@mergesignal/shared 0.4.3 → 0.6.0

package/dist/formatInsight.js

@@ -1,3 +1,4 @@
+import { MERGE_POSTURE_LABEL } from "./riskVocabulary.js";
 const DECISION_TITLES = {
     safe: "No significant dependency risks detected",
     needs_review: "Elevated dependency merge risk",
@@ -41,4 +42,28 @@ function renderInsightAsMarkdown(f) {
         f.action,
     ].join("\n");
 }
-export { renderInsightsAsMarkdown } from "./presentGitHubPrComment.js";
+function renderInsightBlock(f) {
+    return [
+        f.message,
+        "",
+        "**Where it shows up**",
+        "",
+        f.where,
+        "",
+        "**What to do**",
+        "",
+        f.action,
+    ].join("\n");
+}
+/** Legacy markdown renderer for raw PR insights (format-only; no bundle inference). */
+export function renderInsightsAsMarkdown(insights, decision) {
+    const title = MERGE_POSTURE_LABEL[decision.recommendation];
+    const lines = [`**${title}**`, "", "---", ""];
+    for (const insight of insights) {
+        lines.push(renderInsightBlock(formatInsight(insight)), "", "---", "");
+    }
+    for (const reason of decision.reasoning) {
+        lines.push(reason);
+    }
+    return lines.join("\n");
+}

package/dist/index.d.ts

@@ -1,16 +1,15 @@
 export * from "./types.js";
+export * from "./assessmentSchema.js";
+export * from "./assessmentLabels.js";
+export * from "./assessmentProjection.js";
 export * from "./formatInsight.js";
 export * from "./riskVocabulary.js";
 export * from "./selectTopAffectedAreas.js";
-export * from "./deriveScanSummaryText.js";
 export * from "./cardSummaryCopy.js";
 export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
-export * from "./formatCardEvidenceCounts.js";
 export * from "./formatCardExposureDisplay.js";
 export * from "./cardObservationCatalog.js";
-export * from "./deriveCardOperationalObservations.js";
-export * from "./deriveCardDisplaySummary.js";
 export * from "./scanNarrativeFacts.js";
 export * from "./repoIntelligenceSchema.js";
 export * from "./repoIntelligenceMappers.js";
@@ -20,17 +19,14 @@ export * from "./deriveScanNarrative.js";
 export * from "./extractRepositoryContextFacts.js";
 export * from "./narrativePresentation.js";
 export * from "./normalizeGeneratedText.js";
-export * from "./collectNarrativeWhyBullets.js";
-export { presentGitHubPrCommentMarkdownFromResult, renderInsightsAsMarkdown, } from "./presentGitHubPrComment.js";
-export * from "./scanCardSummary.js";
-export * from "./deriveScanDetailRecommendations.js";
-export * from "./deriveRiskScoreSummary.js";
-export * from "./scanDetailViewModel.js";
+export { presentGitHubPrCommentMarkdownFromResult } from "./presentGitHubPrComment.js";
+export * from "./scanDetailViewModelTypes.js";
+export * from "./scanCardPresentationState.js";
 export * from "./scanResultSchema.js";
 export * from "./scanSurfaceCopy.js";
+export * from "./resolvePipelineStatus.js";
 export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
-export * from "./prCheckRunPresentation.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,OAAO,EACL,wCAAwC,EACxC,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -1,16 +1,15 @@
 export * from "./types.js";
+export * from "./assessmentSchema.js";
+export * from "./assessmentLabels.js";
+export * from "./assessmentProjection.js";
 export * from "./formatInsight.js";
 export * from "./riskVocabulary.js";
 export * from "./selectTopAffectedAreas.js";
-export * from "./deriveScanSummaryText.js";
 export * from "./cardSummaryCopy.js";
 export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
-export * from "./formatCardEvidenceCounts.js";
 export * from "./formatCardExposureDisplay.js";
 export * from "./cardObservationCatalog.js";
-export * from "./deriveCardOperationalObservations.js";
-export * from "./deriveCardDisplaySummary.js";
 export * from "./scanNarrativeFacts.js";
 export * from "./repoIntelligenceSchema.js";
 export * from "./repoIntelligenceMappers.js";
@@ -20,16 +19,13 @@ export * from "./deriveScanNarrative.js";
 export * from "./extractRepositoryContextFacts.js";
 export * from "./narrativePresentation.js";
 export * from "./normalizeGeneratedText.js";
-export * from "./collectNarrativeWhyBullets.js";
-export { presentGitHubPrCommentMarkdownFromResult, renderInsightsAsMarkdown, } from "./presentGitHubPrComment.js";
-export * from "./scanCardSummary.js";
-export * from "./deriveScanDetailRecommendations.js";
-export * from "./deriveRiskScoreSummary.js";
-export * from "./scanDetailViewModel.js";
+export { presentGitHubPrCommentMarkdownFromResult } from "./presentGitHubPrComment.js";
+export * from "./scanDetailViewModelTypes.js";
+export * from "./scanCardPresentationState.js";
 export * from "./scanResultSchema.js";
 export * from "./scanSurfaceCopy.js";
+export * from "./resolvePipelineStatus.js";
 export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
-export * from "./prCheckRunPresentation.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";

