audit-tools 0.55.3 → 0.55.5

package/dist/shared/types/stepContract.js.map

@@ -1 +1 @@
-{"version":3,"file":"stepContract.js","sourceRoot":"","sources":["../../../src/shared/types/stepContract.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAGzE,sGAAsG;AACtG,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,sDAAsD;AAEtD,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAEtE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAE/E,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,6FAA6F;AAC7F,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAe,EAAE,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,IAAI,CAC5D,gBAAgB,CAAC,KAAK,CACvB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEzB,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,oFAAoF;AACpF,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAC9C,qFAAqF;AACrF,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,CAAC,GAAG,CAAC,CAAC;AACrC,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,CAAC;AAEnC,SAAS,QAAQ,CAAC,aAAqB,EAAE,SAAiB;IACxD,IAAI,aAAa,IAAI,sBAAsB,IAAI,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,aAAa,IAAI,uBAAuB,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;QACpF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,aAAqB;IAC3C,IAAI,aAAa,IAAI,2BAA2B;QAAE,OAAO,MAAM,CAAC;IAChE,IAAI,aAAa,IAAI,+BAA+B;QAAE,OAAO,UAAU,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,IAAI,SAAS,IAAI,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACrD,IAAI,SAAS,IAAI,sBAAsB;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAKhC;IACC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QACnC,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC,CAAC;IACN,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;QACxC,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC,CAAE;QACnL,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC;KAC1B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"stepContract.js","sourceRoot":"","sources":["../../../src/shared/types/stepContract.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAGzE,wGAAwG;AACxG,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,sDAAsD;AAEtD,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAEtE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAE/E,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,6FAA6F;AAC7F,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAe,EAAE,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,IAAI,CAC5D,gBAAgB,CAAC,KAAK,CACvB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAEzB,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,oFAAoF;AACpF,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAC9C,qFAAqF;AACrF,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,CAAC,GAAG,CAAC,CAAC;AACrC,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,CAAC;AAEnC,SAAS,QAAQ,CAAC,aAAqB,EAAE,SAAiB;IACxD,IAAI,aAAa,IAAI,sBAAsB,IAAI,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,aAAa,IAAI,uBAAuB,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;QACpF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,aAAqB;IAC3C,IAAI,aAAa,IAAI,2BAA2B;QAAE,OAAO,MAAM,CAAC;IAChE,IAAI,aAAa,IAAI,+BAA+B;QAAE,OAAO,UAAU,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,IAAI,SAAS,IAAI,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACrD,IAAI,SAAS,IAAI,sBAAsB;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAKhC;IACC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QACnC,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC,CAAC;IACN,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;QACxC,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC,CAAE;QACnL,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/shared/validation/findingGrounding.d.ts

@@ -19,6 +19,7 @@ export declare function normalizeForMatch(text: string): string;
 export declare function normalizeRepoPath(p: string): string;
 /**
  * True when `p` is a bare basename — a single path segment with no separator
+ * <!-- comment-citation-exempt: illustrative example path -->
  * (`advance.ts`), as opposed to a nested repo-relative path (`src/x/advance.ts`)
  * or a dotfile-dir path (`.claude/hooks/x.mjs`). A bare basename is the one shape
  * that cannot be resolved by a naive `root/<name>` join when the real file is

package/dist/shared/validation/findingGrounding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"findingGrounding.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/findingGrounding.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAErE,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAGjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CA0BtB;AAsDD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAKrE;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,IAAI,YAAY,CASzD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,UAAU,GAAE,YAAkC,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAoD3B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,OAAO,CAE9E;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GAClC,OAAO,CAET"}
+{"version":3,"file":"findingGrounding.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/findingGrounding.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAErE,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAGjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CA0BtB;AAsDD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAKrE;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,IAAI,YAAY,CASzD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,UAAU,GAAE,YAAkC,GAC7C,OAAO,CAAC,gBAAgB,CAAC,CAoD3B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,OAAO,CAE9E;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,GAClC,OAAO,CAET"}

package/dist/shared/validation/findingGrounding.js

@@ -48,6 +48,7 @@ export function normalizeRepoPath(p) {
 }
 /**
  * True when `p` is a bare basename — a single path segment with no separator
+ * <!-- comment-citation-exempt: illustrative example path -->
  * (`advance.ts`), as opposed to a nested repo-relative path (`src/x/advance.ts`)
  * or a dotfile-dir path (`.claude/hooks/x.mjs`). A bare basename is the one shape
  * that cannot be resolved by a naive `root/<name>` join when the real file is

