@mergesignal/shared 0.5.0 → 0.7.0

package/dist/assessmentLabels.d.ts

@@ -1,4 +1,4 @@
-import type { MergeConcernKind } from "./assessmentSchema.js";
+import type { MergeConcernKind } from "@mergesignal/contracts";
 /** Display labels for factor tokens (mirrors engine factor-registry labels). */
 export declare const ASSESSMENT_FACTOR_LABELS: Record<string, string>;
 export declare const MERGE_CONCERN_LABELS: Record<MergeConcernKind, string>;

package/dist/assessmentLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentLabels.d.ts","sourceRoot":"","sources":["../src/assessmentLabels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAmB3D,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAcjE,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D"}
+{"version":3,"file":"assessmentLabels.d.ts","sourceRoot":"","sources":["../src/assessmentLabels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAmB3D,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAcjE,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D"}

package/dist/assessmentPresentationUtils.d.ts

@@ -0,0 +1,6 @@
+import type { AssessmentPresentationPublic, AssessmentPresentationWire, NarrativeIntensity } from "@mergesignal/contracts";
+/** Public presentation subset — excludes engine policy fields. */
+export declare function toPublicPresentation(wire: AssessmentPresentationWire): AssessmentPresentationPublic;
+/** Map engine narrative intensity to presentation density (formatting only). */
+export declare function narrativeIntensityToDensity(intensity: NarrativeIntensity): "minimal" | "standard" | "rich";
+//# sourceMappingURL=assessmentPresentationUtils.d.ts.map

package/dist/assessmentPresentationUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessmentPresentationUtils.d.ts","sourceRoot":"","sources":["../src/assessmentPresentationUtils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAEhC,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,0BAA0B,GAC/B,4BAA4B,CAO9B;AAED,gFAAgF;AAChF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,kBAAkB,GAC5B,SAAS,GAAG,UAAU,GAAG,MAAM,CAIjC"}

package/dist/assessmentPresentationUtils.js

@@ -0,0 +1,17 @@
+/** Public presentation subset — excludes engine policy fields. */
+export function toPublicPresentation(wire) {
+    return {
+        narrativeIntensity: wire.narrativeIntensity,
+        reachVisibility: wire.reachVisibility,
+        verificationIntensity: wire.verificationIntensity,
+        reportMode: wire.reportMode,
+    };
+}
+/** Map engine narrative intensity to presentation density (formatting only). */
+export function narrativeIntensityToDensity(intensity) {
+    if (intensity === "minimal")
+        return "minimal";
+    if (intensity === "elevated")
+        return "rich";
+    return "standard";
+}

package/dist/assessmentProjection.d.ts

@@ -1,10 +1,10 @@
 import type { ScanResult } from "./types.js";
 import { type RepoIntelligence } from "./repoIntelligenceSchema.js";
-import type { Assessment, AssessmentPresentationPublic, ReachVisibility } from "./assessmentSchema.js";
+import type { Assessment, AssessmentPresentationPublic, ReachVisibility } from "@mergesignal/contracts";
 import type { PresentationStatus } from "./presentation/dto/types.js";
 export declare function collectVerificationFocus(result: ScanResult): string[];
 export declare function reachVisibilityLabel(visibility: ReachVisibility): string | undefined;
-export declare function formatAssessmentHeadline(assessment: Assessment, result: ScanResult, status: PresentationStatus): string;
+export declare function formatAssessmentHeadline(assessment: Assessment, status: PresentationStatus): string;
 export declare function projectReasoningLines(result: ScanResult): string[];
 export declare function projectInsightLines(assessment: Assessment, result: ScanResult): string[];
 export declare function projectVerificationActions(assessment: Assessment, presentation: AssessmentPresentationPublic, result: ScanResult, max: number): string[];