package/dist/narrativeParity.test.js

@@ -5,44 +5,13 @@ import { presentScanDetails } from "./presentation/presenters/presentScanDetails
 import { presentGitHubPrComment } from "./presentation/presenters/presentGitHubPrComment.js";
 import { renderGitHubCheckRunMarkdown } from "./presentation/render/renderGitHubCheckRunMarkdown.js";
 import { presentGitHubCheckRun } from "./presentation/presenters/presentGitHubCheckRun.js";
-import { fixtureRepoIntelligenceFastify } from "./fixtures/repoIntelligenceFixtures.js";
-import { analysisPreparationWithValidRepoIntel } from "./fixtures/repoIntelligenceTestHelpers.js";
+import { scanResultFastifyRuntime } from "./presentation/fixtures/scanResultFixtures.js";
 const ORIGIN = "https://app.example.com";
 const SCAN_ID = "22222222-2222-4222-8222-222222222222";
 describe("narrative parity across consumers", () => {
     it("card, detail, GitHub share primary package and reachability story", () => {
-        const result = {
-            totalScore: 55,
-            layerScores: {
-                security: 10,
-                maintainability: 20,
-                ecosystem: 30,
-                upgradeImpact: 15,
-            },
-            findings: [],
-            generatedAt: "2026-01-01T00:00:00.000Z",
-            changedPackages: ["fastify"],
-            analysisPreparation: analysisPreparationWithValidRepoIntel(),
-            repoIntelligence: fixtureRepoIntelligenceFastify,
-            decision: {
-                recommendation: "needs_review",
-                confidence: "medium",
-                reasoning: [],
-            },
-            insights: [
-                {
-                    type: "usage_risk",
-                    priority: "high",
-                    confidence: "confirmed",
-                    scope: "changed",
-                    message: "Review fastify middleware ordering",
-                    context: "apps/api/src/middleware/auth.ts",
-                    remediation: "Run auth smoke tests",
-                },
-            ],
-        };
         const bundle = buildScanPresentationBundle({
-            result,
+            result: scanResultFastifyRuntime,
             pipelineStatus: "done",
         });
         const card = presentDashboardCard(bundle);
@@ -56,7 +25,8 @@ describe("narrative parity across consumers", () => {
         }));
         const prComment = presentGitHubPrComment(bundle);
         expect(detail.narrative.primaryPackage).toBe("fastify");
-        expect(card.evidenceChips?.some((e) => e.label === "Reachability")).toBe(true);
+        expect(card.reachVisibility).toBe("prominent");
+        expect(card.verdict?.scopeLabel).toBeTruthy();
         const asciiOnly = /^[\x00-\x7F]*$/;
         expect(asciiOnly.test(checkRun)).toBe(true);
         expect(checkRun.toLowerCase()).toContain("fastify");

package/dist/presentGitHubPrComment.d.ts

@@ -1,8 +1,6 @@
-import type { PRDecision, PRInsight, ScanResult } from "./types.js";
+import type { ScanResult } from "./types.js";
 /**
  * PR comment markdown from a completed scan (via presentation bundle).
  */
 export declare function presentGitHubPrCommentMarkdownFromResult(result: ScanResult): string;
-/** Backward-compatible entry: derives bundle then renders markdown. */
-export declare function renderInsightsAsMarkdown(insights: PRInsight[], decision: PRDecision): string;
 //# sourceMappingURL=presentGitHubPrComment.d.ts.map