package/dist/shared/validation/findingGrounding.js.map

@@ -1 +1 @@
-{"version":3,"file":"findingGrounding.js","sourceRoot":"","sources":["../../../src/shared/validation/findingGrounding.ts"],"names":[],"mappings":"AAAA,uIAAuI;AACvI;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,UAA+B;IAE/B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,KAAyB,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC,CAAC,uBAAuB;YAClE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,4EAA4E;IAC5E,6DAA6D;IAC7D,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,CAAC,EACjD;QACE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,OAAO,EAAE,yBAAyB;KACnC,CACF,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,SAAS,WAAW,CAAC,WAAmB,EAAE,UAAkB;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,gBAAoC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,gBAAgB,GAAG,IAAI,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,IAAI,GAAG,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,IAAI,IAAI,IAAI,CAAC;YACb,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KACE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,EAAE,KAAK,CAAC,CAAC,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,EACjC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,UAAkB;IAClE,OAAO,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAKD,MAAM,mBAAmB,GAAiB,CAAC,YAAY,EAAE,EAAE,CACzD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IACjD,OAAO,CAAC,YAAY,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAgB,EAChB,aAA2B,mBAAmB;IAE9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QACtD,OAAO,GAAG,CAAC,UAAU,CAAC;QACtB,OAAO,GAAG,CAAC,QAAQ,CAAC;QACpB,IACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,kCAAkC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC;YACtC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,CAAC,IAAI,wBAAwB,KAAK,CAAC,MAAM,gCAAgC;gBAC7E,yCAAyC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GACb,WAAW,KAAK,CAAC;QACf,CAAC,CAAC;YACE,MAAM,EAAE,YAAY;YACpB,MAAM,EACJ,0EAA0E;SAC7E;QACH,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;YACxB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5D,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAmC;IACnE,OAAO,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAmC;IAEnC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"findingGrounding.js","sourceRoot":"","sources":["../../../src/shared/validation/findingGrounding.ts"],"names":[],"mappings":"AAAA,uIAAuI;AACvI;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,UAA+B;IAE/B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,KAAyB,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC,CAAC,uBAAuB;YAClE,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,4EAA4E;IAC5E,6DAA6D;IAC7D,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,CAAC,EACjD;QACE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,OAAO,EAAE,yBAAyB;KACnC,CACF,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,SAAS,WAAW,CAAC,WAAmB,EAAE,UAAkB;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,gBAAoC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,gBAAgB,GAAG,IAAI,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,IAAI,GAAG,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,IAAI,IAAI,IAAI,CAAC;YACb,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KACE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7B,EAAE,KAAK,CAAC,CAAC,EACT,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,EACjC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,UAAkB;IAClE,OAAO,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAKD,MAAM,mBAAmB,GAAiB,CAAC,YAAY,EAAE,EAAE,CACzD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IACjD,OAAO,CAAC,YAAY,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,OAAgB,EAChB,aAA2B,mBAAmB;IAE9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QACtD,OAAO,GAAG,CAAC,UAAU,CAAC;QACtB,OAAO,GAAG,CAAC,QAAQ,CAAC;QACpB,IACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,kCAAkC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC;YACtC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,GAAG,GAAG,CAAC,IAAI,wBAAwB,KAAK,CAAC,MAAM,gCAAgC;gBAC7E,yCAAyC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GACb,WAAW,KAAK,CAAC;QACf,CAAC,CAAC;YACE,MAAM,EAAE,YAAY;YACpB,MAAM,EACJ,0EAA0E;SAC7E;QACH,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;YACxB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5D,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAmC;IACnE,OAAO,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,UAAU,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAmC;IAEnC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/shared/validation/producerBoundary.d.ts

