audit-tools 0.52.5 → 0.54.0

package/dist/remediate/contractPipeline/repairState.d.ts

@@ -1,110 +0,0 @@
-import { type Counterexample } from "audit-tools/shared";
-/** One recorded owner waiver: this counterexample is an accepted limitation of THIS run. */
-export interface CounterexampleWaiver {
-    /** The counterexample id as the judge report / counterexample artifact names it. */
-    ce_id: string;
-    /**
-     * Content-derived identity (`fp:<fingerprint>`, falling back to `id:<raw>`),
-     * computed at fold time — the SAME keying the convergence gate uses, so a
-     * waiver survives a re-derived counterexample artifact that re-labels the
-     * same claim with a new id. A CHANGED claim gets a new fingerprint and
-     * correctly re-surfaces: the waiver bound the claim, not the label.
-     */
-    key: string;
-    /** Why this counterexample is accepted as a limitation. Required, non-empty. */
-    rationale: string;
-    /** Who decided. Attributable identity, not proof — see the module header. */
-    waived_by: string;
-    waived_at: string;
-}
-export interface ContractRepairState {
-    schema_version: "remediate-code-contract-pipeline/repair-state/v1alpha1";
-    /**
-     * One entry per judge-ordered repair step emission (keyed by judge hash).
-     * `accepted_ce_ids` records the judge-accepted counterexample ids this repair
-     * was dispatched to address, for human debugging/display only.
-     * `addressed_ce_fingerprints` is the CONTENT-keyed form the convergence gate
-     * actually diffs against — see `counterexampleKeyOf`: raw reviewer
-     * ids are not stable cross-round identity (two independent adversarial
-     * rounds commonly both label their top counterexample "CE-001"), so the gate
-     * resolves each accepted id against the live counterexample artifact and
-     * keys on content (violated_obligation_ids + normalized claim) instead,
-     * falling back to raw-id keying only when an id cannot be resolved. The
-     * cumulative union of fingerprints across repairs is the "already-addressed"
-     * set; a re-accepted (un-converged) counterexample is detected as a stall
-     * rather than silently re-repaired. Entries written before this field
-     * existed lack it — they default to `[]` (fail-open: at most one extra
-     * repair round on an in-flight upgrade, never a false stall).
-     */
-    repairs: {
-        judge_hash: string;
-        target: string;
-        at: string;
-        accepted_ce_ids?: string[];
-        addressed_ce_fingerprints?: string[];
-    }[];
-    /**
-     * One entry per conceptual-design-critique-driven design repair (keyed by
-     * critique hash). `blocking_ids` records the blocking critique-item ids the
-     * repair was dispatched to address. Target-scoped history permits upstream-to-interface
-     * progress without resetting the global iteration bound. The per-target union is the
-     * "already-addressed" set the critique convergence gate diffs each fresh
-     * critique against, so a re-raised (un-resolved) blocking concern is detected
-     * as a stall rather than silently re-repaired forever.
-     */
-    critique_repairs: {
-        critique_hash: string;
-        at: string;
-        blocking_ids: string[];
-        target?: "finalized_module_contracts" | "module_decomposition";
-    }[];
-    /** One entry per implementation_dag traceability rejection. */
-    dag_regenerations: {
-        violations: string[];
-        at: string;
-    }[];
-    /** Recorded owner waivers — absent on ledgers written before the verb existed. */
-    waivers?: CounterexampleWaiver[];
-}
-export declare function readRepairState(artifactsDir: string): Promise<ContractRepairState>;
-export declare function writeRepairState(artifactsDir: string, state: ContractRepairState): Promise<void>;
-/** The tool-named host lane: the operator's waiver decisions land here. */
-export declare function counterexampleWaiversPath(artifactsDir: string): string;
-/** id → live counterexample entry, from a (possibly absent) artifact payload. */
-export declare function counterexamplesByIdOf(counterexamplePayload: unknown): Map<string, Counterexample>;
-/**
- * Content-keyed identity for a counterexample id: `fp:<fingerprint>` when the
- * id resolves against the live artifact, `id:<raw>` otherwise. The ONE keying
- * both the convergence gate and the waiver ledger use.
- */
-export declare function counterexampleKeyOf(counterexamplesById: ReadonlyMap<string, Counterexample>, rawId: string): string;
-/** The subset of `acceptedIds` covered by recorded waivers (fingerprint-first, raw-id fallback). */
-export declare function waivedAcceptedIds(state: ContractRepairState, counterexamplesById: ReadonlyMap<string, Counterexample>, acceptedIds: readonly string[]): Set<string>;
-/**
- * Payload-level convenience for the cross-gate callers: which of the CURRENT
- * judge report's accepted counterexample ids are waived in the ledger.