package/dist/presentGitHubPrComment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentGitHubPrComment.d.ts","sourceRoot":"","sources":["../src/presentGitHubPrComment.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpE;;GAEG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,UAAU,GACjB,MAAM,CAWR;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,EAAE,EACrB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAeR"}
+{"version":3,"file":"presentGitHubPrComment.d.ts","sourceRoot":"","sources":["../src/presentGitHubPrComment.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;GAEG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,UAAU,GACjB,MAAM,CAWR"}

package/dist/presentGitHubPrComment.js

@@ -15,20 +15,3 @@ export function presentGitHubPrCommentMarkdownFromResult(result) {
         return "";
     return renderGitHubPrCommentMarkdown(presentGitHubPrCommentFromBundle(bundle));
 }
-/** Backward-compatible entry: derives bundle then renders markdown. */
-export function renderInsightsAsMarkdown(insights, decision) {
-    const result = {
-        totalScore: 0,
-        layerScores: {
-            security: 0,
-            maintainability: 0,
-            ecosystem: 0,
-            upgradeImpact: 0,
-        },
-        findings: [],
-        generatedAt: new Date().toISOString(),
-        insights,
-        decision,
-    };
-    return presentGitHubPrCommentMarkdownFromResult(result);
-}

package/dist/presentation/buildGitHubCheckRunOutput.d.ts

@@ -0,0 +1,20 @@
+import type { ScanResult } from "../types.js";
+export type GitHubCheckRunConclusion = "success" | "neutral" | "failure";
+export type GitHubCheckRunOutput = {
+    /** Short title shown in the checks bar (≤72 chars). */
+    title: string;
+    /** Markdown summary shown in the check run detail panel (≤2000 chars). */
+    summary: string;
+    conclusion: GitHubCheckRunConclusion;
+};
+export declare function resolveWebAppOrigin(): string;
+export type BuildGitHubCheckRunOutputOptions = {
+    scanId: string;
+    webAppOrigin?: string;
+};
+/**
+ * Formats GitHub Check Run output from a persisted ScanResult via Assessment presentation.
+ * Presentation-only — callers own Octokit checks.create.
+ */
+export declare function buildGitHubCheckRunOutput(result: ScanResult, options: BuildGitHubCheckRunOutputOptions | string): GitHubCheckRunOutput;
+//# sourceMappingURL=buildGitHubCheckRunOutput.d.ts.map

package/dist/presentation/buildGitHubCheckRunOutput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildGitHubCheckRunOutput.d.ts","sourceRoot":"","sources":["../../src/presentation/buildGitHubCheckRunOutput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzE,MAAM,MAAM,oBAAoB,GAAG;IACjC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAKF,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,gCAAgC,GAAG,MAAM,GACjD,oBAAoB,CAkCtB"}

package/dist/presentation/buildGitHubCheckRunOutput.js

@@ -0,0 +1,42 @@
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkdown.js";
+/** Default Fly web app origin when `MERGESIGNAL_WEB_URL` is unset. */
+const DEFAULT_WEB_APP_ORIGIN = "https://mergesignal-web.fly.dev";
+export function resolveWebAppOrigin() {
+    const url = typeof process !== "undefined"
+        ? process.env.MERGESIGNAL_WEB_URL?.trim()
+        : undefined;
+    return (url || DEFAULT_WEB_APP_ORIGIN).replace(/\/+$/, "");
+}
+/**
+ * Formats GitHub Check Run output from a persisted ScanResult via Assessment presentation.
+ * Presentation-only — callers own Octokit checks.create.
+ */
+export function buildGitHubCheckRunOutput(result, options) {
+    const scanId = typeof options === "string" ? options : options.scanId;
+    const webAppOrigin = typeof options === "string"
+        ? resolveWebAppOrigin()
+        : (options.webAppOrigin ?? resolveWebAppOrigin());
+    if (!result.decision) {
+        throw new Error("buildGitHubCheckRunOutput requires ScanResult.decision");
+    }
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+    if (!bundle) {
+        throw new Error("buildGitHubCheckRunOutput requires ScanResult.assessment for presentation bundle");
+    }
+    const baseline = result.reportPresentation?.mode === "lightweight_pr_graph_baseline";
+    const presentation = presentGitHubCheckRun(bundle, {
+        scanId,
+        webAppOrigin,
+        baseline,
+    });
+    return {
+        title: presentation.title,
+        summary: renderGitHubCheckRunMarkdown(presentation),
+        conclusion: presentation.conclusion,
+    };
+}

