@mergesignal/shared 0.2.7 → 0.3.0

package/dist/scanDetailViewModel.js

@@ -1,7 +1,9 @@
 import { humanizeEngineSurfaceText, layerRiskBandLabel, sortPRInsightsForDisplay, truncateWithEllipsis, } from "./actionsStepSummary.js";
 import { mapFindingToCatalogPhrase, mapGraphInsightsToCatalogPhrases, phraseForFamily, } from "./cardObservationCatalog.js";
 import { deriveScanNarrative } from "./deriveScanNarrative.js";
-import { presentScanCardSummary } from "./presentScanCardSummary.js";
+import { formatCardAreaLabels } from "./formatCardAreaLabels.js";
+import { composeContextLineFromFacts, formatChangedPackagesShort, formatUsageSummaryLine, labelBlastRadiusLevel, labelReachabilityKind, labelRuntimeSurface, summarizeBlastRadius, } from "./narrativePresentation.js";
+import { normalizeGeneratedText, normalizeGeneratedTextNullable, } from "./normalizeGeneratedText.js";
 import { deriveCardOperationalObservations } from "./deriveCardOperationalObservations.js";
 import { deriveScanDetailRecommendations, recommendationTitlesForDedupe, } from "./deriveScanDetailRecommendations.js";
 import { deriveSignalSummary, } from "./deriveRiskScoreSummary.js";
@@ -208,6 +210,72 @@ function graphInsightToPackage(item, severity, evidence) {
         evidence,
     };
 }
+function usageWhereFromFacts(facts) {
+    const primary = facts.changedPackages.primary;
+    const row = facts.packageUsage.find((u) => u.packageName === primary) ??
+        facts.packageUsage[0];
+    if (!row)
+        return undefined;
+    const paths = [...row.paths, ...row.criticalPaths, ...row.files].filter(Boolean);
+    if (paths.length === 0 && row.areas.length > 0) {
+        return row.areas.slice(0, 3).join(", ");
+    }
+    if (paths.length === 0)
+        return undefined;
+    const sample = paths.slice(0, 3).join(", ");
+    if (paths.length > 3) {
+        return `${sample} (+${paths.length - 3} more)`;
+    }
+    return sample;
+}
+function buildAttentionAreasFromFacts(facts) {
+    const areas = [];
+    if (facts.hotspots.length > 0) {
+        const packages = facts.hotspots.map((h) => ({
+            name: h.packageName,
+            direct: true,
+            evidence: h.paths[0],
+        }));
+        areas.push({
+            problemLabel: "Dependency hotspots",
+            problemDescription: "Packages where paths converge or corpus analysis flagged critical usage.",
+            packages: packages.slice(0, ACT3_EVIDENCE_COLLAPSE_THRESHOLD),
+            overflowCount: Math.max(0, packages.length - ACT3_EVIDENCE_COLLAPSE_THRESHOLD),
+        });
+    }
+    const blast = facts.blastRadius;
+    if (blast &&
+        (blast.level === "wide" || (blast.changedPackageCount ?? 0) >= 8)) {
+        const names = facts.changedPackages.all;
+        if (names.length > 0) {
+            const packages = names
+                .slice(0, ACT3_EVIDENCE_COLLAPSE_THRESHOLD)
+                .map((name) => ({ name, direct: true }));
+            areas.push({
+                problemLabel: phraseForFamily("blast_radius"),
+                problemDescription: blast.factors.length > 0
+                    ? `Wide blast radius: ${blast.factors.slice(0, 3).join(", ").replace(/_/g, " ")}`
+                    : "Many packages changed in this upgrade.",
+                packages,
+                overflowCount: Math.max(0, names.length - ACT3_EVIDENCE_COLLAPSE_THRESHOLD),
+            });
+        }
+    }
+    return areas;
+}
+function mergeAttentionAreas(fromFacts, fromGraph) {
+    if (fromFacts.length === 0)
+        return fromGraph;
+    const factPackageNames = new Set(fromFacts.flatMap((a) => a.packages.map((p) => p.name)));
+    const filteredGraph = fromGraph.filter((area) => {
+        if (area.problemLabel !== phraseForFamily("transitive_hotspots")) {
+            return true;
+        }
+        const onlyDupes = area.packages.every((p) => factPackageNames.has(p.name));
