@mergesignal/shared 0.3.0 → 0.4.0

package/dist/presentation/dto/types.d.ts

@@ -0,0 +1,24 @@
+export type PipelineStatus = "queued" | "running" | "done" | "failed";
+export type PresentationStatus = "safe" | "needs_review" | "risky";
+export type PresentationDensity = "minimal" | "standard" | "rich";
+export type PresentationConfidence = "high" | "medium" | "low";
+export type PresentationPriority = "pr_intelligence" | "limited";
+export type PresentationEvidenceRow = {
+    label: string;
+    value: string;
+};
+/** User-facing evidence summary - mirrors profile.priority */
+export type PresentationEvidenceContext = {
+    priority: PresentationPriority;
+    degradedMessage?: string;
+};
+export type FindingCountSummary = {
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
+};
+export declare function aggregateFindingCounts(findings: Array<{
+    severity: string;
+}> | null | undefined): FindingCountSummary;
+//# sourceMappingURL=types.d.ts.map

package/dist/presentation/dto/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEtE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;AAEnE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAElE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/D,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,uBAAuB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,8DAA8D;AAC9D,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACvD,mBAAmB,CAgBrB"}

package/dist/presentation/dto/types.js

@@ -0,0 +1,22 @@
+export function aggregateFindingCounts(findings) {
+    const counts = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+    };
+    if (!Array.isArray(findings))
+        return counts;
+    for (const f of findings) {
+        const s = f.severity;
+        if (s === "critical")
+            counts.critical += 1;
+        else if (s === "high")
+            counts.high += 1;
+        else if (s === "medium")
+            counts.medium += 1;
+        else if (s === "low")
+            counts.low += 1;
+    }
+    return counts;
+}

package/dist/presentation/fixtures/scanResultFixtures.d.ts

@@ -0,0 +1,5 @@
+import type { ScanResult } from "../../types.js";
+export declare const scanResultFastifyRuntime: ScanResult;
+export declare const scanResultTypescriptPatch: ScanResult;
+export declare const scanResultLimitedContext: ScanResult;
+//# sourceMappingURL=scanResultFixtures.d.ts.map

package/dist/presentation/fixtures/scanResultFixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanResultFixtures.d.ts","sourceRoot":"","sources":["../../../src/presentation/fixtures/scanResultFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAOjD,eAAO,MAAM,wBAAwB,EAAE,UA6BtC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,UAwBvC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAyBtC,CAAC"}

package/dist/presentation/fixtures/scanResultFixtures.js

@@ -0,0 +1,83 @@
+import { fixtureRepoIntelligenceFastify, fixtureRepoIntelligenceTypescript, } from "../../fixtures/repoIntelligenceFixtures.js";
+import { analysisPreparationWithValidRepoIntel } from "../../fixtures/repoIntelligenceTestHelpers.js";
+export const scanResultFastifyRuntime = {
+    totalScore: 55,
+    layerScores: {
+        security: 10,
+        maintainability: 20,
+        ecosystem: 30,
+        upgradeImpact: 15,
+    },
+    findings: [],
+    generatedAt: "2026-01-01T00:00:00.000Z",
+    changedPackages: ["fastify"],
+    analysisPreparation: analysisPreparationWithValidRepoIntel(),
+    repoIntelligence: fixtureRepoIntelligenceFastify,
+    decision: {
+        recommendation: "needs_review",
+        confidence: "medium",
+        reasoning: [],
+    },
+    insights: [
+        {
+            type: "usage_risk",
+            priority: "high",
+            confidence: "confirmed",
+            scope: "changed",
+            message: "Review fastify middleware ordering",
+            context: "apps/api/src/middleware/auth.ts",
+            remediation: "Run auth smoke tests",
+        },
+    ],
+};
+export const scanResultTypescriptPatch = {
+    totalScore: 18,
+    layerScores: {
+        security: 5,
+        maintainability: 8,
+        ecosystem: 10,
+        upgradeImpact: 5,
+    },
+    findings: [],
+    generatedAt: "2026-01-01T00:00:00.000Z",
+    changedPackages: ["typescript"],
+    analysisPreparation: analysisPreparationWithValidRepoIntel(),
+    repoIntelligence: fixtureRepoIntelligenceTypescript,
+    decision: {
+        recommendation: "safe",
+        confidence: "high",
+        reasoning: [],
+    },
+    graphInsights: {
+        maxDepth: 4,
+        nodes: 120,
+        edges: 340,
+        hotspots: [],
+    },
+};
+export const scanResultLimitedContext = {
+    totalScore: 40,
+    layerScores: {
+        security: 10,
+        maintainability: 10,
+        ecosystem: 10,
+        upgradeImpact: 10,
+    },
+    findings: [],
+    generatedAt: "2026-01-01T00:00:00.000Z",
+    changedPackages: ["lodash"],
+    repoIntelligence: { invalid: true },
+    graphInsights: {
+        maxDepth: 5,
+        nodes: 200,
+        edges: 500,
+        hotspots: [
+            { kind: "hotspot", packageName: "lodash", direct: true, depth: 2 },
+        ],
+    },
+    decision: {
+        recommendation: "needs_review",
+        confidence: "low",
+        reasoning: [],
+    },
+};