package/dist/presentation/buildGitHubCheckRunOutput.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=buildGitHubCheckRunOutput.test.d.ts.map

package/dist/presentation/buildGitHubCheckRunOutput.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildGitHubCheckRunOutput.test.d.ts","sourceRoot":"","sources":["../../src/presentation/buildGitHubCheckRunOutput.test.ts"],"names":[],"mappings":""}

package/dist/presentation/buildGitHubCheckRunOutput.test.js

@@ -0,0 +1,188 @@
+import { describe, expect, it } from "vitest";
+import { buildScanPresentationBundle, presentDashboardCard } from "./index.js";
+import { buildGitHubCheckRunOutput } from "./buildGitHubCheckRunOutput.js";
+const safeAssessment = {
+    posture: "safe",
+    confidence: "high",
+    primaryConcern: null,
+    concerns: [],
+    factors: ["tooling_maintenance"],
+    changeClasses: ["tooling_maintenance"],
+    presentation: {
+        narrativeIntensity: "minimal",
+        reachVisibility: "hidden",
+        verificationIntensity: "advisory",
+        insightEmissionFloor: "none",
+        reportMode: "high_signal_pr",
+    },
+};
+const baselineAssessment = {
+    posture: "safe",
+    confidence: "medium",
+    primaryConcern: "graph_baseline_only",
+    concerns: [
+        {
+            kind: "graph_baseline_only",
+            rank: 1,
+            evidenceRefs: ["fixture:baseline"],
+        },
+    ],
+    factors: ["graph_baseline_only"],
+    changeClasses: ["tooling_maintenance"],
+    presentation: {
+        narrativeIntensity: "minimal",
+        reachVisibility: "hidden",
+        verificationIntensity: "none",
+        insightEmissionFloor: "none",
+        reportMode: "lightweight_pr_graph_baseline",
+    },
+};
+const needsReviewAssessment = {
+    posture: "needs_review",
+    confidence: "medium",
+    primaryConcern: "confirmed_runtime_usage",
+    concerns: [
+        {
+            kind: "confirmed_runtime_usage",
+            rank: 1,
+            packages: ["fastify"],
+            evidenceRefs: ["fixture:fastify"],
+        },
+    ],
+    factors: ["confirmed_runtime_usage", "http_framework_infrastructure"],
+    changeClasses: ["runtime_upgrade"],
+    presentation: {
+        narrativeIntensity: "elevated",
+        reachVisibility: "prominent",
+        verificationIntensity: "required",
+        insightEmissionFloor: "full",
+        reportMode: "high_signal_pr",
+    },
+};
+const riskyAssessment = {
+    posture: "risky",
+    confidence: "high",
+    primaryConcern: "breaking_or_major",
+    concerns: [
+        {
+            kind: "breaking_or_major",
+            rank: 1,
+            packages: ["react"],
+            evidenceRefs: ["fixture:breaking"],
+        },
+    ],
+    factors: ["breaking_or_major"],
+    changeClasses: ["breaking_change"],
+    presentation: {
+        narrativeIntensity: "elevated",
+        reachVisibility: "prominent",
+        verificationIntensity: "required",
+        insightEmissionFloor: "full",
+        reportMode: "high_signal_pr",
+    },
+};
+function assertNoLegacyCheckRunMarkers(summary) {
+    expect(summary).not.toContain("Risk index");
+    expect(summary).not.toContain("Layer scores");
+    expect(summary).not.toContain("<details>");
+    expect(summary).not.toMatch(/\d+\/100/);
+}
+function minimalScanResult(overrides = {}) {
+    return {
+        totalScore: 72,
+        layerScores: {
+            security: 10,
+            maintainability: 20,
+            ecosystem: 30,
+            upgradeImpact: 15,
+        },
+        findings: [],
+        methodologyVersion: "mergesignal-engine/test",
+        generatedAt: new Date().toISOString(),
+        assessment: safeAssessment,
+        decision: {
+            recommendation: "safe",
+            confidence: "medium",
+            reasoning: [],
+        },
+        ...overrides,
+    };
+}
+describe("buildGitHubCheckRunOutput", () => {
+    it("maps safe posture to success conclusion with scan link", () => {
+        const out = buildGitHubCheckRunOutput(minimalScanResult(), {
+            scanId: "scan-safe",
