audit-tools 0.55.4 → 0.55.6

package/dist/audit/cli/validateResultsCommand.js

@@ -1,8 +1,10 @@
+// sites-pinned: tests/audit/frozen-snapshot.test.ts
 import { readJsonFile } from "audit-tools/shared";
 import { resolve } from "node:path";
 import { loadArtifactBundle } from "../io/artifacts.js";
 import { validateAuditResults } from "../validation/auditResults.js";
 import { buildLineIndex } from "./lineIndex.js";
+import { readRunSourceRoot } from "../io/runSnapshot.js";
 import { getArtifactsDir, getFlag, getRootDir } from "./args.js";
 export async function cmdValidateResults(argv) {
     const artifactsDir = getArtifactsDir(argv);
@@ -12,7 +14,7 @@ export async function cmdValidateResults(argv) {
     }
     const bundle = await loadArtifactBundle(artifactsDir);
     const lineIndex = bundle.repo_manifest
-        ? await buildLineIndex(getRootDir(argv), bundle.repo_manifest)
+        ? await buildLineIndex(await readRunSourceRoot(getRootDir(argv), artifactsDir), bundle.repo_manifest)
         : undefined;
     const auditResults = await readJsonFile(resultsPath);
     const issues = validateAuditResults(auditResults, bundle.audit_tasks ?? [], {

package/dist/audit/cli/validateResultsCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"validateResultsCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/validateResultsCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,MAAM,YAAY,CAAU,WAAW,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE;QAC1E,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC;QAClC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM;KACP,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"validateResultsCommand.js","sourceRoot":"","sources":["../../../src/audit/cli/validateResultsCommand.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,MAAM,cAAc,CAAC,MAAM,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;QACrG,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,MAAM,YAAY,CAAU,WAAW,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE;QAC1E,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC;QAClC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,MAAM;KACP,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/audit/contracts/workerSchemas.d.ts

@@ -368,9 +368,9 @@ export declare const WorkerAuditTaskSchema: z.ZodObject<{
     status?: "pending" | "complete" | undefined;
     tags?: string[] | undefined;
     token_estimate?: number | undefined;
+    inputs?: Record<string, string> | undefined;
     completed_at?: string | undefined;
     file_line_counts?: Record<string, number> | undefined;
-    inputs?: Record<string, string> | undefined;
     line_ranges?: {
         path: string;
         end: number;
@@ -397,9 +397,9 @@ export declare const WorkerAuditTaskSchema: z.ZodObject<{
     status?: "pending" | "complete" | undefined;
     tags?: string[] | undefined;
     token_estimate?: number | undefined;
+    inputs?: Record<string, string> | undefined;
     completed_at?: string | undefined;
     file_line_counts?: Record<string, number> | undefined;
-    inputs?: Record<string, string> | undefined;
     line_ranges?: {
         path: string;
         end: number;
@@ -756,9 +756,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -785,9 +785,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -821,9 +821,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -858,9 +858,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -964,9 +964,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1074,9 +1074,9 @@ export declare const WorkerAuditResultSchema: z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1441,9 +1441,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1470,9 +1470,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1506,9 +1506,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1543,9 +1543,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1649,9 +1649,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;
@@ -1759,9 +1759,9 @@ export declare const WorkerAuditResultsSchema: z.ZodArray<z.ZodObject<{
             status?: "pending" | "complete" | undefined;
             tags?: string[] | undefined;
             token_estimate?: number | undefined;
+            inputs?: Record<string, string> | undefined;
             completed_at?: string | undefined;
             file_line_counts?: Record<string, number> | undefined;
-            inputs?: Record<string, string> | undefined;
             line_ranges?: {
                 path: string;
                 end: number;

