gEAAgE;IAChE,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;OAKG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAClD;;;;;OAKG;IACH,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC;SACnB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb,wEAAwE;IACxE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC;SAClB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN;;;;;;;;WAQG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,4CAA4C;QAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,kEAAkE;QAClE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/B,kEAAkE;QAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;;OAKG;IACH,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC;QACN;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD;;;;;;;;;;WAUG;QACH,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC;;;;;;;;;WASG;QACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAoBZ;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAsB,CAAC,aAAa,CAAC,CAAC;AAmBlF;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAwC;IAExC,MAAM,KAAK,GAAG,UAAU,EAAE,aAAa,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC;IAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,wBACE,KAAK,CAAC,WAAW,KAAK,SAAS;gBAC7B,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,IAC5B,gFAAgF;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,2CAA2C,WAAW,wBAAwB;gBAC9E,kDAAkD;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,qDAAqD;gBACrD,KAAK,KAAK,CAAC,WAAW,oCAAoC,WAAW,KAAK;SAC7E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAwC;IAExC,MAAM,OAAO,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,CAAS;IACb,MAAM,CAAoB;IACnC,YAAY,IAAY,EAAE,MAAyB;QACjD,KAAK,CAAC,GAAG,IAAI,sCAAsC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,SAAS,4BAA4B,CAAC,GAAY;IAChD,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS,CAAC,OAAO;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,+EAA+E;IAC/E,+EAA+E;IAC/E,yEAAyE;IACzE,8EAA8E;IAC9E,0BAA0B;IAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;YAC7C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5E,MAAM,MAAM,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,QAAQ,EAAE,CAAC,GAAG,SAAS,CAAC;aACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,MAAM,CAAC;aAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,OAAuC,EAAE;IAEzC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAU,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,4BAA4B,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;IACtE,MAAM,IAAI,4BAA4B,CACpC,IAAI,EACJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CACrB,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACjF,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAU,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,4BAA4B,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/shared/types/intentInterpretation.d.ts

@@ -1,5 +1,5 @@
 /**
- * Versioned seam contract for the free_form_intent Interpreter (N-X06).
+ * Versioned seam contract for the free_form_intent Interpreter.
  *
  * Pins the output shape of the intent interpretation step so that consumers
  * (audit-code, remediate-code) can be validated against a single,

package/dist/shared/types/intentInterpretation.js

@@ -1,5 +1,5 @@
 /**
- * Versioned seam contract for the free_form_intent Interpreter (N-X06).
+ * Versioned seam contract for the free_form_intent Interpreter.
  *
  * Pins the output shape of the intent interpretation step so that consumers
  * (audit-code, remediate-code) can be validated against a single,