@mergesignal/shared 0.4.1 → 0.4.3

package/dist/presentation/intent/formatPresentationCopy.js

@@ -0,0 +1,140 @@
+import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
+import { applyPostureVocabularyGuardHeadline, applyPostureVocabularyGuardLines, } from "./applyPostureVocabularyGuard.js";
+import { formatPackageDisplayName } from "./packageDisplayName.js";
+function anchorSemantics(facts, interpretation) {
+    const name = interpretation.anchorPackage;
+    if (!name)
+        return null;
+    return (facts.changedPackageSemantics.find((r) => r.packageName === name) ?? null);
+}
+export function formatPresentationHeadline(interpretation, facts, status) {
+    const anchor = interpretation.anchorPackage ?? facts.changedPackages.primary;
+    const row = anchorSemantics(facts, interpretation);
+    const pkgDisplay = formatPackageDisplayName(anchor ?? "dependency", row?.packageRole);
+    const copy = scanSurfaceCopy.presentation;
+    let headline;
+    switch (interpretation.intent) {
+        case "limited_context":
+            headline = copy.limitedContextHeadline;
+            break;
+        case "no_changed_packages":
+            headline = copy.noChangedPackagesHeadline;
+            break;
+        case "tooling_patch":
+            headline = copy.toolingPatchHeadline.replace("{package}", pkgDisplay);
+            break;
+        case "tooling_upgrade":
+            headline = copy.toolingUpgradeHeadline.replace("{package}", pkgDisplay);
+            break;
+        case "multi_runtime_upgrade":
+            headline = copy.multiRuntimeHeadline;
+            break;
+        case "auth_runtime_upgrade":
+        case "queue_runtime_upgrade":
+        case "runtime_upgrade": {
+            const surface = interpretation.runtimeSurfaceLabel ?? "application code";
+            headline = copy.runtimeUpgradeHeadline
+                .replace("{package}", pkgDisplay)
+                .replace("{surface}", surface);
+            break;
+        }
+        case "unknown_upgrade":
+            if (status === "safe") {
+                headline = copy.safeNeutralHeadline.replace("{package}", pkgDisplay);
+            }
+            else {
+                headline = copy.defaultUpgradeHeadline.replace("{package}", pkgDisplay);
+            }
+            break;
+        default:
+            headline = copy.safeNeutralHeadline.replace("{package}", pkgDisplay);
+    }
+    return applyPostureVocabularyGuardHeadline(headline, status, interpretation.anchorPackage);
+}
+function formatExpectedImpactKeyPoint(interpretation) {
+    if (interpretation.intent !== "tooling_patch" &&
+        interpretation.intent !== "tooling_upgrade") {
+        return null;
+    }
+    const key = interpretation.expectedImpactKey;
+    let workflows = "build and typecheck workflows";
+    if (key === "test_time")
+        workflows = "test workflows";
+    else if (key === "development_only")
+        workflows = "development workflows";
+    else if (key === "build_time")
+        workflows = "build workflows";
+    return scanSurfaceCopy.presentation.expectedImpactLimitedKeyPoint.replace("{workflows}", workflows);
+}
+function formatLimitedEvidenceKeyPoint() {
+    return scanSurfaceCopy.presentation.limitedEvidenceKeyPoint;
+}
+/** Atomic insight lines — no embedded areas or blast radius (those live in separate channels). */
+export function formatPresentationInsightLines(interpretation, facts, status) {
+    const points = [];
+    if (interpretation.intent === "limited_context") {
+        points.push(scanSurfaceCopy.presentation.limitedContextKeyPoint);
+        if (facts.changedPackages.primary) {
+            points.push(scanSurfaceCopy.presentation.changedPackageKeyPoint.replace("{package}", facts.changedPackages.primary));
+        }
+        return applyPostureVocabularyGuardLines(points, status);
+    }
+    if (interpretation.showLimitedEvidence) {
+        points.push(formatLimitedEvidenceKeyPoint());
+    }
+    if (interpretation.suppressRuntimeNarrative) {
+        points.push(scanSurfaceCopy.presentation.noRuntimePathsKeyPoint);
+        const impact = formatExpectedImpactKeyPoint(interpretation);
+        if (impact)
+            points.push(impact);
+    }
+    else if (interpretation.allowRuntimeNarrative) {
+        const usage = facts.packageUsage.find((u) => u.packageName === interpretation.anchorPackage);
+        const paths = [...(usage?.paths ?? []), ...(usage?.criticalPaths ?? [])];
+        if (paths.length > 0) {
+            points.push(scanSurfaceCopy.presentation.usedInRuntimePathsKeyPoint.replace("{count}", String(paths.length)));
+        }
+        else {
+            points.push(scanSurfaceCopy.presentation.runtimeUsageKeyPoint);
+        }
+    }
+    return applyPostureVocabularyGuardLines(points, status);
+}
+const AUTH_VERIFICATION = [
+    "routes",
+    "middleware/hooks",
+    "auth flow",
+    "serialization",
+    "error handling",
+];
+const QUEUE_VERIFICATION = [
+    "workers",
+    "queue",
+    "serialization",
+    "error handling",
+];
+const RUNTIME_DEFAULT_VERIFICATION = [
+    "routes",
+    "middleware/hooks",
+    "error handling",
+];
+export function formatPresentationVerification(interpretation, status, max) {
+    let actions = [];
+    if (interpretation.verificationLabels.length > 0) {
+        actions = [...interpretation.verificationLabels];
+    }
+    else if (interpretation.intent === "auth_runtime_upgrade") {
+        actions = [...AUTH_VERIFICATION];
+    }
+    else if (interpretation.intent === "queue_runtime_upgrade") {
+        actions = [...QUEUE_VERIFICATION];
+    }
+    else if (interpretation.allowRuntimeNarrative) {
+        actions = [...RUNTIME_DEFAULT_VERIFICATION];
+    }
+    else if (interpretation.intent === "tooling_patch" ||
+        interpretation.intent === "tooling_upgrade") {
+        actions = ["CI", "typecheck", "build"];
+    }
+    return applyPostureVocabularyGuardLines(actions, status).slice(0, max);
+}