package/dist/audit/extractors/fsIntake.d.ts

@@ -1,9 +1,22 @@
 import type { RepoManifest } from "../types.js";
 export interface IntakeOptions {
     root: string;
+    /**
+     * The manifest's name. A run reads a frozen snapshot whose directory name is
+     * not the repository's, so the caller names the manifest after the LIVE root;
+     * defaults to the basename of `root`.
+     */
+    name?: string;
     ignore?: string[];
     hash_files?: boolean;
     max_file_size_bytes?: number;
 }
+/**
+ * True when intake skips `relativePath` — its default set plus `extra` (the
+ * repository's `.auditorignore` rules). The one rule a frozen copy of a non-git
+ * root (`runSnapshot.ts`) uses to decide what it links instead of copying, so
+ * the copy and the walk can never disagree about what intake reads.
+ */
+export declare function isIntakeIgnored(relativePath: string, extra?: readonly string[]): boolean;
 export declare function buildRepoManifestFromFs(options: IntakeOptions): Promise<RepoManifest>;
 //# sourceMappingURL=fsIntake.d.ts.map

package/dist/audit/extractors/fsIntake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fsIntake.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAuGD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAavB"}
+{"version":3,"file":"fsIntake.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAiBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,GAAG,OAAO,CAE5F;AAwFD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAavB"}

package/dist/audit/extractors/fsIntake.js

@@ -1,3 +1,4 @@
+// sites-pinned: tests/audit/frozen-snapshot.test.ts, tests/audit/run-snapshot.test.ts
 import { readdir, readFile, stat } from "node:fs/promises";
 import { hashContent, toPosixPath } from "audit-tools/shared";
 import { join, relative, resolve } from "node:path";
@@ -16,6 +17,15 @@ const DEFAULT_IGNORES = [
     ".claude",
     "coverage",
 ];
+/**
+ * True when intake skips `relativePath` — its default set plus `extra` (the
+ * repository's `.auditorignore` rules). The one rule a frozen copy of a non-git
+ * root (`runSnapshot.ts`) uses to decide what it links instead of copying, so
+ * the copy and the walk can never disagree about what intake reads.
+ */
+export function isIntakeIgnored(relativePath, extra = []) {
+    return shouldIgnore(relativePath, [...DEFAULT_IGNORES, ...extra]);
+}
 function shouldIgnore(relativePath, ignores) {
     const normalized = toPosixPath(relativePath);
     return ignores.some((ignore) => {
@@ -87,6 +97,6 @@ export async function buildRepoManifestFromFs(options) {
         maxFileSizeBytes: options.max_file_size_bytes ?? 1024 * 1024,
     };
     await walk(ctx, root, files);
-    return buildRepoManifest(root.split(/[\\/]/).pop() ?? "repo", files);
+    return buildRepoManifest(options.name ?? root.split(/[\\/]/).pop() ?? "repo", files);
 }
 //# sourceMappingURL=fsIntake.js.map

package/dist/audit/extractors/fsIntake.js.map

@@ -1 +1 @@
-{"version":3,"file":"fsIntake.js","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AASvD,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC;AAEF,SAAS,YAAY,CAAC,YAAoB,EAAE,OAAiB;IAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CACL,UAAU,KAAK,KAAK;YACpB,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;YACjC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AASD,KAAK,UAAU,IAAI,CACjB,GAAgB,EAChB,OAAe,EACf,OAAmE;IAEnE,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,6CAA6C,OAAO,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,wCAAwC,YAAY,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,uCAAuC,YAAY,KAAK,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,gBAAgB,SAAS,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA+D,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAgB;QACvB,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACtC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI,GAAG,IAAI;KAC7D,CAAC;IACF,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"fsIntake.js","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAevD,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,QAA2B,EAAE;IACjF,OAAO,YAAY,CAAC,YAAY,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,OAAiB;IAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CACL,UAAU,KAAK,KAAK;YACpB,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;YACjC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AASD,KAAK,UAAU,IAAI,CACjB,GAAgB,EAChB,OAAe,EACf,OAAmE;IAEnE,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,6CAA6C,OAAO,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,wCAAwC,YAAY,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,uCAAuC,YAAY,KAAK,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,gBAAgB,SAAS,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA+D,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAgB;QACvB,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACtC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI,GAAG,IAAI;KAC7D,CAAC;IACF,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,EAAE,KAAK,CAAC,CAAC;AACvF,CAAC"}

