@mergesignal/shared 0.12.0 → 0.12.2

package/dist/deriveScanNarrative.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deriveScanNarrative.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.ts"],"names":[],"mappings":"AAYA,OAAO,EAgBL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAMV,UAAU,EACX,MAAM,YAAY,CAAC;AAoiBpB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CAsIpB"}
+{"version":3,"file":"deriveScanNarrative.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.ts"],"names":[],"mappings":"AAYA,OAAO,EAgBL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAMV,UAAU,EACX,MAAM,YAAY,CAAC;AAwiBpB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CAsIpB"}

package/dist/deriveScanNarrative.js

@@ -304,6 +304,10 @@ function guidanceFromRecommendation(rec) {
         remediation: rec.impact,
     };
 }
+/**
+ * Legacy insight/finding/recommendation synthesis for narrative availability tiers.
+ * Not presentation authority — shared surfaces use assessment expression fields instead.
+ */
 function collectReviewerGuidance(result) {
     const guidance = [];
     const insights = Array.isArray(result.insights) ? result.insights : [];

package/dist/formatInsight.d.ts

@@ -1,11 +1,11 @@
-import type { PRInsight, PRDecision, PRDecisionRecommendation } from "./types.js";
-export type FormattedInsight = {
+import type { PRInsight, PRDecision } from "./types.js";
+type FormattedInsight = {
     message: string;
     where: string;
     action: string;
 };
-export declare function decisionTitle(recommendation: PRDecisionRecommendation): string;
 export declare function formatInsight(insight: PRInsight): FormattedInsight;
 /** Legacy markdown renderer for raw PR insights (format-only; no bundle inference). */
 export declare function renderInsightsAsMarkdown(insights: PRInsight[], decision: PRDecision): string;
+export {};
 //# sourceMappingURL=formatInsight.d.ts.map

package/dist/formatInsight.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatInsight.d.ts","sourceRoot":"","sources":["../src/formatInsight.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AASF,wBAAgB,aAAa,CAC3B,cAAc,EAAE,wBAAwB,GACvC,MAAM,CAER;AAgBD,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,GAAG,gBAAgB,CAMlE;AA+BD,uFAAuF;AACvF,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,EAAE,EACrB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAUR"}
+{"version":3,"file":"formatInsight.d.ts","sourceRoot":"","sources":["../src/formatInsight.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxD,KAAK,gBAAgB,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAgBF,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,GAAG,gBAAgB,CAMlE;AA+BD,uFAAuF;AACvF,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,EAAE,EACrB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAUR"}

package/dist/formatInsight.js

@@ -1,13 +1,4 @@
 import { MERGE_POSTURE_LABEL } from "./riskVocabulary.js";
-const DECISION_TITLES = {
-    safe: "No significant dependency risks detected",
-    needs_review: "Elevated dependency merge risk",
-    risky: "Merge blocked - critical dependency risk",
-};
-// Title rendered once per PR comment, not per insight
-export function decisionTitle(recommendation) {
-    return DECISION_TITLES[recommendation];
-}
 /**
  * Normalizes typographic punctuation to ASCII equivalents so that LLM output
  * renders consistently across PR comments, the web UI, and CLI output.

package/dist/index.d.ts

@@ -1,11 +1,9 @@
 export * from "./types.js";
 export * from "./assessmentLabels.js";
 export * from "./assessmentProjection.js";
-export * from "./formatInsight.js";
 export * from "./riskVocabulary.js";
 export * from "./selectTopAffectedAreas.js";
 export * from "./cardSummaryCopy.js";
-export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
 export * from "./prRiskBand.js";
 export * from "./prRiskWire.js";
@@ -20,7 +18,6 @@ export * from "./extractRepositoryContextFacts.js";
 export * from "./narrativePresentation.js";
 export * from "./normalizeGeneratedText.js";
 export { presentGitHubPrCommentMarkdownFromResult } from "./presentGitHubPrComment.js";
-export * from "./scanDetailViewModelTypes.js";
 export * from "./scanCardPresentationState.js";
 export * from "./scanResultSchema.js";
 export * from "./scanSurfaceCopy.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -1,11 +1,9 @@
 export * from "./types.js";
 export * from "./assessmentLabels.js";
 export * from "./assessmentProjection.js";
-export * from "./formatInsight.js";
 export * from "./riskVocabulary.js";
 export * from "./selectTopAffectedAreas.js";
 export * from "./cardSummaryCopy.js";
-export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
 export * from "./prRiskBand.js";
 export * from "./prRiskWire.js";
@@ -20,7 +18,6 @@ export * from "./extractRepositoryContextFacts.js";
 export * from "./narrativePresentation.js";
 export * from "./normalizeGeneratedText.js";
 export { presentGitHubPrCommentMarkdownFromResult } from "./presentGitHubPrComment.js";
-export * from "./scanDetailViewModelTypes.js";
 export * from "./scanCardPresentationState.js";
 export * from "./scanResultSchema.js";
 export * from "./scanSurfaceCopy.js";