package/dist/presentation/intent/packageDisplayName.d.ts

@@ -0,0 +1,4 @@
+import type { PackageRoleKind } from "../../scanNarrativeFacts.js";
+/** Display name from package role when engine classified it; else title-case package name. */
+export declare function formatPackageDisplayName(packageName: string, packageRole?: PackageRoleKind | null): string;
+//# sourceMappingURL=packageDisplayName.d.ts.map

package/dist/presentation/intent/packageDisplayName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageDisplayName.d.ts","sourceRoot":"","sources":["../../../src/presentation/intent/packageDisplayName.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AASnE,8FAA8F;AAC9F,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,eAAe,GAAG,IAAI,GACnC,MAAM,CAOR"}

package/dist/presentation/intent/packageDisplayName.js

@@ -0,0 +1,17 @@
+const ROLE_DISPLAY = {
+    typechecker: "TypeScript",
+    linter: "ESLint",
+    formatter: "Prettier",
+    test_runner: "Test runner",
+};
+/** Display name from package role when engine classified it; else title-case package name. */
+export function formatPackageDisplayName(packageName, packageRole) {
+    if (packageRole && ROLE_DISPLAY[packageRole]) {
+        return ROLE_DISPLAY[packageRole];
+    }
+    if (!packageName)
+        return packageName;
+    if (packageName.length <= 3)
+        return packageName.toUpperCase();
+    return packageName.charAt(0).toUpperCase() + packageName.slice(1);
+}

package/dist/presentation/intent/postureVocabularyGuard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=postureVocabularyGuard.test.d.ts.map

package/dist/presentation/intent/postureVocabularyGuard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postureVocabularyGuard.test.d.ts","sourceRoot":"","sources":["../../../src/presentation/intent/postureVocabularyGuard.test.ts"],"names":[],"mappings":""}

