@mergesignal/shared 0.2.5 → 0.2.7

package/dist/deriveScanNarrative.d.ts

@@ -0,0 +1,10 @@
+import { normalizeReachabilityKind, normalizeRuntimeSurfaceKind } from "./repoIntelligenceSchema.js";
+import { type ScanNarrativeFacts } from "./scanNarrativeFacts.js";
+import type { ScanResult } from "./types.js";
+/**
+ * Consumer-agnostic scan intelligence — structured facts only (no UI copy).
+ */
+export declare function deriveScanNarrative(result: ScanResult | null | undefined): ScanNarrativeFacts;
+/** @internal Test helper — normalize loose engine strings. */
+export { normalizeReachabilityKind, normalizeRuntimeSurfaceKind };
+//# sourceMappingURL=deriveScanNarrative.d.ts.map

package/dist/deriveScanNarrative.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveScanNarrative.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAM5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAQL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAIV,UAAU,EACX,MAAM,YAAY,CAAC;AAqPpB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CA8GpB;AAED,8DAA8D;AAC9D,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/deriveScanNarrative.js

@@ -0,0 +1,267 @@
+import { extractRepositoryContextFacts } from "./extractRepositoryContextFacts.js";
+import { normalizeReachabilityKind, normalizeRuntimeSurfaceKind, parseRepoIntelligence, readBlastLevel, readReachabilityFromLoose, readSurfaceFromLoose, } from "./repoIntelligenceSchema.js";
+import { EMPTY_SCAN_NARRATIVE_FACTS, } from "./scanNarrativeFacts.js";
+import { mergePostureFromDecision } from "./riskVocabulary.js";
+import { selectTopAffectedAreas } from "./selectTopAffectedAreas.js";
+function parseChangedPackages(changed) {
+    const all = Array.isArray(changed)
+        ? changed.map((p) => p.trim()).filter(Boolean)
+        : [];
+    return {
+        primary: all[0] ?? null,
+        others: all.slice(1),
+        all,
+    };
+}
+function blastLevelFromChangedCount(count) {
+    if (count >= 8)
+        return "wide";
+    if (count >= 3)
+        return "moderate";
+    return "narrow";
+}
+function extractTier1FromRepoIntelligence(ri, changed) {
+    const primary = changed.primary;
+    const pkgIntel = primary && ri.packages?.[primary] ? ri.packages[primary] : undefined;
+    const runtimeRaw = pkgIntel?.runtimeSurface ?? ri.runtimeSurface ?? undefined;
+    const reachRaw = pkgIntel?.reachability ?? ri.reachability ?? undefined;
+    const runtimeKind = readSurfaceFromLoose(runtimeRaw) ?? (primary ? "unknown" : null);
+    const reachKind = readReachabilityFromLoose(reachRaw);
+    const usageEntry = pkgIntel?.usage ??
+        pkgIntel?.packageUsage ??
+        ri.packageUsage?.find((u) => (u.packageName ?? u.package) === primary ||
+            changed.all.includes(u.packageName ?? u.package ?? ""));
+    const paths = [
+        ...(usageEntry?.paths ?? []),
+        ...(usageEntry?.criticalPaths ?? []),
+        ...(usageEntry?.files ?? []),
+    ].filter(Boolean);
+    const runtimeSurface = runtimeKind != null
+        ? {
+            kind: runtimeKind,
+            evidence: {
+                packages: primary ? [primary] : changed.all.slice(0, 3),
+                paths: paths.length > 0 ? paths.slice(0, 8) : undefined,
+            },
+        }
+        : null;
+    const reachability = reachKind
+        ? {
+            kind: reachKind,
+            evidence: {
+                paths: paths.length > 0 ? paths.slice(0, 8) : undefined,
+                frameworks: ri.frameworks?.length ? ri.frameworks : undefined,
+            },
+        }
+        : null;
+    const blastFromRi = ri.blastRadius;
+    const blastLevel = readBlastLevel(blastFromRi?.level) ??
+        (changed.all.length > 0
+            ? blastLevelFromChangedCount(changed.all.length)