package/dist/prRiskBand.d.ts

@@ -1,3 +1,4 @@
+import type { ScanNarrativeFacts } from "./scanNarrativeFacts.js";
 /**
  * Canonical PR Risk band contract — sole authority for PR Risk band derivation.
  * Independent from legacy exposure presentation and merge verdict (`assessment.posture`).
@@ -18,6 +19,12 @@ export declare function scoreToBandLabel(score: number | null | undefined): stri
 export declare function prRiskBandLabel(band: PrRiskBand): string;
 /** Fragment for composite aria labels on PR surfaces. */
 export declare function prRiskBandAriaFragment(score: number | null | undefined): string | null;
+export type PrRiskSummary = {
+    prRiskScore: number;
+    prRiskBandLabel: string;
+};
+/** Format PR Risk score + band from narrative facts (not assessment projection). */
+export declare function formatPrRiskSummary(facts: Pick<ScanNarrativeFacts, "riskSignals" | "riskIndex">): PrRiskSummary | undefined;
 /** Project 5-band PR Risk to 3-bucket scan-detail gauge band. */
 export declare function prRiskBandToGaugeBand(band: PrRiskBand): PrRiskGaugeBand;
 //# sourceMappingURL=prRiskBand.d.ts.map

package/dist/prRiskBand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prRiskBand.d.ts","sourceRoot":"","sources":["../src/prRiskBand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,gBAAgB,EAAG,GAAY,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,gCAAiC,CAAC;AAEtE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAU7E,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAMhD,CAAC;AAUF,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;AAO1D,wDAAwD;AACxD,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,UAAU,GAAG,IAAI,CAKnB;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAGf;AAED,yCAAyC;AACzC,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAExD;AAED,yDAAyD;AACzD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAIf;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAIvE"}
+{"version":3,"file":"prRiskBand.d.ts","sourceRoot":"","sources":["../src/prRiskBand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;;GAGG;AAEH,eAAO,MAAM,gBAAgB,EAAG,GAAY,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,gCAAiC,CAAC;AAEtE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAU7E,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAMhD,CAAC;AAUF,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;AAO1D,wDAAwD;AACxD,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,UAAU,GAAG,IAAI,CAKnB;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAGf;AAED,yCAAyC;AACzC,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAExD;AAED,yDAAyD;AACzD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAIf;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,oFAAoF;AACpF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,GAAG,WAAW,CAAC,GAC3D,aAAa,GAAG,SAAS,CAW3B;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAIvE"}

package/dist/prRiskBand.js

@@ -56,6 +56,18 @@ export function prRiskBandAriaFragment(score) {
         return null;
     return `PR Risk: ${label}`;
 }
+/** Format PR Risk score + band from narrative facts (not assessment projection). */
+export function formatPrRiskSummary(facts) {
+    const prRiskScore = facts.riskSignals?.riskIndex;
+    if (prRiskScore == null || !Number.isFinite(prRiskScore))
+        return undefined;
+    const prRiskBandLabelText = facts.riskSignals?.band != null
+        ? prRiskBandLabel(facts.riskSignals.band)
+        : scoreToBandLabel(prRiskScore);
+    if (!prRiskBandLabelText)
+        return undefined;
+    return { prRiskScore, prRiskBandLabel: prRiskBandLabelText };
+}
 /** Project 5-band PR Risk to 3-bucket scan-detail gauge band. */
 export function prRiskBandToGaugeBand(band) {
     if (band === "critical" || band === "high")

