@mergesignal/shared 0.4.3 → 0.5.0

package/dist/presentation/profile/buildProfileFromAssessment.js

@@ -0,0 +1,58 @@
+import { narrativeIntensityToDensity } from "../../assessmentSchema.js";
+import { safeParseRepoIntelligence } from "../../repoIntelligenceSchema.js";
+import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
+import { collectVerificationFocus } from "../../assessmentProjection.js";
+function buildInterpretation(assessment, presentation, result) {
+    const verificationLabels = collectVerificationFocus(result);
+    const anchorPackage = result.changedPackages?.[0] ?? null;
+    const suppressRuntimeNarrative = presentation.reachVisibility === "hidden";
+    let intent = "unknown_upgrade";
+    if (assessment.primaryConcern === "insufficient_evidence") {
+        intent = "limited_context";
+    }
+    else if (assessment.changeClasses.includes("tooling_maintenance")) {
+        intent = "tooling_patch";
+    }
+    else if (assessment.primaryConcern === "confirmed_runtime_usage") {
+        if (assessment.factors.includes("queue_infrastructure")) {
+            intent = "queue_runtime_upgrade";
+        }
+        else if (assessment.factors.includes("auth_infrastructure")) {
+            intent = "auth_runtime_upgrade";
+        }
+        else {
+            intent = "runtime_upgrade";
+        }
+    }
+    return {
+        intent,
+        anchorPackage,
+        suppressRuntimeNarrative,
+        allowRuntimeNarrative: !suppressRuntimeNarrative,
+        showLimitedEvidence: assessment.confidence === "low",
+        expectedImpactKey: null,
+        verificationLabels,
+        runtimeSurfaceLabel: null,
+        runtimePackages: [],
+    };
+}
+export function buildProfileFromAssessment(assessment, presentation, result) {
+    const riParse = safeParseRepoIntelligence(result.repoIntelligence);
+    const priority = riParse.ok && (result.changedPackages?.length ?? 0) > 0
+        ? "pr_intelligence"
+        : "limited";
+    const degradedMessage = assessment.primaryConcern === "insufficient_evidence" ||
+        assessment.confidence === "low"
+        ? scanSurfaceCopy.presentation.limitedContextMessage
+        : priority === "limited"
+            ? scanSurfaceCopy.presentation.limitedContextMessage
+            : undefined;
+    return {
+        status: assessment.posture,
+        density: narrativeIntensityToDensity(presentation.narrativeIntensity),
+        confidence: assessment.confidence,
+        priority,
+        degradedMessage,
+        interpretation: buildInterpretation(assessment, presentation, result),
+    };
+}

package/dist/presentation/projectAssessmentFields.d.ts

@@ -0,0 +1,4 @@
+import type { AssessmentPresentationFields } from "./dto/assessmentPresentationFields.js";
+import type { ScanPresentationBundle } from "./orchestration/scanPresentationBundle.js";
+export declare function projectAssessmentFields(bundle: ScanPresentationBundle): AssessmentPresentationFields;
+//# sourceMappingURL=projectAssessmentFields.d.ts.map

package/dist/presentation/projectAssessmentFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAssessmentFields.d.ts","sourceRoot":"","sources":["../../src/presentation/projectAssessmentFields.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AAExF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAC7B,4BAA4B,CAW9B"}

package/dist/presentation/projectAssessmentFields.js

@@ -0,0 +1,13 @@
+import { collectVerificationFocus, projectReasoningLines, } from "../assessmentProjection.js";
+export function projectAssessmentFields(bundle) {
+    const { assessment, presentation, result } = bundle;
+    return {
+        posture: assessment.posture,
+        primaryConcern: assessment.primaryConcern,
+        factors: [...assessment.factors],
+        reasoning: projectReasoningLines(result),
+        verificationFocus: collectVerificationFocus(result),
+        reachVisibility: presentation.reachVisibility,
+        narrativeIntensity: presentation.narrativeIntensity,
+    };
+}

package/dist/presentation/surfaceParity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=surfaceParity.test.d.ts.map