package/dist/presentation/index.d.ts

@@ -0,0 +1,25 @@
+export type { ScanPresentationBundle } from "./orchestration/scanPresentationBundle.js";
+export { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+export type { BuildScanPresentationBundleInput } from "./orchestration/buildScanPresentationBundle.js";
+export { buildScanCardPresentation } from "./orchestration/buildScanCardPresentation.js";
+export type { BuildScanCardPresentationInput } from "./orchestration/buildScanCardPresentation.js";
+export { buildScanDetailsPresentation } from "./orchestration/buildScanDetailsPresentation.js";
+export type { BuildScanDetailsPresentationInput } from "./orchestration/buildScanDetailsPresentation.js";
+export type { PresentationProfile } from "./profile/presentationProfile.js";
+export type { PipelineStatus, PresentationStatus, PresentationDensity, PresentationConfidence, PresentationPriority, PresentationEvidenceContext, PresentationEvidenceRow, } from "./dto/types.js";
+export type { ScanCardPresentation } from "./dto/scanCardPresentation.js";
+export type { ScanDetailsPresentation } from "./dto/scanDetailsPresentation.js";
+export type { GitHubCheckRunPresentation, GitHubPrCommentPresentation, CliScanPresentation, } from "./dto/githubAndCliPresentation.js";
+export { presentScanCard } from "./presenters/presentScanCard.js";
+export type { PresentScanCardContext } from "./presenters/presentScanCard.js";
+export { presentPipelineScanCard } from "./presenters/presentPipelineScanCard.js";
+export { presentScanDetails } from "./presenters/presentScanDetails.js";
+export type { PresentScanDetailsContext } from "./presenters/presentScanDetails.js";
+export { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+export { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+export { presentCliScanSummary } from "./presenters/presentCliScanSummary.js";
+export { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkdown.js";
+export { renderGitHubPrCommentMarkdown } from "./render/renderGitHubPrCommentMarkdown.js";
+export { renderCliScanSummaryText } from "./render/renderCliScanSummaryText.js";
+export { composeHeadline, composeSubheadline, composeKeyPoints, composeVerificationActions, composeAffectedAreaLabels, composeEvidenceRows, composeSupportingContext, evidenceContextFromProfile, } from "./compose/narrativeCompose.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/presentation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/presentation/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,YAAY,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AACnG,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,YAAY,EAAE,iCAAiC,EAAE,MAAM,iDAAiD,CAAC;AAEzG,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,YAAY,EACV,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,YAAY,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC"}

