@mergesignal/shared 0.4.0 → 0.4.2

package/dist/repoIntelligenceSchema.js

@@ -7,7 +7,7 @@
  */
 import { z } from "zod";
 /** Bump when wire schema changes incompatibly. */
-export const REPO_INTELLIGENCE_ABI = "1";
+export const REPO_INTELLIGENCE_ABI = "2";
 const surfaceKindSchema = z.enum(["runtime", "build", "test", "unknown"]);
 const reachabilityKindSchema = z.enum([
     "on_runtime_paths",
@@ -24,11 +24,83 @@ const packageUsageWireSchema = z.object({
     criticalPaths: z.array(z.string()).optional(),
     areas: z.array(z.string()).optional(),
 });
+const dependencyClassSchema = z.enum([
+    "runtime",
+    "tooling",
+    "test",
+    "lint",
+    "format",
+    "build",
+    "ci",
+    "unknown",
+]);
+const packageRoleSchema = z.enum([
+    "typechecker",
+    "compiler",
+    "bundler",
+    "linter",
+    "formatter",
+    "test_runner",
+    "http_framework",
+    "auth",
+    "queue",
+    "orm",
+    "unknown",
+]);
+const lockfileKindSchema = z.enum([
+    "production",
+    "development",
+    "optional",
+    "unknown",
+]);
+const runtimeImpactSchema = z.enum([
+    "none",
+    "possible",
+    "confirmed",
+    "unknown",
+]);
+const expectedImpactSchema = z.enum([
+    "runtime",
+    "build_time",
+    "typecheck",
+    "test_time",
+    "development_only",
+    "unknown",
+]);
+const evidenceStrengthSchema = z.enum(["high", "medium", "low"]);
+const classificationProvenanceSchema = z.object({
+    dependencyClass: z.enum([
+        "registry",
+        "graph",
+        "lockfile",
+        "heuristic",
+        "unknown",
+    ]),
+    packageRole: z.enum(["registry", "graph", "heuristic", "unknown"]),
+    registryEntryId: z.string().optional(),
+});
+const semanticDiagnosticSchema = z.object({
+    packageName: z.string().min(1),
+    ruleId: z.string().min(1),
+    before: z.record(z.string(), z.unknown()),
+    after: z.record(z.string(), z.unknown()),
+    reason: z.string().min(1),
+});
 const packageIntelWireSchema = z.object({
     runtimeSurface: surfaceKindSchema,
     reachability: reachabilityKindSchema,
     usage: packageUsageWireSchema,
     areas: z.array(z.string()).optional(),
+    dependencyClass: dependencyClassSchema.optional(),
+    packageRole: packageRoleSchema.optional(),
+    lockfileKind: lockfileKindSchema.optional(),
+    runtimeImpact: runtimeImpactSchema.optional(),
+    expectedImpact: expectedImpactSchema.optional(),
+    evidenceStrength: evidenceStrengthSchema.optional(),
+    confidenceReason: z.string().optional(),
+    verificationFocus: z.array(z.string()).optional(),
+    suppressRuntimeNarrative: z.boolean().optional(),
+    classificationProvenance: classificationProvenanceSchema.optional(),
 });
 const areaSchema = z.object({
     id: z.string().min(1),
@@ -54,6 +126,7 @@ export const repoIntelligenceWireSchema = z.object({
     affectedAreas: z.array(areaSchema).optional(),
     hotspots: z.array(hotspotWireSchema).optional(),
     frameworks: z.array(z.string().min(1)).optional(),
+    semanticDiagnostics: z.array(semanticDiagnosticSchema).optional(),
 });
 function formatZodIssues(error) {
     return error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`);

