zone-ai-agent 0.4.0

package/.gittignore

@@ -0,0 +1,4 @@
+node_modules
+dist
+.env
+.agent-cache

package/README.md

@@ -0,0 +1,36 @@
+# Zone ⚡
+> AI Code Agent — deterministic, explainable, safe
+
+## Install
+```bash
+npm install -g zone
+```
+
+## Usage
+```bash
+# Test Engineer — write tests for any framework
+zone --task "write a cucumber scenario for flight search" --role test_engineer --repo /path/to/repo --apply --confirm-apply
+
+# Data Analyst — generate SQL migrations
+zone --task "create a users table with email and created_at" --role data_analyst --repo /path/to/repo --apply --confirm-apply
+
+# Developer — modify existing code
+zone --task "add input validation to login form" --repo /path/to/repo
+```
+
+## Supported Frameworks
+- Test Engineer: Playwright (TS/JS), Cypress, Cucumber+Java, Selenium, TestNG, pytest
+- Data Analyst: PostgreSQL, MySQL, SQLite — Flyway, raw SQL, Alembic
+
+## Web UI
+```bash
+npx tsx src/api/server.ts
+# Open http://localhost:3000
+```
+
+## Start Web UI
+```bash
+zone serve
+zone serve --port 8080
+zone serve --open
+```

package/dist/api/server.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.app = void 0;
+exports.startServer = startServer;
+require("dotenv/config");
+const express_1 = __importDefault(require("express"));
+const cors_1 = __importDefault(require("cors"));
+const body_parser_1 = __importDefault(require("body-parser"));
+const runAgent_js_1 = require("../core/runAgent.js");
+const runLlmPatchFlow_js_1 = require("../core/runLlmPatchFlow.js");
+const applyLlmPatches_js_1 = require("../core/applyLlmPatches.js");
+const runTestEngineerFlow_js_1 = require("../roles/runTestEngineerFlow.js");
+const runDataAnalystFlow_js_1 = require("../roles/runDataAnalystFlow.js");
+const colors_js_1 = require("../cli/colors.js");
+exports.app = (0, express_1.default)();
+const PORT = process.env.PORT || 3000;
+const progressStreams = new Map();
+exports.app.use((0, cors_1.default)());
+exports.app.use(body_parser_1.default.json());
+exports.app.use(body_parser_1.default.urlencoded({ extended: true }));
+function emitProgress(runId, stage) {
+    if (!runId)
+        return;
+    const listeners = progressStreams.get(runId);
+    if (!listeners)
+        return;
+    const payload = `data: ${JSON.stringify({ stage })}\n\n`;
+    for (const res of listeners) {
+        res.write(payload);
+    }
+}
+exports.app.get("/api/progress", (req, res) => {
+    const runId = typeof req.query.runId === "string" ? req.query.runId : "";
+    if (!runId) {
+        res.status(400).end();
+        return;
+    }
+    res.setHeader("Content-Type", "text/event-stream");
+    res.setHeader("Cache-Control", "no-cache, no-transform");
+    res.setHeader("Connection", "keep-alive");
+    res.flushHeaders?.();
+    res.write(`data: ${JSON.stringify({ stage: "Connected" })}\n\n`);
+    const listeners = progressStreams.get(runId) ?? new Set();
+    listeners.add(res);
+    progressStreams.set(runId, listeners);
+    req.on("close", () => {
+        const current = progressStreams.get(runId);
+        if (!current)
+            return;
+        current.delete(res);
+        if (current.size === 0) {
+            progressStreams.delete(runId);
+        }
+    });
+});
+exports.app.post("/api/analyze", async (req, res) => {
+    const { task, repoPath } = req.body;
+    const result = await (0, runAgent_js_1.runAgent)({ task, role: "developer" });
+    res.json({
+        decision: result.decision,
+        risk: result.risk,
+        confidence: result.confidence,
+    });
+});
+exports.app.post("/api/patch", async (req, res) => {
+    const { task, repoPath } = req.body;
+    const result = await (0, runLlmPatchFlow_js_1.runLlmPatchFlow)({ task, repoPath });
+    res.json(result);
+});
+exports.app.post("/api/apply", async (req, res) => {
+    const { patches, repoPath } = req.body;
+    const result = await (0, applyLlmPatches_js_1.applyLlmPatches)(patches, repoPath);
+    res.json(result);
+});
+exports.app.post("/api/test-engineer", async (req, res) => {
+    const { task, repoPath, runId } = req.body;
+    if (!task || !repoPath) {
+        res.status(400).json({ ok: false, reason: "task and repoPath are required" });
+        return;
+    }
+    try {
+        const result = await (0, runTestEngineerFlow_js_1.runTestEngineerFlow)({
+            task,
+            repoPath,
+            onProgress: (stage) => emitProgress(runId, stage),
+        });
+        res.json(result);
+    }
+    catch (err) {
+        emitProgress(runId, "Ready");
+        res.status(500).json({
+            ok: false,
+            reason: err instanceof Error ? err.message : "Unknown error",
+        });
+    }
+});
+exports.app.post("/api/data-analyst", async (req, res) => {
+    const { task, repoPath, runId } = req.body;
+    if (!task || !repoPath) {
+        res.status(400).json({ ok: false, reason: "task and repoPath are required" });
+        return;
+    }
+    try {
+        const result = await (0, runDataAnalystFlow_js_1.runDataAnalystFlow)({
+            task,
+            repoPath,
+            onProgress: (stage) => emitProgress(runId, stage),
+        });
+        res.json(result);
+    }
+    catch (err) {
+        emitProgress(runId, "Ready");
+        res.status(500).json({
+            ok: false,
+            reason: err instanceof Error ? err.message : "Unknown error",
+        });
+    }
+});
+exports.app.use(express_1.default.static("src/ui"));
+async function startServer(port = 3000) {
+    await new Promise((resolve) => {
+        exports.app.listen(port, () => {
+            console.log((0, colors_js_1.colorize)(`Zone UI running on http://localhost:${port}`, colors_js_1.c.green, colors_js_1.c.bold));
+            console.log((0, colors_js_1.colorize)("Press Ctrl+C to stop", colors_js_1.c.dim, colors_js_1.c.gray));
+            resolve();
+        });
+    });
+}
+if (process.env.VITEST !== "true" &&
+    process.env.ZONE_SERVER_MANUAL_START !== "1") {
+    void startServer(Number(PORT));
+}
+//# sourceMappingURL=server.js.map

