@mergesignal/shared 0.2.2 → 0.2.3

package/dist/cardObservationCatalog.d.ts

@@ -0,0 +1,55 @@
+import type { DependencyGraphInsights, ExplainReason, Finding, Recommendation, ScoreLayer } from "./types.js";
+/**
+ * CATALOG_EXPANSION_CHECKLIST (G1):
+ * - Names a specific structural/topological concept (chains, paths, versions,
+ *   blast radius, hotspots, surface area, transitive volume)?
+ * - Would NOT apply to an arbitrary PR without graph/dependency context?
+ * - ≤48 chars, non-sentence fragment, no imperatives, no digits?
+ * - Maps from a distinct signal family (not a catch-all)?
+ * If any answer is no → do not add.
+ */
+export declare const CARD_OBSERVATION_MAX_LENGTH = 48;
+export declare const CARD_OBSERVATION_CATALOG: readonly ["Large upgrade blast radius", "High transitive dependency volume", "Broad package surface area", "Duplicate dependency versions detected", "Vulnerable transitive packages detected", "Stale ecosystem dependencies detected", "Transitive dependency hotspots detected", "Deep indirect dependency chains", "Overlapping dependency paths detected"];
+export type CatalogPhrase = (typeof CARD_OBSERVATION_CATALOG)[number];
+/** Signal family keys — one catalog phrase per family on a card. */
+export type ObservationSignalFamily = "blast_radius" | "transitive_volume" | "package_surface" | "duplicate_versions" | "vulnerable_transitive" | "stale_ecosystem" | "transitive_hotspots" | "indirect_chains" | "overlapping_paths";
+export declare const CARD_OBSERVATION_SIGNAL_FAMILIES: Record<ObservationSignalFamily, CatalogPhrase>;
+export declare function isCatalogPhrase(text: string): text is CatalogPhrase;
+export declare function containsTelemetryOrDigits(text: string): boolean;
+export declare function containsImperativeOrActionLanguage(text: string): boolean;
+export declare function isGenericObservation(text: string): boolean;
+export declare function isSentenceLike(text: string): boolean;
+export declare function enforceMaxLength(text: string, max?: number): boolean;
+export declare function phraseForFamily(family: ObservationSignalFamily): CatalogPhrase;
+export declare function matchSignalFamily(text: string): ObservationSignalFamily | null;
+export declare function mapTextToCatalogPhrase(text: string | null | undefined): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+export declare function mapRecommendationToCatalogPhrase(rec: Recommendation): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+export declare function mapExplainReasonToCatalogPhrase(reason: ExplainReason): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+export declare function mapFindingToCatalogPhrase(finding: Finding): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+export declare function mapContributionToCatalogPhrase(id: string): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+export declare function mapGraphInsightsToCatalogPhrases(gi: DependencyGraphInsights | null | undefined): Array<{
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+}>;
+export declare function mapLayerToCatalogPhrase(layer: ScoreLayer): {
+    phrase: CatalogPhrase;
+    family: ObservationSignalFamily;
+} | null;
+/** Validate catalog integrity at module load (tests also cover). */
+export declare function validateCatalogIntegrity(): void;
+//# sourceMappingURL=cardObservationCatalog.d.ts.map

package/dist/cardObservationCatalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cardObservationCatalog.d.ts","sourceRoot":"","sources":["../src/cardObservationCatalog.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,aAAa,EACb,OAAO,EACP,cAAc,EACd,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB;;;;;;;;GAQG;AAEH,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C,eAAO,MAAM,wBAAwB,iWAU3B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAC/B,cAAc,GACd,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,uBAAuB,GACvB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,GACjB,mBAAmB,CAAC;AAExB,eAAO,MAAM,gCAAgC,EAAE,MAAM,CACnD,uBAAuB,EACvB,aAAa,CAWd,CAAC;AAoIF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,aAAa,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,SAA8B,GAChC,OAAO,CAET;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,uBAAuB,GAC9B,aAAa,CAEf;AAYD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,GACX,uBAAuB,GAAG,IAAI,CAOhC;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAMnE;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,cAAc,GAClB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAGnE;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,aAAa,GACpB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAGnE;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,OAAO,GACf;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAuBnE;AAED,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,MAAM,GACT;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAEnE;AAED,wBAAgB,gCAAgC,CAC9C,EAAE,EAAE,uBAAuB,GAAG,IAAI,GAAG,SAAS,GAC7C,KAAK,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAgCnE;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,UAAU,GAChB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAUnE;AAED,oEAAoE;AACpE,wBAAgB,wBAAwB,IAAI,IAAI,CAe/C"}

