audit-tools 0.52.0 → 0.52.1

package/dist/remediate/steps/prompts.js

@@ -1,5 +1,5 @@
 import { findingLead, renderFindingBadgeBody, renderPromptCommand, } from "audit-tools/shared";
-import { INTAKE_CLARIFICATION_SCHEMA_VERSION, INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION, INTAKE_SUMMARY_SCHEMA_VERSION, blockingIntakeQuestions, } from "../intake.js";
+import { INTAKE_CLARIFICATION_SCHEMA_VERSION, INTAKE_SUMMARY_SCHEMA_VERSION, blockingIntakeQuestions, } from "../intake.js";
 export function loaderCommand(command) {
     const args = Array.isArray(command)
         ? command
@@ -9,17 +9,68 @@ export function loaderCommand(command) {
 function blockedItems(state) {
     return Object.values(state.items ?? {}).filter((item) => item.status === "blocked");
 }
-export function clarificationPrompt(clarifications, resolutionPath, refusal) {
-    return `
-# Resolve Remediation Clarifications
-${refusal
+/**
+ * The resolution-entry rules: an example entry, the three actions as a table,
+ * the `scope_additions` rule, and the whole-file refusal. They state exactly
+ * what the one resolution parser (`readPlanClarificationResolutions`,
+ * nextStep.ts) accepts.
+ */
+function resolutionEntryRules(firstId, rationaleExample) {
+    return `\`\`\`json
+[
+  {
+    "finding_id": "${firstId}",
+    "action": "clarified",
+    "rationale": "${rationaleExample}"
+  }
+]
+\`\`\`
+
+The file is a JSON array with one entry per finding. Each entry has
+\`finding_id\`, \`action\` and, for \`clarified\`, \`rationale\`. Use one of these
+three actions:
+
+| \`action\` | Use it when | Effect |
+|---|---|---|
+| \`clarified\` | The user answered, or the question was not ambiguous after all. | The fix continues. \`rationale\` is REQUIRED and must not be empty: it carries the answer to the worker. |
+| \`reject_finding\` | The finding itself is not a real issue. | The finding is DROPPED. Never use it to say only that the question was not ambiguous. |
+| \`defer\` | The user chose to skip this finding in this run. | The finding is not fixed in this run. Only the user decides a deferral. |
+
+A \`clarified\` entry can also have \`scope_additions\`: a list of files that the
+answer adds to the fix's write scope, such as a test the fix must create. Write
+each path relative to the repository root. A path may name a new file, but its
+directory must already contain a file that git tracks. Do not put
+\`scope_additions\` on a \`reject_finding\` or \`defer\` entry. Never edit the
+plan's \`touched_files\` by hand.
+
+The tool refuses the WHOLE file when any entry is wrong: an unknown action, a
+missing or empty \`rationale\` on \`clarified\`, a \`scope_additions\` path that
+breaks the rule above, a duplicate \`finding_id\`, or an id outside the set below.
+The refusal names the entry and the field. Nothing is applied, and this step
+comes back.`;
+}
+/**
+ * The one refusal banner every resolution prompt shows after the tool refused
+ * and archived the previous file. The reason names each problem, so the banner
+ * does not guess which kind of problem it was.
+ */
+function refusalBanner(refusal, outcome) {
+    return refusal
         ? `
-> ⚠ **Your previous resolution was REFUSED and archived — nothing was applied.**
+> ⚠ **Your previous resolution was REFUSED and archived — nothing was ${outcome}.**
 > ${refusal}
-> Re-submit the WHOLE resolution with ids drawn only from the set below.
+> Fix each problem named above. Then re-submit the WHOLE file.
 `
-        : ""}
-Ask the user to resolve all clarifications in one batched response.
+        : "";
+}
+export function clarificationPrompt(clarifications, resolutionPath, refusal) {
+    const ids = clarifications.map((c) => c.finding_id);
+    const count = clarifications.length;
+    return `
+# Resolve Remediation Clarifications
+${refusalBanner(refusal, "applied")}
+Workers paused ${count} finding${count === 1 ? "" : "s"} because each needs an
+answer from the user. Ask the user all of the questions in one message.
 
 ${clarifications
         .map((item) => `
@@ -35,35 +86,13 @@ After the user answers, write JSON to exactly:
 
 \`${resolutionPath}\`
 
-\`\`\`json
-[
-  {
-    "finding_id": "...",
-    "action": "clarified",
-    "rationale": "...",
-    "scope_additions": ["optional — files the answer ADDS to the fix's write scope"]
-  }
-]
-\`\`\`
-
-Per item use \`"action": "clarified"\` (the user answered, OR there was no real
-ambiguity after all — proceed with the finding, put the answer/decision in
-\`rationale\`), \`"action": "reject_finding"\` (the FINDING itself is not a real
-issue — this DROPS it, so use it only to discard a finding, never just to say the
-question wasn't ambiguous), or \`"action": "defer"\` (the user explicitly chose to
-skip it this run).
-
-When the answer requires files outside the item's current write scope — a test
-the fix must create, the source a generated artifact mirrors, a new shared
-module, a manifest — list them (repo-relative) in \`scope_additions\`: the tool
-widens the owning block and re-mints the work item. NEVER edit the plan's
-\`touched_files\` by hand. An entry that does not resolve beneath the repository
-root, or whose directory does not exist in the tracked tree, refuses the whole
-resolution and re-presents this step.
+${resolutionEntryRules(ids[0] ?? "F-001", "the user's answer, in words the worker can act on")}
 
 \`finding_id\` MUST be drawn from this closed set (copy, never retype):
-${clarifications.map((c) => `\`${c.finding_id}\``).join(", ") || "_(none)_"}. An id
-outside it refuses the whole resolution and re-presents this step.
+${ids.map((id) => `\`${id}\``).join(", ") || "_(none)_"}.
+
+You can answer only some of the findings. A finding with no entry stays paused,
+and a later step asks about it again.
 
