@decantr/verifier 2.5.0 → 3.0.0-next.0

package/README.md

@@ -15,11 +15,19 @@ npm install @decantr/verifier
 
 - `auditProject()` for project-level Decantr audits
 - `auditBuiltDist()` for built-output runtime verification against emitted HTML, assets, and route hints
+- `scanProject()` for read-only Brownfield reconnaissance of framework, routes, components, styling, static-hosting hints, Decantr presence, and assistant-rule files
+- `auditComponentReuse()` for the first AST-derived component reuse drift slice, focused on AI reimplementing common UI primitives instead of importing project-owned components, plus local import references that the typed graph can turn into source-to-source impact edges
+- `auditStyleBridgeDrift()` for accepted style bridge drift, focused on production `className`, common class-helper values, stylesheet declarations, and hardcoded inline color styles that bypass project-owned token/class authority
+- `collectProjectSourceFiles()` for the shared production-source file selection used by Project Health, component reuse drift, style bridge drift, and typed graph source provenance
+- `resolveGitHubScanInput()` and `probePublishedSite()` for hosted scan inputs and HTML-only published-site metadata probes
 - `critiqueFile()` for file-level review against compiled review-pack contracts
 - `createContractAssertions()` for explicit route, shell, accessibility, context, and design-token assertions derived from Essence/context
 - `createEvidenceBundle()` for privacy-redacted local evidence artifacts used by AI repair loops and CI
+- `resolveGraphAnchorForFinding()` and `anchorFindingsToGraph()` for attaching verifier/Project Health findings to typed Contract graph nodes when a graph snapshot exists
+- `deriveVerificationDiagnostic()` and `KNOWN_VERIFICATION_DIAGNOSTICS` for stable finding codes and typed repair IDs used by Project Health, MCP health, and Evidence Bundles
 - schema-backed report types for project audits, Project Health, Decantr CI reports, Evidence Bundles, Workspace Health, file critiques, and showcase verification
 - `ProjectHealthReport`, `ProjectHealthFinding`, and `ProjectHealthRemediation` types for the CLI's end-user health surface
+- Project Health and Evidence Bundle finding schemas include optional `code`, `repair`, `repairPlan`, and `graph` fields so agents can identify, anchor, and act on findings without parsing prose; Evidence Bundle provenance also records graph snapshot, manifest, diff, and contract-capsule hashes when present
 - interaction findings now include scanned file counts, file line ranges, and expected signal evidence where available, so CLI health/check output can point agents at source-grounded remediation
 - contract-only and style-bridge Brownfield critique avoids requiring Decantr treatments/decorators when the project keeps its own styling authority
 - Decantr CI report schemas include accepted style bridge status, mapping count, styling approach, and theme modes alongside local-law findings
@@ -27,6 +35,9 @@ npm install @decantr/verifier
 - project audits tolerate partial or malformed generated review packs without crashing Project Health, so half-attached Brownfield projects still receive actionable findings
 - Next.js static/document outputs are treated as framework-rendered documents instead of requiring a Vite-style `id="root"` mount element
 - project source audits ignore test, spec, story, fixture, and mock files for production drift warnings such as localhost endpoints and unsafe rendering patterns
+- project audits emit `COMP001` / `import-existing-component` findings when a production source file locally redeclares a primitive such as `Button`, `Card`, or `Dialog` while an exported reusable primitive already exists under common component paths
+- project audits emit `COMP010` / `replace-raw-control-with-local-component` findings when production JSX renders raw controls such as `<button>` or `<input>` while a project-owned primitive already exists