package/dist/repoIntelligenceSemantics.d.ts

@@ -0,0 +1,29 @@
+import type { RepoIntelligence } from "./repoIntelligenceSchema.js";
+export type DependencyClass = "runtime" | "tooling" | "test" | "lint" | "format" | "build" | "ci" | "unknown";
+export type PackageRole = "typechecker" | "compiler" | "bundler" | "linter" | "formatter" | "test_runner" | "http_framework" | "auth" | "queue" | "orm" | "unknown";
+export type LockfileKind = "production" | "development" | "optional" | "unknown";
+export type RuntimeImpact = "none" | "possible" | "confirmed" | "unknown";
+export type ExpectedImpact = "runtime" | "build_time" | "typecheck" | "test_time" | "development_only" | "unknown";
+export type EvidenceStrength = "high" | "medium" | "low";
+export type ClassificationSource = "registry" | "graph" | "lockfile" | "heuristic" | "unknown";
+export type SemanticDiagnostic = {
+    packageName: string;
+    ruleId: string;
+    before: Record<string, unknown>;
+    after: Record<string, unknown>;
+    reason: string;
+};
+export type SanitizeRepoIntelligenceResult = {
+    wire: RepoIntelligence;
+    diagnostics: SemanticDiagnostic[];
+    degradedPackages: string[];
+};
+type PackageRow = RepoIntelligence["packages"][string];
+/**
+ * Hard gate: normalize contradictory package intelligence before wire emit.
+ */
+export declare function sanitizeRepoIntelligenceSemantics(draft: RepoIntelligence): SanitizeRepoIntelligenceResult;
+/** Returns true when wire is safe for runtime narrative tier1. */
+export declare function isRuntimeNarrativeSafe(row: PackageRow | undefined): boolean;
+export {};
+//# sourceMappingURL=repoIntelligenceSemantics.d.ts.map

package/dist/repoIntelligenceSemantics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoIntelligenceSemantics.d.ts","sourceRoot":"","sources":["../src/repoIntelligenceSemantics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,SAAS,GACT,MAAM,GACN,MAAM,GACN,QAAQ,GACR,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,MAAM,GACN,OAAO,GACP,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,YAAY,GACZ,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,OAAO,GACP,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAyBF,KAAK,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AA+IvD;;GAEG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,gBAAgB,GACtB,8BAA8B,CAoBhC;AAED,kEAAkE;AAClE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAa3E"}