+            : null);
+    const blastRadius = blastLevel
+        ? {
+            level: blastLevel,
+            changedPackageCount: blastFromRi?.changedPackageCount ?? changed.all.length,
+            factors: blastFromRi?.factors,
+        }
+        : null;
+    const areasRaw = ri.applicationAreas ?? ri.affectedAreas ?? [];
+    const usageAreas = usageEntry?.areas ?? pkgIntel?.areas ?? [];
+    const affectedAreas = [];
+    for (const area of areasRaw) {
+        affectedAreas.push({ id: area.id, label: area.label });
+    }
+    for (const label of usageAreas) {
+        const id = label.toLowerCase().replace(/\s+/g, "_");
+        if (!affectedAreas.some((a) => a.id === id)) {
+            affectedAreas.push({ id, label });
+        }
+    }
+    const hotspots = [];
+    const riHotspots = ri.hotspots ?? pkgIntel?.hotspots ?? [];
+    for (const h of riHotspots) {
+        const name = h.packageName ?? primary;
+        if (!name)
+            continue;
+        hotspots.push({
+            packageName: name,
+            source: h.source === "graph" ? "graph" : "code",
+            depth: h.depth,
+            paths: h.paths,
+        });
+    }
+    return {
+        runtimeSurface,
+        reachability,
+        blastRadius,
+        affectedAreas: affectedAreas.slice(0, 6),
+        hotspots: hotspots.slice(0, 8),
+    };
+}
+function hasMeaningfulTier1(tier1) {
+    return (tier1.runtimeSurface != null ||
+        tier1.reachability != null ||
+        tier1.blastRadius != null ||
+        tier1.affectedAreas.length > 0 ||
+        tier1.hotspots.length > 0);
+}
+function insightScope(scope) {
+    if (scope === "changed" || scope === "all")
+        return scope;
+    return "unknown";
+}
+function guidanceFromInsight(insight, index) {
+    return {
+        kind: "insight",
+        id: `insight:${index}:${insight.type}`,
+        scope: insightScope(insight.scope),
+        priority: insight.priority,
+        message: insight.message,
+        context: insight.context,
+        remediation: insight.remediation,
+        affectedFiles: insight.affectedFiles,
+    };
+}
+function guidanceFromFinding(finding) {
+    return {
+        kind: "finding",
+        id: finding.id,
+        scope: "unknown",
+        priority: finding.severity,
+        message: finding.title,
+        context: finding.description,
+        remediation: finding.recommendation,
+    };
+}
+function guidanceFromRecommendation(rec) {
+    return {
+        kind: "recommendation",
+        id: rec.id,
+        scope: "unknown",
+        priority: String(rec.priorityScore ?? rec.rank ?? "medium"),
+        message: rec.title,
+        context: rec.rationale,
+        remediation: rec.impact,
+    };
+}
+function collectReviewerGuidance(result) {
+    const guidance = [];
+    const insights = Array.isArray(result.insights) ? result.insights : [];
+    const changedFirst = [
+        ...insights.filter((i) => i.scope === "changed"),
+        ...insights.filter((i) => i.scope !== "changed"),
+    ];
+    changedFirst.forEach((insight, index) => {
+        guidance.push(guidanceFromInsight(insight, index));
+    });
+    const findings = Array.isArray(result.findings) ? result.findings : [];
+    const severityOrder = { critical: 4, high: 3, medium: 2, low: 1 };
+    const sortedFindings = [...findings].sort((a, b) => (severityOrder[b.severity] ?? 0) - (severityOrder[a.severity] ?? 0));
+    for (const finding of sortedFindings) {
+        guidance.push(guidanceFromFinding(finding));
+    }
+    const recs = Array.isArray(result.recommendations)
+        ? result.recommendations
+        : [];
+    for (const rec of recs) {
+        guidance.push(guidanceFromRecommendation(rec));
+    }
+    return guidance;