+- project audits emit `TOKEN010` / `replace-arbitrary-style-with-bridge-token` findings when an accepted `.decantr/style-bridge.json` exists and production JSX uses arbitrary Tailwind values such as `bg-[#0f172a]`, values inside `cn()`, `clsx()`, `classnames()`, `cva()`, and `tv()` calls, hardcoded inline color styles such as `style={{ backgroundColor: "#0f172a" }}`, or hardcoded visual values in production CSS/module stylesheets
 - published verifier report schemas are exercised by AJV-backed round-trip tests against real audit, critique, and shortlist-report outputs
 - project audits include runtime evidence when a built `dist/` output is present:
   - root document
@@ -45,9 +56,11 @@ import {
   createContractAssertions,
   createEvidenceBundle,
   critiqueFile,
+  scanProject,
   type ProjectHealthReport,
 } from '@decantr/verifier';
 
+const scan = await scanProject(process.cwd());
 const audit = await auditProject(process.cwd());
 const assertions = createContractAssertions(process.cwd(), audit);
 const critique = await critiqueFile('./src/pages/overview.tsx', process.cwd());
@@ -64,13 +77,14 @@ function isBlocking(report: ProjectHealthReport) {
 - `@decantr/verifier/schema/project-health-report.v1.json`
 - `@decantr/verifier/schema/decantr-ci-report.v1.json`
 - `@decantr/verifier/schema/evidence-bundle.v1.json`
+- `@decantr/verifier/schema/scan-report.v1.json`
 - `@decantr/verifier/schema/workspace-health-report.v1.json`
 - `@decantr/verifier/schema/file-critique-report.v1.json`
 - `@decantr/verifier/schema/showcase-shortlist-report.v1.json`
 
 ## Security And Permissions
 
-The verifier is a local library. It reads selected project source, Decantr context, and built `dist`/`.next` output when callers request project or runtime audits. Built-output runtime audit starts a temporary loopback static server and fetches from that local server only; it does not contact external hosts. The verifier does not write files, spawn processes, emit telemetry, or upload source by itself. See [security permissions](https://decantr.ai/reference/security-permissions.md).
+The verifier is a local library. It reads selected project source, Decantr context, read-only scan files, and built `dist`/`.next` output when callers request project or runtime audits. `scanProject()` returns relative evidence and does not write artifacts, install dependencies, build projects, execute scripts, or open pull requests. `probePublishedSite()` fetches HTML metadata over HTTP(S) only and does not execute JavaScript or capture screenshots. Built-output runtime audit starts a temporary loopback static server and fetches from that local server. The verifier does not write files, spawn processes, emit telemetry, or upload source by itself. See [security permissions](https://decantr.ai/reference/security-permissions.md).
 
 ## Compatibility
 

package/dist/index.d.ts

@@ -1,6 +1,197 @@
 import { ReviewExecutionPack } from '@decantr/core';
 import { EssenceFile } from '@decantr/essence-spec';
 
+interface VerificationRepairAction {
+    id: string;
+    payload?: Record<string, unknown>;
+}
+interface VerificationDiagnosticInput {
+    id: string;
+    category: string;
+    message: string;
+    source?: string;
+    rule?: string;
+    target?: string;
+    file?: string;
+    suggestedFix?: string;
+    evidence?: string[];
+}
+interface VerificationDiagnosticMetadata {
+    code: string;
+    repair: VerificationRepairAction;
+}
+interface VerificationDiagnosticCatalogEntry {
+    rule: string;
+    code: string;
+    repairId: string;
+    family: string;
+}
+declare const KNOWN_VERIFICATION_DIAGNOSTICS: readonly [{
+    readonly rule: "browser-base-url-missing";
+    readonly code: "VISUAL002";
+    readonly repairId: "provide-browser-base-url";
+    readonly family: "VISUAL";
+}, {
+    readonly rule: "browser-playwright-missing";
+    readonly code: "VISUAL001";
+    readonly repairId: "install-browser-verifier";