+        return !onlyDupes;
+    });
+    return [...fromFacts, ...filteredGraph];
+}
 function buildAttentionAreas(result) {
     const areas = [];
     const gi = result.graphInsights;
@@ -312,7 +380,7 @@ function buildTopology(result) {
         }))
         : [];
     return {
-        summaryLine: `${nodes} packages · ${edges} edges · max depth ${maxDepth}`,
+        summaryLine: normalizeGeneratedText(`${nodes} packages | ${edges} edges | max depth ${maxDepth}`),
         deepest,
     };
 }
@@ -346,28 +414,64 @@ function deriveConfidenceCaveat(result) {
     }
     return undefined;
 }
-function narrativeContextFromFacts(facts) {
-    const card = presentScanCardSummary(facts);
+export function presentScanDetailNarrativeContext(facts) {
+    const affectedAreas = [];
+    for (const area of facts.affectedAreas) {
+        const formatted = formatCardAreaLabels([area.label], 1);
+        if (formatted[0])
+            affectedAreas.push(formatted[0]);
+        if (affectedAreas.length >= 4)
+            break;
+    }
+    const usageHighlights = [];
+    for (const row of facts.packageUsage.slice(0, 4)) {
+        const paths = [...row.paths, ...row.criticalPaths, ...row.files];
+        if (paths[0])
+            usageHighlights.push(paths[0]);
+    }
+    const blast = summarizeBlastRadius(facts, 5);
     return {
-        mode: card.narrativeMode,
-        codeIntelligenceAvailable: card.codeIntelligenceAvailable,
-        changedPackagesDisplay: card.changedPackagesDisplay,
-        runtimeSurfaceLabel: card.runtimeSurfaceLabel,
-        reachabilityLabel: card.reachabilityLabel,
-        blastRadiusLabel: card.blastRadiusLabel,
-        affectedAreas: card.affectedAreas,
-        structuralOnlyDisclaimer: card.structuralOnlyDisclaimer,
+        mode: facts.availability.mode,
+        codeIntelligenceAvailable: facts.availability.codeIntelligenceAvailable,
+        changedPackagesDisplay: formatChangedPackagesShort(facts, 4),
+        runtimeSurfaceLabel: labelRuntimeSurface(facts),
+        reachabilityLabel: labelReachabilityKind(facts),
+        blastRadiusLabel: labelBlastRadiusLevel(facts),
+        affectedAreas,
+        structuralOnlyDisclaimer: facts.availability.mode === "graph_fallback" &&
+            !facts.availability.tiersPresent.tier1
+            ? scanSurfaceCopy.narrativeCard.structuralOnlyDisclaimer
+            : null,
+        usageHighlights: usageHighlights.slice(0, 5),
+        frameworks: facts.frameworks.slice(0, 5),
+        blastRadiusFactors: blast.factors.map((f) => f.replace(/_/g, " ")),
+        hotspotNames: facts.hotspots.map((h) => h.packageName).slice(0, 8),
+        usageContextLine: normalizeGeneratedTextNullable(formatUsageSummaryLine(facts, 2)),
+        upgradeContextLine: normalizeGeneratedTextNullable(composeContextLineFromFacts(facts, {
+            includePathSample: true,
+            maxAreas: 4,
+        })),
     };
 }
-function guidanceToImpactItem(g, verifyLabels) {
+function narrativeContextFromFacts(facts) {
+    return presentScanDetailNarrativeContext(facts);
+}
+function guidanceToImpactItem(g, verifyLabels, facts) {
     const verify = g.remediation &&
         !verifyLabels.has(g.remediation.toLowerCase().replace(/\s+/g, " ").trim())
         ? g.remediation
         : undefined;
+    let where = g.context?.trim() || undefined;
+    if (!where &&
+        facts &&
+        (facts.availability.mode === "pr_intelligence" ||
+            facts.availability.tiersPresent.tier1)) {
+        where = usageWhereFromFacts(facts);
+    }
     return {
-        message: g.message,
-        where: g.context,
-        verify,
+        message: normalizeGeneratedText(g.message),
+        where: where ? normalizeGeneratedText(where) : undefined,
+        verify: verify ? normalizeGeneratedText(verify) : undefined,
         affectedFiles: g.affectedFiles,
     };