- */
-export declare function waivedJudgeAcceptedIds(state: ContractRepairState, judgeReportPayload: unknown, counterexamplePayload: unknown): Set<string>;
-/** Outcome of one waiver-file fold attempt. */
-export interface WaiverFold {
-    /** Validation problems. Non-empty means NOTHING was applied and the file remains. */
-    issues: string[];
-    /** Newly recorded waivers (0 when the file is absent or everything was a duplicate). */
-    folded: number;
-}
-/**
- * Fold the host-written waiver file into the ledger — all-or-nothing.
- *
- * Absent file: no-op. Any invalid entry (malformed JSON, missing/empty
- * `ce_id` / `rationale` / `waived_by`, or a `ce_id` that matches neither a
- * live counterexample nor a judge-accepted id) refuses the WHOLE file: nothing
- * is applied, the file stays in place, and the issues are returned for the
- * blocked step to name — an invalid decision record must never half-apply.
- * Valid entries are deduped by content key, appended to `state.waivers`,
- * persisted, and the file is consumed (deleted).
- */
-export declare function foldCounterexampleWaivers(artifactsDir: string, context: {
-    counterexamplesById: ReadonlyMap<string, Counterexample>;
-    judgeAcceptedIds: ReadonlySet<string>;
-}): Promise<WaiverFold>;
-//# sourceMappingURL=repairState.d.ts.map

package/dist/remediate/contractPipeline/repairState.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"repairState.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/repairState.ts"],"names":[],"mappings":"AAsBA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAI5B,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,wDAAwD,CAAC;IACzE;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;KACtC,EAAE,CAAC;IACJ;;;;;;;;OAQG;IACH,gBAAgB,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,4BAA4B,GAAG,sBAAsB,CAAA;KAAE,EAAE,CAAC;IAClJ,+DAA+D;IAC/D,iBAAiB,EAAE;QAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1D,kFAAkF;IAClF,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAMD,wBAAsB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAYxF;AAED,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,CAGf;AAMD,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,qBAAqB,EAAE,OAAO,GAC7B,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAW7B;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EACxD,KAAK,EAAE,MAAM,GACZ,MAAM,CAGR;AAqBD,oGAAoG;AACpG,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,mBAAmB,EAC1B,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EACxD,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,GAAG,CAAC,MAAM,CAAC,CAUb;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,EAC1B,kBAAkB,EAAE,OAAO,EAC3B,qBAAqB,EAAE,OAAO,GAC7B,GAAG,CAAC,MAAM,CAAC,CAMb;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;IACP,mBAAmB,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC,GACA,OAAO,CAAC,UAAU,CAAC,CA0ErB"}

package/dist/remediate/contractPipeline/repairState.js

@@ -1,185 +0,0 @@
-// sites-pinned: tests/remediate/contract-pipeline-artifact-store.test.ts, tests/remediate/critique-gate.test.ts, tests/remediate/contract-pipeline-adversarial.test.ts
-/**
- * Contract-pipeline repair-state ledger + counterexample waivers.
- *
- * Moved out of steps/contractPipeline.ts (open-bugs.md:108) so every consumer
- * of the ledger — the judge gate that folds and reads waivers, the
- * cross-artifact validation sweep, and the CLI self-check — imports ONE home
- * instead of the steps module re-exporting its private state.
- *
- * The WAIVER lane is the recorded owner-resolution verb the judge escalation
- * used to lack: when the judge↔repair loop stalls on a counterexample the
- * contract schema cannot satisfy, the operator records "accepted as a known
- * limitation" through a tool-named file (`counterexample-waivers.json`) the
- * gate validates, folds into this ledger, and consumes. A waiver lives in the
- * run's artifact tree and dies with the run — per-run choices are never
- * persisted beyond their run. The record carries `waived_by`: like the
- * loop-core review attestation, it is ATTRIBUTABLE, not proof of a human —
- * no mechanical channel can prove who decided, so the record names the
- * decider instead of pretending to verify them.