 Then run \`${loaderCommand("next-step")}\`.
 `;
@@ -80,71 +109,48 @@ Then run \`${loaderCommand("next-step")}\`.
  * host writes an empty array to proceed — no user round is forced on a clean plan.
  */
 export function ambiguityReviewPrompt(candidates, resolutionPath, validFindingIds = [], refusal) {
-    const candidateBlock = candidates.length
-        ? candidates
-            .map((item) => `
+    const count = candidates.length;
+    const intro = count
+        ? `The tool found ${count} candidate ambigu${count === 1 ? "ity" : "ities"} in the remediation plan. A candidate is a
+starting point, not a final list.`
+        : `The tool found no candidate ambiguity in the remediation plan. Still review
+the findings in the set below yourself.`;
+    const candidateBlock = candidates
+        .map((item) => `
 ## ${item.finding_id}
 
 - Category: ${item.category}
-- Candidate ambiguity: ${item.description}`)
-            .join("\n")
-        : "_(no deterministic candidates — still review the plan's findings yourself)_";
+- Candidate: ${item.description}
+`)
+        .join("");
+    const firstId = candidates[0]?.finding_id ?? validFindingIds[0] ?? "F-001";
     return `
-# Resolve scoping/judgment ambiguity BEFORE implementing
-${refusal
-        ? `
-> ⚠ **Your previous resolution was REFUSED and archived — nothing was applied.**
-> ${refusal}
-> Re-submit the WHOLE resolution with ids drawn only from the valid set below.
-`
-        : ""}
-Below are deterministic **candidate** ambiguities in the remediation plan. They
-are starting points, not a final list.
-
-1. **Review each candidate against the code** (read the cited files / repo). Drop
-   any that are not genuinely ambiguous.
-2. **Add any ambiguity you find** that the heuristics missed — anything where the
-   right scope, the intended behavior, or whether to act at all is unclear.
-3. **Batch every genuine ambiguity into ONE round** of user questions. Resolve
-   them all now; do not let any scoping/judgment question slip to mid-run triage.
-
+# Resolve ambiguity in the plan before implementation
+${refusalBanner(refusal, "applied")}
+${intro}
 ${candidateBlock}
+Do these steps:
 
-After the user answers (or if you determined there is nothing genuinely
-ambiguous), write JSON to exactly:
+1. Read the cited files for each candidate. Drop a candidate that is not a real
+   ambiguity.
+2. Add each real ambiguity that the candidates missed: an unclear scope, an
+   unclear intended behavior, or an unclear choice to fix at all. It can be about
+   any finding in the set below.
+3. Ask the user all of the remaining questions in one message. Do not leave a
+   scope question for a later step.
+
+After the user answers, write JSON to exactly:
 
 \`${resolutionPath}\`
 
-\`\`\`json
-[
-  {
-    "finding_id": "...",
-    "action": "clarified",
-    "rationale": "the user's answer / decided scope",
-    "scope_additions": ["optional — files the answer ADDS to the fix's write scope"]
-  }
-]
-\`\`\`
+If no real ambiguity remains, write \`[]\`. The plan then continues unchanged.
+
+${resolutionEntryRules(firstId, "the user's answer: the scope the fix must have")}
+
+\`finding_id\` MUST be drawn from this closed set (copy, never retype):
+${validFindingIds.map((id) => `\`${id}\``).join(", ") || "_(none)_"}.
 
-Per item: \`"action": "clarified"\` (answered, OR you decided it was not genuinely
-ambiguous — proceed with the finding, put the answer/decision in \`rationale\`),
-\`"action": "reject_finding"\` (the FINDING itself is not a real issue — this DROPS
-it; never use it merely to say a question wasn't ambiguous, or you will lose a
-finding the review gate approved), or \`"action": "defer"\` (the user explicitly
-chose to skip it this run). Deferral is the **user's** call — never decide it
-unilaterally. Write \`[]\` if nothing is genuinely ambiguous.
-
-When an answer requires files outside the finding's current write scope — a test
-the fix must create, the source a generated artifact mirrors, a new shared
-module, a manifest — list them (repo-relative) in \`scope_additions\`: the tool
-widens the owning block's write scope in-band. NEVER edit the plan's
-\`touched_files\` by hand. An entry that does not resolve beneath the repository
-root, or whose directory does not exist in the tracked tree, refuses the whole
-resolution and re-presents this step.
-
-\`finding_id\` MUST be drawn from the plan's closed id set (copy, never retype):
-${validFindingIds.map((id) => `\`${id}\``).join(", ") || "_(none)_"}. An id outside
-it refuses the whole resolution and re-presents this step.
+A finding with no entry continues as planned.
 
