audit-tools 0.52.5 → 0.54.0

package/dist/remediate/contractPipeline/artifactStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"artifactStore.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/artifactStore.ts"],"names":[],"mappings":"AAAA,iOAAiO;AACjO,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAiE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAClL;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,WAAW,EACX,QAAQ,EACR,oBAAoB,EACpB,eAAe,EACf,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,iFAAiF;AACjF,gFAAgF;AAChF,2EAA2E;AAC3E,mDAAmD;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAG7B,iFAAiF;AACjF,wEAAwE;AACxE,sDAAsD;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAyE;IAClG,SAAS,EAAE,EAAE;IACb,cAAc,EAAE,CAAC,WAAW,CAAC;IAC7B,oBAAoB,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACrD,gBAAgB,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,CAAC;IACzE,0BAA0B,EAAE,CAAC,sBAAsB,EAAE,kBAAkB,CAAC;IACxE,0BAA0B,EAAE,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC9E,0BAA0B,EAAE,CAAC,WAAW,EAAE,sBAAsB,EAAE,4BAA4B,CAAC;IAC/F,iBAAiB,EAAE,CAAC,WAAW,EAAE,4BAA4B,CAAC;IAC9D,sBAAsB,EAAE,CAAC,mBAAmB,CAAC;IAC7C,mBAAmB,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;IACvD,0BAA0B,EAAE,CAAC,WAAW,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,qBAAqB,CAAC;IAC7I,cAAc,EAAE,CAAC,WAAW,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,4BAA4B,CAAC;IAC/J,YAAY,EAAE,CAAC,WAAW,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,gBAAgB,CAAC;IACvM,kBAAkB,EAAE;QAClB,WAAW;QACX,gBAAgB;QAChB,4BAA4B;QAC5B,mBAAmB;QACnB,wBAAwB;QACxB,qBAAqB;QACrB,4BAA4B;QAC5B,gBAAgB;QAChB,cAAc;KACf;IACD,mBAAmB,EAAE;QACnB,WAAW;QACX,gBAAgB;QAChB,4BAA4B;QAC5B,mBAAmB;QACnB,4BAA4B;QAC5B,oBAAoB;KACrB;CACF,CAAC;AAyBF;;;;;;;;;;;;;;;GAeG;AACH,SAAS,yBAAyB,CAChC,IAAkC,EAClC,MAAc,EACd,UAAkB;IAElB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,yCAAyC;QAChD,aAAa,EAAE,IAAI;QACnB,mBAAmB,EAAE,MAAM;QAC3B,uBAAuB,EAAE,UAAU;QACnC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC,GAAG,IAAI,CACV,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CACzB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CACb,iBAAuC,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtD,OAAO,IAAI,KAAK,QAAQ,CAC3B,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CACxB,KAAc;IAEd,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACd,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAuB,CAAC;QAChF,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC7B,SAAS,IAAI,KAAK;QAClB,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,CACrH,CAAC;AACJ,CAAC;AAGD,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,GAAW;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,OAAO,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,IAAkC;IAElC,OAAO,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,IAAkC;IAElC,MAAM,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,IAAkC;IAElC,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,IAAkC;IAElC,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAkC,EAClC,OAAgB;IAEhB,OAAO,WAAW,CAChB,yBAAyB,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAC5D,EAAE,MAAM,EAAE,EAAE,EAAE,CACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA0C;IAE1C,OAAO,mBAAmB,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,iFAAiF;AAEjF,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAoB,EACpB,IAAkC,EAClC,OAAgB,EAChB,MAAkC;IAElC,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAE1C,+EAA+E;IAC/E,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,iBAAiB,GAA0D,EAAE,CAAC;IACpF,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,WAAW,EAAE,CAAC;YAChB,iBAAiB,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAqC;QACjD,aAAa,EAAE,IAAI;QACnB,YAAY;QACZ,iBAAiB;QACjB,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;IACF,MAAM,aAAa,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,YAAoB,EACpB,IAAkC,EAClC,OAAgB;IAEhB,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,aAAa,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAiD;IAEjD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,IAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACpC,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,CAC7C,CAAC;IACF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,gDAAgD;IAChD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,qBAAqB,KAAK,UAAU;QACtF,uBAAuB,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClH,IAAI,UAAU,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC;QACpC,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC9D,OAAO,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB;IAEpB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEvD,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyE,CAAC;IACnG,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,8CAA8C;gBAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM;YACR,CAAC;YACD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,YAAY,KAAK,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,mFAAmF;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAU,CAAC,CACxD,CAAC;IACF,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAElD,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,IAAkC;IAElC,OAAO,UAAU,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/remediate/contractPipeline/changeClassification.d.ts

@@ -1,130 +0,0 @@
-/**
- * DC-5 — obligation change-vs-addition classification + paired/scoped negative
- * test-spec gate (single source).
- *
- * Two latent failure modes this module closes:
- *
- *   CE-013 (render-only misclassification): the paired-obligation gate used to
- *     force EVERY testable obligation to carry a positive+negative pair, with no
- *     notion of whether the obligation changes prior behavior or adds new
- *     behavior. A pure addition has no behavior to regress, so pairing it is
- *     burden without signal — and, worse, the "classification" lived only in the
- *     prompt prose (render-only), never as a recorded, checkable verdict. This
- *     module classifies each obligation *deterministically first* (does it touch
- *     a symbol/file that already exists?) and records the verdict on the ledger,
- *     so an LLM may confirm/override but the result is never silent.