+    readonly family: "VISUAL";
+}, {
+    readonly rule: "browser-route-verification-failed";
+    readonly code: "VISUAL003";
+    readonly repairId: "fix-route-render";
+    readonly family: "VISUAL";
+}, {
+    readonly rule: "visual-baseline-screenshot-drift";
+    readonly code: "VISUAL010";
+    readonly repairId: "review-visual-baseline-drift";
+    readonly family: "VISUAL";
+}, {
+    readonly rule: "brownfield-route-drift";
+    readonly code: "ROUTE001";
+    readonly repairId: "reconcile-brownfield-routes";
+    readonly family: "ROUTE";
+}, {
+    readonly rule: "check-failed";
+    readonly code: "CHECK001";
+    readonly repairId: "repair-contract-check";
+    readonly family: "CHECK";
+}, {
+    readonly rule: "component-reuse-raw-control";
+    readonly code: "COMP010";
+    readonly repairId: "replace-raw-control-with-local-component";
+    readonly family: "COMP";
+}, {
+    readonly rule: "component-reuse-primitive-reimplemented";
+    readonly code: "COMP001";
+    readonly repairId: "import-existing-component";
+    readonly family: "COMP";
+}, {
+    readonly rule: "declared-route-resolves";
+    readonly code: "STRUCT002";
+    readonly repairId: "repair-route-binding";
+    readonly family: "STRUCT";
+}, {
+    readonly rule: "design-token-coverage";
+    readonly code: "TOKEN002";
+    readonly repairId: "repair-design-token-coverage";
+    readonly family: "TOKEN";
+}, {
+    readonly rule: "style-bridge-arbitrary-value";
+    readonly code: "TOKEN010";
+    readonly repairId: "replace-arbitrary-style-with-bridge-token";
+    readonly family: "TOKEN";
+}, {
+    readonly rule: "essence-present";
+    readonly code: "CONTRACT001";
+    readonly repairId: "restore-essence-contract";
+    readonly family: "CONTRACT";
+}, {
+    readonly rule: "essence-v4";
+    readonly code: "CONTRACT002";
+    readonly repairId: "migrate-essence-v4";
+    readonly family: "CONTRACT";
+}, {
+    readonly rule: "focus-visible-enabled";
+    readonly code: "A11Y001";
+    readonly repairId: "enable-focus-visible";
+    readonly family: "A11Y";
+}, {
+    readonly rule: "pack-manifest-present";
+    readonly code: "CTX002";
+    readonly repairId: "hydrate-execution-packs";
+    readonly family: "CTX";
+}, {
+    readonly rule: "pack-manifest-missing";
+    readonly code: "CTX002";
+    readonly repairId: "hydrate-execution-packs";
+    readonly family: "CTX";
+}, {
+    readonly rule: "page-pack-count-mismatch";
+    readonly code: "CTX001";
+    readonly repairId: "regenerate-context-packs";
+    readonly family: "CTX";
+}, {
+    readonly rule: "page-route-required";
+    readonly code: "STRUCT001";
+    readonly repairId: "add-page-route";
+    readonly family: "STRUCT";
+}, {
+    readonly rule: "project-audit-invalid";
+    readonly code: "AUDIT001";
+    readonly repairId: "repair-project-audit";
+    readonly family: "AUDIT";
+}, {
+    readonly rule: "review-pack-present";
+    readonly code: "CTX003";
+    readonly repairId: "hydrate-review-pack";
+    readonly family: "CTX";
+}, {
+    readonly rule: "review-pack-file-missing";
+    readonly code: "CTX003";
+    readonly repairId: "hydrate-review-pack";
+    readonly family: "CTX";
+}, {
+    readonly rule: "section-shell-concrete";
+    readonly code: "STRUCT003";
+    readonly repairId: "assign-section-shell";
+    readonly family: "STRUCT";
+}, {
+    readonly rule: "tokens-file-present";
+    readonly code: "TOKEN001";
+    readonly repairId: "restore-design-token-file";
+    readonly family: "TOKEN";
+}, {
+    readonly rule: "typed-graph-current";
+    readonly code: "GRAPH001";
+    readonly repairId: "regenerate-typed-graph";
+    readonly family: "GRAPH";
+}];
+declare function deriveVerificationDiagnostic(input: VerificationDiagnosticInput): VerificationDiagnosticMetadata;
+
+type VerificationGraphAnchorConfidence = 'exact' | 'inferred' | 'fallback';
+interface GraphAnchorNode {
+    id: string;
+    type: string;
+    payload?: unknown;