+}
+function resolveAvailabilityMode(tier1, tier2, codeIntelligenceAvailable) {
+    if (tier1 && codeIntelligenceAvailable)
+        return "pr_intelligence";
+    if (tier2)
+        return "insights";
+    return "graph_fallback";
+}
+/**
+ * Consumer-agnostic scan intelligence — structured facts only (no UI copy).
+ */
+export function deriveScanNarrative(result) {
+    if (!result) {
+        return { ...EMPTY_SCAN_NARRATIVE_FACTS };
+    }
+    const changedPackages = parseChangedPackages(result.changedPackages);
+    const mergePosture = mergePostureFromDecision(result.decision?.recommendation) ?? null;
+    const riskIndex = typeof result.totalScore === "number" && Number.isFinite(result.totalScore)
+        ? result.totalScore
+        : null;
+    const codeIntelligenceAvailable = result.analysisPreparation?.codeIntelligenceAvailable !== false;
+    const parsedRi = parseRepoIntelligence(result.repoIntelligence);
+    const corpusGate = codeIntelligenceAvailable && parsedRi != null;
+    let tier1Blocks = {
+        runtimeSurface: null,
+        reachability: null,
+        blastRadius: null,
+        affectedAreas: [],
+        hotspots: [],
+    };
+    if (corpusGate && parsedRi) {
+        tier1Blocks = extractTier1FromRepoIntelligence(parsedRi, changedPackages);
+    }
+    else if (changedPackages.all.length > 0) {
+        tier1Blocks = {
+            runtimeSurface: null,
+            reachability: null,
+            blastRadius: {
+                level: blastLevelFromChangedCount(changedPackages.all.length),
+                changedPackageCount: changedPackages.all.length,
+            },
+            affectedAreas: [],
+            hotspots: [],
+        };
+    }
+    const tier1 = corpusGate && hasMeaningfulTier1(tier1Blocks);
+    const reviewerGuidance = collectReviewerGuidance(result);
+    const tier2 = reviewerGuidance.some((g) => g.scope === "changed" || g.kind === "insight");
+    const repositoryContext = extractRepositoryContextFacts(result);
+    const tier3 = repositoryContext.length > 0;
+    const mode = resolveAvailabilityMode(tier1, tier2 || reviewerGuidance.length > 0, codeIntelligenceAvailable);
+    const decisionConf = result.decision?.confidence;
+    const confidence = {
+        decision: decisionConf === "low" ||
+            decisionConf === "medium" ||
+            decisionConf === "high"
+            ? decisionConf
+            : null,
+    };
+    if (!tier1 && mode === "graph_fallback" && changedPackages.all.length > 0) {
+        tier1Blocks.blastRadius = {
+            level: blastLevelFromChangedCount(changedPackages.all.length),
+            changedPackageCount: changedPackages.all.length,
+        };
+    }
+    let affectedAreas = tier1Blocks.affectedAreas;
+    if (affectedAreas.length === 0) {
+        affectedAreas = selectTopAffectedAreas(result, { max: 2 }).map((label) => ({
+            id: label.toLowerCase().replace(/\s+/g, "_").slice(0, 48),
+            label,
+        }));
+    }
+    return {
+        availability: {
+            mode,
+            codeIntelligenceAvailable,
+            tiersPresent: {
+                tier1,
+                tier2: reviewerGuidance.length > 0,
+                tier3,
+            },
+        },
+        changedPackages,
+        runtimeSurface: tier1Blocks.runtimeSurface,
+        reachability: tier1Blocks.reachability,
+        blastRadius: tier1Blocks.blastRadius,
+        affectedAreas,
+        hotspots: tier1Blocks.hotspots,
+        reviewerGuidance,
+        confidence,
+        repositoryContext,
+        mergePosture,
+        riskIndex,
+    };
+}
+/** @internal Test helper — normalize loose engine strings. */
+export { normalizeReachabilityKind, normalizeRuntimeSurfaceKind };