package/dist/audit/io/artifacts.d.ts

@@ -1,4 +1,4 @@
-import { cp, rm } from "node:fs/promises";
+import { cp } from "node:fs/promises";
 import { AUDIT_REPORT_FILENAME } from "audit-tools/shared";
 import type { AuditResult, AuditTask, CoverageMatrix, RepoManifest, UnitManifest } from "../types.js";
 import type { AuditState } from "../types/auditState.js";
@@ -178,20 +178,46 @@ export declare function loadArtifactBundle(root: string): Promise<ArtifactBundle
 export declare function writeCoreArtifacts(root: string, bundle: ArtifactBundle, options?: {
     prune?: boolean;
 }): Promise<void>;
+/**
+ * Archive the run's append-only diagnostics one level up — agent feedback,
+ * friction records and the submission ledger — and name every member that did
+ * not archive. Promotion runs it; so does the next run's rollover
+ * (`rollOverFinishedRun`), because a host may append to these after promotion
+ * and the rollover deletes them.
+ */
+export declare function archiveRunDiagnostics(params: {
+    artifactsDir: string;
+}, options?: {
+    copy?: typeof cp;
+    warn?: (message: string) => void;
+}): Promise<{
+    lost: string[];
+    ledger_dropped: SubmissionLedgerDrop[];
+}>;
+/**
+ * Promote the run's deliverables one level up and ARCHIVE every member that
+ * the next run's rollover (`rollOverFinishedRun`) will delete: the findings
+ * contract, agent feedback, friction records and the submission ledger. The
+ * working dir itself is KEPT (owner decision 2026-10-08, "keep the artifacts
+ * dir"): the next run reuses its derived artifacts through the staleness DAG.
+ * `archived` is the rollover's gate (through `isWorkingDirFullyPromoted`): a
+ * member that did not archive keeps the dir from being rolled over, so its only
+ * copy is never deleted.
+ */
 export declare function promoteFinalAuditReport(params: {
     artifactsDir: string;
 }, options?: {
     copy?: typeof cp;
-    remove?: typeof rm;
     warn?: (message: string) => void;
 }): Promise<{
     promoted: boolean;
-    cleaned: boolean;
+    /** Every archive member is verified one level up (INV 1). */
+    archived: boolean;
     warning?: string;
     /**
-     * Artifacts that could NOT be archived before the cleanup. Non-empty means the
-     * delete was ABORTED, so a caller reading { promoted: true, cleaned: true } can
-     * trust that nothing was lost — which is exactly what it could not do while a
+     * Artifacts that could NOT be archived. Non-empty means `archived` is false,
+     * so a caller reading { promoted: true, archived: true } can trust that
+     * nothing will be lost — which is exactly what it could not do while a
      * findings-copy failure was a `warn()` with no effect on the returned shape
      * (INV 3 / DAT-4802dc9e-2, -3).
      */
@@ -205,12 +231,12 @@ export declare function promoteFinalAuditReport(params: {
 /**
  * Has the completion transition NOTHING left to do for this working dir — is
  * every artifact `promoteFinalAuditReport` archives already one level up,
- * byte-identical? This is the stale-dir cleanup rule's question
+ * byte-identical? This is the stale-dir rule's question
  * (`cleanupStaleArtifactsDir`), and it is answered by promotion's OWN archive
  * walk rather than by a second enumeration of the archive set: the walk runs
  * with its copy replaced by a byte comparison against what is already at each
- * destination and its delete replaced by a no-op, so "fully promoted" means
- * exactly "the delete gate (INV 1) would pass without copying anything". A
+ * destination, so "fully promoted" means exactly "the archive gate (INV 1)
+ * would pass without copying anything". A
  * member promotion archives is a member this walk checks; the two cannot drift.
  *
  * Identity, not existence: a destination that is missing, or that differs from