+}
+interface GraphAnchorEdge {
+    src: string;
+    dst: string;
+    relation: string;
+    payload?: unknown;
+    idx?: number;
+}
+interface GraphAnchorSnapshot {
+    id: string;
+    project_id: string;
+    source_hash: string;
+    nodes: GraphAnchorNode[];
+    edges: GraphAnchorEdge[];
+}
+interface VerificationGraphAnchor {
+    snapshot_id: string;
+    source_hash: string;
+    node_id: string;
+    node_type: string;
+    route?: string;
+    confidence: VerificationGraphAnchorConfidence;
+    reason: string;
+}
+interface GraphAnchorFindingInput {
+    id: string;
+    category: string;
+    message: string;
+    evidence?: string[];
+    target?: string;
+    file?: string;
+    rule?: string;
+}
+declare function resolveGraphAnchorForFinding(snapshot: GraphAnchorSnapshot | null | undefined, finding: GraphAnchorFindingInput): VerificationGraphAnchor | undefined;
+declare function anchorFindingsToGraph<TFinding extends GraphAnchorFindingInput>(snapshot: GraphAnchorSnapshot | null | undefined, findings: TFinding[]): Array<TFinding & {
+    graph?: VerificationGraphAnchor;
+}>;
+
 interface RuntimeAudit {
     distPresent: boolean;
     indexPresent: boolean;
@@ -53,6 +244,89 @@ interface BuiltDistAuditOptions {
 declare function emptyRuntimeAudit(failures?: string[]): RuntimeAudit;
 declare function auditBuiltDist(projectRoot: string, options?: BuiltDistAuditOptions): Promise<RuntimeAudit>;
 
+declare const COMPONENT_REUSE_RULE_ID = "component-reuse-primitive-reimplemented";
+declare const RAW_CONTROL_REUSE_RULE_ID = "component-reuse-raw-control";
+declare const RAW_CONTROL_COMPONENT_BY_ELEMENT: {
+    readonly button: "Button";
+    readonly dialog: "Dialog";
+    readonly input: "Input";
+    readonly select: "Select";
+    readonly table: "Table";
+    readonly textarea: "Textarea";
+};
+type RawControlElement = keyof typeof RAW_CONTROL_COMPONENT_BY_ELEMENT;
+interface CodeComponentDeclaration {
+    id: string;
+    name: string;
+    file: string;
+    line: number;
+    exported: boolean;
+    reusable: boolean;
+    kind: 'function' | 'variable' | 'class';
+}
+interface ComponentReuseFinding {
+    id: string;
+    name: string;
+    file: string;
+    line: number;
+    canonicalFile: string;
+    canonicalLine: number;
+    evidence: string[];
+}
+interface RawControlReuseFinding {
+    id: string;
+    element: RawControlElement;
+    component: string;
+    file: string;
+    line: number;
+    canonicalFile: string;
+    canonicalLine: number;
+    containingComponent?: string;
+    evidence: string[];
+}
+interface CodeImportReference {
+    file: string;
+    source: string;
+    line: number;
+    defaultImport?: string;
+    namespaceImport?: string;
+    imported: string[];
+    localNames: string[];
+}
+interface ComponentReuseAudit {
+    filesChecked: number;
+    declarations: CodeComponentDeclaration[];
+    imports: CodeImportReference[];
+    reusableComponentCount: number;
+    localRedeclarationCount: number;
+    rawControlCount: number;
+    findings: ComponentReuseFinding[];
+    rawControlFindings: RawControlReuseFinding[];
+}
+declare function auditComponentReuse(projectRoot: string, sourceFiles: string[]): ComponentReuseAudit;
+
+declare const STYLE_BRIDGE_ARBITRARY_VALUE_RULE_ID = "style-bridge-arbitrary-value";
+interface StyleBridgeDriftFinding {
+    id: string;
+    file: string;
+    line: number;
+    className: string;
+    value: string;
+    source: 'className' | 'inline-style' | 'stylesheet';
+    property?: string;
+    bridgeMappingIds: string[];
+    tokenHints: string[];
+    classHints: string[];
+    evidence: string[];
+}
+interface StyleBridgeDriftAudit {
+    filesChecked: number;
+    bridgeMappingCount: number;
+    arbitraryValueCount: number;
+    findings: StyleBridgeDriftFinding[];
+}
+declare function auditStyleBridgeDrift(projectRoot: string, sourceFiles: string[]): StyleBridgeDriftAudit;
+
 /**
  * Experiential interaction verifier.