+            webAppOrigin: "https://app.test",
+        });
+        expect(out.conclusion).toBe("success");
+        expect(out.summary).toContain("/scan/scan-safe");
+        expect(out.summary).toContain("Full scan:");
+        assertNoLegacyCheckRunMarkers(out.summary);
+    });
+    it("maps needs_review posture to neutral conclusion", () => {
+        const out = buildGitHubCheckRunOutput(minimalScanResult({
+            assessment: needsReviewAssessment,
+            decision: {
+                recommendation: "needs_review",
+                confidence: "medium",
+                reasoning: ["Runtime usage confirmed"],
+            },
+            changedPackages: ["fastify"],
+        }), { scanId: "scan-review", webAppOrigin: "https://app.test" });
+        expect(out.conclusion).toBe("neutral");
+        expect(out.summary).toContain("/scan/scan-review");
+        assertNoLegacyCheckRunMarkers(out.summary);
+    });
+    it("maps risky posture to failure conclusion", () => {
+        const out = buildGitHubCheckRunOutput(minimalScanResult({
+            assessment: riskyAssessment,
+            decision: {
+                recommendation: "risky",
+                confidence: "high",
+                reasoning: ["Breaking change"],
+            },
+        }), { scanId: "scan-risky", webAppOrigin: "https://app.test" });
+        expect(out.conclusion).toBe("failure");
+        assertNoLegacyCheckRunMarkers(out.summary);
+    });
+    it("produces success conclusion for lightweight baseline presentation", () => {
+        const out = buildGitHubCheckRunOutput(minimalScanResult({
+            assessment: baselineAssessment,
+            reportPresentation: { mode: "lightweight_pr_graph_baseline" },
+            changedPackages: ["@types/minimist"],
+            decision: {
+                recommendation: "safe",
+                confidence: "medium",
+                reasoning: [],
+            },
+        }), { scanId: "scan-lw", webAppOrigin: "https://app.test" });
+        expect(out.conclusion).toBe("success");
+        expect(out.summary).toContain("/scan/scan-lw");
+        assertNoLegacyCheckRunMarkers(out.summary);
+    });
+    it("throws when assessment is missing", () => {
+        expect(() => buildGitHubCheckRunOutput(minimalScanResult({ assessment: undefined }), "scan-no-assessment")).toThrow(/assessment/i);
+    });
+    it("title matches dashboard card headline from the same bundle", () => {
+        const result = minimalScanResult({
+            assessment: needsReviewAssessment,
+            decision: {
+                recommendation: "needs_review",
+                confidence: "medium",
+                reasoning: ["Runtime usage confirmed"],
+            },
+            changedPackages: ["fastify"],
+        });
+        const out = buildGitHubCheckRunOutput(result, {
+            scanId: "scan-parity",
+            webAppOrigin: "https://app.test",
+        });
+        const bundle = buildScanPresentationBundle({
+            result,
+            pipelineStatus: "done",
+        });
+        expect(bundle).not.toBeNull();
+        const card = presentDashboardCard(bundle);
+        expect(out.title).toBe(card.headline);
+    });
+});

package/dist/presentation/compose/narrativeChannels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"narrativeChannels.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeChannels.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAM/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAOzF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAgDF,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,iBAAiB,CA8BnB;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAyBV"}
+{"version":3,"file":"narrativeChannels.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeChannels.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAGzF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAqBF,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,iBAAiB,CAmBnB;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAyBV"}