- *
- *   CE-006 (unscoped repo-wide-grep negative): a behavior-CHANGE obligation's
- *     negative half could be satisfied by an assertion that greps the whole repo
- *     ("no file anywhere contains X") — which rots immediately and proves nothing
- *     about the changed symbol. The negative must be SCOPED to the changed
- *     symbol/file. The scope check is a structural PREDICATE over the assertion
- *     (it must name an anchor AND must not be an unscoped global scan), not a
- *     keyword match — keyword matching alone is exactly what let the unscoped
- *     negative through.
- *
- * Single-source invariant (mirrors `derive.ts`): the deriver, the test-plan
- * derivation gate (`validatePairedObligations`), and the `mergeImplementResults`
- * verify gate ALL classify and pair through the helpers here. No parallel logic.
- */
-import { type ObligationChangeClassification } from "audit-tools/shared";
-/** Extract candidate symbol/file tokens from free text (lowercased, de-noised). */
-export declare function extractSymbolTokens(text: string): string[];
-/**
- * Build the baseline corpus of pre-existing symbol/file tokens from the finalized
- * module contracts. A symbol present here already exists, so an obligation that
- * references it is *changing* existing behavior rather than adding new behavior.
- *
- * The corpus is drawn from the declared interface surface (inputs / outputs /
- * side_effects / validation_boundary) plus each module name — the things the
- * contract says already exist at the seam.
- */
-export declare function buildBaselineSymbolCorpus(finalizedModuleContracts: unknown): Set<string>;
-/**
- * Classify one obligation change-vs-addition deterministically.
- *
- * Heuristic: the obligation *touches an existing symbol* when any symbol token in
- * its description is present in the baseline corpus of pre-existing symbols. Such
- * an obligation is a behavior CHANGE; otherwise it is a pure ADDITION.
- *
- * The matched tokens become `touched_symbols` — the scope anchors a paired
- * negative assertion must name. This is the deterministic FIRST pass; an LLM may
- * confirm or override it via `applyLlmConfirmation`, and the override is recorded.
- */
-export declare function classifyObligationChange(description: string, baselineSymbols: Set<string>): ObligationChangeClassification;
-/**
- * A negative assertion for a behavior-CHANGE obligation is SCOPED when it names
- * at least one of the change's anchors (the touched symbol/file) AND does not
- * perform an affirmative unscoped repo-wide scan. Naming an anchor is necessary
- * but not sufficient: an assertion that both names the symbol and says "grep the
- * whole repo" is still rejected, because the scan, not the symbol, is what it
- * actually checks. A merely DESCRIPTIVE mention of a global scan ("scoped to X,
- * not an unscoped repo-wide check") does NOT disqualify — the veto reads the
- * assertion's action, not the literal words, so a host need not euphemise (CE-006).
- *
- * Returns true when the assertion is acceptably scoped to the change.
- */
-export declare function negativeAssertionIsScoped(assertion: string, anchors: readonly string[]): boolean;
-/** Phrases that mark a negative/failure assertion (paired-obligation half). */
-export declare const NEGATIVE_ASSERTION_PATTERN: RegExp;
-/** Phrases that mark a positive/satisfied assertion (paired-obligation half). */
-export declare const POSITIVE_ASSERTION_PATTERN: RegExp;
-/** The polarity an assertion declares, accounting for an authoritative label. */
-export type AssertionPolarity = "positive" | "negative" | "both" | "none";
-/**
- * Classify one assertion's polarity. An explicit `POSITIVE:` / `NEGATIVE:` label
- * is authoritative and skips the keyword fallback (so "POSITIVE: must not exceed
- * N" counts only as positive). Unlabeled assertions fall through to the keyword
- * regexes, which may match both polarities — run against an identifier-masked copy
- * so a polarity word embedded in a cited id (e.g. `fail` in `OBL-AUTH-fail-session`)
- * doesn't misclassify the assertion.
- */
-export declare function assertionPolarity(assertion: string): AssertionPolarity;
-/**
- * The pairing verdict for a single CHANGE obligation against its covering test
- * specs' assertions. `ok` is true only when BOTH a positive assertion and a
- * SCOPED negative assertion are present. Each reason is a short, stable code the
- * callers turn into a ValidationIssue (test-plan gate) or a block reason (verify
- * gate) — single-sourced so both gates report the same failures.
- */
-export interface PairingVerdict {
-    ok: boolean;
-    hasPositive: boolean;
-    hasNegative: boolean;
-    /** A negative was present but none of them were scoped to the change. */
-    negativeUnscoped: boolean;
-}
-/**
- * Evaluate the paired positive+scoped-negative requirement for a behavior-CHANGE
- * obligation. `anchors` are the change's scope anchors (touched symbols/file).
- *
- * - A positive half is any assertion with positive polarity.
- * - A negative half counts ONLY when it is scoped to the change (CE-006): an
- *   unscoped repo-wide negative does not satisfy the negative requirement.
