@jterrats/smart-deployment 1.3.1 → 1.4.0

package/lib/reports/release-report-facts-factory.d.ts

@@ -0,0 +1,14 @@
+import type { DeploymentValidationSummary } from '../deployment/deployment-validation-service.js';
+import type { DeploymentContext } from '../deployment/deployment-context-service.js';
+import type { SpecialDeploymentExecutionResult } from '../deployment/special-deployment-executor.js';
+import type { SpecialDeploymentPlan } from '../deployment/special-deployment-plan.js';
+import type { ReleaseReportFacts } from '../types/release-report.js';
+export declare function buildCiPublishReportFacts(plan: SpecialDeploymentPlan, execution?: SpecialDeploymentExecutionResult): ReleaseReportFacts;
+export declare function buildValidationReportFacts(summary: DeploymentValidationSummary, targetOrg: string | undefined, useAI: boolean): ReleaseReportFacts;
+export declare function buildStartReportFacts(context: DeploymentContext, options: {
+    targetOrg?: string;
+    dryRun: boolean;
+    validateOnly: boolean;
+    failed?: boolean;
+    warning?: string;
+}): ReleaseReportFacts;

package/lib/reports/release-report-facts-factory.js

@@ -0,0 +1,140 @@
+export function buildCiPublishReportFacts(plan, execution) {
+    const phases = plan.phases.map((phase) => toSpecialPhaseFact(phase, plan, execution));
+    const statusByPhase = new Map(phases.map((phase) => [phase.id, phase.status]));
+    return {
+        command: 'smart-deployment ci-publish',
+        targetOrg: plan.targetOrg,
+        analysisMode: 'deterministic',
+        enrichment: { status: 'skipped' },
+        outcome: execution ? (execution.success ? 'succeeded' : 'failed') : plan.success ? 'skipped' : 'failed',
+        phases,
+        items: plan.phases.flatMap((phase) => phase.components.map((component) => toItem(component, phase.kind, operationForPhase(phase.kind), routeForPhase(phase.kind), statusByPhase.get(phase.kind), plan.targetOrg))),
+        reportWarnings: [...plan.warnings, ...plan.errors],
+    };
+}
+export function buildValidationReportFacts(summary, targetOrg, useAI) {
+    const status = summary.valid ? 'succeeded' : 'needs_review';
+    return {
+        command: 'smart-deployment validate',
+        targetOrg,
+        analysisMode: summary.aiAnalyzed ? 'ai_enriched' : 'deterministic',
+        enrichment: {
+            status: summary.aiAnalyzed ? 'available' : useAI ? 'unavailable' : 'skipped',
+            warnings: useAI && !summary.aiAnalyzed
+                ? ['AI validation unavailable; deterministic validation was retained.']
+                : undefined,
+        },
+        outcome: summary.valid ? 'succeeded' : 'failed',
+        phases: [
+            {
+                id: 'validation',
+                route: 'validation',
+                operation: 'validate',
+                status,
+                remediation: summary.issues.map((issue) => issue.message),
+            },
+        ],
+        items: summary.componentIds.map((component) => toItem(component, 'validation', 'validate', 'validation', status, targetOrg)),
+        reportWarnings: summary.issues.map((issue) => issue.message),
+    };
+}
+export function buildStartReportFacts(context, options) {
+    const operation = options.validateOnly ? 'validate' : 'deploy';
+    const status = options.failed ? 'failed' : options.dryRun ? 'skipped' : 'succeeded';
+    const phaseId = options.validateOnly ? 'validation' : 'core-metadata';
+    const route = options.validateOnly ? 'validation' : 'salesforce-metadata';
+    const aiContext = context.aiContext;
+    const isAIEnriched = aiContext?.enabled === true && aiContext.fallback !== true && aiContext.inferenceFallback !== true;
+    return {
+        command: 'smart-deployment start',
+        targetOrg: options.targetOrg,
+        analysisMode: isAIEnriched ? 'ai_enriched' : 'deterministic',
+        enrichment: {
+            status: isAIEnriched ? 'available' : aiContext?.enabled ? 'partial' : 'skipped',
+            warnings: aiContext?.enabled && !isAIEnriched
+                ? ['AI enrichment was partial; deterministic planning was retained.']
+                : undefined,
+        },
+        outcome: options.failed ? 'failed' : options.dryRun ? 'skipped' : 'succeeded',
+        phases: [
+            {
+                id: phaseId,
+                route,
+                operation,
+                status,
+                remediation: options.warning ? [options.warning] : undefined,
+            },
+        ],
+        items: context.scanResult.components.map((component) => ({
+            phaseId,
+            metadataType: component.type,
+            fullName: component.name,
+            route,
+            operation,
+            status,
+            targetOrg: options.targetOrg,
+        })),
+        reportWarnings: options.warning ? [options.warning] : undefined,
+    };
+}
+function toSpecialPhaseFact(phase, plan, execution) {
+    const status = specialPhaseStatus(phase, plan, execution);
+    const commandResults = execution?.commands.filter((result) => result.phaseKind === phase.kind) ?? [];
+    return {
+        id: phase.kind,
+        route: routeForPhase(phase.kind),
+        operation: operationForPhase(phase.kind),
+        status,
+        evidence: phase.commands.map((command, index) => {
+            const result = commandResults[index];
+            return {
+                tool: command.tool,
+                operationId: `${phase.kind}:${index + 1}`,
+                exitCode: result?.exitCode ?? (result?.success ? 0 : undefined),
+            };
+        }),
+        remediation: [...(phase.errors ?? []), ...(phase.warnings ?? []), ...(phase.skipReason ? [phase.skipReason] : [])],
+    };
+}
+function specialPhaseStatus(phase, plan, execution) {
+    if ((phase.errors?.length ?? 0) > 0 || execution?.failedPhase === phase.kind)
+        return 'failed';
+    if (phase.skipped || execution?.skippedPhases.includes(phase.kind))
+        return 'skipped';
+    if (!execution)
+        return plan.dryRun ? 'skipped' : 'unknown';
+    if (execution.completedPhases.includes(phase.kind))
+        return 'succeeded';
+    return execution.success ? 'succeeded' : 'skipped';
+}
+function routeForPhase(kind) {
+    const routes = {
+        'core-metadata': 'salesforce-metadata',
+        'agentforce-publish': 'agentforce',
+        'agentforce-activate': 'agentforce',
+        'ai-evaluations': 'ai-evaluation',
+        'community-publish': 'experience-cloud',
+        'omnistudio-vlocity': 'omnistudio',
+    };
+    return routes[kind];
+}
+function operationForPhase(kind) {
+    if (kind === 'agentforce-activate')
+        return 'activate';
+    if (kind === 'agentforce-publish' || kind === 'community-publish' || kind === 'omnistudio-vlocity')
+        return 'publish';
+    return 'deploy';
+}
+function toItem(component, phaseId, operation, route, status, targetOrg) {
+    const separator = component.indexOf(':');
+    return {
+        phaseId,
+        metadataType: separator > 0 ? component.slice(0, separator) : 'Unknown',
+        fullName: separator > 0 ? component.slice(separator + 1) : component,
+        route,
+        operation,
+        status: status ?? 'unknown',
+        targetOrg,
+    };
+}
+//# sourceMappingURL=release-report-facts-factory.js.map