package/dist/cardObservationCatalog.js

@@ -0,0 +1,320 @@
+import { humanizeEngineSurfaceText } from "./actionsStepSummary.js";
+/**
+ * CATALOG_EXPANSION_CHECKLIST (G1):
+ * - Names a specific structural/topological concept (chains, paths, versions,
+ *   blast radius, hotspots, surface area, transitive volume)?
+ * - Would NOT apply to an arbitrary PR without graph/dependency context?
+ * - ≤48 chars, non-sentence fragment, no imperatives, no digits?
+ * - Maps from a distinct signal family (not a catch-all)?
+ * If any answer is no → do not add.
+ */
+export const CARD_OBSERVATION_MAX_LENGTH = 48;
+export const CARD_OBSERVATION_CATALOG = [
+    "Large upgrade blast radius",
+    "High transitive dependency volume",
+    "Broad package surface area",
+    "Duplicate dependency versions detected",
+    "Vulnerable transitive packages detected",
+    "Stale ecosystem dependencies detected",
+    "Transitive dependency hotspots detected",
+    "Deep indirect dependency chains",
+    "Overlapping dependency paths detected",
+];
+export const CARD_OBSERVATION_SIGNAL_FAMILIES = {
+    blast_radius: "Large upgrade blast radius",
+    transitive_volume: "High transitive dependency volume",
+    package_surface: "Broad package surface area",
+    duplicate_versions: "Duplicate dependency versions detected",
+    vulnerable_transitive: "Vulnerable transitive packages detected",
+    stale_ecosystem: "Stale ecosystem dependencies detected",
+    transitive_hotspots: "Transitive dependency hotspots detected",
+    indirect_chains: "Deep indirect dependency chains",
+    overlapping_paths: "Overlapping dependency paths detected",
+};
+const IMPERATIVE_VERBS = /^(reduce|upgrade|review|consider|mitigate|minimize|minimise|avoid|improve|optimize|optimise|ensure|verify|audit|check|address|fix|resolve)\b/i;
+const GENERIC_OBSERVATION_PATTERNS = [
+    /\bruntime issue/i,
+    /\bdependency concern/i,
+    /\becosystem risk/i,
+    /\bmerge risk/i,
+    /\boperational review recommended/i,
+    /\boperational change detected/i,
+    /\bruntime-relevant dependency change/i,
+    /\blimited operational change/i,
+    /\bhigh-confidence merge risk/i,
+    /\bdependency change\b/i,
+    /\bpotential runtime impact/i,
+    /\bno merge blocker/i,
+];
+const TELEMETRY_PATTERNS = [
+    /\d/,
+    /\bgraph\./i,
+    /\bscoreimpact\b/i,
+    /\bfan[\s_-]?in\b/i,
+    /\bmax depth\b/i,
+    /\bnode count\b/i,
+    /\bthreshold\b/i,
+    /\bmaint-stale\b/i,
+    /\becosystem\.package\s*surface\b/i,
+];
+const SIGNAL_FAMILY_PATTERNS = [
+    {
+        family: "duplicate_versions",
+        patterns: [
+            /\bduplicat/i,
+            /\boverlapping dependency paths/i,
+            /\bsemver overlap/i,
+            /\bmultiple majors/i,
+            /\bgraph\.duplicates?\b/i,
+        ],
+    },
+    {
+        family: "vulnerable_transitive",
+        patterns: [
+            /\bvulnerab/i,
+            /\bosv\b/i,
+            /\badvisory\b/i,
+            /\bknown vulnerable packages/i,
+            /\bgraph\.vulnerable\b/i,
+            /\bsecurity_vulnerability\b/i,
+        ],
+    },
+    {
+        family: "stale_ecosystem",
+        patterns: [
+            /\bstale\b/i,
+            /\boutdated\b/i,
+            /\bdeprecated release/i,
+            /\bmaint-stale\b/i,
+            /\becosystem_registry\b/i,
+            /\bstale releases\b/i,
+        ],
+    },
+    {
+        family: "transitive_hotspots",
+        patterns: [
+            /\bhotspot/i,
+            /\bgraph\.hotspot\b/i,
+            /\bmany import paths converge/i,
+            /\bshared packages see many inbound/i,