- *   `negativeUnscoped` is reported when the sole negative(s) failed scoping, so
- *   the diagnostic distinguishes "no negative at all" from "negative not scoped".
- */
-export declare function evaluatePairing(assertions: readonly string[], anchors: readonly string[]): PairingVerdict;
-/**
- * Read an obligation's `change_classification` from a raw, untrusted payload.
- * Returns the narrowed classification, or `undefined` only when the field is
- * genuinely ABSENT — a truly unclassified obligation (e.g. a structural one), which
- * the gates already treat as a CHANGE (fail-closed) at the consumer.
- *
- * A classification that is PRESENT but CORRUPT (not a record, or an unrecognized
- * `change_kind`) is read as a fail-closed CHANGE rather than `undefined` (INV-IR-4):
- * a dropped or garbled classification can never relax the paired-test requirement
- * and can never let incremental item-scoping (contract-incremental-reconvergence)
- * carry a changed item forward as if it were an unchanged addition.
- */
-export declare function readObligationChangeClassification(obligation: unknown): ObligationChangeClassification | undefined;
-/**
- * The scope anchors a paired negative must name for one obligation. Prefers the
- * classification's recorded `touched_symbols`; falls back to the obligation id
- * plus any symbol tokens in its description when the classification carries none
- * (e.g. an unclassified obligation treated as a fail-closed change). Always
- * non-empty when the id is a real id, so a fail-closed change still has a concrete
- * anchor to scope against rather than vacuously accepting any negative.
- */
-export declare function obligationScopeAnchors(obligationId: string, description: string, classification: ObligationChangeClassification | undefined): string[];
-//# sourceMappingURL=changeClassification.d.ts.map

package/dist/remediate/contractPipeline/changeClassification.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"changeClassification.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/changeClassification.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAY,KAAK,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAqBnF,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAoB1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,wBAAwB,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAqBxF;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,GAC3B,8BAA8B,CAehC;AA0DD;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAIT;AAID,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,QACkI,CAAC;AAE1K,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,QACoH,CAAC;AAE5J,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AA4G1E;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAYtE;AAID;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,yEAAyE;IACzE,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,cAAc,CAmBhB;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,OAAO,GAClB,8BAA8B,GAAG,SAAS,CAkC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,8BAA8B,GAAG,SAAS,GACzD,MAAM,EAAE,CAUV"}

package/dist/remediate/contractPipeline/changeClassification.js

@@ -1,446 +0,0 @@
-// sites-pinned: tests/remediate/change-classification-backtracking.test.ts, tests/remediate/dc5.test.ts, tests/audit/scanner-linear-boundaries.test.ts
-// <!-- comment-symbol-exempt: names deliberately-retired symbols; this block records that history -->
-/**
- * DC-5 — obligation change-vs-addition classification + paired/scoped negative
- * test-spec gate (single source).
- *
- * Two latent failure modes this module closes:
- *
- *   CE-013 (render-only misclassification): the paired-obligation gate used to
- *     force EVERY testable obligation to carry a positive+negative pair, with no
- *     notion of whether the obligation changes prior behavior or adds new
- *     behavior. A pure addition has no behavior to regress, so pairing it is
- *     burden without signal — and, worse, the "classification" lived only in the
- *     prompt prose (render-only), never as a recorded, checkable verdict. This
- *     module classifies each obligation *deterministically first* (does it touch
- *     a symbol/file that already exists?) and records the verdict on the ledger,
- *     so an LLM may confirm/override but the result is never silent.
- *
- *   CE-006 (unscoped repo-wide-grep negative): a behavior-CHANGE obligation's
- *     negative half could be satisfied by an assertion that greps the whole repo
- *     ("no file anywhere contains X") — which rots immediately and proves nothing
- *     about the changed symbol. The negative must be SCOPED to the changed
- *     symbol/file. The scope check is a structural PREDICATE over the assertion
- *     (it must name an anchor AND must not be an unscoped global scan), not a
- *     keyword match — keyword matching alone is exactly what let the unscoped
- *     negative through.
- *
- * Single-source invariant (mirrors `derive.ts`): the deriver, the test-plan
- * derivation gate (`validatePairedObligations`), and the `mergeImplementResults`
- * verify gate ALL classify and pair through the helpers here. No parallel logic.
- */
-import { isRecord } from "audit-tools/shared";
-// ── Symbol extraction ─────────────────────────────────────────────────────────
-/**
- * Identifier-like tokens (camelCase / snake_case / dotted / path-ish) that name a
- * code symbol or file. Length >= 3 so single letters and noise are ignored.
- * Used both to pull candidate symbols out of an obligation description and to
- * build the baseline corpus of pre-existing symbols.