package/dist/repoIntelligenceSemantics.js

@@ -0,0 +1,146 @@
+const TOOLING_CLASSES = new Set([
+    "tooling",
+    "test",
+    "lint",
+    "format",
+    "build",
+    "ci",
+]);
+const RUNTIME_VERIFICATION = new Set([
+    "auth_flow",
+    "route_handlers",
+    "routes",
+    "handlers",
+    "serialization",
+    "hooks",
+    "plugins",
+    "session",
+    "auth",
+    "queue",
+    "workers",
+]);
+function cloneWire(wire) {
+    return structuredClone(wire);
+}
+function isToolingClass(dc) {
+    return dc != null && TOOLING_CLASSES.has(dc);
+}
+function stripRuntimeVerification(focus) {
+    if (!focus?.length)
+        return [];
+    return focus.filter((f) => !RUNTIME_VERIFICATION.has(f));
+}
+function applyS1(row) {
+    return row.runtimeSurface === "runtime" && row.reachability === "unreachable";
+}
+function applyS2(row) {
+    return (row.runtimeImpact === "none" && row.reachability === "on_runtime_paths");
+}
+function applyS3(row) {
+    return (isToolingClass(row.dependencyClass) && row.runtimeImpact === "confirmed");
+}
+function applyS4(row) {
+    return (row.runtimeImpact === "confirmed" && (row.usage?.files?.length ?? 0) === 0);
+}
+function applyS5(row) {
+    if (!row.suppressRuntimeNarrative)
+        return false;
+    const focus = row.verificationFocus ?? [];
+    return focus.some((f) => RUNTIME_VERIFICATION.has(f));
+}
+function sanitizePackageRow(packageName, row) {
+    const diagnostics = [];
+    let degraded = false;
+    const next = { ...row };
+    const record = (ruleId, before, after, reason) => {
+        diagnostics.push({ packageName, ruleId, before, after, reason });
+        degraded = true;
+    };
+    if (applyS1(next)) {
+        const before = {
+            runtimeSurface: next.runtimeSurface,
+            reachability: next.reachability,
+        };
+        next.runtimeSurface = "build";
+        next.reachability = "build_only";
+        next.runtimeImpact = next.runtimeImpact ?? "none";
+        next.suppressRuntimeNarrative = true;
+        record("S1", before, { runtimeSurface: next.runtimeSurface, reachability: next.reachability }, "runtime_surface_unreachable");
+    }
+    if (applyS3(next)) {
+        const before = { runtimeImpact: next.runtimeImpact };
+        next.runtimeImpact = "none";
+        next.suppressRuntimeNarrative = true;
+        record("S3", before, { runtimeImpact: next.runtimeImpact }, "tooling_confirmed_without_proof");
+    }
+    if (applyS4(next)) {
+        const before = { runtimeImpact: next.runtimeImpact };
+        next.runtimeImpact = "none";
+        next.evidenceStrength = "low";
+        next.suppressRuntimeNarrative = true;
+        record("S4", before, { runtimeImpact: next.runtimeImpact }, "confirmed_without_imports");
+    }
+    if (applyS2(next)) {
+        const before = { reachability: next.reachability };
+        next.reachability = "unknown";
+        record("S2", before, { reachability: next.reachability }, "none_but_on_runtime_paths");
+    }
+    if (applyS5(next)) {
+        const before = { verificationFocus: next.verificationFocus };
+        next.verificationFocus = stripRuntimeVerification(next.verificationFocus);
+        record("S5", before, { verificationFocus: next.verificationFocus }, "runtime_focus_while_suppressed");
+    }
+    if (next.runtimeSurface === "runtime" &&
+        next.reachability === "unreachable") {
+        next.runtimeSurface = "unknown";
+        next.reachability = "unknown";
+        next.suppressRuntimeNarrative = true;
+        degraded = true;
+    }
+    if (next.suppressRuntimeNarrative && next.runtimeImpact === "confirmed") {
+        next.runtimeImpact = "unknown";
+        degraded = true;
+    }
+    return { row: next, diagnostics, degraded };
+}
+/**
+ * Hard gate: normalize contradictory package intelligence before wire emit.
+ */
+export function sanitizeRepoIntelligenceSemantics(draft) {
+    const wire = cloneWire(draft);
+    const diagnostics = [];
+    const degradedPackages = [];
+    for (const [packageName, row] of Object.entries(wire.packages)) {
+        const result = sanitizePackageRow(packageName, row);
+        wire.packages[packageName] = result.row;
+        diagnostics.push(...result.diagnostics);
+        if (result.degraded)
+            degradedPackages.push(packageName);
+    }
+    if (diagnostics.length > 0) {
+        wire.semanticDiagnostics = [
+            ...(wire.semanticDiagnostics ?? []),
+            ...diagnostics,
+        ];
+    }
+    return { wire, diagnostics, degradedPackages };
+}
+/** Returns true when wire is safe for runtime narrative tier1. */
+export function isRuntimeNarrativeSafe(row) {
+    if (!row)
+        return false;
+    if (row.suppressRuntimeNarrative === true)
+        return false;
+    if (row.runtimeImpact === "none")
+        return false;
+    if (row.runtimeSurface === "runtime" && row.reachability === "unreachable") {
+        return false;
+    }
+    if (row.runtimeImpact === "confirmed" || row.runtimeImpact === "possible") {
+        return true;
+    }
+    if (row.runtimeImpact === "unknown")
+        return false;
+    // ABI 1 wire without semantic fields: allow non-contradictory surface/reach pairs.
+    return row.runtimeSurface != null && row.reachability != null;
+}

package/dist/repoIntelligenceSemantics.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=repoIntelligenceSemantics.test.d.ts.map