 }
@@ -377,7 +481,7 @@ function deriveOperationalImpactFromFacts(facts, result, verifyLabels) {
         (facts.availability.tiersPresent.tier1 && changedGuidance.length > 0)) {
         const items = changedGuidance
             .slice(0, 6)
-            .map((g) => guidanceToImpactItem(g, verifyLabels));
+            .map((g) => guidanceToImpactItem(g, verifyLabels, facts));
         if (items.length > 0) {
             return { status: "rich", items };
         }
@@ -393,41 +497,60 @@ function deriveOperationalImpactFromFacts(facts, result, verifyLabels) {
             status: "rich",
             items: changedGuidance
                 .slice(0, 6)
-                .map((g) => guidanceToImpactItem(g, verifyLabels)),
+                .map((g) => guidanceToImpactItem(g, verifyLabels, facts)),
         };
     }
     return deriveOperationalImpact(result, verifyLabels);
 }
+function themeCandidateFromLabel(label) {
+    const trimmed = label.trim();
+    if (!trimmed)
+        return null;
+    return sanitizeAct2Theme(trimmed) ?? trimmed.slice(0, ACT2_MAX_THEME_CHARS);
+}
 function deriveBecauseThemesFromFacts(facts) {
     const themes = [];
     const seen = new Set();
-    for (const g of facts.reviewerGuidance.slice(0, ACT2_MAX_THEMES + 2)) {
-        const sanitized = sanitizeAct2Theme(g.message);
-        if (!sanitized)
-            continue;
-        const key = sanitized.toLowerCase();
+    const prIntelligence = facts.availability.mode === "pr_intelligence" ||
+        facts.availability.tiersPresent.tier1;
+    const pushTheme = (raw) => {
+        if (!raw)
+            return;
+        const normalized = normalizeGeneratedText(raw);
+        const key = normalized.toLowerCase();
         if (seen.has(key))
-            continue;
+            return;
         seen.add(key);
-        themes.push(sanitized);
+        themes.push(normalized);
+    };
+    if (prIntelligence) {
+        for (const area of facts.affectedAreas) {
+            pushTheme(themeCandidateFromLabel(area.label));
+            if (themes.length >= ACT2_MAX_THEMES)
+                return themes;
+        }
+        for (const factor of facts.blastRadius?.factors ?? []) {
+            pushTheme(themeCandidateFromLabel(factor.replace(/_/g, " ")));
+            if (themes.length >= ACT2_MAX_THEMES)
+                return themes;
+        }
+        const reachLabel = labelReachabilityKind(facts);
+        if (reachLabel)
+            pushTheme(reachLabel);
+    }
+    for (const g of facts.reviewerGuidance.slice(0, ACT2_MAX_THEMES + 2)) {
+        pushTheme(sanitizeAct2Theme(g.message));
         if (themes.length >= ACT2_MAX_THEMES)
-            break;
+            return themes;
     }
-    if (themes.length < ACT2_MAX_THEMES) {
+    if (themes.length < ACT2_MAX_THEMES && !prIntelligence) {
         for (const ctx of facts.repositoryContext) {
-            const sanitized = sanitizeAct2Theme(phraseForFamily(ctx.family));
-            if (!sanitized)
-                continue;
-            const key = sanitized.toLowerCase();
-            if (seen.has(key))
-                continue;
-            seen.add(key);
-            themes.push(sanitized);
+            pushTheme(sanitizeAct2Theme(phraseForFamily(ctx.family)));
             if (themes.length >= ACT2_MAX_THEMES)
                 break;
         }
     }
-    return themes;
+    return themes.slice(0, ACT2_MAX_THEMES);
 }
 function deriveVerdictLineFromFacts(facts, result) {
     const topGuidance = facts.reviewerGuidance.find((g) => (g.scope === "changed" || g.kind === "insight") && g.message.trim());
@@ -450,7 +573,11 @@ export function presentScanDetailViewModel(facts, result, options) {
     const themes = deriveBecauseThemesFromFacts(facts);
     const confidenceCaveat = deriveConfidenceCaveat(result);
     const because = themes.length > 0 || confidenceCaveat ? { themes, confidenceCaveat } : null;