package/dist/prRiskBand.test.js

@@ -1,5 +1,5 @@
 import { describe, expect, it } from "vitest";
-import { PR_RISK_BAND_ABI, PR_RISK_BAND_THRESHOLDS, prRiskBandAriaFragment, prRiskBandLabel, prRiskBandToGaugeBand, scoreToBand, scoreToBandLabel, } from "./prRiskBand.js";
+import { PR_RISK_BAND_ABI, PR_RISK_BAND_THRESHOLDS, formatPrRiskSummary, prRiskBandAriaFragment, prRiskBandLabel, prRiskBandToGaugeBand, scoreToBand, scoreToBandLabel, } from "./prRiskBand.js";
 describe("PR_RISK_BAND_ABI", () => {
     it("is stable v1", () => {
         expect(PR_RISK_BAND_ABI).toBe("1");
@@ -46,6 +46,17 @@ describe("prRiskBandAriaFragment", () => {
         expect(prRiskBandAriaFragment(55)).toBe("PR Risk: Medium");
     });
 });
+describe("formatPrRiskSummary", () => {
+    it("returns score and band label from riskSignals", () => {
+        expect(formatPrRiskSummary({
+            riskSignals: { riskIndex: 55, band: "medium", layers: [] },
+            riskIndex: 55,
+        })).toEqual({ prRiskScore: 55, prRiskBandLabel: "Medium" });
+    });
+    it("returns undefined when risk index is missing", () => {
+        expect(formatPrRiskSummary({ riskSignals: null, riskIndex: null })).toBeUndefined();
+    });
+});
 describe("prRiskBandToGaugeBand", () => {
     it("projects to three gauge buckets", () => {
         expect(prRiskBandToGaugeBand("very_low")).toBe("low");

package/dist/presentation/abi3Expression.test.js

@@ -13,6 +13,7 @@ import { describe, expect, it } from "vitest";
 import { minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "../fixtures/assessmentScopeFixtures.js";
 import { projectReasoningLines, projectVerificationActions, } from "../assessmentProjection.js";
 import { toPublicPresentation } from "../assessmentPresentationUtils.js";
+import { projectAssessmentFields } from "./projectAssessmentFields.js";
 import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
 import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
 import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
@@ -190,6 +191,51 @@ describe("projectVerificationActions — ABI 3 guidance", () => {
     });
 });
 // ---------------------------------------------------------------------------
+// projectAssessmentFields — ABI 3 expression projection
+// ---------------------------------------------------------------------------
+describe("projectAssessmentFields — ABI 3 expression", () => {
+    it("projects confidenceRationale and electionSummary from assessment", () => {
+        const result = scanResultWithAssessment(assessmentExpressAbi3);
+        const bundle = buildScanPresentationBundle({
+            result,
+            pipelineStatus: "done",
+        });
+        const fields = projectAssessmentFields(bundle);
+        expect(fields.confidenceRationale).toBe("Confidence is high: propagation from express to application entry points was directly observed.");
+        expect(fields.electionSummary).toBe(expressElectionSummary);
+        expect(fields.reasoning).toEqual(expressReasoning);
+    });
+    it("omits empty confidenceRationale and electionSummary after trim", () => {
+        const assessment = {
+            ...assessmentExpressAbi3,
+            confidenceRationale: "   ",
+            reviewFocalPoint: {
+                ...assessmentExpressAbi3.reviewFocalPoint,
+                electionSummary: "",
+            },
+        };
+        const result = scanResultWithAssessment(assessment);
+        const bundle = buildScanPresentationBundle({
+            result,
+            pipelineStatus: "done",
+        });
+        const fields = projectAssessmentFields(bundle);
+        expect(fields.confidenceRationale).toBeUndefined();
+        expect(fields.electionSummary).toBeUndefined();
+    });
+    it("projects reasoning when assessment has concerns", () => {
+        const result = scanResultWithAssessment(assessmentExpressAbi3);
+        const bundle = buildScanPresentationBundle({
+            result,
+            pipelineStatus: "done",
+        });
+        const fields = projectAssessmentFields(bundle);
+        expect(assessmentExpressAbi3.concerns.length).toBeGreaterThan(0);
+        expect(fields.reasoning.length).toBeGreaterThan(0);
+        expect(fields.reasoning).toEqual(expressReasoning);
+    });
+});
+// ---------------------------------------------------------------------------
 // PR comment — electionSummary and reasoning
 // ---------------------------------------------------------------------------
 describe("presentGitHubPrComment — ABI 3 expression", () => {