package/dist/repoIntelligenceSemantics.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repoIntelligenceSemantics.test.d.ts","sourceRoot":"","sources":["../src/repoIntelligenceSemantics.test.ts"],"names":[],"mappings":""}

package/dist/repoIntelligenceSemantics.test.js

@@ -0,0 +1,63 @@
+import { describe, expect, it } from "vitest";
+import { isRuntimeNarrativeSafe, sanitizeRepoIntelligenceSemantics, } from "./repoIntelligenceSemantics.js";
+function basePkg(overrides = {}) {
+    return {
+        runtimeSurface: "runtime",
+        reachability: "unreachable",
+        usage: { packageName: "typescript", files: [] },
+        ...overrides,
+    };
+}
+describe("sanitizeRepoIntelligenceSemantics", () => {
+    it("S1: neutralizes runtime + unreachable", () => {
+        const draft = {
+            packages: {
+                typescript: basePkg({
+                    runtimeImpact: "unknown",
+                }),
+            },
+        };
+        const { wire, diagnostics } = sanitizeRepoIntelligenceSemantics(draft);
+        expect(wire.packages.typescript?.runtimeSurface).not.toBe("runtime");
+        expect(wire.packages.typescript?.reachability).not.toBe("unreachable");
+        expect(wire.packages.typescript?.suppressRuntimeNarrative).toBe(true);
+        expect(diagnostics.some((d) => d.ruleId === "S1")).toBe(true);
+    });
+    it("S3: tooling class cannot stay confirmed", () => {
+        const draft = {
+            packages: {
+                typescript: basePkg({
+                    dependencyClass: "tooling",
+                    runtimeImpact: "confirmed",
+                    runtimeSurface: "build",
+                    reachability: "build_only",
+                }),
+            },
+        };
+        const { wire } = sanitizeRepoIntelligenceSemantics(draft);
+        expect(wire.packages.typescript?.runtimeImpact).toBe("none");
+    });
+    it("S4: confirmed without imports downgrades", () => {
+        const draft = {
+            packages: {
+                fastify: basePkg({
+                    runtimeImpact: "confirmed",
+                    usage: { packageName: "fastify", files: [] },
+                }),
+            },
+        };
+        const { wire } = sanitizeRepoIntelligenceSemantics(draft);
+        expect(wire.packages.fastify?.runtimeImpact).toBe("none");
+    });
+});
+describe("isRuntimeNarrativeSafe", () => {
+    it("returns false for suppressed runtime narrative", () => {
+        expect(isRuntimeNarrativeSafe({
+            runtimeSurface: "runtime",
+            reachability: "on_runtime_paths",
+            usage: { packageName: "x", files: ["src/a.ts"] },
+            suppressRuntimeNarrative: true,
+            runtimeImpact: "none",
+        })).toBe(false);
+    });
+});

