@decantr/verifier 2.1.0 → 2.2.0

package/README.md

@@ -20,6 +20,7 @@ npm install @decantr/verifier
 - `createEvidenceBundle()` for privacy-redacted local evidence artifacts used by AI repair loops and CI
 - schema-backed report types for project audits, Project Health, Evidence Bundles, Workspace Health, file critiques, and showcase verification
 - `ProjectHealthReport`, `ProjectHealthFinding`, and `ProjectHealthRemediation` types for the CLI's end-user health surface
+- interaction findings now include scanned file counts, file line ranges, and expected signal evidence where available, so CLI health/check output can point agents at source-grounded remediation
 - published verifier report schemas are exercised by AJV-backed round-trip tests against real audit, critique, and shortlist-report outputs
 - project audits include runtime evidence when a built `dist/` output is present:
   - root document

package/dist/index.d.ts

@@ -97,6 +97,13 @@ declare const INTERACTION_SIGNALS: Record<string, InteractionRequirement>;
 interface InteractionMissingFinding {
     interaction: string;
     suggestion: string;
+    scannedFiles?: number;
+    scannedLocations?: Array<{
+        file: string;
+        startLine: number;
+        endLine: number;
+    }>;
+    expectedSignals?: string[];
 }
 /**
  * Scan a source-tree map (file path → file contents) for evidence of each

package/dist/index.js

@@ -653,7 +653,7 @@ var INTERACTION_SIGNALS = {
   },
   "click-connect": {
     interaction: "click-connect",
-    signals: [/onClick.*?port|connect/i, /connections?\s*[:\[=]/i],
+    signals: [/onClick.*?port|connect/i, /connections?\s*[:[=]/i],
     suggestion: "Implement a two-click state machine: first click selects a port, second click on another port creates a connection. Store connections in component state."
   },
   "inline-edit": {
@@ -697,9 +697,11 @@ var INTERACTION_SIGNALS = {
     suggestion: "Implement focus trap inside modal/dialog \u2014 listen for Tab key, cycle focus within the dialog, restore focus on close."
   }
 };
+function sourceLineCount(source) {
+  return Math.max(1, source.replace(/\r?\n$/, "").split(/\r?\n/).length);
+}
 function verifyInteractionsInSource(interactions, sources) {
   if (interactions.length === 0 || sources.size === 0) return [];
-  const combined = Array.from(sources.values()).join("\n\n");
   const unique = Array.from(new Set(interactions));
   const missing = [];
   for (const interaction of unique) {
@@ -707,16 +709,30 @@ function verifyInteractionsInSource(interactions, sources) {
     if (!requirement) {
       continue;
     }
-    const matched = requirement.signals.some((signal) => {
-      if (typeof signal === "string") {
-        return combined.includes(signal);
-      }
-      return signal.test(combined);
-    });
+    let matched = false;
+    for (const source of sources.values()) {
+      matched = requirement.signals.some((signal) => {
+        if (typeof signal === "string") {
+          return source.includes(signal);
+        }
+        signal.lastIndex = 0;
+        return signal.test(source);
+      });
+      if (matched) break;
+    }
     if (!matched) {
       missing.push({
         interaction,
-        suggestion: requirement.suggestion
+        suggestion: requirement.suggestion,
+        scannedFiles: sources.size,
+        scannedLocations: [...sources.entries()].slice(0, 8).map(([file, source]) => ({
+          file,
+          startLine: 1,
+          endLine: sourceLineCount(source)
+        })),
+        expectedSignals: requirement.signals.map(
+          (signal) => typeof signal === "string" ? signal : String(signal)
+        )
       });
     }
   }
@@ -1689,6 +1705,11 @@ function buildRegistryContext(projectRoot) {
     }
   } catch {
   }
+  for (const id of ["content-section", "footer", "form-basic", "hero", "nav-header"]) {
+    if (!patternRegistry.has(id)) {
+      patternRegistry.set(id, { id, source: "bundled" });
+    }
+  }
   return { themeRegistry, patternRegistry };
 }
 function guardViolationToFinding(violation) {
@@ -2862,7 +2883,10 @@ function appendSourceAuditFindings(findings, sourceAudit, essence, reviewPack) {
       })
     );
   }
-  if (topology.hasAuthFeature && topology.primaryRoutes.length > 0 && sourceAudit.protectedSurfaceSignals.count > 0 && sourceAudit.authGuardSignals.count > 0 && !sourceAuditBucketsOverlap(sourceAudit.protectedSurfaceSignals, sourceAudit.authGuardSignals) && !sourceAuditBucketsOverlap(sourceAudit.protectedSurfaceSignals, sourceAudit.authSessionSignals) && !sourceAuditProtectedSurfacesCoveredByGuardedNextLayouts(
+  if (topology.hasAuthFeature && topology.primaryRoutes.length > 0 && sourceAudit.protectedSurfaceSignals.count > 0 && sourceAudit.authGuardSignals.count > 0 && !sourceAuditBucketsOverlap(sourceAudit.protectedSurfaceSignals, sourceAudit.authGuardSignals) && !sourceAuditBucketsOverlap(
+    sourceAudit.protectedSurfaceSignals,
+    sourceAudit.authSessionSignals
+  ) && !sourceAuditProtectedSurfacesCoveredByGuardedNextLayouts(
     sourceAudit.protectedSurfaceSignals,
     sourceAudit.authGuardSignals,
     topology