package/dist/presentation/bundleAccessorParity.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * V1 public bundle transport — ScanPresentationBundle vs contracts extractor.
+ *
+ * Engine OutcomePresentationBundle uses the same `extractAuthoredCommunication()`
+ * from `@mergesignal/contracts`; engine-side accessor transport is covered in
+ * mergesignal-engine `packages/worker/src/outcome-presentation.test.ts`.
+ */
+export {};
+//# sourceMappingURL=bundleAccessorParity.test.d.ts.map

package/dist/presentation/bundleAccessorParity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleAccessorParity.test.d.ts","sourceRoot":"","sources":["../../src/presentation/bundleAccessorParity.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/presentation/bundleAccessorParity.test.js

@@ -0,0 +1,126 @@
+/**
+ * V1 public bundle transport — ScanPresentationBundle vs contracts extractor.
+ *
+ * Engine OutcomePresentationBundle uses the same `extractAuthoredCommunication()`
+ * from `@mergesignal/contracts`; engine-side accessor transport is covered in
+ * mergesignal-engine `packages/worker/src/outcome-presentation.test.ts`.
+ */
+import { extractAuthoredCommunication, parseAssessmentOrThrow, } from "@mergesignal/contracts";
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+function scanResultWith(assessment) {
+    return {
+        totalScore: 70,
+        layerScores: {
+            security: 70,
+            maintainability: 70,
+            ecosystem: 70,
+            upgradeImpact: 70,
+        },
+        findings: [],
+        generatedAt: "2026-01-01T00:00:00Z",
+        changedPackages: assessment.reviewFocalPoint.anchors,
+        methodologyVersion: "mergesignal-engine/test",
+        assessment,
+        decision: {
+            recommendation: "needs_review",
+            confidence: "medium",
+            reasoning: [],
+        },
+        insights: [],
+    };
+}
+function baseAssessment() {
+    return {
+        reviewFocalPoint: {
+            episodeShape: "single_anchor",
+            anchors: ["pkg-a"],
+            election: { grounding: [], exclusions: [] },
+        },
+        reachScope: { packages: ["pkg-a"], maxBucket: "moderate" },
+        verificationScope: { packages: ["pkg-a"], focus: [] },
+        posture: "needs_review",
+        confidence: "medium",
+        primaryConcern: null,
+        concerns: [],
+        factors: [],
+        changeClasses: [],
+        presentation: {
+            narrativeIntensity: "standard",
+            reachVisibility: "contextual",
+            verificationIntensity: "advisory",
+            insightEmissionFloor: "full",
+            reportMode: "high_signal_pr",
+        },
+        reasoning: [],
+        confidenceRationale: "Confidence is medium.",
+    };
+}
+function pickAccessors(bundle) {
+    return {
+        trustLine: bundle.trustLine,
+        whyThisPackageLine: bundle.whyThisPackageLine,
+        notAffectedLine: bundle.notAffectedLine,
+        resolutionLine: bundle.resolutionLine,
+        reasoningLines: [...bundle.reasoningLines],
+        guidanceLines: [...bundle.guidanceLines],
+        concernContextLines: [...bundle.concernContextLines],
+    };
+}
+function assertPublicBundleMatchesContractsExtractor(assessment, label) {
+    const normalized = parseAssessmentOrThrow(assessment);
+    const expected = extractAuthoredCommunication(normalized);
+    const publicBundle = buildScanPresentationBundle({
+        result: scanResultWith(assessment),
+        pipelineStatus: "done",
+    });
+    expect(publicBundle, `${label}: public bundle`).not.toBeNull();
+    expect(pickAccessors(publicBundle), label).toEqual(pickAccessors(expected));
+}
+describe("V1 bundle transport: public bundle matches contracts extractor", () => {
+    it("cleared: identical AuthoredCommunicationAccessors", () => {
+        assertPublicBundleMatchesContractsExtractor({
+            ...baseAssessment(),
+            outcome: "cleared",
+            reasoning: ["Peer dependency constraints verified."],
+            notAffectedLine: "No repository code paths are affected by export compatibility — this dimension is outside the review scope.",
+            reviewFocalPoint: {
+                ...baseAssessment().reviewFocalPoint,
+                electionSummary: "`pkg-a` was selected as the primary review anchor because it has the highest repository reach.",
+            },
+        }, "cleared");
+    });
+    it("bounded_verify: identical AuthoredCommunicationAccessors", () => {
+        assertPublicBundleMatchesContractsExtractor({
+            ...baseAssessment(),
+            outcome: "bounded_verify",
+            reasoning: ["Automation stopped before all dimensions were verified."],
+            verificationScope: {
+                packages: ["pkg-a"],
+                focus: [],
+                guidance: ["Verify route handler at `src/server.ts:42`."],
+            },
+            resolutionLine: "A passing automated verification for this dimension would make this deterministic.",
+            concerns: [
+                {
+                    kind: "confirmed_runtime_usage",
+                    rank: 1,
+                    packages: ["pkg-a"],
+                    evidenceRefs: [],
+                    context: "Runtime usage: `pkg-a` — used in 3 files.",
+                },
+            ],
+        }, "bounded_verify");
+    });
+    it("abstain: identical AuthoredCommunicationAccessors", () => {
+        assertPublicBundleMatchesContractsExtractor({
+            ...baseAssessment(),
+            outcome: "abstain",
+            reasoning: [
+                "Cannot verify `pkg-a`: package artifacts are not publicly accessible.",
+            ],
+            resolutionLine: "Granting access to `pkg-a` artifacts or publishing them would allow deterministic verification.",
+            abstainReasons: [{ kind: "private_package", packageName: "pkg-a" }],
+        }, "abstain");
+    });
+});