package/dist/presentation/surfaceParity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surfaceParity.test.d.ts","sourceRoot":"","sources":["../../src/presentation/surfaceParity.test.ts"],"names":[],"mappings":""}

package/dist/presentation/surfaceParity.test.js

@@ -0,0 +1,74 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentDashboardCard } from "./presenters/presentDashboardCard.js";
+import { presentScanDetails } from "./presenters/presentScanDetails.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { presentGitHubPrComment } from "./presenters/presentGitHubPrComment.js";
+import { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkdown.js";
+import { renderGitHubPrCommentMarkdown } from "./render/renderGitHubPrCommentMarkdown.js";
+import { scanResultBullmq, scanResultEslint, scanResultFastifyRuntime, scanResultMixedTypescriptFastify, scanResultPrettier, scanResultTypescriptPatch, scanResultVitest, } from "./fixtures/presentationPersonaFixtures.js";
+import { projectAssessmentFields } from "./projectAssessmentFields.js";
+const SCAN_ID = "22222222-2222-4222-8222-222222222222";
+const ORIGIN = "https://app.example.com";
+const validationPersonas = [
+    { name: "PR #26 mixed", result: scanResultMixedTypescriptFastify },
+    { name: "PR #27 fastify", result: scanResultFastifyRuntime },
+    { name: "PR #28 typescript", result: scanResultTypescriptPatch },
+    { name: "PR #29 prettier", result: scanResultPrettier },
+    { name: "PR #30 bullmq", result: scanResultBullmq },
+    { name: "eslint", result: scanResultEslint },
+    { name: "vitest", result: scanResultVitest },
+];
+function surfacesFor(result) {
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+    const fields = projectAssessmentFields(bundle);
+    const card = presentDashboardCard(bundle);
+    const details = presentScanDetails(bundle, { scanId: SCAN_ID });
+    const check = presentGitHubCheckRun(bundle, {
+        scanId: SCAN_ID,
+        webAppOrigin: ORIGIN,
+    });
+    const comment = presentGitHubPrComment(bundle);
+    const checkMd = renderGitHubCheckRunMarkdown(check);
+    const commentMd = renderGitHubPrCommentMarkdown(comment);
+    return { bundle, fields, card, details, check, comment, checkMd, commentMd };
+}
+describe("surfaceParity guardrail", () => {
+    for (const persona of validationPersonas) {
+        it(`${persona.name}: posture and assessment fields match across surfaces`, () => {
+            const s = surfacesFor(persona.result);
+            expect(s.card.posture).toBe(s.fields.posture);
+            expect(s.details.posture).toBe(s.fields.posture);
+            expect(s.check.posture).toBe(s.fields.posture);
+            expect(s.comment.posture).toBe(s.fields.posture);
+            expect(s.card.verdict?.posture).toBe(s.fields.posture);
+            expect(s.card.primaryConcern).toBe(s.fields.primaryConcern);
+            expect(s.details.primaryConcern).toBe(s.fields.primaryConcern);
+            expect(s.check.primaryConcern).toBe(s.fields.primaryConcern);
+            expect(s.comment.primaryConcern).toBe(s.fields.primaryConcern);
+            expect(s.card.narrativeIntensity).toBe(s.fields.narrativeIntensity);
+            expect(s.details.narrativeIntensity).toBe(s.fields.narrativeIntensity);
+            expect(s.check.narrativeIntensity).toBe(s.fields.narrativeIntensity);
+            expect(s.comment.narrativeIntensity).toBe(s.fields.narrativeIntensity);
+            expect(s.card.reachVisibility).toBe(s.fields.reachVisibility);
+            expect(s.details.reachVisibility).toBe(s.fields.reachVisibility);
+            expect(s.check.reachVisibility).toBe(s.fields.reachVisibility);
+            expect(s.comment.reachVisibility).toBe(s.fields.reachVisibility);
+            expect(s.card.reasoning).toEqual(s.fields.reasoning);
+            expect(s.details.reasoning).toEqual(s.fields.reasoning);
+            expect(s.check.reasoning).toEqual(s.fields.reasoning);
+            expect(s.comment.reasoning).toEqual(s.fields.reasoning);
+            expect(s.card.verificationFocus).toEqual(s.fields.verificationFocus);
+            expect(s.details.verificationFocus).toEqual(s.fields.verificationFocus);
+            expect(s.check.verificationFocus).toEqual(s.fields.verificationFocus);
+            expect(s.comment.verificationFocus).toEqual(s.fields.verificationFocus);
+        });
+        it(`${persona.name}: headline matches across card and details`, () => {
+            const s = surfacesFor(persona.result);
+            expect(s.details.hero.headline).toBe(s.card.headline);
+        });
+    }
+});