- */
-import { mkdir, rm } from "node:fs/promises";
-import { join } from "node:path";
-import { isRecord, readOptionalJsonFile, writeJsonFile, } from "audit-tools/shared";
-import { contractPipelineDir } from "./artifactStore.js";
-import { counterexampleFingerprint } from "./counterexampleFingerprint.js";
-function repairStatePath(artifactsDir) {
-    return join(contractPipelineDir(artifactsDir), "repair-state.json");
-}
-export async function readRepairState(artifactsDir) {
-    const state = await readOptionalJsonFile(repairStatePath(artifactsDir));
-    return (state ?? {
-        schema_version: "remediate-code-contract-pipeline/repair-state/v1alpha1",
-        repairs: [],
-        critique_repairs: [],
-        dag_regenerations: [],
-    });
-}
-export async function writeRepairState(artifactsDir, state) {
-    await mkdir(contractPipelineDir(artifactsDir), { recursive: true });
-    await writeJsonFile(repairStatePath(artifactsDir), state);
-}
-// ── Counterexample waivers ────────────────────────────────────────────────────
-const COUNTEREXAMPLE_WAIVERS_FILE = "counterexample-waivers.json";
-/** The tool-named host lane: the operator's waiver decisions land here. */
-export function counterexampleWaiversPath(artifactsDir) {
-    return join(contractPipelineDir(artifactsDir), COUNTEREXAMPLE_WAIVERS_FILE);
-}
-/** id → live counterexample entry, from a (possibly absent) artifact payload. */
-export function counterexamplesByIdOf(counterexamplePayload) {
-    const byId = new Map();
-    if (!isRecord(counterexamplePayload) || !Array.isArray(counterexamplePayload.counterexamples)) {
-        return byId;
-    }
-    for (const ce of counterexamplePayload.counterexamples) {
-        if (isRecord(ce) && typeof ce.id === "string" && ce.id.length > 0) {
-            byId.set(ce.id, ce);
-        }
-    }
-    return byId;
-}
-/**
- * Content-keyed identity for a counterexample id: `fp:<fingerprint>` when the
- * id resolves against the live artifact, `id:<raw>` otherwise. The ONE keying
- * both the convergence gate and the waiver ledger use.
- */
-export function counterexampleKeyOf(counterexamplesById, rawId) {
-    const ce = counterexamplesById.get(rawId);
-    return ce ? `fp:${counterexampleFingerprint(ce)}` : `id:${rawId}`;
-}
-/** Judge-accepted counterexample ids from a raw judge-report payload. */
-function acceptedIdsOfJudgePayload(judgeReportPayload) {
-    if (!isRecord(judgeReportPayload) || !Array.isArray(judgeReportPayload.classifications)) {
-        return [];
-    }
-    const ids = [];
-    for (const cls of judgeReportPayload.classifications) {
-        if (isRecord(cls) &&
-            cls.classification === "accepted" &&
-            typeof cls.counterexample_id === "string" &&
-            cls.counterexample_id.length > 0) {
-            ids.push(cls.counterexample_id);
-        }
-    }
-    return ids;
-}
-/** The subset of `acceptedIds` covered by recorded waivers (fingerprint-first, raw-id fallback). */
-export function waivedAcceptedIds(state, counterexamplesById, acceptedIds) {
-    const waivers = state.waivers ?? [];
-    if (waivers.length === 0)
-        return new Set();
-    const keys = new Set(waivers.map((w) => w.key));
-    const rawIds = new Set(waivers.map((w) => w.ce_id));
-    return new Set(acceptedIds.filter((id) => keys.has(counterexampleKeyOf(counterexamplesById, id)) || rawIds.has(id)));
-}
-/**
- * Payload-level convenience for the cross-gate callers: which of the CURRENT
- * judge report's accepted counterexample ids are waived in the ledger.
- */
-export function waivedJudgeAcceptedIds(state, judgeReportPayload, counterexamplePayload) {
-    return waivedAcceptedIds(state, counterexamplesByIdOf(counterexamplePayload), acceptedIdsOfJudgePayload(judgeReportPayload));
-}
-/**
- * Fold the host-written waiver file into the ledger — all-or-nothing.
- *
- * Absent file: no-op. Any invalid entry (malformed JSON, missing/empty
- * `ce_id` / `rationale` / `waived_by`, or a `ce_id` that matches neither a
- * live counterexample nor a judge-accepted id) refuses the WHOLE file: nothing
- * is applied, the file stays in place, and the issues are returned for the
- * blocked step to name — an invalid decision record must never half-apply.
- * Valid entries are deduped by content key, appended to `state.waivers`,
- * persisted, and the file is consumed (deleted).