-    const attentionAreas = buildAttentionAreas(result);
+    const factsAttention = facts.availability.mode === "pr_intelligence" ||
+        facts.availability.tiersPresent.tier1
+        ? buildAttentionAreasFromFacts(facts)
+        : [];
+    const attentionAreas = mergeAttentionAreas(factsAttention, buildAttentionAreas(result));
     const allFindings = annotateFindingsWithCoverage(buildFindingRows(result), recommendedActions);
     const topology = buildTopology(result);
     const hasEvidence = attentionAreas.length > 0 || allFindings.length > 0 || topology != null;

package/dist/scanDetailViewModel.test.js

@@ -1,6 +1,8 @@
 import { describe, expect, it } from "vitest";
 import { primaryPrExample } from "./productMessaging.js";
 import { ACT2_MAX_THEMES, TIER1_MAX_VISIBLE_IMPACTS, deriveAct2Themes, deriveOperationalImpact, deriveFollowUpBridgeNote, deriveScanDetailViewModel, deriveVerdictLine, sanitizeAct2Theme, tier1PassesRecallTest, } from "./scanDetailViewModel.js";
+import { fixtureRepoIntelligenceFastify } from "./fixtures/repoIntelligenceFixtures.js";
+import { analysisPreparationWithValidRepoIntel } from "./fixtures/repoIntelligenceTestHelpers.js";
 const baseResult = {
     totalScore: 10,
     layerScores: {
@@ -58,7 +60,7 @@ describe("reach vocabulary on fixtures", () => {
             changedPackages: Array.from({ length: 14 }, (_, i) => `pkg-${i}`),
         }, { scanId: "s2", status: "done" });
         expect(vm?.verdict.scopeChip).toBe("Wide reach");
-        expect(vm?.verdict.verdictLine).toBe("No merge blockers · wide upgrade footprint");
+        expect(vm?.verdict.verdictLine).toBe("No merge blockers - wide upgrade footprint");
     });
     it("needs review + limited reach — minimalResult score 42", () => {
         const vm = deriveScanDetailViewModel(minimalResult(), {
@@ -128,6 +130,31 @@ describe("deriveVerdictLine", () => {
     });
 });
 describe("Tier 1 success criterion", () => {
+    it("surfaces package usage paths in narrative context and evidence when corpus available", () => {
+        const vm = deriveScanDetailViewModel({
+            ...baseResult,
+            changedPackages: ["fastify"],
+            analysisPreparation: analysisPreparationWithValidRepoIntel(),
+            repoIntelligence: fixtureRepoIntelligenceFastify,
+            insights: [
+                {
+                    type: "usage_risk",
+                    priority: "high",
+                    confidence: "confirmed",
+                    scope: "changed",
+                    message: "Fastify middleware ordering may shift",
+                    context: "",
+                    remediation: "Run auth integration tests",
+                },
+            ],
+        }, { scanId: "corpus", status: "done" });
+        expect(vm?.narrativeContext.usageHighlights.length).toBeGreaterThan(0);
+        expect(vm?.narrativeContext.usageContextLine).toMatch(/Used in/);
+        expect(vm?.narrativeContext.blastRadiusFactors.length).toBeGreaterThan(0);
+        const hotspotArea = vm?.evidence?.attentionAreas.find((a) => a.problemLabel.includes("hotspot"));
+        expect(hotspotArea?.packages[0]?.name).toBe("fastify");
+        expect(tier1PassesRecallTest(vm.operationalImpact)).toBe(true);
+    });
     it("insight-rich scan passes recall test", () => {
         const vm = deriveScanDetailViewModel({
             ...minimalResult(),

package/dist/scanNarrativeFacts.d.ts

@@ -7,6 +7,14 @@ export type BlastRadiusLevel = "narrow" | "moderate" | "wide";
 export type ReviewerGuidanceKind = "insight" | "finding" | "recommendation";
 export type ReviewerGuidanceScope = "changed" | "all" | "unknown";
 export type RepositoryContextSource = "graphInsights" | "explain" | "finding";
+export type NarrativePackageUsage = {
+    packageName: string;
+    paths: string[];
+    criticalPaths: string[];
+    files: string[];