package/dist/productMessaging.d.ts

@@ -2,7 +2,7 @@
  * Canonical marketing / category copy. Operational scan strings stay in scanSurfaceCopy.
  */
 export declare const productMessaging: {
-    readonly formalDefinition: "MergeSignal analyzes dependency upgrades, identifies affected application flows, and provides reviewer guidance before merge.";
+    readonly formalDefinition: "MergeSignal analyzes dependency upgrades in context, inspects relevant code paths, and provides focused reviewer guidance before merge - without requiring a full repository scan.";
     readonly hero: {
         readonly kicker: "Merge-decision intelligence for dependency upgrades";
         readonly h1: "See what a dependency upgrade can break.";
@@ -68,10 +68,10 @@ export declare const productMessaging: {
     readonly dashboardPrCard: {
         readonly intro: "The repository dashboard is a runtime-aware review surface for open upgrade pull requests: triage by merge recommendation, then read operational context on each card.";
         readonly posture: `Posture indicates the merge recommendation (${string}, ${string}, ${string}).`;
-        readonly exposure: "Exposure indicates how broadly the upgrade touches runtime-relevant application areas.";
-        readonly exposureCategoriesLead: "On each scanned card, exposure reads as one of:";
+        readonly exposure: "Reach indicates how prominently affected application paths are surfaced for this upgrade.";
+        readonly exposureCategoriesLead: "Risk index bands (supporting context) read as one of:";
         readonly exposureCategories: readonly string[];
-        readonly cardBody: "Below the verdict, scanned cards lead with the changed package, runtime surface, reachability, blast radius, and affected areas when code intelligence is available; repository-wide graph signals appear only as supporting context.";
+        readonly cardBody: "Below the verdict, scanned cards lead with the changed package, affected areas, verification checks, and blast radius when code intelligence is available - focused on this PR, not the whole repository.";
     };
 };
 /** Illustrative scan-card example for homepage proof band and getting-started. */

package/dist/productMessaging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"productMessaging.d.ts","sourceRoot":"","sources":["../src/productMessaging.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmF3B,6FAA6F;;;;;;;;;CAYrF,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,gBAAgB;;;;CAOnB,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAOnD"}
+{"version":3,"file":"productMessaging.d.ts","sourceRoot":"","sources":["../src/productMessaging.ts"],"names":[],"mappings":"AAGA;;GAEG;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmF3B,6FAA6F;;;;;;;;;CAarF,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,gBAAgB;;;;CAOnB,CAAC;AAEX,iEAAiE;AACjE,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAOnD"}