+        ],
+    },
+    {
+        family: "indirect_chains",
+        patterns: [
+            /\bindirect dependency depth\b/i,
+            /\bdependency chain depth\b/i,
+            /\bgraph\.depth\b/i,
+            /\bgraph\.hidden\b/i,
+            /\bhidden transitive paths\b/i,
+            /\bdeepest resolved chain\b/i,
+            /\blong indirect/i,
+        ],
+    },
+    {
+        family: "transitive_volume",
+        patterns: [
+            /\btransitive dependency volume\b/i,
+            /\bgraph\.transitive\b/i,
+            /\btransitive volume\b/i,
+            /\btransitive churn\b/i,
+            /\bindirect dependencies\b/i,
+        ],
+    },
+    {
+        family: "package_surface",
+        patterns: [
+            /\bpackage surface\b/i,
+            /\bpackage footprint\b/i,
+            /\bbroad declared package\b/i,
+            /\becosystem\.package\s*surface\b/i,
+            /\bdeclared package footprint\b/i,
+            /\btransitive surface area\b/i,
+            /\bdependency surface area\b/i,
+            /\btransitive dependency surface\b/i,
+        ],
+    },
+    {
+        family: "blast_radius",
+        patterns: [
+            /\bblast radius\b/i,
+            /\bupgrade impact\b/i,
+            /\bbreaking change\b/i,
+            /\bmajor version\b/i,
+            /\bupgradeImpact\b/i,
+            /\blarge upgrade\b/i,
+        ],
+    },
+    {
+        family: "overlapping_paths",
+        patterns: [
+            /\boverlapping dependency paths to the same packages\b/i,
+            /\bmultiple paths to the same package\b/i,
+        ],
+    },
+];
+export function isCatalogPhrase(text) {
+    return CARD_OBSERVATION_CATALOG.includes(text);
+}
+export function containsTelemetryOrDigits(text) {
+    const t = text.trim();
+    if (!t)
+        return true;
+    return TELEMETRY_PATTERNS.some((re) => re.test(t));
+}
+export function containsImperativeOrActionLanguage(text) {
+    const t = text.trim();
+    if (!t)
+        return false;
+    return IMPERATIVE_VERBS.test(t);
+}
+export function isGenericObservation(text) {
+    const t = text.trim();
+    if (!t)
+        return true;
+    return GENERIC_OBSERVATION_PATTERNS.some((re) => re.test(t));
+}
+export function isSentenceLike(text) {
+    const t = text.trim();
+    if (!t)
+        return false;
+    if (/\.\s+\S/.test(t))
+        return true;
+    if (/\s—\s/.test(t))
+        return true;
+    if (/;\s/.test(t))
+        return true;
+    if (/\bbecause\b/i.test(t))
+        return true;
+    if (/\bwhich means\b/i.test(t))
+        return true;
+    if (/\bso that\b/i.test(t))
+        return true;
+    return false;
+}
+export function enforceMaxLength(text, max = CARD_OBSERVATION_MAX_LENGTH) {
+    return text.trim().length <= max;
+}
+export function phraseForFamily(family) {
+    return CARD_OBSERVATION_SIGNAL_FAMILIES[family];
+}
+function normalizeMatchText(...parts) {
+    return parts
+        .filter((p) => typeof p === "string" && p.trim().length > 0)
+        .map((p) => humanizeEngineSurfaceText(p))
+        .join(" ")
+        .replace(/\s+/g, " ")
+        .trim()
+        .toLowerCase();
+}
+export function matchSignalFamily(text) {
+    const normalized = normalizeMatchText(text);
+    if (!normalized)
+        return null;
+    for (const { family, patterns } of SIGNAL_FAMILY_PATTERNS) {
+        if (patterns.some((re) => re.test(normalized)))
+            return family;
+    }
+    return null;
+}
+export function mapTextToCatalogPhrase(text) {
+    if (!text?.trim())
+        return null;
+    const family = matchSignalFamily(text);