@@ -0,0 +1,10 @@
+import type { RemediationOutcomesReport } from "../types/remediationOutcome.js";
+/**
+ * Refuse a `remediation-outcomes.json` value the canonical
+ * `RemediationOutcomesReportSchema` rejects. The schema is deliberately NOT
+ * strict (the on-disk outcomes file is a superset, carrying run-level fields the
+ * shared subset does not declare), so unknown keys are tolerated and only a
+ * missing/malformed REQUIRED field of the owning contract is refused.
+ */
+export declare function assertValidRemediationOutcomesReport(value: RemediationOutcomesReport): void;
+//# sourceMappingURL=producerBoundary.d.ts.map

package/dist/shared/validation/producerBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"producerBoundary.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/producerBoundary.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAIhF;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,yBAAyB,GAC/B,IAAI,CAQN"}

package/dist/shared/validation/producerBoundary.js

@@ -0,0 +1,26 @@
+// sites-pinned: tests/shared/producer-boundary.test.ts
+// The write-boundary gate for `remediation-outcomes.json`: the close phase
+// builds the machine contract but, without this check, persists whatever it
+// built — a producer that drops a required field writes a malformed contract
+// that only a much later consumer discovers. `assertValidRemediationOutcomesReport`
+// runs the finished value through the OWNING schema (`RemediationOutcomesReportSchema`,
+// deliberately not strict because the on-disk file is a superset) and throws with
+// the full issue list BEFORE the value is written, so a refusal writes none of
+// the close-phase artifacts.
+import { RemediationOutcomesReportSchema } from "../types/remediationOutcome.js";
+import { formatSchemaFailure } from "./schemaFailure.js";
+/**
+ * Refuse a `remediation-outcomes.json` value the canonical
+ * `RemediationOutcomesReportSchema` rejects. The schema is deliberately NOT
+ * strict (the on-disk outcomes file is a superset, carrying run-level fields the
+ * shared subset does not declare), so unknown keys are tolerated and only a
+ * missing/malformed REQUIRED field of the owning contract is refused.
+ */
+export function assertValidRemediationOutcomesReport(value) {
+    const result = RemediationOutcomesReportSchema.safeParse(value);
+    if (!result.success) {
+        throw new Error(`remediation-outcomes.json: produced report fails the owning contract — ` +
+            formatSchemaFailure(result.error));
+    }
+}
+//# sourceMappingURL=producerBoundary.js.map

package/dist/shared/validation/producerBoundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producerBoundary.js","sourceRoot":"","sources":["../../../src/shared/validation/producerBoundary.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,oFAAoF;AACpF,wFAAwF;AACxF,kFAAkF;AAClF,+EAA+E;AAC/E,6BAA6B;AAG7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAClD,KAAgC;IAEhC,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.55.3",
+  "version": "0.55.5",
   "private": false,
   "license": "ISC",
   "description": "Provider-neutral code auditing and remediation workflows for arbitrary repositories.",
@@ -25,7 +25,6 @@
     "audit-code.mjs",
     "wrapper/**",
     "remediate-code.mjs",
-    "dispatch/**",
     "schemas/**",
     "skills/**",
     "scripts/postinstall.mjs",
@@ -72,12 +71,15 @@
     "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
     "check:doc-links": "node scripts/check-doc-links.mjs",
     "check:doc-code-citations": "node scripts/check-doc-code-citations.mjs",
+    "check:comment-code-citations": "node scripts/check-comment-code-citations.mjs",
     "check:philosophy-brief": "node scripts/check-philosophy-brief.mjs",
     "check:readme-sample-report": "node --import tsx/esm scripts/check-readme-sample-report.mjs",
     "check:proposal-red-at": "node scripts/check-proposal-red-at.mjs",
     "verify:hosts": "node scripts/audit/verify-hosts.mjs",
     "verify:remediate-hosts": "node scripts/remediate/verify-hosts.mjs",
     "pack:smoke": "node scripts/shared/smoke-tarball.mjs",
+    "staged:legs": "node scripts/run-staged-legs.mjs",
+    "land": "node scripts/land.mjs",
     "smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
     "smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
     "smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",

package/dispatch/artifacts-dir.mjs

@@ -1,14 +0,0 @@
-import { join, resolve } from "node:path";
-
-/**
- * Resolve the artifacts directory from command-line args or default to
- * <cwd>/.audit-tools/audit. The --artifacts-dir flag is optional; when omitted
- * or invalid, defaults to the standard location. Default must match where the
- * orchestrator/wrapper actually writes runs: <root>/.audit-tools/audit
- * (COR-bf5c7331) — the prior `.audit-artifacts` default resolved to a
- * directory the pipeline never populates.
- */
-export function resolveArtifactsDir(argv, defaultDir = join(process.cwd(), ".audit-tools", "audit")) {
-  const idx = argv.indexOf("--artifacts-dir");
-  return idx !== -1 && argv[idx + 1] ? resolve(argv[idx + 1]) : defaultDir;
-}