package/dist/deriveScanNarrative.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deriveScanNarrative.test.d.ts.map

package/dist/deriveScanNarrative.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveScanNarrative.test.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.test.ts"],"names":[],"mappings":""}

package/dist/deriveScanNarrative.test.js

@@ -0,0 +1,109 @@
+import { describe, expect, it } from "vitest";
+import { deriveScanNarrative } from "./deriveScanNarrative.js";
+import { fixtureRepoIntelligenceEmpty, fixtureRepoIntelligenceFastify, fixtureRepoIntelligenceTypescript, } from "./fixtures/repoIntelligenceFixtures.js";
+const baseResult = {
+    totalScore: 10,
+    layerScores: {
+        security: 1,
+        maintainability: 2,
+        ecosystem: 3,
+        upgradeImpact: 4,
+    },
+    findings: [],
+    generatedAt: "2026-01-01T00:00:00.000Z",
+};
+describe("deriveScanNarrative", () => {
+    it("returns denormalized empty facts for null result", () => {
+        const facts = deriveScanNarrative(null);
+        expect(facts.availability.mode).toBe("denormalized");
+        expect(facts.changedPackages.all).toEqual([]);
+    });
+    it("populates tier1 from repoIntelligence when corpus available", () => {
+        const result = {
+            ...baseResult,
+            changedPackages: ["fastify"],
+            analysisPreparation: { codeIntelligenceAvailable: true, warnings: [] },
+            repoIntelligence: fixtureRepoIntelligenceFastify,
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.availability.mode).toBe("pr_intelligence");
+        expect(facts.availability.codeIntelligenceAvailable).toBe(true);
+        expect(facts.changedPackages.primary).toBe("fastify");
+        expect(facts.runtimeSurface?.kind).toBe("runtime");
+        expect(facts.reachability?.kind).toBe("on_runtime_paths");
+        expect(facts.blastRadius?.level).toBe("moderate");
+        expect(facts.affectedAreas.map((a) => a.id)).toContain("api");
+        expect(facts.hotspots[0]?.source).toBe("code");
+    });
+    it("prefers changed-scope insights for reviewer guidance ordering", () => {
+        const result = {
+            ...baseResult,
+            changedPackages: ["lodash"],
+            insights: [
+                {
+                    type: "dependency_risk",
+                    priority: "medium",
+                    confidence: "likely",
+                    scope: "all",
+                    message: "Repository-wide duplicate paths",
+                    context: "c",
+                    remediation: "r",
+                },
+                {
+                    type: "usage_risk",
+                    priority: "high",
+                    confidence: "confirmed",
+                    scope: "changed",
+                    message: "lodash used in billing export",
+                    context: "c2",
+                    remediation: "r2",
+                },
+            ],
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.reviewerGuidance[0]?.scope).toBe("changed");
+        expect(facts.reviewerGuidance[0]?.message).toContain("billing");
+    });
+    it("uses graph_fallback with structured repository context", () => {
+        const result = {
+            ...baseResult,
+            explain: {
+                reasons: [
+                    {
+                        id: "1",
+                        layer: "ecosystem",
+                        title: "graph.transitive volume",
+                        scoreImpact: 18,
+                    },
+                ],
+            },
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.availability.mode).toBe("graph_fallback");
+        expect(facts.repositoryContext.length).toBeGreaterThan(0);
+        expect(facts.repositoryContext[0]?.family).toBe("transitive_volume");
+    });
+    it("populates build-only runtime surface from repoIntelligence", () => {
+        const result = {
+            ...baseResult,
+            changedPackages: ["typescript"],
+            analysisPreparation: { codeIntelligenceAvailable: true, warnings: [] },
+            repoIntelligence: fixtureRepoIntelligenceTypescript,
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.availability.mode).toBe("pr_intelligence");
+        expect(facts.runtimeSurface?.kind).toBe("build");
+        expect(facts.reachability?.kind).toBe("build_only");
+        expect(facts.blastRadius?.level).toBe("narrow");
+    });
+    it("treats empty packages-only repoIntelligence as absent", () => {
+        const result = {
+            ...baseResult,
+            changedPackages: ["react"],
+            analysisPreparation: { codeIntelligenceAvailable: true, warnings: [] },
+            repoIntelligence: fixtureRepoIntelligenceEmpty,
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.availability.tiersPresent.tier1).toBe(false);
+    });
+});

package/dist/extractRepositoryContextFacts.d.ts

@@ -0,0 +1,16 @@
+import { type ObservationSignalFamily } from "./cardObservationCatalog.js";
+import type { RepositoryContextSource } from "./scanNarrativeFacts.js";
+import type { ScanResult } from "./types.js";
+export type RepositoryContextFact = {
+    family: ObservationSignalFamily;
+    source: RepositoryContextSource;
+    refs?: {
+        packageNames?: string[];
+        metric?: Record<string, number>;
+    };
+};
+/**
+ * Tier 3 structured signal refs for the intelligence layer (no catalog phrases).
+ */
+export declare function extractRepositoryContextFacts(result: ScanResult): RepositoryContextFact[];
+//# sourceMappingURL=extractRepositoryContextFacts.d.ts.map

package/dist/extractRepositoryContextFacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extractRepositoryContextFacts.d.ts","sourceRoot":"","sources":["../src/extractRepositoryContextFacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACrE,CAAC;AAYF;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,UAAU,GACjB,qBAAqB,EAAE,CAiEzB"}