package/dist/presentation/index.js

@@ -0,0 +1,13 @@
+export { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+export { buildScanCardPresentation } from "./orchestration/buildScanCardPresentation.js";
+export { buildScanDetailsPresentation } from "./orchestration/buildScanDetailsPresentation.js";
+export { presentScanCard } from "./presenters/presentScanCard.js";
+export { presentPipelineScanCard } from "./presenters/presentPipelineScanCard.js";
+export { presentScanDetails } from "./presenters/presentScanDetails.js";
+export { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+export { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+export { presentCliScanSummary } from "./presenters/presentCliScanSummary.js";
+export { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkdown.js";
+export { renderGitHubPrCommentMarkdown } from "./render/renderGitHubPrCommentMarkdown.js";
+export { renderCliScanSummaryText } from "./render/renderCliScanSummaryText.js";
+export { composeHeadline, composeSubheadline, composeKeyPoints, composeVerificationActions, composeAffectedAreaLabels, composeEvidenceRows, composeSupportingContext, evidenceContextFromProfile, } from "./compose/narrativeCompose.js";

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts

@@ -0,0 +1,11 @@
+import type { PipelineStatus } from "../dto/types.js";
+import type { ScanResult } from "../../types.js";
+import type { ScanCardPresentation } from "../dto/scanCardPresentation.js";
+export type BuildScanCardPresentationInput = {
+    pipelineStatus: PipelineStatus;
+    result: ScanResult | null;
+    decision?: string | null;
+    totalScore?: number | null;
+};
+export declare function buildScanCardPresentation(input: BuildScanCardPresentationInput): ScanCardPresentation;
+//# sourceMappingURL=buildScanCardPresentation.d.ts.map

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildScanCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanCardPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAKjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AA2BF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,oBAAoB,CA2BtB"}

package/dist/presentation/orchestration/buildScanCardPresentation.js

@@ -0,0 +1,44 @@
+import { mergePostureFromDecision } from "../../riskVocabulary.js";
+import { buildScanPresentationBundle } from "./buildScanPresentationBundle.js";
+import { presentScanCard } from "../presenters/presentScanCard.js";
+import { presentPipelineScanCard } from "../presenters/presentPipelineScanCard.js";
+function minimalResultFromDenormalized(decision, totalScore) {
+    const posture = mergePostureFromDecision(decision ?? undefined);
+    if (!posture && (totalScore == null || !Number.isFinite(totalScore))) {
+        return null;
+    }
+    return {
+        totalScore: totalScore ?? 0,
+        layerScores: {
+            security: 0,
+            maintainability: 0,
+            ecosystem: 0,
+            upgradeImpact: 0,
+        },
+        findings: [],
+        generatedAt: new Date().toISOString(),
+        decision: posture
+            ? { recommendation: posture, confidence: "medium", reasoning: [] }
+            : undefined,
+    };
+}
+export function buildScanCardPresentation(input) {
+    if (input.pipelineStatus !== "done") {
+        return presentPipelineScanCard(input.pipelineStatus === "failed" ? "failed" : input.pipelineStatus);
+    }
+    const result = input.result ??
+        minimalResultFromDenormalized(input.decision, input.totalScore);
+    if (!result) {
+        return presentPipelineScanCard("failed");
+    }
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: input.pipelineStatus,
+        decision: input.decision,
+        totalScore: input.totalScore,
+    });
+    if (!bundle) {
+        return presentPipelineScanCard("failed");
+    }
+    return presentScanCard(bundle, { includeFindingCounts: true });
+}

package/dist/presentation/orchestration/buildScanDetailsPresentation.d.ts

@@ -0,0 +1,14 @@
+import type { PipelineStatus } from "../dto/types.js";
+import type { ScanResult } from "../../types.js";
+import type { ScanDetailsPresentation } from "../dto/scanDetailsPresentation.js";
+export type BuildScanDetailsPresentationInput = {
+    scanId: string;
+    pipelineStatus: PipelineStatus;
+    result: ScanResult;
+    methodologyVersion?: string | null;
+    prNumber?: number | null;
+    decision?: string | null;
+    totalScore?: number | null;
+};
+export declare function buildScanDetailsPresentation(input: BuildScanDetailsPresentationInput): ScanDetailsPresentation | null;
+//# sourceMappingURL=buildScanDetailsPresentation.d.ts.map