package/dist/api/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":";;;;;;AA8HA,kCAUC;AAxID,yBAAuB;AACvB,sDAA8B;AAC9B,gDAAwB;AACxB,8DAAqC;AACrC,qDAA+C;AAC/C,mEAA6D;AAC7D,mEAA6D;AAC7D,4EAAsE;AACtE,0EAAoE;AAEpE,gDAA+C;AAElC,QAAA,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;AAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEzD,WAAG,CAAC,GAAG,CAAC,IAAA,cAAI,GAAE,CAAC,CAAC;AAChB,WAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3B,WAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEnD,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,MAAM,OAAO,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,WAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACpC,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;IACzD,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;IAEjE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAY,CAAC;IACpE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC;QACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAe,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAe,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAmB,EAAC;YACvC,IAAI;YACJ,QAAQ;YACR,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC/C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAkB,EAAC;YACtC,IAAI;YACJ,QAAQ;YACR,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,WAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE3B,KAAK,UAAU,WAAW,CAAC,IAAI,GAAG,IAAI;IAC3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,WAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACpB,OAAO,CAAC,GAAG,CACT,IAAA,oBAAQ,EAAC,uCAAuC,IAAI,EAAE,EAAE,aAAC,CAAC,KAAK,EAAE,aAAC,CAAC,IAAI,CAAC,CACzE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAA,oBAAQ,EAAC,sBAAsB,EAAE,aAAC,CAAC,GAAG,EAAE,aAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IACE,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAC5C,CAAC;IACD,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/apply/applyPatchPlan.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyPatchPlan = applyPatchPlan;
+const node_fs_1 = require("node:fs");
+async function applyPatchPlan(plan) {
+    const filesChanged = [];
+    for (const patch of plan.patches) {
+        await node_fs_1.promises.writeFile(patch.filePath, patch.nextContent, "utf8");
+        filesChanged.push(patch.filePath);
+    }
+    return {
+        applied: true,
+        filesChanged,
+        summary: `Applied ${filesChanged.length} file change(s).`
+    };
+}
+//# sourceMappingURL=applyPatchPlan.js.map