 Then run \`${loaderCommand("next-step")}\`.
 `;
@@ -154,13 +160,13 @@ Then run \`${loaderCommand("next-step")}\`.
  * deterministic work — bucketed every original finding by review-necessity,
  * with a rationale and a coarse implementation cost. The host's job is the
  * semantic slot the tool cannot fill: present each item to the user with the
- * pros/cons of acting vs. not, and collect approve/disapprove. The gate exists
+ * pros/cons of acting vs. not, and collect approve/decline. The gate exists
  * because design-review (strategic) findings were previously swept to a terminal
  * disposition inside quality-tail blocks without ever being shown — so the
  * strategic tier MUST be presented item-by-item, never rubber-stamped.
  *
  * Default is approve-all: an empty/absent resolution proceeds with every
- * finding. Disapproved items are RECORDED with a reason, never silently closed.
+ * finding. Declined items are RECORDED with a reason, never silently closed.
  */
 export function reviewApprovalPrompt(request, resolutionPath, refusal) {
     const tierSections = request.tiers
@@ -183,28 +189,19 @@ export function reviewApprovalPrompt(request, resolutionPath, refusal) {
                 badge,
                 `- Why this tier: ${item.rationale}`,
                 `- Implementation cost (blast radius): \`${item.implementation_cost}\``,
-                "- **Present to the user with the pros/cons of acting vs. not acting, then record their decision.**",
             ].join("\n");
         })
             .join("\n\n");
-        return `## ${tier.label} — ${tier.items.length} item(s)\n\n${tier.description}\n${items}`;
+        return `## ${tier.label} — ${tier.items.length} item(s)\n\n${tier.description}\n\n${items}`;
     })
         .join("\n\n");
     const validIds = request.tiers.flatMap((t) => t.items.map((i) => i.finding_id));
     return `
-# Review-Approval Gate — approve or disapprove before implementation
-${refusal
-        ? `
-> ⚠ **Your previous resolution was REFUSED and archived — nothing was recorded.**
-> ${refusal}
-> Re-submit the WHOLE resolution below with ids drawn only from the valid set.
-`
-        : ""}
-Before any code changes, every audit finding is presented below, bucketed by how
-much of **your** judgment it needs. This gate exists so that strategic
-(design/architecture) findings are never quietly closed without your sight — so
-walk the user through them, especially the **Strategic** tier, with the trade-offs
-of acting vs. leaving each as-is.
+# Review-Approval Gate — the user approves or declines each finding
+${refusalBanner(refusal, "recorded")}
+The user decides which findings to fix before any code changes. Present every
+finding below to the user. For each Strategic finding, state the benefit and the
+cost of a fix and of no fix, and get a separate decision from the user.
 
 - Total findings: **${request.total}**
 - Strategic: **${request.counts.strategic}** · Concrete: **${request.counts.concrete}** · Mechanical: **${request.counts.mechanical}**
@@ -215,26 +212,32 @@ ${tierSections}
 
 ## Record the user's decision
 
-The default is to **proceed with every finding**. You only need to record the
-items the user wants to **disapprove** (skip). Write JSON to exactly:
+Every finding is fixed unless the user declines it. Write JSON to exactly:
 
 \`${resolutionPath}\`
 
 \`\`\`json
 {
-  "disapproved_findings": ["FINDING-ID-the-user-declined"],
-  "disapproved_tiers": []
+  "declined_findings": [],
+  "declined_tiers": []
 }
 \`\`\`
 
-- Leave \`disapproved_findings\` empty (\`[]\`) to approve everything.
-- Use \`disapproved_tiers\` (e.g. \`["mechanical"]\`) to decline an entire tier at once.
-- Disapproved findings are recorded as a declined disposition with a reason —
-  they are not acted on, and they are not silently dropped.
-- \`disapproved_findings\` entries MUST be drawn from this closed set (copy, never
-  retype): ${validIds.map((id) => `\`${id}\``).join(", ")}. \`disapproved_tiers\`
-  entries MUST be one of \`strategic\`, \`concrete\`, \`mechanical\`. An id outside
-  these sets refuses the whole resolution and re-presents this gate.
+The file above approves every finding.
+
+- To decline one finding, add \`{ "finding_id": "<id>", "reason": "<the user's
+  reason, in their words>" }\` to \`declined_findings\`. \`reason\` is optional; leave
+  it out when the user gave none.
+- To decline a whole tier, add its name to \`declined_tiers\`: \`strategic\`,
+  \`concrete\` or \`mechanical\`.
+- A declined finding is not fixed. The final report lists it with the user's
+  reason.
+- \`finding_id\` MUST be drawn from this closed set (copy, never retype):
+  ${validIds.map((id) => `\`${id}\``).join(", ")}.
+
+The tool refuses the WHOLE file when it is not valid JSON, has a field not shown
+above, has a wrong type, or names an id or tier outside the sets above. The
+refusal names each problem. Nothing is recorded, and this step comes back.
 
 Then run \`${loaderCommand("next-step")}\`.
 `;
@@ -358,63 +361,47 @@ Checked default input locations:
 ${checkedPaths.map((candidate) => `- \`${candidate}\``).join("\n")}
 ${missing}
 
-If the user provides document paths, write JSON to exactly:
+Give the starting point to the tool with command flags. The tool records the
+sources itself: do not write a source manifest, and do not edit source files.
 
-\`${paths.sourceManifest}\`
-
-\`\`\`json
-{
-  "schema_version": "${INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION}",
-  "created_from": "conversation",
-  "sources": [
-    { "type": "document", "path": "path/from/user-or-absolute-path", "label": "input-01" }
-  ]
-}
-\`\`\`
+- **Documents.** Pass each path with \`--input\`. Repeat \`--input\` once for each
+  document. An \`audit-findings.json\` report is read as structured findings.
 