+    areas: string[];
+};
+export type RepoIntelligenceParseStatus = "ok" | "invalid" | "absent" | "untrusted";
 export type ScanNarrativeFacts = {
     availability: {
         mode: NarrativeAvailabilityMode;
@@ -16,30 +24,33 @@ export type ScanNarrativeFacts = {
             tier2: boolean;
             tier3: boolean;
         };
+        repoIntelligenceParse: RepoIntelligenceParseStatus;
     };
     changedPackages: {
         primary: string | null;
         others: string[];
         all: string[];
     };
+    packageUsage: NarrativePackageUsage[];
+    frameworks: string[];
     runtimeSurface: {
         kind: RuntimeSurfaceKind;
-        evidence?: {
-            packages?: string[];
-            paths?: string[];
+        evidence: {
+            packages: string[];
+            paths: string[];
         };
     } | null;
     reachability: {
         kind: ReachabilityKind;
-        evidence?: {
-            paths?: string[];
-            frameworks?: string[];
+        evidence: {
+            paths: string[];
+            frameworks: string[];
         };
     } | null;
     blastRadius: {
         level: BlastRadiusLevel;
         changedPackageCount?: number;
-        factors?: string[];
+        factors: string[];
     } | null;
     affectedAreas: Array<{
         id: string;
@@ -49,7 +60,7 @@ export type ScanNarrativeFacts = {
         packageName: string;
         source: "code" | "graph";
         depth?: number;
-        paths?: string[];
+        paths: string[];
     }>;
     reviewerGuidance: Array<{
         kind: ReviewerGuidanceKind;
@@ -76,4 +87,8 @@ export type ScanNarrativeFacts = {
     riskIndex: number | null;
 };
 export declare const EMPTY_SCAN_NARRATIVE_FACTS: ScanNarrativeFacts;
+/** Derivation caps — presenters apply tighter channel limits. */
+export declare const NARRATIVE_FACT_MAX_PATHS = 20;
+export declare const NARRATIVE_FACT_MAX_AREAS = 12;
+export declare const NARRATIVE_FACT_MAX_HOTSPOTS = 15;
 //# sourceMappingURL=scanNarrativeFacts.d.ts.map

package/dist/scanNarrativeFacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;KAClE,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACtD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACxD,GAAG,IAAI,CAAC;IAET,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE;QACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;KAC5C,CAAC;IAEF,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAiBxC,CAAC"}
+{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;QACjE,qBAAqB,EAAE,2BAA2B,CAAC;KACpD,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAEtC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACnD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IAET,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE;QACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;KAC5C,CAAC;IAEF,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAoBxC,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC"}

package/dist/scanNarrativeFacts.js

@@ -3,8 +3,11 @@ export const EMPTY_SCAN_NARRATIVE_FACTS = {
         mode: "denormalized",
         codeIntelligenceAvailable: false,
         tiersPresent: { tier1: false, tier2: false, tier3: false },
+        repoIntelligenceParse: "absent",
     },
     changedPackages: { primary: null, others: [], all: [] },
+    packageUsage: [],
+    frameworks: [],
     runtimeSurface: null,
     reachability: null,
     blastRadius: null,
@@ -16,3 +19,7 @@ export const EMPTY_SCAN_NARRATIVE_FACTS = {
     mergePosture: null,
     riskIndex: null,
 };
+/** Derivation caps — presenters apply tighter channel limits. */
+export const NARRATIVE_FACT_MAX_PATHS = 20;
+export const NARRATIVE_FACT_MAX_AREAS = 12;
+export const NARRATIVE_FACT_MAX_HOTSPOTS = 15;

package/dist/scanSurfaceCopy.d.ts

@@ -1,5 +1,5 @@
 /**
- * Single source for short scan pipeline / Actions copy (not i18n — keep flat and small).