package/dist/presentation/intent/postureVocabularyGuard.test.js

@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { applyPostureVocabularyGuardHeadline, applyPostureVocabularyGuardLines, guardHeadlineForPosture, } from "./applyPostureVocabularyGuard.js";
+describe("applyPostureVocabularyGuard", () => {
+    it("substitutes safe headline when review language present", () => {
+        const out = guardHeadlineForPosture("typescript dependency upgrade needs review", "safe", "typescript");
+        expect(out.toLowerCase()).not.toContain("needs review");
+        expect(out.toLowerCase()).toContain("typescript");
+    });
+    it("filters safe-forbidden key points", () => {
+        const lines = applyPostureVocabularyGuardLines(["No runtime usage paths detected", "High risk upgrade path"], "safe");
+        expect(lines).toContain("No runtime usage paths detected");
+        expect(lines.some((l) => /high risk/i.test(l))).toBe(false);
+    });
+    it("filters needs_review forbidden verification", () => {
+        const lines = applyPostureVocabularyGuardLines(["Confirm CI passes", "No action required"], "needs_review");
+        expect(lines).toContain("Confirm CI passes");
+        expect(lines.some((l) => /no action required/i.test(l))).toBe(false);
+    });
+    it("allows review headline for needs_review posture", () => {
+        const out = applyPostureVocabularyGuardHeadline("lodash dependency upgrade needs review", "needs_review", "lodash");
+        expect(out).toContain("needs review");
+    });
+});

package/dist/presentation/intent/presentationIntent.d.ts

@@ -0,0 +1,14 @@
+import type { PackageExpectedImpact } from "../../scanNarrativeFacts.js";
+export type PresentationIntent = "limited_context" | "no_changed_packages" | "tooling_patch" | "tooling_upgrade" | "runtime_upgrade" | "auth_runtime_upgrade" | "queue_runtime_upgrade" | "multi_runtime_upgrade" | "unknown_upgrade";
+export type PresentationInterpretation = {
+    intent: PresentationIntent;
+    anchorPackage: string | null;
+    suppressRuntimeNarrative: boolean;
+    allowRuntimeNarrative: boolean;
+    showLimitedEvidence: boolean;
+    expectedImpactKey: PackageExpectedImpact | null;
+    verificationLabels: string[];
+    runtimeSurfaceLabel: string | null;
+    runtimePackages: string[];
+};
+//# sourceMappingURL=presentationIntent.d.ts.map

package/dist/presentation/intent/presentationIntent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationIntent.d.ts","sourceRoot":"","sources":["../../../src/presentation/intent/presentationIntent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,qBAAqB,GACrB,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,GACvB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wBAAwB,EAAE,OAAO,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAChD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC"}

package/dist/presentation/intent/presentationIntent.js

@@ -0,0 +1 @@
+export {};

package/dist/presentation/intent/presentationIntent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=presentationIntent.test.d.ts.map

package/dist/presentation/intent/presentationIntent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationIntent.test.d.ts","sourceRoot":"","sources":["../../../src/presentation/intent/presentationIntent.test.ts"],"names":[],"mappings":""}

package/dist/presentation/intent/presentationIntent.test.js

@@ -0,0 +1,29 @@
+import { describe, expect, it } from "vitest";
+import { deriveScanNarrative } from "../../deriveScanNarrative.js";
+import { scanResultMixedTypescriptFastify, scanResultTypescriptPatch, scanResultFastifyRuntime, } from "../fixtures/presentationPersonaFixtures.js";
+import { derivePresentationInterpretation } from "./derivePresentationInterpretation.js";
+describe("derivePresentationInterpretation", () => {
+    it("typescript patch: tooling_patch intent from engine semantics", () => {
+        const facts = deriveScanNarrative(scanResultTypescriptPatch);
+        const interp = derivePresentationInterpretation(facts);
+        // Engine: suppressRuntimeNarrative=true, expectedImpact=typecheck, dependencyClass=tooling
+        expect(interp.intent).toBe("tooling_patch");
+        expect(interp.anchorPackage).toBe("typescript");
+        expect(interp.suppressRuntimeNarrative).toBe(true);
+    });
+    it("fastify: runtime_upgrade from runtimeImpact=confirmed", () => {
+        const facts = deriveScanNarrative(scanResultFastifyRuntime);
+        const interp = derivePresentationInterpretation(facts);
+        expect(interp.intent).toBe("runtime_upgrade");
+        expect(interp.anchorPackage).toBe("fastify");
+        expect(interp.allowRuntimeNarrative).toBe(true);
+    });
+    it("mixed typescript+fastify: runtime dominates tooling (anchor fastify)", () => {
+        const facts = deriveScanNarrative(scanResultMixedTypescriptFastify);
+        const interp = derivePresentationInterpretation(facts);
+        expect(interp.intent).toBe("runtime_upgrade");
+        expect(interp.anchorPackage).toBe("fastify");
+        expect(interp.runtimePackages).toContain("fastify");
+        expect(interp.runtimePackages).not.toContain("typescript");
+    });
+});