package/dispatch/merge-results.mjs

@@ -1,257 +0,0 @@
-import { join } from "node:path";
-import { readFileSync, writeFileSync, readdirSync, existsSync } from "node:fs";
-import { pathToFileURL } from "node:url";
-import { validateResult } from "./validate.mjs";
-import { resolveArtifactsDir } from "./artifacts-dir.mjs";
-
-/**
- * Importable merge core (CP-NODE-21 / dispatch-scripts-test-reach). Every
- * acceptance branch this script owns — fail-closed manifest read, INV-01
- * array-payload expansion, duplicate-task_id rejection, unknown-task_id
- * rejection, missing-result-is-a-failure, no-destructive-truncation, and the
- * INV-03 partial-merge signal (surfaced here as `failing.length > 0`, which
- * the CLI shim below turns into a non-zero exit) — lives in this function so
- * a test can drive it in-process against a fabricated run directory, without
- * spawning a child process and without process.exit ever firing mid-test.
- * The CLI shim is a byte-compatible wrapper: same argv parsing, same
- * stdout/stderr text, same exit codes as before this split.
- *
- * @param {{ artifactsDir: string, runId: string }} options
- * @returns {{
- *   ok: boolean,
- *   fatal?: { message: string },
- *   passing: object[],
- *   failing: { task_id: string, errors: string[] }[],
- *   total: number,
- *   auditResultsPath: string,
- *   failedTasksPath: string,
- *   wroteAuditResults: boolean,
- *   wroteFailedTasks: boolean,
- * }}
- */
-export function mergeResults({ artifactsDir, runId }) {
-  const taskResultsDir = join(artifactsDir, "runs", runId, "task-results");
-  const auditResultsPath = join(artifactsDir, "runs", runId, "run-results.json");
-  const failedTasksPath = join(artifactsDir, "runs", runId, "failed-tasks.json");
-  const tasksPath = join(artifactsDir, "runs", runId, "pending-audit-tasks.json");
-
-  if (!existsSync(taskResultsDir)) {
-    return {
-      ok: false,
-      fatal: { message: `task-results directory not found: ${taskResultsDir}` },
-      passing: [],
-      failing: [],
-      total: 0,
-      auditResultsPath,
-      failedTasksPath,
-      wroteAuditResults: false,
-      wroteFailedTasks: false,
-    };
-  }
-
-  // Manifest-reconciled completeness (COR-7602834d cluster): acceptance is judged against the
-  // pending manifest, never against whichever task-results files happen to exist.
-  // A missing or unreadable manifest means no task context can be established, so
-  // the merge hard-fails BEFORE any write (fail-closed task-identity gate) instead
-  // of validating results fail-open with no assigned task.
-  let tasks;
-  try {
-    tasks = JSON.parse(readFileSync(tasksPath, "utf8"));
-    if (!Array.isArray(tasks)) {
-      throw new Error("pending-audit-tasks.json must be a JSON array of AuditTasks");
-    }
-  } catch (e) {
-    return {
-      ok: false,
-      fatal: {
-        message:
-          `Cannot read pending manifest ${tasksPath}: ${/** @type {any} */ (e).message}\n` +
-          "merge-results judges acceptance against the pending manifest (fail-closed); aborting before any write.",
-      },
-      passing: [],
-      failing: [],
-      total: 0,
-      auditResultsPath,
-      failedTasksPath,
-      wroteAuditResults: false,
-      wroteFailedTasks: false,
-    };
-  }
-  const taskMap = new Map(tasks.filter(t => t && typeof t.task_id === "string").map(t => [t.task_id, t]));
-