+ * Single source for short scan pipeline / Actions copy (not i18n - keep flat and small).
  * Risk / merge posture labels stay in riskVocabulary / MERGE_POSTURE_LABEL.
  */
 export declare const scanSurfaceCopy: {
@@ -14,7 +14,7 @@ export declare const scanSurfaceCopy: {
         readonly failureTitle: "MergeSignal";
         readonly failureBody: "Analysis could not be completed. Check the workflow logs for details.";
         readonly demoSummaryTitle: "MergeSignal (demo output)";
-        readonly demoSummaryBanner: "Sample analysis only — not production MergeSignal results. Do not use for merge decisions.";
+        readonly demoSummaryBanner: "Sample analysis only - not production MergeSignal results. Do not use for merge decisions.";
         readonly trustedSummaryMethodologyLine: "Methodology";
         /** Dogfood workflow: secret missing on same-repo runs (annotation + logs). */
         readonly trustedWorkflowSecretMissing: "Trusted MergeSignal analysis is unavailable in this repository. Complete engine access setup, then re-run the workflow.";
@@ -35,7 +35,7 @@ export declare const scanSurfaceCopy: {
         readonly pushTrustedScanSkippedNoEngineToken: "Trusted MergeSignal analysis was skipped because no engine access token is configured for this repository.";
         /** Step summary when trusted scan cannot start (canonical repo, token missing). */
         readonly trustedWorkflowCredentialHintBody: "The engine checkout token was not available to this workflow run. Add it under this repository's Actions secrets, or grant this repository access to an organization secret. Secrets that exist only on a GitHub Environment are not available here unless this job declares that environment.";
-        /** Trusted step summary H1 product line (before posture · risk index). */
+        /** Trusted step summary H1 product line (before posture  |  risk index). */
         readonly trustedStepSummaryTitlePrefix: "MergeSignal dependency review";
         /** GitHub Actions step summary: risk index direction (shared with web/CLI where imported). */
         readonly riskIndexDirectionShort: "0 = lowest merge risk, 100 = highest merge risk";
@@ -43,13 +43,13 @@ export declare const scanSurfaceCopy: {
         readonly mergePostureUnavailableShort: "Posture unavailable";
         readonly mergePostureUnavailableDetail: "This scan did not include a merge posture verdict; use the risk index as a coarse signal only.";
         /** `<summary>` lines for collapsible sections (keep short for GitHub UI). */
-        readonly scoreBreakdownDetailsSummary: "Layer scores — this scan";
+        readonly scoreBreakdownDetailsSummary: "Layer scores - this scan";
         readonly dependencyGraphDetailsSummary: "Graph context";
         readonly moreActionsDetailsSummary: "More guidance";
         readonly moreInsightsDetailsSummary: "More insights";
         /** Inside dependency graph `<details>`. */
-        readonly supportingGraphContextNote: "Supporting context — not a merge verdict by itself.";
-        readonly layerScoreGlossary: "*Higher column scores = more risk in that dimension (0 best → 100 worst).*";
+        readonly supportingGraphContextNote: "Supporting context - not a merge verdict by itself.";
+        readonly layerScoreGlossary: "*Higher column scores = more risk in that dimension (0 best ??? 100 worst).*";
         /** After layer table: scan-specific drivers from explain/contributions. */
         readonly layerDriversHeading: "Signals behind elevated scores";
         /** When surfacing recommendation rationale first (trusted default fold). */
@@ -58,7 +58,7 @@ export declare const scanSurfaceCopy: {
         /** Development profile: no recommendations or actionable insights. */
         readonly devNoImmediateActions: "No immediate actions required";
     };
-    /** GitHub App Check Run (PR) — calm, concise; not Actions step summary. */
