@mergesignal/shared 0.8.1 → 0.9.0

package/dist/deriveScanNarrative.test.js

@@ -256,10 +256,10 @@ describe("deriveScanNarrative", () => {
         expect(apiArea?.hotspotPackages).toContain("fastify");
         expect(apiArea?.verificationFocus).toContain("routes");
     });
-    it("derives riskSignals with exposure layers", () => {
+    it("derives riskSignals with PR Risk bands", () => {
         const facts = deriveScanNarrative(baseResult);
         expect(facts.riskSignals?.riskIndex).toBe(10);
-        expect(facts.riskSignals?.exposure).toBe("minimal");
+        expect(facts.riskSignals?.band).toBe("very_low");
         expect(facts.riskSignals?.layers).toHaveLength(4);
         expect(facts.riskIndex).toBe(10);
     });

package/dist/fixtures/engineAbi4Fixtures.d.ts

@@ -0,0 +1,4 @@
+import type { ScanResult } from "../types.js";
+/** Attach ABI-4 prRisk + repositoryHealth wire blocks for strict engine validation tests. */
+export declare function withAbi4EngineScores<T extends ScanResult>(result: T): T;
+//# sourceMappingURL=engineAbi4Fixtures.d.ts.map

package/dist/fixtures/engineAbi4Fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineAbi4Fixtures.d.ts","sourceRoot":"","sources":["../../src/fixtures/engineAbi4Fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAEvE"}

package/dist/fixtures/engineAbi4Fixtures.js

@@ -0,0 +1,5 @@
+import { normalizeEngineOutputAbi4 } from "../scanResultSchema.js";
+/** Attach ABI-4 prRisk + repositoryHealth wire blocks for strict engine validation tests. */
+export function withAbi4EngineScores(result) {
+    return normalizeEngineOutputAbi4(result);
+}

package/dist/index.d.ts

@@ -7,7 +7,8 @@ export * from "./selectTopAffectedAreas.js";
 export * from "./cardSummaryCopy.js";
 export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
-export * from "./formatCardExposureDisplay.js";
+export * from "./prRiskBand.js";
+export * from "./prRiskWire.js";
 export * from "./cardObservationCatalog.js";
 export * from "./scanNarrativeFacts.js";
 export * from "./repoIntelligenceSchema.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6BAA6B,CAAC;AACvF,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -7,7 +7,8 @@ export * from "./selectTopAffectedAreas.js";
 export * from "./cardSummaryCopy.js";
 export * from "./truncateCardSummary.js";
 export * from "./formatCardAreaLabels.js";
-export * from "./formatCardExposureDisplay.js";
+export * from "./prRiskBand.js";
+export * from "./prRiskWire.js";
 export * from "./cardObservationCatalog.js";
 export * from "./scanNarrativeFacts.js";
 export * from "./repoIntelligenceSchema.js";

package/dist/prRiskBand.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Canonical PR Risk band contract — sole authority for PR Risk band derivation.
+ * Independent from legacy exposure presentation and merge verdict (`assessment.posture`).
+ */
+export declare const PR_RISK_BAND_ABI: "1";
+/** Inclusive upper bounds (0–100). Five stable PR Risk bands. */
+export declare const PR_RISK_BAND_THRESHOLDS: readonly [19, 44, 64, 84, 100];
+export type PrRiskBand = "very_low" | "low" | "medium" | "high" | "critical";
+/** User-facing PR Risk band labels (low → high). */
+export declare const PR_RISK_BAND_LABELS: readonly string[];
+/** Scan-detail gauge projection — not a second threshold table. */
+export type PrRiskGaugeBand = "low" | "moderate" | "high";
+/** Map numeric PR risk score to canonical band enum. */
+export declare function scoreToBand(score: number | null | undefined): PrRiskBand | null;
+/** Map numeric PR risk score to user-facing band label (presentation only). */
+export declare function scoreToBandLabel(score: number | null | undefined): string | null;
+/** Label for a known band enum value. */
+export declare function prRiskBandLabel(band: PrRiskBand): string;
+/** Fragment for composite aria labels on PR surfaces. */
+export declare function prRiskBandAriaFragment(score: number | null | undefined): string | null;
+/** Project 5-band PR Risk to 3-bucket scan-detail gauge band. */
+export declare function prRiskBandToGaugeBand(band: PrRiskBand): PrRiskGaugeBand;
+//# sourceMappingURL=prRiskBand.d.ts.map