+    if (!family)
+        return null;
+    const phrase = phraseForFamily(family);
+    return { phrase, family };
+}
+export function mapRecommendationToCatalogPhrase(rec) {
+    const combined = `${rec.title} ${rec.rationale}`;
+    return mapTextToCatalogPhrase(combined);
+}
+export function mapExplainReasonToCatalogPhrase(reason) {
+    const combined = `${reason.id} ${reason.title} ${reason.layer}`;
+    return mapTextToCatalogPhrase(combined);
+}
+export function mapFindingToCatalogPhrase(finding) {
+    const categoryMap = {
+        security_vulnerability: "vulnerable_transitive",
+        ecosystem_registry: "stale_ecosystem",
+        breaking_change: "blast_radius",
+        major_version: "blast_radius",
+        deprecation: "stale_ecosystem",
+    };
+    const combined = `${finding.title} ${finding.description} ${finding.category ?? ""}`;
+    const fromText = mapTextToCatalogPhrase(combined);
+    if (fromText)
+        return fromText;
+    const fromCategory = finding.category
+        ? categoryMap[finding.category]
+        : undefined;
+    if (fromCategory) {
+        return { phrase: phraseForFamily(fromCategory), family: fromCategory };
+    }
+    return null;
+}
+export function mapContributionToCatalogPhrase(id) {
+    return mapTextToCatalogPhrase(id);
+}
+export function mapGraphInsightsToCatalogPhrases(gi) {
+    if (!gi || typeof gi !== "object")
+        return [];
+    const out = [];
+    const seen = new Set();
+    function add(family) {
+        if (seen.has(family))
+            return;
+        seen.add(family);
+        out.push({ phrase: phraseForFamily(family), family });
+    }
+    const vulnCount = Array.isArray(gi.vulnerable) ? gi.vulnerable.length : 0;
+    const hotspotCount = Array.isArray(gi.hotspots) ? gi.hotspots.length : 0;
+    const depth = typeof gi.maxDepth === "number" && Number.isFinite(gi.maxDepth)
+        ? gi.maxDepth
+        : null;
+    const nodes = typeof gi.nodes === "number" && Number.isFinite(gi.nodes) ? gi.nodes : 0;
+    if (vulnCount > 0)
+        add("vulnerable_transitive");
+    if (hotspotCount >= 4)
+        add("transitive_hotspots");
+    if (depth !== null && depth >= 8)
+        add("indirect_chains");
+    else if (depth !== null && depth >= 5)
+        add("indirect_chains");
+    if (nodes >= 1200)
+        add("transitive_volume");
+    else if (nodes >= 600 && out.length < 2)
+        add("transitive_volume");
+    return out;
+}
+export function mapLayerToCatalogPhrase(layer) {
+    const layerMap = {
+        upgradeImpact: "blast_radius",
+        ecosystem: "package_surface",
+        security: "vulnerable_transitive",
+        maintainability: "stale_ecosystem",
+    };
+    const family = layerMap[layer];
+    if (!family)
+        return null;
+    return { phrase: phraseForFamily(family), family };
+}
+/** Validate catalog integrity at module load (tests also cover). */
+export function validateCatalogIntegrity() {
+    for (const phrase of CARD_OBSERVATION_CATALOG) {
+        if (!enforceMaxLength(phrase)) {
+            throw new Error(`Catalog phrase exceeds max length: ${phrase}`);
+        }
+        if (containsTelemetryOrDigits(phrase)) {
+            throw new Error(`Catalog phrase contains telemetry/digits: ${phrase}`);
+        }
+        if (containsImperativeOrActionLanguage(phrase)) {
+            throw new Error(`Catalog phrase contains imperative: ${phrase}`);
+        }
+        if (isSentenceLike(phrase)) {
+            throw new Error(`Catalog phrase is sentence-like: ${phrase}`);
+        }
+    }
+}
+validateCatalogIntegrity();