package/dist/presentation/orchestration/buildScanDetailsPresentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildScanDetailsPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanDetailsPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,uBAAuB,GAAG,IAAI,CAiBhC"}

package/dist/presentation/orchestration/buildScanDetailsPresentation.js

@@ -0,0 +1,19 @@
+import { buildScanPresentationBundle } from "./buildScanPresentationBundle.js";
+import { presentScanDetails } from "../presenters/presentScanDetails.js";
+export function buildScanDetailsPresentation(input) {
+    if (input.pipelineStatus !== "done" || !input.result)
+        return null;
+    const bundle = buildScanPresentationBundle({
+        result: input.result,
+        pipelineStatus: input.pipelineStatus,
+        decision: input.decision,
+        totalScore: input.totalScore,
+    });
+    if (!bundle)
+        return null;
+    return presentScanDetails(bundle, {
+        scanId: input.scanId,
+        methodologyVersion: input.methodologyVersion,
+        prNumber: input.prNumber,
+    });
+}

package/dist/presentation/orchestration/buildScanPresentationBundle.d.ts

@@ -0,0 +1,15 @@
+import type { ScanResult } from "../../types.js";
+import type { PipelineStatus } from "../dto/types.js";
+import type { ScanPresentationBundle } from "./scanPresentationBundle.js";
+export type BuildScanPresentationBundleInput = {
+    result: ScanResult;
+    pipelineStatus: PipelineStatus;
+    decision?: string | null;
+    totalScore?: number | null;
+};
+/**
+ * Mandatory orchestration entrypoint for completed-scan presentation.
+ * Only place that calls deriveScanNarrative and derivePresentationProfile.
+ */
+export declare function buildScanPresentationBundle(input: BuildScanPresentationBundleInput): ScanPresentationBundle | null;
+//# sourceMappingURL=buildScanPresentationBundle.d.ts.map

package/dist/presentation/orchestration/buildScanPresentationBundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildScanPresentationBundle.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanPresentationBundle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,UAAU,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAiB/B"}

package/dist/presentation/orchestration/buildScanPresentationBundle.js

@@ -0,0 +1,23 @@
+import { deriveScanNarrative } from "../../deriveScanNarrative.js";
+import { derivePresentationProfile } from "../profile/derivePresentationProfile.js";
+/**
+ * Mandatory orchestration entrypoint for completed-scan presentation.
+ * Only place that calls deriveScanNarrative and derivePresentationProfile.
+ */
+export function buildScanPresentationBundle(input) {
+    if (input.pipelineStatus !== "done" || !input.result)
+        return null;
+    const facts = deriveScanNarrative(input.result);
+    const profile = derivePresentationProfile(facts, {
+        pipelineStatus: input.pipelineStatus,
+        decision: input.decision,
+        totalScore: input.totalScore ?? input.result.totalScore,
+    });
+    if (!profile)
+        return null;
+    return {
+        facts,
+        profile,
+        result: input.result,
+    };
+}

package/dist/presentation/orchestration/scanPresentationBundle.d.ts

@@ -0,0 +1,15 @@
+import type { ScanNarrativeFacts } from "../../scanNarrativeFacts.js";
+import type { ScanResult } from "../../types.js";
+import type { PresentationProfile } from "../profile/presentationProfile.js";
+export type ScanPresentationBundle = {
+    facts: ScanNarrativeFacts;
+    profile: PresentationProfile;
+    /**
+     * Projection-only reference to the raw scan payload.
+     * Presenters may read fields for formatting but must NOT re-derive interpretation.
+     */
+    result: ScanResult;
+    /** Extension point for future shared derived artifacts */
+    shared?: Record<string, unknown>;
+};
+//# sourceMappingURL=scanPresentationBundle.d.ts.map