package/dist/prRiskBand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prRiskBand.d.ts","sourceRoot":"","sources":["../src/prRiskBand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,gBAAgB,EAAG,GAAY,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,gCAAiC,CAAC;AAEtE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAU7E,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAMhD,CAAC;AAUF,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;AAO1D,wDAAwD;AACxD,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,UAAU,GAAG,IAAI,CAKnB;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAGf;AAED,yCAAyC;AACzC,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAExD;AAED,yDAAyD;AACzD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAIf;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAIvE"}

package/dist/prRiskBand.js

@@ -0,0 +1,66 @@
+/**
+ * Canonical PR Risk band contract — sole authority for PR Risk band derivation.
+ * Independent from legacy exposure presentation and merge verdict (`assessment.posture`).
+ */
+export const PR_RISK_BAND_ABI = "1";
+/** Inclusive upper bounds (0–100). Five stable PR Risk bands. */
+export const PR_RISK_BAND_THRESHOLDS = [19, 44, 64, 84, 100];
+const BAND_LABEL = {
+    very_low: "Very Low",
+    low: "Low",
+    medium: "Medium",
+    high: "High",
+    critical: "Critical",
+};
+/** User-facing PR Risk band labels (low → high). */
+export const PR_RISK_BAND_LABELS = [
+    BAND_LABEL.very_low,
+    BAND_LABEL.low,
+    BAND_LABEL.medium,
+    BAND_LABEL.high,
+    BAND_LABEL.critical,
+];
+const BAND_ORDER = [
+    "very_low",
+    "low",
+    "medium",
+    "high",
+    "critical",
+];
+function clampScore(score) {
+    if (!Number.isFinite(score))
+        return 0;
+    return Math.min(100, Math.max(0, Math.round(score)));
+}
+/** Map numeric PR risk score to canonical band enum. */
+export function scoreToBand(score) {
+    if (score == null || !Number.isFinite(score))
+        return null;
+    const value = clampScore(score);
+    const idx = PR_RISK_BAND_THRESHOLDS.findIndex((bound) => value <= bound);
+    return BAND_ORDER[idx >= 0 ? idx : BAND_ORDER.length - 1];
+}
+/** Map numeric PR risk score to user-facing band label (presentation only). */
+export function scoreToBandLabel(score) {
+    const band = scoreToBand(score);
+    return band ? BAND_LABEL[band] : null;
+}
+/** Label for a known band enum value. */
+export function prRiskBandLabel(band) {
+    return BAND_LABEL[band];
+}
+/** Fragment for composite aria labels on PR surfaces. */
+export function prRiskBandAriaFragment(score) {
+    const label = scoreToBandLabel(score);
+    if (!label)
+        return null;
+    return `PR Risk: ${label}`;
+}
+/** Project 5-band PR Risk to 3-bucket scan-detail gauge band. */
+export function prRiskBandToGaugeBand(band) {
+    if (band === "critical" || band === "high")
+        return "high";
+    if (band === "medium")
+        return "moderate";
+    return "low";
+}

package/dist/prRiskBand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prRiskBand.test.d.ts.map

package/dist/prRiskBand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prRiskBand.test.d.ts","sourceRoot":"","sources":["../src/prRiskBand.test.ts"],"names":[],"mappings":""}