package/dist/productMessaging.js

@@ -4,7 +4,7 @@ import { MERGE_POSTURE_LABEL } from "./riskVocabulary.js";
  * Canonical marketing / category copy. Operational scan strings stay in scanSurfaceCopy.
  */
 export const productMessaging = {
-    formalDefinition: "MergeSignal analyzes dependency upgrades, identifies affected application flows, and provides reviewer guidance before merge.",
+    formalDefinition: "MergeSignal analyzes dependency upgrades in context, inspects relevant code paths, and provides focused reviewer guidance before merge - without requiring a full repository scan.",
     hero: {
         kicker: "Merge-decision intelligence for dependency upgrades",
         h1: "See what a dependency upgrade can break.",
@@ -83,10 +83,10 @@ export const productMessaging = {
     dashboardPrCard: {
         intro: "The repository dashboard is a runtime-aware review surface for open upgrade pull requests: triage by merge recommendation, then read operational context on each card.",
         posture: `Posture indicates the merge recommendation (${MERGE_POSTURE_LABEL.safe}, ${MERGE_POSTURE_LABEL.needs_review}, ${MERGE_POSTURE_LABEL.risky}).`,
-        exposure: "Exposure indicates how broadly the upgrade touches runtime-relevant application areas.",
-        exposureCategoriesLead: "On each scanned card, exposure reads as one of:",
+        exposure: "Reach indicates how prominently affected application paths are surfaced for this upgrade.",
+        exposureCategoriesLead: "Risk index bands (supporting context) read as one of:",
         exposureCategories: CARD_EXPOSURE_CATEGORY_LABELS,
-        cardBody: "Below the verdict, scanned cards lead with the changed package, runtime surface, reachability, blast radius, and affected areas when code intelligence is available; repository-wide graph signals appear only as supporting context.",
+        cardBody: "Below the verdict, scanned cards lead with the changed package, affected areas, verification checks, and blast radius when code intelligence is available - focused on this PR, not the whole repository.",
     },
 };
 /** Illustrative scan-card example for homepage proof band and getting-started. */

package/dist/productMessaging.test.js

@@ -71,8 +71,8 @@ describe("productMessaging", () => {
             d.cardBody,
         ].join(" ");
         expect(text).toContain("merge recommendation");
-        expect(text).toContain("runtime-relevant");
-        expect(text).not.toMatch(/risk index|total score|0-100|formula|weight/i);
+        expect(text).toContain("affected application paths");
+        expect(text).not.toMatch(/total score|0-100|formula|weight/i);
         expect(d.exposureCategories).toHaveLength(5);
         expect(d.exposureCategories).toContain("Elevated exposure");
     });

package/dist/repoIntelligenceSchema.d.ts

@@ -35,13 +35,13 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
         }, z.core.$strip>;
         areas: z.ZodOptional<z.ZodArray<z.ZodString>>;
         dependencyClass: z.ZodOptional<z.ZodEnum<{
+            format: "format";
             unknown: "unknown";
             runtime: "runtime";
             build: "build";
             test: "test";
             tooling: "tooling";
             lint: "lint";
-            format: "format";
             ci: "ci";
         }>>;
         packageRole: z.ZodOptional<z.ZodEnum<{
@@ -64,9 +64,9 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
             development: "development";
         }>>;
         runtimeImpact: z.ZodOptional<z.ZodEnum<{
+            none: "none";
             unknown: "unknown";
             confirmed: "confirmed";
-            none: "none";
             possible: "possible";
         }>>;
         expectedImpact: z.ZodOptional<z.ZodEnum<{

package/dist/resolvePipelineStatus.d.ts

@@ -0,0 +1,15 @@
+export type ScanPipelineStatus = "queued" | "running" | "done" | "failed";
+export type PipelineCompletionEvidence = {
+    scannedAt?: string | null;
+    decision?: string | null;
+    totalScore?: number | null;
+    hasResult?: boolean;
+};
+/** Scan completion signals — decision/totalScore/result are only set after analysis. */
+export declare function hasScanCompletionEvidence(evidence: PipelineCompletionEvidence): boolean;
+/**
+ * Resolve wire status using completion evidence (decision, totalScore, result).
+ * Handles races where denormalized columns are written before status flips to done.
+ */
+export declare function resolvePipelineStatus(status: string | undefined, evidence: PipelineCompletionEvidence): ScanPipelineStatus;
+//# sourceMappingURL=resolvePipelineStatus.d.ts.map

package/dist/resolvePipelineStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvePipelineStatus.d.ts","sourceRoot":"","sources":["../src/resolvePipelineStatus.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE1E,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAsBF,wFAAwF;AACxF,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAQT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,0BAA0B,GACnC,kBAAkB,CAKpB"}