package/dist/cardSummaryCopy.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Dashboard PR card copy — small fixed denylist (not an open-ended taxonomy).
+ * Detail pages and check runs may show fuller engine text.
+ */
+/** Reasoning/summary lines too generic for card display. */
+export declare const GENERIC_CARD_SUMMARY_PHRASES: readonly string[];
+/** Area labels that repeat across many PRs — prefer omit over show. */
+export declare const GENERIC_CARD_AREA_PHRASES: readonly string[];
+export declare const SAFE_LOW_FINDINGS_SUMMARY = "Minor findings only";
+/** @deprecated Card UI omits this; kept for denormalized comparison only. */
+export declare const LEGACY_SAFE_SUMMARY = "No merge blockers detected";
+//# sourceMappingURL=cardSummaryCopy.d.ts.map

package/dist/cardSummaryCopy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cardSummaryCopy.d.ts","sourceRoot":"","sources":["../src/cardSummaryCopy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4DAA4D;AAC5D,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAezD,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAUtD,CAAC;AAEF,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAE/D,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,+BAA+B,CAAC"}

package/dist/cardSummaryCopy.js

@@ -0,0 +1,36 @@
+/**
+ * Dashboard PR card copy — small fixed denylist (not an open-ended taxonomy).
+ * Detail pages and check runs may show fuller engine text.
+ */
+/** Reasoning/summary lines too generic for card display. */
+export const GENERIC_CARD_SUMMARY_PHRASES = [
+    "dependency change",
+    "high-confidence merge risk",
+    "high-confidence merge risks",
+    "no high-confidence merge risk",
+    "no high-confidence merge risks",
+    "from this pr dependency change",
+    "pr dependency change",
+    "potential runtime impact detected",
+    "potential runtime impact",
+    "merge risk from this pr",
+    "no merge blockers detected",
+    "analysis could not be completed",
+    "scan data unavailable",
+    "waiting for results",
+];
+/** Area labels that repeat across many PRs — prefer omit over show. */
+export const GENERIC_CARD_AREA_PHRASES = [
+    "auth flows",
+    "api handlers",
+    "api routes",
+    "critical paths",
+    "core services",
+    "security",
+    "maintainability",
+    "ecosystem",
+    "upgrade impact",
+];
+export const SAFE_LOW_FINDINGS_SUMMARY = "Minor findings only";
+/** @deprecated Card UI omits this; kept for denormalized comparison only. */
+export const LEGACY_SAFE_SUMMARY = "No merge blockers detected";

package/dist/deriveCardDisplaySummary.d.ts

@@ -0,0 +1,16 @@
+import type { FindingCountSummary } from "./scanCardSummary.js";
+import type { MergePosture } from "./riskVocabulary.js";
+/** True when summary text is too generic for dashboard cards. */
+export declare function isGenericCardSummary(text: string | null | undefined): boolean;
+export type DeriveCardDisplaySummaryInput = {
+    mergePosture: MergePosture | null;
+    rawSummary: string | null | undefined;
+    findingCounts: FindingCountSummary | null;
+    topAffectedAreas: string[];
+};
+/**
+ * Dashboard card summary line — operational, concise, posture-aware.
+ * Returns null for quiet safe cards (posture-only display).
+ */
+export declare function deriveCardDisplaySummary(input: DeriveCardDisplaySummaryInput): string | null;
+//# sourceMappingURL=deriveCardDisplaySummary.d.ts.map

package/dist/deriveCardDisplaySummary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveCardDisplaySummary.d.ts","sourceRoot":"","sources":["../src/deriveCardDisplaySummary.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAexD,iEAAiE;AACjE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO7E;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC,aAAa,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,6BAA6B,GACnC,MAAM,GAAG,IAAI,CA+Bf"}