+    /** GitHub App Check Run (PR) - calm, concise; not Actions step summary. */
     readonly checkRun: {
         readonly titleBase: "PR dependency change";
         readonly titleBaselineSuffix: "baseline scan only";
@@ -73,9 +73,9 @@ export declare const scanSurfaceCopy: {
     };
     readonly product: {
         /** Single line for UI/CLI/Actions parity (risk index semantics). */
-        readonly riskIndexDirectionShort: "0 is best · 100 is worst";
+        readonly riskIndexDirectionShort: "0 is best | 100 is worst";
     };
-    /** Scan detail page (`/scan/[id]`) — show-don't-teach reviewer copy. */
+    /** Scan detail page (`/scan/[id]`) - show-don't-teach reviewer copy. */
     readonly scanDetail: {
         readonly recommendedActionsHeading: "Recommended actions";
         readonly signalSummaryHeading: "Signal summary";
@@ -88,7 +88,7 @@ export declare const scanSurfaceCopy: {
         readonly proofHeading: "Proof";
         readonly nextStepsHeading: "Recommended next steps";
         readonly topologySummary: "Dependency topology";
-        readonly topologyCollapsedHint: "Supporting detail — graph paths and depth";
+        readonly topologyCollapsedHint: "Supporting detail - graph paths and depth";
         readonly whereLabel: "Where";
         readonly verifyLabel: "Verify";
         readonly moreImpactsSummary: "More impacts";
@@ -101,15 +101,15 @@ export declare const scanSurfaceCopy: {
             readonly wide: "Wide reach";
         };
         readonly verdictLine: {
-            readonly safeNoBlockersNarrow: "No merge blockers · narrow footprint";
-            readonly safeNoBlockersModerate: "No merge blockers · moderate dependency footprint";
-            readonly safeNoBlockersWide: "No merge blockers · wide upgrade footprint";
-            readonly reviewBeforeMergeNarrow: "Review before merge · narrow footprint";
-            readonly reviewBeforeMergeModerate: "Review before merge · moderate dependency footprint";
-            readonly reviewBeforeMergeWide: "Review before merge · wide dependency footprint";
-            readonly riskyResolveNarrow: "Resolve blockers before merge · focused footprint";
-            readonly riskyResolveModerate: "Resolve blockers before merge · moderate dependency footprint";
-            readonly riskyResolveWide: "Resolve blockers before merge · wide transitive tree";
+            readonly safeNoBlockersNarrow: "No merge blockers - narrow footprint";
+            readonly safeNoBlockersModerate: "No merge blockers - moderate dependency footprint";
+            readonly safeNoBlockersWide: "No merge blockers - wide upgrade footprint";
+            readonly reviewBeforeMergeNarrow: "Review before merge - narrow footprint";
+            readonly reviewBeforeMergeModerate: "Review before merge - moderate dependency footprint";
+            readonly reviewBeforeMergeWide: "Review before merge - wide dependency footprint";
+            readonly riskyResolveNarrow: "Resolve blockers before merge - focused footprint";
+            readonly riskyResolveModerate: "Resolve blockers before merge - moderate dependency footprint";
+            readonly riskyResolveWide: "Resolve blockers before merge - wide transitive tree";
         };
         readonly tier1Fallback: {
             /** Graph-only / lightweight PR baseline (pattern F3). */
@@ -123,9 +123,9 @@ export declare const scanSurfaceCopy: {
         };
         readonly confidenceCaveat: {
             readonly medium: "Based on partial dependency signal";
-            readonly low: "Limited signal — treat this as directional";
+            readonly low: "Limited signal - treat this as directional";
         };
-        readonly codeAnalysisTimeout: "Code analysis timed out — runtime impact may be incomplete";
+        readonly codeAnalysisTimeout: "Code analysis timed out - runtime impact may be incomplete";
         readonly scanPipelineNote: "This page updates automatically.";