package/lib/reports/release-report-facts-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-report-facts-factory.js","sourceRoot":"","sources":["../../src/reports/release-report-facts-factory.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,SAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACtF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAE/E,OAAO;QACL,OAAO,EAAE,6BAA6B;QACtC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,eAAe;QAC7B,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QACjC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QACvG,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjC,MAAM,CACJ,SAAS,EACT,KAAK,CAAC,IAAI,EACV,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAC7B,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EACzB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAC7B,IAAI,CAAC,SAAS,CACf,CACF,CACF;QACD,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAoC,EACpC,SAA6B,EAC7B,KAAc;IAEd,MAAM,MAAM,GAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;IAC/E,OAAO;QACL,OAAO,EAAE,2BAA2B;QACpC,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;QAClE,UAAU,EAAE;YACV,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YAC5E,QAAQ,EACN,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC1B,CAAC,CAAC,CAAC,mEAAmE,CAAC;gBACvE,CAAC,CAAC,SAAS;SAChB;QACD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;QAC/C,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,YAAY;gBAChB,KAAK,EAAE,YAAY;gBACnB,SAAS,EAAE,UAAU;gBACrB,MAAM;gBACN,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC1D;SACF;QACD,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5C,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAC7E;QACD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,OAMC;IAED,MAAM,SAAS,GAAqB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,MAAM,MAAM,GAAsB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACvG,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,YAAY,GAChB,SAAS,EAAE,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,IAAI,SAAS,CAAC,iBAAiB,KAAK,IAAI,CAAC;IAErG,OAAO;QACL,OAAO,EAAE,wBAAwB;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;QAC5D,UAAU,EAAE;YACV,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/E,QAAQ,EACN,SAAS,EAAE,OAAO,IAAI,CAAC,YAAY;gBACjC,CAAC,CAAC,CAAC,iEAAiE,CAAC;gBACrE,CAAC,CAAC,SAAS;SAChB;QACD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;QAC7E,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,OAAO;gBACX,KAAK;gBACL,SAAS;gBACT,MAAM;gBACN,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;aAC7D;SACF;QACD,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACvD,OAAO;YACP,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,KAAK;YACL,SAAS;YACT,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA6B,EAC7B,IAA2B,EAC3B,SAAuD;IAEvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAErG,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,IAAI;QACd,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAChC,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;QACxC,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE;gBACzC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;aAChE,CAAC;QACJ,CAAC,CAAC;QACF,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACnH,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA6B,EAC7B,IAA2B,EAC3B,SAAuD;IAEvD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,WAAW,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC9F,IAAI,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,IAAI,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IACvE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAoC;IACzD,MAAM,MAAM,GAAyD;QACnE,eAAe,EAAE,qBAAqB;QACtC,oBAAoB,EAAE,YAAY;QAClC,qBAAqB,EAAE,YAAY;QACnC,gBAAgB,EAAE,eAAe;QACjC,mBAAmB,EAAE,kBAAkB;QACvC,oBAAoB,EAAE,YAAY;KACnC,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAoC;IAC7D,IAAI,IAAI,KAAK,qBAAqB;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACrH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CACb,SAAiB,EACjB,OAAmC,EACnC,SAA2B,EAC3B,KAAmB,EACnB,MAAqC,EACrC,SAA6B;IAE7B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO;QACL,OAAO;QACP,YAAY,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,QAAQ,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,KAAK;QACL,SAAS;QACT,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,SAAS;KACV,CAAC;AACJ,CAAC"}