package/dist/prRiskBand.test.js

@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+import { PR_RISK_BAND_ABI, PR_RISK_BAND_THRESHOLDS, prRiskBandAriaFragment, prRiskBandLabel, prRiskBandToGaugeBand, scoreToBand, scoreToBandLabel, } from "./prRiskBand.js";
+describe("PR_RISK_BAND_ABI", () => {
+    it("is stable v1", () => {
+        expect(PR_RISK_BAND_ABI).toBe("1");
+        expect(PR_RISK_BAND_THRESHOLDS).toEqual([19, 44, 64, 84, 100]);
+    });
+});
+describe("scoreToBand", () => {
+    it("maps approved boundary cut points", () => {
+        expect(scoreToBand(0)).toBe("very_low");
+        expect(scoreToBand(19)).toBe("very_low");
+        expect(scoreToBand(20)).toBe("low");
+        expect(scoreToBand(44)).toBe("low");
+        expect(scoreToBand(45)).toBe("medium");
+        expect(scoreToBand(64)).toBe("medium");
+        expect(scoreToBand(65)).toBe("high");
+        expect(scoreToBand(84)).toBe("high");
+        expect(scoreToBand(85)).toBe("critical");
+        expect(scoreToBand(100)).toBe("critical");
+    });
+    it("returns null for invalid input", () => {
+        expect(scoreToBand(null)).toBeNull();
+        expect(scoreToBand(NaN)).toBeNull();
+    });
+    it("clamps out-of-range values", () => {
+        expect(scoreToBand(150)).toBe("critical");
+        expect(scoreToBand(-5)).toBe("very_low");
+        expect(scoreToBand(71.6)).toBe("high");
+    });
+});
+describe("scoreToBandLabel", () => {
+    it("returns presentation labels", () => {
+        expect(scoreToBandLabel(10)).toBe("Very Low");
+        expect(scoreToBandLabel(55)).toBe("Medium");
+        expect(scoreToBandLabel(90)).toBe("Critical");
+    });
+});
+describe("prRiskBandLabel", () => {
+    it("labels enum values", () => {
+        expect(prRiskBandLabel("medium")).toBe("Medium");
+    });
+});
+describe("prRiskBandAriaFragment", () => {
+    it("prefixes PR Risk", () => {
+        expect(prRiskBandAriaFragment(55)).toBe("PR Risk: Medium");
+    });
+});
+describe("prRiskBandToGaugeBand", () => {
+    it("projects to three gauge buckets", () => {
+        expect(prRiskBandToGaugeBand("very_low")).toBe("low");
+        expect(prRiskBandToGaugeBand("low")).toBe("low");
+        expect(prRiskBandToGaugeBand("medium")).toBe("moderate");
+        expect(prRiskBandToGaugeBand("high")).toBe("high");
+        expect(prRiskBandToGaugeBand("critical")).toBe("high");
+    });
+});

package/dist/prRiskWire.d.ts

@@ -0,0 +1,57 @@
+import type { LayerScores, PrRiskWire, RepositoryHealthWire, ScanResult, ScoreLayer } from "./types.js";
+export type { PrRiskWire, RepositoryHealthWire };
+export type PrRiskScoreContext = {
+    /** Denormalized pr_risk_score column when result JSON is absent. */
+    prRiskScore?: number | null;
+    /**
+     * Historical scans.total_score column — fallback only when prRisk wire and
+     * pr_risk_score are both absent (pre-migration rows).
+     */
+    legacyTotalScore?: number | null;
+};
+export type RepositoryHealthScoreContext = {
+    /** Denormalized repository_health_score column when result JSON is absent. */
+    repositoryHealthScore?: number | null;
+    /** When true, legacy totalScore must not be used as repository health. */
+    isPrScan?: boolean;
+    /**
+     * Historical scans.total_score column — fallback only for non-PR scans when
+     * repositoryHealth wire and repository_health_score are both absent.
+     */
+    legacyTotalScore?: number | null;
+};
+export type ScanScoreRow = {
+    pr_risk_score?: number | null;
+    repository_health_score?: number | null;
+    /** Historical scans.total_score column — never authoritative for new rows. */
+    total_score?: number | null;
+    github_pr_number?: number | null;
+    result?: unknown;
+};
+/**
+ * PR Risk score authority chain:
+ * 1. result.prRisk.score
+ * 2. denormalized pr_risk_score (when provided)
+ * 3. historical scans.total_score column (when provided)
+ * 4. result.totalScore (historical JSON fallback only)
+ */
+export declare function resolvePrRiskScore(result: ScanResult | null | undefined, ctx?: PrRiskScoreContext): number | null;
+/** Layer scores for PR Risk — prRisk.layerScores when present, else legacy layerScores. */
+export declare function resolvePrRiskLayerScores(result: ScanResult | null | undefined): LayerScores | null;
+export declare function resolvePrRiskLayerEntries(result: ScanResult | null | undefined): Array<{
+    layer: ScoreLayer;
+    score: number;
+}>;
+/**
+ * Repository health score authority chain:
+ * 1. result.repositoryHealth.totalScore
+ * 2. denormalized repository_health_score
+ * 3. historical scans.total_score column (non-PR scans only)
+ * 4. result.totalScore (non-PR JSON fallback only)
+ */
+export declare function resolveRepositoryHealthScore(result: ScanResult | null | undefined, ctx?: RepositoryHealthScoreContext): number | null;
+/** Resolve PR risk from a DB scan row (wire + denorm + historical column). */
+export declare function resolvePrRiskScoreFromRow(row: ScanScoreRow): number | null;
+/** Resolve repository health from a DB scan row (wire + denorm + historical column). */
+export declare function resolveRepositoryHealthScoreFromRow(row: ScanScoreRow): number | null;
+//# sourceMappingURL=prRiskWire.d.ts.map