-If the user provides conversational feedback, write their full feedback to
-exactly:
+  \`${loaderCommand("next-step --input <path> --input <path>")}\`
 
-\`${paths.conversationStart}\`
+- **Conversational feedback.** Write the user's full feedback, in their words,
+  to exactly:
 
-Then include that file in the source manifest:
+  \`${paths.conversationStart}\`
 
-\`\`\`json
-{
-  "schema_version": "${INTAKE_SOURCE_MANIFEST_SCHEMA_VERSION}",
-  "created_from": "conversation",
-  "sources": [
-    { "type": "conversation", "path": ${JSON.stringify(paths.conversationStart)}, "label": "conversation-start" }
-  ]
-}
-\`\`\`
+  Then pass that file with \`--guidance-file\`:
 
-If the user provides both, include both source types in the same manifest. Do
-not edit source files.
+  \`${loaderCommand(["next-step", "--guidance-file", paths.conversationStart])}\`
 
-Then run:
+- **Both.** Write the feedback file as above. Then pass both flags in one command:
 
-\`${loaderCommand("next-step")}\`
+  \`${loaderCommand(["next-step", "--input", "<path>", "--guidance-file", paths.conversationStart])}\`
 `;
 }
-export function synthesizeIntakePrompt(manifestPath, sources, paths, hasClarificationResolution, intentCheckpointPath) {
+/**
+ * The host writes ONE file here: the intake summary. It is the single source
+ * the tool reads — the tool renders `remediation-brief.md` from it
+ * (`writeRemediationBrief`), and the confirm step builds its scope proposal
+ * from it. The host once also wrote the brief and a "draft" intent checkpoint,
+ * which put the same facts in three files that could disagree.
+ */
+export function synthesizeIntakePrompt(sources, paths, hasClarificationResolution) {
     const clarificationText = hasClarificationResolution
-        ? `\nAlso read the clarification answers at:\n\n\`${paths.clarificationResolution}\`\n`
+        ? `\nAlso read the user's answers to the earlier questions:\n\n- \`${paths.clarificationResolution}\`\n`
         : "";
-    const checkpointPath = intentCheckpointPath ?? paths.intentCheckpoint;
     return `
-# Synthesize Remediation Intake
+# Synthesize the remediation intake
 
-Read the source manifest:
-
-\`${manifestPath}\`
-
-Then read only the listed source files:
+Read these source files:
 
 ${formatIntakeSources(sources)}
 ${clarificationText}
-Create a launch brief for the remediation workflow. The goal is to eliminate
-ambiguity before the normal remediation planner turns this into findings.
+Do not edit any file except the one below.
 
 Write JSON to exactly:
 
@@ -425,92 +412,58 @@ Write JSON to exactly:
   "schema_version": "${INTAKE_SUMMARY_SCHEMA_VERSION}",
   "ready": false,
   "source_type": "documents",
-  "goals": ["specific remediation goal"],
-  "non_goals": ["explicitly out-of-scope change"],
-  "constraints": ["compatibility, dependency, testing, timing, or style constraint"],
-  "affected_files": [{ "path": "relative/path.ts", "reason": "why this file is implicated" }],
+  "source_summary": "What the sources ask for, in two or three sentences.",
+  "goals": ["a specific remediation goal"],
+  "non_goals": ["a change that is out of scope"],
+  "constraints": ["a compatibility, dependency, test, timing or style constraint"],
+  "affected_files": [{ "path": "src/router.ts", "reason": "why this file is part of the fix" }],
+  "acceptance_criteria": ["an observable result that shows the goal is met"],
+  "scope_summary": "One sentence: the files and areas in scope.",
+  "intent_summary": "One sentence: the purpose of this run.",
+  "filters": {},
   "open_questions": [
     {
       "id": "Q-001",
       "category": "scope_of_fix",
-      "question": "What needs to be clarified before code changes?",
+      "question": "Does the refactor include the CLI package, or only the server?",
       "blocking": true
     }
   ]
 }
 \`\`\`
 
-Set \`ready\` to \`true\` only when the goals, non-goals, affected areas, and
-success criteria are clear enough that implementation choices will not depend
-on another user decision. If any blocking ambiguity remains, set \`ready\` to
-\`false\` and list the questions.
+Rules:
 
-Use \`source_type\` of \`structured_audit\`, \`documents\`, \`conversation\`,
-or \`mixed\`.
+- \`source_type\` is one of \`structured_audit\`, \`documents\`, \`conversation\`, \`mixed\`.
+- Set \`ready\` to \`true\` only when no implementation choice depends on another
+  user decision. Then \`goals\` must not be empty, and \`affected_files\` must not be
+  empty unless \`source_type\` is \`structured_audit\`.
+- Set \`ready\` to \`false\` when the user must decide something first. Then add each
+  question to \`open_questions\` with \`"blocking": true\`. \`ready: false\` with no
+  blocking question is refused.
+- A question without \`"blocking": true\` is information only. The user sees it at
+  confirmation, and it does not stop the run.
+- \`filters\` stays \`{}\` unless the sources clearly limit the run. Its keys are
+  \`severity\`, \`lenses\`, \`packages\` and \`themes\`, each a list of strings.
+- \`intent_interpretation\` (optional): when a conversation source states the
+  user's intent in free words, write one sentence on how you read it.
 