package/dist/resolvePipelineStatus.js

@@ -0,0 +1,37 @@
+function normalizePipelineStatus(status) {
+    const st = String(status ?? "")
+        .trim()
+        .toLowerCase();
+    if (st === "queued" || st === "running" || st === "done" || st === "failed") {
+        return st;
+    }
+    return "failed";
+}
+function isMergePostureDecision(decision) {
+    return (decision === "safe" || decision === "needs_review" || decision === "risky");
+}
+/** Scan completion signals — decision/totalScore/result are only set after analysis. */
+export function hasScanCompletionEvidence(evidence) {
+    if (isMergePostureDecision(evidence.decision))
+        return true;
+    if (evidence.hasResult === true)
+        return true;
+    if (evidence.totalScore != null && Number.isFinite(evidence.totalScore)) {
+        return true;
+    }
+    if (evidence.scannedAt?.trim())
+        return true;
+    return false;
+}
+/**
+ * Resolve wire status using completion evidence (decision, totalScore, result).
+ * Handles races where denormalized columns are written before status flips to done.
+ */
+export function resolvePipelineStatus(status, evidence) {
+    const normalized = normalizePipelineStatus(status);
+    if (normalized === "done" || normalized === "failed")
+        return normalized;
+    if (hasScanCompletionEvidence(evidence))
+        return "done";
+    return normalized;
+}

package/dist/scanCardPresentationState.d.ts

@@ -0,0 +1,4 @@
+/** Dashboard PR card lifecycle — distinct from pipeline status. */
+export type ScanCardPresentationState = "not_scanned" | "scanning" | "analysis_failed" | "ready" | "stale";
+export declare function staleScanSubline(): string;
+//# sourceMappingURL=scanCardPresentationState.d.ts.map

package/dist/scanCardPresentationState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanCardPresentationState.d.ts","sourceRoot":"","sources":["../src/scanCardPresentationState.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,GACjC,aAAa,GACb,UAAU,GACV,iBAAiB,GACjB,OAAO,GACP,OAAO,CAAC;AAIZ,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/scanCardPresentationState.js

@@ -0,0 +1,4 @@
+const STALE_SUBLINE = "Based on earlier commit";
+export function staleScanSubline() {
+    return STALE_SUBLINE;
+}