package/dist/prRiskWire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prRiskWire.d.ts","sourceRoot":"","sources":["../src/prRiskWire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,oBAAoB,EACpB,UAAU,EACV,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;AAEjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,8EAA8E;IAC9E,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAWF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACrC,GAAG,GAAE,kBAAuB,GAC3B,MAAM,GAAG,IAAI,CAef;AASD,2FAA2F;AAC3F,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,WAAW,GAAG,IAAI,CAMpB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GACpC,KAAK,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAO7C;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,EACrC,GAAG,GAAE,4BAAiC,GACrC,MAAM,GAAG,IAAI,CAqBf;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAK1E;AAED,wFAAwF;AACxF,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,YAAY,GAChB,MAAM,GAAG,IAAI,CAQf"}

package/dist/prRiskWire.js

@@ -0,0 +1,98 @@
+function finiteScore(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function asScanResult(result) {
+    if (!result || typeof result !== "object")
+        return null;
+    return result;
+}
+/**
+ * PR Risk score authority chain:
+ * 1. result.prRisk.score
+ * 2. denormalized pr_risk_score (when provided)
+ * 3. historical scans.total_score column (when provided)
+ * 4. result.totalScore (historical JSON fallback only)
+ */
+export function resolvePrRiskScore(result, ctx = {}) {
+    if (!result && ctx.prRiskScore == null && ctx.legacyTotalScore == null) {
+        return null;
+    }
+    const fromWire = finiteScore(result?.prRisk?.score);
+    if (fromWire != null)
+        return fromWire;
+    const fromDenorm = finiteScore(ctx.prRiskScore);
+    if (fromDenorm != null)
+        return fromDenorm;
+    const fromLegacyColumn = finiteScore(ctx.legacyTotalScore);
+    if (fromLegacyColumn != null)
+        return fromLegacyColumn;
+    return finiteScore(result?.totalScore);
+}
+const LAYER_ORDER = [
+    "security",
+    "maintainability",
+    "ecosystem",
+    "upgradeImpact",
+];
+/** Layer scores for PR Risk — prRisk.layerScores when present, else legacy layerScores. */
+export function resolvePrRiskLayerScores(result) {
+    if (!result)
+        return null;
+    const fromPrRisk = result.prRisk?.layerScores;
+    if (fromPrRisk)
+        return fromPrRisk;
+    if (result.layerScores)
+        return result.layerScores;
+    return null;
+}
+export function resolvePrRiskLayerEntries(result) {
+    const layerScores = resolvePrRiskLayerScores(result);
+    if (!layerScores)
+        return [];
+    return LAYER_ORDER.map((layer) => ({
+        layer,
+        score: layerScores[layer],
+    }));
+}
+/**
+ * Repository health score authority chain:
+ * 1. result.repositoryHealth.totalScore
+ * 2. denormalized repository_health_score
+ * 3. historical scans.total_score column (non-PR scans only)
+ * 4. result.totalScore (non-PR JSON fallback only)
+ */
+export function resolveRepositoryHealthScore(result, ctx = {}) {
+    if (!result &&
+        ctx.repositoryHealthScore == null &&
+        ctx.legacyTotalScore == null) {
+        return null;
+    }
+    const fromWire = finiteScore(result?.repositoryHealth?.totalScore);
+    if (fromWire != null)
+        return fromWire;
+    const fromDenorm = finiteScore(ctx.repositoryHealthScore);
+    if (fromDenorm != null)
+        return fromDenorm;
+    if (ctx.isPrScan)
+        return null;
+    const fromLegacyColumn = finiteScore(ctx.legacyTotalScore);
+    if (fromLegacyColumn != null)
+        return fromLegacyColumn;
+    return finiteScore(result?.totalScore);
+}
+/** Resolve PR risk from a DB scan row (wire + denorm + historical column). */
+export function resolvePrRiskScoreFromRow(row) {
+    return resolvePrRiskScore(asScanResult(row.result), {
+        prRiskScore: row.pr_risk_score,
+        legacyTotalScore: row.total_score,
+    });
+}
+/** Resolve repository health from a DB scan row (wire + denorm + historical column). */
+export function resolveRepositoryHealthScoreFromRow(row) {
+    const isPrScan = row.github_pr_number != null && Number.isFinite(row.github_pr_number);
+    return resolveRepositoryHealthScore(asScanResult(row.result), {
+        repositoryHealthScore: row.repository_health_score,
+        isPrScan,
+        legacyTotalScore: row.total_score,
+    });
+}

package/dist/prRiskWire.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prRiskWire.test.d.ts.map

package/dist/prRiskWire.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prRiskWire.test.d.ts","sourceRoot":"","sources":["../src/prRiskWire.test.ts"],"names":[],"mappings":""}