- */
-const SYMBOL_TOKEN_PATTERN = /[A-Za-z_$][A-Za-z0-9_$./-]{2,}/g;
-/** Common English words that look identifier-ish but never name a symbol. */
-const SYMBOL_STOPWORDS = new Set([
-    "the", "and", "for", "with", "that", "this", "must", "not", "its", "via",
-    "per", "into", "when", "then", "than", "from", "module", "function", "value",
-    "input", "output", "inputs", "outputs", "should", "shall", "handle", "failure",
-    "mode", "implement", "contract", "boundary", "validation", "every", "each",
-    "obligation", "behavior", "behaviour", "existing", "new", "add", "change",
-]);
-/** Extract candidate symbol/file tokens from free text (lowercased, de-noised). */
-export function extractSymbolTokens(text) {
-    if (typeof text !== "string" || text.length === 0)
-        return [];
-    const out = new Set();
-    for (const raw of text.match(SYMBOL_TOKEN_PATTERN) ?? []) {
-        let start = 0;
-        let end = raw.length;
-        while (start < end && "./-".includes(raw[start]))
-            start++;
-        while (end > start && "./-".includes(raw[end - 1]))
-            end--;
-        const token = raw.slice(start, end).toLowerCase();
-        if (token.length < 3)
-            continue;
-        if (SYMBOL_STOPWORDS.has(token))
-            continue;
-        // <!-- comment-symbol-exempt: names deliberately-retired symbols; this block records that history -->
-        // A token must carry a "code-ish" shape — a case hump, an underscore, a dot,
-        // a slash, or a digit — so a plain prose word ("rejects") is not mistaken for
-        // a symbol while `writeRecord`, `flush_buffer`, `src/a.ts`, `O_1` are kept.
-        if (/[A-Z]/.test(raw.slice(1)) || /[_./\-0-9]/.test(token)) {
-            out.add(token);
-        }
-    }
-    return [...out];
-}
-/**
- * Build the baseline corpus of pre-existing symbol/file tokens from the finalized
- * module contracts. A symbol present here already exists, so an obligation that
- * references it is *changing* existing behavior rather than adding new behavior.
- *
- * The corpus is drawn from the declared interface surface (inputs / outputs /
- * side_effects / validation_boundary) plus each module name — the things the
- * contract says already exist at the seam.
- */
-export function buildBaselineSymbolCorpus(finalizedModuleContracts) {
-    const corpus = new Set();
-    const record = isRecord(finalizedModuleContracts) ? finalizedModuleContracts : {};
-    const modules = Array.isArray(record.module_contracts) ? record.module_contracts : [];
-    for (const mod of modules) {
-        if (!isRecord(mod))
-            continue;
-        if (typeof mod.name === "string") {
-            for (const t of extractSymbolTokens(mod.name))
-                corpus.add(t);
-        }
-        for (const field of ["inputs", "outputs", "side_effects"]) {
-            if (!Array.isArray(mod[field]))
-                continue;
-            for (const entry of mod[field]) {
-                if (typeof entry !== "string")
-                    continue;
-                for (const t of extractSymbolTokens(entry))
-                    corpus.add(t);
-            }
-        }
-        if (typeof mod.validation_boundary === "string") {
-            for (const t of extractSymbolTokens(mod.validation_boundary))
-                corpus.add(t);
-        }
-    }
-    return corpus;
-}
-// ── Deterministic classification (FIRST pass) ──────────────────────────────────
-// <!-- comment-symbol-exempt: names deliberately-retired symbols; this block records that history -->
-/**
- * Classify one obligation change-vs-addition deterministically.
- *
- * Heuristic: the obligation *touches an existing symbol* when any symbol token in
- * its description is present in the baseline corpus of pre-existing symbols. Such
- * an obligation is a behavior CHANGE; otherwise it is a pure ADDITION.
- *
- * The matched tokens become `touched_symbols` — the scope anchors a paired
- * negative assertion must name. This is the deterministic FIRST pass; an LLM may
- * confirm or override it via `applyLlmConfirmation`, and the override is recorded.
- */
-export function classifyObligationChange(description, baselineSymbols) {
-    const tokens = extractSymbolTokens(description);
-    const touched = tokens.filter((t) => baselineSymbols.has(t));
-    if (touched.length > 0) {
-        return {
-            change_kind: "change",
-            touched_symbols: touched,
-            determined_by: "touches_existing_symbol",
-        };
-    }
-    return {
-        change_kind: "addition",
-        touched_symbols: [],
-        determined_by: "no_existing_symbol",
-    };
-}
-// ── Anti-rot scope predicate (CE-006) ──────────────────────────────────────────
-/**
- * Markers of an UNSCOPED, repo-wide negative assertion — a grep/scan over the
- * whole tree that names no specific symbol and rots the moment any unrelated file
- * matches. Presence of one of these (without an offsetting scope anchor) is what
- * the predicate rejects. This is a STRUCTURAL signal about the assertion's shape,
- * distinct from polarity keywords.
- */
-const UNSCOPED_GLOBAL_SCAN_PATTERN = /\b(?:repo[\s-]?wide|whole\s+repo|entire\s+(?:repo|codebase|tree)|across\s+the\s+(?:repo|codebase|tree)|any\s+file|no\s+file\s+(?:anywhere|in\s+the\s+repo)|anywhere\s+in\s+the\s+(?:repo|codebase|tree)|grep\s+(?:the\s+)?(?:repo|codebase|tree))\b/i;
-/**
- * Negation cues that, in the SAME clause immediately before a global-scan phrase,
- * mark it as DESCRIPTIVE contrast ("scoped to X, *not* an unscoped repo-wide
- * check") rather than the assertion's actual action. Flagging the literal words
- * "repo-wide" regardless of negation is exactly what forced hosts to euphemise a
- * legitimately-scoped negative — the CE-006 false-positive. Only an AFFIRMATIVE
- * scan (the scan is the check) disqualifies scoping.