  *
@@ -122,21 +396,202 @@ declare function verifyInteractionsInSource(interactions: string[], sources: Map
  */
 declare function listKnownInteractions(): string[];
 
+type ScanInputKind = 'local' | 'github-repo' | 'github-pages';
+type ScanConfidence = 'high' | 'medium' | 'low';
+type ScanApplicabilityStatus = 'strong_fit' | 'partial_fit' | 'not_applicable' | 'unknown';
+type ScanFindingSeverity = 'success' | 'info' | 'warn' | 'error';
+declare const SCAN_REPORT_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v1.json";
+interface ScanInputV1 {
+    kind: ScanInputKind;
+    value: string;
+}
+interface ScanRepositoryV1 {
+    owner: string;
+    repo: string;
+    url: string;
+    defaultBranch?: string | null;
+}
+interface PublishedSiteProbeV1 {
+    url: string;
+    finalUrl: string | null;
+    checked: boolean;
+    reachable: boolean;
+    status: number | null;
+    title: string | null;
+    description: string | null;
+    canonicalUrl: string | null;
+    assetHints: {
+        rootRelative: number;
+        relative: number;
+        absolute: number;
+        samples: string[];
+    };
+    routingHints: string[];
+    error: string | null;
+}
+interface ScanRouteV1 {
+    path: string;
+    file: string;
+    hasLayout: boolean;
+}
+interface ScanFindingV1 {
+    id: string;
+    severity: ScanFindingSeverity;
+    title: string;
+    message: string;
+    evidence: string[];
+    recommendation?: string;
+}
+type ScanGraphPreviewStatus = 'not_attached' | 'current' | 'stale' | 'needs_migration' | 'unavailable';
+interface ScanGraphPreviewV1 {
+    status: ScanGraphPreviewStatus;
+    canPreview: boolean;
+    readOnly: true;
+    message: string;
+    nextCommand: string | null;
+    staleArtifacts: string[];
+    snapshot: {
+        id: string;
+        schemaVersion: string;
+        sourceHash: string;
+        nodes: number;
+        edges: number;
+        findings: number;
+        evidence: number;
+        sourceArtifacts: number;
+    } | null;
+    capsule: {
+        cacheKey: string;
+        routes: number;
+        components: number;
+        tokens: number;
+        localRules: number;
+        styleBridge: number;
+        sourceArtifacts: number;
+        sourceArtifactLimit: number;
+        sourceArtifactsTruncated: boolean;
+        openFindings: number;
+    } | null;
+    diff: {
+        ops: number;
+        findingsAdded: number;
+        findingsResolved: number;
+        evidenceAdded: number;
+    } | null;
+}
+interface ScanReportV1 {
+    $schema: typeof SCAN_REPORT_SCHEMA_URL;
+    schemaVersion: 'scan-report.v1';
+    generatedAt: string;
+    input: ScanInputV1;
+    source: {
+        repository: ScanRepositoryV1 | null;
+        publishedSiteUrl: string | null;
+    };
+    confidence: {
+        level: ScanConfidence;
+        score: number;
+        reasons: string[];
+    };
+    applicability: {
+        status: ScanApplicabilityStatus;
+        label: string;
+        reasons: string[];
+    };
+    project: {
+        framework: string;
+        frameworkVersion: string | null;
+        packageManager: string;
+        primaryLanguage: string;
+        hasTypeScript: boolean;
+        hasTailwind: boolean;
+        hasDecantr: boolean;
+        packageName: string | null;
+    };
+    routes: {
+        strategy: string;
+        count: number;
+        items: ScanRouteV1[];
+    };
+    components: {
+        pageCount: number;
+        componentCount: number;
+        directories: string[];
+    };
+    styling: {
+        approach: string;
+        configFile: string | null;
+        cssVariableCount: number;
+        colorTokenCount: number;
+        darkMode: boolean;
+        themeSignals: string[];