package/dist/prRiskWire.test.js

@@ -0,0 +1,106 @@
+import { describe, expect, it } from "vitest";
+import { resolvePrRiskLayerScores, resolvePrRiskScore, resolvePrRiskScoreFromRow, resolveRepositoryHealthScore, resolveRepositoryHealthScoreFromRow, } from "./prRiskWire.js";
+function baseResult(overrides = {}) {
+    return {
+        totalScore: 50,
+        layerScores: {
+            security: 10,
+            maintainability: 20,
+            ecosystem: 30,
+            upgradeImpact: 40,
+        },
+        findings: [],
+        generatedAt: "2026-01-01T00:00:00.000Z",
+        ...overrides,
+    };
+}
+describe("resolvePrRiskScore", () => {
+    it("prefers prRisk.score", () => {
+        const result = baseResult({
+            prRisk: { score: 72 },
+            totalScore: 50,
+        });
+        expect(resolvePrRiskScore(result)).toBe(72);
+    });
+    it("falls back to denormalized column", () => {
+        expect(resolvePrRiskScore(null, { prRiskScore: 61 })).toBe(61);
+    });
+    it("falls back to legacy total_score column before JSON totalScore", () => {
+        expect(resolvePrRiskScore(null, { legacyTotalScore: 48 })).toBe(48);
+    });
+    it("falls back to JSON totalScore for historical scans", () => {
+        expect(resolvePrRiskScore(baseResult({ totalScore: 48 }))).toBe(48);
+    });
+    it("returns null when no score available", () => {
+        expect(resolvePrRiskScore(baseResult({ totalScore: NaN }))).toBeNull();
+    });
+});
+describe("resolvePrRiskScoreFromRow", () => {
+    it("uses pr_risk_score for new rows without legacy column", () => {
+        expect(resolvePrRiskScoreFromRow({
+            pr_risk_score: 55,
+            total_score: null,
+        })).toBe(55);
+    });
+    it("uses legacy total_score only when pr_risk_score is absent", () => {
+        expect(resolvePrRiskScoreFromRow({
+            pr_risk_score: null,
+            total_score: 40,
+        })).toBe(40);
+    });
+});
+describe("resolvePrRiskLayerScores", () => {
+    it("prefers prRisk.layerScores", () => {
+        const layers = {
+            security: 1,
+            maintainability: 2,
+            ecosystem: 3,
+            upgradeImpact: 4,
+        };
+        const result = baseResult({ prRisk: { score: 10, layerScores: layers } });
+        expect(resolvePrRiskLayerScores(result)).toEqual(layers);
+    });
+});
+describe("resolveRepositoryHealthScore", () => {
+    it("prefers repositoryHealth.totalScore", () => {
+        const result = baseResult({
+            repositoryHealth: { totalScore: 80 },
+            totalScore: 50,
+        });
+        expect(resolveRepositoryHealthScore(result)).toBe(80);
+    });
+    it("falls back to denormalized column", () => {
+        expect(resolveRepositoryHealthScore(null, { repositoryHealthScore: 66 })).toBe(66);
+    });
+    it("falls back to legacy total_score column for non-PR scans", () => {
+        expect(resolveRepositoryHealthScore(null, { legacyTotalScore: 55 })).toBe(55);
+    });
+    it("uses JSON totalScore only for non-PR scans", () => {
+        expect(resolveRepositoryHealthScore(baseResult({ totalScore: 55 }))).toBe(55);
+    });
+    it("does not use legacy scores for PR scans", () => {