package/lib/reports/release-report-sanitizer.d.ts

@@ -0,0 +1,5 @@
+import type { ReleaseReportV1 } from '../types/release-report.js';
+export type ReleaseReportSanitizerOptions = {
+    projectRoot?: string;
+};
+export declare function sanitizeReleaseReport(report: ReleaseReportV1, options?: ReleaseReportSanitizerOptions): ReleaseReportV1;

package/lib/reports/release-report-sanitizer.js

@@ -0,0 +1,120 @@
+import * as path from 'node:path';
+const ANSI_SEQUENCE = new RegExp(`${String.fromCharCode(27)}(?:\\][^${String.fromCharCode(7)}]*(?:${String.fromCharCode(7)}|${String.fromCharCode(27)}\\\\)|\\[[0-?]*[ -/]*[@-~])`, 'gu');
+const CONTROL_CHARACTER = new RegExp(`[${String.fromCharCode(0)}-${String.fromCharCode(8)}${String.fromCharCode(11)}${String.fromCharCode(12)}${String.fromCharCode(14)}-${String.fromCharCode(31)}${String.fromCharCode(127)}-${String.fromCharCode(159)}]`, 'gu');
+const AUTH_URL = /\b(?:force|sfdx):\/\/[^\s]+/giu;
+const BEARER_TOKEN = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/giu;
+const CREDENTIAL_ASSIGNMENT = /\b(access[_-]?token|auth(?:orization)?|client[_-]?secret|password|refresh[_-]?token|secret|token)\s*[:=]\s*[^\s,;]+/giu;
+export function sanitizeReleaseReport(report, options = {}) {
+    return {
+        schemaVersion: report.schemaVersion,
+        generatedAt: report.generatedAt,
+        command: sanitizeText(report.command, 128),
+        targetOrg: optionalText(report.targetOrg, 256),
+        analysisMode: report.analysisMode,
+        enrichment: {
+            status: report.enrichment.status,
+            warnings: sanitizeList(report.enrichment.warnings, 1000),
+        },
+        outcome: report.outcome,
+        summary: { ...report.summary },
+        phases: report.phases.map((phase) => sanitizePhase(phase, options)),
+        items: report.items.map((item) => sanitizeItem(item, options)),
+        reportWarnings: sanitizeList(report.reportWarnings, 1000) ?? [],
+    };
+}
+function sanitizePhase(phase, options) {
+    return {
+        id: phase.id,
+        route: phase.route,
+        operation: phase.operation,
+        status: phase.status,
+        evidence: phase.evidence?.map((entry) => sanitizeEvidence(entry, options)),
+        remediation: sanitizeList(phase.remediation, 1000),
+    };
+}
+function sanitizeItem(item, options) {
+    return {
+        phaseId: item.phaseId,
+        metadataType: sanitizeText(item.metadataType, 256),
+        fullName: sanitizeText(item.fullName, 512),
+        route: item.route,
+        operation: item.operation,
+        status: item.status,
+        targetOrg: optionalText(item.targetOrg, 256),
+        evidenceReferences: sanitizeReferences(item.evidenceReferences, options.projectRoot),
+        remediation: sanitizeList(item.remediation, 1000),
+    };
+}
+function sanitizeEvidence(evidence, options) {
+    return {
+        tool: evidence.tool,
+        operationId: sanitizeText(evidence.operationId, 256),
+        exitCode: Number.isSafeInteger(evidence.exitCode) ? evidence.exitCode : undefined,
+        deploymentId: optionalText(evidence.deploymentId, 256),
+        artifact: sanitizeReference(evidence.artifact, options.projectRoot),
+    };
+}
+function sanitizeReferences(references, projectRoot) {
+    if (!references)
+        return undefined;
+    const safe = references
+        .map((reference) => sanitizeReference(reference, projectRoot))
+        .filter((reference) => reference !== undefined);
+    return safe.length > 0 ? [...new Set(safe)].sort() : undefined;
+}
+function sanitizeReference(reference, projectRoot) {
+    if (!reference)
+        return undefined;
+    const clean = sanitizeText(reference, 1024);
+    const pathApi = isWindowsPath(clean) || (projectRoot ? isWindowsPath(projectRoot) : false) ? path.win32 : path;
+    const resolvedRoot = projectRoot ? pathApi.resolve(projectRoot) : undefined;
+    const candidate = pathApi.isAbsolute(clean) ? pathApi.resolve(clean) : pathApi.resolve(resolvedRoot ?? '.', clean);
+    if (pathApi.isAbsolute(clean)) {
+        if (!resolvedRoot)
+            return undefined;
+        const relative = pathApi.relative(resolvedRoot, candidate);