-Also write a Markdown launch brief to exactly:
+The tool refuses the file when a field is missing, has a wrong type, or breaks a
+rule above. The refusal names each problem, and this step comes back.
 
-\`${paths.brief}\`
+The tool writes the Markdown brief and the scope proposal from this file. Do not
+write them.
 
-The brief must include:
-
-- source summary
-- goals
-- non-goals
-- constraints
-- affected files or discovery targets
-- acceptance criteria
-- open questions, if any
-
-Also write a preliminary intent checkpoint to exactly:
-
-\`${checkpointPath}\`
-
-\`\`\`json
-{
-  "schema_version": "intent-checkpoint/v1",
-  "confirmed_at": "<ISO-8601 timestamp for when this draft was created>",
-  "confirmed_by": "draft",
-  "scope_summary": "<pre-populated scope derived from the goals and affected_files above>",
-  "intent_summary": "<pre-populated intent derived from the goals and source_type above>",
-  "filters": {},
-  "pre_draft_questions": [
-    {
-      "id": "Q-001",
-      "question": "<question text from open_questions above>",
-      "blocking": true
-    }
-  ]
-}
-\`\`\`
-
-Rules for the preliminary checkpoint:
-- \`confirmed_by\` MUST be \`"draft"\` (sentinel for unconfirmed state).
-- Pre-populate \`scope_summary\` from the goals and affected areas; pre-populate
-  \`intent_summary\` from the overall purpose (e.g. "full remediation of security
-  findings from the audit report").
-- Copy ALL open_questions into \`pre_draft_questions\`, preserving their ids and
-  blocking flags. Non-blocking questions are included as FYI context.
-- Do NOT write a \`closing_action\`: the tool detects the candidates from the
-  repository's shape and the host chooses one at confirmation.
-- If a \`free_form_intent\` was interpreted (e.g. "prioritizing security
-  findings"), record a brief explanation in \`intent_interpretation\`.
-- Leave \`filters\` empty (\`{}\`) unless the source clearly implies specific
-  severity/lens/package scope.
-
-Do not edit source files.
-
-Then run:
-
-\`${loaderCommand("next-step")}\`
+Then run \`${loaderCommand("next-step")}\`.
 `;
 }
 export function collectIntakeClarificationsPrompt(summary, paths) {
     const questions = blockingIntakeQuestions(summary);
+    const ids = questions.map((question) => question.id);
     return `
 # Resolve Remediation Intake Questions
 
-Ask the user to answer all blocking intake questions in one response.
+Ask the user all of the blocking intake questions below in one message.
 
 ${questions
         .map((question) => `
@@ -530,14 +483,24 @@ After the user answers, write JSON to exactly:
   "schema_version": "${INTAKE_CLARIFICATION_SCHEMA_VERSION}",
   "answers": [
     {
-      "question_id": "Q-001",
-      "answer": "User's answer",
-      "rationale": "Optional short note about how the answer resolves ambiguity"
+      "question_id": "${ids[0] ?? "Q-001"}",
+      "answer": "the user's answer, in their words"
     }
   ]
 }
 \`\`\`
 
+Write one entry in \`answers\` for each question the user answered. \`answer\` is
+required and must not be blank. You can add an optional \`rationale\`: a short
+note on how the answer removes the ambiguity.
+
+\`question_id\` MUST be drawn from this closed set (copy, never retype):
+${ids.map((id) => `\`${id}\``).join(", ") || "_(none)_"}.
+
+The tool refuses the file when an entry has an unknown \`question_id\` or a blank
+\`answer\`, or when no entry answers a question above. The refusal names each
+problem, and this step comes back.
+
 Then run:
 