+        expect(resolveRepositoryHealthScore(null, {
+            legacyTotalScore: 55,
+            isPrScan: true,
+        })).toBeNull();
+        expect(resolveRepositoryHealthScore(baseResult({ totalScore: 55 }), {
+            isPrScan: true,
+        })).toBeNull();
+    });
+});
+describe("resolveRepositoryHealthScoreFromRow", () => {
+    it("uses repository_health_score for new rows", () => {
+        expect(resolveRepositoryHealthScoreFromRow({
+            repository_health_score: 70,
+            total_score: null,
+            github_pr_number: null,
+        })).toBe(70);
+    });
+    it("does not use total_score for PR scans", () => {
+        expect(resolveRepositoryHealthScoreFromRow({
+            repository_health_score: null,
+            total_score: 40,
+            github_pr_number: 12,
+        })).toBeNull();
+    });
+});

package/dist/presentGitHubPrComment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presentGitHubPrComment.d.ts","sourceRoot":"","sources":["../src/presentGitHubPrComment.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;GAEG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,UAAU,GACjB,MAAM,CAWR"}
+{"version":3,"file":"presentGitHubPrComment.d.ts","sourceRoot":"","sources":["../src/presentGitHubPrComment.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;GAEG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,UAAU,GACjB,MAAM,CAUR"}

package/dist/presentGitHubPrComment.js

@@ -9,7 +9,6 @@ export function presentGitHubPrCommentMarkdownFromResult(result) {
         result,
         pipelineStatus: "done",
         decision: result.decision?.recommendation,
-        totalScore: result.totalScore,
     });
     if (!bundle)
         return "";

package/dist/presentation/dto/githubAndCliPresentation.d.ts

@@ -44,6 +44,9 @@ export type CliScanPresentation = AssessmentPresentationFields & {
     keyPoints: string[];
     verificationActions: string[];
     metrics?: {
+        prRiskScore: number;
+        prRiskBandLabel?: string;
+        /** @deprecated Use prRiskScore */
         riskIndex: number;
         layerLine: string;
         findingCount: number;

package/dist/presentation/dto/githubAndCliPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"githubAndCliPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/githubAndCliPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,0BAA0B,GAAG,4BAA4B,GAAG;IACtE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACtE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG;IACvE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,KAAK,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,4BAA4B,GAAG;IAC/D,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC"}
+{"version":3,"file":"githubAndCliPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/githubAndCliPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,0BAA0B,GAAG,4BAA4B,GAAG;IACtE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACtE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,GAAG;IACvE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,KAAK,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,4BAA4B,GAAG;IAC/D,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kCAAkC;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC"}