+        if (!isSafeRelativePath(relative, pathApi))
+            return undefined;
+        return normalizeReference(relative);
+    }
+    if (!isSafeRelativePath(clean, pathApi))
+        return undefined;
+    return normalizeReference(clean);
+}
+function isSafeRelativePath(reference, pathApi) {
+    return (reference.length > 0 &&
+        !pathApi.isAbsolute(reference) &&
+        reference !== '..' &&
+        !reference.startsWith('../') &&
+        !reference.startsWith('..\\'));
+}
+function isWindowsPath(reference) {
+    return /^[A-Za-z]:[\\/]/u.test(reference) || reference.startsWith('\\\\');
+}
+function normalizeReference(reference) {
+    return reference.replaceAll('\\', '/').split(path.sep).join('/');
+}
+function sanitizeList(values, maxLength) {
+    if (!values)
+        return undefined;
+    const safe = values.map((value) => sanitizeText(value, maxLength)).filter((value) => value.length > 0);
+    return safe.length > 0 ? [...new Set(safe)].sort() : undefined;
+}
+function optionalText(value, maxLength) {
+    if (value === undefined)
+        return undefined;
+    const safe = sanitizeText(value, maxLength);
+    return safe.length > 0 ? safe : undefined;
+}
+function sanitizeText(value, maxLength) {
+    const redacted = value
+        .replace(ANSI_SEQUENCE, '')
+        .replace(CONTROL_CHARACTER, '')
+        .replace(AUTH_URL, '[REDACTED]')
+        .replace(BEARER_TOKEN, 'Bearer [REDACTED]')
+        .replace(CREDENTIAL_ASSIGNMENT, '$1=[REDACTED]')
+        .replace(/\s+/gu, ' ')
+        .trim();
+    return redacted.length <= maxLength ? redacted : `${redacted.slice(0, maxLength - 3)}...`;
+}
+//# sourceMappingURL=release-report-sanitizer.js.map

package/lib/reports/release-report-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-report-sanitizer.js","sourceRoot":"","sources":["../../src/reports/release-report-sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,CAC9G,EAAE,CACH,6BAA6B,EAC9B,IAAI,CACL,CAAC;AACF,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAClC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAClG,EAAE,CACH,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAChH,IAAI,CACL,CAAC;AACF,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AAClD,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAC1D,MAAM,qBAAqB,GACzB,wHAAwH,CAAC;AAM3H,MAAM,UAAU,qBAAqB,CACnC,MAAuB,EACvB,UAAyC,EAAE;IAE3C,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;QAC1C,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE;YACV,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;YAChC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;SACzD;QACD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAqB,EAAE,OAAsC;IAClF,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1E,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,OAAsC;IAC/E,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC;QAClD,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC;QAC5C,kBAAkB,EAAE,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC;QACpF,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAkC,EAClC,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjF,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC;QACtD,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAgC,EAAE,WAA+B;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU;SACpB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA6B,EAAE,WAA+B;IACvF,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;IAEnH,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,OAA0B;IACvE,OAAO,CACL,SAAS,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC9B,SAAS,KAAK,IAAI;QAClB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B,EAAE,SAAiB;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvG,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,SAAiB;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,SAAiB;IACpD,MAAM,QAAQ,GAAG,KAAK;SACnB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC;SAC/B,OAAO,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC1C,OAAO,CAAC,qBAAqB,EAAE,eAAe,CAAC;SAC/C,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,OAAO,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;AAC5F,CAAC"}