package/dist/audit/io/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/audit/io/artifacts.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAY,EAAE,EAAU,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAEL,qBAAqB,EAUtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,YAAY,EACZ,YAAY,EACb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3M,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAK9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EACV,uBAAuB,EACvB,iCAAiC,EAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,yCAAyC,CAAC;AAKjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAaL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAc5B,OAAO,EAAE,0BAA0B,IAAI,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE9F,KAAK,kBAAkB,GAAG;IAExB,aAAa,EAAE,YAAY,CAAC;IAC5B,gBAAgB,EAAE,eAAe,CAAC;IAClC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,gBAAgB,CAAC;IAGpC,aAAa,EAAE,YAAY,CAAC;IAC5B,YAAY,EAAE,WAAW,CAAC;IAC1B,gBAAgB,EAAE,eAAe,CAAC;IAClC,cAAc,EAAE,oBAAoB,CAAC;IAIrC,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,aAAa,EAAE,oBAAoB,CAAC;IACpC,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,UAAU,CAAC;IACxB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,8BAA8B,EAAE,4BAA4B,CAAC;IAC7D,WAAW,EAAE,UAAU,CAAC;IACxB,uBAAuB,EAAE,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,eAAe,CAAC;IAClC,qBAAqB,EAAE,4BAA4B,CAAC;IACpD,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,mBAAmB,EAAE,wBAAwB,CAAC;IAG9C,KAAK,EAAE,kBAAkB,CAAC;IAC1B,eAAe,EAAE,cAAc,CAAC;IAChC,wBAAwB,EAAE,6BAA6B,CAAC;IACxD,yBAAyB,EAAE,uBAAuB,CAAC;IACnD,yBAAyB,EAAE,uBAAuB,EAAE,CAAC;IACrD,6BAA6B,EAAE,iCAAiC,CAAC;IACjE,wBAAwB,EAAE,OAAO,CAAC;IAClC,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,mBAAmB,EAAE,iBAAiB,CAAC;IACvC,aAAa,EAAE,SAAS,EAAE,CAAC;IAC3B,aAAa,EAAE,YAAY,CAAC;IAG5B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,mBAAmB,CAAC;IACpC,mBAAmB,EAAE,wBAAwB,CAAC;IAG9C,WAAW,EAAE,UAAU,CAAC;IACxB,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,gBAAgB,EAAE,eAAe,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG;IACzD,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,0BAA0B,CAAC;IACrD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACrD;;;;;;;;;;;OAWG;IACH,yBAAyB,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC7D,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAAC;AACzD,KAAK,aAAa,GACd,QAAQ,GACR,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,CAAC;AAEjB,UAAU,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACnE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC;AAQD,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAwDjC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DuC,CAAC;AAUzE,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAGvE,CAAC;AAEJ,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,cAAc,EACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAQT;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,cAAc,CAAC,CAkFzB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AA8CD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB,EAAE,OAAO,GAAE;IACV,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAClD,CAAC,CAwKD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBtF"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../src/audit/io/artifacts.