package/dist/presentation/intent/verificationFocusLabels.d.ts

@@ -0,0 +1,2 @@
+export declare function mergeVerificationFocusLabels(focusLists: string[][], max?: number): string[];
+//# sourceMappingURL=verificationFocusLabels.d.ts.map

package/dist/presentation/intent/verificationFocusLabels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationFocusLabels.d.ts","sourceRoot":"","sources":["../../../src/presentation/intent/verificationFocusLabels.ts"],"names":[],"mappings":"AA2BA,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAAE,EAAE,EACtB,GAAG,SAAI,GACN,MAAM,EAAE,CAeV"}

package/dist/presentation/intent/verificationFocusLabels.js

@@ -0,0 +1,45 @@
+const FOCUS_LABELS = {
+    ci: "CI",
+    typecheck: "typecheck",
+    build: "build",
+    routes: "routes",
+    middleware: "middleware/hooks",
+    hooks: "middleware/hooks",
+    auth_flow: "auth flow",
+    auth: "auth flow",
+    serialization: "serialization",
+    error_handling: "error handling",
+    handlers: "handlers",
+    plugins: "plugins",
+    session: "session",
+    workers: "workers",
+    queue: "queue",
+    test_suite: "test suite",
+    lint: "lint",
+    format: "format",
+};
+function labelVerificationFocus(focus) {
+    const key = focus.trim().toLowerCase();
+    if (!key)
+        return "";
+    return FOCUS_LABELS[key] ?? focus.replace(/_/g, " ");
+}
+export function mergeVerificationFocusLabels(focusLists, max = 6) {
+    const seen = new Set();
+    const out = [];
+    for (const list of focusLists) {
+        for (const f of list) {
+            const label = labelVerificationFocus(f);
+            if (!label)
+                continue;
+            const norm = label.toLowerCase();
+            if (seen.has(norm))
+                continue;
+            seen.add(norm);
+            out.push(label);
+            if (out.length >= max)
+                return out;
+        }
+    }
+    return out;
+}

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts

@@ -1,11 +1,11 @@
 import type { PipelineStatus } from "../dto/types.js";
 import type { ScanResult } from "../../types.js";
-import type { ScanCardPresentation } from "../dto/scanCardPresentation.js";
+import type { DashboardCardPresentation } from "../dto/dashboardCardPresentation.js";
 export type BuildScanCardPresentationInput = {
     pipelineStatus: PipelineStatus;
     result: ScanResult | null;
     decision?: string | null;
     totalScore?: number | null;
 };
-export declare function buildScanCardPresentation(input: BuildScanCardPresentationInput): ScanCardPresentation;
+export declare function buildScanCardPresentation(input: BuildScanCardPresentationInput): DashboardCardPresentation;
 //# sourceMappingURL=buildScanCardPresentation.d.ts.map

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildScanCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanCardPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAKjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AA2BF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,oBAAoB,CA2BtB"}
+{"version":3,"file":"buildScanCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanCardPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAOjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AA2BF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,yBAAyB,CA2B3B"}