package/lib/reports/release-report-service.d.ts

@@ -0,0 +1,43 @@
+import type { ReleaseReportFacts, ReleaseReportV1 } from '../types/release-report.js';
+import { type ReleaseReportSanitizerOptions } from './release-report-sanitizer.js';
+import { type ReleaseReportStoreOptions } from './release-report-store.js';
+export type UnderlyingOperationResult<T> = {
+    kind: 'succeeded';
+    value: T;
+} | {
+    kind: 'failed';
+    error: unknown;
+};
+export type ReleaseReportFailureStage = 'build' | 'sanitize' | 'serialize' | 'persist';
+export type ReleaseReportFinalization = {
+    kind: 'written';
+    report: ReleaseReportV1;
+    path: string;
+} | {
+    kind: 'unavailable';
+    stage: ReleaseReportFailureStage;
+    warning: string;
+    report?: ReleaseReportV1;
+};
+export type ReleaseReportServiceResult<T> = {
+    underlying: UnderlyingOperationResult<T>;
+    report: ReleaseReportFinalization;
+};
+export type ReleaseReportServiceOptions = ReleaseReportStoreOptions & ReleaseReportSanitizerOptions;
+export type ReleaseReportServiceDependencies = {
+    build: (facts: ReleaseReportFacts) => ReleaseReportV1;
+    sanitize: (report: ReleaseReportV1, options: ReleaseReportSanitizerOptions) => ReleaseReportV1;
+    serialize: (report: ReleaseReportV1) => string;
+    store: (serializedReport: string, options: ReleaseReportStoreOptions) => Promise<{
+        kind: 'written';
+        path: string;
+    } | {
+        kind: 'unavailable';
+        warning: string;
+    }>;
+};
+export declare class ReleaseReportService {
+    private readonly dependencies;
+    constructor(dependencies?: Partial<ReleaseReportServiceDependencies>);
+    finalize<T>(underlying: UnderlyingOperationResult<T>, facts: ReleaseReportFacts, options: ReleaseReportServiceOptions): Promise<ReleaseReportServiceResult<T>>;
+}

package/lib/reports/release-report-service.js

@@ -0,0 +1,80 @@
+import { ReleaseReportBuilder } from './release-report-builder.js';
+import { sanitizeReleaseReport } from './release-report-sanitizer.js';
+import { ReleaseReportStore } from './release-report-store.js';
+export class ReleaseReportService {
+    dependencies;
+    constructor(dependencies) {
+        const builder = new ReleaseReportBuilder();
+        const store = new ReleaseReportStore();
+        this.dependencies = {
+            build: (facts) => builder.build(facts),
+            sanitize: sanitizeReleaseReport,
+            serialize: serializeReleaseReport,
+            store: async (serializedReport, options) => store.write(serializedReport, options),
+            ...dependencies,
+        };
+    }
+    async finalize(underlying, facts, options) {
+        const built = attempt('build', () => this.dependencies.build(facts));
+        if (built.kind === 'unavailable')
+            return { underlying, report: built };
+        const sanitized = attempt('sanitize', () => this.dependencies.sanitize(built.report, options));
+        if (sanitized.kind === 'unavailable')
+            return { underlying, report: sanitized };
+        const serialized = attemptSerialization(() => this.dependencies.serialize(sanitized.report), sanitized.report);
+        if (serialized.kind === 'unavailable')
+            return { underlying, report: serialized };
+        try {
+            const persistence = await this.dependencies.store(serialized.content, options);
+            if (persistence.kind === 'unavailable') {
+                return {
+                    underlying,
+                    report: {
+                        kind: 'unavailable',
+                        stage: 'persist',
+                        warning: persistence.warning,
+                        report: sanitized.report,
+                    },
+                };
+            }
+            return {
+                underlying,
+                report: { kind: 'written', report: sanitized.report, path: persistence.path },
+            };
+        }
+        catch {
+            return {
+                underlying,
+                report: {
+                    kind: 'unavailable',
+                    stage: 'persist',
+                    warning: warningFor('persist'),
+                    report: sanitized.report,
+                },
+            };
+        }
+    }
+}
+function attempt(stage, operation) {
+    try {
+        return { kind: 'available', report: operation() };
+    }
+    catch {
+        return { kind: 'unavailable', stage, warning: warningFor(stage) };
+    }
+}
+function attemptSerialization(operation, report) {
+    try {
+        return { kind: 'serialized', content: operation() };
+    }
+    catch {
+        return { kind: 'unavailable', stage: 'serialize', warning: warningFor('serialize'), report };
+    }
+}
+function serializeReleaseReport(report) {
+    return `${JSON.stringify(report, null, 2)}\n`;
+}
+function warningFor(stage) {
+    return `Release report ${stage} is unavailable; the underlying operation result is unchanged.`;
+}
+//# sourceMappingURL=release-report-service.js.map