package/dist/assessmentProjection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentProjection.d.ts","sourceRoot":"","sources":["../src/assessmentProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC5B,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAgBrE;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,eAAe,GAC1B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAqDR;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAIlE;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,UAAU,GACjB,MAAM,EAAE,CAaV;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAIV;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,EAAE,CAI3E"}
+{"version":3,"file":"assessmentProjection.d.ts","sourceRoot":"","sources":["../src/assessmentProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC5B,eAAe,EAChB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgCtE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAkBrE;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,eAAe,GAC1B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAiDR;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAIlE;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,UAAU,GACjB,MAAM,EAAE,CAaV;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,GACV,MAAM,EAAE,CAIV;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,EAAE,CAI3E"}

package/dist/assessmentProjection.js

@@ -2,14 +2,47 @@ import { safeParseRepoIntelligence, } from "./repoIntelligenceSchema.js";
 import { labelAssessmentFactor, MERGE_CONCERN_LABELS, } from "./assessmentLabels.js";
 import { scanSurfaceCopy } from "./scanSurfaceCopy.js";
 import { applyPostureVocabularyGuardHeadline } from "./presentation/intent/applyPostureVocabularyGuard.js";
+function focalDisplayPackage(assessment) {
+    const anchors = assessment.reviewFocalPoint.anchors;
+    if (anchors.length === 0)
+        return "dependency";
+    const token = anchors[0];
+    if (token === "dependency_graph")
+        return "dependencies";
+    if (token.includes("+"))
+        return token.split("+")[0];
+    return token;
+}
+function focalHeadlinePackages(assessment) {
+    const focal = assessment.reviewFocalPoint;
+    if (focal.episodeShape === "multi_anchor") {
+        return focal.anchors.join(", ");
+    }
+    return focalDisplayPackage(assessment);
+}
+/** Copy-formatting only — fills {surface} in runtime headline template. */
+function surfaceHintFromAssessment(assessment) {
+    const factors = assessment.factors;
+    const anchor = focalDisplayPackage(assessment);
+    if (anchor === "bullmq" || factors.includes("queue_infrastructure")) {
+        return "workers and queues";
+    }
+    if (anchor === "next-auth" || factors.includes("auth_infrastructure")) {
+        return "authentication flows";
+    }
+    return "application code";
+}
 export function collectVerificationFocus(result) {
+    const scope = result.assessment?.verificationScope;
+    if (scope?.focus?.length)
+        return [...scope.focus];
+    const packages = scope?.packages ?? [];
     const parsed = safeParseRepoIntelligence(result.repoIntelligence);
     if (!parsed.ok)
         return [];
-    const changed = new Set(result.changedPackages ?? []);
     const labels = [];
     const seen = new Set();
-    for (const pkg of changed) {
+    for (const pkg of packages) {
         const row = parsed.value.packages[pkg];
         for (const focus of row?.verificationFocus ?? []) {
             const t = focus.trim();
@@ -33,13 +66,13 @@ export function reachVisibilityLabel(visibility) {
             return undefined;
     }
 }
-export function formatAssessmentHeadline(assessment, result, status) {
+export function formatAssessmentHeadline(assessment, status) {
     const copy = scanSurfaceCopy.presentation;
-    const runtimePkg = assessment.concerns.find((c) => c.kind === "confirmed_runtime_usage")?.packages?.[0];
-    const primaryPkg = runtimePkg ??
-        result.changedPackages?.[0] ??
-        assessment.concerns.find((c) => c.packages?.length)?.packages?.[0] ??
-        "dependency";
+    const primaryPkg = focalHeadlinePackages(assessment);
+    if (assessment.reviewFocalPoint.episodeShape === "structural") {
+        const headline = copy.defaultUpgradeHeadline.replace("{package}", "dependencies");
+        return applyPostureVocabularyGuardHeadline(headline, status, null);
+    }
     if (assessment.primaryConcern === "insufficient_evidence") {
         return applyPostureVocabularyGuardHeadline(copy.limitedContextHeadline, status, primaryPkg);
     }
@@ -50,11 +83,7 @@ export function formatAssessmentHeadline(assessment, result, status) {
         return applyPostureVocabularyGuardHeadline(headline, status, primaryPkg);
     }
     if (assessment.primaryConcern === "confirmed_runtime_usage") {
-        const surface = assessment.factors.includes("queue_infrastructure")
-            ? "workers and queues"
-            : assessment.factors.includes("auth_infrastructure")
-                ? "authentication flows"
-                : "application code";
+        const surface = surfaceHintFromAssessment(assessment);
         const headline = copy.runtimeUpgradeHeadline
             .replace("{package}", primaryPkg)
             .replace("{surface}", surface);