-  // Schema-pointer-file exclusion was retired along with the rest of the
-  // schema-copy feature in 467b1e8f ("retire the execution substrate: zero
-  // adapters, host-owned execution"), which deleted PACKET_SCHEMA_FILENAMES
-  // and its sole producer (nothing in src/ copies schema files into
-  // task-results/ anymore) but left this import pointing at the deleted
-  // export — an orphaned reference that made this whole script unimportable
-  // (ESM throws on a missing named export). If a schema-pointer-file
-  // convention is reintroduced, re-add the matching exclusion here sourced
-  // from wherever that filename list lives then; there is nothing to exclude
-  // today.
-  const files = readdirSync(taskResultsDir)
-    .filter(f => f.endsWith(".json"))
-    .sort();
-
-  const failing = [];
-  const resultsByTaskId = new Map();
-
-  for (const filename of files) {
-    const filePath = join(taskResultsDir, filename);
-    let parsed;
-    try {
-      parsed = JSON.parse(readFileSync(filePath, "utf8"));
-    } catch (e) {
-      failing.push({ task_id: filename, errors: [`Invalid JSON: ${/** @type {any} */ (e).message}`] });
-      continue;
-    }
-
-    // Expand top-level AuditResult[] arrays — a worker that emits an array
-    // payload must not be treated as one invalid object (INV-01 / COR-bf5c7331).
-    const candidates = Array.isArray(parsed) ? parsed : [parsed];
-    for (const resultObj of candidates) {
-      const taskId =
-        resultObj && typeof resultObj === "object" && !Array.isArray(resultObj) &&
-        typeof resultObj.task_id === "string"
-          ? resultObj.task_id
-          : undefined;
-      if (!taskId) {
-        failing.push({
-          task_id: filename,
-          errors: ["Result has no task_id; cannot bind it to an assigned task."],
-        });
-        continue;
-      }
-      if (resultsByTaskId.has(taskId)) {
-        // Dedup-by-task_id: the first on-disk result for a task is authoritative;
-        // later copies are rejected, never double-merged.
-        failing.push({
-          task_id: taskId,
-          errors: [`Duplicate audit result for assigned task '${taskId}'.`],
-        });
-        continue;
-      }
-      if (!taskMap.has(taskId)) {
-        // Identity is the tool's authority: a result that matches no assigned
-        // task in the pending manifest never validates (fail-closed).
-        failing.push({
-          task_id: taskId,
-          errors: [`Unknown task_id '${taskId}': not in the pending manifest for run '${runId}'.`],
-        });
-        continue;
-      }
-      resultsByTaskId.set(taskId, resultObj);
-    }
-  }
-
-  // Validate each MANIFEST task's result: present → validate in the assigned
-  // task's context; absent → a genuine failure (the manifest, not the file
-  // listing, decides completeness).
-  const passing = [];
-  for (const task of taskMap.values()) {
-    const resultObj = resultsByTaskId.get(task.task_id);
-    if (resultObj === undefined) {
-      failing.push({ task_id: task.task_id, errors: ["Missing audit result for assigned task."] });
-      continue;
-    }
-    const { valid, errors } = validateResult(resultObj, task);
-    if (valid) {
-      passing.push(resultObj);
-    } else {
-      failing.push({ task_id: task.task_id, errors });
-    }
-  }
-
-  let wroteFailedTasks = false;
-  if (failing.length > 0) {