- */
-const SCAN_NEGATION_CUE = /\b(?:not|never|no\s+longer|rather\s+than|instead\s+of|without|avoids?|avoiding|isn'?t|aren'?t|doesn'?t|don'?t|won'?t)\b/i;
-/**
- * True when the assertion uses a global-scan phrase AFFIRMATIVELY — the scan is
- * the check it performs, not a contrast clause describing what it deliberately
- * avoids. Each scan match is judged by its own clause (text back to the nearest
- * `. ; , — --` boundary): a negation cue in that clause makes the mention
- * descriptive and non-disqualifying; an unqualified scan disqualifies. This is a
- * structural read of the assertion's action, not a bare keyword veto on the words.
- */
-function usesAffirmativeGlobalScan(assertion) {
-    // Scan clause boundaries and negation cues once. Repeated mentions in one
-    // clause share its first negation offset rather than rescanning prefixes.
-    const events = new RegExp(`${SCAN_NEGATION_CUE.source}|[.;,]|—|--`, "gi");
-    const scans = new RegExp(UNSCOPED_GLOBAL_SCAN_PATTERN.source, "gi");
-    let event = events.exec(assertion);
-    let negated = false;
-    for (const match of assertion.matchAll(scans)) {
-        while (event && event.index < match.index) {
-            negated = !/^(?:[.;,]|—|--)$/.test(event[0]);
-            event = events.exec(assertion);
-        }
-        if (!negated)
-            return true;
-    }
-    return false;
-}
-/** Match a scope anchor as a whole word/path fragment inside an assertion. */
-function assertionNamesAnchor(assertion, anchor) {
-    if (anchor.length < 3)
-        return false;
-    const escaped = anchor.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    // Word/path boundary: the anchor is not glued to surrounding identifier chars.
-    return new RegExp(`(?<![A-Za-z0-9_$])${escaped}(?![A-Za-z0-9_$])`, "i").test(assertion);
-}
-/**
- * A negative assertion for a behavior-CHANGE obligation is SCOPED when it names
- * at least one of the change's anchors (the touched symbol/file) AND does not
- * perform an affirmative unscoped repo-wide scan. Naming an anchor is necessary
- * but not sufficient: an assertion that both names the symbol and says "grep the
- * whole repo" is still rejected, because the scan, not the symbol, is what it
- * actually checks. A merely DESCRIPTIVE mention of a global scan ("scoped to X,
- * not an unscoped repo-wide check") does NOT disqualify — the veto reads the
- * assertion's action, not the literal words, so a host need not euphemise (CE-006).
- *
- * Returns true when the assertion is acceptably scoped to the change.
- */
-export function negativeAssertionIsScoped(assertion, anchors) {
-    if (typeof assertion !== "string" || assertion.length === 0)
-        return false;
-    if (usesAffirmativeGlobalScan(assertion))
-        return false;
-    return anchors.some((a) => assertionNamesAnchor(assertion, a));
-}
-// ── Polarity detection (shared with the legacy keyword gate) ───────────────────
-/** Phrases that mark a negative/failure assertion (paired-obligation half). */
-export const NEGATIVE_ASSERTION_PATTERN = /\b(rejects?|rejected|throws?|errors?|fails?|failure|invalid|disallows?|forbidden|refuses?|must not|does not|should not|cannot|never|negative|missing|absent|empty)\b/i;
-/** Phrases that mark a positive/satisfied assertion (paired-obligation half). */
-export const POSITIVE_ASSERTION_PATTERN = /\b(accept|accepted|allow|allowed|succeed|succeeds|returns?|produces?|valid|present|satisfies|satisfied|passes?|emits?|writes?|equal|equals|matches?)\b/i;
-/**
- * Multi-segment identifier tokens (obligation ids `OBL-AUTH-fail-session`, kebab/
- * snake symbols, dotted/sliced paths `src/x/plan.ts`, `a::b`). A keyword regex
- * `\b`-boundary still fires on a polarity word delimited by `-`/`_`/`.`/`/`/`:`
- * inside such a token (e.g. `fail` in `OBL-AUTH-fail-session`), flipping a positive
- * assertion that merely *cites* an id. These carry no prose polarity, so mask them
- * before keyword classification. A run must have at least one internal delimiter to
- * qualify — ordinary prose words (no internal `-_./:`)  are left untouched, as are
- * multiword phrases like "does not" (space-separated, not a single token).
- *
- * SCANNED, NOT MATCHED — and the reason is a measured quadratic, not taste. The
- * obvious regex here is `[A-Za-z0-9]+(?:[-_/.:]+[A-Za-z0-9]+)+`, and on a long
- * UNBROKEN alphanumeric run it is Θ(n²): the engine starts at every position and
- * each start consumes the rest of the run before the (absent) delimiter fails the
- * whole match, so a 16,000-char run took 3.36 SECONDS (measured on the `word-run`
- * family: 44/186/741/3360ms across 2k/4k/8k/16k, a clean 4×-per-doubling). An
- * assertion arrives from a host-authored test plan with no length bound, so the
- * input class is reachable.