package/dist/presentation/compose/narrativeChannels.js

@@ -1,61 +1,31 @@
-import { deriveDetailReachChip } from "../../formatCardExposureDisplay.js";
 import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
-import { formatPresentationHeadline, formatPresentationInsightLines, formatPresentationVerification, } from "../intent/formatPresentationCopy.js";
-import { formatCardAreaLabels } from "../../formatCardAreaLabels.js";
-import { labelBlastRadiusLevel, labelReachabilityKind, } from "../../narrativePresentation.js";
+import { applicationAreaLabels, formatAssessmentHeadline, projectInsightLines, projectVerificationActions, reachVisibilityLabel, } from "../../assessmentProjection.js";
+import { safeParseRepoIntelligence } from "../../repoIntelligenceSchema.js";
+import { labelBlastRadiusLevel } from "../../narrativePresentation.js";
 function composeScopeAreaLabels(bundle, max) {
-    const labels = [];
-    for (const area of bundle.facts.affectedAreas) {
-        const formatted = formatCardAreaLabels([area.label], 1);
-        if (formatted[0])
-            labels.push(formatted[0]);
-        if (labels.length >= max)
-            break;
-    }
-    return labels;
-}
-function isTautologicalEvidenceRow(row) {
-    const label = row.label.trim().toLowerCase();
-    const value = row.value.trim().toLowerCase();
-    if (label === "runtime" && value === "runtime")
-        return true;
-    return false;
+    const parsed = safeParseRepoIntelligence(bundle.result.repoIntelligence);
+    const labels = parsed.ok ? applicationAreaLabels(parsed.value) : [];
+    return labels.slice(0, max);
 }
 function composeChannelEvidence(bundle, max) {
-    const { facts, profile } = bundle;
+    const blast = labelBlastRadiusLevel(bundle.facts);
     const rows = [];
-    if (!profile.interpretation.suppressRuntimeNarrative) {
-        const reach = labelReachabilityKind(facts);
-        if (reach)
-            rows.push({ label: "Reachability", value: reach });
-    }
-    const blast = labelBlastRadiusLevel(facts);
     if (blast)
         rows.push({ label: "Blast radius", value: blast });
-    return rows.filter((row) => !isTautologicalEvidenceRow(row)).slice(0, max);
-}
-function shouldShowReachLabel(bundle) {
-    const { profile } = bundle;
-    if (profile.status === "safe" && profile.density === "minimal") {
-        return false;
-    }
-    return profile.status !== "safe" || profile.density !== "minimal";
+    return rows.slice(0, max);
 }
 /** Canonical non-redundant narrative channels — single dedupe point for all surfaces. */
 export function buildNarrativeChannels(bundle) {
-    const { facts, profile, result } = bundle;
-    const riskIndex = facts.riskIndex ?? result.totalScore ?? null;
-    const reachLabel = shouldShowReachLabel(bundle) && riskIndex != null
-        ? (deriveDetailReachChip(riskIndex) ?? undefined)
-        : undefined;
+    const { assessment, presentation, profile, result } = bundle;
+    const reachLabel = reachVisibilityLabel(presentation.reachVisibility);
     return {
-        headline: formatPresentationHeadline(profile.interpretation, facts, profile.status),
+        headline: formatAssessmentHeadline(assessment, result, profile.status),
         limitedContextMessage: profile.degradedMessage ?? undefined,
         reachLabel,
-        insights: formatPresentationInsightLines(profile.interpretation, facts, profile.status),
+        insights: projectInsightLines(assessment, result),
         scopeAreas: composeScopeAreaLabels(bundle, 4),
         evidence: composeChannelEvidence(bundle, 4),
-        verification: formatPresentationVerification(profile.interpretation, profile.status, 6),
+        verification: projectVerificationActions(assessment, presentation, result, 6),
     };
 }
 /** Merge distinct channels into one bullet list for single-column surfaces (GitHub check, CLI). */

package/dist/presentation/compose/narrativeCompose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"narrativeCompose.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeCompose.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAMzF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAShC,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAOtE;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAOV;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAQV;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBzC;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,EAAE,GAAG,SAAS,CAwBtB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG;IAC1E,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAKA"}
+{"version":3,"file":"narrativeCompose.d.ts","sourceRoot":"","sources":["../../../src/presentation/compose/narrativeCompose.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAMzF,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAShC,wBAAgB,eAAe,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAEtE;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAEV;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAQV;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,MAAM,GACV,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBzC;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,EAAE,GAAG,SAAS,CAwBtB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,sBAAsB,GAAG;IAC1E,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAKA"}