package/dist/presentation/orchestration/buildScanCardPresentation.js

@@ -1,7 +1,6 @@
 import { mergePostureFromDecision } from "../../riskVocabulary.js";
 import { buildScanPresentationBundle } from "./buildScanPresentationBundle.js";
-import { presentScanCard } from "../presenters/presentScanCard.js";
-import { presentPipelineScanCard } from "../presenters/presentPipelineScanCard.js";
+import { presentDashboardCard, presentPipelineDashboardCard, } from "../presenters/presentDashboardCard.js";
 function minimalResultFromDenormalized(decision, totalScore) {
     const posture = mergePostureFromDecision(decision ?? undefined);
     if (!posture && (totalScore == null || !Number.isFinite(totalScore))) {
@@ -24,12 +23,12 @@ function minimalResultFromDenormalized(decision, totalScore) {
 }
 export function buildScanCardPresentation(input) {
     if (input.pipelineStatus !== "done") {
-        return presentPipelineScanCard(input.pipelineStatus === "failed" ? "failed" : input.pipelineStatus);
+        return presentPipelineDashboardCard(input.pipelineStatus === "failed" ? "failed" : input.pipelineStatus);
     }
     const result = input.result ??
         minimalResultFromDenormalized(input.decision, input.totalScore);
     if (!result) {
-        return presentPipelineScanCard("failed");
+        return presentPipelineDashboardCard("failed");
     }
     const bundle = buildScanPresentationBundle({
         result,
@@ -38,7 +37,7 @@ export function buildScanCardPresentation(input) {
         totalScore: input.totalScore,
     });
     if (!bundle) {
-        return presentPipelineScanCard("failed");
+        return presentPipelineDashboardCard("failed");
     }
-    return presentScanCard(bundle, { includeFindingCounts: true });
+    return presentDashboardCard(bundle);
 }

package/dist/presentation/presentation.test.js

@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
-import { presentScanCard } from "./presenters/presentScanCard.js";
+import { presentDashboardCard } from "./presenters/presentDashboardCard.js";
 import { presentScanDetails } from "./presenters/presentScanDetails.js";
 import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
 import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
@@ -43,29 +43,30 @@ describe("buildScanPresentationBundle", () => {
         expect(bundle.profile.degradedMessage).toBeTruthy();
     });
 });
-describe("presentScanCard personas", () => {
-    it("fastify card is rich with affected areas and verification", () => {
+describe("presentDashboardCard personas", () => {
+    it("fastify card has scope areas and verification", () => {
         const bundle = buildScanPresentationBundle({
             result: scanResultFastifyRuntime,
             pipelineStatus: "done",
         });
-        const card = presentScanCard(bundle);
-        expect(card.density).toBe("rich");
-        expect(card.affectedAreas.length).toBeGreaterThan(0);
-        expect(card.verificationActions.length).toBeGreaterThan(0);
+        const card = presentDashboardCard(bundle);
+        expect(card.layout).toBe("expanded");
+        expect(card.scopeAreas.length).toBeGreaterThan(0);
+        expect(card.verification.length).toBeGreaterThan(0);
         expect(card.headline.toLowerCase()).toContain("fastify");
-        expect(card.supportingContext).toBeUndefined();
+        expect(card.verdict?.posture).toBe("needs_review");
     });
-    it("typescript card is minimal safe without graph-first story", () => {
+    it("typescript card is quiet safe", () => {
         const bundle = buildScanPresentationBundle({
             result: scanResultTypescriptPatch,
             pipelineStatus: "done",
         });
-        const card = presentScanCard(bundle);
-        expect(card.density).toBe("minimal");
-        expect(card.status).toBe("safe");
-        expect(card.changedPackages).toContain("typescript");
-        expect(card.verificationActions.length).toBeGreaterThan(0);
+        const card = presentDashboardCard(bundle);
+        expect(["quiet", "standard"]).toContain(card.layout);
+        expect(card.verdict?.posture).toBe("safe");
+        expect(card.headline).toMatch(/patch upgrade/i);
+        expect(card.headline).not.toMatch(/needs review/i);
+        expect(card.verification.length).toBeGreaterThan(0);
     });
 });
 describe("presentation parity across surfaces", () => {
@@ -74,7 +75,7 @@ describe("presentation parity across surfaces", () => {
             result: scanResultFastifyRuntime,
             pipelineStatus: "done",
         });
-        const card = presentScanCard(bundle);
+        const card = presentDashboardCard(bundle);
         const details = presentScanDetails(bundle, { scanId: SCAN_ID });
         const check = presentGitHubCheckRun(bundle, {
             scanId: SCAN_ID,
@@ -82,13 +83,13 @@ describe("presentation parity across surfaces", () => {
         });
         const comment = presentGitHubPrComment(bundle);
         const cli = presentCliScanSummary(bundle, { repoLabel: "acme/api" });
-        for (const dto of [card, details, check, comment, cli]) {
+        for (const dto of [details, check, comment, cli]) {
             expect(dto.status).toBe(bundle.profile.status);
             expect(dto.density).toBe(bundle.profile.density);
             expect(dto.confidence).toBe(bundle.profile.confidence);
             expect(dto.evidenceContext?.priority).toBe(bundle.profile.priority);
         }
-        expect(card.primaryPackage).toBe("fastify");
+        expect(card.verdict?.posture).toBe(bundle.profile.status);
         expect(details.narrative.primaryPackage).toBe("fastify");
         expect(check.title.toLowerCase()).toContain("fastify");
     });