package/dist/scanNarrativeFacts.d.ts

@@ -15,6 +15,33 @@ export type NarrativePackageUsage = {
     areas: string[];
 };
 export type RepoIntelligenceParseStatus = "ok" | "invalid" | "absent" | "untrusted";
+export type PackageDependencyClass = "runtime" | "tooling" | "test" | "lint" | "format" | "build" | "ci" | "unknown";
+export type PackageRoleKind = "typechecker" | "compiler" | "bundler" | "linter" | "formatter" | "test_runner" | "http_framework" | "auth" | "queue" | "orm" | "unknown";
+export type PackageRuntimeImpact = "none" | "possible" | "confirmed" | "unknown";
+export type PackageExpectedImpact = "runtime" | "build_time" | "typecheck" | "test_time" | "development_only" | "unknown";
+export type PackageEvidenceStrength = "high" | "medium" | "low";
+/** Engine semantic projection for one changed package (wire copy only). */
+export type ChangedPackageSemantics = {
+    packageName: string;
+    dependencyClass: PackageDependencyClass | null;
+    packageRole: PackageRoleKind | null;
+    runtimeImpact: PackageRuntimeImpact | null;
+    expectedImpact: PackageExpectedImpact | null;
+    suppressRuntimeNarrative: boolean;
+    evidenceStrength: PackageEvidenceStrength | null;
+    verificationFocus: string[];
+    usagePathCount: number;
+    usageAreaCount: number;
+};
+export type PackageSemanticsSummary = {
+    dependencyClass: PackageDependencyClass | null;
+    packageRole: PackageRoleKind | null;
+    runtimeImpact: PackageRuntimeImpact | null;
+    expectedImpact: PackageExpectedImpact | null;
+    suppressRuntimeNarrative: boolean;
+    evidenceStrength: PackageEvidenceStrength | null;
+    verificationFocus: string[];
+};
 export type ScanNarrativeFacts = {
     availability: {
         mode: NarrativeAvailabilityMode;
@@ -47,6 +74,10 @@ export type ScanNarrativeFacts = {
             frameworks: string[];
         };
     } | null;
+    /** Primary changed package semantics (ABI 2 wire projection). */
+    packageSemantics: PackageSemanticsSummary | null;
+    /** Per changed package semantics for mixed-PR precedence (wire projection). */
+    changedPackageSemantics: ChangedPackageSemantics[];
     blastRadius: {
         level: BlastRadiusLevel;
         changedPackageCount?: number;

package/dist/scanNarrativeFacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;QACjE,qBAAqB,EAAE,2BAA2B,CAAC;KACpD,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAEtC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACnD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IAET,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE;QACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;KAC5C,CAAC;IAEF,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAoBxC,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC"}
+{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,SAAS,GACT,MAAM,GACN,MAAM,GACN,QAAQ,GACR,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,MAAM,GACN,OAAO,GACP,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,YAAY,GACZ,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEhE,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;QACjE,qBAAqB,EAAE,2BAA2B,CAAC;KACpD,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAEtC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACnD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IAET,iEAAiE;IACjE,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAEjD,+EAA+E;IAC/E,uBAAuB,EAAE,uBAAuB,EAAE,CAAC;IAEnD,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE;QACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;KAC5C,CAAC;IAEF,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAsBxC,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC"}

package/dist/scanNarrativeFacts.js

@@ -10,6 +10,8 @@ export const EMPTY_SCAN_NARRATIVE_FACTS = {
     frameworks: [],
     runtimeSurface: null,
     reachability: null,
+    packageSemantics: null,
+    changedPackageSemantics: [],
     blastRadius: null,
     affectedAreas: [],
     hotspots: [],

package/dist/scanSurfaceCopy.d.ts

@@ -297,11 +297,19 @@ export declare const scanSurfaceCopy: {
         readonly multiRuntimeHeadline: "Multiple runtime dependency upgrades need review";
         readonly buildOnlyHeadline: "{package} patch upgrade with limited application impact";
         readonly runtimeHeadline: "{package} upgrade affects {surface}";
+        readonly toolingPatchHeadline: "{package} patch upgrade";
+        readonly toolingUpgradeHeadline: "{package} tooling upgrade";
+        readonly runtimeUpgradeHeadline: "{package} runtime upgrade affects {surface}";
+        readonly safeNeutralHeadline: "{package} dependency upgrade";
         readonly defaultUpgradeHeadline: "{package} dependency upgrade needs review";
         readonly changedPackageKeyPoint: "Changed package: {package}";
         readonly usedInPathsSingle: "Used across application code ({path})";
         readonly usedInPathsMultiple: "Used across {count} code paths";
         readonly noRuntimePathsKeyPoint: "No runtime usage paths detected";
+        readonly expectedImpactLimitedKeyPoint: "Expected impact is limited to {workflows}";
+        readonly limitedEvidenceKeyPoint: "Evidence for this upgrade is limited";
+        readonly usedInRuntimePathsKeyPoint: "Used in runtime application paths";
+        readonly runtimeUsageKeyPoint: "Used in runtime application paths";
         readonly blastRadiusWideKeyPoint: "Blast radius is wide";
         readonly blastRadiusLevelKeyPoint: "Blast radius is {level}";
         readonly noAffectedAreasKeyPoint: "No affected application areas identified";