- */
-export async function foldCounterexampleWaivers(artifactsDir, context) {
-    const path = counterexampleWaiversPath(artifactsDir);
-    let raw;
-    try {
-        raw = await readOptionalJsonFile(path);
-    }
-    catch {
-        return {
-            issues: [
-                `${COUNTEREXAMPLE_WAIVERS_FILE} is not valid JSON. Fix or delete the file; nothing was applied.`,
-            ],
-            folded: 0,
-        };
-    }
-    if (raw === undefined || raw === null)
-        return { issues: [], folded: 0 };
-    const issues = [];
-    const entries = [];
-    if (!isRecord(raw) || !Array.isArray(raw.waivers)) {
-        issues.push(`${COUNTEREXAMPLE_WAIVERS_FILE} must be an object with a "waivers" array.`);
-    }
-    else {
-        for (const [i, entry] of raw.waivers.entries()) {
-            if (!isRecord(entry)) {
-                issues.push(`waivers[${i}] must be an object.`);
-                continue;
-            }
-            const ceId = typeof entry.ce_id === "string" ? entry.ce_id.trim() : "";
-            const rationale = typeof entry.rationale === "string" ? entry.rationale.trim() : "";
-            const waivedBy = typeof entry.waived_by === "string" ? entry.waived_by.trim() : "";
-            if (ceId.length === 0)
-                issues.push(`waivers[${i}].ce_id must be a non-empty string.`);
-            if (rationale.length === 0) {
-                issues.push(`waivers[${i}].rationale must be a non-empty string — a waiver with no reason is not a decision record.`);
-            }
-            if (waivedBy.length === 0) {
-                issues.push(`waivers[${i}].waived_by must name who decided (attributable identity).`);
-            }
-            if (ceId.length > 0 &&
-                !context.counterexamplesById.has(ceId) &&
-                !context.judgeAcceptedIds.has(ceId)) {
-                issues.push(`waivers[${i}].ce_id "${ceId}" matches neither a live counterexample nor a judge-accepted id — nothing to waive by that name.`);
-            }
-            if (ceId.length > 0 && rationale.length > 0 && waivedBy.length > 0) {
-                entries.push({ ce_id: ceId, rationale, waived_by: waivedBy });
-            }
-        }
-    }
-    if (issues.length > 0)
-        return { issues, folded: 0 };
-    const state = await readRepairState(artifactsDir);
-    const existing = new Set((state.waivers ?? []).map((w) => w.key));
-    let folded = 0;
-    for (const entry of entries) {
-        const key = counterexampleKeyOf(context.counterexamplesById, entry.ce_id);
-        if (existing.has(key))
-            continue;
-        existing.add(key);
-        (state.waivers ??= []).push({
-            ce_id: entry.ce_id,
-            key,
-            rationale: entry.rationale,
-            waived_by: entry.waived_by,
-            waived_at: new Date().toISOString(),
-        });
-        folded += 1;
-    }
-    if (folded > 0)
-        await writeRepairState(artifactsDir, state);
-    await rm(path, { force: true });
-    return { issues: [], folded };
-}
-//# sourceMappingURL=repairState.js.map

package/dist/remediate/contractPipeline/repairState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"repairState.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/repairState.ts"],"names":[],"mappings":"AAAA,uKAAuK;AACvK;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,aAAa,GAEd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AA+D3E,SAAS,eAAe,CAAC,YAAoB;IAC3C,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,YAAoB;IACxD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACtC,eAAe,CAAC,YAAY,CAAC,CAC9B,CAAC;IACF,OAAO,CACL,KAAK,IAAI;QACP,cAAc,EAAE,wDAAwD;QACxE,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE;KACtB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAoB,EACpB,KAA0B;IAE1B,MAAM,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAElE,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,qBAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,qBAAqB,CAAC,eAA4B,EAAE,CAAC;QACpE,IAAI,QAAQ,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAA+B,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,mBAAwD,EACxD,KAAa;IAEb,MAAM,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,yEAAyE;AACzE,SAAS,yBAAyB,CAAC,kBAA2B;IAC5D,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,eAA4B,EAAE,CAAC;QAClE,IACE,QAAQ,CAAC,GAAG,CAAC;YACb,GAAG,CAAC,cAAc,KAAK,UAAU;YACjC,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YACzC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,mBAAwD,EACxD,WAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,GAAG,CACZ,WAAW,CAAC,MAAM,CAChB,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CACjF,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAA0B,EAC1B,kBAA2B,EAC3B,qBAA8B;IAE9B,OAAO,iBAAiB,CACtB,KAAK,EACL,qBAAqB,CAAC,qBAAqB,CAAC,EAC5C,yBAAyB,CAAC,kBAAkB,CAAC,CAC9C,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,YAAoB,EACpB,OAGC;IAED,MAAM,IAAI,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,oBAAoB,CAAU,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE;gBACN,GAAG,2BAA2B,kEAAkE;aACjG;YACD,MAAM,EAAE,CAAC;SACV,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAExE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAA8D,EAAE,CAAC;IAC9E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CACT,GAAG,2BAA2B,4CAA4C,CAC3E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAK,GAAG,CAAC,OAAqB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;YACtF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,4FAA4F,CACzG,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,4DAA4D,CAAC,CAAC;YACxF,CAAC;YACD,IACE,IAAI,CAAC,MAAM,GAAG,CAAC;gBACf,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBACtC,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EACnC,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,YAAY,IAAI,kGAAkG,CAC/H,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEpD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG;YACH,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC"}