package/dist/deriveScanNarrative.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deriveScanNarrative.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.ts"],"names":[],"mappings":"AAOA,OAAO,EAeL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAKV,UAAU,EACX,MAAM,YAAY,CAAC;AA+dpB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CAwGpB"}
+{"version":3,"file":"deriveScanNarrative.d.ts","sourceRoot":"","sources":["../src/deriveScanNarrative.ts"],"names":[],"mappings":"AAOA,OAAO,EAeL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAKV,UAAU,EACX,MAAM,YAAY,CAAC;AAqfpB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,kBAAkB,CAwGpB"}

package/dist/deriveScanNarrative.js

@@ -14,6 +14,25 @@ function parseChangedPackages(changed) {
         all,
     };
 }
+function changedPackagesFromAssessment(result) {
+    const assessment = result.assessment;
+    const focal = assessment?.reviewFocalPoint;
+    // Follow-up: remove parseChangedPackages fallback after historical scan re-scan window.
+    if (focal?.anchors?.length && focal.anchors[0] !== "dependency_graph") {
+        const token = focal.anchors[0];
+        const primary = token.includes("+") ? token.split("+")[0] : token;
+        const supporting = focal.supportingPackages ?? [];
+        const all = [
+            ...new Set([primary, ...supporting, ...(result.changedPackages ?? [])]),
+        ].sort((a, b) => a.localeCompare(b));
+        return {
+            primary,
+            others: all.filter((p) => p !== primary),
+            all,
+        };
+    }
+    return parseChangedPackages(result.changedPackages);
+}
 function blastLevelFromChangedCount(count) {
     if (count >= 8)
         return "wide";
@@ -356,7 +375,7 @@ export function deriveScanNarrative(result) {
     if (!result) {
         return { ...EMPTY_SCAN_NARRATIVE_FACTS };
     }
-    const changedPackages = parseChangedPackages(result.changedPackages);
+    const changedPackages = changedPackagesFromAssessment(result);
     const mergePosture = mergePostureFromDecision(result.decision?.recommendation) ?? null;
     const riskIndex = typeof result.totalScore === "number" && Number.isFinite(result.totalScore)
         ? result.totalScore

package/dist/deriveScanNarrative.test.js

@@ -3,6 +3,7 @@ import { deriveScanNarrative } from "./deriveScanNarrative.js";
 import { legacyEngineRepoIntelligenceJwt } from "./fixtures/legacyEngineRepoIntelligence.js";
 import { fixtureRepoIntelligenceFastify, fixtureRepoIntelligenceMultiPackage, fixtureRepoIntelligenceTypescript, } from "./fixtures/repoIntelligenceFixtures.js";
 import { analysisPreparationWithInvalidRepoIntel, analysisPreparationWithValidRepoIntel, } from "./fixtures/repoIntelligenceTestHelpers.js";
+import { assessmentFastifyRuntime } from "./fixtures/assessmentFixtures.js";
 const baseResult = {
     totalScore: 10,
     layerScores: {
@@ -64,6 +65,18 @@ describe("deriveScanNarrative", () => {
         expect(facts.affectedAreas.map((a) => a.id)).toContain("api");
         expect(facts.hotspots[0]?.source).toBe("code");
     });
+    it("changedPackages.primary follows reviewFocalPoint anchor, not changedPackages order", () => {
+        const result = {
+            ...baseResult,
+            changedPackages: ["typescript", "fastify"],
+            assessment: assessmentFastifyRuntime,
+            analysisPreparation: analysisPreparationWithValidRepoIntel(),
+            repoIntelligence: fixtureRepoIntelligenceFastify,
+        };
+        const facts = deriveScanNarrative(result);
+        expect(facts.changedPackages.primary).toBe("fastify");
+        expect(result.changedPackages?.[0]).toBe("typescript");
+    });
     it("prefers changed-scope insights for reviewer guidance ordering", () => {
         const result = {
             ...baseResult,