package/dist/{scanDetailViewModel.d.ts → scanDetailViewModelTypes.d.ts}

@@ -1,13 +1,63 @@
-import type { ScanNarrativeFacts } from "./scanNarrativeFacts.js";
-import { type ScanDetailRecommendationCenter } from "./deriveScanDetailRecommendations.js";
-import { type ScanDetailSignalSummary } from "./deriveRiskScoreSummary.js";
-import { type MergePosture } from "./riskVocabulary.js";
-import type { FindingSeverity, ScanResult } from "./types.js";
-export declare const ACT2_MAX_THEMES = 4;
-export declare const ACT2_MAX_THEME_CHARS = 80;
-export declare const VERDICT_LINE_MAX_CHARS = 120;
+import type { ObservationSignalFamily } from "./cardObservationCatalog.js";
+import type { NarrativeAvailabilityMode } from "./scanNarrativeFacts.js";
+import type { MergePosture } from "./riskVocabulary.js";
+import type { FindingSeverity, ScoreLayer } from "./types.js";
+/** Max operational-impact rows before collapse on scan detail. */
 export declare const TIER1_MAX_VISIBLE_IMPACTS = 3;
+/** Findings list collapse threshold on scan detail evidence panel. */
 export declare const ACT3_EVIDENCE_COLLAPSE_THRESHOLD = 10;
+export type ScanDetailOverallRiskBand = "low" | "moderate" | "high";
+export type ScanDetailLayerConcernLevel = "low" | "medium" | "high";
+export type ScanDetailSignalLayer = {
+    layer: ScoreLayer;
+    label: string;
+    score: number;
+    concernLevel: ScanDetailLayerConcernLevel;
+    concernLabel: string;
+};
+export type RiskScoreGaugeModel = {
+    fillPercent: number;
+    band: ScanDetailOverallRiskBand;
+    ariaLabel: string;
+};
+export type ScanDetailSignalSummary = {
+    score: number;
+    overallBand: ScanDetailOverallRiskBand;
+    overallLabel: string;
+    gauge: RiskScoreGaugeModel;
+    layers: ScanDetailSignalLayer[];
+};
+export type RecommendationPriority = "high" | "medium" | "low";
+export type GuidanceSource = "insight" | "recommendation" | "verification";
+export type ScanDetailRecommendationDetail = {
+    why: string;
+    whyNow: string;
+    signals: string[];
+    affectedPackages?: {
+        names: string[];
+        overflowCount: number;
+    };
+    expectedBenefit: string;
+};
+export type ScanDetailRecommendation = {
+    id: string;
+    rank: number;
+    title: string;
+    priority: RecommendationPriority;
+    source: GuidanceSource;
+    signalFamily?: ObservationSignalFamily | null;
+    detail: ScanDetailRecommendationDetail;
+    proofRefs?: {
+        findingIds?: string[];
+    };
+};
+export type ScanDetailRecommendationCenter = {
+    heading: string;
+    defaultSelectedId: string;
+    items: ScanDetailRecommendation[];
+    posture: MergePosture | null;
+    scanContext?: string;
+};
 export type ScanDetailOperationalImpactItem = {
     message: string;
     where?: string;
@@ -59,7 +109,7 @@ export type ScanDetailTopology = {
     }>;
 };
 export type ScanDetailNarrativeContext = {
-    mode: import("./scanNarrativeFacts.js").NarrativeAvailabilityMode;
+    mode: NarrativeAvailabilityMode;
     codeIntelligenceAvailable: boolean;
     changedPackagesDisplay: string | null;
     runtimeSurfaceLabel: string | null;
@@ -106,26 +156,4 @@ export type ScanDetailViewModel = {
         codeIntelligenceAvailable?: boolean;
     };
 };
-export type DeriveScanDetailOptions = {
-    scanId: string;
-    status: "queued" | "running" | "done" | "failed";
-    methodologyVersion?: string | null;
-    prNumber?: number | null;
-    repoContext?: ScanDetailViewModel["repoContext"];
-};
-/** Bridge copy from Signal summary to Recommended actions. */
-export declare function deriveFollowUpBridgeNote(actionCount: number): string | null;
-/** Act 2 theme sanitizer — strips package/CVE/version content. */
-export declare function sanitizeAct2Theme(raw: string): string | null;
-/** Verdict line from posture + reach band (scanSurfaceCopy.scanDetail.verdictLine). */
-export declare function deriveVerdictLine(posture: MergePosture | null, totalScore: number | null | undefined): string;
-export declare function deriveAct2Themes(result: ScanResult): string[];
-export declare function deriveOperationalImpact(result: ScanResult, verifyLabels?: Set<string>): ScanDetailOperationalImpact;
-export declare function presentScanDetailNarrativeContext(facts: ScanNarrativeFacts): ScanDetailNarrativeContext;
-export declare function deriveVerdictLineFromFacts(facts: ScanNarrativeFacts, result: ScanResult): string;
-/** Scan detail presentation from shared narrative facts. */
-export declare function presentScanDetailViewModel(facts: ScanNarrativeFacts, result: ScanResult, options: DeriveScanDetailOptions): ScanDetailViewModel;
-export declare function deriveScanDetailViewModel(result: ScanResult | null | undefined, options: DeriveScanDetailOptions): ScanDetailViewModel | null;
-/** Tier 1 recall test helper — true when message describes application-level impact. */
-export declare function tier1PassesRecallTest(operationalImpact: ScanDetailOperationalImpact): boolean;
-//# sourceMappingURL=scanDetailViewModel.d.ts.map
+//# sourceMappingURL=scanDetailViewModelTypes.d.ts.map