package/dist/remediate/contractPipeline/reviewSnapshot.d.ts

@@ -1,79 +0,0 @@
-import { diffProjections } from "audit-tools/shared";
-export { diffProjections };
-import { type ContractPipelineArtifactName } from "./artifactStore.js";
-import { reviewSnapshotFilePath } from "./artifactStore.js";
-/** The verdict-bearing review artifacts whose re-run is expensive (diff-eligible). */
-export declare const REVIEW_ARTIFACTS: ReadonlySet<ContractPipelineArtifactName>;
-export declare function isReviewArtifact(name: ContractPipelineArtifactName): boolean;
-declare const SNAPSHOT_SCHEMA_VERSION: "remediate-code-contract-pipeline/review-snapshot/v1alpha1";
-export interface ReviewSnapshot {
-    schema_version: typeof SNAPSHOT_SCHEMA_VERSION;
-    artifact_name: ContractPipelineArtifactName;
-    /**
-     * Where this snapshot lives on disk. Carried ON the record so the re-review
-     * prompt can name the file the prior verdict is readable from — the reviewer
-     * is an independent lane that reads the files it is given and has no memory of
-     * the prior round, so a verdict that exists only as pasted prompt prose is not
-     * readable to it. Present on every snapshot `captureReviewSnapshot` writes;
-     * optional for READING because a snapshot persisted by a build that predates
-     * the field is still a valid prior verdict, and refusing to read it would cost
-     * a full re-review for a purely presentational gap.
-     */
-    path?: string;
-    /** ISO-8601 capture time (caller-supplied for deterministic tests). */
-    reviewed_at: string;
-    /** The verdict payload this review emitted — what a re-review re-affirms. */
-    prior_payload: unknown;
-    /** Semantic projection of each upstream dependency at review time. */
-    reviewed_inputs: Partial<Record<ContractPipelineArtifactName, unknown>>;
-}
-/**
- * Re-exported rather than re-derived: the ARCHIVE boundary (`archiveContractArtifact`,
- * which drops the snapshot of an artifact it rejects) must reach this path from a
- * module that cannot import this one without a cycle. Two copies of the same
- * `join` is the shape that drifts, so the path lives in `artifactStore` beside
- * the other artifact-path helpers and this module consumes it.
- */
-export declare const reviewSnapshotPath: typeof reviewSnapshotFilePath;
-export declare function reviewSnapshotExists(artifactsDir: string, name: ContractPipelineArtifactName): boolean;
-/**
- * Read a review snapshot, or null when none is usable.
- *
- * A snapshot is REGENERABLE state — one written under another schema version is
- * discarded rather than reinterpreted, which costs one full re-review (the
- * behaviour when no snapshot exists) instead of diffing a prior verdict against
- * inputs projected under different semantics.
- */
-export declare function readReviewSnapshot(artifactsDir: string, name: ContractPipelineArtifactName): Promise<ReviewSnapshot | null>;
-/**
- * Capture a review snapshot for a freshly-produced review artifact: the semantic
- * projection of each current upstream dependency plus the review's own payload.
- * No-op for non-review artifacts. The dependency envelopes are read from disk, so
- * this must run after the upstreams are enveloped (always true post-ingest).
- */
-export declare function captureReviewSnapshot(artifactsDir: string, name: ContractPipelineArtifactName, payload: unknown, reviewedAt: string): Promise<void>;
-export interface ReReviewDelta {
-    /** Per-dependency diff lines, keyed by dependency name; empty for unchanged. */
-    changedInputs: {
-        dep: ContractPipelineArtifactName;
-        lines: string[];
-    }[];
-    /** True when no upstream projection actually changed (re-affirm verbatim). */
-    allUnchanged: boolean;
-}
-/**
- * Compute the re-review delta for a review phase against its snapshot: which
- * upstream dependencies changed (by semantic projection) since the prior verdict,
- * and the field-level diff for each. Dependencies present now but absent in the
- * snapshot (or vice-versa) are reported as wholesale add/remove diffs.
- */
-export declare function computeReReviewDelta(artifactsDir: string, name: ContractPipelineArtifactName, snapshot: ReviewSnapshot): Promise<ReReviewDelta>;
-/**
- * Render the diff-based re-review section appended to a review phase's re-emit
- * prompt. Carries the prior verdict and the precise changed-since-last-review
- * delta, and instructs the worker to re-affirm the prior verdict when the delta
- * does not affect it, or revise only the affected items otherwise. Delegates the
- * prompt body to the shared `renderDiffReReviewSection` (single-sourced shape).