package/dist/presentation/orchestration/scanPresentationBundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanPresentationBundle.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/scanPresentationBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,mBAAmB,CAAC;IAC7B;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC"}

package/dist/presentation/orchestration/scanPresentationBundle.js

@@ -0,0 +1 @@
+export {};

package/dist/presentation/presentation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=presentation.test.d.ts.map

package/dist/presentation/presentation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation.test.d.ts","sourceRoot":"","sources":["../../src/presentation/presentation.test.ts"],"names":[],"mappings":""}

package/dist/presentation/presentation.test.js

@@ -0,0 +1,95 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentScanCard } from "./presenters/presentScanCard.js";
+import { presentScanDetails } from "./presenters/presentScanDetails.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+import { presentCliScanSummary } from "./presenters/presentCliScanSummary.js";
+import { scanResultFastifyRuntime, scanResultLimitedContext, scanResultTypescriptPatch, } from "./fixtures/scanResultFixtures.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const ORIGIN = "https://app.example.com";
+describe("buildScanPresentationBundle", () => {
+    it("returns null for incomplete pipeline", () => {
+        expect(buildScanPresentationBundle({
+            result: scanResultFastifyRuntime,
+            pipelineStatus: "running",
+        })).toBeNull();
+    });
+    it("fastify persona: rich needs_review pr_intelligence", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultFastifyRuntime,
+            pipelineStatus: "done",
+        });
+        expect(bundle.profile.density).toBe("rich");
+        expect(bundle.profile.status).toBe("needs_review");
+        expect(bundle.profile.priority).toBe("pr_intelligence");
+    });
+    it("typescript persona: minimal safe pr_intelligence", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultTypescriptPatch,
+            pipelineStatus: "done",
+        });
+        expect(bundle.profile.density).toBe("minimal");
+        expect(bundle.profile.status).toBe("safe");
+        expect(bundle.profile.priority).toBe("pr_intelligence");
+    });
+    it("limited context persona: minimal limited priority", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultLimitedContext,
+            pipelineStatus: "done",
+        });
+        expect(bundle.profile.density).toBe("minimal");
+        expect(bundle.profile.priority).toBe("limited");
+        expect(bundle.profile.degradedMessage).toBeTruthy();
+    });
+});
+describe("presentScanCard personas", () => {
+    it("fastify card is rich with affected areas and verification", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultFastifyRuntime,
+            pipelineStatus: "done",
+        });
+        const card = presentScanCard(bundle);
+        expect(card.density).toBe("rich");
+        expect(card.affectedAreas.length).toBeGreaterThan(0);
+        expect(card.verificationActions.length).toBeGreaterThan(0);
+        expect(card.headline.toLowerCase()).toContain("fastify");
+        expect(card.supportingContext).toBeUndefined();
+    });
+    it("typescript card is minimal safe without graph-first story", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultTypescriptPatch,
+            pipelineStatus: "done",
+        });
+        const card = presentScanCard(bundle);
+        expect(card.density).toBe("minimal");
+        expect(card.status).toBe("safe");
+        expect(card.changedPackages).toContain("typescript");
+        expect(card.verificationActions.length).toBeGreaterThan(0);
+    });
+});
+describe("presentation parity across surfaces", () => {
+    it("same bundle drives card, details, GitHub, CLI with identical profile", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultFastifyRuntime,
+            pipelineStatus: "done",
+        });
+        const card = presentScanCard(bundle);
+        const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+        const check = presentGitHubCheckRun(bundle, {
+            scanId: SCAN_ID,
+            webAppOrigin: ORIGIN,
+        });
+        const comment = presentGitHubPrComment(bundle);
+        const cli = presentCliScanSummary(bundle, { repoLabel: "acme/api" });
+        for (const dto of [card, details, check, comment, cli]) {
+            expect(dto.status).toBe(bundle.profile.status);
+            expect(dto.density).toBe(bundle.profile.density);
+            expect(dto.confidence).toBe(bundle.profile.confidence);
+            expect(dto.evidenceContext?.priority).toBe(bundle.profile.priority);
+        }
+        expect(card.primaryPackage).toBe("fastify");
+        expect(details.narrative.primaryPackage).toBe("fastify");
+        expect(check.title.toLowerCase()).toContain("fastify");
+    });
+});