package/dist/presentation/compose/narrativeCompose.js

@@ -1,7 +1,6 @@
 import { formatCardAreaLabels } from "../../formatCardAreaLabels.js";
 import { formatChangedPackagesShort, labelBlastRadiusLevel, labelReachabilityKind, labelRuntimeSurface, } from "../../narrativePresentation.js";
 import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
-import { formatPresentationHeadline, formatPresentationVerification, } from "../intent/formatPresentationCopy.js";
 import { buildNarrativeChannels, projectCompactKeyPoints, } from "./narrativeChannels.js";
 export { buildNarrativeChannels, projectCompactKeyPoints, } from "./narrativeChannels.js";
 function topAreaLabel(bundle) {
@@ -12,8 +11,7 @@ function topAreaLabel(bundle) {
     return formatted[0] ?? area.label;
 }
 export function composeHeadline(bundle) {
-    const { facts, profile } = bundle;
-    return formatPresentationHeadline(profile.interpretation, facts, profile.status);
+    return buildNarrativeChannels(bundle).headline;
 }
 export function composeSubheadline(bundle) {
     const { profile } = bundle;
@@ -25,8 +23,7 @@ export function composeKeyPoints(bundle, max) {
     return projectCompactKeyPoints(buildNarrativeChannels(bundle), max);
 }
 export function composeVerificationActions(bundle, max) {
-    const { profile } = bundle;
-    return formatPresentationVerification(profile.interpretation, profile.status, max);
+    return buildNarrativeChannels(bundle).verification.slice(0, max);
 }
 export function composeAffectedAreaLabels(bundle, max) {
     const labels = [];

package/dist/presentation/dto/assessmentPresentationFields.d.ts

@@ -0,0 +1,13 @@
+import type { MergeConcernKind } from "../../assessmentSchema.js";
+import type { NarrativeIntensity, ReachVisibility } from "../../assessmentSchema.js";
+/** Assessment-aligned fields projected identically across surfaces. */
+export type AssessmentPresentationFields = {
+    posture: "safe" | "needs_review" | "risky";
+    primaryConcern: MergeConcernKind | null;
+    factors: string[];
+    reasoning: string[];
+    verificationFocus: string[];
+    reachVisibility: ReachVisibility;
+    narrativeIntensity: NarrativeIntensity;
+};
+//# sourceMappingURL=assessmentPresentationFields.d.ts.map

package/dist/presentation/dto/assessmentPresentationFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessmentPresentationFields.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/assessmentPresentationFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EAEhB,MAAM,2BAA2B,CAAC;AAEnC,uEAAuE;AACvE,MAAM,MAAM,4BAA4B,GAAG;IACzC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC3C,cAAc,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC,CAAC"}

package/dist/presentation/dto/assessmentPresentationFields.js

@@ -0,0 +1 @@
+export {};

package/dist/presentation/dto/dashboardCardPresentation.d.ts

@@ -1,6 +1,7 @@
+import type { AssessmentPresentationFields } from "./assessmentPresentationFields.js";
 import type { PresentationEvidenceRow, PresentationStatus } from "./types.js";
 export type DashboardCardLayout = "quiet" | "standard" | "expanded";
-export type DashboardCardPresentation = {
+export type DashboardCardPresentation = Partial<AssessmentPresentationFields> & {
     verdict?: {
         posture: PresentationStatus;
         postureLabel: string;

package/dist/presentation/dto/dashboardCardPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboardCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/dashboardCardPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAEpE,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,kBAAkB,CAAC;QAC5B,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,QAAQ,EAAE,MAAM,CAAC;IAEjB,QAAQ,CAAC,EAAE;QACT,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,cAAc,CAAC,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAE1C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAE1B,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}
+{"version":3,"file":"dashboardCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/dashboardCardPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAEpE,MAAM,MAAM,yBAAyB,GACnC,OAAO,CAAC,4BAA4B,CAAC,GAAG;IACtC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,kBAAkB,CAAC;QAC5B,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,QAAQ,EAAE,MAAM,CAAC;IAEjB,QAAQ,CAAC,EAAE;QACT,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,cAAc,CAAC,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAE1C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAE1B,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}