- */
-export declare function renderReReviewSection(_name: ContractPipelineArtifactName, snapshot: ReviewSnapshot, delta: ReReviewDelta): string;
-//# sourceMappingURL=reviewSnapshot.d.ts.map

package/dist/remediate/contractPipeline/reviewSnapshot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reviewSnapshot.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/reviewSnapshot.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,eAAe,EAKhB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,4BAA4B,CAKrE,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAE5E;AAED,QAAA,MAAM,uBAAuB,EAC3B,2DAAoE,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,OAAO,uBAAuB,CAAC;IAC/C,aAAa,EAAE,4BAA4B,CAAC;IAC5C;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,aAAa,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC,CAAC;CACzE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,+BAAyB,CAAC;AAMzD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAET;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAShC;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAOD,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,aAAa,EAAE;QAAE,GAAG,EAAE,4BAA4B,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACxE,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,4BAA4B,EAClC,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,4BAA4B,EACnC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,aAAa,GACnB,MAAM,CAgBR"}

package/dist/remediate/contractPipeline/reviewSnapshot.js

@@ -1,140 +0,0 @@
-/**
- * Diff-based re-review for the contract pipeline (B2).
- *
- * Friction: when an upstream artifact genuinely changes, the verdict-bearing
- * review phases (conceptual critique, contract assessment, adversarial critic,
- * adversarial judge) re-run as FULL passes — the host must burn another ~100-190k
- * token critic/judge subagent (or hand-re-emit the prior verdict) even when the
- * change touches only a small part of what the review reasoned about.
- *
- * Fix: when a review artifact is produced, snapshot the SEMANTIC PROJECTIONS of
- * the exact upstreams it reviewed plus its own verdict. On a later staleness
- * re-emit of that phase, diff the snapshot's inputs against the current upstream
- * projections and hand the worker (a) its prior verdict and (b) the precise
- * changed-since-last-review delta — so it confirms "prior verdict still holds"
- * cheaply when the delta does not affect it, and revises only the affected items
- * otherwise. This is enforced by the tool (the re-emit prompt carries the delta),
- * never left to the host to remember.
- *
- * Snapshots are bounded to the review phases — the only ones whose re-run is an
- * expensive verdict, not a deterministic/scaffolded restructuring.
- */
-import { existsSync } from "node:fs";
-import { mkdir } from "node:fs/promises";
-import { diffProjections, discardOnSchemaVersionMismatch, readOptionalJsonFile, renderDiffReReviewSection, writeJsonFile, } from "audit-tools/shared";
-export { diffProjections };
-import { DEPENDENCY_MAP, readContractArtifact, reviewSnapshotDirPath, } from "./artifactStore.js";
-// The path helper is IMPORTED and re-exported (the archive boundary reaches the
-// same file from a module that cannot import this one), so the two can never
-// disagree about where a snapshot lives.
-import { reviewSnapshotFilePath } from "./artifactStore.js";
-import { semanticProjection } from "./semanticProjection.js";
-/** The verdict-bearing review artifacts whose re-run is expensive (diff-eligible). */
-export const REVIEW_ARTIFACTS = new Set([
-    "conceptual_design_critique",
-    "contract_assessment_report",
-    "counterexample",
-    "judge_report",
-]);
-export function isReviewArtifact(name) {
-    return REVIEW_ARTIFACTS.has(name);
-}
-const SNAPSHOT_SCHEMA_VERSION = "remediate-code-contract-pipeline/review-snapshot/v1alpha1";
-/**
- * Re-exported rather than re-derived: the ARCHIVE boundary (`archiveContractArtifact`,
- * which drops the snapshot of an artifact it rejects) must reach this path from a
- * module that cannot import this one without a cycle. Two copies of the same
- * `join` is the shape that drifts, so the path lives in `artifactStore` beside
- * the other artifact-path helpers and this module consumes it.
- */
-export const reviewSnapshotPath = reviewSnapshotFilePath;
-function reviewSnapshotDir(artifactsDir) {
-    return reviewSnapshotDirPath(artifactsDir);
-}
-export function reviewSnapshotExists(artifactsDir, name) {
-    return existsSync(reviewSnapshotPath(artifactsDir, name));
-}
-/**
- * Read a review snapshot, or null when none is usable.
- *
- * A snapshot is REGENERABLE state — one written under another schema version is
- * discarded rather than reinterpreted, which costs one full re-review (the
- * behaviour when no snapshot exists) instead of diffing a prior verdict against
- * inputs projected under different semantics.