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAoB,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAEL,qBAAqB,EAUtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,YAAY,EACZ,YAAY,EACb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3M,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAK9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EACV,uBAAuB,EACvB,iCAAiC,EAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,yCAAyC,CAAC;AAKjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAaL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAc5B,OAAO,EAAE,0BAA0B,IAAI,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAE9F,KAAK,kBAAkB,GAAG;IAExB,aAAa,EAAE,YAAY,CAAC;IAC5B,gBAAgB,EAAE,eAAe,CAAC;IAClC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,gBAAgB,CAAC;IAGpC,aAAa,EAAE,YAAY,CAAC;IAC5B,YAAY,EAAE,WAAW,CAAC;IAC1B,gBAAgB,EAAE,eAAe,CAAC;IAClC,cAAc,EAAE,oBAAoB,CAAC;IAIrC,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,aAAa,EAAE,oBAAoB,CAAC;IACpC,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,UAAU,CAAC;IACxB,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,8BAA8B,EAAE,4BAA4B,CAAC;IAC7D,WAAW,EAAE,UAAU,CAAC;IACxB,uBAAuB,EAAE,sBAAsB,CAAC;IAChD,gBAAgB,EAAE,eAAe,CAAC;IAClC,qBAAqB,EAAE,4BAA4B,CAAC;IACpD,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,mBAAmB,EAAE,wBAAwB,CAAC;IAG9C,KAAK,EAAE,kBAAkB,CAAC;IAC1B,eAAe,EAAE,cAAc,CAAC;IAChC,wBAAwB,EAAE,6BAA6B,CAAC;IACxD,yBAAyB,EAAE,uBAAuB,CAAC;IACnD,yBAAyB,EAAE,uBAAuB,EAAE,CAAC;IACrD,6BAA6B,EAAE,iCAAiC,CAAC;IACjE,wBAAwB,EAAE,OAAO,CAAC;IAClC,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,mBAAmB,EAAE,iBAAiB,CAAC;IACvC,aAAa,EAAE,SAAS,EAAE,CAAC;IAC3B,aAAa,EAAE,YAAY,CAAC;IAG5B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,mBAAmB,CAAC;IACpC,mBAAmB,EAAE,wBAAwB,CAAC;IAG9C,WAAW,EAAE,UAAU,CAAC;IACxB,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,gBAAgB,EAAE,eAAe,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,GAAG;IACzD,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,0BAA0B,CAAC;IACrD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACrD;;;;;;;;;;;OAWG;IACH,yBAAyB,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC7D,CAAC;AACF,MAAM,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAAC;AACzD,KAAK,aAAa,GACd,QAAQ,GACR,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,CAAC;AAEjB,UAAU,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACnE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC;AAQD,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAwDjC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DuC,CAAC;AAUzE,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAGvE,CAAC;AAEJ,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,cAAc,EACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAQT;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,cAAc,CAAC,CAkFzB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AA8CD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,YAAY,EAAE,MAAM,CAAC;CACtB,EAAE,OAAO,GAAE;IACV,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,oBAAoB,EAAE,CAAA;CAAE,CAAC,CAyG3E;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB,EAAE,OAAO,GAAE;IACV,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAClD,CAAC,CA8DD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBtF"}