package/dist/presentation/presenters/presentCliScanSummary.d.ts

@@ -0,0 +1,6 @@
+import type { CliScanPresentation } from "../dto/githubAndCliPresentation.js";
+import type { ScanPresentationBundle } from "../orchestration/scanPresentationBundle.js";
+export declare function presentCliScanSummary(bundle: ScanPresentationBundle, ctx?: {
+    repoLabel?: string;
+}): CliScanPresentation;
+//# sourceMappingURL=presentCliScanSummary.d.ts.map

package/dist/presentation/presenters/presentCliScanSummary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentCliScanSummary.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentCliScanSummary.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAEzF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,mBAAmB,CA6BrB"}

package/dist/presentation/presenters/presentCliScanSummary.js

@@ -0,0 +1,30 @@
+import { composeHeadline, composeKeyPoints, composeSubheadline, composeSupportingContext, composeVerificationActions, evidenceContextFromProfile, } from "../compose/narrativeCompose.js";
+export function presentCliScanSummary(bundle, ctx = {}) {
+    const { facts, profile, result } = bundle;
+    const layers = result.layerScores;
+    const layerLine = layers
+        ? `security=${layers.security} maintainability=${layers.maintainability} ecosystem=${layers.ecosystem} upgradeImpact=${layers.upgradeImpact}`
+        : "";
+    return {
+        header: {
+            repoLabel: ctx.repoLabel ?? "scan",
+            methodology: result.methodologyVersion ?? undefined,
+            confidence: profile.confidence,
+        },
+        status: profile.status,
+        density: profile.density,
+        confidence: profile.confidence,
+        evidenceContext: evidenceContextFromProfile(bundle),
+        headline: composeHeadline(bundle),
+        subheadline: composeSubheadline(bundle),
+        keyPoints: composeKeyPoints(bundle, 6),
+        verificationActions: composeVerificationActions(bundle, 5),
+        metrics: {
+            riskIndex: facts.riskIndex ?? result.totalScore ?? 0,
+            layerLine,
+            findingCount: result.findings?.length ?? 0,
+            recommendationCount: result.recommendations?.length ?? 0,
+        },
+        supportingContext: composeSupportingContext(bundle),
+    };
+}

package/dist/presentation/presenters/presentGitHubCheckRun.d.ts

@@ -0,0 +1,8 @@
+import type { GitHubCheckRunPresentation } from "../dto/githubAndCliPresentation.js";
+import type { ScanPresentationBundle } from "../orchestration/scanPresentationBundle.js";
+export declare function presentGitHubCheckRun(bundle: ScanPresentationBundle, ctx: {
+    scanId: string;
+    webAppOrigin: string;
+    baseline?: boolean;
+}): GitHubCheckRunPresentation;
+//# sourceMappingURL=presentGitHubCheckRun.d.ts.map

package/dist/presentation/presenters/presentGitHubCheckRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentGitHubCheckRun.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentGitHubCheckRun.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAEzF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAChE,0BAA0B,CAkC5B"}