- *
- * Restructuring the regex does NOT fix it: the failure is the per-start-position
- * rescan, so a possessive/atomic leading run only replaces an O(n) giveback with
- * an O(n) take, and a lookahead made of the same character class still has to
- * scan the run to fail. A single forward pass over a two-character-class grammar
- * is the linear form, and the grammar is tiny and fully ours. Same replacement
- * semantics as the regex it replaces, pinned by
- * `tests/remediate/change-classification-backtracking.test.ts`.
- */
-function isAsciiAlphanumeric(code) {
-    return ((code >= 48 && code <= 57) || // 0-9
-        (code >= 65 && code <= 90) || // A-Z
-        (code >= 97 && code <= 122) // a-z
-    );
-}
-/** The token's internal delimiters: `-`, `_`, `/`, `.`, `:`. */
-function isIdentifierDelimiter(code) {
-    return (code === 45 || // -
-        code === 95 || // _
-        code === 47 || // /
-        code === 46 || // .
-        code === 58 //   :
-    );
-}
-/**
- * Blank out identifier tokens so their embedded words don't leak polarity.
- *
- * One left-to-right pass, O(n) — and the pass must SKIP, not step, on failure.
- * The regex's token is `alnum+ (delimiter+ alnum+)+`: it starts and ends on an
- * alphanumeric and contains at least one delimiter that is FOLLOWED by an
- * alphanumeric. So a maximal run of `alnum|delimiter` that holds no such
- * delimiter-then-alphanumeric pair cannot contain a token starting anywhere
- * inside it, and the scan jumps past the whole run in one step. Emitting the
- * leading character and re-entering would rescan the rest of the run at every
- * position — the same quadratic the regex had, merely relocated.
- *
- * On a match the replacement ends at the LAST alphanumeric of the run, leaving
- * any trailing delimiters in place, which is exactly where the regex's greedy
- * match ended.
- */
-function stripIdentifierTokens(assertion) {
-    const out = [];
-    const length = assertion.length;
-    let index = 0;
-    while (index < length) {
-        if (!isAsciiAlphanumeric(assertion.charCodeAt(index))) {
-            out.push(assertion[index]);
-            index += 1;
-            continue;
-        }
-        // Extend over the maximal alphanumeric/delimiter run, tracking whether a
-        // delimiter has been followed by an alphanumeric (the qualifying shape).
-        let cursor = index;
-        let lastAlphanumeric = index;
-        let sawDelimiter = false;
-        let qualifies = false;
-        while (cursor < length) {
-            const current = assertion.charCodeAt(cursor);
-            if (isAsciiAlphanumeric(current)) {
-                if (sawDelimiter)
-                    qualifies = true;
-                lastAlphanumeric = cursor;
-                cursor += 1;
-                continue;
-            }
-            if (isIdentifierDelimiter(current)) {
-                sawDelimiter = true;
-                cursor += 1;
-                continue;
-            }
-            break;
-        }
-        if (qualifies) {
-            out.push(" ");
-            index = lastAlphanumeric + 1;
-            continue;
-        }
-        // No token can begin inside this run — copy it through verbatim and resume
-        // after it.
-        out.push(assertion.slice(index, cursor));
-        index = cursor;
-    }
-    return out.join("");
-}
-/**
- * Classify one assertion's polarity. An explicit `POSITIVE:` / `NEGATIVE:` label
- * is authoritative and skips the keyword fallback (so "POSITIVE: must not exceed
- * N" counts only as positive). Unlabeled assertions fall through to the keyword
- * regexes, which may match both polarities — run against an identifier-masked copy
- * so a polarity word embedded in a cited id (e.g. `fail` in `OBL-AUTH-fail-session`)
- * doesn't misclassify the assertion.
- */
-export function assertionPolarity(assertion) {
-    const label = /^\s*(POSITIVE|NEGATIVE)\s*:/i.exec(assertion);
-    if (label) {
-        return label[1].toUpperCase() === "POSITIVE" ? "positive" : "negative";
-    }
-    const prose = stripIdentifierTokens(assertion);
-    const neg = NEGATIVE_ASSERTION_PATTERN.test(prose);
-    const pos = POSITIVE_ASSERTION_PATTERN.test(prose);
-    if (neg && pos)
-        return "both";
-    if (neg)
-        return "negative";
-    if (pos)
-        return "positive";
-    return "none";
-}
-/**
- * Evaluate the paired positive+scoped-negative requirement for a behavior-CHANGE
- * obligation. `anchors` are the change's scope anchors (touched symbols/file).
- *
- * - A positive half is any assertion with positive polarity.
- * - A negative half counts ONLY when it is scoped to the change (CE-006): an
- *   unscoped repo-wide negative does not satisfy the negative requirement.
- *   `negativeUnscoped` is reported when the sole negative(s) failed scoping, so
- *   the diagnostic distinguishes "no negative at all" from "negative not scoped".