package/dist/apply/applyPatchPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyPatchPlan.js","sourceRoot":"","sources":["../../src/apply/applyPatchPlan.ts"],"names":[],"mappings":";;AAIA,wCAaC;AAjBD,qCAAyC;AAIlC,KAAK,UAAU,cAAc,CAAC,IAAe;IAClD,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,kBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY;QACZ,OAAO,EAAE,WAAW,YAAY,CAAC,MAAM,kBAAkB;KAC1D,CAAC;AACJ,CAAC"}

package/dist/apply/canApplyDecision.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canApplyDecision = canApplyDecision;
+function canApplyDecision(result) {
+    const mode = result.decision.mode;
+    if (mode === "blocked") {
+        return {
+            allowed: false,
+            reason: "blocked_mode",
+            message: "Blocked decisions cannot be applied."
+        };
+    }
+    if (mode === "preview_only") {
+        return {
+            allowed: true,
+            strategy: "confirmed_apply",
+            message: "Preview-only decisions may be applied only with explicit confirmation."
+        };
+    }
+    return {
+        allowed: true,
+        strategy: "confirmed_apply",
+        message: "Safe-to-apply decisions may be applied with explicit confirmation."
+    };
+}
+//# sourceMappingURL=canApplyDecision.js.map

package/dist/apply/canApplyDecision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canApplyDecision.js","sourceRoot":"","sources":["../../src/apply/canApplyDecision.ts"],"names":[],"mappings":";;AAGA,4CA0BC;AA1BD,SAAgB,gBAAgB,CAAC,MAAsB;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;IAElC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,sCAAsC;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EACL,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,iBAAiB;QAC3B,OAAO,EACL,oEAAoE;KACvE,CAAC;AACJ,CAAC"}

package/dist/apply/patchPlan.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=patchPlan.js.map

package/dist/apply/patchPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patchPlan.js","sourceRoot":"","sources":["../../src/apply/patchPlan.ts"],"names":[],"mappings":""}

package/dist/apply/renderApplyResult.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderApplyResult = renderApplyResult;
+function renderApplyResult(result) {
+    const lines = [
+        "=== APPLY RESULT ===",
+        `Applied: ${result.applied ? "yes" : "no"}`,
+        `Summary: ${result.summary}`
+    ];
+    if (result.filesChanged.length > 0) {
+        lines.push("Changed files:");
+        for (const filePath of result.filesChanged) {
+            lines.push(`- ${filePath}`);
+        }
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=renderApplyResult.js.map

package/dist/apply/renderApplyResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderApplyResult.js","sourceRoot":"","sources":["../../src/apply/renderApplyResult.ts"],"names":[],"mappings":";;AAEA,8CAgBC;AAhBD,SAAgB,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAa;QACtB,sBAAsB;QACtB,YAAY,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC3C,YAAY,MAAM,CAAC,OAAO,EAAE;KAC7B,CAAC;IAEF,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/apply/runApplyFlow.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runApplyFlow = runApplyFlow;
+const canApplyDecision_js_1 = require("./canApplyDecision.js");
+const applyPatchPlan_js_1 = require("./applyPatchPlan.js");
+function validateBasicPatchPlan(plan) {
+    if (!Array.isArray(plan.patches) || plan.patches.length === 0) {
+        throw new Error("Patch plan must include at least one patch.");
+    }
+    const seen = new Set();
+    for (const patch of plan.patches) {
+        if (!patch.filePath || patch.filePath.trim().length === 0) {
+            throw new Error("Patch filePath is required.");
+        }
+        if (seen.has(patch.filePath)) {
+            throw new Error(`Duplicate patch filePath detected: ${patch.filePath}`);
+        }
+        seen.add(patch.filePath);
+    }
+}
+async function runApplyFlow({ result, plan, request }) {
+    const eligibility = (0, canApplyDecision_js_1.canApplyDecision)(result);
+    if (!eligibility.allowed) {
+        return {
+            applied: false,
+            filesChanged: [],
+            summary: eligibility.message
+        };
+    }
+    if (!request.confirm) {
+        return {
+            applied: false,
+            filesChanged: [],
+            summary: "Apply confirmation is required."
+        };
+    }
+    validateBasicPatchPlan(plan);
+    return (0, applyPatchPlan_js_1.applyPatchPlan)(plan);
+}
+//# sourceMappingURL=runApplyFlow.js.map