package/dist/audit/io/artifacts.js

@@ -1,5 +1,5 @@
 import { AuditTaskSchema, AuditResultSchema, CoverageMatrixSchema } from "../types.js";
-import { cp, readFile, rm, unlink } from "node:fs/promises";
+import { cp, readFile, unlink } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { AuditFindingsReportSchema, AUDIT_REPORT_FILENAME, AUDIT_FINDINGS_FILENAME, archiveFrictionRecords, listFrictionRecordFilenames, auditReportPath, auditFindingsPath, promotedAuditReportPath, promotedAuditFindingsPath, readSubmissionLedger, submissionLedgerPath, } from "audit-tools/shared";
 import { loadDesignReviewSnapshots, } from "../orchestrator/designReviewSnapshot.js";
@@ -259,48 +259,20 @@ async function archiveVerified(copyFn, from, to) {
     await copyFn(from, to, { force: true });
     return verifyArchivedBytes(to, sourceBytes);
 }
-export async function promoteFinalAuditReport(params, options = {}) {
+/**
+ * Archive the run's append-only diagnostics one level up — agent feedback,
+ * friction records and the submission ledger — and name every member that did
+ * not archive. Promotion runs it; so does the next run's rollover
+ * (`rollOverFinishedRun`), because a host may append to these after promotion
+ * and the rollover deletes them.
+ */
+export async function archiveRunDiagnostics(params, options = {}) {
     const lost = [];
-    const source = auditReportPath(params.artifactsDir);
     const destination = promotedAuditReportPath(params.artifactsDir);
     const copy = options.copy ?? cp;
-    const remove = options.remove ?? rm;
     const warn = options.warn ?? ((message) => process.stderr.write(`${message}\n`));
-    try {
-        await copy(source, destination, { force: true });
-    }
-    catch (error) {
-        const warning = `audit-code: completed audit but could not promote final report to ${destination}: ` +
-            (error instanceof Error ? error.message : String(error));
-        warn(warning);
-        return { promoted: false, cleaned: false, warning };
-    }
-    // Promote the canonical machine contract alongside the human report. Missing
-    // (e.g. legacy bundle) or unreadable: best-effort, never blocks completion.
-    try {
-        const mismatch = await archiveVerified(copy, auditFindingsPath(params.artifactsDir), promotedAuditFindingsPath(params.artifactsDir));
-        if (mismatch)
-            lost.push(AUDIT_FINDINGS_FILENAME + " (" + mismatch + ")");
-    }
-    catch (error) {
-        // The warning is unchanged — an absent findings file (the legacy-bundle
-        // case) still announces a partial promotion. What changed is the DELETE
-        // GATE: an absent file has nothing to lose, but any OTHER failure means the
-        // machine contract is about to be destroyed by the rm below with no copy
-        // anywhere, and warning-and-proceeding turned that into silent data loss
-        // reported as { promoted: true, cleaned: true }.
-        warn(`audit-code: could not promote ${AUDIT_FINDINGS_FILENAME} to ${promotedAuditFindingsPath(params.artifactsDir)}: ` +
-            (error instanceof Error ? error.message : String(error)));
-        // An ABSENT findings file (the legacy-bundle case) has nothing to lose. Any
-        // other failure means the machine contract is about to be destroyed by the
-        // rm below with no copy anywhere — DAT-4802dc9e-2 / -3 — so it is recorded
-        // as loss and gates the delete.
-        if (!isFileMissingError(error)) {
-            lost.push(`${AUDIT_FINDINGS_FILENAME} (${error instanceof Error ? error.message : String(error)})`);
-        }
-    }
     // agent-feedback.jsonl is worker-owned, append-only, and lives inside
-    // artifactsDir — so the rm below destroys it. It had no archive step at all
+    // artifactsDir — so the rollover destroys it. It had no archive step at all
     // while the friction records and the ledger beside it both had one
     // (DAT-4802dc9e).
     try {
@@ -317,8 +289,8 @@ export async function promoteFinalAuditReport(params, options = {}) {
     // Records may be untriaged: development reflection is not a product gate.
     // The RETURN is consumed, not discarded. `archiveFrictionRecords` warns per
     // failed file and simply omits it from the archived list, so dropping the
-    // return meant a friction record that failed to copy was destroyed by the rm
-    // below with nothing gating it - the same class as the findings and ledger
+    // return meant a friction record that failed to copy was destroyed by the
+    // delete with nothing gating it - the same class as the findings and ledger
     // archives beside it. Comparing the archived count against what is on disk
     // surfaces a per-file failure without reaching into that module's internals.
     // The listing is the SAME helper `archiveFrictionRecords` walks, so the two