package/dist/presentation/dto/scanDetailsPresentation.d.ts

@@ -13,6 +13,9 @@ export type ScanDetailsPresentation = AssessmentPresentationFields & {
         verdictLine: string;
         scopeChip?: string;
         postureLabel: string;
+        prRiskScore?: number | null;
+        prRiskBandLabel?: string;
+        /** @deprecated Use prRiskScore */
         riskIndex?: number | null;
     };
     narrative: {
@@ -38,12 +41,12 @@ export type ScanDetailsPresentation = AssessmentPresentationFields & {
         }>;
     };
     signalSummary?: {
-        riskIndex: number;
+        prRiskScore: number;
         band: "low" | "medium" | "high";
         layers: Array<{
             layer: ScoreLayer;
             score: number;
-            band: string;
+            band: "low" | "medium" | "high";
             label: string;
         }>;
     };

package/dist/presentation/dto/scanDetailsPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanDetailsPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/scanDetailsPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,4BAA4B,GAAG;IACnE,eAAe,EAAE,2BAA2B,CAAC;IAC7C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IAEnC,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IAEF,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IAEF,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC;YACX,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,EAAE,MAAM,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,EAAE,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;QACH,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IAEF,YAAY,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IAEF,aAAa,CAAC,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC;YACZ,KAAK,EAAE,UAAU,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;SACf,CAAC,CAAC;KACJ,CAAC;IAEF,iBAAiB,EAAE;QACjB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;QACtC,KAAK,EAAE,KAAK,CAAC;YACX,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;QACH,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAEF,eAAe,EAAE;QACf,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;YACpC,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;KACJ,CAAC;IAEF,QAAQ,EAAE;QACR,gBAAgB,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM,CAAC;YACrB,kBAAkB,EAAE,MAAM,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC;gBACb,OAAO,CAAC,EAAE,MAAM,CAAC;gBACjB,MAAM,EAAE,OAAO,CAAC;gBAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;gBAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC,CAAC;YACH,aAAa,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;QACH,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,QAAQ,EAAE,eAAe,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;YACpB,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;SAC/B,CAAC,CAAC;QACH,qBAAqB,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,EAAE;YACT,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC;gBACb,WAAW,EAAE,MAAM,CAAC;gBACpB,KAAK,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,MAAM,EAAE,CAAC;aACf,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;IAEF,iBAAiB,CAAC,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IAEF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IAEF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC"}
+{"version":3,"file":"scanDetailsPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/scanDetailsPresentation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,4BAA4B,GAAG;IACnE,eAAe,EAAE,2BAA2B,CAAC;IAC7C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,sBAAsB,CAAC;IAEnC,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kCAAkC;QAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IAEF,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IAEF,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC;YACX,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,EAAE,MAAM,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,EAAE,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;QACH,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IAEF,YAAY,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IAEF,aAAa,CAAC,EAAE;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,MAAM,EAAE,KAAK,CAAC;YACZ,KAAK,EAAE,UAAU,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC;YACd,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;YAChC,KAAK,EAAE,MAAM,CAAC;SACf,CAAC,CAAC;KACJ,CAAC;IAEF,iBAAiB,EAAE;QACjB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;QACtC,KAAK,EAAE,KAAK,CAAC;YACX,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;SAC1B,CAAC,CAAC;QACH,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAEF,eAAe,EAAE;QACf,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;YACpC,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;KACJ,CAAC;IAEF,QAAQ,EAAE;QACR,gBAAgB,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,KAAK,CAAC;YACpB,YAAY,EAAE,MAAM,CAAC;YACrB,kBAAkB,EAAE,MAAM,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC;gBACd,IAAI,EAAE,MAAM,CAAC;gBACb,OAAO,CAAC,EAAE,MAAM,CAAC;gBACjB,MAAM,EAAE,OAAO,CAAC;gBAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;gBAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;aACnB,CAAC,CAAC;YACH,aAAa,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;QACH,QAAQ,EAAE,KAAK,CAAC;YACd,EAAE,EAAE,MAAM,CAAC;YACX,QAAQ,EAAE,eAAe,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;YACpB,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;SAC/B,CAAC,CAAC;QACH,qBAAqB,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,EAAE;YACT,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC;gBACb,WAAW,EAAE,MAAM,CAAC;gBACpB,KAAK,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,MAAM,EAAE,CAAC;aACf,CAAC,CAAC;SACJ,CAAC;KACH,CAAC;IAEF,iBAAiB,CAAC,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IAEF,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IAEF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC"}