- */
-export function evaluatePairing(assertions, anchors) {
-    let hasPositive = false;
-    let hasScopedNegative = false;
-    let hasAnyNegative = false;
-    for (const assertion of assertions) {
-        if (typeof assertion !== "string")
-            continue;
-        const polarity = assertionPolarity(assertion);
-        if (polarity === "positive" || polarity === "both")
-            hasPositive = true;
-        if (polarity === "negative" || polarity === "both") {
-            hasAnyNegative = true;
-            if (negativeAssertionIsScoped(assertion, anchors))
-                hasScopedNegative = true;
-        }
-    }
-    return {
-        ok: hasPositive && hasScopedNegative,
-        hasPositive,
-        hasNegative: hasScopedNegative,
-        negativeUnscoped: hasAnyNegative && !hasScopedNegative,
-    };
-}
-// ── Defensive read + anchor derivation (used by the gates) ─────────────────────
-/**
- * Read an obligation's `change_classification` from a raw, untrusted payload.
- * Returns the narrowed classification, or `undefined` only when the field is
- * genuinely ABSENT — a truly unclassified obligation (e.g. a structural one), which
- * the gates already treat as a CHANGE (fail-closed) at the consumer.
- *
- * A classification that is PRESENT but CORRUPT (not a record, or an unrecognized
- * `change_kind`) is read as a fail-closed CHANGE rather than `undefined` (INV-IR-4):
- * a dropped or garbled classification can never relax the paired-test requirement
- * and can never let incremental item-scoping (contract-incremental-reconvergence)
- * carry a changed item forward as if it were an unchanged addition.
- */
-export function readObligationChangeClassification(obligation) {
-    if (!isRecord(obligation))
-        return undefined;
-    // Distinguish "absent" (no field → undefined, consumers stay fail-closed) from
-    // "present but corrupt" (field exists → an explicit fail-closed CHANGE verdict).
-    if (!("change_classification" in obligation))
-        return undefined;
-    const cls = obligation.change_classification;
-    const failClosedChange = (touched_symbols) => ({
-        change_kind: "change",
-        touched_symbols,
-        determined_by: "touches_existing_symbol",
-    });
-    if (!isRecord(cls))
-        return failClosedChange([]);
-    if (cls.change_kind !== "change" && cls.change_kind !== "addition") {
-        const touched = Array.isArray(cls.touched_symbols)
-            ? cls.touched_symbols.filter((t) => typeof t === "string")
-            : [];
-        return failClosedChange(touched);
-    }
-    const touched = Array.isArray(cls.touched_symbols)
-        ? cls.touched_symbols.filter((t) => typeof t === "string")
-        : [];
-    const determinedBy = cls.determined_by === "touches_existing_symbol" ||
-        cls.determined_by === "no_existing_symbol" ||
-        cls.determined_by === "llm_confirmed" ||
-        cls.determined_by === "llm_override"
-        ? cls.determined_by
-        : "touches_existing_symbol";
-    return {
-        change_kind: cls.change_kind,
-        touched_symbols: touched,
-        determined_by: determinedBy,
-        ...(typeof cls.rationale === "string" ? { rationale: cls.rationale } : {}),
-    };
-}
-/**
- * The scope anchors a paired negative must name for one obligation. Prefers the
- * classification's recorded `touched_symbols`; falls back to the obligation id
- * plus any symbol tokens in its description when the classification carries none
- * (e.g. an unclassified obligation treated as a fail-closed change). Always
- * non-empty when the id is a real id, so a fail-closed change still has a concrete
- * anchor to scope against rather than vacuously accepting any negative.
- */
-export function obligationScopeAnchors(obligationId, description, classification) {
-    if (classification && classification.touched_symbols.length > 0) {
-        return classification.touched_symbols;
-    }
-    const anchors = new Set();
-    if (typeof obligationId === "string" && obligationId.length >= 3) {
-        anchors.add(obligationId.toLowerCase());
-    }
-    for (const t of extractSymbolTokens(description))
-        anchors.add(t);
-    return [...anchors];
-}
-//# sourceMappingURL=changeClassification.js.map

package/dist/remediate/contractPipeline/changeClassification.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"changeClassification.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/changeClassification.ts"],"names":[],"mappings":"AAAA,uJAAuJ;AACvJ,sGAAsG;AACtG;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,QAAQ,EAAuC,MAAM,oBAAoB,CAAC;AAEnF,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAE/D,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACxE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO;IAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS;IAC9E,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;IAC1E,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;CAC1E,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;QACrB,OAAO,KAAK,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;YAAE,KAAK,EAAE,CAAC;QAC3D,OAAO,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;YAAE,GAAG,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1C,sGAAsG;QACtG,6EAA6E;QAC7E,8EAA8E;QAC9E,4EAA4E;QAC5E,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,wBAAiC;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7B,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAU,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YACzC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAc,EAAE,CAAC;gBAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACxC,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAElF,sGAAsG;AACtG;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