package/dist/extractRepositoryContextFacts.js

@@ -0,0 +1,71 @@
+import { mapExplainReasonToCatalogPhrase, mapFindingToCatalogPhrase, mapGraphInsightsToCatalogPhrases, mapRecommendationToCatalogPhrase, matchSignalFamily, } from "./cardObservationCatalog.js";
+function addFact(bucket, seen, fact) {
+    if (seen.has(fact.family))
+        return;
+    seen.add(fact.family);
+    bucket.push(fact);
+}
+/**
+ * Tier 3 structured signal refs for the intelligence layer (no catalog phrases).
+ */
+export function extractRepositoryContextFacts(result) {
+    const facts = [];
+    const seen = new Set();
+    const gi = result.graphInsights;
+    if (gi && typeof gi === "object") {
+        for (const { family } of mapGraphInsightsToCatalogPhrases(gi)) {
+            const metric = {};
+            if (typeof gi.nodes === "number")
+                metric.nodes = gi.nodes;
+            if (typeof gi.maxDepth === "number")
+                metric.maxDepth = gi.maxDepth;
+            const vuln = Array.isArray(gi.vulnerable) ? gi.vulnerable : [];
+            const hotspots = Array.isArray(gi.hotspots) ? gi.hotspots : [];
+            addFact(facts, seen, {
+                family,
+                source: "graphInsights",
+                refs: {
+                    packageNames: [
+                        ...vuln.map((v) => v.packageName),
+                        ...hotspots.map((h) => h.packageName),
+                    ].slice(0, 12),
+                    metric: Object.keys(metric).length > 0 ? metric : undefined,
+                },
+            });
+        }
+    }
+    if (Array.isArray(result.explain?.reasons)) {
+        for (const reason of result.explain.reasons) {
+            const mapped = mapExplainReasonToCatalogPhrase(reason);
+            if (!mapped) {
+                const family = matchSignalFamily(`${reason.id} ${reason.title} ${reason.layer}`);
+                if (family) {
+                    addFact(facts, seen, { family, source: "explain" });
+                }
+                continue;
+            }
+            addFact(facts, seen, { family: mapped.family, source: "explain" });
+        }
+    }
+    if (Array.isArray(result.findings)) {
+        for (const finding of result.findings) {
+            const mapped = mapFindingToCatalogPhrase(finding);
+            if (mapped) {
+                addFact(facts, seen, {
+                    family: mapped.family,
+                    source: "finding",
+                    refs: { packageNames: [finding.packageName] },
+                });
+            }
+        }
+    }
+    if (Array.isArray(result.recommendations)) {
+        for (const rec of result.recommendations) {
+            const mapped = mapRecommendationToCatalogPhrase(rec);
+            if (mapped) {
+                addFact(facts, seen, { family: mapped.family, source: "finding" });
+            }
+        }
+    }
+    return facts;
+}

package/dist/fixtures/repoIntelligenceFixtures.d.ts

@@ -0,0 +1,8 @@
+import type { RepoIntelligence } from "../repoIntelligenceSchema.js";
+/** Corpus-enabled runtime framework upgrade (auth/API paths). */
+export declare const fixtureRepoIntelligenceFastify: RepoIntelligence;
+/** Build-only toolchain change — no runtime paths. */
+export declare const fixtureRepoIntelligenceTypescript: RepoIntelligence;
+/** Empty corpus stub (engine-test-fixture default). */
+export declare const fixtureRepoIntelligenceEmpty: RepoIntelligence;
+//# sourceMappingURL=repoIntelligenceFixtures.d.ts.map

package/dist/fixtures/repoIntelligenceFixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoIntelligenceFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/repoIntelligenceFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,EAAE,gBA8B5C,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,iCAAiC,EAAE,gBAS/C,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,4BAA4B,EAAE,gBAE1C,CAAC"}