package/dist/apply/runApplyFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runApplyFlow.js","sourceRoot":"","sources":["../../src/apply/runApplyFlow.ts"],"names":[],"mappings":";;AAgCA,oCA0BC;AAzDD,+DAAyD;AACzD,2DAAqD;AAUrD,SAAS,sBAAsB,CAAC,IAAe;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,IAAI,EACJ,OAAO,EACW;IAClB,MAAM,WAAW,GAAG,IAAA,sCAAgB,EAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,EAAE;YAChB,OAAO,EAAE,WAAW,CAAC,OAAO;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,EAAE;YAChB,OAAO,EAAE,iCAAiC;SAC3C,CAAC;IACJ,CAAC;IAED,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE7B,OAAO,IAAA,kCAAc,EAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/apply/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/apply/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/apply/types.ts"],"names":[],"mappings":""}

package/dist/audit/auditDiffIntelligence.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auditDiffIntelligence.js.map

package/dist/audit/auditDiffIntelligence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditDiffIntelligence.js","sourceRoot":"","sources":["../../src/audit/auditDiffIntelligence.ts"],"names":[],"mappings":""}

package/dist/audit/auditSnapshot.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAuditSnapshot = buildAuditSnapshot;
+const node_crypto_1 = require("node:crypto");
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/**
+ * Asserts that the provided reason codes are semantically consistent with the
+ * execution mode. Mirrors the intent of assertReasonCodeParity in the decision
+ * explanation module: throws an Error on parity violation, returns void on success.
+ *
+ * Parity rule: when reasonCodes is non-empty, at least one code must carry the
+ * prefix that corresponds to the mode:
+ *   blocked       → "BLOCKED_"
+ *   preview_only  → "PREVIEW_"
+ *   safe_to_apply → "SAFE_"
+ */
+function assertReasonCodeParity(mode, reasonCodes) {
+    if (reasonCodes.length === 0) {
+        return;
+    }
+    const modePrefixMap = {
+        blocked: "BLOCKED_",
+        preview_only: "PREVIEW_",
+        safe_to_apply: "SAFE_",
+    };
+    const expectedPrefix = modePrefixMap[mode];
+    const hasMatchingCode = reasonCodes.some((code) => code.startsWith(expectedPrefix));
+    if (!hasMatchingCode) {
+        throw new Error(`Reason code parity violation: mode "${mode}" expects at least one code ` +
+            `prefixed with "${expectedPrefix}". Received: [${reasonCodes.join(", ")}]`);
+    }
+}
+/**
+ * Derives a deterministic, non-empty snapshotId from the serialized input and
+ * the ISO timestamp. Uses base64 encoding and strips non-alphanumeric characters
+ * to produce a compact, URL-safe identifier.
+ */
+function computeSnapshotId(input, timestamp) {
+    const raw = JSON.stringify({
+        timestamp,
+        input,
+    });
+    return (0, node_crypto_1.createHash)("sha256").update(raw).digest("hex");
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Builds a frozen, serializable AuditSnapshot that captures the full decision
+ * moment in a single immutable object.
+ *
+ * The function is pure: identical inputs (including timestamp) always produce
+ * structurally identical snapshots. Only the timestamp varies between calls
+ * when not overridden.
+ *
+ * @param input   - The original engine input (riskScore, confidenceScore, mode).
+ * @param result  - The full DecisionEngineResult including contradictionFlags.
+ * @param options - Optional reason codes, trace mapping, and timestamp override.
+ * @returns A frozen AuditSnapshot.
+ */
+function buildAuditSnapshot(input, result, options = {}) {
+    const timestamp = options.timestamp ?? new Date().toISOString();
+    const reasonCodes = options.reasonCodes ?? [];
+    const traceReasonMapping = options.traceReasonMapping ?? [];
+    let parityValid;
+    try {
+        assertReasonCodeParity(result.mode, reasonCodes);
+        parityValid = true;
+    }
+    catch {
+        parityValid = false;
+    }
+    const snapshot = {
+        snapshotId: computeSnapshotId(input, timestamp),
+        timestamp,
+        input,
+        result,
+        contradictionFlags: result.contradictionFlags,
+        reasonCodes,
+        traceReasonMapping,
+        parityValid,
+    };
+    return Object.freeze(snapshot);
+}
+//# sourceMappingURL=auditSnapshot.js.map