-    writeFileSync(failedTasksPath, JSON.stringify(failing, null, 2));
-    wroteFailedTasks = true;
-  }
-
-  // No destructive truncation on re-run (COR-44bea9c0 cluster): run-results.json is written
-  // only when there is something to merge. A blocked no-op (nothing passed while
-  // something failed) — e.g. a stray re-invocation after a successful merge —
-  // must never truncate a previously written run-results.json to [].
-  let wroteAuditResults = false;
-  if (passing.length > 0) {
-    writeFileSync(auditResultsPath, JSON.stringify(passing, null, 2));
-    wroteAuditResults = true;
-  }
-
-  return {
-    ok: true,
-    passing,
-    failing,
-    total: passing.length + failing.length,
-    auditResultsPath,
-    failedTasksPath,
-    wroteAuditResults,
-    wroteFailedTasks,
-  };
-}
-
-function runCli() {
-  const runIdIdx = process.argv.indexOf("--run-id");
-  if (runIdIdx === -1 || !process.argv[runIdIdx + 1]) {
-    console.error("Usage: node dispatch/merge-results.mjs --run-id <run_id> [--artifacts-dir <dir>]");
-    process.exit(1);
-  }
-  const runId = process.argv[runIdIdx + 1];
-
-  // Default must match where the orchestrator/wrapper actually writes runs:
-  // <root>/.audit-tools/audit (COR-bf5c7331). The prior `.audit-artifacts`
-  // default resolved to a directory the pipeline never populates.
-  const artifactsDir = resolveArtifactsDir(process.argv);
-
-  const result = mergeResults({ artifactsDir, runId });
-
-  if (!result.ok) {
-    console.error((/** @type {any} */ (result.fatal)).message);
-    process.exit(1);
-  }
-
-  const { passing, failing, total, auditResultsPath, failedTasksPath } = result;
-
-  if (failing.length > 0) {
-    process.stderr.write(`${failing.length} task(s) failed validation and were excluded:\n`);
-    for (const f of failing) {
-      for (const err of f.errors) {
-        process.stderr.write(`  ✗ ${f.task_id}: ${err}\n`);
-      }
-    }
-  }
-
-  // FND-OBS-bf5c7331: emit a structured JSON summary line to stdout so callers
-  // get a machine-readable payload alongside the human-readable text line.
-  // Both are written to stdout; the JSON summary line always comes first so
-  // programmatic consumers can parse it without stripping the text line.
-  process.stdout.write(
-    JSON.stringify({
-      ts: new Date().toISOString(),
-      source: "audit-code:merge-results",
-      event: "merge_summary",
-      total,
-      accepted: passing.length,
-      rejected: failing.length,
-      audit_results_path: auditResultsPath,
-      ...(failing.length > 0 ? { failed_tasks_path: failedTasksPath } : {}),
-    }) + "\n",
-  );
-  console.log(`✓ ${passing.length}/${total} tasks valid → ${auditResultsPath}`);
-  if (failing.length > 0) {
-    console.log("  Re-run those tasks in the next cycle.");
-  }
-
-  // Exit non-zero when any result failed validation so callers can detect
-  // partial merges and avoid treating them as clean success (INV-03 / COR-bf5c7331-2).
-  process.exit(failing.length > 0 ? 1 : 0);
-}
-
-// Only run the CLI when this file is the process entrypoint — not when a test
-// imports mergeResults() directly. Compares resolved file:// URLs (not raw
-// argv[1] strings) so this is correct on Windows, where argv[1] is a
-// backslash path that never equals import.meta.url's forward-slash form.
-const isMainModule = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
-if (isMainModule) {
-  runCli();
-}