package/lib/reports/release-report-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-report-service.js","sourceRoot":"","sources":["../../src/reports/release-report-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAsC,MAAM,+BAA+B,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAkC,MAAM,2BAA2B,CAAC;AAgC/F,MAAM,OAAO,oBAAoB;IACd,YAAY,CAAmC;IAEhE,YAAmB,YAAwD;QACzE,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG;YAClB,KAAK,EAAE,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YACvD,QAAQ,EAAE,qBAAqB;YAC/B,SAAS,EAAE,sBAAsB;YACjC,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAA2C,EAAE,CAClF,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC;YACxC,GAAG,YAAY;SAChB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,UAAwC,EACxC,KAAyB,EACzB,OAAoC;QAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAEvE,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/F,IAAI,SAAS,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAE/E,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/G,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAEjF,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/E,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACvC,OAAO;oBACL,UAAU;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,WAAW,CAAC,OAAO;wBAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;qBACzB;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE;aAC9E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC;oBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,SAAS,OAAO,CACd,KAA2B,EAC3B,SAAgC;IAIhC,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAuB,EACvB,MAAuB;IAIvB,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAuB;IACrD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,KAAgC;IAClD,OAAO,kBAAkB,KAAK,gEAAgE,CAAC;AACjG,CAAC"}

package/lib/reports/release-report-store.d.ts

@@ -0,0 +1,30 @@
+export type ReleaseReportStoreResult = {
+    kind: 'written';
+    path: string;
+} | {
+    kind: 'unavailable';
+    warning: string;
+};
+export type ReleaseReportStoreOptions = {
+    projectRoot: string;
+    reportDir?: string;
+};
+type AtomicFileHandle = {
+    writeFile: (content: string, encoding: BufferEncoding) => Promise<void>;
+    sync: () => Promise<void>;
+    close: () => Promise<void>;
+};
+export type ReleaseReportFileSystem = {
+    mkdir: (directory: string) => Promise<void>;
+    openExclusive: (filePath: string) => Promise<AtomicFileHandle>;
+    rename: (source: string, destination: string) => Promise<void>;
+    unlink: (filePath: string) => Promise<void>;
+};
+export declare class ReleaseReportStore {
+    private readonly fileSystem;
+    private readonly temporaryPathFactory;
+    constructor(fileSystem?: ReleaseReportFileSystem, temporaryPathFactory?: (finalPath: string) => string);
+    resolvePath(options: ReleaseReportStoreOptions): string;
+    write(serializedReport: string, options: ReleaseReportStoreOptions): Promise<ReleaseReportStoreResult>;
+}
+export {};

package/lib/reports/release-report-store.js

@@ -0,0 +1,57 @@
+import { mkdir, open, rename, unlink } from 'node:fs/promises';
+import * as path from 'node:path';
+const DEFAULT_REPORT_DIRECTORY = '.smart-deployment/reports';
+const RELEASE_REPORT_FILE_NAME = 'release-report.json';
+let temporarySequence = 0;
+const NODE_FILE_SYSTEM = {
+    mkdir: async (directory) => mkdir(directory, { recursive: true }).then(() => undefined),
+    openExclusive: async (filePath) => open(filePath, 'wx'),
+    rename,
+    unlink,
+};
+export class ReleaseReportStore {
+    fileSystem;
+    temporaryPathFactory;
+    constructor(fileSystem = NODE_FILE_SYSTEM, temporaryPathFactory = defaultTemporaryPath) {
+        this.fileSystem = fileSystem;
+        this.temporaryPathFactory = temporaryPathFactory;
+    }
+    resolvePath(options) {
+        const directory = options.reportDir
+            ? path.resolve(options.projectRoot, options.reportDir)
+            : path.resolve(options.projectRoot, DEFAULT_REPORT_DIRECTORY);
+        return path.join(directory, RELEASE_REPORT_FILE_NAME);
+    }
+    async write(serializedReport, options) {
+        const finalPath = this.resolvePath(options);
+        const temporaryPath = this.temporaryPathFactory(finalPath);
+        let handle;
+        try {
+            await this.fileSystem.mkdir(path.dirname(finalPath));
+            handle = await this.fileSystem.openExclusive(temporaryPath);
+            await handle.writeFile(serializedReport, 'utf8');
+            await handle.sync();
+            await handle.close();
+            handle = undefined;
+            await this.fileSystem.rename(temporaryPath, finalPath);
+            return { kind: 'written', path: finalPath };
+        }
+        catch {
+            await closeBestEffort(handle);
+            await this.fileSystem.unlink(temporaryPath).catch(() => undefined);
+            return {
+                kind: 'unavailable',
+                warning: 'Release report persistence is unavailable; the underlying operation result is unchanged.',
+            };
+        }
+    }
+}
+async function closeBestEffort(handle) {
+    if (handle)
+        await handle.close().catch(() => undefined);
+}
+function defaultTemporaryPath(finalPath) {
+    temporarySequence += 1;
+    return `${finalPath}.${process.pid}.${temporarySequence}.tmp`;
+}
+//# sourceMappingURL=release-report-store.js.map