package/dist/scanDetailViewModelTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanDetailViewModelTypes.d.ts","sourceRoot":"","sources":["../src/scanDetailViewModelTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE9D,kEAAkE;AAClE,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,sEAAsE;AACtE,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,MAAM,MAAM,yBAAyB,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;AACpE,MAAM,MAAM,2BAA2B,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEpE,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,2BAA2B,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,yBAAyB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,yBAAyB,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,gBAAgB,GAAG,cAAc,CAAC;AAE3E,MAAM,MAAM,8BAA8B,GAAG;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE;QACjB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,8BAA8B,CAAC;IACvC,SAAS,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IACvC,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,yBAAyB,CAAC;IAChC,yBAAyB,EAAE,OAAO,CAAC;IACnC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,aAAa,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,EAAE,8BAA8B,CAAC;IACnD,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE,QAAQ,EAAE;QACR,cAAc,EAAE,uBAAuB,EAAE,CAAC;QAC1C,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACjC,qBAAqB,EAAE,MAAM,CAAC;QAC9B,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;KACrC,GAAG,IAAI,CAAC;IACT,WAAW,EACP;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,GACpB;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,gBAAgB,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,yBAAyB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;CACH,CAAC"}

package/dist/scanDetailViewModelTypes.js

@@ -0,0 +1,4 @@
+/** Max operational-impact rows before collapse on scan detail. */
+export const TIER1_MAX_VISIBLE_IMPACTS = 3;
+/** Findings list collapse threshold on scan detail evidence panel. */
+export const ACT3_EVIDENCE_COLLAPSE_THRESHOLD = 10;

package/dist/scanResultSchema.d.ts

@@ -1,9 +1,9 @@
 import { z } from "zod";
 import type { EngineEmittedScanResult, ScanResult } from "./types.js";
 /** Bump when persisted `result` JSON validation rules change materially (relaxed / legacy-tolerant). */
-export declare const SCAN_RESULT_ABI: "1";
+export declare const SCAN_RESULT_ABI: "2";
 /** Bump when strict fresh-engine-output validation rules change materially. */
-export declare const ENGINE_OUTPUT_SCAN_ABI: "2";
+export declare const ENGINE_OUTPUT_SCAN_ABI: "3";
 /**
  * Minimum structural invariants for **persisted** `scans.result` JSON and legacy reads.
  * `methodologyVersion` stays optional so historical rows without it remain valid.
@@ -88,6 +88,79 @@ export declare const engineOutputScanResultSchema: z.ZodObject<{
     codeAnalysisMetrics: z.ZodOptional<z.ZodUnknown>;
     methodologyVersion: z.ZodString;
     generatedAt: z.ZodString;
+    assessment: z.ZodObject<{
+        posture: z.ZodEnum<{
+            safe: "safe";
+            needs_review: "needs_review";
+            risky: "risky";
+        }>;
+        confidence: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        primaryConcern: z.ZodNullable<z.ZodEnum<{
+            confirmed_runtime_usage: "confirmed_runtime_usage";
+            security_finding: "security_finding";
+            breaking_or_major: "breaking_or_major";
+            behavioral_change: "behavioral_change";
+            ecosystem_risk: "ecosystem_risk";
+            insufficient_evidence: "insufficient_evidence";
+            graph_baseline_only: "graph_baseline_only";
+        }>>;
+        concerns: z.ZodArray<z.ZodObject<{
+            kind: z.ZodEnum<{
+                confirmed_runtime_usage: "confirmed_runtime_usage";
+                security_finding: "security_finding";
+                breaking_or_major: "breaking_or_major";
+                behavioral_change: "behavioral_change";
+                ecosystem_risk: "ecosystem_risk";
+                insufficient_evidence: "insufficient_evidence";
+                graph_baseline_only: "graph_baseline_only";
+            }>;
+            rank: z.ZodNumber;
+            packages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            evidenceRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        factors: z.ZodArray<z.ZodString>;
+        changeClasses: z.ZodArray<z.ZodEnum<{
+            tooling_maintenance: "tooling_maintenance";
+            test_infra: "test_infra";
+            runtime_patch: "runtime_patch";
+            runtime_upgrade: "runtime_upgrade";
+            security_advisory: "security_advisory";
+            breaking_change: "breaking_change";
+            ecosystem_unknown: "ecosystem_unknown";
+            bulk_mixed: "bulk_mixed";
+            removal: "removal";
+        }>>;
+        presentation: z.ZodObject<{
+            narrativeIntensity: z.ZodEnum<{
+                minimal: "minimal";
+                standard: "standard";
+                elevated: "elevated";
+            }>;
+            reachVisibility: z.ZodEnum<{
+                hidden: "hidden";
+                contextual: "contextual";
+                prominent: "prominent";
+            }>;
+            verificationIntensity: z.ZodEnum<{
+                none: "none";
+                advisory: "advisory";
+                required: "required";
+            }>;
+            insightEmissionFloor: z.ZodEnum<{
+                none: "none";
+                explain_only: "explain_only";
+                full: "full";
+            }>;
+            reportMode: z.ZodEnum<{
+                lightweight_pr_graph_baseline: "lightweight_pr_graph_baseline";
+                high_signal_pr: "high_signal_pr";
+            }>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
 }, z.core.$loose>;
 export type EngineOutputScanResultParseFailure = {
     ok: false;