+    };
+    staticHosting: {
+        githubPagesLikely: boolean;
+        evidence: string[];
+        homepageUrl: string | null;
+        basePath: string | null;
+        hashRouting: boolean;
+    };
+    assistant: {
+        ruleFiles: string[];
+    };
+    graphPreview?: ScanGraphPreviewV1;
+    pagesProbe: PublishedSiteProbeV1 | null;
+    findings: ScanFindingV1[];
+    recommendedCommands: string[];
+    privacy: {
+        sourceUploaded: boolean;
+        persistedByDecantr: boolean;
+        notes: string[];
+    };
+}
+interface ScanProjectOptions {
+    input?: ScanInputV1;
+    repository?: ScanRepositoryV1 | null;
+    publishedSiteUrl?: string | null;
+    pagesProbe?: PublishedSiteProbeV1 | null;
+}
+interface GitHubScanInputResolution {
+    inputKind: 'github-repo' | 'github-pages';
+    normalizedInput: string;
+    repository: ScanRepositoryV1;
+    publishedSiteUrl: string | null;
+    warnings: string[];
+}
+declare function scanProject(projectRoot: string, options?: ScanProjectOptions): Promise<ScanReportV1>;
+declare function createUnavailableScanReport(input: {
+    scanInput: ScanInputV1;
+    repository?: ScanRepositoryV1 | null;
+    publishedSiteUrl?: string | null;
+    pagesProbe?: PublishedSiteProbeV1 | null;
+    title: string;
+    message: string;
+    evidence?: string[];
+}): ScanReportV1;
+declare function probePublishedSite(url: string, options?: {
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+}): Promise<PublishedSiteProbeV1>;
+declare function resolveGitHubScanInput(input: string): GitHubScanInputResolution;
+
 declare const VERIFICATION_SCHEMA_URLS: {
     readonly common: "https://decantr.ai/schemas/verification-report.common.v1.json";
     readonly projectAudit: "https://decantr.ai/schemas/project-audit-report.v1.json";
     readonly projectHealth: "https://decantr.ai/schemas/project-health-report.v1.json";
     readonly decantrCi: "https://decantr.ai/schemas/decantr-ci-report.v1.json";
     readonly evidenceBundle: "https://decantr.ai/schemas/evidence-bundle.v1.json";
+    readonly scanReport: "https://decantr.ai/schemas/scan-report.v1.json";
     readonly workspaceHealth: "https://decantr.ai/schemas/workspace-health-report.v1.json";
     readonly fileCritique: "https://decantr.ai/schemas/file-critique-report.v1.json";
     readonly showcaseShortlist: "https://decantr.ai/schemas/showcase-shortlist-report.v1.json";
 };
 type VerificationSeverity = 'error' | 'warn' | 'info';
 type ProjectHealthStatus = 'healthy' | 'warning' | 'error';
-type ProjectHealthFindingSource = 'audit' | 'assertion' | 'browser' | 'check' | 'brownfield' | 'design-token' | 'runtime' | 'pack' | 'interaction';
+type ProjectHealthFindingSource = 'audit' | 'assertion' | 'browser' | 'check' | 'brownfield' | 'design-token' | 'style-bridge' | 'graph' | 'runtime' | 'pack' | 'interaction';
 interface VerificationFinding {
     id: string;
+    code?: string;
     category: string;
     severity: VerificationSeverity;
     message: string;
@@ -145,6 +600,8 @@ interface VerificationFinding {
     file?: string;
     rule?: string;
     suggestedFix?: string;
+    graph?: VerificationGraphAnchor;
+    repair?: VerificationRepairAction;
 }
 interface VerificationScore {
     category: string;
@@ -208,8 +665,35 @@ interface ProjectHealthRemediation {
     prompt: string;
     commands: string[];
 }
+interface EvidenceRepairPlanAction {
+    id: string;
+    kind: string;
+    target?: string | null;
+    description: string;
+    payload?: Record<string, unknown>;
+}
+interface EvidenceRepairPlan {
+    id: string;
+    findingId: string;
+    diagnosticCode?: string | null;
+    repairId?: string | null;
+    severity: VerificationSeverity;