package/lib/reports/release-report-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-report-store.js","sourceRoot":"","sources":["../../src/reports/release-report-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,wBAAwB,GAAG,2BAA2B,CAAC;AAC7D,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAsBvD,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAE1B,MAAM,gBAAgB,GAA4B;IAChD,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;IACvF,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;IACvD,MAAM;IACN,MAAM;CACP,CAAC;AAEF,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,aAAsC,gBAAgB,EACtD,uBAAsD,oBAAoB;QAD1E,eAAU,GAAV,UAAU,CAA4C;QACtD,yBAAoB,GAApB,oBAAoB,CAAsD;IAC1F,CAAC;IAEG,WAAW,CAAC,OAAkC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,gBAAwB,EAAE,OAAkC;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,MAAoC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACrD,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YAC5D,MAAM,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,0FAA0F;aACpG,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,eAAe,CAAC,MAAoC;IACjE,IAAI,MAAM;QAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,iBAAiB,IAAI,CAAC,CAAC;IACvB,OAAO,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,iBAAiB,MAAM,CAAC;AAChE,CAAC"}

package/lib/reports/start-release-report-coordinator.d.ts

@@ -0,0 +1,15 @@
+import type { DeploymentContext } from '../deployment/deployment-context-service.js';
+import type { ReleaseReportPresenterIO } from '../presentation/release-report-presenter.js';
+import { ReleaseReportCommandAdapter, type ReleaseReportCommandOutput } from './release-report-command-adapter.js';
+export type StartReleaseReportOptions = {
+    targetOrg?: string;
+    dryRun: boolean;
+    validateOnly: boolean;
+    reportDir?: string;
+};
+export declare class StartReleaseReportCoordinator {
+    private readonly adapter;
+    constructor(adapter?: ReleaseReportCommandAdapter);
+    finalizeSuccess<T>(io: ReleaseReportPresenterIO, result: T, context: DeploymentContext, options: StartReleaseReportOptions): Promise<T & ReleaseReportCommandOutput>;
+    finalizeFailure(io: ReleaseReportPresenterIO, error: unknown, context: DeploymentContext, options: StartReleaseReportOptions): Promise<void>;
+}

package/lib/reports/start-release-report-coordinator.js

@@ -0,0 +1,23 @@
+import { ReleaseReportCommandAdapter } from './release-report-command-adapter.js';
+import { buildStartReportFacts } from './release-report-facts-factory.js';
+export class StartReleaseReportCoordinator {
+    adapter;
+    constructor(adapter = new ReleaseReportCommandAdapter()) {
+        this.adapter = adapter;
+    }
+    async finalizeSuccess(io, result, context, options) {
+        const releaseReport = await this.adapter.finalize(io, { kind: 'succeeded', value: result }, buildStartReportFacts(context, options), {
+            projectRoot: context.scanResult.projectRoot,
+            reportDir: options.reportDir,
+        });
+        return { ...result, ...releaseReport };
+    }
+    async finalizeFailure(io, error, context, options) {
+        const warning = error instanceof Error ? error.message : String(error);
+        await this.adapter.finalize(io, { kind: 'failed', error }, buildStartReportFacts(context, { ...options, failed: true, warning }), {
+            projectRoot: context.scanResult.projectRoot,
+            reportDir: options.reportDir,
+        });
+    }
+}
+//# sourceMappingURL=start-release-report-coordinator.js.map

