audit-tools 0.55.4 → 0.55.5

package/dist/shared/validation/producerBoundary.d.ts

@@ -0,0 +1,10 @@
+import type { RemediationOutcomesReport } from "../types/remediationOutcome.js";
+/**
+ * Refuse a `remediation-outcomes.json` value the canonical
+ * `RemediationOutcomesReportSchema` rejects. The schema is deliberately NOT
+ * strict (the on-disk outcomes file is a superset, carrying run-level fields the
+ * shared subset does not declare), so unknown keys are tolerated and only a
+ * missing/malformed REQUIRED field of the owning contract is refused.
+ */
+export declare function assertValidRemediationOutcomesReport(value: RemediationOutcomesReport): void;
+//# sourceMappingURL=producerBoundary.d.ts.map

package/dist/shared/validation/producerBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"producerBoundary.d.ts","sourceRoot":"","sources":["../../../src/shared/validation/producerBoundary.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAIhF;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,yBAAyB,GAC/B,IAAI,CAQN"}

package/dist/shared/validation/producerBoundary.js

@@ -0,0 +1,26 @@
+// sites-pinned: tests/shared/producer-boundary.test.ts
+// The write-boundary gate for `remediation-outcomes.json`: the close phase
+// builds the machine contract but, without this check, persists whatever it
+// built — a producer that drops a required field writes a malformed contract
+// that only a much later consumer discovers. `assertValidRemediationOutcomesReport`
+// runs the finished value through the OWNING schema (`RemediationOutcomesReportSchema`,
+// deliberately not strict because the on-disk file is a superset) and throws with
+// the full issue list BEFORE the value is written, so a refusal writes none of
+// the close-phase artifacts.
+import { RemediationOutcomesReportSchema } from "../types/remediationOutcome.js";
+import { formatSchemaFailure } from "./schemaFailure.js";
+/**
+ * Refuse a `remediation-outcomes.json` value the canonical
+ * `RemediationOutcomesReportSchema` rejects. The schema is deliberately NOT
+ * strict (the on-disk outcomes file is a superset, carrying run-level fields the
+ * shared subset does not declare), so unknown keys are tolerated and only a
+ * missing/malformed REQUIRED field of the owning contract is refused.
+ */
+export function assertValidRemediationOutcomesReport(value) {
+    const result = RemediationOutcomesReportSchema.safeParse(value);
+    if (!result.success) {
+        throw new Error(`remediation-outcomes.json: produced report fails the owning contract — ` +
+            formatSchemaFailure(result.error));
+    }
+}
+//# sourceMappingURL=producerBoundary.js.map

package/dist/shared/validation/producerBoundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producerBoundary.js","sourceRoot":"","sources":["../../../src/shared/validation/producerBoundary.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,oFAAoF;AACpF,wFAAwF;AACxF,kFAAkF;AAClF,+EAA+E;AAC/E,6BAA6B;AAG7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAClD,KAAgC;IAEhC,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.55.4",
+  "version": "0.55.5",
   "private": false,
   "license": "ISC",
   "description": "Provider-neutral code auditing and remediation workflows for arbitrary repositories.",
@@ -71,12 +71,15 @@
     "check:doc-manifest": "node scripts/check-doc-manifest.mjs",
     "check:doc-links": "node scripts/check-doc-links.mjs",
     "check:doc-code-citations": "node scripts/check-doc-code-citations.mjs",
+    "check:comment-code-citations": "node scripts/check-comment-code-citations.mjs",
     "check:philosophy-brief": "node scripts/check-philosophy-brief.mjs",
     "check:readme-sample-report": "node --import tsx/esm scripts/check-readme-sample-report.mjs",
     "check:proposal-red-at": "node scripts/check-proposal-red-at.mjs",
     "verify:hosts": "node scripts/audit/verify-hosts.mjs",
     "verify:remediate-hosts": "node scripts/remediate/verify-hosts.mjs",
     "pack:smoke": "node scripts/shared/smoke-tarball.mjs",
+    "staged:legs": "node scripts/run-staged-legs.mjs",
+    "land": "node scripts/land.mjs",
     "smoke:linked-audit-code": "node scripts/audit/smoke-linked-audit-code.mjs",
     "smoke:packaged-audit-code": "node scripts/audit/smoke-packaged-audit-code.mjs",
     "smoke:linked-remediate-code": "node scripts/remediate/smoke-linked-remediate-code.mjs",