+    source: ProjectHealthFindingSource;
+    category: string;
+    graphAnchor?: VerificationGraphAnchor | null;
+    actions: EvidenceRepairPlanAction[];
+    evidence: Array<{
+        id: string;
+        text: string;
+    }>;
+    readTargets: string[];
+    preserve: string[];
+    avoid: string[];
+    commands: string[];
+}
 interface ProjectHealthFinding {
     id: string;
+    code?: string;
     source: ProjectHealthFindingSource;
     category: string;
     severity: VerificationSeverity;
@@ -219,6 +703,9 @@ interface ProjectHealthFinding {
     file?: string;
     rule?: string;
     suggestedFix?: string;
+    graph?: VerificationGraphAnchor;
+    repair?: VerificationRepairAction;
+    repairPlan?: EvidenceRepairPlan;
     remediation: ProjectHealthRemediation;
 }
 interface ProjectHealthRouteSummary {
@@ -237,6 +724,24 @@ interface ProjectHealthPackSummary {
     mutationPackCount: number;
     generatedAt: string | null;
 }
+interface ProjectHealthGraphSummary {
+    present: boolean;
+    ready: boolean;
+    current: boolean | null;
+    snapshotPresent: boolean;
+    manifestPresent: boolean;
+    diffPresent: boolean;
+    capsulePresent: boolean;
+    snapshotId: string | null;
+    sourceHash: string | null;
+    contractHash: string | null;
+    contractCacheKey: string | null;
+    sourceArtifactCount: number;
+    capsuleSourceArtifactLimit: number | null;
+    capsuleSourceArtifactsTruncated: boolean | null;
+    staleArtifacts: string[];
+    error: string | null;
+}
 interface ProjectHealthReport {
     $schema: string;
     generatedAt: string;
@@ -259,6 +764,7 @@ interface ProjectHealthReport {
     };
     routes: ProjectHealthRouteSummary;
     packs: ProjectHealthPackSummary;
+    graph: ProjectHealthGraphSummary;
     ci: {
         recommendedCommand: string;
         failOn: 'error' | 'warn' | 'none';
@@ -310,12 +816,17 @@ interface EvidenceBundle {
         essence: EvidenceProvenanceEntry;
         packManifest: EvidenceProvenanceEntry;
         reviewPack: EvidenceProvenanceEntry;
+        graphSnapshot: EvidenceProvenanceEntry;
+        graphManifest: EvidenceProvenanceEntry;
+        graphDiff: EvidenceProvenanceEntry;
+        contractCapsule: EvidenceProvenanceEntry;
         workspaceConfig?: EvidenceProvenanceEntry;
         designTokens?: EvidenceProvenanceEntry;
     };
     assertions: ContractAssertion[];
     findings: Array<{
         id: string;
+        code?: string;
         source: ProjectHealthFindingSource;
         category: string;
         severity: VerificationSeverity;
@@ -324,6 +835,9 @@ interface EvidenceBundle {
         target?: string;
         rule?: string;
         suggestedFix?: string;
+        graph?: VerificationGraphAnchor;
+        repair?: VerificationRepairAction;
+        repairPlan?: EvidenceRepairPlan;
         remediationSummary: string;
         commands: string[];
         promptCommand: string;
@@ -355,6 +869,7 @@ interface EvidenceBundleInput {
     designTokens?: EvidenceBundle['designTokens'];
 }
 declare const EVIDENCE_BUNDLE_SCHEMA_URL = "https://decantr.ai/schemas/evidence-bundle.v1.json";
+declare function buildProjectHealthRepairPlan(projectRoot: string, finding: ProjectHealthFinding): EvidenceRepairPlan;
 declare function createContractAssertions(projectRoot: string, audit?: ProjectAuditReport | null): ContractAssertion[];
 declare function createEvidenceBundle(input: EvidenceBundleInput): EvidenceBundle;
 interface FileCritiqueReport {
@@ -468,9 +983,10 @@ interface ShowcaseShortlistVerificationReport {
     results: ShowcaseShortlistVerificationEntry[];
 }
 declare function collectMissingPackManifestFiles(projectRoot: string, packManifest?: PackManifest | null): MissingPackManifestFile[];