package/dist/audit/auditSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditSnapshot.js","sourceRoot":"","sources":["../../src/audit/auditSnapshot.ts"],"names":[],"mappings":";;AAgIA,gDA6BC;AArJD,6CAAyC;AA4CzC,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAS,sBAAsB,CAC7B,IAAmB,EACnB,WAAqB;IAErB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAkC;QACnD,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,UAAU;QACxB,aAAa,EAAE,OAAO;KACvB,CAAC;IAEF,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAChC,CAAC;IAEF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,8BAA8B;YACvE,kBAAkB,cAAc,iBAAiB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,KAA0B,EAC1B,SAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,SAAS;QACT,KAAK;KACN,CAAC,CAAC;IAEH,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,SAAgB,kBAAkB,CAChC,KAA0B,EAC1B,MAA4B,EAC5B,UAAqC,EAAE;IAEvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE5D,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC;QAC/C,SAAS;QACT,KAAK;QACL,MAAM;QACN,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,WAAW;QACX,kBAAkB;QAClB,WAAW;KACZ,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/audit/renderAuditDiff.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderAuditDiff = renderAuditDiff;
+function renderAuditDiff(diff) {
+    const lines = ["=== AUDIT DIFF ===", ""];
+    if (diff.modeChanged) {
+        lines.push(`Mode: ${diff.previous.mode} -> ${diff.current.mode}`);
+    }
+    else {
+        lines.push(`Mode: unchanged (${diff.current.mode})`);
+    }
+    if (diff.confidenceChanged) {
+        lines.push(`Confidence: ${diff.previous.confidenceScore} -> ${diff.current.confidenceScore}`);
+    }
+    else {
+        lines.push(`Confidence: unchanged (${diff.current.confidenceScore})`);
+    }
+    if (diff.riskChanged) {
+        lines.push(`Risk: ${diff.previous.riskScore} -> ${diff.current.riskScore}`);
+    }
+    else {
+        lines.push(`Risk: unchanged (${diff.current.riskScore})`);
+    }
+    if (diff.parityChanged) {
+        lines.push(`Parity: ${diff.previous.parityValid} -> ${diff.current.parityValid}`);
+    }
+    else {
+        lines.push(`Parity: unchanged (${diff.current.parityValid})`);
+    }
+    lines.push("");
+    if (diff.reasonCodesAdded.length === 0 &&
+        diff.reasonCodesRemoved.length === 0) {
+        lines.push("Reason Codes: no changes");
+    }
+    else {
+        lines.push("Reason Codes:");
+        for (const code of diff.reasonCodesAdded) {
+            lines.push(`+ ${code}`);
+        }
+        for (const code of diff.reasonCodesRemoved) {
+            lines.push(`- ${code}`);
+        }
+    }
+    lines.push("");
+    if (diff.contradictionFlagsAdded.length === 0 &&
+        diff.contradictionFlagsRemoved.length === 0) {
+        lines.push("Contradiction Flags: no changes");
+    }
+    else {
+        lines.push("Contradiction Flags:");
+        for (const flag of diff.contradictionFlagsAdded) {
+            lines.push(`+ ${flag}`);
+        }
+        for (const flag of diff.contradictionFlagsRemoved) {
+            lines.push(`- ${flag}`);
+        }
+    }
+    lines.push("");
+    lines.push(diff.traceReasonMappingChanged
+        ? "Trace Reason Mapping: changed"
+        : "Trace Reason Mapping: unchanged");
+    return lines.join("\n");
+}
+//# sourceMappingURL=renderAuditDiff.js.map