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts

@@ -5,7 +5,8 @@ export type BuildScanCardPresentationInput = {
     pipelineStatus: PipelineStatus;
     result: ScanResult | null;
     decision?: string | null;
-    totalScore?: number | null;
+    /** Denormalized PR risk score (preferred). */
+    prRiskScore?: number | null;
 };
 export declare function buildScanCardPresentation(input: BuildScanCardPresentationInput): DashboardCardPresentation;
 //# sourceMappingURL=buildScanCardPresentation.d.ts.map

package/dist/presentation/orchestration/buildScanCardPresentation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildScanCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanCardPresentation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAUjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AA+BF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,yBAAyB,CA2B3B"}
+{"version":3,"file":"buildScanCardPresentation.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/buildScanCardPresentation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAUjD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAiCF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,yBAAyB,CA0B3B"}

package/dist/presentation/orchestration/buildScanCardPresentation.js

@@ -2,14 +2,16 @@ import { assessmentLimitedContext } from "../../fixtures/assessmentFixtures.js";
 import { mergePostureFromDecision, } from "../../riskVocabulary.js";
 import { buildScanPresentationBundle } from "./buildScanPresentationBundle.js";
 import { presentDashboardCard, presentPipelineDashboardCard, } from "../presenters/presentDashboardCard.js";
-function minimalResultFromDenormalized(decision, totalScore) {
+function minimalResultFromDenormalized(decision, prRiskScore) {
     const posture = mergePostureFromDecision(decision ?? undefined);
-    if (!posture && (totalScore == null || !Number.isFinite(totalScore))) {
+    if (!posture && (prRiskScore == null || !Number.isFinite(prRiskScore))) {
         return null;
     }
+    const score = prRiskScore ?? 0;
     const resolvedPosture = posture;
     return {
-        totalScore: totalScore ?? 0,
+        totalScore: score,
+        prRisk: { score },
         layerScores: {
             security: 0,
             maintainability: 0,
@@ -30,8 +32,8 @@ export function buildScanCardPresentation(input) {
     if (input.pipelineStatus !== "done") {
         return presentPipelineDashboardCard(input.pipelineStatus === "failed" ? "failed" : input.pipelineStatus);
     }
-    const result = input.result ??
-        minimalResultFromDenormalized(input.decision, input.totalScore);
+    const prRiskScore = input.prRiskScore ?? null;
+    const result = input.result ?? minimalResultFromDenormalized(input.decision, prRiskScore);
     if (!result) {
         return presentPipelineDashboardCard("failed");
     }
@@ -39,7 +41,6 @@ export function buildScanCardPresentation(input) {
         result,
         pipelineStatus: input.pipelineStatus,
         decision: input.decision,
-        totalScore: input.totalScore,
     });
     if (!bundle) {
         return presentPipelineDashboardCard("failed");

package/dist/presentation/orchestration/buildScanDetailsPresentation.d.ts

@@ -8,7 +8,7 @@ export type BuildScanDetailsPresentationInput = {
     methodologyVersion?: string | null;
     prNumber?: number | null;
     decision?: string | null;
-    totalScore?: number | null;
+    prRiskScore?: number | null;
 };
 export declare function buildScanDetailsPresentation(input: BuildScanDetailsPresentationInput): ScanDetailsPresentation | null;
 //# sourceMappingURL=buildScanDetailsPresentation.d.ts.map