package/dist/presentation/presenters/presentGitHubCheckRun.js

@@ -0,0 +1,32 @@
+import { composeHeadline, composeKeyPoints, composeSubheadline, composeVerificationActions, evidenceContextFromProfile, } from "../compose/narrativeCompose.js";
+export function presentGitHubCheckRun(bundle, ctx) {
+    const { profile } = bundle;
+    const headline = composeHeadline(bundle);
+    const keyPoints = composeKeyPoints(bundle, 3);
+    const actions = composeVerificationActions(bundle, 3);
+    const detailsUrl = `${ctx.webAppOrigin.replace(/\/$/, "")}/scan/${ctx.scanId}`;
+    const conclusion = profile.status === "safe"
+        ? "success"
+        : profile.status === "risky"
+            ? "failure"
+            : "neutral";
+    const sections = [];
+    if (keyPoints.length > 0) {
+        sections.push({ id: "why", title: "Why", bullets: keyPoints });
+    }
+    if (actions.length > 0) {
+        sections.push({ id: "actions", title: "What to verify", bullets: actions });
+    }
+    sections.push({ id: "footer", bullets: [`Full scan: ${detailsUrl}`] });
+    return {
+        status: profile.status,
+        density: profile.density,
+        confidence: profile.confidence,
+        evidenceContext: evidenceContextFromProfile(bundle),
+        title: headline,
+        conclusion,
+        summaryLead: composeSubheadline(bundle) ?? headline,
+        sections,
+        detailsUrl,
+    };
+}

package/dist/presentation/presenters/presentGitHubPrComment.d.ts

@@ -0,0 +1,4 @@
+import type { GitHubPrCommentPresentation } from "../dto/githubAndCliPresentation.js";
+import type { ScanPresentationBundle } from "../orchestration/scanPresentationBundle.js";
+export declare function presentGitHubPrComment(bundle: ScanPresentationBundle): GitHubPrCommentPresentation;
+//# sourceMappingURL=presentGitHubPrComment.d.ts.map

package/dist/presentation/presenters/presentGitHubPrComment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentGitHubPrComment.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentGitHubPrComment.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAEzF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,2BAA2B,CAwC7B"}

package/dist/presentation/presenters/presentGitHubPrComment.js

@@ -0,0 +1,40 @@
+import { MERGE_POSTURE_LABEL } from "../../riskVocabulary.js";
+import { composeVerificationActions, evidenceContextFromProfile, } from "../compose/narrativeCompose.js";
+import { formatChangedPackagesShort, formatUsageSummaryLine, selectReviewerGuidance, } from "../../narrativePresentation.js";
+export function presentGitHubPrComment(bundle) {
+    const { facts, profile } = bundle;
+    const introLines = [];
+    const changed = formatChangedPackagesShort(facts, 3);
+    if (changed)
+        introLines.push(`Changed: ${changed}`);
+    const usage = formatUsageSummaryLine(facts, 1);
+    if (usage)
+        introLines.push(usage);
+    const verify = composeVerificationActions(bundle, 1)[0];
+    if (verify)
+        introLines.push(`Verify: ${verify}`);
+    const guidance = selectReviewerGuidance(facts, { scope: "changed", max: 3 });
+    const selected = guidance.length === 0
+        ? selectReviewerGuidance(facts, { max: 3 })
+        : guidance;
+    const guidanceBlocks = selected.map((g) => {
+        const where = g.context?.trim() ||
+            facts.packageUsage
+                .flatMap((u) => u.paths.slice(0, 1))
+                .filter(Boolean)[0] ||
+            "See scan detail for affected paths.";
+        const action = g.remediation?.trim() ||
+            composeVerificationActions(bundle, 1)[0] ||
+            "Review before merge.";
+        return { message: g.message, where, action };
+    });
+    return {
+        status: profile.status,
+        density: profile.density,
+        confidence: profile.confidence,
+        evidenceContext: evidenceContextFromProfile(bundle),
+        title: MERGE_POSTURE_LABEL[profile.status],
+        introLines,
+        guidanceBlocks,
+    };
+}

package/dist/presentation/presenters/presentPipelineScanCard.d.ts

@@ -0,0 +1,3 @@
+import type { ScanCardPresentation } from "../dto/scanCardPresentation.js";
+export declare function presentPipelineScanCard(pipelineStatus: "queued" | "running" | "failed"): ScanCardPresentation;
+//# sourceMappingURL=presentPipelineScanCard.d.ts.map

package/dist/presentation/presenters/presentPipelineScanCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentPipelineScanCard.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentPipelineScanCard.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAC9C,oBAAoB,CAqBtB"}