 \`${loaderCommand("next-step")}\`

package/dist/remediate/steps/prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/remediate/steps/prompts.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mCAAmC,EACnC,qCAAqC,EACrC,6BAA6B,EAC7B,uBAAuB,GAIxB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,mBAAmB,CAAC,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsC,EACtC,cAAsB,EACtB,OAAgB;IAEhB,OAAO;;EAGP,OAAO;QACL,CAAC,CAAC;;IAEF,OAAO;;CAEV;QACG,CAAC,CAAC,EACN;;;EAGE,cAAc;SACb,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CAAC;KACT,IAAI,CAAC,UAAU;;cAEN,IAAI,CAAC,QAAQ;cACb,IAAI,CAAC,WAAW;EAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;CACpE,CACE;SACA,IAAI,CAAC,IAAI,CAAC;;;;IAIT,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BhB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU;;;aAG9D,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkC,EAClC,cAAsB,EACtB,kBAAqC,EAAE,EACvC,OAAgB;IAEhB,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM;QACtC,CAAC,CAAC,UAAU;aACP,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CAAC;KACf,IAAI,CAAC,UAAU;;cAEN,IAAI,CAAC,QAAQ;yBACF,IAAI,CAAC,WAAW,EAAE,CAClC;aACA,IAAI,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,6EAA6E,CAAC;IAElF,OAAO;;EAGP,OAAO;QACL,CAAC,CAAC;;IAEF,OAAO;;CAEV;QACG,CAAC,CAAC,EACN;;;;;;;;;;;EAWE,cAAc;;;;;IAKZ,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BhB,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU;;;aAGtD,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAsB,EACtB,cAAsB,EACtB,OAAgB;IAEhB,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE;gBACzC,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,qBAAqB;aACvC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,KAAK,EAAE;gBACxC,EAAE;gBACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,KAAK;gBACL,oBAAoB,IAAI,CAAC,SAAS,EAAE;gBACpC,2CAA2C,IAAI,CAAC,mBAAmB,IAAI;gBACvE,oGAAoG;aACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,OAAO;;EAGP,OAAO;QACL,CAAC,CAAC;;IAEF,OAAO;;CAEV;QACG,CAAC,CAAC,EACN;;;;;;;sBAOsB,OAAO,CAAC,KAAK;iBAClB,OAAO,CAAC,MAAM,CAAC,SAAS,oBAAoB,OAAO,CAAC,MAAM,CAAC,QAAQ,sBAAsB,OAAO,CAAC,MAAM,CAAC,UAAU;;EAEjI,YAAY;;;;;;;;;IASV,cAAc;;;;;;;;;;;;;;aAcL,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;aAI5C,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAuB,EAAE,cAAsB;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO;;;;;;;;EAQP,OAAO;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;QACnF,OAAO;KACN,IAAI,CAAC,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI,kBAAkB;;oBAE1C,IAAI,CAAC,cAAc,IAAI,SAAS;0BAC1B,IAAI,CAAC,oBAAoB,IAAI,MAAM;CAC5D,CAAC;IACA,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC;;;;IAIT,cAAc;;;;;;;;;;;;;;aAcL,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,WAA+B,EAC/B,KAAqC;IAErC,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,gEAAgE,WAAW,iDAAiD;QAC9H,CAAC,CAAC,sEAAsE,CAAC;IAE3E,OAAO;;;;;;;;;EASP,MAAM;;;;EAIN,WAAW;;;;;;IAMT,KAAK,CAAC,aAAa;;;;;;;;;;;CAWtB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,YAAsB,EACtB,YAAsB,EACtB,KAAqC;IAErC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM;QACjC,CAAC,CAAC,+CAA+C,YAAY;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC;aAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;QACjB,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;;;;IAYL,IAAI;;;EAGN,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EAChE,OAAO;;;;IAIL,KAAK,CAAC,cAAc;;;;uBAID,qCAAqC;;;;;;;;;;;IAWxD,KAAK,CAAC,iBAAiB;;;;;;uBAMJ,qCAAqC;;;wCAGpB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC;;;;;;;;;;IAU3E,aAAa,CAAC,WAAW,CAAC;CAC7B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,OAAuB,EACvB,KAAqC,EACrC,0BAAmC,EACnC,oBAA6B;IAE7B,MAAM,iBAAiB,GAAG,0BAA0B;QAClD,CAAC,CAAC,kDAAkD,KAAK,CAAC,uBAAuB,MAAM;QACvF,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,cAAc,GAAG,oBAAoB,IAAI,KAAK,CAAC,gBAAgB,CAAC;IAEtE,OAAO;;;;;IAKL,YAAY;;;;EAId,mBAAmB,CAAC,OAAO,CAAC;EAC5B,iBAAiB;;;;;;IAMf,KAAK,CAAC,OAAO;;;;uBAIM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4BhD,KAAK,CAAC,KAAK;;;;;;;;;;;;;;IAcX,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsCd,aAAa,CAAC,WAAW,CAAC;CAC7B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAsB,EACtB,KAAqC;IAErC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO;;;;;EAKP,SAAS;SACR,GAAG,CACF,CAAC,QAAQ,EAAE,EAAE,CAAC;KACb,QAAQ,CAAC,EAAE;;cAEF,QAAQ,CAAC,QAAQ,IAAI,OAAO;cAC5B,QAAQ,CAAC,QAAQ;CAC9B,CACE;SACA,IAAI,CAAC,IAAI,CAAC;;;;IAIT,KAAK,CAAC,uBAAuB;;;;uBAIV,mCAAmC;;;;;;;;;;;;;IAatD,aAAa,CAAC,WAAW,CAAC;CAC7B,CAAC;AACF,CAAC"}
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/remediate/steps/prompts.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,uBAAuB,GAIxB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,mBAAmB,CAAC,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AACtF,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,OAAe,EACf,gBAAwB;IAExB,OAAO;;;qBAGY,OAAO;;oBAER,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;YA0BxB,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,OAA2B,EAC3B,OAA+B;IAE/B,OAAO,OAAO;QACZ,CAAC,CAAC;wEACkE,OAAO;IAC3E,OAAO;;CAEV;QACG,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,cAAsC,EACtC,cAAsB,EACtB,OAAgB;IAEhB,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;IACpC,OAAO;;EAEP,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC;iBAClB,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG;;;EAGrD,cAAc;SACb,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CAAC;KACT,IAAI,CAAC,UAAU;;cAEN,IAAI,CAAC,QAAQ;cACb,IAAI,CAAC,WAAW;EAC5B,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;CACpE,CACE;SACA,IAAI,CAAC,IAAI,CAAC;;;;IAIT,cAAc;;EAEhB,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,mDAAmD,CAAC;;;EAG5F,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU;;;;;aAK1C,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkC,EAClC,cAAsB,EACtB,kBAAqC,EAAE,EACvC,OAAgB;IAEhB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK;QACjB,CAAC,CAAC,kBAAkB,KAAK,oBAAoB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;kCAC5C;QAC9B,CAAC,CAAC;wCACkC,CAAC;IACvC,MAAM,cAAc,GAAG,UAAU;SAC9B,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CAAC;KACX,IAAI,CAAC,UAAU;;cAEN,IAAI,CAAC,QAAQ;eACZ,IAAI,CAAC,WAAW;CAC9B,CACI;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAE3E,OAAO;;EAEP,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC;EACjC,KAAK;EACL,cAAc;;;;;;;;;;;;;IAaZ,cAAc;;;;EAIhB,oBAAoB,CAAC,OAAO,EAAE,gDAAgD,CAAC;;;EAG/E,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU;;;;aAItD,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAsB,EACtB,cAAsB,EACtB,OAAgB;IAEhB,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,wDAAwD;YACxD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE;gBACzC,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,qBAAqB;aACvC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,KAAK,EAAE;gBACxC,EAAE;gBACF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,KAAK;gBACL,oBAAoB,IAAI,CAAC,SAAS,EAAE;gBACpC,2CAA2C,IAAI,CAAC,mBAAmB,IAAI;aACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,IAAI,CAAC,WAAW,OAAO,KAAK,EAAE,CAAC;IAC9F,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,OAAO;;EAEP,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC;;;;;sBAKd,OAAO,CAAC,KAAK;iBAClB,OAAO,CAAC,MAAM,CAAC,SAAS,oBAAoB,OAAO,CAAC,MAAM,CAAC,QAAQ,sBAAsB,OAAO,CAAC,MAAM,CAAC,UAAU;;EAEjI,YAAY;;;;;;;;IAQV,cAAc;;;;;;;;;;;;;;;;;;;IAmBd,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;aAMnC,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAuB,EAAE,cAAsB;IAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO;;;;;;;;EAQP,OAAO;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;QACnF,OAAO;KACN,IAAI,CAAC,UAAU,MAAM,OAAO,EAAE,KAAK,IAAI,kBAAkB;;oBAE1C,IAAI,CAAC,cAAc,IAAI,SAAS;0BAC1B,IAAI,CAAC,oBAAoB,IAAI,MAAM;CAC5D,CAAC;IACA,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC;;;;IAIT,cAAc;;;;;;;;;;;;;;aAcL,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,WAA+B,EAC/B,KAAqC;IAErC,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,gEAAgE,WAAW,iDAAiD;QAC9H,CAAC,CAAC,sEAAsE,CAAC;IAE3E,OAAO;;;;;;;;;EASP,MAAM;;;;EAIN,WAAW;;;;;;IAMT,KAAK,CAAC,aAAa;;;;;;;;;;;CAWtB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,YAAsB,EACtB,YAAsB,EACtB,KAAqC;IAErC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM;QACjC,CAAC,CAAC,+CAA+C,YAAY;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC;aAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;QACjB,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;;;;IAYL,IAAI;;;EAGN,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EAChE,OAAO;;;;;;;;MAQH,aAAa,CAAC,yCAAyC,CAAC;;;;;MAKxD,KAAK,CAAC,iBAAiB;;;;MAIvB,aAAa,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;;;;MAIxE,aAAa,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;CAClG,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,KAAqC,EACrC,0BAAmC;IAEnC,MAAM,iBAAiB,GAAG,0BAA0B;QAClD,CAAC,CAAC,mEAAmE,KAAK,CAAC,uBAAuB,MAAM;QACxG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;EAKP,mBAAmB,CAAC,OAAO,CAAC;EAC5B,iBAAiB;;;;;IAKf,KAAK,CAAC,OAAO;;;;uBAIM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA6CvC,aAAa,CAAC,WAAW,CAAC;CACtC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAsB,EACtB,KAAqC;IAErC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO;;;;;EAKP,SAAS;SACR,GAAG,CACF,CAAC,QAAQ,EAAE,EAAE,CAAC;KACb,QAAQ,CAAC,EAAE;;cAEF,QAAQ,CAAC,QAAQ,IAAI,OAAO;cAC5B,QAAQ,CAAC,QAAQ;CAC9B,CACE;SACA,IAAI,CAAC,IAAI,CAAC;;;;IAIT,KAAK,CAAC,uBAAuB;;;;uBAIV,mCAAmC;;;wBAGlC,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO;;;;;;;;;;;;EAYvC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU;;;;;;;;IAQnD,aAAa,CAAC,WAAW,CAAC;CAC7B,CAAC;AACF,CAAC"}