package/lib/reports/start-release-report-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-release-report-coordinator.js","sourceRoot":"","sources":["../../src/reports/start-release-report-coordinator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAmC,MAAM,qCAAqC,CAAC;AACnH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAS1E,MAAM,OAAO,6BAA6B;IACJ;IAApC,YAAoC,UAAU,IAAI,2BAA2B,EAAE;QAA3C,YAAO,GAAP,OAAO,CAAoC;IAAG,CAAC;IAE5E,KAAK,CAAC,eAAe,CAC1B,EAA4B,EAC5B,MAAS,EACT,OAA0B,EAC1B,OAAkC;QAElC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAC/C,EAAE,EACF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EACpC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,EACvC;YACE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;YAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CACF,CAAC;QACF,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,EAA4B,EAC5B,KAAc,EACd,OAA0B,EAC1B,OAAkC;QAElC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CACzB,EAAE,EACF,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EACzB,qBAAqB,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACrE;YACE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;YAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CACF,CAAC;IACJ,CAAC;CACF"}

package/lib/services/metadata-scanner-service.js

@@ -13,7 +13,7 @@ import { DependencyGraphBuilder } from '../dependencies/dependency-graph-builder
 import { ForceIgnoreParser } from '../scanner/forceignore-parser.js';
 import { SfdxProjectDetector } from '../scanner/sfdx-project-detector.js';
 import { getLogger } from '../utils/logger.js';
-import { parseAiAuthoringBundleComponent, parseBotComponent, parseFlowComponent, parseGenAiPlannerBundleComponent, parseGenAiPromptComponent, } from './scanners/automation-ai-metadata-scanner.js';
+import { parseAiEvaluationDefinitionComponent, parseAiAuthoringBundleComponent, parseBotComponent, parseFlowComponent, parseGenAiPlannerBundleComponent, parseGenAiPromptComponent, } from './scanners/automation-ai-metadata-scanner.js';
 import { CODE_DIRECTORY_SCANNERS, CODE_FILE_SCANNERS } from './scanners/code-metadata-scanner.js';
 import { parseCustomMetadataComponents, parseCustomObjectComponent } from './scanners/data-metadata-scanner.js';
 import { parseEmailTemplateComponent, parseFlexiPageComponent, parseLayoutComponent, parseVisualforceComponent, } from './scanners/experience-metadata-scanner.js';
@@ -156,9 +156,16 @@ export class MetadataScannerService {
         const botComponents = await scanMetadataFiles(packagePath, '**/bots/**/*.bot-meta.xml', errors, 'Bot', this.shouldIgnorePath, parseBotComponent);
         const genAiPromptComponents = await scanMetadataFiles(packagePath, '**/genaiPromptTemplates/**/*.genAiPromptTemplate-meta.xml', errors, 'GenAI Prompt', this.shouldIgnorePath, parseGenAiPromptComponent);
         const aiAuthoringBundleComponents = await scanMetadataFiles(packagePath, '**/aiAuthoringBundles/**/*.agent', errors, 'AiAuthoringBundle', this.shouldIgnorePath, (filePath) => Promise.resolve(parseAiAuthoringBundleComponent(filePath)));
+        const aiEvaluationDefinitionComponents = (await scanMetadataFiles(packagePath, '**/aiEvaluationDefinitions/**/*.aiEvaluationDefinition-meta.xml', errors, 'AiEvaluationDefinition', this.shouldIgnorePath, parseAiEvaluationDefinitionComponent)).sort((left, right) => normalizePath(left.filePath).localeCompare(normalizePath(right.filePath)));
         const authoringBundleNames = new Set(aiAuthoringBundleComponents.map((component) => component.name));
         const genAiPlannerBundleComponents = (await scanMetadataDirectories(packagePath, '**/genAiPlannerBundles/*', errors, 'GenAiPlannerBundle', this.shouldIgnorePath, parseGenAiPlannerBundleComponent)).filter((component) => !authoringBundleNames.has(component.name));
-        return [...botComponents, ...genAiPromptComponents, ...aiAuthoringBundleComponents, ...genAiPlannerBundleComponents];
+        return [
+            ...botComponents,
+            ...genAiPromptComponents,
+            ...aiAuthoringBundleComponents,
+            ...aiEvaluationDefinitionComponents,
+            ...genAiPlannerBundleComponents,
+        ];
     }
     async scanAdditionalMetadata(packagePath, errors) {
         return scanAdditionalMetadata(packagePath, errors, this.shouldIgnorePath);
@@ -179,4 +186,7 @@ export class MetadataScannerService {
         return this.forceIgnoreParser.isIgnored(filePath);
     }
 }
+function normalizePath(filePath) {
+    return filePath.split(path.sep).join('/');
+}
 //# sourceMappingURL=metadata-scanner-service.js.map