@@ -327,10 +299,10 @@ export async function promoteFinalAuditReport(params, options = {}) {
     // AN UNLISTABLE DIR IS A SHORTFALL, not an empty one. The listing used to
     // return `[]` for every readdir failure alike, and the archive that walks the
     // same helper degraded the same way — so both sides read zero, the comparison
-    // below was satisfied, and the rm destroyed a directory full of records with
-    // nothing gating it. It now throws on anything but ENOENT: an absent dir
+    // below was satisfied, and the delete destroyed a directory full of records
+    // with nothing gating it. It now throws on anything but ENOENT: an absent dir
     // really has nothing to lose, any other errno means records may exist and
-    // were NOT archived, so the delete is refused — the same answer an
+    // were NOT archived, so the rollover is refused — the same answer an
     // unarchivable FILE already gets (the CP-NODE-3 residual: "an unlistable
     // directory refuses the delete, same as an unarchivable file").
     let frictionNames = [];
@@ -356,7 +328,7 @@ export async function promoteFinalAuditReport(params, options = {}) {
     }
     // The submission ledger rides the same seam. It is the only durable statement
     // that a run drifted and was repaired — a rejection, a re-emit, a hand
-    // recovery — so letting the tree rm take it would mean the distinction
+    // recovery — so letting the rollover take it would mean the distinction
     // between a clean run and a repaired one survives only in a transcript.
     // Best-effort: a run that never drifted has no ledger to archive.
     const ledgerSource = submissionLedgerPath(params.artifactsDir);
@@ -376,50 +348,95 @@ export async function promoteFinalAuditReport(params, options = {}) {
     catch (error) {
         // A missing ledger is the ordinary case (nothing was ever submitted through
         // a gate) and says nothing. Any OTHER failure means the one durable record
-        // that this run drifted is about to be destroyed by the rm below — so it is
+        // that this run drifted is about to be destroyed by the rollover — so it is
         // announced, exactly as the friction-archive seam announces its own copy
         // failures. Still best-effort: bookkeeping must not fail a completed audit.
         if (!isFileMissingError(error)) {
-            // GATES THE DELETE, like every other member of the archive set. Warning
+            // GATES THE ROLLOVER, like every other member of the archive set. Warning
             // and falling through meant the one durable statement that this run
-            // drifted and was repaired got destroyed by the rm below - the exact loss
+            // drifted and was repaired got destroyed by the rollover - the exact loss
             // the ledger exists to prevent, with only a console line left behind.
             lost.push("the submission ledger (" +
                 (error instanceof Error ? error.message : String(error)) + ")");
         }
     }
-    const dropped = ledgerDropped.length > 0 ? { ledger_dropped: ledgerDropped } : {};
-    // THE DELETE IS CONDITIONED ON VERIFIED COPIES (INV 1). Anything that failed
-    // to archive still exists only inside artifactsDir, so removing it destroys
-    // the sole copy. Keeping the directory is always recoverable; the delete is
-    // not — REL-4802dc9e.
-    if (lost.length > 0) {
-        const warning = `audit-code: promoted final report to ${destination}, but could NOT archive ` +
-            `${lost.join("; ")} — leaving ${params.artifactsDir} in place rather than ` +
-            "destroying the only copy. Recover those files, then remove the directory by hand.";
+    return { lost, ledger_dropped: [...ledgerDropped] };
+}
+/**
+ * Promote the run's deliverables one level up and ARCHIVE every member that
+ * the next run's rollover (`rollOverFinishedRun`) will delete: the findings
+ * contract, agent feedback, friction records and the submission ledger. The
+ * working dir itself is KEPT (owner decision 2026-10-08, "keep the artifacts
+ * dir"): the next run reuses its derived artifacts through the staleness DAG.
+ * `archived` is the rollover's gate (through `isWorkingDirFullyPromoted`): a
+ * member that did not archive keeps the dir from being rolled over, so its only
+ * copy is never deleted.
+ */
+export async function promoteFinalAuditReport(params, options = {}) {
+    const lost = [];
+    const source = auditReportPath(params.artifactsDir);
+    const destination = promotedAuditReportPath(params.artifactsDir);
+    const copy = options.copy ?? cp;
+    const warn = options.warn ?? ((message) => process.stderr.write(`${message}\n`));
+    try {
+        await copy(source, destination, { force: true });
+    }
+    catch (error) {
+        const warning = `audit-code: completed audit but could not promote final report to ${destination}: ` +