package/dist/deriveCardDisplaySummary.js

@@ -0,0 +1,56 @@
+import { GENERIC_CARD_SUMMARY_PHRASES, LEGACY_SAFE_SUMMARY, SAFE_LOW_FINDINGS_SUMMARY, } from "./cardSummaryCopy.js";
+import { joinCardAreaLabels } from "./formatCardAreaLabels.js";
+import { truncateCardSummary } from "./truncateCardSummary.js";
+function hasActionableFindings(counts) {
+    return counts.critical + counts.high + counts.medium + counts.low > 0;
+}
+function hasOnlyLowFindings(counts) {
+    return (counts.low > 0 &&
+        counts.critical === 0 &&
+        counts.high === 0 &&
+        counts.medium === 0);
+}
+/** True when summary text is too generic for dashboard cards. */
+export function isGenericCardSummary(text) {
+    if (!text?.trim())
+        return true;
+    const normalized = text.trim().toLowerCase();
+    if (normalized.length < 12)
+        return true;
+    return GENERIC_CARD_SUMMARY_PHRASES.some((phrase) => normalized.includes(phrase));
+}
+/**
+ * Dashboard card summary line — operational, concise, posture-aware.
+ * Returns null for quiet safe cards (posture-only display).
+ */
+export function deriveCardDisplaySummary(input) {
+    const { mergePosture, rawSummary, findingCounts, topAffectedAreas } = input;
+    if (!mergePosture)
+        return rawSummary?.trim() || null;
+    const counts = findingCounts ?? {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+    };
+    if (mergePosture === "safe") {
+        if (!hasActionableFindings(counts)) {
+            const areasLine = joinCardAreaLabels(topAffectedAreas);
+            if (areasLine)
+                return truncateCardSummary(areasLine, 90);
+            return null;
+        }
+        if (hasOnlyLowFindings(counts))
+            return SAFE_LOW_FINDINGS_SUMMARY;
+    }
+    const raw = rawSummary?.trim() ?? null;
+    if (raw && raw !== LEGACY_SAFE_SUMMARY && !isGenericCardSummary(raw)) {
+        return truncateCardSummary(raw);
+    }
+    const areasLine = joinCardAreaLabels(topAffectedAreas);
+    if (areasLine)
+        return truncateCardSummary(areasLine, 90);
+    if (mergePosture === "safe")
+        return null;
+    return null;
+}

package/dist/deriveCardDisplaySummary.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deriveCardDisplaySummary.test.d.ts.map

package/dist/deriveCardDisplaySummary.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveCardDisplaySummary.test.d.ts","sourceRoot":"","sources":["../src/deriveCardDisplaySummary.test.ts"],"names":[],"mappings":""}