package/dist/presentation/cliParity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cliParity.test.d.ts.map

package/dist/presentation/cliParity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliParity.test.d.ts","sourceRoot":"","sources":["../../src/presentation/cliParity.test.ts"],"names":[],"mappings":""}

package/dist/presentation/cliParity.test.js

@@ -0,0 +1,49 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentCliScanSummary } from "./presenters/presentCliScanSummary.js";
+import { presentDashboardCard } from "./presenters/presentDashboardCard.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+import { presentScanDetails } from "./presenters/presentScanDetails.js";
+import { projectAssessmentFields } from "./projectAssessmentFields.js";
+import { scanResultBullmq, scanResultEslint, scanResultFastifyRuntime, scanResultMixedTypescriptFastify, scanResultPrettier, scanResultTypescriptPatch, scanResultVitest, } from "./fixtures/presentationPersonaFixtures.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const ORIGIN = "https://app.example.com";
+const validationPersonas = [
+    { name: "mixed-ts-fastify", result: scanResultMixedTypescriptFastify },
+    { name: "fastify-runtime", result: scanResultFastifyRuntime },
+    { name: "typescript-patch", result: scanResultTypescriptPatch },
+    { name: "prettier", result: scanResultPrettier },
+    { name: "bullmq", result: scanResultBullmq },
+    { name: "eslint", result: scanResultEslint },
+    { name: "vitest", result: scanResultVitest },
+];
+describe("cliParity guardrail", () => {
+    for (const persona of validationPersonas) {
+        it(`${persona.name}: CLI shares assessment fields with other surfaces`, () => {
+            const bundle = buildScanPresentationBundle({
+                result: persona.result,
+                pipelineStatus: "done",
+            });
+            const fields = projectAssessmentFields(bundle);
+            const cli = presentCliScanSummary(bundle, { repoLabel: "acme/api" });
+            const card = presentDashboardCard(bundle);
+            const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+            const check = presentGitHubCheckRun(bundle, {
+                scanId: SCAN_ID,
+                webAppOrigin: ORIGIN,
+            });
+            const comment = presentGitHubPrComment(bundle);
+            expect(cli.posture).toBe(fields.posture);
+            expect(cli.reasoning).toEqual(fields.reasoning);
+            expect(cli.verificationChannel).toBe(fields.verificationChannel);
+            expect(cli.verificationFocus).toEqual(fields.verificationFocus);
+            expect(cli.confidenceRationale).toBe(fields.confidenceRationale);
+            expect(cli.electionSummary).toBe(fields.electionSummary);
+            expect(cli.reasoning).toEqual(card.reasoning);
+            expect(cli.reasoning).toEqual(details.reasoning);
+            expect(cli.reasoning).toEqual(check.reasoning);
+            expect(cli.reasoning).toEqual(comment.reasoning);
+        });
+    }
+});