+            (error instanceof Error ? error.message : String(error));
         warn(warning);
-        return { promoted: true, cleaned: false, warning, unarchived: lost, ...dropped };
+        return { promoted: false, archived: false, warning };
     }
+    // Promote the canonical machine contract alongside the human report. Missing
+    // (e.g. legacy bundle) or unreadable: best-effort, never blocks completion.
     try {
-        await remove(params.artifactsDir, { recursive: true, force: true });
-        return { promoted: true, cleaned: true, ...dropped };
+        const mismatch = await archiveVerified(copy, auditFindingsPath(params.artifactsDir), promotedAuditFindingsPath(params.artifactsDir));
+        if (mismatch)
+            lost.push(AUDIT_FINDINGS_FILENAME + " (" + mismatch + ")");
     }
     catch (error) {
-        const warning = `audit-code: promoted final report to ${destination}, but could not remove ${params.artifactsDir}: ` +
-            (error instanceof Error ? error.message : String(error));
+        // The warning is unchanged — an absent findings file (the legacy-bundle
+        // case) still announces a partial promotion. What changed is the DELETE
+        // GATE: an absent file has nothing to lose, but any OTHER failure means the
+        // machine contract is about to be destroyed by the rollover with no copy
+        // anywhere, and warning-and-proceeding turned that into silent data loss
+        // reported as { promoted: true, cleaned: true }.
+        warn(`audit-code: could not promote ${AUDIT_FINDINGS_FILENAME} to ${promotedAuditFindingsPath(params.artifactsDir)}: ` +
+            (error instanceof Error ? error.message : String(error)));
+        // An ABSENT findings file (the legacy-bundle case) has nothing to lose. Any
+        // other failure means the machine contract is about to be destroyed by the
+        // rollover with no copy anywhere — DAT-4802dc9e-2 / -3 — so it is recorded
+        // as loss and gates the delete.
+        if (!isFileMissingError(error)) {
+            lost.push(`${AUDIT_FINDINGS_FILENAME} (${error instanceof Error ? error.message : String(error)})`);
+        }
+    }
+    const diagnostics = await archiveRunDiagnostics({ artifactsDir: params.artifactsDir }, { copy, warn });
+    lost.push(...diagnostics.lost);
+    const ledgerDropped = diagnostics.ledger_dropped;
+    const dropped = ledgerDropped.length > 0 ? { ledger_dropped: ledgerDropped } : {};
+    // THE ROLLOVER IS CONDITIONED ON VERIFIED COPIES (INV 1). Anything that failed
+    // to archive still exists only inside artifactsDir, so rolling it over
+    // destroys the sole copy. Keeping the run is always recoverable; the delete
+    // is not — REL-4802dc9e.
+    if (lost.length > 0) {
+        const warning = `audit-code: promoted final report to ${destination}, but could NOT archive ` +
+            `${lost.join("; ")} — the next audit will not roll ${params.artifactsDir} over ` +
+            "while it holds the only copy. Recover those files, then run `audit-code cleanup --force`.";
         warn(warning);
-        return { promoted: true, cleaned: false, warning, ...dropped };
+        return { promoted: true, archived: false, warning, unarchived: lost, ...dropped };
     }
+    return { promoted: true, archived: true, ...dropped };
 }
 /**
  * Has the completion transition NOTHING left to do for this working dir — is
  * every artifact `promoteFinalAuditReport` archives already one level up,
- * byte-identical? This is the stale-dir cleanup rule's question
+ * byte-identical? This is the stale-dir rule's question
  * (`cleanupStaleArtifactsDir`), and it is answered by promotion's OWN archive
  * walk rather than by a second enumeration of the archive set: the walk runs
  * with its copy replaced by a byte comparison against what is already at each
- * destination and its delete replaced by a no-op, so "fully promoted" means
- * exactly "the delete gate (INV 1) would pass without copying anything". A
+ * destination, so "fully promoted" means exactly "the archive gate (INV 1)
+ * would pass without copying anything". A
  * member promotion archives is a member this walk checks; the two cannot drift.
  *
  * Identity, not existence: a destination that is missing, or that differs from
@@ -448,7 +465,7 @@ export async function isWorkingDirFullyPromoted(artifactsDir) {
             throw new Error(`not promoted: ${String(to)} differs from ${String(from)}`);
         }
     };
-    const result = await promoteFinalAuditReport({ artifactsDir }, { copy: verifyOnly, remove: async () => { }, warn: () => { } });
-    return result.promoted && result.cleaned;
+    const result = await promoteFinalAuditReport({ artifactsDir }, { copy: verifyOnly, warn: () => { } });
+    return result.promoted && result.archived;
 }
 //# sourceMappingURL=artifacts.js.map