package/dist/remediate/steps/types.d.ts

@@ -1,6 +1,6 @@
 export declare const REMEDIATION_STEP_CONTRACT_VERSION: "remediate-code-step/v1alpha1";
-export declare const REMEDIATION_HOST_WORKLOAD_CONTRACT_VERSION: "remediation-host-workload/v1alpha2";
-export declare const REMEDIATION_HOST_RESULT_CONTRACT_VERSION: "remediation-host-result/v1alpha2";
+export declare const REMEDIATION_HOST_WORKLOAD_CONTRACT_VERSION: "remediation-host-workload/v1alpha3";
+export declare const REMEDIATION_HOST_RESULT_CONTRACT_VERSION: "remediation-host-result/v1alpha3";
 export declare const REMEDIATION_HOST_DECISION_CONTRACT_VERSION: "remediation-host-decision/v1alpha1";
 export type RemediationStepKind = "confirm_intent" | "confirm_auto_discovered_input" | "confirm_resume_or_restart" | "locate_input" | "collect_starting_point" | "synthesize_intake" | "collect_intake_clarifications" | "contract_pipeline" | "collect_review_approval" | "collect_clarifications" | "dispatch_implement" | "phase_busy" | "collect_triage" | "close_run" | "present_report" | "input_conflict" | "unhandled_state" | "zero_documentable_findings" | "final_gate_red" | "blocked" | "fold_did_not_converge" | "extracted_plan_discarded";
 import type { StepStatus, AccessDeclaration } from "audit-tools/shared";