package/dist/presentation/compose/narrativeCompose.d.ts

@@ -5,10 +5,6 @@ export declare function composeSubheadline(bundle: ScanPresentationBundle): stri
 export declare function composeKeyPoints(bundle: ScanPresentationBundle, max: number): string[];
 export declare function composeVerificationActions(bundle: ScanPresentationBundle, max: number): string[];
 export declare function composeAffectedAreaLabels(bundle: ScanPresentationBundle, max: number): string[];
-export declare function composeEvidenceRows(bundle: ScanPresentationBundle, max: number): Array<{
-    label: string;
-    value: string;
-}>;
 export declare function composeSupportingContext(bundle: ScanPresentationBundle): string[] | undefined;
 export declare function evidenceContextFromProfile(bundle: ScanPresentationBundle): {
     priority: "pr_intelligence" | "limited";

package/dist/presentation/compose/narrativeCompose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"narrativeCompose.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeCompose.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAMzF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAShC,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAEtE;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAQV;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBzC;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,EAAE,GAAG,SAAS,CAwBtB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG;IAC1E,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAKA"}
+{"version":3,"file":"narrativeCompose.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeCompose.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAMzF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAShC,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAEtE;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAQV;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,EAAE,GAAG,SAAS,CAwBtB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG;IAC1E,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAKA"}

package/dist/presentation/compose/narrativeCompose.js

@@ -1,5 +1,4 @@
 import { formatCardAreaLabels } from "../../formatCardAreaLabels.js";
-import { formatChangedPackagesShort, labelBlastRadiusLevel, labelReachabilityKind, labelRuntimeSurface, } from "../../narrativePresentation.js";
 import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
 import { buildNarrativeChannels, projectCompactKeyPoints, } from "./narrativeChannels.js";
 export { buildNarrativeChannels, projectCompactKeyPoints, } from "./narrativeChannels.js";
@@ -36,25 +35,6 @@ export function composeAffectedAreaLabels(bundle, max) {
     }
     return labels;
 }
-export function composeEvidenceRows(bundle, max) {
-    const { facts, profile } = bundle;
-    const rows = [];
-    if (!profile.interpretation.suppressRuntimeNarrative) {
-        const runtime = labelRuntimeSurface(facts);
-        if (runtime)
-            rows.push({ label: "Runtime", value: runtime });
-        const reach = labelReachabilityKind(facts);
-        if (reach)
-            rows.push({ label: "Reachability", value: reach });
-    }
-    const blast = labelBlastRadiusLevel(facts);
-    if (blast)
-        rows.push({ label: "Blast radius", value: blast });
-    const changed = formatChangedPackagesShort(facts, 3);
-    if (changed)
-        rows.push({ label: "Changed", value: changed });
-    return rows.slice(0, max);
-}
 export function composeSupportingContext(bundle) {
     const { facts, profile, result } = bundle;
     if (profile.density === "minimal")

package/dist/presentation/decisionSurface.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decisionSurface.test.d.ts.map

package/dist/presentation/decisionSurface.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionSurface.test.d.ts","sourceRoot":"","sources":["../../src/presentation/decisionSurface.test.ts"],"names":[],"mappings":""}