package/dist/engineWireRegression.test.js

@@ -70,8 +70,8 @@ describe("engine wire regression (canonical fixtures)", () => {
         const facts = deriveScanNarrative(result);
         expect(facts.availability.mode).toBe("pr_intelligence");
         expect(facts.packageUsage.map((u) => u.packageName)).toEqual([
-            "lodash",
             "axios",
+            "lodash",
         ]);
     });
 });

package/dist/fixtures/assessmentFixtures.d.ts

@@ -1,4 +1,4 @@
-import type { Assessment } from "../assessmentSchema.js";
+import type { Assessment } from "@mergesignal/contracts";
 export declare const assessmentTypescriptPatch: Assessment;
 export declare const assessmentPrettier: Assessment;
 export declare const assessmentEslint: Assessment;
@@ -6,6 +6,7 @@ export declare const assessmentVitest: Assessment;
 export declare const assessmentFastifyRuntime: Assessment;
 export declare const assessmentBullmq: Assessment;
 export declare const assessmentNextAuth: Assessment;
+/** PR #26 — focal fastify despite typescript in changedPackages order. */
 export declare const assessmentMixedTypescriptFastify: Assessment;
 export declare const assessmentLimitedContext: Assessment;
 export declare const assessmentStub: Assessment;

package/dist/fixtures/assessmentFixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessmentFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAkBzD,eAAO,MAAM,yBAAyB,EAAE,UAQvC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAGhC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAE9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAQ9B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAetC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAmB9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAehC,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,UAe9C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAoBtC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UAoB5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAcnC,CAAC"}
+{"version":3,"file":"assessmentFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA0BzD,eAAO,MAAM,yBAAyB,EAAE,UAevC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAUhC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAS9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAe9B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UAyBtC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UA6B9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAyBhC,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,EAAE,UAgC9C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,UA2BtC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,UA6B5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAqBnC,CAAC"}