package/dist/remediate/steps/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/types.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,iCAAiC,EAC5C,8BAAuC,CAAC;AAc1C,eAAO,MAAM,0CAA0C,EACrD,oCAA6C,CAAC;AAEhD,eAAO,MAAM,wCAAwC,EACnD,kCAA2C,CAAC;AAE9C,eAAO,MAAM,0CAA0C,EACrD,oCAA6C,CAAC;AAEhD,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,+BAA+B,GAC/B,2BAA2B,GAC3B,cAAc,GACd,wBAAwB,GACxB,mBAAmB,GACnB,+BAA+B,GAC/B,mBAAmB,GACnB,yBAAyB,GACzB,wBAAwB,GACxB,oBAAoB,GACpB,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,4BAA4B,GAa5B,gBAAgB,GAIhB,SAAS,GAgBT,uBAAuB,GAqBvB,0BAA0B,CAAC;AAE/B,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAMxE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,MAAM,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,OAAO,iCAAiC,CAAC;IAC3D,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,eAAO,MAAM,2CAA2C,EACtD,wCAAiD,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,QAAQ,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qFAAqF;IACrF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/remediate/steps/types.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,iCAAiC,EAC5C,8BAAuC,CAAC;AAqB1C,eAAO,MAAM,0CAA0C,EACrD,oCAA6C,CAAC;AAEhD,eAAO,MAAM,wCAAwC,EACnD,kCAA2C,CAAC;AAE9C,eAAO,MAAM,0CAA0C,EACrD,oCAA6C,CAAC;AAEhD,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,+BAA+B,GAC/B,2BAA2B,GAC3B,cAAc,GACd,wBAAwB,GACxB,mBAAmB,GACnB,+BAA+B,GAC/B,mBAAmB,GACnB,yBAAyB,GACzB,wBAAwB,GACxB,oBAAoB,GACpB,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,4BAA4B,GAa5B,gBAAgB,GAIhB,SAAS,GAgBT,uBAAuB,GAqBvB,0BAA0B,CAAC;AAE/B,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAMxE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,MAAM,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,OAAO,iCAAiC,CAAC;IAC3D,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,eAAO,MAAM,2CAA2C,EACtD,wCAAiD,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,QAAQ,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uFAAuF;IACvF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qFAAqF;IACrF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}

package/dist/remediate/steps/types.js

@@ -10,9 +10,16 @@ export const REMEDIATION_STEP_CONTRACT_VERSION = "remediate-code-step/v1alpha1";
 // v1alpha2 (obligation evidence-coverage floor): the work item BINDS the
 // block's contract obligation ids (`obligation_ids`), and the result must cite
 // evidence per bound obligation (`obligation_evidence`), coverage-validated at
-// ingestion. A v1alpha1 document refuses closed as stale — re-prepare.
-export const REMEDIATION_HOST_WORKLOAD_CONTRACT_VERSION = "remediation-host-workload/v1alpha2";
-export const REMEDIATION_HOST_RESULT_CONTRACT_VERSION = "remediation-host-result/v1alpha2";
+// ingestion.
+//
+// v1alpha3 (owner review of prompt 20, 2026-09-18): each worker prompt ends
+// with the result template the tool fills in, and the landed result carries
+// only `landed_commit` and `obligation_evidence` beside its identity — the tool
+// derives the changed files from git and reruns the required tests itself. A
+// persisted workload of an earlier version is reported `workload_stale`, and
+// the next prepare re-mints its digest under the same binding.
+export const REMEDIATION_HOST_WORKLOAD_CONTRACT_VERSION = "remediation-host-workload/v1alpha3";
+export const REMEDIATION_HOST_RESULT_CONTRACT_VERSION = "remediation-host-result/v1alpha3";
 export const REMEDIATION_HOST_DECISION_CONTRACT_VERSION = "remediation-host-decision/v1alpha1";
 export const REMEDIATION_CLOSING_RESULT_CONTRACT_VERSION = "remediate-code-closing-result/v1alpha1";
 //# sourceMappingURL=types.js.map

package/dist/remediate/steps/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/remediate/steps/types.ts"],"names":[],"mappings":"AAAA,oKAAoK;AACpK,MAAM,CAAC,MAAM,iCAAiC,GAC5C,8BAAuC,CAAC;AAE1C,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,yCAAyC;AAEzC,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAA6C,CAAC;AAEhD,MAAM,CAAC,MAAM,wCAAwC,GACnD,kCAA2C,CAAC;AAE9C,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAA6C,CAAC;AAoGhD,MAAM,CAAC,MAAM,2CAA2C,GACtD,wCAAiD,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/remediate/steps/types.ts"],"names":[],"mappings":"AAAA,oKAAoK;AACpK,MAAM,CAAC,MAAM,iCAAiC,GAC5C,8BAAuC,CAAC;AAE1C,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,yCAAyC;AAEzC,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,aAAa;AACb,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAA6C,CAAC;AAEhD,MAAM,CAAC,MAAM,wCAAwC,GACnD,kCAA2C,CAAC;AAE9C,MAAM,CAAC,MAAM,0CAA0C,GACrD,oCAA6C,CAAC;AAoGhD,MAAM,CAAC,MAAM,2CAA2C,GACtD,wCAAiD,CAAC"}