package/dist/fixtures/repoIntelligenceFixtures.js

@@ -0,0 +1,47 @@
+/** Corpus-enabled runtime framework upgrade (auth/API paths). */
+export const fixtureRepoIntelligenceFastify = {
+    packages: {
+        fastify: {
+            runtimeSurface: "runtime",
+            reachability: "on_runtime_paths",
+            usage: {
+                packageName: "fastify",
+                paths: ["apps/api/src/server.ts", "apps/api/src/routes/account.ts"],
+                criticalPaths: ["apps/api/src/middleware/auth.ts"],
+                areas: ["API", "Auth middleware"],
+            },
+        },
+    },
+    blastRadius: {
+        level: "moderate",
+        factors: ["middleware_ordering", "route_handlers"],
+        changedPackageCount: 1,
+    },
+    applicationAreas: [
+        { id: "api", label: "API routes" },
+        { id: "auth", label: "Auth middleware" },
+    ],
+    hotspots: [
+        {
+            packageName: "fastify",
+            source: "code",
+            paths: ["apps/api/src/middleware/auth.ts"],
+        },
+    ],
+    frameworks: ["fastify"],
+};
+/** Build-only toolchain change — no runtime paths. */
+export const fixtureRepoIntelligenceTypescript = {
+    packages: {
+        typescript: {
+            runtimeSurface: "build",
+            reachability: "build_only",
+        },
+    },
+    blastRadius: { level: "narrow", changedPackageCount: 1 },
+    applicationAreas: [],
+};
+/** Empty corpus stub (engine-test-fixture default). */
+export const fixtureRepoIntelligenceEmpty = {
+    packages: {},
+};

package/dist/index.d.ts

@@ -11,6 +11,11 @@ export * from "./formatCardExposureDisplay.js";
 export * from "./cardObservationCatalog.js";
 export * from "./deriveCardOperationalObservations.js";
 export * from "./deriveCardDisplaySummary.js";
+export * from "./scanNarrativeFacts.js";
+export * from "./repoIntelligenceSchema.js";
+export * from "./deriveScanNarrative.js";
+export * from "./extractRepositoryContextFacts.js";
+export * from "./presentScanCardSummary.js";
 export * from "./scanCardSummary.js";
 export * from "./deriveScanDetailRecommendations.js";
 export * from "./deriveRiskScoreSummary.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -11,6 +11,11 @@ export * from "./formatCardExposureDisplay.js";
 export * from "./cardObservationCatalog.js";
 export * from "./deriveCardOperationalObservations.js";
 export * from "./deriveCardDisplaySummary.js";
+export * from "./scanNarrativeFacts.js";
+export * from "./repoIntelligenceSchema.js";
+export * from "./deriveScanNarrative.js";
+export * from "./extractRepositoryContextFacts.js";
+export * from "./presentScanCardSummary.js";
 export * from "./scanCardSummary.js";
 export * from "./deriveScanDetailRecommendations.js";
 export * from "./deriveRiskScoreSummary.js";

package/dist/prCheckRunPresentation.js

@@ -53,7 +53,7 @@ function collectWhyBullets(result, max) {
             if (s && !out.includes(s))
                 out.push(s);
             if (out.length >= max)
-                return out;
+                return out.slice(0, max);
         }
     }
     const reasons = result.explain?.reasons;

package/dist/presentScanCardSummary.d.ts

@@ -0,0 +1,16 @@
+import { type ScanCardSummary, type ScanPipelineStatus } from "./scanCardSummary.js";
+import type { ScanNarrativeFacts } from "./scanNarrativeFacts.js";
+import { type CardExposureDisplay } from "./formatCardExposureDisplay.js";
+import { type MergePosture } from "./riskVocabulary.js";
+import type { ScanResult } from "./types.js";
+export type PresentScanCardSummaryOptions = {
+    pipelineStatus?: ScanPipelineStatus;
+    findings?: ScanResult["findings"];
+};
+/**
+ * Dashboard card presentation DTO from consumer-agnostic facts.
+ */
+export declare function presentScanCardSummary(facts: ScanNarrativeFacts, options?: PresentScanCardSummaryOptions): ScanCardSummary;
+export type { CardExposureDisplay, MergePosture };
+export declare function exposureFromFacts(facts: ScanNarrativeFacts): CardExposureDisplay | null;
+//# sourceMappingURL=presentScanCardSummary.d.ts.map

package/dist/presentScanCardSummary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentScanCardSummary.d.ts","sourceRoot":"","sources":["../src/presentScanCardSummary.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,6BAA6B,GAAG;IAC1C,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;CACnC,CAAC;AA2HF;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,6BAAkC,GAC1C,eAAe,CAkGjB;AAED,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAElD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,GACxB,mBAAmB,GAAG,IAAI,CAE5B"}