package/dist/scanSurfaceCopy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanSurfaceCopy.d.ts","sourceRoot":"","sources":["../src/scanSurfaceCopy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;QAgBxB,8EAA8E;;QAG9E,6DAA6D;;;;QAO7D,qDAAqD;;;;;QASrD,mEAAmE;;;;QAOnE,yFAAyF;;QAGzF,mFAAmF;;QAGnF,4EAA4E;;QAE5E,8FAA8F;;QAE9F,+DAA+D;;;QAI/D,6EAA6E;;;;;QAK7E,2CAA2C;;;QAK3C,2EAA2E;;QAE3E,4EAA4E;;;QAI5E,sEAAsE;;;IAGxE,2EAA2E;;;;;;;;;;;;;;QAiBzE,oEAAoE;;;IAGtE,wEAAwE;;;;;;QAOtE,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCzC,yDAAyD;;YAGzD,mDAAmD;;YAGnD,8BAA8B;;YAE9B,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4CtD,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsI/C,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;IAwBvF,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+BlF,sEAAsE;;;;;CAO9D,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa5D"}
+{"version":3,"file":"scanSurfaceCopy.d.ts","sourceRoot":"","sources":["../src/scanSurfaceCopy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;QAgBxB,8EAA8E;;QAG9E,6DAA6D;;;;QAO7D,qDAAqD;;;;;QASrD,mEAAmE;;;;QAOnE,yFAAyF;;QAGzF,mFAAmF;;QAGnF,4EAA4E;;QAE5E,8FAA8F;;QAE9F,+DAA+D;;;QAI/D,6EAA6E;;;;;QAK7E,2CAA2C;;;QAK3C,2EAA2E;;QAE3E,4EAA4E;;;QAI5E,sEAAsE;;;IAGxE,2EAA2E;;;;;;;;;;;;;;QAiBzE,oEAAoE;;;IAGtE,wEAAwE;;;;;;QAOtE,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCzC,yDAAyD;;YAGzD,mDAAmD;;YAGnD,8BAA8B;;YAE9B,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA4CtD,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsI/C,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;IAwBvF,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuClF,sEAAsE;;;;;CAO9D,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa5D"}

package/dist/scanSurfaceCopy.js

@@ -300,11 +300,19 @@ export const scanSurfaceCopy = {
         multiRuntimeHeadline: "Multiple runtime dependency upgrades need review",
         buildOnlyHeadline: "{package} patch upgrade with limited application impact",
         runtimeHeadline: "{package} upgrade affects {surface}",
+        toolingPatchHeadline: "{package} patch upgrade",
+        toolingUpgradeHeadline: "{package} tooling upgrade",
+        runtimeUpgradeHeadline: "{package} runtime upgrade affects {surface}",
+        safeNeutralHeadline: "{package} dependency upgrade",
         defaultUpgradeHeadline: "{package} dependency upgrade needs review",
         changedPackageKeyPoint: "Changed package: {package}",
         usedInPathsSingle: "Used across application code ({path})",
         usedInPathsMultiple: "Used across {count} code paths",
         noRuntimePathsKeyPoint: "No runtime usage paths detected",
+        expectedImpactLimitedKeyPoint: "Expected impact is limited to {workflows}",
+        limitedEvidenceKeyPoint: "Evidence for this upgrade is limited",
+        usedInRuntimePathsKeyPoint: "Used in runtime application paths",
+        runtimeUsageKeyPoint: "Used in runtime application paths",
         blastRadiusWideKeyPoint: "Blast radius is wide",
         blastRadiusLevelKeyPoint: "Blast radius is {level}",
         noAffectedAreasKeyPoint: "No affected application areas identified",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mergesignal/shared",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "MergeSignal shared scan contract, presentation policy, and trusted validation",
   "type": "module",
   "main": "./dist/index.js",