package/dist/audit/renderAuditDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderAuditDiff.js","sourceRoot":"","sources":["../../src/audit/renderAuditDiff.ts"],"names":[],"mappings":";;AAEA,0CAyEC;AAzED,SAAgB,eAAe,CAAC,IAAuB;IACrD,MAAM,KAAK,GAAa,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAEnD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,eAAe,IAAI,CAAC,QAAQ,CAAC,eAAe,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAClF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CACtE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IACE,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EACpC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IACE,IAAI,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,MAAM,KAAK,CAAC,EAC3C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,yBAAyB;QAC5B,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,iCAAiC,CACtC,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/audit/snapshotDiff.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.diffAuditSnapshots = diffAuditSnapshots;
+function sortStrings(values) {
+    return [...values].sort();
+}
+function getAddedItems(previous, current) {
+    const previousSet = new Set(previous);
+    return sortStrings(current.filter((item) => !previousSet.has(item)));
+}
+function getRemovedItems(previous, current) {
+    const currentSet = new Set(current);
+    return sortStrings(previous.filter((item) => !currentSet.has(item)));
+}
+function serializeTraceReasonMapping(entries) {
+    return sortStrings(entries.map((entry) => `${entry.code}|${entry.severity}|${entry.category}|${entry.message}`));
+}
+function diffAuditSnapshots(previous, current) {
+    const previousReasonCodes = previous.reasonCodes ?? [];
+    const currentReasonCodes = current.reasonCodes ?? [];
+    const previousFlags = (previous.contradictionFlags ?? []).map(String);
+    const currentFlags = (current.contradictionFlags ?? []).map(String);
+    const previousTrace = serializeTraceReasonMapping(previous.traceReasonMapping);
+    const currentTrace = serializeTraceReasonMapping(current.traceReasonMapping);
+    const reasonCodesAdded = getAddedItems(previousReasonCodes, currentReasonCodes);
+    const reasonCodesRemoved = getRemovedItems(previousReasonCodes, currentReasonCodes);
+    const contradictionFlagsAdded = getAddedItems(previousFlags, currentFlags);
+    const contradictionFlagsRemoved = getRemovedItems(previousFlags, currentFlags);
+    return {
+        modeChanged: previous.result.mode !== current.result.mode,
+        confidenceChanged: previous.input.confidenceScore !== current.input.confidenceScore,
+        riskChanged: previous.input.riskScore !== current.input.riskScore,
+        parityChanged: previous.parityValid !== current.parityValid,
+        contradictionFlagsAdded,
+        contradictionFlagsRemoved,
+        reasonCodesAdded,
+        reasonCodesRemoved,
+        traceReasonMappingChanged: JSON.stringify(previousTrace) !== JSON.stringify(currentTrace),
+        previous: {
+            mode: previous.result.mode,
+            confidenceScore: previous.input.confidenceScore,
+            riskScore: previous.input.riskScore,
+            parityValid: previous.parityValid,
+        },
+        current: {
+            mode: current.result.mode,
+            confidenceScore: current.input.confidenceScore,
+            riskScore: current.input.riskScore,
+            parityValid: current.parityValid,
+        },
+    };
+}
+//# sourceMappingURL=snapshotDiff.js.map

package/dist/audit/snapshotDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshotDiff.js","sourceRoot":"","sources":["../../src/audit/snapshotDiff.ts"],"names":[],"mappings":";;AAyDA,gDA4CC;AA3ED,SAAS,WAAW,CAAC,MAAyB;IAC5C,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CACpB,QAA2B,EAC3B,OAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CACtB,QAA2B,EAC3B,OAA0B;IAE1B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,2BAA2B,CAClC,OAA4C;IAE5C,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CACT,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CACvE,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,QAAuB,EACvB,OAAsB;IAEtB,MAAM,mBAAmB,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAErD,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEpE,MAAM,aAAa,GAAG,2BAA2B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE7E,MAAM,gBAAgB,GAAG,aAAa,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IAChF,MAAM,kBAAkB,GAAG,eAAe,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IAEpF,MAAM,uBAAuB,GAAG,aAAa,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3E,MAAM,yBAAyB,GAAG,eAAe,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAE/E,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI;QACzD,iBAAiB,EACf,QAAQ,CAAC,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,KAAK,CAAC,eAAe;QAClE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS;QACjE,aAAa,EAAE,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAC3D,uBAAuB;QACvB,yBAAyB;QACzB,gBAAgB;QAChB,kBAAkB;QAClB,yBAAyB,EACvB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;QAChE,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;YAC1B,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe;YAC/C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YAC9C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC;KACF,CAAC;AACJ,CAAC"}

package/dist/audit/snapshotReader.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readAuditSnapshot = readAuditSnapshot;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Reads an audit snapshot JSON file from disk and parses it.
+ *
+ * Behavior:
+ * - Returns parsed AuditSnapshot on success
+ * - Returns null on any failure (file not found, invalid JSON, etc.)
+ * - Logs error to stderr
+ * - NEVER throws
+ */
+function readAuditSnapshot(filePath) {
+    try {
+        const absolutePath = node_path_1.default.resolve(filePath);
+        const raw = node_fs_1.default.readFileSync(absolutePath, "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`[audit] Failed to read snapshot: ${message}`);
+        return null;
+    }
+}
+//# sourceMappingURL=snapshotReader.js.map

package/dist/audit/snapshotReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshotReader.js","sourceRoot":"","sources":["../../src/audit/snapshotReader.ts"],"names":[],"mappings":";;;;;AAaA,8CAiBC;AA9BD,sDAAyB;AACzB,0DAA6B;AAG7B;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAEhD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEzD,OAAO,CAAC,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}