package/dist/presentation/presentationPersonas.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=presentationPersonas.test.d.ts.map

package/dist/presentation/presentationPersonas.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationPersonas.test.d.ts","sourceRoot":"","sources":["../../src/presentation/presentationPersonas.test.ts"],"names":[],"mappings":""}

package/dist/presentation/presentationPersonas.test.js

@@ -0,0 +1,167 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentDashboardCard } from "./presenters/presentDashboardCard.js";
+import { presentScanDetails } from "./presenters/presentScanDetails.js";
+import { presentCliScanSummary } from "./presenters/presentCliScanSummary.js";
+import { scanResultBullmq, scanResultEslint, scanResultFastifyRuntime, scanResultLimitedContext, scanResultMixedTypescriptFastify, scanResultNextAuth, scanResultPrettier, scanResultTypescriptPatch, scanResultUnknownSafe, scanResultVitest, } from "./fixtures/presentationPersonaFixtures.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const SAFE_FORBIDDEN = /needs review|high risk|critical concern/i;
+const REVIEW_FORBIDDEN = /no action required|no verification required/i;
+const personas = [
+    {
+        name: "typescript patch",
+        result: scanResultTypescriptPatch,
+        intent: "tooling_patch",
+        status: "safe",
+        density: "minimal",
+        headlineMatch: /patch upgrade/i,
+        headlineMustNot: /needs review/i,
+        verificationIncludes: ["CI", "typecheck"],
+        verificationMustNot: /auth flow/i,
+    },
+    {
+        name: "eslint",
+        result: scanResultEslint,
+        intent: "tooling_upgrade",
+        status: "safe",
+        density: "minimal",
+        headlineMatch: /tooling upgrade/i,
+        headlineMustNot: /needs review/i,
+        verificationIncludes: ["CI", "lint"],
+    },
+    {
+        name: "prettier",
+        result: scanResultPrettier,
+        intent: "tooling_upgrade",
+        status: "safe",
+        density: "minimal",
+        headlineMatch: /tooling upgrade/i,
+        headlineMustNot: /needs review/i,
+        verificationIncludes: ["format"],
+    },
+    {
+        name: "vitest",
+        result: scanResultVitest,
+        intent: "tooling_upgrade",
+        status: "safe",
+        density: "minimal",
+        headlineMatch: /tooling upgrade/i,
+        headlineMustNot: /needs review/i,
+        verificationIncludes: ["test suite"],
+    },
+    {
+        name: "fastify runtime",
+        result: scanResultFastifyRuntime,
+        intent: "runtime_upgrade",
+        status: "needs_review",
+        density: "rich",
+        headlineMatch: /runtime upgrade affects/i,
+        verificationIncludes: ["routes", "middleware"],
+    },
+    {
+        name: "nextauth runtime",
+        result: scanResultNextAuth,
+        intent: "auth_runtime_upgrade",
+        status: "needs_review",
+        density: "rich",
+        headlineMatch: /runtime upgrade affects/i,
+        verificationIncludes: ["auth flow"],
+    },
+    {
+        name: "bullmq runtime",
+        result: scanResultBullmq,
+        intent: "queue_runtime_upgrade",
+        status: "needs_review",
+        density: "rich",
+        headlineMatch: /runtime upgrade affects/i,
+        verificationIncludes: ["workers", "queue"],
+    },
+    {
+        name: "limited context",
+        result: scanResultLimitedContext,
+        intent: "limited_context",
+        status: "needs_review",
+        density: "minimal",
+        headlineMatch: /limited scan context/i,
+    },
+    {
+        name: "unknown safe",
+        result: scanResultUnknownSafe,
+        intent: "unknown_upgrade",
+        status: "safe",
+        density: "standard",
+        headlineMatch: /dependency upgrade/i,
+        headlineMustNot: /needs review/i,
+    },
+];
+function cardFor(result) {
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+    return presentDashboardCard(bundle);
+}
+describe("presentation personas", () => {
+    for (const persona of personas) {
+        it(`${persona.name}: intent, posture alignment, headline`, () => {
+            const card = cardFor(persona.result);
+            expect(card.verdict?.posture).toBe(persona.status);
+            if (persona.density === "rich") {
+                expect(card.layout).toBe("expanded");
+            }
+            expect(card.headline).toMatch(persona.headlineMatch);
+            if (persona.headlineMustNot) {
+                expect(card.headline).not.toMatch(persona.headlineMustNot);
+            }
+            if (persona.status === "safe") {
+                const combined = [
+                    card.headline,
+                    ...card.insights,
+                    ...card.verification,
+                ].join(" ");
+                expect(combined).not.toMatch(SAFE_FORBIDDEN);
+            }
+            if (persona.status === "needs_review") {
+                const combined = card.verification.join(" ");
+                expect(combined).not.toMatch(REVIEW_FORBIDDEN);
+            }
+            if (persona.verificationIncludes) {
+                for (const v of persona.verificationIncludes) {
+                    expect(card.verification.some((a) => a.toLowerCase().includes(v.toLowerCase()))).toBe(true);
+                }
+            }
+            if (persona.verificationMustNot) {
+                expect(card.verification.join(" ")).not.toMatch(persona.verificationMustNot);
+            }
+        });
+    }
+    it("mixed typescript+fastify: runtime intent, fastify in headline", () => {
+        const card = cardFor(scanResultMixedTypescriptFastify);
+        expect(card.verdict?.posture).toBe("needs_review");
+        expect(card.headline.toLowerCase()).toContain("fastify");
+        expect(card.headline).not.toMatch(/patch upgrade/i);
+    });
+    it("cross-surface parity: fastify headline matches card, details, CLI", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultFastifyRuntime,
+            pipelineStatus: "done",
+        });
+        const card = presentDashboardCard(bundle);
+        const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+        const cli = presentCliScanSummary(bundle, { repoLabel: "acme/api" });
+        expect(details.hero.headline).toBe(card.headline);
+        expect(cli.headline).toBe(card.headline);
+    });
+    it("cross-surface parity: typescript headline matches card, details, CLI", () => {
+        const bundle = buildScanPresentationBundle({
+            result: scanResultTypescriptPatch,
+            pipelineStatus: "done",
+        });
+        const card = presentDashboardCard(bundle);
+        const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+        const cli = presentCliScanSummary(bundle, { repoLabel: "acme/api" });
+        expect(details.hero.headline).toBe(card.headline);
+        expect(cli.headline).toBe(card.headline);
+        expect(card.headline).not.toMatch(/needs review/i);
+    });
+});