package/dist/deriveCardDisplaySummary.test.js

@@ -0,0 +1,89 @@
+import { describe, it, expect } from "vitest";
+import { deriveCardDisplaySummary, isGenericCardSummary, } from "./deriveCardDisplaySummary.js";
+import { truncateCardSummary } from "./truncateCardSummary.js";
+import { formatCardAreaLabels, joinCardAreaLabels, } from "./formatCardAreaLabels.js";
+import { formatCardEvidenceCounts } from "./formatCardEvidenceCounts.js";
+describe("isGenericCardSummary", () => {
+    it("flags platform boilerplate", () => {
+        expect(isGenericCardSummary("Potential runtime impact detected")).toBe(true);
+        expect(isGenericCardSummary("No high-confidence merge risk from dependency change")).toBe(true);
+        expect(isGenericCardSummary("No high-confidence merge risks from this PR dependency change")).toBe(true);
+    });
+    it("allows concrete operational copy", () => {
+        expect(isGenericCardSummary("This upgrade changes websocket reconnect timing in the API layer")).toBe(false);
+    });
+});
+describe("truncateCardSummary", () => {
+    it("truncates at sentence boundary when possible", () => {
+        const text = "First sentence is clear. Second sentence adds more detail that should be cut.";
+        const out = truncateCardSummary(text, 50);
+        expect(out).toBe("First sentence is clear.");
+    });
+    it("uses ellipsis at word boundary", () => {
+        const text = "This upgrade changes retry behavior in payment polling handlers";
+        const out = truncateCardSummary(text, 40);
+        expect(out.endsWith("…")).toBe(true);
+        expect(out.length).toBeLessThanOrEqual(43);
+    });
+});
+describe("formatCardAreaLabels", () => {
+    it("drops paths and generic taxonomy", () => {
+        expect(formatCardAreaLabels([
+            "packages/web/src/auth",
+            "Auth flows",
+            "Session refresh flow",
+        ])).toEqual(["Session refresh flow"]);
+    });
+    it("prefers longer specific labels", () => {
+        const out = formatCardAreaLabels(["API routes", "Payment retry handling"]);
+        expect(out[0]).toBe("Payment retry handling");
+    });
+});
+describe("deriveCardDisplaySummary", () => {
+    const emptyCounts = { critical: 0, high: 0, medium: 0, low: 0 };
+    it("returns null for quiet safe cards", () => {
+        expect(deriveCardDisplaySummary({
+            mergePosture: "safe",
+            rawSummary: "No merge blockers detected",
+            findingCounts: emptyCounts,
+            topAffectedAreas: [],
+        })).toBeNull();
+    });
+    it("surfaces affected areas on quiet safe cards when specific", () => {
+        expect(deriveCardDisplaySummary({
+            mergePosture: "safe",
+            rawSummary: "No high-confidence merge risks",
+            findingCounts: emptyCounts,
+            topAffectedAreas: ["Session refresh flow"],
+        })).toBe("Session refresh flow");
+    });
+    it("uses specific reasoning for risky", () => {
+        expect(deriveCardDisplaySummary({
+            mergePosture: "risky",
+            rawSummary: "Auth boundary change in session middleware",
+            findingCounts: { ...emptyCounts, high: 1 },
+            topAffectedAreas: [],
+        })).toBe("Auth boundary change in session middleware");
+    });
+    it("falls back to formatted areas when reasoning is generic", () => {
+        expect(deriveCardDisplaySummary({
+            mergePosture: "needs_review",
+            rawSummary: "Potential runtime impact detected",
+            findingCounts: emptyCounts,
+            topAffectedAreas: ["Payment retry handling", "Auth flows"],
+        })).toBe("Payment retry handling");
+    });
+});
+describe("formatCardEvidenceCounts", () => {
+    it("uses soft phrasing for risky critical", () => {
+        expect(formatCardEvidenceCounts({ critical: 2, high: 0, medium: 0, low: 0 }, "risky")).toBe("Critical findings present");
+    });
+    it("returns null for safe", () => {
+        expect(formatCardEvidenceCounts({ critical: 1, high: 1, medium: 0, low: 0 }, "safe")).toBeNull();
+    });
+});
+describe("joinCardAreaLabels", () => {
+    it("joins with middle dot", () => {
+        expect(joinCardAreaLabels(["Session refresh flow", "Checkout handlers"])).toBe("Session refresh flow · Checkout handlers");
+    });
+});

package/dist/deriveCardOperationalObservations.d.ts

@@ -0,0 +1,19 @@
+import { type CatalogPhrase } from "./cardObservationCatalog.js";
+import type { MergePosture } from "./riskVocabulary.js";
+import type { ScanResult } from "./types.js";
+export type CardOperationalObservations = {
+    operationalObservations: CatalogPhrase[];
+    supportingLine: string | null;
+};
+export type DeriveCardOperationalObservationsOptions = {
+    mergePosture: MergePosture | null;
+    /** Primary path: full ScanResult JSON present. Never emit posture fallbacks. */
+    hasFullResult?: boolean;
+    max?: number;
+};
+/**
+ * Derive 0–3 catalog-mapped operational observations for PR dashboard cards.
+ * Primary path: silence when no mappable signals (G2).
+ */
+export declare function deriveCardOperationalObservations(result: ScanResult | null | undefined, options: DeriveCardOperationalObservationsOptions): CardOperationalObservations;
+//# sourceMappingURL=deriveCardOperationalObservations.d.ts.map

package/dist/deriveCardOperationalObservations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveCardOperationalObservations.d.ts","sourceRoot":"","sources":["../src/deriveCardOperationalObservations.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,aAAa,EASnB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,2BAA2B,GAAG;IACxC,uBAAuB,EAAE,aAAa,EAAE,CAAC;IACzC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG;IACrD,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAiNF;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACrC,OAAO,EAAE,wCAAwC,GAChD,2BAA2B,CA4B7B"}