+declare function collectProjectSourceFiles(projectRoot: string): string[];
 declare function extractRouteHintsFromEssence(essence: EssenceFile | null): string[];
 declare function auditProject(projectRoot: string): Promise<ProjectAuditReport>;
 declare function critiqueSource({ filePath, code, reviewPack, packManifest, treatmentsCss, adoptionMode, }: CritiqueSourceInput): FileCritiqueReport;
 declare function critiqueFile(filePath: string, projectRoot: string): Promise<FileCritiqueReport>;
 
-export { type BuiltDistAuditOptions, type ContractAssertion, type ContractAssertionCategory, type CritiqueSourceInput, EVIDENCE_BUNDLE_SCHEMA_URL, type EvidenceBundle, type EvidenceBundleInput, type EvidenceProvenanceEntry, type FileCritiqueReport, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, type MissingPackManifestFile, type PackManifest, type ProjectAuditReport, type ProjectHealthFinding, type ProjectHealthFindingSource, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthRouteSummary, type ProjectHealthStatus, type RuntimeAudit, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, VERIFICATION_SCHEMA_URLS, type VerificationFinding, type VerificationScore, type VerificationSeverity, auditBuiltDist, auditProject, collectMissingPackManifestFiles, createContractAssertions, createEvidenceBundle, critiqueFile, critiqueSource, emptyRuntimeAudit, extractRouteHintsFromEssence, listKnownInteractions, verifyInteractionsInSource };
+export { type BuiltDistAuditOptions, COMPONENT_REUSE_RULE_ID, type CodeComponentDeclaration, type CodeImportReference, type ComponentReuseAudit, type ComponentReuseFinding, type ContractAssertion, type ContractAssertionCategory, type CritiqueSourceInput, EVIDENCE_BUNDLE_SCHEMA_URL, type EvidenceBundle, type EvidenceBundleInput, type EvidenceProvenanceEntry, type EvidenceRepairPlan, type EvidenceRepairPlanAction, type FileCritiqueReport, type GitHubScanInputResolution, type GraphAnchorEdge, type GraphAnchorFindingInput, type GraphAnchorNode, type GraphAnchorSnapshot, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, KNOWN_VERIFICATION_DIAGNOSTICS, type MissingPackManifestFile, type PackManifest, type ProjectAuditReport, type ProjectHealthFinding, type ProjectHealthFindingSource, type ProjectHealthGraphSummary, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthRouteSummary, type ProjectHealthStatus, type PublishedSiteProbeV1, RAW_CONTROL_REUSE_RULE_ID, type RawControlReuseFinding, type RuntimeAudit, SCAN_REPORT_SCHEMA_URL, STYLE_BRIDGE_ARBITRARY_VALUE_RULE_ID, type ScanApplicabilityStatus, type ScanConfidence, type ScanFindingSeverity, type ScanFindingV1, type ScanInputKind, type ScanInputV1, type ScanProjectOptions, type ScanReportV1, type ScanRepositoryV1, type ScanRouteV1, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, type StyleBridgeDriftAudit, type StyleBridgeDriftFinding, VERIFICATION_SCHEMA_URLS, type VerificationDiagnosticCatalogEntry, type VerificationDiagnosticInput, type VerificationDiagnosticMetadata, type VerificationFinding, type VerificationGraphAnchor, type VerificationGraphAnchorConfidence, type VerificationRepairAction, type VerificationScore, type VerificationSeverity, anchorFindingsToGraph, auditBuiltDist, auditComponentReuse, auditProject, auditStyleBridgeDrift, buildProjectHealthRepairPlan, collectMissingPackManifestFiles, collectProjectSourceFiles, createContractAssertions, createEvidenceBundle, createUnavailableScanReport, critiqueFile, critiqueSource, deriveVerificationDiagnostic, emptyRuntimeAudit, extractRouteHintsFromEssence, listKnownInteractions, probePublishedSite, resolveGitHubScanInput, resolveGraphAnchorForFinding, scanProject, verifyInteractionsInSource };