package/dist/presentation/presenters/presentCliScanSummary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentCliScanSummary.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentCliScanSummary.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAEzF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,mBAAmB,CA6BrB"}
+{"version":3,"file":"presentCliScanSummary.d.ts","sourceRoot":"","sources":["../../../src/presentation/presenters/presentCliScanSummary.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAEzF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,mBAAmB,CA6BrB"}

package/dist/presentation/presenters/presentCliScanSummary.js

@@ -1,4 +1,4 @@
-import { composeHeadline, composeKeyPoints, composeSubheadline, composeSupportingContext, composeVerificationActions, evidenceContextFromProfile, } from "../compose/narrativeCompose.js";
+import { buildNarrativeChannels, composeHeadline, composeSubheadline, composeSupportingContext, composeVerificationActions, evidenceContextFromProfile, projectCompactKeyPoints, } from "../compose/narrativeCompose.js";
 export function presentCliScanSummary(bundle, ctx = {}) {
     const { facts, profile, result } = bundle;
     const layers = result.layerScores;
@@ -17,7 +17,7 @@ export function presentCliScanSummary(bundle, ctx = {}) {
         evidenceContext: evidenceContextFromProfile(bundle),
         headline: composeHeadline(bundle),
         subheadline: composeSubheadline(bundle),
-        keyPoints: composeKeyPoints(bundle, 6),
+        keyPoints: projectCompactKeyPoints(buildNarrativeChannels(bundle), 6),
         verificationActions: composeVerificationActions(bundle, 5),
         metrics: {
             riskIndex: facts.riskIndex ?? result.totalScore ?? 0,