- */
-export async function readReviewSnapshot(artifactsDir, name) {
-    return (discardOnSchemaVersionMismatch(await readOptionalJsonFile(reviewSnapshotPath(artifactsDir, name)), SNAPSHOT_SCHEMA_VERSION) ?? null);
-}
-/**
- * Capture a review snapshot for a freshly-produced review artifact: the semantic
- * projection of each current upstream dependency plus the review's own payload.
- * No-op for non-review artifacts. The dependency envelopes are read from disk, so
- * this must run after the upstreams are enveloped (always true post-ingest).
- */
-export async function captureReviewSnapshot(artifactsDir, name, payload, reviewedAt) {
-    if (!isReviewArtifact(name))
-        return;
-    const reviewed_inputs = {};
-    for (const dep of DEPENDENCY_MAP[name]) {
-        const depEnvelope = await readContractArtifact(artifactsDir, dep);
-        if (depEnvelope) {
-            reviewed_inputs[dep] = semanticProjection(dep, depEnvelope.payload);
-        }
-    }
-    const path = reviewSnapshotPath(artifactsDir, name);
-    const snapshot = {
-        schema_version: SNAPSHOT_SCHEMA_VERSION,
-        artifact_name: name,
-        path,
-        reviewed_at: reviewedAt,
-        prior_payload: payload,
-        reviewed_inputs,
-    };
-    await mkdir(reviewSnapshotDir(artifactsDir), { recursive: true });
-    await writeJsonFile(path, snapshot);
-}
-/**
- * Compute the re-review delta for a review phase against its snapshot: which
- * upstream dependencies changed (by semantic projection) since the prior verdict,
- * and the field-level diff for each. Dependencies present now but absent in the
- * snapshot (or vice-versa) are reported as wholesale add/remove diffs.
- */
-export async function computeReReviewDelta(artifactsDir, name, snapshot) {
-    const changedInputs = [];
-    for (const dep of DEPENDENCY_MAP[name]) {
-        const depEnvelope = await readContractArtifact(artifactsDir, dep);
-        const current = depEnvelope
-            ? semanticProjection(dep, depEnvelope.payload)
-            : undefined;
-        const prior = snapshot.reviewed_inputs[dep];
-        const lines = diffProjections(prior, current);
-        if (lines.length > 0)
-            changedInputs.push({ dep, lines });
-    }
-    return { changedInputs, allUnchanged: changedInputs.length === 0 };
-}
-/**
- * Render the diff-based re-review section appended to a review phase's re-emit
- * prompt. Carries the prior verdict and the precise changed-since-last-review
- * delta, and instructs the worker to re-affirm the prior verdict when the delta
- * does not affect it, or revise only the affected items otherwise. Delegates the
- * prompt body to the shared `renderDiffReReviewSection` (single-sourced shape).
- */
-export function renderReReviewSection(_name, snapshot, delta) {
-    return renderDiffReReviewSection({
-        priorPayload: snapshot.prior_payload,
-        changedInputs: delta.changedInputs.map((entry) => ({
-            label: entry.dep,
-            lines: entry.lines,
-        })),
-        allUnchanged: delta.allUnchanged,
-        subjectNoun: "artifact",
-        // Naming the file is what makes the prior verdict READABLE to the reviewer:
-        // the independent review lane is told to read the artifact files it is
-        // given, and a verdict living only inside the prompt's prose is not one of
-        // them. The path is the snapshot this section was rendered from, so the
-        // named file and the pasted payload cannot disagree.
-        priorVerdictPath: snapshot.path,
-    });
-}
-//# sourceMappingURL=reviewSnapshot.js.map

package/dist/remediate/contractPipeline/reviewSnapshot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reviewSnapshot.js","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/reviewSnapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EACL,eAAe,EACf,8BAA8B,EAC9B,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,oBAAoB,CAAC;AAC5B,gFAAgF;AAChF,6EAA6E;AAC7E,yCAAyC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAA8C,IAAI,GAAG,CAAC;IACjF,4BAA4B;IAC5B,4BAA4B;IAC5B,gBAAgB;IAChB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,IAAkC;IACjE,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,uBAAuB,GAC3B,2DAAoE,CAAC;AAwBvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAEzD,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,IAAkC;IAElC,OAAO,UAAU,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,IAAkC;IAElC,OAAO,CACL,8BAA8B,CAC5B,MAAM,oBAAoB,CACxB,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CACvC,EACD,uBAAuB,CACxB,IAAI,IAAI,CACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAoB,EACpB,IAAkC,EAClC,OAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO;IACpC,MAAM,eAAe,GAA2D,EAAE,CAAC;IACnF,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,WAAW,EAAE,CAAC;YAChB,eAAe,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAmB;QAC/B,cAAc,EAAE,uBAAuB;QACvC,aAAa,EAAE,IAAI;QACnB,IAAI;QACJ,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,OAAO;QACtB,eAAe;KAChB,CAAC;IACF,MAAM,KAAK,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,IAAkC,EAClC,QAAwB;IAExB,MAAM,aAAa,GAAmC,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAmC,EACnC,QAAwB,EACxB,KAAoB;IAEpB,OAAO,yBAAyB,CAAC;QAC/B,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjD,KAAK,EAAE,KAAK,CAAC,GAAG;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,UAAU;QACvB,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,qDAAqD;QACrD,gBAAgB,EAAE,QAAQ,CAAC,IAAI;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/remediate/contractPipeline/semanticProjection.d.ts

@@ -1,64 +0,0 @@
-/**
- * Semantic projection for contract-pipeline staleness (B3).