package/dist/fixtures/assessmentFixtures.js

@@ -1,3 +1,4 @@
+import { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./assessmentScopeFixtures.js";
 const safeToolingPresentation = {
     narrativeIntensity: "minimal",
     reachVisibility: "hidden",
@@ -12,7 +13,7 @@ const runtimeReviewPresentation = {
     insightEmissionFloor: "full",
     reportMode: "high_signal_pr",
 };
-export const assessmentTypescriptPatch = {
+export const assessmentTypescriptPatch = withAssessmentScope({
     posture: "safe",
     confidence: "high",
     primaryConcern: null,
@@ -20,15 +21,27 @@ export const assessmentTypescriptPatch = {
     factors: ["tooling_maintenance"],
     changeClasses: ["tooling_maintenance"],
     presentation: safeToolingPresentation,
-};
-export const assessmentPrettier = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["typescript"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentPrettier = withAssessmentScope({
     ...assessmentTypescriptPatch,
     factors: ["tooling_maintenance"],
-};
-export const assessmentEslint = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["prettier"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentEslint = withAssessmentScope({
     ...assessmentTypescriptPatch,
-};
-export const assessmentVitest = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["eslint"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentVitest = withAssessmentScope({
     posture: "safe",
     confidence: "high",
     primaryConcern: null,
@@ -36,8 +49,12 @@ export const assessmentVitest = {
     factors: ["test_infra_change"],
     changeClasses: ["test_infra"],
     presentation: safeToolingPresentation,
-};
-export const assessmentFastifyRuntime = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["vitest"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentFastifyRuntime = withAssessmentScope({
     posture: "needs_review",
     confidence: "medium",
     primaryConcern: "confirmed_runtime_usage",
@@ -52,8 +69,12 @@ export const assessmentFastifyRuntime = {
     factors: ["confirmed_runtime_usage", "http_framework_infrastructure"],
     changeClasses: ["runtime_upgrade"],
     presentation: runtimeReviewPresentation,
-};
-export const assessmentBullmq = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["fastify"]),
+    reachScope: reachScopeFor(["fastify"]),
+    verificationScope: verificationScopeFor(["fastify"], ["routes", "middleware"]),
+});
+export const assessmentBullmq = withAssessmentScope({
     posture: "needs_review",
     confidence: "medium",
     primaryConcern: "confirmed_runtime_usage",
@@ -72,8 +93,12 @@ export const assessmentBullmq = {
     ],
     changeClasses: ["runtime_upgrade"],
     presentation: runtimeReviewPresentation,
-};
-export const assessmentNextAuth = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["bullmq"]),
+    reachScope: reachScopeFor(["bullmq"]),
+    verificationScope: verificationScopeFor(["bullmq"], ["workers", "queue", "serialization"]),
+});
+export const assessmentNextAuth = withAssessmentScope({
     posture: "needs_review",
     confidence: "medium",
     primaryConcern: "confirmed_runtime_usage",
@@ -88,8 +113,13 @@ export const assessmentNextAuth = {
     factors: ["confirmed_runtime_usage", "auth_infrastructure"],
     changeClasses: ["runtime_upgrade"],
     presentation: runtimeReviewPresentation,
-};
-export const assessmentMixedTypescriptFastify = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["next-auth"]),
+    reachScope: reachScopeFor(["next-auth"]),
+    verificationScope: verificationScopeFor(["next-auth"], ["auth_flow", "session", "routes"]),
+});
+/** PR #26 — focal fastify despite typescript in changedPackages order. */
+export const assessmentMixedTypescriptFastify = withAssessmentScope({
     posture: "needs_review",
     confidence: "medium",
     primaryConcern: "confirmed_runtime_usage",
@@ -101,11 +131,22 @@ export const assessmentMixedTypescriptFastify = {
             evidenceRefs: ["fixture:fastify"],
         },
     ],
-    factors: ["confirmed_runtime_usage", "http_framework_infrastructure"],
+    factors: [
+        "confirmed_runtime_usage",
+        "queue_infrastructure",
+        "http_framework_infrastructure",
+    ],
     changeClasses: ["runtime_upgrade", "tooling_maintenance"],
     presentation: runtimeReviewPresentation,
-};
-export const assessmentLimitedContext = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["fastify"], {
+        episodeShape: "parent_supporting",
+        supportingPackages: ["bullmq", "next-auth"],
+    }),
+    reachScope: reachScopeFor(["bullmq", "fastify", "next-auth"]),
+    verificationScope: verificationScopeFor(["bullmq", "fastify", "next-auth"], ["workers", "queue", "routes", "middleware"]),
+});
+export const assessmentLimitedContext = withAssessmentScope({
     posture: "needs_review",
     confidence: "low",
     primaryConcern: "insufficient_evidence",
@@ -125,8 +166,12 @@ export const assessmentLimitedContext = {
         insightEmissionFloor: "none",
         reportMode: "high_signal_pr",
     },
-};
-export const assessmentStub = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["lodash"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentStub = withAssessmentScope({
     posture: "needs_review",
     confidence: "low",
     primaryConcern: "insufficient_evidence",
@@ -146,8 +191,14 @@ export const assessmentStub = {
         insightEmissionFloor: "none",
         reportMode: "high_signal_pr",
     },
-};
-export const assessmentUnknownSafe = {
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["dependency_graph"], {
+        episodeShape: "structural",
+    }),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});
+export const assessmentUnknownSafe = withAssessmentScope({
     posture: "safe",
     confidence: "medium",
     primaryConcern: null,
@@ -161,4 +212,8 @@ export const assessmentUnknownSafe = {
         insightEmissionFloor: "explain_only",
         reportMode: "high_signal_pr",
     },
-};
+}, {
+    reviewFocalPoint: minimalReviewFocalPoint(["opaque-pkg"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
+});