,eAA4B;IAE5B,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,eAAe,EAAE,OAAO;YACxB,aAAa,EAAE,yBAAyB;SACzC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,oBAAoB;KACpC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF;;;;;;GAMG;AACH,MAAM,4BAA4B,GAChC,sPAAsP,CAAC;AAEzP;;;;;;;GAOG;AACH,MAAM,iBAAiB,GACrB,0HAA0H,CAAC;AAE7H;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,SAAiB;IAClD,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,aAAa,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,4BAA4B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAM,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,SAAiB,EAAE,MAAc;IAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,+EAA+E;IAC/E,OAAO,IAAI,MAAM,CAAC,qBAAqB,OAAO,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,OAA0B;IAE1B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,yBAAyB,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,kFAAkF;AAElF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,0BAA0B,GACrC,uKAAuK,CAAC;AAE1K,iFAAiF;AACjF,MAAM,CAAC,MAAM,0BAA0B,GACrC,yJAAyJ,CAAC;AAK5J;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,CACL,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,MAAM;QACpC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,MAAM;QACpC,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,CACL,IAAI,KAAK,EAAE,IAAI,IAAI;QACnB,IAAI,KAAK,EAAE,IAAI,IAAI;QACnB,IAAI,KAAK,EAAE,IAAI,IAAI;QACnB,IAAI,KAAK,EAAE,IAAI,IAAI;QACnB,IAAI,KAAK,EAAE,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,OAAO,MAAM,GAAG,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,IAAI,YAAY;oBAAE,SAAS,GAAG,IAAI,CAAC;gBACnC,gBAAgB,GAAG,MAAM,CAAC;gBAC1B,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM,IAAI,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,MAAM;QACR,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,GAAG,gBAAgB,GAAG,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,YAAY;QACZ,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAmBD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,UAA6B,EAC7B,OAA0B;IAE1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM;YAAE,WAAW,GAAG,IAAI,CAAC;QACvE,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnD,cAAc,GAAG,IAAI,CAAC;YACtB,IAAI,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC;gBAAE,iBAAiB,GAAG,IAAI,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,WAAW,IAAI,iBAAiB;QACpC,WAAW;QACX,WAAW,EAAE,iBAAiB;QAC9B,gBAAgB,EAAE,cAAc,IAAI,CAAC,iBAAiB;KACvD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kCAAkC,CAChD,UAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,CAAC,CAAC,uBAAuB,IAAI,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAC7C,MAAM,gBAAgB,GAAG,CAAC,eAAyB,EAAkC,EAAE,CAAC,CAAC;QACvF,WAAW,EAAE,QAAQ;QACrB,eAAe;QACf,aAAa,EAAE,yBAAyB;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAChD,CAAC,CAAE,GAAG,CAAC,eAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACtF,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAChD,CAAC,CAAE,GAAG,CAAC,eAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACtF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,YAAY,GAChB,GAAG,CAAC,aAAa,KAAK,yBAAyB;QAC/C,GAAG,CAAC,aAAa,KAAK,oBAAoB;QAC1C,GAAG,CAAC,aAAa,KAAK,eAAe;QACrC,GAAG,CAAC,aAAa,KAAK,cAAc;QAClC,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,yBAAyB,CAAC;IAChC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,eAAe,EAAE,OAAO;QACxB,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,WAAmB,EACnB,cAA0D;IAE1D,IAAI,cAAc,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,cAAc,CAAC,eAAe,CAAC;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC"}

package/dist/remediate/contractPipeline/contractReviewBinding.d.ts

@@ -1,28 +0,0 @@
-import { type ReviewRequirement, type ReviewSubmissionFailureCode, type ContractReviewDeclaration } from "../../shared/types/reviewIndependence.js";
-import { type ContractPipelineArtifactName } from "./artifactStore.js";
-export declare function contractReviewBindingPath(artifactsDir: string, name: ContractPipelineArtifactName): string;
-/** Tool-owned expectation, separate from the worker's declared review envelope. */
-export declare function bindContractReviewPrompt(params: {
-    artifactsDir: string;
-    artifact: ContractPipelineArtifactName;
-    role: string;
-    emissionId: string;
-    requirement: ReviewRequirement;
-    prompt: string;
-}): Promise<string>;
-export declare function validateContractReviewInput(params: {
-    artifactsDir: string;
-    artifact: ContractPipelineArtifactName;
-    role: string;
-    requirement: ReviewRequirement;
-    raw: unknown;
-}): Promise<{
-    ok: true;
-    payload: unknown;
-    provenance?: ContractReviewDeclaration;
-} | {
-    ok: false;
-    issue: string;
-    code: ReviewSubmissionFailureCode | "dependency_stale";
-}>;
-//# sourceMappingURL=contractReviewBinding.d.ts.map

package/dist/remediate/contractPipeline/contractReviewBinding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contractReviewBinding.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/contractReviewBinding.ts"],"names":[],"mappings":"AAQA,OAAO,EAA0D,KAAK,iBAAiB,EAAE,KAAK,2BAA2B,EAAE,KAAK,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAC5M,OAAO,EAA6D,KAAK,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAalI,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,GAAG,MAAM,CAE1G;AAOD,mFAAmF;AACnF,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,4BAA4B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CACpE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,4BAA4B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAC3E,WAAW,EAAE,iBAAiB,CAAC;IAAC,GAAG,EAAE,OAAO,CAAC;CAC9C,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,yBAAyB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,2BAA2B,GAAG,kBAAkB,CAAA;CAAE,CAAC,CAgBzK"}