- *
- * The staleness DAG used to key every dependency on the upstream's RAW payload
- * content hash, so any byte change to an upstream — a reworded rationale, a
- * regenerated `created_at` stamp, a reordered list — re-staled the entire
- * downstream chain and forced a full (often LLM-driven) re-authoring of
- * artifacts whose load-bearing inputs had not actually changed. That is the
- * exact friction B3 names: "an edit to finalized_module_contracts re-stales
- * obligation_ledger → test_validator_plan → contract_assessment even when the
- * obligation set is unchanged."
- *
- * The fix is to make staleness content/semantics-aware: a dependency is recorded
- * and compared by the hash of its *semantic projection* — only the structure a
- * downstream actually consumes — not its raw bytes. A cosmetic upstream edit
- * projects to the same value, so downstreams stay fresh; a real change to the
- * load-bearing structure (a new module invariant, a changed interface) projects
- * differently and correctly re-stales.
- *
- * This mirrors audit-code's `normalizeForMetadataHash`
- * (`src/shared/artifactFreshness.ts`): strip non-semantic provenance fields
- * universally, then apply a per-artifact structural projection. The two
- * orchestrators stay in conceptual parity (semantic-projection staleness) while
- * each owns the projection table for its own artifact set.
- */
-import { stableStringifyProjection } from "audit-tools/shared";
-import type { ContractPipelineArtifactName } from "./artifactNames.js";
-import { DERIVABLE_MODULE_CONTRACT_FIELDS } from "./finalizedContractFields.js";
-export { stableStringifyProjection };
-/**
- * The module-contract fields that are load-bearing for ALL downstreams, at BOTH
- * layers (the intermediate `module_contracts` draft and the
- * `finalized_module_contracts`). These are the fields the deterministic
- * consumers read: `deriveObligationLedger` derives the obligation set and
- * test-plan premises from them, and `buildBaselineSymbolCorpus`
- * (`contractPipeline/changeClassification.ts`) additionally builds the
- * change-vs-addition corpus from the declared interface surface — `inputs`,
- * `outputs`, `side_effects`, `validation_boundary` — so a side_effects-only
- * edit is exactly as load-bearing as an interface edit and re-stales the
- * obligation_ledger like any other consumed field (CP-NODE-19). Never the
- * surrounding rationale/narrative/seam prose: a pure-prose edit leaves the
- * whole obligation-bearing chain fresh, while a changed interface, a new
- * invariant, or a changed side effect correctly re-stales it.
- */
-export { DERIVABLE_MODULE_CONTRACT_FIELDS };
-/**
- * Project a contract-pipeline artifact payload to only its load-bearing
- * structure for downstream-staleness purposes. The universal provenance strip
- * applies to every artifact; both module-contract artifacts
- * (`module_contracts` and `finalized_module_contracts`) additionally project
- * their `module_contracts` entries to the derivable fields. Artifacts with no
- * special case fall back to the provenance-stripped payload (conservative:
- * behaves like the raw payload minus stamps).
- *
- * Non-object payloads pass through unchanged.
- */
-export declare function semanticProjection(name: ContractPipelineArtifactName, payload: unknown): unknown;
-/**
- * The order-independent stable serialization used to hash a projection is the
- * shared `stableStringifyProjection` (re-exported above) — single-sourced in
- * `audit-tools/shared` so audit-code and remediate-code hash projections
- * identically.
- */
-//# sourceMappingURL=semanticProjection.d.ts.map

package/dist/remediate/contractPipeline/semanticProjection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"semanticProjection.d.ts","sourceRoot":"","sources":["../../../src/remediate/contractPipeline/semanticProjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAY,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,yBAAyB,EAAE,CAAC;AAWrC;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,gCAAgC,EAAE,CAAC;AAgD5C;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,OAAO,GACf,OAAO,CAyBT;AAED;;;;;GAKG"}