package/dist/fixtures/assessmentScopeFixtures.d.ts

@@ -0,0 +1,17 @@
+import type { Assessment, FocalElectionDimension, ReachScope, ReviewEpisodeShape, ReviewFocalPoint, VerificationScope } from "@mergesignal/contracts";
+export declare function minimalReviewFocalPoint(anchors: string[], opts?: {
+    episodeShape?: ReviewEpisodeShape;
+    supportingPackages?: string[];
+    decidedBy?: FocalElectionDimension;
+}): ReviewFocalPoint;
+export declare function emptyReachScope(): ReachScope;
+export declare function reachScopeFor(packages: string[], maxBucket?: ReachScope["maxBucket"]): ReachScope;
+export declare function emptyVerificationScope(): VerificationScope;
+export declare function verificationScopeFor(packages: string[], focus?: string[]): VerificationScope;
+/** Attach focal/scope fields required by assessmentSchema ABI 2. */
+export declare function withAssessmentScope(assessment: Omit<Assessment, "reviewFocalPoint" | "reachScope" | "verificationScope">, scope: {
+    reviewFocalPoint: ReviewFocalPoint;
+    reachScope?: ReachScope;
+    verificationScope?: VerificationScope;
+}): Assessment;
+//# sourceMappingURL=assessmentScopeFixtures.d.ts.map

package/dist/fixtures/assessmentScopeFixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessmentScopeFixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/assessmentScopeFixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,sBAAsB,EACtB,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAEhC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,CAAC,EAAE;IACL,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GACA,gBAAgB,CAoBlB;AAED,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,UAAU,CAAC,WAAW,CAAc,GAC9C,UAAU,CAEZ;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,CAE1D;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,MAAM,EAAO,GACnB,iBAAiB,CAEnB;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,IAAI,CACd,UAAU,EACV,kBAAkB,GAAG,YAAY,GAAG,mBAAmB,CACxD,EACD,KAAK,EAAE;IACL,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACA,UAAU,CAOZ"}

package/dist/fixtures/assessmentScopeFixtures.js

@@ -0,0 +1,42 @@
+export function minimalReviewFocalPoint(anchors, opts) {
+    const episodeShape = opts?.episodeShape ?? "single_anchor";
+    const decidedBy = opts?.decidedBy ?? "reach";
+    const primary = anchors[0] ?? "dependency";
+    return {
+        episodeShape,
+        anchors,
+        supportingPackages: opts?.supportingPackages,
+        election: {
+            grounding: [
+                {
+                    packageName: primary,
+                    reason: "fixture",
+                    decidedBy,
+                    evidenceRefs: ["fixture:focal"],
+                },
+            ],
+            exclusions: [],
+        },
+    };
+}
+export function emptyReachScope() {
+    return { packages: [], maxBucket: "very_low" };
+}
+export function reachScopeFor(packages, maxBucket = "moderate") {
+    return { packages, maxBucket };
+}
+export function emptyVerificationScope() {
+    return { packages: [], focus: [] };
+}
+export function verificationScopeFor(packages, focus = []) {
+    return { packages, focus };
+}
+/** Attach focal/scope fields required by assessmentSchema ABI 2. */
+export function withAssessmentScope(assessment, scope) {
+    return {
+        ...assessment,
+        reviewFocalPoint: scope.reviewFocalPoint,
+        reachScope: scope.reachScope ?? emptyReachScope(),
+        verificationScope: scope.verificationScope ?? emptyVerificationScope(),
+    };
+}

package/dist/index.d.ts

@@ -1,5 +1,4 @@
 export * from "./types.js";
-export * from "./assessmentSchema.js";
 export * from "./assessmentLabels.js";
 export * from "./assessmentProjection.js";
 export * from "./formatInsight.js";
@@ -29,4 +28,6 @@ export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";
+export { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
+export { assessmentStub, assessmentTypescriptPatch, } from "./fixtures/assessmentFixtures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -1,5 +1,4 @@
 export * from "./types.js";
-export * from "./assessmentSchema.js";
 export * from "./assessmentLabels.js";
 export * from "./assessmentProjection.js";
 export * from "./formatInsight.js";
@@ -29,3 +28,5 @@ export * from "./trustedScanGuards.js";
 export * from "./actionsStepSummary.js";
 export * from "./productMessaging.js";
 export * from "./presentation/index.js";
+export { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, reachScopeFor, verificationScopeFor, withAssessmentScope, } from "./fixtures/assessmentScopeFixtures.js";
+export { assessmentStub, assessmentTypescriptPatch, } from "./fixtures/assessmentFixtures.js";