         readonly recommendationDetail: {
             readonly selectPrompt: "Select a recommendation to understand it";
@@ -189,7 +189,7 @@ export declare const scanSurfaceCopy: {
                 readonly why: "Dependency health is stable now but benefits from ongoing observation.";
                 readonly whyNow: "Monitoring catches regressions that appear only after merge.";
                 readonly expectedBenefit: "Earlier detection of dependency regressions in production.";
-                readonly signals: readonly ["No immediate blockers — monitor after merge"];
+                readonly signals: readonly ["No immediate blockers - monitor after merge"];
             };
             readonly mergeAfterVerification: {
                 readonly why: "Wide upgrade footprints warrant a quick sanity check before merge.";
@@ -249,7 +249,7 @@ export declare const scanSurfaceCopy: {
         readonly signalSummary: {
             readonly scoreCaption: "Dependency signal score";
             readonly layersHeading: "Layer signals";
-            readonly gaugeAriaLabel: "Dependency signal score {score} — {band}";
+            readonly gaugeAriaLabel: "Dependency signal score {score} - {band}";
             readonly followUpImprovementIdentified: "1 follow-up improvement was identified";
             readonly followUpImprovementsIdentified: "{count} follow-up improvements were identified";
             readonly bandLabel: {
@@ -264,7 +264,7 @@ export declare const scanSurfaceCopy: {
             };
         };
     };
-    /** PR narrative presentation — channel-specific copy built from ScanNarrativeFacts. */
+    /** PR narrative presentation - channel-specific copy built from ScanNarrativeFacts. */
     readonly narrativeCard: {
         readonly structuralOnlyDisclaimer: "Structural dependency analysis only";
         readonly runtimeSurface: {
@@ -285,8 +285,8 @@ export declare const scanSurfaceCopy: {
             readonly moderate: "Moderate";
             readonly wide: "Wide";
         };
-        readonly areasSeparator: " · ";
-        readonly contextSeparator: " · ";
+        readonly areasSeparator: " | ";
+        readonly contextSeparator: " | ";
     };
     readonly cli: {
         readonly stderrAnalysisIncomplete: "Analysis could not be completed.";

package/dist/scanSurfaceCopy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanSurfaceCopy.d.ts","sourceRoot":"","sources":["../src/scanSurfaceCopy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;QAgBxB,8EAA8E;;QAG9E,6DAA6D;;;;QAO7D,qDAAqD;;;;;QASrD,mEAAmE;;;;QAOnE,yFAAyF;;QAGzF,mFAAmF;;QAGnF,0EAA0E;;QAE1E,8FAA8F;;QAE9F,+DAA+D;;;QAI/D,6EAA6E;;;;;QAK7E,2CAA2C;;;QAK3C,2EAA2E;;QAE3E,4EAA4E;;;QAI5E,sEAAsE;;;IAGxE,2EAA2E;;;;;;;;;;;;;;QAiBzE,oEAAoE;;;IAGtE,wEAAwE;;;;;;QAOtE,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCzC,yDAAyD;;YAGzD,mDAAmD;;YAGnD,8BAA8B;;YAE9B,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4CtD,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsI/C,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4BvF,sEAAsE;;;;;CAO9D,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa5D"}
+{"version":3,"file":"scanSurfaceCopy.d.ts","sourceRoot":"","sources":["../src/scanSurfaceCopy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;QAgBxB,8EAA8E;;QAG9E,6DAA6D;;;;QAO7D,qDAAqD;;;;;QASrD,mEAAmE;;;;QAOnE,yFAAyF;;QAGzF,mFAAmF;;QAGnF,4EAA4E;;QAE5E,8FAA8F;;QAE9F,+DAA+D;;;QAI/D,6EAA6E;;;;;QAK7E,2CAA2C;;;QAK3C,2EAA2E;;QAE3E,4EAA4E;;;QAI5E,sEAAsE;;;IAGxE,2EAA2E;;;;;;;;;;;;;;QAiBzE,oEAAoE;;;IAGtE,wEAAwE;;;;;;QAOtE,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCzC,yDAAyD;;YAGzD,mDAAmD;;YAGnD,8BAA8B;;YAE9B,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4CtD,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsI/C,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4BvF,sEAAsE;;;;;CAO9D,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa5D"}