package/dist/scanResultSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AASnD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAazE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}
+{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AASnD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAazE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}

package/dist/scanResultSchema.js

@@ -1,8 +1,9 @@
 import { z } from "zod";
+import { assessmentSchema } from "./assessmentSchema.js";
 /** Bump when persisted `result` JSON validation rules change materially (relaxed / legacy-tolerant). */
-export const SCAN_RESULT_ABI = "1";
+export const SCAN_RESULT_ABI = "2";
 /** Bump when strict fresh-engine-output validation rules change materially. */
-export const ENGINE_OUTPUT_SCAN_ABI = "2";
+export const ENGINE_OUTPUT_SCAN_ABI = "3";
 const layerScoresSchema = z.object({
     security: z.number(),
     maintainability: z.number(),
@@ -57,6 +58,7 @@ const engineOutputGeneratedAtSchema = z
 export const engineOutputScanResultSchema = scanResultSchema.extend({
     methodologyVersion: z.string().trim().min(1),
     generatedAt: engineOutputGeneratedAtSchema,
+    assessment: assessmentSchema,
 });
 export function safeParseEngineOutputScanResult(data) {
     const parsed = engineOutputScanResultSchema.safeParse(data);

package/dist/scanResultSchema.test.js

@@ -77,10 +77,26 @@ describe("scanResultSchema", () => {
         expect(parsed.findings).toEqual([]);
     });
 });
+const minimalAssessment = {
+    posture: "safe",
+    confidence: "high",
+    primaryConcern: null,
+    concerns: [],
+    factors: ["tooling_maintenance"],
+    changeClasses: ["tooling_maintenance"],
+    presentation: {
+        narrativeIntensity: "minimal",
+        reachVisibility: "hidden",
+        verificationIntensity: "advisory",
+        insightEmissionFloor: "none",
+        reportMode: "high_signal_pr",
+    },
+};
 describe("engineOutputScanResultSchema (strict, fresh engine only)", () => {
     const withMethodology = {
         ...minimalValid,
         methodologyVersion: "engine-test-fixture/v1",
+        assessment: minimalAssessment,
     };
     it("rejects payload that relaxed parser accepts when methodology is missing", () => {
         const r = safeParseEngineOutputScanResult(minimalValid);

package/dist/trustedScanGuards.test.js

@@ -1,5 +1,6 @@
 import { describe, it, expect, beforeEach, afterEach } from "vitest";
 import { assertTrustedActionsSummaryAllowed, assertTrustedScanResult, auditTrustedActionsOutput, isStubMethodologyVersion, trustedActionsSummaryDenylistPhrases, validateTrustedEngineScanResult, } from "./trustedScanGuards.js";
+import { assessmentStub } from "./fixtures/assessmentFixtures.js";
 import { scanSurfaceCopy } from "./scanSurfaceCopy.js";
 const baseResult = {
     totalScore: 10,
@@ -13,6 +14,12 @@ const baseResult = {
     recommendations: [],
     generatedAt: "2026-01-01T00:00:00.000Z",
     methodologyVersion: "engine-stub/v2",
+    assessment: assessmentStub,
+    decision: {
+        recommendation: "needs_review",
+        confidence: "low",
+        reasoning: ["Stub engine cannot perform real analysis"],
+    },
 };
 describe("trustedScanGuards", () => {
     it("detects stub methodology", () => {