package/dist/presentation/buildGitHubCheckRunOutput.d.ts

@@ -0,0 +1,20 @@
+import type { ScanResult } from "../types.js";
+export type GitHubCheckRunConclusion = "success" | "neutral" | "failure";
+export type GitHubCheckRunOutput = {
+    /** Short title shown in the checks bar (≤72 chars). */
+    title: string;
+    /** Markdown summary shown in the check run detail panel (≤2000 chars). */
+    summary: string;
+    conclusion: GitHubCheckRunConclusion;
+};
+export declare function resolveWebAppOrigin(): string;
+export type BuildGitHubCheckRunOutputOptions = {
+    scanId: string;
+    webAppOrigin?: string;
+};
+/**
+ * Formats GitHub Check Run output from a persisted ScanResult via Assessment presentation.
+ * Presentation-only — callers own Octokit checks.create.
+ */
+export declare function buildGitHubCheckRunOutput(result: ScanResult, options: BuildGitHubCheckRunOutputOptions | string): GitHubCheckRunOutput;
+//# sourceMappingURL=buildGitHubCheckRunOutput.d.ts.map

package/dist/presentation/buildGitHubCheckRunOutput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildGitHubCheckRunOutput.d.ts","sourceRoot":"","sources":["../../src/presentation/buildGitHubCheckRunOutput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzE,MAAM,MAAM,oBAAoB,GAAG;IACjC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAKF,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,gCAAgC,GAAG,MAAM,GACjD,oBAAoB,CAkCtB"}

package/dist/presentation/buildGitHubCheckRunOutput.js

@@ -0,0 +1,42 @@
+import { buildScanPresentationBundle } from "./orchestration/buildScanPresentationBundle.js";
+import { presentGitHubCheckRun } from "./presenters/presentGitHubCheckRun.js";
+import { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkdown.js";
+/** Default Fly web app origin when `MERGESIGNAL_WEB_URL` is unset. */
+const DEFAULT_WEB_APP_ORIGIN = "https://mergesignal-web.fly.dev";
+export function resolveWebAppOrigin() {
+    const url = typeof process !== "undefined"
+        ? process.env.MERGESIGNAL_WEB_URL?.trim()
+        : undefined;
+    return (url || DEFAULT_WEB_APP_ORIGIN).replace(/\/+$/, "");
+}
+/**
+ * Formats GitHub Check Run output from a persisted ScanResult via Assessment presentation.
+ * Presentation-only — callers own Octokit checks.create.
+ */
+export function buildGitHubCheckRunOutput(result, options) {
+    const scanId = typeof options === "string" ? options : options.scanId;
+    const webAppOrigin = typeof options === "string"
+        ? resolveWebAppOrigin()
+        : (options.webAppOrigin ?? resolveWebAppOrigin());
+    if (!result.decision) {
+        throw new Error("buildGitHubCheckRunOutput requires ScanResult.decision");
+    }
+    const bundle = buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+    if (!bundle) {
+        throw new Error("buildGitHubCheckRunOutput requires ScanResult.assessment for presentation bundle");
+    }
+    const baseline = result.reportPresentation?.mode === "lightweight_pr_graph_baseline";
+    const presentation = presentGitHubCheckRun(bundle, {
+        scanId,
+        webAppOrigin,
+        baseline,
+    });
+    return {
+        title: presentation.title,
+        summary: renderGitHubCheckRunMarkdown(presentation),
+        conclusion: presentation.conclusion,
+    };
+}

package/dist/presentation/buildGitHubCheckRunOutput.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=buildGitHubCheckRunOutput.test.d.ts.map

package/dist/presentation/buildGitHubCheckRunOutput.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildGitHubCheckRunOutput.test.d.ts","sourceRoot":"","sources":["../../src/presentation/buildGitHubCheckRunOutput.test.ts"],"names":[],"mappings":""}