package/dispatch/validate-result.mjs

@@ -1,115 +0,0 @@
-import { join } from "node:path";
-import { readFileSync, existsSync } from "node:fs";
-import { pathToFileURL } from "node:url";
-import { validateResult } from "./validate.mjs";
-import { resolveArtifactsDir } from "./artifacts-dir.mjs";
-
-/**
- * Resolve the AuditTask context for `taskId` from the run's pending
- * manifest. Degrades to `task: null` (never throws) when the manifest is
- * absent or unreadable — validateResult's fail-closed null-task branch is the
- * single enforcement point downstream; this helper only ever supplies
- * context, it never itself decides pass/fail.
- *
- * @param {{ artifactsDir: string, runId: string, taskId: string }} options
- * @returns {{ task: object | null, warning?: string }}
- */
-export function resolveTaskContext({ artifactsDir, runId, taskId }) {
-  const tasksPath = join(artifactsDir, "runs", runId, "pending-audit-tasks.json");
-  if (!existsSync(tasksPath)) {
-    return { task: null };
-  }
-  try {
-    const tasks = JSON.parse(readFileSync(tasksPath, "utf8"));
-    return { task: tasks.find(t => t.task_id === taskId) ?? null };
-  } catch (e) {
-    return {
-      task: null,
-      warning: `[warn] Could not read pending-audit-tasks.json; line-count validation will be skipped: ${/** @type {any} */ (e).message}`,
-    };
-  }
-}
-
-/**
- * Importable core (CP-NODE-21 / dispatch-scripts-test-reach): reads one
- * task-results file, resolves its task context via {@link resolveTaskContext},
- * and validates it. No process.exit — the CLI shim below translates the
- * outcome into console output and an exit code, byte-compatible with this
- * script's behavior before the split.
- *
- * @param {{ artifactsDir: string, runId: string, taskId: string }} options
- * @returns {{
- *   ok: boolean,
- *   fatal?: { message: string },
- *   warning?: string,
- *   resultPath: string,
- *   valid?: boolean,
- *   errors?: string[],
- * }}
- */
-export function validateOneResult({ artifactsDir, runId, taskId }) {
-  const sanitized = taskId.replace(/[^a-zA-Z0-9_-]/g, "_");
-  const resultPath = join(artifactsDir, "runs", runId, "task-results", sanitized + ".json");
-
-  if (!existsSync(resultPath)) {
-    return { ok: false, fatal: { message: `File not found: ${resultPath}` }, resultPath };
-  }
-
-  let resultObj;
-  try {
-    resultObj = JSON.parse(readFileSync(resultPath, "utf8"));
-  } catch (e) {
-    return { ok: false, fatal: { message: `Invalid JSON in ${resultPath}: ${/** @type {any} */ (e).message}` }, resultPath };
-  }
-
-  const { task, warning } = resolveTaskContext({ artifactsDir, runId, taskId });
-  const { valid, errors } = validateResult(resultObj, task);
-  return { ok: true, warning, resultPath, valid, errors };
-}
-
-function runCli() {
-  const runIdIdx = process.argv.indexOf("--run-id");
-  const taskIdIdx = process.argv.indexOf("--task-id");
-
-  const runId = runIdIdx !== -1 ? process.argv[runIdIdx + 1] : undefined;
-  const taskId = taskIdIdx !== -1 ? process.argv[taskIdIdx + 1] : undefined;
-
-  if (!runId || !taskId) {
-    console.error("Usage: node dispatch/validate-result.mjs --run-id <run_id> --task-id <task_id> [--artifacts-dir <dir>]");
-    process.exit(1);
-  }
-
-  // Default must match where the orchestrator/wrapper actually writes runs:
-  // <root>/.audit-tools/audit (COR-bf5c7331), not the legacy `.audit-artifacts`.
-  const artifactsDir = resolveArtifactsDir(process.argv);
-
-  const result = validateOneResult({ artifactsDir, runId, taskId });
-
-  if (!result.ok) {
-    console.error((/** @type {any} */ (result.fatal)).message);
-    process.exit(1);
-  }
-
-  if (result.warning) {
-    process.stderr.write(result.warning + "\n");
-  }
-
-  if (result.valid) {
-    console.log("✓ valid:", taskId);
-    process.exit(0);
-  } else {
-    console.error("✗ invalid:", taskId);
-    console.error(JSON.stringify(result.errors, null, 2));
-    process.exit(1);
-  }
-}
-
-// Only run the CLI when this file is the process entrypoint — not when a test
-// imports validateOneResult()/resolveTaskContext() directly. Compares
-// resolved file:// URLs (not raw argv[1] strings) so this is correct on
-// Windows, where argv[1] is a backslash path that never equals
-// import.meta.url's forward-slash form.
-const isMainModule = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
-if (isMainModule) {
-  runCli();
-}

package/dispatch/validate.mjs

@@ -1,34 +0,0 @@
-import { validateAuditResults } from "../dist/audit/validation/auditResults.js";
-
-/**
- * Validate one audit result in the context of its assigned task.
- *
- * Task-identity gate (audit-merge-and-results contract; COR-7602834d cluster):
- * a result validates ONLY in the context of its
- * assigned task from the pending manifest. A null/absent task context hard-fails
- * — validating with no task context would silently skip every identity-match and
- * line-count check (fail-open), admitting results the tool cannot bind to any
- * assigned task.
- *
- * @param {object} resultObj  — parsed JSON from a task-results file
- * @param {object|null} task  — the matching AuditTask from pending-audit-tasks.json, or null
- * @returns {{ valid: boolean, errors: string[] }}
- */
-export function validateResult(resultObj, task) {
-  if (!task) {
-    return {
-      valid: false,
-      errors: [
-        "No assigned task context: a result validates only against its assigned task " +
-          "from pending-audit-tasks.json (fail-closed).",
-      ],
-    };
-  }
-  const issues = validateAuditResults([resultObj], [task], {
-    lineIndex: task.file_line_counts ?? {},
-  });
-  const errors = issues
-    .filter(i => i.severity === "error")
-    .map(i => `${i.path}: ${i.message}`);
-  return { valid: errors.length === 0, errors };
-}